How to Remap/Unmap your nand image from bad blocks

Discussion in 'Modding Tutorials' started by lil BLu3 SMuRF, Aug 1, 2010.

    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



    First off, I would like to thank etownlax for teaching me how to remap blocks and then unmap them :)


    NOTE: IF YOU READ YOUR NAND WITH iHc NAND TOOL, YOU WILL NOT KNOW YOU HAD BAD BLOCKS, SO MAKE SURE YOU KNOW YOU HAD BAD BLOCKS.

    If your one of those people with a jtag and when you read the nand, no matter how many times you do it, and you get a 25x reading block error? This is a tutorial on how to fix this!!!

    Just to let you know, it is not your soldering, it is a block in the nand that is zero'd out, so it is completely normal, its just how your nand image is made.

    Quote from Team Xecuter:


    So now that you understand it, lets get started!

    Download all the files listed below and place them all on the desktop, make a new folder for nandpro and name it "nandpro20e", and place all the nandpro files in it.

    [IMG]

    For the sake of this tutorial, rename your original nand to original.bin and place it in the nandpro20e folder on the desktop :)


    BTW: If you have a bad block or blocks between 000-050, scroll all the way down to Flashing XeLL.

    Requirements:

    NandPro20e: http://www.megaupload.com/?d=PE1E1ZVY
    original nand
    freeBOOT Toolbox Maker 2.4: http://www.bestpig.f...Box_Maker24.exe
    Degraded 1.1: http://www.megaupload.com/?d=NSNR8CJL
    Your XeLL image: Get it off of xbins
    A brain with common sense

    Your CPU Key

    1. Open your original nand image in degraded 1.1
    (if it says Couldn't open file, you need to open your nand in HxD and change the date from 2004-2007 to 2004-2005)

    2. Look at the notes. Since I have bad blocks at 049 and 14D, mine says:


    [IMG]


    Code:
    Note: Bad Block @ 0x49
    Note: Bad Block @ 0x14D
    Note: Block 0x14D found at 0x3FE
    Note: Block 0x49 found at 0x3FF
    
    Yours will say whatever bad blocks you have. So now you know where your bad blocks are located, my bad block 049 is at 3FF and the other bad block 14D is at 3FE.

    3. Now you have to remap the blocks.
    -Open up CMD by pressing the start button and typing in "cmd" on windows vista/7.
    -For XP, hit Start>run and type cmd and open.

    -Type in the following commands:
    Code:
    cd desktop
    cd nandpro20e
    nandpro original.bin: -r16 NAME OF BAD BLOCK.bin WHERE THE BLOCK WAS FOUND 1
    nandpro original.bin: -r16 NAME OF BAD BLOCK.bin WHERE THE BLOCK WAS FOUND 1
    
    So mine would be:
    Code:
    nandpro original.bin: -r16 049.bin 3FF 1
    nandpro original.bin: -r16 14D.bin 3FE 1
    

    [IMG]


    4. Now to write the blocks back to the nand but in the right place:

    -Type the following commands:
    Code:
    nandpro original.bin: -w16 NAME OF BAD BLOCK WE JUST SAVED.bin NAME OF BAD BLOCK WE JUST SAVED 1
    nandpro original.bin: -w16 NAME OF BAD BLOCK WE JUST SAVED.bin NAME OF BAD BLOCK WE JUST SAVED 1
    
    So mine would be:
    Code:
    nandpro original.bin: -w16 049.bin 049 1
    nandpro original.bin: -w16 14D.bin 14D 1

    [IMG]


    See? Thats why we named the .bin we read earlier the same as its supposed to be at. :p

    5. Now to Create your freeBOOT image
    So now you have your real original image, this is the image that has no bad blocks at all

    -open your bad block free image in HxD and change the date back to its original (2007 back to 2005) if you had trouble opening it up in degraded
    -Open freeBOOT Toolbox Maker and create you freeBOOT image. You should get no problems at all, if you do, you must have read/wrote the blocks wrong


    [IMG]


    6. Unmapping the blocks
    Now, we have to read your bad blocks again because you get a 202 programming error when you write the blocks back to the xbox.

    -Now go into your nandpro20e folder on your desktop and delete your blocks .bin's you read earlier

    [IMG]

    -go back to CMD and type these commands:
    Code:
    nandpro freeBOOT.bin: -r16 NAME OF WHERE THE BAD BLOCK WAS FOUND.bin BAD BLOCK 1
    nandpro freeBOOT.bin: -r16 NAME OF WHERE THE BAD BLOCK WAS FOUND.bin BAD BLOCK 1

    So mine would be:
    Code:
    nandpro freeBOOT.bin: -r16 3FF.bin 049 1
    nandpro freeBOOT.bin: -r16 3FE.bin 14D 1
    



    [IMG]


    7. Now re-writing the blocks

    -Type these commands:
    Code:
    nandpro freeBOOT.bin: -w16 NAME OF THE BLOCK WE JUST SAVED.bin NAME OF THE BLOCK WE JUST SAVED 1
    nandpro freeBOOT.bin: -w16 NAME OF THE BLOCK WE JUST SAVED.bin NAME OF THE BLOCK WE JUST SAVED 1
    


    So mine would be:
    Code:
    nandpro freeBOOT.bin: -w16 3FF.bin 3FF 1
    nandpro freeBOOT.bin: -w16 3FE.bin 3FE 1
    



    [IMG]


    -You can choose anyway you wanna write the nand
    (CMD, Jtag tool, iHc Nand tool, ect.)

    9. DONE! You have just remapped and Unmapped your nand image!


    Flashing XeLL to a image with bad blocks between 000-050

    So, like me, i had a bad block in between 000-050, i had 049.

    XeLL uses these blocks and and if you have a bad block, you can;t flash XeLL without corrupting it. So we must re-map it!

    1. Read your block from XeLL

    -Put your XeLL image in your nandpro20e folder and name the file "XeLL.bin"
    -Open CMD and type the following in:
    Code:
    cd desktop
    cd nandpro20e
    nandpro XeLL.bin: -r16 3FF.bin YOUR BAD BLOCK 1
    




    So mine would be:
    Code:
    nandpro XeLL.bin: -r16 3FF.bin 049 1



    2. Write XeLL to the Xbox
    Type the following Commands in:
    Code:
    nandpro USB/LPT: -w16 XeLL.bin
    

    3. Write the Bad Block nand in

    Type the following command in:
    Code:
    nandpro USB: -w16 3FF.bin 3FF 1
    

    4. CONGRATz! You just wrote Xell to your xbox!
    -now get your CPU key and go back to the start of this tutorial!
    Thanks to me for writing this and explaining the tut, etownlax for teaching me
    8 people like this.
  1. etownlax Elite Member

    Message Count:
    1,853
    Likes Received:
    188
    Very nice. Very detailed and well thought out. Glad you understand it and it wasn't just "oh I hit this button to unmap, and I hit this button to make freeboot, and I hit this button to remap.. all done"..hahah(which is nice, no doubt, but then you don't actually understand it.
    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



    yea, and did u notice the part in the beginning with thanks to etownlax for teaching me this lol
  2. etownlax Elite Member

    Message Count:
    1,853
    Likes Received:
    188
    haha, yes, thanks.
  3. halolordkiller3 Elite Member

    Message Count:
    2,487
    Likes Received:
    601
    thanks a ton actually. iv never seen those errors b4 on the jtags i have done and iv done like 20 different ones, guess i just got lucky but yeah thanks a ton
  4. TimeBomB Newbie

    Message Count:
    117
    Likes Received:
    6
    i have 155 and 156, does it work? im gonna try it anyway
    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



    open the image in degraded and see where the blocks are located and follow the tut
    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



    Updated, added pictures
    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



  5. psychoTRINI Newbie

    Message Count:
    115
    Likes Received:
    6
    hi i'm getting a error when attempting to use freeboot toolbox

    "The kv.bin was not decrypted properly. The CPU key does not match the dump."

    i've checked and check the key i have written down is correct..
  6. G3rmanSnIpa Newbie

    Message Count:
    227
    Likes Received:
    16
    OMG !!! i finaly flashed freeboot to my nand wohuu <3 thank you soooo much :*
    btw i used a xbr dump and it worked very well :)
    u saved my day :) <3
  7. psychoTRINI Newbie

    Message Count:
    115
    Likes Received:
    6
    nope no go.. followed to the T only exception was using iHc Nand tool to make the freeboot img.. keep getting error: 202 programming block 170...

    even tried writing the block directly to the nand and still got an error...
    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



    ur going to get an error NO MATTER WHAT. thats why you follow the tut to counter-act it

    just make an XBR image instead and make freeboot out of that, and dont mistake 0's for O's or 8's

    thats why im here to help :)
  8. gomson Newbie

    Message Count:
    4
    Likes Received:
    0
    Thanks for the tutorial, will this work with a Falcon or Jasper..
    I mean, do I still need to do the AUD_CLAMP thing for the Falcon...?
    • Premium

    Rally Science is the true theology.

    Message Count:
    7,074
    Likes Received:
    2,695




    nice tut man! :p
  9. Iwannaplay Newbie

    Message Count:
    64
    Likes Received:
    1
    I cannot open my NAND in degraded (bad file lenth?) but i managed to jtag a xenon with the same problem (Not able to open NAND)
    Without any hastle

    But now im trying a zephyr and I cannot write xell to the NAND? It stops at 04F everytime, What should I do?
    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



    open in HxD and change it to 2005.

    remap
    • Premium

    lil BLu3 SMuRF www.norml.org/

    Message Count:
    5,043
    Likes Received:
    671



  10. niccador Newbie

    Message Count:
    2
    Likes Received:
    0
    I have a Zephyr JTAG system with some serious issues, due to what I believe is a bad flash, but do NOT have the original nand dump available.

    I have used Flash360 to dump the current nand (several times to ensure a match), rewrite the current nand over itself (to potentially expose any unmarked bad blocks), re-dump the current nand (again, several times to ensure a good dump)....and all over again a third time.
    I've compared all these dumps against each other to confirm what I believe are bad blocks (hopefully the only ones):

    3C0
    3C1
    3DE

    These three blocks have consistently mismatched data between rewrites/dumps.

    Degraded and Xellous do not identify any bad or reassigned blocks.

    I have extracted my KV from these dumps, and re-injected it into a prebuilt Zephyr Freeboot image. I then used nandpro to read and remap the above blocks to 3FF, 3FE, and 3FD, in that order.

    However, neither Degraded nor Xellous recognize that any remapping has occurred...it would appears as though the above blocks are not physically marked as being bad and reassigned.

    Is there any way I can correct this?