Any way to dump the complete Wii U NAND via software?

Discussion in 'Wii U - Hacking & Backup Loaders' started by GraFfiX420, Mar 13, 2017.

  1. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    I've been doing some reading and it looks like a teensy is needed. I have one of these leftover from modding my ps3, but I'm curious if there's a software method to backup all areas of NAND on the Wii U? It looks like possibly just creating a rednand will create a complete backup, but is that of all areas of nand? The reason I'm looking for a software solution is I feel like I will then have no reason to open up my Wii U, unless I brick it, at which point I would open it up and solder in my teensy and restore the backup. In a related question, is there any definitive guide to wii U hardmodding? I saw a tutorial about dumping emmc, basically you just have to pull the clk line to get that to dump, but from what I understand there are several more areas of flash memory that need to be dumped.
     
  2. CreeperMario

    CreeperMario GBAtemp Advanced Fan

    Member
    616
    364
    Jun 18, 2016
    Australia
    OSv10 v15702
    You could set up redNAND using Mocha, and then use dimok's SDIO NAND Dumper utility to make a backup of your redNAND on your computer.
    A backup of a backup. Nifty, huh?
     
  3. pelago

    pelago Member

    Member
    964
    46
    Feb 20, 2006
  4. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    Last edited by GraFfiX420, Mar 13, 2017
    pelago likes this.
  5. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    I am now dumping my Wii U via rednand creation. Unfortunately, it does not look like there is, at this time, a way to restore from a rednand dump. While all required information is contained in the dump, there is some missing information that we need in order to be able to flash some portions of the dump back to the wii. Hopefully this additional information can be discovered, also, if I'm wrong in some way, please, someone let me know.
     
  6. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    OK, I was able to create a rednand, and it boots, using sdio nand manager I am able to get backups of SLC, SLCCMPT, and MLC. However, when I attempt to backup SEEPROM or OTP I get an error, "NAND typeot found on SD card". Anyone have any ideas what is causing this? I followed a tutorial for rednand creation, but there was an anomaly, I used the latest release of mocha (v0.2), but when I initialy selected the options to create my rednand there weren't ant options available for SEEPROM redirection and OTP redirection available. After my rednand was created, I changed the options to enable rednand, seeprom redirection, and otp redirection manually under wiiu/apps/mocha/config.ini.
     
  7. EyeKey

    EyeKey GBAtemp Regular

    Member
    187
    415
    Feb 10, 2017
    Israel
    They are create only when they needed. Use seeprom2sd and otp2sd homebrews instead.
     
  8. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    Thank you sir, I just found those and was creating my backups then saw your reply, thanks again!
     
  9. lefthandsword

    lefthandsword GBAtemp Fan

    Member
    337
    204
    Apr 6, 2015
    Hong Kong
    root
    Is there a way to backup just the SLC in case of a CBHC brick?
     
  10. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    So, after dumping my SEEPROM and OTP with the appropriate utilities, each file is 1kb, is this correct? The procedure I followed was to launch mocha with rednand, then launch HBL, finally launch seeprom2sd or otp2sd.

    — Posts automatically merged - Please don't double post! —

    Yeah create a rednand then use sdio nand manager to extract the slc only, it's 512mb.
     
  11. Madridi

    Madridi Card Collector

    Member
    2,977
    846
    May 9, 2008
    Qatar
    Doha
    Yes, the bins are correct.

    But seriously on-topic, someone should really create a NAND dumper, rather than forcing a rednand creation
     
    digipimp75 and pelago like this.
  12. aut0mat3d

    aut0mat3d GBAtemp Regular

    Member
    110
    58
    Mar 15, 2017
    Australia
    The Nand out of RedNAND does not contain the ECC Areas of the Chip (error correction and Bad Block Remapping as i understand)
    So, to have a full dump atm we need some sort of tool to dump the complete NAND or do it with a hardware flasher.
    Also, if your nand gets bad blocks in the time between dump and restore we will need a Tool which checks for bad blocks differing to the dump and does a remapping.

    Take a look at https://gbatemp.net/threads/successfully-dumped-wiiu-emmc-nand-with-hardmod.457165/ for some further details and the partial progress on dumping/restoring with hardware flasher
     
    piratesephiroth and Madridi like this.
  13. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    Yeah I read through that thread, I'm completely comfortable with taking apart my wii u and dumping what I need to dump, but I would really like to avoid opening it up unless truly necessary. I have no doubt in my ability to complete the mod, looks pretty easy, but, the way I see it, I will most likely NEVER open my Wii U, however, if one of my kids accidentally deletes something they shouldn't and brick it, it would be nice to have the option to restore. It looked to me like at the end of that thread Leeful was able to get everything to restore properly from a rednand dump except for otp and seeprom, or am I incorrect on that?
     
  14. Leeful

    Leeful GBAtemp Regular

    Member
    123
    158
    Sep 4, 2015
    The only part I could correctly restore from the rednand dumps was the MLC.img. The SLC.img and SLCCMPT.img from the rednand dump will not write back correctly with the teensy hardmod because they are incomplete. They are missing 64 bytes of ECC data in every page of the image. (rednand dump = 512 MB Vs hardmod dump = 528 MB)
    The OTP.bin and SEEPROM.bin files themselves are not restored using the hardmod but they are very important to have because they contain the needed keys to decrypt or encrypt the dumped images.
     
    aut0mat3d likes this.
  15. piratesephiroth

    piratesephiroth I wish I could read

    Member
    2,839
    1,387
    Sep 5, 2013
    Brazil
    so maybe there's a way to add the missing data to the software-dumped images?
     
  16. GraFfiX420
    OP

    GraFfiX420 GBAtemp Regular

    Member
    150
    43
    Oct 14, 2009
    United States
    Damn it, so my worse fears have been realized, I will need to hook up the teensy to get my dumps. From what I understand, SLC would be the portion of the Wii U firmware that would be corrupted/made unusable by accidentally deleting CBCH, correct?

    — Posts automatically merged - Please don't double post! —

    The ECC data would be the error correction data, I would think this would be of utmost importance, as it could contain additional mapping info to account for bad regions etc.. I'm pretty sure someone smarter than myself could write a "default" set of ECC data to these regions, but the resulting dump would be useless if the ECC moved/marked anything at any point. I may be incorrect about this, someone please chime in if so.
     
    piratesephiroth and aut0mat3d like this.