kiosk console dump mlc with defuse

[gorgyrip]

I've installed defuse and used the format rednand option to dump the mlc.
the sd card has now 4 partitions.
How do i backup only the mlc partition? i'm using win7.

EDIT: I did it the hard way. for the mlc partition, multiply the shown sectors with 200 and you will get the start and end offset.
HxD--tools---open disk and select the sd card. copy what's in between the 2 addresses you priviously obtained. you must have a pagefile of at least 32gb. if not, hxd will give an out of memory error. or copy the data in smaller chunks and merge them later. the resulted file should have 31,205,621,760 bytes.

wfs-extract --input mlc.img --output dump_dir --type mlc --otp otp.bin gives me this error:
Error: Failed to read /sys/import/context/update_context
but if i add --verbose at the end, it continues to dump the rest. It is normal to get that error on kiosk mlc? it creates that file, but it is 0 bytes.
The extracted files have about 1.8gb and i can see all the 3 demo movies that the console has.
If i use winrar on the mlc, the resulted file will have about 30gb. is that normal? shouldn't it be smaller since the extracted content has only 1.8gb? does the mlc has some extra stuff that i failed to extract?

If the emmc dies, can I use win32DI and write that file to a sd card+nand_aid?

One last question. I extracted some demos from disk dumps. Is there any way to run reovery menu from the minute menu? recovery menu has a wup installer.

 

[SDIO]

On linux you would just use dd. I think there is also a dd version for windows, but finding out the path to the physical device is not very intuitive on windows.

You could write the MLC to a SD card for MLC2SD or nand aid. You just have to make sure you didn't boot the console in between creating the backup and swapping the mlc to the SD.

 

[gorgyrip]

On linux you would just use dd. I think there is also a dd version for windows, but finding out the path to the physical device is not very intuitive on windows.

You could write the MLC to a SD card for MLC2SD or nand aid. You just have to make sure you didn't boot the console in between creating the backup and swapping the mlc to the SD.

Any tips about installing demos without moding the console? is there a wup installer that could be started from minute?

 

[SDIO]

you can just use the waffle_install plugin if it is a properly signed wup: https://gbatemp.net/threads/wii-u-blinking-blue-light-no-image.640588/post-10259653

 

[gorgyrip]

you can just use the waffle_install plugin if it is a properly signed wup: https://gbatemp.net/threads/wii-u-blinking-blue-light-no-image.640588/post-10259653

It didn't work. Maybe because osv10 is prod and the console and demo are dev?
The demo has 2 folders: UB_AVXA_00.00_assets_p01 and UB_AVXA_00.00_p01, both containing app and h3 files. i placed both folders into the wafel_install folder.

 

[SDIO]

Oh yes, stroopwafel is made for the retails IOSU. On the kiosk the addresses will likely be different

 

[gorgyrip]

Oh yes, stroopwafel is made for the retails IOSU. On the kiosk the addresses will likely be different

In that case, is there any way to change the coldboot title to SCT, from minute menu?

 

[SDIO]

It could be done, but it isn't implemented yet. Since the size stays the same, you wouldn't even need to allocate more clusters, just updating the hmac.
If you don't want to add it to minute, you could dump the slc, inject a different system.xml to the slc dump on the pc and then restore the dump

 

[gorgyrip]

It could be done, but it isn't implemented yet. Since the size stays the same, you wouldn't even need to allocate more clusters, just updating the hmac.
If you don't want to add it to minute, you could dump the slc, inject a different system.xml to the slc dump on the pc and then restore the dump

Adding new features to minute is way above my skills. Editing is not realy ok, since i have to write the full slc everytime i make a change.

Post automatically merged: Jan 25, 2026

I decided to use the pc method. I had to do it twice, because the first time i launched SugarBootTool and the console's boot title changed to kiosk again. The rest of the titles don't change system.xml. Used tools: NAND Extractor and slc file injector: https://github.com/GaryOderNichts/wiiuqt