RGH j runner program

dayton1

Full Member
Sep 14, 2011
65
0
could i use the advanced tab /custom nand function erase then command size (mines 256) then start of block and length size of nand to make a clean nand.
 

AMIT

VIP Member
Nov 30, 2011
943
68
INDIA
J-runner >Advance>custom nand functions>

Hope this helps !
 

Martin C

VIP Member
Jan 10, 2004
35,981
0
Scotland, UK
www.team-xecuter.com
could i use the advanced tab /custom nand function erase then command size (mines 256) then start of block and length size of nand to make a clean nand.
Rather than just asking an outright question, can you explain why you want to do this?
 
  • Like
Reactions: dayton1

dayton1

Full Member
Sep 14, 2011
65
0
what is that function use for

---------- Post added at 20:09 ---------- Previous post was at 20:07 ----------

i think i have a bad 0022 error and need to rewrite the nand. i have cpu key and orginal key. it give me three red lights after awhile it sats on green.
 

AMIT

VIP Member
Nov 30, 2011
943
68
INDIA
what is that function use for

---------- Post added at 20:09 ---------- Previous post was at 20:07 ----------

i think i have a bad 0022 error and need to rewrite the nand. i have cpu key and orginal key. it give me three red lights after awhile it sats on green.
Check your LDVs !

Read this !
 
Last edited:
  • Like
Reactions: dayton1

dayton1

Full Member
Sep 14, 2011
65
0
good stuff mate going to get back later maybe tomorrow to let you know what happen. i did mess up that nand like it says. also thanks martin for the post too.
 

dayton1

Full Member
Sep 14, 2011
65
0
this is the read when i create the image and iam going to give you what jrunner looks like
xeBuild v1.01.421
---------------------------------------------------------------
building glitch image
data directory overridden from command line to 'xeBuild\14699'
per build directory overridden from command line to 'xeBuild\data'
file name overridden from command line to 'C:\Users\Owner\Documents\J RUNNER PROGRAM\320774584705\nandflash.bin'

------ parsing user ini at '.\xeBuild\data\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x14f bytes in memory
loading cpukey.txt from C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\data\cpukey.txt
CPU Key set to:
setting 1blkey from ini:
1BL Key set to: sum: 0x983 (expects: 0x983)
xex Key set to: 0x20B185A59D28FDC340583FBB0896BF91 sum: 0x800 (expects: 0x800)
Using patchsmc option (ini file)

------ parsing ini at '.\xeBuild\14699\_glitch.ini' ------
ini version 14699

ini: label [jasperbl] found
found (1) 'cb_6750.bin' crc: 0xf7afa8cc
found (2) 'none' crc: 0x00000000
found (3) 'cd_8453.bin' crc: 0x25e0acd0
found (4) 'ce_1888.bin' crc: 0xff9b60df
found (5) 'cf_14699.bin' crc: 0x6fb4d90e
found (6) 'cg_14699.bin' crc: 0xbccc9fe1

ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x36790e61
found (2) 'bootanim.xex' crc: 0x187ede71
found (3) 'createprofile.xex' crc: 0x81d7a946
found (4) 'dash.xex' crc: 0x3957764c
found (5) 'deviceselector.xex' crc: 0x6246b4c0
found (6) 'gamerprofile.xex' crc: 0xb7add96a
found (7) 'hud.xex' crc: 0x202eb5c8
found (8) 'huduiskin.xex' crc: 0x4c80fbe9
found (9) 'mfgbootlauncher.xex' crc: 0x254ad664
found (10) 'minimediaplayer.xex' crc: 0xd8d21cfc
found (11) 'nomni.xexp' crc: 0xbf36fdf7
found (12) 'nomnifwk.xexp' crc: 0xa837ae53
found (13) 'nomnifwm.xexp' crc: 0x93246a8a
found (14) 'SegoeXbox-Light.xtt' crc: 0x086eb344
found (15) 'signin.xex' crc: 0xecd9cab1
found (16) 'updater.xex' crc: 0x125cdb94
found (17) 'vk.xex' crc: 0x9c744d4c
found (18) 'xam.xex' crc: 0x0b764b88
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0x945b7092
found (23) 'ximecore.xex' crc: 0x8d45ea14
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0xc90a651a

ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'fcrt.bin' crc: 0x00000000
found (5) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------

output name overridden to: C:\Users\Owner\Documents\J RUNNER PROGRAM\320774584705\nandflash.bin


------ Checking C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\data\nanddump.bin ------
Loading NAND dump (0x28ee70 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a big block machine
NAND dump uses big block controller
parsing dump into user and spare...


**************** WARNING *************************
nanddump.bin has NAND memory unit data, make
sure you back up any important data off the
internal MU before flashing a new image!
****************************************************

done!
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xfc7a00! Using if no smc config is provided.
CF slot 0 decrypted ok LDV 0x05 Pairing: 0x7a9993
CF slot 1 decrypted ok LDV 0x04 Pairing: 0x7a9993
setting LDV from image to 5
setting pairing data from image to 0x7a9993
seeking security files...no valid FS root found!
Writing initial header to flash image

------ Loading bootloaders and required security files ------
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\data\smc.bin failed, using smc.bin from nand dump
reset smc load address to 0x1000 size 0x3000
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\data\kv.bin failed, using kv.bin from nand dump
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\14699\cb_6750.bin (0x9a40 bytes)
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\14699\cd_8453.bin (0x5780 bytes)
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\14699\ce_1888.bin (0x5606a b pad 0x56070 b)
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\data\xell-gggggg.bin (0x40000 bytes)
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\14699\cf_14699.bin (0x4450 bytes)
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\14699\cg_14699.bin (0x67168 b pad 0x67170 b)
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\14699\bin\patches_fat.bin (0x6f0 bytes)
reading C:\Users\Owner\Documents\J RUNNER PROGRAM\xeBuild\.\xeBuild\data\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
******* ERROR: extracting config did not work, not enough data to copy!


**** could not read smc_config.bin (-2) ****

******* ERROR: critical bootloader files are missing, cannot proceed!



***** FATAL BUILD ERROR: -1 unable to complete NAND image

---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------

---------- Post added at 23:21 ---------- Previous post was at 23:15 ----------

right side of jrunner says ldv 0 6bl cf patch 1 0, 7bl cg patch1 0,ldv 0 pd blank,
left side says ldv5 pd 0x939997a, 68b cf patch0 9199, 7bl cg patch 0 9199
right side should have more imformation than it has. it did boot into xell i have the fuse ffff's
 
Last edited:

AMIT

VIP Member
Nov 30, 2011
943
68
INDIA
Use j runner !

1 'F' = LDV 1

2 'FF' = LVD 2

6 'FFFFFF' = LDV 6


Hope this helps !
 
Last edited:
  • Like
Reactions: dayton1

dayton1

Full Member
Sep 14, 2011
65
0
when i change the ldv value to the fuse count then go to confirm lockdown value but iam stuck on that
 

dayton1

Full Member
Sep 14, 2011
65
0
this is the build file in 360 build:
xeBuild v1.00.356
---------------------------------------------------------------
ERROR: invalid command line, you need to specify parameters!
---------------------------------------------------------------
Usage :
xeBuild -t <type> [<switch> [<switch>...]] <out.bin>

Example :
xeBuild -t retail -c trinity -d files -b 0102...0f -p 0102...0f out.bin

Switches:
-t <type>: retail, jtag, glitch (defaults to retail)
-p <key> : 32 character CPU hex key (override, can be in cpukey.txt)
-b <key> : 32 character 1BL hex key (override, can be in 1blkey.txt)
-c <con> : console type
-d <dir> : per build files directory relative to this exe
-f <dir> : use different data dir and file lists
-o <opt> : set xeBuild options
-a <name>: append patches
-v : shows more info during build process
-noenter : suppresses prompt for enter key when finished

-? : shows this info

<con> = xenon, zephyr, falcon, jasper, jaspersb, jasper256, jasper512, trinity
<dir> = directory
<key> = 128 bit key in hexadecimal representation
<name> = name.bin contents will be appended to hv/kernel patches

<out.bin> = optional, overrides auto built output image name
<opt> various options can be specified on the command line, see perbox sample ini for descriptions
listed below, ALL are available to all image types
the others can be specified but are only used for that specific image type
ALL = nomobile noremap noecdremap nosecurity nandmu cputemp= gputemp= edramtemp=
ALL = overcputemp= overgputemp= overedramtemp= cpufan= gpufan= avregion=
ALL = gameregion= dvdregion= macid= cfldv=
JTAG = nodvd olddvd cygnos xellbutton= dualboot=
GLITCH= patchsmc cygnos xellbutton=
options noted above with an = are expected to be followed with a value
specifying one of the options without an = is the same as setting TRUE in the ini
any value assigned to it will be ignored.
note that command line options take precedence over any values set in perbox ini
and that only values preceded with 0x will be interpreted as hex, MAC is the only exception
example: -o macid=00:22:48:F1:01:02;gameregion=0x00FF;nomobile
example: -o macid=00:22:48:F1:01:02 -o gameregion=0x00FF -o nomobile
example: -o macid=002248F10102 -o gameregion=255 -o nomobile
---------------------------------------------------------------

press <enter> to quit...

---------- Post added at 10:48 ---------- Previous post was at 10:43 ----------

i can add text but when i try to add images it ask for http address url

---------- Post added at 10:48 ---------- Previous post was at 10:48 ----------

i would add images everytime please help
 

dayton1

Full Member
Sep 14, 2011
65
0
*** THIS FILE IS ENTIRELY OPTIONAL (harhar) ***
; the original command line options and settings by file will override anything in this ini

; leave any items you don't want to set out of this ini file, or leave their values blank

; console type
; valid values are: xenon, zephyr, falcon, jasper, jasper256, jasper512, trinity
; ie: type=falcon;
type = jasper
; put hexidecimal 1BL key here, or on command line, or in 1blkey.txt
1blkey = was added in delete to pertect
; put hexidecimal cpu key here, or on command line, or in cpukey.txt
cpukey = was added in delete to pertect
; byte 0x21f of decrypted CF (also is the count of 0xF in fuse rows 7 and 8)
; if you provide a nanddump.bin with the correct ldv value, there is no reason to fill this in
; jtag images won't care what this value is set to, but glitch and retail images require this to match CPU fuses
cfldv =6

; ******************* JTAG and GLITCH common options *******************
; valid buttons are: power (console power button), eject (DVD eject button), remopower (IR power button), remox (IR X button)
; winbutton (IR windows button), wirelessx (wireless controller X button), wiredx (wired controller X button)
; kiosk (debug kiosk pin)
; sets which power on button causes Xell to start
; note this setting is ignored when olddvd or nodvd is set to TRUE, and by default is set to eject button
xellbutton = eject
; same as above, if you would like to have xell launch on two separate reasons instead of one
; leaving blank disables alternate reason entirely
xellbutton2 =
; sets UART speed during bootstrap to cygnos compatible speeds (true/false)
cygnos = false

; ******************* JTAG only options *******************
; *** these options affect how the freeboot core is patched to work ***

; olddvd is the old fbbuild method of checking tray status (not closed) to start xell (true/false)
olddvd = false
; nodvd is the old ibuild method of checking tray status (fully open) to start xell and implies 'olddvd' (true/false)
nodvd = false

; sets which power on button causes core to send !SWITCH signal to UART, by default it's set to nothing
; note this setting will have no effect on single NAND systems, and will be ignored if set to the same as xellbutton
; see xellbutton explanation for valid values
dualboot =

; ******************* GLITCH only options *******************
; will patch clean smc similar to imgbuild script, ignored for retail and jtag
; will do nothing but warn if the smc given is not in the built in list
; defaults to FALSE if not present
patchsmc = false

; ******************* ALL machines options *******************
; the values below here represent the default values if the items are not present in the ini
; for number values, 0 is 'don't change'
; ************************************************************

; this will skip using the mobile*.dat files in nanddump.bin (true/false)
nomobile = false
; this will skip applying any bad block remapping to the final image (true/false)
noremap = false
; if noremap is set to false, setting this option to true will skip remapping blocks with ECD sum mismatches (true/false)
noecdremap = false
; if a Big Block nand image is provided and nandmu is set to TRUE, blocks 0x10 through 0x15B (inclusive) will be copied from the dump (true/false)
; to the final image, when NAND MU data is detected only, to attempt to preserve NAND MU content that is present in the first 64M
; if the dump is provided as a full 256M or 512M dump, the remaining 192M/448M will be copied onto the end of the new image as well
; and flashig this full image will increase the changes of keeping the MU contents intact
nandmu = false
; if set to true, nanddump.bin will not be processed for security files listed in file list inis (true/false)
nosecurity = false

; will alter the input smc config target temp for CPU when fans are on auto, value is in Centigrade
; example: cputemp=60; sets 60C as the target temp for the auto fan speed algo
cputemp =
; will alter the input smc config target temp for GPU when fans are on auto, value is in Centigrade
; example: gputemp=60; sets 60C as the target temp for the auto fan speed algo
gputemp =
; will alter the input smc config target temp for EDRAM when fans are on auto, value is in Centigrade
; example: edramtemp=60; sets 60C as the target temp for the auto fan speed algo
edramtemp =
; will alter the input smc config overheat/overload temp for CPU when fans are on auto, value is in Centigrade
; example: cputemp=60; sets 60C as the overheat/overload temp for the auto fan speed algo
overcputemp =
; will alter the input smc config overheat/overload temp for GPU when fans are on auto, value is in Centigrade
; example: gputemp=60; sets 60C as the overheat/overload temp for the auto fan speed algo
overgputemp =
; will alter the input smc config overheat/overload temp for EDRAM when fans are on auto, value is in Centigrade
; example: edramtemp=60; sets 60C as the overheat/overload temp for the auto fan speed algo
overedramtemp =

; will force CPU fan to run at this speed all the time, valid values are 0-100 in decimal
; note that this value should have no effect on most fat consoles
; example cpufan=80;
cpufan =0
; will force GPU fan to run at this speed all the time, valid values are 0-100 in decimal
; note that this value will have no effect on fan speed on slim consoles
; example gpufan=80;
gpufan =0

; sets the video output mode, known values are 0x100 (NTSC) and 0x300 (PAL)
avregion =
; this is a 16bit value that denotes the console's game region
; ie: gameregion = 0x00FF; would be a NTSC/US game region console
gameregion =
; this is a 32 bit value that sets the consoles DVD region, 1-8 appear to be valid, there may be others for 'region free'
dvdregion =

; will alter the mac address in smc config, input hex value without any 0x for the 6 bytes
; example: macid=00:22:48:F1:01:02;
macid =

---------- Post added at 11:56 ---------- Previous post was at 11:55 ----------

i counted the ffff = 6 in xell
 

dayton1

Full Member
Sep 14, 2011
65
0
http://img513.imageshack.us/slideshow/player.php?id=img513/6972/1333

this my soldering good and clean

---------- Post added at 22:36 ---------- Previous post was at 22:34 ----------

put in 360 flash and it says bad key vault thats fron orginal nand. when i make a nand i copy it into a different folder than jrunner folder

---------- Post added at 22:39 ---------- Previous post was at 22:36 ----------

http://img823.imageshack.us/img823/9084/imag0115da.jpg
http://img513.imageshack.us/img513/673/imag0107kk.jpg
http://img267.imageshack.us/img267/3696/imag0108dh.jpg
http://img813.imageshack.us/img813/7985/imag0110c.jpg
http://img688.imageshack.us/img688/2697/imag0112ta.jpg
http://img41.imageshack.us/img41/9715/imag0114u.jpg

the green wire is burn on top but it has coating on bottom.
 

dayton1

Full Member
Sep 14, 2011
65
0
yes it does boot thats how i change the value of fff's in muliti build to six. i know when i first flash it was on dash 9199 and i flash it and all the way to create image and it gave me a error code missing smc so i flash back to stock and updated it to 1499, i know not to go any higher update. so after that second flash i try to create image and it gave me same missing smc and now when i wrote back stock nand it give me error code 0022 three red lights after 20 to 30 seconds. seems it want to boot but cant.
 

dayton1

Full Member
Sep 14, 2011
65
0
you think if i short out my nand i could get it back to retail then iam happy with that