Console Type: Jasper
· Programmer Used: JRP v2.0
· NAND Size: 256GB
· Dashboard version: 2.0.17150.0
· CB Version: 6754
· Was the console working before you started: Yes
· Green debug light appear on the CR4 XL chip every 4-5 seconds : Yes
I successfully installed CR4 XL for R-JTAG and read NAND, built and wrote Xell got CPU key, created NXE image and booted the dash all was fine. While doing some fine tuning in rater, I stopped getting video output on my console. I can see in the post a successful glitch and load XAM but no video on the screen. The Xbox just has a solid green light on ROL and green on the power supply. I tested different output cables and TV’s, VGA, HDMI and Composite. So I wrote back the retail NAND and disconnected 5v on the CR4 and everything boots like normal with the dash coming up on the screen. When I wrote back Xell I get the same issue with no video output. I double check and re-flowed the soldering and rebuilt Xell and NXE with my first NAND dump and still no luck. Anyone else have a similar issue? Or have some Troubleshooting steps I can try.
Soldering pics are in this post (http://team-xecuter.com/forums/showthread.php?149374-JRPv2-Jasper-Dump-Help)
NAND Info
Bad Block
JRunner Log
Rater / POST output
updflash Log
· Programmer Used: JRP v2.0
· NAND Size: 256GB
· Dashboard version: 2.0.17150.0
· CB Version: 6754
· Was the console working before you started: Yes
· Green debug light appear on the CR4 XL chip every 4-5 seconds : Yes
I successfully installed CR4 XL for R-JTAG and read NAND, built and wrote Xell got CPU key, created NXE image and booted the dash all was fine. While doing some fine tuning in rater, I stopped getting video output on my console. I can see in the post a successful glitch and load XAM but no video on the screen. The Xbox just has a solid green light on ROL and green on the power supply. I tested different output cables and TV’s, VGA, HDMI and Composite. So I wrote back the retail NAND and disconnected 5v on the CR4 and everything boots like normal with the dash coming up on the screen. When I wrote back Xell I get the same issue with no video output. I double check and re-flowed the soldering and rebuilt Xell and NXE with my first NAND dump and still no luck. Anyone else have a similar issue? Or have some Troubleshooting steps I can try.
Soldering pics are in this post (http://team-xecuter.com/forums/showthread.php?149374-JRPv2-Jasper-Dump-Help)
NAND Info
Bad Block
JRunner Log
Code:
===================================================
Friday, January 09, 2015 6:09:52 PM
J-Runner v0.3 Beta (7) Started
Checking Files
Finished Checking Files
Initializing nanddump1.bin..
Jasper 256MB
Jtag Selected
Nand Initialization Finished
Aud_Clamp Selected
R-Jtag Selected
Patching Jasper version 2.3 SMC at offset 0x12BA
XeLL file created Successfully jasper_hack_bigblock_aud_clamp.bin
Version: 10
Flash Config: 0x008A3020
Writing Nand
jasper_hack_bigblock_aud_clamp.bin
Done!
in 0:18 min:sec
Initializing nanddump1.bin..
CpuKey is Correct
Added Key to Database
Jasper 256MB
Nand Initialization Finished
Moving All files from output folder to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505
Load Files Initiliazation Finished
Clean SMC detected
Patching Jasper version 2.3 SMC at offset 0x12BA
17150
Started Creation of the 17150 xebuild image
KV Info saved to file
---------------------------------------------------------------
xeBuild v1.14.693
---------------------------------------------------------------
base path changed to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\xeBuild
---- { Image Build Mode } ----
building jtag image
**************** WARNING *************************
nanddump.bin has NAND memory unit data, make
sure you back up any important data off the
internal MU before flashing a new image!
****************************************************
******* WARNING: could not patch SMC reset limit!
---------------------------------------------------------------
E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin image built, info:
---------------------------------------------------------------
Kernel : 2.0.17150.0
Console : Jasper (big block)
NAND size : 64MiB (system only)
Build : JTAG
Xell : power on console with console eject button
Serial : 566257484505
ConsoleId : 030094914482
MoboSerial: 7921730108788455
Mfg Date : 11/04/2008
CPU Key : 522C66063BD3257F11E26D6B3147BB5E
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 89EB86E42460676F7C8E2BFCF2296DBA
CF LDV : 13
KV type : type2 (hashed - unchecked, master key not available)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
Saved to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505
Image is Ready
Initializing updflash.bin..
Jasper BB
Nand Initialization Finished
Jasper 256MB Manually Selected
Version: 10
Flash Config: 0x008A3020
Writing Nand
updflash.bin
Done!
in 14:37 min:sec
===================================================
Sunday, January 11, 2015 4:37:42 PM
J-Runner v0.3 Beta (7) Started
System.ComponentModel.Win32Exception (0x80004005): Error creating window handle.
at System.Windows.Forms.NativeWindow.CreateHandle(CreateParams cp)
at System.Windows.Forms.Control.CreateHandle()
at System.Windows.Forms.TextBoxBase.CreateHandle()
at System.Windows.Forms.Control.get_Handle()
at System.Windows.Forms.Control.get_WindowText()
at System.Windows.Forms.TextBoxBase.get_WindowText()
at System.Windows.Forms.Control.get_Text()
at System.Windows.Forms.TextBoxBase.set_Text(String value)
at System.Windows.Forms.TextBox.set_Text(String value)
at JRunner.POST.SleepIntermittently(Int32 totalTime)
at JRunner.POST.rate_post()
Could not find a part of the path.
===================================================
Monday, January 12, 2015 12:48:27 PM
J-Runner v0.3 Beta (7) Started
Checking Files
Finished Checking Files
Initializing nanddump1.bin..
Jasper 256MB
Jtag Selected
Nand Initialization Finished
Retail Selected
Jasper 256MB Manually Selected
Version: 10
Flash Config: 0x008A3020
Writing Nand
nanddump1.bin
Error: 202 writing block 3540
Done!
in 57:48 min:sec
Load Files Initiliazation Finished
17150
Started Creation of the 17150 xebuild image
KV Info saved to file
---------------------------------------------------------------
xeBuild v1.14.693
---------------------------------------------------------------
base path changed to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\xeBuild
---- { Image Build Mode } ----
building retail image
******* ERROR: hacked or unknown SMC binary found? you should use a clean SMC binary for a retail image!
***** FATAL BUILD ERROR: -4 unable to complete NAND image
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
Failed
Initializing nanddump1.bin..
Jasper 256MB
Jtag Selected
Nand Initialization Finished
Load Files Initiliazation Finished
Clean SMC detected
17150
Started Creation of the 17150 xebuild image
KV Info saved to file
---------------------------------------------------------------
xeBuild v1.14.693
---------------------------------------------------------------
base path changed to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\xeBuild
---- { Image Build Mode } ----
building jtag image
**************** WARNING *************************
nanddump.bin has NAND memory unit data, make
sure you back up any important data off the
internal MU before flashing a new image!
****************************************************
******* WARNING: could not patch SMC reset limit!
---------------------------------------------------------------
E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin image built, info:
---------------------------------------------------------------
Kernel : 2.0.17150.0
Console : Jasper (big block)
NAND size : 64MiB (system only)
Build : JTAG
Xell : power on console with console eject button
Serial : 566257484505
ConsoleId : 030094914482
MoboSerial: 7921730108788455
Mfg Date : 11/04/2008
CPU Key : 522C66063BD3257F11E26D6B3147BB5E
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 89EB86E42460676F7C8E2BFCF2296DBA
CF LDV : 13
KV type : type2 (hashed - unchecked, master key not available)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
Saved to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505
Image is Ready
Initializing updflash.bin..
Jasper BB
Nand Initialization Finished
Load Files Initiliazation Finished
Hacked SMC detected
17150
Started Creation of the 17150 xebuild image
KV Info saved to file
---------------------------------------------------------------
xeBuild v1.14.693
---------------------------------------------------------------
base path changed to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\xeBuild
---- { Image Build Mode } ----
building jtag image
******* WARNING: could not patch SMC reset limit!
---------------------------------------------------------------
E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin image built, info:
---------------------------------------------------------------
Kernel : 2.0.17150.0
Console : Jasper (big block)
NAND size : 64MiB (system only)
Build : JTAG
Xell : power on console with console eject button
Serial : 566257484505
ConsoleId : 030094914482
MoboSerial: 7921730108788455
Mfg Date : 11/04/2008
CPU Key : 522C66063BD3257F11E26D6B3147BB5E
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 89EB86E42460676F7C8E2BFCF2296DBA
CF LDV : 13
KV type : type2 (hashed - unchecked, master key not available)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
Saved to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505
Image is Ready
Initializing updflash.bin..
Jasper BB
Nand Initialization Finished
Aud_Clamp Selected
R-Jtag Selected
Load Files Initiliazation Finished
Hacked SMC detected
17150
Started Creation of the 17150 xebuild image
KV Info saved to file
---------------------------------------------------------------
xeBuild v1.14.693
---------------------------------------------------------------
base path changed to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\xeBuild
---- { Image Build Mode } ----
building jtag image
******* WARNING: could not patch SMC reset limit!
---------------------------------------------------------------
E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin image built, info:
---------------------------------------------------------------
Kernel : 2.0.17150.0
Console : Jasper (big block)
NAND size : 64MiB (system only)
Build : JTAG
Xell : power on console with console eject button
Serial : 566257484505
ConsoleId : 030094914482
MoboSerial: 7921730108788455
Mfg Date : 11/04/2008
CPU Key : 522C66063BD3257F11E26D6B3147BB5E
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 89EB86E42460676F7C8E2BFCF2296DBA
CF LDV : 13
KV type : type2 (hashed - unchecked, master key not available)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
Saved to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505
Image is Ready
Initializing updflash.bin..
Jasper BB
Nand Initialization Finished
Jasper 256MB Manually Selected
Version: 10
Flash Config: 0x008A3020
Writing Nand
updflash.bin
Done!
in 14:35 min:sec
Patching Jasper version 2.3 SMC at offset 0x12BA
XeLL file created Successfully jasper_hack_bigblock_aud_clamp.bin
Version: 10
Flash Config: 0x008A3020
Writing Nand
jasper_hack_bigblock_aud_clamp.bin
Done!
in 0:18 min:sec
Could not find a part of the path.
===================================================
Tuesday, January 13, 2015 11:20:18 AM
J-Runner v0.3 Beta (7) Started
WARNING! - Your selected working directory already contains files!
You can view these files by using 'Show Working Folder' Button
Checking Files
Finished Checking Files
Initializing nanddump1.bin..
Jasper 256MB
Jtag Selected
Nand Initialization Finished
Aud_Clamp Selected
R-Jtag Selected
Patching Jasper version 2.3 SMC at offset 0x12BA
XeLL file created Successfully jasper_hack_bigblock_aud_clamp.bin
Version: 10
Flash Config: 0x008A3020
Writing Nand
jasper_hack_bigblock_aud_clamp.bin
Done!
in 0:18 min:sec
Comparing...Takes a while on big nands
Nands are the same
Load Files Initiliazation Finished
Clean SMC detected
Patching Jasper version 2.3 SMC at offset 0x12BA
17150
Started Creation of the 17150 xebuild image
KV Info saved to file
---------------------------------------------------------------
xeBuild v1.14.693
---------------------------------------------------------------
base path changed to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\xeBuild
---- { Image Build Mode } ----
building jtag image
**************** WARNING *************************
nanddump.bin has NAND memory unit data, make
sure you back up any important data off the
internal MU before flashing a new image!
****************************************************
******* WARNING: could not patch SMC reset limit!
---------------------------------------------------------------
E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin image built, info:
---------------------------------------------------------------
Kernel : 2.0.17150.0
Console : Jasper (big block)
NAND size : 64MiB (system only)
Build : JTAG
Xell : power on console with console eject button
Serial : 566257484505
ConsoleId : 030094914482
MoboSerial: 7921730108788455
Mfg Date : 11/04/2008
CPU Key : 522C66063BD3257F11E26D6B3147BB5E
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 89EB86E42460676F7C8E2BFCF2296DBA
CF LDV : 13
KV type : type2 (hashed - unchecked, master key not available)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
Saved to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505
Image is Ready
Initializing updflash.bin..
Jasper BB
Nand Initialization Finished
Jasper 256MB Manually Selected
Version: 10
Flash Config: 0x008A3020
Writing Nand
updflash.bin
Done!
in 14:32 min:sec
Could not find a part of the path.
===================================================
Tuesday, January 13, 2015 1:47:18 PM
J-Runner v0.3 Beta (7) Started
WARNING! - Your selected working directory already contains files!
You can view these files by using 'Show Working Folder' Button
Checking Files
Finished Checking Files
Initializing nanddump2.bin..
Jasper 256MB
Jtag Selected
Nand Initialization Finished
Retail Selected
Jasper 256MB Manually Selected
Version: 10
Flash Config: 0x008A3020
Writing Nand
nanddump2.bin
Error: 202 writing block 3540
Done!
in 57:50 min:sec
Power Up
Shutdown
Could not find a part of the path.
Code:
CR4 SelectedVersion: 10
Power Up
Waiting for POST to change
Post 0D - GLITCH CHECK COMMENCE
Post 0E - CB_B ENTRY REACHED
Post 0F - GLITCH SUCCESSFUL
Post 10 - ......
Post 11 - .......
Post 12 - ........
Post 01 - .
Post 03 - ...
Post 05 - ...
Post 06 - ....
Post 07 - .....
Post 08 - ......
Post 09 - .......
Post 0A - ........
Post 0B - .........
Post 0C - ..........
Post 0D - GLITCH CHECK COMMENCE
Post 0E - CB_B ENTRY REACHED
Post 0F - GLITCH SUCCESSFUL
Post 10 - ......
Post 11 - .......
Post 12 - ........
Post 01 - .
Post 03 - ...
Post 05 - ...
Post 06 - ....
Post 07 - .....
Post 08 - ......
Post 09 - .......
Post 0A - ........
Post 0B - .........
Post 0C - ..........
Post 0D - GLITCH CHECK COMMENCE
Post 0E - CB_B ENTRY REACHED
Post 0F - GLITCH SUCCESSFUL
Post 10 - ......
Post 11 - .......
Post 12 - ........
Post 13 - .........
Post 15 - CONTINUING
Post 16 - .
Post 17 - ..
Post 18 - ...
Post 19 - ....
Post 1A - .....
Post 1C - .......
Post 1E - .
Post 1F - ..
Post 20 - ...
Post 21 - ....
Post 22 - .
Post 23 - ..
Post 24 - Entrypoint reached
Post 25 - ...
Post 26 - ....
Post 27 - .....
Post 29 - .......
Post 2B - .........
Post 2C - ...........
Post 2D - ............
Post 2E - LOAD XAM
Post 2F - .............
Post 30 - ..............
Post 31 - INIT KERNEL
Post 32
Post 33
Post 34
Post 36
Post 37
Code:
base path changed to E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\xeBuild---- { Image Build Mode } ----
building jtag image
<enter> key on completion suppressed
data directory overridden from command line to '17150\'
per build directory overridden from command line to 'data\'
file name overridden from command line to 'E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin'
------ parsing user ini at 'data\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x1a0 bytes in memory
loading cpukey.txt from data\cpukey.txt
CPU Key set to: 0x522C66063BD3257F11E26D6B3147BB5E (weight:0x35 valid; ecd: valid)
setting 1blkey from ini: 0xDD88AD0C9ED669E7B56794FB68563EFA
1BL Key set to : 0xDD88AD0C9ED669E7B56794FB68563EFA sum: 0x983 (expects: 0x983)
xex Key set to : 0x20B185A59D28FDC340583FBB0896BF91 sum: 0x800 (expects: 0x800)
Using patchsmc option (ini file)
------ parsing ini at '17150\_jtag.ini' ------
ini version 17150
ini: label [jasperbl] found
found (1) 'cb_6723.bin' crc: 0xe9292b90
found (2) 'cd_6723.bin' crc: 0x0fcff305
found (3) 'ce_1888.bin' crc: 0xff9b60df
found (4) 'cf_4532.bin' crc: 0xd28ef722
found (5) 'cg_4532.bin' crc: 0x2530f8ce
found (6) 'cb_6750.bin' crc: 0xf7afa8cc
found (7) 'cd_8453.bin' crc: 0x25e0acd0
found (8) 'cf_17150.bin' crc: 0x0a774268
found (9) 'cg_17150.bin' crc: 0xbe8ac817
ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x899d7c53
found (2) 'bootanim.xex' crc: 0xe76c8e84
found (3) 'createprofile.xex' crc: 0x76c0f2c7
found (4) 'dash.xex' crc: 0xe1f07b1b
found (5) 'deviceselector.xex' crc: 0x99aff203
found (6) 'gamerprofile.xex' crc: 0x06185dc9
found (7) 'hud.xex' crc: 0x9f8dade0
found (8) 'huduiskin.xex' crc: 0xb186c353
found (9) 'mfgbootlauncher.xex' crc: 0xcb0b86e3
found (10) 'minimediaplayer.xex' crc: 0x81bb6500
found (11) 'nomni.xexp' crc: 0x7adef6f6
found (12) 'nomnifwk.xexp' crc: 0x6d7543f5
found (13) 'nomnifwm.xexp' crc: 0xa8a27e56
found (14) 'SegoeXbox-Light.xtt' crc: 0xe0ee6049
found (15) 'signin.xex' crc: 0x6dd20623
found (16) 'updater.xex' crc: 0x018dad7d
found (17) 'vk.xex' crc: 0x3edc0dbb
found (18) 'xam.xex' crc: 0x68767303
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0xe2adddfb
found (23) 'ximecore.xex' crc: 0x6f9e8b97
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0x1a4863a4
ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------
output name overridden to: E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin
1BL RSA pub key file is not available, signature checks will not be performed
PIRS RSA pub key file is not available, signature checks will not be performed
MASTER RSA pub key file is not available, signature checks will not be performed
------ Checking data\nanddump.bin ------
data\nanddump.bin file size: 0x10800000
nanddump header checks passed OK!
Loading NAND dump (0x4200000 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a big block machine
NAND dump uses big block controller
parsing dump into user and spare...
**************** WARNING *************************
nanddump.bin has NAND memory unit data, make
sure you back up any important data off the
internal MU before flashing a new image!
****************************************************
bad block at 0xa4 (raw offset 0x1524000), block ignored
copying nanddump data from block 0x1ff to block 0xa4 for file extraction integrity
block 0xa4 was remapped to block 0x1ff at remap instance 0
done!
cleaning up stray remaps
done!
--remap summary--
0: source: 0x00a4 dest: 0x01ff
-----------------
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0x3be0000! Using if no smc config is provided.
CF slot 0 decrypted ok LDV 0x0d Pairing: 0x0a1a14
CF slot 1 decrypted ok LDV 0x0c Pairing: 0x0a1a14
setting LDV from image to 13
setting pairing data from image to 0x0a1a14
pairing set to: 0a 1a 14
MobileB.dat found at block 0x199, page 0x74 (page 0x19974), size 2048 (0x800) bytes
MobileC.dat found at block 0x199, page 0x4 (page 0x19904), size 512 (0x200) bytes
MobileD.dat found at block 0x199, page 0x8 (page 0x19908), size 2048 (0x800) bytes
MobileE.dat found at block 0x199, page 0x90 (page 0x19990), size 2048 (0x800) bytes
Statistics.settings found at page 0xef000, size 4096 (0x1000) bytes
seeking FSRoot...fsroot found at block 0x1c3, page 0x20 (page 0x1c320) raw offset 0x1c320
seeking security files...
crl.bin found in sector 0x3ac size 0xa00...verified! Will use if external file not found.
dae.bin found in sector 0x3ae size 0x7090...verified! Will use if external file not found.
extended.bin found in sector 0xdc size 0x4000...verified! Will use if external file not found.
secdata.bin found in sector 0x3a8 size 0x400...verified! Will use if external file not found.
done!
Writing initial header to flash image
------ loading system update container ------
17150\su20076000_00000000 found, loading...done!
Read 0xb37000 bytes to memory
checking integrity...
header seems valid, version 2.0.17150.0
header hash is OK, checking content hashes...
content hashes seem OK, everything looks good!
extracted SUPD\xboxupd.bin (0x79fe0 bytes)
decrypting SUPD\xboxupd.bin\CF_17150.bin (0x4560 bytes)...done!
decrypting SUPD\xboxupd.bin\CG_17150.bin (0x75a80 bytes)...done!
------ Loading bootloaders and required security files ------
could not read 17150\bin\payload.bin, using built in payload (0x200 bytes)
reading data\SMC.bin (0x3000 bytes)
reset smc load address to 0x1000 size 0x3000
reading data\kv.bin failed, using kv.bin from nand dump
reading .\common\cb_6723.bin (0x9550 bytes)
loaded cb_6723.bin, could not check signature rsa key not present!
reading .\common\cd_6723.bin (0x56f0 bytes)
reading .\common\ce_1888.bin (0x5606a b pad 0x56070 b)
reading .\common\cf_4532.bin (0x44c0 bytes)
reading .\common\cg_4532.bin (0x2ef40 bytes)
extracted SUPD\xboxupd.bin\CF_17150.bin (0x4560 bytes)
extracted SUPD\xboxupd.bin\CG_17150.bin (0x75a80 bytes)
could not read 17150\bin\freeboot.bin, using built in core (0xd40 bytes)
reading 17150\bin\patches_jasper.bin (0xa60 bytes)
reading data\xell-2f.bin (0x40000 bytes)
reading .\common\cb_6750.bin (0x9a40 bytes)
loaded cb_6750.bin, could not check signature rsa key not present!
reading .\common\cd_8453.bin (0x5780 bytes)
reading data\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 71øC Edram: 73øC
Max temps : Cpu: 95øC Gpu: 90øC Edram: 92øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:22:48:61:31:f8
AVRegion : 0x00000100 (NTSC-M)
GameRegion : 0x00ff (NTSC/US)
DVDRegion : 1
resetKey : LLDX
---------------------
Checking for smc config data patches
smc config was not patched
---------------------
could not check signature of cb_6723.bin, 1BL RSA key not present!
could not check signature of cb_6750.bin, 1BL RSA key not present!
done!
------ Patching boot reasons and options into flash header ------
Patching header for xell power reason
------ Encrypting and finalizing bootloaders ------
Fuse CF LDV set to : 0xFFFFFFFFFFFFF0000000000000000000
Fuse CPU Key set to: 0x522C66063BD3257F11E26D6B3147BB5E
encoding payload.bin size 0x200 (JTAG)
patching payload.bin to load size 0xd40 (0x350 reps)
encoding SMC.bin size 0x3000 (JTAG)
SMC checksum: a6ee8b80
unknown SMC found, type: Jasper v4.1(2.03)
jtag hack found in SMC binary!
******* WARNING: could not patch SMC reset limit!
encoding kv.bin size 0x4000 (JTAG)
decrypted keyvault has been set for reference
Master RSA pub not available, not checking hash
encoding cb_6723.bin size 0x9550 (JTAG)
CB 6723 seq 0x01050010 type: 0x01 cseq: 0x05 allow: 0x0010
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0 (retail)
fuseset 02: 0000F00000000000 (sequence)
fuseset 02: 0000F00000000000 (allow cseq 5)
encoding cd_6723.bin size 0x56f0 (JTAG)
encoding ce_1888.bin size 0x56070 (JTAG)
encoding cf_4532.bin size 0x44c0 (JTAG)
encoding cg_4532.bin size 0x2ef40 (JTAG)
encoding cf_17150.bin size 0x4560 (JTAG)
encoding cg_17150.bin size 0x75a80 (JTAG)
encoding freeboot.bin size 0xd40 (JTAG)
patching freeboot.bin with with kernel version string '17150'
Boot options set:
- console DVD eject button is being used to start xell
- alternate xell button disabled
encoding patches_jasper.bin size 0xa64 (JTAG)
encoding fuses.bin size 0x60 (JTAG)
encoding xell-2f.bin size 0x40000 (JTAG)
encoding cb_6750.bin size 0x9a40 (JTAG)
CB 6750 seq 0x01070050 type: 0x01 cseq: 0x07 allow: 0x0050
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0 (retail)
fuseset 02: 000000F000000000 (sequence)
fuseset 02: 0000F00000000000 (allow cseq 5)
fuseset 02: 000000F000000000 (allow cseq 7)
CBENC pairing set to: 0a 1a 14
encoding cd_8453.bin size 0x5780 (JTAG)
Virtual Fuses set to:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0
fuseset 02: 000000F000000000
fuseset 03: 522C66063BD3257F
fuseset 04: 522C66063BD3257F
fuseset 05: 11E26D6B3147BB5E
fuseset 06: 11E26D6B3147BB5E
fuseset 07: FFFFFFFFFFFFF000
fuseset 08: 0000000000000000
fuseset 09: 0000000000000000
fuseset 10: 0000000000000000
fuseset 11: 0000000000000000
done!
------ Adding bootloaders to flash image ------
adding payload.bin at raw offset 0x00000200 len 0x200 (end 0x400)
adding SMC.bin at raw offset 0x00001000 len 0x3000 (end 0x4000)
adding kv.bin at raw offset 0x00004000 len 0x4000 (end 0x8000)
adding cb_6723.bin at raw offset 0x00008000 len 0x9550 (end 0x11550)
adding cd_6723.bin at raw offset 0x00011550 len 0x56f0 (end 0x16c40)
adding ce_1888.bin at raw offset 0x00016c40 len 0x56070 (end 0x6ccb0)
adding cf_4532.bin at raw offset 0x00070000 len 0x44c0 (end 0x744c0)
adding cg_4532.bin at raw offset 0x000744c0 len 0x2ef40 (end 0x80000, rest in fs)
adding cf_17150.bin at raw offset 0x00080000 len 0x4560 (end 0x84560)
adding cg_17150.bin at raw offset 0x00084560 len 0x75a80 (end 0x90000, rest in fs)
adding freeboot.bin at raw offset 0x00090000 len 0xd40 (end 0x90d40)
adding patches_jasper.bin at raw offset 0x00091000 len 0xa64 (end 0x91a64)
adding fuses.bin at raw offset 0x00095000 len 0x60 (end 0x95060)
adding xell-2f.bin at raw offset 0x00095060 len 0x40000 (end 0xd5060)
adding cb_6750.bin at raw offset 0x000d5060 len 0x9a40 (end 0xdeaa0)
adding cd_8453.bin at raw offset 0x000deaa0 len 0x5780 (end 0xe4220)
Writing CG patch slot overflow data to sysupdate.xexp1
at raw offset 0x2b80000 len 0x00023400 (end: 0x02ba3400)...done!
Writing target CG patch slot overflow data to sysupdate.xexp2
at raw offset 0x2b80000 len 0x00069fe0 (end: 0x02be9fe0)...done!
------ adding 25 firmware files ------
extracted SUPD\aac.xexp (0x14000 bytes) (crc32: 0x899d7c53 ini: 0x899d7c53)
adding as aac.xexp2 at raw offset 0x2c0dfe0 len 0x00014000 (end 0x02c21fe0)
extracted SUPD\bootanim.xex (0x61000 bytes) (crc32: 0xe76c8e84 ini: 0xe76c8e84)
adding as bootanim.xex at raw offset 0x2c24000 len 0x00061000 (end 0x02c85000)
extracted SUPD\createprofile.xex (0xc000 bytes) (crc32: 0x76c0f2c7 ini: 0x76c0f2c7)
adding as createprofile.xex at raw offset 0x2c85000 len 0x0000c000 (end 0x02c91000)
extracted SUPD\dash.xex (0x59b000 bytes) (crc32: 0xe1f07b1b ini: 0xe1f07b1b)
adding as dash.xex at raw offset 0x2c94000 len 0x0059b000 (end 0x0322f000)
extracted SUPD\deviceselector.xex (0xa000 bytes) (crc32: 0x99aff203 ini: 0x99aff203)
adding as deviceselector.xex at raw offset 0x322f000 len 0x0000a000 (end 0x03239000)
extracted SUPD\gamerprofile.xex (0x1b000 bytes) (crc32: 0x06185dc9 ini: 0x06185dc9)
adding as gamerprofile.xex at raw offset 0x323a000 len 0x0001b000 (end 0x03255000)
extracted SUPD\hud.xex (0x1d000 bytes) (crc32: 0x9f8dade0 ini: 0x9f8dade0)
adding as hud.xex at raw offset 0x3257000 len 0x0001d000 (end 0x03274000)
extracted SUPD\huduiskin.xex (0x14000 bytes) (crc32: 0xb186c353 ini: 0xb186c353)
adding as huduiskin.xex at raw offset 0x3275000 len 0x00014000 (end 0x03289000)
extracted SUPD\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0xcb0b86e3 ini: 0xcb0b86e3)
adding as mfgbootlauncher.xex at raw offset 0x328c000 len 0x00008000 (end 0x03294000)
extracted SUPD\minimediaplayer.xex (0xc000 bytes) (crc32: 0x81bb6500 ini: 0x81bb6500)
adding as minimediaplayer.xex at raw offset 0x3294000 len 0x0000c000 (end 0x032a0000)
extracted SUPD\nomni.xexp (0xc800 bytes) (crc32: 0x7adef6f6 ini: 0x7adef6f6)
adding as nomni.xexp2 at raw offset 0x32a0000 len 0x0000c800 (end 0x032ac800)
extracted SUPD\nomnifwk.xexp (0x2000 bytes) (crc32: 0x6d7543f5 ini: 0x6d7543f5)
adding as nomnifwk.xexp2 at raw offset 0x32ac800 len 0x00002000 (end 0x032ae800)
extracted SUPD\nomnifwm.xexp (0x5000 bytes) (crc32: 0xa8a27e56 ini: 0xa8a27e56)
adding as nomnifwm.xexp2 at raw offset 0x32b2000 len 0x00005000 (end 0x032b7000)
extracted SUPD\SegoeXbox-Light.xtt (0x6000 bytes) (crc32: 0xe0ee6049 ini: 0xe0ee6049)
adding as SegoeXbox-Light.xtt at raw offset 0x32b9000 len 0x00006000 (end 0x032bf000)
extracted SUPD\signin.xex (0x19000 bytes) (crc32: 0x6dd20623 ini: 0x6dd20623)
adding as signin.xex at raw offset 0x32c2000 len 0x00019000 (end 0x032db000)
extracted SUPD\updater.xex (0x7000 bytes) (crc32: 0x018dad7d ini: 0x018dad7d)
adding as updater.xex at raw offset 0x32dd000 len 0x00007000 (end 0x032e4000)
extracted SUPD\vk.xex (0xb000 bytes) (crc32: 0x3edc0dbb ini: 0x3edc0dbb)
adding as vk.xex at raw offset 0x32e7000 len 0x0000b000 (end 0x032f2000)
extracted SUPD\xam.xex (0x253000 bytes) (crc32: 0x68767303 ini: 0x68767303)
adding as xam.xex at raw offset 0x32f3000 len 0x00253000 (end 0x03546000)
extracted nanddump\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
adding as xenonclatin.xtt at raw offset 0x3547000 len 0x0011b000 (end 0x03662000)
extracted SUPD\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
adding as xenonclatin.xttp2 at raw offset 0x3663000 len 0x00018000 (end 0x0367b000)
extracted nanddump\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
adding as xenonjklatin.xtt at raw offset 0x367c000 len 0x001a8000 (end 0x03824000)
extracted SUPD\xenonjklatin.xttp (0x7000 bytes) (crc32: 0xe2adddfb ini: 0xe2adddfb)
adding as xenonjklatin.xttp2 at raw offset 0x3824000 len 0x00007000 (end 0x0382b000)
extracted SUPD\ximecore.xex (0x17000 bytes) (crc32: 0x6f9e8b97 ini: 0x6f9e8b97)
adding as ximecore.xex at raw offset 0x382b000 len 0x00017000 (end 0x03842000)
extracted nanddump\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
adding as ximedic.xex at raw offset 0x3843000 len 0x00090000 (end 0x038d3000)
extracted SUPD\ximedic.xexp (0x2800 bytes) (crc32: 0x1a4863a4 ini: 0x1a4863a4)
adding as ximedic.xexp2 at raw offset 0x38d4000 len 0x00002800 (end 0x038d6800)
------ adding 4 security files ------
<- Processing crl.bin ->
reading data\crl.bin (0xa00 bytes)
crl appears crypted, attempting to decrypt with CPU key...failed! Trying alternate key...success!
adding as crl.bin at raw offset 0x38d8000 len 0x00000a00 (end 0x038d8a00)
<- Processing dae.bin ->
reading data\dae.bin (0xad30 bytes)
dae appears encrypted, attempting to decrypt with CPU key...failed! Attempting to decrypt with alternate key...
success!
adding as dae.bin at raw offset 0x38dc000 len 0x0000ad30 (end 0x038e6d30)
<- Processing extended.bin ->
reading data\extended.bin (0x4000 bytes)
adding as extended.bin at raw offset 0x38e8000 len 0x00004000 (end 0x038ec000)
<- Processing secdata.bin ->
reading data\secdata.bin (0x400 bytes)
adding as secdata.bin at raw offset 0x38ec000 len 0x00000400 (end 0x038ec400)
------ checking for Mobile*.dat ------
MobileB.dat found, adding from previous parse
adding MobileB.dat as type 0x31 at raw offset 0x3900000 len 0x800 (end 0x3900800)
MobileC.dat found, adding from previous parse
adding MobileC.dat as type 0x32 at raw offset 0x3900800 len 0x200 (end 0x3900a00)
MobileD.dat found, adding from previous parse
adding MobileD.dat as type 0x33 at raw offset 0x3901000 len 0x800 (end 0x3901800)
MobileE.dat found, adding from previous parse
adding MobileE.dat as type 0x34 at raw offset 0x3901800 len 0x800 (end 0x3902000)
Statistics.settings found, adding from previous parse
adding Statistics.settings at raw offset 0x3bc0000 len 0x1000 (end 0x3bc1000)
------ adding smc_config.bin ------
adding smc config to offset 0x03be0000, len 0x400
------ finalizing image ------
Fixing up empty FS block entries...done!
Writing FS table to image offset 0x3920000 len 0x4000 (end 0x3924000)...done!
fixing up big block LBA numbers in spare...done!
calculating ECD bytes and assembling raw image...done!
remapping 1 blocks
copying 0x21000 bytes of LBA 0xa4 to block 0x1ff...zero fill origin...
dest block is empty, fixing up LBA and ECD...done!
done remapping!
------ writing image to disk ------
writing file 'E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin' to disk...done!
---------------------------------------------------------------
E:\DL\XBOX\J-Runner v3 (5) Core Pack\J-Runner v3 (5) Core Pack\566257484505\updflash.bin image built, info:
---------------------------------------------------------------
Kernel : 2.0.17150.0
Console : Jasper (big block)
NAND size : 64MiB (system only)
Build : JTAG
Xell : power on console with console eject button
Serial : 566257484505
ConsoleId : 030094914482
MoboSerial: 7921730108788455
Mfg Date : 11/04/2008
CPU Key : 522C66063BD3257F11E26D6B3147BB5E
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 89EB86E42460676F7C8E2BFCF2296DBA
CF LDV : 13
KV type : type2 (hashed - unchecked, master key not available)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
