[Guide] Kafluke's HardMod CBHC Unbrick guide

Discussion in 'Wii U - Hacking & Backup Loaders' started by Kafluke, Jul 7, 2017.

  1. Leeful

    Leeful GBAtemp Fan

    Member
    5
    Sep 4, 2015
    Excellent, This is looking just as I hoped it would.
    540,672KB is the correct size we are looking for and it is the SLC WiiU nand and not the SLCCMPT V-Wii nand that was dumped.

    You NEED the dump to have the ECC data. That was the whole problem with the old dumps that came from a rednand with sdio_nand_manager (the slc.full.img). They did not include the ECC data that is why they are smaller (524,288KB) and that is why they do not work with the hardmod.

    Eyekey's "nandFixer.exe" adds the missing ECC data to the slc.full.img making it the FULL and correct 540,672KB to work with the hardmod.

    The next thing I would like you to do is run the slc_test.bin that you have through Eyekeys "nandCbhcRemover.exe". That should remove the CBHC from the nand image so that it will work when it is flashed back to the WiiU.

    Before anything is flashed back to the WiiU I would feel more confident if you changed the teensy back to the SignalBoosterEdition setup and dumped the nand again. Then run it through "nandbincheck.exe" and compare it to what you got last time.

    If all is good there is 1 more thing that I will need to do and that is to remove a couple of lines from the nandway.py to take out the nand size protection check so that you will be able to write the image back to your nand. That is what is stopping you from writing anything to the WiiU at the moment because nandway is still not correctly identifying the correct nand size. It sees it a 2GB and so it expects a 2GB nand image and not the 512MB one which you have.
     
    Anonyamalious and Kafluke like this.
  2. Anonyamalious

    Anonyamalious Member

    Newcomer
    2
    Sep 12, 2010
    Canada
    @Leeful here is the dump with the boosteredition setup with cbhc removed, I even shortened the wires in hopes of a better read. Looks like it's exactly the same thing though. Will it flash properly even with the bad clusters and bad HMAC data?

    Screenshot Boosteredition
     
  3. Leeful

    Leeful GBAtemp Fan

    Member
    5
    Sep 4, 2015
    The part that worries me a bit is the 1 supercluster with bad HMAC data. I don't know if its ok with that or not.

    If you do want to try a write that is entirely up to you but I do not want to be held responsible if it does some dammage to the nand that cannot be fixed.
    But to be honest, If I were in your situation I would give it a go.

    I've attached a modified version of nandway.py with the nand size check removed.
    First I would just try and write the first 10 blocks to see if it writes without errors. Here is the command for that:

    Nandway_NO_PROTECT.py COM6 0 vwrite slc_test.bin 00 10

    Note the new name of the nandway py and check that the COM and image filename are correct for you.

    If that writes without any errors then go for the full write:

    Nandway_NO_PROTECT.py COM6 0 vwrite slc_test.bin 00 1000

    When it is writing keep checking if it has detected any verify errors and if it does make sure to keep a note of them so that you can just re-flash those blocks back later to save a lot of time.

    If it fails on every block, something is wrong and we'll have to look at it again.

    If it does the 10 blocks without any problems please post a screenshot before doing the full nand because the full nand write will take around 3 hours.

    Fingers crossed and I hope it works.:)
     

    Attached Files:

    Last edited by Leeful, Jul 15, 2017
  4. Godwin_Point

    Godwin_Point Member

    Newcomer
    1
    Feb 16, 2015
    France
    Lannilis
    Hello

    I posted about this issue a few weeks ago, but I wanted to do a last check, before returning a bricked Wii U

    So here's the situation

    a friend of mine had a wii U on the shelf for a few years. He turned it on after not using it for month and.... Black screen. The gamepad can not detect and synch to the wii U. (The cd drive does some noise, as if it was checking for a dvd. When I insert a game dvd it doesn't act weirdly at all, but I still get a black screen). I tried the usual(leaving it unplugged for a while, keep the power button pressed etc) but no luck.

    He never tried anything homebrew related on his wii and have no idea what caused the brick (Maybe it did turn off during an update and he doesn't remember ?)

    anyway, as far as I understand, there's no way to fix it, since I won't be able to get the otp.bin, even through soldering ? So there's no way I can write a clean nand back into this bricked Wii U?
     
  5. Leeful

    Leeful GBAtemp Fan

    Member
    5
    Sep 4, 2015
    No, without an otp.bin it cannot be done at the moment. Have you tried it with AV cables instead of the hdmi?
     
  6. Godwin_Point

    Godwin_Point Member

    Newcomer
    1
    Feb 16, 2015
    France
    Lannilis
    Yeah I tried both :/

    The gamepad won't synch even with the red button on the console itself

    I found 2 people with similar problem that "fixed" it by leaving the wii on for a couple hours... Can't hurt to try...
     
  7. Anonyamalious

    Anonyamalious Member

    Newcomer
    2
    Sep 12, 2010
    Canada
    @Leeful if we worried about the 1 supercluster with bad HMAC data, shouldn't we be flashing my fixed slc.full.img instead?
     
  8. Leeful

    Leeful GBAtemp Fan

    Member
    5
    Sep 4, 2015
    I forgot that you had an old backup. Make sure that it is ok with nandBinCheck and that you have removed CBHC from it using nandCbhcRemover before you flash.
     
  9. godreborn

    godreborn GBAtemp Guru

    Member
    8
    Oct 10, 2009
    United States
    I think I mentioned the wrong slc size, but I think @Anonyamalious fixed it or at least he said he did with NANDfixer. I pointed out that error earlier in this thread since he was using the redNAND method which is what I used as well, but I fixed the IMG files as well as redumped the slc with Eyekey's tools.
     
  10. vb_encryption_vb

    vb_encryption_vb That hardmod guy....

    Member
    7
    Nov 21, 2015
    United States
    Acworth, GA
    Excellent, this should help when I implement a permanent hardmod into the Wii U.

    Currently working on it, have no ETA. It is a pain in the ass with little to no room to leave a teensy in the thing lol.
     
  11. Anonyamalious

    Anonyamalious Member

    Newcomer
    2
    Sep 12, 2010
    Canada
    @Leeful I first flashed my slc.full.img fixed (no cbhc) and got no video output. Solid blue light, optical drive powers, fan works but Wii U gamepad will not connect. I then flashed the dump with cbhc removed and got no video output as well. Both flashes had no errors. I guess my Wii U is done.
     
  12. Leeful

    Leeful GBAtemp Fan

    Member
    5
    Sep 4, 2015
    @Anonyamalious Have you disconnected the teensy? because with CE2 connected to ground the WiiU will not boot.
     
    vb_encryption_vb likes this.
  13. Anonyamalious

    Anonyamalious Member

    Newcomer
    2
    Sep 12, 2010
    Canada
    @Leeful I flashed the cbhc removed slc_test.bin and then removed the teensy but still no video, gamepad will not connect. I'm going to try with slc.full.img and then remove the teensy.
     
  14. Kafluke
    OP

    Kafluke GBAtemp Psycho!

    Member
    11
    May 6, 2006
    United States
    Did you rewire it correctly? You recent pics don't reflect @Leeful 's pics in the OP.
     
  15. Anonyamalious

    Anonyamalious Member

    Newcomer
    2
    Sep 12, 2010
    Canada
    @Leeful You are my hero and my new best friend! After I flashed my slc.full.img fixed, my gamepad came back to life! Video output wouldn't output by default had to play around with the settings then it came back. Think I lost all my savegames for BOTW though because it doesn't show it's installed but I'll install it again and see if the files are still there.

    So it seems the dump is invalid or the upload is corrupted because it's not recognized properly but writing a valid image works.
    Rejoice!
     
    Kafluke likes this.
  16. Anonyamalious

    Anonyamalious Member

    Newcomer
    2
    Sep 12, 2010
    Canada
    Ok my system is still semi-bricked as I can't access the eshop and data management, they all give me 160-0103 or 160-1710. Mocha would still freeze at splash screen just like it did when it first bricked. I had Mocha + RedNAND + CBHC, something corrupted when I formatted USB when asked.

    I read somewhere I shouldn't factory reset or it can brick. I couldn't run syscheck through web exploit though.
     
    Last edited by Anonyamalious, Jul 17, 2017
  17. Kafluke
    OP

    Kafluke GBAtemp Psycho!

    Member
    11
    May 6, 2006
    United States
    @Leeful - I added a changelog so if you make any changes to the OP please update the changelog.

    This goes for all other contributors as well. Thanks.
     
  18. CosmoCortney

    CosmoCortney Chemtrail Pilot

    Member
    10
    Apr 18, 2013
    Germany
    on the cool side of the pillow
    How do I set up NANDway and so on to dump SLC?
     
  19. freeplex

    freeplex Member

    Newcomer
    1
    Jul 31, 2017
    Russia
    if i don't have otp.bin can i fix 160-0103 error?
    i read nand and eMMC
     
  20. Kafluke
    OP

    Kafluke GBAtemp Psycho!

    Member
    11
    May 6, 2006
    United States
    No. You need otp.bin in order to decrypt the nand dumps and fix them. Do you have a rednand backup?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice