Hacking Successfully dumped WiiU EMMC nand with hardmod.

Leeful · Mar 24, 2017

No luck. Still wont boot.

After checking the file with v0.1b of nandbincheck it fails on the boot1 check.

Code:

S:\nand_Fixer\v0.1b>nandBinCheck 01b.SLC-FIXED.bin -all
** nandBinCheck : Wii nand info tool **
   from giantpune
   built: Mar 24 2017 04:17:01
checking boot1...
Blocks0to1::CheckBoot1 -> not enough blocks 2
Boot1 check failed!
checking for lost clusters...
found 0 lost clusters
UNK ( 0xffff ) 7f (530f, 58a1, 58a2, 58a3, 58a4, 58a5, 58a6, 58a7, 5abb, 5abc, 5abd, 5abe, 5abf, 6020, 6021, 6022, 6023, 6024, 6025, 6026, 6027, 6028,
 60f2, 60f3, 60f4, 60f5, 60f6, 60f7, 61f0, 61f1, 61f2, 61f3, 61f4, 61f5, 61f6, 61f7, 61f8, 61f9, 61fa, 61fb, 61fc, 61fd, 61fe, 61ff, 63b8, 63b9, 63ba,
 6504, 6505, 6506, 6507, 6528, 6529, 652a, 652b, 652c, 652d, 652e, 652f, 6530, 6531, 6532, 6533, 6534, 6535, 6536, 6537, 6538, 6539, 653a, 653b, 653c,
free            4936
verifying ecc...
0 out of 897664 pages had incorrect ecc.
they were spread through 0 clusters in 0 blocks:
 ()
0 of those clusters are non-special (they belong to the fs)
verifying hmac...
verifying hmac for 367 files
0 files had bad HMAC data
checking HMAC for superclusters...
0 superClusters had bad HMAC data

Stupid me checked it with the old version (v0.1a) and it passed with that, thats why I went ahead and started to write it to the nand.

aut0mat3d · Mar 24, 2017

Brave! - good luck!

Leeful · Mar 24, 2017

It might be OK.
I've just realised I wrote the fixed SLC image to the V-Wii part of the nand!!!!!!!!! :wacko:

I forgot to change the wires over from yesterday.

So sorry about that, Ive been awake for over 30 hours and thats when silly mistakes happen. I will write the CORRECT images over again after I've had some sleep.

aut0mat3d · Mar 24, 2017

ATM i am dumping my slc again as the dumped Data totally looked like scrap compared to the rednand dump - dunno why

Leeful · Mar 24, 2017

One step closer.
Flashed back the fixed SLC image (to the correct nand this time!) and now the blue light comes on and the disc drive and fan start as normal. Before it was completely dead when the power button was pressed.
It still won't boot yet but that is expected because that is how it was before when there was a bad flash on the V-Wii nand.

aut0mat3d said:
ATM i am dumping my slc again as the dumped Data totally looked like scrap compared to the rednand dump - dunno why

How different are they? Could you post a comparrison pic, do they start the same?

aut0mat3d · Mar 24, 2017

attached two images with hex views of the dumped nand and the generated (from rednand with nandfixer)
NAND is recognized by teensy, dumping now the third time - i have no clue why they are different

next i will write the .bin i got from nandfixer and redump it to compare

EyeKey · Mar 24, 2017

aut0mat3d said:
attached two images with hex views of the dumped nand and the generated (from rednand with nandfixer)
NAND is recognized by teensy, dumping now the third time - i have no clue why they are different

next i will write the .bin i got from nandfixer and redump it to compare

Are you sure that you didn't dump the SLCCMPT? Because the vWii starts with empty pages, but WiiU should start with boot1. What is the output of nandBinCheck on your dump?

aut0mat3d · Mar 24, 2017

The output is Failed to determine nand type

Writing is also not possible, something is wrong with my teensy or the wiring.
I checked the wiring now the nth time, all seems ok
- i had EN1 floating, pulled it to VCC and dumping again right ATM

got the ordered infectus flasher yesterday, maybe i should give it a try - but i have to do some research as i never used a infectus (which software to use, wiring,..)

EyeKey · Mar 24, 2017

@aut0mat3d, can you check how many times the string "SFS!" (53465321) appears in your dump?

Leeful · Mar 24, 2017

As @EyeKey said that looks like a SLCCMPT dump. On a SLCCMPT dump the data stars at offset 00108000 (hex), everything before that point is all FFs.

aut0mat3d · Mar 24, 2017

only one time - there is something going terribly wrong

lets wait till the next dump with CE1 pulled up finished
Edit: Dump is halfway done, looks more consisten (no random filled blocks)
-seems that the unused CE needs a pullup

Leeful · Mar 24, 2017

!!! IT WORKED !!!

WiiU boots normally again and V-Wii mode works.
Thanks to every one involved who helped out and especially @EyeKey for the programming. :bow:

I'll test out everything later to see if anything doesn't work properly but it booted CBHC and I ran HBL channel and it worked as it should.

There is still a small issue with v0.1b of nandbincheck as it fails on the boot1 check but it passed with the previous version. Apart from that everything is looking good.

Glix · Mar 24, 2017

Leeful said:
!!! IT WORKED !!!

WiiU boots normally again and V-Wii mode works.
Thanks to every one involved who helped out and especially @EyeKey for the programming.

I'll test out everything later to see if anything doesn't work properly but it booted CBHC and I ran HBL channel and it worked as it should.

There is still a small issue with v0.1b of nandbincheck as it fails on the boot1 check but it passed with the previous version. Apart from that everything is looking good.

Update OP!

EyeKey · Mar 24, 2017

Leeful said:
!!! IT WORKED !!!

WiiU boots normally again and V-Wii mode works.
Thanks to every one involved who helped out and especially @EyeKey for the programming.

I'll test out everything later to see if anything doesn't work properly but it booted CBHC and I ran HBL channel and it worked as it should.

There is still a small issue with v0.1b of nandbincheck as it fails on the boot1 check but it passed with the previous version. Apart from that everything is looking good.

Congratulation! First confirmed unbricked WiiU?

And yea, the boot1 check broke, but I fixed it now.

aut0mat3d · Mar 24, 2017

Congratulations!

Im stuck and lost

I am getting a dump now which looks OK (no ff fe fields) - quite similar to the bin made with nandfixer
unfortuanally nandbincheck could not determine the nand type, also i cannot flash the nand with teensy.
Modded some PS3 Phat with that teensy - the last one was not moddable - i doubt it was a bad/defective flash chip - perhaps my teensy is somewhat broken.
I checked for the last firmware, also actual nandway

I wanted to give the purchased infectus a try (Infectus 360 1b1) - should be the infectus 1 model.
I found Wiring diagrams but no Software - anyone could help?

Tommy084 · Mar 24, 2017

aut0mat3d said:
Software - anyone could help?

Tried this? http://www.xavboxwii.com/fr/backup-nand-par-bonx.php
Software link: http://www.brewology.com/downloads/download.php?id=2306&mcid=3

aut0mat3d · Mar 24, 2017

Huge Thanks @Tommy084 !

Leeful · Mar 24, 2017

Until a full tutorial is written to unbrick I thought I'd post a few notes about what I've found using the teensy with the WiiU.

The Teensy must be converted to run at 3.3v.
Use Teensy Signal Booster Edition and NOT the Dual Nand Edition.
Do at least 3 or 4 nand dumps with the teensy and compare the dumps to make sure the data is identical.
(do not reboot the WiiU between dumps when doing this stage or the contents of the nand will change.)
When writing the dump back to the WiiU use the vwrite command to verify the write and not just the write command.
If when you are writing the dump back to the WiiU and you get any 'Block verification' errors just make a note of block
offsets and you can write just those blocks back again individually so you won't have to write the full image again.

This is the procedure I used to dump and write back to the WiiU with the Teensy.

Code:

Connect teensy to WiiU for either WiiU(RB2 & CE2 Connected) or V-Wii Mode(RB1 & CE1 Connected).
Press Power Button On WiiU
Blue LED on WiiU should be ON and the fan and Disc Drive start up but The WiiU does not boot.
Connect teensy to PC
Use the 'info' command and check that it has detected the NAND.
If the nand is detected OK then use the 'dump' or 'vwrite' command.
When finished, Hold the Power Button on WiiU until LED goes red.
Disconnect the teensy from the PC and then the WiiU.

If for whatever reason this does not work try doing it in this order instead:

Code:

Connect teensy to WiiU for either WiiU(RB2 & CE2 Connected) or V-Wii Mode(RB1 & CE1 Connected).
Connect teensy to PC
Press Power Button On WiiU
Blue LED on WiiU should be flashing but the fan and the Disc Drive do not start up.
Use the 'info' command and check that it has detected the NAND.
If the nand is detected OK then use the 'dump' or 'vwrite' command.
When finished, Hold the Power Button on WiiU until LED goes red.
Disconnect the teensy from the PC and then the WiiU.

I have used both these procedures and they work for me but if your having trouble try the other one.

nexusmtz · Mar 24, 2017

EyeKey said:
First confirmed unbricked WiiU?

I believe it was @smealum who fixed his by fudging bytes so as to not throw off the checksum, but that's the only other one I know of.

eteles · Mar 27, 2017

Hello you guys... My Wii U bricked after trying to update CBHC from 1.5 to 1.6. The installation was successful, but when I tried to reboot I got error 160-0101 screen.

I don't have OTP keys backup up... Is it possible to hardware dump those? I think I may have a vWii nand backup dumped with Homebrew software.... Will it be if any use to me? Maybe this vWii nand backup has the OTP keys...

Please help... Is there a way someone can make a tutorial for unbricking in my situation?

Note: everything was working flawlessly before trying to update CBHC. Haxchi was fine and installed to system memory with legit eShop game.

Please help! Thanks you guys!

eteles · Mar 27, 2017

Repeated. Please delete

Hacking Successfully dumped WiiU EMMC nand with hardmod.

GBAtemp Member

Well-Known Member

GBAtemp Member

Well-Known Member

GBAtemp Member

Well-Known Member

Attachments

Well-Known Member

Well-Known Member

Well-Known Member

GBAtemp Member

Well-Known Member

GBAtemp Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

GBAtemp Member

Well-Known Member

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum