boot1 is the second stage of the Wii’s bootloader. It lives at the beginning of flash; it is encrypted by AES, using a fixed key. It is hashed using SHA1, and verified against a hash that is burned into OTP memory inside the Hollywood during manufacturing. Therefore, boot1 can be changed in a Wii before […]
boot1
June 15th, 2008 · 13 Comments
Tags: Wii
boot0 / skyeye
June 12th, 2008 · 8 Comments
(This is a continuation of boot0) One of the medium-to-long-term projects that Marcan and I have been working is hacking Skyeye to get it to emulate the Starlet. I don’t think will ever be useful as more than a tool for debugging the lowest-level hacks to boot2 that we plan to attempt, but it’s neat to […]
Tags: Wii
boot0
May 31st, 2008 · 26 Comments
This post is part of a several-part series on fixing a “bricked” Wii: UnBrickMii – Introduction, explanation of a 4-part plan to unbrick any Wii amoxiflash – Part 1, a way to modify the NAND Flash of a bricked Wii Mario-Kart Autopsy 1 and 2 – Part 2, a (partial) analysis of what happens to the filesystem […]
Tags: Wii