Hacking What's the *real* serial number on my Wii

[tpb8675309]

I bought a second hand refurb Wii with a low serial number from ebay LU37... As soon as I got it I called Nindy to ensure that it wasn't Hot or a gray market item. Nintendo's response was puzzling.

Me: Hi nintendo? I would this Wii and want to make sure it's a "valid" console... Serial number: LU37.....
CSR: I'm showing that serial number, but not as a retail unit.
Me: Is it stolen, should I call the cops and get a refund?
CSR: Hold on... let me get my supervisor.
Super: That serial number is no longer under warranty but there are no recalls or defects with your specific unit.
Me: So it's a legal sale and I can keep the unit.
Super: Yes, the console is a valid serial number.
Me: thanks.

OK.. so I'm guessing from their response that either this unit was a rebuild, a re-case, or refurbished.

So... how do I get the "real" serial number. The one on the case is the "case" serial number, but I suspect the NAND has the serial number stored somewhere as well.

Q: Is there a location in NAND, or some homebrew app, or system menu navigation that will tell me what the Wii "thinks" it's serial number is?

Thanks.

 

[Prophet]

Not to pry, but why do you care?

 

[tpb8675309]

Not to pry, but why do you care?

Cause I want a nifty sig that says LU37+ so the guru's know what gen my Wii is

But I actually need a "validish" serial number to make decisions about which Mod Chip to buy. I'm not gonna get one today. But if I ever brick, I'd like to know what the NAND thinks it's serial number is. It doesn't "really" matter since I'll probably pull the DVD drives serial before I mod anyway. Just wanted a complete view of my console. Plus if I know the guy who sold it is re-casing defective Wii's I'll definitely zing him on ebay.

back on topic... anyone know how to tell what serial number the wii "thinks" it is. I know this is stored somewhere in FW since you can "register" your wii from system menu. I thought there might be a hash algorithm to convert friend code to serial number or something.

 

[SanGor]

/title/content/00000001/00000002/data/setting.txt

you have to decrypt the file, check wiibrew.org

 

[tpb8675309]

/title/content/00000001/00000002/data/setting.txt

you have to decrypt the file, check wiibrew.org

Perfect.... well getting close...

1) Make bootMii nand.bin+key.bin
2) Follow Dolphin's Nand Dumping Guide
3) checkout /title/content/00000001/00000002/data/settings.txt

Rats! still encrypted...

4) Search WiiBrew.org for "decrypt"
5) Find WiiTools, but curse when I discover it's only for ISO's.

OK... anyone know how to extract and decrypt /title/content/00000001/00000002/data/setting.txt either through a nand-dump or over WiFi?

EDIT: What should I expect to find in this 256b file once it's "decrypted"?

I'll work at kicking the kids off the Wii this evening.

 

[CasperH]

/title/content/00000001/00000002/data/setting.txt

you have to decrypt the file, check wiibrew.org

Perfect.... well getting close...

1) Make bootMii nand.bin+key.bin
2) Follow Dolphin's Nand Dumping Guide
3) checkout /title/content/00000001/00000002/data/settings.txt

Rats! still encrypted...

4) Search WiiBrew.org for "decrypt"
5) Find WiiTools, but curse when I discover it's only for ISO's.

OK... anyone know how to extract and decrypt /title/content/00000001/00000002/data/setting.txt either through a nand-dump or over WiFi?

EDIT: What should I expect to find in this 256b file once it's "decrypted"?

I'll work at kicking the kids off the Wii this evening.

http://gbatemp.net/index.php?showtopic=174879
This should help... If not, try one of the other dumpers

 

[skid]

xyzzy lists key information from your wii including a "Console ID".

 

[CasperH]

xyzzy lists key information from your wii including a "Console ID".

But that isn't the same as the serial number...

 

[vegemikee]

well if you plan on modding it anyway, you may as well check open it up and have a look at the chipset.

 

[tpb8675309]

EDIT: What should I expect to find in this 256b file once it's "decrypted"?

I'll work at kicking the kids off the Wii this evening.Ahh well... Kids were having way too much fun. Luckily AnyRegion Changer releases their source. I trimmed it down to just do the bit I needed.

The below code is 99.9% from the AnyTitle changer source, I just changed the names and simplified it a bit. All props go to them.. I simply plagerized

CODE#include

int main(int argc, char* argv[])
{
ÂÂ unsigned long key = 0x73B5DBFA;
ÂÂ int i;
ÂÂ char ch;
ÂÂ
ÂÂ for(i=0; i decode.txt

What you get in decode.txt looks like this (name changed to protect the innocentCODEAREA=USA
MODEL=RVL-001(USA)
DVD=0
MPCH=0x7FFE
CODE=LU
SERNO=37xxxxxxx
VIDEO=NTSC
GAME=US

Checked my console and the serial number matches. Guess I was just paranoid. Interesting how my LU37+ system can't install BootMii in boot2 though.

thx

 

[techboy]

Wii Backup disc...Pop a DVD in or fire up a usb loader. That shows the serial on the right side of the screen. No messing with decrypting settings.txt needed.

That a.exe looks handy though. I'd be nice if you could re-encrypt, so one could modify it without ARC if they wanted.