How to use WiiRdGUI

Knowing The WiiRdGUI Language
First you will learn the WiiRdGUI language. Learning it's language will make hacking a breeze. The wii has different memory region, but only 2 is used by games (and by cheat codes):

MEM1: Goes from 0x80000000 to 0x81800000
MEM2: Goes from 0x90000000 to 0x94000000

MEM2 is the graphics part of the game, and the top of MEM2 is not accessible (trying to read/write from it crashes the Wii). It might depend on the game, but it seems that you can only access freely the 0x90000000 to 0x93400000 area.

All words in yellow are courtesy of kenobi, Link, Nuke, and brikirch.

So what is that suppose to mean? It means MEM1 holds stuff like Ammo, Health, Jumping, Speed, etc. MEM2 holds stuff like what the player looks like, what color is everything, what size an object is, graphics, etc.. SOMETIMES, some games hold the Money and everything like that in MEM2. Automaticly when you open WiiRdGUI it will be on the MEM1 section. I advise you would keep it at that, and never touch it unless wanting to mess with graphics in some what way.


The Basics of the tab "Code Search"
With that said, we can get to what the buttons do, and learn what they mean. So let's start out with the first tab "Code Search".

Picture of the Tab "Code Search":


Description: This tab is basicly what it says, it searches code addresses. Code Addresses is basicly a address that shows where a certain item is located in memory. For example:

Pretend you are looking for the health bar. Your objective/goal with this tab is to find out where the health in the memory is located. It could be located in either MEM1 or MEM2. Most likely health will be located in MEM1, but sometimes you get those games that are coded different, and is located in MEM2 instead. So to find the actual health in the memory, you have to do something to make WiiRd figure out which address it is, whether it would be losing health or even gaining health. So this is what you would do;

1) Get to the point in the game where health is being used.
2) Start Search (Initial Dump)
Initial Dump means to dump the memory before actually doing something in the memory. (In this case, before you lose health, gain health.
3) After you have dumped the memory, go lose some health.
4) Search for values that are "Less Than"
5) Go back to the game and lose health again.
6) Search "Less Than" again.
7) If health is gained by pickups or something, pick one up, and search "Greater Than".
Repeat this until the number of results shown by WiiRd is reasonably small.
9) Test the result(s) until one effects health.

Now, your probably thinking, "What's searching for values "Less Than" and "Greater Than", or even how to do a dump!" Well, it's time to learn. You will REALLY want to remember this, because this is what you will be doing all the time. First you want to check what bits you have selected (either 8, 16, or 32). When you first open up WiiRd, it will always be at 8 until you change it. Most codes aren't made in the "Data Size" 8. For health, it's usually in 32 or 16, so select 32 first (located in the "Data Size" box). Then you will want to do your initial dump.

So how to do a initial dump is easy. First you want to make sure where it says "Value Type", it is clicked at "Unknown Value". Then all you have to do is push the big ass button "Start". This starts a search, and your game WILL freeze and making a annoying buzzing noise. At the top right corner it will say "Starting Dump" and will say "Dumping Block 1/24, 2/24, 3/24, 4/24, 5/24" until it goes all the way up to 24/24. By that time, the game will unfreeze, and millions of results will pop up. You won't see the results (because it's too many to be listed).

Well now that you have down your Initial Dump, and know what it is, you want to look at the box "Compare Type". You notice you will see "Less Than" and "Greater Than" buttons. This is what is used at step 4, 6, & 7. Basicly this tells WiiRd that the values of the health went down or up. Don't worry about those other buttons, they don't apply to this example.

Now what about testing the results? Well this is the easy part when it comes down to having about less than 20 results. You will notice, when your dumping the addresses and doing the Less Than, Greater Than thing, that you see addresses. Well when it gets down to 20 or less results, it's time to start "Poking" them (meaning test). If you haven't noticed already, there is a Poke Button below the "Save Search" and "Load Search" buttons. This "Poke Button" is used to test addresses that have came up. So how do you test an address/use this "Poke" button? Simple, you click on one of the results, and then you left-click the result and click "-> Poke". You notice the address appears in the Poke Box, so now you click "Poke" and see if it did anything, if not, it is probably a faulty, meaning it does nothing. You keep poking your results until your health is affected. If you didn't find it, I suggest changing the Data Size to 16 instead of 32. If that still doesn't work, try 8 (Probably won't work). If it doesn't work, go into MEM2 (Memory Range 90) and Search 32bit Data Size and repeat what I've said until you get a result.

How do you go into Range 90? Simple, just move your mouse over the "Memory Range" box, and click the Drop Down Bar and choose "90" instead of "80". You have now changed what Memory your going to be searching in. Easy huh?

Well now you have to make it into a code. You will need to use the tab Pointer Search (depending on the code/game) and the tab GCT Codes. So far you've learned how to start a Initial Dump, How to use the Compare Type Box, How to use the Data Size Box, how to use the Memory Range Box, and how to test a address. Now it's time to learn what the tab "Pointer Search" does, since we've covered the basics of the "Code Search" Tab.

[size=150]The Basics of the tab "Pointer Search"[/size]
Description: This tab is used for codes that are needed to work for different guns, worlds, levels, etc. and make it into only one code.

Picture of the tab "Pointer Search":

Will be finished later/still working on it.

How to Make a RAM Dump
Go to the tab "Pointer Search". You will see File 1, File 2, Dump, and Start! Click the DUMP button and your wii will freeze while WiiRdGUI is dumping the ram onto your computer. Once done, your wii will unfreeze. Go into your folder that has WiiRdGUI in it, and look for "dump180.bin". That is your RAM Dump and you can now upload it to Megaupload, etc. It only takes up 24MB on your computer, which isn't a lot.

So now you should know how to find Health, or in general have an idea on how to find the address, test it, and make it into a code.

THIS WILL BE FINISHED LATER!!!