Hacking System Menu questions/thoughts

[ether2802]

in 3.4 you need IOS50 to show the games on the disc channel, because IOS50 is the one supporting SysMenu...!!!

 

[mhadf]

srath, grats on getting it on 3.4.....

Were there any complications?

 

[wim6]

For all the none believers it works prefectly, even sam and max work superb..

But dont forget to install starfall first as it disables the disk update check, making sure your wii doesnt ask for a system update on the disk....

Great work for all the coders,

My most greatfull thanks!!!


ps: Even wall-e does work for the first time ever on my wii

 

[srath]

srath, grats on getting it on 3.4.....

Were there any complications?

not 1, i have everything working perfect on 3.4, just games wont show up in disc channel. If someone could mod me a ios50 that would be very nice.

 

[Phratt]

Okay, if things were as simple as just patching all the IOS's the same way we did with IOS249, how come no one ever did it until now?

 

[digitydogs]

Because of the risks... we were the only ones brave/dumb enough to try it

 

[Skarface05]

Im still happy to try running the system menu with the replaced code someone posted yesterday, I just need someone to edit it and the repack it as I wana make sure its been done right as im not confident in my ability to do it correctly.

This was the next from yesterday is any coders can shed any light on it :

i think the patches are applied to 00000008.app (sysmenu dol file in sysmenu.wad) so just look at the sysmenu_patches.c in waninkoko's menupatcher (or any other menu patcher) source and find the replacement code to patch in 00000008.app, for example in waninkoko's:

CODE
void Sysmenu_PatchNocopySaves(u8 *dol, u32 len)
{
{
const u8 oldcode[] = { 0x54, 0x00, 0x07, 0xFF, 0x41, 0x82, 0x00, 0x1C, 0x80, 0x63, 0x00, 0x68 };
const u8 newcode[] = { 0x7C, 0x00, 0x00, 0x00, 0x41, 0x82, 0x00, 0x1C, 0x80, 0x63, 0x00, 0x68 };


search in 00000008.app for 540007ff4182001c80630068 and replace it with 7c0000004182001c80630068


so (i think) if you want a patch for region free just look in the sysmenu_patches.c for all the patches for region free and commit them in the 00000008.app

BTW. Sorry for my bad english

 

[digitydogs]

Newbish moment here.... Has the stuck patches issue been solved with preloader? i have a few codes i want to try for the video modes but i don't want to try them if they could become permanent.

 

[Skarface05]

Not been solved as such, but you can run the uninstall program to delete the 2 files from the nand.

 

[digitydogs]

that should be good enough for me then. Thanks for saving me time looking through the two threads. I'll report back after dinner and i've gotten to test some ideas if there is any progress.

 

[IronMask]

Here again is all the files for working with preloader...

http://www.mediafire.com/file/nncgiq5nqzc/...rv0.25-cred.rar

http://www.mediafire.com/file/mizzmmytdyt/...oader_hacks.zip

http://www.mediafire.com/file/ezgjf3zjmwl/fs_browser.7z

http://www.mediafire.com/file/whzeljmn4yz/fs_dumper.rar

 

[fogbank]

through the fs browser I saw a bunch of 00000001.APP...
wouldn't it be possible to "simply" replace the appropriate ones on the FS ?

I don't think so.

From what I can tell in my NAND dump the IOS versions 28 and over use one of 4 .APP files in the FS:

SHARED1/000008.APP is used by IOS28.
SHARED1/000015.APP is shared amongst IOS30, IOS33, IOS36, and IOS37.
SHARED1/00003B.APP is used by IOS38.
SHARED1/000044.APP is shared by IOS53 and IOS55.

These appear to be the shared .APP files containing DVD code in my FS dump, and I would guess that these are being overwritten by the DIP'ed files everytime you install a CIOS version of one of those IOSes.

Also, as stated previously, the DVD code in IOS versions below 28 is embedded within the IOS itself, since those IOS versions are not modular. For example if you replaced 00000001.APP in the IOS9 title on your NAND with the DIP'ed module you would be replacing the entire IOS. On the other hand, the DVD code for IOS14 is within the 00000007.APP file.

I think that ultimately this hack should consist of patching the appropriate .APP files on NAND and not installing modified IOS versions over existing ones. The .APP files containing DVD code that are used by the various IOS versions are not identical. 00000008.APP and 00000015.APP are very similar, so I doubt that it would make much of a difference for IOS28, IOS30, IOS33, IOS36, and IOS37. However 0000003B.APP and 00000044.APP are very different from 00000008.APP and 00000015.APP. And of course IOS versions 9-22 are very different from a DIP'ed IOS36.

These are just my thoughts based on my NAND dump. Obviously YMMV.

 

[Matt93]

Count me in as another person who successfully installed this on their Wii!

Every game I've thrown at it works perfectly!

 

[srath]

can anyone patch ios50 from 3.4 for me pretty please. just so i can see if this works on 3.4 as well, all other ios's installed perfectly. but since ios50 is used in place of ios30 in 3.4, we need to modify ios50 to i assume

 

[WiiBlaster]

be careful with IOS50 thats the one the system menu uses on 3.4 i would think you would need the new IOS50 from the 3.4 update and patch it i dont think the 3.4 would work on the OLD CIOS50 thats just a guess by the way

 

[redia]

through the fs browser I saw a bunch of 00000001.APP...
wouldn't it be possible to "simply" replace the appropriate ones on the FS ?

I don't think so.

From what I can tell in my NAND dump the IOS versions 28 and over use one of 4 .APP files in the FS:

SHARED1/000008.APP is used by IOS28.
SHARED1/000015.APP is shared amongst IOS30, IOS33, IOS36, and IOS37.
SHARED1/00003B.APP is used by IOS38.
SHARED1/000044.APP is shared by IOS53 and IOS55.

These appear to be the shared .APP files containing DVD code in my FS dump, and I would guess that these are being overwritten by the DIP'ed files everytime you install a CIOS version of one of those IOSes.

Also, as stated previously, the DVD code in IOS versions below 28 is embedded within the IOS itself, since those IOS versions are not modular. For example if you replaced 00000001.APP in the IOS9 title on your NAND with the DIP'ed module you would be replacing the entire IOS. On the other hand, the DVD code for IOS14 is within the 00000007.APP file.

I think that ultimately this hack should consist of patching the appropriate .APP files on NAND and not installing modified IOS versions over existing ones. The .APP files containing DVD code that are used by the various IOS versions are not identical. 00000008.APP and 00000015.APP are very similar, so I doubt that it would make much of a difference for IOS28, IOS30, IOS33, IOS36, and IOS37. However 0000003B.APP and 00000044.APP are very different from 00000008.APP and 00000015.APP. And of course IOS versions 9-22 are very different from a DIP'ed IOS36.

These are just my thoughts based on my NAND dump. Obviously YMMV.

thanks for your 2 cent
I guess I still have a lot of learning to do.
probably I will do an FS dump with "clean" IOS.. modify only one.. and do another FS dump... and compare.. to see what happens.
can't bring any harm, only knowledge

Cheers,
R.

 

[Jizmo]

umm.... i might be missing something here... but I've never noticed or seen anywhere any talk about a system menu 3.4 WAD. Im just thinking could a SM3.4 wad be run through the SM IOS Patcher and pathced to IOS30 and still work? Just thining that it's possible by doing so 3.4 users could still use IOS30 if they wanted. Im guessing there might be something I don't know about preventing this?

 

[WiiBlaster]

While on the 3.4 Subject i would think you would need to re-patch the new IOS's from the update, and it might work, Just guessing i would think you would brick using a OLD CIOS to run the 3.4 off of, Buts thats just a guess, I'm not messing with it

 

[IronMask]

That's definately an idea stoner, I meant Jizmo..

 

[srath]

i have installed all the cios for 3.4, all went well, i just need someone to modify the ios50 from 3.4 like the ios30 was done, that should work right