How to use ES_DiVerify(ES_Identify)?

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Tue, 28 Sep 2010 20:38:10 +0200

I was just going by what Arikado said, but yes a quick scan of the source implies you're right. And also noticed something else interesting, but I won't mention it right now ;)

Re: How to use ES_DiVerify(ES_Identify)?

arasium — Tue, 28 Sep 2010 12:29:59 +0200

I've read you code and there is something like that:

if (!isAHBPROT)
{
  printf("%sIOS: %u%s\n", (selection == 0 ? AnsiSelection : ""), *menuIOS, AnsiNormal);
  printf("%sInstall IOS36 (v%d) w/FakeSign%s\n", (selection == 1 ? AnsiSelection : ""), IOS36Version, AnsiNormal);
}
else
{
  printf("%sUse IOS%d + AHBPROT%s\n", (selection == 0 ? AnsiSelection : ""), IOS_GetVersion(), AnsiNormal);
}
printf("%sScan the Wii's internals (SysCheck)%s\n", (selection == 2 ? AnsiSelection : ""), AnsiNormal);
printf("%sExit%s", (selection == 3 ? AnsiSelection : ""), AnsiNormal);	

Console::SetRowPosition(Console::Rows-7);
Console::PrintSolidLine();
printf("[%s][%s] Change Selection\n", UpArrow, DownArrow);
		
if (selection == 0 && !isAHBPROT) printf("[%s][%s] Change IOS\n", LeftArrow, RightArrow);
else printf("\n");

printf("[Home] Exit");
Console::PrintSolidLine();
printf("Current IOS: IOS%u", IOS_GetVersion());
VIDEO_WaitVSync();

u32 button;
while (Controller::ScanPads(&button))
{
  if (button == WPAD_BUTTON_HOME) System::Exit();
  if (System::State != SystemState::Running) return;

  if (button == WPAD_BUTTON_UP) selection--;
  if (button == WPAD_BUTTON_DOWN) selection++;

  if (isAHBPROT)
  { // Let's skip out that
    if (button == WPAD_BUTTON_UP && selection == 1) selection--;
    if (button == WPAD_BUTTON_DOWN && selection == 1) selection++;
  }

  if (selection < 0) selection = maxMenu;
  if (selection > maxMenu) selection = 0;

  if (selection == 0 && !isAHBPROT)
  {
    if (button == WPAD_BUTTON_LEFT && menuIOS != iosList.begin()) --menuIOS;
    if (button == WPAD_BUTTON_RIGHT && menuIOS != iosList.end()-1) ++menuIOS;
  }	
...
}

So it means that If you don't use the AHBPROT you will have these menus:

- selection 0: "IOS: xx"
- selection 1: "Install IOS36 (vyy) w/FakeSign"
- selection 3: "Scan the Wii's internals (SysCheck)"
- selection 4: "Exit"

And you will be able to select any menu and to modify the selected ios (the xx in the menu above) with left/right arrow

If you have the AHBPROT, you will have this:

- selection 0: "IOS: xx"
- selection 3: "Scan the Wii's internals (SysCheck)"
- selection 4: "Exit"

And you wont be able to select the menu "selection 1" and you wont be able to modify the ios with left/right arrow (the ios will be the current one)

So you won't reload the IOS if you have the AHBPROT.... You can read the rest of the source, it confirms what i say.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Mon, 27 Sep 2010 20:12:53 +0200

Quote
arasium
@SifJar: Yes you're right. You need AHBPROT to downgrade IOSes. But, if you reload the ios, you will lost the AHBPROT and (i think) you won't be able to downgrade anything. Doesn't it?

That's the whole point, dop-Mii WiiBrew Edition DOES reload IOS a number of times, and still has AHBPROT and can downgrade IOS.

Re: How to use ES_DiVerify(ES_Identify)?

arasium — Mon, 27 Sep 2010 13:33:33 +0200

@SifJar: Yes you're right. You need AHBPROT to downgrade IOSes. But, if you reload the ios, you will lost the AHBPROT and (i think) you won't be able to downgrade anything. Doesn't it?

@sorg: When i said title, it was about the ios tmd :) IOS is a title, channel is also a tittle etc... It's like DVDX, the IOS254 was a title with the AHBPROT flag setted.... You just need to IOS_Reload on it... Perhaps i'm wrong, in this case, correct me :)

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Fri, 24 Sep 2010 18:40:49 +0200

Quote
arasium
The AHBPROT is setted by some datas in the TMD. So if you do an IOS_Reload on a title with a normal tmd, the AHBPROT will be reset....

Dop-Mii Wiibrew Edition doesn't patch the ioses. So it doesn't need any special things to install the Wads/Ioses. It will works like the wii usually do.

It doesn't patch, but it can downgrade or delete, which DOES need "special things" as you put it i.e. HW_AHBPROT flags, used to patch an IOS on-the-fly to use for installing and deleting stuff (IOS is not permanently patched, but is temporarily patched in RAM to have fake signing, ES_DiVerify and NAND Permissions)

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Fri, 24 Sep 2010 16:33:30 +0200

Quote

So if you do an IOS_Reload on a title with a normal tmd

not correct. If you reload IOS then TMD from that IOS will be used for flags setting. Even if title has AHBPROT flag, it won't help to sustain AHBPROT when you reload IOS.

Generally speaking, Wii subsystem is not designed to reload IOS while title is running. Libogc just tricks system when you want to reload IOS. Clearing flags is just side-effect of this abnormal system usage.

Normally, requested IOS is automatically loaded when Title starts, so in this case Title's TMD used for flag setting.

Re: How to use ES_DiVerify(ES_Identify)?

arasium — Fri, 24 Sep 2010 10:20:17 +0200

The AHBPROT is setted by some datas in the TMD. So if you do an IOS_Reload on a title with a normal tmd, the AHBPROT will be reset....

Dop-Mii Wiibrew Edition doesn't patch the ioses. So it doesn't need any special things to install the Wads/Ioses. It will works like the wii usually do.

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Sun, 19 Sep 2010 06:11:18 +0200

Probably Arikado didn't know much about AHBPROT at that time.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Sat, 18 Sep 2010 20:18:48 +0200

Quote
sorg
Quote
SifJar
So was Arikado wrong? (see the post I linked above)
His post was about how to disable automatic IOS loading on application startup. Old (seams very very old) libogc loads IOS36 at startup which disables AHBPROT.

No it wasn't.

Quote
Arikado
Isn't AHBPROT part of IOS 58? ( I mean, if it wasn't, DOP-Mii: WiiBrew Edition wouldn't work - We IOS_ReloadIOS() all the time...).

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Sat, 18 Sep 2010 19:50:31 +0200

Quote
SifJar
So was Arikado wrong? (see the post I linked above)

His post was about how to disable automatic IOS loading on application startup. Old (seams very very old) libogc loads IOS36 at startup which disables AHBPROT.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Sat, 18 Sep 2010 18:21:02 +0200

Quote
Tantric
Quote
SifJar
I'm pretty sure dop-Mii reloads IOS without losing AHBPROT, go read its source.

Nope. It doesn't.

So was Arikado wrong? (see the post I linked above)

Re: How to use ES_DiVerify(ES_Identify)?

Tantric — Sat, 18 Sep 2010 17:32:40 +0200

Quote
SifJar
I'm pretty sure dop-Mii reloads IOS without losing AHBPROT, go read its source.

Nope. It doesn't.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Sat, 18 Sep 2010 15:48:28 +0200

Quote
tueidj
I think even waninkoko would be ashamed of that.

Doesn't seem much different to what DVDx was for a long time.

And sorg: I am almost certain dop-Mii DOES reload IOS, because Arikado said so in this thread : [forum.wiibrew.org]

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Sat, 18 Sep 2010 11:24:50 +0200

I know you are very smart tueidj, but there is no help from you at all.
You don't need to spend time for such useless comments.

P.S.: already discovered how to reload IOS without loosing AHBPROT. N again did it by wrong way :)

Re: How to use ES_DiVerify(ES_Identify)?

tueidj — Sat, 18 Sep 2010 10:54:55 +0200

I think even waninkoko would be ashamed of that.

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Sat, 18 Sep 2010 09:38:49 +0200

hmm.. not so crazy :)

it works well!

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Sat, 18 Sep 2010 05:28:39 +0200

SifJar,
i will check but it's highly unlikely it uses IOS realod. It simply unneeded for its tastk.

WiiPower,
thanks for the info. Unfortunately, i know 002 trick and how to trick games to use only one IOS for all. So, i'm using it already.
Seams there is no known way to reload IOS for Channels.

There is one crazy method coming to my mind: setup small hidden channel-helper with AHBPROT. Everytime you want to reload IOS, just change IOS in its TMD and load it just like DVDx :)

Re: How to use ES_DiVerify(ES_Identify)?

WiiPower — Fri, 17 Sep 2010 19:51:25 +0200

tueidj is right, unless you learn how to do an IOS Reload without loosing the direct hardware access, you won't get a clean solution for your problem.

But if you can learn anything from "warez loaders", then it's the fact that >90% of games run fine with any IOS. So you can temporary stay on IOS58 and just fix 002 error in memory. If you execute some kind of apploader that writes into memory which IOS the game wants, then add this to your code, after the apploader stuff(it's beed a long time, i don't think this happens for channels, but for disc games):

*(u32 *)0x80003188 = *(u32 *)0x80003140;

or use this:

*(u16 *)0x80003140 = requested_ios;
*(u16 *)0x80003142 = 0xffff;
*(u16 *)0x80003188 = requested_ios;
*(u16 *)0x8000318A = 0xffff;

I know it's not nice, but it will work until you fixed your IOS Reload. And writing to 0x80003188 might be required anyways to get rid of 002 errors as the game expects the apploader to do it.

Do you know about my project that can't be talked about here, but could be a useful source for some code? Namely decompression code for compressed lz77 files.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Fri, 17 Sep 2010 19:01:12 +0200

I'm pretty sure dop-Mii reloads IOS without losing AHBPROT, go read its source.

Re: How to use ES_DiVerify(ES_Identify)?

tueidj — Fri, 17 Sep 2010 16:27:14 +0200

I pretty much told you exactly what to do. Not my fault if you're not up to the task, sorry if you expect me to spoonfeed you patch code like everyone else.

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Fri, 17 Sep 2010 10:50:58 +0200

tueidj,
good answer. It's a really masterpiece to answer without answering ;)

Re: How to use ES_DiVerify(ES_Identify)?

tueidj — Fri, 17 Sep 2010 09:59:01 +0200

You're trying to make the system run channels in a way that it wasn't designed to. If you really want to do it that way you're going to have to learn how to reload IOS without losing AHBPROT.

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Fri, 17 Sep 2010 05:30:20 +0200

that's what i'm using on steps 1 and 2.
On step 3 you will loose ahbprot and ability to patch IOS in memory.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Thu, 16 Sep 2010 22:04:30 +0200

Well, you can use the runtime IOS patching stuff from dop-Mii to allow ES_Identify on the current IOS without it being actually patched. Is that not good enough?

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Thu, 16 Sep 2010 21:32:04 +0200

Without ES_Identify channel won't be identified with its correct TitleID and thus won't work because won't be able to access its data and content folders.

The main idea is:
1) uning AHBPROT access channel's content
2) load its executable
3) load correct IOS (AHBPROT will be lost at this stage!)
4) patch executable
5) execute ES_Identify with channel's TitleID
6) start channel's executable

All these steps are just to execute step 4. Otherwise all these steps can be replaced by single ES_LaunchTitle.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Thu, 16 Sep 2010 21:09:28 +0200

I don't know what you want to achieve, but is all that's necessary not just to be able to call ES_Identify before you load the channel? or is there more to it than that?

Re: How to use ES_DiVerify(ES_Identify)?

sorg — Thu, 16 Sep 2010 20:56:15 +0200

Thanks for reply. I know how to patch - it's not a problem.
Problem comes when i want to launch channel with its correct IOS, but cannot use standard ES_LaunchTitle because i want to pre-patch binary before start (Ocarina cheat engine).

The funny thing is that you can use ES_DiVerify indirectly when you open partition of DVD game, but there is no similar way to execute ES_DiVerify directly or indirectly for installed Channels.
That's why i decided to ask this question here... It looks stupid when you easily can invoke identification as DVD title, but can not with Channel. Well, some exceptions could be applied for SystemMenu or other system titles, but for all channels it looks strange and funny.

Re: How to use ES_DiVerify(ES_Identify)?

SifJar — Thu, 16 Sep 2010 20:32:30 +0200

I'm pretty sure Ninty prevented this, hence there ARE patches for it. If your app will use HW_AHBPROT flags, you could patch the IOS on-the-fly wiht ES_Identify (see dop-Mii source for that)

How to use ES_DiVerify(ES_Identify)?

sorg — Thu, 16 Sep 2010 20:04:57 +0200

In older IOS you could provide valid ticket/tmd/cert to identify in system as specific title.
In new IOS (for example 53,55,58) ES_Identify gives error -1017.

So, is there a way to identify in system as title besides loading it as channel?

I know i can patch IOS, but i want to do this without patching.

Is there a way to identify in system by providing valid ticket/tmd?