WiiUBrew

Changes

Hardware/eFuse (view source)

Revision as of 23:18, 25 January 2016

2,284 bytes added ,  23:18, 25 January 2016
no edit summary
Line 80: Line 80:  
|- style="background-color: #ddd;"
 
|- style="background-color: #ddd;"
 
! Bank
 
! Bank
−
! Address
+
! Offset (word index * 4)
 
! Size
 
! Size
 
! Description
 
! Description
 
|-
 
|-
−
| 0 (vWii bank) || 0x005 to 0x009 || 0x10 bytes || Possibly old Wii key.
+
| 0 (Wii bank) || 0x000 (0x00 * 4) || 0x14 bytes || Wii boot1 SHA-1 hash.
 
|-
 
|-
−
| 0 (vWii bank) || 0x011 to 0x016 || 0x14 bytes || Possibly old Wii hash.
+
| 0 (Wii bank) || 0x014 (0x05 * 4) || 0x10 bytes || Wii common key.
 
|-
 
|-
−
| 0 (vWii bank) || 0x016 to 0x01A || 0x10 bytes || Possibly old Wii key.
+
| 0 (Wii bank) || 0x024 (0x09 * 4) || 0x04 bytes || Wii NG ID.
 
|-
 
|-
−
| 1 (unknown) || 0x100 to 0x101 || 0x04 bytes || Key type.
+
| 0 (Wii bank) || 0x028 (0x0A * 4) || 0x1D bytes || Wii NG private key.
 
|-
 
|-
−
| 1 (unknown) || 0x101 to 0x102 || 0x04 bytes || boot0 checks this value.
+
| 0 (Wii bank) || 0x044 (0x11 * 4) || 0x14 bytes || Wii NAND HMAC (overlaps with NG private key).
 
|-
 
|-
−
| 1 (unknown) || 0x102 to 0x103 || 0x04 bytes || boot0 checks this value.
+
| 0 (Wii bank) || 0x058 (0x16 * 4) || 0x10 bytes || Wii NAND key.
 
|-
 
|-
−
| 1 (unknown) || 0x104 to 0x108 || 0x10 bytes || Unknown.
+
| 0 (Wii bank) || 0x068 (0x1A * 4) || 0x10 bytes || Wii RNG key.
 
|-
 
|-
−
| 1 (unknown) || 0x108 to 0x10C || 0x10 bytes || Unknown.
+
| 0 (Wii bank) || 0x078 (0x1E * 4) || 0x08 bytes || Unknown.
 
|-
 
|-
−
| 1 (unknown) || 0x114 to 0x118 || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x080 (0x20 * 4) || 0x04 bytes || Security level flag.
 +
Retail: 0x90000000; Debug: 0x08000000; Factory: 0x00000000.
 +
Flag 0x40000000 causes an error in boot0.
 +
Flag 0x00000000 makes boot0 use empty SEEPROM and boot1 keys.
 +
Flag 0x08000000 tells boot0 to use rsa_pub0 (debug).
 +
Flag 0x90000000 or 0x10000000 tells boot0 to use rsa_pub1 (retail).
 
|-
 
|-
−
| 1 (unknown) || 0x118 to 0x11C || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x084 (0x21 * 4) || 0x04 bytes || Some flag for IOStrength configurations.
 +
Flag 0x00008000 sets register 0x0D8001E0.
 +
Flags 0x00000008, 0x00000080, 0x00000800, 0x00002000 set register 0x0D8001E4.
 +
Should be 0x00000000 in retail units.
 
|-
 
|-
−
| 2 (unknown) || 0x200 to 0x204 || 0x10 bytes || boot0 uses this for AES.
+
| 1 (Wii U bank) || 0x088 (0x22 * 4) || 0x04 bytes || Pulse length for SEEPROM manual CLK.
 +
Should be 0x00000000 in retail units (defaults to 0xFA in boot0).
 
|-
 
|-
−
| 2 (unknown) || 0x208 to 0x20C || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x08C (0x23 * 4) || 0x04 bytes || Unknown (0x00010000).
 
|-
 
|-
−
| 2 (unknown) || 0x20C to 0x210 || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x090 (0x24 * 4) || 0x10 bytes || Wii U Starbuck ancast key.
 
|-
 
|-
−
| 2 (unknown) || 0x210 to 0x214 || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x0A0 (0x28 * 4) || 0x10 bytes || Wii U SEEPROM key.
 
|-
 
|-
−
| 2 (unknown) || 0x214 to 0x218 || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x0B0 (0x2C * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 2 (unknown) || 0x218 to 0x21C || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x0C0 (0x30 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 2 (unknown) || 0x21C to 0x300 || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x0D0 (0x34 * 4) || 0x10 bytes || vWii common key.
 
|-
 
|-
−
| 3 (unknown) || 0x300 to 0x304 || 0x04 bytes || Unknown.
+
| 1 (Wii U bank) || 0x0E0 (0x38 * 4) || 0x10 bytes || Wii U common key.
 
|-
 
|-
−
| 3 (unknown) || 0x304 to 0x308 || 0x10 bytes || Unknown.
+
| 1 (Wii U bank) || 0x0F0 (0x3C * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 3 (unknown) || 0x308 to 0x30C || 0x10 bytes || Unknown.
+
| 2 (Wii U bank) || 0x100 (0x40 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 3 (unknown) || 0x318 to 0x31D || 0x14 bytes || Unknown.
+
| 2 (Wii U bank) || 0x110 (0x44 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 4 (unknown) || 0x407 to 0x408 || 0x04 bytes || Unknown.
+
| 2 (Wii U bank) || 0x120 (0x48 * 4) || 0x10 bytes || Key to encrypt/decrypt SSL RSA key.
 
|-
 
|-
−
| 4 (unknown) || 0x408 to 0x410 || 0x20 bytes || Unknown.
+
| 2 (Wii U bank) || 0x130 (0x4C * 4) || 0x10 bytes || Key to encrypt/decrypt WagonU key.
 
|-
 
|-
−
| 4 (unknown) || 0x410 to 0x418 || 0x20 bytes || Unknown.
+
| 2 (Wii U bank) || 0x140 (0x50 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 4 (unknown) || 0x418 to 0x41C || 0x10 bytes || Unknown.
+
| 2 (Wii U bank) || 0x150 (0x54 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 5 (unknown) || 0x500 to 0x501 || 0x04 bytes || Unknown.
+
| 2 (Wii U bank) || 0x160 (0x58 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 5 (unknown) || 0x501 to 0x502 || 0x04 bytes || Unknown.
+
| 2 (Wii U bank) || 0x170 (0x5C * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 5 (unknown) || 0x502 to 0x503 || 0x04 bytes || Unknown.
+
| 3 (Wii U bank) || 0x180 (0x60 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 5 (unknown) || 0x503 to 0x513 || 0x40 bytes || Unknown.
+
| 3 (Wii U bank) || 0x190 (0x64 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 6 (SEEPROM bank) || 0x600 to 0x618 || 0x60 bytes || Possibly the old SEEPROM certificate data.
+
| 3 (Wii U bank) || 0x1A0 (0x68 * 4) || 0x10 bytes || Unknown.
 
|-
 
|-
−
| 6 (SEEPROM bank) || 0x618 to 0x700 || 0x20 bytes || Unknown.
+
| 3 (Wii U bank) || 0x1B0 (0x6C * 4) || 0x30 bytes || Unknown.
 
|-
 
|-
−
| 7 (boot1 bank) || 0x700 to 0x708 || 0x20 bytes || Unknown.
+
| 3 (Wii U bank) || 0x1E0 (0x78 * 4) || 0x14 bytes || Unknown.
 
|-
 
|-
−
| 7 (boot1 bank) || 0x708 to 0x70C || 0x10 bytes || boot1 AES key.
+
| 3 (Wii U bank) || 0x1F4 (0x7D * 4) || 0x0C bytes || Unknown.
 
|-
 
|-
−
| 7 (boot1 bank) || 0x70C to 0x800 || 0x50 bytes || Unknown.
+
| 4 (Wii U bank) || 0x200 (0x80 * 4) || 0x1C bytes || Unknown.
 +
|-
 +
| 4 (Wii U bank) || 0x21C (0x87 * 4) || 0x04 bytes || vWii NG ID?
 +
|-
 +
| 4 (Wii U bank) || 0x220 (0x88 * 4) || 0x20 bytes || vWii NG private key?
 +
|-
 +
| 4 (Wii U bank) || 0x240 (0x90 * 4) || 0x20 bytes || Unknown.
 +
|-
 +
| 4 (Wii U bank) || 0x260 (0x98 * 4) || 0x10 bytes || Unknown.
 +
|-
 +
| 4 (Wii U bank) || 0x270 (0x9C * 4) || 0x10 bytes || Unknown.
 +
|-
 +
| 5 (Wii U bank) || 0x280 (0xA0 * 4) || 0x04 bytes || Wii U/vWii Root-CA version (0x00000012)?
 +
|-
 +
| 5 (Wii U bank) || 0x284 (0xA1 * 4) || 0x04 bytes || Wii U/vWii Root-CA MS (0x00000003)?
 +
|-
 +
| 5 (Wii U bank) || 0x288 (0xA2 * 4) || 0x04 bytes || Unknown.
 +
|-
 +
| 5 (Wii U bank) || 0x28C (0xA3 * 4) || 0x40 bytes || Wii U/vWii Root-CA signature?
 +
|-
 +
| 5 (Wii U bank) || 0x2CC (0xB3 * 4) || 0x14 bytes || Unknown.
 +
|-
 +
| 5 (Wii U bank) || 0x2E0 (0xB8 * 4) || 0x20 bytes || Empty.
 +
|-
 +
| 6 (Wii SEEPROM bank) || 0x300 (0xC0 * 4) || 0x60 bytes || Old Wii SEEPROM certificate data.
 +
|-
 +
| 6 (Wii SEEPROM bank) || 0x360 (0xD8 * 4) || 0x20 bytes || Old Wii SEEPROM signature?
 +
|-
 +
| 7 (boot1 bank) || 0x380 (0xE0 * 4) || 0x20 bytes || Empty.
 +
|-
 +
| 7 (boot1 bank) || 0x3A0 (0xE8 * 4) || 0x10 bytes || boot1 key.
 +
|-
 +
| 7 (boot1 bank) || 0x3B0 (0xEC * 4) || 0x30 bytes || Empty.
 +
|-
 +
| 7 (boot1 bank) || 0x3E0 (0xF8 * 4) || 0x10 bytes || Unknown.
 +
|-
 +
| 7 (boot1 bank) || 0x3F0 (0xFC * 4) || 0x0C bytes || ASCII tag (unknown meaning).
 +
|-
 +
| 7 (boot1 bank) || 0x3FC (0xFF * 4) || 0x04 bytes || JTAG status.
 +
Set to 0xE1 in retail.
 +
If bit 0x80 is set, JTAG is disabled.
 
|-
 
|-
 
|}
 
|}
Hykem
108

edits

Retrieved from "https://wiiubrew.org/wiki/Special:MobileDiff/1622"