Dump NAND (twice if I get a read error). 3 times read isn't really needed, as long as you can open the NAND in 360Flash Tool with no (or remapped) bad blocks.
Open in 360Flash Tool.
Check for bad blocks and note remapped blocks where present.
Hook up AV to TV and ethernet to Network and power on.
Wait for httpd address and CPU key are showing at the bottom then go to 'http://<address>'
Copy CPU key from web page and paste into 360 Flash Tool. Re-open dump and ensure KV is decrypted (so CPU is valid).
Paste CPU key into JTAG tool and carry on with freeboot process.