Corrupt nand

6 posts in this topic

Okay here goes, My sd card reader crapped out while I was reading nand. I did not notice this until after I wrote ecc because jrunner showed no problems, after writing ecc and got cpu from xell, made image, wrote got red light 1101 so I know thats something wrong with the nand, Trying to write back the original nand is when i realized my sd reader went bad and used my built in one on my laptop to write back original only to get the same error. I then loaded my original dump into xebuild and I get error 'can't tell if this is big or smallblock nand do you want to continue. so I then realized I had no good back up of my nand and decided to follow the '
RGH/JTAG] How to recover from losing dumps + erasing/corrupting the NAND
located in this forum.
well after making dummy bin making new image and writting then reread patch dvd delete smc,kv all that good stuff write new xebuild image.I get the exact same error, I am thinking the only way for me to get past this is to create a good retail image with the corrupt nand 'unfortunately I was going to use multibuild but it does not give an option for corona then I was going to use autogg and I can't dload any dashes so I am at a complete loss on this one and any help would be greatly appreciated.

I started off with a cr4 and after I got cpu with xell i changed it out for an ace chip since I like to keep my cr4 for stubborn consoles and the cr4's are hard to get ahold of anymore.

Thanks again

SO pics are not showing up from photobucket??? hope i don't get in trouble for posting links to the pics then. Only other thing I can think of.

(img) and other pics family 335_zpsltoooyod.jpg.html
(img) and other pics family 340_zpsmzzcqdkj.jpg.html?o=0
(img) pics n vids 2742_zpshxs3yoc8.jpg.html?o=0
(img) pics n vids 2741_zpseqifcscp.jpg.html?o=1
(img) pics n vids 2740_zpsfnkpoqr1.jpg.html?o=2
(img) pics n vids 2739_zpsfxgrytfs.jpg.html?o=3
(img) pics n vids 2738_zpsqoeurgyh.jpg.html?o=4
(img) pics n vids 2736_zps9m7omtsv.jpg.html?o=5
(img) pics n vids 2735_zps5t2pj7hw.jpg.html?o=6
(img) pics n vids 2733_zpsjc8bvs22.jpg.html?o=8
(img) pics n vids 2731_zpscs7pmulu.jpg.html?o=10
(img) pics n vids 2732_zpsfnv69ssr.jpg.html?o=9

here is jr log
base path changed to C:\Users\webby\Desktop\J-Runner v3\xeBuild
---- { Image Build Mode } ----
building glitch2 image
<enter> key on completion suppressed
data directory overridden from command line to '17489\'
per build directory overridden from command line to 'data\'
file name overridden from command line to 'C:\Users\webby\Desktop\J-Runner v3 (5) Core Pack\166342623743\updflash.bin'

------ parsing user ini at 'data\options.ini' ------
loading file...done!
pre-parsing and sanitizing
User options.ini loaded, 0x1a0 bytes in memory
loading cpukey.txt from data\cpukey.txt
CPU Key set to: (weight:0x35 valid; ecd: valid)
setting 1blkey from ini: 0x
1BL Key set to : 0x sum: 0x983 (expects: 0x983)
xex Key set to : 0x20B185A59D28FDC340583FBB0896BF91 sum: 0x800 (expects: 0x800)
Using patchsmc option (ini file)

------ parsing ini at '17489\_glitch2.ini' ------
ini version 17489

ini: label [coronabl] found
found (1) 'cba_13121.bin' crc: 0x9255dfb1
found (2) 'cbb_13121.bin' crc: 0x6f3f9c18
found (3) 'cd_12905.bin' crc: 0x58221592
found (4) 'ce_1888.bin' crc: 0xff9b60df
found (5) 'cf_17489.bin' crc: 0x26c9baed
found (6) 'cg_17489.bin' crc: 0xa9c9815e
ini dictates dual CB for this model

[rawpatch] label not found in ini

ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x40d5adce
found (2) 'bootanim.xex' crc: 0x85238a78
found (3) 'createprofile.xex' crc: 0x034acd79
found (4) 'dash.xex' crc: 0xdb4717cf
found (5) 'deviceselector.xex' crc: 0x1eb402b9
found (6) 'gamerprofile.xex' crc: 0xf4e4902e
found (7) 'hud.xex' crc: 0xb1485b31
found (8) 'huduiskin.xex' crc: 0x5fb2d289
found (9) 'mfgbootlauncher.xex' crc: 0xe9d4483a
found (10) 'minimediaplayer.xex' crc: 0x61f6c912
found (11) 'nomni.xexp' crc: 0x3ec9f846
found (12) 'nomnifwk.xexp' crc: 0x96bf4907
found (13) 'nomnifwm.xexp' crc: 0x772eb1df
found (14) 'SegoeXbox-Light.xtt' crc: 0xe0ee6049
found (15) 'signin.xex' crc: 0x68541d87
found (16) 'updater.xex' crc: 0xd63a84d9
found (17) 'vk.xex' crc: 0x81700712
found (18) 'xam.xex' crc: 0xa5741001
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0xe2adddfb
found (23) 'ximecore.xex' crc: 0x86cbabf6
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0xbee64013
found (26) '..\launch.xex' crc: 0x00000000
found (27) '..\lhelper.xex' crc: 0x00000000
found (28) '..\launch.ini' crc: 0x00000000
found (29) '..\launch.xex' crc: 0x00000000
found (30) '..\lhelper.xex' crc: 0x00000000
found (31) '..\launch.ini' crc: 0x00000000

ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'fcrt.bin' crc: 0x00000000
found (5) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------

output name overridden to: C:\Users\webby\Desktop\J-Runner v3 (5) Core Pack\166342623743\updflash.bin

1BL RSA pub key file is not available, signature checks will not be performed
PIRS RSA pub key file is not available, signature checks will not be performed
MASTER RSA pub key file is not available, signature checks will not be performed

------ Checking data\nanddump.bin ------
data\nanddump.bin file size: 0x3000000
nanddump header checks passed OK!
Loading NAND dump (0x3000000 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a mmc machine
NAND dump uses big block controller
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x800 of size 0x3800
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0x2ffc000! Using if no smc config is provided.
CF slot 0 decrypted ok LDV 0x03 Pairing: 0xc39e15
CF slot 1 decrypted ok LDV 0x02 Pairing: 0xc39e15
setting LDV from image to 3
setting pairing data from image to 0xc39e15
pairing set to: c3 9e 15
Scanning for mobile data and fsroot...attempting to find valid anchor block
anchor block v 1243 at 0x2fe8000 is valid
anchor block v 1244 at 0x2fec000 is valid
anchor block v 1244 at 0x2fec000 is selected
Mobiles found:
fsroot version 01 found at offset 0x0244c000 len 0x4000 page 0x00000000
Statistics.settings found at offset 0x2ff8000, size 4096 (0x1000) bytes found at offset 0x2ff4000, size 4096 (0x1000) bytes
seeking security files...
crl.bin found in sector 0x692 size 0xa00...verified! Will use if external file not found.
dae.bin found in sector 0x68f size 0x7090...verified! Will use if external file not found.
extended.bin found in sector 0x912 size 0x4000...verified! Will use if external file not found.
fcrt.bin found in sector 0x3a6 size key to verify signature is not available, skipping!
verified! Will use if external file not found.
secdata.bin found in sector 0x68d size 0x400...verified! Will use if external file not found.
Writing initial header to flash image

------ loading system update container ------
17489\su20076000_00000000 found, loading...done!
Read 0xb50000 bytes to memory
checking integrity...
header seems valid, version 2.0.17489.0
header hash is OK, checking content hashes...
content hashes seem OK, everything looks good!
extracted SUPD\xboxupd.bin (0x7ce00 bytes)
decrypting SUPD\xboxupd.bin\CF_17489.bin (0x4560 bytes)...done!
decrypting SUPD\xboxupd.bin\CG_17489.bin (0x7889c bytes)...done!

------ Loading bootloaders and required security files ------
reading data\smc.bin failed, using smc.bin from nand dump
reset smc load address to 0x800 size 0x3800
reading data\kv.bin failed, using kv.bin from nand dump
reading .\common\cba_13121.bin (0x1af0 bytes)
loaded cba_13121.bin, could not check signature rsa key not present!
reading .\common\cbb_13121.bin (0x7b40 bytes)
reading .\common\cd_12905.bin (0x5090 bytes)
reading .\common\ce_1888.bin (0x5606a b pad 0x56070 B)
reading data\xell-gggggg.bin (0x40000 bytes)
extracted SUPD\xboxupd.bin\CF_17489.bin (0x4560 bytes)
extracted SUPD\xboxupd.bin\CG_17489.bin (0x7889c bytes)
reading 17489\bin\patches_g2corona.bin (0x92c bytes)
reading data\smc_config.bin failed, using smc_config.bin from nand dump
checking smc_config
extracting config
SMC config info:
Target temps: Cpu: 82øC Gpu: 78øC Edram: 76øC
Max temps : Cpu: 89øC Gpu: 82øC Edram: 82øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 60:45:bd:25:bf:cd
AVRegion : 0x00000100 (NTSC-M)
GameRegion : 0x00ff (NTSC/US)
DVDRegion : 1
resetKey : RDAX
Checking for smc config data patches
smc config was not patched
could not check signature of cba_13121.bin, 1BL RSA key not present!
patch slot offset reset to: 0xb0000

------ Patching BLs and modifying patches ------
Patching BLs...Done!

------ Patching boot reasons and options into flash header ------
Patching header for xell power reason

------ Encrypting and finalizing bootloaders ------
encoding smc.bin size 0x3800
SMC checksum: ba42ab9f
known clean SMC found, type: Corona v6.2(2.05)
patching SMC reset limit at offset: 0x13b4
SMC reset limit patched successfully!
encoding kv.bin size 0x4000
decrypted keyvault has been set for reference
Master RSA pub not available, not checking hash
encoding cba_13121.bin size 0x1af0
encoding cbb_13121.bin size 0x7b40
CB 13121 seq 0x03020002 type: 0x03 cseq: 0x02 allow: 0x0002
expected fuses:
fuseset 01: 0F0F0F0F0F0FF0F0 (retail slim)
fuseset 02: 0F00000000000000 (sequence)
fuseset 02: 0F00000000000000 (allow cseq 2)
**dual CB flag detected!**
encoding cd_12905.bin size 0x5400
encoding ce_1888.bin size 0x56070
encoding xell-gggggg.bin size 0x40000
encoding cf_17489.bin size 0x4560
encoding cg_17489.bin size 0x788a0
encoding patches_g2corona.bin size 0x550

------ Adding bootloaders to flash image ------
adding smc.bin at raw offset 0x00000800 len 0x3800 (end 0x4000)
adding kv.bin at raw offset 0x00004000 len 0x4000 (end 0x8000)
adding cba_13121.bin at raw offset 0x00008000 len 0x1af0 (end 0x9af0)
adding cbb_13121.bin at raw offset 0x00009af0 len 0x7b40 (end 0x11630)
adding cd_12905.bin at raw offset 0x00011630 len 0x5400 (end 0x16a30)
adding ce_1888.bin at raw offset 0x00016a30 len 0x56070 (end 0x6caa0)
adding xell-gggggg.bin at raw offset 0x00070000 len 0x40000 (end 0xb0000)
adding cf_17489.bin at raw offset 0x000b0000 len 0x4560 (end 0xb4560)
adding cg_17489.bin at raw offset 0x000b4560 len 0x788a0 (end 0xc0000, rest in fs)
adding patches_g2corona.bin at raw offset 0x000c0010 len 0x550 (end 0xc0560)
Fixing up FS table...done!
Writing zeropair CG patch slot overflow data to sysupdate.xexp1
at raw offset 0xd0000 len 0x0006ce00 (end: 0x0013ce00)...done!

------ adding 31 firmware files ------
extracted SUPD\aac.xexp (0x14000 bytes) (crc32: 0x40d5adce ini: 0x40d5adce)
adding as aac.xexp1 at raw offset 0x13ce00 len 0x00014000 (end 0x00150e00)
extracted SUPD\bootanim.xex (0x61000 bytes) (crc32: 0x85238a78 ini: 0x85238a78)
adding as bootanim.xex at raw offset 0x154000 len 0x00061000 (end 0x001b5000)
extracted SUPD\createprofile.xex (0xc000 bytes) (crc32: 0x034acd79 ini: 0x034acd79)
adding as createprofile.xex at raw offset 0x1b5000 len 0x0000c000 (end 0x001c1000)
extracted SUPD\dash.xex (0x5b0000 bytes) (crc32: 0xdb4717cf ini: 0xdb4717cf)
adding as dash.xex at raw offset 0x1c4000 len 0x005b0000 (end 0x00774000)
extracted SUPD\deviceselector.xex (0xa000 bytes) (crc32: 0x1eb402b9 ini: 0x1eb402b9)
adding as deviceselector.xex at raw offset 0x774000 len 0x0000a000 (end 0x0077e000)
extracted SUPD\gamerprofile.xex (0x1b000 bytes) (crc32: 0xf4e4902e ini: 0xf4e4902e)
adding as gamerprofile.xex at raw offset 0x77e000 len 0x0001b000 (end 0x00799000)
extracted SUPD\hud.xex (0x1d000 bytes) (crc32: 0xb1485b31 ini: 0xb1485b31)
adding as hud.xex at raw offset 0x79b000 len 0x0001d000 (end 0x007b8000)
extracted SUPD\huduiskin.xex (0x14000 bytes) (crc32: 0x5fb2d289 ini: 0x5fb2d289)
adding as huduiskin.xex at raw offset 0x7b9000 len 0x00014000 (end 0x007cd000)
extracted SUPD\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0xe9d4483a ini: 0xe9d4483a)
adding as mfgbootlauncher.xex at raw offset 0x7d0000 len 0x00008000 (end 0x007d8000)
extracted SUPD\minimediaplayer.xex (0xc000 bytes) (crc32: 0x61f6c912 ini: 0x61f6c912)
adding as minimediaplayer.xex at raw offset 0x7d8000 len 0x0000c000 (end 0x007e4000)
extracted SUPD\nomni.xexp (0xf000 bytes) (crc32: 0x3ec9f846 ini: 0x3ec9f846)
adding as nomni.xexp1 at raw offset 0x7e4000 len 0x0000f000 (end 0x007f3000)
extracted SUPD\nomnifwk.xexp (0x2000 bytes) (crc32: 0x96bf4907 ini: 0x96bf4907)
adding as nomnifwk.xexp1 at raw offset 0x7f3000 len 0x00002000 (end 0x007f5000)
extracted SUPD\nomnifwm.xexp (0x5000 bytes) (crc32: 0x772eb1df ini: 0x772eb1df)
adding as nomnifwm.xexp1 at raw offset 0x7f6000 len 0x00005000 (end 0x007fb000)
extracted SUPD\SegoeXbox-Light.xtt (0x6000 bytes) (crc32: 0xe0ee6049 ini: 0xe0ee6049)
adding as SegoeXbox-Light.xtt at raw offset 0x7fd000 len 0x00006000 (end 0x00803000)
extracted SUPD\signin.xex (0x1a000 bytes) (crc32: 0x68541d87 ini: 0x68541d87)
adding as signin.xex at raw offset 0x806000 len 0x0001a000 (end 0x00820000)
extracted SUPD\updater.xex (0x7000 bytes) (crc32: 0xd63a84d9 ini: 0xd63a84d9)
adding as updater.xex at raw offset 0x822000 len 0x00007000 (end 0x00829000)
extracted SUPD\vk.xex (0xb000 bytes) (crc32: 0x81700712 ini: 0x81700712)
adding as vk.xex at raw offset 0x82b000 len 0x0000b000 (end 0x00836000)
extracted SUPD\xam.xex (0x251000 bytes) (crc32: 0xa5741001 ini: 0xa5741001)
adding as xam.xex at raw offset 0x837000 len 0x00251000 (end 0x00a88000)
extracted nanddump\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
adding as xenonclatin.xtt at raw offset 0xa89000 len 0x0011b000 (end 0x00ba4000)
extracted SUPD\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
adding as xenonclatin.xttp1 at raw offset 0xba7000 len 0x00018000 (end 0x00bbf000)
extracted nanddump\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
adding as xenonjklatin.xtt at raw offset 0xbc0000 len 0x001a8000 (end 0x00d68000)
extracted SUPD\xenonjklatin.xttp (0x7000 bytes) (crc32: 0xe2adddfb ini: 0xe2adddfb)
adding as xenonjklatin.xttp1 at raw offset 0xd68000 len 0x00007000 (end 0x00d6f000)
extracted SUPD\ximecore.xex (0x17000 bytes) (crc32: 0x86cbabf6 ini: 0x86cbabf6)
adding as ximecore.xex at raw offset 0xd6f000 len 0x00017000 (end 0x00d86000)
extracted nanddump\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
adding as ximedic.xex at raw offset 0xd87000 len 0x00090000 (end 0x00e17000)
extracted SUPD\ximedic.xexp (0x2800 bytes) (crc32: 0xbee64013 ini: 0xbee64013)
adding as ximedic.xexp1 at raw offset 0xe18000 len 0x00002800 (end 0x00e1a800)
reading 17489\..\launch.xex (0xb800 bytes)
adding as launch.xex at raw offset 0xe1a800 len 0x0000b800 (end 0x00e26000)
reading 17489\..\lhelper.xex (0x4800 bytes)
adding as lhelper.xex at raw offset 0xe27800 len 0x00004800 (end 0x00e2c000)
***** could not read file '..\launch.ini', skipping *****
reading 17489\..\launch.xex (0xb800 bytes)
adding as launch.xex at raw offset 0xe2c800 len 0x0000b800 (end 0x00e38000)
reading 17489\..\lhelper.xex (0x4800 bytes)
adding as lhelper.xex at raw offset 0xe3b800 len 0x00004800 (end 0x00e40000)
***** could not read file '..\launch.ini', skipping *****

------ adding 5 security files ------
<- Processing crl.bin ->
reading data\crl.bin (0xa00 bytes)
crl appears crypted, attempting to decrypt with CPU key...failed! Trying alternate key...success!
adding as crl.bin at raw offset 0xe44000 len 0x00000a00 (end 0x00e44a00)

<- Processing dae.bin ->
reading data\dae.bin (0xad30 bytes)
dae appears encrypted, attempting to decrypt with CPU key...failed! Attempting to decrypt with alternate key...
adding as dae.bin at raw offset 0xe48000 len 0x0000ad30 (end 0x00e52d30)

<- Processing extended.bin ->
reading data\extended.bin (0x4000 bytes)
adding as extended.bin at raw offset 0xe54000 len 0x00004000 (end 0x00e58000)

<- Processing fcrt.bin ->
could not read fcrt.bin, using data from previous parse...
adding as fcrt.bin at raw offset 0xe58000 len 0x00004000 (end 0x00e5c000)

<- Processing secdata.bin ->
reading data\secdata.bin (0x400 bytes)
adding as secdata.bin at raw offset 0xe5c000 len 0x00000400 (end 0x00e5c400)

------ checking for Mobile*.dat ------
Statistics.settings found, adding from previous parse
adding Statistics.settings at raw offset 0x2ff8000 len 0x1000 (end 0x2ff9000) found, adding from previous parse
adding at raw offset 0x2ff4000 len 0x1000 (end 0x2ff5000)

------ adding smc_config.bin ------
adding smc config to offset 0x02ffc000, len 0x400

------ cleaning up image ------
Fixing up empty FS block entries...done!
Writing FS table to image offset 0xe60000 len 0x4000 (end 0xe64000)...done!
copying anchor block 1 to offset 0x2fe8000
copying anchor block 2 to offset 0x2fec000

------ finalizing image ------

------ writing image to disk ------
writing file 'C:\Users\webby\Desktop\J-Runner v3 (5) Core Pack\166342623743\updflash.bin' to disk...done!
C:\Users\webby\Desktop\J-Runner v3 (5) Core Pack\166342623743\updflash.bin image built, info:
Kernel : 2.0.17489.0
Console : Corona
NAND size : 48MiB MMC (system only)
Build : Glitch (v2)
Xell : power on console with console eject button
Serial : 166342623743
ConsoleId : 669603429892
MoboSerial: 7500948231812375
Mfg Date : 09/12/2012
CPU Key :
1BL Key :
DVD Key :
CF LDV : 3
KV type : type2 (hashed - unchecked, master key not available)
xeBuild Finished. Have a nice day.

I have tried all I can think of I am thinking I need my nand rebuilt if its possible with this corrupt 48mb dump


Share this post

Link to post
Share on other sites

Does xell give you the DVD Key? If so, all is not lost, as you have the KV, and probably the FCRT, which are the only files needed to create a good nand image. If the FCRT is missing, you will need to build the image with the nofcrt patch, and it wont work as a retail image. Any way, if you get the DVD key from xell, load up the ECC image in J-Runner, and extract the files, then build an image based upon the guide for when you lost everything. Should get you up and running. Also, dont use the SDcard Reader built in to laptops, as some of them will corrupt the image. From what I can tell from the log the required files are there, so you should be good.

1 person likes this

Share this post

Link to post
Share on other sites

Probably what you need to do is install that R/W kit properly then write a clean image properly...

You can send me your Dump + CPUKey and i can tell you what's OK and not within it and/or make a image for you that'll work for your console...

Share this post

Link to post
Share on other sites

cpu and nand send thanks Swizzy,

Got the new reader and tried new chips, nand is rubbish I could only be so lucky to get a rrod on a slim  new built nand following tuts give 1033 error orig nand the corrupt one gives 0022 these are both after disconnecting all wires and trying to boot normal dash.


Thanks again Swizzy hope new image does the trick

Share this post

Link to post
Share on other sites

Thanks again Swizzy direct qsb to board did the trick weird since it read/write fine at the end of the day there was a bridge somewhere oh well all sorted


1 person likes this

Share this post

Link to post
Share on other sites

Np, glad you got it sorted :)

It was probably the writing that failed, just, windows didn't know it as there is no verification done beyond what the MMC controller responds with, which was probably that it was a success despite the data being partially mangled somewhere (most likely the write address) which would explain it all...

When i checked your dumps you sent me, i only really checked the per-console data, the really important one (fully that is) the other checks i did was to check that the filesystem looked to be OK and that stuff looked to be where they're supposed to be, but i didn't go into nitty gritty detail to check the hashes of the files within the nand etc.

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now