Hacking Coding vWii 3-core support - everything you need to know.

TheChield

Ugly Troll
Member
Joined
Jul 10, 2013
Messages
210
Trophies
0
XP
112
Country
France
I still don't understand if registers for "OHCI0" and "OHCI1" are related to the physical ports. :(
I will just try to read the number of port for each, maybe it will give me an answer !
Thank you for reminding the endianness !
 

obcd

Well-Known Member
Member
Joined
Apr 5, 2011
Messages
1,594
Trophies
0
XP
432
Country
Belgium
delroth
It was a while ago. I tried to port over the usb code from neek to mini and it used dynamic allocated buffers for it's dma transfers.
I stopped working on it because it was no longer needed for my intensions (starting neek from usb without sd card) and also because I got negative feedback from people claiming the mini code should be kept as simple as possible.
 

TheChield

Ugly Troll
Member
Joined
Jul 10, 2013
Messages
210
Trophies
0
XP
112
Country
France
So if you succeded why don't you share the result ? :glare:
Some people who want to understand will be thankful for sharing...
So basically what you want from marcan...
 

conanac

Be an Angel
Member
Joined
Sep 13, 2009
Messages
267
Trophies
1
XP
329
Country
United States
Yeah, that definitely should work by just replacing armboot.c like you said and then changing the /title/00000001/00000200/content/00000003.app file it it pre-loads from NAND to the /title/00000001/00000002/content/00000017.app file for the system menu.

As far as the rebooter, I've only played with resetting to the vWii menu a little bit but maybe you'd know better than I how to get it to load the IOS80 back again when exiting the MINI-mod (armboot) to be able to get back to the system menu. I'm willing to help with whatever I can, though. Let me know how things go with that.

Just to report back...

It works great, I could decrypt not only system menu app file but also of the other BC app files.
Many thanks for great help.

However, I have not been able to spend much of time for testing the rebooter feature yet.
I also use the same approach to be able to run armboot.bin from SNEEK to switch from system NAND on WiiMode.

Cheers.
 
  • Like
Reactions: Ray Lewis

Maxternal

Peanut Gallery Spokesman
OP
Member
Joined
Nov 15, 2011
Messages
5,210
Trophies
0
Age
40
Location
Deep in GBAtemp addiction
Website
gbadev.googlecode.com
XP
1,709
Country

Ray Lewis

Banned!
Banned
Joined
Dec 30, 2012
Messages
1,518
Trophies
0
XP
419
Country
United States
About Comex, if you don't mod an ios then isn't it a soft brick? Hidden security? Did it mod that ios? Weird. I'd love to hear details. It would be useful. How could that brick it?!!! Lol, like won't boot type of brick...? I told him he should have backed up his emmc/nand before playing. Like 3ds people do. Raw read/write.

I think credible people should do a guide. There are schematics but I might brick. Marcan and others...childs play to them. Anyone else think this should be a priority? Card reader, I have pin diagrams from wiiubrew and a thread on ps3 mini, and late 360 motherboards. Software, risks, procedure? If an innocent poke did that, you guys run the big risk.
 

Pogostick

Well-Known Member
Newcomer
Joined
Nov 15, 2013
Messages
97
Trophies
0
Age
25
XP
171
Country
United States
Maxternal, because I like you. I don't wanna see you end up like comex. If I were you, I'd ask for a Dolphin member to compile a special dolphin build to support a vWii dump since this thread is focused on vWii.:)
 

Marionumber1

Well-Known Member
Member
Joined
Nov 7, 2010
Messages
1,234
Trophies
3
XP
4,045
Country
United States
Maxternal, because I like you. I don't wanna see you end up like comex. If I were you, I'd ask for a Dolphin member to compile a special dolphin build to support a vWii dump since this thread is focused on vWii.:)


The problem is that Maxternal's work requires Wii U features that are available in vWii mode but not on normal Wii's, like the PowerPC Boot ROM and the 3-core Espresso architecture. These things are not supported by Dolphin, and would take a lot of effort to add.
 

Ray Lewis

Banned!
Banned
Joined
Dec 30, 2012
Messages
1,518
Trophies
0
XP
419
Country
United States
Settle down, lmfao. First rule of threads that are made to inform and discuss a topic is you do not ask. The second rule is to follow internet etiquette. If you were to use the word "bump", damn, you'd be chastised. The obvious answer is yes, it was onto hreset to get keys. That was posted here or on the ps3 hax thread. Bubba said it could be a week before any news comes along. I believe that was what he said.

Progress? Yes. I hope 99% of my post is received as it is intended; sarcasm. Maxternal posted right after I did about 3 cores running but linux seeing one. Interesting.
 

Maxternal

Peanut Gallery Spokesman
OP
Member
Joined
Nov 15, 2011
Messages
5,210
Trophies
0
Age
40
Location
Deep in GBAtemp addiction
Website
gbadev.googlecode.com
XP
1,709
Country
Is there a way to re-encrypt an Anacast image, specifically the System Menu?
Nope. It's encrypted and signed such that without Nintendo's private keys for that it can't be done to my knowledge.

I was kinda wondering, though, if the system menu would run unencrypted you were to were to save it as a separate title (assuming IOS only tries to decrypt something if it sees the system menu's title ID) or if you run it with a different IOS (assuming IOS80 always wants an encrypted title, knowing it's only supposed to run the system menu) either way, though, you would probably have to deal with the issue that the system menu and 1-512 used to run an unencrypted title would want to use the same memory addresses.

as far as autobooting the unencrypted version, you also might be able to replace the original system menu with a copy of 1-512 with an extra section added to the DOL to also write the new title ID into the right address so it will see it once it's done decrypting and load that title instead.

That's what's occurred to me thus far, at least.
sorry for asking this, but are we now a step further hacking the wii u?

If by hacking the wii u you're talking about getting all 3 cores to run together in a usable way, yes, slow progress is being made. At this point all 3 cores make it to the Linux kernel but it's still only using one of the cores to actually run stuff.
 

uyjulian

Homebrewer
Member
Joined
Nov 26, 2012
Messages
2,567
Trophies
2
Location
United States
Website
sites.google.com
XP
3,891
Country
United States
Nope. It's encrypted and signed such that without Nintendo's private keys for that it can't be done to my knowledge.

I was kinda wondering, though, if the system menu would run unencrypted you were to were to save it as a separate title (assuming IOS only tries to decrypt something if it sees the system menu's title ID) or if you run it with a different IOS (assuming IOS80 always wants an encrypted title, knowing it's only supposed to run the system menu) either way, though, you would probably have to deal with the issue that the system menu and 1-512 used to run an unencrypted title would want to use the same memory addresses.

as far as autobooting the unencrypted version, you also might be able to replace the original system menu with a copy of 1-512 with an extra section added to the DOL to also write the new title ID into the right address so it will see it once it's done decrypting and load that title instead.

That's what's occurred to me thus far, at least.


If by hacking the wii u you're talking about getting all 3 cores to run together in a usable way, yes, slow progress is being made. At this point all 3 cores make it to the Linux kernel but it's still only using one of the cores to actually run stuff.

Hm, is it possible to brute-force the key, or it's a waste of time?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • K3Nv2 @ K3Nv2:
    I'll reformat and have a 3tb raid0 m. 2 at least
    +1
  • K3Nv2 @ K3Nv2:
    Lmao that sold out fast
    +1
  • Veho @ Veho:
    Yeet the cat.
    +1
  • K3Nv2 @ K3Nv2:
    Good idea
    +1
  • The Real Jdbye @ The Real Jdbye:
    i thought everybody knew cocktails are like 75% ice
  • Veho @ Veho:
    Yeah but not like this.
  • Veho @ Veho:
    It's not like they're complaining that their Slurpee is 99% ice or something, but if the cocktail calls for "shot of vodka, shot of vermouth, shot of gin, shot of Campari, three shots of juice, squirt of lemon" and ends up being a thimbleful of booze, that's a problem.
  • The Real Jdbye @ The Real Jdbye:
    the funny thing is cocktails in norway are only allowed to have 1 20ml shot of booze
  • The Real Jdbye @ The Real Jdbye:
    so..... yeah
  • The Real Jdbye @ The Real Jdbye:
    we're used to only having a thimbleful of booze
  • Veho @ Veho:
    Booo.
  • The Real Jdbye @ The Real Jdbye:
    same thing if you want whisky on the rocks or something, you can't get a double
  • The Real Jdbye @ The Real Jdbye:
    but you could buy as many shots of whisky (or anything else) as you want and ask for a glass of ice and pour them in
  • The Real Jdbye @ The Real Jdbye:
    it's dumb
  • Veho @ Veho:
    Maybe.
  • Veho @ Veho:
    There was a comparison of the number of Ibuprofen poisonings before and after they limited the maximum dosage per box or per pill (i'll look that up). No limit on the number of boxes you can still buy as many as you want, so people argued it was pointless.
  • Veho @ Veho:
    But the number of (accidental) poisonings dropped because drinking an entire package of ibuprofen pills went from "I need a new liver" to "I need a new box of Ibuprofen".
  • Veho @ Veho:
    Here we have ketoprofen that used to be prescription-only because of the risk of toxic dosages, but then they halved the dose per pill and sell them in bottles of six pills apiece instead of twenty and it doesn't need a prescription any more. Yes you can buy more than one bottle but people simply don't.
  • Psionic Roshambo @ Psionic Roshambo:
    Usually accidentally overdose of ibuprofen here is from people taking like cold medicine then ibuprofen for a headache and the combination is over what they need
    Veho @ Veho: https://imgur.com/gallery/QQkYnQu