Hacking Successfully dumped WiiU EMMC nand with hardmod.

[MeteK]

Hello !

So it worked for me, it was a sucess flashing my dump, but unfortunately i've got an error 160-1710 now ... know what is wrong ?

 

[Net-KILLER]

Note: everything was working flawlessly before trying to update CBHC. Haxchi was fine and installed to system memory with legit eShop game.

Never change a runnin system

 

[EyeKey]

Hello !

So it worked for me, it was a sucess flashing my dump, but unfortunately i've got an error 160-1710 now ... know what is wrong ?

MLC or SLC? How did you take your dump? What was the reason to flash it?

 

[DeadlyFoez]

!!! IT WORKED !!!

WiiU boots normally again and V-Wii mode works.
Thanks to every one involved who helped out and especially @EyeKey for the programming.

I'll test out everything later to see if anything doesn't work properly but it booted CBHC and I ran HBL channel and it worked as it should.

There is still a small issue with v0.1b of nandbincheck as it fails on the boot1 check but it passed with the previous version. Apart from that everything is looking good.

Congrats. Good job. So maybe it is worth me tooling around with this.

 

[MeteK]

MLC or SLC? How did you take your dump? What was the reason to flash it?

SLC, brick because of a format with chbc installed.

By the way what's the difference between slcfull and slccmpt.full dumps ?

 

[EyeKey]

SLC, brick because of a format with chbc installed.

By the way what's the difference between slcfull and slccmpt.full dumps ?

What did you try to flash?
SLC is the WiiU NAND and SLCCMPT is vWii NAND.

Did you dumped with the hard-mod and verified it before flashing?

 

[MeteK]

i dumped it when creating rednand.

it's the only dumps i have ...

i've nandcheck and fixed it, it seems ok.

 

[EyeKey]

You should have backed up the SLC before writing something to it...

Did you verified that it was flashed correctly?

 

[MeteK]

Dumps created while making redNAND aren't good ?

 

[eteles]

New unit has arrived... Now dumping every dam chip this thing has, using the new all in one tool... lol...

GUYS, NEVER FORGET TO BACKUP EVERYTHING with the new Nand dump tool! Friend's advice.

Thanks guys!

 

[LuigiXL]

I've got a bricked Wii U (My bad- CBHC and did a SysNAND format before uninstall) which boots logo then error codes 160-0101. I had also messed around with vWii but unsure this is related.

Is there a way I can use this to bring it back to life? I am unsure what i need for hardmod. Thanks

 

[aut0mat3d]

Atm you need a dump of otp (keys to decrypt mlc)
If you have these keys you could dump mlc with a teensy 2.0++ and fix system.xml

 

[Brenex]

after doing a format of sysNAND after CBHC we need a copy of the OTP key to be able to restore from redNAND. If you were running mocha on redNAND, the only way it would have made an OTP backup is if we specifically ran OTP2SD? I'm getting that from:

https://gbatemp.net/threads/any-way...-wii-u-nand-via-software.464357/#post-7176480

The reason I ask is because on the Mocha page it says, "The OTP and SEEPROM dump is automatically injected into SD card if it is missing when OTP or SEEPROM redirection is enabled in redNAND mode". Also, someone else posted this that made me think it is written to the card at least once:

https://gbatemp.net/threads/release-wii-u-nand-tools.465386/page-2#post-7199755

Is this a copy made to the SD card or a volatile real time injection that isn't saved to the SD card? I guess it might be the latter

Is there any way to get the OTP key at this point using the teensy?

 

[EyeKey]

It is saved on the SD once used, you can check if you have the OTP on the SD with sdio_nand_manager. If you used mocha you would have it.

If not, it isn't possible to get it after a brick.


And just an important note. DON'T flash anything to the SLC before dumping it and verifying the dump.

 

[Brenex]

Well it does seem that I have the OTP and EEPROM dumps on the redNAND! Both copied successfully using sdio in to 1kb files that have data in them. Man, that's awesome.

 

[LuigiXL]

Nice, I used Mocha/Red so hopefully I can retrieve mine too!

I guess there is no way to retrieve a user game save?

 

[EyeKey]

The saves are on the MLC. so flashing the slc won't remove the save.
And beside flashing the old redNAND dump, you can just use the cbhc remover tool with the otp, and than nothing will change... ..

 

[Brenex]

wouldn't formatting of the sysNAND have cleared the MLC?

 

[bluke]

Until a full tutorial is written to unbrick I thought I'd post a few notes about what I've found using the teensy with the WiiU.

I have teensy 2.0 ++ and it doesn't have a mcp1825_sot223 regulator. Do I need it or not? By the way, mine is a little bit difference on back

 

[aut0mat3d]

i am not sure, i would suggest to cut the 5V trace (between the rectangular pads) and power the Teensy via WiiU (TP138 - DO MEASUREMENT FIRST!!)