Difference between revisions of "BootMii"

From WiiBrew
Jump to navigation Jump to search
(removed link to video)
 
(84 intermediate revisions by 39 users not shown)
Line 1: Line 1:
{{Infobox homebrewapp
+
{{Seealso|mini}}
 +
{{Infobox homebrew
 
| title      = BootMii
 
| title      = BootMii
| image      = [[Image:BootMii Logo.png|128px]]
+
| image      = [[File:BootMii Logo.png|128px]]
| author      = Team Twiizers
+
| author      = [[fail0verflow]]
| desc        = A system designed to enable complete low-level control of the Wii.
+
| version    = 1.5
| version    = Beta 1
+
| type        = loader
| download    = [http://bootmii.org/download/ Download]
+
| download    = http://bootmii.org/download/
| source      = Partial: http://gitweb.bootmii.org/
+
| source      = http://gitweb.bootmii.org
| peripherals = {{Wii}} {{GCNController}} {{FrontSDHC}}  
+
| peripherals = {{FrontSD}} {{FrontSDHC}}
 
}}
 
}}
 +
{{Modifies NAND|bmapl=yes}}
 +
{{No vWii}}
  
'''BootMii''' is a system designed by [[Team Twiizers]] to enable complete low-level control of the Wii. It allows the Wii to be controlled mere moments after the On button has been pressed, before any IOS has been loaded and before the NAND filesystem has been read.
+
'''BootMii''' is a system designed by [[Team Twiizers]] to enable complete low-level control of the Wii. It allows the Wii to be controlled mere moments after the On button has been pressed, before any [[IOS]] has been loaded and before the [[NAND]] filesystem has been read.
  
==Architecture==
+
BootMii-[[boot2]] runs on every boot. However, BootMii-IOS can be launched from the [[Homebrew Channel]] from the menu that pops up when the HOME Button is pressed.
BootMii is comprised by four pieces of software:
 
* Installer -- this is a simple ELF file which may be run using your favorite method (HBC, Twilight Hack, or any other exploit which can load standard executables).  It checks your Wii to make sure it can safely be modified, saves some vital data for disaster recovery, and installs the rest of the components.
 
* Loader stub -- this is a small bit of ARM code which is injected into boot2, replacing Nintendo's internal ELF loader.  When run, it looks to see if an SD card is inserted.  If so, it tries to load and execute /bootmii/armboot.bin instead of boot2.  Otherwise, it will fall back to loading boot2.
 
* [[mini]] -- this is a rudimentary replacement for IOS that is best suited for low-level recovery functions.  Source code is available under GPLv2 [http://gitweb.bootmii.org/?a=summary&p=mini here].
 
* BootMii (or bootmii-ppc) -- when mini runs, it looks for a file named /bootmii/ppcboot.elf on the SD card.  If it exists, mini loads this executable into memory, boots up the Broadway (ppc) and executes that binary in parallel with mini.  Source code is available under GPLv2 at (tbd).
 
  
Both mini and bootmii-ppc must be present in order to draw a user interface, because the Starlet cannot directly access the Video Interface.
+
== BootMii with Related Software ==
 +
BootMii comes in a group of four pieces of software:
 +
* '''[[HackMii Installer]]''' -- This is a simple ELF file which may be run using your favorite method (HBC, [[str2hax]], or any other exploit which can load standard executables). It checks your Wii to make sure it can safely be modified, saves some vital data for disaster recovery, and installs the rest of the components.
 +
* '''BootMii''' -- This is a small bit of ARM code which is injected into [[boot2]] or [[IOS254]], replacing Nintendo's internal ELF loader. When run, it looks to see if an SD card is inserted. If so, it tries to load and execute /bootmii/armboot.bin instead of boot2. Otherwise, it will fall back to loading boot2.
 +
* '''[[mini]]''' -- This is a rudimentary replacement for IOS that is best suited for low-level recovery functions. Source code is available under GPLv2 [https://github.com/fail0verflow/mini here].
 +
* '''[[CEIL1NG_CAT]]''' (or bootmii-ppc) -- When mini runs, it looks for a file named /bootmii/ppcboot.elf on the SD card. If it exists, mini loads this executable into memory, boots up the {{hw|Broadway}} (ppc) and executes that binary in parallel with mini. Source code is available under GPLv2 at (tbd).
  
==Benefits==
+
Both mini and CEIL1NG_CAT must be present in order to draw a user interface, because the [[Starlet]] cannot directly access the {{hw|Video Interface}}.
BootMii allows anything from Recovery modes (creating a practically unbrickable Wii), to lazy access of the [[Homebrew Channel]]. For example, if you have corrupted the [[System Menu]], you can use the [[AnyRegion Changer]] to install a [[System Menu]] 3.2. Unfortunately, all homebrew currently require an [[IOS]], because [[libogc]] requires one. However, there is mini(a homebrew IOS-like software), which can be modified specifically for the program, ie, for better communication to the Linux kernel.
 
  
==How it works==
+
== Benefits ==
The BootMii Platform is a [[boot2]] hack, which is loaded by [[boot1]], which is loaded by [[boot0]]. [[boot0]] is part of Hollywood and read-only. [[boot1]], although stored on the [[NAND]], is signed by a value in write-once memory and therefore cannot be changed. [[boot2]], however, can be modified. This means it can be hacked, updated, and corrupted. BootMii hacks [[boot2]], and allows running code directly from SD Card, before anything else is loaded. This has many advantages, such as making it very difficult to brick, and slowing Nintendo from blocking homebrew. Unfortunately, the only way we could completely stop Nintendo from blocking homebrew is by patching updates on-the-fly, or somehow preventing overwriting [[boot2]].
+
BootMii allows anything from Recovery modes (creating a practically unbrickable Wii), to lazy access of the [[Homebrew Channel]]. For example, if you have corrupted the [[System Menu]], you can use [[DOP-Mii]] to reinstall the System Menu. Unfortunately, all homebrew currently require an [[IOS]], because [[libogc]] requires one. However, there is [[mini]] (a homebrew IOS-like software), which can be modified specifically for the program, ie, for better communication to the Linux kernel.
  
==Compatibility==
+
== How it works ==
BootMii should be compatible with most Wiis released before late 2008. Support for newer Wiis (with reduced functionality) will have to install BootMii as an IOS
+
BootMii-boot2 is a modified version of [[boot2]]'s [[NANDLoader]], which is loaded by [[boot1]], which is loaded by [[boot0]]. boot0 is part of [[Hollywood]] and read-only. boot1, although stored on the [[NAND]], is signed by a value in write-once memory and therefore cannot be changed without rendering a console unable to boot. boot2, however, can be modified (with some restrictions). This means it can be hacked, updated, and corrupted. BootMii hijacks the [[boot process]] before the normal boot2 is run, optionally allowing code to be run directly from the SD Card. This has many advantages, such as making it very difficult to [[brick]], and slowing Nintendo from blocking homebrew. Unfortunately, the only way we could completely stop Nintendo from blocking homebrew is by patching updates on-the-fly, or somehow preventing overwriting boot2. Along with the [[4.2]] update, Nintendo released a new version of boot2 ([[boot2v4]]); there is nothing in boot2v4 that prevents BootMii from working, but it will overwrite an existing BootMii installation when it is installed.
 +
 
 +
The space normally allocated for the NANDLoader is split into two sections itself for technical reasons; the first section is a custom NANDLoader that loads the second section. The second section checks to see if an SD card is inserted; if so, it loads <code>/bootmii/armboot.bin</code> and executed it. Otherwise, it loads the real boot2, which remains intact when BootMii-boot2 is installed.
 +
 
 +
<!-- TODO: BootMii-IOS -->
 +
 
 +
== Compatibility ==
 +
BootMii should be compatible with most Wiis released before late 2008. Support for newer Wiis (with reduced functionality) will have to install BootMii as an IOS
  
 
For an SD card compatibility list, See [[/SD Card Compatibility List|SD Card Compatibility List]].
 
For an SD card compatibility list, See [[/SD Card Compatibility List|SD Card Compatibility List]].
  
==Required hardware==
+
== Required hardware ==
 
BootMii will not require any special hardware. However, special hardware might help accomplish things that BootMii by itself cannot, such as hardware NAND write protection and isolation from the Nintendo software stack. No such hardware exists yet though.
 
BootMii will not require any special hardware. However, special hardware might help accomplish things that BootMii by itself cannot, such as hardware NAND write protection and isolation from the Nintendo software stack. No such hardware exists yet though.
  
==The new boot1==
+
== The new boot1 ==
Nintendo has released a new version of [[boot1]], which disables Bootmii as a [[boot2]] hack. Fortunately, Bootmii can also be modified to work as a replacement for IOS, or as a separate IOS ([[IOS254]]). See more at [http://hackmii.com/2009/02/bootmii-and-the-new-boot1/ Hackmii]. Since boot1 cannot be updated, all consoles already manufactured before this update are safe. About 10% of the consoles that ran the BootMii Checker tool have the new boot1.
+
Consoles made after some point in 2008 (no concrete date is known) have a new version of [[boot1]] that patches the vulnerability which allows the console to boot a modified [[boot2]]. The Hackmii Installer will detect this situation and refuse to modify boot2 (see more at [http://hackmii.com/2009/02/bootmii-and-the-new-boot1/ Hackmii]). Since boot1 cannot be updated, all consoles already manufactured before this update are safe. About 10% of the consoles that ran the BootMii Checker tool have the new boot1.
 
 
==Media==
 
[[File:Bootmii_screenshot.png|right|thumb|200px|Screenshot.  Click for larger image.]]
 
  
 +
== Media ==
 
{|
 
{|
 
|-
 
|-
 
| <youtube size="medium" valign="top" align="left">9oAQ9i4FMeg</youtube>
 
| <youtube size="medium" valign="top" align="left">9oAQ9i4FMeg</youtube>
 
|-
 
|-
| Video source: Marcan's early BootMii demo.  The hardware mod in the video is unrelated to BootMii.
+
| Video source: [[User:Marcan|Marcan]]'s early BootMii demo.  The hardware mod in the video is unrelated to BootMii.
 
|-
 
|-
 
|}
 
|}
  
==External links==
+
 
 +
 
 +
== History ==
 +
=== v1.4 ===
 +
* Fixed integer overflow when calculating SD card free space
 +
* Changed IOS [[TMD]] version to 65281 to prevent it from being repeatedly erased.
 +
 
 +
=== Beta 5 (v1.2) ===
 +
*Compatible with more SD cards.
 +
 
 +
=== Beta 3 (v1.0) ===
 +
* Improved the SD card compatibility
 +
 
 +
=== Beta 2 (v0.9) ===
 +
* SD card performance has been improved, decreasing the boot and the NAND backup / restore time
 +
 
 +
=== Beta 1 ===
 +
* First Public Release
 +
 
 +
== External links ==
 
* http://www.hackmii.com/
 
* http://www.hackmii.com/
 
* http://www.bootmii.org/
 
* http://www.bootmii.org/

Latest revision as of 20:23, 2 July 2021

See also: mini
BootMii
BootMii Logo.png
General
Author(s)fail0verflow
TypeLoader
Version1.5
Links
Download
Source
Peripherals
Loads files from the Front SD slot Loads files from SDHC cards in the Front SD slot
NOTICE
ModifiesNAND.png
This homebrew application makes permanent changes to the Wii's NAND, thus, this application should be used with caution.
Warning!
NoVWii.svg
This homebrew cannot be used on the Wii U's vWii. Attempting to use this homebrew on the vWii may result in the app not working, or may render the system unusable.

BootMii is a system designed by Team Twiizers to enable complete low-level control of the Wii. It allows the Wii to be controlled mere moments after the On button has been pressed, before any IOS has been loaded and before the NAND filesystem has been read.

BootMii-boot2 runs on every boot. However, BootMii-IOS can be launched from the Homebrew Channel from the menu that pops up when the HOME Button is pressed.

BootMii with Related Software

BootMii comes in a group of four pieces of software:

  • HackMii Installer -- This is a simple ELF file which may be run using your favorite method (HBC, str2hax, or any other exploit which can load standard executables). It checks your Wii to make sure it can safely be modified, saves some vital data for disaster recovery, and installs the rest of the components.
  • BootMii -- This is a small bit of ARM code which is injected into boot2 or IOS254, replacing Nintendo's internal ELF loader. When run, it looks to see if an SD card is inserted. If so, it tries to load and execute /bootmii/armboot.bin instead of boot2. Otherwise, it will fall back to loading boot2.
  • mini -- This is a rudimentary replacement for IOS that is best suited for low-level recovery functions. Source code is available under GPLv2 here.
  • CEIL1NG_CAT (or bootmii-ppc) -- When mini runs, it looks for a file named /bootmii/ppcboot.elf on the SD card. If it exists, mini loads this executable into memory, boots up the Broadway (ppc) and executes that binary in parallel with mini. Source code is available under GPLv2 at (tbd).

Both mini and CEIL1NG_CAT must be present in order to draw a user interface, because the Starlet cannot directly access the Video Interface.

Benefits

BootMii allows anything from Recovery modes (creating a practically unbrickable Wii), to lazy access of the Homebrew Channel. For example, if you have corrupted the System Menu, you can use DOP-Mii to reinstall the System Menu. Unfortunately, all homebrew currently require an IOS, because libogc requires one. However, there is mini (a homebrew IOS-like software), which can be modified specifically for the program, ie, for better communication to the Linux kernel.

How it works

BootMii-boot2 is a modified version of boot2's NANDLoader, which is loaded by boot1, which is loaded by boot0. boot0 is part of Hollywood and read-only. boot1, although stored on the NAND, is signed by a value in write-once memory and therefore cannot be changed without rendering a console unable to boot. boot2, however, can be modified (with some restrictions). This means it can be hacked, updated, and corrupted. BootMii hijacks the boot process before the normal boot2 is run, optionally allowing code to be run directly from the SD Card. This has many advantages, such as making it very difficult to brick, and slowing Nintendo from blocking homebrew. Unfortunately, the only way we could completely stop Nintendo from blocking homebrew is by patching updates on-the-fly, or somehow preventing overwriting boot2. Along with the 4.2 update, Nintendo released a new version of boot2 (boot2v4); there is nothing in boot2v4 that prevents BootMii from working, but it will overwrite an existing BootMii installation when it is installed.

The space normally allocated for the NANDLoader is split into two sections itself for technical reasons; the first section is a custom NANDLoader that loads the second section. The second section checks to see if an SD card is inserted; if so, it loads /bootmii/armboot.bin and executed it. Otherwise, it loads the real boot2, which remains intact when BootMii-boot2 is installed.


Compatibility

BootMii should be compatible with most Wiis released before late 2008. Support for newer Wiis (with reduced functionality) will have to install BootMii as an IOS

For an SD card compatibility list, See SD Card Compatibility List.

Required hardware

BootMii will not require any special hardware. However, special hardware might help accomplish things that BootMii by itself cannot, such as hardware NAND write protection and isolation from the Nintendo software stack. No such hardware exists yet though.

The new boot1

Consoles made after some point in 2008 (no concrete date is known) have a new version of boot1 that patches the vulnerability which allows the console to boot a modified boot2. The Hackmii Installer will detect this situation and refuse to modify boot2 (see more at Hackmii). Since boot1 cannot be updated, all consoles already manufactured before this update are safe. About 10% of the consoles that ran the BootMii Checker tool have the new boot1.

Media

Video source: Marcan's early BootMii demo. The hardware mod in the video is unrelated to BootMii.


History

v1.4

  • Fixed integer overflow when calculating SD card free space
  • Changed IOS TMD version to 65281 to prevent it from being repeatedly erased.

Beta 5 (v1.2)

  • Compatible with more SD cards.

Beta 3 (v1.0)

  • Improved the SD card compatibility

Beta 2 (v0.9)

  • SD card performance has been improved, decreasing the boot and the NAND backup / restore time

Beta 1

  • First Public Release

External links