Firmware Updates

From WiiLi

Jump to: navigation, search
Image:Copyright-problem paste.svg This article or section appears to have been copied and pasted from a source, possibly in violation of a copyright.
Please edit this article to remove any copyrighted text and to be an original source, following the Guide to layout and the Manual of Style. Remove this template after editing.
It has been proposed that Firmware Updates be renamed and moved to wii/Firmware/Dumps (Discuss).



The Wii shop channel uses a built-in Opera Browser to download games/updates. For firmware updates, an XML file is primarily used to check if any new updates are available, as well as other means.


Contents

[edit] Packet Dump

[edit] First

[edit] Packet Info

Flags: 0x00
Status: 0x04 Encrypted
Packet Length: 1418
Timestamp: 11:59:22.562047600 11/19/2006
Data Rate: 22 11.0 Mbps
Channel: 7 2442 MHz
Signal Level: 41%
Noise Level: 0%

[edit] 802.11 MAC Header

  Version:              0
  Type:                 �  Data
  Subtype:              �00  Data Only
Frame Control Flags:    �000001
                        0... .... Non-strict order
                        .0.. .... WEP Not Enabled
                        ..0. .... No More Data
                        ...0 .... Power Management - active mode
                        .... 0... This is not a Re-Transmission
                        .... .0.. Last or Unfragmented Frame
                        .... ..0. Not an Exit from the Distribution System
                        .... ...1 To the Distribution System

  Duration:             223  Microseconds
  BSSID:                00:18:39:87:19:8D
  Source:               00:17:AB:42:A4:8F
  Destination:          00:18:39:87:19:8B
  Seq. Number:          764
  Frag. Number:         0

[edit] 802.2 Logical Link Control (LLC) Header

  Dest. SAP:            0xAA  SNAP
  Source SAP:           0xAA  SNAP
  Command:              0x03  Unnumbered Information
  Vendor ID:            0x000000
  Protocol Type:        0x0800  IP

[edit] IP Header - Internet Protocol Datagram

  Version:              4
  Header Length:        5  (20 bytes)
  Type of Service:      �000000
                        000. .... Precedence: Routine
                        ...0 .... Normal Delay
                        .... 0... Normal Throughput
                        .... .0.. Normal Reliability
                        .... ..0. ECT bit - transport protocol will ignore the CE bit
                        .... ...0 CE bit - no congestion

  Total Length:         1374
  Identifier:           8918
Fragmentation Flags:    �0
                        0.. Reserved
                        .1. Do Not Fragment
                        ..0 Last Fragment

  Fragment Offset:      0  (0 bytes)
  Time To Live:         64
  Protocol:             6  TCP - Transmission Control Protocol
  Header Checksum:      0x13EF
  Source IP Address:    192.168.2.32
  Dest. IP Address:     209.67.106.201
  No IP Options

[edit] TCP - Transport Control Protocol

  Source Port:          56974
  Destination Port:     80  http
  Sequence Number:      3416390245
  Ack Number:           1771989307
  Offset:               5  (20 bytes)
  Reserved:             �0000

  Flags:                �1000
                        0. .... (No Urgent pointer)
                        .1 .... Ack
                        .. 1... Push
                        .. .0.. (No Reset)
                        .. ..0. (No SYN)
                        .. ...0 (No FIN)

  Window:               32768
  Checksum:             0x9AD3
  Urgent Pointer:       0
  No TCP Options

[edit] HTTP - Hyper Text Transfer Protocol

  Command:              POST
  URI:                  http://nus.shop.wii.com:80/nus/services/NetUpdateSOAP
  Version:              HTTP/1.1<CR><LF>
Host:                   nus.shop.wii.com<CR><LF>
Accept:                 text/html, image/gif, image/jpeg, */*<CR><LF>
Content-type:           text/xml; charset=utf-8<CR><LF>
Content-length:         1046<CR><LF>
User-Agent:             wii libnup/1.0<CR><LF>
SOAPAction:             "urn:nus.wsapi.broadon.com/GetSystemUpdate"<CR><LF><CR><LF>
  Line  1:              <?xml version="1.0" encoding="UTF-8"?><LF>
  Line  2:              <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"<LF>
  Line  3:              xmlns:xsd="http://www.w3.org/2001/XMLSchema"<LF>
  Line  4:              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><LF>
  Line  5:              <soapenv:Body><LF>
  Line  6:              <GetSystemUpdateRequest xmlns="urn:nus.wsapi.broadon.com"><LF>
  Line  7:              <Version>1.0</Version><LF>
  Line  8:              <MessageId>13198105123219138</MessageId><LF>
  Line  9:              <DeviceId>4362227772</DeviceId><LF>
  Line  10:             <RegionId>USA</RegionId><LF>
  Line  11:             <CountryCode>US</CountryCode><LF>
  Line  12:             <TitleVersion><LF>
  Line  13:             <TitleId>0000000100000001</TitleId><LF>
  Line  14:             <Version>2</Version><LF>
  Line  15:             </TitleVersion><LF>
  Line  16:             <TitleVersion><LF>
  Line  17:             <TitleId>0000000100000002</TitleId><LF>
  Line  18:             <Version>33</Version><LF>
  Line  19:             </TitleVersion><LF>
  Line  20:             <TitleVersion><LF>
  Line  21:             <TitleId>0000000100000009</TitleId><LF>
  Line  22:             <Version>516</Version><LF>
  Line  23:             </TitleVersion><LF>
  Line  24:             <Attribute>1</Attribute><LF>
  Line  25:             <AuditData></AuditData><LF>
  Line  26:             </GetSystemUpdateRequest><LF>
  Line  27:             </soapenv:Body><LF>
  Line  28:             </soapenv:Envelope><LF>
Extra bytes (Padding):
  .....S:.          00 00 00 00 FD 53 3A 96
FCS - Frame Check Sequence
  FCS (Calculated):     0xF9FE0CA3

[edit] Second

[edit] Packet Info

  Flags:                0x00
  Status:               0x04  Encrypted 
  Packet Length:        1544
  Timestamp:            11:59:22.642730600 11/19/2006
  Data Rate:            22  11.0 Mbps
  Channel:              7  2442 MHz
  Signal Level:         50%
  Noise Level:          0%

[edit] 802.11 MAC Header

  Version:              0
  Type:                 �  Data
  Subtype:              �00  Data Only
Frame Control Flags:    �000010
                        0... .... Non-strict order
                        .0.. .... WEP Not Enabled
                        ..0. .... No More Data
                        ...0 .... Power Management - active mode
                        .... 0... This is not a Re-Transmission
                        .... .0.. Last or Unfragmented Frame
                        .... ..1. Exit from the Distribution System
                        .... ...0 Not to the Distribution System

  Duration:             213  Microseconds
  Destination:          00:17:AB:42:A4:8F
  BSSID:                00:18:39:87:19:8D
  Source:               00:18:39:87:19:8B
  Seq. Number:          1857
  Frag. Number:         0

[edit] 802.2 Logical Link Control (LLC) Header

  Dest. SAP:            0xAA  SNAP
  Source SAP:           0xAA  SNAP
  Command:              0x03  Unnumbered Information
  Vendor ID:            0x000000
  Protocol Type:        0x0800  IP

[edit] IP Header - Internet Protocol Datagram

  Version:              4
  Header Length:        5  (20 bytes)
  Type of Service:      �100000
                        001. .... Precedence: Priority
                        ...0 .... Normal Delay
                        .... 0... Normal Throughput
                        .... .0.. Normal Reliability
                        .... ..0. ECT bit - transport protocol will ignore the CE bit
                        .... ...0 CE bit - no congestion

  Total Length:         1500
  Identifier:           37015
Fragmentation Flags:    �0
                        0.. Reserved
                        .1. Do Not Fragment
                        ..0 Last Fragment

  Fragment Offset:      0  (0 bytes)
  Time To Live:         241
  Protocol:             6  TCP - Transmission Control Protocol
  Header Checksum:      0xF48E
  Source IP Address:    209.67.106.201
  Dest. IP Address:     192.168.2.32
  No IP Options

[edit] TCP - Transport Control Protocol

  Source Port:          80  http
  Destination Port:     56974
  Sequence Number:      1771989307
  Ack Number:           3416391579
  Offset:               5  (20 bytes)
  Reserved:             �0000

  Flags:                �1000
                        0. .... (No Urgent pointer)
                        .1 .... Ack
                        .. 1... Push
                        .. .0.. (No Reset)
                        .. ..0. (No SYN)
                        .. ...0 (No FIN)

  Window:               5714
  Checksum:             0xC5FF
  Urgent Pointer:       0
  No TCP Options

[edit] HTTP - Hyper Text Transfer Protocol

  Version:              HTTP/1.1
  Status:               200
  Reason:               <CR><LF>
Date:                   Sun, 19 Nov 2006 19:59:19 GMT<CR><LF>
Server:                 Apache/2.0.48<CR><LF>
Content-Type:           text/xml; charset=utf-8<CR><LF>
Transfer-Encoding:      chunked<CR><LF><CR><LF>
  Line  1:              546<CR><LF>
  Line  2:              <?xml version="1.0" encoding="utf-8"?><soapenv:Envelope xmlns:soapenv="http://sc
  Line                  hemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" x
  Line                  mlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><soapenv:Body><GetSystemUpd
  Line                  ateResponse xmlns="urn:nus.wsapi.broadon.com"><Version>1.0</Version><DeviceId>43
  Line                  62227772</DeviceId><MessageId>13198105123219138</MessageId><TimeStamp>1163966359
  Line                  696</TimeStamp><ErrorCode>0</ErrorCode><ContentPrefixURL>http://nus.cdn.shop.wii
  Line                  .com/ccs/download</ContentPrefixURL><UncachedContentPrefixURL>http://ccs.shop.wi
  Line                  i.com/ccs/download</UncachedContentPrefixURL><TitleVersion><TitleId>000000010000
  Line                  0002</TitleId><Version>97</Version><FsSize>21839872</FsSize></TitleVersion><Titl
  Line                  eVersion><TitleId>000000010000000B</TitleId><Version>10</Version><FsSize>1654784
  Line                  </FsSize></TitleVersion><TitleVersion><TitleId>000000010000000C</TitleId><Versio
  Line                  n>6</Version><FsSize>1654784</FsSize></TitleVersion><TitleVersion><TitleId>00000
  Line                  0010000000D</TitleId><Version>10</Version><FsSize>1654784</FsSize></TitleVersion
  Line                  ><TitleVersion><TitleId>0000000100000100</TitleId><Version>2</Version><FsSize>65
  Line                  536</FsSize></TitleVersion><TitleVersion><TitleId>0000000100000101</TitleId><Ver
  Line                  sion>4</Version><FsSize>229376</FsSize></TitleVersion><UploadAuditData>1</Upload
  Line                  AuditData></GetSystemUpdateResp
Extra bytes (Padding):
  ....J...          00 00 00 00 4A F8 DE C7
FCS - Frame Check Sequence
  FCS (Calculated):     0xB61CB005

[edit] Firmware Update

[edit] First Part

* SOAP SERVER ADDRESS:
http://nus.shop.wii.com:80/nus/services/NetUpdateSOAP

* SOAPaction:
urn:nus.wsapi.broadon.com/GetSystemUpdate

[edit] Message

<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<soapenv:Body>
<GetSystemUpdateRequest xmlns="urn:nus.wsapi.broadon.com">
<Version>1.0</Version>
<MessageId>13198105123219138</MessageId>
<DeviceId>4362227772</DeviceId>
<RegionId>USA</RegionId>
<CountryCode>US</CountryCode>
<TitleVersion>
<TitleId>0000000100000001</TitleId>
<Version>2</Version>
</TitleVersion>
<TitleVersion>
<TitleId>0000000100000002</TitleId>
<Version>33</Version>
</TitleVersion>
<TitleVersion>
<TitleId>0000000100000009</TitleId>
<Version>516</Version>
</TitleVersion>
<Attribute>1</Attribute>
<AuditData></AuditData>
</GetSystemUpdateRequest>
</soapenv:Body>
</soapenv:Envelope>

[edit] Response

<?xml version="1.0" encoding="utf-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<soapenv:Body>
<GetSystemUpdateResponse xmlns="urn:nus.wsapi.broadon.com">
<Version>1.0</Version>
<DeviceId>4362227772</DeviceId>
<MessageId>13198105123219138</MessageId>
<TimeStamp>1163966359696</TimeStamp>
<ErrorCode>0</ErrorCode>
<ContentPrefixURL>http://nus.cdn.shop.wii.com/ccs/download</ContentPrefixURL>
<UncachedContentPrefixURL>http://ccs.shop.wii.com/ccs/download</UncachedContentPrefixURL>
<TitleVersion><TitleId>0000000100000002</TitleId>
<Version>97</Version>
<FsSize>21839872</FsSize>
</TitleVersion><TitleVersion>
<TitleId>000000010000000B</TitleId>
<Version>10</Version>
<FsSize>1654784</FsSize>
</TitleVersion>
<TitleVersion>
<TitleId>000000010000000C</TitleId>
<Version>6</Version>
<FsSize>1654784</FsSize>
</TitleVersion>
<TitleVersion>
<TitleId>000000010000000D</TitleId>
<Version>10</Version>
<FsSize>1654784</FsSize>
</TitleVersion>
<TitleVersion>
<TitleId>0000000100000100</TitleId>
<Version>2</Version>
<FsSize>65536</FsSize>
</TitleVersion>
<TitleVersion>
<TitleId>0000000100000101</TitleId>
<Version>4</Version>
<FsSize>229376</FsSize>
</TitleVersion>
<UploadAuditData>1</UploadAuditData>
</GetSystemUpdateResponse>
</soapenv:Body>
</soapenv:Envelope>

[edit] Unfiltered

1.043622277721319810512321913811641804558190http://nus.cdn.shop.wii.com/ccs/downloadhttp://ccs.shop.wii.com/ccs/download00000001000000029721839872000000010000000B101654784000000010000000C61654784000000010000000D1016547840000000100000100265536000000010000010142293760

* FIXED:
Version:         1.0
DeviceID:        4362227772
MessageID:       13198105123219138
TimeStamp:       1163966359696
ErrorCode:       0
DownloadURL:     http://nus.cdn.shop.wii.com/ccs/download    (Cached)
DownloadURL:     http://ccs.shop.wii.com/ccs/download        (Uncached)

0000000100000002/tmd.97        Filesize: 21839872
000000010000000B/tmd.10        Filesize: 1654784
000000010000000C/tmd.6        Filesize: 1654784
000000010000000D/tmd.10        Filesize: 1654784
0000000100000100/tmd.2        Filesize: 65536
0000000100000101/tmd.4        Filesize: 2293760

[edit] Other

By using packet sniffing, it has been found that these are a few of the Wii update links (all in .bin format)...

http://ccs.shop.wii.com/ccs/download/000000010000000b/00000008 http://ccs.shop.wii.com/ccs/download/000000010000000b/00000009 http://ccs.shop.wii.com/ccs/download/0000000100000002/00000009 http://ccs.shop.wii.com/ccs/download/0000000100000002/0000000a

Maybe we could set up a computer as a http server, with the proper dns routing and some additional setting and trick the wii into thinking it needs an "update" when in all truth we would send "WiiLi" or a linux distro to the console...

This could be a great break through... get a fresh Wii console... then decompile the nintendo .bin files.... and edit to hearts content to make it run the kernel from an SD card or internal memory!

Retrieved from "http://www.wiili.org/index.php/Firmware_Updates"
Personal tools
Online Casino - best online casino reviews.
Facebook Developers - facebook applications, facebook developers, facebook development, social network application development and viral widget social media strategy