Hacking Need Guidance On Rebuilding EMMC

[OhItsSlick]

I've got a switch that has a bad emmc and no backup for said emmc. The switch itself runs payloads fine (lockpick, hekate, prodinfo, etc) and i've got other working EMMCs from donor switch boards, so what do I need to do to setup the emmc on this switch? I know it's possible as I was reading some guides, but I wasn't sure if these guides were going to help out in my situation.

Edit: I know the emmc module is bad because I get errors such as "failed to init emmc" in hekate and no switch firmware run when launching it normally.

 

[Takokeshi]

Refer to https://gbatemp.net/threads/switch-unbricking-guide-for-dead-or-replaced-emmc-consoles.609891/

 

[OhItsSlick]

Refer to https://gbatemp.net/threads/switch-unbricking-guide-for-dead-or-replaced-emmc-consoles.609891/

Hey, thanks for the referral! It seems that for step for I need to backup the emmc, but since it's bad and cant back it up can I move on to the next steps?

 

[binkinator]

Refer to https://gbatemp.net/threads/switch-unbricking-guide-for-dead-or-replaced-emmc-consoles.609891/

Is Pika Fix Pack deprecated by this guide?

 

[Takokeshi]

Is Pika Fix Pack deprecated by this guide?

Couldn't tell you, sorry.

 

[The Real Jdbye]

Is Pika Fix Pack deprecated by this guide?

Nope, it requires a donor Switch.

Hey, thanks for the referral! It seems that for step for I need to backup the emmc, but since it's bad and cant back it up can I move on to the next steps?

https://gbatemp.net/threads/switch-unbricking-guide-prodinfo-fix-pikafix.578026/
Try this instead.

 

[urherenow]

The backups you have from "donors" takes care of the backup... but ONLY if you also have the keys that belong to that backup.

 

[OhItsSlick]

The backups you have from "donors" takes care of the backup... but ONLY if you also have the keys that belong to that backup.

Can I get the keys from the donor switch by installing the known working donor eMMC module onto the switch with the bad eMMC? The switch I stole the eMMC from is non functional due to me using other various critical components in it for repairs.

 

[OhItsSlick]

Nope, it requires a donor Switch.

https://gbatemp.net/threads/switch-unbricking-guide-prodinfo-fix-pikafix.578026/
Try this instead.

I'll check it out, thank you. This guide seems to better suit my situation but i've got a question. Can I install the GOOD emmc from the donor switch board onto the switch with the bad emmc and extract the keys from the good emmc that way?

 

[The Real Jdbye]

I'll check it out, thank you. This guide seems to better suit my situation but i've got a question. Can I install the GOOD emmc from the donor switch board onto the switch with the bad emmc and extract the keys from the good emmc that way?

No, the keys are in the CPU, you need the entire board (and it needs to work)
But you don't need a donor Switch with the guide I linked.

 

[OhItsSlick]

No, the keys are in the CPU, you need the entire board (and it needs to work)
But you don't need a donor Switch with the guide I linked.

Ok I see now, thanks for the important clarification. Shall I go ahead and buy a clean switch compatible emmc module or can I wipe the good one I have?

 

[The Real Jdbye]

Ok I see now, thanks for the important clarification. Shall I go ahead and buy a clean switch compatible emmc module or can I wipe the good one I have?

You can use the one you have, no point in buying another unless you want a larger size.

 

[OhItsSlick]

You can use the one you have, no point in buying another unless you want a larger size.

Sounds good, I'll follow the guide, specifically method 1 first. Thanks for the help! Will update.

 

[urherenow]

Can I get the keys from the donor switch by installing the known working donor eMMC module onto the switch with the bad eMMC? The switch I stole the eMMC from is non functional due to me using other various critical components in it for repairs.

as already alluded to, but not sure if it was very clear, the answer is no. Whoever made that donor backup must have also dumped the keys from the same hardware that it came from. only that physical switch has the keys to decrypt the nand contents.

 

[OhItsSlick]

as already alluded to, but not sure if it was very clear, the answer is no. Whoever made that donor backup must have also dumped the keys from the same hardware that it came from. only that physical switch has the keys to decrypt the nand content.

This is a bit confusing. What donor backup are you referring to? Are you talking about the donor emmc module that physically attaches to the PCB of the switch?

 

[OhItsSlick]

You can use the one you have, no point in buying another unless you want a larger size.

Question, this guide is assuming I have the known working emmc module installed onto the PCB right?

 

[The Real Jdbye]

This is a bit confusing. What donor backup are you referring to? Are you talking about the donor emmc module that physically attaches to the PCB of the switch?

No it's in the Pikafix Pack.

Sounds good, I'll follow the guide, specifically method 1 first. Thanks for the help! Will update.

Method 1 is for if you have a donor PRODINFO which you do not.
Also it's not a full NAND restore. It doesn't apply to your situation.

Question, this guide is assuming I have the known working emmc module installed onto the PCB right?

Yes
Not sure if that guide will work for you though since it doesn't claim to work for rebuilding NAND from scratch only for PRODINFO related bricks.
This guide might be better:
https://gbatemp.net/threads/guide-nand-rebuilding-for-no-backup-broken-emmc.593995/

 

[OhItsSlick]

No it's in the Pikafix Pack.

Method 1 is for if you have a donor PRODINFO which you do not.
Also it's not a full NAND restore. It doesn't apply to your situation.

Yes
Not sure if that guide will work for you though since it doesn't claim to work for rebuilding NAND from scratch only for PRODINFO related bricks.
This guide might be better:
https://gbatemp.net/threads/guide-nand-rebuilding-for-no-backup-broken-emmc.593995/

I'm doing method 2 rightnow and im currently on step 33, "Navigate to the "_FWGEN" folder and run the systemRestore.te script and follow the on screen prompts". Upon running the script I get an error, "[FATAL] variable setstring not found error occurred on or near line 1". Do you have any ideas as to what would cause this?

 

[The Real Jdbye]

I'm doing method 2 rightnow and im currently on step 33, "Navigate to the "_FWGEN" folder and run the systemRestore.te script and follow the on screen prompts". Upon running the script I get an error, "[FATAL] variable setstring not found error occurred on or near line 1". Do you have any ideas as to what would cause this?

No idea.

 

[OhItsSlick]

No idea.

I had to use a different restore script dubbed "restorescriptv3". Anyways method 2 didn't work so moving on to 3. In this guide it says I need to type in my biskeys, where would I find these?