Hacks Guide Wiki - User contributions [en]

Wii U:Region Changing

2025-03-01T20:43:37Z

Lazr: typo

This guide will show you how to region change your Wii U. This process is the most effective way versus the old and tedious method, but if you don't follow the guide properly there is a chance you can brick your system. Just keep ISFSHax installed until ''after'' you have finished the guide.

= Usage =
{{info|text=This will change only the region of the console. It does not change the Gamepad's region. However, you are able to use out of region Gamepads thanks to Aroma's DRC region free plugin. If you also want to change the vWii region, run [https://github.com/GaryOderNichts/vWii-Decaffeinator/releases/tag/v2 vWii Decaffeinator] on light mode then perform a system update (updates need to be unblocked).}}

{{info|text= This guide will require you to wipe the MLC. Backup any important saves you wish to preserve by using either SaveMii or dumpling. You can however region change without wiping it, you would just skip <code>Erase MLC</code> and <code>Delete scfm.img</code>, but keep in mind you'd need to delete old titles via [https://raw.githubusercontent.com/Lazr1026/regionchange/main/files/wupclient.py wupclient.py] (right click > Save Link As).}}

'''Keep a copy of your OTP and SEEPROM backups.''' It is just in case something goes wrong, which is unlikely but better to keep regardless.
{{warning|text=Do not uninstall ISFShax after erasing the eMMC and deleting the SCFM until you have successfully rebuilt the MLC and confirmed everything is working. We are not responsible if you fail to follow directions.}}

== SD Preparations ==

*You must first have [[Wii U:ISFShax|ISFShax]] installed. This is a requirement to region change and is not optional. de_fuse can also be used, but that is for more advanced users (requires soldering).

*The latest release of [https://github.com/Xpl0itU/MLCRestorerDownloader/releases MLCRestorerDownloader] (With your preferred OS)
*The latest release of the [https://github.com/jan-hofmeier/wafel_setup_mlc/releases MLC setup plugin]
*The latest release of the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel_payloader Plugin]
*The latest [https://aroma.foryour.cafe Aroma] files (If you have aroma already, ignore this.)
**Check the boxes, then hit <code>Download Base Aroma</code> and <code>Download Payloads</code>.

=== Downloading the MLC files ===

# Download and extract the MLCRestorerDownloader.
# Copy your otp.bin from the nand backup to the directory of the program.
#*[[File:MLCRestorerDownloader.png]]
# Start the app in a terminal or command prompt (Type CMD in the file path bar at the top).
# Type either <code>MLCRestorerDownloader</code> or <code>./MLCRestorerDownloader.exe</code> then hit enter.
#*[[File:SelectTitles.png]]
# Type <code>1</code> then hit enter.
# Type the number for the region you want to be changed.
#*[[File:SelectRegion.png]]
# The Downloading process will take a minute, from here on you can continue from below.

=== Setup plugins and MLC files ===
# Copy the <code>wafel_payloader.ipx</code> to your <code>wiiu/ios_plugins</code> folder.
# Copy the <code>wafel_setup_mlc.ipx</code> to your <code>wiiu/ios_plugins</code> folder.
#*[[File:iosplugins.png]]
# Copy the <code>wiiu</code> folders from the Aroma download to the root of the SD card. (better to merge both and move just one)
# Once the MLC download is done, make a folder named <code>wafel_install</code> on the root of your SD card, and copy the 52 MLC files from the output folder to that folder.
#*[[File:wafel_install.png]]

We can now move on to the actual region change.

== Region Changing ==

# Boot up the console.
#*If it doesn't put you into the minute menu, make sure ISFSHax is installed.
# Navigate to <code>Backup and Restore</code>.
# Select <code>Erase MLC</code>, then press EJECT to proceed.
#* If it tells you erasing the MLC isn't allowed, make sure ISFShax is installed.
# Select <code>Delete scfm.img</code> then press EJECT to proceed.
#*If it gives you a warning that it may brick the console, do not continue and install ISFShax.
# Go back to the main menu, then select <code>Patch (sd) and Boot IOS (slc)</code>.
# If the LED is blinking blue, the setup has begun. It will complete when the LED is solid blue again.
# Power off and move your SD card back to your PC.
# Check the wafel_setup_mlc.log file on the root and make sure there were no errors (everything should have <code>00000000</code>)
#* SetInitialLaunch will have returned <code>1</code>.
#* If Set Region to X returned error <code>FFFBFFEE</code>, follow the "Fixing sys_prod.xml manually" section now.
# If everything is correct, you can delete the <code>wafel_setup_mlc.ipx</code> from <code>wiiu/ios_plugins</code>.
# Reinsert your SD card and boot the console back up. You should then see the Initial Setup screen. Well done, You have region changed your console!

== Fixing sys_prod.xml manually ==
{{info|text=You only need to do this if <code>Set Region to X</code> returned error <code>FFFBFFEE</code>, if it returned a 0, then you can skip this.}}

# Download the <code>sys_prod.zip</code> and <code>wafel_sysprod_copy</code> from [https://github.com/Lazr1026/wafel_sysprod_copy/releases here].
# Extract the <code>sys_prod.xml</code> from the <code>sys_prod.zip</code> file.
# Open the <code>sys_prod.xml</code> in a text editor, and change the <code>product_area</code> and <code>game_region</code> to the region of choice.
#*[[File:sys_prod.png]]
#* Region values are as follows: JPN - 1. USA - 2. EUR - 4
# Change the <code>code_id</code>, <code>serial_id</code> and <code>model_number</code> values to the ones found on the stickers located on the bottom of the console.
#*[[File:serials.png|512px]]
#*[[File:serials2.png]]
# Save the file, then copy it to the root of the SD.
# Download the <code>wafel_sysprod_copy.ipx</code> and copy it to <code>wiiu/ios_plugins</code>.
# Boot up the console and once you're in minute, select <code>Patch (sd) and Boot IOS (slc)</code>.
# Leave the console running for about 30 seconds, then power it off.
# Repeat Step 7, but it should boot this time. No need for deleting the plugin, it will self delete after a while.

== Finalizing Region Change ==
You can keep ISFShax installed, or uninstall it. It's recommended to keep it, so you can coldboot Aroma without having the PayloadLoader attached to Health and Safety. It also serves as brick protections of sorts.

If you need to, you can region change the Gamepad with [https://github.com/GaryOderNichts/DRXUtil DRXUtil], but you have to build the application yourself. There is no definitive guide for its use. Use at your own risk.

Wii U:ISFShax

2025-02-02T08:03:44Z

Lazr: Link to the GBATemp guide, as I am not currently updating this. Maybe in the future it will return.

'''ISFShax''' exploits boot1 using a specially designed ISFS (SLC filesystem) superblock. Once installed, it offers similar capabilities to de_Fuse. Since it runs before IOSU, it can apply early patches to IOSU and repair most types of bricks. However, it cannot protect against bricks caused by boot1 corruption, seeprom issues, or installing a faulty ISFShax superblock. Additionally, ISFShax cannot help if the Wii U is already bricked.

== Features ==

*Rebuilding or upgrading the MLC
*Removing the 64GB MLC limit and disabling SCFM
*Brick protection, such as before performing a region change
*Cold booting redNAND, which is helpful when the eMMC is failing
*Providing a minimal CFW that can launch old homebrew using the homebrew launcher (though this might be less useful with Aroma and Tiramisu available)
*Preventing the Wii U from turning on the GamePad during boot using a stroopwafel plugin

{{info|text= To protect against Nintendo pushing a boot1 update, which would (probably) brick a console with ISFShax, '''boot1 updates are blocked''' by the <code>5isfshax.ipx</code> plugin. Other titles from a system update should still install normally.}}

Follow [https://gbatemp.net/threads/642258/ this guide] to install ISFShax.

Wii U:Region Changing

2025-01-13T00:25:28Z

Lazr: Fix weird things with this port of the guide

This guide will show you how to region change your Wii U. This process is the most effective way versus the old and tedious method, but if you don't follow the guide properly there is a chance you can brick your system. Just keep ISFSHax installed until ''after'' you have finished the guide.

= Usage =
{{info|text=This will change only the region of the console. It does not change the Gamepad's region. However, you are able to use out of region Gamepads thanks to Aroma's DRC region free plugin. If you also want to change the vWii region, run [https://github.com/GaryOderNichts/vWii-Decaffeinator/releases/tag/v2 vWii Decaffeinator] on light mode then perform a system update (updates need to be unblocked).}}

{{info|text= This guide will require you to wipe the MLC. Backup any important saves you wish to preserve by using either SaveMii or dumpling. You can however region change without wiping it, you would just skip <code>Erase MLC</code> and <code>Delete scfm.img</code>, but keep in mind you'd need to delete old titles via [https://raw.githubusercontent.com/Lazr1026/regionchange/main/files/wupclient.py wupclient.py] (right click > Save Link As).}}

'''Keep a copy of your OTP and SEEPROM backups.''' It is just in case something goes wrong, which is unlikely but better to keep regardless.
{{warning|text=Do not uninstall ISFShax after erasing the eMMC and deleting the SCFM until you have successfully rebuilt the MLC and confirmed everything is working. We are not responsible if you fail to follow directions.}}

== SD Preparations ==

*You must first have [[Wii U:ISFShax|ISFShax]] installed. This is a requirement to region change and is not optional. de_fuse can also be used, but that is for more advanced users (requires soldering).

*The latest release of [https://github.com/Xpl0itU/MLCRestorerDownloader/releases MLCRestorerDownloader] (With your preferred OS)
*The latest release of the [https://github.com/jan-hofmeier/wafel_setup_mlc/releases MLC setup plugin]
*The latest release of the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel_payloader Plugin]
*The latest [https://aroma.foryour.cafe Aroma] files (If you have aroma already, ignore this.)
**Check the boxes, then hit <code>Download Base Aroma</code> and <code>Download Payloads</code>.

=== Downloading the MLC files ===

# Download and extract the MLCRestorerDownloader.
# Copy your otp.bin from the nand backup to the directory of the program.
#*[[File:MLCRestorerDownloader.png]]
# Start the app in a terminal or command prompt (Type CMD in the file path bar at the top).
# Type either <code>MLCRestorerDownloader</code> or <code>./MLCRestorerDownloader.exe</code> then hit enter.
#*[[File:SelectTitles.png]]
# Type <code>1</code> then hit enter.
# Type the number for the region you want to be changed.
#*[[File:SelectRegion.png]]
# The Downloading process will take a minute, from here on you can continue from below.

=== Setup plugins and MLC files ===
# Copy the <code>wafel_payloader.ipx</code> to your <code>wiiu/ios_plugins</code> folder.
# Copy the <code>wafel_setup_mlc.ipx</code> to your <code>wii/ios_plugins</code> folder.
#*[[File:iosplugins.png]]
# Copy the <code>wiiu</code> folders from the Aroma download to the root of the SD card. (better to merge both and move just one)
# Once the MLC download is done, make a folder named <code>wafel_install</code> on the root of your SD card, and copy the 52 MLC files from the output folder to that folder.
#*[[File:wafel_install.png]]

We can now move on to the actual region change.

== Region Changing ==

# Boot up the console.
#*If it doesn't put you into the minute menu, make sure ISFSHax is installed.
# Navigate to <code>Backup and Restore</code>.
# Select <code>Erase MLC</code>, then press EJECT to proceed.
#* If it tells you erasing the MLC isn't allowed, make sure ISFShax is installed.
# Select <code>Delete scfm.img</code> then press EJECT to proceed.
#*If it gives you a warning that it may brick the console, do not continue and install ISFShax.
# Go back to the main menu, then select <code>Patch (sd) and Boot IOS (slc)</code>.
# If the LED is blinking blue, the setup has begun. It will complete when the LED is solid blue again.
# Power off and move your SD card back to your PC.
# Check the wafel_setup_mlc.log file on the root and make sure there were no errors (everything should have <code>00000000</code>)
#* SetInitialLaunch will have returned <code>1</code>.
#* If Set Region to X returned error <code>FFFBFFEE</code>, follow the "Fixing sys_prod.xml manually" section now.
# If everything is correct, you can delete the <code>wafel_setup_mlc.ipx</code> from <code>wiiu/ios_plugins</code>.
# Reinsert your SD card and boot the console back up. You should then see the Initial Setup screen. Well done, You have region changed your console!

== Fixing sys_prod.xml manually ==
{{info|text=You only need to do this if <code>Set Region to X</code> returned error <code>FFFBFFEE</code>, if it returned a 0, then you can skip this.}}

# Download the <code>sys_prod.zip</code> and <code>wafel_sysprod_copy</code> from [https://github.com/Lazr1026/wafel_sysprod_copy/releases here].
# Extract the <code>sys_prod.xml</code> from the <code>sys_prod.zip</code> file.
# Open the <code>sys_prod.xml</code> in a text editor, and change the <code>product_area</code> and <code>game_region</code> to the region of choice.
#*[[File:sys_prod.png]]
#* Region values are as follows: JPN - 1. USA - 2. EUR - 4
# Change the <code>code_id</code>, <code>serial_id</code> and <code>model_number</code> values to the ones found on the stickers located on the bottom of the console.
#*[[File:serials.png|512px]]
#*[[File:serials2.png]]
# Save the file, then copy it to the root of the SD.
# Download the <code>wafel_sysprod_copy.ipx</code> and copy it to <code>wiiu/ios_plugins</code>.
# Boot up the console and once you're in minute, select <code>Patch (sd) and Boot IOS (slc)</code>.
# Leave the console running for about 30 seconds, then power it off.
# Repeat Step 7, but it should boot this time. No need for deleting the plugin, it will self delete after a while.

== Finalizing Region Change ==
You can keep ISFShax installed, or uninstall it. It's recommended to keep it, so you can coldboot Aroma without having the PayloadLoader attached to Health and Safety. It also serves as brick protections of sorts.

If you need to, you can region change the Gamepad with [https://github.com/GaryOderNichts/DRXUtil DRXUtil], but you have to build the application yourself. There is no definitive guide for its use. Use at your own risk.

Wii U:ISFShax

2024-12-07T22:23:23Z

Lazr: make copying the not encrypted fw.img less confusing for users

'''ISFShax''' exploits boot1 using a specially designed ISFS (SLC filesystem) superblock. Once installed, it offers similar capabilities to defuse. Since it runs before IOSU, it can apply early patches to IOSU and repair most types of bricks. However, it cannot protect against bricks caused by boot1 corruption, seeprom issues, or installing a faulty ISFShax superblock. Additionally, ISFShax cannot help if the Wii U is already bricked.

== Features ==

*Rebuilding or upgrading the MLC
*Removing the 64GB MLC limit and disabling SCFM
*Brick protection, such as before performing a region change
*Cold booting redNAND, which is helpful when the eMMC is failing
*Providing a minimal CFW that can launch old homebrew using the homebrew launcher (though this might be less useful with Aroma and Tiramisu available)
*Preventing the Wii U from turning on the GamePad during boot using a stroopwafel plugin

{{info|text= To protect against Nintendo pushing a boot1 update, which would brick a console with ISFShax, '''system updates get blocked''' by the <code>wafel_isfshax_patch</code> plugin. If you need to perform a system update, use v1.0 of said plugin, which doesn't contain the update block.}}

== Exploit Methods ==

There are quite a few ways to launch the ISFShax installer.

*If you already have Tiramisu or Aroma installed and can launch it, follow the Instructions for Aroma
*If you already have Haxchi or CBHC installed, follow Instructions for Haxchi
*If the Browser still works and you can launch the browser exploit u.wiidb.de, follow the Instructions for Browser
*If you can't access the Browser, but Settings still work follow Instructions for DNSpresso
*If your Wii U crashes in the initial setup on Mii creation, follow Instructions for DNSpresso
*If your Wii U can't launch the browser anymore or can't connect to the internet, follow the Instructions for UDPIH

Make sure your SD card is FAT32, although this should already be the case if you have an environment installed.

== SD Preparation ==

You will need:
*The [https://github.com/isfshax/isfshax_installer/releases ISFShax installer] (<code>ios.img</code>)
*The [https://github.com/isfshax/isfshax/releases ISFShax Superblocks] (<code>superblock.img</code> and <code>superblock.img.sha</code>)
*The [https://github.com/jan-hofmeier/stroopwafel/releases stroopwafel] (<code>wafel_core.ipx</code>)
*The [https://github.com/isfshax/wafel_isfshax_patch/releases IOSU ISFShax tolerance patch] (<code>wafel_isfshax_patch.ipx</code>)

*The [https://github.com/jan-hofmeier/minute_minute/releases minute image] (<code>fw_encrypted.img</code>) '''[Aroma/Haxchi/Browser/DNSpresso]'''
*The [https://github.com/wiiu-env/fw_img_payload/releases fw_img_payload] zip '''[Browser/DNSpresso only]'''
*The [https://github.com/wiiu-env/PayloadFromRPX/releases root.rpx] '''[DNSpresso only]'''
*The [https://github.com/jan-hofmeier/minute_minute/releases minute images] (<code>fw.img</code> and <code>boot1.img</code> '''[UDPIH only]'''
*The [https://github.com/jan-hofmeier/recovery_menu/releases recovery_menu] '''[UDPIH only]'''

# Copy the <code>ios.img</code> to the root of your SD card.
# Copy the <code>superblock.img</code> and <code>superblock.img.sha</code> to root of your SD card.
# Copy the <code>wafel_core.ipx</code> and <code>wafel_isfshax_patch.ipx</code> to the <code>ios_plugins</code> folder in the <code>wiiu</code> folder.
# Copy the <code>fw_encrypted.img</code> to the root of your SD card and rename it to <code>fw.img</code>. '''(Aroma/Haxchi/Browser/DNSpresso)'''
# Extract the contents of the <code>fw_img_payload</code> zip to the root of your SD card. '''(Browser/DNSpresso)'''
# Copy the <code>root.rpx</code> to the root of your SD card and rename it to <code>launch.rpx</code> '''(DNSpresso)'''
# Copy the <code>fw.img</code> and <code>boot1.img</code> to the root of your SD card. '''(UDPIH)'''
# Copy the <code>recovery_menu</code> to the root of your SD card. '''(UDPIH)'''

The structure on the SD should look like this:
{{Tree list}}

* {{Tree icon|sd}} (root)
** {{Tree icon|f}} boot1.img (UDPIH only)
** {{Tree icon|f}} fw.img
** {{Tree icon|f}} ios.img
** {{Tree icon|f}} recovery_menu (UDPIH only)
** {{Tree icon|f}} launch.rpx (DNSpresso only)
** {{Tree icon|f}} superblock.img
** {{Tree icon|f}} superblock.img.sha
** {{Tree icon|d}} wiiu
*** {{Tree icon|f}} payload.elf (Browser, DNSpresso only)
*** {{Tree icon|d}} ios_plugins
**** {{Tree icon|f}} wafel_core.ipx
**** {{Tree icon|f}} wafel_isfshax_patch.ipx
{{Tree list/end}}

==Booting into Minute ==

Choose the appropriate method to boot into Minute based off of the setup you have.

<tabber>

|-|Aroma=


# Hold B on boot or while launching Health and Safety (whether you coldboot or not) to boot into the PayloadLoader.
# You will be asked to choose your payload.
# Select "fw_img_loader".

{{info|text= If the fw_img_loader isn't present, grab it from the [https://aroma.foryour.cafe Aroma Website].}}


|-|Haxchi=


# Hold A on the GamePad while launching the Haxchi or DO NOT TOUCH ME app.
# Alternatively, if you have CHBC, you can hold A on the GamePad while booting the console.


|-|Browser=


# Navigate to the browser and type in "u.wiidb.de" in the address bar.
# Click on "HAXX".


|-|DNSpresso=


If you can access the settings, follow the instructions provided here (you already have the correct files on the SD card): [https://gbatemp.net/threads/dnspresso-a-wii-u-dns-exploit.642123/ DNSpresso - A Wii U DNS Exploit.]

If you are stuck on User/Mii creation during the initial setup:

# If your Wii U is already connected to your AP/Router, turn off the AP/Router or disable its WiFi.
# When the setup asks if you already have a NNID, select "Yes" (even if you don't have one).
# The system will attempt to connect to the Internet, fail, and then prompt you to return to the WiFi settings.
# Turn your AP/Router back on and wait for it to start.
# If your WiFi is not already configured, connect to it now, but enter an incorrect password.
# Edit your WiFi connection and set 85.215.57.182 as the Primary DNS. If you entered a wrong password before, correct it now.
# Press (B) to go back and select "Connection Test."


|-|UDPIH=


# Boot into recovery_menu as per [https://gbatemp.net/threads/udpih-usb-host-stack-exploit-recovery-menu.613369/ this guide]
# Unplug the pico or Switch.
# Select "Load BOOT1 Payload" from the list and continue on.

{{info|text=(If your tv doesn't display an output, you'll have to navigate blindly: 18x eject, 1x power, 1 eject, 1 power)}}


</tabber>

You should now see the minute main menu. If not, ensure you have the correct fw.img file on the SD card.

In minute, use the power button to move the cursor and the eject button to select (this is opposite to the recovery menu controls).

{{info|text=Minute only outputs 1080p through HDMI, with no display on the GamePad or analog outputs. Some users have reported that the screen output doesn't work when minute is loaded from the recovery_menu. If you've verified that the fw.img file is correct and your TV supports 1080p HDMI, you can still proceed by pressing the appropriate buttons blindly. Make sure to wait long enough between presses to allow the system to load. Without display output, skip the first backup and go directly to installing ISFShax.}}

==Backup and Installation==
We will now start with a fresh NAND backup.

#Navigate to <code>Backup and Restore</code>
#Select <code>Dump OTP and Seeprom</code>
#When that is done, select <code>Dump SLC.RAW</code>
#Once that is done, return to the main menu.

===Installing ISFShax ===
#Select <code>Boot ios.img</code> (blind combo is Power 6x, Eject 1x)
# The ISFShax installer will launch after a brief moment.
#Follow the onscreen instructions, the buttons are the same as minute's (3x Eject, 1x Power, 3x Eject).
# The console should now turn off.
# Replace the encrypted <code>fw.img</code> on the SD with the <code>fw.img</code> from [https://github.com/jan-hofmeier/minute_minute/releases here]. (Aroma/Haxchi/Browser/DNSpresso)
#If it successfully installed, the Wii U will directly boot into minute once you boot again.

===Backing up ISFSHax ===
Go back to Backup and Restore and Dump the SLC.RAW again. This will replace the previous SLC.RAW file you dumped earlier. It's required if you want to restore the SLC for unbricking, without losing ISFShax, in case the superblock protection fails. Keep that backup somewhere safe.

==Booting with ISFShax ==

From this point on, the Wii U can still boot without the SD card, but will have some patches applied (ISFShax tolerance for IOSU, update blocking).
To boot into the Wii U OS in minute, select <code>Patch (sd) and boot IOS (slc)</code> (2x Power, 1x Eject).

{{info|text= If your console bootloops through minute over and over again, you're probably coldbooting Aroma or Tiramisu and replaced the <code>wiiu/payload.elf</code> with the fw_img loader. Just replace it with the proper <code>wiiu/payload.elf</code> for Aroma [https://github.com/wiiu-env/PayloadLoaderPayload/releases here] (This also applies to Tiramisu).}}

===Launching Aroma/Tiramisu with ISFShax ===
You can use ISFShax to boot into Aroma or Tiramisu.
To begin, you will need the latest files from the sites.

{{info|text=If you are already coldbooting Tiramisu or Aroma via the PayloadLoader , you need to disable the coldboot in the PayloadLoader Installer first.}}

*Aroma: Download [https://aroma.foryour.cafe here]
*Tiramisu: Download [https://tiramisu.foryour.cafe here]
*The [https://github.com/jan-hofmeier/wafel_payloader/releases/tag/v2.0 wafel_payloader.ipx]
# Put the wafel_payloader.ipx file in the ios_plugins folder.
#Place the root.rpx file from [https://github.com/wiiu-env/PayloadFromRPX/releases PayloadFromRPX] in the wiiu folder on the SD card.
#*Alternatively, if you have Aroma and/or Tiramisu already, you can just grab the root.rpx from your environment of choice's folder from <code>wiiu/environments/[ENVIRONMENT]/</code> and place it in the wiiu folder of the SD card.

===Booting without SD ===

This step is optional but highly recommended. Without the SD card, the Wii U will still boot, but will only have minimal patches applied.

To fix this, we need to install minute (fw.img) and the stroopwafel plugins (wafel_core + wafel_isfshax_patch) to the internal memory (SLC). This can be done using FTPiiU-Everywhere, which can be launched from Tiramisu and is part of the Aroma Package (enable in the plugin settings), or you can use the [https://github.com/mackieks/haxcopy haxcopy homebrew].

Haxcopy is recommended for most users, but if you accidentally copy a wrong plugin to the SLC or need to delete one, you'll still need to use FTP.

<tabber>

|-|Haxcopy=

# Create a folder named "hax" on the SD card.
# Copy the fw.img to the hax folder.
# Create a subfolder named "ios_plugins" in the hax folder.
# Rename wafel_core.ipx to 0core.ipx and copy it to the hax/ios_plugins folder.
# Rename wafel_isfshax_patch.ipx to 6isfshax.ipx and copy it to the hax/ios_plugins folder.
# If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and copy it to the hax/ios_plugins folder.
# If you need other plugins like wafel_unlimit.ipx, rename and copy them to the hax/ios_plugins folder.
# Download the <code>haxcopy.wuhb</code> from [https://github.com/mackieks/haxcopy/releases here] and copy it to to the wiiu/apps folder (as you would normally install homebrew).
# Insert the SD card into the Wii U and run haxcopy to transfer the hax folder to the SLC.


|-|FTP=

{{info|text=You do not need to do the first two steps if you already have system file access enabled in the FTPiiU configuration.}}
#Open the Aroma Plugin Configuration Menu using L + Down + SELECT (-) on the GamePad or Pro Controller (or B + Down + Minus (-) for WiiMotes).
#Open the FTPiiU option, then settings, and set ‘Allow access to system files’ to ‘true’ by pressing A.
# Use an FTP client on the PC to browse to /storage_slc/.
# If you see a scfm.img file and sys folder, go into the sys folder. If you see folders like config, import, logs, proc, rights, security, title, and tmp, move to the next step.
# Create a subfolder named "hax" and enter it.
# Ensure your FTP client is in binary mode (not ASCII mode).
# Upload the minute fw.img to the /storage_slc/sys/hax folder.
# Create another subfolder named "ios_plugins" in /storage_slc/sys/hax.
# Enter the /storage_slc/sys/hax/ios_plugins folder.
# Rename wafel_core.ipx to 0core.ipx and upload it.
# Rename wafel_isfshax_patch.ipx to 6isfshax.ipx and upload it.
# If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and upload it.
# If you need other plugins like wafel_unlimit.ipx, rename and upload them too.

</tabber>
Now, the Wii U should autoboot if no SD card is inserted. If an SD card is inserted, the minute menu should show up (even if the SD doesn't contain a fw.img). In that menu, you can select the Patch (SLC) and boot IOS (SLC) to load the plugins from the SLC and boot (no need to have them on the SD anymore).

{{info|text=The Wii U will first try to load the fw.img from the SLC, and if that fails, it will fall back to the SD. If you install a broken fw.img that doesn't load, you can force ISFShax to load the fw.img from the SD by repeatedly pressing the power button until the menu shows up.}}

{{warning|text=A factory reset will delete the hax folder. Without the fw.img on the SD, the Wii U will boot with minimal patches, but some actions (such as leaving the System Settings) may be slower. It's recommended to set up minute and stroopwafel again.}}

===Autobooting with SD (Optional) ===

To enable autoboot on the Wii U with an SD card inserted, create the file <code>sd:/minute/minute.ini</code> with the following content:

<syntaxhighlight>
[boot]
autoboot=1
autoboot_timeout=3
</syntaxhighlight>

You can adjust the timeout (in seconds) to your preference. The <code>autoboot</code> option determines which entry from the minute menu will be loaded. Setting it to <code>1</code> corresponds to <code>Patch (slc) and boot IOS (slc)</code>, which loads the ios_plugins from the SLC. If you haven't installed them to the SLC or want to load them from the SD for any reason, change the value to <code>3</code>, which corresponds to <code>Patch (sd) and boot IOS (slc)</code>.

{{info|text=If you combine autobooting minute with the wafel_payloader plugin, you can autoboot Aroma or Tiramisu without having Health and Safety injected at all!}}

As an alternative, check out the Fastboot option below.

===Fastbooting (Optional) ===

To make the Wii U boot as fast as possible, without showing minute, you can now use the fw_fastboot.img. This won't work with redNAND
It is hardcoded to go straight to the first option (booting the SLC, with patches from SLC). It won't display anything and ignore any autoboot configuration in the minute.ini.

#First make sure the system can boot using the first option in minute. (see Booting without SD)
#Replace the the fw.img in the hax folder on the SLC with the fastboot image (fw_fastboot.img renamed to fw.img)

If you get stuck for whatever reason and need to fully load minute from your SD, you can do this:

#Place the minute fw.img on the SD card
#Repeatedly press the power button until the minute menu shows up on the screen.

==Uninstalling ISFShax ==

{{warning|text=Do NOT restore an older SLC backup, as it will break SCFM!}}

Ensure your Wii U doesn't rely on any patches (like wafel_unlimit_mlc.ipx or redNAND). You can verify this by booting with only the wafel_core.ipx and wafel_isfshax_ipx plugins in the ios_plugins directory on the SD card and selecting the "Patch (sd) and boot IOS (slc)" option.

To proceed:

#Delete the /storage_slc/sys/hax folder if you have set up SLC booting.
# Run the ISFShax installer again from minute and follow the on-screen instructions to uninstall.

==Recommended Plugins ==

Here is a list of currently available stroopwafel plugins you can use with ISFShax:

# [https://github.com/jan-hofmeier/wafel_noinit_tablet wafel_noinit_tablet] - Prevents the GamePad from turning on while booting the console.
# [https://github.com/jan-hofmeier/wafel_sd_usb/releases SDUSB] - Allows you to run games from the SD Card.
# [https://github.com/jan-hofmeier/wafel_usb_partition/releases USB Partition] - Allows you to use partitioned USB devices with the Wii U.
# [https://github.com/jan-hofmeier/wafel_setup_mlc/releases wafel_setup_mlc] - Allows you to rebuild or upgrade the MLC.

Wii:Hardmod unbrick

2024-11-22T11:03:59Z

Lazr: Make the images slightly smaller

Let me (Lazr) preface this guide by saying that this is NOT for noobs. You will have to solder to small vias or traces (if you so choose) in order to unbrick your Wii with another piece of hardware.

I am aware that there are tools that "clip" (they are pressure-fitted) onto the NAND flash (aka 360 Clip), but they are pretty pricey (I paid $40, and eventually the ribbon cable wore out) and there are cheaper options, like the ones shown here, but it requires manual wiring.

You should also exhaust all other options before resorting to hardware flashing, like the BootMii NAND restore, or maybe you don't even need to restore.

In the guide, I will cover both Teensy2.0++ ''and'' the Raspberry Pi Zero. Theoretically, any Pi can be used for this, but I only have the Zero, so use at your own risk!

= What is required =
=== Hardware Needed ===
* A bricked Wii, for starters.
* A Teensy2.0++ or Raspberry Pi Zero (From now on, I will refer to this as "RPi"). If you have neither, purchase a Zero, they are cheap (~15 USD) compared to the discontinued Teensy (I paid ~50 USD for one).
* A brain, and one that knows its way around a soldering iron is crucial for this.
* Magnet wire (aka Enameled Wire) or really thin solid-core wire. I recommend 32AWG-38AWG, but you might be able to get away with 30AWG if you are careful.

=== Software Needed ===
* A NAND backup from that Wii before the brick, or at least the NAND keys (You can re-encrypt another Wii's NAND, but I am not going to go into detail for that here.)
* Teensy users:
** Flash [https://raw.githubusercontent.com/hjudges/NORway/master/NANDway/Signal%20Booster%20Edition/NANDway_SignalBoosterEdition.hex this] to the Teensy with the [https://www.pjrc.com/teensy/loader.html Teensy Loader]
** Download the [https://raw.githubusercontent.com/jan-hofmeier/NORway/master/NANDway.py NANDway.py] ([https://raw.githubusercontent.com/nicl83/NANDWay3/main/NANDway3.py Python 3 Edition]).
*** I don't remember the results of using the Py3 version, but I think it worked fine. If you do not want to risk it, use the Py2 version.
** Python 2 or Python 3, and PySerial (install via pip: <code>pip install pyserial</code>). Depending on what script above you use. Do note that Python 2 is deprecated and getting everything installed might be a PITA.
* RPi users:
** Download [https://raw.githubusercontent.com/r00t1024/rpi-tsop48-nand/master/rpi-raw-nand-v3.c rpi-raw-nand-v3.c] and compile it by running <code>g++ rpi-raw-nand-v3.c -o rpi-raw-nand-v3</code> on the RPi.

= Unbricking the Wii =
There are 3 different kinds of boards that the Wii used during its lifespan: 6 layer boards (RVL-CPU-01, RVL-CPU-10, RVL-CPU-20, and RVL-CPU-30), 4 layer boards (RVL-CPU-40, RVL-CPU-50, RVL-CPU-60, RVK-CPU-01, and RVK-CPU-02), and the Wii Mini board.

What board you have is important to know, as they all have the NAND in different spots, orientations, and the via locations are different. [https://bitbuilt.net/forums/index.php?threads/revision-identification-guide.863/ This post] on BitBuilt.net is excellent on showing you how to check your board revision.

Now that (hopefully) you know what board you have, you can follow the respective guide:
I recommend you solder to the vias. You can solder to the traces, but either you are insane or skilled enough, or both to not be using the vias.

You also need to scratch the vias/traces to expose the copper. Some boards have plugged vias, so you will need to use the "pad" thats created after tinning the vias, instead of being able to shove your magwire into the vias.
<tabber>

|-|6 Layer=


{{info|text = For GND, you can use one of the sides of the capacitors, scratch some of the soldermask off of the GND plane above the NAND, or use TP3.}}
[[File:6L_NAND.png|left|600px]]


|-|4 Layer / Wii Mini=

{{info|text = For GND, you can use one of the sides of the capacitors or use TP3.}}
[[File:4L_NAND.png|left|600px]]

</tabber>

Select what you will be using to reflash the NAND:
<tabber>
|-|Teensy=

{{info|text= Connect all of the CLE, ALE, RE, and WE pins to their respective pins. You can use magwire to do this, or solder blob them together.}}
[[File:Teensy.png]]

{{info|text= ALL of the commands should be ran without any <code><></code> in them, ie. <code>python3 NANDway3.py /dev/ttyUSB0 0 info</code>.}}
{{info|text= Linux users might have to run some of the commands as root.}}
# Copy the NAND dump to the same directory as the NANDway script.
# Plug in the Teensy into your PC.
# Find the serial ID of the Teensy:
#* On Windows machines, this will be under Device Manager as a COM port
#* On Linux (and maybe macOS?), this will be a <code>tty</code>. Run <code>ls /dev/tty*</code> in a terminal and look for <code>ttyUSB0</code>.
# Open a Command Prompt or Terminal if one is not already open.
# <code>cd</code> to where the NANDway script is.
# Power on the Wii with the heatsink placed ontop of the CPU and GPU.
# Run <code>python(or python3) <NANDway.py or NANDway3.py> <serial ID> 0 info</code>
# If you get an output that looks correct, run <code><python or python3> <NANDway.py or NANDway3.py> <serial ID> 0 vwrite <NAND dump></code>, otherwise check your wiring.
# When it has finished, unplug the Teensy from your PC, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.


|-|RPi=

{{info|text= You only need to use one GND point.}}
[[File:RPI_Wii.png]]

# Copy the NAND dump to the root of the users <code>home</code> directory on the SD card (ie <code>/home/pi</code>).
# Power on the RPi and open a Terminal if one is not already open.
# Run <code>sudo ./rpi-raw-nand-v3 50 read_id</code>.
# If you get an output that looks correct, run <code>sudo ./rpi-raw-nand-v3 50 erase_blocks 0 4096 && sudo ../rpi-raw-nand-v3 50 write_full 0 262144 <NAND dump></code>, otherwise check your wiring.
# When it has finished, power off the RPi, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.

</tabber>

= Credits =
* Lazr1026 - Created the guide, the scans, and traced out the NANDs on 6 layer and 4 layer boards.
* Marcan/Effleurage/hjudges and nicl83 - NANDway and NANDway3 respectively.
* Kafluke - The Teensy picture was taken and modified from their [https://gbatemp.net/threads/476725/ Wii U Unbrick guide] on GBATemp.
* pharos/littlebalup/skypiece/r00t1024 - RPi NAND flasher program.
* playerjmr - Pushed me to make the guide.
* Stashboy - Sent me a few Wiis to mess with.

Wii U:Region Changing

2024-10-25T18:56:17Z

Lazr: wtf is "bricking your mlc"

This guide will show you how to region change your Wii U. This process is the most effective way versus the old and tedious method, but if you don't follow the guide properly there is a chance you can brick your system. Just keep ISFSHax installed until ''after'' you have finished the guide.

= Usage ==
{{info|text=This will change only the region of the console. It does not change the Gamepad's region. However, you are able to use out of region Gamepads thanks to Aroma's DRC region free plugin. If you also want to change the vWii region, run [https://github.com/GaryOderNichts/vWii-Decaffeinator/releases/tag/v2 vWii Decaffeinator] on light mode then perform a system update (updates need to be unblocked).}}

{{info|text= This guide will require you to wipe the MLC. Backup any important saves you wish to preserve by using either SaveMii or dumpling. You can however region change without wiping it, you would just skip <code>Erase MLC</code> and <code>Delete scfm.img</code>, but keep in mind you'd need to delete old titles via [https://raw.githubusercontent.com/Lazr1026/regionchange/main/files/wupclient.py wupclient.py] (right click > Save Link As).}}

'''Keep a copy of your OTP and SEEPROM backups.''' It is just in case something goes wrong, which is unlikely but better to keep regardless.
{{warning|text=Do not uninstall ISFShax after erasing the eMMC and deleting the SCFM until you have successfully rebuilt the MLC and confirmed everything is working. We are not responsible if you fail to follow directions.}}

== SD Preparations ==

*You must first have [[Wii U:ISFShax|ISFShax]] installed. This is a requirement to region change and is not optional. de_fuse can also be used, but that is for more advanced users (requires soldering).

*The latest release of [https://github.com/Xpl0itU/MLCRestorerDownloader/releases MLCRestorerDownloader] (With your preferred OS)
*The latest release of the [https://github.com/jan-hofmeier/wafel_setup_mlc/releases MLC setup plugin]
*The latest release of the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel_payloader Plugin]
*The latest [https://aroma.foryour.cafe Aroma] files (If you have aroma already, ignore this.)
**Check the boxes, then hit <code>Download Base Aroma</code> and <code>Download Payloads</code>.

=== Downloading the MLC files ===

# Download and extract the MLCRestorerDownloader.
# Copy your otp.bin from the nand backup to the directory of the program.
#*[[File:MLCRestorerDownloader.png]]
# Start the app in a terminal or command prompt (Type CMD in the file path bar at the top).
# Type either <code>MLCRestorerDownloader</code> or <code>./MLCRestorerDownloader.exe</code> then hit enter.
#*[[File:SelectTitles.png]]
# Type <code>1</code> then hit enter.
# Type the number for the region you want to be changed.
#*[[File:SelectRegion.png]]
# The Downloading process will take a minute, from here on you can continue from below.

=== Setup plugins and MLC files ===
# Copy the <code>wafel_payloader.ipx</code> to your <code>wiiu/ios_plugins</code> folder.
# Copy the <code>wafel_setup_mlc.ipx</code> to your <code>wii/ios_plugins</code> folder.
#*[[File:iosplugins.png]]
# Copy the <code>wiiu</code> folders from the Aroma download to the root of the SD card. (better to merge both and move just one)
# Once the MLC download is done, make a folder named <code>wafel_install</code> on the root of your SD card, and copy the 52 MLC files from the output folder to that folder.
#*[[File:wafel_install.png]]

We can now move on to the actual region change.

== Region Changing ==

# Boot up the console.
#*If it doesn't put you into the minute menu, make sure ISFSHax is installed.
# Navigate to <code>Backup and Restore</code>.
# Select <code>Erase MLC</code>, then press EJECT to proceed.
#* If it tells you erasing the MLC isn't allowed, make sure ISFShax is installed.
# Select <code>Delete scfm.img</code> then press EJECT to proceed.
#*If it gives you a warning that it may brick the console, do not continue and install ISFShax. This is a serious issue.
# Go back to the main menu, then select <code>Patch (sd) and Boot IOS (slc)</code>.
# If the LED is blinking blue, the setup has begun. It will complete when the LED is solid blue again.
# Power off and move your SD card back to your PC.
# Make sure there are no errors in the <code>wafel_setup_mlc.log</code>. They should all have 7 0's except for the <code>SetInitialLaunch</code>, which will be a <code>1</code>.
# If everything is correct, you can delete the <code>wafel_setup_mlc.ipx</code> from <code>wiiu/ios_plugins</code>.
# Reinsert your SD card and boot the console back up. You should then see the Initial Setup screen. Well done, You have region changed your console!

== Fixing sys_prod.xml manually ==
{{info|text=You only need to do this if <code>Set Region to 4 </code> returned error <code>FFFBFFEE</code>, if it returned a 0, then you can skip this.}}

# Download the <code>sys_prod.zip</code> and <code>wafel_sysprod_copy</code> from [https://github.com/Lazr1026/wafel_sysprod_copy/releases here].
# Extract the <code>sys_prod.xml</code> from the <code>sys_prod.zip</code> file.
# Open the <code>sys_prod.xml</code> in a text editor, and change the <code>product_area</code> and <code>game_region</code> to the region of choice.
#*[[File:sys_prod.png]]
#*Region values are as follows: JPN - 1. USA - 2. EUR - 4
# Change the <code>code_id</code>, <code>serial_id</code> and <code>model_number</code> values to the ones found on the stickers located on the bottom of the console.
#*[[File:serials.png|512px]]
#*[[File:serials2.png]]
# Save the file, then copy it to the root of the SD.
# Download the <code>wafel_sysprod_copy.ipx</code> and copy it to <code>wiiu/ios_plugins</code>.
# Boot up the console and once you're in minute, select <code>Patch (sd) and Boot IOS (slc)</code>.
# Leave the console running for about 30 seconds, then power it off.
# Repeat Step 7, but it should boot this time. No need for deleting the plugin, it will self delete after a while.

== Finalizing Region Change ==
You can keep ISFShax installed, or uninstall it. It's recommended to keep it, so you can coldboot Aroma without having the PayloadLoader attached to Health and Safety. It also serves as brick protections of sorts.

If you need to, you can region change the Gamepad with [https://github.com/GaryOderNichts/DRXUtil DRXUtil], but you have to build the application yourself. There is no definitive guide for its use. Use at your own risk.

User:Lazr/sandbox

2024-10-08T05:14:06Z

Lazr: Lazr moved page User:Lazr/sandbox to Wii:Hardmod unbrick

#REDIRECT [[Wii:Hardmod unbrick]]

Wii:Hardmod unbrick

2024-10-08T05:14:06Z

Lazr: Lazr moved page User:Lazr/sandbox to Wii:Hardmod unbrick

Let me (Lazr) preface this guide by saying that this is NOT for noobs. You will have to solder to small vias or traces (if you so choose) in order to unbrick your Wii with another piece of hardware.

I am aware that there are tools that "clip" (they are pressure-fitted) onto the NAND flash (aka 360 Clip), but they are pretty pricey (I paid $40, and eventually the ribbon cable wore out) and there are cheaper options, like the ones shown here, but it requires manual wiring.

You should also exhaust all other options before resorting to hardware flashing, like the BootMii NAND restore, or maybe you don't even need to restore.

In the guide, I will cover both Teensy2.0++ ''and'' the Raspberry Pi Zero. Theoretically, any Pi can be used for this, but I only have the Zero, so use at your own risk!

= What is required =
=== Hardware Needed ===
* A bricked Wii, for starters.
* A Teensy2.0++ or Raspberry Pi Zero (From now on, I will refer to this as "RPi"). If you have neither, purchase a Zero, they are cheap (~15 USD) compared to the discontinued Teensy (I paid ~50 USD for one).
* A brain, and one that knows its way around a soldering iron is crucial for this.
* Magnet wire (aka Enameled Wire) or really thin solid-core wire. I recommend 32AWG-38AWG, but you might be able to get away with 30AWG if you are careful.

=== Software Needed ===
* A NAND backup from that Wii before the brick, or at least the NAND keys (You can re-encrypt another Wii's NAND, but I am not going to go into detail for that here.)
* Teensy users:
** Flash [https://raw.githubusercontent.com/hjudges/NORway/master/NANDway/Signal%20Booster%20Edition/NANDway_SignalBoosterEdition.hex this] to the Teensy with the [https://www.pjrc.com/teensy/loader.html Teensy Loader]
** Download the [https://raw.githubusercontent.com/jan-hofmeier/NORway/master/NANDway.py NANDway.py] ([https://raw.githubusercontent.com/nicl83/NANDWay3/main/NANDway3.py Python 3 Edition]).
*** I don't remember the results of using the Py3 version, but I think it worked fine. If you do not want to risk it, use the Py2 version.
** Python 2 or Python 3, and PySerial (install via pip: <code>pip install pyserial</code>). Depending on what script above you use. Do note that Python 2 is deprecated and getting everything installed might be a PITA.
* RPi users:
** Download [https://raw.githubusercontent.com/r00t1024/rpi-tsop48-nand/master/rpi-raw-nand-v3.c rpi-raw-nand-v3.c] and compile it by running <code>g++ rpi-raw-nand-v3.c -o rpi-raw-nand-v3</code> on the RPi.

= Unbricking the Wii =
There are 3 different kinds of boards that the Wii used during its lifespan: 6 layer boards (RVL-CPU-01, RVL-CPU-10, RVL-CPU-20, and RVL-CPU-30), 4 layer boards (RVL-CPU-40, RVL-CPU-50, RVL-CPU-60, RVK-CPU-01, and RVK-CPU-02), and the Wii Mini board.

What board you have is important to know, as they all have the NAND in different spots, orientations, and the via locations are different. [https://bitbuilt.net/forums/index.php?threads/revision-identification-guide.863/ This post] on BitBuilt.net is excellent on showing you how to check your board revision.

Now that (hopefully) you know what board you have, you can follow the respective guide:
I recommend you solder to the vias. You can solder to the traces, but either you are insane or skilled enough, or both to not be using the vias.

You also need to scratch the vias/traces to expose the copper. Some boards have plugged vias, so you will need to use the "pad" thats created after tinning the vias, instead of being able to shove your magwire into the vias.
<tabber>

|-|6 Layer=


{{info|text = For GND, you can use one of the sides of the capacitors, scratch some of the soldermask off of the GND plane above the NAND, or use TP3.}}
[[File:6L_NAND.png|center]]


|-|4 Layer / Wii Mini=

{{info|text = For GND, you can use one of the sides of the capacitors or use TP3.}}
[[File:4L_NAND.png|left]]

</tabber>

Select what you will be using to reflash the NAND:
<tabber>
|-|Teensy=

{{info|text= Connect all of the CLE, ALE, RE, and WE pins to their respective pins. You can use magwire to do this, or solder blob them together.}}
[[File:Teensy.png]]

{{info|text= ALL of the commands should be ran without any <code><></code> in them, ie. <code>python3 NANDway3.py /dev/ttyUSB0 0 info</code>.}}
{{info|text= Linux users might have to run some of the commands as root.}}
# Copy the NAND dump to the same directory as the NANDway script.
# Plug in the Teensy into your PC.
# Find the serial ID of the Teensy:
#* On Windows machines, this will be under Device Manager as a COM port
#* On Linux (and maybe macOS?), this will be a <code>tty</code>. Run <code>ls /dev/tty*</code> in a terminal and look for <code>ttyUSB0</code>.
# Open a Command Prompt or Terminal if one is not already open.
# <code>cd</code> to where the NANDway script is.
# Power on the Wii with the heatsink placed ontop of the CPU and GPU.
# Run <code>python(or python3) <NANDway.py or NANDway3.py> <serial ID> 0 info</code>
# If you get an output that looks correct, run <code><python or python3> <NANDway.py or NANDway3.py> <serial ID> 0 vwrite <NAND dump></code>, otherwise check your wiring.
# When it has finished, unplug the Teensy from your PC, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.


|-|RPi=

{{info|text= You only need to use one GND point.}}
[[File:RPI_Wii.png]]

# Copy the NAND dump to the root of the users <code>home</code> directory on the SD card (ie <code>/home/pi</code>).
# Power on the RPi and open a Terminal if one is not already open.
# Run <code>sudo ./rpi-raw-nand-v3 50 read_id</code>.
# If you get an output that looks correct, run <code>sudo ./rpi-raw-nand-v3 50 erase_blocks 0 4096 && sudo ../rpi-raw-nand-v3 50 write_full 0 262144 <NAND dump></code>, otherwise check your wiring.
# When it has finished, power off the RPi, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.

</tabber>

= Credits =
* Lazr1026 - Created the guide, the scans, and traced out the NANDs on 6 layer and 4 layer boards.
* Marcan/Effleurage/hjudges and nicl83 - NANDway and NANDway3 respectively.
* Kafluke - The Teensy picture was taken and modified from their [https://gbatemp.net/threads/476725/ Wii U Unbrick guide] on GBATemp.
* pharos/littlebalup/skypiece/r00t1024 - RPi NAND flasher program.
* playerjmr - Pushed me to make the guide.
* Stashboy - Sent me a few Wiis to mess with.

Wii U:Alternate Exploits/DNSpresso

2024-10-06T01:10:37Z

Lazr: Go to Autobooting instead of going straight to finalizing

{{Info|text=DNSpresso is an exploit that takes advantage of a vulnerability in the Wii U's DNS response parsing. This should be used if BrowserHax is not possible for whatever reason.}}

===What you need===

*The latest Aroma files from [https://aroma.foryour.cafe/ Aroma for your café].
**Scroll down to the <nowiki>'''Download'''</nowiki> section.
**Read through the steps and click on the check boxes.
**Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>
*The newest release of [https://github.com/wiiu-env/PayloadFromRPX/releases/tag/v0.1 PayloadFromRPX].

===Instructions===

====Section I: SD Card Prep====
#Extract and merge the contents of the newly downloaded Aroma <code>.zip</code> folders to the root of your SD card. You should now have a single <code>wiiu</code> folder on the root.
#Extract the contents of the PayloadFromRPX <code>.zip</code> file to the root of your SD card and rename the file to <code>launch.rpx</code> .

Your SD cards root should now look like this:
{{Tree list}}

*[[File:Gnome-media-flash.svg|20px|link=]] (root)
**[[File:Icons8 flat opened folder.svg|20px|link=]] wiiu
**[[File:Icons8 flat file.svg|20px|link=]] '''launch.rpx'''

{{Tree list/end}}

====Section II: Running the Exploit====

#Insert your SD card into your Wii U and power it on.
#Open <code>Settings</code> > <code>Internet</code> > <code>Connections</code> and setup a new connection.
#Once created, click on your new connection and select <code>Change Settings</code> > <code>DNS</code> and set it to <code>Don't Auto-obtain</code>.
#Enter in your primary DNS as: <code>85.215.57.182</code> and click Confirm.
#Click <code>Back</code> initiating a connection test when prompted. Hold B when you see the DNSpresso Splash screen.

====Section III: Making a NAND Backup====

#Navigate to <code>nanddumper</code> using the GamePad and press A to launch it.
#Use the Wii U GamePad's D-Pad to enter the following configuration:
#*Dump SLC: '''yes'''
#*Dump SLCCMPT: '''yes'''
#*Dump MLC: '''optional'''
#*Dump OTP: '''yes'''
#*Dump SEEPROM: '''yes'''
#Press the A button to start the dumping process.
#When the process completed, power off your Wii U, take your SD Card out of the Wii U and plug it into your PC.
#The files will appear on the root of the SD card.
#To make sure you don't lose the files, copy the <code>slc.bin</code>, <code>slccmpt.bin</code>, <code>seeprom.bin</code>, <code>otp.bin</code> (and if you chose to go with a full backup, <code>every mlc.bin.part</code>) file to your computer.
#Delete the files from your SD Card to free up space.

====Section IV: Installing PayloadLoader====

#Take the SD Card out of your PC and plug it into your Wii U.
#Launch <code>Settings</code> > <code>Internet</code> > <code>Connect to the Internet</code> > <code>Connections</code>
#Click on the network you previously selected and initiate a connection test.
#This time, when you see the DNSpresso splash screen hold X.
#When a blue screen pops up, use the GamePad to navigate to <code>Aroma</code> and press A to launch the environment.
#Navigate to the PayloadLoader Installer on your Aroma home menu and press A to launch it.
#Press the A button to check if you can install the PayloadLoader.
#* It should now tell you that the PayloadLoader can be installed onto the Health and Safety Information app.
#Press the A button to select <code>Install / Update</code>.
#You'll be asked if you are sure you want to install the PayloadLoader. Use the D-Pad to select <code>Install</code> and press A.
#After installing finishes, press A to shut down the console.

====Section V: Removing the DNS====

{{Info|text=If you do not remove the DNS, your console won't be able to properly connect to the internet.}}
#Power your Wii U back on and open the Settings.
#Navigate to <code>Internet</code> > <code>Connect to the Internet</code> > <code>Connections</code>.
#Click on the previously created connection and select <code>Delete Settings</code> and confirm by pressing <code>Delete</code>.
#You can now exit out of Settings and continue with the rest of the guide.

{{Success|text=The remainder of the guide is the same. Please continue to Autobooting on the Wii U Hacks Page linked below.}}
Continue to [[wiiuguide:aroma/autobooting|Autobooting]]

Wii:Hardmod unbrick

2024-09-04T22:24:21Z

Lazr: Wii Mini is identical to 4L

Let me (Lazr) preface this guide by saying that this is NOT for noobs. You will have to solder to small vias or traces (if you so choose) in order to unbrick your Wii with another piece of hardware.

I am aware that there are tools that "clip" (they are pressure-fitted) onto the NAND flash (aka 360 Clip), but they are pretty pricey (I paid $40, and eventually the ribbon cable wore out) and there are cheaper options, like the ones shown here, but it requires manual wiring.

You should also exhaust all other options before resorting to hardware flashing, like the BootMii NAND restore, or maybe you don't even need to restore.

In the guide, I will cover both Teensy2.0++ ''and'' the Raspberry Pi Zero. Theoretically, any Pi can be used for this, but I only have the Zero, so use at your own risk!

= What is required =
=== Hardware Needed ===
* A bricked Wii, for starters.
* A Teensy2.0++ or Raspberry Pi Zero (From now on, I will refer to this as "RPi"). If you have neither, purchase a Zero, they are cheap (~15 USD) compared to the discontinued Teensy (I paid ~50 USD for one).
* A brain, and one that knows its way around a soldering iron is crucial for this.
* Magnet wire (aka Enameled Wire) or really thin solid-core wire. I recommend 32AWG-38AWG, but you might be able to get away with 30AWG if you are careful.

=== Software Needed ===
* A NAND backup from that Wii before the brick, or at least the NAND keys (You can re-encrypt another Wii's NAND, but I am not going to go into detail for that here.)
* Teensy users:
** Flash [https://raw.githubusercontent.com/hjudges/NORway/master/NANDway/Signal%20Booster%20Edition/NANDway_SignalBoosterEdition.hex this] to the Teensy with the [https://www.pjrc.com/teensy/loader.html Teensy Loader]
** Download the [https://raw.githubusercontent.com/jan-hofmeier/NORway/master/NANDway.py NANDway.py] ([https://raw.githubusercontent.com/nicl83/NANDWay3/main/NANDway3.py Python 3 Edition]).
*** I don't remember the results of using the Py3 version, but I think it worked fine. If you do not want to risk it, use the Py2 version.
** Python 2 or Python 3, and PySerial (install via pip: <code>pip install pyserial</code>). Depending on what script above you use. Do note that Python 2 is deprecated and getting everything installed might be a PITA.
* RPi users:
** Download [https://raw.githubusercontent.com/r00t1024/rpi-tsop48-nand/master/rpi-raw-nand-v3.c rpi-raw-nand-v3.c] and compile it by running <code>g++ rpi-raw-nand-v3.c -o rpi-raw-nand-v3</code> on the RPi.

= Unbricking the Wii =
There are 3 different kinds of boards that the Wii used during its lifespan: 6 layer boards (RVL-CPU-01, RVL-CPU-10, RVL-CPU-20, and RVL-CPU-30), 4 layer boards (RVL-CPU-40, RVL-CPU-50, RVL-CPU-60, RVK-CPU-01, and RVK-CPU-02), and the Wii Mini board.

What board you have is important to know, as they all have the NAND in different spots, orientations, and the via locations are different. [https://bitbuilt.net/forums/index.php?threads/revision-identification-guide.863/ This post] on BitBuilt.net is excellent on showing you how to check your board revision.

Now that (hopefully) you know what board you have, you can follow the respective guide:
I recommend you solder to the vias. You can solder to the traces, but either you are insane or skilled enough, or both to not be using the vias.

You also need to scratch the vias/traces to expose the copper. Some boards have plugged vias, so you will need to use the "pad" thats created after tinning the vias, instead of being able to shove your magwire into the vias.
<tabber>

|-|6 Layer=


{{info|text = For GND, you can use one of the sides of the capacitors, scratch some of the soldermask off of the GND plane above the NAND, or use TP3.}}
[[File:6L_NAND.png|center]]


|-|4 Layer / Wii Mini=

{{info|text = For GND, you can use one of the sides of the capacitors or use TP3.}}
[[File:4L_NAND.png|left]]

</tabber>

Select what you will be using to reflash the NAND:
<tabber>
|-|Teensy=

{{info|text= Connect all of the CLE, ALE, RE, and WE pins to their respective pins. You can use magwire to do this, or solder blob them together.}}
[[File:Teensy.png]]

{{info|text= ALL of the commands should be ran without any <code><></code> in them, ie. <code>python3 NANDway3.py /dev/ttyUSB0 0 info</code>.}}
{{info|text= Linux users might have to run some of the commands as root.}}
# Copy the NAND dump to the same directory as the NANDway script.
# Plug in the Teensy into your PC.
# Find the serial ID of the Teensy:
#* On Windows machines, this will be under Device Manager as a COM port
#* On Linux (and maybe macOS?), this will be a <code>tty</code>. Run <code>ls /dev/tty*</code> in a terminal and look for <code>ttyUSB0</code>.
# Open a Command Prompt or Terminal if one is not already open.
# <code>cd</code> to where the NANDway script is.
# Power on the Wii with the heatsink placed ontop of the CPU and GPU.
# Run <code>python(or python3) <NANDway.py or NANDway3.py> <serial ID> 0 info</code>
# If you get an output that looks correct, run <code><python or python3> <NANDway.py or NANDway3.py> <serial ID> 0 vwrite <NAND dump></code>, otherwise check your wiring.
# When it has finished, unplug the Teensy from your PC, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.


|-|RPi=

{{info|text= You only need to use one GND point.}}
[[File:RPI_Wii.png]]

# Copy the NAND dump to the root of the users <code>home</code> directory on the SD card (ie <code>/home/pi</code>).
# Power on the RPi and open a Terminal if one is not already open.
# Run <code>sudo ./rpi-raw-nand-v3 50 read_id</code>.
# If you get an output that looks correct, run <code>sudo ./rpi-raw-nand-v3 50 erase_blocks 0 4096 && sudo ../rpi-raw-nand-v3 50 write_full 0 262144 <NAND dump></code>, otherwise check your wiring.
# When it has finished, power off the RPi, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.

</tabber>

= Credits =
* Lazr1026 - Created the guide, the scans, and traced out the NANDs on 6 layer and 4 layer boards.
* Marcan/Effleurage/hjudges and nicl83 - NANDway and NANDway3 respectively.
* Kafluke - The Teensy picture was taken and modified from their [https://gbatemp.net/threads/476725/ Wii U Unbrick guide] on GBATemp.
* pharos/littlebalup/skypiece/r00t1024 - RPi NAND flasher program.
* playerjmr - Pushed me to make the guide.
* Stashboy - Sent me a few Wiis to mess with.

Wii:Hardmod unbrick

2024-09-01T03:18:26Z

Lazr: Throw a few lines in an info box

Let me (Lazr) preface this guide by saying that this is NOT for noobs. You will have to solder to small vias or traces (if you so choose) in order to unbrick your Wii with another piece of hardware.

I am aware that there are tools that "clip" (they are pressure-fitted) onto the NAND flash (aka 360 Clip), but they are pretty pricey (I paid $40, and eventually the ribbon cable wore out) and there are cheaper options, like the ones shown here, but it requires manual wiring.

You should also exhaust all other options before resorting to hardware flashing, like the BootMii NAND restore, or maybe you don't even need to restore.

In the guide, I will cover both Teensy2.0++ ''and'' the Raspberry Pi Zero. Theoretically, any Pi can be used for this, but I only have the Zero, so use at your own risk!

= What is required =
=== Hardware Needed ===
* A bricked Wii, for starters.
* A Teensy2.0++ or Raspberry Pi Zero (From now on, I will refer to this as "RPi"). If you have neither, purchase a Zero, they are cheap (~15 USD) compared to the discontinued Teensy (I paid ~50 USD for one).
* A brain, and one that knows its way around a soldering iron is crucial for this.
* Magnet wire (aka Enameled Wire) or really thin solid-core wire. I recommend 32AWG-38AWG, but you might be able to get away with 30AWG if you are careful.

=== Software Needed ===
* A NAND backup from that Wii before the brick, or at least the NAND keys (You can re-encrypt another Wii's NAND, but I am not going to go into detail for that here.)
* Teensy users:
** Flash [https://raw.githubusercontent.com/hjudges/NORway/master/NANDway/Signal%20Booster%20Edition/NANDway_SignalBoosterEdition.hex this] to the Teensy with the [https://www.pjrc.com/teensy/loader.html Teensy Loader]
** Download the [https://raw.githubusercontent.com/jan-hofmeier/NORway/master/NANDway.py NANDway.py] ([https://raw.githubusercontent.com/nicl83/NANDWay3/main/NANDway3.py Python 3 Edition]).
*** I don't remember the results of using the Py3 version, but I think it worked fine. If you do not want to risk it, use the Py2 version.
** Python 2 or Python 3, and PySerial (install via pip: <code>pip install pyserial</code>). Depending on what script above you use. Do note that Python 2 is deprecated and getting everything installed might be a PITA.
* RPi users:
** Download [https://raw.githubusercontent.com/r00t1024/rpi-tsop48-nand/master/rpi-raw-nand-v3.c rpi-raw-nand-v3.c] and compile it by running <code>g++ rpi-raw-nand-v3.c -o rpi-raw-nand-v3</code> on the RPi.

= Unbricking the Wii =
There are 3 different kinds of boards that the Wii used during its lifespan: 6 layer boards (RVL-CPU-01, RVL-CPU-10, RVL-CPU-20, and RVL-CPU-30), 4 layer boards (RVL-CPU-40, RVL-CPU-50, RVL-CPU-60, RVK-CPU-01, and RVK-CPU-02), and the Wii Mini board. I don't have a Wii Mini, so I cannot get scans of it and it will be unsupported for now.

What board you have is important to know, as they all have the NAND in different spots, orientations, and the via locations are different. [https://bitbuilt.net/forums/index.php?threads/revision-identification-guide.863/ This post] on BitBuilt.net is excellent on showing you how to check your board revision.

Now that (hopefully) you know what board you have, you can follow the respective guide:
I recommend you solder to the vias. You can solder to the traces, but either you are insane or skilled enough, or both to not be using the vias.

You also need to scratch the vias/traces to expose the copper. Some boards have plugged vias, so you will need to use the "pad" thats created after tinning the vias, instead of being able to shove your magwire into the vias.
<tabber>

|-|6 Layer=


{{info|text = For GND, you can use one of the sides of the capacitors, scratch some of the soldermask off of the GND plane above the NAND, or use TP3.}}
[[File:6L_NAND.png|center]]


|-|4 Layer=

{{info|text = For GND, you can use one of the sides of the capacitors or use TP3.}}
[[File:4L_NAND.png|left]]


|-|Wii Mini=

The Wii Mini is unsupported at this time.

</tabber>

Select what you will be using to reflash the NAND:
<tabber>
|-|Teensy=

{{info|text= Connect all of the CLE, ALE, RE, and WE pins to their respective pins. You can use magwire to do this, or solder blob them together.}}
[[File:Teensy.png]]

{{info|text= ALL of the commands should be ran without any <code><></code> in them, ie. <code>python3 NANDway3.py /dev/ttyUSB0 0 info</code>.}}
{{info|text= Linux users might have to run some of the commands as root.}}
# Copy the NAND dump to the same directory as the NANDway script.
# Plug in the Teensy into your PC.
# Find the serial ID of the Teensy:
#* On Windows machines, this will be under Device Manager as a COM port
#* On Linux (and maybe macOS?), this will be a <code>tty</code>. Run <code>ls /dev/tty*</code> in a terminal and look for <code>ttyUSB0</code>.
# Open a Command Prompt or Terminal if one is not already open.
# <code>cd</code> to where the NANDway script is.
# Power on the Wii with the heatsink placed ontop of the CPU and GPU.
# Run <code>python(or python3) <NANDway.py or NANDway3.py> <serial ID> 0 info</code>
# If you get an output that looks correct, run <code><python or python3> <NANDway.py or NANDway3.py> <serial ID> 0 vwrite <NAND dump></code>, otherwise check your wiring.
# When it has finished, unplug the Teensy from your PC, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.


|-|RPi=

{{info|text= You only need to use one GND point.}}
[[File:RPI_Wii.png]]

# Copy the NAND dump to the root of the users <code>home</code> directory on the SD card (ie <code>/home/pi</code>).
# Power on the RPi and open a Terminal if one is not already open.
# Run <code>sudo ./rpi-raw-nand-v3 50 read_id</code>.
# If you get an output that looks correct, run <code>sudo ./rpi-raw-nand-v3 50 erase_blocks 0 4096 && sudo ../rpi-raw-nand-v3 50 write_full 0 262144 <NAND dump></code>, otherwise check your wiring.
# When it has finished, power off the RPi, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.

</tabber>

= Credits =
* Lazr1026 - Created the guide, the scans, and traced out the NANDs on 6 layer and 4 layer boards.
* Marcan/Effleurage/hjudges and nicl83 - NANDway and NANDway3 respectively.
* Kafluke - The Teensy picture was taken and modified from their [https://gbatemp.net/threads/476725/ Wii U Unbrick guide] on GBATemp.
* pharos/littlebalup/skypiece/r00t1024 - RPi NAND flasher program.
* playerjmr - Pushed me to make the guide.
* Stashboy - Sent me a few Wiis to mess with.

Wii:Hardmod unbrick

2024-09-01T03:05:09Z

Lazr: Initial Page. It will remain unfinished until I can test a Teensy and RPi on 6L, 4L, and Wii Mini boards.

Let me (Lazr) preface this guide by saying that this is NOT for noobs. You will have to solder to small vias or traces (if you so choose) in order to unbrick your Wii with another piece of hardware.

I am aware that there are tools that "clip" (they are pressure-fitted) onto the NAND flash (aka 360 Clip), but they are pretty pricey (I paid $40, and eventually the ribbon cable wore out) and there are cheaper options, like the ones shown here, but it requires manual wiring.

You should also exhaust all other options before resorting to hardware flashing, like the BootMii NAND restore, or maybe you don't even need to restore.

In the guide, I will cover both Teensy2.0++ ''and'' the Raspberry Pi Zero. Theoretically, any Pi can be used for this, but I only have the Zero, so use at your own risk!

= What is required =
=== Hardware Needed ===
* A bricked Wii, for starters.
* A Teensy2.0++ or Raspberry Pi Zero (From now on, I will refer to this as "RPi"). If you have neither, purchase a Zero, they are cheap (~15 USD) compared to the discontinued Teensy (I paid ~50 USD for one).
* A brain, and one that knows its way around a soldering iron is crucial for this.
* Magnet wire (aka Enameled Wire) or really thin solid-core wire. I recommend 32AWG-38AWG, but you might be able to get away with 30AWG if you are careful.

=== Software Needed ===
* A NAND backup from that Wii before the brick, or at least the NAND keys (You can re-encrypt another Wii's NAND, but I am not going to go into detail for that here.)
* Teensy users:
** Flash [https://raw.githubusercontent.com/hjudges/NORway/master/NANDway/Signal%20Booster%20Edition/NANDway_SignalBoosterEdition.hex this] to the Teensy with the [https://www.pjrc.com/teensy/loader.html Teensy Loader]
** Download the [https://raw.githubusercontent.com/jan-hofmeier/NORway/master/NANDway.py NANDway.py] ([https://raw.githubusercontent.com/nicl83/NANDWay3/main/NANDway3.py Python 3 Edition]).
*** I don't remember the results of using the Py3 version, but I think it worked fine. If you do not want to risk it, use the Py2 version.
** Python 2 or Python 3, and PySerial (install via pip: <code>pip install pyserial</code>). Depending on what script above you use. Do note that Python 2 is deprecated and getting everything installed might be a PITA.
* RPi users:
** Download [https://raw.githubusercontent.com/r00t1024/rpi-tsop48-nand/master/rpi-raw-nand-v3.c rpi-raw-nand-v3.c] and compile it by running <code>g++ rpi-raw-nand-v3.c -o rpi-raw-nand-v3</code> on the RPi.

= Unbricking the Wii =
There are 3 different kinds of boards that the Wii used during its lifespan: 6 layer boards (RVL-CPU-01, RVL-CPU-10, RVL-CPU-20, and RVL-CPU-30), 4 layer boards (RVL-CPU-40, RVL-CPU-50, RVL-CPU-60, RVK-CPU-01, and RVK-CPU-02), and the Wii Mini board. I don't have a Wii Mini, so I cannot get scans of it and it will be unsupported for now.

What board you have is important to know, as they all have the NAND in different spots, orientations, and the via locations are different. [https://bitbuilt.net/forums/index.php?threads/revision-identification-guide.863/ This post] on BitBuilt.net is excellent on showing you how to check your board revision.

Now that (hopefully) you know what board you have, you can follow the respective guide:
I recommend you solder to the vias. You can solder to the traces, but either you are insane or skilled enough, or both to not be using the vias.
You also need to scratch the vias/traces to expose the copper. Some boards have plugged vias, so you will need to use the "pad" thats created after tinning the vias, instead of being able to shove your magwire into the vias.
<tabber>

|-|6 Layer=


[[File:6L_NAND.png|center]]
For GND, you can use one of the sides of the capacitors, scratch some of the soldermask off of the GND plane above the NAND, or use TP3.


|-|4 Layer=

Open the picture in another tab and zoom in. This will give you the full quality of the scans.
[[File:4L_NAND.png|left]]
For GND, you can use one of the sides of the capacitors or use TP3.


|-|Wii Mini=

The Wii Mini is unsupported at this time.

</tabber>

Select what you will be using to reflash the NAND:
<tabber>
|-|Teensy=

{{info|text= Connect all of the CLE, ALE, RE, and WE pins to their respective pins. You can use magwire to do this, or solder blob them together.}}
[[File:Teensy.png]]

{{info|text= ALL of the commands should be ran without any <code><></code> in them, ie. <code>python3 NANDway3.py /dev/ttyUSB0 0 info</code>.}}
{{info|text= Linux users might have to run some of the commands as root.}}
# Copy the NAND dump to the same directory as the NANDway script.
# Plug in the Teensy into your PC.
# Find the serial ID of the Teensy:
#* On Windows machines, this will be under Device Manager as a COM port
#* On Linux (and maybe macOS?), this will be a <code>tty</code>. Run <code>ls /dev/tty*</code> in a terminal and look for <code>ttyUSB0</code>.
# Open a Command Prompt or Terminal if one is not already open.
# <code>cd</code> to where the NANDway script is.
# Power on the Wii with the heatsink placed ontop of the CPU and GPU.
# Run <code>python(or python3) <NANDway.py or NANDway3.py> <serial ID> 0 info</code>
# If you get an output that looks correct, run <code><python or python3> <NANDway.py or NANDway3.py> <serial ID> 0 vwrite <NAND dump></code>, otherwise check your wiring.
# When it has finished, unplug the Teensy from your PC, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.


|-|RPi=

{{info|text= You only need to use one GND point.}}
[[File:RPI_Wii.png]]

# Copy the NAND dump to the root of the users <code>home</code> directory on the SD card (ie <code>/home/pi</code>).
# Power on the RPi and open a Terminal if one is not already open.
# Run <code>sudo ./rpi-raw-nand-v3 50 read_id</code>.
# If you get an output that looks correct, run <code>sudo ./rpi-raw-nand-v3 50 erase_blocks 0 4096 && sudo ../rpi-raw-nand-v3 50 write_full 0 262144 <NAND dump></code>, otherwise check your wiring.
# When it has finished, power off the RPi, plug in the WiFi module and Bluetooth module into the Wii, and try booting up.

</tabber>

= Credits =
* Lazr1026 - Created the guide, the scans, and traced out the NANDs on 6 layer and 4 layer boards.
* Marcan/Effleurage/hjudges and nicl83 - NANDway and NANDway3 respectively.
* Kafluke - The Teensy picture was taken and modified from their [https://gbatemp.net/threads/476725/ Wii U Unbrick guide] on GBATemp.
* pharos/littlebalup/skypiece/r00t1024 - RPi NAND flasher program.
* playerjmr - Pushed me to make the guide.
* Stashboy - Sent me a few Wiis to mess with.

File:RPI Wii.png

2024-09-01T02:16:24Z

Lazr:

File:Teensy.png

2024-09-01T01:03:32Z

Lazr:

File:6L NAND.png

2024-09-01T00:21:40Z

Lazr: NAND pinout of 6 Layer Wiis

== Summary ==
NAND pinout of 6 Layer Wiis

File:4L NAND.png

2024-09-01T00:20:41Z

Lazr: NAND pinout of 4 Layer Wiis

== Summary ==
NAND pinout of 4 Layer Wiis

Wii U:Region Changing

2024-08-22T07:31:00Z

Lazr: helpees should not copy the plugin back

This guide will show you how to region change your Wii U. This process is the most effective way versus other old and tedious methods, but also requires you to read carefully as this can brick your MLC if you are not careful.

== Usage ==
{{info|text=This will change only the region of the console. It does not change the Gamepad's region. However, you are able to use out of region Gamepads thanks to Aroma's DRC region free plugin. If you also want to change the vWii region, run [https://github.com/GaryOderNichts/vWii-Decaffeinator/releases/tag/v2 vWii Decaffeinator] on light mode then perform a system update (updates need to be unblocked).}}

{{info|text= This guide will require you to wipe the MLC. Backup any important saves you wish to preserve by using either SaveMii or dumpling. You can however region change without wiping it, you would just skip <code>Erase MLC</code> and <code>Delete scfm.img</code>, but keep in mind you'd need to delete old titles via [https://raw.githubusercontent.com/Lazr1026/regionchange/main/files/wupclient.py wupclient.py] (right click > Save Link As).}}

'''Keep a copy of your OTP and SEEPROM backups.''' It is just in case something goes wrong, which is unlikely but better to keep regardless.
{{warning|text=Do not uninstall ISFShax after erasing the eMMC and deleting the SCFM until you have successfully rebuilt the MLC and confirmed everything is working. We are not responsible if you fail to follow directions.}}

== SD Preparations ==

*You must first have [[Wii U:ISFShax|ISFShax]] installed. This is a requirement to region change and is not optional. de_fuse can also be used, but that is for more advanced users (requires soldering).

*The latest release of [https://github.com/Xpl0itU/MLCRestorerDownloader/releases MLCRestorerDownloader] (With your preferred OS)
*The latest release of the [https://github.com/jan-hofmeier/wafel_setup_mlc/releases MLC setup plugin]
*The latest release of the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel_payloader Plugin]
*The latest [https://aroma.foryour.cafe Aroma] files (If you have aroma already, ignore this.)
**Check the boxes, then hit <code>Download Base Aroma</code> and <code>Download Payloads</code>.

=== Downloading the MLC files ===

# Download and extract the MLCRestorerDownloader.
# Copy your otp.bin from the nand backup to the directory of the program.
#*[[File:MLCRestorerDownloader.png]]
# Start the app in a terminal or command prompt (Type CMD in the file path bar at the top).
# Type either <code>MLCRestorerDownloader</code> or <code>./MLCRestorerDownloader.exe</code> then hit enter.
#*[[File:SelectTitles.png]]
# Type <code>1</code> then hit enter.
# Type the number for the region you want to be changed.
#*[[File:SelectRegion.png]]
# The Downloading process will take a minute, from here on you can continue from below.

=== Setup plugins and MLC files ===
# Copy the <code>wafel_payloader.ipx</code> to your <code>wiiu/ios_plugins</code> folder.
# Copy the <code>wafel_setup_mlc.ipx</code> to your <code>wii/ios_plugins</code> folder.
#*[[File:iosplugins.png]]
# Copy the <code>wiiu</code> folders from the Aroma download to the root of the SD card. (better to merge both and move just one)
# Once the MLC download is done, make a folder named <code>wafel_install</code> on the root of your SD card, and copy the 52 MLC files from the output folder to that folder.
#*[[File:wafel_install.png]]

We can now move on to the actual region change.

== Region Changing ==

# Boot up the console.
#*If it doesn't put you into the minute menu, make sure ISFSHax is installed.
# Navigate to <code>Backup and Restore</code>.
# Select <code>Erase MLC</code>, then press EJECT to proceed.
#* If it tells you erasing the MLC isn't allowed, make sure ISFShax is installed.
# Select <code>Delete scfm.img</code> then press EJECT to proceed.
#*If it gives you a warning that it may brick the console, do not continue and install ISFShax. This is a serious issue.
# Go back to the main menu, then select <code>Patch (sd) and Boot IOS (slc)</code>.
# If the LED is blinking blue, the setup has begun. It will complete when the LED is solid blue again.
# Power off and move your SD card back to your PC.
# Make sure there are no errors in the <code>wafel_setup_mlc.log</code>. They should all have 7 0's except for the <code>SetInitialLaunch</code>, which will be a <code>1</code>.
# If everything is correct, you can delete the <code>wafel_setup_mlc.ipx</code> from <code>wiiu/ios_plugins</code>.
# Reinsert your SD card and boot the console back up. You should then see the Initial Setup screen. Well done, You have region changed your console!

== Fixing sys_prod.xml manually ==
{{info|text=You only need to do this if <code>MCP_SetSysProdSettings</code> returned error <code>FFFBFFEE</code>, if it returned a 0, then you can skip this.}}

# Download the <code>sys_prod.zip</code> and <code>wafel_sysprod_copy</code> from [https://github.com/Lazr1026/wafel_sysprod_copy/releases here].
# Extract the <code>sys_prod.xml</code> from the <code>sys_prod.zip</code> file.
# Open the <code>sys_prod.xml</code> in a text editor, and change the <code>product_area</code> and <code>game_region</code> to the region of choice.
#*[[File:sys_prod.png]]
#*Region values are as follows: JPN - 1. USA - 2. EUR - 4
# Change the <code>code_id</code>, <code>serial_id</code> and <code>model_number</code> values to the ones found on the stickers located on the bottom of the console.
#*[[File:serials.png|512px]]
#*[[File:serials2.png]]
# Save the file, then copy it to the root of the SD.
# Download the <code>wafel_sysprod_copy.ipx</code> and copy it to <code>wiiu/ios_plugins</code>.
# Boot up the console and once you're in minute, select <code>Patch (sd) and Boot IOS (slc)</code>.
# Leave the console running for about 30 seconds, then power it off.
# Repeat Step 7, but it should boot this time. No need for deleting the plugin, it will self delete after a while.

== Finalizing Region Change ==
You can keep ISFShax installed, or uninstall it. It's recommended to keep it, so you can coldboot Aroma without having the PayloadLoader attached to Health and Safety. It also serves as brick protections of sorts.

If you need to, you can region change the Gamepad with [https://github.com/GaryOderNichts/DRXUtil DRXUtil], but you have to build the application yourself. There is no definitive guide for its use. Use at your own risk.

Wii U:Region Changing

2024-08-10T20:01:49Z

Lazr: Edit page to my liking

This guide will show you how to region change your Wii U. This process is the most effective way versus other old and tedious methods, but also requires you to read carefully as this can brick your MLC if you are not careful.

== Usage ==
{{info|text=This will change only the region of the console. It does not change the Gamepad's region. However, you are able to use out of region Gamepads thanks to Aroma's DRC region free plugin. If you also want to change the vWii region, run [https://github.com/GaryOderNichts/vWii-Decaffeinator/releases/tag/v2 vWii Decaffeinator] on light mode then perform a system update (updates need to be unblocked).}}

{{info|text= This guide will require you to wipe the MLC. Backup any important saves you wish to preserve by using either SaveMii or dumpling. You can however region change without wiping it, you would just skip <code>Erase MLC</code> and <code>Delete scfm.img</code>, but keep in mind you'd need to delete old titles via [https://raw.githubusercontent.com/Lazr1026/regionchange/main/files/wupclient.py wupclient.py] (right click > Save Link As).}}

'''Keep a copy of your OTP and SEEPROM backups.''' It is just in case something goes wrong, which is unlikely but better to keep regardless.
{{warning|text=Do not uninstall ISFShax after erasing the eMMC and deleting the SCFM until you have successfully rebuilt the MLC and confirmed everything is working. We are not responsible if you fail to follow directions.}}

== SD Preparations ==

*You must first have [[Wii U:ISFShax|ISFShax]] installed. This is a requirement to region change and is not optional. de_fuse can also be used, but that is for more advanced users (requires soldering).

*The latest release of [https://github.com/Xpl0itU/MLCRestorerDownloader/releases MLCRestorerDownloader] (With your preferred OS)
*The latest release of the [https://github.com/jan-hofmeier/wafel_setup_mlc/releases MLC setup plugin]
*The latest release of the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel_payloader Plugin]
*The latest [https://aroma.foryour.cafe Aroma] files (If you have aroma already, ignore this.)
**Check the boxes, then hit <code>Download Base Aroma</code> and <code>Download Payloads</code>.

=== Downloading the MLC files ===

# Download and extract the MLCRestorerDownloader.
# Copy your otp.bin from the nand backup to the directory of the program.
#*[[File:MLCRestorerDownloader.png]]
# Start the app in a terminal or command prompt (Type CMD in the file path bar at the top).
# Type either <code>MLCRestorerDownloader</code> or <code>./MLCRestorerDownloader.exe</code> then hit enter.
#*[[File:SelectTitles.png]]
# Type <code>1</code> then hit enter.
# Type the number for the region you want to be changed.
#*[[File:SelectRegion.png]]
# The Downloading process will take a minute, from here on you can continue from below.

=== Setup plugins and MLC files ===
# Copy the <code>wafel_payloader.ipx</code> to your <code>wiiu/ios_plugins</code> folder.
# Copy the <code>wafel_setup_mlc.ipx</code> to your <code>wii/ios_plugins</code> folder.
#*[[File:iosplugins.png]]
# Copy the <code>wiiu</code> folders from the Aroma download to the root of the SD card. (better to merge both and move just one)
# Once the MLC download is done, make a folder named <code>wafel_install</code> on the root of your SD card, and copy the 52 MLC files from the output folder to that folder.
#*[[File:wafel_install.png]]

We can now move on to the actual region change.

== Region Changing ==

# Boot up the console.
#*If it doesn't put you into the minute menu, make sure ISFSHax is installed.
# Navigate to <code>Backup and Restore</code>.
# Select <code>Erase MLC</code>, then press EJECT to proceed.
#* If it tells you erasing the MLC isn't allowed, make sure ISFShax is installed.
# Select <code>Delete scfm.img</code> then press EJECT to proceed.
#*If it gives you a warning that it may brick the console, do not continue and install ISFShax. This is a serious issue.
# Go back to the main menu, then select <code>Patch (sd) and Boot IOS (slc)</code>.
# If the LED is blinking blue, the setup has begun. It will complete when the LED is solid blue again.
# Power off and move your SD card back to your PC.
# Make sure there are no errors in the <code>wafel_setup_mlc.log</code>. They should all have 7 0's except for the <code>SetInitialLaunch</code>, which will be a <code>1</code>.
# If everything is correct, you can delete the <code>wafel_setup_mlc.ipx</code> from <code>wiiu/ios_plugins</code>.
# Reinsert your SD card and boot the console back up. You should then see the Initial Setup screen. Well done, You have region changed your console!

== Fixing sys_prod.xml manually ==
{{info|text=You only need to do this if <code>MCP_SetSysProdSettings</code> returned error <code>FFFBFFEE</code>, if it returned a 0, then you can skip this.}}

# Download the <code>sys_prod.zip</code> and <code>wafel_sysprod_copy</code> from [https://github.com/Lazr1026/wafel_sysprod_copy/releases here].
# Extract the <code>sys_prod.xml</code> from the <code>sys_prod.zip</code> file.
# Open the <code>sys_prod.xml</code> in a text editor, and change the <code>product_area</code> and <code>game_region</code> to the region of choice.
#*[[File:sys_prod.png]]
#*Region values are as follows: JPN - 1. USA - 2. EUR - 4
# Change the <code>code_id</code>, <code>serial_id</code> and <code>model_number</code> values to the ones found on the stickers located on the bottom of the console.
#*[[File:serials.png|512px]]
#*[[File:serials2.png]]
# Save the file, then copy it to the root of the SD.
# Download the <code>wafel_sysprod_copy.ipx</code> and copy it to <code>wiiu/ios_plugins</code>.
# Boot up the console and once you're in minute, select <code>Patch (sd) and Boot IOS (slc)</code>.
# Leave the console running for about 30 seconds, then power it off.
# Repeat Step 6, but it should boot this time. No need for deleting the plugin, it will self delete after a while.

== Finalizing Region Change ==
You can keep ISFShax installed, or uninstall it. It's recommended to keep it, so you can coldboot Aroma without having the PayloadLoader attached to Health and Safety. It also serves as brick protections of sorts.

If you need to, you can region change the Gamepad with [https://github.com/GaryOderNichts/DRXUtil DRXUtil], but you have to build the application yourself. There is no definitive guide for its use. Use at your own risk.

Wii U:ISFShax

2024-07-01T22:23:21Z

Lazr: Lazr-ify the page

'''ISFShax''' exploits boot1 using a specially designed ISFS (SLC filesystem) superblock. Once installed, it offers similar capabilities to defuse. Since it runs before IOSU, it can apply early patches to IOSU and repair most types of bricks. However, it cannot protect against bricks caused by boot1 corruption, seeprom issues, or installing a faulty ISFShax superblock. Additionally, ISFShax cannot help if the Wii U is already bricked.

== Features ==

*Rebuilding or upgrading the MLC
*Removing the 64GB MLC limit and disabling SCFM
*Brick protection, such as before performing a region change
*Cold booting redNAND, which is helpful when the eMMC is failing
*Providing a minimal CFW that can launch old homebrew using the homebrew launcher (though this might be less useful with Aroma and Tiramisu available)
*Preventing the Wii U from turning on the Tablet during boot using a stroopwafel plugin

== Exploit Methods ==

There are quite a few ways to launch the ISFShax installer.

*If you already have Tiramisu or Aroma installed and can launch it, follow the Instructions for Aroma
*If the Browser still works and you can launch the browser exploit u.wiidb.de, follow the Instructions for Browser
*If you can't access the Browser, but Settings still work follow Instructions for DNSpresso
*If your Wii U crashes in the initial setup on Mii creation, follow Instructions for DNSpresso
*If your Wii U can't launch the browser anymore or can't connect to the internet, follow the Instructions for UDPIH

{{info|text= Note: If you have a legacy CFW (Haxchi, CBHC) installed you can also use it, but follow the Aroma steps and hold A instead of B.}}

Make sure your SD card is FAT32, although this should already be the case if you have Aroma/Tiramisu installed.

== SD Preparation ==

You will need:
*The [https://github/isfshax/isfshax_installer/releases ISFShax installer] (<code>ios.img</code>)
*The [https://github.com/isfshax/isfshax/releases ISFShax Superblocks] (<code>superblock.img</code> and <code>superblock.img.sha</code>)
*The [https://github.com/jan-hofmeier/stroopwafel/releases stroopwafel] (<code>wafel_core.ipx</code>)
*The [https://github.com/isfshax/wafel_isfshax_patch/releases IOSU ISFShax tolerance patch] (<code>wafel_isfshax_patch.ipx</code>)

*The [https://github.com/jan-hofmeier/minute_minute/releases minute image] (<code>fw_encrypted.img</code>) '''[Aroma/Browser/DNSpresso]'''
*The [https://github.com/wiiu-env/fw_img_payload/releases fw_img_payload] zip '''[Browser/DNSpresso only]'''
*The [https://github.com/wiiu-env/PayloadFromRPX/releases root.rpx] '''[DNSpresso only]'''
*The [https://github.com/jan-hofmeier/minute_minute/releases minute images] (<code>fw.img</code> and <code>boot1.img</code> '''[UDPIH only]'''
*The [https://github.com/jan-hofmeier/recovery_menu/releases recovery_menu] '''[UDPIH only]'''

#Copy the <code>ios.img</code> to the root of your SD card.
#Copy the <code>superblock.img</code> and <code>superblock.img.sha</code> to root of your SD card.
#Copy the <code>wafel_core.ipx</code> and <code>wafel_isfshax_patch.ipx</code> to the <code>ios_plugins</code> folder in the <code>wiiu</code> folder.
#Copy the <code>fw_encrypted.img</code> to the root of your SD card and rename it to <code>fw.img</code>.
#Extract the contents of the <code>fw_img_payload</code> zip to the root of your SD card. '''(Browser/DNSpresso)'''
#Copy the <code>root.rpx</code> to the root of your SD card and rename it to <code>launch.rpx</code> '''(DNSpresso)'''
#Copy the <code>fw.img</code> and <code>boot1.img</code> to the root of your SD card. '''(UDPIH)'''
#Copy the <code>recovery_menu</code> to the root of your SD card. '''(UDPIH)'''

The structure on the SD should look like this:
{{Tree list}}

* {{Tree icon|sd}} (root)
** {{Tree icon|f}} boot1.img (UDPIH only)
** {{Tree icon|f}} fw.img
** {{Tree icon|f}} ios.img
** {{Tree icon|f}} recovery_menu (UDPIH only)
** {{Tree icon|f}} launch.rpx (DNSpresso only)
** {{Tree icon|f}} superblock.img
** {{Tree icon|f}} superblock.img.sha
** {{Tree icon|d}} wiiu
*** {{Tree icon|f}} payload.elf (Browser, DNSpresso only)
*** {{Tree icon|d}} ios_plugins
**** {{Tree icon|f}} wafel_core.ipx
**** {{Tree icon|f}} wafel_isfshax_patch.ipx
{{Tree list/end}}

== Booting into Minute ==

Choose the appropriate method to boot into Minute based off of the setup you have.

<tabber>

|-|Aroma=


# Hold B on boot or while launching Health and Safety (whether you coldboot or not) to boot into the PayloadLoader.
# You will be asked to choose your payload.
# Select "fw_img_loader".

{{info|text= If the fw_img_loader isn't present, grab it from the [https://aroma.foryour.cafe Aroma Website].}}


|-|Browser=


# Navigate to the browser and type in "u.wiidb.de" in the address bar.
# Click on "HAXX".


|-|DNSpresso=


If you can access the settings, follow the instructions provided here (you already have the correct files on the SD card): [https://gbatemp.net/threads/dnspresso-a-wii-u-dns-exploit.642123/ DNSpresso - A Wii U DNS Exploit.]

If you are stuck on User/Mii creation during the initial setup:

# If your Wii U is already connected to your AP/Router, turn off the AP/Router or disable its WiFi.
# When the setup asks if you already have a NNID, select "Yes" (even if you don't have one).
# The system will attempt to connect to the Internet, fail, and then prompt you to return to the WiFi settings.
# Turn your AP/Router back on and wait for it to start.
# If your WiFi is not already configured, connect to it now, but enter an incorrect password.
# Edit your WiFi connection and set 85.215.57.182 as the Primary DNS. If you entered a wrong password before, correct it now.
# Press (B) to go back and select "Connection Test."


|-|UDPIH=


# Boot into recovery_menu as per [https://gbatemp.net/threads/udpih-usb-host-stack-exploit-recovery-menu.613369/ this guide]
# Unplug the pico or Switch.
# Select "Load BOOT1 Payload" from the list and continue on.

{{info|text=(If your tv doesn't display an output, you'll have to navigate blindly: 18x eject, 1x power, 1 eject, 1 power)}}


</tabber>

You should now see the minute main menu. If not, ensure you have the correct fw.img file on the SD card.

In minute, use the power button to move the cursor and the eject button to select (this is opposite to the recovery menu controls).

{{info|text= Minute only outputs 1080p through HDMI, with no display on the GamePad or analog outputs. Some users have reported that the screen output doesn't work when minute is loaded from the recovery_menu. If you've verified that the fw.img file is correct and your TV supports 1080p HDMI, you can still proceed by pressing the appropriate buttons blindly. Make sure to wait long enough between presses to allow the system to load. Without display output, skip the first backup and go directly to installing ISFShax.}}

== Backup and Installation ==
We will now start with a fresh NAND backup.

# Navigate to <code>Backup and Restore</code>
# Select <code>Dump OTP and Seeprom</code >
# When that is done, select <code>Dump SLC.RAW</code>
# Once that is done, return to the main menu.

=== Installing ISFShax ===
# Select <code>Boot ios.img</code>(blind combo is Power 5x, Eject 1x)
# The ISFShax installer will launch after a brief moment.
# Follow the onscreen instructions, the buttons are the same as minute's (3x Eject, 1x Power, 3x Eject).
# The console should now turn off.
# Replace the fw.img on the SD with the fw.img (The non-encrypted one) from the [https://github.com/jan-hofmeier/minute_minute/releases Minute releases].
# If it successfully installed, the Wii U will directly boot into minute once you boot again.

=== Backing up ISFSHax ===
Go back to Backup and Restore and Dump the SLC.RAW again. This will replace the previous SLC.RAW file you dumped earlier. It's required if you want to restore the SLC for unbricking, without losing ISFShax, in case the superblock protection fails. Keep that backup somewhere safe.

== Booting with ISFShax ==

From this point on, the Wii U can still boot without the SD card, but will have some patches applied (ISFShax tolerance for IOSU, update blocking).
To boot into the Wii U OS in minute, select <code>Patch (sd) and boot IOS (slc)</code>.

=== Launching environments with ISFShax ===
You can use ISFShax to boot into Aroma or Tiramisu.
To begin, you will need the latest files from the sites.

*Aroma: Download [https://aroma.foryour.cafe here]
*Tiramisu: Download [https://tiramisu.foryour.cafe here]

# Put the wafel_payloader.ipx file in the ios_plugins folder: Download here
# Place the root.rpx file from [https://github.com/wiiu-env/PayloadFromRPX/releases PayloadFromRPX] in the wiiu folder on the SD card.
#* Alternatively, if you have Aroma and/or Tiramisu already, you can just grab the root.rpx from your environment of choice's folder from <code>wiiu/environments/[ENVIRONMENT]/</code> and place it on the root of the SD card.

{{info|text= If you are already coldbooting Tiramisu or Aroma via the PayloadLoader Installer, you need to disable the coldboot in the PayloadLoaderInstaller first.}}

=== Booting without SD ===

This step is optional but highly recommended. Without the SD card, the Wii U will still boot, but will only have minimal patches applied.

To fix this, we need to install minute (fw.img) and the stroopwafel plugins (wafel_core + wafel_isfshax_patch) to the internal memory (SLC). This can be done using FTPiiU-Everywhere, which can be launched from Tiramisu and is part of the Aroma Package (enable in the plugin settings), or you can use the [https://github.com/mackieks/haxcopy haxcopy homebrew].

Haxcopy is recommended for most users, but if you accidentally copy a wrong plugin to the SLC or need to delete one, you'll still need to use FTP.

<tabber>

|-|Haxcopy=

# Create a folder named "hax" on the SD card.
# Copy the fw.img to the hax folder.
# Create a subfolder named "ios_plugins" in the hax folder.
# Rename wafel_core.ipx to 0core.ipx and copy it to the hax/ios_plugins folder.
# Rename wafel_isfshax_patch.ipx to 6isfshax.ipx and copy it to the hax/ios_plugins folder.
# If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and copy it to the hax/ios_plugins folder.
# If you need other plugins like wafel_unlimit.ipx, rename and copy them to the hax/ios_plugins folder.
# Download the <code>haxcopy.wuhb</code> from [https://github.com/mackieks/haxcopy/releases here] and copy it to to the wiiu/apps folder (as you would normally install homebrew).
# Insert the SD card into the Wii U and run haxcopy to transfer the hax folder to the SLC.


|-|FTP=

{{info|text=You do not need to do the first two steps if you already have system file access enabled in the FTPiiU configuration.}}
#Open the Aroma Plugin Configuration Menu using L + Down + SELECT (-) on the GamePad or Pro Controller (or B + Down + Minus (-) for WiiMotes).
#Open the FTPiiU option, then settings, and set ‘Allow access to system files’ to ‘true’ by pressing A.
# Use an FTP client on the PC to browse to /storage_slc/.
# If you see a scfm.img file and sys folder, go into the sys folder. If you see folders like config, import, logs, proc, rights, security, title, and tmp, move to the next step.
# Create a subfolder named "hax" and enter it.
# Ensure your FTP client is in binary mode (not ASCII mode).
# Upload the minute fw.img to the /storage_slc/sys/hax folder.
# Create another subfolder named "ios_plugins" in /storage_slc/sys/hax.
# Enter the /storage_slc/sys/hax/ios_plugins folder.
# Rename wafel_core.ipx to 0core.ipx and upload it.
# Rename wafel_isfshax_patch.ipx to 6isfshax.ipx and upload it.
# If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and upload it.
# If you need other plugins like wafel_unlimit.ipx, rename and upload them too.

</tabber>
Now, the Wii U should autoboot if no SD card is inserted. If an SD card is inserted, the minute menu should show up (even if the SD doesn't contain a fw.img). In that menu, you can select the Patch (SLC) and boot IOS (SLC) to load the plugins from the SLC and boot (no need to have them on the SD anymore).

{{info|text= The Wii U will first try to load the fw.img from the SLC, and if that fails, it will fall back to the SD. If you install a broken fw.img that doesn't load, you can force ISFShax to load the fw.img from the SD by repeatedly pressing the power button until the menu shows up.}}

{{warning|text= A factory reset will delete the hax folder. Without the fw.img on the SD, the Wii U will boot with minimal patches.}}

=== Autobooting with SD (Optional) ===

To enable autoboot on the Wii U with an SD card inserted, create the file <code>sd:/minute/minute.ini</code> with the following content:

<syntaxhighlight>
[boot]
autoboot=1
autoboot_timeout=3
</syntaxhighlight>

You can adjust the timeout (in seconds) to your preference. The <code>autoboot</code> option determines which entry from the minute menu will be loaded. Setting it to <code>1</code> corresponds to <code>Patch (slc) and boot IOS (slc)"</code>, which loads the ios_plugins from the SLC. If you haven't installed them to the SLC or want to load them from the SD for any reason, change the value to <code>3</code>, which corresponds to <code>"Patch (sd) and boot IOS (slc)</code>.

{{info|text= If you combine autobooting minute with the wafel_payloader plugin, You can autoboot Aroma or Tiramisu without having Health and Safety injected at all!}}

As an alternative, check out the Fastboot option below.

=== Fastbooting (Optional) ===

To make the Wii U boot as fast as possible, without showing minute, you can now use the fw_fastboot.img. This won't work with redNAND
It is hardcoded to go straight to the first option (booting the SLC, with patches from SLC). It won't display anything and ignore any autoboot configuration in the minute.ini.

# First make sure the system can boot using the first option in minute. (see Booting without SD)
# Replace the the fw.img in the hax folder on the SLC with the fastboot image (fw_fastboot.img renamed to fw.img)

If you get stuck for whatever reason and need to fully load minute from your SD, you can do this:

# Place the minute fw.img on the SD card
# Repeatedly press the power button until the minute menu shows up on the screen.

== Uninstalling ISFShax ==

{{warning|text= Do NOT restore an older SLC backup, as it will break SCFM!}}

Ensure your Wii U doesn't rely on any patches (like wafel_unlimit_mlc.ipx or redNAND). You can verify this by booting with only the wafel_core.ipx and wafel_isfshax_ipx plugins in the ios_plugins directory on the SD card and selecting the "Patch (sd) and boot IOS (slc)" option.

To proceed:

# Delete the /storage_slc/sys/hax folder if you have set up SLC booting.
# Run the ISFShax installer again from minute and follow the on-screen instructions to uninstall.

Wii U:FTP

2024-06-27T19:24:31Z

Lazr: The plugin can be downloaded from the AromaUpdater

{{Infobox homebrew
| forwiiu = 1
| developers = dimok789
| image = FTPiiU-hbl-icon.png
| version = 0.4
| releasedate = 2021-11-13
| github = dimok789/ftpiiu
| githubtag = v0.4
}}

'''FTP''' is a way to transfer files wirelessly through a network to and from the Wii .

Luckily, with '''FTPiiU''', we can use this method to transfer files wirelessly to a Wii U instead of moving the SD card back and forth each time.

== What You Need ==

'''On your computer''':
<ul>
<li>A working FTP client
{{FTP clients}}</li>
</ul>

==Installation==

<tabber>
|-|Tiramisu=


#Download the latest release of {{GitHub|dimok789/ftpiiu/releases|FTPiiU}}.
#Extract the contents of <code>ftpiiu.zip</code> to the root of your SD card.
#Insert your SD card into your Wii U.
#Open the Homebrew Launcher (Mii Maker for Tiramisu).
#Navigate to FTPiiU.
#Launch FTPiiU.
#Your IP will be visible at the bottom.


|-|Aroma=


{{info|text=The FTPiiU plugin can be downloaded via the Aroma Updater. The instructions below are if you want to manually install it.}}
#Download the latest release of {{GitHub|wiiu-env/ftpiiu_plugin/releases/tag/v0.3.1|FTPiiU}}.
#Extract the contents of <code>ftpiiu_v0_3_1.zip</code> to <code>wiiu/environments/aroma/plugins</code>.
#Insert your SD card back into your Wii U.
#* If the console wasn't already off, Reboot the console after doing so.
#To see your Wii U's IP, Open the plugins menu by pressing '''L + DPAD DOWN + Select''', and you'll see it in the FTPiiU tab.

{{info|text=FTPiiU doesn't need to be launched on Aroma. It is a plugin, so it works automatically anywhere on the console.}}


</tabber>

===How to Use===

#If you haven't already, install the FTP client for your operating system
#Open the FTP client and fill in the information as follows:
#*File protocol: FTP (''not'' SFTP)
#*Host name/IP address: The IP address displayed on the GamePad or TV (e.g. 192.168.0.67)
#** This is a local IP address, so you don't need to censor it if you need assistance
#* Port number: Usually 21 by default, so leave it blank
#**If you don't see this option, instead type <code>(ip):(port)</code> into the host name/IP address box, e.g. <code>192.168.0.67:21</code>
#*Username/password: If you see a checkbox for "Anonymous login", then enable it; otherwise, just leave it blank
#Click "Login" or "Connect"
#*If prompted to enter a username or password, press ENTER to leave it blank

<big>{{success|Your computer is now connected to your Wii U via FTP!}}</big>

[[Category:Wii U guides]]

Wii U:Moving from Tiramisu to Aroma

2024-05-07T06:02:30Z

Lazr: Add the AromaUpdater method

Tiramisu has been replaced by Aroma, therefore making it outdated and not supported anymore. This guide will show you how to move from Tiramisu to Aroma.

Aroma is an environment like Tiramisu, so they are launched the same way, but it offers more features compared to Tiramisu.

In order to use services like Pretendo, you will need Aroma, as they have ended support for Tiramisu.

Please note that the Homebrew Launcher is no longer used on Aroma.

==Instructions==
<tabber>
|-|AromaUpdater=


===Section I: Getting Aroma===
# Download the latest release of the [https://github.com/wiiu-env/AromaUpdater/releases AromaUpdater] (the Tiramisu release).
# Extract and copy the <code>wiiu</code> folder to the root of your SD Card.
# Insert the SD Card into the Wii U and boot into Tiramisu.
# Launch Mii Maker to launch the Homebrew Launcher, and then load the AromaUpdater.
# Tick whatever additional plugins/modules you may want. Just the default selected (EnvironmentLoader and Base-Aroma) is also fine.
# Press + (Plus) to start the installation.
# Once finished, press A to reboot the console.



|-|Manually=


===Section I: Getting Aroma===
# Go to the [https://aroma.foryour.cafe/ Aroma] site and scroll down:
#* Read through and click on the checkboxes.
#* Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>
# Extract and copy both of the <code>wiiu</code> folders from the two zips to the root of your SD Card.
#* If your computer asks you to overwrite existing files on your SD Card, you will need to click "Yes". If you are on a Mac, you will need to click "Merge" for folders.
# Insert the SD Card into the Wii U and boot it up.



</tabber>

===Section II: Booting Aroma===
# Launch the Environment Loader:
#*If you coldboot Tiramisu, hold X while the console is booting to get there.
#*If you didn't coldboot Tiramisu, hold X while launching Health and Safety.
# Clear Tiramisu as the default environment by pressing X.
# Select Aroma and press Y to set it as the new default environment, then press A.
# The Boot Selector will show. Press Y on the Wii U Menu as previously done and press A.
# Once you finally boot into the Wii U Menu, you will see apps on your home screen, and have successfully switched to Aroma. Congrats!
#* Although Tiramisu is outdated, you don't need to delete it. If you still decide to use Tiramisu in the future, for legacy homebrew purposes, just launch the EnvironmentLoader again to select it.
Continue to [[wiiuguide:aroma/finalizing-setup|Finalizing Setup]]

Wii U:Moving from Tiramisu to Aroma

2024-04-15T22:06:14Z

Lazr: Add note about replacing/merging files

Tiramisu has been replaced by Aroma, therefore making it outdated and not supported anymore. This guide will show you how to move from Tiramisu to Aroma.

Aroma is an environment like Tiramisu, so they are launched the same way, but it offers more features compared to Tiramisu.

In order to use services like Pretendo, you will need Aroma, as they have ended support for Tiramisu.

==Instructions==
===Section I: Getting Aroma===
# Go to the [https://aroma.foryour.cafe/ Aroma] site and scroll down:
#* Read through and click on the checkboxes.
#* Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>
# Extract and copy both of the <code>wiiu</code> folders from the two zips to the root of your SD Card.
#* If your computer asks you to overwrite existing files on your SD Card, you will need to click "Yes". If you are on a Mac, you will need to click "Merge" for folders.
# Insert the SD Card into the Wii U and boot it up.
===Section II: Booting Aroma===
# Launch the Environment Loader:
#*If you coldboot Tiramisu, hold X while the console is booting to get there.
#*If you didn't coldboot Tiramisu, hold X while launching Health and Safety.
# Clear Tiramisu as the default environment by pressing X.
# Select Aroma and press Y to set it as the new default environment, then press A.
# The Boot Selector will show. Press Y on the Wii U Menu as previously done and press A.
# Once you finally boot into the Wii U Menu, you will see apps on your home screen, and have successfully switched to Aroma. Congrats!
#* Although Tiramisu is outdated, you don't need to delete it. If you still decide to use Tiramisu in the future, for legacy homebrew purposes, just launch the EnvironmentLoader again to select it.

Continue to [[wiiuguide:aroma/finalizing-setup|Finalizing Setup]]

Wii U:Moving from Tiramisu to Aroma

2024-04-15T21:59:48Z

Lazr: hopefully make things better

Wii U:How to remove NNIDs

2024-04-14T21:50:57Z

Lazr: Make instructions correct + punctuation

If you have recently bought a Wii U and find yourself with an account or two that is password locked, this is how you can delete them without acquiring the passcode.

==Instructions==

# Download the latest release of [https://github.com/wiiu-env/ftpiiu_plugin/releases FTPiiU].
# Extract the <code>ftpiiu.wps</code> from the zip to <code>sd:/wiiu/environments/aroma/plugins</code> folder on your SD Card.
# Download an FTP client of your choice(Filezilla, WinSCP, etc).
# Insert the SD card back into your Wii U and boot up Aroma.
# Open the plugin menu, navigate to the FTPiiU tab and your IP should show.
#* Take note of this, you will need it later.
#Set system files access to true.
#Boot up your preferred FTP client.
#* Your console and PC must be on the same network.
# Input your IP address, leaving the port blank, then hit connect.
#You should see a list of directories.
#Navigate to <code/>storage_mlc/usr/save/system/act</code> and There should be either one or multiple 800000X folders. These are the accounts.
# Open one and you will find an account.dat file. drag this file to your desktop and open it in notepad as this will tell you whose account it belongs to.
#Once you've figured it out, delete the entire folder or folders.
#Disconnect the client and then shut down the console(do not force power off).
#Boot up the Wii U again, and if done successfully, the account(s) should be gone.

Wii U:SaveMii WUT Port

2024-03-20T16:46:00Z

Lazr: Link the latest version

{{Infobox homebrew
| developers = DaThinkingChair
| forwiiu = 1
| image = SaveMiiLogo.png
| imagealt = Logo for SaveMii
| imagesize = 256px
| version = 1.5.9
| releasedate = 2023-06-25
| website = https://gbatemp.net/threads/release-savemii-wut-port-wii-u-vwii-savefile-manager.608824/ gbatemp.net/threads/608824
| github = Xpl0itU/savemii
| githubtag = 1.5.9
}}

'''SaveMii''' is a save manager for the Wii U. You can use it to dump or inject saves from Wii U and vWii games. It was originally made by Ryuzaki-MrL but has been forked and improved by Xpl0itU/DaThinkingChair.

== Installation ==

</noinclude>
<tabber>

|-|Tiramisu=


#[https://github.com/Xpl0itU/savemii/releases/ Download] the latest release of the SaveMii WUT Port-HBL
#Extract it and drag the <code>SaveMiiModWUTPort</code> folder into the <code>wiiu/apps</code> folder.


|-|Aroma=


#[https://github.com/Xpl0itU/savemii/releases Download] the latest release of the of SaveMii WUT Port-Aroma.
#Extract Copy the file <code>savemii.wuhb</code> into <code>sd:/wiiu/apps</code>


</tabber>

== Usage ==

When opening the app, you will be met with a blue screen that says Wii U Save Management and vWii Save Management. Select whichever one you want to manage for and you will be met with another screen that has all your titles.

===Backing Up Saves===

#Select whichever you game want with the <code>A</code> button.
#Select <code>Backup savedata</code> and select any empty slot. It goes up to 255.
#Select which users save data to back up. If it says you have a common save, say yes to backing it up.
#You will be brought to a black screen where it will begin backing the save up. This shouldn't take to long.
#Once it is done, on inside of the <code>wiiu</code> folder there will be a folder named <code>backups</code> and inside of this folder, there will be another folder with the title ID of your game. An easy way to know what game is what is to remember the last four digits in the ID.
#Inside of the ID there will be another folder with the name of the slot you choose. Inside of there, there will be an 8 digit folder. That contains your save file. If you choose to dump the common, it will also be there.

===Injecting Saves===

#Inside of the <code>backups</code> folder create a new folder with the ID of the game you're trying to inject. You can find them [http://wiiubrew.org/wiki/Title_database here].
#Inside of the ID create a new folder that is any number between 0 - 255. Put the save inside of here.
#You can eject the SD card and move to your Wii U.
#Reopen SaveMii and select the game you're injecting the save file into.
#Press <code>A</code> and select <code>Wipe savedata</code> and select which user to delete the save from.
#You will be prompted to backup your current savedata, choose if you want to or not.
# When that is complete, select <code>Restore savedata</code>. Select the slot you chose.
#For the <code>Select SD user to copy from</code> make it whatever the save was called.
#For <code>Select Wii U user to copy to</code> make it whichever user you want to have the save.
# For the <code>Include 'common save'</code> select yes or no depending on if you have one.
#Press <code>A</code> to inject the save. Once this is done you can exit the application.

===Injecting Saves to a Different User===
# Select a game you'd like to transfer a save to.
#Press <code>Backup Savedata</code>, select a slot, then select a user.
#Now press <code>Restore Savedata</code>, select the slot and which user to copy from.
#Then select the target user you want the save restored to.
#Once it's done, exit SaveMii and check if the save was successfully restored in Data Management from system settings.
#If all went well, the save will now belong to the other user. Boot up the game and your save will be there.

===Injecting VC Saves===
{{warning|text=Wii U VC games use suspend and restore points. Trying to simply restore a save from another console or emulator will not work for some games due to the suspend point automatically overwriting the save. This will show you how to get them to work.}}

#Extract your VC save from an emulator or console. It needs to be in a <code>.sav</code> format, so if it isn't, find a way to convert it.
#Boot up SaveMii.
#Navigate to the game of choice, then hit <code>Wipe Savedata</code>, selecting the desired user to delete from.
#Exit Savemii, and boot up the game to create the save data.
#While the game is still running, force power off the console. This prevents the suspend point from being created.
#Power the console back on and boot into SaveMii again.
#Find the game and backup the save.
#Exit SaveMii, remove the SD card and move it to your PC.
#Locate the save directory by navigating to <code>wiiu/backups/TitleID/Slot/80000008/</code>
#You usually would find a few files like .rs1 or .rs2, which are the restore and suspend points. One will not be there. The file we're looking for is the <code>GameID.sav</code>.
#Rename the .sav you dumped from another source to the Game ID of the save.
#Drag and drop, replacing the save when asked.
#Eject your SD card and Insert it back into your Wii U.
#Load SaveMii and navigate to the game to restore the save to the User you wish.
#Exit SaveMii, and boot up the game to test the save. You should now be able to use your save!

Wii U:Alternate Exploits/DNSpresso

2024-01-18T02:08:46Z

Lazr: Make the SD Tree look good

{{Info|text=DNSpresso is an exploit that takes advantage of a vulnerability in the Wii U's DNS response parsing. This should be used if BrowserHax is not possible for whatever reason.}}

===What you need===

*The latest Aroma files from [https://aroma.foryour.cafe/ Aroma for your café].
**Scroll down to the <nowiki>'''Download'''</nowiki> section.
**Read through the steps and click on the check boxes.
**Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>
*The newest release of [https://github.com/wiiu-env/PayloadFromRPX/releases/tag/v0.1 PayloadFromRPX].

===Instructions===

====Section I: SD Card Prep====
#Extract and merge the contents of the newly downloaded Aroma <code>.zip</code> folders to the root of your SD card. You should now have a single <code>wiiu</code> folder on the root.
#Extract the contents of the PayloadFromRPX <code>.zip</code> file to the root of your SD card and rename the file to <code>launch.rpx</code> .

Your SD cards root should now look like this:
{{Tree list}}

*[[File:Gnome-media-flash.svg|20px|link=]] (root)
**[[File:Icons8 flat opened folder.svg|20px|link=]] wiiu
**[[File:Icons8 flat file.svg|20px|link=]] '''launch.rpx'''

{{Tree list/end}}

====Section II: Running the Exploit====

#Insert your SD card into your Wii U and power it on.
#Open <code>Settings</code> > <code>Internet</code> > <code>Connections</code> and setup a new connection.
#Once created, click on your new connection and select <code>Change Settings</code> > <code>DNS</code> and set it to <code>Don't Auto-obtain</code>.
#Enter in your primary DNS as: <code>85.215.57.182</code> and click Confirm.
#Click <code>Back</code> initiating a connection test when prompted. Hold B when you see the DNSpresso Splash screen.

====Section III: Making a NAND Backup====

#Navigate to <code>nanddumper</code> using the GamePad and press A to launch it.
#Use the Wii U GamePad's D-Pad to enter the following configuration:
#*Dump SLC: '''yes'''
#*Dump SLCCMPT: '''yes'''
#*Dump MLC: '''optional'''
#*Dump OTP: '''yes'''
#*Dump SEEPROM: '''yes'''
#Press the A button to start the dumping process.
#When the process completed, power off your Wii U, take your SD Card out of the Wii U and plug it into your PC.
#The files will appear on the root of the SD card.
#To make sure you don't lose the files, copy the <code>slc.bin</code>, <code>slccmpt.bin</code>, <code>seeprom.bin</code>, <code>otp.bin</code> (and if you chose to go with a full backup, <code>every mlc.bin.part</code>) file to your computer.
#Delete the files from your SD Card to free up space.

====Section IV: Installing PayloadLoader====

#Take the SD Card out of your PC and plug it into your Wii U.
#Launch <code>Settings</code> > <code>Internet</code> > <code>Connect to the Internet</code> > <code>Connections</code>
#Click on the network you previously selected and initiate a connection test.
#This time, when you see the DNSpresso splash screen hold X.
#When a blue screen pops up, use the GamePad to navigate to <code>Aroma</code> and press A to launch the environment.
#Navigate to the PayloadLoader Installer on your Aroma home menu and press A to launch it.
#Press the A button to check if you can install the PayloadLoader.
#* It should now tell you that the PayloadLoader can be installed onto the Health and Safety Information app.
#Press the A button to select <code>Install / Update</code>.
#You'll be asked if you are sure you want to install the PayloadLoader. Use the D-Pad to select <code>Install</code> and press A.
#After installing finishes, press A to shut down the console.
{{Success|text=The remainder of the guide is the same. Please continue to Finalizing Setup on the Wii U Hacks Page linked below.}}

Continue to [[wiiuguide:finalizing-setup|Finalizing Setup]]

Wii U:Hardmod unbrick

2023-12-20T09:57:25Z

Lazr: Make credits less cringe

{{ombox|type=speedy|text=This guide is now outdated since there is a software exploit that allows unbricking without soldering! There is a guide for it [https://gbatemp.net/threads/cbhc-unbrick-guide-without-soldering.613371/ here]. UDPIH not work if you somehow deleted OSv10 (00050010-1000400A), so you ''must'' hardmod the system.}}

__TOC__

== Start ==

Hello and welcome to the new and improved <s>freddy fazbears pizza</s> Wii U Unbrick Guide. This Guide only covers the SLC (Wii U).

Usually if you need to restore vWii NAND, there is [https://gbatemp.net/threads/release-vwii-nand-restorer.560948/ vWii NAND Restorer] (Needs backup) or [https://gbatemp.net/threads/vwii-decaffeinator-restore-vwii-without-a-nand-backup.566252/ vWii Decaffenator] (Doesn’t need backup)

Wii U doesnt have something like that yet though. so we have to open up the console and solder some wires to the NAND.

To unbrick the Wii U we will use an Rasberry Pi. I have only ever used an RPi0 but the pinouts should be the same on every RPi. If you want to use a Teensy to unbrick, refer to [https://gbatemp.net/threads/guide-kaflukes-hardmod-cbhc-unbrick-guide.476725/ this guide]

== What you need ==

* An slc.bin dump from ''before'' the brick, or an otp.bin dump.
* A Raspberry Pi and MicroSD for the Raspberry Pi.
* Decent soldering equipment.
* Decent soldering skills.
* Ability to follow instructions.
* A Lot of time.
* A Decent understanding of Linux.
* Last but not least, A Brain.


=== Setting up the software ===

# Set up RPIOS on a MicroSD. (Guide: https://www.raspberrypi.com/documentation/computers/getting-started.html)
# Power on your RPI and connect it to the internet.
# Open up a terminal (<code>CTRL ALT T</code>) and run <code>wget https://raw.githubusercontent.com/Lazr1026/unbrick/main/pinand.sh && chmod +x pinand.sh</code>
# Now run <code>./pinand.sh</code>.


=== Solder the RPI to Wii U board ===

Take apart the Wii U, look up a teardown.

Make sure you are VERY CAREFUL when soldering to these points. one mess up and your console may be dead for good.

Solder Points:

RPI:

[[File:WiiU-hardmod-RPI-pinout.png|600px]]

[[File:WiiU-hardmod-RPI-back.png|600px]]

Wii U Board:

[[File:WiiU-hardmod-RPI-solder.jpg|600px]]

It should look like this when finished.

[[File:WiiU-hardmod-done.png|600px]]


== Fixing the NAND ==

Note: Now depending on what the hell you did, you could be doing something WAY different (ie. only restoring certain pages). We will be flashing back an entire SLC image here.


=== FIXING THE NAND WITH ONLY OTP.BIN ===

Download [https://github.com/koolkdev/wiiuqt/releases/tag/v0.2 Eyekeys NAND Tools] and extract the zip somewhere on your PC.

# Put the Wii U back together enough to get everything plugged in (Disc Drive, Power Button, Fan, Heatsink.)
# Power on the Wii U.
# Turn on the RPI.
# Open up a terminal and run <code>sudo ./pinand 50 read_id</code>, you should get something like this. [[File:WiiU-hardmod-readid.png|600px]]
# Run <code>sudo ./pinand 50 read_full 0 262144 slc.bin</code>.
# Wait for it to finish reading. (DO NOT UNPLUG THE WII U OR RPI.)
# Turn off the Wii U and RPI, insert the RPI’ MicroSD in your PC.
# Copy the <code>slc.bin</code> from <code>sd:/home/[USER]</code> to the NAND Tools folder on your PC. (Hint: Now would be a REALLY good time to copy otp.bin to the folder as well.)
# Open a Command Prompt and run <code>nandCbhcRemover.exe slc.bin</code>. See the next section for flashing the NAND back to the Wii U.

=== FIXING THE NAND WITH ONLY SLC.BIN ===

# Insert the RPI’ MicroSD in your PC.
# Copy <code>slc.bin</code> to <code>sd:/home/[USER]</code>. (OTP Only Users: Click <code>Replace</code> when asked.)
# Insert the RPI’ MicroSD into the RPI.
# Turn on the Wii U.
# Turn on the RPI.
# Open a terminal and type in <code>sudo ./pinand 50 read_id</code>. You should get something like this. [[File:WiiU-hardmod-readid.png|600px]]
# Run <code>sudo ./pinand 50 erase_blocks 0 4096 && sudo ./pinand 50 write_full 0 262144 slc.bin</code>.
# Wait for it to finish, this will take a LONG time (around 2 days for an RPi0). (DO NOT UNPLUG THE WIIU OR THE RPI.)

== After Flashing ==

# Turn off the Wii U.
# Turn off the RPI.
# Put the Wii U back together enough to test if it boots, plug in Disc Drive, Power Button, Fan, Heatsink.
# Turn on the Wii U, connect an HDMI or AV (or if your Gamepad is still paired, that works too).
* If it loads to Wii U Menu, congrats, desolder the wires on the Wii U Board and put the system back together. You have successfully done the RPI Hardmod Method.
* If it does not load to Wii U Menu and Errors, then you did something wrong, or you used the wrong backup. Try Flashing again, or join [https://discord.gg/HNDcTEkcR3 Ivy’s Stuff] and ask for help in <code>#help</code>

== Credits: ==

*[https://github.com/Lazr1026/unbrick] - Created this guide.
*[https://github.com/rw-r-r-0664 rw-r-r-0644] - sending me an edited pinand and fixing it.
*[https://github.com/GaryOderNichts GaryOderNichts], [https://github.com/Nightkingale Nightkingale], and agilly1989 - Emotional support while doing this.
*[https://discord.com/invite/F2PKpEj The 4TU Discord server] - Letting me clog up their wiiu channel over this.
*[https://forums.raspberrypi.com/ RPi Forums] - Having a thread on [https://forums.raspberrypi.com/viewtopic.php?t=16775 Bit-Banging a TSOP NAND.]

[[Category:Wii U guides]]

Wii U:SDCafiine

2023-11-27T06:27:00Z

Lazr: fix whatever the hell the sd tree for tiramisu was

{{Infobox homebrew
| developers = Maschell
| forwiiu = 1
| image = Sdcafiine-icon.png
| imagealt = SDCafiine icon
| imagesize = 256px
| version = v0.1.3
| releasedate = 2023-07-21
| website = https://gbatemp.net/threads/sdcafiine.471360/ gbatemp.net/threads/sdcafiine.471630
| github = wiiu-env/sdcafiine_plugin
| githubtag = v0.1.3
}}

'''SDCafiine''' is a mod manager for the Wii U. It can overwrite textures, audio and much more. It can do mods for any title on the Wii U - including system software for things like [[Wii U:Custom themes|custom themes]] or reinjecting life into Wara Wara Plaza.

== Installation ==

</noinclude>
<tabber>

|-|Tiramisu=


#[https://github.com/Maschell/SDCafiine Download] the latest release of the legacy edition of SDCafiine.
#Extract it and drag the <code>wiiu</code> folder to the root of the SD card and merge it.


|-|Aroma=


#[https://github.com/wiiu-env/sdcafiine_plugin Download] the latest release of SDCafiine.
#Extract and copy the file <code>sdcafiine.wps</code> into <code>sd:/wiiu/environments/aroma/plugins</code>


</tabber>

==Usage==

</noinclude>
<tabber>

|-|Tiramisu=


#Create a folder named <code>sdcafiine</code> on the root of your SD card.
#Find a mod you would like to use. [https://gamebanana.com/ GameBanana] is the best place to get these.
#Find the title ID for your game. You can find it [http://wiiubrew.org/wiki/Title%20database here].
#Create a folder inside of the <code>sdcafiine</code> folder you created earlier with the name being the title ID for whatever game you're modding.
#Create another folder and name it the Modpack name of your choice.
#Drag the <code>content</code> folder of your modpack into the folder you just created.
#If you want multiple mod packs, create a folder inside of the game ID for each mod pack.
#Eject the SD card from the PC and put it in the Wii U and power on. Launch the SDCafiine app in the Homebrew Launcher and launch the game you modded.


|-|Aroma=


#Create a folder named <code>sdcafiine</code> inside the <code>wiiu</code> folder on your SD card.
#Find a mod you would like to use. [https://gamebanana.com/ GameBanana] is the best place to get these.
#Find the title ID for your game. You can find it [http://wiiubrew.org/wiki/Title%20database here].
#Create a folder inside of the <code>wiiu/sdcafiine</code> folder you created earlier with the name being the title ID for whatever game you're modding.
#Create another folder and name it the Modpack name of your choice.
#Drag the <code>content</code> folder of your modpack into the folder you just created.
#If you want multiple mod packs, create a folder inside of the game ID for each mod pack.
#Eject the SD card from the PC and put it in the Wii U and power on. Launch your game of choice and SDCafiine should be automatically launched.


</tabber>

==SD File layout==

</noinclude>
<tabber>

|-|Tiramisu=
{{Tree list}}

* [[File:Gnome-media-flash.svg|20px|link=]] (root)
** [[File:Icons8 flat opened folder.svg|20px|link=]] wiiu
*** [[File:Icons8 flat opened folder.svg|20px|link=]] apps
**** [[File:Icons8 flat opened folder.svg|20px|link=]] SDCafiine
***** [[File:Icons8 flat file.svg|20px|link=]] '''sdcafiine.elf'''
***** [[File:Icons8 flat file.svg|20px|link=]] '''icon.png'''
***** [[File:Icons8 flat file.svg|20px|link=]] '''meta.xml'''
** [[File:Icons8 flat opened folder.svg|20px|link=]] sdcafiine
*** [[File:Icons8 flat opened folder.svg|20px|link=]] (TitleID)
**** [[File:Icons8 flat opened folder.svg|20px|link=]] (ModPack)
***** [[File:Icons8 flat opened folder.svg|20px|link=]] content
{{Tree list}}

|-|Aroma=
{{Tree list}}
* [[File:Gnome-media-flash.svg|20px|link=]] (root)
** [[File:Icons8 flat opened folder.svg|20px|link=]] wiiu
*** [[File:Icons8 flat opened folder.svg|20px|link=]] sdcafiine
**** [[File:Icons8 flat opened folder.svg|20px|link=]] (TitleID)
***** [[File:Icons8 flat opened folder.svg|20px|link=]] (ModPack)
****** [[File:Icons8 flat opened folder.svg|20px|link=]] content
*** [[File:Icons8 flat opened folder.svg|20px|link=]] environments
**** [[File:Icons8 flat opened folder.svg|20px|link=]] aroma
***** [[File:Icons8 flat opened folder.svg|20px|link=]] plugins
****** [[File:Icons8 flat file.svg|20px|link=]] '''sdcafiine.wps'''
***** [[File:Icons8 flat file.svg|20px|link=]] root.rpx
{{Tree list/end}}

</tabber>

Wii U:Common Issues and Fixes

2023-11-14T05:44:39Z

Lazr: make the sd root picture not centered because it looks weird on pc

Running into Issues with homebrew? This page will show you how to troubleshoot errors during the exploit and when using apps.

== Browser errors ==
=== FSGetMountSource failed: Please insert a FAT32 SD Card: ===
No SD Card detected. Re-insert the SD and try again. This could also mean that the SD card is locked (Slider is down instead of up) or the SD card label is "WIIU", which is stated in the guide causes conflict. If it's not any of these issues, try blowing into the slot(not recommended) or use compressed air. Pins may be dusty inside.

=== FSOpenFile failed [...] payload.elf: ===
Missing payload file on SD. Make sure you have payload.elf in the wiiu folder, amd the wiiu folder on the root of the SD card.

=== FSOpenFile failed/-11 after launching Mii Maker: ===
Missing the Homebrew Launcher on the SD card. Make sure you have <code>homebrew_launcher.elf</code> in the <code>sd:/wiiu/apps/homebrew_launcher</code> folder.

=== SD Mount Failed: ===
The console recognizes the SD card but could not mount it. Make sure it is formatted properly. Also, your SD card is more compatible with reputable brands (i.e. SanDisk, Samsung, Lexar, etc.) and less likely to have issues.

== PayloadLoader Errors ==
=== Failed to load SD:/wiiu/payload.elf. Starting console without any modifications: ===
PayloadLoader could not find the payload or it doesn't detect your SD card. Reinsert it properly or try cleaning the slot. If the issue persists, try getting fresh files from the [http://tiramisu.foryour.cafe Tiramisu] or [http://aroma.foryour.cafe Aroma] site, depending on which you use.

== Environment Loader Errors ==

=== Don't run the EnvironmentLoader twice: ===
Happens when you run Health and Safety or through the exploit a second time. The Environment Loader can only be ran one time per boot. If you autoboot into an environment, you do '''not''' need to run Health and Safety. To change environments, hold X on boot (or Start for changing boot titles in the boot selector). If you've launched the Environment Loader already, you must reboot to use it again.

== FAQ ==
=== Data Management asks to delete unnecessary data, what does it mean? ===
This refers to leftover files from incomplete installs. Always choose Yes to delete this data, as it takes up space for no good reason. If it ever stays stuck on deleting the data in an infinite loop, you can manually delete the data yourself.
Use FTPiiU Everywhere or the FTPiiU Plugin and browse to <code>/storage_mlc/usr/import</code> then delete any files in the folder if any exists. This is where the partial installs exist after incomplete installs. It'll be <code>/storage_usb/usr/import</code> if installed to a USB.
The import folder should always be kept empty.

=== My HDD doesn't work or makes a weird clicking sound, what should I do? ===
The reason behind that is that the Wii U doesn't give enough power through one USB port to use the Hard Drive.

You can fix this by either using a powered HDD or using a Y-Cable to connect the HDD to two USB ports.

If your HDD worked for some time and then stopped working for some games/all games, it is the same issue and can be fixed with the same methods.

=== When extracting some of the files there are duplicates of certain ones called <code>info.json</code> & <code>manifest.install</code>, what do I do with those? ===
Nothing special, you can leave them there, delete them or replace them with new ones. Those files are not used in the process, therefore, won't have any impact by being or not being there.

=== My console suddenly lost online connectivity and I have an HDD sitting on top of the console, what should I do? ===
The internal antenna may have been influenced by the hard drive magnet.
You can move the HDD to a different position atop the Wii U, or move it off the Wii U entirely.

=== Guide says to extract the contents to the root, but where is the root? ===
[[File:Whatisroot.jpg|512px]]

=== I put the extracted zip onto the root and the exploit won't work. ===
If you have <code>environmentloader-28332a7+wiiu-nanddumper-payload-5c5ec09+fw_img_loader-c2da326</code> as a folder on the root, you have extracted it wrong. You have to extract the <code>wiiu</code> folder out of that folder to the root. That folder doesn't even belong on the SD card. Contents of the zip = wiiu folder.

Wii:Hardmod unbrick

2023-11-14T05:43:54Z

Lazr: yeet

Wii:Hardmod unbrick

2023-11-14T05:43:30Z

Lazr:

=== Guide says to extract the contents to the root, but where is the root? ===
[[File:Whatisroot.jpg|512px|center]]

=== Guide says to extract the contents to the root, but where is the root? ===
[[File:Whatisroot.jpg|810px]]

Wii:Hardmod unbrick

2023-11-14T05:41:02Z

Lazr: sandboxing

Wii U:Common Issues and Fixes

2023-11-14T05:31:04Z

Lazr: Make thing look good

Running into Issues with homebrew? This page will show you how to troubleshoot errors during the exploit and when using apps.

== Browser errors ==
=== FSGetMountSource failed: Please insert a FAT32 SD Card: ===
No SD Card detected. Re-insert the SD and try again. This could also mean that the SD card is locked (Slider is down instead of up) or the SD card label is "WIIU", which is stated in the guide causes conflict. If it's not any of these issues, try blowing into the slot(not recommended) or use compressed air. Pins may be dusty inside.

=== FSOpenFile failed [...] payload.elf: ===
Missing payload file on SD. Make sure you have payload.elf in the wiiu folder, amd the wiiu folder on the root of the SD card.

=== FSOpenFile failed/-11 after launching Mii Maker: ===
Missing the Homebrew Launcher on the SD card. Make sure you have <code>homebrew_launcher.elf</code> in the <code>sd:/wiiu/apps/homebrew_launcher</code> folder.

=== SD Mount Failed: ===
The console recognizes the SD card but could not mount it. Make sure it is formatted properly. Also, your SD card is more compatible with reputable brands (i.e. SanDisk, Samsung, Lexar, etc.) and less likely to have issues.

== PayloadLoader Errors ==
=== Failed to load SD:/wiiu/payload.elf. Starting console without any modifications: ===
PayloadLoader could not find the payload or it doesn't detect your SD card. Reinsert it properly or try cleaning the slot. If the issue persists, try getting fresh files from the [http://tiramisu.foryour.cafe Tiramisu] or [http://aroma.foryour.cafe Aroma] site, depending on which you use.

== Environment Loader Errors ==

=== Don't run the EnvironmentLoader twice: ===
Happens when you run Health and Safety or through the exploit a second time. The Environment Loader can only be ran one time per boot. If you autoboot into an environment, you do '''not''' need to run Health and Safety. To change environments, hold X on boot (or Start for changing boot titles in the boot selector). If you've launched the Environment Loader already, you must reboot to use it again.

== FAQ ==
=== Data Management asks to delete unnecessary data, what does it mean? ===
This refers to leftover files from incomplete installs. Always choose Yes to delete this data, as it takes up space for no good reason. If it ever stays stuck on deleting the data in an infinite loop, you can manually delete the data yourself.
Use FTPiiU Everywhere or the FTPiiU Plugin and browse to <code>/storage_mlc/usr/import</code> then delete any files in the folder if any exists. This is where the partial installs exist after incomplete installs. It'll be <code>/storage_usb/usr/import</code> if installed to a USB.
The import folder should always be kept empty.

=== My HDD doesn't work or makes a weird clicking sound, what should I do? ===
The reason behind that is that the Wii U doesn't give enough power through one USB port to use the Hard Drive.

You can fix this by either using a powered HDD or using a Y-Cable to connect the HDD to two USB ports.

If your HDD worked for some time and then stopped working for some games/all games, it is the same issue and can be fixed with the same methods.

=== When extracting some of the files there are duplicates of certain ones called <code>info.json</code> & <code>manifest.install</code>, what do I do with those? ===
Nothing special, you can leave them there, delete them or replace them with new ones. Those files are not used in the process, therefore, won't have any impact by being or not being there.

=== My console suddenly lost online connectivity and I have an HDD sitting on top of the console, what should I do? ===
The internal antenna may have been influenced by the hard drive magnet.
You can move the HDD to a different position atop the Wii U, or move it off the Wii U entirely.

=== Guide says to extract the contents to the root, but where is the root? ===
[[File:Whatisroot.jpg|512px|center]]

=== I put the extracted zip onto the root and the exploit won't work. ===
If you have <code>environmentloader-28332a7+wiiu-nanddumper-payload-5c5ec09+fw_img_loader-c2da326</code> as a folder on the root, you have extracted it wrong. You have to extract the <code>wiiu</code> folder out of that folder to the root. That folder doesn't even belong on the SD card. Contents of the zip = wiiu folder.

Wii U talk:Common Issues and Fixes

2023-11-13T07:35:31Z

Lazr:

== The hypocrisy is real ==

"try blowing into the slot or use compressed air." [[User:Panencakes|Panencakes]] ([[User talk:Panencakes|talk]]) 07:34, 13 November 2023 (UTC)

can you go away i thought you didnt want to be a part of the community anymore

Wii U:Alternate Exploits/Bluubomb

2023-11-03T04:04:46Z

Lazr: forgot to make "contents" bold

== Installing PayloadLoader with Bluubomb ==

You should really only follow this if you were redirected here due to unable to use the browser for some reason.

Notes:
* BluuBomb requires Linux. It's easiest in an Ubuntu VM.
* You will need a compatible Bluetooth adapter so keep that in mind (In my experience Realtek adapters do not work, although they should be supported.)

=== What you need ===
# BluuBomb
# [https://aroma.foryour.cafe Aroma]
#* Scroll down to the '''Download''' section.
#* Read through the steps and click on the checkboxes.
#* Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>.

=== SD Prep ===
# Copy the '''contents''' of the Aroma <code>.zip</code> files to the root of the SD Card.
# Copy the <code>root.rpx</code> file from the <code>sd:/wiiu/environments</code> folder to root of the SD Card, and rename to <code>launch.rpx</code>.
#** Also create a file called <code>autoboot.cfg</code> in <code>sd:/wiiu/environments/aroma</code>, insert <code>wiiu_menu</code> into it, and save the file.
# Insert the SD Card into the Wii U.

=== Setting up and using BluuBomb ===
Follow [[/Setup | this]] to set up BluuBomb.

=== Installing the PayloadLoader into Health and Safety ===
# Launch the PayloadLoader Installer from the Wii U Menu.
# Press A to select `Check`.
# Press A on `Install / Update`.
# You’ll be asked if you are sure you want to install the PayloadLoader. Use the D-Pad to select `Install` and press A.
# Press A to shut down the console.

=== NAND Backup ===
{{Warning|A NAND Backup cannot be done without a GamePad. Please get a GamePad ASAP to perform a NAND Backup..}}
# Load the the Health and Safety application while holding B.
# Navigate to <code>nanddumper</code> and press A.
# Make the settings look like this and then press A. MLC is optional as it is the biggest part of the NAND Backup (8gb or 32gb depending on your model).
#* SLC: Yes
#* SLCCMPT: Yes
#* MLC: Optional
#* OTP: Yes
#* SEEPROM: Yes
# Wait for it to finish. It may take a few hours if you opted to dump MLC.
# To make sure you don’t lose the files, copy the <code>slc.bin</code>, <code>slccmpt.bin</code>, <code>seeprom.bin</code>, <code>otp.bin</code> and if you chose to go with a full backup, every <code>mlc.bin.part</code> file to your computer.
# Delete the files to free up space on the SD Card.

=== Autobooting PayloadLoader ===
# Start the console to boot into the Wii U Menu, launch the Health and Safety Information app.
# Navigate the list using the D-Pad and navigate to the <code>aroma</code> environment, press A to launch it.
# Select <code>Wii U Menu</code>.
# Back at the Wii U Menu, launch the PayloadLoader Installer.
# Press A to select <code>Check</code>.
# Select <code>Boot Options</code>.
# You will be asked if you want to switch the boot title. Press A to select <code>Switch to PayloadLoader</code>.
# When the process finished, press A to shutdown the console.
# The PayloadLoader will now be launched automatically on every boot.

=== Finalizing Setup ===
It is now a good idea to finalize your PayloadLoader installation. You can find a guide on this [[wiiuguide:aroma/finalizing-setup | here]].

Wii U:Alternate Exploits/Bluubomb

2023-11-03T03:25:32Z

Lazr: i forgot EL has bluetooth controller support

== Installing PayloadLoader with Bluubomb ==

You should really only follow this if you were redirected here due to unable to use the browser for some reason.

Notes:
* BluuBomb requires Linux. It's easiest in an Ubuntu VM.
* You will need a compatible Bluetooth adapter so keep that in mind (In my experience Realtek adapters do not work, although they should be supported.)

=== What you need ===
# BluuBomb
# [https://aroma.foryour.cafe Aroma]
#* Scroll down to the '''Download''' section.
#* Read through the steps and click on the checkboxes.
#* Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>.

=== SD Prep ===
# Copy the **contents** of the Aroma <code>.zip</code> files to the root of the SD Card.
# Copy the <code>root.rpx</code> file from the <code>sd:/wiiu/environments</code> folder to root of the SD Card, and rename to <code>launch.rpx</code>.
#** Also create a file called <code>autoboot.cfg</code> in <code>sd:/wiiu/environments/aroma</code>, insert <code>wiiu_menu</code> into it, and save the file.
# Insert the SD Card into the Wii U.

=== Setting up and using BluuBomb ===
Follow [[/Setup | this]] to set up BluuBomb.

=== Installing the PayloadLoader into Health and Safety ===
# Launch the PayloadLoader Installer from the Wii U Menu.
# Press A to select `Check`.
# Press A on `Install / Update`.
# You’ll be asked if you are sure you want to install the PayloadLoader. Use the D-Pad to select `Install` and press A.
# Press A to shut down the console.

=== NAND Backup ===
{{Warning|A NAND Backup cannot be done without a GamePad. Please get a GamePad ASAP to perform a NAND Backup..}}
# Load the the Health and Safety application while holding B.
# Navigate to <code>nanddumper</code> and press A.
# Make the settings look like this and then press A. MLC is optional as it is the biggest part of the NAND Backup (8gb or 32gb depending on your model).
#* SLC: Yes
#* SLCCMPT: Yes
#* MLC: Optional
#* OTP: Yes
#* SEEPROM: Yes
# Wait for it to finish. It may take a few hours if you opted to dump MLC.
# To make sure you don’t lose the files, copy the <code>slc.bin</code>, <code>slccmpt.bin</code>, <code>seeprom.bin</code>, <code>otp.bin</code> and if you chose to go with a full backup, every <code>mlc.bin.part</code> file to your computer.
# Delete the files to free up space on the SD Card.

=== Autobooting PayloadLoader ===
# Start the console to boot into the Wii U Menu, launch the Health and Safety Information app.
# Navigate the list using the D-Pad and navigate to the <code>aroma</code> environment, press A to launch it.
# Select <code>Wii U Menu</code>.
# Back at the Wii U Menu, launch the PayloadLoader Installer.
# Press A to select <code>Check</code>.
# Select <code>Boot Options</code>.
# You will be asked if you want to switch the boot title. Press A to select <code>Switch to PayloadLoader</code>.
# When the process finished, press A to shutdown the console.
# The PayloadLoader will now be launched automatically on every boot.

=== Finalizing Setup ===
It is now a good idea to finalize your PayloadLoader installation. You can find a guide on this [[wiiuguide:aroma/finalizing-setup | here]].

Wii U:Alternate Exploits

2023-11-03T03:24:29Z

Lazr: udpih doesnt need a gamepad

A list of alternate exploits for the Wii U, because yes, exploits other than JSTypeHax exist. These should only be used if Mii Maker or the Internet Browser are not working for some reason (e.g. eMMC corruption).

{| class="wikitable"
|+
!Method Name
!Requirements
|-
|[[/Bluubomb | Bluubomb]]
|
* Doesn't require a Gamepad.
* A PC that has Bluetooth.
* Some knowledge on how to use Linux.
* Not recommended, a massive pain to set up.
|-
|[[/UDPIH | UDPIH]]
|
* A Raspberry Pi Zero/Pico, or a hacked Nintendo Switch.
* Doesn't require a Gamepad.
|-
|[[/DNSpresso | DNSpresso]]
|
* A working System Settings
* An internet connection
|}

Wii U:Alternate Exploits

2023-11-03T03:23:08Z

Lazr: UDPIH has a wiki page now

A list of alternate exploits for the Wii U, because yes, exploits other than JSTypeHax exist. These should only be used if Mii Maker or the Internet Browser are not working for some reason (e.g. eMMC corruption).

{| class="wikitable"
|+
!Method Name
!Requirements
|-
|[[/Bluubomb | Bluubomb]]
|
* Doesn't require a Gamepad
* A PC that has Bluetooth
* Some knowledge on how to use Linux
* Not recommended, a massive pain to set up
|-
|[[/UDPIH | UDPIH]]
|
* A Raspberry Pi Zero/Pico, or a hacked Nintendo Switch.
|-
|[[/DNSpresso | DNSpresso]]
|
* A working System Settings
* An internet connection
|}

Wii U:Alternate Exploits/UDPIH

2023-11-03T03:22:29Z

Lazr: UDPIH is now real

You should really only follow this if you were redirected here due to unable to use the browser for some reason.

=== What you need ===
* An UDPIH device such as a [https://github.com/GaryOderNichts/udpih#instructions Raspberry Pi Zero/Pico] (or any RP2040 device), or a [https://github.com/GaryOderNichts/udpih_nxpayload#instructions hacked Nintendo Switch] (Unpatched or Chipped).
* [https://aroma.foryour.cafe Aroma]
** Scroll down to the '''Download''' section.
** Read through the steps and click on the checkboxes.
** Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>.
* [[Media:recovery_menu.zip | LoadRPX UDPIH Payload]] ([https://github.com/GaryOderNichts/udpih_payloads/ Source]).
* The latest release of the [https://github.com/wiiu-env/PayloadLoaderInstaller/releases PayloadLoader Installer].

=== SD Prep ===
# Copy the contents of the downloaded Aroma <code>.zip</code> files to the root of your SD Card.
# Copy the <code>recovery_menu</code> file from the <code>recovery_menu.zip</code> to the root of your SD Card.
# Copy the <code>PayloadLoader Installer.wuhb</code> from the PayloadLoader Installer <code>.zip</code> to <code>sd:/wiiu/apps</code> on your SD Card.
# Copy the <code>root.rpx</code> file from <code>sd:/wiiu/environments/aroma</code> to root of the SD Card, and rename to <code>launch.rpx</code>.
# Insert the SD Card into the Wii U.

=== UDPIH ===
# Shut off your Wii U, if it was on.
# Unplug the Wii U from power, and then replug it.
# Power on your Wii U.
# As soon as you see the Wii U logo, plug in your UDPIH device.
# Load any application. You should now see the EnvironmentLoader.
# Navigate to and select the <code>aroma</code> environment.
# Select <code>Wii U Menu</code>.
# At the Wii U Menu, launch the PayloadLoader Installer.
# Press A to <code>Check</code>.
# Press A on <code>Install / Update</code>.
# You’ll be asked if you are sure you want to install the PayloadLoader. Use the D-Pad to select <code>Install</code> and press A.
# Press A to shut down the console.

=== NAND Backup ===
{{Warning|A NAND Backup cannot be done without a GamePad. Please get a GamePad ASAP to perform a NAND Backup.}}
# Power on the console.
# Launch the Health and Safety application while holding B.
# Select <code>nanddumper</code>.
# Make the settings look like this and then press A. MLC is optional as it is the biggest part of the NAND Backup (8gb or 32gb depending on your model).
#* SLC: Yes
#* SLCCMPT: Yes
#* MLC: Optional
#* OTP: Yes
#* SEEPROM: Yes
# Wait for it to finish. It may take a few hours if you opted to dump MLC.
# To make sure you don’t lose the files, copy the <code>slc.bin</code>, <code>slccmpt.bin</code>, <code>seeprom.bin</code>, <code>otp.bin</code> and if you chose to go with a full backup, every <code>mlc.bin.part</code> file to your computer.
# Delete the files to free up space on the SD Card.

=== Autobooting PayloadLoader ===
{{info|This section is optional. If you do not want to autoboot into the PayloadLoader, then skip to [[wiiuguide:aroma/finalizing-setup | Finalizing Setup]].}}
# Start the console to boot into the Wii U Menu, launch the Health and Safety Information app.
# Navigate the list using the D-Pad and navigate to the <code>aroma</code> environment, press A to launch it.
# Select <code>Wii U Menu</code>.
# At the Wii U Menu, launch the PayloadLoader Installer.
# Press A to select <code>Check</code>.
# Select <code>Boot Options</code>.
# You will be asked if you want to switch the boot title. Press A to select <code>Switch to PayloadLoader</code>.
# When the process finished, press A to shutdown the console.
# The PayloadLoader will now be launched automatically on every boot.

=== Finalizing Setup ===
The main guide already has a page for this. You can find it [[wiiuguide:aroma/finalizing-setup | here]]

File:Recovery menu.zip

2023-11-03T02:47:13Z

Lazr: LoadRPX UDPIH Payload

== Summary ==
LoadRPX UDPIH Payload

File:Recovery menu.bin

2023-11-03T02:45:21Z

Lazr: LoadRPX UDPIH Payload

== Summary ==
LoadRPX UDPIH Payload

Wii U:Alternate Exploits

2023-11-03T02:30:03Z

Lazr: bluubomb wiki page is real

A list of alternate exploits for the Wii U, because yes, exploits other than JSTypeHax exist. These should only be used if Mii Maker or the Internet Browser are not working for some reason (e.g. eMMC corruption).

{| class="wikitable"
|+
!Method Name
!Requirements
|-
|[[/Bluubomb | Bluubomb]]
|
* Doesn't require a Gamepad
* A PC that has Bluetooth
* Some knowledge on how to use Linux
* Not recommended, a massive pain to set up
|-
|[https://lazr1026.github.io/tudpih UDPIH]
|
* A Raspberry Pi Zero/Pico, or a hacked Nintendo Switch.
|-
|[[/DNSpresso | DNSpresso]]
|
* A working System Settings
* An internet connection
|}

Wii U:Alternate Exploits/Bluubomb

2023-11-03T02:28:20Z

Lazr: markdown codeblocks aren't mediawiki codeblocks unfortunately

== Installing PayloadLoader with Bluubomb ==

You should really only follow this if you were redirected here due to unable to use the browser for some reason.

Notes:
* BluuBomb requires Linux. It's easiest in an Ubuntu VM.
* You will need a compatible Bluetooth adapter so keep that in mind (In my experience Realtek adapters do not work, although they should be supported.)

=== What you need ===
# BluuBomb
# [https://aroma.foryour.cafe Aroma]
#* Scroll down to the '''Download''' section.
#* Read through the steps and click on the checkboxes.
#* Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>.

=== SD Prep ===
# Copy the **contents** of the Aroma <code>.zip</code> files to the root of the SD Card.
# Copy the <code>root.rpx</code> file from the <code>sd:/wiiu/environments</code> folder to root of the SD Card, and rename to <code>launch.rpx</code>.
#* If you do not have a Gamepad, create a file named <code>default.cfg</code> in <code>sd:/wiiu/environments</code>, insert <code>aroma</code> into it, and save the file.
#** Also create a file called <code>autoboot.cfg</code> in <code>sd:/wiiu/environments/aroma</code>, insert <code>wiiu_menu</code> into it, and save the file.
# Insert the SD Card into the Wii U.

=== Setting up and using BluuBomb ===
Follow [[/Setup | this]] to set up BluuBomb.

=== Installing the PayloadLoader into Health and Safety ===
# Launch the PayloadLoader Installer from the Wii U Menu.
# Press A to select `Check`.
# Press A on `Install / Update`.
# You’ll be asked if you are sure you want to install the PayloadLoader. Use the D-Pad to select `Install` and press A.
# Press A to shut down the console.

=== NAND Backup ===
{{Warning|A NAND Backup cannot be done without a GamePad. Please get a GamePad ASAP to perform a NAND Backup..}}
# Load the the Health and Safety application while holding B.
# Navigate to <code>nanddumper</code> and press A.
# Make the settings look like this and then press A. MLC is optional as it is the biggest part of the NAND Backup (8gb or 32gb depending on your model).
#* SLC: Yes
#* SLCCMPT: Yes
#* MLC: Optional
#* OTP: Yes
#* SEEPROM: Yes
# Wait for it to finish. It may take a few hours if you opted to dump MLC.
# To make sure you don’t lose the files, copy the <code>slc.bin</code>, <code>slccmpt.bin</code>, <code>seeprom.bin</code>, <code>otp.bin</code> and if you chose to go with a full backup, every <code>mlc.bin.part</code> file to your computer.
# Delete the files to free up space on the SD Card.

=== Autobooting PayloadLoader ===
# Start the console to boot into the Wii U Menu, launch the Health and Safety Information app.
#* If you have a Gamepad, hold the X button to open the Environment Loader menu.
# Navigate the list using the D-Pad and navigate to the <code>aroma</code> environment, press A to launch it.
#* You will get sent directly to the Wii U Menu if you created the <code>default.cfg</code> and <code>autoboot.cfg</code> in the previous steps.
# Back at the Wii U Menu, launch the PayloadLoader Installer.
# Press A to select <code>Check</code>.
# Select <code>Boot Options</code>.
# You will be asked if you want to switch the boot title. Press A to select <code>Switch to PayloadLoader</code>.
# When the process finished, press A to shutdown the console.
# The PayloadLoader will now be launched automatically on every boot.

=== Finalizing Setup ===
It is now a good idea to finalize your PayloadLoader installation. You can find a guide on this [[wiiuguide:aroma/finalizing-setup | here]].

Wii U:Alternate Exploits/Bluubomb/Setup

2023-11-03T02:26:38Z

Lazr: Bluubomb setup

I'm ngl this was mostly just copied from the Bluubomb GitHub but it was wanted to be in a more 'centralized' area.

Do note these instructions assume a Debian-based system.

=== How to set up and use Bluubomb ===

# Run <code>sudo apt install build-essential libbluetooth-dev libglib2.0-dev libdbus-1-dev git</code> to install the required dependencies.
# Run <code>git clone https://github.com/rnconrad/WiimoteEmulator && cd WiimoteEmulator</code>.
# Run <code>source ./build-custom.sh</code> to build BlueZ.
#* Don't worry if building the emulator itself fails due to missing SDL headers. Just continue with the next steps.
# Stop the already running bluetooth service <code>sudo systemctl disable --now bluetooth</code>.
# Run the custom built bluetoothd <code>sudo ./bluez-4.101/dist/sbin/bluetoothd -d -n</code>.
# Download the bluubomb binary and the sd_kernels.zip from the [https://github.com/GaryOderNichts/bluubomb/releases releases page].
# Copy <code>loadrpx.bin</code> from <code>sd_kernels.zip</code> to the root of your SD Card and rename it to <code>bluu_kern.bin</code>.
# Power on the Wii U, insert your SD Card and press the sync button. Make sure there are no other controllers (WiiMotes/Pro Controllers) connected.
# Open a new terminal and make the bluubomb file executable by running <code>chmod +x bluubomb</code>.
# Run <code>sudo ./bluubomb</code> and wait for the pairing process to complete.
#* This might take a minute.
#* If you get a warning about Simple Pairing mode read the Simple Pairing mode section below.
# After it has finished sending the data, go to Step 1 on the main page in section Installing the PayloadLoader into Health and Safety.

=== Simple Pairing Mode ===
On some devices the simple pairing mode can't be disabled by bluubomb. 
You can check the current Simple Pairing mode by running <code>hciconfig hci0 sspmode</code>. 
Make sure it says <code>Simple Pairing mode: Disabled</code>. 
If not run <code>sudo hciconfig hci0 sspmode disabled</code> and <code>sudo hciconfig hci0 reset</code>. 
Then check the mode again.

Wii U:Alternate Exploits/Bluubomb

2023-11-03T02:26:30Z

Lazr: Bluubomb is an exploit of all time

== Installing PayloadLoader with Bluubomb ==

You should really only follow this if you were redirected here due to unable to use the browser for some reason.

Notes:
* BluuBomb requires Linux. It's easiest in an Ubuntu VM.
* You will need a compatible Bluetooth adapter so keep that in mind (In my experience Realtek adapters do not work, although they should be supported.)

=== What you need ===
# BluuBomb
# [https://aroma.foryour.cafe Aroma]
#* Scroll down to the '''Download''' section.
#* Read through the steps and click on the checkboxes.
#* Click on <code>Download Payloads</code> and <code>Download Base Aroma</code>.

=== SD Prep ===
# Copy the **contents** of the Aroma <code>.zip</code> files to the root of the SD Card.
# Copy the <code>root.rpx</code> file from the <code>sd:/wiiu/environments</code> folder to root of the SD Card, and rename to <code>launch.rpx</code>.
#* If you do not have a Gamepad, create a file named <code>default.cfg</code> in <code>sd:/wiiu/environments</code>, insert <code>aroma</code> into it, and save the file.
#** Also create a file called <code>autoboot.cfg</code> in <code>sd:/wiiu/environments/aroma</code>, insert <code>wiiu_menu</code> into it, and save the file.
# Insert the SD Card into the Wii U.

=== Setting up and using BluuBomb ===
Follow [[/Setup | this]] to set up BluuBomb.

=== Installing the PayloadLoader into Health and Safety ===
# Launch the PayloadLoader Installer from the Wii U Menu.
# Press A to select `Check`.
# Press A on `Install / Update`.
# You’ll be asked if you are sure you want to install the PayloadLoader. Use the D-Pad to select `Install` and press A.
# Press A to shut down the console.

=== NAND Backup ===
{{Warning|A NAND Backup cannot be done without a GamePad. Please get a GamePad ASAP to perform a NAND Backup..}}
# Load the the Health and Safety application while holding B.
# Navigate to `nanddumper` and press A.
# Make the settings look like this and then press A. MLC is optional as it is the biggest part of the NAND Backup (8gb or 32gb depending on your model).
#* SLC: Yes
#* SLCCMPT: Yes
#* MLC: Optional
#* OTP: Yes
#* SEEPROM: Yes
# Wait for it to finish. It may take a few hours if you opted to dump MLC.
# To make sure you don’t lose the files, copy the <code>slc.bin</code>, <code>slccmpt.bin</code>, <code>seeprom.bin</code>, <code>otp.bin</code> and if you chose to go with a full backup, every <code>mlc.bin.part</code> file to your computer.
# Delete the files to free up space on the SD Card.

=== Autobooting PayloadLoader ===
# Start the console to boot into the Wii U Menu, launch the Health and Safety Information app.
#* If you have a Gamepad, hold the X button to open the Environment Loader menu.
# Navigate the list using the D-Pad and navigate to the <code>aroma</code> environment, press A to launch it.
#* You will get sent directly to the Wii U Menu if you created the <code>default.cfg</code> and <code>autoboot.cfg</code> in the previous steps.
# Back at the Wii U Menu, launch the PayloadLoader Installer.
# Press A to select <code>Check</code>.
# Select <code>Boot Options</code>.
# You will be asked if you want to switch the boot title. Press A to select <code>Switch to PayloadLoader</code>.
# When the process finished, press A to shutdown the console.
# The PayloadLoader will now be launched automatically on every boot.

=== Finalizing Setup ===
It is now a good idea to finalize your PayloadLoader installation. You can find a guide on this [[wiiuguide:aroma/finalizing-setup | here]].

Wii U:Alternate Exploits

2023-11-03T01:38:04Z

Lazr: I will update this later (hopefully), just making it exist now

A list of alternate exploits for the Wii U, because yes, exploits other than JSTypeHax exist. These should only be used if Mii Maker or the Internet Browser are not working for some reason (e.g. eMMC corruption).

{| class="wikitable"
|+
!Method Name
!Requirements
|-
|[https://lazr1026.github.io/#/bluuu Bluubomb]
|
* A PC that has Bluetooth
* Some knowledge on how to use Linux
|-
|[https://lazr1026.github.io/#/tudpih UDPIH]
|
* A Raspberry Pi Zero/Pico, or a hacked Nintendo Switch.
|-
|[[/DNSpresso | DNSpresso]]
|
* A working System Settings
* An internet connection
|}

Wii U:Custom themes

2023-10-31T22:49:31Z

Lazr: Punctuation fixes + other QoL changes.

{{info|text=While possible to do on Tiramisu, it is highly recommended to use Aroma so you can load the themes automatically, and since SDCafiine on Tiramisu is very outdated}}

{{Warning|text=Using ThemeMii is NOT recommended, as it has been known to cause bricks}}

{{shortcut|Wii_U:CT}}

=== Loading Custom Themes ===
Custom themes can be loaded using [[Wii U:SDCafiine|SDCafiine]].

==== What you need ====

* The latest release of [https://github.com/wiiu-env/sdcafiine_plugin/releases/tag/v0.1.3 SDCafiine] (the Tiramisu version can be found [https://github.com/Maschell/SDCafiine/releases/tag/1.4 here]).
** Download and extract the <code>.zip</code> file and drag the <code>wiiu</code> folder to the root of your SD Card.
* A backup of your <code>Men.pack</code> and <code>Men2.pack</code> files.
** You can create a backup using [https://github.com/Xpl0itU/theme-manager/releases Theme-Manager].
** '''ONLY''' use this to create a backup do '''NOT''' install themes with it.
* A PC with [https://gbatemp.net/download/lunar-ips.23432/ LunarIPS] (or similar) installed.
** It has been tested to work on Linux with WINE.
* The IPS file of the theme you want which can be found on this [https://gbatemp.net/threads/share-and-download-wiiu-themes-ips-patches-only.642214/#post-10279713 GBAtemp thread].

==== Section I: Creating a Backup ====

# Insert your SD card into your WiiU and boot into CFW.
# Launch Theme-Manager and press R to create a backup of your theme.
# Exit Theme-Manager and put your SD back into your PC.

==== Section II: Patching your theme files ====

# Launch LunarIPS and select <code>Apply IPS Patch</code>.
# Navigate to your themes <code>.ips</code> files and select <code>Men.ips</code> as the patch file.
# Locate the <code>Men.pack</code> file in the <code>sd:/wiiu/themes/backup</code> folder on your SD card and select it as your base file.
# Repeat for <code>Men2.ips</code> and <code>Men2.pack</code>.

==== Section III: Prepping files for SDCafiine ====
</noinclude>
<tabber>

|-|Aroma=


* For SDCafiine to load the files you will need create the following folders:
** Create an <code>sdcafiine</code> folder in your <code>wiiu</code> folder on your SD card.
** Inside the <code>sdcafiine</code> folder create a folder with your Wii U Menu's title ID. This will vary on your consoles region:
*** '''USA:'''<code>0005001010040100</code>
*** '''EUR:'''<code>0005001010040200</code>
*** '''JPN:'''<code>0005001010040000</code>
** Inside your title ID folder create a folder with the name of your theme.
** Create a <code>content</code> folder in your title ID folder.
** Create a <code>Common</code> folder inside your your <code>content</code> folder.
** Create a <code>Package</code> folder inside your <code>Common</code> folder.
** Place your modified <code>Men.pack</code> and <code>Men2.pack</code> files inside of the <code>Package</code> folder.

* Your final file path should be <code>sd:/wiiu/sdcafiine/[TITLEID]/[ThemeName]/content/Common/Package/Men.pack, Men2.pack</code>.

|-|Tiramisu=


* For SDCafiine to load the files you will need create the following folders:
** Create an <code>sdcafiine</code> folder on the root of your SD card.
** Inside the <code>sdcafiine</code> folder create a folder with your Wii U Menu's title ID. This will vary on your consoles region:
*** '''USA:'''<code>0005001010040100</code>
*** '''EUR:'''<code>0005001010040200</code>
*** '''JPN:'''<code>000500101004000</code>
** Inside your title ID folder create a folder with the name of your theme.
** Create a <code>content</code> folder in your title ID folder.
** Create a <code>Common</code> folder inside your your <code>content</code> folder.
** Create a <code>Package</code> folder inside your <code>Common</code> folder.
** Place your modified <code>Men.pack</code> and <code>Men2.pack</code> files inside of the Package folder.

* Your final file path should be <code>sd:/sdcafiine/[TITLEID]/[ThemeName]/content/Common/Package/Men.pack, Men2.pack</code>


</tabber>

==== Section IV: Loading the theme ====

# Insert your SD card into your Wii U and boot into CFW.
#* If you are on Aroma the theme should load automatically. If it does not ensure SDCafiine is enabled in the plug-in menu.
#* If you are on Tiramisu load SDCafiine from the Homebrew Launcher.
{{Success|text=If done properly, you should now see your custom theme!}}

Wii U:Wupclient

2023-08-17T03:38:53Z

Lazr: The port should stay how it is

{{Page WIP}}
{{ombox|type=speedy|text=Wupclient can modify system files, which can result in a permanently bricked console. Only use this if you know what you're doing.}}
Wupclient is a python tool used to connect to [[Wii U:Wupserver | wupserver]]. It was originally part of smealum's [https://github.com/smealum/iosuhax iosuhax].

==Setup==
===What you need===
* The latest release of [https://www.python.org/downloads/ Python].
* The [https://gist.githubusercontent.com/GaryOderNichts/409672b1bd5627b9dc506fe0f812ec9e/raw/213854879ca62a0f02e3d48a54aef3a83d592464/wupclient.py wupclient.py] (Right-Click → Save As... → Save the file to a directory on your PC).

====Instructions====
# Install Python.
# Replace the IP Address in line 30 with the IP Address of your Wii U. Do not change the Port.
# Open a Terminal or Command Prompt in the same directory as the <code>wupclient.py</code>.
# Run <code>python -i wupclient.py</code> (On Windows: <code>py -3 -i wupclient.py</code>) to start wupclient in interactive mode. Several hexadecimal numbers should be printed to the Terminal on a successful connection.

You can now enter commands in the Terminal.

==Usage==
===Wupclient functions===
The functions listed below are part of the wupclient class and can be called using the wupclient instance called <code>w</code>.
====cd - Change working directory====
Changes the current working directory.
cd(path)

'''path''': A relative or absolute path which will become the working directory

Prints 0 to the Terminal on success

Usage example:
w.cd("usr")
w.cd("/vol/storage_mlc01")

====dl - Download files from the console====
dl(filename, ''directorypath, local_filename'')

'''filename''': Relative or absolute path to the file which should be downloaded from the Wii U
'''''directorypath''''': Optional path on the PC where the file should be stored in. If unspecified the current directory where wupclient was started in will be used. The directory will be created if it doesn't exist yet.
'''''local_filename''''': Optional filename of the file that will be created on the PC. If unspecified the original filename will be used.

Prints the number of transferred bytes in hexadecimal representation after transfer was completed.

Usage example:
w.dl("/vol/system/config/system.xml")
w.dl("/vol/system/config/system.xml", "dumps")
w.dl("/vol/system/config/system.xml", "dumps", "backup.xml")

====dump_syslog - Output the current system log====
Prints the current system log since boot to the Terminal.

Usage example:
w.dump_syslog()

====ls - List files and folders====
ls(''path, return_data'')

'''''path''''': Optional relative or absolute path. If not specified the current working directory will be used.
'''''return_data''''': Optional bool. Set to ''True'', if the raw data returned by ''FSA_ReadDir'' should be printed as well.

Usage example:
w.ls()
w.ls("/vol/system")
w.ls("usr")

====up - Upload files to the console====
up(local_filename, ''filename'')

'''local_filename''': Relative or absolute path to a file on the PC
'''''filename''''': Relative or absolute path of the file created on the Wii U. If unspecified the original filename on the PC and current working directory will be used.

Usage example:
w.up("test.txt")
w.up("test.txt", "/vol/storage_sdcard/test.txt")

===Utility functions===
The functions listed below are utility functions and are not part of the wupclient class.
====flush_mlc - Flush MLC cache====
Files on the MLC are not directly written to the eMMC, but cached in RAM and on the SLC instead.
This function will flush the changes to the chip.

Usage example:
flush_mlc()

====ios_shutdown - Shutdown the console====
Usage example:
ios_shutdown()

Wii U:Fix error code 112-1037

2023-07-22T16:41:40Z

Lazr: i dont remember how to mediawiki so this works for now

= How To Fix The Error Code 112-1037 =
This page will guide you through the process of fixing the error code 112-1037.

=== What You Need ===
* A working [[wiiuguide:|homebrew installation]].
* wupclient.py (right-click -> Save link as... -> Click Save).
* The latest release of Python.

=== Instructions ===
#Install Python on your computer.

=== Fixing The Error Code ===
<tabber>
|-|Windows=



# Power on your Wii U.
# Load into Tiramisu or Aroma.
# Use the following command: <code>cd <directory></code>.
#* Example: <code>cd C:\Users\username\Downloads</code>.
# Use the following command: <code>py -3 -i wupclient.py</code>.
# Enter the IP address of your Wii U.
#* Don't know how to find it? Read [https://wiki.hacks.guide/wiki/Wii_U/find-wiiu-ip-address this].
# Use the appropriate command depending on the region of your console:
#* JPN: <code>w.chmod("/vol/storage_mlc01/sys/title/00050030/1001200a/content/pages/index.html", 0x644)</code>.
#* USA: <code>w.chmod("/vol/storage_mlc01/sys/title/00050030/1001210a/content/pages/index.html", 0x644)</code>.
#* EUR: <code>w.chmod("/vol/storage_mlc01/sys/title/00050030/1001220a/content/pages/index.html", 0x644)</code>.
# If the command worked, you will get the following response: <code>chmod returned 0x0</code>.
# The error code should now be gone.



|-|Linux/macOS=



# Power on your Wii U.
# Load into Tiramisu or Aroma.
# Go back to the Wii U Menu.
# Open up a Terminal window.
# Use the following command: <code>cd <directory></code>.
#* On macOS, the most common place to find your downloaded files is <code>/Users/username/Downloads</code>.
#* On Linux, the most common place to find your downloaded files is <code>/home/username/Downloads</code>.
# Use the following command: <code>python3 -i wupclient.py</code>.
# Enter the IP address of your Wii U.
#* Don't know how to find it? Read [https://wiki.hacks.guide/wiki/Wii_U/find-wiiu-ip-address this].
# Use the appropriate command depending on the region of your console:
#* JPN: <code>w.chmod("/vol/storage_mlc01/sys/title/00050030/1001200a/content/pages/index.html", 0x644)</code>.
#* USA: <code>w.chmod("/vol/storage_mlc01/sys/title/00050030/1001210a/content/pages/index.html", 0x644)</code>.
#* EUR: <code>w.chmod("/vol/storage_mlc01/sys/title/00050030/1001220a/content/pages/index.html", 0x644)</code>.
# If the command worked, you will get the following response: <code>chmod returned 0x0</code>.
# The error code should now be gone.

</tabber>

Wii U:Check local IP address

2023-07-22T16:34:33Z

Lazr: Created this for that fix error code page

= How To Find The IP Address of your Wii U =

Quick guide on how to find the IP address of your Wii U console.

=== Instructions ===
<tabber>

|-|Tiramisu (or other Legacy methods)=



# Download the latest release of [https://wiiu.cdn.fortheusers.org/zips/ftpiiu.zip FTPiiU].
# Extract the contents of the <code>ftpiiu.zip</code> file to the root of your SD Card.
# Launch the Homebrew Launcher.
# Launch FTPiiU.
# The IP address of your Wii U will be displayed at the bottom of the screen.
# To exit FTPiiU, press the HOME button.



|-|Aroma=



# Download the latest release of the [https://github.com/wiiu-env/ftpiiu_plugin/releases FTPiiU Plugin].
# Extract and copy the <code>ftpiiu.wps</code> file from the <code>ftpiiu_vx_x_x.zip</code> file to <code>sd:/wiiu/environments/aroma/plugins</code> on your SD Card.
# Load the Plugin Configuration in Wii U Menu.
# Select <code>FTPiiU Plugin</code>. Your IP will be shown.

</tabber>