Help converting NAND dumps with Betwiin

Good Afternon everyone,
I hope you guys can help me here.
Following on from my problems detailed here I have come to the stage where I want to flash my Wii to an image of a friends, then hopefully I'll be able to play my SNES emulator off DVDs again.

Story so far:
Got a dump from a suitable donor wii. (matching boot1 & 2 versions)
Got the last 1024 bytes from my own wii.
Run Betwwin
Appended the last 1024 bytes from my dump to the flash.bin output.
Attempted to recover using BootMii. This failed claiming it was from a different.

I have since read that I should copy the first megabyte from my NAND over the top of the output/flash.bin as well as append the last 1024 bytes. I did this and the NAND recovery went through the motions on the Wii but now I get a blank black scrren when I power the WIi.

What have I done wrong here? Is it likely to be a mismatch between bad blocks on the donor/target wiis?

ANy help any one could give would be greatly appreciated.

Thanks in advance
CIsor

Maybe you are just unlucky for have a bad block on an important file.
Double check the nand-key and nand-hmac on the output dir.

thanks for the reply.

Can you explain what should be in the nand-key and nand-hmac? I can't find much detailed documentation of this

Thank you
CIsor

Quote
CIsor
thanks for the reply.

Can you explain what should be in the nand-key and nand-hmac? I can't find much detailed documentation of this

Thank you
CIsor

the files must contains the key and hmac of your console (output directory) and for the donor console (input directory).
You have to extract these keys from the bootmii backup.

read this post for locate the data:

[forum.wiibrew.org]

and

[forum.wiibrew.org]

Are you using the bootmii beta 3?

Quote
vola
the files must contains the key and hmac of your console (output directory) and for the donor console (input directory).
You have to extract these keys from the bootmii backup.

read this post for locate the data:

[forum.wiibrew.org]

and

[forum.wiibrew.org]

Thanks for the info. I've had a quick glance at those posts and I think they will help me. Thank you. I'll let you know how I get on.

Quote
TopGun96
Are you using the bootmii beta 3?

yes I am.

CIsor

Pay attention at beta3 backups, in this case you have 2 files a nand.bin and keys.bin. Just extract the key and hmac from keys.bin.
In this case also nand.bin doesn't contain the keys, check the size must be 553,648,128 bytes without key footer and 553,649,152 with key footer.



Edited 1 time(s). Last edit at 09/22/2009 01:44PM by vola.

Yeah, beta 3 has some problems. You could install the beta 4 test version.... It supposedly fixes this problem. Then you won't have to switch the keys and whatnot.



Edited 1 time(s). Last edit at 09/22/2009 02:14PM by TopGun96.

Quote
vola
Pay attention at beta3 backups, in this case you have 2 files a nand.bin and keys.bin. Just extract the key and hmac from keys.bin.
In this case also nand.bin doesn't contain the keys, check the size must be 553,648,128 bytes without key footer and 553,649,152 with key footer.

Ah, thanks for that.

I'm a little surprised to see that my donor is 553,648,128 b whilst my own is 553,649,152 bytes.


How exactly can I produce a correct "nand-hmac" & "nand-key" from my images?

Can you explain what the content of the following should be?

input/flash.bin --- complete 553,648,128 byte file nand.bin from donor image
input/nand-hmac ---- genereted from source image?
input/nand-key ---- generated from source image?
input/keys.bin ---- as produced by BootMii on donor wii
output/nand-hmac ---- help?
output/nand-key ---- help?

Little confusion there, maybe You have 2 different version of bootmii on the consoles.

input/flash.bin --- complete 553,648,128 byte file nand.bin from donor image OK
input/nand-hmac ---- genereted from source image? EXTRACT FROM DONOR KEYS.BIN
input/nand-key ---- generated from source image? EXTRACT FROM DONOR KEYS.BIN
input/keys.bin ---- as produced by BootMii on donor wii NOT NEEDED
output/nand-hmac ---- help? Extract from your backup (in the last 1024 bytes)
output/nand-key ---- help? Extract from your backup (in the last 1024 bytes)


Pratically the nand.bin file from bootmii 0.1 or 0.2 is like nand.bin + keys.bin from bootmii 0.3.



Edited 3 time(s). Last edit at 09/22/2009 05:20PM by vola.

Quote
vola
Little confusion there, maybe You have 2 different version of bootmii on the consoles.

I think that is probably right :-)

Quote
vola
input/flash.bin --- complete 553,648,128 byte file nand.bin from donor image OK
input/nand-hmac ---- genereted from source image? EXTRACT FROM DONOR KEYS.BIN
input/nand-key ---- generated from source image? EXTRACT FROM DONOR KEYS.BIN
input/keys.bin ---- as produced by BootMii on donor wii NOT NEEDED
output/nand-hmac ---- help? Extract from your backup (in the last 1024 bytes)
output/nand-key ---- help? Extract from your backup (in the last 1024 bytes)

which part of the keys.bin (which bytes?) constitute the nand-hmac?
which bytes are the nand-key?

I explained this in the links above, anyway you can find the thing at this positions (you must use an hex editor)

- 144h (21000144h in nand.bin) => nand hmac (20 bytes)
- 158h (21000158h in nand.bin) => nand_key (16 bytes)

Quote
TopGun96
Yeah, beta 3 has some problems. You could install the beta 4 test version.... It supposedly fixes this problem. Then you won't have to switch the keys and whatnot.

Yeah, it fixes it, but backups are ungodly slow, I would recommend the update though, even though it's not an officially posted update yet

Hi Vola,

thanks for all your help. Sorry I didn't quite understand the info about the byte positions in the other thread, I just got a little confused by the context :)

as detailed here I've followed the same steps as you did and replaced the 0 - E7A60 with the data from a previous working dump, along with having modifed the console ID section of the keys.bin before appending it to the flash.bin and naming the resulting file as nand.bin.

Alas, it doesn't work :(

BootMii WILL then allow the restore process to proceed all the way through to completion, but when I reboot the Wii after that, I get a black screen :(

I think I may be doomed never to use the DVD drive in homebrew again :-(

If you want send me:

- the keys.bin from donor console
- the last 1024 bytes of your backup copied into separate file.


so I can help you to check if the keys are correct.

betwiin process is working well? did you receive some error?



Edited 1 time(s). Last edit at 09/25/2009 07:00PM by vola.

That would be great. Very very helpful. Thank you. I will send these to you shortly. EDIT: Sent

Betwiin process appears to have finished successfully, although I am not quite sure how to tell. It sat processing for a long time [over 1/2 hr] regularly updating the screen during each file, then the console window closed but did not display any errors. Should it have presented something different? A positive confirmation that it had finished perhaps?



Edited 2 time(s). Last edit at 09/25/2009 08:05PM by CIsor.