Hardware Wii U Nand corrupted

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
Hello. I'm a first time poster here!

So my girlfriend got a Wii U laying around. She didn't use it for 8 years.
Well of course the NAND is slowly failing (HYNIX). The console is capable of booting into the OS, but you can't launch anything without the famous 0103 error code.
Things I've already done:
- Dumped OTP and SEEPROM
- Tried garys fixing approach with recovery_menu. Didn't work.
- Ordered an High Endurance SD Card 32GB
- Checked with a fork of recovery_menu for broken files (about 1600 files are broken)
- dumped the latest logs (will attach the latest one. Date is wrong btw)
- currently dumping with @SDIO recovery_menu_dumper MLC and SLC. (SLC got 3404 Errors, MLC is still reading. Will take the whole night probably. Already 2600 Errors but 0 bad sectors)

My plan is to use the SD as main EMMC. I heard there is also a hardware dump approach using the RasPiPico? Since @SDIO isn't sure that the dumper is working fine, will I need it?
Also how do I fix the files and what do I have to look for? I know already that the main goal is to homebrew the console. But like I said, not a single app is working. Only the homescreen.
Got decent fixing and soldering skills btw. Thanks for your help in advance :)
 

Attachments

  • 3.log.txt
    32 KB · Views: 37

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
1,973
Trophies
0
Age
28
XP
1,266
Country
Germany
The SLC errors we expected, that's a problem of the dumper, not the SLC.

The dump from the dumper should be fine, but for the hardware method most SD card readers should work. I just like the Raspberry, because it gives more control.

If you need a NAND-AID I still have some
 

V10lator

Well-Known Member
Member
Joined
Apr 21, 2019
Messages
2,585
Trophies
1
Age
36
XP
5,366
Country
Germany
1600 corruptions sounds like a lot. Anyway:
how do I fix the files and what do I have to look for?
First off you replace the eMMC with the SD card, so continue with what you're doing right now. After that you re-run the MLC checker (the thing that told you about the 1600 corruptions) and upload the result to here. We need to see what exactly is corrupted to tell you the steps cause things are different for corrupted files, folders and quotas as well as for corrupted games, system titles and so on.
 
  • Like
Reactions: SDIO

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
The SLC errors we expected, that's a problem of the dumper, not the SLC.

The dump from the dumper should be fine, but for the hardware method most SD card readers should work. I just like the Raspberry, because it gives more control.

If you need a NAND-AID I still have some
Alright thanks for your help! So do I need a hardware dump using a SD card reader, or is the dump from the recovery menu fine as well? Here is the end result of the recovery menu dumper:

Unmounting MLC..
Unmount ing SLC..
slc = 536870912 / 536870912, res 00000000, error 3404
slc result: -196635
mlc = 31205621760 / 31205621760, res 00000000, errors 89327, bad sectors 0
mlc_result: -196673
 
Last edited by Rimzi,

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
Hey, I'm back again with good news! The new SD is in place and the dump worked! But sadly no improvement. Nevertheless did I run the MLC checker. The error count was bigger, but it's probably because of the dump. Log is in the attachment :) Thanks!
 

Attachments

  • mlc_checker.txt
    200.7 KB · Views: 32

V10lator

Well-Known Member
Member
Joined
Apr 21, 2019
Messages
2,585
Trophies
1
Age
36
XP
5,366
Country
Germany
@Rimzi The clone beeing corrupted is expected: It cloned the corruptions too. So now we will start to fix this corruptions. In any case you'll only boot from the clone from now on.

The bad news is that there are indeed corrupted folders (I think even corrupted quotas) but the good news is they aren't many. So let's start with them. For this you'll need working network in the recovery_menu, see https://github.com/GaryOderNichts/recovery_menu#load-network-configuration . So create the file as told there, then boot the recovery_menu and navigate to Load Network Configuration. After that navigate to Start wupserver.

Now with wupserver up&running on the Wii U grab on your PC. Open it with a text editor and search for the line
Code:
    def __init__(self, ip='192.168.178.27', port=1337):
change the IP to the one of the Wii U (don't change the port) and save that. Then execute a shell, navigate to the folder with the wupclient.py and execute python -i wupclient.py (or maybe python3 -i wupclient.py). This should give you the code 0x0 and a prompt.
In this prompt do the following:
Code:
w.cd("/vol/storage_mlc01")
w.mkdir("corrupted", 0")
w.mv("usr/boss/00050000/10102400/user", "corrupted/01")
w.mv("usr/boss/00050002/1012be01/user", "corrupted/02")
w.mv("usr/boss/00050010/10040200/user", "corrupted/03")
w.mv("usr/boss/00050010/1004c200/user", "corrupted/04")
w.mv("usr/save/00050000/10102100/user", "corrupted/05")
w.mv("usr/save/00050000/10102400/user", "corrupted/06")
w.mv("usr/save/00050000/10102f00/user", "corrupted/07")
w.mv("usr/save/00050000/10105700/meta", "corrupted/08")
w.mv("usr/save/00050000/1010ed00/user", "corrupted/09")
w.mv("usr/save/00050000/1018dd00/user", "corrupted/10")
w.mv("usr/save/00050000/10195d00/user", "corrupted/11")
w.mv("usr/save/00050000/101fed00/user", "corrupted/12")
w.mv("usr/save/00050002/1012b101", "corrupted/13")
w.mv("usr/save/00050002/1012be01/user", "corrupted/14")
w.mv("usr/save/00050010/10040200/user", "corrupted/15")
w.mv("usr/save/00050010/1004d200/user", "corrupted/16")
w.mv("usr/save/00050030/10016200", "corrupted/17")
w.mv("usr/save/00050030/10017200", "corrupted/18")
flush_mlc()
Don't copy and paste that codeblock but execute every line seperately as some of them need confirmation. Note that at the time of writing there's no way to remove this corrupted folders/quotas. We just move them away where they won't cause a crash except when doing a factory reset. So do not try to factory reset in the future.

While you do this I'll prepare the next steps for you and edit this post when done, so stay tuned.

//EDIT: Okay, so as a next step we will remove all the corrupted titles we can delete without doing more harm than good. So execute in wupclient:
Code:
delete_title("/vol/storage_mlc01/usr/title/00050000/10102f00", 0)
delete_title("/vol/storage_mlc01/usr/title/00050000/10105700", 0)
delete_title("/vol/storage_mlc01/usr/title/00050000/10131c00", 0)
delete_title("/vol/storage_mlc01/usr/title/00050002/10111f01", 0)
delete_title("/vol/storage_mlc01/usr/title/00050002/1012b101", 0)
delete_title("/vol/storage_mlc01/usr/title/00050002/1012be01", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/10101b00", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/10102100", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/10102400", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/1010ed00", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/10111f00", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/10132400", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/1016a400", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/1018dd00", 0)
delete_title("/vol/storage_mlc01/usr/title/0005000e/10195d00", 0)
flush_mlc()

After that we should have reduced from more than 1700 to around 250 corruptions left. :) Again: I'll post this now so you can start early while I'll prepare the next step.

//EDIT²: Now the last corrupted things are system titles. We can't remove them (don't even try: It could bring your Wii U into a state the recovery menu won't boot anymore). Instead we will resinstall them hoping that MCP (a tool by Nintendo running on the Wii U) will remove the corruptions while doing so. Note that this hasn't been tested in the past but I don't want to prepare commands to remove ~250 files when we can avoid that.

So grab a NUS downloader like JNUSTool (NUSspli and Wii U Downloader currently not useable for this purpose) to download the following titles:
Code:
0005001010040200
0005001010044200
0005001010045200
0005001010047200
0005001010048200
0005001010049200
000500101004a200
000500101004b200
000500101004c200
000500101004e200
000500101005a200
0005001010062200
0005001010066000
0005001b1004f000
0005001b10056000
0005003010010209
0005003010011209
000500301001120a
000500301001220a
000500301001320a
000500301001420a
000500301001520a
000500301001620a
0005003010017209
000500301001720a
000500301001820a
000500301001920a
000500301001a10a
000500301006d20a
Grab the recovery_menu attached to this post. The difference between this and upstream is that this allows batch install while upstream would require you install every title one by one. Copy the downloaded folders (containing the .app and .h3 files as well as title.tmd, title.tik and title.cert) into the install folder on the root of your SD card (create it if missing). Don't forget to also copy the downloaded recovery_menu, then boot that and selete the "Install WUP" option. Note that installing needs some time, it most likely isn't frozen even when looking like that.

Now re-run the MLC checker to make sure neither me nor you did any mistake. It should show corruptions inside of /vol/storage_mlc/corrupted only. If that's the case try to boot the console but in case it shows any other corruptions tell us the result.

//EDIT³: One example of how to use JNUSTool: java -jar JNUSTool 0005001010040200 -dlEncrypted
 

Attachments

  • recovery_menu.zip
    24.1 KB · Views: 26
Last edited by V10lator,
  • Like
Reactions: SDIO

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
@V10lator alright! Will try it, when I'm back home! Thank you so much! About the corrupted folders and quotas: Is the Wii mounting the SD card as well when running wupserver? If yes, we could try to move them to the SD to eliminate them :)
Let me know if my idea is bullshit, but I thought, maybe it's possible, since you can move those objects. (But on the other hand, what if the filesystem still refuses them to delete and just makes a copy of them...?)
 

V10lator

Well-Known Member
Member
Joined
Apr 21, 2019
Messages
2,585
Trophies
1
Age
36
XP
5,366
Country
Germany
@Rimzi We can't move these corruptions past filesystem borders, so sadly this won't work.

We (esp SDIO) might find a way to remove these in the future but for now you have to live with them. My second console has more than 40 corrupted folders, so I'm in the same boat, don't worry.

//EDIT: In case you need to factory reset no matter what it is doable but requires manual intervention when it crashes (using recovery_menu and wupclient to do the crashing step by hand, then editing a system file to tell the console to continue after that step), so we normally just advise to not do it.
 
Last edited by V10lator,

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
@V10lator I followed your steps. Everything worked flawlessly except some WUPs installation.

WUPs installation errors:

20230602_033949.jpg20230602_035336.jpg20230602_035831.jpg20230602_041040.jpg

But now the Settings app and the Internet Browser is working flawlessly, so it definitively fixed the console! Now it is modding ready. wasn't there an application by Gary, where you can force replace all system apps via system update? What are the next steps I need to follow?

MLC scan after installation in the attachments :)

Thank you so much for your help so far!!!
 

Attachments

  • mlc_checker.txt
    53.8 KB · Views: 22

V10lator

Well-Known Member
Member
Joined
Apr 21, 2019
Messages
2,585
Trophies
1
Age
36
XP
5,366
Country
Germany
Am not on PC right now but @Rimzi what you could try is to use wupclient to remove the remaining files the MLC checker reported (w.rm("/path/to/the/file")), then use JNUSTool without the -dlEncrypted option to download and decrypt the corresponding titles and upload (w.up("localFilename", "remoteFilename")) the previously removed files with wupclient.

Or homebrew the console and try using FTP for doing the same.
wasn't there an application by Gary, where you can force replace all system apps via system update?
That's for vWii, so won't help here.
 
Last edited by V10lator,

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
@V10lator well wup server is painfully slow so that's not an option. When I try to hack the Wii U, the exploit starts, then there is the Wii U loading screen and then a 106-0103 error. Which program is doing this?
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
1,973
Trophies
0
Age
28
XP
1,266
Country
Germany
If we are lucky, we can see in the logs on which file it is crashing

EDIT: also the corrupted files in the boss store /usr/boss/.. could cause trouble. Ye could try to move the corrupted files away.
 

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
Will crash it again and dump the log again. Be right back!
Post automatically merged:

Got it! Needed to set the time right. Here is the log:
 

Attachments

  • 70.log.txt
    22.3 KB · Views: 26
Last edited by Rimzi,

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
1,973
Trophies
0
Age
28
XP
1,266
Country
Germany
00050030-1001720AWii U Electronic Manual

00050030-1001520AFriend List

00050030-1001320ANintendo TVii

00050010-1004A200Mii Maker


They all have either the title.tmd or title.fst corrupted, maybe thats preventing the reinstall. None of these apps should be relevant for the recovery menu. So my recommendation would be to rename their directory and then try to reinstall it. If the reinstall works you can delete the original directory.
I would start with the Mii Maker, as @V10lator said, it might be relevant for Homebrew.

If you don't want to move the directories away, then you could try to just replace the title.tmd and title.tmd of these titles before trying to reinstall them. That way we could also check the hypothesis.
 

Rimzi

Member
OP
Newcomer
Joined
May 30, 2023
Messages
17
Trophies
0
Age
21
XP
45
Country
Germany
Remove the slash at the end of the folder:
Code:
w.mv("/vol/storage_mlc01/sys/title/00050010/1004a200", "/vol/storage_mlc01/1004a200_backup")
Still not working. Deencrypted program also comes with no title file.tmd
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Sicklyboy @ Sicklyboy: *teleports behind you* "Nothing personnel, kiddo" +1