Tutorial  Updated

How To: Upgrading / Rebuilding Wii U Internal Memory (MLC)

Warning


This tutorial is only for advanced users and has a serious risk of bricking the console. Make sure you read it completely before executing any step and that you understand every step and its implications. With de_Fuse everything should be unbrickable if you know how.

You should at least have a backup of SLC and SLCCMPT, as we can’t rebuild them at the moment. (can be done in minute_minute, so there is no excuse). We had two cases where the SLC corrupted for an unknown reason, so a backup is essential.

What is this for?


This tutorial goes into rebuilding the MLC from scratch on a clean media. This can become useful, if
  • the MLC (eMMC) chip died or corrupted the filesystem
  • the SCFM (SLC cache for MLC) became inconsistent
  • you want to upgrade the capacity of the internal storage.
  • you want to set up a redNAND without SCFM
If you have a bad eMMC chip, but the recovery still works (which is most likely), then there are also ways to fix it without a complete reformat.
If the LED is blinking blue, you have a SLC problem and not a MLC problem, so this tutorial won't help with that.

It will format your MLC, so all data on the internal Wii U memory will be lost.

Update


13.03.2024 - The wafel_setup_mlc.ipx now uses a built in IOSU function to create system folders, that should make sure the permissions are right, which caused problems with game updates in the past. It will also recreate the update folder (so system updates won't be blocked by that)

Prerequisites


Backing up save games



Do a backup of what you want to preserve, like savegames and Miis.
For Backing up Save games, it is recommended to use SaveMii. That requires that you have Tiramisu or Aroma running.
You can also move your savgames (or whole games) to USB, which should still be readable. When recreating the users after the rebuild, you just have to be carefull to create the users in the right order, to make the ID’s match. A backup by other means (Like savemii) is still recommended.
If you are using this tutorial to fix a failing eMMC you might not be able to use the other Backup options. In that case use the Dump MLC option in the Recovery. You can extract your data from there using wfs-extract.

Storage Options


The Wii U has two ways of connecting internal memory, each with its own drawbacks:
  • SDIO – On retail consoles the internal memory is a eMMC chip connected through an internal SDIO bus to the Latte chip. This SDIO bus can also use SD cards (hence the name SD IO). Access to media connected on the SDIO is cached through a file on the SLC, presumably to reduce writes on the MLC. This cache is called SCFM and it is the reason why you always need to backup / restore SLC and MLC together and doesn’t allow easy swapping of multiple SDs.
    IOSU also only supports 3 sizes of media on this bus: <=8GB, 32GB and 64GB. The size will be limited to the biggest it fits, the rest is unusable. This bus is limited to 26MB/s (4bit@52Mhz). For replacing the eMMC with an micro SD you can use MLC2SD or a similar Interposer. Soldering and micro SD adapter using wires, works too.
    It is recommended to use a 64GB Sandisk Max Endurance card (But similar card should also be fine), since the Wii U is known for writing much.

  • SATA – The Disc drive is connected through SATA, the connectors are different but the electrical signals are still the same. Some Kiosk consoles used this Interface to connect to a HDD. The type of the SATA device can be configured in the SEEPROM, so we can configure our retail consoles to also use a SATA HDD / SSD.
    NOTE: @QuarkTheAwesome is building an SATA adapter for that purpose, available soon™.

    The advantage of using this interface is, that the size isn’t limited (well WFS is limited to 2TB) and it doesn’t use SCFM, which makes some things easier and improves performance in some circumstances. The obvious disadvantage is that you can’t use your disc drive anymore. Without the Disc Drive vWii System Menu doesn't work. vWii Injectes / Wii VC from the eShop can still be used, but only when installed to USB. Also you still might need to disable the MLC on the SDIO bus, or else the wii u might still use the SDIO one if the SATA device takes too long to init.

  • redNAND – redirects the read / writes to one or more of the internal storage devices to paritions on the SD card. You can create an arbitrary size MLC partition on the SD card and set it up using this tutorial. SCFM can be easily disabled for the redNAND. The 64GB limit does not exist for redNAND if the SCFM is disabled. For redNAND we have a dedicated Tutorial here: https://gbatemp.net/threads/fixing-...-soldering-using-rednand-with-isfshax.642268/

Does that mean we can’t get more than 64GB on the SDIO bus? No, BUT it requires ISFShax / defuse to boot the console every time. @GaryOderNichts created a patch to remove the limits and always use the maximum size of the SDIO media and it also disables SCFM, because SCFM doesn’t work with more than 64GB and disabling SCFM improves performance and reduces wear on the SLC, at the cost of increasing wear of the MLC media. I packaged this patch in wafel_unlimit_mlc.

Rebuilding the MLC


Now that you decided what media you want to use as MLC, we can start with the actual process:
  1. Download all the mlc system titles for your region from NUS. This can be done conveniently with MLCRestorerDownloader by @Xpl0itU. Copy the otp.bin from the SD to the folder with the MLCRestorer Downloader so it can get the common key from there.

    You will get the output/MLC/{region} directory, which then contains a directory for each title. In total there should be 52 titles totaling ~1.1GiB.

    If your console has an old firmware it might also be necessary to get the latest SLC titles.

  2. On the root of your SD card (the one that will go in the front slot, not the MLC replacement) create a folder wafel_install. Then copy all 52 titles to the wafel_install folder, so it now contains the 52 subfolders, one for each title. If you want to reinstall / update SLC titles, you would also put them there.

  3. Attach your MLC media of choice. (If you are using SATA got to Backup and Restore, then at Set SATA Device in SEEPROM select GEN2-HDD (Kiosk CAT-I with HDD)).
    For installing MLC2SD look here: https://gbatemp.net/threads/using-n...emmc-fix-160-0103-system-memory-error.636361/ at the Soldering section.

  4. If you install to eMMC / MLC2SD, got to Backup and Restore and select Erase MLC and Delete scfm.img. If the Erase MLC fails, you can ignore that if it wasn't formatted as MLC before (from a failed install or so).

  5. Put the wafel_setup_mlc.ipx on the SD card in /wiiu/ios_plugins. If you want more than 64GB on SDIO you also need to put the wafel_unlimit_mlc.ipx there. If you install with wafel_unlimit_mlc.ipx, it will be permanently required and therefore also permanently requires ISFShax or defuse.

  6. [Optional, only when using defuse] Open the serial monitor on the PC (Putty / minicom) for defuse to see the setup progress. There will be no display output in the Wii U itself. I attached the whole serial log of a successfull install as a reference.

  7. Select Patch (sd) and boot IOS (slc) in minute to start the setup of your fresh MLC.During the setup you won't see anything on the screen. You have to go by the power led.
    The power LED will flash blue, while it is installing the titles.
    if something goes wrong the LED will turn orange, but it will continue as long as it is blinking.
    The LED will become static once it finished. You can now power off the console.
    If the led is blinking red, something fatal happend. Ask for help.
    During the setup a short log gets written to the SD: wafel_setup_mlc.log.
    In the end it will enable the initial setup on the next boot.

  8. Remove the wafel_setup_mlc.ipx from /wiiu/ios_plugins on the SD.

  9. Boot the console. Patch (sd) and boot IOS (slc)

  10. If everything worked, the initial setup should launch.

ISFShax only: Finalizing


If you are using the wafel_unlimit_mlc.ipx you need to keep ISFShax installed. If you haven't done already complete the "Booting without SD" step form the ISFShax tutorial but also add the wafel_unlimit_mlc.ipx renamed to 9unlimit.ipx to the /storage_slc/sys/hax/ios_plugins directory.
If you are not using the wafel_unlimit_mlc.ipx you can either uninstall ISFShax or keep it as a brick protection. If you keep it complete the "Booting without SD" step form the ISFShax tutorial.
The Wii U should now boot automatically if you don't have an SD in.
You probably also want to enable the autobooting now.

See Also


https://gbatemp.net/threads/wii-u-internal-storage-upgrades-are-possible.635629/

Pictures


512 GB SD card:
img_20230702_021647-jpg.381270


@QuarkTheAwesome 120 GB SSD:
img_2709-jpg.381271


Thanks


 

Attachments

  • serial-log.txt
    87.6 KB · Views: 58
Last edited by SDIO,

Ysecond

Well-Known Member
Member
Joined
Apr 27, 2023
Messages
187
Trophies
0
Age
26
XP
489
Country
China
Sorry,I didn't notice that Tuner357 had already inquired about this situation earlier.
board rev : 01 and 30. I have no idea about the boot1 version.
 

SDIO

Well-Known Member
OP
Member
Joined
Feb 13, 2023
Messages
2,420
Trophies
0
Age
28
XP
1,691
Country
Germany
Boot1 should he the first 64kb of the SLC. You should be able to compare it against the boot1 versions Nintendo has on the nus
 

Ysecond

Well-Known Member
Member
Joined
Apr 27, 2023
Messages
187
Trophies
0
Age
26
XP
489
Country
China
I get the same hash as shinyquagsire23.
E:\BOOT1_SLC.RAW
MD5: C941ED70442744FEAFCB8578E5625C09
SHA1: 33AE95A05B86D8E06D7331F8CF791C2C82DB69D1
CRC32: 09353DB0

I think this is very strange, My tool (pi pico,SD card , wire,) has fixed more than ten consoles, and it has never experienced such a situation. but when it happens, It happens on three consoles simultaneously. So should I suspect it's a problem with my computer or wiiu power supply?
 

SDIO

Well-Known Member
OP
Member
Joined
Feb 13, 2023
Messages
2,420
Trophies
0
Age
28
XP
1,691
Country
Germany
Maybe try disconnecting the pico from the PC after launching minute to make sure that doesn't interfere.
 

Ysecond

Well-Known Member
Member
Joined
Apr 27, 2023
Messages
187
Trophies
0
Age
26
XP
489
Country
China
I have conducted many tests, I'm trying to replace the pi pico and wires, ac adapter, 3V3,the computer, rebuild SD card,none of them have solved the problem.
Finally, after low level formatting and rebuilding , both SD cards have returned to normal.
Say it again, saving the original SLC backup is crucial. Because after multiple install, is possible that MLC setup and unlimt plugins may cause confusion in SCFM, can't get rid of umlimt plugins anymore.
 
Last edited by Ysecond,

Ysecond

Well-Known Member
Member
Joined
Apr 27, 2023
Messages
187
Trophies
0
Age
26
XP
489
Country
China
Yes, I have two SD, one 1GB and the other 2GB, they fail (dump otp via PRSHhax) on any console after being used on one console.
 

SDIO

Well-Known Member
OP
Member
Joined
Feb 13, 2023
Messages
2,420
Trophies
0
Age
28
XP
1,691
Country
Germany
can you make them work again, then do an image while they work, then make them not work again and diff it?
 

SDIO

Well-Known Member
OP
Member
Joined
Feb 13, 2023
Messages
2,420
Trophies
0
Age
28
XP
1,691
Country
Germany
@Ysecond If I understand correctly, you still have one console, where you can't dump the OTP?

If this console does have a Hynix so there is a chance that the Hynix is preventing it from booting. In that case you could try to backup the eMMC by formatting a SD as redNAND, then erasing it and then restore the redNAND backup. That could make the console boot again temporarily and allow the dumping via the recovery, while not being defused.

You could also try dumping the memory of the crypto module like described here: https://gbatemp.net/threads/wii-u-failing-during-boot-sequence.637787/post-10266971
You could then use the attached python script to build a minimal otp from that.
You can then check if that otp works with nandBinCheck agains your SLC dump. If it only shows the scfm.img with bad hmac, but no other errors you can proceed with that otp.
With that minimal OTP you can install isfshax, using this installer with defuse support: https://github.com/jan-hofmeier/isfshax_installer/releases/tag/defuse-support
isfshax then allows you to load minute without defuse and thus you can dump the full otp without PRSHhax.
 

Attachments

  • otp-builder.zip
    532 bytes · Views: 21
  • Like
Reactions: Valery0p

Ysecond

Well-Known Member
Member
Joined
Apr 27, 2023
Messages
187
Trophies
0
Age
26
XP
489
Country
China
It did happen : LINK ,but the problem has been solved : LINK .
I have low-level formatted the SD card (SD for boot1.img and minute) , and rebuild it, everything has returned to normal, It can dump OTP via PRSHax again.
Whenever faced with a wiiu has Hynix emmc,I will always throw Hynix away first. without EMMC, dump OTP would also work well.
Post automatically merged:

Maybe later,It seems to occur on a specific console:this
If you mean this console, let me find it out, I forgot where it was placed. :rofl:
Post automatically merged:

After more testing, I found that this issue is caused by an abnormal OTP file
 
Last edited by Ysecond,
  • Like
Reactions: Valery0p

Ysecond

Well-Known Member
Member
Joined
Apr 27, 2023
Messages
187
Trophies
0
Age
26
XP
489
Country
China
What will happen if we destroy the scfm file in slc? Does this attempt make any sense?
Let it go, it's meaningless.
 
Last edited by Ysecond,

SDIO

Well-Known Member
OP
Member
Joined
Feb 13, 2023
Messages
2,420
Trophies
0
Age
28
XP
1,691
Country
Germany
How would you do that? You can't delete it from IOSU, it won't let you.
I didn't try it yet from minute or the Wii u and tools
 

clj80

New Member
Newbie
Joined
Nov 14, 2023
Messages
4
Trophies
0
Age
43
XP
23
Country
Italy
Hi to all, i need help to revive a bricked dead wiiu whith hynix emmc
I bought a bricked WiiU thinking it was a software problem, but it has hynix completly dead
step i was made right now
defused, dumped otp and other stuff,
soldered microsd adapter, updated sistem image, it had very old firmware
try to rebuild the mlc (sdcard 64gb) but i had error (in the meantime I removed defuse and installed ISFShax for convenience)
the power never start blinking.
Please guide me, i tried a lot of thinks, included rednand but have always same result :(
 

Attachments

  • Immagine WhatsApp 2023-11-15 ore 16.54.57_f8bc842f.jpg
    Immagine WhatsApp 2023-11-15 ore 16.54.57_f8bc842f.jpg
    243.6 KB · Views: 19

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • BigOnYa @ BigOnYa:
    Me and wifey was deciding on our next vacation, so I hung up a map on the wall, and give her a dart and said, wherever you hit, we will go. She threw the dart and it missed the map completely and fell into a trash can below on floor. So I said "ok Florida it is."
    +2
  • BakerMan @ BakerMan:
    @ZeroT21 ohhh a pot cake?
    +2
  • SylverReZ @ SylverReZ:
    Gimme some of dat
    +4
  • BakerMan @ BakerMan:
    oh yeah i don't use weed,in my baking or in general
  • BakerMan @ BakerMan:
    besides isn't it usually gummies or brownies?
  • AncientBoi @ AncientBoi:
    So, make a "New Trend"
  • BakerMan @ BakerMan:
    i just said i don't use weed
  • BigOnYa @ BigOnYa:
    You can add it in anything really, you can even make a butter/oil with it, then use that oil in anything
  • BakerMan @ BakerMan:
    besides i'm literally a minor and neurodivergent, so telling me to make a cake with cannabis is traumatizing me, ur cancelled buddy /s/srs
  • BakerMan @ BakerMan:
    (nah jk i'm just parodying those "i'm literally a minor and neurodivergent" mfs on twitter)
    +1
  • BigOnYa @ BigOnYa:
    Michigan has legal rec, so you only have few more years, is it 18 or 21 up there? 21 here in Ohio.
  • BakerMan @ BakerMan:
    prob 21, idk tho
    +1
  • ZeroT21 @ ZeroT21:
    Guess I'll go with plan B and make a Rum Vanilla flavored ice cream
    +1
  • BigOnYa @ BigOnYa:
    That sounds damn good.
  • AncientBoi @ AncientBoi:
    Nah. Tequila maybe
  • AncientBoi @ AncientBoi:
    That, or Old No. 7
  • BigOnYa @ BigOnYa:
    I'm ashamed to ask, but what is old no 7?
  • AncientBoi @ AncientBoi:
    Jack Daniels
    +2
  • BigOnYa @ BigOnYa:
    Oh yea, duh
    +1
  • BigOnYa @ BigOnYa:
    I still have some old no 7, bout to mix with some coke, and get "California Sober".
    +2
  • AncientBoi @ AncientBoi:
    lol, I finally got you to Enjoy a Coc Tail :tpi::rofl2::tpi:
    +2
  • BakerMan @ BakerMan:
    @ZeroT21 oh i bet some rum raisin ice cream is so good

    i don't drink, but some rum ice cream might be good
    +2
  • BigOnYa @ BigOnYa:
    Rum pecan ice cream is the bomb. Never had rum raisin, but bet be good. My homemade ice cream machine started rust inside so I pitched it, but gotta get a new one, miss making my own ice cream, esp with booze.
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    But have you ever made ice cream on weed... Lol
    +1
    Psionic Roshambo @ Psionic Roshambo: But have you ever made ice cream on weed... Lol +1