Hacking VWii recovery using WupHax?

[cmf2k1]

Using version from Homebrew AppStore. I managed to transfer files by loading mocha cfw but file permissions are different. Looks like need to use wupserver but I'm unclear on the python commands and don't want to brick so hoping someone can provide some advice.

 

[Irastris]

FTPiiU works perfectly if you know what you're doing.

 

[cmf2k1]

@lrastris care to elaborate i've looked through forums and not seen anything about changing file permission using ftp or suggest what I can transfer correctly with FTPiiU everywhere assuming you've copied an vWii IOS using this method. Permissions are definitely different for contents and data folders for this IOS than the others following transfer

 

[Ryccardo]

From this part in slccmpt:/sys/uid.sys we can deduce that the owner (not permissions) for ios58 is 0x1021:

(this should be same for everyone given how there are only other factory-installed system titles before, but never hurts to check on your own console) http://wiibrew.org/wiki//sys/uid.sys

I could check the permissions (mode) on my working console, but here's the catch: wupserver (at least Fix94's version, more updated than Dimok's) doesn't have a feature to actually set the owner, only the mode (which was the one Punderino mentioned), so you won't be able to do much for now yet.



Have you tried running Yet Another Wad Manager Mod directly as boot.elf, using a game exploit or mii channel injection?
I don't think it's supposed to work because none of those titles have AHBPROT, but someone yesterday did indeed manage to do that (maybe they had a CIOS or trucha installed), from there you can then simply remove and reinstall a backup of 58!

 

[Ryccardo]

Here are the metadata dumps, un/luckily all the owners appear to be 0 so either wupserver doesn't know about Wii-mode owners or they're actually 0.......


C:\Users\Ryccardo\Downloads>python -i wupclient.py
>>> mount_slccmpt01()
>>> w.stat("/vol/storage_slccmpt01/shared1/0000004c.app")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x12c38
>>> w.stat("/vol/storage_slccmpt01/title/00000001/0000003a/content/00000000.app")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x40
>>> w.stat("/vol/storage_slccmpt01/title/00000001/0000003a/content/title.tmd")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x490
>>> w.stat("/vol/storage_slccmpt01/ticket/00000001/0000003a.tik")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x2a4

Pfft, to prove that the owners of system files are indeed 0, just check a regular game:
>>> w.stat("/vol/storage_slccmpt01/title/00010000/53583450/data/monado01")
flags: 0x0
mode: 0x640
owner: 0x102b
group: 0x3031
size: 0x28000

So if you wanted to try this, you would type the following into wupclient:

mount_slccmpt01()
w.chmod("/vol/storage_slccmpt01/title/00000001/0000003a/content/00000000.app", 0x660)
w.chmod("/vol/storage_slccmpt01/title/00000001/0000003a/content/title.tmd", 0x660)
w.chmod("/vol/storage_slccmpt01/ticket/00000001/0000003a.tik", 0x660)

 

[cmf2k1]

@Ryccardo thanks so much I'm away from Wii U at the moment will try it when I get back. Final thing how can I create content and data directories using wupclient as I created these in filezilla.

Thanks again. Merry Christmas

 

[shaneod]

File-level backups are only really good (by themselves) to look at the system files, at least [v]wii uses a filesystem with a permission system which you wouldn't really be able to replicate with only the standard FTP upload commands...

I learned this the hard way a few weeks ago. I have a file-level backup of slccmpt01.
I figured since I had a backup I'd be fine, so I deleted all of slccmpt01's contents and restored.
Any unbrick recommendations? Permissions are all wrong.
The backup was made prior to the brick.
I don't think anyone has made a chown implementation, and chmod doesn't seem to work either, so idk if I even have any option right now.

 

[Deleted User]

Fix permissions manually.
Also, remember we can download IOS from vWii NUS

 

[shaneod]

Fix permissions manually.

I've tried, and it doesn't seem like any chmod implementation works on SLC files.

 

[cmf2k1]

Just to update I was able to change the mode of the IOS58 files via wupclient using the commands @Ryccardo provided

w.chmod("/vol/storage_slccmpt01/title/00000001/0000003a/content/00000000.app", 0x660)
w.chmod("/vol/storage_slccmpt01/title/00000001/0000003a/content/title.tmd", 0x660)
w.chmod("/vol/storage_slccmpt01/ticket/00000001/0000003a.tik", 0x660)

While mode is different in FSTools compared to other IOS (showing as directory rather than file) and I still cannot install HBC using hackie installer.

Other things I've tried

Install HBC WAD using YAWM results in DSI error
Install HBC WAD using Wii Mod Lite result in -1017 error
Install IOS236 Installer v6 - errors without installing

Anyone got any other suggestions maybe on how can install an IOS exploit to install clean IOS 58 WAD then HBC WAD

 

[Ryccardo]

Anyone got any other suggestions

According to wiiubrew, you can download Vwii titles in WiiU mode: use Uwizard's nus downloader, ios58 is 000000070000003A v6432
I'm not sure anyone actually tried to install it this way...

 

[cmf2k1]

Thanks @Ryccardo as suggested I downloaded IOS 58 files from UWizard renamed

00000000 to 00000000.app,
tmd to title.tmd
cetk to 0000003a.tik

and transferred using ftpiiu everywhere and get same result as before. Difference I can see in FS tools between this and other IOS is that Content and Data are seen as type FILES in all cases except the 000003a directory where Content and Data DIR and you can view their contents. Any suggestion on how to change this as tried to change the mode on the CONTENT and DATA using chmod command but it doesn't work. Or is there a way for wupclient to great Content and Data correctly then transfer files?

 

[brandonwh64]

I was really interested in the same thing as the OP. A while back I made a thread "HERE" about a WiiU that was vWii bricked by a friend. I want to give it another go with trying to fix it but have not had hopes until the new WiiU hacks started showing up. One main issue with mine is that the WiiU wont update (fails after trying to update about halfway through) from 5.4.0 and it will not let me add my Nintendo network ID so I can purchase one of the haxchi games. Anyone have any ideas on were I should start?

I get error code 162-3006 when my system tries to update.

 

[Durig]

I was really interested in the same thing as the OP. A while back I made a thread "HERE" about a WiiU that was vWii bricked by a friend. I want to give it another go with trying to fix it but have not had hopes until the new WiiU hacks started showing up. One main issue with mine is that the WiiU wont update (fails after trying to update about halfway through) from 5.4.0 and it will not let me add my Nintendo network ID so I can purchase one of the haxchi games. Anyone have any ideas on were I should start?

I get error code 162-3006 when my system tries to update.

soft modded wii mode wont let you update, for more look at this thread
https://gbatemp.net/threads/error-162-3006-wii-u-vwii-not-updateing-fix.375269/

(may be you found it useful)

 

[brandonwh64]

soft modded wii mode wont let you update, for more look at this thread
https://gbatemp.net/threads/error-162-3006-wii-u-vwii-not-updateing-fix.375269/

(may be you found it useful)

Thank you! I looked over the thread a while back went I first started this wiiu recovery but none of the suggestions worked. I cannot install anything since I do not have a viable IOS that has NAND access. I do however have a full non fakesigned backup of a vWii that I exploited myself a while back but no way to add IOS258 to my vWii without getting to it through the WiiU somehow. I was gonna FTPiiU Everywhere but form what I read it needs HAXchi to access NAND and I cannot install Haxchi due to not owning any of the games it needs to do the exploit. I am willing to buy these games but my WiiU is on 5.4.0 and everytime I try to add my NNID to it, it complains that there is an update and then tries to update then fails.

 

[brandonwh64]

Could I use the spoof 5.5.1 method to add my nintendo network ID to my wiiu? The download links to the spoof files are dead in the official thread, would anyone have the US version? If not I have the NEW NUSdownloader what would I need to download to use WUPinstaller?

 

[Keylogger]

Hello,
My vWii is bricked, I can't boot to vwii at all.

Can someone make a quick tutorial about how to unbrick the vwii using wuphax? Because I'm little confused

 

[Keylogger]

Here are the metadata dumps, un/luckily all the owners appear to be 0 so either wupserver doesn't know about Wii-mode owners or they're actually 0.......


C:\Users\Ryccardo\Downloads>python -i wupclient.py
>>> mount_slccmpt01()
>>> w.stat("/vol/storage_slccmpt01/shared1/0000004c.app")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x12c38
>>> w.stat("/vol/storage_slccmpt01/title/00000001/0000003a/content/00000000.app")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x40
>>> w.stat("/vol/storage_slccmpt01/title/00000001/0000003a/content/title.tmd")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x490
>>> w.stat("/vol/storage_slccmpt01/ticket/00000001/0000003a.tik")
flags: 0x0
mode: 0x660
owner: 0x0
group: 0x0
size: 0x2a4

Pfft, to prove that the owners of system files are indeed 0, just check a regular game:
>>> w.stat("/vol/storage_slccmpt01/title/00010000/53583450/data/monado01")
flags: 0x0
mode: 0x640
owner: 0x102b
group: 0x3031
size: 0x28000

So if you wanted to try this, you would type the following into wupclient:

mount_slccmpt01()
w.chmod("/vol/storage_slccmpt01/title/00000001/0000003a/content/00000000.app", 0x660)
w.chmod("/vol/storage_slccmpt01/title/00000001/0000003a/content/title.tmd", 0x660)
w.chmod("/vol/storage_slccmpt01/ticket/00000001/0000003a.tik", 0x660)

Hi seems like you successfully unbricked your vwii, can you make a small guide please because I'm a bit confused about how to proceed...

 

[cmf2k1]

@Keylogger - Sadly installing vWii version of IOS58 via FTPiiEverywhere or wupclient and changing the mode/permissions didn't unbrick my vWii. Like you I wonder if there is a way to install a cIOS via FTPiiEverywhere to then use a WAD manager to install the IOS58.wad as this has been known to unbrick in the past.

@brandonwh64 - Have you tried getting system update via disc using a game disc which has the 5.5.1 update?. Reading on another thread I think Starfox Zero and Paper Mario Colour Splash has it.

 

[brandonwh64]

@brandonwh64 - Have you tried getting system update via disc using a game disc which has the 5.5.1 update?. Reading on another thread I think Starfox Zero and Paper Mario Colour Splash has it.

I have not. The friend I got the WiiU from has these two games on disc so I am gonna have him bring it into work and test.