Hacking Successfully dumped WiiU EMMC nand with hardmod.

[DocAmes1980]

Sorry to hear you couldn't get it working yet. It probably is the card reader that is giving you the trouble.

I just got the Transcend TS-RDP8K in the mail. I'm enjoying a nice long dump as we speak. Windows didn't nag me about formatting but I think that's normal for Win 10. Either that or it's my autoplay settings. Also it worked on the first go without complaining about any issue locking the volume. I'm using dotNet Disk Imager though. I heard it is more reliable than Win32 Disk Imager. It's dumping at 5.36 MB/s. After this I will try taking a dump in Linux and compare the MD5s.

 

[Leeful]

Great to hear you got it working

I never got the volume lock error on win10 either, only ever with win7. I'll give dotNet Disk Imager a try and see if there is any difference.
Dont forget if you connect up the other dat lines too the read rate will go up to 18MB/sec and write rate 10MB/sec.

On another note I've got my teensy all set up to try to dump the TSOP next. Only thing left to do is the tricky job of soldering connecting wires to the motherboard. I've been ill the last couple of days do I don't feel up to the soldering job yet, not looking forward to it at all. Wish I had a decent magnifying glass!!

Here's the teensy I've set up.


I'll post my results when I've give it a try. Fingers crossed.

 

[DocAmes1980]

Great to hear you got it working

I never got the volume lock error on win10 either, only ever with win7. I'll give dotNet Disk Imager a try and see if there is any difference.
Dont forget if you connect up the other dat lines too the read rate will go up to 18MB/sec and write rate 10MB/sec.

On another note I've got my teensy all set up to try to dump the TSOP next. Only thing left to do is the tricky job of soldering connecting wires to the motherboard. I've been ill the last couple of days do I don't feel up to the soldering job yet, not looking forward to it at all. Wish I had a decent magnifying glass!!

Here's the teensy I've set up.
View attachment 76924

I'll post my results when I've give it a try. Fingers crossed.

Wow, that's a smart looking rig. It's very temping to go deeper but I think I'm going to leave well enough alone for now. Maybe I'll try the TSOP later. To be honest, soldering to those small ass test points was really pushing the limits of my soldering skills. Maybe I'll let you do all the heavy lifting then I'll decide when you post your results since I'll have a better idea what I'm getting into. Thanks for your help and for being the canary flying in to the mine tunnel.

 

[Tommy084]

LOVE THIS
Going to try this some day, have a bricked wiiu, teensy and a sd adapter from the hardmod 3ds days and backups from dimoks's nand extractor.

 

[C0mm4nd_]

LOVE THIS
Going to try this some day, have a bricked wiiu, teensy and a sd adapter from the hardmod 3ds days and backups from dimoks's nand extractor.

I'm not sure that those baks are flashable....

 

[Deleted User]

I'm not sure that those baks are flashable....

Everything is possible they say..
Soon or later, we will be able to flash anything into Wii U.

 

[C0mm4nd_]

Everything is possible they say..
Soon or later, we will be able to flash anything into Wii U.

He could even modify the backup without decrypting,etc... (I think it's a CBH brick)
smea did it.

 

[huma_dawii]

Soooo.. what is this for?

 

[C0mm4nd_]

Soooo.. what is this for?

It's very important in the scene... Wii U hardmodders = dev can test their homebrews without risk = better homebrew = maybe a boot1 exploit

 

[huma_dawii]

It's very important in the scene... Wii U hardmodders = dev can test their homebrews without risk = better homebrew = maybe a boot1 exploit

OMG its happening!!! DDDDDD

 

[Tommy084]

I'm not sure that those baks are flashable....

He could even modify the backup without decrypting,etc... (I think it's a CBH brick)
smea did it.

Hmm maybe so, thought op said that the hashes matches.
But maybe i can dump and edit it and write it back....
The brick was by editing the cbhc files and build an .elf with no errors, installed with no errors, did not delete anything, next boot = black screen
Probly by confusing the cbhc boot progres

 

[C0mm4nd_]

Hmm maybe so, thought op said that the hashes matches.
But maybe i can dump and edit it and write it back....
The brick was by editing the cbhc files and build an .elf with no errors, installed with no errors, did not delete anything, next boot = black screen
Probly by confusing the cbhc boot progres

Wait... can you press "HOME" on that black screen?

 

[Tommy084]

Wait... can you press "HOME" on that black screen?

Hehe no trust me nothing works!
Not even the hidden HBL shortcut inside cbhc, by holding a combo to force it....

FTPiiU doesn't work? Maybe it might work.

It freeze when it should show the menu, the pad also lost. Turning it of and on gives me a message that i have to be closer to the wiiu

 

[Deleted User]

Hehe no trust me nothing works!
Not even the hidden HBL shortcut inside cbhc, by holding a combo to force it....

FTPiiU doesn't work? Maybe it might work.

 

[C0mm4nd_]

Hehe no trust me nothing works!
Not even the hidden HBL shortcut inside cbhc, by holding a combo to force it....

Loading a signed boot1 recovery image stolen from Nintendo Co. Ltd.

 

[Tommy084]

saturday night dumping

 

[C0mm4nd_]

saturday night dumping

And you have an OTP dump right?

 

[Tommy084]

And you have an OTP dump right?

Yes, but dont know how to decrypt with it... Do you?
Anyways going to write the rednand dump back to nand, just to see what is going to happening
I have a other unit, so i dont mind if it get worst.

 

[Deleted User]

Yes, but dont know how to decrypt with it... Do you?
Anyways going to write the rednand dump back to nand, just to see what is going to happening
I have a other unit, so i dont mind if it get worst.

redNAND might work but it still would get redirected to SDCard, right?

 

[C0mm4nd_]

Yes, but dont know how to decrypt with it... Do you?
Anyways going to write the rednand dump back to nand, just to see what is going to happening
I have a other unit, so i dont mind if it get worst.

Read the OTP page on wiiubrew for getting the key pos and with OpenSSL you could try to decrypt the NAND bak with the key from OTP