Tuesday, 26 January 2010

How to Hack Your Nintendo Wii to Play Burnt Games (homebrew)

This guide will show you how to:
  1. Install the Homebrew channel on your Wii
  2. Hack your IOS packages
  3. Load & Play Burnt discs
You will need:
  1. Nintedo wii
  2. SD card
  3. Computer with SD card reader
  4. Internet connection for wii and computer
  5. DVD burner (optional - only to burn games)....and if so, blank DVDs.

Preface -- Read This!!!

The Wii is a beautiful little piece of hardware, and with a little modification, is capable of doing much, much more than when purchased off the shelf.  Some important points before we begin:

1- Read every part of this guide.  Each point is important.

2 - I did not invent this method of hacking the wii.  There are numerous guides online; some very similar to the text below.  This guide is my modified version of ShadowSonic2's Softmod for ANY 4.2 Wii! guide found on www.wiihacks.com.  Full credit goes to ShadowSonic2 for many of the steps... I've just made it more user friendly.

3 - This guide works for consoles on system 4.2.  It is not recommended that you upgrade your console if currently on a system lower than 4.2.  In that case, see Dogegg's guide for systems 3.1 to 4.1 (untested).  If you are unsure what system your console is running, see this short guide on How to Determine Your Wii's System.

4 - Illegally gained wii games are illegal.  I do not condone the use of this guide for such activity.  Downloading wii games that you have not purchased may be illegal in your country.  However, it is perfectly legal to burn a copy of your legally purchased games.

5 - I have tested this guide on my wii, running system 4.2u, with no hardware mods, serial no.LU5163xxxx  and received positive results.

6 - This is a softmod, meaning that there is no need to open up your wii and change any hardware.  It is relatively safe and shouldn't void your warranty.

I AM NOT RESPONSIBLE FOR ANY DAMAGE CAUSED TO YOUR CONSOLE.  ATTEMPTING THESE MODIFICATIONS COULD TURN YOUR WII INTO A BRICK!


Step 1: Install the Homebrew Channel

1a - Get an SD card and a computer that can read it.  MMC cards will not work and neither will USB keys, but a MicroSD + adapter will.  Format the SD card to FAT32 or FAT/FAT16 via the Windows menu (right-click) or by using the free SD Formatter tool.

1b - Download this archive (password is justplainobvious) and unpack using either WinRAR (free trial) or 7Zip (free to keep).  Copy the entire contents of the archvie to your newly formatted SD card.  The root of the SD card should look like:

X:\apps\
X:\00000001
X:\wad
X:\private\
X:\boot.elf
X:\IOS38-64-v3610.wad


1c - Remove all wii discs, gamecube controllers, and other memory cards.

1d - Power on the wii and in the main menu, click the SD card icon on the lower left-hand corner.


1e - Insert the SD card into the wii.  Accept the loading of boot.dol/elf from the card (if the pop-up doesn't appear, you may need to navigate load boot.dol/elf manually via Data Management > Channels > SD Card).



1f - Accept the warning, and proceed to the installer options (Note: it may take some time for the hackmii installer to continue....be patient, it's working).


1g - After continuing, you will have the option of installing 3 packages: The Homebrew Channel, DVDX and BootMii.  You must install the first two, and may need to install BootMii (many guides recommend installing BootMii, but I never did and everything worked for me).  After these installs are finished, you will see a new channel in your main menu: The Homebrew Channel.   This channel will allow you to launch homemade and internet-downloaded applications, which will launch from the \apps\ folder on a USB key or SD card.

1h -  As an aside, you can get applications for the Homebrew Channel on the web or by using the homebrew browser (password: justplainobvious).  If you're using the browser, try both downloads.  v0.3.3 worked fine on both a USB key and an SD card but v0.2.3 only worked from the SD card.  NOTE THAT ANY APPLICATIONS YOU LAUNCH VIA HOMEBREW CHANNEL MAY BE MALICIOUS!)


Step 2: Hack Your IOS Packages


2a - Ensure that your SD card is still in the wii.  From the wii main menu, select the Homebrew Channel and open the DOP-IOS MOD application.


At the welcome screen, press A on the wii remote to continue.... on the next screen press down and then A to select "Install an IOS that accepts fakesigning."  Load IOS36 (press A) and on the next menu select "Downgrade to IOS 15."  When asked where to get the files from (SD Card, etc.) always select "Download from NUS."  (Note: you will need a working internet connection to the wii in order to do this.  If it doesn't work, make sure your internet works by launching the Internet Channel or the Homebrew browser.)  After finishing the install (with no errors) exit to the Homebrew Channel main menu.



2b - Run DOP-IOS MOD again:
  • Install an IOS that accepts fake signing
  • Load IOS15 by pressing the left arrow
  • Choose "IOS36 menu"
  • Install the patched IOS36 with the following configuration:

    • Install IOS to slot (36)
    • Hash Check (trucha):  Yes
    • ED_Identify:    Yes
    • NAND Permissions:   Yes
  • Press A to install, and choose "Download from NUS"
  • Exit to Homebrew Channel main menu

2c - Run DOP-IOS MOD again:
  • Install an IOS that accepts fake signing
  • Press B for "No IOS Reload"
  • Select "Restore IOS15"
  • Keep selecting "Download from NUS"
  • Once finished, exit to the Homebrew Channel main menu
2d - From the Homebrew Channel, run "Any Title Deleter DB."  You may get some errors on start, but that's fine... just press A.  Press the RIGHT button to get to the Titles menu and select "System Titles."

2e - Navigate to IOS222 and press A to delete.  Once deleted, do the same thing (i.e. delete) for IOS223, IOS249, and IOS250.  Press HOME to exit to the Homebrew Channel main menu.


2f - From the Homebrew Channel, run cIOS38-rev14 Installer.  You'll hear some rockin' music...but don't let that distract you from the task at hand!  Navigate to IOS36 by pressing the LEFT button.  Press A and select "Network Install."  (you may be able to do a WAD install from the SD card if you don't have a network connection....but I haven't tried.  Once installed, exit to the Homebrew Channel.



2g - Run DOP-IOS MOD from the Homebrew Channel.  This time, don't select the fakesigning... Load IOS36 (or IOS249 may work), press A to continue, and select the "IOS" option in the menu. Use the RIGHT button to navigate to IOS53 and Press A to dop (say Yes to Sig Hash Check (trucha bug)).  Repeat procedure for IOS55.  Once both have been done, exit to Homebrew Channel.

2h - From the Homebrew Channel, run WAD Manager (there may not be any image for this application).  Press A to agree, and A again to load IOS 249.  Navigate to the WAD folder (it's probably already there) and select IOS60patched.wad.  Ensure that the action is set to INSTALL,  NOT UNINSTALL, and go for it.  Once done, press HOME to exit to the Homebrew Channel.  Repeat for IOS70patched.wad.


2i - From the Homebrew Channel, run WAD Manager.  Use the IOS 249 and SD Card default settings, and browse for cIOS202[38+60].wad.  Press A to install, and repeat for cIOS222[38].wad and cIOS[38+37].wad

2j - Go to this site and copy the code for your box under the Ready-Made Hack.inis.  In my case, it is USA 4.2 (below). Copy this code (or your code from the site) to notepad, and save as "hacks.ini" on the root folder of your SD Card.
[Disable HAXX,DVDX,RZDx Checks]
version=481
offset=0x813345A0
value=0x60000000
[Block Disc Updates]
version=481
offset=0x8137F5BC,0x8137F5C0,0x8137F564,0x8137F568,0x8137F4BC,0x8137F4C0
value=0x60000000,0x60000000,0x60000000,0x60000000,0x60000000,0x60000000
[Block Online Updates]
version=481
offset=0x8168FDB0
value=0x6E756C6C
[Remove NoCopy Save File Protection]
version=481
offset=0x813C55EC,0x813C55F0,0x8134E260,0x815C2624,0x81353F5C,0x8134E270,0x8134E274,0x8134E278,0x8134E27C
value=0x7C000000,0x4182001C,0x7C000000,0x38600001,0x3BE00000,0x801C0024,0x5400003C,0x901C0024,0x48000018
[Move Disc Channel]
version=481
offset=0x813AFC00
value=0x60000000
[No System Menu Background Music]
version=481
offset=0x8136B224
value=0x4E800020
[No System Menu Sounds at all]
version=481
offset=0x8136B1F8
value=0x4E800020
[No System Menu Sounds (Channel BGM)]
version=481
offset=0x8136B270
value=0x4E800020
[Recovery Mode (D-Pad Up 4th GC)]
version=481
offset=0x8137ACCC,0x81379900
value=0x2C000008,0x60000000
[Force Standard Recovery Mode]
version=481
offset=0x8137ACB4
value=0x48000020
[Remove Diagnostic Disc Check]
version=481
offset=0x81379900
value=0x60000000
[Auto-Press A at Health Screen]
version=481
offset=0x813BD524
value=0x48000034
[Replace Health Screen with Backmenu]
version=481
offset=0x81656FF4
value=0x81409C9C
[Force Disc Games to run under IOS249]
version=481
offset=0x8137BD7C,0x8137BD80
value=0x3B200001,0x3B0000F9
[Region Free Wii Games]
version=481
offset=0x8137DBE8,0x8137DBC8,0x8137D904,0x8137FC84,0x8137E43C
value=0x4800001C,0x38000001,0x38000001,0x38600001,0x60000000
[Region Free GC Games (No VM Patch)]
version=481
offset=0x8137D90C,0x8137D910
value=0x900DA5D8,0x38000032
[Region Free Channels]
version=481
offset=0x8152DA88,0x81530F34,0x8152DF70,0x813B68AC
value=0x60000000,0x4E800020,0x38000001,0x48000028
[Lock out System Menu with Black Screen]
version=481
offset=0x8137ACDC
value=0x60000000

2k - From the Homebrew Channel, run Priiloader v0.3 or v0.2 (it might not have an launcher image in the menu either).    Press + to install.  Theoretically, the wii should reboot into Priiloader after this install (I received an error during this install process and, after waiting a minute or two for good measure, just hard rebooted my wii and continued to Step 3).  However, if this worked for you:
  • Priiloader should load automatically after the installation
  • Go to System Menu Hacks and enable "Skip Disc update Checking" and any other desired hacks
  • Click "Save Settings" and press B to return to the main menu
  • Go to Settings and set Autoboot: System Menu
  • Click "Save Settings" and press B to return to the main menu

Step 3: Load & Play Burnt Discs

3a - Now that the wii can recognise the discs, you need some software to actually load them. From the Homebrew Channel, load the WAD Manager.  Navigate to Neogamma_r8b7.wad and press A to install the package.  Make sure you give it time to load, with no errors.  Do the same for USB_Loader_GX_r815.wad.  Neogamma will load burnt discs and USB Loader will load digital files (discs via a USB harddrive). (Note: Actually, NeoGamma will do both these and more and I now use it exclusively)

3b - You are now set up to play burnt discs.  Simply insert the disc into the wii and launch Neogamma from the Homebrew Channel.  You should be able to play both NTSC and PAL discs from any wii region.... however, I haven't tried any PAL discs yet (my wii is NTSC).


3c - For more discs, you can copy your wii games via your optical DVD drive on your computer, or can download copies from a variety of websites (e.g. www.wiiiso.com).  A full iso file should be exactly 4.37 GB (4,699,979,776 bytes), however, a download might be archived, thereby smaller.  Once downloaded, simply burn the iso file using an application like ImgBurn (free).  Note: most of the guides I've read mandate the use of super high quality DVD-Rs, burned at a max rate of 4x.  However, the first disc I tried was an inexpensive DVD+R, burned at max speed and it worked fine.

That's it -- enjoy!

3 comments:

Anonymous said...

they upgraded Homebrew now. but it will auto downloade after the install

divX h8er said...

Sweet!

Anonymous said...

I have a virgin 4.2u and downloaded the part 1 and part 2 but i dont see the file 0000001. I installed the homebrew and dvdx and skipped bootmi but when i get to download from nus it keeps coming up downgrade failed.... It makes the network connection and loads certs and ticket but downgrade fails

  © Blogger template 'Isolation' by Ourblogtemplates.com 2008

Back to TOP