Hola a todos.
Tengo aquí una falcon v3 que saqué solo los 2 primeros megas de la nand para hacer RGH y lo queria hacer tan rapido que se me olvidó sacar 2 o 3 respaldos de esos 2 megas y solo saqué 1 (y este supuestamente corrupto con varios badblocks). total, que seguí todos los pasos y ahora la situacion es esta: boton encendido: error e74 con luz de abajo de la derecha en rojo parpadeando. Boton eject: xell gris.
Al final pude reconstruir la nand (con sus badblocks) y pude recuperar el kv.bin. Teniendo esto, me dispuse a hacer lo de donar las nands y he probado con muuuuchas ya. Creo que voy a cargarme la memoria de la xbox de tanto borrar y sobreescribir la nand... estoy harto de tanto probar...
Bueno, pues os voy a describir los pasos que he hecho para realizar el RGH a ver si he hecho algo mal...
Tengo todo: el kv.bin, la dvd key y la cpu key.
Empiezo: Cojo la nand reconstruida y la abro con autogg 0.3 RC9. Como ya tengo la cpukey, se la pongo y me salen todos los datos (kv, temperaturas...etc). Le doy a generar imagen y me sale esto en el log:
xeBuild v1.02.477
---------------------------------------------------------------
building glitch image
verbose set to level 1
------ parsing user ini at '.\..\nand\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x13c bytes in memory
setting 1blkey from ini: 0xDD88AD0C9ED669E7B56794FB68563EFA
1BL Key set to: 0xDD88AD0C9ED669E7B56794FB68563EFA sum: 0x983 (expects: 0x983)
xex Key set to: 0x20B185A59D28FDC340583FBB0896BF91 sum: 0x800 (expects: 0x800)
------ parsing ini at '.\14699\_glitch.ini' ------
ini version 14699
ini: label [falconbl] found
found (1) 'cb_5771.bin' crc: 0x859140f0
found (2) 'none' crc: 0x00000000
found (3) 'cd_8453.bin' crc: 0x25e0acd0
found (4) 'ce_1888.bin' crc: 0xff9b60df
found (5) 'cf_14699.bin' crc: 0x6fb4d90e
found (6) 'cg_14699.bin' crc: 0xbccc9fe1
ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x36790e61
found (2) 'bootanim.xex' crc: 0x187ede71
found (3) 'createprofile.xex' crc: 0x81d7a946
found (4) 'dash.xex' crc: 0x3957764c
found (5) 'deviceselector.xex' crc: 0x6246b4c0
found (6) 'gamerprofile.xex' crc: 0xb7add96a
found (7) 'hud.xex' crc: 0x202eb5c8
found (8) 'huduiskin.xex' crc: 0x4c80fbe9
found (9) 'mfgbootlauncher.xex' crc: 0x254ad664
found (10) 'minimediaplayer.xex' crc: 0xd8d21cfc
found (11) 'nomni.xexp' crc: 0xbf36fdf7
found (12) 'nomnifwk.xexp' crc: 0xa837ae53
found (13) 'nomnifwm.xexp' crc: 0x93246a8a
found (14) 'SegoeXbox-Light.xtt' crc: 0x086eb344
found (15) 'signin.xex' crc: 0xecd9cab1
found (16) 'updater.xex' crc: 0x125cdb94
found (17) 'vk.xex' crc: 0x9c744d4c
found (18) 'xam.xex' crc: 0x0b764b88
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0x945b7092
found (23) 'ximecore.xex' crc: 0x8d45ea14
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0xc90a651a
ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------
output name overridden to: ..\salida\nandflash.bin
------ Checking .\..\nand\nanddump.bin ------
Loading NAND dump (0x22eea0 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a small block machine
NAND dump uses small block controller
parsing dump into user and spare...
ECD error at block 0x0 (raw offset 0x0), block will be remapped
ECD error at block 0x1 (raw offset 0x4200), block will be remapped
ECD error at block 0x2 (raw offset 0x8400), block will be remapped
ECD error at block 0x5 (raw offset 0x14a00), block will be remapped
ECD error at block 0x7 (raw offset 0x1ce00), block will be remapped
ECD error at block 0xa (raw offset 0x29400), block will be remapped
ECD error at block 0xc (raw offset 0x31800), block will be remapped
ECD error at block 0xf (raw offset 0x3de00), block will be remapped
ECD error at block 0x13 (raw offset 0x4e600), block will be remapped
ECD error at block 0x18 (raw offset 0x63000), block will be remapped
done!
cleaning up stray remaps
block 0x0 had no remap, assigning remap block 0x3ff
block 0x1 had no remap, assigning remap block 0x3fe
block 0x2 had no remap, assigning remap block 0x3fd
block 0x5 had no remap, assigning remap block 0x3fc
block 0x7 had no remap, assigning remap block 0x3fb
block 0xa had no remap, assigning remap block 0x3fa
block 0xc had no remap, assigning remap block 0x3f9
block 0xf had no remap, assigning remap block 0x3f8
block 0x13 had no remap, assigning remap block 0x3f7
block 0x18 had no remap, assigning remap block 0x3f6
done!
--remap summary--
0: source: 0x0000 dest: 0x03ff
1: source: 0x0001 dest: 0x03fe
2: source: 0x0002 dest: 0x03fd
3: source: 0x0005 dest: 0x03fc
4: source: 0x0007 dest: 0x03fb
5: source: 0x000a dest: 0x03fa
6: source: 0x000c dest: 0x03f9
7: source: 0x000f dest: 0x03f8
8: source: 0x0013 dest: 0x03f7
9: source: 0x0018 dest: 0x03f6
-----------------
[b]decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypt failed, discarding[/b]
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xf7c000! Using if no smc config is provided.
CF slot 0 decrypted ok LDV 0x05 Pairing: 0x02cead
CF slot 1 decrypted ok LDV 0x04 Pairing: 0x02cead
setting LDV from image to 5
setting pairing data from image to 0x02cead
MobileB.dat found at page 0x2060, size 2048 (0x800) bytes
MobileC.dat found at page 0x38a0, size 512 (0x200) bytes
MobileD.dat found at page 0x1ee0, size 2048 (0x800) bytes
MobileE.dat found at page 0x35a0, size 1536 (0x600) bytes
Statistics.settings found at page 0x22ee20, size 31680 (0x1000) bytes
seeking FSRoot...fsroot found at page 0x3da0 raw offset 0x7f1a00
seeking security files...
crl.bin found in sector 0x3d8 size 0xa00...verified! Will use if external file not found.
dae.bin found in sector 0x214 size 0x7090...verified! Will use if external file not found.
extended.bin found in sector 0x34c size 0x4000...verified! Will use if external file not found.
secdata.bin found in sector 0x1bc size 0x400...verified! Will use if external file not found.
done!
Writing initial header to flash image
------ Loading bootloaders and required security files ------
reading .\..\nand\smc.bin failed, using smc.bin from nand dump
reset smc load address to 0x1000 size 0x3000
**** could not read kv.bin (-1) ****
******* ERROR: critical bootloader files are missing, cannot proceed!
***** FATAL BUILD ERROR: -1 unable to complete NAND image
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
-------------------------------------------------------------------------------------------------------------
Ha ocurrido un error en el proceso.
Según el log no puede seguir el proceso porque no puede leer el kv.bin aunque el autogg a la hora de cargar la nand reconoce el kv (opción de spoof, dvd key, tª...).
En el log tambien pone que encuentra badblocks en:
0: 0x0000
1: 0x0001
2: 0x0002
3: 0x0005
4: 0x0007
5: 0x000a
6: 0x000c
7: 0x000f
8: 0x0013
9: 0x0018
Pero la abro en el apartado de bad blocks y me pone en el log esto:
Reiniciando Ficheros y Variables...
Small Block detectado
Cargando Nand ...OK
Analizando Bad Blocks ...
No parece haber blocks remapeados
La abro con 360flashtool 0.97 y me coge estos badblocks:
-0x0000 (offset: 0x00000000)
-0x0001 (offset: 0x00004200) (como el kv está aquí (offset: 0x00004000) pues el 360flashtool me dice bad key/kv)
-0x0005 (offset: 0x00014A00)
-0x000C (offset: 0x00031800)
-0x000F (offset: 0x0003DE00)
-0x0013 (offset: 0x0004E600)
Vale, eso es lo primero raro con bad blocks. ahora para extraer el kv sólo el autogg lo reconoce, ya que no ha reconocido el bad block 0x0001 que es donde se situa el kv.bin (si estoy equivocado decidmelo), mientras que el 360flashtool me dice bad key/kv, que será el kv porque la cpu key está bien copiada.
Bueno, hasta ahí bien. ahora saco el kv con autogg y me lo extrae correctamente con todos los datos bien (he comprobado la dvd key que la tenia de cuando flashee el lector y es correcta). Y ahora lo que hice fue borrar el bloque 0x0001 en la nand con el nandpro v3 con el comando:
nandpro nand.bin: -e16 0x0001
Ahora abro la nand sin kv con el autogg y le inyecto el kv. Abro la nand resultante y el autogg me dice "error size" y el 360flashtool "couldn't read file or this image is unsupported".
Después la volví a abrir (sin el bloque 0x0001) con el 360flashtool y le inyecté el kv.bin. La nand resultante la puedo abrir con cualquiera de los dos programas, y el 360flashtool me reconoce el kv. Ya esta nand me deja crear la imagen glitch con el autogg que me pone esto en el log:
---------------------------------------------------------------
xeBuild v1.02.477
---------------------------------------------------------------
building glitch image
verbose set to level 1
------ parsing user ini at '.\..\nand\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x13c bytes in memory
setting 1blkey from ini: 0xDD88AD0C9ED669E7B56794FB68563EFA
1BL Key set to: 0xDD88AD0C9ED669E7B56794FB68563EFA sum: 0x983 (expects: 0x983)
xex Key set to: 0x20B185A59D28FDC340583FBB0896BF91 sum: 0x800 (expects: 0x800)
------ parsing ini at '.\14699\_glitch.ini' ------
ini version 14699
ini: label [falconbl] found
found (1) 'cb_5771.bin' crc: 0x859140f0
found (2) 'none' crc: 0x00000000
found (3) 'cd_8453.bin' crc: 0x25e0acd0
found (4) 'ce_1888.bin' crc: 0xff9b60df
found (5) 'cf_14699.bin' crc: 0x6fb4d90e
found (6) 'cg_14699.bin' crc: 0xbccc9fe1
ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x36790e61
found (2) 'bootanim.xex' crc: 0x187ede71
found (3) 'createprofile.xex' crc: 0x81d7a946
found (4) 'dash.xex' crc: 0x3957764c
found (5) 'deviceselector.xex' crc: 0x6246b4c0
found (6) 'gamerprofile.xex' crc: 0xb7add96a
found (7) 'hud.xex' crc: 0x202eb5c8
found (8) 'huduiskin.xex' crc: 0x4c80fbe9
found (9) 'mfgbootlauncher.xex' crc: 0x254ad664
found (10) 'minimediaplayer.xex' crc: 0xd8d21cfc
found (11) 'nomni.xexp' crc: 0xbf36fdf7
found (12) 'nomnifwk.xexp' crc: 0xa837ae53
found (13) 'nomnifwm.xexp' crc: 0x93246a8a
found (14) 'SegoeXbox-Light.xtt' crc: 0x086eb344
found (15) 'signin.xex' crc: 0xecd9cab1
found (16) 'updater.xex' crc: 0x125cdb94
found (17) 'vk.xex' crc: 0x9c744d4c
found (18) 'xam.xex' crc: 0x0b764b88
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0x945b7092
found (23) 'ximecore.xex' crc: 0x8d45ea14
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0xc90a651a
ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------
output name overridden to: ..\salida\nandflash.bin
------ Checking .\..\nand\nanddump.bin ------
Loading NAND dump (0x22eea0 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a small block machine
NAND dump uses small block controller
parsing dump into user and spare...
ECD error at block 0x0 (raw offset 0x0), block will be remapped
ECD error at block 0x1 (raw offset 0x4200), block will be remapped
ECD error at block 0x5 (raw offset 0x14a00), block will be remapped
ECD error at block 0xc (raw offset 0x31800), block will be remapped
ECD error at block 0xf (raw offset 0x3de00), block will be remapped
ECD error at block 0x13 (raw offset 0x4e600), block will be remapped
done!
cleaning up stray remaps
block 0x0 had no remap, assigning remap block 0x3ff
block 0x1 had no remap, assigning remap block 0x3fe
block 0x5 had no remap, assigning remap block 0x3fd
block 0xc had no remap, assigning remap block 0x3fc
block 0xf had no remap, assigning remap block 0x3fb
block 0x13 had no remap, assigning remap block 0x3fa
done!
--remap summary--
0: source: 0x0000 dest: 0x03ff
1: source: 0x0001 dest: 0x03fe
2: source: 0x0005 dest: 0x03fd
3: source: 0x000c dest: 0x03fc
4: source: 0x000f dest: 0x03fb
5: source: 0x0013 dest: 0x03fa
-----------------
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xf7c000! Using if no smc config is provided.
CF slot 0 decrypted ok LDV 0x05 Pairing: 0x02cead
CF slot 1 decrypted ok LDV 0x04 Pairing: 0x02cead
setting LDV from image to 5
setting pairing data from image to 0x02cead
MobileB.dat found at page 0x2060, size 2048 (0x800) bytes
MobileC.dat found at page 0x38a0, size 512 (0x200) bytes
MobileD.dat found at page 0x1ee0, size 2048 (0x800) bytes
MobileE.dat found at page 0x35a0, size 1536 (0x600) bytes
Statistics.settings found at page 0x22ee20, size 31680 (0x1000) bytes
seeking FSRoot...fsroot found at page 0x3da0 raw offset 0x7f1a00
seeking security files...
crl.bin found in sector 0x3d8 size 0xa00...verified! Will use if external file not found.
dae.bin found in sector 0x214 size 0x7090...verified! Will use if external file not found.
extended.bin found in sector 0x34c size 0x4000...verified! Will use if external file not found.
secdata.bin found in sector 0x1bc size 0x400...verified! Will use if external file not found.
done!
Writing initial header to flash image
------ Loading bootloaders and required security files ------
reading .\..\nand\smc.bin failed, using smc.bin from nand dump
reset smc load address to 0x1000 size 0x3000
reading .\..\nand\kv.bin failed, using kv.bin from nand dump
reading .\14699\cb_5771.bin (0x9340 bytes)
reading .\14699\cd_8453.bin (0x5780 bytes)
reading .\14699\ce_1888.bin (0x5606a b pad 0x56070 b)
reading .\..\nand\xell-gggggg.bin (0x40000 bytes)
reading .\14699\cf_14699.bin (0x4450 bytes)
reading .\14699\cg_14699.bin (0x67168 b pad 0x67170 b)
reading .\14699\bin\patches_fat.bin (0x6f0 bytes)
[b]reading .\..\nand\smc_config.bin failed, using smc_config.bin from nand dump[/b]
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 75øC Edram: 78øC
Max temps : Cpu: 100øC Gpu: 100øC Edram: 102øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:1d:d8:1b:3d:b8
AVRegion : 0x00000300 (PAL50)
GameRegion : 0x02fe (PAL/EU)
DVDRegion : 2
resetKey : YYDL
---------------------
Checking for smc config data patches
smc config was not patched
---------------------
done!
patch slot offset reset to: 0xb0000
------ Patching BLs and modifying patches ------
Patching patches...
Default patch offset 0x000c0010 not changed
Patching patches for alt power reason
Patches patched!
Patching BLs...Done!
------ Encrypting and finalizing bootloaders ------
encoding smc.bin size 0x3000
SMC checksum: 1d0c613e
known clean SMC found, type: Falcon v3.1(1.06)
patching smc at offset: 0x12a3
SMC hacked successfully
[b]encoding kv.bin size 0x4000
decrypted keyvault has been set for reference[/b]
encoding cb_5771.bin size 0x9340
CB 5771 seq 0x01070058 type: 0x01 cseq: 0x07 allow: 0x0058
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0
fuseset 02: 000000F000000000 (sequence)
fuseset 02: 000F000000000000 (allow cseq 4)
fuseset 02: 0000F00000000000 (allow cseq 5)
fuseset 02: 000000F000000000 (allow cseq 7)
encoding cd_8453.bin size 0x5a60
encoding ce_1888.bin size 0x56070
encoding xell-gggggg.bin size 0x40000
encoding cf_14699.bin size 0x4450
encoding cg_14699.bin size 0x67170
encoding patches_fat.bin size 0x3e0
done!
------ Adding bootloaders to flash image ------
adding smc.bin at raw offset 0x00001000 len 0x3000 (end 0x4000)
adding kv.bin at raw offset 0x00004000 len 0x4000 (end 0x8000)
adding cb_5771.bin at raw offset 0x00008000 len 0x9340 (end 0x11340)
adding cd_8453.bin at raw offset 0x00011340 len 0x5a60 (end 0x16da0)
adding ce_1888.bin at raw offset 0x00016da0 len 0x56070 (end 0x6ce10)
adding xell-gggggg.bin at raw offset 0x00070000 len 0x40000 (end 0xb0000)
adding cf_14699.bin at raw offset 0x000b0000 len 0x4450 (end 0xb4450)
adding cg_14699.bin at raw offset 0x000b4450 len 0x67170 (end 0xc0000, rest in fs)
adding patches_fat.bin at raw offset 0x000c0010 len 0x3e0 (end 0xc03f0)
Fixing up FS table...done!
Writing zeropair CG patch slot overflow data to sysupdate.xexp1
at raw offset 0xd0000 len 0x0005b5c0 (end: 0x0012b5c0)...done!
------ adding 25 firmware files ------
reading .\14699\aac.xexp (0x14000 bytes) (crc32: 0x36790e61 ini: 0x36790e61)
adding as aac.xexp1 at raw offset 0x12b5c0 len 0x00014000 (end 0x0013f5c0)
reading .\14699\bootanim.xex (0x61000 bytes) (crc32: 0x187ede71 ini: 0x187ede71)
adding as bootanim.xex at raw offset 0x140000 len 0x00061000 (end 0x001a1000)
reading .\14699\createprofile.xex (0xc000 bytes) (crc32: 0x81d7a946 ini: 0x81d7a946)
adding as createprofile.xex at raw offset 0x1a1000 len 0x0000c000 (end 0x001ad000)
reading .\14699\dash.xex (0x63a000 bytes) (crc32: 0x3957764c ini: 0x3957764c)
adding as dash.xex at raw offset 0x1b0000 len 0x0063a000 (end 0x007ea000)
reading .\14699\deviceselector.xex (0x9000 bytes) (crc32: 0x6246b4c0 ini: 0x6246b4c0)
adding as deviceselector.xex at raw offset 0x7ea000 len 0x00009000 (end 0x007f3000)
reading .\14699\gamerprofile.xex (0x1b000 bytes) (crc32: 0xb7add96a ini: 0xb7add96a)
adding as gamerprofile.xex at raw offset 0x7f5000 len 0x0001b000 (end 0x00810000)
reading .\14699\hud.xex (0x1e000 bytes) (crc32: 0x202eb5c8 ini: 0x202eb5c8)
adding as hud.xex at raw offset 0x813000 len 0x0001e000 (end 0x00831000)
reading .\14699\huduiskin.xex (0x13000 bytes) (crc32: 0x4c80fbe9 ini: 0x4c80fbe9)
adding as huduiskin.xex at raw offset 0x832000 len 0x00013000 (end 0x00845000)
reading .\14699\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0x254ad664 ini: 0x254ad664)
adding as mfgbootlauncher.xex at raw offset 0x847000 len 0x00008000 (end 0x0084f000)
reading .\14699\minimediaplayer.xex (0xc000 bytes) (crc32: 0xd8d21cfc ini: 0xd8d21cfc)
adding as minimediaplayer.xex at raw offset 0x850000 len 0x0000c000 (end 0x0085c000)
reading .\14699\nomni.xexp (0xe000 bytes) (crc32: 0xbf36fdf7 ini: 0xbf36fdf7)
adding as nomni.xexp1 at raw offset 0x85c000 len 0x0000e000 (end 0x0086a000)
reading .\14699\nomnifwk.xexp (0x2000 bytes) (crc32: 0xa837ae53 ini: 0xa837ae53)
adding as nomnifwk.xexp1 at raw offset 0x86a000 len 0x00002000 (end 0x0086c000)
reading .\14699\nomnifwm.xexp (0x5000 bytes) (crc32: 0x93246a8a ini: 0x93246a8a)
adding as nomnifwm.xexp1 at raw offset 0x86e000 len 0x00005000 (end 0x00873000)
reading .\14699\SegoeXbox-Light.xtt (0x6000 bytes) (crc32: 0x086eb344 ini: 0x086eb344)
adding as SegoeXbox-Light.xtt at raw offset 0x875000 len 0x00006000 (end 0x0087b000)
reading .\14699\signin.xex (0x16000 bytes) (crc32: 0xecd9cab1 ini: 0xecd9cab1)
adding as signin.xex at raw offset 0x87e000 len 0x00016000 (end 0x00894000)
reading .\14699\updater.xex (0x7000 bytes) (crc32: 0x125cdb94 ini: 0x125cdb94)
adding as updater.xex at raw offset 0x896000 len 0x00007000 (end 0x0089d000)
reading .\14699\vk.xex (0x9000 bytes) (crc32: 0x9c744d4c ini: 0x9c744d4c)
adding as vk.xex at raw offset 0x89f000 len 0x00009000 (end 0x008a8000)
reading .\14699\xam.xex (0x236000 bytes) (crc32: 0x0b764b88 ini: 0x0b764b88)
adding as xam.xex at raw offset 0x8a9000 len 0x00236000 (end 0x00adf000)
reading .\14699\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
adding as xenonclatin.xtt at raw offset 0xae2000 len 0x0011b000 (end 0x00bfd000)
reading .\14699\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
adding as xenonclatin.xttp1 at raw offset 0xbff000 len 0x00018000 (end 0x00c17000)
reading .\14699\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
adding as xenonjklatin.xtt at raw offset 0xc18000 len 0x001a8000 (end 0x00dc0000)
reading .\14699\xenonjklatin.xttp (0x7000 bytes) (crc32: 0x945b7092 ini: 0x945b7092)
adding as xenonjklatin.xttp1 at raw offset 0xdc0000 len 0x00007000 (end 0x00dc7000)
reading .\14699\ximecore.xex (0x15000 bytes) (crc32: 0x8d45ea14 ini: 0x8d45ea14)
adding as ximecore.xex at raw offset 0xdc7000 len 0x00015000 (end 0x00ddc000)
reading .\14699\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
adding as ximedic.xex at raw offset 0xddd000 len 0x00090000 (end 0x00e6d000)
reading .\14699\ximedic.xexp (0x2800 bytes) (crc32: 0xc90a651a ini: 0xc90a651a)
adding as ximedic.xexp1 at raw offset 0xe70000 len 0x00002800 (end 0x00e72800)
------ adding 4 security files ------
<- Processing crl.bin ->
reading .\..\nand\crl.bin (0xa00 bytes)
crl appears crypted, attempting to decrypt with CPU key...failed! Trying alternate key...success!
adding as crl.bin at raw offset 0xe74000 len 0x00000a00 (end 0x00e74a00)
<- Processing dae.bin ->
reading .\..\nand\dae.bin (0xad30 bytes)
dae appears encrypted, attempting to decrypt with CPU key...failed! Attempting to decrypt with alternate key...
success!
adding as dae.bin at raw offset 0xe78000 len 0x0000ad30 (end 0x00e82d30)
<- Processing extended.bin ->
reading .\..\nand\extended.bin (0x4000 bytes)
adding as extended.bin at raw offset 0xe84000 len 0x00004000 (end 0x00e88000)
<- Processing secdata.bin ->
reading .\..\nand\secdata.bin (0x400 bytes)
adding as secdata.bin at raw offset 0xe88000 len 0x00000400 (end 0x00e88400)
------ checking for Mobile*.dat ------
MobileB.dat found, adding from nanddump.bin
adding MobileB.dat as type 0x31 at raw offset 0xe8c000 len 0x800 (end 0xe8c800)
MobileC.dat found, adding from nanddump.bin
adding MobileC.dat as type 0x32 at raw offset 0xe90000 len 0x200 (end 0xe90200)
MobileD.dat found, adding from nanddump.bin
adding MobileD.dat as type 0x33 at raw offset 0xe94000 len 0x800 (end 0xe94800)
MobileE.dat found, adding from nanddump.bin
adding MobileE.dat as type 0x34 at raw offset 0xe98000 len 0x600 (end 0xe98600)
Statistics.settings found, adding from nanddump.bin
adding Statistics.settings at raw offset 0xf78000 len 0x1000 (end 0xf79000)
------ adding smc_config.bin ------
adding smc config to offset 0x00f7c000, len 0x400
------ finalizing image ------
Fixing up empty FS block entries...done!
Writing FS table to image...done!
calculating ECD bytes and assembling raw image...done!
remapping 6 blocks
copying 0x4200 bytes of LBA 0x0 to block 0x3ff...zero fill origin...done!
copying 0x4200 bytes of LBA 0x1 to block 0x3fe...zero fill origin...done!
copying 0x4200 bytes of LBA 0x5 to block 0x3fd...zero fill origin...done!
copying 0x4200 bytes of LBA 0xc to block 0x3fc...zero fill origin...done!
copying 0x4200 bytes of LBA 0xf to block 0x3fb...zero fill origin...done!
copying 0x4200 bytes of LBA 0x13 to block 0x3fa...zero fill origin...done!
done!
writing file '..\salida\nandflash.bin' to disk...done!
..\salida\nandflash.bin written OK
---------------------------------------------------------------
..\salida\nandflash.bin image built, info:
---------------------------------------------------------------
Console : Falcon
NAND size: 16MiB
Build : Glitch
Xell : power on console with console eject button
CPU Key : 03F3C711F28DE69D1392ED9287587884
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 5CBE5740EC712BD3C94AC6F91E2FF5B3
CF LDV : 5
KV type : type2 (hashed)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
-------------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------------
- Ahora solo queda flashear nuestra nand . Tenemos 2 opciones:
1.- Damos a Flashear Imagen y LISTO.
2.- Preparamos un dispositivo USB Fat32 y Pulsamos Raw y le indicamos nuestra unidad USB y una vez terminado el proceso arrancamos la consola con el USB puesto y esperamos a que termine y LISTO.
Bueno, pues como veis, el resultado parece ser una nand buena. Me da por abrirla con el autogg me dice "error size" y el 360flashtool "couldn't read file or this image is unsupported".
Pues meto esta nand por xell através de rawflash v4 y xell en gris perfecto con el boton eject y cuando la enciendo con el mando o boton de encendido me da Error E74Vale. ahora me dispuse a hacer lo de las nand donadas, que como no es mi primer rgh tengo 2 nands originales de 2 falcon v3 con mismo cb a las que se le ha hecho ya rgh.
Estos son los valores de ldv de la original y versiones de kernel:
Como veis, en el valor de CE pone 0... eso seguramente será de los badblocks...
Esta la configuracion de la original tambien.
Y esto los valores de ldv de la donada y versiones de kernel y la configuración.
Lo que he hecho es copiar todos los datos de la original (LDV, kv..etc y toda esa parte del config de la foto) a la donada. Después he abierto la nand resultante con el autogg 0.3 rc9, pongo el tipo glitch, el kernel 14699 y le doy a crear imagen y me genera la nandflash.bin.
La flasheo por xell (rawflashv4) y cuando termina la apago.
Enciendo con boton eject y arranca el xell en azul.Enciendo con boton power o mando y el coolrunner hace glitch (se enciende 1 vez la luz verde) y no pasa nada. la he dejado durante mas de 3 minutos y nada... no arranca. Pantalla en negro
Me da por probar algo por xell como el emulador de n64 (ultima version) y un par de juegos por usb y un par de veces me lo cargó bien, pero ya no me lo volvió a cargar y se quedaba en la pantalla del xell en el código: Executing...
Bueno.. pues a ver si me pudierais ayudar.
Gracias de antemano.
