Ir a contenido


No te pierdas nada a la vez que nos apoyas desde las redes sociales.

Últimos comentarios

Información del archivo

  • Añadido el: Dec 24 2011 13:09
  • Actualizado el: Jun 18 2012 18:41
  • Tamaño: 280.96K
  • Visitas: 4367
  • Descargas: 954

Descargar XNand Healer GUI 2.0

XNandHealer GUI v2.0 by Tingedace

New in 2.0

- Complete re-write of the front end in WPF for richer UI experience
- Background analysis of NANDs (no pop-up windows) allows you to keep working uninterrupted
- Keeps history of recent working folders in a drop-down for easy switching
- Support for latest Multibuilder 0.94 and RGH2
  NOTE: Multibuilder cannot be installed under "C:\Program Files". It needs to be installed
        somewhere else e.g. "C:\Nandpro" to allow write access by XNandhealer.

Many thanks to Tiros, Gligli, Team Xecuter, boby2pc for creating the underlying programs.
Thanks also to Rogero for making such a great and robust xeBuild app.


1. Copy XNandHealer.exe to a folder of choice e.g. C:\Nandpro

2. Requires .Net Framework 4.0

3. Requires Nandpro + associated drivers (not tested with nandpro 3.0)

4. Extract MultiBuilder to a folder of choice e.g. C:\Nandpro\MultiBuilder
   Download from: http://www.mediafire...jvuz0jg9byfbj54

   NOTE1: Multibuilder cannot be installed under "C:\Program Files". It needs to be installed
          somewhere else e.g. "C:\Nandpro" to allow write access by XNandhealer.
   NOTE2: Multi builder (run.exe) is not used/invoked by XNH. It is required as a convenient
          package containing all files necessary to run xeBuild.

5. (Optional) Requires FindSecData 0.62 by boby2pc for Uncrippling

Initial setup

1. Run XNandHealer GUI.
2. Under Settings, confirm the locations of Nandpro.exe, python.exe & xeBuild.exe
   (both in ~MultiBuilder\Data\ folder) and optionally FindSecData.exe
3. On the Read/Compare Tab, Select the Working folder. This is where NAND images, logs and fuses.txt will go

Instructions for correct NAND dumping

1. Select the desired interface (LPT or USB) and click Detect
2. Under the Read Tab: Click "Read Selected...", choose which "read slots" you want and
   click OK to begin. For big block Jaspers, you should only read the first 64MB rather
   than the full image. You can use the default filenames or rename them first.
3. Once all reads are complete, Observe the integrity icon against each dumped image.
   GREEN TICK = Good dump, no errors or remapped blocks
   EXCLAMATION = Good dump, but contains bad blocks. Only attempt to fix if you're not getting exact matching dumps.
   RED CROSS = Contains ECC error blocks i.e. read errors. Click "Fix Selected..." to re-dump the offending blocks.
4. Select and fix image if there are any errors

Instructions for Glitch Hack (once glitching hardware is installed)

1. Connect NAND programmer and dump the NAND as per NAND dumping instructions
2. Under Build ecc Tab, select a previously dumped NAND image. Make sure to observe the RGH1/RGH2
   setting - it will be auto set based on CB but can be changed.
3. Click "Build XeLL Reloaded".
4. Click "Write XeLL To NAND" and let it complete
5. Remove NAND programmer, connect ethernet cable to console and boot console from eject button (take
   note of assigned IP)
6. Enter assigned IP address in the box (e.g. and click "Key from IP".
   "fuses.txt" will be created in the working folder.
7. Under "Build Glitch Image" Tab, select a dumped NAND image and select RGH method (RGH1 or RGH2)
8. Click "Build Image"
   (IMPORTANT! For jaspers, make sure that the Model Type is correct)
9. Reconnect NAND programmer and click "Write Glitch Image To NAND" and let it complete.
   (No need to remap any bad blocks, xeBuild will have already done it)
   Alternatively, choose one of the options to copy the built image to USB stick and follow
   on-screen instructions.
10. Remove NAND programmer (or remove USB stick), and enjoy your glitch-hacked console.

Instructions to Uncripple

1. Under Uncripple Tab: Select a NAND image file and click FindSecData. A list of recommended
   patches will be displayed.
2. Select the first in the list and click Write NAND, and you're done!
   In some cases you may need to keep going through the list of patches until it works.


* The fastest most convenient and most reliable way to ensure correct image dumps
* Automated creation and flashing of XeLL Reloaded and glitch image
* Able to detect and fix any errors in a NAND dump, making this an excellent aid to JTAG'ing / RGH'ing
* Automatically remap bad blocks - e.g. remap your freeBOOT image to match the original
* Supports all NAND types, small block and big block
* Tell at a glance if your console has an expolitable "CB" for JTAGging / RGH1 / RGH2
* Provides automated process to uncripple using the existing excellent
   tools: Nandpro and FindSecData
* Recognises and supports uncrippling for all NAND types 16MB, 256MB, 512MB and slim 16MB
* Automatically shows if NANDs are identical at a glance as soon as they're dumped
* Previews the exact write commands to be used before writing
   (Nothing is written back to the NAND without the user seeing the commands first)
* Easily manage folders containing lots of NAND dumps if you're handling multiple


* Block numbers of Big Block NANDs are shown in blue to distinguish them from blocks numbers
   of small block NANDs. This is because Nandpro always deals in small block sizes, even when
   reading and writing big block images. Therefore, if you plan to use Nandpro natively based on
   any block numbers read out from XNH, then make sure to multiply big block values (shown in blue)
   by 8 before plugging them into Nandpro

Revision History

0.78   - Fixed bug: wouldn't create ecc for trinity CB 9230

0.77   - Supports Multibuilder 09x that uses build.exe instead of python script
       - Includes legacy support for Multibuilder 08x
       - Supports Xenon ecc creation CB 1940 and 7375 (Credits to Team-Xecuter)
       - Added GUI feature to let you choose which of the two Xenon CBs to flash to the console
       - Supports Xenon full image creation
       - Supports 13604/14699/14719 glitch/retail images and dashlaunch 2.32 (in conjunction with Multibuilder 0.921)  
       - Fixed: error generated if trying to build without a launch.ini file

0.76   - Support for 14717 / 14719 building
       - Support for Multibuilder 0.8x (14717/14719 and dashlaunch 2.32)
       - Support for CB 9230 for slims (no need for CPU key in advance)
       - Added alpha feature to program Coolrunner with Nand-X
       - Added Copy To USB feature (also copies xenon.elf v4 for you)

0.75   - Added two new types of bad block remapping tasks. Now there are 3 categories:
          1. specify an image with bad blocks as a template, and apply the same remapping to a clean image
          2. take an image with bad blocks and create a copy with the relocated blocks back in their original locations
          3. take a clean image and create a copy, specifying which blocks to remap and where to put them
       - Added check to see if image contains ecc (contains zero-paired in block 0x00)
         Reported as 'e' icon on main tab and also in Info tab.
       - Added check so you can't accidentally overwrite fuses.txt when reading CPU key over LAN
       - Added check for block 0x02 relocation so CB can still be correctly read for Info tab
       - Now reports bad blocks even if they donít appear to be remapped anywhere (e.g. 0x1F3 -> ????)
       - Removed dependency on nandpro 2.0b. All functions will work properl with any version.

0.74   - Now automatically remaps the original NAND before creating the ecc image.
         Previously the ecc glitch generation was not working in all cases e.g. bad
         blocks in the first 0x50.
       - Added creation of launch.ini file. Choose from an existing preset or define your own.

0.73  - This release is for small but important change to the build glitch image feature. It's possible
        for another Multibuilder operation e.g. "build JTAG image with custom smc" to leave an smc.bin file
        in the Data\my360 folder. The next time xeBuild is invoked by Xnandhealer (or from cmd line) the build
        would erroneously pick up this smc and cause a bad image build.

        Now any leftover smc.bin file that may be present in the Data\my360 folder will be removed before
        building the image, thus ensuring the correct smc is always used.

0.72  - Supports xeBuild 14699 and Multibuilder 0.6 (old ggBuild now not supported)
      - Supports automatic XeLL bad block remapping in first 0x50 blocks (first 0x10 big blocks)
      - Added option for including dashlaunch patches or not
      - Added 'Glitchable' CB check (as well as JTAGable check)
      - Added convenient button to open windows explorer at the working directory
      - Updated known CB list with non-glitchable CBs 4577, 5772 & 6752
      - Changed: USB is now the default interface instead of LPT
      - Changed: Now uses xell image + other files from Multibuilder folder and removed embedded versions
      - Changed: Removed in-built fcrt extractor (xeBuild does it now) Fixed: Unable to select Jasp16 SB or
        BB in Build XeLL tab or Build Glitch tab
      - Fixed: Relocated bad blocks could be reported in reverse order in a very few cases

0.71  - Fixed the problem of not building XeLL if there was a space in the Working Directory pathname

0.7   - Carry out the glitch hack from start to finish using one application!
      - Creation of image_00000000.ecc (XeLL) for Glitch Hack based on original nand dump
      - Creation of full Glitch Hack image (using ggBuild) for all model types
      - One-click CPU key retreival from XeLL over LAN (and creation of fuses.txt)
      - One-click CPU key retreival from fuses.txt file
      - Added support for trinity NAND image analysis
      - Thanks to BestPig for revealing how to extract fcrt.

0.6  - Now able to browse to and select any file for Image Analysis or Remapping
     - Option to Dump KV and config files either as part of the initial dump or afterwards
     - Add 2 second delay between reads
     - Fixed bug with file locations in the settings where it wouldn't work with a space in the path

0.51 - Supports Multiple Reads in one go
     - Escape to cancel analysis
     - Changed default read length option from 66 to 64

0.5  - Much improved user interface including progress bars during NAND analysis
     - Ability to cancel NAND analysis
     - One-click bad block remapping
     - Added dialog to let you choose how much of the NAND to dump just before reading
     - Fixed bug where big blocks with empty pages (filled with 0x00) could be reported as ECC errors

0.4  - Big Block analysis and fixing now supported
     - Now have the choice to fix NAND either from actual NAND or a virtual nand (image file)
     - Added "CB" readout and exploitable indicator
     - Added partial NAND analysis - can analyze images even if they don't start at block 0
     - Added Absolute and Relative addressing in the Hex Viewer (to accompany partial NAND analysis)

0.31 - Added support for detection of other 16MB NAND with flashconfig 0x00023010

0.3  - Added new capability to analyze and report the integrity of each NAND dump ñ it
       reports bad blocks and ECC error blocks (BB NANDs not yet supported)
     - Added ìFix NANDî feature to automatically re-dump any offending blocks and patch
       them into the original dump (BB NANDs not yet supported)
     - There is also the option to re-dump the bad blocks, although they shouldnít matter
       (since theyíve been remapped) you may occasionally need to re-dump the bad block just
       to get an overall matching dump and increase confidence.
     - Added ìNAND Infoî tab, which displays any remapped blocks  and ECC error blocks and
       some basic info about the file (BB NANDs not yet supported)
     - Added very basic Hex Viewer, more of a debug feature but allows you to view dump by

0.2  - Some image updates and graphical enhancements

0.1  - Initial version.

comments powered by Disqus