Hacking Successfully dumped WiiU EMMC nand with hardmod.

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,903
Trophies
1
XP
7,068
Country
United Kingdom
This looks like it may be the same issue @Leeful , did you program the teensy before or after soldering the voltage regulator?

https://www.reddit.com/r/ps3homebre...are_mod_cannot_program_teensy_when_using_33v/
I can't remember if I programmed the teensy before the regulator was added or not but I can detect and program my teensy on 3.3v just fine now without any problem.

One thing I do remember is that at one point while the teensy was all working fine I installed a samsung USB driver for my phone and after that my teensy would not be detected. I uninstalled the samsung phone driver but still nothing. I can't remember which driver I installed to get it working again but I think it must have been the one in the nandway zip.
device.jpg


@CosmoCortney
Hello,
I'm going to dump the NAND of my Kiosk Unit this way. But I'd like to know if this "cut track here" only refers to the removal of resistor 26 or if I should also cut the track beneath it. (Why is there even a track beneath the resistor?)
https://gbatemp.net/attachments/01-jpg.74847/
There was no resistor on my board for R26 and yes I had to cut the track before the EMMC chip could be read. (Cutting this track disconnects the clock signal between the motherboard and the chip so that the only clock signal connected is from the SDcard reader)
 
Last edited by Leeful,
  • Like
Reactions: CosmoCortney

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
I can't remember if I programmed the teensy before the regulator was added or not but I can detect and program my teensy on 3.3v just fine now without any problem.

One thing I do remember is that at one point while the teensy was all working fine I installed a samsung USB driver for my phone and after that my teensy would not be detected. I uninstalled the samsung phone driver but still nothing. I can't remember which driver I installed to get it working again but I think it must have been the one in the nandway zip.
View attachment 91711


@CosmoCortney

There was no resistor on my board for R26 and yes I had to cut the track before the EMMC chip could be read. (Cutting this track disconnects the clock signal between the motherboard and the chip so that the only clock signal connected is from the SDcard reader)
Mayble I'll try programming it without the voltage regulator and then add the voltage regulator. It may have something to do with the software that is preloaded on it.
 

CosmoCortney

i snack raw pasta and chew lollipops
Member
Joined
Apr 18, 2013
Messages
1,768
Trophies
2
Location
on the cool side of the pillow
Website
follow-the-white-rabbit.wtf
XP
3,007
Country
Germany
@CosmoCortney

There was no resistor on my board for R26 and yes I had to cut the track before the EMMC chip could be read. (Cutting this track disconnects the clock signal between the motherboard and the chip so that the only clock signal connected is from the SDcard reader)
Thank you for clarifying this.
I also ordered a Teensy++ 2.0. Instead of using this 3.3v chip can't I use an external 3.3v power source to power up the SLC chip?
 
  • Like
Reactions: Crazywhitie

Crazywhitie

Well-Known Member
Newcomer
Joined
Sep 5, 2007
Messages
78
Trophies
0
XP
917
Country
United States
Ok so I've been reading the thread. I'm I not able the unbrick a cbhc brick by dumping the Nand .. I'm able to get dumps but cant use any of the programs without error.
 

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
Does the LED flash on the teensy when it is plugged into the pc? Maybe you need to install the USB serial drivers first.

It's been a while since I set mine up but I'll ty and help. Try looking at these sites here and here.
First make sure your teensy is working properly by loading the LED blink programs on it with the 'Teensy Loader' program.

When you know how to load programs onto the teensy then use the NANDway_SignalBoosterEdition.hex with the WiiU. (You will need to know which port your teensy is running on.)
Wow this thing is incredibly sensitive. I had the Teensy correctly detecting while in Teensy.exe inside of windows with the voltage regulator on. The light would blink and then when I pressed the button it would detect in the app. I then tried to open the nandway signalboosteredition.hex and it just wouldnt do anything. It acted like it never loaded each time. So next I downloaded the blink fast app for the pp and it loaded fine. When I told it to program the Teensy it immediatley came up with a "download error". Now when I press the button on the Teensy when it's blinking it makes the noise in Windows like it's detecting but the teensy.exe program no longer detects it.

Back to the drawing board.

--------------------- MERGED ---------------------------

Yeah, It says the same thing in device manager now after trying the blinkfast program (device descriptor failed)
 

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
Okay I figured out why it wouldn't detect in windows. It's the 3.3v bridge. This guide says:

"Do NOT join the 3.3V bridge as shown in the picture! This is only needed to be bridged when using 3.3V USB system, which PC's are not." I removed the bridge and teensy.exe detects it again.

Edit: I was using wrong hex file. I just downloaded the hex from the gitbut but that didn't work. I found a mediafire link to it and that one loaded up just fine.

--------------------- MERGED ---------------------------

Sorry @Leeful I'm powering through this and have lots of questions. In your diagrams you have the ground point on the Teensy listed but you don't say where to solder that on the Wii U. I'm assuming that any of the metal shielding on the edges of the ports will work? Is this correct?
 
Last edited by Kafluke,

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,903
Trophies
1
XP
7,068
Country
United Kingdom
Sorry @Leeful I'm powering through this and have lots of questions. In your diagrams you have the ground point on the Teensy listed but you don't say where to solder that on the Wii U. I'm assuming that any of the metal shielding on the edges of the ports will work? Is this correct?
Yes. I found a pic of where I soldered the ground here.

Regarding the bridge pads on the teensy, Have you checked the voltage on the teensy with the pads unbridged? Is the teensy running at 3.3v or 5v?
 

Attachments

  • wiiu-ground.jpg
    wiiu-ground.jpg
    137.5 KB · Views: 396
Last edited by Leeful,

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
Yes. I found a pic of where I soldered the ground here.

Regarding the bridge pads on the teensy, Have you checked the voltage on the teensy with the pads unbridged? Is the teensy running at 3.3v or 5v?
I have a volt meter. Where would I test the voltage?
 

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
so close! I've tripple checked all my wiring. This is what I get when I try and get info from the nand

Pinging Nand0...
ff, ff, ff, ff, ff
chip ff, device_id ff, ff
NAND chip manufacturer: unknown (0xff)
NAND chip type: unknown (0x0000ff)
 

jbuck1975

Well-Known Member
Member
Joined
Dec 28, 2015
Messages
952
Trophies
0
Age
48
XP
619
Country
United States
so close! I've tripple checked all my wiring. This is what I get when I try and get info from the nand

Pinging Nand0...
ff, ff, ff, ff, ff
chip ff, device_id ff, ff
NAND chip manufacturer: unknown (0xff)
NAND chip type: unknown (0x0000ff)
Don't be screwing nothing up. Lol
 

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
Don't be screwing nothing up. Lol
This one is a throwaway Wii U. I purposefully bricked it. I have a spare.

I've stripped it down all the way to the system board. @Leeful, in your instructions you mention the fans and a blue light. I don't have any fans connected. The only thing that is still connected is the power button. As soon as I plug power in the light goes red and won't turn on. Messed up nand (I splashed some solder on the leads but I thought that I had cleaned it all up). If it is messed up I'm not worried. I have a third Wii U to continue this process.
 
  • Like
Reactions: jbuck1975

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,903
Trophies
1
XP
7,068
Country
United Kingdom
so close! I've tripple checked all my wiring. This is what I get when I try and get info from the nand

Pinging Nand0...
ff, ff, ff, ff, ff
chip ff, device_id ff, ff
NAND chip manufacturer: unknown (0xff)
NAND chip type: unknown (0x0000ff)
This might be because you are using and older version of nandway that does not support the WiiU nand.
I've Attached the nandway .py and .hex file that I used that works. Try flashing this .hex to your teensy and use this NANDway.py.

I have just dumped my nand again to test and here are the steps I did:

1: Connect the teensy to WiiU but not to the PC.
2: Plug the power lead in the WiiU. (Red Power LED on front of WiiU comes on)
3: Press the power button on WiiU. (Fan starts, LED turns Blue and CD Drive makes a noise)
4: Plug the Teensy into PC.
5: On the PC open a command prompt in the folder where your NANDway.py is and type:
Code:
python NANDway.py COM6 0 info
(Make sure to change the COM6 part to whatever COM port your teensy in on!)
You should see something like this:
Teensy-INFO.jpg

6: If all went well and the teensy detected your WiiU nand proceed to dumping your nand.
Code:
python NANDway.py COM6 0 dump WiiU_NAND_DUMP.bin
You should see something like this:
Teensy-DUMP.jpg

It will take around an hour and a half to dump the nand.

Something else to point out, the WiiU will not boot if the CD drive is not connected so make sure to connect it and the fan also.
 

Attachments

  • NANDway_SignalBoosterEdition.rar
    13.3 KB · Views: 240
Last edited by Leeful,

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
Sweet! I'm working on this exact part of the guide now. What commands do I use to dump the current slc.bin (even if it currently has CBHC). I already have slc.bin from before the brick but I want to include a section for those that only have otp.bin
 
Last edited by Kafluke,

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,903
Trophies
1
XP
7,068
Country
United Kingdom
Connect RB2 & CE2 from the WiiU motherboard to RB & CE on the Teensy for dumping SLC.bin (the WiiU NAND).
Connect RB1 & CE1 from the WiiU motherboard to RB & CE on the Teensy for SLCCMPT.bin (the vWii NAND).

python NANDway.py COM6 0 dump WiiU_NAND_DUMP.bin

Just rename "WiiU_NAND_DUMP.bin" part to either SLC.bin or SLCCMPT.bin depending on which part is connected to the teensy.
RB2 & CE2 = WiiU nand or RB1 & CE1 = vWii nand.
 
  • Like
Reactions: Kafluke

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,903
Trophies
1
XP
7,068
Country
United Kingdom
@Leeful do you have any good soldering advice? I can't get the wires stuck on the board
A few things to help:
Use liquid solder flux on the board. This helps the solder flow.

Make sure the end of your iron is tinned properly. It should be shiny silver like the solder and not black.

Before trying to solder the wires to the board make sure that the wires are tinned first. (they should have a fine covering of solder on the end.)

Try and solder the points on the board first without trying to attach the wires. This will freshen up the joints on the board so that when you try and solder the wires the fresh solder on the board and the fresh solder on the end of the wires should melt together better and produce a strong clean joint.

Don't hold the iron on the board for too long, about 1 sec or less should be more than enough to melt the solder If your iron is properly tinned and the joint is clean. Any longer and you run the risk of dammaging the board your working on.

Like most things soldering gets easier with practice. If you have some old equiptment lying around try practicing on this first so that you dont wreck the thing your trying to fix even more.

hope this helps. Good luck.
 
  • Like
Reactions: pelago

CosmoCortney

i snack raw pasta and chew lollipops
Member
Joined
Apr 18, 2013
Messages
1,768
Trophies
2
Location
on the cool side of the pillow
Website
follow-the-white-rabbit.wtf
XP
3,007
Country
Germany
A few things to help:
Use liquid solder flux on the board. This helps the solder flow.

Make sure the end of your iron is tinned properly. It should be shiny silver like the solder and not black.

Before trying to solder the wires to the board make sure that the wires are tinned first. (they should have a fine covering of solder on the end.)

Try and solder the points on the board first without trying to attach the wires. This will freshen up the joints on the board so that when you try and solder the wires the fresh solder on the board and the fresh solder on the end of the wires should melt together better and produce a strong clean joint.

Don't hold the iron on the board for too long, about 1 sec or less should be more than enough to melt the solder If your iron is properly tinned and the joint is clean. Any longer and you run the risk of dammaging the board your working on.

Like most things soldering gets easier with practice. If you have some old equiptment lying around try practicing on this first so that you dont wreck the thing your trying to fix even more.

hope this helps. Good luck.
Can't get the wire tinned. Seems to be some trashy solder wire I got there...
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: Like for micro