Wii Hacking Basics

[doomkaiber001]

I don't know which version of Homebrew I have. Is there anyway to check which I do?

[cydp3]

Usually if you have an old version an update option will come up as soon as you enter the homebrew channel. But you can check what version you have if you go into the Homebrew Shop thing (I don't know what it's called).

[justin28]

Here is the installer log:

HackMii v0.8 installer starting up
PVR = 00087103
running under IOS 58 rev 0x182081 titles are installed
Found IOS 52: revision: 0x1700.
Found IOS 48: revision: 0x101c.
Found IOS 46: revision: 0xe17.
Found IOS 45: revision: 0xe17.
Found IOS 43: revision: 0xe17.
Found IOS 41: revision: 0xe17.
Found IOS 40: revision: 0xc00.
Found IOS 254: revision: 0xff01*
installed BootMii/IOS: BM1.3 0x00000008
BootMii/IOS version sufficient
Found IOS 58: revision: 0x1820.
Found IOS 80: revision: 0x1b20.
Found IOS 250: revision: 0xff00.
Found IOS 223: revision: 0xff00.
Found IOS 222: revision: 0xff00.
Found IOS 57: revision: 0x171f.
Found IOS 56: revision: 0x161e.
Found IOS 70: revision: 0x1b00.
Found IOS 249: revision: 0xff00.
Found IOS 61: revision: 0x161e.
Found IOS 55: revision: 0x161f.
Found IOS 53: revision: 0x161f.
Found IOS 38: revision: 0x101c.
Found IOS 16: revision: 0x200.
Found IOS 60: revision: 0x1900.
Found IOS 10: revision: 0x300.
Found IOS 50: revision: 0x1400.
Found IOS 51: revision: 0x1300.
Found IOS 37: revision: 0x161f.
Found IOS 36: revision: 0xe18.
Found IOS 14: revision: 0x408.
Found IOS 28: revision: 0x70f.
Found IOS 22: revision: 0x50e.
Found IOS 33: revision: 0xe18.
Found IOS 35: revision: 0xe18.
Found IOS 34: revision: 0xe18.
Found IOS 31: revision: 0xe18.
Found IOS 30: revision: 0xb00.
Found IOS 21: revision: 0x40f.
Found IOS 20: revision: 0x100.
Found IOS 17: revision: 0x408.
Found IOS 15: revision: 0x408.
Found IOS 13: revision: 0x408.
Found IOS 12: revision: 0x20e.
Found IOS 11: revision: 0x100.
Found IOS 2: revision: 0x202.
Found IOS 9: revision: 0x40a.
Found IOS 4: revision: 0xff00.
launching IOS 58 for the installer...

IOS launched...

IOS versions: Installer: 58, HBC: 58
starting preparations

device id: NG0242c0d3
Launching BootMii/IOS
Waiting for mini to load ...
Mini version: 1.3
NAND minpage: 0x200
set NAND minpage to 0x40
Calling boot2_run(1, 58)
Waiting for boot2 to load ...
Waiting for IOS ...
IOS loaded: IOS58 v24.32
IPC started (662)
boot2_parse_blocks: examining existing boot2 layout
boot2 block 0:
00000000  00 00 00 20 00 00 0f 00 00 00 0a 00 00 00 02 a4  ... ............
00000010  00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000020  00 01 00 00 b3 ad b3 22 6b 3c 3d ff 1b 4b 40 77  ......."k<=..K@w
00000030  16 ff 4f 7a d7 64 86 c8 95 ac 56 2d 21 f1 06 01  ..Oz.d....V-!...
00000040  d4 f6 64 28 19 1c 07 76 8f df 1a e2 ce 7b 27 c9  ..d(...v.....{'.
00000050  0f bc 0a d0 31 25 78 ec 07 79 b6 57 d4 37 24 13  ....1%x..y.W.7$.
00000060  a7 f8 6f 0c 14 c0 ef 6e 09 41 ed 2b 05 ec 39 57  ..o....n.A.+..9W
00000070  36 07 89 00 4a 87 8d 2e 9d f8 c7 a5 a9 f8 ca b3  6...J...........
offset 0xE00:
00000000  00 00 00 00 52 6f 6f 74 2d 43 41 30 30 30 30 30  ....Root-CA00000
00000010  30 30 31 2d 43 50 30 30 30 30 30 30 30 34 00 00  001-CP00000004..
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04  ................
00000050  00 00 00 01 00 00 00 01 00 00 00 01 00 01 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000a0  00 04 00 01 00 00 00 00 00 00 00 00 00 00 00 01  ................
000000b0  00 00 00 00 00 02 7b e8 eb fc 36 20 0d db 3e 32  ......{...6 ..>2
000000c0  8d a1 c5 2b 23 3d fc 8c af 60 b6 71 96 c5 8c f0  ...+#=...`.q....
000000d0  09 c5 18 44 05 d8 5d e8 d5 1e 45 8f 1e 36 a8 fb  ...D..]...E..6..
000000e0  99 f5 3f 69 13 8f 11 c0 6c 76 0b f5 ba be 00 00  ..?i....lv......
000000f0  00 00 00 50 13 8f 11 a0 13 8f 24 40 ba be 00 02  ...P......$@....
boot2 block 1:
00000000  eb 47 d9 6c 86 fe b9 4f 91 19 2f 13 1b 7f 56 ef  .G.l...O../...V.
00000010  94 d8 9e 53 4a 14 53 3c a9 a8 d7 42 44 c5 4a b8  ...SJ.S<...BD.J.
00000020  8a 21 0b 11 49 3d 78 e3 df 63 61 e1 fb 2b 81 13  .!..I=x..ca..+..
00000030  53 23 eb c6 b3 f6 1a 4a 5c f4 9c b8 69 cd d7 f6  S#.....J\...i...
00000040  b8 c8 15 ec 01 2f 4e 2d e3 30 83 97 f7 b0 d0 64  ...../N-.0.....d
00000050  29 dd 22 8e 25 17 a2 a7 e9 37 70 67 02 c2 ea 4a  ).".%....7pg...J
00000060  eb 18 97 31 04 ce c4 10 bc bb 3f 8c 5d 53 c7 5c  ...1......?.]S.\
00000070  a1 c4 db af aa ce 10 72 c1 f1 17 bd eb 9f 39 b9  .......r......9.
boot2 block 2:
00000000  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000010  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000020  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000030  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000040  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000050  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
boot2 block 3:
00000000  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000010  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000020  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000030  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000040  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000050  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
boot2 block 4:
00000000  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000010  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000020  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000030  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000040  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000050  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
00000070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
boot2 block 5:
00000000  eb 47 d9 6c 86 fe b9 4f 91 19 2f 13 1b 7f 56 ef  .G.l...O../...V.
00000010  94 d8 9e 53 4a 14 53 3c a9 a8 d7 42 44 c5 4a b8  ...SJ.S<...BD.J.
00000020  8a 21 0b 11 49 3d 78 e3 df 63 61 e1 fb 2b 81 13  .!..I=x..ca..+..
00000030  53 23 eb c6 b3 f6 1a 4a 5c f4 9c b8 69 cd d7 f6  S#.....J\...i...
00000040  b8 c8 15 ec 01 2f 4e 2d e3 30 83 97 f7 b0 d0 64  ...../N-.0.....d
00000050  29 dd 22 8e 25 17 a2 a7 e9 37 70 67 02 c2 ea 4a  ).".%....7pg...J
00000060  eb 18 97 31 04 ce c4 10 bc bb 3f 8c 5d 53 c7 5c  ...1......?.]S.\
00000070  a1 c4 db af aa ce 10 72 c1 f1 17 bd eb 9f 39 b9  .......r......9.
boot2 block 6:
00000000  00 00 00 20 00 00 0f 00 00 00 0a 00 00 00 02 a4  ... ............
00000010  00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000020  00 01 00 00 b3 ad b3 22 6b 3c 3d ff 1b 4b 40 77  ......."k<=..K@w
00000030  16 ff 4f 7a d7 64 86 c8 95 ac 56 2d 21 f1 06 01  ..Oz.d....V-!...
00000040  d4 f6 64 28 19 1c 07 76 8f df 1a e2 ce 7b 27 c9  ..d(...v.....{'.
00000050  0f bc 0a d0 31 25 78 ec 07 79 b6 57 d4 37 24 13  ....1%x..y.W.7$.
00000060  a7 f8 6f 0c 14 c0 ef 6e 09 41 ed 2b 05 ec 39 57  ..o....n.A.+..9W
00000070  36 07 89 00 4a 87 8d 2e 9d f8 c7 a5 a9 f8 ca b3  6...J...........
offset 0xE00:
00000000  00 00 00 00 52 6f 6f 74 2d 43 41 30 30 30 30 30  ....Root-CA00000
00000010  30 30 31 2d 43 50 30 30 30 30 30 30 30 34 00 00  001-CP00000004..
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04  ................
00000050  00 00 00 01 00 00 00 01 00 00 00 01 00 01 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000a0  00 04 00 01 00 00 00 00 00 00 00 00 00 00 00 01  ................
000000b0  00 00 00 00 00 02 7b e8 eb fc 36 20 0d db 3e 32  ......{...6 ..>2
000000c0  8d a1 c5 2b 23 3d fc 8c af 60 b6 71 96 c5 8c f0  ...+#=...`.q....
000000d0  09 c5 18 44 05 d8 5d e8 d5 1e 45 8f 1e 36 a8 fb  ...D..]...E..6..
000000e0  99 f5 3f 69 13 8f 11 c0 6c 76 0b f5 ba be 00 00  ..?i....lv......
000000f0  00 00 00 50 13 8f 11 a0 13 8f 24 40 ba be 00 02  ...P......$@....
parsing last generation bootmap
found valid boot2 blockmap at block 1 (pos 0x627c0), submap 0, generation 4
00000000  26 f2 9a 40 1e e6 84 cf 00 00 00 04 01 00 00 00  &..@............
00000010  00 00 00 00 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000020  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000030  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000040  01 01 01 01 01 01 01 01 01 01 01 01 26 f2 9a 40  ............&..@
00000050  1e e6 84 cf 00 00 00 04 01 00 00 00 00 00 00 00  ................
00000060  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000070  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
found valid boot2 blockmap at block 5 (pos 0xe67c0), submap 0, generation 5
00000000  26 f2 9a 40 1e e6 84 cf 00 00 00 05 01 00 00 00  &..@............
00000010  00 00 00 00 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000020  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000030  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000040  01 01 01 01 01 01 01 01 01 01 01 01 26 f2 9a 40  ............&..@
00000050  1e e6 84 cf 00 00 00 05 01 00 00 00 00 00 00 00  ................
00000060  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
00000070  01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01  ................
parse_blocks: found 2 valid blockmaps
found 2 valid blockmaps
using generation 5
boot2 blocks: 00 01 02 03 04 05 06
boot2bin @5,0 (blocks=0,1 - bootmii=0)
bootmii@-1,-1
boot2 blocks: 06 05 04 03 02 01 00
boot2bin @5,1 (blocks=6,5 - bootmii=0)
boot2 block layout: 2 2 1 1 1 0 0
Assembling boot2 in RAM
copyright size = 34
copyright text = 'Copyright 2008-2010 Team Twiizers.'
tmd ends at 0x80830f2c, data starts at 0x80830f60
bootmii version  = '1.3'
Ok for boot2 install
preparations done!

The test results are in:

  Using IOS versions:      Installer: 58, HBC: 58

  The Homebrew Channel:    Can be installed
  BootMii:                 Can be installed
...................................................A BootMii install requires a SD card.

Runtime files will be written, these are required to
properly boot BootMii.

Mounting SD card...
Creating directory '/bootmii'...
Writing '/bootmii/armboot.bin'...
Writing '/bootmii/ppcboot.elf'...
Writing config file...

Done.

Removing title 0x00000001000000fe...
Deleting 1 ticket
.....A BootMii install requires a SD card.

Runtime files will be written, these are required to
properly boot BootMii.

Mounting SD card...
Creating directory '/bootmii'...
Writing '/bootmii/armboot.bin'...
Writing '/bootmii/ppcboot.elf'...
Writing config file...
Skipped, file already exists

Done.

Removing title 0x00000001000000fe...
Deleting 1 ticket
.....A BootMii install requires a SD card.

Runtime files will be written, these are required to
properly boot BootMii.

Mounting SD card...
Creating directory '/bootmii'...
Writing '/bootmii/armboot.bin'...
Writing '/bootmii/ppcboot.elf'...
Writing config file...
Skipped, file already exists

Done.

A BootMii install requires a SD card.

Runtime files will be written, these are required to
properly boot BootMii.

Mounting SD card...
Creating directory '/bootmii'...
Writing '/bootmii/armboot.bin'...
Writing '/bootmii/ppcboot.elf'...
Writing config file...
Skipped, file already exists

Done.

Removing title 0x00000001000000fe...
Deleting 1 ticket
.....A BootMii install requires a SD card.

Runtime files will be written, these are required to
properly boot BootMii.

Mounting SD card...
Creating directory '/bootmii'...
Writing '/bootmii/armboot.bin'...
Writing '/bootmii/ppcboot.elf'...
Writing config file...
Skipped, file already exists

Done.

A BootMii install requires a SD card.

Runtime files will be written, these are required to
properly boot BootMii.

Mounting SD card...
Creating directory '/bootmii'...
Writing '/bootmii/armboot.bin'...
Writing '/bootmii/ppcboot.elf'...
Writing config file...
Skipped, file already exists

Done.

Removing title 0x00000001000000fe...
Deleting 1 ticket
.....


Hope you can help me

[dcx2]

If you can't auto-boot into HBC, then it becomes cumbersome to load Gecko OS.  It would be nice if there was a guide on how to make a Gecko OS Channel on the System Menu.

[111]

I don't know which version of Homebrew I have. Is there anyway to check which I do?

If you are referring to the Homebrew Channel, then you first need to load the Homebrew Channel, and press "HOME" on the Wii Remote.  Look on either the top left or right of the screen (at the moment, I can't remember which side shows the version of the Homebrew Channel).  Homebrew Channel 1.0.7 and above allows you to use the HW_AHBPROT feature, if that is what you are looking for.  You stated on another post that you are on System Menu 4.3, and if that is so, then you probably already have version 1.0.7 or higher of the Homebrew Channel.

Here is the installer log:

[Installer.log]


Hope you can help me

Looking at your installer.log, it looks like you have System Menu 4.3, with no custom IOS files installer (other than IOS254, which is actually BootMii as IOS).  Sorry to repeat myself, but are you sure that you are using IOS36v3351?  That is the version that the Simple IOS Patcher seems to use from pictures that I have seen.  Have you tried to run the Simple IOS Patcher online (if your Wii can connect to the internet)?

If you still can't get it to work, then perhaps you may want to look at this post to try a different program...

http://wiird.l0nk.org/forum/index.php/topic,6770.msg58426.html#msg58426

Also, if one of those programs work for you, I would greatly appreciate step-by-step instructions to add to this guide (although you don't have to if you don't feel like it).  I don't have the ability to test these programs.

[justin28]

Yeap on am version 2 of 4.3e the only reasoe i update is to access the shopping channel is their a simple program that i can use that will do that for me.

[justin28]

Woo ho got channel rebooter option back in geck i used

http://mmm4wii.posterous.com/mmm-multi-mod-manager-v134.

I used the option in this program to get it direct from the Nintendo servers

[benny3t3]

Actually, there is simply a wad out there in the world of google that is a Gecko OS channel to install

I'll look for it. Just install it with any wad installer, (as always, there are risks, but they are not high)

Link Removed

I think this is the same one I use, everything works fine.

[111]

Sorry, but I removed that link, since I don't know if it is a legal WAD file or not.  Do you know where the file originated from, and/or how it was created?  If it was created with a legal homebrew program, then I can add it back on.

I suppose if someone can create a Gecko 1.9.3.1 channel with something like CustomizeMii, I could then add a section about it on this guide.  However, I am not familiar with creating banner images for the Wii, and since I do not want to risk a banner brick for someone, I would not be able to help you with the creation of the channel.

[benny3t3]

I have a better link, this is from the original site.

http://www.google.com/search?q=ugothacked+gecko+os+channel&rls=com.microsoft:en-us&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1&safe=active

It is the only recent gecko os channel I know of, (I think it is more recent than the other one anyways.

and I have used this specific channel on my Wii without problem.

[Andmo25]

Would patching ios36 allow cheats to be applied to wii play?

[Skyground95]

Would patching ios36 allow cheats to be applied to wii play?

You have the option to use cheats for wii games from the start.
But if you patch IOS36, it would allow cheats for Virtual console & Wiiware (thus a rebooter option). ;)

[Andmo25]

Would patching ios36 allow cheats to be applied to wii play?

You have the option to use cheats for wii games from the start.
But if you patch IOS36, it would allow cheats for Virtual console & Wiiware (thus a rebooter option). ;)

Thanks I know that, but I meant that wii play would work because I haven't been able to use cheats for it since 3.x and patching ios36 is for 3.3+. If that won't work then what will fix it?

[111]

Would patching ios36 allow cheats to be applied to wii play?

You have the option to use cheats for wii games from the start.
But if you patch IOS36, it would allow cheats for Virtual console & Wiiware (thus a rebooter option). ;)

Thanks I know that, but I meant that wii play would work because I haven't been able to use cheats for it since 3.x and patching ios36 is for 3.3+. If that won't work then what will fix it?

Patching of IOS36 should not be required to get Wii Play to work.  If it doesn't work, then you might be doing something wrong.  Are you sure that you are using the correct region codes for the game?  Also, if you are using the correct region codes, what codes are you trying to apply to the game?

[Andmo25]

Patching of IOS36 should not be required to get Wii Play to work.  If it doesn't work, then you might be doing something wrong.  Are you sure that you are using the correct region codes for the game?  Also, if you are using the correct region codes, what codes are you trying to apply to the game?

Yes I'm sure that I'm using the right region I'll try the other regions just in case. I tried going one by one so I don't think thats the problem. I was trying to use the NTCS-US [RHAE01] with these codes.

Infinite Lifes [James0x57]
04254590 38800057

Unlimited Tank Fire [James0x57]
04245CD0 38000000

Missiles Are Fast [James0x57]
04245D24 C03D0018

Can lay 16 Mines [James0x57]
04245BC4 38A00010