WiiLi.org

PsiCoLeO · Joined: 27 Nov 2007 Posts: 9

hi revolt...

the power saves are not save games from people who have completed the game (at least thats what i think) because they are renamed, and they have removed the copy locks from the save... as an example how could a user send his saved game of pockemon when it has a copy protection that doesnt allows them to copy it to an sd... so i think they have already cracked te code.. at least partially

PsiCoLeO · Joined: 27 Nov 2007 Posts: 9

In this video you can see whay i say

http://es.youtube.com/watch?v=UXIIuMCIgog

revolt · Joined: 21 Nov 2007 Posts: 8

i gues they just hex edited some small data in the same way you can take a mii and edit it in hex so you can upload to your wii to change them. i will have a look if i can find anything about this.

revolt

PsiCoLeO · Joined: 27 Nov 2007 Posts: 9

you could find some information here http://www.elotrolado.net/hilo_Wii-Power-Saves--Como-se-hace-eso-_846850?pagenumber=1
the forum is in spanish (dont know if you know spanish, but you could use an online traductor like babelfish) but it doesnt have actual cracking information, but there you could find the program that translates te DATEL .wii files to wii´s .bin FILE... i think.. this looks very interesting, and we could find somenthing interesting in here, but i think this isnt a single man task.. so I ask for more people to get involved, thanks to revolt for answering my questions, and know that im willing to help or try some new stuff.. I will be posting any advance i achieve.. if theres any LOL

revolt · Joined: 21 Nov 2007 Posts: 8

i read the forum with a shitty translation to english but i didnt find anything usefull. but while googeling i had an idea, the content on a wii disk is encrypted but on a gamecube disk it isnt. i dont know what parts are accessable from gcmode but if a homebrew gc disk would load some data to memory and then do a soft reboot....

i know it is possible to reboot from gcmode sinds the wiikey update disk does this to, i just dont know about the loading to ram part. if there is access to ram maby we could just dump the ram to a sd-card with the ghecko tool.

dont know what the possibilitys are

revolt

PsiCoLeO · Joined: 27 Nov 2007 Posts: 9

maybe you are right with what you are saying.. but it would be very difficult to do.. i also read about WAB work with that ram attack.. and it really looks far too complicated for people like me... i dont know much about game cube scene but maybe they have developed some debuggin programs..

thanks to the efort of many hackers..
we already have dumped nand flashes, save games, dumped discs, intercepted firmware updates, tmds and other files to load the VC games, BUT EVERYTHING IS ENCRYPTED.. y was waiting for some info about those ram attacks.. i hope they finally get somewere with those.. but we havent hear anything about WAB team or DarkFader.. the ones really working hard in that area.. another thing we already know is that the saved games use Elliptic curve encryption, so it would be very likely that everything uses that encryption.. Everywere we go we end up crashing against that encryption, and what I say.. is that maybe datel already managed to crack that encryption (power saves).

I can also think about other aproaches that could be taken to beat the encryption, one could be find nintendos key inside of those dumps (it should be somewere.. ) because i dont think that the encryption is hardware made. Other possibility could be to have something like rainbow crack project.

We have a lot of information.. but we lack of a real good idea.. or someona really talented that gives light to all this... I hope to hear something about all those big projects

stjimmyskater · Joined: 23 Jul 2007 Posts: 12

Would it be possible to do a TIFF exploit like on the iphone/ipod touch???