Build 4GB nand with only CPU key

[costinradu]

Hi guys,
I just received a corona V4 with 4GB nand corrupted by an "expert".I managed to get the CPU key with DGX and i tried to rebuild a valid nand.I read all about the rebuilding process but no one explain how to deal with 4GB nand.Any help will be apreciated.

 

[oO Elite Oo]

use the nand...dont tell me you wrote the dgx ecc without extract the nand

 

[costinradu]

please read carefully.the nand is corrupted!all i have is the cpu key extracted with DGX.

 

[Antalpromille]

If you could boot xell with DGX, i think your KV is fine. So its probably not totaly corrupted.

 

[costinradu]

Xell:

 

[thehunter398]

Xell:

You know you can get your cpu key from the picture you provided right?

 

[costinradu]

please,READ my first post.i already have the cpu key.i get it with DGX.

 

[hersheys247]

He was talking about the xell pic you provided, you blocked off the cpu key but it's is still there. He's just stating the obvious.

Sent from my Brain Tumor causing device using Tapatalk 2

 

[costinradu]

i see.i change it. i think is ok now.

 

[XDK]

If you could boot xell with DGX, i think your KV is fine. So its probably not totaly corrupted.

The precompiled ecc images for the DGX do not house YOUR kv.. when u flash the precompiled ecc images it overwrites what is on your console , the original poster recieved the console with the nand already corrupted .. (written) his only choice was the dgx to retrieve the key.. this is why when u boot xell with the dgx ecc that it cannot decrypt the kv ^^ refer to image posted above about kv decryption its attempting to decrypt the kv from the precompiled ecc image using the per console cpukey.. no match no decryption..

off topic back on topic..

original poster you can use the function in Jrunner to build a new nand image without a previous nand dump as long as u have the cpu key and can do some basic counting..

all u need is cpukey + ldv you can google how to figure out your ldv value to manually input into the nand dump you create.. need further help feel free to PM.

 

[FlipMode]

Just recently I thought I read that you can increment the LDV manually by 1 each time untill your xbox boots if you don't know the value. Can't seem to find that post.

 

[XDK]

Just recently I thought I read that you can increment the LDV manually by 1 each time untill your xbox boots if you don't know the value. Can't seem to find that post.

u can just gotta reflash the nand each time testing..

 

[costinradu]

i tried to rebuild nand with J-Runner but i cannot decrypt KV.
I know LDV is 2 from DGX extraction log.
This is the full log:

Checking Files
Finished Checking Files
Initializing nanddump.bin..
Wrong CpuKey
Nand Initialization Finished
Extracting..
fcrt.bin extracted successfully
Decrypting fcrt.bin
Checking hash
Failed
Files saved at C:\J-Runner v02 Beta (283) Core Pack\output
Finished
Initializing nanddump1(1)..bin..
Nand Initialization Finished
Initializing nanddump1(1)..bin..
Wrong CpuKey
Nand Initialization Finished
Wrong CpuKey
Load Files Initiliazation Finished
16202
Started Creation of the 16202 xebuild image
Failed
---------------------------------------------------------------
xeBuild v1.06.555
---------------------------------------------------------------
building glitch2 image
******* ERROR: could not decrypt keyvault, please be sure your provided a valid kv.bin!
---------------------------------------------------------------
C:\J-Runner v02 Beta (283) Core Pack\output\updflash.bin image built, info:
---------------------------------------------------------------
Console : Corona
NAND size : 48MiB MMC (system only)
Build : Glitch (v2)
Xell : power on console with console eject button
Serial : +ˆþ» fµí"¯ˆ
ConsoleId : 1xxxxxxxxx
MoboSerial: 4xxxxxxxxxxxxxxx
Mfg Date : °/ä&/20­Æ
CPU Key : 6xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1BL Key : Dxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
DVD Key : 7xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
CF LDV : 2
KV type : type2 (hashed)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
Saved to C:\J-Runner v02 Beta (283) Core Pack\output
Image is Ready

I used this image but no luck.I got red dot and E48

Why J-Runner use only the 48MB file?
I load the full 4 gb donor nand.

 

[madhaxer]

If you really thought that image would work it is time for you to box it up and send it to someone.

 

[costinradu]

If you really thought that image would work it is time for you to box it up and send it to someone.

This help me a lot......I really don't need your irony.i need a litle help.

 

[15432]

I can build the freeboot image but I haven't your key and original nand dump

 

[madhaxer]

I am just saying before it cant be fixed. Did you try and decrypt the donor nand with the Cpu key from the donor? Or was you using the Cpu key from this box? Because it shows you was trying to extract with the wrong key.

---------- Post added at 00:55 ---------- Previous post was at 00:53 ----------

I can build the freeboot image but I haven't your key and original nand dump

He don't have the og dump. Trying to build from a donor. But looks as if was using the wrong key to extract.

 

[15432]

He don't have the og dump. Trying to build from a donor. But looks as if was using the wrong key to extract.

He has the "bad" orig dump and it could be helpful for building correct image

 

[madhaxer]

If the "bad" dump is from a dgx ecc the kv is from the premade ecc, and there for would need a donor nand to build from. Unless I missed something about the dgx ecc. Correct me if I am wrong about that.

 

[15432]

Hi guys,
I just received a corona V4 with 4GB nand corrupted by an "expert".

There's no info how the dump was corrupted