![]() ![]() ![]() > Bits 10-14 set a delay before asking SMC if the SD boot combo has been pressed. > Bits 0-9 set the CPU speed in MHz used for various IO delay calculations. 0x1C0 to 0x1C2 (0x02 bytes): CPU control flags. Structure containing parameters for boot0: If the flag is 0x0000, the SHDD key is not set.īoot parameters (encrypted with Wii U SEEPROM key) If the flag is 0xFFFF, the SHDD key is set and encrypted with a key from OTP. If the flag is 0x0000, the drive key is set and in plain form. If the flag is 0xFFFF, the drive key is set and encrypted with the Wii U SEEPROM key. The first 0x04 bytes of this key must match the Wii U NG ID. This seed is encrypted with a key from OTP then used to set the /dev/crypto USB key. This key is cleared by IOS-MCP at factory. Decrypt with Wii U SEEPROM Key if needed. It is also combined with the OTP's RNG key and the OTP's RNG seed to setup the IOS-CRYPTO RNG functions.Ġx4556: EV (EV: Evaluation board? EV_Y also exists)Ĭheck Drive Key's Status Flag. This seed is incremented every time IOS-CRYPTO starts. Most of the data here is written once at the factory and never changed, but some fields are updated fairly frequently: It is accessed by twiddling some of the Starbuck GPIO lines in the exact same way as it was done on the Wii's Starlet GPIO lines. The Latte package contains a 93C66 (or similar) SPI EEPROM, organized as 256 16-bit words, making it twice the size of the EEPROM found in the Wii's Hollywood package.
0 Comments
Leave a Reply. |