Hacking Semi-Bricked Wii U with Haxchi installed over CBHC

cheddarcheese360 · Mar 26, 2017

Hello Everyone,

Been a long time viewer and only recently registered an account here. So yesterday I was looking to seeing if I could modify the boot sequence for CBHC (I should have double checked I know) and I installed Haxchi over an existing CBHC (I know I found out that's a no-no after the fact). It gave me a -5 error and I thought that was that. I ended up getting a new Wii U thinking it's over for this old one and synced my gamepad to the new Wii U.

Long story short, While adding things onto my sd card in preparation for setting up this new wii u up for Homebrew, I somehow am able to get it to boot straight onto the Homebrew Launcher when having my SD Card loaded on the original wii u. Not sure how and why it loads there but that had me thinking. If I could somehow get ftpii U Everywhere to allow me to access the system.xml on the original wii u, I could modify the title it boots to and I may be able to get to System Menu.

Some things I've tried so far (Keep in mind, I can't sync my gamepad back to this wii u as I can't access System Menu.) :

* Loading Mocha CFW (Can't get past the menu selection as I can only use wii u pro controller or wii mote.
* Trying FTPii Everywhere as it is (am able to see the root directory storage_slc but not able move further as I'm getting a 550 SUCCESS Not able to view directory error.)
* Tried loading loadiine GX_2 to see if other apps within Homebrew can launch and it worked.
* Tried going back with the 'Home' icon button using wiimote and it was able to take me to Mii Maker but wasn't able to close the software as it would give me a black screen.

Is there anything else that could be done at this point ? If it makes any difference, I managed to save the otp.bin and have a clean system.xml file prior to CBHC installation. Thank you very much for your help!

Deleted User · Mar 26, 2017

Uninstall CBHC using CBHC Installer. [It will rewrite syshax.xml to stop redirecting to DS VC on boot]
You didn't brick, in fact, it boots into Haxchi game. [Oddly enough, you were lucky that you didn't brick 100% like others...]

Oh, right. You can't access sysmenu.
Hm... You can access HBL, right? Use it to your advantage to reinstall Haxchi with a new config.
[set default=sysmenu so you can be automatically booted to Wii U Menu and from there pair your controller]

cheddarcheese360 · Mar 26, 2017

Thank you for your help. Unfortunately when attempting to do that and loading haxchi (even tried with CBHC as well) it would show a black screen. I tried changing the config for Haxchi and it would boot to Homebrew Launcher regardless. I attempted to just see if I could just try working through the Mii Maker part and was looking over Download Management and noticed a pending system update (It's already on 5.5.1 before I even ran Haxchi in the first place.). I wasn't able to stop it through wii mote, it just gave me the error of partial of the download wasn't able to go through. I think my luck ran out then when I did a reboot of the system and got the infamous:

There is a problem with the system memory
Error 160-0103

right when it boots up (I only get the Wii U Logo for like a second then the error comes up).

Not sure if any SoftMod can help at this point unless there's some sort of homebrew that can take over boot0 of the wii u or overwrite the system.xml from there. Otherwise, I think hard modding would be the next option as I would just need to look for the pending system update title ,remove it, and also update the system.xml file to it's original state.. Again, I still have the otp.bin so with the new tools that have recently come out here

https://gbatemp.net/threads/release-wii-u-nand-tools.465386/

Not sure if those can help me at this point.

Deleted User · Mar 26, 2017

Yup, they can help you big time.
If you manage to fix SLC with otp then you will be probably booting straight to Wii U menu.

cheddarcheese360 · Mar 26, 2017

Well, do you think I'd need to work on going through the hardmod route ? I don't have the equipment to soldier the wii U nor do I have a NAND Backup either. Just the otp.bin or are those programs based off performing a hardmod such as the following thread.

https://gbatemp.net/threads/successfully-dumped-wiiu-emmc-nand-with-hardmod.457165/

Deleted User · Mar 26, 2017

cheddarcheese360 said:
Well, do you think I'd need to work on going through the hardmod route ? I don't have the equipment to soldier the wii U nor do I have a NAND Backup either. Just the otp.bin or are those programs based off performing a hardmod such as the following thread.

https://gbatemp.net/threads/successfully-dumped-wiiu-emmc-nand-with-hardmod.457165/

@EyeKey It is based off this thread, right? Can he fix his SLC with just otp.bin?

Kafluke · Mar 26, 2017

If you can boot to HBL why can't you run the CBHC installer and just uninstall? What am I missing here?

EyeKey · Mar 26, 2017

Felek666 said:
@EyeKey It is based off this thread, right? Can he fix his SLC with just otp.bin?

Yes. But it doesn't seem to be his problem. CBHC works. But I don't understand why he can't boot the the sysmenu. If the sysmenu is broken removing CBHC won't fix it...

cheddarcheese360 · Mar 26, 2017

I feel like there's two things wrong with my system now.

a) system.xml needs to be reverted
b) I have some sort of pending system update that didn't download completely which now isn't even giving me the option to boot in to homebrew launcher.

I also believe that when installing Haxchi prior to this whole incident, it may have corrupted the autoboot process as it doesn't even show the Autoboot message when starting the system up (When I was able to go on Homebrew Launcher). Also, keep in mind that CBHC as well as Mocha require the gamepad and I unsynced it earlier.

If i could somehow get those two issues fixed, I believe it would be a good step forward. I also forgot to mention, I did make a backup of my System Titles within the 00050010 titles which I believe is related to the system updates on the console.

Deleted User · Mar 26, 2017

cheddarcheese360 said:
I feel like there's two things wrong with my system now.

a) system.xml needs to be reverted
b) I have some sort of pending system update that didn't download completely which now isn't even giving me the option to boot in to homebrew launcher.

I also believe that when installing Haxchi prior to this whole incident, it may have corrupted the autoboot process as it doesn't even show the Autoboot message when starting the system up (When I was able to go on Homebrew Launcher). Also, keep in mind that CBHC as well as Mocha require the gamepad and I unsynced it earlier.

If i could somehow get those two issues fixed, I believe it would be a good step forward. I also forgot to mention, I did make a backup of my System Titles within the 00050010 titles which I believe is related to the system updates on the console.

Dump Wii U's NAND and modify sysmenu.xml, syshax.xml and system.xml.
You need to dump SLC, MLC, SLCMTTP [Basically TSOP48]
storage_slc should include logs, view that folder and find what caused issues on boot. First 100 crashes are stored there.

There's no way Wii U would download system update unless corrupted CBHC installation changed system version to either 0.0.0 or -1.0.0.

cheddarcheese360 · Mar 26, 2017

Forgive my ignorance on this, but how would I dump it at this point. Would I need to get a teensy and go the hardmod route ? Or is there a specific program that can do this without even being able to go through Homebrew ?

Deleted User · Mar 26, 2017

cheddarcheese360 said:
Forgive my ignorance on this, but how would I dump it at this point. Would I need to get a teensy and go the hardmod route ? Or is there a specific program that can do this without even being able to go through Homebrew ?

Hardmod. Everything is done via hardmod. Yes, get Teensy Signal Booster Edition.
Dump it 2-3 times with Teensy to check if dumps are the same. [When dumping SLC]

EyeKey · Mar 26, 2017

Hmm seems like an hard brick to fix without a backup...

There isn't any tool to modify the file system on the MLC (where the system titles that aren't OS are in). At least not yet....
Hmmm actually, I think that there is a possible way to modify the MLC with the second Wii U.... You can reencrypt the MLC with the USB key of the second device. But reencrypting the MLC requires fully parsing the file system since the IV changes between clusters, and it depends on the content of the cluster.

Deleted User · Mar 26, 2017

EyeKey said:
Hmm seems like an hard brick to fix without a backup...

There isn't any tool to modify the file system on the MLC (where the system titles that aren't OS are in). At least not yet....
Hmmm actually, I think that there is a possible way to modify the MLC with the second Wii U.... You can reencrypt the MLC with the USB key of the second device. But reencrypting the MLC requires fully parsing the file system since the IV changes between clusters, and it depends on the content of the cluster.

What would take to develop a tool to modify MLC?
Man, that sounds complicated.

EyeKey · Mar 26, 2017

Felek666 said:
What would take to develop a tool to modify MLC?
Man, that sounds complicated.

A lot of coding... It is quite complex file system. Not as simple as the SLC file system, which is a simple custom FAT.....

Currently I understand enough of it for fully parsing, but not enough for modifying it because they have some meta things that I don't understand yet. (And modifying it requires a lot more code than just parsing it)
But I don't know when I will do it....

vgmoose · Mar 26, 2017

cheddarcheese360 said:
I feel like there's two things wrong with my system now.
I also believe that when installing Haxchi prior to this whole incident, it may have corrupted the autoboot process as it doesn't even show the Autoboot message when starting the system up (When I was able to go on Homebrew Launcher).

Just an FYI, your Haxchi install is what's set to boot in your system.xml, so that's why you don't see the autoboot message (it's in CBHC, not Haxchi). I don't know why you can't get to system menu through it though.

If your gamepad were sync'd I might actually recommend reinstalling CBHC (to get back the auto-boot menu). If absolutely necessary, someone can probably make you a fork of it that uses an alternative input method. I think Haxchi also has a recovery mode? You should probably ask @FIX94 himself or in his thread

I'm leaning towards nothing is corrupted so no drastic nand solutions need be taken, but I don't wanna officially advise you that... Maybe an HBL app that just boots system menu via title ID could help you narrow down what's the issue too.

cheddarcheese360 · Mar 26, 2017

So just to confirm Pending Updates get stored here ?

/storage_mlc/sys/update

If so, then I see what you're saying. I thought they came from here /storage_slc/title/00050010/10045100 (the System Updater is title 00050010-10045100 which I have a backup of.)

--------------------- MERGED ---------------------------

vgmoose said:
Just an FYI, your Haxchi install is what's set to boot in your system.xml, so that's why you don't see the autoboot message (it's in CBHC, not Haxchi). I don't know why you can't get to system menu through it though.

If your gamepad were sync'd I might actually recommend reinstalling CBHC (to get back the auto-boot menu). If absolutely necessary, someone can probably make you a fork of it that uses an alternative input method. I think Haxchi also has a recovery mode? You should probably ask @FIX94 himself or in his thread

I'm leaning towards nothing is corrupted so no drastic nand solutions need be taken, but I don't wanna officially advise you that... Maybe an HBL app that just boots system menu via title ID could help you narrow down what's the issue too.

I was thinking of of wii u pro controller support or even wii mote support would have had me on my way. My thought process was to use the wii mote to access mocha cfw to place full ftp access to all systems and then work my way from there with ftpii u everywhere. At this point though I now have a pending system update that gives me that error Error 160-0103 so I can't even get to Homebrew Launcher now

. Also just a reminder, I did have other wii NAND Programs working such as MiiMaker, Browser, eShop, and part of the Download Management (limited to what can be done with wiimote). So it doesn't look like a major SysNAND Corruption.

Deleted User · Mar 26, 2017

Alright, prepare to get stormed by questions
Do you have quick menu on your gamepad if you have one? This way we could see if it atleast boots into Internet Browser
Did you had your DNS set-up? [If yes, then System Update couldn't be downloaded unless System Settings didn't work, or something failed]
Try blocking Wii U's MAC address completely from router, if your Wii U boots after you've done this, there's still hope. [It's memorized as connected in router's settings]

Why i'm telling youto block Wii U's MAC address? This way it will not try to do a check for sysupdates.

cheddarcheese360 · Mar 26, 2017

Felek666 said:
Alright, prepare to get stormed by questions
Do you have quick menu on your gamepad if you have one? This way we could see if it atleast boots into Internet Browser
Did you had your DNS set-up? [If yes, then System Update couldn't be downloaded unless System Settings didn't work, or something failed]
Try blocking Wii U's MAC address completely from router, if your Wii U boots after you've done this, there's still hope. [It's memorized as connected in router's settings]

Why i'm telling youto block Wii U's MAC address? This way it will not try to do a check for sysupdates.

To answer your questions, not sure if I did have a quickboot menu on the gamepad (Never really looked into configuring that) and even if I did, I lost sync connectivity with the original wii u. I did have site blocking on an old router I had a few months ago, but the new Netgear router I have now doesn't do a good job with site blocking and I wanted to have online play with my games. I now regret at least not having the DNS TubeHax at this point for I could have at least been able to play online while avoiding the update servers. As for blocking the MAC Address no luck. It just loads onto the WiiU logo for a second then goes to the following error:

There is a problem with the system memory.

For help, make a note of the error code and visit
support.nintendo.com

Error Code: 160-0103
1. 5.5.1 U 2. WUP-101(02) 3. FW104290567 4. XXXX-02X0-2375

Deleted User · Mar 27, 2017

cheddarcheese360 said:
To answer your questions, not sure if I did have a quickboot menu on the gamepad (Never really looked into configuring that) and even if I did, I lost sync connectivity with the original wii u. I did have site blocking on an old router I had a few months ago, but the new Netgear router I have now doesn't do a good job with site blocking and I wanted to have online play with my games. I now regret at least not having the DNS TubeHax at this point for I could have at least been able to play online while avoiding the update servers. As for blocking the MAC Address no luck. It just loads onto the WiiU logo for a second then goes to the following error:

There is a problem with the system memory.

For help, make a note of the error code and visit
support.nintendo.com

Error Code: 160-0103
1. 5.5.1 U 2. WUP-101(02) 3. FW104290567 4. XXXX-02X0-2375

Oh man. Wii U Menu probably got screwed. [Or something else]
So best for you would be to wait for some kind of MLC management tool.

Hacking Semi-Bricked Wii U with Haxchi installed over CBHC

Member

Deleted User

Guest

Member

Deleted User

Guest

Member

Deleted User

Guest

Well-Known Member

Well-Known Member

Member

Deleted User

Guest

Member

Deleted User

Guest

Well-Known Member

Deleted User

Guest

Well-Known Member

Well-Known Member

Member

Deleted User

Guest

Member

Deleted User

Guest

Similar threads

Popular threads in this forum