JeEnYuS
Gee! and why us?
Alternate Title; How to Build a bootable hacked nand image from scratch.
This is a "ONE SIZE FIT ALL" solution.
This tutorial is only for those of you who; lost all of their original and hacked nand dumps + erased/corrupted the nand /flash the wrong image to the nand.
If you find yourself in this situation then this tutorial will walk you step by step to make your hacked console boot again.
Take note that since you lost all your nand dumps, you won't be able to restore your console to retail ever again and you will be unable to use your dvd drive until you extract it's key.
This is a "ONE SIZE FIT ALL" solution.
This tutorial is only for those of you who; lost all of their original and hacked nand dumps + erased/corrupted the nand /flash the wrong image to the nand.
If you find yourself in this situation then this tutorial will walk you step by step to make your hacked console boot again.
Take note that since you lost all your nand dumps, you won't be able to restore your console to retail ever again and you will be unable to use your dvd drive until you extract it's key.
Before getting started you will need the following;
- USB SPI Nand programmer/eMMC R/W kit (nand-x, jr-programmer, R/W kit for carona 4gb)
- J-Runner the ultimate JTAG/RGH app DOWNLOAD
- Extracted nand files that match you motherboard model (download below)
Step 1; Recovery of cpu key
- Download one of the clean extracted .bin pack according to your motherboard model and extract the containing folder to the location of your choice;
Don't use these files to unban your jtag/rgh, first you don't have the original cpu key and second they are all coming from banned consoles. You have been warned!
XENON
ZEPHYR
OPUS/FALCON
JASPER SB
JASPER BB
TRINITY
TRINITY No FCRT
CORONA
CORONA 4gb
- Open J-Runner app an click on "show working folder" button located at the bottom right
- Open the folder name "data" located inside /J-Runner/xeBuild/ folders
- Open your extracted nand files folder and copy and paste KV.bin, SMC.bin, smc_config.bin and fcrt.bin(if required) to data folder. It should look like this.
- In J-Runner, copy and paste this cpu key F37C0CD50B928F4E67614ACD548A4E49 in the cpu key section.
- Choose dashboard version according your hack type (for JTAG choose 7371 - for phat rgh1 choose 14699 - for R-JTAG choose 15574 - for phat RGH2 choose 14719 - for slim choose anything above 14719)
- Select your motherboard nand type.
- Select retail as your image type.
- It should look like this.
- In J-Runner under the Advanced tab click on Create an image without nanddump.bin
- Then you will be ask to enter LDV just enter any number between 1 and 80 and click ok.
- At this point the dummy image should be successfully created and automatically loaded in the "Load Source" section.
- Now with your nand programmer properly connected to both you pc and motherboard click on "Write Nand".
- Wait until J-Runner is finish writing the nand and select your "hack type" then click on "Create ECC" for rgh machine or "Create Xell-Reloaded" for JTAG/R-JTAG machine.
- Now click on "Write ECC" or "Write Xell-Reloaded" depending on your hack type.
- You are now ready to boot xell and recover your cpu key.
- Disconnect the nand wires from the nand programmer and Power on your console and wait for xell to boot.
- Once xell has booted, write down your cpu key, fuseset 02 and fuseset 07, 08, 09, 10 and 11
Last edited: