flacscan I interest anyone in trying to dump the firmware of the Atmel AT90USB162 chip in the Wii Speak microphone?
✧✦Catherine✦✧@flacs sure. what do you know about it?
@whitequark I want to know how the USB chip decrypts the DSP firmware provided by the host
it's possible to inject code but you still need the original blob to pass whatever checks the USB chip does, so currently it's impossible to legally distribute Wii Speak homebrew without asking users to provide the copyrighted blob
@flacs do you know if the lock bits are configured to protect the code from readout?
you can defeat those with nail polish but unfortunately i am not currently setup to do decapping...
@whitequark no idea tbh (what does the nail polish do?)
@flacs you can use it to cover everything but the lock bits physically on the die, and then use UV to erase the rest
@flacs anyway, if you give me one of these chips i can do some prep work at least; then maybe @azonenberg can help extract the firmware if it's protected?
@whitequark as @mini_ninja_64 pointed out, CeX has them for £0.50 a pop if you pick them up from a store: https://uk.webuy.com/product-detail?id=SWIIWIISPE01
note: triwing screws^^
@flacs ok i got it
will investigate in the coming hours or sth
@flacs okay, i spent several hours carefully poking this device and i've concluded that it has most or all of the possible protection mechanisms activated (unsurprising given it's nintendo); i haven't tried parallel prorgramming (i might later), but everything obvious i've tried so far has failed
@flacs i've ordered the equipment to instrument the bare IC for parallel programming; beyond that what will be necessary is to do ASIC level surgery (electrical or mechanical)
@flacs also if you have $2000 to drop on this, i can send it to a sketchy russian service which promises to be able to just read out the firmware