Hacking SNEEK v2

[gameking66]

Also, my SNEEK.cmd output is almost identical to http://pastie.org/878547.txt except in english.

 

[retKHAAAN]

yeah, that means you have encrypted .app files

 

[gameking66]

elfins.exe is now crashing on me.

 

[FenrirWolf]

Are you using r24 of DevKitARM? Since you reinstalled DevKitPRO earlier the answer to that is probably no. r24's linked somewhere in the SNEEK wiki.

 

[gameking66]

I feel like an idiot now. After using the decrypt and r24 it compiled perfectly. What are my next steps to getting SNEEK+DI on my SD card and get that game selection menu? I have 4.2E on my SNEEK NAND.

 

[FenrirWolf]

You'll need to go into the ES module's main.c and uncomment the stuff from lines 1912 to 1920.

ÂÂÂÂÂÂÂÂ//Region free 4.2EUR
ÂÂÂÂÂÂÂÂ//*(u32*)0x0137DC90 = 0x4800001C;
ÂÂÂÂÂÂÂÂ//*(u32*)0x0137E4E4 = 0x60000000;

ÂÂÂÂÂÂÂÂ//LoadFont( "/font.bin" );

ÂÂÂÂÂÂÂÂ//u8 *stk = malloca( 0x100, 32 );
ÂÂÂÂÂÂÂÂ//u32 id = thread_create( FBnuke, 0x20, stk, 0x100, 0, 1 );
ÂÂÂÂÂÂÂÂ//thread_continue( id );

Uncommenting means getting rid of the //'s there. Once you've done that, recompile boot2.bin. You'll also need to have this on the root of the SD card. http://www.mediafire.com/?ry23tiytmtm

So after that, armboot.bin goes in the bootmii folder along with the ppcboot.elf from a normal BootMii install, and boot2_di.bin and di.bin go on the root of the SD card as well. Just be sure to rename boot2_di.bin to just boot2.bin. IIRC the menu is called by pressing start on a GCN controller.

 

[gameking66]

You'll need to go into the ES module's main.c and uncomment the stuff from lines 1912 to 1920.

ÂÂÂÂÂÂÂÂ//Region free 4.2EUR
ÂÂÂÂÂÂÂÂ//*(u32*)0x0137DC90 = 0x4800001C;
ÂÂÂÂÂÂÂÂ//*(u32*)0x0137E4E4 = 0x60000000;

ÂÂÂÂÂÂÂÂ//LoadFont( "/font.bin" );

ÂÂÂÂÂÂÂÂ//u8 *stk = malloca( 0x100, 32 );
ÂÂÂÂÂÂÂÂ//u32 id = thread_create( FBnuke, 0x20, stk, 0x100, 0, 1 );
ÂÂÂÂÂÂÂÂ//thread_continue( id );

Uncommenting means getting rid of the //'s there. Once you've done that, recompile boot2.bin. You'll also need to have this on the root of the SD card. http://www.mediafire.com/?ry23tiytmtm

So after that, armboot.bin goes in the bootmii folder along with the ppcboot.elf from a normal BootMii install, and boot2_di.bin and di.bin go on the root of the SD card as well. Just be sure to rename boot2_di.bin to just boot2.bin. IIRC the menu is called by pressing start on a GCN controller.

Interestingly the newest revision from the SVN does not have the code at all. He seems to have completely recoded the menu as there's an entire new code block, and now a version checker (the code now checks for version 482 of SysMenu in the ticketdata and then loads the menu from GCN.Start if it's the correct version). Cool beans!

 

[FenrirWolf]

Oh? News to me. Nevermind that I guess. lol

 

[gameking66]

Sorry to continue being a bother, but what files are needed to actually load up the Disc into the channel?

 

[FenrirWolf]

If you're talking about the format for extracted games, it's outlined here:

http://gbatemp.net/index.php?s=&showto...t&p=2702125

 

[gameking66]

I'm getting a disc drive light as soon as the TV recognizes the Wii, then a black screen whenever I boot. I tried reverting back to my old boot2.bin and it booted fine.

I have tried using both app files from IOS70 and IOS60, along with the recommended .app files from the recommended IOS'. I have the bootmii folder (with files), boot2.bin, and di.bin.

UNEEK has also been tried and it fails (without the drive light, just a black screen).

Using a clean SVN compile of r78.

 

[bula]

it only works for 4.2E due hardcoded offsets, you can of course figure out the offsets for any other system menu and change them.

Where are offsets located in source ? TY

 

[primetime83]

What does 'di' mean for the di.bin?

 

[arasium]

di = Drive Interface => this module manage the DVD.

 

[fogbank]

So after that, armboot.bin goes in the bootmii folder along with the ppcboot.elf from a normal BootMii

ppcboot.elf has not been needed for a while now (since armboot.bin r47). Has this requirement been reinstated? I don't see any notes about it in r77, r78, etc...

 

[SanGor]

only armboot.bin is required in the bootmii folder.

 

[mousex]

123

 

[ChokeD]

I got punes mod working.

How about a tut on how exactly you did that, in it's own thread.

 

[gameking66]

I'm getting a disc drive light as soon as the TV recognizes the Wii, then a black screen whenever I boot. I tried reverting back to my old boot2.bin and it booted fine.

I have tried using both app files from IOS70 and IOS60, along with the recommended .app files from the recommended IOS'. I have the bootmii folder (with files), boot2.bin, and di.bin.

UNEEK has also been tried and it fails (without the drive light, just a black screen).

Using a clean SVN compile of r78.

No one knows what's causing this problem/how to solve it?

 

[FenrirWolf]

only armboot.bin is required in the bootmii folder.

Mmkay. I'll keep that in mind.