Hey Guys I Tried to Update My Jtag Using Your j-Runner Tool To Create My Image..! 16719 Dash
(Awesome Tool BTW)
Anyway Everything Went Fine With Image Creating Etc,
I Flashed The Nand Using Rawflash In Xell But When I Power On my Xbox It Just Freezes @ The Xbox Logo Sign..! Still Boots Xell Too..!
Ill Attach My Log So You Guys Can Look I Know I Had 2 Bad Blocks But These Were Dealt With By Rawflash But Had This Issue..!
---------------------------------------------------------------
xeBuild v1.01.421
---------------------------------------------------------------
building jtag image
data directory overridden from command line to 'xeBuild\14719'
per build directory overridden from command line to 'xeBuild\data'
file name overridden from command line to 'C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin'
------ parsing user ini at '.\xeBuild\data\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x14f bytes in memory
loading cpukey.txt from C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\cpukey.txt
CPU Key set to: 0x780194872C37AE1FC1657BE1CEAAF36A
setting 1blkey from ini: 0xDD88AD0C9ED669E7B56794FB68563EFA
1BL Key set to: 0xDD88AD0C9ED669E7B56794FB68563EFA sum: 0x983 (expects: 0x983)
xex Key set to: 0x20B185A59D28FDC340583FBB0896BF91 sum: 0x800 (expects: 0x800)
------ parsing ini at '.\xeBuild\14719\_jtag.ini' ------
ini version 14719
ini: label [xenonbl] found
found (1) 'cb_1921.bin' crc: 0x14cec7b4
found (2) 'cd_1921.bin' crc: 0xb907093a
found (3) 'ce_1888.bin' crc: 0xff9b60df
found (4) 'cf_4532.bin' crc: 0xd28ef722
found (5) 'cg_4532.bin' crc: 0x2530f8ce
found (6) 'cb_1940.bin' crc: 0x62b7b19c
found (7) 'cd_8453.bin' crc: 0x25e0acd0
found (8) 'cf_14719.bin' crc: 0x31764aae
found (9) 'cg_14719.bin' crc: 0x2b990f2a
ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x79fa8ef9
found (2) 'bootanim.xex' crc: 0x4708ac41
found (3) 'createprofile.xex' crc: 0x17d7eeef
found (4) 'dash.xex' crc: 0xc331818a
found (5) 'deviceselector.xex' crc: 0xce0a6ac4
found (6) 'gamerprofile.xex' crc: 0x3d6fde71
found (7) 'hud.xex' crc: 0xfb9af532
found (8) 'huduiskin.xex' crc: 0x59c8f99e
found (9) 'mfgbootlauncher.xex' crc: 0x30028379
found (10) 'minimediaplayer.xex' crc: 0xea50ae99
found (11) 'nomni.xexp' crc: 0xd1e81135
found (12) 'nomnifwk.xexp' crc: 0x6311da91
found (13) 'nomnifwm.xexp' crc: 0x03b32644
found (14) 'SegoeXbox-Light.xtt' crc: 0x086eb344
found (15) 'signin.xex' crc: 0x09f66fc4
found (16) 'updater.xex' crc: 0x9dc378a8
found (17) 'vk.xex' crc: 0x8ad4198e
found (18) 'xam.xex' crc: 0xc1ee0989
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0x945b7092
found (23) 'ximecore.xex' crc: 0x709614d6
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0xa1284e82
ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------
output name overridden to: C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin
------ Checking C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\nanddump.bin ------
Loading NAND dump (0x23ee70 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a small block machine
NAND dump uses small block controller
parsing dump into user and spare...
bad block at 0x1ed (raw offset 0x7f1a00), block ignored
bad block at 0x20b (raw offset 0x86d600), block ignored
block 0x20b was remapped to block 0x20c at remap instance 1
block 0x1ed was remapped to block 0x3ff at remap instance 0
done!
cleaning up stray remaps
done!
--remap summary--
0: source: 0x01ed dest: 0x03ff
1: source: 0x020b dest: 0x020c
-----------------
KeyVault cannot be 0x0 bytes, using 0x4000
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xf7c000! Using if no smc config is provided.
CF slot 1 decrypted ok LDV 0x02 Pairing: 0xc6748a
setting LDV from image to 2
setting pairing data from image to 0xc6748a
MobileB.dat found at page 0x7160, size 2048 (0x800) bytes
seeking security files...fsroot found at page 0x7180 raw offset 0xea1800
crl.bin found in sector 0x385 size 0x9e0...verified! Will use if external file not found.
dae.bin found in sector 0x386 size 0xad30...verified! Will use if external file not found.
extended.bin found in sector 0x389 size 0x4000...verified! Will use if external file not found.
secdata.bin found in sector 0x38a size 0x400...verified! Will use if external file not found.
Writing initial header to flash image
------ Loading bootloaders and required security files ------
could not read C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bin\payload.bin, using built in payload (0x200 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\smc.bin (0x3000 bytes)
reset smc load address to 0x1000 size 0x3000
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\kv.bin failed, using kv.bin from nand dump
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cb_1921.bin (0x9800 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cd_1921.bin (0x56c0 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ce_1888.bin (0x5606a b pad 0x56070 b)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cf_4532.bin (0x44c0 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cg_4532.bin (0x2ef40 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cf_14719.bin (0x4560 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cg_14719.bin (0x664aa b pad 0x664b0 b)
could not read C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bin\freeboot.bin, using built in core (0xd80 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bin\patches_xenon.bin (0x8f8 bytes)
**** ldv line 3 set to 0f 00 type: 1
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\xell-2f.bin (0x40000 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cb_1940.bin (0x6720 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cd_8453.bin (0x5780 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 75øC Edram: 78øC
Max temps : Cpu: 100øC Gpu: 100øC Edram: 102øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:17:fa:23:2c:7b
AVRegion : 0x00000300 (PAL50)
GameRegion : 0x02fe (PAL/EU)
DVDRegion : 2
resetKey : DAUR
---------------------
Checking for smc config data patches
smc config was not patched
---------------------
done!
------ Encrypting and finalizing bootloaders ------
Fuse CPU Key set to: 0x780194872C37AE1FC1657BE1CEAAF36A
Fuse CF LDV set to : 0xFF000000000000000000000000000000
encoding payload.bin size 0x200 (JTAG)
patching payload.bin to load size 0xd80 (0x360 reps)
encoding smc.bin size 0x3000 (JTAG)
SMC checksum: c69f53a0
unknown SMC found, type: Xenon v1.2(1.51)
jtag hack found in smc.bin!
encoding kv.bin size 0x4000 (JTAG)
decrypted keyvault has been set for reference
encoding cb_1921.bin size 0x9800 (JTAG)
CB 1921 seq 0x0105001b type: 0x01 cseq: 0x05 allow: 0x001b
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0
fuseset 02: 0000F00000000000 (sequence)
fuseset 02: F000000000000000 (allow cseq 1)
fuseset 02: 0F00000000000000 (allow cseq 2)
fuseset 02: 000F000000000000 (allow cseq 4)
fuseset 02: 0000F00000000000 (allow cseq 5)
encoding cd_1921.bin size 0x56c0 (JTAG)
encoding ce_1888.bin size 0x56070 (JTAG)
encoding cf_4532.bin size 0x44c0 (JTAG)
encoding cg_4532.bin size 0x2ef40 (JTAG)
encoding cf_14719.bin size 0x4560 (JTAG)
encoding cg_14719.bin size 0x664b0 (JTAG)
encoding freeboot.bin size 0xd80 (JTAG)
patching freeboot.bin with option mask 0x4 and kernel version string '14719'
Options set:
- console DVD eject button is being used to start xell
- alternate xell button disabled
encoding patches_xenon.bin size 0x8fc (JTAG)
encoding fuses.bin size 0x60 (JTAG)
encoding xell-2f.bin size 0x40000 (JTAG)
encoding cb_1940.bin size 0x6720 (JTAG)
CB 1940 seq 0x01060023 type: 0x01 cseq: 0x06 allow: 0x0023
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0
fuseset 02: 00000F0000000000 (sequence)
fuseset 02: F000000000000000 (allow cseq 1)
fuseset 02: 0F00000000000000 (allow cseq 2)
fuseset 02: 00000F0000000000 (allow cseq 6)
encoding cd_8453.bin size 0x5780 (JTAG)
done!
------ Adding bootloaders to flash image ------
adding payload.bin at raw offset 0x00000200 len 0x200 (end 0x400)
adding smc.bin at raw offset 0x00001000 len 0x3000 (end 0x4000)
adding kv.bin at raw offset 0x00004000 len 0x4000 (end 0x8000)
adding cb_1921.bin at raw offset 0x00008000 len 0x9800 (end 0x11800)
adding cd_1921.bin at raw offset 0x00011800 len 0x56c0 (end 0x16ec0)
adding ce_1888.bin at raw offset 0x00016ec0 len 0x56070 (end 0x6cf30)
adding cf_4532.bin at raw offset 0x00070000 len 0x44c0 (end 0x744c0)
adding cg_4532.bin at raw offset 0x000744c0 len 0x2ef40 (end 0x80000, rest in fs)
adding cf_14719.bin at raw offset 0x00080000 len 0x4560 (end 0x84560)
adding cg_14719.bin at raw offset 0x00084560 len 0x664b0 (end 0x90000, rest in fs)
adding freeboot.bin at raw offset 0x00090000 len 0xd80 (end 0x90d80)
adding patches_xenon.bin at raw offset 0x00091000 len 0x8fc (end 0x918fc)
adding fuses.bin at raw offset 0x00095000 len 0x60 (end 0x95060)
adding xell-2f.bin at raw offset 0x00095060 len 0x40000 (end 0xd5060)
adding cb_1940.bin at raw offset 0x000d5060 len 0x6720 (end 0xdb780)
adding cd_8453.bin at raw offset 0x000db780 len 0x5780 (end 0xe0f00)
Fixing up FS table...done!
Writing zeropair CG patch slot overflow data to sysupdate.xexp1 at raw offset 0xe4000...done!
Writing target CG patch slot overflow data to sysupdate.xexp2 at raw offset 0x107400...done!
------ adding 25 firmware files ------
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\aac.xexp (0x14000 bytes) (crc32: 0x79fa8ef9 ini: 0x79fa8ef9)
adding as aac.xexp2 at raw offset 0x162a10 len 0x00014000 (end 0x00176a10)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bootanim.xex (0x61000 bytes) (crc32: 0x4708ac41 ini: 0x4708ac41)
adding as bootanim.xex at raw offset 0x178000 len 0x00061000 (end 0x001d9000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\createprofile.xex (0xc000 bytes) (crc32: 0x17d7eeef ini: 0x17d7eeef)
adding as createprofile.xex at raw offset 0x1d9000 len 0x0000c000 (end 0x001e5000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\dash.xex (0x63a000 bytes) (crc32: 0xc331818a ini: 0xc331818a)
adding as dash.xex at raw offset 0x1e8000 len 0x0063a000 (end 0x00822000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\deviceselector.xex (0x9000 bytes) (crc32: 0xce0a6ac4 ini: 0xce0a6ac4)
adding as deviceselector.xex at raw offset 0x822000 len 0x00009000 (end 0x0082b000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\gamerprofile.xex (0x1b000 bytes) (crc32: 0x3d6fde71 ini: 0x3d6fde71)
adding as gamerprofile.xex at raw offset 0x82d000 len 0x0001b000 (end 0x00848000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\hud.xex (0x1e000 bytes) (crc32: 0xfb9af532 ini: 0xfb9af532)
adding as hud.xex at raw offset 0x84b000 len 0x0001e000 (end 0x00869000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\huduiskin.xex (0x13000 bytes) (crc32: 0x59c8f99e ini: 0x59c8f99e)
adding as huduiskin.xex at raw offset 0x86a000 len 0x00013000 (end 0x0087d000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0x30028379 ini: 0x30028379)
adding as mfgbootlauncher.xex at raw offset 0x87f000 len 0x00008000 (end 0x00887000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\minimediaplayer.xex (0xc000 bytes) (crc32: 0xea50ae99 ini: 0xea50ae99)
adding as minimediaplayer.xex at raw offset 0x888000 len 0x0000c000 (end 0x00894000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\nomni.xexp (0xc800 bytes) (crc32: 0xd1e81135 ini: 0xd1e81135)
adding as nomni.xexp2 at raw offset 0x894000 len 0x0000c800 (end 0x008a0800)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\nomnifwk.xexp (0x2000 bytes) (crc32: 0x6311da91 ini: 0x6311da91)
adding as nomnifwk.xexp2 at raw offset 0x8a0800 len 0x00002000 (end 0x008a2800)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\nomnifwm.xexp (0x5000 bytes) (crc32: 0x03b32644 ini: 0x03b32644)
adding as nomnifwm.xexp2 at raw offset 0x8a6000 len 0x00005000 (end 0x008ab000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\SegoeXbox-Light.xtt (0x6000 bytes) (crc32: 0x086eb344 ini: 0x086eb344)
adding as SegoeXbox-Light.xtt at raw offset 0x8ad000 len 0x00006000 (end 0x008b3000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\signin.xex (0x16000 bytes) (crc32: 0x09f66fc4 ini: 0x09f66fc4)
adding as signin.xex at raw offset 0x8b6000 len 0x00016000 (end 0x008cc000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\updater.xex (0x7000 bytes) (crc32: 0x9dc378a8 ini: 0x9dc378a8)
adding as updater.xex at raw offset 0x8ce000 len 0x00007000 (end 0x008d5000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\vk.xex (0x9000 bytes) (crc32: 0x8ad4198e ini: 0x8ad4198e)
adding as vk.xex at raw offset 0x8d7000 len 0x00009000 (end 0x008e0000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xam.xex (0x236000 bytes) (crc32: 0xc1ee0989 ini: 0xc1ee0989)
adding as xam.xex at raw offset 0x8e1000 len 0x00236000 (end 0x00b17000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
adding as xenonclatin.xtt at raw offset 0xb1a000 len 0x0011b000 (end 0x00c35000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
adding as xenonclatin.xttp2 at raw offset 0xc37000 len 0x00018000 (end 0x00c4f000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
adding as xenonjklatin.xtt at raw offset 0xc50000 len 0x001a8000 (end 0x00df8000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonjklatin.xttp (0x7000 bytes) (crc32: 0x945b7092 ini: 0x945b7092)
adding as xenonjklatin.xttp2 at raw offset 0xdf8000 len 0x00007000 (end 0x00dff000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ximecore.xex (0x15000 bytes) (crc32: 0x709614d6 ini: 0x709614d6)
adding as ximecore.xex at raw offset 0xdff000 len 0x00015000 (end 0x00e14000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
adding as ximedic.xex at raw offset 0xe15000 len 0x00090000 (end 0x00ea5000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ximedic.xexp (0x2800 bytes) (crc32: 0xa1284e82 ini: 0xa1284e82)
adding as ximedic.xexp2 at raw offset 0xea8000 len 0x00002800 (end 0x00eaa800)
------ adding 4 security files ------
<- Processing crl.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\crl.bin (0xa00 bytes)
crl appears crypted, attempting to decrypt with CPU key...failed! Trying alternate key...success!
adding as crl.bin at raw offset 0xeac000 len 0x00000a00 (end 0x00eaca00)
<- Processing dae.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\dae.bin (0xad30 bytes)
dae appears encrypted, attempting to decrypt with CPU key...failed! Attempting to decrypt with alternate key...
success!
adding as dae.bin at raw offset 0xeb0000 len 0x0000ad30 (end 0x00ebad30)
<- Processing extended.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\extended.bin (0x4000 bytes)
adding as extended.bin at raw offset 0xebc000 len 0x00004000 (end 0x00ec0000)
<- Processing secdata.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\secdata.bin (0x400 bytes)
adding as secdata.bin at raw offset 0xec0000 len 0x00000400 (end 0x00ec0400)
------ checking for Mobile*.dat ------
MobileB.dat found, adding from nanddump.bin
adding MobileB.dat as type 0x31 at raw offset 0xec4000 len 0x800 (end 0xec4800)
------ adding smc_config.bin ------
adding smc config to offset 0x00f7c000, len 0x400
------ finalizing image ------
Fixing up empty FS block entries...done!
Writing FS table to image...done!
calculating ECD bytes and assembling raw image...done!
remapping 2 blocks
copying 0x4200 bytes of LBA 0x1ed to block 0x3ff...zero fill origin...done!
copying 0x4200 bytes of LBA 0x20b to block 0x20c...zero fill origin...done!
done!
writing file 'C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin' to disk...done!
C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin written OK
---------------------------------------------------------------
C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin image built, info:
---------------------------------------------------------------
Console : Xenon
NAND size: 16MiB
Build : JTAG
Xell : power on console with console eject button
CPU Key : 780194872C37AE1FC1657BE1CEAAF36A
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 6B0A20F41C6E040FF58E08B8871C962E
CF LDV : 2
KV type : type2 (hashed)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
(Awesome Tool BTW)
Anyway Everything Went Fine With Image Creating Etc,
I Flashed The Nand Using Rawflash In Xell But When I Power On my Xbox It Just Freezes @ The Xbox Logo Sign..! Still Boots Xell Too..!
Ill Attach My Log So You Guys Can Look I Know I Had 2 Bad Blocks But These Were Dealt With By Rawflash But Had This Issue..!
---------------------------------------------------------------
xeBuild v1.01.421
---------------------------------------------------------------
building jtag image
data directory overridden from command line to 'xeBuild\14719'
per build directory overridden from command line to 'xeBuild\data'
file name overridden from command line to 'C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin'
------ parsing user ini at '.\xeBuild\data\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x14f bytes in memory
loading cpukey.txt from C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\cpukey.txt
CPU Key set to: 0x780194872C37AE1FC1657BE1CEAAF36A
setting 1blkey from ini: 0xDD88AD0C9ED669E7B56794FB68563EFA
1BL Key set to: 0xDD88AD0C9ED669E7B56794FB68563EFA sum: 0x983 (expects: 0x983)
xex Key set to: 0x20B185A59D28FDC340583FBB0896BF91 sum: 0x800 (expects: 0x800)
------ parsing ini at '.\xeBuild\14719\_jtag.ini' ------
ini version 14719
ini: label [xenonbl] found
found (1) 'cb_1921.bin' crc: 0x14cec7b4
found (2) 'cd_1921.bin' crc: 0xb907093a
found (3) 'ce_1888.bin' crc: 0xff9b60df
found (4) 'cf_4532.bin' crc: 0xd28ef722
found (5) 'cg_4532.bin' crc: 0x2530f8ce
found (6) 'cb_1940.bin' crc: 0x62b7b19c
found (7) 'cd_8453.bin' crc: 0x25e0acd0
found (8) 'cf_14719.bin' crc: 0x31764aae
found (9) 'cg_14719.bin' crc: 0x2b990f2a
ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x79fa8ef9
found (2) 'bootanim.xex' crc: 0x4708ac41
found (3) 'createprofile.xex' crc: 0x17d7eeef
found (4) 'dash.xex' crc: 0xc331818a
found (5) 'deviceselector.xex' crc: 0xce0a6ac4
found (6) 'gamerprofile.xex' crc: 0x3d6fde71
found (7) 'hud.xex' crc: 0xfb9af532
found (8) 'huduiskin.xex' crc: 0x59c8f99e
found (9) 'mfgbootlauncher.xex' crc: 0x30028379
found (10) 'minimediaplayer.xex' crc: 0xea50ae99
found (11) 'nomni.xexp' crc: 0xd1e81135
found (12) 'nomnifwk.xexp' crc: 0x6311da91
found (13) 'nomnifwm.xexp' crc: 0x03b32644
found (14) 'SegoeXbox-Light.xtt' crc: 0x086eb344
found (15) 'signin.xex' crc: 0x09f66fc4
found (16) 'updater.xex' crc: 0x9dc378a8
found (17) 'vk.xex' crc: 0x8ad4198e
found (18) 'xam.xex' crc: 0xc1ee0989
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0x945b7092
found (23) 'ximecore.xex' crc: 0x709614d6
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0xa1284e82
ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------
output name overridden to: C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin
------ Checking C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\nanddump.bin ------
Loading NAND dump (0x23ee70 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a small block machine
NAND dump uses small block controller
parsing dump into user and spare...
bad block at 0x1ed (raw offset 0x7f1a00), block ignored
bad block at 0x20b (raw offset 0x86d600), block ignored
block 0x20b was remapped to block 0x20c at remap instance 1
block 0x1ed was remapped to block 0x3ff at remap instance 0
done!
cleaning up stray remaps
done!
--remap summary--
0: source: 0x01ed dest: 0x03ff
1: source: 0x020b dest: 0x020c
-----------------
KeyVault cannot be 0x0 bytes, using 0x4000
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xf7c000! Using if no smc config is provided.
CF slot 1 decrypted ok LDV 0x02 Pairing: 0xc6748a
setting LDV from image to 2
setting pairing data from image to 0xc6748a
MobileB.dat found at page 0x7160, size 2048 (0x800) bytes
seeking security files...fsroot found at page 0x7180 raw offset 0xea1800
crl.bin found in sector 0x385 size 0x9e0...verified! Will use if external file not found.
dae.bin found in sector 0x386 size 0xad30...verified! Will use if external file not found.
extended.bin found in sector 0x389 size 0x4000...verified! Will use if external file not found.
secdata.bin found in sector 0x38a size 0x400...verified! Will use if external file not found.
Writing initial header to flash image
------ Loading bootloaders and required security files ------
could not read C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bin\payload.bin, using built in payload (0x200 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\smc.bin (0x3000 bytes)
reset smc load address to 0x1000 size 0x3000
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\kv.bin failed, using kv.bin from nand dump
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cb_1921.bin (0x9800 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cd_1921.bin (0x56c0 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ce_1888.bin (0x5606a b pad 0x56070 b)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cf_4532.bin (0x44c0 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cg_4532.bin (0x2ef40 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cf_14719.bin (0x4560 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cg_14719.bin (0x664aa b pad 0x664b0 b)
could not read C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bin\freeboot.bin, using built in core (0xd80 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bin\patches_xenon.bin (0x8f8 bytes)
**** ldv line 3 set to 0f 00 type: 1
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\xell-2f.bin (0x40000 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cb_1940.bin (0x6720 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\cd_8453.bin (0x5780 bytes)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 75øC Edram: 78øC
Max temps : Cpu: 100øC Gpu: 100øC Edram: 102øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:17:fa:23:2c:7b
AVRegion : 0x00000300 (PAL50)
GameRegion : 0x02fe (PAL/EU)
DVDRegion : 2
resetKey : DAUR
---------------------
Checking for smc config data patches
smc config was not patched
---------------------
done!
------ Encrypting and finalizing bootloaders ------
Fuse CPU Key set to: 0x780194872C37AE1FC1657BE1CEAAF36A
Fuse CF LDV set to : 0xFF000000000000000000000000000000
encoding payload.bin size 0x200 (JTAG)
patching payload.bin to load size 0xd80 (0x360 reps)
encoding smc.bin size 0x3000 (JTAG)
SMC checksum: c69f53a0
unknown SMC found, type: Xenon v1.2(1.51)
jtag hack found in smc.bin!
encoding kv.bin size 0x4000 (JTAG)
decrypted keyvault has been set for reference
encoding cb_1921.bin size 0x9800 (JTAG)
CB 1921 seq 0x0105001b type: 0x01 cseq: 0x05 allow: 0x001b
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0
fuseset 02: 0000F00000000000 (sequence)
fuseset 02: F000000000000000 (allow cseq 1)
fuseset 02: 0F00000000000000 (allow cseq 2)
fuseset 02: 000F000000000000 (allow cseq 4)
fuseset 02: 0000F00000000000 (allow cseq 5)
encoding cd_1921.bin size 0x56c0 (JTAG)
encoding ce_1888.bin size 0x56070 (JTAG)
encoding cf_4532.bin size 0x44c0 (JTAG)
encoding cg_4532.bin size 0x2ef40 (JTAG)
encoding cf_14719.bin size 0x4560 (JTAG)
encoding cg_14719.bin size 0x664b0 (JTAG)
encoding freeboot.bin size 0xd80 (JTAG)
patching freeboot.bin with option mask 0x4 and kernel version string '14719'
Options set:
- console DVD eject button is being used to start xell
- alternate xell button disabled
encoding patches_xenon.bin size 0x8fc (JTAG)
encoding fuses.bin size 0x60 (JTAG)
encoding xell-2f.bin size 0x40000 (JTAG)
encoding cb_1940.bin size 0x6720 (JTAG)
CB 1940 seq 0x01060023 type: 0x01 cseq: 0x06 allow: 0x0023
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0
fuseset 02: 00000F0000000000 (sequence)
fuseset 02: F000000000000000 (allow cseq 1)
fuseset 02: 0F00000000000000 (allow cseq 2)
fuseset 02: 00000F0000000000 (allow cseq 6)
encoding cd_8453.bin size 0x5780 (JTAG)
done!
------ Adding bootloaders to flash image ------
adding payload.bin at raw offset 0x00000200 len 0x200 (end 0x400)
adding smc.bin at raw offset 0x00001000 len 0x3000 (end 0x4000)
adding kv.bin at raw offset 0x00004000 len 0x4000 (end 0x8000)
adding cb_1921.bin at raw offset 0x00008000 len 0x9800 (end 0x11800)
adding cd_1921.bin at raw offset 0x00011800 len 0x56c0 (end 0x16ec0)
adding ce_1888.bin at raw offset 0x00016ec0 len 0x56070 (end 0x6cf30)
adding cf_4532.bin at raw offset 0x00070000 len 0x44c0 (end 0x744c0)
adding cg_4532.bin at raw offset 0x000744c0 len 0x2ef40 (end 0x80000, rest in fs)
adding cf_14719.bin at raw offset 0x00080000 len 0x4560 (end 0x84560)
adding cg_14719.bin at raw offset 0x00084560 len 0x664b0 (end 0x90000, rest in fs)
adding freeboot.bin at raw offset 0x00090000 len 0xd80 (end 0x90d80)
adding patches_xenon.bin at raw offset 0x00091000 len 0x8fc (end 0x918fc)
adding fuses.bin at raw offset 0x00095000 len 0x60 (end 0x95060)
adding xell-2f.bin at raw offset 0x00095060 len 0x40000 (end 0xd5060)
adding cb_1940.bin at raw offset 0x000d5060 len 0x6720 (end 0xdb780)
adding cd_8453.bin at raw offset 0x000db780 len 0x5780 (end 0xe0f00)
Fixing up FS table...done!
Writing zeropair CG patch slot overflow data to sysupdate.xexp1 at raw offset 0xe4000...done!
Writing target CG patch slot overflow data to sysupdate.xexp2 at raw offset 0x107400...done!
------ adding 25 firmware files ------
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\aac.xexp (0x14000 bytes) (crc32: 0x79fa8ef9 ini: 0x79fa8ef9)
adding as aac.xexp2 at raw offset 0x162a10 len 0x00014000 (end 0x00176a10)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\bootanim.xex (0x61000 bytes) (crc32: 0x4708ac41 ini: 0x4708ac41)
adding as bootanim.xex at raw offset 0x178000 len 0x00061000 (end 0x001d9000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\createprofile.xex (0xc000 bytes) (crc32: 0x17d7eeef ini: 0x17d7eeef)
adding as createprofile.xex at raw offset 0x1d9000 len 0x0000c000 (end 0x001e5000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\dash.xex (0x63a000 bytes) (crc32: 0xc331818a ini: 0xc331818a)
adding as dash.xex at raw offset 0x1e8000 len 0x0063a000 (end 0x00822000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\deviceselector.xex (0x9000 bytes) (crc32: 0xce0a6ac4 ini: 0xce0a6ac4)
adding as deviceselector.xex at raw offset 0x822000 len 0x00009000 (end 0x0082b000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\gamerprofile.xex (0x1b000 bytes) (crc32: 0x3d6fde71 ini: 0x3d6fde71)
adding as gamerprofile.xex at raw offset 0x82d000 len 0x0001b000 (end 0x00848000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\hud.xex (0x1e000 bytes) (crc32: 0xfb9af532 ini: 0xfb9af532)
adding as hud.xex at raw offset 0x84b000 len 0x0001e000 (end 0x00869000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\huduiskin.xex (0x13000 bytes) (crc32: 0x59c8f99e ini: 0x59c8f99e)
adding as huduiskin.xex at raw offset 0x86a000 len 0x00013000 (end 0x0087d000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0x30028379 ini: 0x30028379)
adding as mfgbootlauncher.xex at raw offset 0x87f000 len 0x00008000 (end 0x00887000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\minimediaplayer.xex (0xc000 bytes) (crc32: 0xea50ae99 ini: 0xea50ae99)
adding as minimediaplayer.xex at raw offset 0x888000 len 0x0000c000 (end 0x00894000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\nomni.xexp (0xc800 bytes) (crc32: 0xd1e81135 ini: 0xd1e81135)
adding as nomni.xexp2 at raw offset 0x894000 len 0x0000c800 (end 0x008a0800)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\nomnifwk.xexp (0x2000 bytes) (crc32: 0x6311da91 ini: 0x6311da91)
adding as nomnifwk.xexp2 at raw offset 0x8a0800 len 0x00002000 (end 0x008a2800)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\nomnifwm.xexp (0x5000 bytes) (crc32: 0x03b32644 ini: 0x03b32644)
adding as nomnifwm.xexp2 at raw offset 0x8a6000 len 0x00005000 (end 0x008ab000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\SegoeXbox-Light.xtt (0x6000 bytes) (crc32: 0x086eb344 ini: 0x086eb344)
adding as SegoeXbox-Light.xtt at raw offset 0x8ad000 len 0x00006000 (end 0x008b3000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\signin.xex (0x16000 bytes) (crc32: 0x09f66fc4 ini: 0x09f66fc4)
adding as signin.xex at raw offset 0x8b6000 len 0x00016000 (end 0x008cc000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\updater.xex (0x7000 bytes) (crc32: 0x9dc378a8 ini: 0x9dc378a8)
adding as updater.xex at raw offset 0x8ce000 len 0x00007000 (end 0x008d5000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\vk.xex (0x9000 bytes) (crc32: 0x8ad4198e ini: 0x8ad4198e)
adding as vk.xex at raw offset 0x8d7000 len 0x00009000 (end 0x008e0000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xam.xex (0x236000 bytes) (crc32: 0xc1ee0989 ini: 0xc1ee0989)
adding as xam.xex at raw offset 0x8e1000 len 0x00236000 (end 0x00b17000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
adding as xenonclatin.xtt at raw offset 0xb1a000 len 0x0011b000 (end 0x00c35000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
adding as xenonclatin.xttp2 at raw offset 0xc37000 len 0x00018000 (end 0x00c4f000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
adding as xenonjklatin.xtt at raw offset 0xc50000 len 0x001a8000 (end 0x00df8000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\xenonjklatin.xttp (0x7000 bytes) (crc32: 0x945b7092 ini: 0x945b7092)
adding as xenonjklatin.xttp2 at raw offset 0xdf8000 len 0x00007000 (end 0x00dff000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ximecore.xex (0x15000 bytes) (crc32: 0x709614d6 ini: 0x709614d6)
adding as ximecore.xex at raw offset 0xdff000 len 0x00015000 (end 0x00e14000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
adding as ximedic.xex at raw offset 0xe15000 len 0x00090000 (end 0x00ea5000)
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\14719\ximedic.xexp (0x2800 bytes) (crc32: 0xa1284e82 ini: 0xa1284e82)
adding as ximedic.xexp2 at raw offset 0xea8000 len 0x00002800 (end 0x00eaa800)
------ adding 4 security files ------
<- Processing crl.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\crl.bin (0xa00 bytes)
crl appears crypted, attempting to decrypt with CPU key...failed! Trying alternate key...success!
adding as crl.bin at raw offset 0xeac000 len 0x00000a00 (end 0x00eaca00)
<- Processing dae.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\dae.bin (0xad30 bytes)
dae appears encrypted, attempting to decrypt with CPU key...failed! Attempting to decrypt with alternate key...
success!
adding as dae.bin at raw offset 0xeb0000 len 0x0000ad30 (end 0x00ebad30)
<- Processing extended.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\extended.bin (0x4000 bytes)
adding as extended.bin at raw offset 0xebc000 len 0x00004000 (end 0x00ec0000)
<- Processing secdata.bin ->
reading C:\Users\Rob\Desktop\J-Runner\xeBuild\.\xeBuild\data\secdata.bin (0x400 bytes)
adding as secdata.bin at raw offset 0xec0000 len 0x00000400 (end 0x00ec0400)
------ checking for Mobile*.dat ------
MobileB.dat found, adding from nanddump.bin
adding MobileB.dat as type 0x31 at raw offset 0xec4000 len 0x800 (end 0xec4800)
------ adding smc_config.bin ------
adding smc config to offset 0x00f7c000, len 0x400
------ finalizing image ------
Fixing up empty FS block entries...done!
Writing FS table to image...done!
calculating ECD bytes and assembling raw image...done!
remapping 2 blocks
copying 0x4200 bytes of LBA 0x1ed to block 0x3ff...zero fill origin...done!
copying 0x4200 bytes of LBA 0x20b to block 0x20c...zero fill origin...done!
done!
writing file 'C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin' to disk...done!
C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin written OK
---------------------------------------------------------------
C:\Users\Rob\Desktop\J-Runner\529593260505\nandflash.bin image built, info:
---------------------------------------------------------------
Console : Xenon
NAND size: 16MiB
Build : JTAG
Xell : power on console with console eject button
CPU Key : 780194872C37AE1FC1657BE1CEAAF36A
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key : 6B0A20F41C6E040FF58E08B8871C962E
CF LDV : 2
KV type : type2 (hashed)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------
