How to unbrick you Wii 101

Discussion in 'Wii - Hacking' started by pspmte, Oct 21, 2009.

  1. pspmte
    OP

    pspmte GBAtemp Regular

    Member
    243
    0
    Oct 23, 2008
    I made this guide to help people unbrick their Wii's, and have been working on it for well over a year. May I present to you: Wii Unbricking 101.

    Items Required:
    An Infectus
    A TSOP socket 48A (Farnell part number 109-5884)
    A Triwing screwdriver
    Solder/Desolder
    To know what Broadway chip you have, such as 5070 or 5048.
    A Hex Editor
    Betwiin

    The guide

    First, take the Wii apart, and unsolder the NAND chip from the board and install it to your Infectus with Socket, I had spent forever trying to hardwire the Infectus to the Wii's NAND but had failed.

    Now we need to install Bootmii by Team Twiizers to your Wii, I used Soft-Xavbox-Programmer to install a Boot1b Boot2v3 Bootmii (My broadway ID was 5070) and then I proceeded to flash the NAND blocks 0-8.

    Now carefully resolder the NAND back on the Wii's board and half build the Wii using the heat sink, Bluetooth and Wifi card and power on the Wii with the appropriate Bootmii files on the SD card, you should be in Bootmii.

    Use Bootmii to make a NAND backup, as we need the HMAC and NAND key to fix the Wii. Now take out the SD card and open the NAND.bin with WinHex (I also reccomend making a backup on your PC) and get the keys, and save the last 1024 bytes of the file as you will need this later.


    The HMAC-key is 20 bytes on $21000144
    The NAND-key is 16 bytes on $21000158

    Save the keys to Betwiin's output folder and then when Betwiin is done you should have a flash.bin file.

    Open the flash.bin file in WinHex and add the last 1024 bytes from NAND.bin to it.

    Open NAND.bin and copy 250 pages starting at $0 and then paste it to flash.bin starting at $0.

    Save the file as NAND.bin an copy to your SD card, and restore it with Bootmii.

    Your Wii should be fixed!

    Thanks to:
    Bushing/Team Twiizers for their programs and Bootmii.
    Hibit for telling me about the HMAC and NAND keys
    BeeGee7730 for my guide mod

    http://i424.photobucket.com/albums/pp322/l...id/DSC04388.jpg

    http://i424.photobucket.com/albums/pp322/l...id/DSC04391.jpg
     
  2. wyndcrosser

    wyndcrosser GBAtemp Advanced Fan

    Member
    720
    17
    May 28, 2009
    United States
    pspmte, if what you are saying actually works GREAT, however you need to supply better grammar and pictures, while removing that font. This could cause mass confusion and noobs shouldn't be modding/soldering if they can't handle a simple softmod.

    Again, nice post. Please fix some of your issues.

    Wynd
     
  3. FenrirWolf

    FenrirWolf GBAtemp Psycho!

    Member
    4,347
    329
    Nov 19, 2008
    United States
    Sandy, UT
    Did all that really have to be posted in a ridiculous font?

    EDIT: Thanks for the cleanup. It helps a lot.
     
  4. pspmte
    OP

    pspmte GBAtemp Regular

    Member
    243
    0
    Oct 23, 2008
    Ok guys i edited it and took some pics

    Matte
     
  5. illinialex24

    illinialex24 GBAtemp Advanced Fan

    Member
    968
    0
    May 26, 2009
    United States
    The Midwest
    Nice, maybe you could improve the formatting possibly?
     
  6. pspmte
    OP

    pspmte GBAtemp Regular

    Member
    243
    0
    Oct 23, 2008
    I will when i get chance but the fact is it really works, i have fixed 3 bricked wiis
     
  7. G0dLiKe

    G0dLiKe who needs a title ;)

    Member
    1,674
    51
    Aug 2, 2009
    United States
    Well done.

    As stated above this indeed could cause mass confusion...

    Make your post a bit more structured.
     
  8. blahdc

    blahdc Member

    Newcomer
    35
    0
    Oct 1, 2009
    United States
    lmao let the soldering questions begin!

    Where to Buy

    Infectus
    (UK) TSOP Socket 40A
    (US) TSOP Socket 40A

    The cost for parts alone is going to be close to $100 half the current MSRP of a Wii today.
     
  9. SifJar

    SifJar Not a pirate

    Member
    6,022
    892
    Apr 4, 2009
    Perhaps you could split stuff into seperate steps and get all spelling and grammar right, and it a bit better laid out? With that, this could be amazing. As it is, it looks like it'd give me a headache if I tried to read it (no offence). Great job putting this together though.
     
  10. beegee7730

    beegee7730 ITS PAAFEKUTO!

    Banned
    1,693
    0
    Mar 31, 2009
    England
    Here it is with better grammar.

    I made this guide to help people unbrick their Wii's, and have been working on it for well over a year. May I present to you: Wii Unbricking 101.

    Items Required:[*]An Infectus[*]A TSOP socket 40A (Farnell part number 109-5884)[*]A Triwing screwdriver[*]Solder/Desolder[*]To know what Broadway chip you have, such as 5070 or 5048.[*]A Hex Editor[*]BetwiinThe guide

    First, take the Wii apart, and unsolder the NAND chip from the board and install it to your Infectus with Socket, I had spent forever trying to hardwire the Infectus to the Wii's NAND but had failed.

    Now we need to install Bootmii by Team Twiizers to your Wii, I used Soft-Xavbox-Programmer to install a Boot1b Boot2v3 Bootmii (My broadway ID was 5070) and then I proceeded to flash the NAND blocks 0-8.

    Now carefully resolder the NAND back on the Wii's board and half build the Wii using the heat sink, Bluetooth and Wifi card and power on the Wii with the appropriate Bootmii files on the SD card, you should be in Bootmii.

    Use Bootmii to make a NAND backup, as we need the HMAC and NAND key to fix the Wii. Now take out the SD card and open the NAND.bin with WinHex (I also reccomend making a backup on your PC) and get the keys, and save the last 1024 bytes of the file as you will need this later.


    The HMAC-key is 20 bytes on $21000144
    The NAND-key is 16 bytes on $21000158

    Save the keys to Betwiin's output folder and then when Betwiin is done you should have a flash.bin file.

    Open the flash.bin file in WinHex and add the last 1024 bytes from NAND.bin to it.

    Open NAND.bin and copy 250 pages starting at $0 and then paste it to flash.bin starting at $0.

    Save the file as NAND.bin an copy to your SD card, and restore it with Bootmii.

    Your Wii should be fixed!

    Thanks to:
    Bushing/Team Twiizers for their programs and Bootmii.
    Hibit for telling me about the HMAC and NAND keys.

    Images:

    [​IMG]
    [​IMG]
     
  11. mattjd

    mattjd GBAtemp Regular

    Member
    233
    0
    Aug 1, 2009
    Malvern
    I think a clear picture with each instruction would help people alot.

    Maybe some download links to the programmes you used. Maybe a programme which grabs the keys.bin for the user, obviously for the HEX noobs.

    If this was very clear then it would save alot of users that are really serious about fixing there wii without sending to nintendo (Modchip users).

    Maybe a couple of warnings saying only for advanced unbrickers and experienced solderers (like me [​IMG])

    edit: Would this also enable people who can not install bootmii to install it if they flashed there nand chip with an infectus? Maybe for the serious people out there that really want bootmii [​IMG]
     
  12. pspmte
    OP

    pspmte GBAtemp Regular

    Member
    243
    0
    Oct 23, 2008
    BeeGee i will use that lol thanks for that, im not the best at puting guides together

    Matte
     
  13. SifJar

    SifJar Not a pirate

    Member
    6,022
    892
    Apr 4, 2009
    that's better. Good guide, it was just badly formatted. thanks beegee7730. BTW, the pictures show up fine for me, why are they showing as moved or deleted in your post?
     
  14. baicunko

    baicunko Member

    Newcomer
    10
    0
    Oct 20, 2009
    Cote d'Ivoire
    I'm going to try what you are doing, im waiting for my infectus chip.
    do i need to desolder the nand from the mother board?
    Can i try soldering the wires directly to nand?
    thanks
     
  15. pspmte
    OP

    pspmte GBAtemp Regular

    Member
    243
    0
    Oct 23, 2008
    edit: Would this also enable people who can not install bootmii to install it if they flashed there nand chip with an infectus? Maybe for the serious people out there that really want bootmii [​IMG]
    [/quote]


    This is my next project to find this out
     
  16. pspmte
    OP

    pspmte GBAtemp Regular

    Member
    243
    0
    Oct 23, 2008

    As i said in my guide i could not get a good write to the nandflash with the infectus connected in parallel to the wii
    The best result is to take the flash off and then write the boot1b boot2vX
     
  17. Lindfalas

    Lindfalas Member

    Newcomer
    33
    0
    Feb 26, 2009

    This sounds great. Maby I can fix a broken Wii I got here( got it free).
    But the guid need some more info.
    Like how to wire all.

    Before I go out to buy a infectios2 chip I need to know this will work on all Wii.
    The Wii I got here I dont know much about.
    I already tryed all things I know, but no luck yet to get it to work.
    But this seems intressting.
    Can you make a video on it to?

    Greetz
     
  18. techboy

    techboy GBAtemp Advanced Maniac

    Member
    1,720
    21
    Mar 15, 2009
    United States
    Pennsylvania
    Well, I always wondered how to install bootmii and restore a wii with an infectus...

    Anyway, this won't work if the wii has a fixed boot1, seeing that we can't modify it, and bootmii boot2 won't run on those wiis. Can you simply flash the entire flash.bin (without the bootmii key footer) using the infectus?
     
  19. D1RTMANN

    D1RTMANN Member

    Newcomer
    11
    0
    Jan 10, 2010
    United States

    I cannot get betwiin to work it says error on line 4 could not load numpy, whatever that means.

    Also if you could not be so VAGUE with the instructions of usage with betwiin, not everyone knows as much as you may. I know it involves more then just puttin keys in the output folder.

    How about What exactly you put in output folder including what you may have to name the files, same for output folder.

    I/we need more info then

    * Copy input dump file to input/flash.bin.
     
  20. Erikie

    Erikie Member

    Newcomer
    36
    0
    Jan 12, 2010
    Netherlands
    I flashed many samsung nand chips with the nand still on the board without any problem.
    So I don't know why you keep telling you need to remove them. It is simply not true