WiiTools v0.1 Released

brakken · #1 01-17-2008, 03:51 AM

Crediar has released the first set of tools to extract and decrypt Nintendo WII ISO images. You'll be required to make use of the "key.bin" file which can be found posted on usenet. Please show some respect and link to who came out with the news first. Enjoy!

"This tool can ED all partitions, or the one you select, from a encrypted Wii ISO.

Place the key you want to use to decrypt a certain encrypted Wii ISO into the key.bin file. It won't work without it!!

This tool can extract all the games files, main.dol, apploader and the fst.bin."

Download: Here

SadSack · #2 01-17-2008, 06:47 AM

I know this is a start to something Great!!
but where do i start how do i use it

IBNobody · #3 01-17-2008, 10:15 AM

Now they only need to figure out how to encrypt/sign things.

smurfro · #4 01-17-2008, 10:56 AM

I see the download link only for libraries and not for wiitools...

sm4rty · #5 01-17-2008, 01:03 PM

yeah this thing works really good

i decrypted and extracted wiiplay and what my eyes see, the game is only 100mb big....

so if you can make your own dolls and encrypt it, you can make multigame discs

wiichkin · #6 01-17-2008, 01:53 PM

methinks this brings us one more step closer to having backup games loading from an attached USB HD

Quantumsource · #7 01-17-2008, 03:53 PM

Does any one have an NZB file to the key, or knows what group the key can be obtained in.

SoraK05 · #8 01-17-2008, 05:09 PM

http://psx-scene.com/forums/nintendo...ls-v0-1-a.html

Guys are talking about it here too

SoraK05 · #9 01-17-2008, 05:19 PM

To add to that, this is amazing work - many many thanks to the members involved in the Wii Homebrew project(s).. may you do everything you want to

dsbomb · #10 01-17-2008, 05:50 PM

Fresh from my work on gcm, I took a look through the fst.bin file. It is nearly identical to the way the Gamecube does the filesystem. Each entry in the table is 12 bytes:

Code:

00: 0 for file, 1 for directory
01-03: string offset
04-07: file offset / 4 or parent directory
08-0C: file size, next directory entry, or the number of entries for the root dir

The only difference is the offset being shifted a couple places. If the rest of the system is going to be so similar to GC coding, maybe it'll be easier than we thought...

brakken · #11 01-17-2008, 07:09 PM

Do not post the KEY or the BIN file on TehSkeen. Period. Previous posts have been deleted.

Quantumsource · #12 01-17-2008, 07:32 PM

When is that work that was used at 24c3 going to be applied to give people the ability to sign and encode our code so that we can actually use home brew on the Wii. Is there a way to copy a signature or modify the checksum or whatever is actually needed to make home brew work with this new set of programs?

nehe32 · #13 01-17-2008, 08:44 PM

Just wondering, but once people can sign the ISO after it is been edited do you think this could lead to custom firmware updates? also once this happens (being able to encrypt) would it be possible to load lets say, a copy of the firmware from Super Paper Mario, load it onto a newer game with a firmware update and flash it with old firmware?

brakken · #14 01-17-2008, 08:54 PM

NOTE: You must be a registered user and confirmed to download files from TehSkeen.

kgonepostl · #15 01-17-2008, 09:01 PM

What exactly does this encryption key allow us to do at the moment?

dsbomb · #16 01-17-2008, 09:12 PM

Quote:

Originally Posted by nehe32

Just wondering, but once people can sign the ISO after it is been edited do you think this could lead to custom firmware updates? also once this happens (being able to encrypt) would it be possible to load lets say, a copy of the firmware from Super Paper Mario, load it onto a newer game with a firmware update and flash it with old firmware?

Being able to encrypt code on a disc is one thing, but I'm sure even Nintendo wouldn't use the same set of keys for both the discs and the internal drive. Doing anything there is likely to be a good bit more difficult (modifying firmware, creating your own channels, etc).

Also, watch the video and read the interview with Bushing again, folks. He said how the encrypting/burning to disc process was very fragile, and it took many failed burns before they managed to get one working for the on-stage demo. Let them work out the bugs and have a good process before getting too caught up in the possibilities.

Quote:

What exactly does this encryption key allow us to do at the moment?

This only allows you to extract and view the individual files in the image.

brakken · #17 01-17-2008, 09:32 PM

I don't think hacking the channels will be too difficult ...

dsbomb · #18 01-18-2008, 12:15 AM

Hmm? Are you talking about the soldering picture? The new photo channel lets you assign a picture to be the icon. Or the time, omg you are in the future! But that's hacking the space-time continuum, oh well.

Meanwhile, I've deciphered the header and other bits of information, between what I know of the Gamecube and what I see from the extracted files. The only thing I am missing is how to calculate the size of the bootfile (main.dol).

brakken · #19 01-18-2008, 12:18 AM

Oops, I didn't know that. I thought it had been hacked. My bad.

Fat D · #20 01-18-2008, 02:39 AM

even if it weren't for the photo channel, there is still photoshop.

disco · #21 01-18-2008, 11:25 AM

great job
you can now locate file on the DVD

test with SMG

split SMG iso in 9 (0 to 8) 500 meg

replace part 1 to 6 by dummies data

use wiied then wiiso : the result is the same as the original iso (windif)

partition 0 is on block 0
partition 1 is on block 7,8

replacing with standart FFFF wil give a very small zip to download

not testing burning a DVD (out of stock)

scrupul0us · #22 01-18-2008, 05:59 PM

"started decrypting"

vikkz · #23 01-18-2008, 07:24 PM

Too bad we cannot encrypt it back yet, then I would have been running homebrew already!

I cannot wait for the encryption tool, if they're actually going to release it..

I just had a quick thought about custom firmware. Since newer games such as Super Mario Galaxy, Guitar Hero III and Super Paper Mario contains firmware updates, we can find these partitions and edit the firmware files. I'm not sure if they're encrypted (could be a problem). As the firmware is encrypted in the NAND specific for each Wii, the encryption is probably made when updating to the new firmware, so maybe we can edit it before it gets encrypted. Just a theory though.

nehe32 · #24 01-18-2008, 08:08 PM

Quote:

I just had a quick thought about custom firmware. Since newer games such as Super Mario Galaxy, Guitar Hero III and Super Paper Mario contains firmware updates, we can find these partitions and edit the firmware files. I'm not sure if they're encrypted (could be a problem). As the firmware is encrypted in the NAND specific for each Wii, the encryption is probably made when updating to the new firmware, so maybe we can edit it before it gets encrypted. Just a theory though.

refer to my post and reply about this

Quote:

Being able to encrypt code on a disc is one thing, but I'm sure even Nintendo wouldn't use the same set of keys for both the discs and the internal drive. Doing anything there is likely to be a good bit more difficult (modifying firmware, creating your own channels, etc).

Also, watch the video and read the interview with Bushing again, folks. He said how the encrypting/burning to disc process was very fragile, and it took many failed burns before they managed to get one working for the on-stage demo. Let them work out the bugs and have a good process before getting too caught up in the possibilities.

vikkz · #25 01-19-2008, 03:43 AM

Since some firmware-files are on the DVD, we could theoretically edit them (unless they're also encrypted), and then perform a system update from that disc. However, own channels, I doubt that for a while (since I guess it's not the same key), perhaps we can find it in the RAM, using the tweezer attack, I have no idea.

LaymondRotts · #26 02-26-2008, 10:58 PM

Disabling the blur filter in Manhunt 2 for Wii can be possible now cause of this ;-)

Shadowzx56 · #27 06-14-2009, 04:06 AM

I'm not quite sure whats wrong, but when I click the link to go to the download page - I get redirected to the overall download page with all the subheadings of games, development etc.
Why wont it direct me straight to the download?
And another small question -
Will this file work without the LG drives?
All I want to be able to do is read the Wii disk, and place the ISO file onto my computer.
Thank you in advance.

Hielkenator · #28 06-14-2009, 10:05 AM

This thread is over a year old.
If you want an iso of your game on your pc, i suggest buying an external HD.
Use sdusb loader to install your game on your HD.
Then extract the iso on your pc with WBFS manager3.0.

Or you can use a wifi disc dumper but, that takes a lot more time.