Wednesday, April 13, 2011

Fixing Korean Wii 003 Unathorized device has been detected.

At the end of Semptember 2009, Nintendo pushed ver4.2 update for the Wii, one of the ‘fixes’ they implemented was a check for region changed consoles (Kor-USA usually). Usually this was done by the seller (back in the day the Won fell to an all time low, making Korea Wiis a heck lot cheaper then anything else) and the unsuspecting user when updated to 4.2 will be faced with this error message upon bootup.

Thanks to Giantpune, there is now a proper fix for this error. To fix this you need to install Ios60-v6174 onto ios slots 70,80 and 90. then never update from Nintendo again.

You’ll need these,

- 1 broken 003 Korean console, modchipped and capable of reading burned DVDs

- 1 copy of Super Smash Bros Brawl PAL.

- 1 Gamecube controller or Savemii (to put console in recovery mode).

- Depending on what region you’ve ‘converted’ your console to, you may need another game (of the same region as your console) to get super smash bros to load, if your console was region changed to PAL you wouldn’t need this. I’ve tested Carnival Games on an NTSC-U converted console and it worked out good.


Download and extract it straight to a formatted SD card, SDHC will not work. This contains the exploited savegames for SSBB. (Which will trigger and run installers to fix the console.)

NTSC-U: Download

NTSC-J: Download

PAL: Patch your SSSB-iso to autoboot (Google for the right tools).

Once the right package is downloaded for your console, extract it to a folder on your PC and then follow the steps below (for pal you don’t have to do this, just make the iso autobootable and then continue, the reason why we are doing this is to make a game from another region work on the console, since you’re already PAL, you don’t have to.)

I will only go through with the Swap-disc method, there exists another method (channel install), that is a little easier (no need to swap disc etc.) but requires that the console does not already have the channel installed. Goto HERE for more info.

You’ll now need that game you’re gonna use to swap from. I’m using Carnival Games.

Dump both games as an ISO to your PC. Check with an MD5 tool to make sure you have a good dump, SSSB’s MD5 is 549C19AEFD56C3651571C32E3C32EB3. Rename your swap game to swap.iso and SSSB to sssb-pal.iso. Put them both inside the folder you extracted the above package to and run SwapDisc-PWNS.bat

In a moment wit would’ve done it’s thing (basically rename some game IDs to make them both match for the swap to be successful.), burn SSSB-pal.iso to a dual layer DVD (Use something good, Ritek G05, Taiyo Yuden and Verbatims are known to be the best). Set layer break to 2084960, also burn swap.iso to a good single layer DVD.


Once done, hookup your wii and use the gamecube controller to boot it into recovery (press and hold all 4 D-pad buttons while turning on, you may have to take apart the controller and remove the num in the middle for this to happen, you’d also need to plug it into port 4).

Stick swap disc into the drive and it should load. Let it load to the title screen (Carnival games will ask you to create a save game, just select no and continue on.) Once in, press Home and eject the disc. With carnival games you’d just have to insert in SSSB and then hit Reset and then Virtual Console will load. You may have to experiment with other games. Once VC is loaded, hit Reset again and the main SSSB game should load.

Go to the stage builder and then delete the original 3 stages, then head back to the main title screen. Now insert the SD card and then go to the stage builder, the installer should now load.

Install Homebrew channel, bootmii and then make a NAND dump. Once finished you should end up in HBC again, DO NOT TURN OFF YOUR WII, if you do you’d have to restart the process.

Eject the SD card and then download one of the following files (according to the region you want to be on).




Copy the NAND dump in your SD card out to a safe location, and then format the card. Next extract the files from the package you’ve downloaded above to the root of your SD card. Then download this package below.


Extract this too to the root. Next put the SD card into the Wii, hit “Home” on your wiimote and then start bootmii, MultiModManager will now start, scroll to WAD Manager, press A and then press 1 to install everything. 25 wads will now install, make sure there are no errors.

Once completed scroll to System Menu 4.1, press A and then 1 to install all. 3 wads will install, make sure there are no errors.

When done, quit back out to the HBC and then lauch the Priiloader installer, install that (follow on screen instructions), and then when done, turn off the console, hold reset and then turn it back on. Scroll to System Menu Hacks, enter (press A) and then Enable "Block Disk Updates", "Block Online Updates", "Remove Diagnostic Disc Check", "Move Disc Channel". Save and exit back to system menu.

Congratulations, you’ve just fixed your Wii, as well as prevent it from being updated in the future. Remember to never update your Wii from Nintendo.

Saturday, April 9, 2011

Repairing Mac HFS+ Partition table

Had one of these recently, was a WDGreen power 1.5TB drive that had suffered some media damage (perhaps the issue with 8sec head parking might have attributed to it? I tried reading the SMART data but the load/unload cycles were masked).
Before I even began I used ddrescue to sector-sector clone the HDD to another drive. Ubuntu rescue remix is good for this. I won’t go into details on how to use ddrescue, that is covered elsewhere. You need to be careful about the commands you enter, copying the destination drive to the source can have dire results.
Once that’s sorted. Bootup MacOSX (I tried this in Vmware with the cloned drive as an attached physical drive on the virtual machine). Grab a copy of Testdis,, and plonk it on your machine. You might have to have Rosetta installed for this to work properly (You can find this on the MacOS install DVD).
Do a partition scan (MAC) on the HDD (/dev/rdisk*), you should eventually reach a screen similar to this.
Next we’ll use PDISK to initialise the partition table. Keep that window handy while you open up another terminal.
- ‘sudo pdisk /dev/rdisk*’(* = wadever was for your HDD). Issue command 'i'.
It’ll enquire about block sizes and total size of device. Just hit enter through (3 times).
Now we’re gonna need that partition info. Type the command ‘c’ and it’ll ask where your 1st partition starts, how long it will be and what name you want for it. You have to repeat this for as many partitions as you have found on Testdisk.
For my case it’d be
First block: 40
Length in blocks: 409600
Name of partition: EFI
‘c’ (again)
First block: 409640
Length in blocks: 2929605344
Name of partition: HFS
There might be error messages telling you about “Requested base and length not in existing free partition”. For the moment just ignore them.
Once you’re sure you have it right. Issue ‘w’ and then it’ll prompt you if you want the structure written. Once done, I like to use Testdisk again on the HDD to make sure I have it correctly set up. If it is, Finder should automatically try to mount the drive, if the damage wasn’t too bad.
In my case it wasn’t so easy though, even after I’ve got the partition structure right (I checked and rechecked), the bloody thing still wouldn’t mount. I believe the journal area was corrupted enough to not let it work (fsck didn’t do anything as well, it was so broken it didn’t do anything). A run through with Diskwarrior was done and that made the data visible again.

Thursday, April 7, 2011

Mac OSX 10.6 (Snow Leopard) on VMware. (Win7)

Interested to try OSX out on your PC without all the other ‘hassles’ of partitioning and having a configured bootloader? Got random mac partitioned HDDs you need to grab data off from (I fall into this category)? Just follow these easy steps below to get Snow Leopard on your PC.


-PC with an intel processor, virtualisation might be required, I used a q6600 without problems.

-VMware installed (I used version 7)

-Retail copy of 10.6 (I don’t encourage torrenting)

-Downloaded a pre-made modified version of Snow Leopard.vmdk and darwin_snow.iso, basically a pre-made version of the virtual machine. Get it here.


-Start VMware and open the vmx file you’ve downloaded (and extracted). Edit the virtual machine settings to use darwin_snow.iso on the DVD drive.

-You can edit the other memory/processor settings to improve performance, else proceed to power on the virtual machine and quickly hit F8, which should now enable a boot menu.

-Before proceeding, point the virtual machine (again under virtual machine settings) to the OSX retail DVD instaed of darwin_snow.iso.

-Now select the C option (boot DVD) and the grey apple boot screen should show.

-Wait a little for the installation setup to show. Complete the Installation.

-After it’s done, point the DVD drive back to darwin_snow.iso and boot up the machine.

You should now have Mac OSX working =p. It does suck a fair amount of system resources, I have it set at 2GB of ram and to use all 4 cores of my proc, even then it still does take awhile to bootup.

Wednesday, April 6, 2011

Updating PSP and run into DRNFFFFFFCD,DRNFFFFFFCE,D RNFFFFFFB9 + other cryptic error messages?

Was trying to update a CFW’d PSP today and ran into this weird error message on the official sony 6.35 updater. Did some research and this is what I came up with.
These errors are generated by the hidden updater module sceChkDegeneration, used to detect a patched IdStorage on a TA-082
In order to help you guys out, here's a list of the errors so you can work out what needs to be done to fix your PSP.
DRNFFFFFFD8 = key 0x4 missing
DRNFFFFFFD7 = key 0x4 header is not "n y r B" (in hex: 6E 79 72 42)
DRNFFFFFFCE = key 0x5 missing
DRNFFFFFFCD = key 0x5 header is not "g k l C" (in hex: 67 6B 6C 43)
* to fix this, get KeyCleaner - then let it clean key 5, run it again and tell it to UNPATCH key 5
DRNFFFFFFC4 = key 0x6 missing
DRNFFFFFFC3 = key 0x6 header is not "r d D M" (in hex: 72 74 44 4D)
DRNFFFFFFB9 = key 0x7 header is not "D a P A" (in hex: 44 61 50 41) - ta-086+ only
DRNFFFFFFB0 = key 0x8 missing ta-086+ only
DRNFFFFFFAF = key 0x8 header is not "p D C L" (in hex: 70 44 43 4C) - ta-086+ only
* to fix this, get IdStorage Manager and click and change key 08 to
70 44 43 4C 01 00 00 00 0C 00 00 00 76 FC 19 C8 0A 00 19 00 10 00 0D 00 07 00 02 and all zeroes after that
CTA80000025 = region key (0x100) is damaged or missing (irrecoverable unless you have a backup)
Other errors:
FFFFFFFE = critical error at the end of the update - flash1 related, try restoring default settings

Most of these problems can be fixed using the excellent KeyCleaner and IdStorage Manager by Chilly Willy. (Google for Keycleaner, I think it’s up to 1.4 right now), a lot of these errors were due to early downgrader work on the TA-082 boards I believe (Patching key 05 instead of using a custom IPL for eg.)
Good luck =p.