iQue Player hacking possibility with ique_diag.exe?

HNKii

Well-Known Member
OP
Member
Joined
Jan 28, 2014
Messages
477
Trophies
0
Location
Mario Kart Wii-DS Link Play Stadium
XP
603
Country
Switzerland
ique_diag.exe is a diagnosis software for the iQue Player, bundled with the latest iQue@Home update V1.4.2 2005101909. (The latest version has a "diagnosis" feature, which probably uses ique_diag.exe
The latest version is neither downloadable here:http://ique.com/products/M_athome.htm, nor is it included on any disk. It can only be aquired after running the update utility.
(The update server went defunct even before the iQue Player shop shutdown, so there's no way to obtain the update officially now. My iQue@Home was updated to the latest version in mid-2013)
The executable is located at iQue@Home/pkgs/diag.
The software requires hooking an iQue Player to it(not possible if your computer/virtual machine is 64-bit as iQue Player only has a 32-bit driver)but can actually be run without running the entire iQue@Home software, though.
Here are all the commands for ique_diag.exe:
4BiQcRb.png

This exe might be helpful for iQue Player hacking because it extracts tickets and other stuff from the iQue Player, and I've not yet seen any attempts to hack the iQue Player tried using this tool.


Download:http://www.mediafire.com/file/g1xaf6q9k84y5ah/ique_diag.exe
 
Last edited by HNKii,

HNKii

Well-Known Member
OP
Member
Joined
Jan 28, 2014
Messages
477
Trophies
0
Location
Mario Kart Wii-DS Link Play Stadium
XP
603
Country
Switzerland
I played around with ique_diag.exe and found out what some of the commands do:
B: Initializes the iQue Player (Called BB Controller internally) hooked to the PC. No commands can be run without initializing.
A: Possibly uses to check if the iQue card is inserted into the iQue Player.
C: Prints stats of the iQue Player:
rfk2Q4V.png

These "blocks" are not the same unit as the blocks presented to the user at iQue@Home. My iQue card has 28 free blocks out of all 240 blocks in terms of the "blocks" displayed on iQue@Home client.
I: Gets player identity
LutaV5t.png

GI~GU: writes the corresponding info from the iQue Player into a file. Say, if I use GT tickets.dat, a ticket.dat file will be created in the same directory as ique_diag.
H ledval: I didn't figure out what LED pattern comes from what LED value yet.
J: Possibly syncs the iQue Player's internal clock to that of the PC as there is no time setting option for this command. I cannot test it as my iQue Player's clock battery is dead.
L: Gets all the contents currenly installed on iQue Player.
Here's mine:
ffY2950.png

The content id is in Hex. Translate to Dec to get the original ID.
For instance, the largest file has id 201358, which is 2102104 in Dec.
21012104 is the game Paper Mario. (21021 is Paper Mario's internal code, as can be seen on iQue's website&Game Manual.)
The game size matches the size of the corresponding size of the encrypted cache file for that game( Unit: Bytes)
[Paper Mario occupies 160 blocks shown on iQue Player client.]
For the smaller games, say 201678, is 2101904 in Dec.
That's Paper Mario's on-console manual. (The first four digits are the same, the fifth digit changes into 9 for manuals) Size matches that of its corresponding cache file.
[Paper Mario Manual occupies 2 blocks shown on client]
On-console manuals can be executed as games on iQue Player, and the're recoginized always as purchased titles.

*The last two digits don't have to be the same for manuals and games, but there's still a pattern:
Encrypted cache files with only the last two digits different have almost, if not 100%, identical sizes, and only the caches with the largest ending digit gets downloaded from the server if a user is sending a request to purchase, trial or retrieve a games from server.
So I guess the last 2 digits might be the version indicator.

U\M\R: Gets, restores and removes the corresponding game/manual from/to iQue Player.
<del>Getting a game to file will create a file that's identical to the corresponding cache downloaded from server and included in iQue@Home download.
(Files match on MD5)</del>
Edit: they do not match with server downloads. I am terribly sorry for this error.
 
Last edited by HNKii,
  • Like
Reactions: Sliter

HNKii

Well-Known Member
OP
Member
Joined
Jan 28, 2014
Messages
477
Trophies
0
Location
Mario Kart Wii-DS Link Play Stadium
XP
603
Country
Switzerland
Some useful information on game id and their encrypted caches:

Download link for encrypted game cache from server
http://cds.idc.ique.com:16963/cds/download?content_id=x
(*old version is guessed, not 100% sure)

x:
10000003-Unknown, included in iQue@Home download from iQue.com
1082-Unknown, included in iQue@Home download from iQue.com
1101104-Super Mario 64
1101902-SM64 Manual(old version)
1101906-SM64 Manual
1102101-Yoshi's Story
1102902-Yoshi's Story manual(old version)
1102904-Yoshi's Story manual(old version)
1102906-Yoshi's Story manual
1106-Unknown,not included in older versions of iQue@Home, and only available in the update version(like ique_diag.exe?)
1201105 - Super Smash Bros.
1201901- SSB manual
2101104-Ocarina of Time
2101902-OOT manual (old)
2101904-OOT manual
2102104-Paper Mario
2102902-PM manual (old)
2102904-PM manual
2104108 - Animal Crossing
2105103 - Custom Robo
4101104-Star Fox (old version)
4101105-Star Fox
4101902-Star Fox manual(old version)
4101904-Star Fox manual
4102103-Sin&Punishment
4102901-Sin&Punishment manual
5101104-Wave Race
5101902-WR manual(old)
5101904-WR manual
5102108 - Excitebike 64
5102902- EB64 manual
5201104-Mario Kart 64(old version)
5201105-Mario Kart 64
5201902-MK64 manual(old)
5201906-MK64 manual
5202103-F-Zero
5202902-F-Zero Manual(old)
5202904-F-Zero Manual
6101104-Dr.Mario
6101902-Dr.Mario Manual(old version)
6101904-Dr.Mario Manual

I'm not sure if this list is complete! If anyone can make a crawler for http://cds.idc.ique.com:16963/cds/download?content_id=, please do find all the files!

Other files found:
10XX&11XXes: Unknown, possibly for iQue Player Firmware updates:
1009
1010
1011
1012
1013

1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054

1062

1071
1072

1091

1095

1099


1101

10000000+s: Unknown, also possibly for iQue Player Firmware updates:
10000001
10000002


**Explanations on Game IDs:
iQue Player games/server notes from HNK, Kenny, and DKL3:

cds.idc.ique.com:16963/cds/download?content_id=x

* 1000-1100 are probably firmware updates, as are 10000001-10000003
* 2106101 ID is an all new game...
* The first digit in the numbers defines the game's genre. Use this pic for reference: https://files.catbox.moe/uq3hl1.png
** 11 titles are platformers
** 12 titles are fighting games
** 21 titles are RPGs
** 41 titles are shooters
** 51 titles are sports games
** 52 titles are racing games (subgenre)
** 61 titles are puzzle games

* The 2106101 ID falls under the RPG, like Ocarina of Time. Could this be the lost 15th iQue game--Majora's Mask?
* In addition, 2106101 cannot be purchased:
** Super Mario 64 page: http://osc.idc.ique.com:16976/osc/public/htm?OscAction=purchase_title&playerID=undefined&titleID=11011&locale=&OscSessId=""
** Mysterious game: http://osc.idc.ique.com:16976/osc/public/htm?OscAction=purchase_title&playerID=undefined&titleID=21061&locale=&OscSessId=""

*The manuals have the 5th digit as a '9', whereas the games would have a '1'. Refer here again: https://files.catbox.moe/uq3hl1.png . Often, the very last digit is either 1-6, never 7-9.
 
Last edited by HNKii,
  • Like
Reactions: Sliter

KevinLSX

Well-Known Member
Member
Joined
Mar 6, 2016
Messages
526
Trophies
0
XP
1,112
Country
United States
Hope this works. The fact that it can get the games tickets means we can probably use it with the unknown formatted game files for it.

--------------------- MERGED ---------------------------

Im wondering, the ique can be read from the video and power cord that im buying, but it also has a separate usb plug thst was used for the ique@home. I dont have time now but tomorrow im going to check if using the usb cord to the pc with this program, if it can read and write to the Ique. Ill post the results tomorrow.
 

Sliter

Well-Known Member
Member
Joined
Dec 7, 2013
Messages
3,264
Trophies
0
Location
ᕕ( ᐛ )ᕗ
XP
1,770
Country
Brazil
this is really interesting!
do it have any acess to the FW? like, I was thinking if it gonna be possible do something like NES/Famicom mini that they found a way to add games there or even a cfw that let it even play more games? hahaha
(I should get a Ique before that, because I'm sure it's price gonna increase crazily after that e3e)
 

ScarletDreamz

[Debug Mode]
Member
Joined
Feb 16, 2015
Messages
3,967
Trophies
1
Location
/dev/sda1
XP
4,380
Country
United States

Sliter

Well-Known Member
Member
Joined
Dec 7, 2013
Messages
3,264
Trophies
0
Location
ᕕ( ᐛ )ᕗ
XP
1,770
Country
Brazil
right XD
well a strange idea come up here since they don't produce this or sell the games any more, what if we ask the iQue guys about it?:P lololol

by the way I'm curious about the multiplayer .. I know that the IQue have an acessory to add "just controllers" and be abe to play it in multiplayer, also saw a guy that used the Ique as a common n64 controller... so it would be so much complex to connect the common controllers on a Ique or better look the accessory for that? XD
I'm not sure if it have any hardware :P
 
Last edited by Sliter,

Zhongtiao1

Well-Known Member
Member
Joined
Feb 24, 2015
Messages
818
Trophies
0
Age
26
XP
2,717
Country
United States
Some useful information on game id and their encrypted caches:

Download link for encrypted game cache from server
http://cds.idc.ique.com:16963/cds/download?content_id=x
(*old version is guessed, not 100% sure)

x:
10000003-Unknown, included in iQue@Home download from iQue.com
1082-Unknown, included in iQue@Home download from iQue.com
1101104-Super Mario 64
1101902-SM64 Manual(old version)
1101906-SM64 Manual
1102101-Yoshi's Story
1102902-Yoshi's Story manual(old version)
1102904-Yoshi's Story manual(old version)
1102906-Yoshi's Story manual
1106-Unknown,not included in older versions of iQue@Home, and only available in the update version(like ique_diag.exe?)
1201105 - Super Smash Bros.
1201901- SSB manual
2101104-Ocarina of Time
2101902-OOT manual (old)
2101904-OOT manual
2102104-Paper Mario
2102902-PM manual (old)
2102904-PM manual
2104108 - Animal Crossing
2105103 - Custom Robo
4101104-Star Fox (old version)
4101105-Star Fox
4101902-Star Fox manual(old version)
4101904-Star Fox manual
4102103-Sin&Punishment
4102901-Sin&Punishment manual
5101104-Wave Race
5101902-WR manual(old)
5101904-WR manual
5102108 - Excitebike 64
5102902- EB64 manual
5201104-Mario Kart 64(old version)
5201105-Mario Kart 64
5201902-MK64 manual(old)
5201906-MK64 manual
5202103-F-Zero
5202902-F-Zero Manual(old)
5202904-F-Zero Manual
6101104-Dr.Mario
6101902-Dr.Mario Manual(old version)
6101904-Dr.Mario Manual

I'm not sure if this list is complete! If anyone can make a crawler for http://cds.idc.ique.com:16963/cds/download?content_id=, please do find all the files!

If you replace the contentid=x with the contentid of the game it automatically downloads it for you
 
  • Like
Reactions: CaptainSodaPop

KevinLSX

Well-Known Member
Member
Joined
Mar 6, 2016
Messages
526
Trophies
0
XP
1,112
Country
United States
right XD
well a strange idea come up here since they don't produce this or sell the games any more, what if we ask the iQue guys about it?:P lololol

by the way I'm curious about the multiplayer .. I know that the IQue have an acessory to add "just controllers" and be abe to play it in multiplayer, also saw a guy that used the Ique as a common n64 controller... so it would be so much complex to connect the common controllers on a Ique or better look the accessory for that? XD
I'm not sure if it have any hardware :P
Ive seen that too. Im going to try and open my ique swim box and see if I can solder some n64 controller extension cords to it.
Also I found this wierd port at the back of it

 
  • Like
Reactions: Sliter

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • Psionic Roshambo @ Psionic Roshambo:
    Batman joined the Trans Justice League
    +2
  • Sicklyboy @ Sicklyboy:
    based af
    +2
  • Sonic Angel Knight @ Sonic Angel Knight:
    Forget the base, get on the roof.
  • K3Nv2 @ K3Nv2:
    Is that a bat in your buckle or are you just happy to have me
  • Psionic Roshambo @ Psionic Roshambo:
    Wonder "Woman" lol you wonder if they are a woman?
  • Psionic Roshambo @ Psionic Roshambo:
    The Riddler has questions...
  • K3Nv2 @ K3Nv2:
    Played a little of snow day glad I didn't spend $30
  • K3Nv2 @ K3Nv2:
    It's asthetic is okay maybe a good $10 grab
  • Psionic Roshambo @ Psionic Roshambo:
    Lol is it a game about doing cocaine?
  • K3Nv2 @ K3Nv2:
    Probably in pvp
  • Psionic Roshambo @ Psionic Roshambo:
    I tried Balders Gate II on the PS2 a few minutes ago, not bad lol
  • Psionic Roshambo @ Psionic Roshambo:
    My back catalog of games is like that scene at the end of Indiana Jones where the arc of the covenant is being stored in a giant ass warehouse
  • K3Nv2 @ K3Nv2:
    At least I can will my game catalog to family members
    +1
  • K3Nv2 @ K3Nv2:
    It's your problem now bitches
  • Psionic Roshambo @ Psionic Roshambo:
    Put it in your will that in order to receive any money they have to beat certain games, hard games and super shitty games...
  • Psionic Roshambo @ Psionic Roshambo:
    Say 20 bucks per Ninja Gaiden on the NES lol 60 bucks for all 3
  • Psionic Roshambo @ Psionic Roshambo:
    People you like "Beat level 1 of Ms Pacman" lol
  • K3Nv2 @ K3Nv2:
    Hello kitty ds is required
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Beat Celebrity Death Match on the PS1 omg tried it earlier today .... Absolutely trash
  • Psionic Roshambo @ Psionic Roshambo:
    Like -37 out of 10
  • Psionic Roshambo @ Psionic Roshambo:
    One of the worst games I have ever played
  • K3Nv2 @ K3Nv2:
    Make them rank up every cod game out
  • K3Nv2 @ K3Nv2:
    "Now I know why he took his own life"
    K3Nv2 @ K3Nv2: "Now I know why he took his own life"