Hacking Wii + Get Connected channel

[daxtsu]

Does anyone know if the ticket for this channel is available online anywhere? I'm not asking WHERE, so I don't think I'm breaking any rules here. I just want to know if it's available. I got a copy of this huge useless channel from my friend's Wii, but I don't have the ticket for it anymore, so I can't use it, and I'm not sure if he wants me to mod his Wii or not, so the ticket isn't available to me at the moment. Or is there a way I can fake the ticket somehow?

 

[nitrostemp]

that is the most sillyest thing ive ever heard

 

[daxtsu]

It has a purpose. Can I get a real answer?

 

[nitrostemp]

sadly you wont get any answer its either on the NUS down loader, or just unique to a new wii

 

[giantpune]

well you can get the ticket without actually making any changes to the wii. just run FTPii, nand dumper, etc from banner bomb. im sure if hes a real friend, he'll let you run a little harmless code on his processor.

 

[Daco]

well you can get the ticket without actually making any changes to the wii. just run FTPii, nand dumper, etc from banner bomb. im sure if hes a real friend, he'll let you run a little harmless code on his processor.

i was thinking about that, does FTPii reload ios or make LoadStartupIOS do nothing?
cause if it doesn't reload and make loadstartupios do nothing then ye, ftpii ftw

 

[daxtsu]

Alright. Guess I'll have to wait until later, once he gets home from work.

 

[giantpune]

yes FTPii does teh load startup ios shit. but it doesnt matter. it just loads IOS36. no harm in that.

 

[daxtsu]

Don't you lose NAND permissions though once you reload IOS?

 

[giantpune]

well, you dont have permissions to begin with. you are just at the system menu. running a dol from bannerbomb is the same as starting it from HBC as far as we are concerned here. you will just be limited by whatever IOS36 he has installed. ie, if his IOs36 had usb loader capabilities, it would work there. and if that IOS doesnt know how to access the internet, you will be limited by that. HBC doesnt give you any special powers besides the cool "return to loader" stub.

 

[vegemikee]

i have a link of this channel somewhere, if you want a dump of it in wad format. its in PAL

 

[Daco]

yes FTPii does teh load startup ios shit. but it doesnt matter. it just loads IOS36. no harm in that.

that makes you loose rights once you load it trough bannerbomb

dax is trying to get the file on a unmodded wii

and imo its retarded to do the load startup ios shit but ok

 

[giantpune]

ok. i got the channel (thanks to that nice person that hooked it up

). after a bit of playing around, here's what i got for people that care. the channel is 9 .app files 200+ MB or 1614 blocks. most of them are u8 archives. the 0x2.app is the biggie. among the shit in there are some layout files, a sound archive, and 6 .mo files @ 33,XXX KB each. i guess these are the movie if you want to edit the channel to play a different one. the rest of the u8 archives just unpacks to some home menu stuff, the icon & channel banner (lz7), a few .arc files,and a couple other files. the only shared contents are the homebutton .app files.

the 0x1 and 0x9.app files are the 2 non-u8 parts of the thing. both can be patched to get the output and this is what i get when installing this thing on a real nand.

Spoiler

CODE>
>

Revolution OS
Kernel built : Jan 30 2008 01:38:43
Console Type : Retail 33
FirmwareÂÂÂÂ : 35.4.16 (6/25/2007)
Memory 88 MB
MEM1 Arena : 0x813887e0 - 0x81800000
MEM2 Arena : 0x90000800 - 0x935e0000
>
>
>
>
>

--- NAND BOOT PROGRAM v1.4 (PRODUCTION MODE: NTSC) ---
>
>

Revolution OS
Kernel built : Jan 30 2008 01:38:43
Console Type : Retail 33
FirmwareÂÂÂÂ : 35.4.16 (6/25/2007)
Memory 88 MB
MEM1 Arena : 0x804d53a0 - 0x81800000
MEM2 Arena : 0x90000800 - 0x935e0000
>
>
>
>
>
20080403
>
>
>
>
>
>
>
>
>
>
>
>

and here is the channel running in sneek. the ID is changed from the original

Spoiler

CODEES:ES_LoadModules(35):0
FFS:GetStats( 0, 844, 844 ):0
ES:ES_LaunchSYS->LoadPPC:0
FFS:GetStats( 0, 676, 676 ):0
ES:NANDLoadFile:138f1480 size:676
FFS:GetStats( 0, 1284, 1284 ):0
ES:ES_GetUID:1
ES:SetUID( 0xF, 0x106B ):0
PPCBoot("/title/00010001/48434758/content/00000009.app"):0
ES:looping!
>
>

Revolution OS
Kernel built : Jan 30 2008 01:38:43
Console Type : Retail 33
FirmwareÂÂÂÂ : 35.4.16 (11/24/2008)
Memory 88 MB
MEM1 Arena : 0x813887e0 - 0x81800000
MEM2 Arena : 0x90000800 - 0x935e0000
>
>
ES:GetTitleID(00010001-48434758):0
ES:GetTitleDataDir(/title/00010001/48434758/data):0
>
>
>

--- NAND BOOT PROGRAM v1.4 (PRODUCTION MODE: NTSC) ---
ES:GetTitleID(00010001-48434758):0
FFS:GetStats( 0, 844, 844 ):0
ES:iOpenContent->IOS_Open("/title/00010001/48434758/content/00000001.app"):1
ESpenContent(1):1
>
>

Revolution OS
Kernel built : Jan 30 2008 01:38:43
Console Type : Retail 33
FirmwareÂÂÂÂ : 35.4.16 (11/24/2008)
Memory 88 MB
MEM1 Arena : 0x804d53a0 - 0x81800000
MEM2 Arena : 0x90000800 - 0x935e0000
>
>
ES:GetTitleID(00010001-48434758):0
ES:GetTitleDataDir(/title/00010001/48434758/data):0
>
>
>
FFS:GetStats( 0, 676, 676 ):0
ES:GetDITicketViews( 00010001-48434758 ):0
ES:ES_GetConsumption():0
20080403
>
>
>
>
>
>
FFS:GetStats( 1, 844, 844 ):0
ES:iOpenContent->IOS_Open("/title/00010001/48434758/content/00000002.app"):1
ESpenContent(2):1
>
>
>
>
>
FFS:GetStats( 2, 844, 844 ):0
ES:iOpenContent->IOS_Open("/shared1/00000003.app"):2
ESpenContent(8):2
FFS:GetStats( 2, 844, 844 ):0
ES:iOpenContent->IOS_Open("/shared1/00000006.app"):2
ESpenContent(3):2
FFS:GetStats( 3, 844, 844 ):0
ES:iOpenContent->IOS_Open("/shared1/00000035.app"):3
ESpenContent(4):3
FFS:GetStats( 4, 844, 844 ):0
ES:iOpenContent->IOS_Open("/title/00010001/48434758/content/00000005.app"):4
ESpenContent(5):4
>
ES:GetTitleID(00010001-48434758):0
FFSelete("/title/00010001/48434758/content/title.tmd"):0
FFSelete("/title/00010001/48434758"):0
ESeleteTitle(00010001-48434758):0

hope this helps you find whatever it is you were looking for. but IMO, it looks like you are trying to use this as a movie player. if that is the case, i guess you could do something like the riivolution to have it play a different 0x2.app from the SD card or something. but you still don't get fast forward and rewind and stuff, so mplayer is the way to go there.