Eugh! How do I cheat with Wii Shop Downloads?

Started by mrdefender, September 18, 2010, 11:28:43 PM

Previous topic - Next topic

111

Either run SysCheck, and post the "sysCheck.csv" file here, or run the HackMii Installer, and post the "installer.log" file that it generates.  It sounds like you have "4.3V2."  I'll have to do some research to figure out how to patch IOS36 if that is the case.

Also, DOP-Mii version fourteen is a "WiiBrew friendly" version, which means that it will not allow you to patch IOS versions.  You will need version thirteen of DOP-Mii to be able to patch things.

mrdefender

Hmm. Couldn't upload attachments so I put them in spoiler tags so it wouldn't overwhelm anyone.

The first spoiler is "sysCheck.csv", followed by "Dop-Mii-Report.csv" and finally "Installer.log"

[spoiler]
Quote from: SysCheck.csv
sysCheck v1.6.2 by Erik Spyder

Region: NTSC-U
The system menu v513 is running under IOS58 (rev 6176)
Hollywood v0x21
Console ID: 92212408
Boot2 v4
Found 75 titles
Found 29 IOS on this console
Found 17 IOS Stubs on this console
Quote
[/spoiler]
[spoiler]
Quote from: Dop-Mii-Report.csv
DOP-Mii Report            
Region    North America (U)         
Hollywood Version    0x21         
Wii Unique DeviceID   92212408         
            
IOS Version    FakeSign    ES_Identify    NAND    Flash
80  (v6944)   Disabled   Disabled   Disabled   Disabled
61  (v5662)   Disabled   Disabled   Disabled   Disabled
58  (v6176)   Disabled   Disabled   Disabled   Disabled
57  (v5919)   Disabled   Disabled   Disabled   Disabled
56  (v5662)   Disabled   Disabled   Disabled   Disabled
55  (v5663)   Disabled   Disabled   Disabled   Disabled
53  (v5663)   Disabled   Disabled   Disabled   Disabled
48  (v4124)   Disabled   Disabled   Disabled   Disabled
46  (v3607)   Disabled   Disabled   Disabled   Disabled
45  (v3607)   Disabled   Disabled   Disabled   Disabled
43  (v3607)   Disabled   Disabled   Disabled   Disabled
41  (v3607)   Disabled   Disabled   Disabled   Disabled
38  (v4124)   Disabled   Disabled   Disabled   Disabled
37  (v5663)   Disabled   Disabled   Disabled   Disabled
36  (v3608)   Disabled   Disabled   Disabled   Disabled
35  (v3608)   Disabled   Disabled   Disabled   Disabled
34  (v3608)   Disabled   Disabled   Disabled   Disabled
33  (v3608)   Disabled   Disabled   Disabled   Disabled
31  (v3608)   Disabled   Disabled   Disabled   Disabled
28  (v1807)   Disabled   Disabled   Disabled   Disabled
22  (v1294)   Disabled   Disabled   Disabled   Disabled
17  (v1032)   Disabled   Disabled   Disabled   Disabled
15  (v1032)   Disabled   Disabled   Disabled   Disabled
14  (v1032)   Disabled   Disabled   Disabled   Disabled
13  (v1032)   Disabled   Disabled   Disabled   Disabled
12  (v526)   Disabled   Disabled   Disabled   Disabled
9   (v1034)   Disabled   Disabled   Disabled   Disabled
[/spoiler]
[spoiler]
Quote from: Installer.log
HackMii v0.8 installer starting up
PVR = 00087200
running under IOS 58 rev 0x181f61 titles are installed
Found IOS 254: revision: 0xff01*
installed BootMii/IOS: BM1.2 0x00000007
BootMii/IOS version sufficient
Found IOS 58: revision: 0x181f.
Found IOS 80: revision: 0x1b1f.
Found IOS 57: revision: 0x171e.
Found IOS 250: revision: 0xff00.
Found IOS 249: revision: 0xff00.
Found IOS 223: revision: 0xff00.
Found IOS 222: revision: 0xff00.
Found IOS 70: revision: 0x1b00.
Found IOS 61: revision: 0x161d.
Found IOS 60: revision: 0x1900.
Found IOS 56: revision: 0x161d.
Found IOS 55: revision: 0x161e.
Found IOS 53: revision: 0x161e.
Found IOS 51: revision: 0x1300.
Found IOS 50: revision: 0x1400.
Found IOS 38: revision: 0x101b.
Found IOS 37: revision: 0x161e.
Found IOS 35: revision: 0xe17.
Found IOS 34: revision: 0xe17.
Found IOS 33: revision: 0xe17.
Found IOS 31: revision: 0xe17.
Found IOS 30: revision: 0xb00.
Found IOS 28: revision: 0x70e.
Found IOS 22: revision: 0x50d.
Found IOS 21: revision: 0x40e.
Found IOS 20: revision: 0x100.
Found IOS 17: revision: 0x407.
Found IOS 16: revision: 0x200.
Found IOS 15: revision: 0x407.
Found IOS 14: revision: 0x407.
Found IOS 13: revision: 0x407.
Found IOS 12: revision: 0x20d.
Found IOS 11: revision: 0x100.
Found IOS 10: revision: 0x300.
Found IOS 9: revision: 0x40a.
Found IOS 36: revision: 0xe17.
Found IOS 3: revision: 0xff00.
Found IOS 2: revision: 0x201.
Found IOS 4: revision: 0xff00.
launching IOS 58 for the installer...

IOS launched...

IOS versions: Installer: 58, HBC: 58
starting preparations

device id: NG057f0cb8
Launching BootMii/IOS
Waiting for mini to load ...
Mini version: 1.3
NAND minpage: 0x200
set NAND minpage to 0x40
Calling boot2_run(1, 58)
Waiting for boot2 to load ...
Waiting for IOS ...
IOS loaded: IOS58 v24.31
IPC started (662)
boot2_parse_blocks: examining existing boot2 layout
boot2 block 0:
00000000  00 00 00 20 00 00 0f 00 00 00 0a 00 00 00 02 a4  ... ............
00000010  00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000020  00 01 00 00 b3 ad b3 22 6b 3c 3d ff 1b 4b 40 77  ......."k<=..K@w
00000030  16 ff 4f 7a d7 64 86 c8 95 ac 56 2d 21 f1 06 01  ..Oz.d....V-!...
00000040  d4 f6 64 28 19 1c 07 76 8f df 1a e2 ce 7b 27 c9  ..d(...v.....{'.
00000050  0f bc 0a d0 31 25 78 ec 07 79 b6 57 d4 37 24 13  ....1%x..y.W.7$.
00000060  a7 f8 6f 0c 14 c0 ef 6e 09 41 ed 2b 05 ec 39 57  ..o....n.A.+..9W
00000070  36 07 89 00 4a 87 8d 2e 9d f8 c7 a5 a9 f8 ca b3  6...J...........
offset 0xE00:
00000000  00 00 00 00 52 6f 6f 74 2d 43 41 30 30 30 30 30  ....Root-CA00000
00000010  30 30 31 2d 43 50 30 30 30 30 30 30 30 34 00 00  001-CP00000004..
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04  ................
00000050  00 00 00 01 00 00 00 01 00 00 00 01 00 01 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000a0  00 04 00 01 00 00 00 00 00 00 00 00 00 00 00 01  ................
000000b0  00 00 00 00 00 02 7b e8 eb fc 36 20 0d db 3e 32  ......{...6 ..>2
000000c0  8d a1 c5 2b 23 3d fc 8c af 60 b6 71 ba be 00 00  ...+#=...`.q....
000000d0  00 0b 82 50 13 4c 7d 00 00 00 00 00 ba be 00 02  ...P.L}.........
000000e0  00 00 00 00 13 4c 7d a0 00 00 00 00 96 c5 8c f0  .....L}.........
000000f0  09 c5 18 44 05 d8 5d e8 d5 1e 45 8f 1e 36 a8 fb  ...D..]...E..6..
boot2 block 1:
00000000  eb 47 d9 6c 86 fe b9 4f 91 19 2f 13 1b 7f 56 ef  .G.l...O../...V.
00000010  94 d8 9e 53 4a 14 53 3c a9 a8 d7 42 44 c5 4a b8  ...SJ.S<...BD.J.
00000020  8a 21 0b 11 49 3d 78 e3 df 63 61 e1 fb 2b 81 13  .!..I=x..ca..+..
00000030  53 23 eb c6 b3 f6 1a 4a 5c f4 9c b8 69 cd d7 f6  S#.....J\...i...
00000040  b8 c8 15 ec 01 2f 4e 2d e3 30 83 97 f7 b0 d0 64  ...../N-.0.....d
00000050  29 dd 22 8e 25 17 a2 a7 e9 37 70 67 02 c2 ea 4a  ).".%....7pg...J
00000060  eb 18 97 31 04 ce c4 10 bc bb 3f 8c 5d 53 c7 5c  ...1......?.]S.\
00000070  a1 c4 db af aa ce 10 72 c1 f1 17 bd eb 9f 39 b9  .......r......9.
boot2 block 2:
00000000  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000010  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000020  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000030  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000040  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000050  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
boot2 block 3:
00000000  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000010  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000020  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000030  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000040  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000050  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
boot2 block 4:
00000000  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000010  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000020  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000030  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000040  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000050  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
boot2 block 5:
00000000  eb 47 d9 6c 86 fe b9 4f 91 19 2f 13 1b 7f 56 ef  .G.l...O../...V.
00000010  94 d8 9e 53 4a 14 53 3c a9 a8 d7 42 44 c5 4a b8  ...SJ.S<...BD.J.
00000020  8a 21 0b 11 49 3d 78 e3 df 63 61 e1 fb 2b 81 13  .!..I=x..ca..+..
00000030  53 23 eb c6 b3 f6 1a 4a 5c f4 9c b8 69 cd d7 f6  S#.....J\...i...
00000040  b8 c8 15 ec 01 2f 4e 2d e3 30 83 97 f7 b0 d0 64  ...../N-.0.....d
00000050  29 dd 22 8e 25 17 a2 a7 e9 37 70 67 02 c2 ea 4a  ).".%....7pg...J
00000060  eb 18 97 31 04 ce c4 10 bc bb 3f 8c 5d 53 c7 5c  ...1......?.]S.\
00000070  a1 c4 db af aa ce 10 72 c1 f1 17 bd eb 9f 39 b9  .......r......9.
boot2 block 6:
00000000  00 00 00 20 00 00 0f 00 00 00 0a 00 00 00 02 a4  ... ............
00000010  00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000020  00 01 00 00 b3 ad b3 22 6b 3c 3d ff 1b 4b 40 77  ......."k<=..K@w
00000030  16 ff 4f 7a d7 64 86 c8 95 ac 56 2d 21 f1 06 01  ..Oz.d....V-!...
00000040  d4 f6 64 28 19 1c 07 76 8f df 1a e2 ce 7b 27 c9  ..d(...v.....{'.
00000050  0f bc 0a d0 31 25 78 ec 07 79 b6 57 d4 37 24 13  ....1%x..y.W.7$.
00000060  a7 f8 6f 0c 14 c0 ef 6e 09 41 ed 2b 05 ec 39 57  ..o....n.A.+..9W
00000070  36 07 89 00 4a 87 8d 2e 9d f8 c7 a5 a9 f8 ca b3  6...J...........
offset 0xE00:
00000000  00 00 00 00 52 6f 6f 74 2d 43 41 30 30 30 30 30  ....Root-CA00000
00000010  30 30 31 2d 43 50 30 30 30 30 30 30 30 34 00 00  001-CP00000004..
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04  ................
00000050  00 00 00 01 00 00 00 01 00 00 00 01 00 01 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000a0  00 04 00 01 00 00 00 00 00 00 00 00 00 00 00 01  ................
000000b0  00 00 00 00 00 02 7b e8 eb fc 36 20 0d db 3e 32  ......{...6 ..>2
000000c0  8d a1 c5 2b 23 3d fc 8c af 60 b6 71 ba be 00 00  ...+#=...`.q....
000000d0  00 0b 82 50 13 4c 7d 00 00 00 00 00 ba be 00 02  ...P.L}.........
000000e0  00 00 00 00 13 4c 7d a0 00 00 00 00 96 c5 8c f0  .....L}.........
000000f0  09 c5 18 44 05 d8 5d e8 d5 1e 45 8f 1e 36 a8 fb  ...D..]...E..6..
parsing last generation bootmap
found valid boot2 blockmap at block 1 (pos 0x627c0), submap 0, generation 2
00000000  26 f2 9a 40 1e e6 84 cf 00 00 00 02 01 00 00 00  &..@............
00000010  00 00 00 00 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000020  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000030  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000040  01 01 01 01 01 01 01 01 01 01 01 01 26 f2 9a 40  ............&..@
00000050  1e e6 84 cf 00 00 00 02 01 00 00 00 00 00 00 00  ................
00000060  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000070  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
found valid boot2 blockmap at block 5 (pos 0xe67c0), submap 0, generation 3
00000000  26 f2 9a 40 1e e6 84 cf 00 00 00 03 01 00 00 00  &..@............
00000010  00 00 00 00 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000020  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000030  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000040  01 01 01 01 01 01 01 01 01 01 01 01 26 f2 9a 40  ............&..@
00000050  1e e6 84 cf 00 00 00 03 01 00 00 00 00 00 00 00  ................
00000060  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000070  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
parse_blocks: found 2 valid blockmaps
found 2 valid blockmaps
using generation 3
boot2 blocks: 00 01 02 03 04 05 06
boot2bin @5,0 (blocks=0,1 - bootmii=0)
bootmii@-1,-1
boot2 blocks: 06 05 04 03 02 01 00
boot2bin @5,1 (blocks=6,5 - bootmii=0)
boot2 block layout: 2 2 1 1 1 0 0
Assembling boot2 in RAM
copyright size = 34
copyright text = 'Copyright 2008-2010 Team Twiizers.'
tmd ends at 0x80830f2c, data starts at 0x80830f60
bootmii version  = '1.3'
prepare_bootmii: bootmii_check_boot1 failed: -2
preparations done!

The test results are in:

  Using IOS versions:      Installer: 58, HBC: 58

 The Homebrew Channel:    Can be installed
 BootMii:                 Can only be installed as an IOS
      The installed boot1 version prevents a boot2 install (-2)
...................................................A BootMii install requires a SD card.

Runtime files will be written, these are required to
properly boot BootMii.

Mounting SD card...
Creating directory '/bootmii'...
Writing '/bootmii/armboot.bin'...
Writing '/bootmii/ppcboot.elf'...
Writing config file...
Skipped, file already exists

Done.

Removing title 0x00000001000000fe...
Deleting 1 ticket
.....
[/spoiler]



111

When did you last run the HackMii Installer?  From looking at its "installer.log" file, it appears that you have 4.3 version 1.  However, when I look at your log from DOP-Mii, it looks like you are on 4.3 version 2.  Although, since SysCheck states that you have version 6176 of IOS58, I'm going to assume that you are on 4.3 version 2.

Anyway, I did some looking around for 4.3 version 2, and it appears that you might be able to use the newest version of the Multi Mod Manager and/or a version of the Trucha Bug Restorer to patch IOS36...

http://mmm4wii.posterous.com/mmm-multi-mod-manager-v134

http://forum.wii-homebrew.com/board4-wii-homebrew-area/wii-hacking/16646-trucha-bug-restorer-1-14-by-r2/

If you decide to try these, use them at your own risk!  These programs are supposed to use the HW_AHBPROT feature to patch IOS36.  I tried to run these programs on UNEEK, which I have updated to 4.3 version 2.  However, I don't believe that the HW_AHBPROT feature works properly in UNEEK, so I really couldn't test these.  My real NAND is on 3.0U, which doesn't have IOS36.

Supposedly, the Trucha Bug Restorer only patches IOS36, and doesn't require you to install and/or downgrade any other IOS versions.  It will require that you have at least version 1.0.7 of the Homebrew Channel, and that it is running on IOS58 (from your installer.log file, it appears that you have this).

If you decide to try one of these programs, ask here if you have any questions.

mrdefender

omg omg omg omg omg! <insert little girl squeal here>

the "Simple Ios Patcher" (sip.zip in that trucha bug post) worked! :o It's the first one i tried and it worked! I can see the channel option and the rebooter option (dunno what that one's for though lol)

thank you!! :)

edit: right, probably should mention i went with "download from nus" to get the ios wad thingies. incase someone wants to do something or something...

thanks again! :)

dcx2

Finally!  That's awesome news!

This should be stickied or we should make some announcement post or something.  Lots of people ask about this...

Kane123

I had the exact same problems as mrdefender.  The new Trucha Bug Restorer didn't work, but I tried that Multi-Mod program and was able to patch IOS36 with no problems and no downgrading IOS15.  I finally have then load channel option back on Gecko OS.  Thank you, 111!  ;D