PoC - Boot NeoGamma via Disc Channel

http://www.youtube.com/watch?feature...&v=6LzU8m4tOkk

This is achieved by using a priiloader hack to tell the disc channel to load... another channel instead of a disc. There are 2 versions I have made, one that loads a specified channel every time, and another that loads a different channel depending on whether you try to boot a WIi or GC disc.

4.1- Single Channel Priiloader Hack

4.1J:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=448 offset=0x816C0408,0x816C040C,0x816C0410,0x816C0414,0x816C0418,0x8137B4D0,0x8137B4D4,0x8137B520,0x8137B524,0x8137B570,0x8137B574,0x8137ADD4,0x8137B4C0 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48345635,0x48344F49

4.1U:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=449 offset=0x81690D40,0x81690D44,0x81690D48,0x81690D4C,0x81690D50,0x8137C01C,0x8137C020,0x8137C06C,0x8137C070,0x8137C0BC,0x8137C0C0,0x8137B920,0x8137C00C value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48315421,0x48314D35

4.1E:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=450 offset=0x81692BD8,0x81692BDC,0x81692BE0,0x81692BE4,0x81692BE8,0x8137C0C4,0x8137C0C8,0x8137C114,0x8137C118,0x8137C164,0x8137C168,0x8137B9C8,0x8137C0B4 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48317211,0x48316B25

4.1K:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=454 offset=0x81665440,0x81665444,0x81665448,0x8166544C,0x81665450,0x8137B3F8,0x8137B3FC,0x8137B448,0x8137B44C,0x8137B498,0x8137B49C,0x8137ACFC,0x8137B3E8 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482EA745,0x482EA059

4.2- Single Channel Priiloader Hack

4.2J:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=480 offset=0x816C13A8,0x816C13AC,0x816C13B0,0x816C13B4,0x816C13B8,0x8137B930,0x8137B934,0x8137B980,0x8137B984,0x8137B9D0,0x8137B9D4,0x8137B234,0x8137B920 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48346175,0x48345A89

4.2U:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=481 offset=0x81691CA0,0x81691CA4,0x81691CA8,0x81691CAC,0x81691CB0,0x8137C47C,0x8137C480,0x8137C4CC,0x8137C4D0,0x8137C51C,0x8137C520,0x8137BD80,0x8137C46C value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48315F21,0x48315835

4.2E:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=482 offset=0x81693B38,0x81693B3C,0x81693B40,0x81693B44,0x81693B48,0x8137C524,0x8137C528,0x8137C574,0x8137C578,0x8137C5C4,0x8137C5C8,0x8137BE28,0x8137C514 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48317D11,0x48317625

4.2K:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=486 offset=0x816662E0,0x816662E4,0x816662E8,0x816662EC,0x816662F0,0x8137B810,0x8137B814,0x8137B860,0x8137B864,0x8137B8B0,0x8137B8B4,0x8137B114,0x8137B800 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482EB1CD,0x482EAAE1

4.3- Single Channel Priiloader Hack

4.3J:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=512 offset=0x816C2F28,0x816C2F2C,0x816C2F30,0x816C2F34,0x816C2F38,0x8137BAC8,0x8137BACC,0x8137BB18,0x8137BB1C,0x8137BB68,0x8137BB6C,0x8137B3CC,0x8137BAB8 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48347B5D,0x48347471

4.3U:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=513 offset=0x81693820,0x81693824,0x81693828,0x8169382C,0x81693830,0x8137C614,0x8137C618,0x8137C664,0x8137C668,0x8137C6B4,0x8137C6B8,0x8137BF18,0x8137C604 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48317909,0x4831721D

4.3E:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=514 offset=0x816956B8,0x816956BC,0x816956C0,0x816956C4,0x816956C8,0x8137C6BC,0x8137C6C0,0x8137C70C,0x8137C710,0x8137C75C,0x8137C760,0x8137BFC0,0x8137C6AC value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x483196F9,0x4831900D

4.3K:

Code:

[Disc Channel -> NeoGamma! (HNCA)] version=518 offset=0x81667E80,0x81667E84,0x81667E88,0x81667E8C,0x81667E90,0x8137B9A8,0x8137B9AC,0x8137B9F8,0x8137B9FC,0x8137BA48,0x8137BA4C,0x8137B2AC,0x8137B998 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482ECBD5,0x482EC4E9

This one makes the disc channel boot a channel instead of the disc. By default, it boots title 00010008-484E4341 [Hidden Channel - TitleID HNCA] via the disc channel every time you try to boot a disc. In the video example, this channel contains an Autoboot NeoGamma app.

Dual Channel priiloader hack:

4.1 Dual Channel Priiloader Hack

4.1J:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=448 offset=0x816C0408,0x816C040C,0x816C0410,0x816C0414,0x816C0418,0x816C041C,0x816C0420,0x816C0424,0x816C0428,0x816C042C, 0x8137B4D0,0x8137B4D4,0x8137B520,0x8137B524,0x8137B570,0x8137B574,0x8137ADD4,0x8137B4C0 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48345635,0x48344F5D

4.1U:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=449 offset=0x81690D40,0x81690D44,0x81690D48,0x81690D4C,0x81690D50,0x81690D54,0x81690D58,0x81690D5C,0x81690D60,0x81690D64, 0x8137C01C,0x8137C020,0x8137C06C,0x8137C070,0x8137C0BC,0x8137C0C0,0x8137B920,0x8137C00C value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48315421,0x48314D49

4.1E:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=450 offset=0x81692BD8,0x81692BDC,0x81692BE0,0x81692BE4,0x81692BE8,0x81692BEC,0x81692BF0,0x81692BF4,0x81692BF8,0x81692BFC, 0x8137C0C4,0x8137C0C8,0x8137C114,0x8137C118,0x8137C164,0x8137C168,0x8137B9C8,0x8137C0B4 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48317211,0x48316B39

4.1K:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=454 offset=0x81665440,0x81665444,0x81665448,0x8166544C,0x81665450,0x81665454,0x81665458,0x8166545C,0x81665460,0x81665464, 0x8137B3F8,0x8137B3FC,0x8137B448,0x8137B44C,0x8137B498,0x8137B49C,0x8137ACFC,0x8137B3E8 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482EA745,0x482EA06D

4.2 Dual Channel Priiloader Hack

4.2J:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=480 offset=0x816C13A8,0x816C13AC,0x816C13B0,0x816C13B4,0x816C13B8,0x816C13BC,0x816C13C0,0x816C13C4,0x816C13C8,0x816C13CC, 0x8137B930,0x8137B934,0x8137B980,0x8137B984,0x8137B9D0,0x8137B9D4,0x8137B234,0x8137B920 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48346175,0x48345A9D

4.2U:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=481 offset=0x81691CA0,0x81691CA4,0x81691CA8,0x81691CAC,0x81691CB0,0x81691CB4,0x81691CB8,0x81691CBC,0x81691CC0,0x81691CC4, 0x8137C47C,0x8137C480,0x8137C4CC,0x8137C4D0,0x8137C51C,0x8137C520,0x8137BD80,0x8137C46C value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48315F21,0x48315849

4.2E:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=482 offset=0x81693B38,0x81693B3C,0x81693B40,0x81693B44,0x81693B48,0x81693B4C,0x81693B50,0x81693B54,0x81693B58,0x81693B5C, 0x8137C524,0x8137C528,0x8137C574,0x8137C578,0x8137C5C4,0x8137C5C8,0x8137BE28,0x8137C514 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48317D11,0x48317639

4.2K:

Code:

[Disc Channel: Wii -> HNCA GC -> HCLA] version=486 offset=0x816662E0,0x816662E4,0x816662E8,0x816662EC,0x816662F0,0x816662F4,0x816662F8,0x816662FC,0x81666300,0x81666304, 0x8137B810,0x8137B814,0x8137B860,0x8137B864,0x8137B8B0,0x8137B8B4,0x8137B114,0x8137B800 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020, 0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482EB1CD,0x482EAAF5

4.3- Dual Channel Priiloader Hack]
4.3J:
[CODE][Disc Channel: Wii -> HNCA GC -> HCLA]
version=512
offset=0x816C2F28,0x816C2F2C,0x816C2F30,0x816C2F34,0x816C2F38,0x816C2F3C,0x816C2F40,0x816C2F44,0x816C2F48,0x816C2F4C,
0x8137BAC8,0x8137BACC,0x8137BB18,0x8137BB1C,0x8137BB68,0x8137BB6C,0x8137B3CC,0x8137BAB8
value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020,
0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48347B5D,0x48347485[/CODE]

4.3U:
[CODE][Disc Channel: Wii -> HNCA GC -> HCLA]
version=513
offset=0x81693820,0x81693824,0x81693828,0x8169382C,0x81693830,0x81693834,0x81693838,0x8169383C,0x81693840,0x81693844,
0x8137C614,0x8137C618,0x8137C664,0x8137C668,0x8137C6B4,0x8137C6B8,0x8137BF18,0x8137C604
value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020,
0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48317909,0x48317231[/CODE]

4.3E:
[CODE][Disc Channel: Wii -> HNCA GC -> HCLA]
version=514
offset=0x816956B8,0x816956BC,0x816956C0,0x816956C4,0x816956C8,0x816956CC,0x816956D0,0x816956D4,0x816956D8,0x816956DC,
0x8137C6BC,0x8137C6C0,0x8137C70C,0x8137C710,0x8137C75C,0x8137C760,0x8137BFC0,0x8137C6AC
value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020,
0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x483196F9,0x48319021[/CODE]

4.3K:
[CODE][Disc Channel: Wii -> HNCA GC -> HCLA]
version=518
offset=0x81667E80,0x81667E84,0x81667E88,0x81667E8C,0x81667E90,0x81667E94,0x81667E98,0x81667E9c,0x81667EA0,0x81667EA4,
0x8137B9A8,0x8137B9AC,0x8137B9F8,0x8137B9FC,0x8137BA48,0x8137BA4C,0x8137B2AC,0x8137B998
value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x3F200001,0x3B390008,0x3F004843,0x3B184C41,0x4E800020,
0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482ECBD5,0x482EC4FD[/CODE][/SPOILER]

This one can boot 2 channels, one for Wii discs, and one for GC discs. By default, it boots title 00010008-484E4341 [Hidden Channel - TitleID HNCA] when you try to load a Wii disc, and title 00010008-48434C41 [Hidden title - TitleID HCLA] when you try to load a GC disc. In the video example, HNCA contains an AutoBoot NeoGamma, and HCLA contains CFG USB Loader MOD r12. This hack can be useful if you want to boot a different app for GC discs than for Wii discs.

[B]Third version - Single Channel, but Wii discs ONLY:[/B]

[SPOILER="4.1

4.1J:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=448 offset=0x816C0408,0x816C040C,0x816C0410,0x816C0414,0x816C0418,0x8137ADD4 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48345635

4.1U:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=449 offset=0x81690D40,0x81690D44,0x81690D48,0x81690D4C,0x81690D50,0x8137B920 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48315421

4.1E:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=450 offset=0x81692BD8,0x81692BDC,0x81692BE0,0x81692BE4,0x81692BE8,0x8137B9C8 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48317211

4.1K:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=454 offset=0x81665440,0x81665444,0x81665448,0x8166544C,0x81665450,0x8137ACFC value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x482EA745

4.2

4.2J:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=480 offset=0x816C13A8,0x816C13AC,0x816C13B0,0x816C13B4,0x816C13B8,0x8137B234 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48346175

4.2U:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=481 offset=0x81691CA0,0x81691CA4,0x81691CA8,0x81691CAC,0x81691CB0,0x8137BD80 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48315F21

4.2E:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=482 offset=0x81693B38,0x81693B3C,0x81693B40,0x81693B44,0x81693B48,0x8137BE28 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48317D11

4.2K:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=486 offset=0x816662E0,0x816662E4,0x816662E8,0x816662EC,0x816662F0,0x8137B114 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x482EB1CD

4.3

4.3J:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=512 offset=0x816C2F28,0x816C2F2C,0x816C2F30,0x816C2F34,0x816C2F38,0x8137B3CC value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48347B5D

4.3U:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=513 offset=0x81693820,0x81693824,0x81693828,0x8169382C,0x81693830,0x8137BF18 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x48317909

4.3E:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=514 offset=0x816956B8,0x816956BC,0x816956C0,0x816956C4,0x816956C8,0x8137BFC0 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x483196F9

4.3K:

Code:

[Disc Channel -> HNCA (Wii disc ONLY)] version=518 offset=0x81667E80,0x81667E84,0x81667E88,0x81667E8C,0x81667E90,0x8137B2AC value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x482ECBD5

This version boots a channel, but ONLY when you try to load a Wii disc. By default, it boots title 00010008-484E4341 [Hidden Channel - TitleID HNCA] ("NeoCORP"). GC discs are unaffected by this version of the hack, and just boot normally.

Fourth version - Single Channel, but GC discs ONLY:

[SPOILER="4.1"]
4.1J:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=448 offset=0x816C0408,0x816C040C,0x816C0410,0x816C0414,0x816C0418,0x8137B4D0,0x8137B4D4,0x8137B520,0x8137B524,0x8137B570,0x8137B574,0x8137B4C0 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48344F49

4.1U:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=449 offset=0x81690D40,0x81690D44,0x81690D48,0x81690D4C,0x81690D50,0x8137C01C,0x8137C020,0x8137C06C,0x8137C070,0x8137C0BC,0x8137C0C0,0x8137C00C value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48314D35

4.1E:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=450 offset=0x81692BD8,0x81692BDC,0x81692BE0,0x81692BE4,0x81692BE8,0x8137C0C4,0x8137C0C8,0x8137C114,0x8137C118,0x8137C164,0x8137C168,0x8137C0B4 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48316B25

4.1K:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=454 offset=0x81665440,0x81665444,0x81665448,0x8166544C,0x81665450,0x8137B3F8,0x8137B3FC,0x8137B448,0x8137B44C,0x8137B498,0x8137B49C,0x8137B3E8 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482EA059

4.2

4.2J:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=480 offset=0x816C13A8,0x816C13AC,0x816C13B0,0x816C13B4,0x816C13B8,0x8137B930,0x8137B934,0x8137B980,0x8137B984,0x8137B9D0,0x8137B9D4,0x8137B920 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48345A89

4.2U:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=481 offset=0x81691CA0,0x81691CA4,0x81691CA8,0x81691CAC,0x81691CB0,0x8137C47C,0x8137C480,0x8137C4CC,0x8137C4D0,0x8137C51C,0x8137C520,0x8137C46C value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48315835

4.2E:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=482 offset=0x81693B38,0x81693B3C,0x81693B40,0x81693B44,0x81693B48,0x8137C524,0x8137C528,0x8137C574,0x8137C578,0x8137C5C4,0x8137C5C8,0x8137C514 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48317625

4.2K:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=486 offset=0x816662E0,0x816662E4,0x816662E8,0x816662EC,0x816662F0,0x8137B810,0x8137B814,0x8137B860,0x8137B864,0x8137B8B0,0x8137B8B4,0x8137B800 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482EAAE1

4.3"

4.3J:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=512 offset=0x816C2F28,0x816C2F2C,0x816C2F30,0x816C2F34,0x816C2F38,0x8137BAC8,0x8137BACC,0x8137BB18,0x8137BB1C,0x8137BB68,0x8137BB6C,0x8137BAB8 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x48347471

4.3U:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=513 offset=0x81693820,0x81693824,0x81693828,0x8169382C,0x81693830,0x8137C614,0x8137C618,0x8137C664,0x8137C668,0x8137C6B4,0x8137C6B8,0x8137C604 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x4831721D

4.3E:

Code:

[Disc Channel -> HNCA (GC disc only)] version=514 offset=0x816956B8,0x816956BC,0x816956C0,0x816956C4,0x816956C8,0x8137C6BC,0x8137C6C0,0x8137C70C,0x8137C710,0x8137C75C,0x8137C760,0x8137C6AC value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x4831900D

4.3K:

Code:

[Disc Channel -> HNCA (GC disc ONLY)] version=518 offset=0x81667E80,0x81667E84,0x81667E88,0x81667E8C,0x81667E90,0x8137B9A8,0x8137B9AC,0x8137B9F8,0x8137B9FC,0x8137BA48,0x8137BA4C,0x8137B998 value=0x3F200001,0x3B390008,0x3F00484E,0x3B184341,0x4E800020,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x7F04C378,0x7F23CB78,0x482EC4E9

This version boots a channel, but ONLY when you try to load a GC disc. By default, it boots title 00010008-484E4341 [Hidden Channel - TitleID HNCA] ("NeoCORP"). Wii discs are unaffected by this version of the hack, and just boot normally.

Basic hack description:
It works by patching the part where the System Menu checks to see the IOS a disc wants, and then loads that IOS's Title ID. Instead of getting the Title ID for an IOS, the hack gives it a Title ID at it specifies. Normally, the sysmenu only uses 2 ASM commands to get the IOS's ID, but for a full channel Title ID, the hack had to use 4 ASM commands. So instead of just patching over the top of the existing 2 commands, the hack puts the 4 commands (plus a blr to return back) in an empty (value is all "00") part of the dol, then branch to that offset. And then for the GC part, the value had to be patch a few times, so I had to use a few more patches to copy the loaded Title ID over to those few areas too.

So, like I said, by default, those are the 2 channels that the hacks boot, but you can change them to any full Title ID you have installed on your Wii, and the Disc Channel will boot it.

Here is an example pack containing:
- the 2 example hidden channel Wads (both made with HideandSeek v0.9
- a hacks.ini with the 2 hacks for 4.3E already put into it (plus the regular hacks for sysmenus 4.1, 4.2, and 4.3)
- and a modified priiloader 0.8 beta 2 (this version does seems to run stable under IOS249 unlike v0.7 and lower, allowing for backups to be loaded)
NeoGamma via Disc Channel PoC Pack (for 4.1 4.2 4.3 all regions).zip

Now to get this working on your own Wii

Required items:
1. System Menu specifically version 4.3E installed (only 4.3E for now, will add support for other sysmenus soon)
2. Ability to run homebrew (HBC installed) from SD card
3. Ability to install fakesigned wads
4. The above PoC pack
5. (optional) cIOS249 to load backups

How to:

1. grab the PoC pack linked to above, and extract it to the root of your SD card.
2. load up your favorite wad managing app, and use it to install the example sd:\wad\HNCA.wad (and optionally HCLA.wad if you want to test out the Dual Channel hack)
3. if you have priiloader already, then you can skip this step if you do not want to overwrite the version you currently have. Load up the "priiloader v0.8b2" installer, and use it to install priiloader v0.8 beta 2. The installer should also copy the hacks.ini over to your Wii too.
4. Now boot into priiloader by resetting or switching on the wii, but while holding down RESET button as you boot it up, to access priiloader menu. When in the menu, go to "Settings", and then set "Use Classic hacks.ini" to "on". Save settings. If you are using certain versions of priiloader (v0.6 and v0.7 AFAIK), it might not find the hacks.ini on sd root. To get these versions of priiloader to read it, move it from sd:\hacks.ini to sd:\apps\priiliader\hacks.ini
5. Now go back to priiloader's main menu, and select "System Menu Hacks". Enable hacks you may like (such as region free everything, and block disc updates), then enable ONE of the Disc Channel hacks that you wish to test out. Save settings. NOTE: NEVER enable more than one of these Disc Channel hacks at a time! If you wish to try out another one, you must first disable the currently enabled one.

This will now allow the Disc Channel to load HNCA (NeoGamma autoboot, which I dubbed "NeoCORP" ) when you boot a disc (or HNCA for WIi discs and HCLA (CFG USB Loader MOD with DML support) for GC discs if you are testing out the Dual Channel hack).

6. (optional step - Only do this if you are using specifically the above linked priiloader v0.8beta2 MOD! Using any other version priiloader and doing this will make priiloader lock up!)
- Load up priiloader once more, and go to Settings. Change the "Use System Menu IOS" to "off", then change "IOS to use for SM:" to "249". Save settings. This little extra, combined with loading the hidden autoboot NeoGamma HNCA channel, will allow you to load backup discs via the Disc Channel without cIOSCORP/DARKCORP! So it is not just retail games that benefit from this hack, backups can be loaded with this too.
7. (optional step - for use with the Autoboot NeoGamma HNCA channel)

Source- GBAtemp