Unable to dump OTP.bin with de_fuse

[MarcoC]

Here the python script to calculate the CRC32, you must change the bytes from the SEEPROM you want to modify.

For the slccmpt I did a dump but in order to use the SD card with the MLC (64GB) I flushed the boot1_slccmpt.img, so I am not sure is usable

 

[SDIO]

It is fine with the boot1

 

[MarcoC]

I am trying to rebuld the MLC but I am not sure of the steps....

First I changed the minute.ini conf

[partitions]
slccmpt=true
slc=true
mlc=false

[scfm]
disable=false
allow_sys=true

[disable_encryption]
mlc=false

So MLC partition is false and allow_sys is true, but when I try to start using "Patch (sd) and boot IOS redNAND" I get the below error
INFO: Trying to load sdmc:/redseeprom.bin... FOUND!
INFO: Trying to load sdmc:/redotp.bin... FOUND!
redOTP requires all partitions to be redirected to prevent corruption!

so it seems that is not possible to rebuild the MLC using redOTP....

 

[SDIO]

Do the following:

1. rename the otp.bin in the SD.
2. minute will complain, but it's ok
3. dump otp & seeprom, without PRSHhax
4. combine the vWii part from the just dumped OTP with the Wii U part from the redotp
5. have the combined otp as otp.bin and remove the redotp.bin
6. in the rednand.ini disable everything
7. restore the SLC.RAW from the donor console
8. uninstall ISFShax, as it does nothing for this console
9. delete scfm and erase MLC
10. rebuild mlc

 

[MarcoC]

if I do the step 3 the resulting de_Fuse_otp.bin file is just full of 00 with 0xE1 on the 0x3FF position

 

[SDIO]

I looked at the stroopwafel code and it seems like it also patches the OTP read for vWii. In that case you should be able to use the complete donor otp. The mlc setup will also format the vWii (SLCCMPT). You should den be able to use vWii decaffinator to recreate that setting.txt file there and then run a system update to install the vWii titles. But you should also be able to restore slccmpt from the donor Wii U.

 

[MarcoC]

I had to modify the minute code to remove the check for redOTP in rednand.c file

if(redotp && !(rednand.slc.lba_length && rednand.slccmpt.lba_length && rednand.mlc.lba_length)){
        // if the slc or slccmpt gets mounted with the wrong key, it can be corrupted
        // TODO: add option to use key and IV from system OTP
        // TODO: add override option
        printf("redOTP requires all partitions to be redirected to prevent corruption!\n");
        return -1;
    }

Now, with just redOTP redSEEPROM and autoboot the WiiU starts.

Next, I will try to dump the otp seeprom and slc from another rusted Wii U, and I will attempt to swap the disc drive to see if it works.

Thank you for your wonderful support!

 

[SDIO]

You don't need red otp. Since you have defuse, you can just have it as otp.bin and don't need an extra redotp.bin

 

[MarcoC]

You don't need red otp. Since you have defuse, you can just have it as otp.bin and don't need an extra redotp.bin

you are right! So it is not needed to remove the check in minute...