Unable to dump OTP.bin

[skawo]

Hm, trying to build minute complains about ini.h :s

Edit: Oh, I had to read the readme, strangely enough.

 

[Lazr1026]

use this minute. it should bypass all checks that will fail for your seeprom. you should go to Backup and Restore -> Sync SEEPROM boot1 versions with NAND

 

[skawo]

Boot1 never jumps to payload. Sad.

 

[Lazr1026]

does boot1 still launch or no? you would need to unplug the pico (or if it gets power from the wiiu, hold the boot button as you plug in the wiiu)

 

[skawo]

Fan spins up but light stays red.

 

[Lazr1026]

oof, so theres a mismatch between the boot1 on NAND and the seeprom boot1 version still

Post automatically merged: May 16, 2024

could you dump and send the seeprom again?

 

[skawo]

~

 

[Lazr1026]

the second boot1 slot didnt update.. maybe thats because minute only restores the first copy?

I have an idea; I can modify the seeprom for you to restore. theoretically it should work, but there is no guarantee.

 

[skawo]

I mean... at this point, go for it.

If it doesn't work, then it'll be an amusing doorstop either way.

 

[Lazr1026]

well, here you go. it should have the correct crc32 and be encrypted properly

 

[skawo]

Uh... how do I enter the Konami Code on an eject button? :v

EDIT: oh you can send commands via putty.

 

[Lazr1026]

if that doesnt work then i could send you my kiosk slc dump for you to restore. ofc the isfs wont work on your console, but i cant think of any way to restore both copies of boot1 to the slc without doing some heavy mods to minute that i have no idea how to do

Post automatically merged: May 16, 2024

Uh... how do I enter the Konami Code on an eject button? :v

Putty on your PC

 

[skawo]

Still just has red light when starting without the Pico. CRC was still shown as bad when restoring:

Restoring SEEPROM from `sdmc:/seeprom.bin`...
Verifying seeprom.bin...
seeprom: bad AA55 marker! 0000
seeprom: bad BB66 marker! 0000
seeprom: bad production CRC32! calc=139124d5, stored=00000000
seeprom: bad production CRC32! calc=bec9f23a, stored=9a7d7579
Everything verified!

Last chance: Are you sure you want to write SEEPROM?
If you write an invalid SEEPROM and then fail to backup
otp.bin, you will NOT be able to recover your Wii U!

A missing otp.bin can ONLY be recovered with a valid
seeprom.bin from the SAME Wii U, and a missing seeprom.bin
can ONLY be partially recovered (enough to boot) with a
valid otp.bin from the SAME Wii U!

If you lose BOTH otp.bin and seeprom.bin, you will be FORCED to
use a donor copy from another Wii U.
This *may* mean forfeiting the ability to play online!
This WILL mean saves stored on NAND or USBs will be unrecoverable!
This WILL mean your disk drive will no longer be usable!

This is like, the one limitation of de_Fuse lol.
You probably don't want to be here unless you're a developer
and know what you're doing.

Write sdmc:/seeprom.bin to SEEPROM?
Please enter the Konami code to continue.
[POWER/Q] Abort
[^ ^ v v < > < > B A ENTER] Continue...
^ ^ v v < > < > B A ENTER WARNING: SEEPROM boot1 version v8377 does not match NAND version v4253!
Continue writing sdmc:/seeprom.bin to SEEPROM?
[POWER/Q] No | [EJECT/P] Yes...
seeprom: bad AA55 marker! 0000
seeprom: bad BB66 marker! 0000
seeprom: bad production CRC32! calc=139124d5, stored=00000000
seeprom: bad production CRC32! calc=bec9f23a, stored=9a7d7579

Success!

 

[Lazr1026]

honestly maybe i should just let you use my kiosk seeprom. it should work, and it should let you get the otp

Post automatically merged: May 16, 2024

here. if this still doesnt work then i will also send you the SLC.

Post automatically merged: May 16, 2024

also, if it asks to set the SEEPROM boot1 versions, tell it no

 

[skawo]

That's done it! Had to switch to deFuse 0.8, but I have the OTP now.

 

[Lazr1026]

I am shocked that worked but woo!!

 

[skawo]

Now the question is; how to best proceed?

Guess I should try to dump the mlc in case there's something interesting on there?
How would one best go about doing that from this state?

 

[Lazr1026]

you can do so in minute with the `format rednand` option.

also if you want to get the console fully working
i can re-encrypt my kiosk slc, so you can restore it and then use mcp_recovery to set up the mlc again (because SCFM)

 

[skawo]

Hm, but will it let me switch to a different SD card or store it in parts?

 

[Lazr1026]

you should flash the minute boot1 to slccmpt so you can boot minute with a 64gb sd card, and from there dump the mlc. it will dump to a partition after formatting the sd card.