Strange "semi-brick"

[Cecinus126]

Hi guys, let me introduce you to my problem.
My father had modded my Wii several years ago and since that time I have always played without any problems via Wiiflow.
A few days ago I detach my HDD and replace the old wiiflow files (I think I still had version 4.1.2 or similar) with the new wiiflow Lite files, to try to use the new version. I don't touch anything inside the system. Everything works, for a short time ...
A few days later I go back to the Wii menu and when I open any channel I get the message "system files damaged".
From that day the wii turns on and gets to the menu but any channel I open gives me an error. I can't access the settings.
I have no idea how the new WiiFlow affected some system files ...
With a little luck, however, I can start the "letterbomb" exploit and from there I update and reinstall HBC and BootMii (already present but with old versions). HBC opens to me and I understand that my Wii actually works and from HBC I have full power. I'll make it short:
I install priiloader and update all IOS and cIOS with Pimp my Wii (bringing the versions of Waninkoko to those of Hermes and d2x), the problem remains.
I reinstall the default theme of the Wii menu with MyMenùifyMod, the problem remains.
I download ALL the updated IOS and cIOS from ModMii and reinstall them one by one with YAWMM. I also reinstall the system menu 4.3E (my Wii was born with this firmware). I was sure I had solved it!
Nothing! The problem keeps coming back! I do not know what to do. Is there a way to put your hand on the system in more depth? It appears that it is not a corrupt IOS issue at this point as the Wii has full functionality in everything (I can safely play it).

 

[Cecinus126]

SysCheck HDE v2.4.0 HacksDen Edition by JoostinOnline, Double_A, R2-D2199, and Nano
...appoggiato all'IOS58 (v. 6176).

Regione: PAL
Menu di sistema 4.3E (v514)
Priiloader installato
Data unita': 18.12.2008
Canale Homebrew 1.1.2 appoggiato all'IOS58

Hollywood v0x21
ID console: 136171075
Tipo Console: Wii
Paese canale Shop: Italy (83)
Boot2 v4
Trovati 136 giochi.
Trovati 51 IOS in questa console. 5 di questi sono stubs.

IOS3 (rev 65280): Stub
IOS4 (rev 65280): Stub
IOS9 (rev 1034): Non patchato
IOS10 (rev 768): Stub
IOS11[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS12 (rev 526): Non patchato
IOS13 (rev 1032): Non patchato
IOS14 (rev 1032): Non patchato
IOS15 (rev 1032): Non patchato
IOS16 (rev 512): Stub
IOS17 (rev 1032): Non patchato
IOS20[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS21 (rev 1039): Non patchato
IOS22 (rev 1294): Non patchato
IOS28 (rev 1807): Non patchato
IOS30[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS31 (rev 3608): Non patchato
IOS33 (rev 3608): Non patchato
IOS34 (rev 3608): Non patchato
IOS35 (rev 3608): Non patchato
IOS36 (rev 3608): Trucha Bug, Identificazione ES, Accesso NAND
IOS37 (rev 5663): Non patchato
IOS38 (rev 4124): Non patchato
IOS40[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS41 (rev 3607): Non patchato
IOS43 (rev 3607): Non patchato
IOS45 (rev 3607): Non patchato
IOS46 (rev 3607): Non patchato
IOS48 (rev 4124): Non patchato
IOS50[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS51 (rev 4864): Stub
IOS52[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS53 (rev 5663): Non patchato
IOS55 (rev 5663): Non patchato
IOS56 (rev 5662): Non patchato
IOS57 (rev 5919): Non patchato
IOS58 (rev 6176): USB 2.0
IOS60 (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS61 (rev 5662): Non patchato
IOS62 (rev 6430): Non patchato
IOS70[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS80[60] (rev 65535, Info: ModMii-IOS60-v6174): Trucha Bug, Accesso NAND
IOS202[60] (rev 65535, Info: Hermes-v55.1): Trucha Bug, Accesso NAND, USB 2.0
IOS222[38] (rev 65535, Info: Hermes-v55.1): Trucha Bug, Identificazione ES, Accesso NAND, USB 2.0
IOS223[37] (rev 65535, Info: Hermes-v55.1): Trucha Bug, Accesso NAND, USB 2.0
IOS224[57] (rev 65535, Info: Hermes-v55.1): Trucha Bug, Accesso NAND, USB 2.0
IOS236[36] (rev 65535, Info: rev 3351): Trucha Bug, Identificazione ES, Accesso NAND
IOS249[57] (rev 65535, Info: d2x-v10beta52): Trucha Bug, Accesso NAND, USB 2.0
IOS250[56] (rev 65535, Info: d2x-v10beta52): Trucha Bug, Accesso NAND, USB 2.0
IOS251[38] (rev 65535, Info: d2x-v10beta52): Trucha Bug, Identificazione ES, Accesso NAND
IOS254 (rev 65281): BootMii
BC v6
MIOS v10
Rapporto generato il 10.10.2021.

 

[XFlak]

When you reinstalled the system menu you uninstalled priiloader, be careful to reinstall it every time you install a new system menu

To (hopefully) solve this issue, I suggest you use Modmii's region change wizard to "change" to 4.3E.

 

[Cecinus126]

Thanks XFlak! Yes, I am aware that the priiloader is uninstalled every time a new system menu is installed.
I immediately try to "change" region with ModMii!
I hope it works out because I don't know where to turn anymore. Could WiiFlow Lite have caused all this mess? Maybe the mix between the new loader and the old cIOS?

 

[XFlak]

Do u have a nand backup from before the issue began? If so, you could also try restoring it (then resoftmodding as appropriate). If not, and if the previous suggestion fails to resolve the issue, you can try making a new nand.bin using ohneschwanzenegger (you must provide it with your Wii's unique keys), then "restoring" that nand.bin using bootmii

 

[Cecinus126]

I have tried to "change" my Wii region but the problem persists. Who knows what damn file got corrupted inside my console...
I had already taken a look at the Ohneschwanzenegger and Nandformatter programs but I was hoping to solve it with a less drastic way.
I might as well keep it that way, I set autoboot on WiiFlow from priiloader so I don't go through the Wii menù.
But in this way the problem is only circumvented but not solved...

 

[Cecinus126]

Before I format everything with Ohneschwanzenegger, I would like to try using nandBinCheck to verify a backup of my nand.
Maybe find the problem you can take action on. What do you think?

 

[XFlak]

Definitely can't hurt

 

[Cecinus126]

If I post the result of nandBinCheck, can you (or anyone else) help me decrypt it? I am well informed about the Wii system but not up to this level.
Several error messages have appeared...

 

[XFlak]

Only one way to find out

 

[Cecinus126]

Here is the result

Spoiler

checking boot1 & 2...
Boot1 D (fixed)
found 2 copies of boot2
"blocks 1 & 2: Used for booting; Content Sha1 matches TMD; TMD officially signed; Ticket officially signed; Version 4"
"blocks 7 & 6: Backup copy; Content Sha1 matches TMD; TMD officially signed; Ticket officially signed; Version 4"
checking uid.sys...
checking content.map...
checking "/shared1/00000000.app" ...
checking "/shared1/00000001.app" ...
checking "/shared1/00000002.app" ...
checking "/shared1/00000003.app" ...
checking "/shared1/00000004.app" ...
checking "/shared1/00000005.app" ...
checking "/shared1/00000006.app" ...
checking "/shared1/00000007.app" ...
checking "/shared1/00000008.app" ...
checking "/shared1/00000009.app" ...
checking "/shared1/0000000a.app" ...
checking "/shared1/0000000b.app" ...
checking "/shared1/0000000c.app" ...
checking "/shared1/0000000d.app" ...
checking "/shared1/0000000e.app" ...
checking "/shared1/0000000f.app" ...
checking "/shared1/00000010.app" ...
checking "/shared1/00000011.app" ...
checking "/shared1/00000012.app" ...
checking "/shared1/00000013.app" ...
checking "/shared1/00000014.app" ...
checking "/shared1/00000015.app" ...
checking "/shared1/00000016.app" ...
checking "/shared1/00000017.app" ...
checking "/shared1/00000018.app" ...
checking "/shared1/00000019.app" ...
checking "/shared1/0000001a.app" ...
checking "/shared1/0000001b.app" ...
checking "/shared1/0000001c.app" ...
checking "/shared1/0000001d.app" ...
checking "/shared1/0000001e.app" ...
checking "/shared1/0000001f.app" ...
checking "/shared1/00000020.app" ...
checking "/shared1/00000021.app" ...
checking "/shared1/00000022.app" ...
checking "/shared1/00000023.app" ...
checking "/shared1/00000024.app" ...
checking "/shared1/00000025.app" ...
checking "/shared1/00000026.app" ...
checking "/shared1/00000027.app" ...
checking "/shared1/00000028.app" ...
checking "/shared1/00000029.app" ...
checking "/shared1/0000002a.app" ...
checking "/shared1/0000002b.app" ...
checking "/shared1/0000002c.app" ...
checking "/shared1/0000002d.app" ...
checking "/shared1/0000002e.app" ...
checking "/shared1/0000002f.app" ...
checking "/shared1/00000030.app" ...
checking "/shared1/00000031.app" ...
checking "/shared1/00000032.app" ...
checking "/shared1/00000033.app" ...
checking "/shared1/00000034.app" ...
checking "/shared1/00000035.app" ...
checking "/shared1/00000036.app" ...
checking "/shared1/00000037.app" ...
checking "/shared1/00000038.app" ...
checking "/shared1/00000039.app" ...
checking "/shared1/0000003a.app" ...
checking "/shared1/0000003b.app" ...
checking "/shared1/0000003c.app" ...
checking "/shared1/0000003d.app" ...
checking "/shared1/0000003e.app" ...
checking "/shared1/0000003f.app" ...
checking "/shared1/00000040.app" ...
checking "/shared1/00000041.app" ...
checking "/shared1/00000042.app" ...
checking "/shared1/00000043.app" ...
checking "/shared1/00000044.app" ...
checking "/shared1/00000045.app" ...
checking "/shared1/00000046.app" ...
checking "/shared1/00000047.app" ...
checking "/shared1/00000048.app" ...
checking "/shared1/00000049.app" ...
checking "/shared1/0000004a.app" ...
checking "/shared1/0000004b.app" ...
checking "/shared1/0000004c.app" ...
checking "/shared1/0000004d.app" ...
checking "/shared1/0000004e.app" ...
checking "/shared1/0000004f.app" ...
checking "/shared1/00000050.app" ...
checking "/shared1/00000051.app" ...
checking "/shared1/00000052.app" ...
checking "/shared1/00000053.app" ...
checking "/shared1/00000054.app" ...
checking "/shared1/00000055.app" ...
checking "/shared1/00000056.app" ...
checking "/shared1/00000057.app" ...
checking "/shared1/00000058.app" ...
checking "/shared1/00000059.app" ...
checking "/shared1/0000005a.app" ...
checking "/shared1/0000005b.app" ...
checking "/shared1/0000005c.app" ...
checking "/shared1/0000005d.app" ...
checking "/shared1/0000005e.app" ...
checking "/shared1/0000005f.app" ...
checking "/shared1/00000060.app" ...
checking "/shared1/00000061.app" ...
checking "/shared1/00000062.app" ...
checking "/shared1/00000063.app" ...
checking "/shared1/00000064.app" ...
checking "/shared1/00000065.app" ...
checking "/shared1/00000066.app" ...
checking "/shared1/00000067.app" ...
checking "/shared1/00000068.app" ...
checking "/shared1/00000069.app" ...
checking "/shared1/0000006a.app" ...
checking "/shared1/0000006b.app" ...
checking "/shared1/0000006c.app" ...
checking "/shared1/0000006d.app" ...
checking "/shared1/0000006e.app" ...
checking "/shared1/0000006f.app" ...
checking "/shared1/00000070.app" ...
checking "/shared1/00000071.app" ...
checking "/shared1/00000072.app" ...
checking "/shared1/00000073.app" ...
checking "/shared1/00000074.app" ...
checking "/shared1/00000075.app" ...
checking "/shared1/00000076.app" ...
checking "/shared1/00000077.app" ...
checking "/shared1/00000078.app" ...
checking "/shared1/00000079.app" ...
found 74 titles installed

Checking 00000001-00000009 ...
name: "firmware.64.1003301558 [email protected]"
version: 4.10 1034 hex: 40a

Checking 00000001-0000000c ...
name: "firmware.64.1007271641 [email protected]"
version: 2.14 526 hex: 20e

Checking 00000001-0000000d ...
name: "firmware.64.1007271642 [email protected]"
version: 4.8 1032 hex: 408

Checking 00000001-0000000e ...
name: "firmware.64.1007271643 [email protected]"
version: 4.8 1032 hex: 408

Checking 00000001-0000000f ...
name: "firmware.64.1007271646 [email protected]"
version: 4.8 1032 hex: 408

Checking 00000001-00000011 ...
name: "firmware.64.1007271644 [email protected]"
version: 4.8 1032 hex: 408

Checking 00000001-00000015 ...
name: "firmware.64.1007270747 [email protected]"
version: 4.15 1039 hex: 40f

Checking 00000001-00000016 ...
name: "firmware.64.1007271648 [email protected]"
version: 5.14 1294 hex: 50e

Checking 00000001-0000001c ...
name: "firmware.64.1007270750 [email protected]"
version: 7.15 1807 hex: 70f

Checking 00000001-0000001f ...
name: "firmware.64.1007260641 [email protected]"
version: 14.24 3608 hex: e18

Checking 00000001-00000021 ...
name: "firmware.64.1007260643 [email protected]"
version: 14.24 3608 hex: e18

Checking 00000001-00000022 ...
name: "firmware.64.1007260644 [email protected]"
version: 14.24 3608 hex: e18

Checking 00000001-00000023 ...
name: "firmware.64.1007260645 [email protected]"
version: 14.24 3608 hex: e18

Checking 00000001-00000024 ...
tmd fakesigned
name: "firmware.64.1007260647 [email protected]"
version: 14.24 3608 hex: e18

Checking 00000001-00000025 ...
name: "firmware.64.1007260648 [email protected]"
version: 22.31 5663 hex: 161f

Checking 00000001-00000026 ...
name: "firmware.64.1007260651 [email protected]"
version: 16.28 4124 hex: 101c

Checking 00000001-00000029 ...
name: "firmware.64.1007260653 [email protected]"
version: 14.23 3607 hex: e17

Checking 00000001-0000002b ...
name: "firmware.64.1007260654 [email protected]"
version: 14.23 3607 hex: e17

Checking 00000001-0000002d ...
name: "firmware.64.1007260656 [email protected]"
version: 14.23 3607 hex: e17

Checking 00000001-0000002e ...
name: "firmware.64.1007260657 [email protected]"
version: 14.23 3607 hex: e17

Checking 00000001-00000030 ...
name: "firmware.64.1007260659 [email protected]"
version: 16.28 4124 hex: 101c

Checking 00000001-00000032 ...
tmd fakesigned
name: "firmware.64.0810140721 [email protected]"
version: 20.0 5120 hex: 1400

Checking 00000001-00000035 ...
name: "firmware.64.1007260701 [email protected]"
version: 22.31 5663 hex: 161f

Checking 00000001-00000037 ...
name: "firmware.64.1007260704 [email protected]"
version: 22.31 5663 hex: 161f

Checking 00000001-00000038 ...
name: "firmware.64.1007260716 [email protected]"
version: 22.30 5662 hex: 161e

Checking 00000001-00000039 ...
name: "firmware.64.1007260706 [email protected]"
version: 23.31 5919 hex: 171f

Checking 00000001-0000003a ...
name: "firmware.64.1007260709 [email protected]"
version: 24.32 6176 hex: 1820

Checking 00000001-0000003c ...
tmd fakesigned
name: "firmware.64.0902040955 [email protected]"
version: 25.0 6400 hex: 1900

Checking 00000001-0000003d ...
name: "firmware.64.1007260711 [email protected]"
version: 22.30 5662 hex: 161e

Checking 00000001-0000003e ...
name: "firmware.64.1206260352 [email protected]"
version: 25.30 6430 hex: 191e

Checking 00000001-00000046 ...
tmd fakesigned
name: "firmware.64.0907270708 [email protected]"
version: 27.0 6912 hex: 1b00

Checking 00000001-00000050 ...
tmd fakesigned
name: "firmware.64.1007260713 [email protected]"
version: 27.32 6944 hex: 1b20

Checking 00000001-000000ca ...
ticket fakesigned
tmd fakesigned
name: "▲þ┴♣"
version: 255.255 65535 hex: ffff

Checking 00000001-000000de ...
ticket fakesigned
tmd fakesigned
name: "▲þ┴♣"
version: 255.255 65535 hex: ffff

Checking 00000001-000000df ...
ticket fakesigned
tmd fakesigned
name: "▲þ┴♣"
version: 255.255 65535 hex: ffff

Checking 00000001-000000e0 ...
ticket fakesigned
tmd fakesigned
name: "▲þ┴♣"
version: 255.255 65535 hex: ffff

Checking 00000001-000000ec ...
ticket fakesigned
tmd fakesigned
name: "firmware.64.0907270645 [email protected]"
version: 255.255 65535 hex: ffff

Checking 00000001-000000f9 ...
ticket fakesigned
tmd fakesigned
name: "▲þ┴♣"
version: 82.18 21010 hex: 5212

Checking 00000001-000000fa ...
ticket fakesigned
tmd fakesigned
name: "▲þ┴♣"
version: 255.255 65535 hex: ffff

Checking 00000001-000000fb ...
ticket fakesigned
tmd fakesigned
name: "▲þ┴♣"
version: 82.18 21010 hex: 5212

Checking 00000001-000000fe ...
ticket fakesigned
tmd fakesigned
Unable to get title
version: 255.1 65281 hex: ff01
found 41 bootable IOS

Checking 00000001-00000002 ...
Decrypted signature hash: a2cbd41d17dd3f4e1dcef57873adb914c5896ab1
SHA1 hash: b84e1bc72473ea4cc60e0c447676ede1d0a5f3da
tmd RSA signature isn't even close ( 4 )
name: "systemmenu.rvl.1004200553 [email protected]"
one of the private contents' hash doesnt check out 1 "/title/00000001/00000002/content/0000009a.app"
expected 43de2fd9b4d1b8e23ecad352e8c93e85573d97c5
actual 8d7d6b4a39fc63de93eaca59ecf4652e8a2cd167
version: 2.2 514 hex: 202
access : 3
requires IOS 80
incorrect uid/gid for data folder-- expected: "00001000"/"0001" got: "00001000"/"0000"
incorrect uid/gid for "data/play_rec.dat"
incorrect uid/gid for "content/ticket"
incorrect uid/gid for "content/1000009b.app"
incorrect uid/gid for "content/title_or.tmd"
incorrect uid/gid for "content/0000009b.app"
incorrect uid/gid for "content/title.tmd"

Checking 00000001-00000003 ...
name: "firmware.64.0808070746 [email protected]"
version: 255.0 65280 hex: ff00

Checking 00000001-00000004 ...
name: "firmware.64.0808070753 [email protected]"
version: 255.0 65280 hex: ff00
incorrect uid/gid for data folder-- expected: "00001001"/"0001" got: "00001001"/"0000"

Checking 00000001-0000000a ...
name: "firmware.64.0808061128 [email protected]"
version: 3.0 768 hex: 300

Checking 00000001-0000000b ...
name: "firmware.64.0808061135 [email protected]"
version: 1.0 256 hex: 100

Checking 00000001-00000010 ...
name: "firmware.64.0902240254 [email protected]"
version: 2.0 512 hex: 200

Checking 00000001-00000014 ...
name: "firmware.64.0808061144 [email protected]"
version: 1.0 256 hex: 100

Checking 00000001-0000001e ...
name: "firmware.64.0808070639 [email protected]"
version: 11.0 2816 hex: b00

Checking 00000001-00000028 ...
name: "firmware.64.0901220808 [email protected]"
version: 12.0 3072 hex: c00

Checking 00000001-00000033 ...
name: "firmware.64.0902060630 @SAITOT"
version: 19.0 4864 hex: 1300

Checking 00000001-00000034 ...
name: "firmware.64.0906040845 [email protected]"
version: 23.0 5888 hex: 1700

Checking 00000001-00000100 ...
name: "bc.0908240243 [email protected]"
version: 0.6 6 hex: 6

Checking 00000001-00000101 ...
tmd fakesigned
name: "mios.0908240253 [email protected]"
version: 0.10 10 hex: a
access : 1

Checking 00010001-44574641 (DWFA) ...
Decrypted signature hash: 0000000000000000000000000000000000000000
SHA1 hash: aa748fe5c8f7acd34e9bb875c00cae0c62a40672
ticket RSA signature isn't even close ( 4 )
Decrypted signature hash: 0000000000000000000000000000000000000000
SHA1 hash: 402a6abd310d6acee818a4c7c87a41c827c502d7
tmd RSA signature isn't even close ( 4 )
name: "WiiFlow"
version: 2.0 512 hex: 200
access : 3
requires IOS 58

Checking 00010001-48414450 (HADP) ...
NandBin::ItemFromPath ->item not found "/title/00010001/48414450/content/00000027.app"
error reading one of the private contents "/title/00010001/48414450/content/00000027.app"

Checking 00010001-48414a50 (HAJP) ...
NandBin::ItemFromPath ->item not found "/title/00010001/48414a50/content/0000001e.app"
error reading one of the private contents "/title/00010001/48414a50/content/0000001e.app"

Checking 00010001-48415050 (HAPP) ...
NandBin::ItemFromPath ->item not found "/title/00010001/48415050/content/0000000e.app"
error reading one of the private contents "/title/00010001/48415050/content/0000000e.app"

Checking 00010001-48415450 (HATP) ...
NandBin::ItemFromPath ->item not found "/title/00010001/48415450/content/00000024.app"
error reading one of the private contents "/title/00010001/48415450/content/00000024.app"

Checking 00010001-48415650 (HAVP) ...
NandBin::ItemFromPath ->item not found "/title/00010001/48415650/content/0000000c.app"
error reading one of the private contents "/title/00010001/48415650/content/0000000c.app"

Checking 00010001-4c554c5a (LULZ) ...
ticket fakesigned
tmd fakesigned
name: "Homebrew Channel"
version: 1.2 258 hex: 102
access : 3
requires IOS 58

Checking 00010001-4e474d53 (NGMS) ...
ticket fakesigned
Decrypted signature hash: 0000000000000000000000000000000000000000
SHA1 hash: 5143e9410622ef7ce722f30de5a9f80d752c434e
tmd RSA signature isn't even close ( 4 )
NandBin::ItemFromPath ->item not found "/title/00010001/4e474d53/content/00000000.app"
error reading one of the private contents "/title/00010001/4e474d53/content/00000000.app"

Checking 00010001-af1bf516 (....) ...
ticket fakesigned
tmd fakesigned
NandBin::ItemFromPath ->item not found "/title/00010001/af1bf516/content/00000000.app"
error reading one of the private contents "/title/00010001/af1bf516/content/00000000.app"

Checking 00010002-48414141 (HAAA) ...
name: "MP3_photo_dummy.0708221150 [email protected]"
version: 255.0 65280 hex: ff00
requires IOS 13

Checking 00010002-48414241 (HABA) ...
name: "Wii Shop Channel"
version: 0.21 21 hex: 15
requires IOS 56

Checking 00010002-48414341 (HACA) ...
name: "Mii Channel"
version: 0.6 6 hex: 6
requires IOS 31

Checking 00010002-48414641 (HAFA) ...
name: "Forecast Channel"
version: 0.3 3 hex: 3
requires IOS 13

Checking 00010002-48414650 (HAFP) ...
name: "Forecast Channel"
version: 0.7 7 hex: 7
requires IOS 31

Checking 00010002-48414741 (HAGA) ...
name: "News Channel"
version: 0.3 3 hex: 3
requires IOS 13

Checking 00010002-48414750 (HAGP) ...
name: "News Channel"
version: 0.7 7 hex: 7
requires IOS 31

Checking 00010002-48415941 (HAYA) ...
name: "Photo Channel 1.1"
version: 0.3 3 hex: 3
requires IOS 61

Checking 00010008-48414b50 (HAKP) ...
name: "eulav.1004091857 [email protected]"
version: 0.3 3 hex: 3
requires IOS 56

Checking 00010008-48414c50 (HALP) ...
name: "rgnsel.0707051714 @SASAKIT-COM2"
version: 0.2 2 hex: 2
requires IOS 31

Checking 00010008-57494948 (WIIH) ...
Decrypted signature hash: 0000000000000000000000000000000000000000
SHA1 hash: 925d8fe4bcc398b5a92967b074371d4cc19230a4
ticket RSA signature isn't even close ( 4 )
Decrypted signature hash: 0000000000000000000000000000000000000000
SHA1 hash: b3a2e1865bfe2afb7d7ca9f46b364059b4fcdc3f
tmd RSA signature isn't even close ( 4 )
name: "Crazy Intro WiiCrazy(I.R.on)"
version: 0.1 1 hex: 1
access : 3
requires IOS 58
Checking for 003 error ...
The system menu doesn't appear to perform the Korean-key check
System menu IOS supports the Korean-key check
The korean key is not present in this wii
Checking setting.txt stuff...
system menu resource matches setting.txt AREA setting.

00000000 41524541 3d455552 0d0a4d4f 44454c3d AREA=EUR..MODEL=
00000010 52564c2d 30303128 45555229 0d0a4456 RVL-001(EUR)..DV
00000020 443d300d 0a4d5043 483d3078 37464645 D=0..MPCH=0x7FFE
00000030 0d0a434f 44453d4c 45480d0a 5345524e ..CODE=LEH..SERN
00000040 4f3d3239 32383537 3432390d 0a564944 O=123456789..VID
00000050 454f3d50 414c0d0a 47414d45 3d45550d EO=PAL..GAME=EU.
00000060 0a000000 00000000 00000000 00000000 ................
00000070 00000000 00000000 00000000 00000000 ................
00000080 00000000 00000000 00000000 00000000 ................
00000090 00000000 00000000 00000000 00000000 ................
000000a0 00000000 00000000 00000000 00000000 ................
000000b0 00000000 00000000 00000000 00000000 ................
000000c0 00000000 00000000 00000000 00000000 ................
000000d0 00000000 00000000 00000000 00000000 ................
000000e0 00000000 00000000 00000000 00000000 ................
000000f0 00000000 00000000 00000000 00000000 ................
AREA=EUR
MODEL=RVL-001(EUR)
DVD=0
MPCH=0x7FFE
CODE=LEH
SERNO=123456789
VIDEO=PAL
GAME=EU

Comparing uid.sys against the filesystem...
00010000-30303030 (0000) was installed at the factory and is now missing
00010000-30303032 (0002) was installed at the factory and is now missing
00010001-48434750 (HCGP) was installed at the factory and is now missing
00010000-31323245 (122E) was installed at the factory and is now missing
00010000-30303033 (0003) was installed at the factory and is now missing
60 titles were installed before any user intervention
Can't find ticket for 00010004-524d4350 (RMCP)
00010004-524d4350 (RMCP) has been deleted
Can't find TMD for 00010001-57464857 (WFHW)
Can't find ticket for 00010001-57464857 (WFHW)
00010001-57464857 (WFHW) has been deleted
Can't find TMD for 00010000-52363950 (R69P)
00010000-52363950 (R69P) has been deleted
Can't find TMD for 00010000-52595150 (RYQP)
00010000-52595150 (RYQP) has been deleted
Can't find TMD for 00010000-524a4150 (RJAP)
00010000-524a4150 (RJAP) has been deleted
Can't find TMD for 00010000-52345250 (R4RP)
00010000-52345250 (R4RP) has been deleted
Can't find TMD for 00010000-524a4158 (RJAX)
00010000-524a4158 (RJAX) has been deleted
Can't find TMD for 00010000-53454d58 (SEMX)
00010000-53454d58 (SEMX) has been deleted
TMD for 00000001-00000000 is fakesigned
Can't find ticket for 00000001-00000000
00000001-00000000 has been deleted
Can't find TMD for 00010000-524d4850 (RMHP)
00010000-524d4850 (RMHP) has been deleted
Can't find TMD for 00010000-53433749 (SC7I)
00010000-53433749 (SC7I) has been deleted
Can't find TMD for 00010000-52534e50 (RSNP)
00010000-52534e50 (RSNP) has been deleted
Can't find TMD for 00010000-524f4c50 (ROLP)
00010000-524f4c50 (ROLP) has been deleted
Can't find TMD for 00010005-73433749 (sC7I)
00010005-73433749 (sC7I) has been deleted
Can't find TMD for 00010000-52575350 (RWSP)
00010000-52575350 (RWSP) has been deleted
Can't find TMD for 00010000-53494950 (SIIP)
00010000-53494950 (SIIP) has been deleted
Can't find TMD for 00010000-524d4b50 (RMKP)
00010000-524d4b50 (RMKP) has been deleted
Can't find TMD for 00010000-53584550 (SXEP)
00010000-53584550 (SXEP) has been deleted
TMD for 00010000-57465346 (WFSF) is fakesigned
Can't find TMD for 00010000-534c5650 (SLVP)
00010000-534c5650 (SLVP) has been deleted
Can't find TMD for 00010000-52494150 (RIAP)
00010000-52494150 (RIAP) has been deleted
Can't find TMD for 00010000-52534250 (RSBP)
00010000-52534250 (RSBP) has been deleted
Can't find TMD for 00010000-52504850 (RPHP)
00010000-52504850 (RPHP) has been deleted
Can't find TMD for 00010005-734d3850 (sM8P)
00010005-734d3850 (sM8P) has been deleted
Can't find TMD for 00010004-524d4345 (RMCE)
Can't find ticket for 00010004-524d4345 (RMCE)
00010004-524d4345 (RMCE) has been deleted
Can't find TMD for 00010000-53334959 (S3IY)
00010000-53334959 (S3IY) has been deleted
Can't find TMD for 00010000-534e4350 (SNCP)
00010000-534e4350 (SNCP) has been deleted
Can't find TMD for 00010000-53485350 (SHSP)
00010000-53485350 (SHSP) has been deleted
Can't find TMD for 00010000-53334658 (S3FX)
00010000-53334658 (S3FX) has been deleted
Can't find TMD for 00010000-53504350 (SPCP)
00010000-53504350 (SPCP) has been deleted
Can't find TMD for 00010000-53563350 (SV3P)
00010000-53563350 (SV3P) has been deleted
Can't find TMD for 00010000-53494150 (SIAP)
00010000-53494150 (SIAP) has been deleted
Can't find TMD for 00010000-53435950 (SCYP)
00010000-53435950 (SCYP) has been deleted
Can't find TMD for 00010000-524d3845 (RM8E)
00010000-524d3845 (RM8E) has been deleted
Can't find TMD for 00010000-524d4245 (RMBE)
00010000-524d4245 (RMBE) has been deleted
Can't find TMD for 00010000-524d4150 (RMAP)
00010000-524d4150 (RMAP) has been deleted
Can't find TMD for 00010000-524a4850 (RJHP)
00010000-524a4850 (RJHP) has been deleted
Can't find TMD for 00010000-52343950 (R49P)
00010000-52343950 (R49P) has been deleted
Can't find TMD for 00010000-52513450 (RQ4P)
00010000-52513450 (RQ4P) has been deleted
Can't find TMD for 00010000-53584950 (SXIP)
00010000-53584950 (SXIP) has been deleted
Can't find TMD for 00010000-53533850 (SS8P)
00010000-53533850 (SS8P) has been deleted
Can't find TMD for 00010000-53425650 (SBVP)
00010000-53425650 (SBVP) has been deleted
Can't find TMD for 00010000-534d3345 (SM3E)
00010000-534d3345 (SM3E) has been deleted
Can't find TMD for 00010000-4b4d4e50 (KMNP)
00010000-4b4d4e50 (KMNP) has been deleted
Can't find TMD for 00010000-53455345 (SESE)
00010000-53455345 (SESE) has been deleted
Can't find TMD for 00010000-52393250 (R92P)
00010000-52393250 (R92P) has been deleted
Can't find TMD for 00010000-52505050 (RPPP)
00010000-52505050 (RPPP) has been deleted
Can't find TMD for 00010000-53433753 (SC7S)
00010000-53433753 (SC7S) has been deleted
Can't find TMD for 00010000-524d3258 (RM2X)
00010000-524d3258 (RM2X) has been deleted
Can't find TMD for 00010000-53553950 (SU9P)
00010000-53553950 (SU9P) has been deleted
Can't find TMD for 00010000-52574c50 (RWLP)
00010000-52574c50 (RWLP) has been deleted
Can't find TMD for 00010000-524d3850 (RM8P)
00010000-524d3850 (RM8P) has been deleted
Can't find TMD for 00010000-52364c50 (R6LP)
00010000-52364c50 (R6LP) has been deleted
Can't find TMD for 08971538-1f88e877 (...w)
Can't find ticket for 08971538-1f88e877 (...w)
08971538-1f88e877 (...w) has been deleted
Can't find TMD for c4f79900-3558781c (5Xx.)
Can't find ticket for c4f79900-3558781c (5Xx.)
c4f79900-3558781c (5Xx.) has been deleted
Can't find TMD for cd51da4e-a18f5a53 (..ZS)
Can't find ticket for cd51da4e-a18f5a53 (..ZS)
cd51da4e-a18f5a53 (..ZS) has been deleted
Can't find TMD for 680e9d8d-e7e14792 (..G.)
Can't find ticket for 680e9d8d-e7e14792 (..G.)
680e9d8d-e7e14792 (..G.) has been deleted
Can't find TMD for b4cc7bfb-44d2c42b (D..+)
Can't find ticket for b4cc7bfb-44d2c42b (D..+)
b4cc7bfb-44d2c42b (D..+) has been deleted
Can't find TMD for 55448000-00000004 (....)
Can't find ticket for 55448000-00000004 (....)
55448000-00000004 (....) has been deleted
Can't find TMD for 929d9cb8-00000000 (....)
Can't find ticket for 929d9cb8-00000000 (....)
929d9cb8-00000000 (....) has been deleted
Can't find TMD for c0575dde-46520000 (FR..)
Can't find ticket for c0575dde-46520000 (FR..)
c0575dde-46520000 (FR..) has been deleted
checking for lost clusters...
total used clusters 3120 of 0x8000
found 0 lost clusters
UNK ( 0xffff ) 7 (6e, 6f, 1643, 1644, 1645, 1646, 1647)
free 4a99
verifying ecc...
2 out of 874944 pages had incorrect ecc.
they were spread through 2 clusters in 2 blocks:
(2, 6)
0 of those clusters are non-special (they belong to the fs)
verifying hmac...
verifying hmac for 703 files
hmac bad (1)
"nwc24dl.bin" is f800 bytes ( 4 ) clusters

00000000 ff63cdf2 bf02e7b3 221e4638 23fa0975 .c......".F8#..u
00000010 6be71b91 f463cdf2 bf02e7b3 221e4638 k....c......".F8
00000020 23000000 00000000 00000000 00000000 #...............
00000030 8f03700c 74098b06 94026b0d 3905c60a ..p.t.....k.9...

00000000 fffa0975 6be71b91 f44583cd 50f56a9a ...uk....E..P.j.
00000010 7e2f0b8d 225bd872 d61f9840 f12004f1 ~/.."[[email protected] ..
00000020 9c000000 00000000 00000000 00000000 ................
00000030 6701980e 4c094c09 dc08dc08 910f6e00 g...L.L.......n.

00000000 58d4a4b3 1e4986d7 e76d183e 889360f9 X....I...m.>..`.
00000010 c6efac8a ....
bad HMAC for "/shared2/wc24/nwc24dl.bin"
1 files had bad HMAC data
checking HMAC for superclusters...
0 superClusters had bad HMAC data

 

[XFlak]

I think I can explain 1 or 2 of the errors

One is the 0000009a.app, this is the app for the 4.3E system menu that gets changed when a custom system menu theme gets installed. Presumably you have a custom theme installed to this nand backup, and it should be fine.

Also, 1000009b.app is the system menu, usually it would be 0000009b.app, but when priiloader gets installed it moves the system menu, and puts itself in its place (I. E. 0000009b is actually priiloader)

There are some other titles that seem to have been partially removed, shouldn't be a problem either... I think?

If the wii was working just fine when the nand backup was taken, it's very likely to work just fine if you ever need to restore it. And even if it wasn't working, u should be able to restore it to its current state should you ever need/want to.

Edit: if anyone else has a different take please share, by no means am I able to perfectly interpret the nand bin check output!

Edit2: if it were me I would try the ohneschwanzenegger route

 

[Cecinus126]

Hi XFlak, thanks you for your reply.
Sorry I haven't answered all this time but I was very busy.
In any case...

As advised by you, I am planning to use Ohneschwanzenegger to create a new clean copy of the NAND.
Just a couple of questions:
- When I create the new nand, I let the program take the information from the old backup copy (I'm lucky to have a Wii with 0 bad blocks!). In the "Keys" path I leave <From old nand> or better if I select the "keys.bin" file generated by BootMii?

- Also, "uid.sys" is better that I leave <From old nand> or select my region (Eur)?

And now the most important question:
Once the new NAND has been initialized, is it sufficient that I download the 4.3E firmware or do I have to install some other wads, already at this stage? I'm not sure if it installs the main channels (Mii channel, Photo channel, WiiShop...) and it is enough to make everything work properly.
Thank you in advance and I hope everything goes well since I have the BootMii installed only as IOS...

Edit: In my previous message, at the bottom of the nandBinCheck I had the error in red:
hmac bad (1)
"nwc24dl.bin" is f800 bytes ( 4 ) clusters
bad HMAC for "/shared2/wc24/nwc24dl.bin"
I researched a bit and found that it is a system file that manages WiiConnect24 processes. I don't know if that's the only cause of my problems, but anyway, I don't know how to fix it without a new NAND.

 

[XFlak]

The keys from the old nand should be the same as your bootmii keys.bin

I'm not sure about Uid.sys, either is probably fine.

If anything goes wrong you can always try the other option, or restore your current nand backup, that's the beauty of bootmii boot2.

After you boot into the nand you should find yourself in a completely virgin state (other than bootmii @boot2), at that point just use modmii as per usual as if the console has never been modded before.

 

[The Real Jdbye]

Hi XFlak, thanks you for your reply.
Sorry I haven't answered all this time but I was very busy.
In any case...

As advised by you, I am planning to use Ohneschwanzenegger to create a new clean copy of the NAND.
Just a couple of questions:
- When I create the new nand, I let the program take the information from the old backup copy (I'm lucky to have a Wii with 0 bad blocks!). In the "Keys" path I leave <From old nand> or better if I select the "keys.bin" file generated by BootMii?

- Also, "uid.sys" is better that I leave <From old nand> or select my region (Eur)?

And now the most important question:
Once the new NAND has been initialized, is it sufficient that I download the 4.3E firmware or do I have to install some other wads, already at this stage? I'm not sure if it installs the main channels (Mii channel, Photo channel, WiiShop...) and it is enough to make everything work properly.
Thank you in advance and I hope everything goes well since I have the BootMii installed only as IOS...

Edit: In my previous message, at the bottom of the nandBinCheck I had the error in red:
hmac bad (1)
"nwc24dl.bin" is f800 bytes ( 4 ) clusters
bad HMAC for "/shared2/wc24/nwc24dl.bin"
I researched a bit and found that it is a system file that manages WiiConnect24 processes. I don't know if that's the only cause of my problems, but anyway, I don't know how to fix it without a new NAND.

It might be safe to delete it if it's only a downloaded data file, WC24 doesn't exist anymore anyways.

 

[Cecinus126]

Thanks for the replies.
XFlak I don't have BootMii @Boot2! I wish it was like that! That's exactly why I have to be super safe, otherwise my Wii becomes a paperweight.
I am aware that the Wii would return as fresh from the factory and that I would have to rimodify it again. My question was, if I type "4.3E" into the Ohneswanzenegger bar, I also download all the channels that were originally installed on Wii, such as photo channel, Mii channel, WiiShop channel, or will I flash a more essential firmware than it was originally? I hope I have explained.
That is, does Ohneswanzenegger create a perfect ready-to-use nand just by downloading the firmware?
The Real Jdbye I don't understand, how do I cancel it? My Wii is "semi bricked" and I don't know why. Just read the previous messages to understand that I can do everything except to use the Wii Menù. My question was: since NandBinCheck found that error, could I maybe try to fix it without using Ohneswanzenegger?

 

[XFlak]

You tried installing all the core files already as part of the modmii region change guide, including system menu, system menu IOS, bc, region select, and maybe one more in forgetting, so I don't think there is anything else to try other than ohneschwanzenegger, unless u want to just live without system menu access and only homebrew.

Regarding your other question, I'm not sure if a nand constructed by ohneschwanzenegger will have all those channels, I've never personally had to use the tool. I suspect it may have some, like the photo channel, but not all. Either way, if it solves your core problem we can add channels later.

Yeah, I'm not gonna lie, without bootmii boot2 this is a risk. So long as the nand constructed is good, you should be fine. But if u lose power in the middle of restoring the nand, you could brick even if the nand was good. If this is a worry consider using a UPS.

Perhaps someone more experienced with ohneschwanzenegger can comment on your uid.sys question.

 

[Cecinus126]

Hi!
In this period of absence, I continued with the work.
Following the many tips from XFlak, I finally flashed a clean new nand, created with Ohneschwanzenegger, into my Wii.
I must say that everything went well and now everything works perfectly!
I started a console update (Nintendo servers are still active!) To update any traces of IOS / old system files. Later I rerun the HackMii installer and installed the cIOS d2x. Now my Wii is brand new and everything works perfectly! Thanks giantpune.
P.S. I was struck by the progress made from the "Wii hacking" point of view: only the cIOS d2x v10 beta52 in slot 249 with base 57 would be enough to make practically everything work (at least the usb loaders).
No IOS236, no cIOS Hermes and cIOS d2x with base 56 and 37 just to cover the very few remaining games. Wow!
Thanks to everyone and especially to XFlak for the advice and help.
Now I'm happy.