Results 1 to 4 of 4

Thread: nandBinCheck

  1. #1
    Senior Member Cile's Avatar
    Join Date
    Nov 2009
    Location
    Australia
    Posts
    5,071

    nandBinCheck

    nandBinCheck is a CLI program, so there are no fancy screenshots. It is able to display information about boot1 & 2, nand filesystem, permissions, ecc, hmac, SFFS, detect causes of many different types of bricks ( opera, 003, unbootable IOS ). With this program, you are almost guaranteed that a nand.bin is safe to install on a Wii. I have also used it many times to diagnose an otherwise unknown cause of brick. Here is the built-in help

    Code:
    usage: nandBinCheck nand.bin <other options>
    
    Other options: 
       -boot           shows information about boot 1 and 2 
     
       -fs             verify the filesystem is in tact 
                       verifies presence of uid & content.map & checks the hashes in the content.map 
                       check sha1 hashes for title private contents 
                       check all titles with a ticket titles for required IOS, proper uid & gid
    [SPOILER=" output of the program on a nand.bin"]
    checking boot1 & 2...
    Boot1 B (vulnerable)
    found 3 copies of boot2
    "blocks 1 & 2: Marked as bad blocks; Content Sha1 matches TMD; TMD officially signed; Ticket officially signed; Version 2"
    "blocks 3 & 4: Used for booting; Content Sha1 matches TMD; TMD is fakesigned; Ticket officially signed; BootMii 1.3"
    "blocks 7 & 6: Backup copy; Content Sha1 matches TMD; TMD officially signed; Ticket officially signed; Version 2"
    checking uid.sys...
    checking content.map...
    checking "/shared1/00000000.app" ...
    checking "/shared1/00000001.app" ...
    checking "/shared1/00000002.app" ...
    checking "/shared1/00000003.app" ...
    checking "/shared1/00000004.app" ...
    checking "/shared1/00000005.app" ...
    checking "/shared1/00000006.app" ...
    checking "/shared1/00000007.app" ...
    checking "/shared1/00000008.app" ...
    checking "/shared1/00000009.app" ...
    checking "/shared1/0000000a.app" ...
    checking "/shared1/0000000b.app" ...
    checking "/shared1/0000000c.app" ...
    checking "/shared1/0000000d.app" ...
    checking "/shared1/0000000e.app" ...
    checking "/shared1/0000000f.app" ...
    checking "/shared1/00000010.app" ...
    checking "/shared1/00000011.app" ...
    checking "/shared1/00000012.app" ...
    checking "/shared1/00000013.app" ...
    checking "/shared1/00000014.app" ...
    checking "/shared1/00000015.app" ...
    checking "/shared1/00000016.app" ...
    checking "/shared1/00000017.app" ...
    checking "/shared1/00000018.app" ...
    checking "/shared1/00000019.app" ...
    checking "/shared1/0000001a.app" ...
    checking "/shared1/0000001b.app" ...
    checking "/shared1/0000001c.app" ...
    checking "/shared1/0000001d.app" ...
    checking "/shared1/0000001e.app" ...
    checking "/shared1/0000001f.app" ...
    checking "/shared1/00000020.app" ...
    checking "/shared1/00000021.app" ...
    checking "/shared1/00000022.app" ...
    checking "/shared1/00000023.app" ...
    checking "/shared1/00000024.app" ...
    checking "/shared1/00000025.app" ...
    checking "/shared1/00000026.app" ...
    checking "/shared1/00000027.app" ...
    checking "/shared1/00000028.app" ...
    checking "/shared1/00000029.app" ...
    checking "/shared1/0000002a.app" ...
    checking "/shared1/0000002b.app" ...
    checking "/shared1/0000002c.app" ...
    checking "/shared1/0000002d.app" ...
    checking "/shared1/0000002e.app" ...
    checking "/shared1/0000002f.app" ...
    checking "/shared1/00000030.app" ...
    checking "/shared1/00000031.app" ...
    checking "/shared1/00000032.app" ...
    checking "/shared1/00000033.app" ...
    checking "/shared1/00000034.app" ...
    checking "/shared1/00000035.app" ...
    checking "/shared1/00000036.app" ...
    checking "/shared1/00000037.app" ...
    checking "/shared1/00000038.app" ...
    checking "/shared1/00000039.app" ...
    checking "/shared1/0000003a.app" ...
    checking "/shared1/0000003b.app" ...
    checking "/shared1/0000003c.app" ...
    checking "/shared1/0000003d.app" ...
    checking "/shared1/0000003e.app" ...
    checking "/shared1/0000003f.app" ...
    checking "/shared1/00000040.app" ...
    checking "/shared1/00000041.app" ...
    checking "/shared1/00000042.app" ...
    checking "/shared1/00000043.app" ...
    checking "/shared1/00000044.app" ...
    checking "/shared1/00000045.app" ...
    checking "/shared1/00000046.app" ...
    checking "/shared1/00000047.app" ...
    checking "/shared1/00000048.app" ...
    checking "/shared1/00000049.app" ...
    checking "/shared1/0000004a.app" ...
    checking "/shared1/0000004b.app" ...
    checking "/shared1/0000004c.app" ...
    checking "/shared1/0000004d.app" ...
    checking "/shared1/0000004e.app" ...
    checking "/shared1/0000004f.app" ...
    checking "/shared1/00000050.app" ...
    checking "/shared1/00000051.app" ...
    checking "/shared1/00000052.app" ...
    checking "/shared1/00000053.app" ...
    checking "/shared1/00000054.app" ...
    checking "/shared1/00000055.app" ...
    checking "/shared1/00000056.app" ...
    checking "/shared1/00000057.app" ...
    checking "/shared1/00000058.app" ...
    checking "/shared1/00000059.app" ...
    checking "/shared1/0000005a.app" ...
    checking "/shared1/0000005b.app" ...
    checking "/shared1/0000005c.app" ...
    checking "/shared1/0000005d.app" ...
    checking "/shared1/0000005e.app" ...
    checking "/shared1/0000005f.app" ...
    checking "/shared1/00000060.app" ...
    checking "/shared1/00000061.app" ...
    checking "/shared1/00000062.app" ...
    checking "/shared1/00000063.app" ...
    checking "/shared1/00000064.app" ...
    checking "/shared1/00000065.app" ...
    checking "/shared1/00000066.app" ...
    checking "/shared1/00000067.app" ...
    checking "/shared1/00000068.app" ...
    checking "/shared1/00000069.app" ...
    checking "/shared1/0000006a.app" ...
    checking "/shared1/0000006b.app" ...
    found 49 titles installed

    Checking 00000001-00000004 ...
    Unable to get title
    version: 0.3 3 hex: 3

    Checking 00000001-00000009 ...
    Unable to get title
    version: 2.4 516 hex: 204

    Checking 00000001-0000000b ...
    name: "fw.RVL.11.0.10.viper.0611141652 builder@ADONIS-"
    version: 0.10 10 hex: a

    Checking 00000001-0000000c ...
    name: "fw.RVL.12.0.6.viper.0611041415 builder@ADONIS-"
    version: 0.6 6 hex: 6

    Checking 00000001-0000000d ...
    name: "fw.RVL.13.0.10.viper.0611141652 builder@ADONIS-"
    version: 0.10 10 hex: a

    Checking 00000001-0000000e ...
    name: "fw.RVL.14.1.1.viper.0611171440 builder@ADONIS-"
    version: 1.1 257 hex: 101

    Checking 00000001-0000000f ...
    name: "fw.RVL.15.1.1.viper.0611171440 builder@ADONIS-"
    version: 1.1 257 hex: 101

    Checking 00000001-00000011 ...
    name: "fw.RVL.17.2.0.viper.0611301141 builder@ADONIS-"
    version: 2.0 512 hex: 200

    Checking 00000001-00000014 ...
    name: "fw.RVL.20.0.12.viper.0702221710 builder@ADONIS-"
    version: 0.12 12 hex: c

    Checking 00000001-00000015 ...
    name: "fw.RVL.21.2.5.viper.0708311326 Administrator@R"
    version: 2.5 517 hex: 205

    Checking 00000001-00000016 ...
    name: "fw.RVL.22.3.4.viper.0706121001 yasuh-to@TONKAT"
    version: 3.4 772 hex: 304

    Checking 00000001-0000001c ...
    name: "fw.RVL.28.5.8.viper.0706220437 administrator@R"
    version: 5.8 1288 hex: 508

    Checking 00000001-0000001e ...
    name: "firmware.64.0804050736 admin@FWPUBLISH"
    version: 10.16 2576 hex: a10

    Checking 00000001-0000001f ...
    name: "firmware.64.0804050738 admin@FWPUBLISH"
    version: 10.16 2576 hex: a10

    Checking 00000001-00000021 ...
    name: "fw.RVL.33.4.16.viper.0708272357 Owner@DEVOBUILD"
    version: 4.16 1040 hex: 410

    Checking 00000001-00000022 ...
    name: "fw.RVL.34.4.15.viper.0708101612 Administrator@R"
    version: 4.15 1039 hex: 40f

    Checking 00000001-00000023 ...
    name: "fw.RVL.35.4.16.viper.0708311458 Owner@DEVOBUILD"
    version: 4.16 1040 hex: 410

    Checking 00000001-00000024 ...
    tmd fakesigned
    name: "firmware.64.0907270645 admin@FWPUBLISH"
    version: 13.23 3351 hex: d17

    Checking 00000001-00000025 ...
    tmd fakesigned
    name: "firmware.64.0907270647 admin@FWPUBLISH"
    version: 15.29 3869 hex: f1d

    Checking 00000001-00000026 ...
    name: "firmware.64.0808190218 admin@FWPUBLISH"
    version: 14.25 3609 hex: e19

    Checking 00000001-00000035 ...
    name: "firmware.64.0808070708 admin@FWPUBLISH"
    version: 16.17 4113 hex: 1011

    Checking 00000001-00000037 ...
    name: "firmware.64.0809190546 admin@FWPUBLISH"
    version: 18.25 4633 hex: 1219

    Checking 00000001-00000038 ...
    name: "firmware.64.0907270701 admin@FWPUBLISH"
    version: 21.29 5405 hex: 151d

    Checking 00000001-00000039 ...
    tmd fakesigned
    name: "firmware.64.0908200523 admin@FWPUBLISH"
    version: 22.29 5661 hex: 161d

    Checking 00000001-0000003a ...
    name: "firmware.64.1004131121 admin@FWPUBLISH"
    version: 24.31 6175 hex: 181f

    Checking 00000001-0000003c ...
    tmd fakesigned
    name: "firmware.64.0902040955 admin@FWPUBLISH"
    version: 24.30 6174 hex: 181e

    Checking 00000001-0000003d ...
    name: "firmware.64.0907270706 admin@FWPUBLISH"
    version: 21.29 5405 hex: 151d

    Checking 00000001-00000046 ...
    tmd fakesigned
    name: "firmware.64.0907270708 admin@FWPUBLISH"
    version: 26.31 6687 hex: 1a1f

    Checking 00000001-000000c8 ...
    ticket fakesigned
    tmd fakesigned
    name: "waninkoko"
    version: 0.20 20 hex: 14

    Checking 00000001-000000c9 ...
    ticket fakesigned
    tmd fakesigned
    name: "waninkoko"
    version: 0.20 20 hex: 14

    Checking 00000001-000000ca ...
    ticket fakesigned
    tmd fakesigned
    name: "firmware.64.0908200523 admin@FWPUBLISH"
    version: 255.255 65535 hex: ffff

    Checking 00000001-000000de ...
    ticket fakesigned
    tmd fakesigned
    name: "firmware.64.0901230711 admin@FWPUBLISH"
    version: 0.4 4 hex: 4

    Checking 00000001-000000df ...
    ticket fakesigned
    tmd fakesigned
    name: "firmware.64.0901260758 admin@FWPUBLISH"
    version: 0.4 4 hex: 4

    Checking 00000001-000000ed ...
    ticket fakesigned
    tmd fakesigned
    name: "waninkoko"
    version: 0.20 20 hex: 14

    Checking 00000001-000000f9 ...
    ticket fakesigned
    tmd fakesigned
    name: "waninkoko"
    version: 0.20 20 hex: 14

    Checking 00000001-000000fa ...
    ticket fakesigned
    tmd fakesigned
    name: "waninkoko"
    version: 255.255 65535 hex: ffff

    Checking 00000001-000000fe ...
    ticket fakesigned
    tmd fakesigned
    Unable to get title
    version: 255.1 65281 hex: ff01
    found 37 bootable IOS

    Checking 00000001-00000002 ...
    name: "systemmenu.rvl.0906251145 irduser@IPLBUIL"
    one of the private contents' hash doesnt check out 8 "/title/00000001/00000002/content/0000007c.app"
    expected 947a3f929323f6c8b3515d8960e7427a7a3e9d87
    actual 016addccb393099ff7ee7d047115e92e4cdc0528
    version: 1.193 449 hex: 1c1
    requires IOS 60
    incorrect uid/gid for data folder

    Checking 00000001-00000100 ...
    name: "bc.0803040819 BuildMaster@BUI"
    version: 0.4 4 hex: 4

    Checking 00000001-00000101 ...
    tmd fakesigned
    name: "mios.0803140448 BuildMaster@BUI"
    version: 0.8 8 hex: 8

    Checking 00010001-46414745 (FAGE) ...
    ticket fakesigned
    tmd fakesigned
    name: "Super Mario Bros."
    version: 0.2 2 hex: 2
    requires IOS 9

    Checking 00010001-4642324e (FB2N) ...
    ticket fakesigned
    tmd fakesigned
    name: "SMB: The Lost Levels"
    version: 0.1 1 hex: 1
    requires IOS 21

    Checking 00010001-48414445 (HADE) ...
    name: "Internet Channel"
    version: 4.0 1024 hex: 400
    requires IOS 55

    Checking 00010001-554e454f (UNEO) ...
    ticket fakesigned
    tmd fakesigned
    name: "USB Loader GX"
    version: 2.0 512 hex: 200
    requires IOS 35

    Checking 00010001-af1bf516 (....) ...
    ticket fakesigned
    tmd fakesigned
    name: "Homebrew Channel"
    version: 0.8 8 hex: 8
    access : 3
    requires IOS 58

    Checking 00010002-48414341 (HACA) ...
    Decrypted signature hash: 1f0608e879f09302b0cb8b2c6de8a305fbbbe191
    SHA1 hash: a29dbb522703c31e004c01059eef9713ccb6bbfa
    ticket RSA signature isn't even close ( 4 )
    name: "Mii Channel"
    version: 0.5 5 hex: 5
    requires IOS 31

    Checking 00010008-44495343 (DISC) ...
    ticket fakesigned
    tmd fakesigned
    name: "DVD.enabling.stub marcan@hackmii"
    version: 0.2 2 hex: 2
    access : 3
    requires IOS 36

    Checking 00010008-48414b45 (HAKE) ...
    Decrypted signature hash: 7445972fad0ef5cc08e7de9b621f22c11bde4c06
    SHA1 hash: 607496a756efdb21d3d8e97c9d9092a87e070945
    ticket RSA signature isn't even close ( 4 )
    name: "eulav.0707051652 @SASAKIT-COM2"
    version: 0.2 2 hex: 2
    requires IOS 31

    Checking 00010008-48414c45 (HALE) ...
    name: "rgnsel.0707051714 @SASAKIT-COM2"
    version: 0.2 2 hex: 2
    requires IOS 31
    Checking for 003 error ...
    The system menu doesn't appear to perform the Korean-key check
    System menu IOS does not appear to support the Korean-key check
    The korean key is not present in this wii
    Checking setting.txt stuff...
    system menu resource matches setting.txt AREA setting.
    AREA=USA
    MODEL=RVL-001(USA)
    DVD=0
    MPCH=0x7FFE
    CODE=LU

    SERNO=123456789
    VIDEO=NTSC
    GAME=US

    Comparing uid.sys against the filesystem...
    00010000-3132334a (123J) was installed at the factory and is now missing
    00010000-0000dead (....) was installed at the factory and is now missing
    00010000-3132314a (121J) was installed at the factory and is now missing
    00010002-48414141 (HAAA) was installed at the factory and is now missing
    00010002-48414641 (HAFA) was installed at the factory and is now missing
    00010002-48414241 (HABA) was installed at the factory and is now missing
    00010002-48414741 (HAGA) was installed at the factory and is now missing
    00010000-31323245 (122E) was installed at the factory and is now missing
    00010000-30303032 (0002) was installed at the factory and is now missing
    15 titles were installed before any user intervention
    Can't find TMD for 00010000-52454445 (REDE)
    00010000-52454445 (REDE) has been deleted
    TMD for 00010000-52474850 (RGHP) is fakesigned
    checking for lost clusters...
    total used clusters 34b5 of 0x8000
    found 0 lost clusters
    UNK ( 0xffff ) c (3a43, 3a44, 3a45, 3a46, 3a47, 59c9, 59ca, 59cb, 59cc, 59cd, 59ce, 59cf)
    free 46ff
    verifying ecc...
    2 out of 927296 pages had incorrect ecc.
    they were spread through 2 clusters in 2 blocks:
    (2, 6)
    0 of those clusters are non-special (they belong to the fs)
    verifying hmac...
    verifying hmac for 522 files
    0 files had bad HMAC data
    checking HMAC for superclusters...
    0 superClusters had bad HMAC data [/SPOILER]


    warnings are shown highlited in blue. these are things that you probably need to look at.
    errors are shown in red. these are things that will likely result in a brick.

    download for windows users... Multiupload.com - upload your files to multiple file hosting sites!
    linux & mac can build it from source code... http://code.google.com/p/wiiqt/

    Source: nandBinCheck - GBAtemp.net

  2. #2
    Retired WiiHacks Staff Krafter's Avatar
    Join Date
    Dec 2009
    Posts
    4,450
    This might be a nice utility if I can figure out how to use it. Any ideas what environment it runs in? The exe will run in the dos prompt but when the arguments are applied it does nothing. Example "nandbincheck -boot" displays the same as running "nandbincheck".

  3. #3
    Senior Member Cile's Avatar
    Join Date
    Nov 2009
    Location
    Australia
    Posts
    5,071
    nandBinCheck nand.bin -fs
    nandBinCheck nand.bin -boot

    make sure you have the nand.bin inside the same folder....
    Last edited by Cile; 02-19-2011 at 09:06 AM.

  4. #4
    Retired WiiHacks Staff Krafter's Avatar
    Join Date
    Dec 2009
    Posts
    4,450
    Ummm.... ya..... LOL. It's makes sense to give it a file name to check.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •