Hacking [RELEASE] Wii U NAND Tools

EyeKey

Well-Known Member
OP
Member
Joined
Feb 10, 2017
Messages
280
Trophies
0
XP
1,099
Country
Israel
00:00:05:084: ISFS: fs_ops.c(3733)Can not change the owner Id of a non-empty file
00:00:05:084: ISFS: fs_ops.c(6719)Could not set attribute, rc=-524312
It was on a log actually. fs_ops.c, the only google result related to that is GFS2.
That is ISFS, not WFS. (Internal Storage File System). It is the file system that this thread is about, and it is totally not GFS2...
 

happydance

Well-Known Member
Member
Joined
Jul 16, 2009
Messages
598
Trophies
0
XP
349
Country
been waiting for this one! very nice of you to make this tool.

Upcoming tools:
Tool to fix CBHC bricked NAND (with OTP and hardmod).

I take this will use the rednand backup created via software before cfw and otp to make a nand backup flashable with teensy?

I read somewhere that rendnand dump is kidda different from a teensy dump
 

EyeKey

Well-Known Member
OP
Member
Joined
Feb 10, 2017
Messages
280
Trophies
0
XP
1,099
Country
Israel
been waiting for this one! very nice of you to make this tool.



I take this will use the rednand backup created via software before cfw and otp to make a nand backup flashable with teensy?

I read somewhere that rendnand dump is kidda different from a teensy dump
No, without backup. With the OTP you can edit the file and revert CBHC.

nandFixer is the tool to make redNAND dumps flashable. CBHC brick can now be fixed with it if you have NAND backup and OTP. Leeful just unbricked his WiiU with this tool and redNAND backup.

With the upcoming tool NAND backup would be optional.

If you don't have OTP, you can't fix the brick.
 
Last edited by EyeKey,

GraFfiX420

Well-Known Member
Member
Joined
Oct 14, 2009
Messages
465
Trophies
1
XP
1,603
Country
United States
No, without backup. With the OTP you can edit the file and revert CBHC.

nandFixer is the tool to make redNAND dumps flashable. CBHC brick can now be fixed with it if you have NAND backup and OTP. Leeful just unbricked his WiiU with this tool and redNAND backup.

With the upcoming tool NAND backup would be optional.

If you don't have OTP, you can't fix the brick.

Awesome, so LeeFul did confirm that he fixed his brick with this?
 

EyeKey

Well-Known Member
OP
Member
Joined
Feb 10, 2017
Messages
280
Trophies
0
XP
1,099
Country
Israel
Added the last tool that I promised: nandCbhcRemover. Please notice that I didn't try this tool with a real NAND with installed CBHC. (I don't have it installed)

If someone with installed CBHC want to help to test it, you can do it in this way:
run nandFixer on redNAND dump (that was made after cbhc installation).
run nandCbhcRemover on the new nand
open the new nand in NAND Explorer, extract /sys/config/system.xml, and check that default_title_id is wiiu menu.
 

aut0mat3d

Well-Known Member
Member
Joined
Mar 15, 2017
Messages
212
Trophies
0
XP
568
Country
Australia
Thank You verry much!

Did the Test:
Before:
Code:
<default_title_id type="hexBinary" length="8">0005000010195b00</default_title_id>

After:
Code:
 <default_title_id type="hexBinary" length="8">0005001010040200</default_title_id>
RedNAND dump on a PAL console

Should be pretty fine, right?
 

victormr21

Well-Known Member
Member
Joined
Dec 29, 2015
Messages
565
Trophies
0
XP
498
Country
How Can I get a bin file of my NAND?
I only have two bin files and they are OTP and SEEPROM.
My NAND files are the three img files (mlc, slc, slccmpt)
So if i put this files' path in any program, it can't find the correct file
Bye!
 

jbuck1975

Well-Known Member
Member
Joined
Dec 28, 2015
Messages
952
Trophies
0
Age
48
XP
619
Country
United States
Thank You verry much!

Did the Test:
Before:
Code:
<default_title_id type="hexBinary" length="8">0005000010195b00</default_title_id>

After:
Code:
 <default_title_id type="hexBinary" length="8">0005001010040200</default_title_id>
RedNAND dump on a PAL console

Should be pretty fine, right?
Why is the before part the title id of new Super Mario bros?
 

EyeKey

Well-Known Member
OP
Member
Joined
Feb 10, 2017
Messages
280
Trophies
0
XP
1,099
Country
Israel
Thank You verry much!

Did the Test:
Before:
Code:
<default_title_id type="hexBinary" length="8">0005000010195b00</default_title_id>

After:
Code:
 <default_title_id type="hexBinary" length="8">0005001010040200</default_title_id>
RedNAND dump on a PAL console

Should be pretty fine, right?
Yeah, it is good. Thanks!

--------------------- MERGED ---------------------------

How Can I get a bin file of my NAND?
I only have two bin files and they are OTP and SEEPROM.
My NAND files are the three img files (mlc, slc, slccmpt)
So if i put this files' path in any program, it can't find the correct file
Bye!
What tool are you trying to use? The tools here are for slc and slccmpt.
 

aut0mat3d

Well-Known Member
Member
Joined
Mar 15, 2017
Messages
212
Trophies
0
XP
568
Country
Australia
at first get sure to have OTP keys avaiable - without that there is no way atm.
OTP can be dumped seperately or extracted from a rednand dump if you had redirected seeprom and opt
 

EyeKey

Well-Known Member
OP
Member
Joined
Feb 10, 2017
Messages
280
Trophies
0
XP
1,099
Country
Israel
It seems that he isn't bricked, he just wanted to test it. So to dump OTP run otp2sd homebrew.
To dump nand with redNand, just run mochafw homebrew with sd without rednand (it will format it and dump the nand).
 

Leeful

GBAtemp Member
Developer
Joined
Sep 4, 2015
Messages
1,903
Trophies
1
XP
7,068
Country
United Kingdom
@EyeKey I've just tested nandCbhcRemover.exe by writing just the 3 blocks that were changed to the nand and it worked.
The WiiU booted the standard home menu without sigpatches. CBHC boot was removed successfully!

Could you get nandCbhcRemover.exe to display the hex offsets of the changed blocks so that people could write just those blocks to the nand. It would save people a lot of time.
It only takes about 5 seconds to write 3 blocks Vs 3 hours for a full nand write.
 
Last edited by Leeful,

GraFfiX420

Well-Known Member
Member
Joined
Oct 14, 2009
Messages
465
Trophies
1
XP
1,603
Country
United States
Added the last tool that I promised: nandCbhcRemover. Please notice that I didn't try this tool with a real NAND with installed CBHC. (I don't have it installed)

If someone with installed CBHC want to help to test it, you can do it in this way:
run nandFixer on redNAND dump (that was made after cbhc installation).
run nandCbhcRemover on the new nand
open the new nand in NAND Explorer, extract /sys/config/system.xml, and check that default_title_id is wiiu menu.

Awesome, I just want to say thank you so much for taking the time to insure that we don't brick our wii u's!
 
  • Like
Reactions: aut0mat3d

victormr21

Well-Known Member
Member
Joined
Dec 29, 2015
Messages
565
Trophies
0
XP
498
Country
What tool are you trying to use? The tools here are for slc and slccmpt.
I'm trying the NAND fixer because some folders of slccmpt are empty, and then if I can (I couldn't use NAND fixer yet) check the result of this with nandbinCheck, but like I said before, I don't have any bin
And other question, NAND Extractor only shows the FST of the file and extract it or we an do other think like repack...
Bye!
 

aut0mat3d

Well-Known Member
Member
Joined
Mar 15, 2017
Messages
212
Trophies
0
XP
568
Country
Australia
just rename it ;) - its only the file ending differing (if you using windows, you probably have to enable "show file extensions" in folder settings)
 
  • Like
Reactions: Cava

victormr21

Well-Known Member
Member
Joined
Dec 29, 2015
Messages
565
Trophies
0
XP
498
Country
Hi @EyeKey
Finally i could use nandFixer, i renamed the img to bin and done
But it only "works" with slccmpt, with slc it says that it couldn't open input nand, and you said that mlc won't work too.
1 question: Indicates this that slc is fixed? [i think no because i tried it with the fixed slccmpt and it says: Invalid input NAND size (should be dump without ECC))]

2 question: what do you mean with make redNAND dump flashable? We can copy it in a non-formated SD or we can use a friend's dump?
Bye and thanks you so much!
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: It's a shame some people's cake always resort to the same taste