Get the flash config for the console
In the nandpro folder, where you have your .ecc image make a dummy file... Just a new text document or something then rename it like "thefile.bin"
Make sure it's not thefile.bin.txt
then do
nandpro2e.exe thefile.bin: +w16 image_000000.ecc :23010
now thefile.bin will be the same as .ecc, but with the correct spares
for the flash config of that console
now go ahead and write the .ecc to flash with +w
extract the bad block from thefile.bin instead of it and write that to 0x3FF with -w
then overwrite the original location of the bad block with a 0x0 filled block
just in case nandpro successfully erased that block, but simply wasn't able to write the full data there
see where I'm going with all this?
So you are writing the block with the corrected LBA, so the spare says it's block 0xB7
But you write it to 0x3FF withtout the option set to alter the spare
+w# Write RAW (with SPARE) file, init SPARE, block numbers, ECC
If you init the block number and write that to 0x3FF, nandpro will set the LBA in spare to 0x3FF
and the controller won't have any idea it's actually block 0xB7 because it doesn't say it is block 0xB7
so... +w fucks shit up xD
the Moral Of The Story xD