Hacking New leak - Source code, some private keys, and more

Ryccardo

watching Thames TV from London
Member
Joined
Feb 13, 2015
Messages
7,403
Trophies
0
Age
27
Location
Imola
XP
6,392
Country
Italy
I found the source for that version of boot2, but I don't see the compiled version. What's it called/what file is it in?
It's inside the only .tgz
Don't install it though - not sure if it's polite to reveal the mentioned restrictions when a trusted scene member is working on it, but boot1 will reject it given what's in the eeprom of a common Wii (if the project ever gets polished into something usable, an appropriate editor homebrew will be made)

--------------------- MERGED ---------------------------

im surprised that there wasn't a thread for this before this one
Ahem... https://gbatemp.net/threads/3ds-pok...-wii-ique-player-bb2-repository-leaks.564053/ :)
Is it true that the N64 source code was also leaked?
Yes, it's part of the iQue stuff (which after all is the Chinese N64 All Digital)
Even more importantly, it's the first leak of 64DD libraries
Oh, and microcode from some select games
are the keys used for retail consoles or are they for debug consoles only? did anyone check yet?
Private keys appear to be for dev consoles only
I don't know if anybody would notice (fractional steps over hours...)
From what I noticed of the final wiimotes, it's simply bright or dim, above or below 25% (assuming the 4-bar display is not rigged as on DSi and above)...
 
D

Deleted User

Guest
@Ryccardo since you seem to know about these factory files:

Do you know what is "weird" about the included factory 1-2 and IOS246? I can't successfully decrypt them or install them on a retail wii
 

WiiCurious

Banned!
Banned
Joined
Jan 4, 2020
Messages
37
Trophies
0
Age
33
XP
193
Country
United States
@Ryccardo since you seem to know about these factory files:

Do you know what is "weird" about the included factory 1-2 and IOS246? I can't successfully decrypt them or install them on a retail wii

Those are debug encrypted and can only be installed on an RVT or NDEV. You can re-sign them to retail, but that is a good way to brick your Wii.

Those files firmware.128... Are for RVT-H and Ndev units, which have 128 mb of ram. Retail and RVT-R units have 64. Attempting to install a 128 file on a 64 until won't work.

I unfortunately sold my dev kits a while back and can't test then on real hardware.
 
D

Deleted User

Guest
Those are debug encrypted and can only be installed on an RVT or NDEV. You can re-sign them to retail, but that is a good way to brick your Wii.

Those files firmware.128... Are for RVT-H and Ndev units, which have 128 mb of ram. Retail and RVT-R units have 64. Attempting to install a 128 file on a 64 until won't work.

I unfortunately sold my dev kits a while back and can't test then on real hardware.
so the block1 in that same folder is, or is not, retail signed "sdboot" boot2?
 
Last edited by ,
D

Deleted User

Guest
I don't think know enough about boot2 to say either way. I can tell you that there are no retail signed wads in this release that I can find.
but:
– “sdboot”, a special manufacturing version of boot2 which loads data from the SD card; is very buggy and likely exploitable for boot2 code execution on all Wiis (it is retail signed)
 

WiiCurious

Banned!
Banned
Joined
Jan 4, 2020
Messages
37
Trophies
0
Age
33
XP
193
Country
United States

Yeah. I found the compiled version of boot2, but I don't know enough boot2 to say if it's useful for retail consoles. There are some wads, but they are not signed for retail.

Is there more to this than what you posted here? "Touchpad" to me doesn't necessarily imply "touch screen", but I also understand it could mean that.

That's all i saw.
 
D

Deleted User

Guest
Yeah. I found the compiled version of boot2, but I don't know enough boot2 to say if it's useful for retail consoles. There are some wads, but they are not signed for retail.



That's all i saw.
To make sure we are looking at the same files: did you find the compiled boot2 inside "rvl-factory" archive?
 

zecoxao

Well-Known Member
Member
Joined
Dec 25, 2013
Messages
376
Trophies
0
Age
32
XP
1,626
Country
the fun stuff there are the keys and the verilog files. unlike what has been said here, both the dev and production keys are there, although some keys are present in Salted format (whatever that is). you can find the key that decrypts boot1 there, for instance
 

Ryccardo

watching Thames TV from London
Member
Joined
Feb 13, 2015
Messages
7,403
Trophies
0
Age
27
Location
Imola
XP
6,392
Country
Italy
some keys are present in Salted format (whatever that is)
simplifying, they're themselves encrypted

I found the compiled version of boot2, but I don't know enough boot2 to say if it's useful for retail consoles
The previously mentioned trusted person has managed to get it to run - but getting any SD to read is problematic
(sorry to be the mysterious messenger of the wii scene, but I haven't exactly asked them whether to reveal these results, and frankly the last thing I want is to get him flooded by PMs/requests)
 
  • Like
Reactions: Cyan

elenarguez

Well-Known Member
Member
Joined
Jun 14, 2018
Messages
231
Trophies
0
XP
979
Country
Spain
Wii U gamepad was planned to be an accessory for the wii.
From a document dated 2005:

1-4. Touchpad Type Controller attachment (Future)
  1. Special user interface port: 24-pin connector

  2. Touchpad: 2 devices, I2C 100kHz, Data 4 Byte x 2 = 8 Byte. Must specify that I2C addresses for the 2 devices are unique, and also that they do not overlap with addresses used for typical EEPROM devices. The Touchpad ICs will likely require 1 or 2 strap pins to select an address.(I must check address used for typical EEPROM devices)
3. Digital input: A, B, X, L, R, menu

4. Controller type ID: Analog @ 8bit

---------------------------

Lol. The Wiimote LED gets dimmer as the battery dies by design.

If Battery remainder is low, BCM2042 makes LED to be looked dark gradually as the amount of the battery remainder decreases. It achieves it by blinking LED at high speed by using PWM etc. The pulse pattern is below.
Rlly? And Nintendo took about 7 years from 2005 to 2012 that was when they released Wii U to release it officially? Lmao
 
Last edited by elenarguez,

Gon Freecss

Privacy Advocate
Member
Joined
Nov 14, 2013
Messages
317
Trophies
0
Location
Venezuela
Website
signal.org
XP
613
Country
Venezuela
"easily googled" is proving to not be true. If anyone could DM me that'd be great, thanks

Can someone dm me as well I can't even find anything

I genuinely would love to look through these files, can someone push me into the right direction?

If someone could Dm me links to this or direct me to where I can find it id appreciate it

Worth taking a look at certain prominent torrent site, something to do with a... bay??
 

Magnus87

Well-Known Member
Member
Joined
Apr 28, 2013
Messages
382
Trophies
1
XP
1,387
Country
Argentina
It is very nice to think about the possibilities of this leak, however currently there are not many people interested in developing for Wii.
The Wii homebrew died a couple of years ago, I do not think that people interested in creating new things or improving what we already have for this console appear.

I would love to be able to use the GC controls on any Wii title, install the Wiiware games directly on the SD or even a CFW for Wii would be excellent, but I doubt that it will come true even if we have all the documentation.
 

XFlak

Wiitired but still kicking
Member
Joined
Sep 12, 2009
Messages
13,345
Trophies
3
Age
37
Location
Cyprus, originally from Toronto
Website
modmii.github.io
XP
8,643
Country
Cyprus
Legit devs are already building stuff dude, I don't know specifics but no one thought there would ever be a wii mini exploit/hack either and look how that turned out

Tldr, don't rain on the parade :)
 
Last edited by XFlak,

FAST6191

Techromancer
Editorial Team
Joined
Nov 21, 2005
Messages
36,327
Trophies
3
XP
27,257
Country
United Kingdom
Let's hope that someone improves N64 emulation .
Is this likely to do anything on that front? As far as I know/have seen most of the N64 is fairly well documented. It is more trying to get all the strangely behaving chips communicating with each other in anything like real time in the virtual model of the machine is the trouble (hence leaning into less accurate but faster methods like dynamic recompilation, or things then descending into specific game and plugin hell). This coupled with the N64 being a failure, getting few games and most things on it not ageing the best means even less desire to put the effort it.
 
General chit-chat
Help Users
  • No one is chatting at the moment.
    K3N1 @ K3N1: https://youtube.com/shorts/PArWUK0WyDQ?feature=share