Hacking How to unbrick you Wii 101

[pspmte]

I made this guide to help people unbrick their Wii's, and have been working on it for well over a year. May I present to you: Wii Unbricking 101.

Items Required:
An Infectus
A TSOP socket 48A (Farnell part number 109-5884)
A Triwing screwdriver
Solder/Desolder
To know what Broadway chip you have, such as 5070 or 5048.
A Hex Editor
Betwiin

The guide

First, take the Wii apart, and unsolder the NAND chip from the board and install it to your Infectus with Socket, I had spent forever trying to hardwire the Infectus to the Wii's NAND but had failed.

Now we need to install Bootmii by Team Twiizers to your Wii, I used Soft-Xavbox-Programmer to install a Boot1b Boot2v3 Bootmii (My broadway ID was 5070) and then I proceeded to flash the NAND blocks 0-8.

Now carefully resolder the NAND back on the Wii's board and half build the Wii using the heat sink, Bluetooth and Wifi card and power on the Wii with the appropriate Bootmii files on the SD card, you should be in Bootmii.

Use Bootmii to make a NAND backup, as we need the HMAC and NAND key to fix the Wii. Now take out the SD card and open the NAND.bin with WinHex (I also reccomend making a backup on your PC) and get the keys, and save the last 1024 bytes of the file as you will need this later.


The HMAC-key is 20 bytes on $21000144
The NAND-key is 16 bytes on $21000158

Save the keys to Betwiin's output folder and then when Betwiin is done you should have a flash.bin file.

Open the flash.bin file in WinHex and add the last 1024 bytes from NAND.bin to it.

Open NAND.bin and copy 250 pages starting at $0 and then paste it to flash.bin starting at $0.

Save the file as NAND.bin an copy to your SD card, and restore it with Bootmii.

Your Wii should be fixed!

Thanks to:
Bushing/Team Twiizers for their programs and Bootmii.
Hibit for telling me about the HMAC and NAND keys
BeeGee7730 for my guide mod

http://i424.photobucket.com/albums/pp322/l...id/DSC04388.jpg

http://i424.photobucket.com/albums/pp322/l...id/DSC04391.jpg

 

[wyndcrosser]

pspmte, if what you are saying actually works GREAT, however you need to supply better grammar and pictures, while removing that font. This could cause mass confusion and noobs shouldn't be modding/soldering if they can't handle a simple softmod.

Again, nice post. Please fix some of your issues.

Wynd

 

[FenrirWolf]

Did all that really have to be posted in a ridiculous font?

EDIT: Thanks for the cleanup. It helps a lot.

 

[pspmte]

Ok guys i edited it and took some pics

Matte

 

[illinialex24]

Nice, maybe you could improve the formatting possibly?

 

[pspmte]

I will when i get chance but the fact is it really works, i have fixed 3 bricked wiis

 

[G0dLiKe]

Well done.

As stated above this indeed could cause mass confusion...

Make your post a bit more structured.

 

[blahdc]

lmao let the soldering questions begin!

Where to Buy

Infectus
(UK) TSOP Socket 40A
(US) TSOP Socket 40A

The cost for parts alone is going to be close to $100 half the current MSRP of a Wii today.

 

[SifJar]

Perhaps you could split stuff into seperate steps and get all spelling and grammar right, and it a bit better laid out? With that, this could be amazing. As it is, it looks like it'd give me a headache if I tried to read it (no offence). Great job putting this together though.

 

[Deleted-171178]

Here it is with better grammar.

I made this guide to help people unbrick their Wii's, and have been working on it for well over a year. May I present to you: Wii Unbricking 101.

Items Required:[*]An Infectus[*]A TSOP socket 40A (Farnell part number 109-5884)[*]A Triwing screwdriver[*]Solder/Desolder[*]To know what Broadway chip you have, such as 5070 or 5048.[*]A Hex Editor[*]BetwiinThe guide

First, take the Wii apart, and unsolder the NAND chip from the board and install it to your Infectus with Socket, I had spent forever trying to hardwire the Infectus to the Wii's NAND but had failed.

Now we need to install Bootmii by Team Twiizers to your Wii, I used Soft-Xavbox-Programmer to install a Boot1b Boot2v3 Bootmii (My broadway ID was 5070) and then I proceeded to flash the NAND blocks 0-8.

Now carefully resolder the NAND back on the Wii's board and half build the Wii using the heat sink, Bluetooth and Wifi card and power on the Wii with the appropriate Bootmii files on the SD card, you should be in Bootmii.

Use Bootmii to make a NAND backup, as we need the HMAC and NAND key to fix the Wii. Now take out the SD card and open the NAND.bin with WinHex (I also reccomend making a backup on your PC) and get the keys, and save the last 1024 bytes of the file as you will need this later.


The HMAC-key is 20 bytes on $21000144
The NAND-key is 16 bytes on $21000158

Save the keys to Betwiin's output folder and then when Betwiin is done you should have a flash.bin file.

Open the flash.bin file in WinHex and add the last 1024 bytes from NAND.bin to it.

Open NAND.bin and copy 250 pages starting at $0 and then paste it to flash.bin starting at $0.

Save the file as NAND.bin an copy to your SD card, and restore it with Bootmii.

Your Wii should be fixed!

Thanks to:
Bushing/Team Twiizers for their programs and Bootmii.
Hibit for telling me about the HMAC and NAND keys.

Images:

 

[mattjd]

I think a clear picture with each instruction would help people alot.

Maybe some download links to the programmes you used. Maybe a programme which grabs the keys.bin for the user, obviously for the HEX noobs.

If this was very clear then it would save alot of users that are really serious about fixing there wii without sending to nintendo (Modchip users).

Maybe a couple of warnings saying only for advanced unbrickers and experienced solderers (like me

)

edit: Would this also enable people who can not install bootmii to install it if they flashed there nand chip with an infectus? Maybe for the serious people out there that really want bootmii

 

[pspmte]

BeeGee i will use that lol thanks for that, im not the best at puting guides together

Matte

 

[SifJar]

that's better. Good guide, it was just badly formatted. thanks beegee7730. BTW, the pictures show up fine for me, why are they showing as moved or deleted in your post?

 

[baicunko]

I'm going to try what you are doing, im waiting for my infectus chip.
do i need to desolder the nand from the mother board?
Can i try soldering the wires directly to nand?
thanks

 

[pspmte]

edit: Would this also enable people who can not install bootmii to install it if they flashed there nand chip with an infectus? Maybe for the serious people out there that really want bootmii

[/quote]


This is my next project to find this out

 

[pspmte]

I'm going to try what you are doing, im waiting for my infectus chip.
do i need to desolder the nand from the mother board?
Can i try soldering the wires directly to nand?
thanks

As i said in my guide i could not get a good write to the nandflash with the infectus connected in parallel to the wii
The best result is to take the flash off and then write the boot1b boot2vX

 

[Lindfalas]

I will when i get chance but the fact is it really works, i have fixed 3 bricked wiis

This sounds great. Maby I can fix a broken Wii I got here( got it free).
But the guid need some more info.
Like how to wire all.

Before I go out to buy a infectios2 chip I need to know this will work on all Wii.
The Wii I got here I dont know much about.
I already tryed all things I know, but no luck yet to get it to work.
But this seems intressting.
Can you make a video on it to?

Greetz

 

[techboy]

Well, I always wondered how to install bootmii and restore a wii with an infectus...

Anyway, this won't work if the wii has a fixed boot1, seeing that we can't modify it, and bootmii boot2 won't run on those wiis. Can you simply flash the entire flash.bin (without the bootmii key footer) using the infectus?

 

[D1RTMANN]

I made this guide to help people unbrick their Wii's, and have been working on it for well over a year. May I present to you: Wii Unbricking 101.

Items Required:
An Infectus
A TSOP socket 48A (Farnell part number 109-5884)
A Triwing screwdriver
Solder/Desolder
To know what Broadway chip you have, such as 5070 or 5048.
A Hex Editor
Betwiin

The guide

First, take the Wii apart, and unsolder the NAND chip from the board and install it to your Infectus with Socket, I had spent forever trying to hardwire the Infectus to the Wii's NAND but had failed.

Now we need to install Bootmii by Team Twiizers to your Wii, I used Soft-Xavbox-Programmer to install a Boot1b Boot2v3 Bootmii (My broadway ID was 5070) and then I proceeded to flash the NAND blocks 0-8.

Now carefully resolder the NAND back on the Wii's board and half build the Wii using the heat sink, Bluetooth and Wifi card and power on the Wii with the appropriate Bootmii files on the SD card, you should be in Bootmii.

Use Bootmii to make a NAND backup, as we need the HMAC and NAND key to fix the Wii. Now take out the SD card and open the NAND.bin with WinHex (I also reccomend making a backup on your PC) and get the keys, and save the last 1024 bytes of the file as you will need this later.


The HMAC-key is 20 bytes on $21000144
The NAND-key is 16 bytes on $21000158

Save the keys to Betwiin's output folder and then when Betwiin is done you should have a flash.bin file.

Open the flash.bin file in WinHex and add the last 1024 bytes from NAND.bin to it.

Open NAND.bin and copy 250 pages starting at $0 and then paste it to flash.bin starting at $0.

Save the file as NAND.bin an copy to your SD card, and restore it with Bootmii.

Your Wii should be fixed!

Thanks to:
Bushing/Team Twiizers for their programs and Bootmii.
Hibit for telling me about the HMAC and NAND keys
BeeGee7730 for my guide mod

http://i424.photobucket.com/albums/pp322/l...id/DSC04388.jpg

http://i424.photobucket.com/albums/pp322/l...id/DSC04391.jpg

I cannot get betwiin to work it says error on line 4 could not load numpy, whatever that means.

Also if you could not be so VAGUE with the instructions of usage with betwiin, not everyone knows as much as you may. I know it involves more then just puttin keys in the output folder.

How about What exactly you put in output folder including what you may have to name the files, same for output folder.

I/we need more info then

* Copy input dump file to input/flash.bin.

 

[Erikie]

I flashed many samsung nand chips with the nand still on the board without any problem.
So I don't know why you keep telling you need to remove them. It is simply not true