Hacking vWii sneek

[JoostinOnline]

Here are the region free hacks(offsets) for EUR vWii sneek:

*(u32*)0x0137EFA4 = 0x38000001;
*(u32*)0x0137F268 = 0x38000001;
*(u32*)0x0137F288 = 0x4800001C;
*(u32*)0x0137FADC = 0x60000000;
*(u32*)0x013812F8 = 0x38600001;
*(u32*)0x013B787C = 0x48000028;
*(u32*)0x0152F990 = 0x60000000;
*(u32*)0x0152FE78 = 0x38000001;
*(u32*)0x01533514 = 0x4E800020;

Since I don't have a EUR Wii U so I expect someone can try to verify.

Note: I take out 2 offsets for "GC game region free" because they are useless.

Again, how are you getting these offsets and values?

 

[airline38]

Again, how are you getting these offsets and values?

I just simply calculate/convert them by using conanac's findings and
http://wiibrew.org/wiki/Preloader/Priiloader/hacks .

 

[airline38]

I think I almost have either Sneek/DI vWii and Uneek/DI vWii work.

1.Sneek (w/o DI) -> works for game disc (region free) as well as channels(region free).

2. Sneek/DI or Uneek/DI ->works for "sneek format" Wii games (under USB:\games)
and channels.(all region free)

The only small issue for me is I have to wait around 30 secs to see the overlay menu
(either Sneek/DI or Uneek/DI). Not sure it's something to do with my Wii U screen settings. (HDMI/1080i)

I only change SMenu.c (add those offsets from conanac) of the esmodule.

 

[conanac]

How are you making these?

There are two approaches:

1. Use WiiMode WiiU decrypted system menu file (after running ancast decrypter to get that file) and find similar lines of codes that you could see from the corresponding file of the Wii version. Then converting those found file offsets to memory offsets. However, the memory offset on WiiMode WiiU starts after 0x81330100 while on Wii starts at 0x8132FAE0. So if you are following SifJar tutorial, you need to use that number 0x81330100 for WiiMode WiiU to convert from the file offset to the memory offset instead of using the regular 0x8132FAE0.
2. Or you could directly use the memory dump of MEM1 when you are in system menu under SNEEK environment to search those corresponding similar lines of codes.

I also used the approach #2 to verify the approach #1.

Cheers.

 

[airline38]

There are two approaches:

1. Use WiiMode WiiU decrypted system menu file (after running ancast decrypter to get that file) and find similar lines of codes that you could see from the corresponding file of the Wii version. Then converting those found file offsets to memory offsets. However, the memory offset on WiiMode WiiU starts after 0x81330100 while on Wii starts at 0x8132FAE0. So if you are following SifJar tutorial, you need to use that number 0x81330100 for WiiMode WiiU to convert from the file offset to the memory offset instead of using the regular 0x8132FAE0.
2. Or you could directly use the memory dump of MEM1 when you are in system menu under SNEEK environment to search those corresponding similar lines of codes.

I also used the approach #2 to verify the approach #1.

Cheers.

Thanks for the explanation. I didn't notice the offset difference (between 0x8132FAE0 and 0x81330100) few weeks ago. That's why I thought these hacks for vWii were useless. (I did the same way as you by comparing 00000008.app with SifJar's tutorial)

 

[markehmus]

anyone willing to share a way to make nswitch go back to real vWii nand ?

 

[worm28]

anyone willing to share a way to make nswitch go back to real vWii nand ?

I was wondering the same thing sick of getting nagged to format my hdd.

 

[matto21]

anyone willing to share
I would be happy

 

[airline38]

I made a little bit change of the SMenu.c (esmodule) so it can be used
for either USA or EUR vWii sneek/uneek kernel (region free Wii games and
channels). (Thanks for conanac's findings)

Here is the source code of the mod SMenu.c.

 

[MassiveRican]

I was wondering the same thing sick of getting nagged to format my hdd.

Have u tried holding "B" down after you hit nswitch?

 

[markehmus]

Have u tried holding "B" down after you hit nswitch?

i will try that

 

[airline38]

Have tested another offset/hack for vWii sneek :

[Auto-Press A at Health Screen]

*(u32*)0x013BE360 = 0x48000034; (USA vWii)
*(u32*)0x013BE45C = 0x48000034; (EUR vWii)

 

[JoostinOnline]

I added instructions for enabling patches.

 

[JoostinOnline]

If you enabled the Region Free Everything patch on the 4.3E System Menu, you need to redownload Hacks.patch and re-apply it as the offsets were wrong.

 

[airline38]

If anyone would like to try to load a Wii game(sneek format) from
USB device, here are the instructions:

1. Sneek+di : kernel.bin,di.bin and font.bin are under SD:\sneek.
Wii game (sneek format) is under USB:\games.
NAND dump files are under SD:\

2. Uneek+di:kernel.bin,di.bin and font.bin are under USB:\sneek.
Also the same kernel.bin need to be under SD:\sneek (don't need
di.bin)
Wii game (sneek format) is under USB:\games.
NAND dump files are under USB:\

 

[Maxternal]

You know, it just occurred to me, it very well might be possible to modify vSNEEK so that it still reads from real NAND and THEN install it replacing vIOS80. It could be the new PriiLoader

 

[MassiveRican]

anyone willing to share a way to make nswitch go back to real vWii nand ?

I've confirmed you hold down B on the game pad when going to back to real NAND it will automatically load vWii again. I've only gotten Sneek working thus far, I'm going to try Sneek with prilloader hacks patches next according to JO's tut. I'll edit results here as I go through Uneek+DI as well.

 

[JoostinOnline]

I've updated the Hacks.patch file to fix all the warnings during compile time. If you've already compiled SNEEK, don't worry about it, but it's nice to have clean code.

 

[MassiveRican]

I compiled SNEEK but I wanted to make sure a clean install would work first prior to adding the patches.

 

[markehmus]

I've confirmed you hold down B on the game pad when going to back to real NAND it will automatically load vWii again. I've only gotten Sneek working thus far, I'm going to try Sneek with prilloader hacks patches next according to JO's tut. I'll edit results here as I go through Uneek+DI as well.

kool ... i tried it once but it just reloaded hombrewfilter in the sneek nand ... i will try a fw things with it , but thanks for the heads up.