Took Condi's Hackmode, put the hackmode.key file in the root of the SD along with the testmode.key file and renewal dll file and booted with it and was able to copy the renewal dll file back to both user\prg directories. I 'think' part of the problem is Condi's script doesn't remove the script ini file itself maybe?
Now though, I can't get it to recognize the SD with the update after downloading and formatting twice. Trying various things now.