Coldboothax - solving infinite loop with sysNAND CFW

Discussion in 'Wii U - Hacking & Backup Loaders' started by ::Phoenix::, Nov 19, 2016.

  1. ::Phoenix::
    OP

    ::Phoenix:: GBAtemp Regular

    Member
    180
    168
    May 11, 2010
    Italy
    Hello everyone, long time lurker, but did not write too much on the forum.

    This thread started as a small mod of dimok's iosuhax to allow the sysNAND cfw to be booted via coldboothax.
    But in the meanwhile, I added some other patch like region free.
    So, I will use this thread to give updates on my contributions to iosuhax (hoping that some of them will be merged to dimok's main code base).

    As for now, the following additional features are provided with my fork:
    • [now available on dimok's repo] sysNAND cfw bootable via coldboothax (without bootloop). See tutorial below.
    • [now available on dimok's repo] Region free game launch: Once iosuhax (sysNAND or redNAND) is loaded, you get region free launch, other than usual sig patches.

    my fork on github: https://github.com/marco-calautti/iosuhax

    HOWTO configure coldboothax for sysNAND cfw

    I am NOT RESPONSABLE IF YOU BRICK YOUR WII U.

    This is a very brief tutorial on how to get coldboothax working for sysNAND CFW. This is a very basic, non detailed tutorial, do it on your own risk!

    1. Compile my fork of iosuhax (follow FIX94's guide here) but use the command make cfw-coldboot . Then, put the fw.img in the root of your sd card.
    2. Install Haxchi on your sysNAND and configure it to boot the fw.img as the default in config.txt (please refer to this).
    2.a (optional, but highly reccomended in case you mess something during this steps) Configure haxchi to also boot the homebrew launcher with some button press, for example the "a" button.
    2.b Test your haxchi title is working before going to the next step! If you run the fw.IMG it should get stuck at the splash screen. This is normal since there is no syshax.XML yet in you Wii u. Reboot and proceed with the next steps.
    3. Download your /vol/system/config/system.xml to PC
    4. make a copy of system.xml and rename it to syshax.xml (you should now have two xml files, system.xml and syshax.xml).
    5. Open system.xml (not syshax.xml) with a proper text editor like notepad++ and change the default_title_id to the id of your haxchi'd game as follows: 00050000XXXXXXXX, where the X's are your haxchi'd game title id.
    6. Upload both system.xml and syshax.xml to /vol/system/config/ (you will need to replace the old system.xml)
    7. (Don't know if needed) Give to syshax.xml in sysNAND the right permissions via w.chmod("/vol/system/config/syshax.xml",0x644)
    8. Turn off your console and boot it up again.

    HOWTO UNINSTALL


    This is the only version of iosuhax for which it is possible to restore a coldboothaxed console to normal. Even with redNAND, the console is practically doomed to have coldboothax installed.

    Once your Wii U has booted into iosuhax, just replace in /vol/system/config/system.xml the default_title_id with the original id (the Wii U System menu one). Removing the syshax.xml is optional.
     
    Last edited by ::Phoenix::, Dec 3, 2016
    CatmanFan, BIFFTAZ, Molina and 25 others like this.


  2. jailminer

    jailminer Joel? Are you up at 6 AM making a Custom Title?

    Member
    365
    111
    Feb 9, 2016
    United States
    7000th thread. Good job.
     
    NWPlayer123 likes this.
  3. Conn0r

    Conn0r GBAtemp Fan

    Member
    327
    187
    Jan 10, 2016
    United States
    Good work there m8.
     
  4. Goloki

    Goloki GBAtemp Fan

    Member
    338
    184
    Nov 24, 2006
    Woah, this is great. Hopefully you can provide some a more detailed explanation and some links to the github, so we can compile our own modified fw.img :)
     
  5. ::Phoenix::
    OP

    ::Phoenix:: GBAtemp Regular

    Member
    180
    168
    May 11, 2010
    Italy
    Goloki and canariobr like this.
  6. Naendow

    Naendow Brick-Master

    Member
    242
    59
    Jan 4, 2016
    Gambia, The
    If this will get a bit improved (not loading the cfw twice), I'll try this out. But for now, I will follow this thread and be lucky with my setup. :P

    Btw: The haxchi fork of FIX94 doesn't need cfwbooter. Maybe it will work better with it.
     
  7. jorgehntx

    jorgehntx Member

    Newcomer
    28
    1
    Nov 20, 2016
    United States
    its great....
     
  8. Polarise

    Polarise GBAtemp Advanced Fan

    Member
    787
    97
    Jul 12, 2016
    United States
    So coldboothax is like A9LH for 3DS where it launches CFW from boot?
     
  9. Naendow

    Naendow Brick-Master

    Member
    242
    59
    Jan 4, 2016
    Gambia, The
    Yes, it can be used to launch cfw from boot, but it is not as good as a9lh. You can kinda compare it with menuhax.
     
  10. Polarise

    Polarise GBAtemp Advanced Fan

    Member
    787
    97
    Jul 12, 2016
    United States
    But with menuhax you have to press a button to boot it. I don't see any button presses in the video. (Unless I missed it)
     
  11. CuriousTommy

    CuriousTommy GBAtemp Fan

    Member
    383
    92
    Jul 22, 2014
    United States
    That's not true, you can do the reverse also (if you were to press a certain combination then you would be brought to the home screen otherwise you will load the homebrew menu).
     
  12. aaaq

    aaaq Newbie

    Newcomer
    2
    0
    Nov 14, 2016
    United States
    So I've made a mess of my build environment and just get error after error now. I'm working on repairing it, but can someone point me in the direction of a compiled fw.img for this one?
     
  13. Polarise

    Polarise GBAtemp Advanced Fan

    Member
    787
    97
    Jul 12, 2016
    United States
    l
    look up darkflare on youtube. He has a video on it.
     
  14. jorgehntx

    jorgehntx Member

    Newcomer
    28
    1
    Nov 20, 2016
    United States
  15. sabykos

    sabykos GBAtemp Regular

    Member
    226
    366
    Jun 10, 2013
    Gambia, The
    @::Phoenix::
    I guess this is also revertable? I mean you can access the tempered system.xml with wupserver again? Where is the syshax.xml located in your case?
     
    Last edited by sabykos, Nov 20, 2016
  16. Quantumcat

    Quantumcat Dead and alive

    Member
    8,748
    4,441
    Nov 23, 2014
    Canberra, Australia
    Better to compile it yourself, otherwise it could be malicious
     
    aaaq likes this.
  17. jorgehntx

    jorgehntx Member

    Newcomer
    28
    1
    Nov 20, 2016
    United States
    tanx u right....i have compiled one all ready but i dont know about syshax.xml ...most be dangerous
     
  18. ::Phoenix::
    OP

    ::Phoenix:: GBAtemp Regular

    Member
    180
    168
    May 11, 2010
    Italy
    Yes it is perfectly reversible. The syshax.XMl is located in the same directory of the original one, but this can be changed, for example to let the fw.IMG load the alternative syshax.XML from sdcard.

    The idea is to temper the system.XML with the haxchi id and use the copy syshax.XML as secondary boot XML with the original sysmenu I'd.
     
  19. Goloki

    Goloki GBAtemp Fan

    Member
    338
    184
    Nov 24, 2006
    This is great. I'll try it as soon as someone else has made sure that it works as intended.
     
  20. ::Phoenix::
    OP

    ::Phoenix:: GBAtemp Regular

    Member
    180
    168
    May 11, 2010
    Italy
    Updated the first post with a brief tutorial.