Tutorial  Updated

How To: Upgrading / Rebuilding Wii U Internal Memory (MLC)

Warning

This tutorial is only for advanced users and has a serious risk of bricking the console. Make sure you read it completely before executing any step and that you understand every step and its implications. With de_Fuse everything should be unbrickable if you know how.

You should at least have a backup of SLC and SLCCMPT, as we can’t rebuild them at the moment. (can be done in minute_minute, so there is no excuse). We had two cases where the SLC corrupted for an unknown reason, so a backup is essential.

What is this for?

This tutorial goes into rebuilding the MLC from scratch on a clean media. This can become useful, if
  • the MLC (eMMC) chip died or corrupted the filesystem
  • the SCFM (SLC cache for MLC) became inconsistent
  • you want to upgrade the capacity of the internal storage.
  • you want to set up a redNAND without SCFM
If you have a bad eMMC chip, but the recovery still works (which is most likely), then there are also ways to fix it without a complete reformat.
If the LED is blinking blue, you have a SLC problem and not a MLC problem, so this tutorial won't help with that.

It will format your MLC, so all data on the internal Wii U memory will be lost.

Update

13.03.2024 - The wafel_setup_mlc.ipx now uses a built in IOSU function to create system folders, that should make sure the permissions are right, which caused problems with game updates in the past. It will also recreate the update folder (so system updates won't be blocked by that)

Prerequisites

Backing up save games


Do a backup of what you want to preserve, like savegames and Miis.
For Backing up Save games, it is recommended to use SaveMii. That requires that you have Tiramisu or Aroma running.
You can also move your savgames (or whole games) to USB, which should still be readable. When recreating the users after the rebuild, you just have to be carefull to create the users in the right order, to make the ID’s match. A backup by other means (Like savemii) is still recommended.
If you are using this tutorial to fix a failing eMMC you might not be able to use the other Backup options. In that case use the Dump MLC option in the Recovery. You can extract your data from there using wfs-extract.

Storage Options

The Wii U has two ways of connecting internal memory, each with its own drawbacks:
  • SDIO – On retail consoles the internal memory is a eMMC chip connected through an internal SDIO bus to the Latte chip. This SDIO bus can also use SD cards (hence the name SD IO). Access to media connected on the SDIO is cached through a file on the SLC, presumably to reduce writes on the MLC. This cache is called SCFM and it is the reason why you always need to backup / restore SLC and MLC together and doesn’t allow easy swapping of multiple SDs.
    IOSU also only supports 3 sizes of media on this bus: <=8GB, 32GB and 64GB. The size will be limited to the biggest it fits, the rest is unusable. This bus is limited to 26MB/s (4bit@52Mhz). For replacing the eMMC with an micro SD you can use MLC2SD or a similar Interposer. Soldering and micro SD adapter using wires, works too.
    It is recommended to use a 64GB Sandisk Max Endurance card (But similar card should also be fine), since the Wii U is known for writing much.

  • SATA – The Disc drive is connected through SATA, the connectors are different but the electrical signals are still the same. Some Kiosk consoles used this Interface to connect to a HDD. The type of the SATA device can be configured in the SEEPROM, so we can configure our retail consoles to also use a SATA HDD / SSD.
    NOTE: @QuarkTheAwesome is building an SATA adapter for that purpose, available soon™.

    The advantage of using this interface is, that the size isn’t limited (well WFS is limited to 2TB) and it doesn’t use SCFM, which makes some things easier and improves performance in some circumstances. The obvious disadvantage is that you can’t use your disc drive anymore. Without the Disc Drive vWii System Menu doesn't work. vWii Injectes / Wii VC from the eShop can still be used, but only when installed to USB. Also you still might need to disable the MLC on the SDIO bus, or else the wii u might still use the SDIO one if the SATA device takes too long to init.

  • redNAND – redirects the read / writes to one or more of the internal storage devices to paritions on the SD card. You can create an arbitrary size MLC partition on the SD card and set it up using this tutorial. SCFM can be easily disabled for the redNAND. The 64GB limit does not exist for redNAND if the SCFM is disabled. For redNAND we have a dedicated Tutorial here: https://gbatemp.net/threads/fixing-...-soldering-using-rednand-with-isfshax.642268/

Does that mean we can’t get more than 64GB on the SDIO bus? No, BUT it requires ISFShax / defuse to boot the console every time. @GaryOderNichts created a patch to remove the limits and always use the maximum size of the SDIO media and it also disables SCFM, because SCFM doesn’t work with more than 64GB and disabling SCFM improves performance and reduces wear on the SLC, at the cost of increasing wear of the MLC media. I packaged this patch in wafel_unlimit_mlc.

Rebuilding the MLC

Now that you decided what media you want to use as MLC, we can start with the actual process:
  1. Download all the mlc system titles for your region from NUS. This can be done conveniently with MLCRestorerDownloader by @Xpl0itU. Copy the otp.bin from the SD to the folder with the MLCRestorer Downloader so it can get the common key from there.

    You will get the output/MLC/{region} directory, which then contains a directory for each title. In total there should be 52 titles totaling ~1.1GiB.

    If your console has an old firmware it might also be necessary to get the latest SLC titles.

  2. On the root of your SD card (the one that will go in the front slot, not the MLC replacement) create a folder wafel_install. Then copy all 52 titles to the wafel_install folder, so it now contains the 52 subfolders, one for each title. If you want to reinstall / update SLC titles, you would also put them there.

  3. Attach your MLC media of choice. (If you are using SATA got to Backup and Restore, then at Set SATA Device in SEEPROM select GEN2-HDD (Kiosk CAT-I with HDD)).
    For installing MLC2SD look here: https://gbatemp.net/threads/using-n...emmc-fix-160-0103-system-memory-error.636361/ at the Soldering section.

  4. If you install to eMMC / MLC2SD, got to Backup and Restore and select Erase MLC and Delete scfm.img. If the Erase MLC fails, you can ignore that if it wasn't formatted as MLC before (from a failed install or so).

  5. Put the wafel_setup_mlc.ipx on the SD card in /wiiu/ios_plugins. If you want more than 64GB on SDIO you also need to put the wafel_unlimit_mlc.ipx there. If you install with wafel_unlimit_mlc.ipx, it will be permanently required and therefore also permanently requires ISFShax or defuse.

  6. [Optional, only when using defuse] Open the serial monitor on the PC (Putty / minicom) for defuse to see the setup progress. There will be no display output in the Wii U itself. I attached the whole serial log of a successfull install as a reference.

  7. Select Patch (sd) and boot IOS (slc) in minute to start the setup of your fresh MLC.During the setup you won't see anything on the screen. You have to go by the power led.
    The power LED will flash blue, while it is installing the titles.
    if something goes wrong the LED will turn orange, but it will continue as long as it is blinking.
    The LED will become static once it finished. You can now power off the console.
    If the led is blinking red, something fatal happend. Ask for help.
    During the setup a short log gets written to the SD: wafel_setup_mlc.log.
    In the end it will enable the initial setup on the next boot.

  8. Remove the wafel_setup_mlc.ipx from /wiiu/ios_plugins on the SD.

  9. Boot the console. Patch (sd) and boot IOS (slc)

  10. If everything worked, the initial setup should launch.

ISFShax only: Finalizing

If you are using the wafel_unlimit_mlc.ipx you need to keep ISFShax installed. If you haven't done already complete the "Booting without SD" step form the ISFShax tutorial but also add the wafel_unlimit_mlc.ipx renamed to 9unlimit.ipx to the /storage_slc/sys/hax/ios_plugins directory.
If you are not using the wafel_unlimit_mlc.ipx you can either uninstall ISFShax or keep it as a brick protection. If you keep it complete the "Booting without SD" step form the ISFShax tutorial.
The Wii U should now boot automatically if you don't have an SD in.
You probably also want to enable the autobooting now.

See Also

https://gbatemp.net/threads/wii-u-internal-storage-upgrades-are-possible.635629/

Pictures

512 GB SD card:
img_20230702_021647-jpg.381270


@QuarkTheAwesome 120 GB SSD:
img_2709-jpg.381271


Thanks

 

Attachments

  • serial-log.txt
    87.6 KB · Views: 49
Last edited by SDIO,

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
Maybe try this release? It will require re-flashing your Pico. https://github.com/shinyquagsire23/wii_u_modchip/releases/tag/v0.8

There was a theoretical edge case on the PRSHhax reset where it could get stuck in a de_Fused state, and your console seems to be a bit weird with its timing.

is pretty unusual since I specifically target 0x7F bytes de_Fused to try and keep the vWii OTP bank intact.
are you wanting me to do the boot1_slccmpt thing?

I reflashed my pico and tried to dump otp with prshhax with no luck
 

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
are you wanting me to do the boot1_slccmpt thing?

I think you should just flash the new uf2 file to the pico and then try prshhax again
i did with no luck unfortunately
Post automatically merged:

it is giving me this every time i start the console on putty

Starting... 3224:0
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
1e
00
00
Error code: 00
Starting... 3224:1
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
25
00
00
Error code: 00
Starting... 3223:0
Results:
Winner! 0xf369
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
1e
1f
25
88
89
8a
0f
8f
0f
00
80
01
81
00
80
01
81
01
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
02
0f
8f
0f
0d
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
020203!CF&10(MEM2MEM0PRSH]]01]]028480efa282d9010210010210]]04f00fcafff00fcafaU▒[ Pico] Switching to text mode...
U▒U▒U▒f00fcafeGPU TV addr: 17500001
GPU DRC addr: 00000000
minute loading
minute was loaded from boot1 context!
Initializing exceptions...
Configuring caches and MMU...
MEM: cleaning up
MEM: unprotecting memory
MEM: mapping sections
MEM: enabling caches
MEM: enabling MMU
MEM: configuring heap
MEM: init done
Interrupts initialized
prsh: Header at 10005a54, PRST at 10007ff0, 1 entries (32 capacity):
0: boot_info 0x58 10008000
crypto support initialized
BSP version: 0x26100028
Board type: CF (0x4346)
Board revision: 0x17
DDR props: size=2GiB (0x0800) speed=0x0002 vendor=U! (0x5521)

Initializing SD card...
sdhc: SDHC 1.0, 48 MHz base clock
sdhc_bus_power(0x300000)
sdhc_bus_clock(25000, 0)
sdhc_bus_width(1)
CID: 96001D0C00B020473230445348502700
CID: mid=27 name='PHSD02G' prv=32.11 psn=00000c1d mdt=6/2009
CSD: 00808A8FFFFFFFBAA35A5F32005E0000
taac=94 nsac=0 read_bl_len=10 c_size=3819 c_size_mult=7 card size=2002780160 byt es
sdcard_select: resp=700
sdhc_bus_width(4)
sdcard: enabling highspeed 52MHz clock (32)
sdhc_bus_clock(52000, 1)
resetting due to error interrupt
timeout dump: error_intr: 0x0 intr: 0x2
sdcard: MMC_ALL_SEND_CID failed with 116
sdcard: could not enable highspeed clock for card, falling back to 48MHz highspe ed?
sdhc_bus_clock(48000, 1)
resetting due to error interrupt
timeout dump: error_intr: 0x0 intr: 0x2
sdcard: MMC_ALL_SEND_CID failed with 116
sdcard: could not enable highspeed clock for card, falling back to 25MHz highspe ed?
sdhc_bus_clock(25000, 1)
Mounting SD card...
crypto: ~0x000 bytes of OTP loaded; JTAG is disabled (000000e1)

Console is de_Fused! Loading sdmc:/otp.bin...
Failed to load `sdmc:/otp.bin`!
Firmware will fail to load.
Press POWER/Q to continue.
Post automatically merged:

and this is what i get when i try to dump otp with prshhax

9254f7bf 8f14dbd2
505276c9 505276c9
Guessing key based on boot1 header type 2
--> prod key
Dumping OTP using boot1 prod v8377, and offset 0x0d40ac6d...
WARNING: SEEPROM boot1 version v21274 does not match NAND version v8377!
Exploit might not work!

If this is the first time you're dumping otp.bin, ignore this message.
However, if you reflashed boot1, you might have to guess which boot1
version was originally on NAND and will match the SEEPROM version.
GPU clocked at: 544.999877MHz
Unmounting SLC...
Shutting down MLC...
sdhc_bus_power(0x0)
Shutting down SD card...
sdhc_bus_power(0x0)
Shutting down interrupts...
Shutting down caches and MMU...
Resetting (prshhax)...
U▒U▒U[Pico] Console requested prshhax prshhax reset...
[pico] Changed state: WIIU_STATE_MONITORING -> WIIU_STATE_NEEDS_DEFUSE
Starting... 3224:0
Results:
Winner! 0xf368
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
1e
1f
25
88
89
8a
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
01
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
80
01
81
00
80
0f
8f
0f
00
80
01
81
00
80
01
81
00
80
01
81
00
80
00
01
81
0f
8f
0f
00
01
81
00
80
01
81
00
80
01
81
00
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
0203!CF&10(MEM2MEM0PRSH]]01]]0280efa282d9010210010210]]04f00fcafff00fcafaU▒U▒U▒[Pico] Switching to text mode...
U▒f00fcafeGPU TV addr: 17500001
GPU DRC addr: 00000000
minute loading
minute was loaded from boot1 context!
Initializing exceptions...
Configuring caches and MMU...
MEM: cleaning up
MEM: unprotecting memory
MEM: mapping sections
MEM: enabling caches
MEM: enabling MMU
MEM: configuring heap
MEM: init done
Interrupts initialized
prsh: Header at 10005a54, PRST at 10007ff0, 1 entries (32 capacity):
0: boot_info 0x58 10008000
crypto support initialized
BSP version: 0x26100028
Board type: CF (0x4346)
Board revision: 0x17
DDR props: size=2GiB (0x0800) speed=0x0002 vendor=U! (0x5521)

Initializing SD card...
sdhc: SDHC 1.0, 48 MHz base clock
sdhc_bus_power(0x300000)
sdhc_bus_clock(25000, 0)
sdhc_bus_width(1)
CID: 96001D0C00B020473230445348502700
CID: mid=27 name='PHSD02G' prv=32.11 psn=00000c1d mdt=6/2009
CSD: 00808A8FFFFFFFBAA35A5F32005E0000
taac=94 nsac=0 read_bl_len=10 c_size=3819 c_size_mult=7 card size=2002780160 bytes
sdcard_select: resp=700
sdhc_bus_width(4)
sdcard: enabling highspeed 52MHz clock (32)
sdhc_bus_clock(52000, 1)
resetting due to error interrupt
timeout dump: error_intr: 0x0 intr: 0x2
sdcard: MMC_ALL_SEND_CID failed with 116
sdcard: could not enable highspeed clock for card, falling back to 48MHz highspeed?
sdhc_bus_clock(48000, 1)
resetting due to error interrupt
timeout dump: error_intr: 0x0 intr: 0x2
sdcard: MMC_ALL_SEND_CID failed with 116
sdcard: could not enable highspeed clock for card, falling back to 25MHz highspeed?
sdhc_bus_clock(25000, 1)
Mounting SD card...
crypto: ~0x000 bytes of OTP loaded; JTAG is disabled (000000e1)

boot1 never jumped to payload! Offset or SEEPROM version might be incorrect.
(try it again just in case, sometimes the resets can get weird)
Press POWER/Q to continue.
 

shinyquagsire23

SALT/Sm4sh Leak Guy
Member
Joined
Nov 18, 2012
Messages
1,977
Trophies
2
Age
26
Location
Las Vegas
XP
3,765
Country
United States
are you wanting me to do the boot1_slccmpt thing?

I reflashed my pico and tried to dump otp with prshhax with no luck
nah that's just something I had done and needed to make note of in the release. If PRSHhax is still not working after re-flashing the Pico, then I might have to brainstorm some more.

Maybe one thing to double-check, dump `BOOT1_SLC.RAW` and check what the hash of it is? It should be
MD5: c941ed70442744feafcb8578e5625c09
SHA1: 33ae95a05b86d8e06d7331f8cf791c2c82db69d1

You can check online w/ something like this tool.

Edit: Also to verify, when you do PRSHhax does the light blink blue for ~3s? It should be blinking blue during PRSHhax, otherwise it's not getting into boot1. If it's solid blue during PRSHhax then I guess it's ignoring the payload entirely somehow.
 
Last edited by shinyquagsire23,

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
nah that's just something I had done and needed to make note of in the release. If PRSHhax is still not working after re-flashing the Pico, then I might have to brainstorm some more.

Maybe one thing to double-check, dump `BOOT1_SLC.RAW` and check what the hash of it is? It should be
MD5: c941ed70442744feafcb8578e5625c09
SHA1: 33ae95a05b86d8e06d7331f8cf791c2c82db69d1

You can check online w/ something like this tool.

Edit: Also to verify, when you do PRSHhax does the light blink blue for ~3s? It should be blinking blue during PRSHhax, otherwise it's not getting into boot1. If it's solid blue during PRSHhax then I guess it's ignoring the payload entirely somehow.
Hey shiny,

So just checked the MD5 and SHA1, both perfect.

When i try to run prshhax, the light seems to blink red a couple times for a split second and then turns back to solid purple
 

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
Is it the same as when you boot de_fuse for the first time? Cause if so it might just be triggered by the reset.

Tbh i dont remember if its the same. i made a youtube short of what it looks like,



I honestly feel like its something stupid lol. everything should be working i feel.
 

shinyquagsire23

SALT/Sm4sh Leak Guy
Member
Joined
Nov 18, 2012
Messages
1,977
Trophies
2
Age
26
Location
Las Vegas
XP
3,765
Country
United States
Tbh i dont remember if its the same. i made a youtube short of what it looks like,



I honestly feel like its something stupid lol. everything should be working i feel.

ok that's useful, the order of LED indications is basically like:
boot0 - solid red
boot1 - blink red, RTC has not been read yet
boot1 - blink yellow (standby)/blue (normal boot), RTC has read and the console is initializing DRAM, verifying fw.img, reading PRSH, etc
boot1 - solid blue, disk drive activated -- DRAM initialized, fw.img verified correctly, probably jumped to IOSU.

PRSHhax happens before the LED turns solid blue, ie this is what mine looks like on a successful PRSHhax:


Edit: so basically all that means is, your boot1 is somehow not executing PRSHhax. One possibility could be that DRAM isn't persisting correctly across resets, which might(?) explain the red blinks? I'm not totally sure though, need to think on it a bit.
 
  • Like
Reactions: Valery0p

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
ok that's useful, the order of LED indications is basically like:
boot0 - solid red
boot1 - blink red, RTC has not been read yet
boot1 - blink yellow (standby)/blue (normal boot), RTC has read and the console is initializing DRAM, verifying fw.img, reading PRSH, etc
boot1 - solid blue, disk drive activated -- DRAM initialized, fw.img verified correctly, probably jumped to IOSU.

PRSHhax happens before the LED turns solid blue, ie this is what mine looks like on a successful PRSHhax:


Edit: so basically all that means is, your boot1 is somehow not executing PRSHhax. One possibility could be that DRAM isn't persisting correctly across resets, which might(?) explain the red blinks? I'm not totally sure though, need to think on it a bit.


Just as a recap, this console basically has had the factory emmc removed the resistors going to the chip are removed and the clk trace is cut. I can still dump OTP with prshhax or no?

Also do you think i should maybe format this sd card and try again?
Post automatically merged:

ok that's useful, the order of LED indications is basically like:
boot0 - solid red
boot1 - blink red, RTC has not been read yet
boot1 - blink yellow (standby)/blue (normal boot), RTC has read and the console is initializing DRAM, verifying fw.img, reading PRSH, etc
boot1 - solid blue, disk drive activated -- DRAM initialized, fw.img verified correctly, probably jumped to IOSU.

PRSHhax happens before the LED turns solid blue, ie this is what mine looks like on a successful PRSHhax:


Edit: so basically all that means is, your boot1 is somehow not executing PRSHhax. One possibility could be that DRAM isn't persisting correctly across resets, which might(?) explain the red blinks? I'm not totally sure though, need to think on it a bit.

Random thought here, i wired my pico to tp1001 instead of tp101 lol. do you think the wii u maybe fried the pico or something? Pico is just there to glitch the system right? has nothing to do with any options in minute or anything else? if it loads up its working fine

also i tried to reflash the sd card with no luck
Post automatically merged:

What might work, but first dump your SLC and put it on your PC. Is to flash your nand backup from your other console to a 32gb sd card, and write the slc from that console to this one. (you will get some errors during the write) Attempt to dump your otp via PRSHhax. Then flash the original SLC from this console back once you've dumped the otp. Once the original SLC is written back use the dumped otp and attempt to boot ios and see if it works.

I've written the wrong slc to a console and it's fine as long as you have the original backup that you can use to overwrite it again so this much is recoverable if it doesn't work at least. I'm thinking that it may just trick the wii u enough that it at least sees a valid image and allows you to dump the proper otp.
I think i will try this out forsure if nothing else works. i have plenty of working wii u's laying around to try that with. i have a working 64gb nandaid system, could i just flash the mlc to the 64gb card im trying to use on this japanese system, flash the slc and change the systemprod.xml in recovery?
 
Last edited by Tuner357,

fringle

Well-Known Member
Member
Joined
Apr 16, 2009
Messages
704
Trophies
1
XP
1,107
Country
Canada
Just as a recap, this console basically has had the factory emmc removed the resistors going to the chip are removed and the clk trace is cut. I can still dump OTP with prshhax or no?

Also do you think i should maybe format this sd card and try again?
Post automatically merged:


Random thought here, i wired my pico to tp1001 instead of tp101 lol. do you think the wii u maybe fried the pico or something? Pico is just there to glitch the system right? has nothing to do with any options in minute or anything else? if it loads up its working fine

also i tried to reflash the sd card with no luck
Post automatically merged:


I think i will try this out forsure if nothing else works. i have plenty of working wii u's laying around to try that with. i have a working 64gb nandaid system, could i just flash the mlc to the 64gb card im trying to use on this japanese system, flash the slc and change the systemprod.xml in recovery?
That may work but you will get errors during the flash due to SLC not matching the data. I'm just thinking that this will just trick the system into thinking the nand from the other system matches enough to dump the correct otp. I don't think it would work for a full backup restore to a working state with a different mlc's data. Shouldn't hurt much to try as long as you do have the original backup.
 

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
Another's Wii Us nlc won't work because each has it's own encryption key.

Yea thats kinda what I figured. I feel like Im doing something wrong since it should all technically be working. I used the same sd cards, with the same files as my last Wii u I did haha.

So what's the seeprom + OTP dump used for then? I can get it to spit out a de_fuse_otp.bin file
 

SDIO

Well-Known Member
OP
Member
Joined
Feb 13, 2023
Messages
2,270
Trophies
0
Age
28
XP
1,390
Country
Germany
otp holds the the key and some basic read only settings. seepriom also holds things like the usb key and some settings like the sata device.
Defuse works by tricking the Wii U into reading the OTP all zeros and by that disabling security. The problem with that is, that also the keys are zero. Dumping the OTP in that state obviously won't help, Thats where PRSHhax should come in.
It uses a warmstart exploit where the Wii U can start with the OTP in normal condition (not zeroed out) but gain code exec again to dump it. The problem with your wii U is that the "gaining exec" part isn't working.

I would recommend to just bridge over the dat and cmd pads, to reattch the emmc. For clk you can take the eMMC side of the clk from the CK pad of the nand aid and connect it either to the appropriate pin on the micro sd slot or to the castellated via.on the wii u side, Also make sure to open the dis jumper again, if you closed it and to remove the sd from the nand aid.
That should et our wii u booting again and you should be able to dup otp the usual way (nanddumper or recovery)
 

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
otp holds the the key and some basic read only settings. seepriom also holds things like the usb key and some settings like the sata device.
Defuse works by tricking the Wii U into reading the OTP all zeros and by that disabling security. The problem with that is, that also the keys are zero. Dumping the OTP in that state obviously won't help, Thats where PRSHhax should come in.
It uses a warmstart exploit where the Wii U can start with the OTP in normal condition (not zeroed out) but gain code exec again to dump it. The problem with your wii U is that the "gaining exec" part isn't working.

I would recommend to just bridge over the dat and cmd pads, to reattch the emmc. For clk you can take the eMMC side of the clk from the CK pad of the nand aid and connect it either to the appropriate pin on the micro sd slot or to the castellated via.on the wii u side, Also make sure to open the dis jumper again, if you closed it and to remove the sd from the nand aid.
That should et our wii u booting again and you should be able to dup otp the usual way (nanddumper or recovery)

Awesome, thanks for that explanation. Definitely clears some stuff up. Im pretty busy this weekend but will try and maybe get some time tomorrow morning and try and get that OTP dumped
Post automatically merged:

otp holds the the key and some basic read only settings. seepriom also holds things like the usb key and some settings like the sata device.
Defuse works by tricking the Wii U into reading the OTP all zeros and by that disabling security. The problem with that is, that also the keys are zero. Dumping the OTP in that state obviously won't help, Thats where PRSHhax should come in.
It uses a warmstart exploit where the Wii U can start with the OTP in normal condition (not zeroed out) but gain code exec again to dump it. The problem with your wii U is that the "gaining exec" part isn't working.

I would recommend to just bridge over the dat and cmd pads, to reattch the emmc. For clk you can take the eMMC side of the clk from the CK pad of the nand aid and connect it either to the appropriate pin on the micro sd slot or to the castellated via.on the wii u side, Also make sure to open the dis jumper again, if you closed it and to remove the sd from the nand aid.
That should et our wii u booting again and you should be able to dup otp the usual way (nanddumper or recovery)

Everything worked! Flashed the 64gb mlc, now boots up with error which is expected. I went in to recovery mode, and I'm guessing I'm supposed to go to debug system region?

When I try to fix region, it says "MCP_setsysprobsettings() failed: fffbffee"

Any idea what im doing wrong?
 
Last edited by Tuner357,
  • Like
Reactions: Valery0p

fringle

Well-Known Member
Member
Joined
Apr 16, 2009
Messages
704
Trophies
1
XP
1,107
Country
Canada
Awesome, thanks for that explanation. Definitely clears some stuff up. Im pretty busy this weekend but will try and maybe get some time tomorrow morning and try and get that OTP dumped
Post automatically merged:



Everything worked! Flashed the 64gb mlc, now boots up with error which is expected. I went in to recovery mode, and I'm guessing I'm supposed to go to debug system region?

When I try to fix region, it says "MCP_setsysprobsettings() failed: fffbffee"

Any idea what im doing wrong?
Follow this guide for changing the region. You shouldn't have to worry about removing the Japanese titles though as you just installed a clean USA mlc, unless you actually istalled the Japanese titles then you will still want to remove them.

https://lazr1026.github.io/regionchange/#/
 

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
Follow this guide for changing the region. You shouldn't have to worry about removing the Japanese titles though as you just installed a clean USA mlc, unless you actually istalled the Japanese titles then you will still want to remove them.

https://lazr1026.github.io/regionchange/#/
Thanks! i changed sys_prod.xml and now everything says usa. but i get a 160-0103 now when trying to boot. does this look correct from when i ran stroopwafel? it ended with a solid orange light like my last console(used option 2 on minute), so i just figured everything was good to go

Code:
MakeQuota;/vol/storage_mlc01/sys;-00000000
MakeDir;/vol/storage_mlc01/usr;-00000000
MakeDir;/vol/storage_mlc01/usr/boss;-00000000
MakeDir;/vol/storage_mlc01/usr/save;-00000000
MakeDir;/vol/storage_mlc01/usr/save/00050010;-00000000
MakeDir;/vol/storage_mlc01/usr/packages;-00000000
MakeDir;/vol/storage_mlc01/usr/tmp;-00000000
Flush;MLC;-00000000
OpenDir;/vol/sdcard/wafel_install;-00000000
OpenMCP;/vol/sdcard/wafel_install;-00000000
InstallInfo;0005001010045100;-00000000
Install;0005001010045100;-00000000
InstallInfo;0005001010047100;-00000000
Install;0005001010047100;-00000000
InstallInfo;0005001010048100;-00000000
Install;0005001010048100;-00000000
InstallInfo;0005001010049100;-00000000
Install;0005001010049100;-00000000
InstallInfo;0005001010062100;-00000000
Install;0005001010062100;-00000000
InstallInfo;0005001010066000;-00000000
Install;0005001010066000;-00000000
InstallInfo;0005003010010109;-00000000
Install;0005003010010109;-00000000
InstallInfo;0005003010011109;-00000000
Install;0005003010011109;-00000000
InstallInfo;0005003010017109;-00000000
Install;0005003010017109;-00000000
InstallInfo;0005001b1004f000;-00000000
Install;0005001b1004f000;-00000000
InstallInfo;0005001b1005c000;-00000000
Install;0005001b1005c000;-00000000
InstallInfo;0005001b1005f000;-00000000
Install;0005001b1005f000;-00000000
InstallInfo;0005001b1006c000;-00000000
Install;0005001b1006c000;-00000000
InstallInfo;0005001b10042300;-00000000
Install;0005001b10042300;-00000000
InstallInfo;0005001b10042400;-00000000
Install;0005001b10042400;-00000000
InstallInfo;0005001b10050000;-00000000
Install;0005001b10050000;-00000000
InstallInfo;0005001b10051000;-00000000
Install;0005001b10051000;-00000000
InstallInfo;0005001b10052000;-00000000
Install;0005001b10052000;-00000000
InstallInfo;0005001b10053000;-00000000
Install;0005001b10053000;-00000000
InstallInfo;0005001b10054000;-00000000
Install;0005001b10054000;-00000000
InstallInfo;0005001b10056000;-00000000
Install;0005001b10056000;-00000000
InstallInfo;0005001b10057000;-00000000
Install;0005001b10057000;-00000000
InstallInfo;0005001b10058000;-00000000
Install;0005001b10058000;-00000000
InstallInfo;0005001b10059100;-00000000
Install;0005001b10059100;-00000000
InstallInfo;0005001b10063000;-00000000
Install;0005001b10063000;-00000000
InstallInfo;0005001b10065000;-00000000
Install;0005001b10065000;-00000000
InstallInfo;0005001b10067100;-00000000
Install;0005001b10067100;-00000000
InstallInfo;0005001b10068000;-00000000
Install;0005001b10068000;-00000000
InstallInfo;0005001b10069100;-00000000
Install;0005001b10069100;-00000000
InstallInfo;000500101004a100;-00000000
Install;000500101004a100;-00000000
InstallInfo;000500101004b100;-00000000
Install;000500101004b100;-00000000
InstallInfo;000500101004c100;-00000000
Install;000500101004c100;-00000000
InstallInfo;000500101004d100;-00000000
Install;000500101004d100;-00000000
InstallInfo;000500101004e100;-00000000
Install;000500101004e100;-00000000
InstallInfo;000500101005a100;-00000000
Install;000500101005a100;-00000000
InstallInfo;000500301001a10a;-00000000
Install;000500301001a10a;-00000000
InstallInfo;000500301006d10a;-00000000
Install;000500301006d10a;-00000000
InstallInfo;00050030100111ff;-00000000
Install;00050030100111ff;-00000000
InstallInfo;000500301001010a;-00000000
Install;000500301001010a;-00000000
InstallInfo;000500301001110a;-00000000
Install;000500301001110a;-00000000
InstallInfo;000500301001210a;-00000000
Install;000500301001210a;-00000000
InstallInfo;000500301001310a;-00000000
Install;000500301001310a;-00000000
InstallInfo;000500301001410a;-00000000
Install;000500301001410a;-00000000
InstallInfo;000500301001510a;-00000000
Install;000500301001510a;-00000000
InstallInfo;000500301001610a;-00000000
Install;000500301001610a;-00000000
InstallInfo;000500301001710a;-00000000
Install;000500301001710a;-FFFBF3B5
InstallInfo;000500301001810a;-00000000
Install;000500301001810a;-00000000
InstallInfo;000500301001910a;-00000000
Install;000500301001910a;-00000000
InstallInfo;0005001010040100;-00000000
Install;0005001010040100;-00000000
InstallInfo;0005001010041100;-00000000
Install;0005001010041100;-00000000
InstallInfo;0005001010043100;-00000000
Install;0005001010043100;-00000000
InstallInfo;0005001010044100;-00000000
Install;0005001010044100;-00000000
InstallInfo;0005001010004009;-00000000
Install;0005001010004009;-00000000
InstallInfo;00050010100040ff;-00000000
Install;00050010100040ff;-00000000
InstallInfo;000500101000400a;-00000000
Install;000500101000400a;-00000000
InstallInfo;0005001010004000;-00000000
Install;0005001010004000;-00000000
InstallInfo;0005001010004001;-00000000
Install;0005001010004001;-00000000
Flush;MLC;-00000000
SetInitialLaunch;0;-00000001
Flush;SLC;-00000000
 
Last edited by Tuner357,

fringle

Well-Known Member
Member
Joined
Apr 16, 2009
Messages
704
Trophies
1
XP
1,107
Country
Canada
You might also need to set your cold boot title to as per the region changing guide as well. This is so it can complete a system update and fully apply the region change. Cold boot title may also still be set to Japanese system menu if you didn't change it.
 

Tuner357

Well-Known Member
Newcomer
Joined
Aug 10, 2023
Messages
95
Trophies
0
Age
31
XP
188
Country
Canada
Check your syslogs ASAP. See here for more details: https://gbatemp.net/threads/636361/
only let me dump 0.log

Code:
2017-03-20 12:28:40
Cafe OS SDK Version 2.13.01 Build 68939 Branch sdk_2_13
Espresso:       0x0000700100000201
Latte:          0x0000409f
System mode:    0x100000
Boot flags:     0xc010000
Security Level: 0x1e
Key Type:       0xfffffffc
Prod Version:   0x5
Serial:         111458622
Model:          WUP-101(01)
Prod Area:      0x1
Game Area:      0x1
5GHz Code:      0x18
BOOT1:          0x20b9
BT:             0x205
DRH:            0x190c
+0x000500301001100a:0x00000064
+0x000500301001000a:0x000000b4
+0x0005001010040000:0x000000d4
-0x0005001010040000:0x000000d4
+0x0005000010105700:0x000000c1
-0x0005000010105700:0x000000c1
sitions
00;00;07;526: ------------------PROCESS 6 LOST FOREGROUND--------------------
00;00;07;527: KiCblRegisterBlocks() completed with status 0:-4.
00;00;07;527: ------------------PROCESS 1 GAIN FOREGROUND--------------------
00;00;07;527: DIAG:Issued KiPrepareTitleAsync(0x000500301001000A)
00:00:07:827: MCP: FSA volume on device /dev/odd04 (atfs) attached @ uptime 7.827 s.
00:00:07:871: MCP: loaded and parsed 'preload.txt' at '/vol/storage_mlc01/sys/title/00050030/1001000a/code'
00:00:07:871: MCP: Preparing hbm.rpx
00:00:07:872: MCP: Mapping /vol/content to /vol/storage_mlc01/sys/title/00050030/1001000a/content
00:00:07:876: MCP: Titles scanned (dev_state 000a) on device /dev/odd02 (atfs) @ uptime 7.876 s.
00;00;07;752: DIAG:Result PrepareTitle(0x000500301001000A) came back with cosxml(0x000500301001000A)
00;00;07;753: TitleId 0x000500301001000A Version 0x000000B4 Built On SDK 21211
00;00;07;753: ------------------PROCESS 1 LOST FOREGROUND--------------------
00;00;07;754: DIAG: PhysAlloc(5, 0x08000000, 0x00000000, 0x00000000, 0x02000000, 0x00000001)
00;00;07;754: DIAG: InitAddrSpace
00;00;07;754: DIAG: Switch(New)
00;00;07;754: DIAG:+Loader(1, 5)
00;00;07;754: DIAG:+KiRPLLoaderSetup
00;00;07;754: DIAG:-KiRPLLoaderSetup: before no-return call to KiLoadContext (0xEFE09400) (0x01003FFC)
00;00;07;754: Title Loc is 0
00:00:08:065: MCP: PID 14 requested to enable power transitions
00;00;07;945: DIAG:-Loader(1, 5)
00;00;07;945: DIAG: SetFG(5)
00;00;07;945: KiCblRegisterBlocks() completed with status 0:-4.
00;00;07;945: ------------------PROCESS 5 GAIN FOREGROUND--------------------
00;00;07;946: SYSLOG_LEVEL 1: Warnings Enabled
00;00;07;946: UserMode Core & Thread Initialization (3 Cores)
00;00;07;947:   Core 1 Complete, Default Thread 0x100457E0
00;00;07;948:   Core 0 Complete, MSR 0x00005072, Default Thread 0x10045140
00;00;07;948:   Core 2 Complete, MSR 0x00005072, Default Thread 0x10045E80
00;00;07;971: UserMode OS library build date: Jul 28 2015 19:57:03
00;00;07;971: __AppFlags: 0x00000200

00;00;07;972: OSBlockThreadsOnExit default for sdk version 21211
00;00;08;250: SYSAPP: RPL Load
00;00;08;267: OSSetting_SynchronousPrinting DISABLED
00;00;08;272: OSSetting_CrashDumpType 0, MINI dump after crash
00:00:08:429: ccr_hid_input_start: idx 0 controller: 0, ep 3 int req --> 0
00:00:08:445: MCP: Titles scanned (dev_state 000a) on device /dev/odd03 (atfs) @ uptime 8.445 s.
00;00;08;306: TCL(5): init DONE
00;00;08;307: VPADInit() depricated, no need to call
00;00;08;308: port 0 attached
00;00;08;308: VPAD Init end, BPERF: (0/8429276) Title PID=5
00;00;08;309: __UVDReadOSRelaunchMode FAILED: returned 9
00;00;08;360:    ACP_AutoInit: start
00;00;08;362:    ACP_AutoInit: ACPInitialize complete
00;00;08;362:    ACP_AutoInit: ACPSaveDataInit complete
00;00;08;365:    ACP_AutoInit: ACPNotifyPlayEvent complete
00;00;08;371:    ACP_AutoInit: NDMInitialize complete
00;00;08;371: ACP: initialized
00;00;08;372: [barista-Process] Product {:Program=>37529, :message=>42751, :ProgramProj=>38946, :root=>38946, :sead=>37528, :resource=>38945}
00;00;08;372: [barista-Process] Cafe OS SDK Version 2.12.11 Build 66642 Branch

00;00;08;455: WPAD: Application Init
00:00:08:684: ATFS: This volume has been expired since Version 1. Current System ATFS Version: 1.
00:00:08:684: ATFS: This volume will be dropped.
00:00:08:685: ATFS atfs_fsops_atfs.c(1003): __checkVolumeHeader returned -2949147
00:00:08:685: ATFS atfs_mount.c(413): mount failed (-2949147)
00:00:08:685: ATFS atfs_mount.c(437): mount failed
00:00:08:685: FSA: ### DATA CORRUPTION ERROR ###, dev:odd04, err:-2949147, cmd:2, path:(null)
00:00:08:687: MCP: Titles scanned (dev_state 000e) on device /dev/odd04 (atfs) @ uptime 8.687 s.
00:00:08:696: IFNET_ETH: Link DOWN.
00:00:08:967: MCP: PID 14 requested to disable power transitions
00;00;08;846: ProcUI: Received Release Foreground message
00;00;08;848: ProcUI: Releasing foreground
00;00;08;914: port 0 detached
00:00:09:077: MCP: PID 14 requested to enable power transitions
00:00:09:077: MCP: PID 14 requested to disable power transitions
00;00;08;955: ------------------PROCESS 5 LOST FOREGROUND--------------------
00;00;08;956: KiCblRegisterBlocks() completed with status 0:-4.
00;00;08;956: ------------------PROCESS 1 GAIN FOREGROUND--------------------
00;00;08;956:


-----------------------------
ROOT IS STARTING MASTER TITLE
-----------------------------

00;00;08;956: TEST COOKIE: YOSHI-1992-11-21-00-00-00
00;00;08;957: DIAG:Issued KiPrepareTitleAsync(0x0005001010040000)
00:00:09:233: MCP: loaded and parsed 'preload.txt' at '/vol/storage_mlc01/sys/title/00050010/10040000/code'
00:00:09:234: MCP: Preparing men.rpx
00:00:09:240: MCP: Mapping /vol/content to /vol/storage_mlc01/sys/title/00050010/10040000/content
00:00:09:241: MCP: Warning title:0x0005001010040000 does not have ramdisk read capability (forcing)
00;00;09;117: DIAG:Result PrepareTitle(0x0005001010040000) came back with cosxml(0x0005001010040000)
00:00:10:095: MCP: Copying file:/vol/storage_mlc01/sys/title/00050010/10040000/content/Common/Package/Men.pack to ramdisk:/vol/system_ram/proc/cache/Men.pack
00:00:10:095: MCP: Link title:0x0005001010040000 file:/vol/content/Common/Package/Men.pack to ramdisk:/vol/sys/proc_ram/cache/Men.pack
00:00:10:095: MCP: 0005001010040000 is not a demo title, skip increment demo launch count
00:00:10:095: MCP: Mapping /vol/content to /vol/storage_mlc01/sys/title/00050010/10040000/content
00;00;09;976: TitleId 0x0005001010040000 Version 0x000000D4 Built On SDK 21211
00;00;09;976: ------------------PROCESS 1 LOST FOREGROUND--------------------
00;00;09;977: DIAG: PhysAlloc(2, 0x40000000, 0x00000000, 0x00000000, 0x02300000, 0x00000001)
00;00;09;977: DIAG: InitAddrSpace
00;00;09;977: DIAG: Switch(New)
00;00;09;977: DIAG:+Loader(1, 7)
00;00;09;977: DIAG:+KiRPLLoaderSetup
00;00;09;978: DIAG:-KiRPLLoaderSetup: before no-return call to KiLoadContext (0xEFE09400) (0x01003FFC)
00;00;09;978: Title Loc is 0
00:00:10:491: MCP: PID 14 requested to enable power transitions
00:00:10:525: [BOSS] BG stress mode is disabled.
00;00;10;371: DIAG:-Loader(1, 7)
00;00;10;371: DIAG: SetFG(7)
00;00;10;371: KiCblRegisterBlocks() completed with status 0:-4.
00;00;10;371: ------------------PROCESS 2 GAIN FOREGROUND--------------------
00;00;10;372: SYSLOG_LEVEL 1: Warnings Enabled
00;00;10;372: UserMode Core & Thread Initialization (3 Cores)
00;00;10;372:   Core 1 Complete, Default Thread 0x100457E0
00;00;10;373:   Core 0 Complete, MSR 0x00005072, Default Thread 0x10045140
00;00;10;374:   Core 2 Complete, MSR 0x00005072, Default Thread 0x10045E80
00;00;10;396: UserMode OS library build date: Jul 28 2015 19:57:03
00;00;10;396: __AppFlags: 0x00000200

00;00;10;397: OSBlockThreadsOnExit default for sdk version 21211
00;00;10;845: SYSAPP: RPL Load
00;00;10;845: mic_core0_thread: master init
00;00;10;885: OSSetting_SynchronousPrinting DISABLED
00;00;10;891: OSSetting_CrashDumpType 0, MINI dump after crash
00:00:11:051: ccr_hid_input_start: idx 0 controller: 0, ep 3 int req --> 0
00;00;10;926: TCL(2): init DONE
00;00;10;928: VPADInit() depricated, no need to call
00;00;10;929: port 0 attached
00;00;10;931: VPAD Init end, BPERF: (0/11051494) Title PID=2
SPM: SetManualMode
00;00;10;984: mic_drc_attach_cb: ch 0 reason 1 flags 0x00040100
00;00;10;985:    ACP_AutoInit: start
00;00;11;074:    ACP_AutoInit: ACPInitialize complete
00;00;11;074:    ACP_AutoInit: ACPSaveDataInit complete
00;00;11;078:    ACP_AutoInit: ACPNotifyPlayEvent complete
00;00;11;659:    ACP_AutoInit: NDMInitialize complete
00:00:12:454: ACP: Mounting "/vol/save/" on "/vol/storage_mlc01/usr/save/00050010/10040000/user/"
00:00:12:454: ACP: Mount done (0)
00;00;12;326: ACP: initialized
00;00;12;327: [barista] Product {:Program=>38956, :message=>43332, :ProgramProj=>39097, :root=>39136, :sead=>37528, :resource=>39136}
00;00;12;327: [barista] Cafe OS SDK Version 2.12.11 Build 66642 Branch

00;00;12;327: ### Application Start Time [12:28:52] ###
00;00;12;327: =================================
 MEM_ARENA_2: total free size =  989763(KB),  966(MB)
=================================
00;00;12;359: WPAD: Application Init
00;00;13;627: rpl_entry
00;00;13;627: OSDynLoad_Acquire() use [2701564]
00;00;13;627: ErrEula: client version 3.
00;00;13;627: ErrEula: thread=0x4c606540, stackSize=      64 KB, stackBase=0x4c60652c, stackEnd=0x4c5f652c (ErrEulaCreate)
00;00;13;935: == sysapp == new path
00;00;13;935: ==== sysapp:dump data 0 ====
00;00;13;935:
00;00;13;935: ==== sysapp:dump data 0 ====
00;00;13;935:
00;00;13;982: ==== sysapp:dump data 0 ====
00;00;13;982:
DRMAPP: built Jul 28 2015 20:01:32
00:00:15:948: MCP: PID 10 requested to enable power transitions
00:00:15:948: MCP_PowerButtonControl(1) returned 0
00;00;16;343: product area 1 drc area 0
00;00;16;346: __CCRSysNeedsDRCFWUpdate : language drc version 1702 data version 1702
00;00;16;350: __CCRSysNeedsDRCFWUpdate : firmware drc version 190c data version 190c
00:00:16:516: MCP: Use list "/vol/storage_odd02/update/021301/update.inf.JPN"
00:00:16:993: ACP: "find USB" flag is false.
00:00:17:736: MCP: did not find 'preload.txt' at '/vol/system/title/00000000/0000000a/code', rval -196631
00:00:17:737: MCP: did not find 'preload.txt' at '/vol/storage_odd02/update/021301/code', rval -196631
DRMAPP: kick task: 1
DRMAPP: manage state 0 -> 0
DRMAPP: Patch: scene state: 131303 -> 0
DRMAPP: mediaType = 1, app-box deviceType = 3
DRMAPP: running title = 0005001010040000, deviceType = 3
DRMAPP: Retrieve pre-order flag for title 0005000010105700 (mediaType = 1)
DRMAPP:   --> false
DRMAPP: kick task: 5
DRMAPP: manage state 0 -> 3
DRMAPP: Patch: scene state: 0 -> 3
DRMAPP: kick task: 4
DRMAPP: manage state 3 -> 4
DRMAPP: Patch: scene state: 3 -> 4
DRMAPP: Get title version info.
DRMAPP: Get title update info.
DRMAPP: TitleVersionInfo:
DRMAPP:   currentVersion           193
DRMAPP:   requiredVersion          193
DRMAPP:   needUpdate               0
00:00:18:470: MCP: loaded and parsed 'preload.txt' at '/vol/system/title/00050010/1000400a/code'
00:00:18:471: MCP: did not find 'preload.txt' at '/vol/storage_odd03/code', rval -196631
DRMAPP: kick task: 18
DRMAPP: manage state 4 -> 33
DRMAPP: CheckTitleEnability: retrieve title info for 0005000010105700 (1)
DRMAPP: CheckTitleEnability: check title for 0005000010105700
DRMAPP:  --> 1 (rval = 0)
DRMAPP: CheckTitleEnability: retrieve patch info for 0005000e10105700 (1)
DRMAPP: CheckTitleEnability: no patch
DRMAPP: Patch: scene state: 4 -> 33
DRMAPP: kick task: 19
DRMAPP: manage state 33 -> 35
DRMAPP: Finding package with titleId=0005000010105700, mediaType=1
DRMAPP: Patch: scene state: 33 -> 35
DRMAPP: kick task: 21
DRMAPP: manage state 35 -> 39
DRMAPP: current auto update list: 10 entries
DRMAPP:   [0].config.titleId 0x0005000010105700
DRMAPP: auto update list already registered.
DRMAPP: Patch: scene state: 35 -> 39
DRMAPP: new auto update list: 10 entries
DRMAPP:   [0].config.titleId 0x0005000010105700
DRMAPP:   [1].config.titleId 0x0005000010116400
DRMAPP:   [2].config.titleId 0x000500001018db00
DRMAPP:   [3].config.titleId 0x0005000010190100
DRMAPP:   [4].config.titleId 0x0005000010199000
DRMAPP:   [5].config.titleId 0x0005000010162b00
DRMAPP:   [6].config.titleId 0x0005000010100d00
DRMAPP:   [7].config.titleId 0x00050000101b4100
DRMAPP:   [8].config.titleId 0x00050000101c8900
DRMAPP:   [9].config.titleId 0x0005000010106100
DRMAPP: manage state 39 -> 43
DRMAPP: Patch: scene state: 39 -> 43
DRMAPP: resume daemons.
DRMAPP: AOC: Change state: 65594 -> 0
DRMAPP: Excluding add-on unique id (title: 0005001010040000, dev: 3):
DRMAPP: [AOC] Title 0005000010105700 (mediaType = 1, acpDevType = 3)
DRMAPP: manage state 0 -> 1
DRMAPP: Non-disc title. Listing in-disc AOC is not needed.
DRMAPP: All network package: 0 task(s).
DRMAPP: AOC: Change state: 0 -> 1
DRMAPP: manage state 1 -> 2
DRMAPP: AOC: Change state: 1 -> 2
DRMAPP: manage state 2 -> 3
DRMAPP: AOC: Change state: 2 -> 3
DRMAPP: manage state 3 -> 24
DRMAPP: AOC: Change state: 3 -> 24
DRMAPP: manage state 24 -> 14
DRMAPP: AOC: Change state: 24 -> 14
DRMAPP: manage state 14 -> 17
DRMAPP: AOC: Change state: 14 -> 17
DRMAPP: manage state 17 -> 28
DRMAPP: AOC: Change state: 17 -> 28
DRMAPP: manage state 0 -> 0
DRMAPP: Ticket: Change state: 589888 -> 0
DRMAPP: manage state 0 -> 1
DRMAPP: Ticket: Change state: 0 -> 1
DRMAPP: manage state 1 -> 12
DRMAPP: Ticket: Change state: 1 -> 12
DRMAPP: Kick task: PreOrderChecker::CheckTitleType
DRMAPP: manage state 7 -> 0
DRMAPP: PreOrder: Change state: 0 -> 0
DRMAPP: -- isPreOrderTitle: false [title = 0005000010105700, media = 1]
DRMAPP: manage state 0 -> 3
DRMAPP: PreOrder: Change state: 0 -> 3
DRMAPP: PreOrder: Finished
DRMAPP: Kick task: FreeTrialChecker::GetTargetTitleType
DRMAPP: manage state 0 -> 0
DRMAPP: FreeTrial: Change state: 671232880 -> 0
DRMAPP: Dump FreeTrialTitleData list:
DRMAPP:   0x0005000010185100: product = 0005000010101F00
DRMAPP:   0x0005000010185200: product = 0005000010101C00
DRMAPP:   0x0005000010185300: product = 000500001012BC00
DRMAPP:   0x0005000010185400: product = 0005000010143400
DRMAPP:   0x0005000010185500: product = 0005000010112D00
DRMAPP:   0x0005000010185600: product = 0005000010116300
DRMAPP: Title type: 0 (box = 3)
DRMAPP: manage state 0 -> 30
DRMAPP: FreeTrial: Change state: 0 -> 30
DRMAPP: FreeTrial: Finished
DRMAPP: resume daemons.
00;00;19;834: ACP: detecting USB storage in CheckTitleLaunchByTitleListType.
00;00;19;834: ACP shim: USB storage is not found.
00;00;19;834: ACP: USB storage detection done in CheckTitleLaunchByTitleListType
00:00:20:117: ACP: set boot flag: 0x00000000
00;00;20;727: ACP: detecting USB storage in AssignTitlePatch.
00;00;20;728: ACP shim: USB storage is not found.
00;00;20;728: ACP: USB storage detection done in AssignTitlePatch
00;00;20;950:


Querying BSP for Hardware Information...
00;00;20;950:     It is not Holly/Bolly-Wood
00;00;20;950:     It is Latte A2x or later
00;00;20;950: using DSP memory parameters:
00;00;20;950:     DROM_BASE: 0x3000
00;00;20;950:     IRAM_SIZE: 0x2000
00;00;20;950:     DRAM_SIZE: 0x3000
00:00:22:931: MCP: PID 14 requested to disable power transitions
00:00:23:099: MCP: did not find 'preload.txt' at '/vol/storage_mlc01/usr/title/00050000/10105700/code', rval -196631
00:00:23:099: MCP: Preparing lb_shell.rpx
00;00;22;981: DIAG:Result PrepareTitle(0x0000000000000000) came back with cosxml(0x0005000010105700)
00;00;22;981:
***PPC FAST CYCLE***
00;00;22;981: SHUTINFO: RAMPID 7 is in Foreground
00;00;22;981: SHUTINFO: RAMPID 0 is also alive.
00;00;22;981: SHUTINFO: RAMPID 1 is also alive.
00;00;22;981: SHUTINFO: RAMPID 5 is also alive.
00;00;22;981: SHUTINFO: RAMPID 6 is also alive.
00;00;22;981: p2 received EXIT while in foreground.
00;00;22;991: ProcUI: Received Release Foreground message (shutdown has begun)
00;00;22;992: ProcUI: Releasing foreground
00;00;23;021: mic_drc_attach_cb: ch 0 reason 0 flags 0x00000000
00;00;23;061: port 0 detached
00;00;23;107: Deferred Exit Process 2 - pushing exit message on release.
00;00;23;107: p2c1,de EXIT message pushed to system queue.
00;00;23;107: ------------------PROCESS 2 LOST FOREGROUND--------------------
00;00;23;107: KiCblRegisterBlocks() completed with status 0:-4.
00;00;23;107: ------------------PROCESS 1 GAIN FOREGROUND--------------------
00;00;23;107: p2c2 EXIT message retrieved from system queue. main() should exit.
00;00;23;108: ProcUI: Received Exit message
00:00:23:271: ccr_hid_input_start: idx 0 controller: 0, ep 3 int req --> 0
00;00;23;149: TCL(1): init DONE
00;00;23;150: port 0 attached
DRMAPP: Finalize
00;00;23;165: VPADInit() depricated, no need to call
00;00;23;170: sMasterTitleSwitchedToExit
00;00;23;170: ROOT: Issuing reboot.
00;00;23;192: ROOT: Waiting for EXIT message or RECYCLE message
00;00;23;795: ### Application Exit Time [12:29:03] ###
00;00;23;795:

!!WARNING - main() exited with an active thread 0x4C606540 [prio = 81] "Prepare Thread"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x11BEAEE8 [prio = 80] "WorkerMgr/Worker1(cSub1)"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x11BEF778 [prio = 80] "WorkerMgr/Worker2(cSub2)"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x11BA0AF8 [prio = 81] "InitInRootTask"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x1322B970 [prio = 82] "UpdateScalableFont"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x14034848 [prio = 82] "MenUsbStorageChecker"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x22A670C8 [prio = 81] "LaunchCoreCheckUpdate"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x274FE0A8 [prio = 83] "FPCheckOnline"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x2750E7C0 [prio = 83] "FPUpdateRequestList"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x27A23AA0 [prio = 83] "AccountMgrThread"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x28419000 [prio = 81] "MenSwkbdCalculator_Create"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x28429788 [prio = 81] "MenSwkbdCalculator_Font"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x28439EE8 [prio = 82] "MenSwkbdCalculator_Predict"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x28471518 [prio = 83] "NetThread"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x2FEE89B0 [prio = 83] "MiiThread"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x349FB460 [prio = 83] "TexCreate"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x365E7688 [prio = 82] "LateLoader"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x383081B0 [prio = 81] "MiiSaveJob"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x38E69578 [prio = 81] "Loginout"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x393DA778 [prio = 84] "EulaThred"
00;00;23;795:

!!WARNING - main() exited with an active thread 0x39864D90 [prio = 81] "SeqLaunchPushRating"
00;00;23;795: +OSDrivers_Done(p2,c1)
00;00;23;795: +OSDrivers_Done(p2,c0)
00;00;23;795: +OSDrivers_Done(p2,c2)
00;00;23;795: __OSShutdownIdleBegin()
00;00;23;795: __OSSetMaxSchedulingBand 1
00;00;23;795: >x(2, 1)"TEST"
00;00;23;795: <x(2, 1)"TEST" 0 ms
00;00;23;795: >x(2, 1)"Button"
00;00;23;795: <x(2, 1)"Button" 0 ms
00;00;23;795: >x(2, 1)"Clipboard"
00;00;23;795: <x(2, 1)"Clipboard" 0 ms
00;00;23;795: >x(2, 1)"ACP"
00;00;23;806: <x(2, 1)"ACP" 10 ms
00;00;23;806: >x(2, 1)"ACPLoad"
00;00;23;806: <x(2, 1)"ACPLoad" 0 ms
00;00;23;806: >x(2, 1)"INPT"
00;00;23;806: <x(2, 1)"INPT" 0 ms
00;00;23;806: >x(2, 0)"ccr_mic"
00;00;23;806: <x(2, 0)"ccr_mic" 0 ms
00;00;23;806: >x(2, 1)"NTAG"
00;00;23;806: <x(2, 1)"NTAG" 0 ms
00;00;23;807: >x(2, 1)"UVD"
00;00;23;834: <x(2, 1)"UVD" 27 ms
00;00;23;834: >x(2, 1)"GX2"
00;00;23;834: <x(2, 1)"GX2" 0 ms
00;00;23;834: >x(2, 1)"ProcUI"
00;00;23;834: <x(2, 1)"ProcUI" 0 ms
00;00;23;834: >x(2, 1)"UHS"
00;00;23;834: <x(2, 1)"UHS" 0 ms
INFO: nn::ipc avoided busy close on /dev/acp_main (moduleId = 301, tag = 0) from pid = 21
00;00;23;834: >x(2, 1)"AVM"
00;00;23;834: <x(2, 1)"AVM" 0 ms
00;00;23;834: >x(2, 1)"VPAD"
00;00;23;834: <x(2, 1)"VPAD" 0 ms
00;00;23;834: >x(2, 1)"WPAD"
00;00;23;834: <x(2, 1)"WPAD" 0 ms
00;00;23;834: >x(2, 1)"NETWORK"
00;00;23;834: <x(2, 1)"NETWORK" 0 ms
00;00;23;834: >x(2, 1)"CCR"
00;00;23;834: <x(2, 1)"CCR" 0 ms
00;00;23;834: >x(2, 1)"TCL"
00;00;23;834: <x(2, 1)"TCL" 0 ms
00;00;23;834: >x(2, 1)"FS"
Fsa profiler has been disabled already.
00;00;23;834: <x(2, 1)"FS" 0 ms
00;00;23;834: >x(2, 1)"SETTING"
00;00;23;835: <x(2, 1)"SETTING" 0 ms
00;00;23;835: >x(2, 1)"IPC"
00;00;23;837: ABANDONED ORPHANED IPC REPLY FOR RAMPID 7
00;00;23;837: ABANDONED ORPHANED IPC REPLY FOR RAMPID 7
00:00:23:992: MCP: Unlink title:0x0005001010040000 file:/vol/content/Common/Package/Men.pack from ramdisk:/vol/sys/proc_ram/cache/Men.pack
00:00:24:009: MCP: PID 14 requested to enable power transitions
00:00:24:010: MCP: PID 10 requested to disable power transitions
00:00:24:010: MCP_PowerButtonControl(0) returned 0
00:00:24:018: AUXIL Info: fast relaunch.
00;00;23;870: ABANDONED ORPHANED IPC REPLY FOR RAMPID 7
00;00;23;870: <x(2, 1)"IPC" 35 ms
00;00;23;870: >x(2, 1)"Cache"
00;00;23;870: <x(2, 1)"Cache" 0 ms
00;00;23;870: >x(2, 1)"MEM"
00;00;23;870: <x(2, 1)"MEM" 0 ms
00;00;23;871: -OSDrivers_Done(p2,c1)
00;00;23;871: -OSDrivers_Done(p2,c2)
00;00;23;871: -OSDrivers_Done(p2,c0)
00;00;23;873: +IPCKDriver_Cleanup(7)
00;00;23;873: -IPCKDriver_Cleanup(7)
00;00;23;874: ---Root Invoking Recycle---
00;00;23;889:


---PPC USER-LEVEL FAST RESTART---


00;00;23;889: New master title is a Game(0x80000000)
00;00;23;889: MASTER TITLE ON   FLASH
00:00:24:186: MCP: PID 14 requested to disable power transitions
00;00;24;065:


-----------------------------
ROOT IS STARTING MASTER TITLE
-----------------------------

00;00;24;065: TEST COOKIE: YOSHI-1992-11-21-00-00-00
00:00:24:347: MCP: did not find 'preload.txt' at '/vol/storage_mlc01/usr/title/00050000/10105700/code', rval -196631
00:00:24:347: MCP: Preparing lb_shell.rpx
00:00:24:357: MCP: Mapping /vol/content to /vol/storage_mlc01/usr/title/00050000/10105700/content
00:00:24:357: MCP: 0005000010105700 is not a demo title, skip increment demo launch count
00:00:24:357: MCP: Mapping /vol/content to /vol/storage_mlc01/usr/title/00050000/10105700/content
00;00;24;234: DIAG:Result PrepareTitle(0x0000000000000000) came back with cosxml(0x0005000010105700)
00;00;24;238: TitleId 0x0005000010105700 Version 0x000000C1 Built On SDK 21213
00;00;24;304: port 0 detached
00;00;24;345: ------------------PROCESS 1 LOST FOREGROUND--------------------
00;00;24;346: DIAG: PhysAlloc(15, 0x40000000, 0x00000000, 0x00000000, 0x07F00000, 0x00000001)
00;00;24;346: DIAG: InitAddrSpace
00;00;24;346: DIAG: Switch(New)
00;00;24;346: DIAG:+Loader(1, 7)
00;00;24;346: DIAG:+KiRPLLoaderSetup
00;00;24;347: DIAG:-KiRPLLoaderSetup: before no-return call to KiLoadContext (0xEFE09400) (0x01003FFC)
00;00;24;347: Title Loc is 0
00:00:25:470: MCP: PID 14 requested to enable power transitions
00;00;25;350: DIAG:-Loader(1, 7)
00;00;25;350: DIAG: SetFG(7)
00;00;25;350: KiCblRegisterBlocks() completed with status 0:-4.
00;00;25;350: ------------------PROCESS 15 GAIN FOREGROUND--------------------
00;00;25;351: SYSLOG_LEVEL 1: Warnings Enabled
00;00;25;351: UserMode Core & Thread Initialization (3 Cores)
00;00;25;351:   Core 1 Complete, Default Thread 0x100457E0
00;00;25;353:   Core 0 Complete, MSR 0x00005072, Default Thread 0x10045140
00;00;25;354:   Core 2 Complete, MSR 0x00005072, Default Thread 0x10045E80
00;00;25;377: UserMode OS library build date: Jul 28 2015 19:57:03
00;00;25;377: __AppFlags: 0x00000200

00;00;25;377: OSBlockThreadsOnExit default for sdk version 21213
00;00;25;650: mic_core0_thread: master init
00;00;25;650: SYSAPP: RPL Load
00;00;25;668: OSSetting_SynchronousPrinting DISABLED
00;00;25;672: OSSetting_CrashDumpType 0, MINI dump after crash
00:00:25:829: ccr_hid_input_start: idx 0 controller: 0, ep 3 int req --> 0
00;00;25;705: TCL(15): init DONE
00;00;25;708: VPADInit() depricated, no need to call
00;00;25;708: port 0 attached
00;00;25;709: VPAD Init end, BPERF: (0/25829670) Title PID=15
SPM: SetAutoModeForDebug
00;00;25;746: mic_drc_attach_cb: ch 0 reason 1 flags 0x00040100
00;00;25;747:    ACP_AutoInit: start
00;00;25;769:    ACP_AutoInit: ACPInitialize complete
00;00;25;769:    ACP_AutoInit: ACPSaveDataInit complete
00;00;25;772:    ACP_AutoInit: ACPNotifyPlayEvent complete
00;00;25;774:    ACP_AutoInit: NDMInitialize complete
00;00;25;775: ACP: initialized
00;00;25;883: rpl_entry
00;00;25;883: OSDynLoad_Acquire() use [2701564]
00;00;25;883: ErrEula: client version 3.
00;00;25;883: ErrEula: thread=0x100457e0, stackSize=      31 KB, stackBase=0x109e2038, stackEnd=0x109da040 (ErrEulaCreate)
00;00;28;080: WPAD: Application Init
00:00:28:321: ACP: Mounting "/vol/save/" on "/vol/storage_mlc01/usr/save/00050000/10105700/user/"
00:00:28:322: ACP: Mount done (0)
00:00:28:450: ACP: Mounting "/vol/save/" on "/vol/storage_mlc01/usr/save/00050000/10105700/user/"
00:00:28:451: ACP: Mount done (0)
00;00;28;667: rpl_entry
00;00;28;667: SWKBD: OSDynLoad_Acquire() use [3025580/3670016]
00;00;28;667: SWKBD: client version 3.
00;00;28;667: SWKBD: thread=0x100457e0, stackSize=      31 KB, stackBase=0x109e2038, stackEnd=0x109da040 (SwkbdCreate)
00:00:29:396: MCP: PID 10 requested to enable power transitions
00:00:29:396: MCP_PowerButtonControl(1) returned 0
00:02:13:346: NET: >>> Received request to kill all sockets.
00:02:13:347: NET: Socket binding (resource: 0x00001a80)
00:02:17:378: NET: Change admin state (1 -> 1)(iface:0 link:2)
00:02:17:379: [WD]>>>> Linkup msg from Net
00:02:17:388: wlc_mlme_join_cmd called with Command 0x3 Length 0x21
00:02:17:392: NET: Change admin state (2 -> 2)(iface:1 link:2)
00:02:17:392: NET: Change admin state (1 -> 1)(iface:0 link:3)
00:02:17:508: [WD]>>>> Linkup msg from Net
00:02:17:518: wlc_mlme_join_cmd called with Command 0x3 Length 0x21
00:02:21:193: MCP: PID 10 has sent power button event
00:02:21:193: MCP: Power Transition -> PM_STANDBY, flags 0x0
00;02;21;072: DRC Power Button Pressed!
00;02;21;072: __set_button_state : setting state to 4
00;02;21;075:
***PPC TOLD TO SHUT DOWN (m4,f0)***
00;02;21;075: SHUTINFO: RAMPID 7 is in Foreground
00;02;21;075: SHUTINFO: RAMPID 0 is also alive.
00;02;21;075: SHUTINFO: RAMPID 1 is also alive.
00;02;21;075: SHUTINFO: RAMPID 5 is also alive.
00;02;21;075: SHUTINFO: RAMPID 6 is also alive.
00;02;21;075: p15 received EXIT while in foreground.
00;02;21;087: ProcUI: Received Release Foreground message (shutdown has begun)
00;02;21;088: ProcUI: Releasing foreground
00;02;21;139: mic_drc_attach_cb: ch 0 reason 0 flags 0x00000000
00:02:21:285: Acquired IP address via DHCP client for interface: wl0
00:02:21:285: IP address : 192.168.0.2
00:02:21:286: Subnet Mask: 255.255.255.0
00:02:21:286: Gateway    : 192.168.0.1
00;02;21;180: port 0 detached
00;02;21;225: Deferred Exit Process 15 - pushing exit message on release.
00;02;21;225: p15c1,de EXIT message pushed to system queue.
00;02;21;225: ------------------PROCESS 15 LOST FOREGROUND--------------------
00;02;21;225: KiCblRegisterBlocks() completed with status 0:-4.
00;02;21;225: ------------------PROCESS 1 GAIN FOREGROUND--------------------
00;02;21;226: p15c2 EXIT message retrieved from system queue. main() should exit.
00;02;21;226: ProcUI: Received Exit message
00;02;21;234: SWKBD: thread=0x100457e0, stackSize=      31 KB, stackBase=0x109e2038, stackEnd=0x109da040 (SwkbdDestroy)
00;02;21;240: rpl_entry
00:02:21:421: ccr_hid_input_start: idx 0 controller: 0, ep 3 int req --> 0
00;02;21;299: TCL(1): init DONE
00;02;21;300: port 0 attached
00;02;21;320: VPADInit() depricated, no need to call
00;02;21;380: sMasterTitleSwitchedToExit
00;02;21;380: ROOT: Issuing reboot.
00;02;21;388: ROOT: Waiting for EXIT message or RECYCLE message
00;02;22;505:

Core2: Instruction at 0x0103CB88 (from SRR0) invalid access of 0x10895940 (value from DAR)
00;02;22;505:
--Proc15-Core2--------- OSContext 0x108958A0 --------------------

00;02;22;505: tag1  = 0x4F53436F (expecting 0x4F53436F)
00;02;22;505: tag2  = 0x6E747874 (expecting 0x6E747874)
00;02;22;505: TBR   = 0x00000002_09D5A069
00;02;22;505: CR    = 0x42000000
00;02;22;505: CTR   = 0x01037ED0
00;02;22;505: LR    = 0x01037EB0 coreinit.rpl|OSInitMutexEx+0x4E0C
00;02;22;505: SRR0  = 0x0103CB88 coreinit.rpl|__OSUnlockScheduler+0xA8
00;02;22;505: SRR1  = 0x00007072

00;02;22;505: state = 0x0006

00;02;22;505: r0   = 0x00000004 (             4)  r16  = 0x00000000 (             0)
00;02;22;505: r1   = 0x13683448 (     325596232)  r17  = 0x00000000 (             0)
00;02;22;505: r2   = 0x1050a200 (     273719808)  r18  = 0x00000000 (             0)
00;02;22;505: r3   = 0x135dbf58 (     324910936)  r19  = 0x00000000 (             0)
00;02;22;505: r4   = 0x00000050 (            80)  r20  = 0x00000000 (             0)
00;02;22;505: r5   = 0xed1b7680 (    -316967296)  r21  = 0x00000000 (             0)
00;02;22;505: r6   = 0x00000000 (             0)  r22  = 0x00000000 (             0)
00;02;22;505: r7   = 0x00000050 (            80)  r23  = 0x00000000 (             0)
00;02;22;505: r8   = 0x0103d3a8 (      17028008)  r24  = 0x00000000 (             0)
00;02;22;505: r9   = 0x00000002 (             2)  r25  = 0x00000000 (             0)
00;02;22;505: r10  = 0x108958a0 (     277436576)  r26  = 0x00000000 (             0)
00;02;22;505: r11  = 0x00000000 (             0)  r27  = 0x00000000 (             0)
00;02;22;505: r12  = 0x00000002 (             2)  r28  = 0x00000000 (             0)
00;02;22;505: r13  = 0x109d60e0 (     278749408)  r29  = 0x108958a0 (     277436576)
00;02;22;505: r14  = 0x00000000 (             0)  r30  = 0x135dbf4c (     324910924)
00;02;22;505: r15  = 0x00000000 (             0)  r31  = 0x135dbf4e (     324910926)
00;02;22;505:
--Stack Trace--------------------------
00;02;22;506:
Address:      Back Chain    LR Save
00;02;22;506: 0x13683448:   0x13683460    0x01037ea8 coreinit.rpl|OSInitMutexEx+0x12c
00;02;22;506: 0x13683460:   0x13683470    0x01037f04 coreinit.rpl|OSLockMutex+0x34
00;02;22;506: 0x13683470:   0x13683480    0x08321be8 lb_shell|lb_shell+0x0
00;02;22;506: 0x13683480:   0x13683500    0x081f6c28 lb_shell|lb_shell+0x0
00;02;22;506: 0x13683500:   0x13683600    0x081f7110 lb_shell|lb_shell+0x0
00;02;22;506: 0x13683600:   0x136836d0    0x08123348 lb_shell|lb_shell+0x0
00;02;22;506: 0x136836d0:   0x13683710    0x081230ec lb_shell|lb_shell+0x0
00;02;22;506: 0x13683710:   0x13683720    0x0812583c lb_shell|lb_shell+0x0
00;02;22;507: 0x13683720:   0x13683738    0x08124d74 lb_shell|lb_shell+0x0
00;02;22;507: 0x13683738:   0x13683790    0x081f7f9c lb_shell|lb_shell+0x0
00;02;22;507: 0x13683790:   0x13683800    0x081f81c4INFO: nn::ipc avoided busy close on /dev/acp_main (moduleId = 301, tag = 0) from pid = 21
 lb_shell|lb_shell+0x0
00;02;22;507: 0x13683800:   0x13683850    0x081f8680 lb_shell|lb_shell+0x0
00;02;22;507: 0x13683850:   0x13683878    0x0823bcf8 lb_shell|lb_shell+0x0
00;02;22;507: 0x13683878:   0x13683888    0x081f7bec lb_shell|lb_shell+0x0
00;02;22;507: 0x13683888:   0x13683898    0x0820f64c lb_shell|lb_shell+0x0
00;02;22;507: 0x13683898:   0x136838c0    0x081f7358 lb_shell|lb_shell+0x0
00;02;22;507:

00;02;22;514: KiCblRegisterBlocks() completed with status 0:-4.
00:02:22:673: COS encountered unrecoverable error...

Pending Resource Request for COS processes...
        Title Id       Process Id -> RM Path       
00:02:22:680: [FPD] Finalizing...
00:02:22:688: [FPD] Finished with SHUTDOWN mode.
00:02:22:761: NET: >>> Received request to kill all sockets for shutdown.
00:02:22:762: NET: Change admin state (1 -> 2)(iface:0 link:1)
00:02:23:663: NNSM: Total SUSPEND Time 985ms
00:02:23:663: NNSM:    /dev/dlp               0ms
00:02:23:663: NNSM:    /dev/nnmisc          514ms
00:02:23:663: NNSM:    /dev/ac_main         196ms
00:02:23:663: NNSM:    /dev/act             985ms
00:02:23:663: NNSM:    /dev/fpd              90ms
00:02:23:663: NNSM:    /dev/acp_main        937ms
00:02:23:663: NNSM:    /dev/pdm             326ms
00:02:23:664: NNSM:    /dev/boss            205ms
00:02:23:664: NNSM:    /dev/nim             193ms
00:02:23:664: NNSM:    /dev/emd             100ms
00:02:23:664: NNSM:    /dev/ndm              92ms
00:02:23:720: AUXIL Info: suspended.
00:02:23:722: UMS Trace: UMSServerDestroy 0
00:02:23:726: CDC_SIGNAL_STA_ASSOCIATED_NOTIFY
00:02:23:744: __ccr_cdc_async_read_complete: status --> 0xFFDEFFD2
, len00:02:23:744: __ccr_cdc_read: Rc --> 0xFFDEFFFD
00:02:23:745: UHS1 Trace: DevFsm(EHCI-2/L1/P1/A01): Final teardown.
00:02:23:761: UHS1 Trace: HubPortFsm(OHCI-2:0/L0/P0/A00): Terminated.
00:02:23:763: UHS1 Trace: DevFsm(root hub): Final teardown.
00:02:23:766: UHS1 Trace: HubPortFsm(EHCI-2/L0/P0/A00): Terminated.
00:02:23:767: CCR_MAIN: de-activating root hub.
00:02:23:768: UHS1 Trace: DevFsm(root hub): Final teardown.
00:02:27:676: MCP: life time number of fatal errors - 99

Post automatically merged:

You might also need to set your cold boot title to as per the region changing guide as well. This is so it can complete a system update and fully apply the region change. Cold boot title may also still be set to Japanese system menu if you didn't change it.

I did remember to do that and still no luck. i tried a couple times actually lol
 
Last edited by Tuner357,

SDIO

Well-Known Member
OP
Member
Joined
Feb 13, 2023
Messages
2,270
Trophies
0
Age
28
XP
1,390
Country
Germany
please use [CODE]code[/CODE] if you post the output and if it is really long put it in a spolier, else it get's very hard to browse here.
 
Last edited by SDIO,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    BakerMan @ BakerMan: ... that's rough buddy