[TUTORIAL] HACK Wii 3.0E to 4.1E

Post by **narutopowaa** » Thu 22 Apr 2010 12:42

thanks for this good complete tuto

Post by **gugullaume02** » Fri 23 Apr 2010 07:37

Post by **keys83** » Fri 23 Apr 2010 08:11

THANKS FOR EVERYTHING

Post by **gege62** » Fri 23 Apr 2010 11:07

superb tuto thanks a lot!!!

Post by **gros nul** » Fri 23 Apr 2010 12:25

Thank you so much for all your hard work ^^

Post by **lccorsica** » Fri 23 Apr 2010 13:09

thanks a lot

Post by **mattt6392** » Fri 23 Apr 2010 16:29

Thanks!

Post by **popol001** » Fri 23 Apr 2010 23:12

Awesome
A big thanks

Post by **roux12** » Sat 24 Apr 2010 09:11

cool your topic^^

Post by **jeremy.dupont61** » Sat 24 Apr 2010 09:33

thanks

Post by **jpjpjpjpjp** » Sat 24 Apr 2010 12:18

thanks for this TUTO

Post by **finou76** » Sat 24 Apr 2010 13:55

thanks

Post by **jetest** » Sat 24 Apr 2010 17:27

awesome

Post by **chomsky** » Sun 25 Apr 2010 04:35

thanks

Post by **phnom77** » Sun 25 Apr 2010 07:10

darkscad wrote: [align=center]This Tuto works both for a black wii 4.1E and for a white one.[/align][/color]

Disclaimer:
Warning: Everything you do can be dangerous for your WII.
Neither me nor the forum administrator nor anyone from the TGAMES forum
will be responsible for what you do.
To be done if you don't have 2 left hands but a brain that works!!!

HACK WII 4.1
I would recommend staying on 4.1E (without Downgrade) and doing simple operations.
upgrading to 4.2 doesn't bring anything more than a shop channel update,
(tuto to get it on the forum)
and some ios stubs !(empty) that you'll need to get rid of...
So the way to hack it involves more steps, so it's more dangerous...

SD Preparation

1- Starting the HACK
Spoiler
Format your card (minimum 1GB recommended) as FAT!
avoid SDHC ones.
Download the 4.1e pack (write a message to unlock the message)
Complete HACK WII 4.1E v.4 pack
Hidden message JDSKKLQSJLK

[align=center]Installing the Homebrew Channel[/align]

Spoiler
Now that you have properly prepared your SD

Turn on your wii, go to [options] => [Data Management] => [Channels] => [sd card]
Image unavailable (removed by its host)

You will get this image, confirm with A the YES option
Image unavailable (removed by its host)

Confirm with "1" on the wii remote.

you will have 3 choices:
- Install homebrew channel
- Install DVDX
- Install BOOTMII in BOOT2 as in the image
or in IOS (in that case the line will be purple)

Image unavailable (removed by its host)
Install all 3 choices.
Press [continue] => [install the homebrew channel] => [yes,continue] => [continue]
Do the same with DVDX.
And especially Bootmii according to the offered choice.(boot2 or ios)
Above all don't forget to create the bootmii files on the SD card.

External content (video or audio) hidden: it sets its own cookies.
PS: it's useless to install Bootmii in ios if you installed it in boot2 as in the video.

Tuto by webs modified by me

[align=center]BOOTMII ?[/align]
[align=center]Nand backup[/align]
Important Warning
Spoiler
Now we're going to perform a crucial step, to protect against bad surprises.(brick)
If you're at this step it means you have installed Bootmii in boot2 or in ios.
We're going to make a DUMP (backup) of the Nand together.

What is the NAND??
It's the wii's internal memory, it contains all your wii's information,
such as your game saves, VC (virtual console) games and those from Wiiware as well as all the IOS or Cios built into the system.
As an image, you could compare the nand backup to a TIMECAPSULE created at a given "T" moment.
In case of a problem (brick), we reinject the Nand via bootmii and we find ourselves back at that "T" moment.
So the saves and other data... will be those from the moment of THE BACKUP.

For that check Xav91's illustrated tuto
Making a Dump (backup) of your NAND of the console with Bootmii.

Important information
* Boot2 being impossible to install on the new Wiis... (white and black)
* Leave at least 528mb free minimum on the SD card.
* I would recommend a non-SDHC 1gb or 2gb max SD formatted in FAT to do the nand dump.
*SD cards compatible with BOOTMII

Spoiler

The wiimote isn't recognized in the BootMII menu
To navigate the BootMII menu using the front-panel buttons
- Power button to move (to the right)
- Reset button to confirm

Or with the Gamecube controller:
- Directional pad for movement.
- A to confirm.

To start go to this icon with POWER then confirm with RESET.

*NAND backup*
Confirm again on this icon with RESET.

You will get to this image.(the background should be green, if it's red you're in Restore mode)

You're now ready to perform the copy of the NAND.
Press the RESET button.

Copying the NAND to the SD (it's normal to find some Bad blocks)

Checking the NAND.

Check OK, press any button to exit.

Congrats you succeeded
Make a backup of the NAND file and of the Bootmii folder as well as the .key file
Keep these files carefully on your Computer.
They will come in handy if the WII bricks one day!
I recommend redoing a backup at the end of the tuto!
That way you'll have 2 Nands. (Before and After Hack!)

tuto by xav91

[align=center]TRUCHA BUG[/align][/color]

2 - Restoring the Trucha Bug
Downgrade with Trucha bug restorer 1.11
The wii needs to be connected to the internet.
Otherwise it's faster and safer for those who might have connection problems...
You need at the root of the SD the following files:
(available on the forum)
Warning, when patching ios 36 the third option (patch nand permission)
must be enabled in order to continue the tuto.

* IOS15-64-v257.wad
* IOS15-64-v523.wad
* IOS15-64-v266.wad
* IOS36-64-v3094.wad
* IOS36-64-v3351.wad

All the .wad files are available HERE

Spoiler
1. Launch Trucha Bug Restorer 1.11 mod with the homebrew channel.
2. Press B.
3. Wait then press 1.
4. Select "Downgrade IOS15".
5. Press A (getting IOS15 rev 523).
6. Press A (getting IOS15 rev 257).
7. Press A for step 1.
8. Press A for step 2.
9. Press A to exit.
10. Relaunch.
11. Select ios15 with left on the wiimote then press A.
12. Wait then press 1.
13. Select "IOS36 menu".
14. Set all the options to YES .

WARNING don't forget this step of the tuto...
Make sure you have checked all the options to YES with the directional cross of the wii remote.
Otherwise you won't be able to install cios 249.
And so continue the tuto!
15. Press A (getting rev 3351).
16. Press A to install (Installing.... done).
17. Press A to exit.
18. Relaunch.
19. Press A (IOS36 by default).
20. Wait then press 1.
21. Select "Restore IOS15".
22. Press A (getting IOS15 rev 523).
23. Press A to install (Installing.... done).
24. Press A to exit.
There you go you succeeded! Move on to the next step.

Tuto by Oops.
Another Tuto by xav91.

Waninkoko's Cios rev 17
*if you had already installed cios249 rev14 don't delete it, just do another installation,
the cios will be replaced automatically by rev17.(overwritten)

3- Installing Cios 249 rev 17
(mandatory for Wiiflow ... and many hacks...)
*rev 17 is compatible with Neogamma...

Installation without internet:
Place the IOS38-64-v3867.wad file at the root of your SD
using the wii remote's arrows set "Wad Installation" then A.
(.wad provided in the hackwii 4.1v4 pack)
then choose to install it withIOS36
Then confirm with "A", the installation starts... the wii's light turns on and a 'rock' melody plays!
at the end you'll get a [SUCCESS] message!
there you go you succeeded

Warning:
- The D3/D2nothing (new wii drive) makes IOS installation difficult. If your Wiimote freezes during the rev17 installation, it's because either ios15 or ios36 got badly installed. Start over from step 2-A.

WARNING
If you get this image...
it means you failed the Flash of your WII
Spoiler
Image unavailable (removed by its host)

Or that you need to stop the DRUGS!!
PS: thanks Shunite for this fun bit!

Cios Hermes

5 - Installing Cios 222, 202 and 223 from HERMES

- To play dvd videos on wii. (202)
- To play games that don't work with Cios 249. (222 and 223)

Use Hermes' Cios installer v4
Do the installation with IOS 249

Without internet: Hidden message
Extract the content of the 00000001 folder to the root of the SD.

Spoiler
Then launch the hermes installer: cIOS 222 installer via the Homebrew Channel.
Image unavailable (removed by its host)

Choose ios 249 for the cIOS installation.
Image unavailable (removed by its host)

You arrive in the cIOS 222, 223, 202 installation menu.
Image unavailable (removed by its host)
Confirm your choice with A.
Image unavailable (removed by its host)

* 222 in IOS38 merged with ios 37,
* 223 in IOS38,
* 202 in IOS38 merged with IOS60

Confirm the installation with the A button on the wiimote, the installation of the chosen cIOS starts and if all goes well you should get this result to finish "DONE".
Image unavailable (removed by its host)

Repeat the operation for each cIOS (222, 223, 202)
There you go, your cIOS are perfectly installed.

Tuto and files by barman47

Priiloader
*if you already have preloader you can update to priiloader rev81 fr
(thanks to Safirion for the translation)
Warning: no DVD IN THE WII and DISABLE all the system's hacks.ini.

5- Installing Priiloader rev81 + hacks.ini in FR
HACKS.INI ONLY FOR 4.1E
To avoid updates via DVD etc..
To install PRESS "+" on the wii remote.
To open the Priiloader menu press the "RESET" button and start the WII.
Spoiler
External content (video or audio) hidden: it sets its own cookies.
video by jiiwah...
*don't pay attention to the last FILES installation...
for the curious ones, it's installing a boot.dol forwarder so the wii boots directly to WIIFLOW.

What the Hacks mean in the 4.1E's hacks.ini file
Warning I recommend not enabling a hack without knowing what it corresponds to.
Spoiler
To finish restart on the priiloader by pressing POWER while holding RESET and go to system menu hacks:

[Replace the health warning with the menu]

[Disable the health warning]
*Replaces the initial health warning with a black screen.

[Avoid game updates]
* To avoid updates via DVD from the Wii channel.

[Disable background music]
*No music in the system menu.

[No system menu sound at all]
*??? I don't see the difference with the one above.

[Move the disc channel]
* Lets you move the Disc channel.

[No diagnostic disc check]

[Autoboot game (RIGHT on GC pad port 4)]
*launches a DVD boot when you press RIGHT on the GC pad on port 4.

[Auto disc boot when RIGHT pressed]

[Autoboot Game]
*avoid this.

[Auto disc boot]

[Disable channel region-SD card Menu]

[Disable Wii disc region]

[Disable Wii game region]
* Lets you launch import wii games directly from the disc channel.

[Disable GC game region]

[Disable channel region]

[Force disc region]
*avoid this
[Disable copy protection]

Do save settings then B.
:
your priiloader launches at wii startup? nothing too serious...
Spoiler
to fix that go to the "setting" menu
then set the options:
"Autoboot": to "system menu" as well as
"return to": to "system menu"
save. and exit!
To go back to the Priiloader afterwards,
Turn on the console while holding RESET pressed!!! there you go
There are other protections besides priiloader... such as startpatch Tuto by Tgames!
And another tuto by starpatch by Kyno.
But not knowing this software, I won't talk about it.
** priiloader and starpatch are incompatible with each other **

Shop Channel update
Spoiler
Get the files: pimpmywii 1.32
then install it on the SD card.
such as SD: apps/pimpmywii/boot.dol

WITH INTERNET: (already connected... makes sense)
launch the software via the Homebrews channel.
then set "test and fix the problems" and confirm with "A"
then confirm everything that's asked with "A",
leave everything at default!
at the end you'll be on 4.1E (still) but with all IOS up to date. (with no STUB at all)

WITHOUT INTERNET:
download the offline pimpmywii fullpack HERE (Created by Oops)
put all the .Wad files at the root of the SD.
SD: files.wad

Then set "test and fix the problems" and confirm with "A"
When asked to initialize the network confirm with "B"
then confirm everything that's asked with "A",
leave everything at default!
at the end you'll be on 4.1E (still) but with all IOS up to date. (with no STUB at all)

with the latest shop channel...

[align=center]DARKCORP*[/align]
*Ciospack is now called Darkcorp. (long live the dark )

IF YOU HAVE A CHIP = NO DARKCORP
What is it for?
darkcorp lets you launch backups (burned dvd) of your games directly from the disc channel as if it were an original.
Warning check your wii serial number and run the test to find out
if your wii drive is compatible.
*Where do I find the serial number?

If the drive is GC2-D3 avoid the installation because it could cause reading problems or other issues,
so recent black or white wii forget it!!!
If in doubt perform the TEST HERE
thanks to Jiiwah and Oops.

If the test is successful you can launch your Backups (burned games) directly from the disc channel thanks to DARKCORP.
for the installation a very very detailed tutorial by Baordeur.
DARKCORP

Advice

Spoiler
There you go, if you calmly follow this Tuto there will be no problem.
You'll be able to play original games,
make copies to a hard drive BUT only of original wii dvds...
If the drive is a new anti-copy GC2-D3 forget the Darkcorp
because that drive doesn't allow reading Backups (burned games) directly.
AND one last thing, keep your NAND safe, make a copy on your computer...

From now on, you can congratulate yourself!
You have finished hacking your wii.
Now you can breathe because the best is yet to come...

WARNING: My last piece of advice is Avoid any update to 4.2
For wiis connected to the internet:
(sometimes Nintendo sends you a message urging you to update your wii
via the internet, simply refuse and delete this message, just in case).
Also avoid any downgrade you wouldn't master,
Never Format otherwise Brick.
4.1 is currently the best wii system, the most complete to date... Everything works!
The 4.2 update exists to counter the Hack, so why downgrade / upgrade?
Back up your nand file at the root of your SD to your computer then delete it!
Do another dump of your NAND because your wii is hacked and functional.

[align=center]WIIFLOW[/align][/color]

But everyone's talking about wiiflow... but what is it?
A video to give you a taste...

Spoiler
External content (video or audio) hidden: it sets its own cookies.

WIIFLOW STARNIGHT

Created by Shunite... Oops... and Jiiwah of the forum!
I had great pleasure being a Tester on this theme!

Wiiflow tuto by Oops!
For OpenWiiflow it's here Tuto by Jiiwah!

Question:
If I understood correctly, no reading of non-original games is possible from the DVD drive,
but launching non-original games copied by a PC onto a Hard Drive is possible or not?

Yes, it's possible to transfer your " games.ISO " directly from the PC to a hard drive
with the software "WBFS Manager", thanks to this free software you can use everything needed to format and transfer your games onto a H.D.D.
However you will need a compatible hard drive.
I recommend getting a 2.5 hard drive (self-powered).

To understand how to use WBFS Manager perfectly,
Formatting your hard drive, Installing games etc...
Check out Pocchami's tutorials!!!
WBFS Manager 1 and WBFS Manager 2
with that you have no more excuses!

Bonus
[align=center]Forwarder Channel[/align]
Spoiler
Image unavailable (removed by its host) Your wii desktop is empty?
Fill it with the Wadmanager 1.4 software and .wad channels as Forwarders
(which use the files present on the SD card)

To use it create a "wad" folder at the root of the SD such as
SD: /wad/channelname.wad

and wadmanager's boot.dol such as
SD: /apps/wadmanager/boot.dol

Then launch the Homebrew Channel and launch the Wadmanager software.
To install a channel "+" on the remote then "A" to confirm.
Wait for the writing to finish... then "HOME" to go back to the Homebrew channel.

To delete a channel "-" on the remote then "A" to confirm.
Wait for the writing to finish... then "HOME" to go back to the Homebrew channel.
To cancel simply press B.
Baordeur's channel collection: here
Collection of usb loader Channels by Jiiwah
[align=center]Darkmenu 4.1 Theme[/align]
Spoiler
External content (video or audio) hidden: it sets its own cookies.
To get this result we're going to use the files already present on the memory card.
Otherwise I just uploaded a version 2 of hackwii 4.1e.

Warning it's recommended to have bootmii in boot2 to do this tuto,
because it's not without risk.

1- Launch the homebrew channel
2- Launch the homebrew mymenuify.
3- The software asks you for the file, it's located in the "csm" folder at the root of the card.
4- Press "A" to confirm.
5- Select the file BlackSYstemMenu.app* (file tested by myself)
6- Press "A" to confirm.
7- Then EXIT!
8- Once on the Homebrew channel press "HOME"
9- Then "power off the wii". (reloading the system menu leads to a brick)
10- Restart and admire the result....
11- And admire the result....

*This file is only for 4.1E
[align=center]ISO Forwarder[/align]

Spoiler
Image unavailable (removed by its host)

Would you like to launch the homebrew channel, a homebrew, a WiiWare
or a Virtual Console from your USB Loader?? (wiiflow or other...)

It's now possible!!

How does it work??
You need to inject the homebrew's dol (or a forwarder) into an ISO.

So here is a centralization of ISOs

Tuto by Jiiwah.

You succeeded, don't hesitate to make a DONATION to the Tgames forum
so this forum can keep going! HERE (SMS or PAYPAL)

A big thanks to Corenting for the spelling correction of my tuto.

There you go see ya ( if you succeeded with my tuto leave a little message! )
PS: I'll keep completing this Tuto to make it as complete as possible.
Oops, I used your files for the preloader! thanks