Hacking SNEEK v2

[Det1re]

So, crediar changed the topic on #SNEEK (efnet):

* Topic for #SNEEK is: SNEEK is now on http://code.google.com/p/sneek/
* Topic for #SNEEK set by [email protected] at Thu Jan 28 05:11:09 20

Some quick information:

• runs on MINI (makes it way easier to start up [not as in v1])
• requires only a FS dump (import, meta, shared1, shared2, sys, ticket, title, tmp)
• runs channels & games
• allows Shop Channel usage
  • the Wii is identified on the fly via SNEEK and assign rights to download purchased titles
  • possibility to fake another Wii to gain its download rights with via device.cert
  • Shop Channel Download Animation Hack, always have Mario and Luigi Swimming
• System Menu update is working on the emulated NAND
  • reports boot2-v5
• completely independant from your real NAND
• ES module completely rewritten
• works with SDHC
• possibility to emulate SD card for titles (unactive for System Menu as for r15)
• sends debug output via USB Gecko

Files:

• SD:/
  • bootmii/
    • armboot.bin
    • ppcboot.elf (the one that came with BootMii)
    • bootmii.ini (autoboot enabled)
  • boot2.bin
  • obviously a NAND filesystem dump (import, meta, shared1, shared2, sys, ticket, title, tmp)

Links:

• Google Project link: http://code.google.com/p/sneek/ -> it's released
• Startup Guide: http://code.google.com/p/sneek/wiki/StartupGuide
• crediar's FAQ: http://code.google.com/p/sneek/wiki/FAQ
• wilsoff's FAQ: http://gbatemp.net/index.php?showtopic=205...t&p=2563988

Preview Videos:

• http://www.youtube.com/watch?v=PlB6HZtBWtc / giantpune
• http://www.youtube.com/watch?v=MVBWSC6u33s / giantpune
• http://www.youtube.com/watch?v=yqIOoYakHhE / det1re

Initial release changelog:

Spoiler

ÂÂÂÂÂÂÂÂES-Module
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂadded:
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTMDContentCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTMDContents
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_Sign
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetDeviceCert
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetDeviceID
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_DIGetStoredTMD
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_DIGetStoredTMDSize
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetSharedContents
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetSharedContentCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetStoredContentCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_DIGetTicketView
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetOwnedTitleCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetConsumption
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetOwnedTitles
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_0x45 (Error-003-check)
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_ImportBoot (Doesn't do anything, just returns successes)
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂfixed:
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTitleContentCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTitleContents
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_AddTicket
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTMDViews
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTMDViewCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTicketViewCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTicketView
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_DIGetTicketView
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂchanged:
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTitleCount
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTitles
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_Launch
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_DIVerify
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_SetUID

ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-changed a bug in the title install routine which could lead to missing shared content
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-added a patch which makes all titles region free
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed Disc launching via ES_Launch
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed Channel launching via ES_Launch
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed Shop channel (requires device.cert to be present)
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed a bug which installed tickets for disc titles which then caused
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ questionmark channels
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-added dynamic IOS content launching.
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-Contents are now loaded from the IOS version the current title requested
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-re-coded boot up code
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-changed how SNEEK works, it doesn't use an IOS spot anymore
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ which makes it untouchable by any online or disc updates.
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed system menu online update
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed system menu settings
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetTicketView/ES_GetTicketViews can now return more than one TicketView if present
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-removed all mini-related code
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-content.map/uid.sys will now be created if not found
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-new UIDs will be added to uid.sys if the Title has none yet
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-added the ability to load IOS modules from shared1
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ES_GetDeviceCert/ES_GetDeviceID require a device cert to be present at this location /sys/device.cert there are a few ways to get your device cert i.e. via ES_GetDeviceCert on a real IOS or via the key dumper tool you can find on wiibrew.org.
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-highly optimized content.map access
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed a bug which cause AddTitleFinish to fail if the last content was a new shared content
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-GetDeviceCert uses the device cert of the Wii if the device.cert file wasn't found
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-GetDeviceID now also uses the ID of the Wii if the device.cert file wasn't found
ÂÂÂÂÂÂÂÂFS-Module
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-Fixed FS_GetUsage again, was returning garbage.
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-Fixed FS_GetUsage which returned wrong size values
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed memcpy
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-ISFS_ReadDir doesn't show .attr files anymore
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-fixed a few .attr related bugs
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-rewrote most of the FS functions
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-increased free space to over 1000 blocks
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-removed .attr stuff
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ-added a hack which limits the title size of 0001001 to 42*16KB
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ which should remove the 512MB size limit

 

[Daco]

i can't know on what server that was i guess? D:

 

[sirakain]

Hehe, great news

I wish every beta tester was listen in credits

 

[Blue-K]

Finaly! I had to delete some Saves and Channels just to play a new game. I need this so badly

. Can't wait to test it! Also looking forward to every bit of news until the release

.

Btw @Det1re: You're a committer on the Googlecode-Page

?

 

[Det1re]

Btw @Det1re: You're a committer on the Googlecode-Page

?

Mostly for wiki & stuff.

 

[VashTS]

I guess this will not support USB, I haven't seen any mention of it, but that would make the most sense, as SDHC doesn't work well with homebrew, so this may not even be as useful as it seems. I can't wait to see it happen though, it sounds completely awesome.

 

[Slimmmmmm]

WOW, didn't expect it to be coming so soon

This is gonna be great, huge thanks to crediar and the beta testers on this.

 

[AceLighting]

Wow im excited about this
just wondering i was using triiforce and if i want to use sneek when it comes out for my wiiware games etc... do i need to edit anything on the sd or install games on sd card a different way ???
Thanks alot

 

[Det1re]

Wow im excited about this
just wondering i was using triiforce and if i want to use sneek when it comes out for my wiiware games etc... do i need to edit anything on the sd or install games on sd card a different way ???
Thanks alot

I should add this to post #1:

SNEEK uses a normal FS dump, just as TriiForce. So it's quite plug'n'play.

 

[Blue-K]

Wow im excited about this
just wondering i was using triiforce and if i want to use sneek when it comes out for my wiiware games etc... do i need to edit anything on the sd or install games on sd card a different way ???
Thanks alot

I should add this to post #1:

SNEEK uses a normal FS dump, just as TriiForce. So it's quite plug'n'play.

Though, shouldn't you still have a limit for the Channels? I mean, you only got some Pages in the main Wii-Menu...and when you now have more Channels than there's space, shouldn't this give problems? Just a thought...

 

[AceLighting]

Wow im excited about this
just wondering i was using triiforce and if i want to use sneek when it comes out for my wiiware games etc... do i need to edit anything on the sd or install games on sd card a different way ???
Thanks alot

I should add this to post #1:

SNEEK uses a normal FS dump, just as TriiForce. So it's quite plug'n'play.

Thanks for quick response, just checking, this is gonna be awsome!!!

hopefully games like swords and soldiers and tales of monkey 4 will work

 

[Adr990]

Also unconfirmed to be in release, it was in beta:
Shop Channel Download Animation Hack, Always have Mario and Luigi Swimming.
(Normally it's a 1 out of 100 chance, or so.)

Also: Device.cert wasn't needed anymore.

 

[Slimmmmmm]

This "should" have better compatibility than TriiForce, as for the limit to number of channels, well you could use both SNEEK & TriiForce.

Will the source be modified by others to allow it to run from HDD, or is this not possible ? If we could use HDD then you could have a few different NAND and swap between them, SD cards are super expensive the larger you go.

Anyway, great stuff

2010 is gonna be the best year ever for the Wii with all the homebrew and the official things like the new Zelda etc.

 

[Det1re]

Also unconfirmed to be in release, it was in beta:
Shop Channel Download Animation Hack, Always have Mario and Luigi Swimming.
(Normally it's a 1 out of 100 chance, or so.)

Also: Device.cert wasn't needed anymore.

Added/fixed it, thanks.

 

[gisel213]

Simply amazing untouched nand this should help with new homebrew destroying
updates from ninty without trying fixes/patches on actual wii nand thus reducing
bricks from noobz installing stuff not following instruction etc.... Very Nice i say
keep testing this is worth waiting four... oops i can speel

+1 Crediar

 

[FenrirWolf]

I guess this will not support USB, I haven't seen any mention of it, but that would make the most sense, as SDHC doesn't work well with homebrew, so this may not even be as useful as it seems. I can't wait to see it happen though, it sounds completely awesome.

I remember something about USB not being viable for the ES module or something along those lines. But that was way back when v1 came out so who knows what's changed since then.

Still, now I see why v2 has taken so long to come out. This sounds like it'll be a very complete release and I look forward to it.

 

[crwys]

I guess this will not support USB, I haven't seen any mention of it, but that would make the most sense, as SDHC doesn't work well with homebrew, so this may not even be as useful as it seems. I can't wait to see it happen though, it sounds completely awesome.

I remember something about USB not being viable for the ES module or something along those lines. But that was way back when v1 came out so who knows what's changed since then.

Still, now I see why v2 has taken so long. This sounds like it'll be a very complete release and I look forward to it.

Yea hopefully USB will be supported, if not then this probably will be useless to me.

 

[Blue-K]

I guess this will not support USB, I haven't seen any mention of it, but that would make the most sense, as SDHC doesn't work well with homebrew, so this may not even be as useful as it seems. I can't wait to see it happen though, it sounds completely awesome.

I remember something about USB not being viable for the ES module or something along those lines. But that was way back when v1 came out so who knows what's changed since then.

Still, now I see why v2 has taken so long. This sounds like it'll be a very complete release and I look forward to it.

Yea hopefully USB will be supported, if not then this probably will be useless to me.

I though Crediar or someone else stated that there's simply no Room for USB-Support? Oh well, when the Source is up, we'll see...

 

[Riicky]

USB support would be great since my SD slot took shit lol, but since this runs similar to how bootmii runs, I may be able to use my SD card, because bootmii reads it, and I can backup my nand, and restore my nand from the would be fudged sd slot, so who knows

 

[FenrirWolf]

Also, correct me if I'm wrong, but I'm pretty sure this will let any wii be unbrickable, won't it? Since it runs from MINI it will just start right up for a BootMii/boot2 user from what I understand. Perhaps a console with only BootMii/IOS could install a Preloader to the real NAND, set it to autoboot an app that calls IOS254, causing SNEEK to run from startup with no user interaction. And since all updates would work through the virtual NAND they'd be just as protected as a BootMii/boot2 user.