What's new

Tutorial RGH 1.2 Start to finish tutorial + how to get a CR4 like experience (Phats only)

  • Thread starter JoinTheResistance
  • Start date
  • Views 320,937
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,669
Reaction score
1,100
Points
1,045
Sin$
7
Hi jointheresistance and all others. Good Saturday morning.
I got it. Yesterday, no way. Today, in ten minutes, xbox booting ok.
The problem? The fuxxxd pc.
Remove autogg, reinstal autogg, and working ok. Retail nand in 14699 flashed in Nand.
By the way, I've modified my home-made Nand SPI reader/writer with the software you has in your thread, in order to program the matrix glitcher chips (2c64A) and works like a champ. Now, is a 3-in-one device: Nand reader/writer, XBox360 POST monitor and matrix programmer :smile:
I would like to post a photo, for your pleaure, but I didnt be able to do. It seems that images only can be inserted from URL's.

Next "to-do", xenon with 0003 error. GPU Shorted. (but this is another story)

Only thing to left, say you, one and a thousand times: THANK YOU SIR.
Albert.
You're welcome!
Btw, how are you able to do post monitoring with the matrix? Also, if you want to post pictures, upload them here.
 
A

alcruma

Newbie
Messages
14
Reaction score
0
Points
35
Sin$
-7
Hi again.
AH, I'm afraid I sang victory very fast. Console boots, but freeces in logo.
This is the log generated with my nand:
Code:
NandPro v3.0a by Tiros

Using Virtual Nand Device File: nand\nanddump.bin
Flash Config: 0x01198010
Block Size: 16KB Block Limits: 0x000000..0x000000
File: common\temp\flash.bin
Reading
0000
0000



-------------------------------------------------------------------------------------------------------------
Small Block detectado
Flashconfig:1198010  Size=16
Cargando Nand ...OK
Analizando Bad Blocks ...
No parece haber blocks remapeados

Checking ECC-CheckSum... Wait

-------------------------------------------------------------------------------------------------------------
Ecc Check: OK

-------------------------------------------------------------------------------------------------------------
Done
BUSCANDO SMC_CONFIG EN NAND
Smc Config encontrado en  0x00FEB800
Leyendo Temperaturas...:
Reset Parental Code: UDDU
ANALIZANDO DATOS DE NAND

ID: c20ec3ea
Dump con ECC - eliminando ECC
Encontrado SMC (version 1.51) :    00001000 - 00004000

Nand RETAIL (Original)
Encontrado  Keyvault :   00004000 - 00008000
Looking for Cpukey in Local Database. Not Found
CPUKEY agregada a base de datos
Encontrada posible cpukey en nombre de archivo.Comprobando...
Checking CpuKey
Saved New Id: c20ec3ea with Cpukey : B2F4DE6516DF20D68720
CpuKey is correct
Encontrado  CB_A (build 1940) :   00008000 - 0000e720
Encontrado  CD (build 8453) :   0000e720 - 00013ea0
Encontrado  CE (build 1888) :   00013ea0 - 00069f10
Encontrado  CF (build 14699) :    00080000- 00084450
Encontrado  CF1 build :    None
Encontrado  CG (build 14699) :    00084450- 000eb5b8
Encontrado  CG1 build :    None
Nand valida
DETECTANDO MODELO DE CONSOLA
Comprobando si es un modelo Exploiteable...
Puede No ser GLITCHEABLE
Size: 16

CD_8453 No valida para Jtag o ya Jtaged

Size: 16

Reloaded_Glitch.bin

-------------------------------------------------------------------------------------------------------------
  1 archivo(s) copiado(s).

-------------------------------------------------------------------------------------------------------------

FileSystems:
FileSystem Active:66 offset:0x9FDA00
FileSystem Last:53 offset:0xC85C40

Block      Size           File
0x00001000   0x00003000      SMC_1.51.bin
0x00004000   0x00004000      Keyvault.bin
0x00008000   0x00006720      CB_A_1940.bin
0x0000E720   0x00005780      CD_8453.bin
0x00013EA0   0x00056070      CE_1888.bin
0x00080000   0x00004450      CF_14699.bin
0x00084450   0x00067168      CG_14699.bin
0x000A0000   0x00009000      mfgbootlauncher.xex
0x000AC000   0x0012A000      xam.xex
0x001D8000   0x00061000      bootanim.xex
0x0023C000   0x0001F000      hud.xex
0x0025C000   0x0000C000      signin.xex
0x00C28000   0x00004000      aac.xexp1
0x00284000   0x0001C000      vk.xex
0x002A0000   0x00005000      updater.xex
0x00C2C000   0x00007000      createprofile.xexp1
0x002BC000   0x00005000      deviceselector.xex
0x00C34000   0x0049F000      dash.xex
0x002DC000   0x00009000      minimediaplayer.xex
0x00780000   0x00005800      deviceselector.xexp1
0x00788000   0x00011000      gamerprofile.xexp1
0x00314000   0x00013000      gamerprofile.xex
0x00328000   0x0000A000      createprofile.xex
0x00334000   0x001A8000      xenonjklatin.xtt
0x004DC000   0x0011B000      xenonclatin.xtt
0x005F8000   0x00090000      ximedic.xex
0x0079C000   0x00020800      hud.xexp1
0x007C0000   0x0004C000      huduiskin.xex
0x008AC000   0x000462E0      sysupdate.xexp1
0x0080C000   0x00005000      mfgbootlauncher.xexp1
0x00814000   0x00008000      minimediaplayer.xexp1
0x0081C000   0x0000E800      nomni.xexp1
0x0082C000   0x00005000      nomnifwm.xexp1
0x00834000   0x00009800      signin.xexp1
0x00840000   0x00003000      updater.xexp1
0x00844000   0x0000A000      vk.xexp1
0x00850000   0x00015000      ximecore.xex
0x00868000   0x00002000      ximedic.xexp1
0x00A60000   0x00007000      bootanim.xexp1
0x00A6C000   0x0011B800      xam.xexp1
0x00988000   0x00007090      dae.bin
0x00BC8000   0x00015000      xenonclatin.xttp1
0x00BF0000   0x00003000      xenonjklatin.xttp1
0x0088C000   0x0005B5C0      sysupdate.xexp2
0x0092C000   0x00044000      systemupdate2pre.xex
0x00978000   0x000001A0      updatedata.bin
0x009AC000   0x00000400      secdata.bin
0x00994000   0x000009E0      crl.bin
0x00DC4000   0x00000040      odd.bin

X-val: 00 00 00 00 00 00 00 00
Secdata LIMPIO
Saved New Id: c20ec3ea with Cpukey : B2F4DE6516DF20D68720



smc.bin copiado a nands\315259363505
kv.bin copiado a nands\315259363505
smc_config.bin copiado a nands\315259363505
CB_A_enc copiado a nands\315259363505
ldv.txt copiado a nands\315259363505
cpukey.txt copiado a nands\315259363505Modelo:Xenon

Serial:315259363505

Cpukey:
Dvdkey:925E120266B0A8B6021ECDE40C1B797B

CB:1940
CF:14699
LDV:5

OSIG:Hitachi/LG GDR-3120L v78
Region:0x02FE  |  PAL/EU

nands\315259363505\Xenon_315259363505_B2F4DE6516DF20D68720CB79313C9304.bin Nand name added
Reloaded_Glitch.bin

-------------------------------------------------------------------------------------------------------------
  1 archivo(s) copiado(s).

-------------------------------------------------------------------------------------------------------------

-------------------------------------------------------------------------------------------------------------


  xeBuild v1.16.728
---------------------------------------------------------------
---- { Image Build Mode } ----
building retail image

verbose set to level 1

------ parsing user ini at '..\nand\options.ini' ------

******* WARNING: could not open user ini at '..\nand\options.ini', skipping

------ parsing ini at '14699\_retail.ini' ------
ini version 14699

ini: label [xenonbl] found
found (1) 'cb_1940.bin' crc: 0x62b7b19c
found (2) 'none' crc: 0x00000000
found (3) 'cd_8453.bin' crc: 0x25e0acd0
found (4) 'ce_1888.bin' crc: 0xff9b60df
found (5) 'cf_14699.bin' crc: 0x6fb4d90e
found (6) 'cg_14699.bin' crc: 0xbccc9fe1

[rawpatch] label not found in ini

ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0x36790e61
found (2) 'bootanim.xex' crc: 0x187ede71
found (3) 'createprofile.xex' crc: 0x81d7a946
found (4) 'dash.xex' crc: 0x3957764c
found (5) 'deviceselector.xex' crc: 0x6246b4c0
found (6) 'gamerprofile.xex' crc: 0xb7add96a
found (7) 'hud.xex' crc: 0x202eb5c8
found (8) 'huduiskin.xex' crc: 0x4c80fbe9
found (9) 'mfgbootlauncher.xex' crc: 0x254ad664
found (10) 'minimediaplayer.xex' crc: 0xd8d21cfc
found (11) 'nomni.xexp' crc: 0xbf36fdf7
found (12) 'nomnifwk.xexp' crc: 0xa837ae53
found (13) 'nomnifwm.xexp' crc: 0x93246a8a
found (14) 'SegoeXbox-Light.xtt' crc: 0x086eb344
found (15) 'signin.xex' crc: 0xecd9cab1
found (16) 'updater.xex' crc: 0x125cdb94
found (17) 'vk.xex' crc: 0x9c744d4c
found (18) 'xam.xex' crc: 0x0b764b88
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0x945b7092
found (23) 'ximecore.xex' crc: 0x8d45ea14
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0xc90a651a

ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'fcrt.bin' crc: 0x00000000
found (5) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------

output name overridden to: ..\output\nandflash.bin

1BL RSA pub key (1BL_pub.bin) not available, signature checks will not be performed
PIRS RSA pub key (PIRS_pub.bin) not available, signature checks will not be performed
MASTER RSA pub key (MAST_pub.bin) not available, signature checks will not be performed

------ Checking ..\nand\nanddump.bin ------
..\nand\nanddump.bin file size: 0x1080000
nanddump header checks passed OK!
Loading NAND dump (0x1080000 bytes)...done!
Detecting NAND controller type from dump data...
   NAND dump is from a small block machine
   NAND dump uses small block controller
parsing dump into user and spare...
done!
KeyVault cannot be 0x0 bytes, using 0x4000
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xf7c000! Using if no smc config is provided.
CF slot 0 decrypted ok LDV 0x04 Pairing: 0x928c52
CF slot 1 decrypted ok LDV 0x05 Pairing: 0x928c52
setting pairing data from image to 0x928c52
pairing set to: 92 8c 52
LDV was already set to 5
Scanning for mobile data and fsroot...done! fsroot found ok!
Mobiles found:
  fsroot  version 66 found at offset 0x009b0000 len 0x4000 page 0x00004d80
  mobileB.dat version 25 found at offset 0x0093a000 len 0x0800 page 0x000049d0
  mobileC.dat version 01 found at offset 0x00a64600 len 0x0200 page 0x00005323
  mobileD.dat version 01 found at offset 0x0009c000 len 0x0800 page 0x000004e0
  mobileE.dat version 33 found at offset 0x00dd7000 len 0x0600 page 0x00006eb8
extracting MobileB.dat from page 0x49d0 (offset 0x93a000), size 2048 (0x800) bytes
extracting MobileC.dat from page 0x5323 (offset 0xa64600), size 512 (0x200) bytes
extracting MobileD.dat from page 0x4e0 (offset 0x9c000), size 2048 (0x800) bytes
extracting MobileE.dat from page 0x6eb8 (offset 0xdd7000), size 1536 (0x600) bytes
Statistics.settings found at offset 0xf78000, size 4096 (0x1000) bytes
seeking security files...
crl.bin found in sector 0x265 size 0x9e0...verified! Will use if external file not found.
dae.bin found in sector 0x262 size 0x7090...verified! Will use if external file not found.
extended.bin found in sector 0x222 size 0x4000...verified! Will use if external file not found.
secdata.bin found in sector 0x26b size 0x400...verified! Will use if external file not found.
done!
Writing initial header to flash image

------ loading system update container ------
14699\su20076000_00000000 found, loading...done!
   Read 0xba2000 bytes to memory
checking integrity...
header seems valid, version 2.0.14699.0
header hash is OK, checking content hashes...
content hashes seem OK, everything looks good!
extracted SUPD\xboxupd.bin (0x6b5c0 bytes)
decrypting SUPD\xboxupd.bin\CF_14699.bin (0x4450 bytes)...done!
decrypting SUPD\xboxupd.bin\CG_14699.bin (0x67168 bytes)...done!

------ Loading bootloaders and required security files ------
reading ..\nand\smc.bin failed, using smc.bin from nand dump
reset smc load address to 0x1000 size 0x3000
reading ..\nand\kv.bin failed, using kv.bin from nand dump
reading .\common\cb_1940.bin (0x6720 bytes)
loaded cb_1940.bin, could not check signature rsa key not present!
reading .\common\cd_8453.bin (0x5780 bytes)
reading .\common\ce_1888.bin (0x5606a b pad 0x56070 b)
extracted SUPD\xboxupd.bin\CF_14699.bin (0x4450 bytes)
extracted SUPD\xboxupd.bin\CG_14699.bin (0x67168 bytes)
reading ..\nand\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu:  80_C Gpu:  83_C Edram:  85_C
Max temps  : Cpu: 100_C Gpu: 110_C Edram: 117_C
Cpu Fan  : (auto)
Gpu Fan  : (auto)
MAC Address : 00:17:fa:1f:4f:41
AVRegion  : 0x00000300 (PAL50)
GameRegion  : 0x02fe (PAL/EU)
DVDRegion  : 2
resetKey  : UDDU
---------------------
Checking for smc config data patches
smc config was not patched
---------------------
could not check signature of cb_1940.bin, 1BL RSA key not present!
done!
patch slot offset reset to: 0x70000

------ Encrypting and finalizing bootloaders ------
encoding smc.bin size 0x3000
SMC checksum: b92ed1ba
unknown SMC found, type: Xenon v1.2(1.51)
known/clean SMC binary found! type 0x1
encoding kv.bin size 0x4000
decrypted keyvault has been set for reference
encoding cb_1940.bin size 0x6720
CB 1940 seq 0x01060023 type: 0x01 cseq: 0x06 allow: 0x0023
   expected fuses:
   fuseset 00: C0FFFFFFFFFFFFFF
   fuseset 01: 0F0F0F0F0F0F0FF0 (retail)
   fuseset 02: 00000F0000000000 (sequence)
   fuseset 02: F000000000000000 (allow cseq 1)
   fuseset 02: 0F00000000000000 (allow cseq 2)
   fuseset 02: 00000F0000000000 (allow cseq 6)
CBENC pairing set to: 92 8c 52
encoding cd_8453.bin size 0x5780
encoding ce_1888.bin size 0x56070
encoding xell-gggggg.bin size 0x0
encoding cf_14699.bin size 0x4450
encoding cg_14699.bin size 0x67170
encoding patches_fat.bin size 0x0
done!

------ Adding bootloaders to flash image ------
adding smc.bin at raw offset 0x00001000 len 0x3000 (end 0x4000)
adding kv.bin at raw offset 0x00004000 len 0x4000 (end 0x8000)
adding cb_1940.bin at raw offset 0x00008000 len 0x6720 (end 0xe720)
adding cd_8453.bin at raw offset 0x0000e720 len 0x5780 (end 0x13ea0)
adding ce_1888.bin at raw offset 0x00013ea0 len 0x56070 (end 0x69f10)
retail image, skipping xell-gggggg.bin
adding cf_14699.bin at raw offset 0x00070000 len 0x4450 (end 0x74450)
adding cg_14699.bin at raw offset 0x00074450 len 0x67170 (end 0x80000, rest in fs)
retail image, skipping patches_fat.bin
Fixing up FS table...done!
Writing zeropair CG patch slot overflow data to sysupdate.xexp1
   at raw offset 0x90000 len 0x0005b5c0 (end: 0x000eb5c0)...done!

------ adding 25 firmware files ------
extracted SUPD\aac.xexp (0x14000 bytes) (crc32: 0x36790e61 ini: 0x36790e61)
   adding as aac.xexp1 at raw offset 0xeb5c0 len 0x00014000 (end 0x000ff5c0)
extracted SUPD\bootanim.xex (0x61000 bytes) (crc32: 0x187ede71 ini: 0x187ede71)
   adding as bootanim.xex at raw offset 0x100000 len 0x00061000 (end 0x00161000)
extracted SUPD\createprofile.xex (0xc000 bytes) (crc32: 0x81d7a946 ini: 0x81d7a946)
   adding as createprofile.xex at raw offset 0x161000 len 0x0000c000 (end 0x0016d000)
extracted SUPD\dash.xex (0x63a000 bytes) (crc32: 0x3957764c ini: 0x3957764c)
   adding as dash.xex at raw offset 0x170000 len 0x0063a000 (end 0x007aa000)
extracted SUPD\deviceselector.xex (0x9000 bytes) (crc32: 0x6246b4c0 ini: 0x6246b4c0)
   adding as deviceselector.xex at raw offset 0x7aa000 len 0x00009000 (end 0x007b3000)
extracted SUPD\gamerprofile.xex (0x1b000 bytes) (crc32: 0xb7add96a ini: 0xb7add96a)
   adding as gamerprofile.xex at raw offset 0x7b5000 len 0x0001b000 (end 0x007d0000)
extracted SUPD\hud.xex (0x1e000 bytes) (crc32: 0x202eb5c8 ini: 0x202eb5c8)
   adding as hud.xex at raw offset 0x7d3000 len 0x0001e000 (end 0x007f1000)
extracted SUPD\huduiskin.xex (0x13000 bytes) (crc32: 0x4c80fbe9 ini: 0x4c80fbe9)
   adding as huduiskin.xex at raw offset 0x7f2000 len 0x00013000 (end 0x00805000)
extracted SUPD\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0x254ad664 ini: 0x254ad664)
   adding as mfgbootlauncher.xex at raw offset 0x807000 len 0x00008000 (end 0x0080f000)
extracted SUPD\minimediaplayer.xex (0xc000 bytes) (crc32: 0xd8d21cfc ini: 0xd8d21cfc)
   adding as minimediaplayer.xex at raw offset 0x810000 len 0x0000c000 (end 0x0081c000)
extracted SUPD\nomni.xexp (0xe000 bytes) (crc32: 0xbf36fdf7 ini: 0xbf36fdf7)
   adding as nomni.xexp1 at raw offset 0x81c000 len 0x0000e000 (end 0x0082a000)
extracted SUPD\nomnifwk.xexp (0x2000 bytes) (crc32: 0xa837ae53 ini: 0xa837ae53)
   adding as nomnifwk.xexp1 at raw offset 0x82a000 len 0x00002000 (end 0x0082c000)
extracted SUPD\nomnifwm.xexp (0x5000 bytes) (crc32: 0x93246a8a ini: 0x93246a8a)
   adding as nomnifwm.xexp1 at raw offset 0x82e000 len 0x00005000 (end 0x00833000)
extracted SUPD\SegoeXbox-Light.xtt (0x6000 bytes) (crc32: 0x086eb344 ini: 0x086eb344)
   adding as SegoeXbox-Light.xtt at raw offset 0x835000 len 0x00006000 (end 0x0083b000)
extracted SUPD\signin.xex (0x16000 bytes) (crc32: 0xecd9cab1 ini: 0xecd9cab1)
   adding as signin.xex at raw offset 0x83e000 len 0x00016000 (end 0x00854000)
extracted SUPD\updater.xex (0x7000 bytes) (crc32: 0x125cdb94 ini: 0x125cdb94)
   adding as updater.xex at raw offset 0x856000 len 0x00007000 (end 0x0085d000)
extracted SUPD\vk.xex (0x9000 bytes) (crc32: 0x9c744d4c ini: 0x9c744d4c)
   adding as vk.xex at raw offset 0x85f000 len 0x00009000 (end 0x00868000)
extracted SUPD\xam.xex (0x236000 bytes) (crc32: 0x0b764b88 ini: 0x0b764b88)
   adding as xam.xex at raw offset 0x869000 len 0x00236000 (end 0x00a9f000)
extracted nanddump\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
   adding as xenonclatin.xtt at raw offset 0xaa2000 len 0x0011b000 (end 0x00bbd000)
extracted SUPD\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
   adding as xenonclatin.xttp1 at raw offset 0xbbf000 len 0x00018000 (end 0x00bd7000)
extracted nanddump\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
   adding as xenonjklatin.xtt at raw offset 0xbd8000 len 0x001a8000 (end 0x00d80000)
extracted SUPD\xenonjklatin.xttp (0x7000 bytes) (crc32: 0x945b7092 ini: 0x945b7092)
   adding as xenonjklatin.xttp1 at raw offset 0xd80000 len 0x00007000 (end 0x00d87000)
extracted SUPD\ximecore.xex (0x15000 bytes) (crc32: 0x8d45ea14 ini: 0x8d45ea14)
   adding as ximecore.xex at raw offset 0xd87000 len 0x00015000 (end 0x00d9c000)
extracted nanddump\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
   adding as ximedic.xex at raw offset 0xd9d000 len 0x00090000 (end 0x00e2d000)
extracted SUPD\ximedic.xexp (0x2800 bytes) (crc32: 0xc90a651a ini: 0xc90a651a)
   adding as ximedic.xexp1 at raw offset 0xe30000 len 0x00002800 (end 0x00e32800)

------ adding 5 security files ------
<- Processing crl.bin ->
reading ..\nand\crl.bin (0xa00 bytes)
crl appears crypted, attempting to decrypt with CPU key...failed! Trying alternate key...success!
   adding as crl.bin at raw offset 0xe34000 len 0x00000a00 (end 0x00e34a00)

<- Processing dae.bin ->
reading ..\nand\dae.bin (0xad30 bytes)
dae appears encrypted, attempting to decrypt with CPU key...failed! Attempting to decrypt with alternate key...
success!
   adding as dae.bin at raw offset 0xe38000 len 0x0000ad30 (end 0x00e42d30)

<- Processing extended.bin ->
reading ..\nand\extended.bin (0x4000 bytes)
   adding as extended.bin at raw offset 0xe44000 len 0x00004000 (end 0x00e48000)

<- Processing fcrt.bin ->
   fcrt.bin not found and not required by keyvault, skipped

<- Processing secdata.bin ->
reading ..\nand\secdata.bin (0x400 bytes)
   adding as secdata.bin at raw offset 0xe48000 len 0x00000400 (end 0x00e48400)

------ checking for Mobile*.dat ------
MobileB.dat found, adding from previous parse
   adding MobileB.dat as type 0x31 at raw offset 0xe4c000 len 0x800 (end 0xe4c800)
MobileC.dat found, adding from previous parse
   adding MobileC.dat as type 0x32 at raw offset 0xe50000 len 0x200 (end 0xe50200)
MobileD.dat found, adding from previous parse
   adding MobileD.dat as type 0x33 at raw offset 0xe54000 len 0x800 (end 0xe54800)
MobileE.dat found, adding from previous parse
   adding MobileE.dat as type 0x34 at raw offset 0xe58000 len 0x600 (end 0xe58600)
Statistics.settings found, adding from previous parse
   adding Statistics.settings at raw offset 0xf78000 len 0x1000 (end 0xf79000)

------ adding smc_config.bin ------
adding smc config to offset 0x00f7c000, len 0x400

------ cleaning up image ------
Fixing up empty FS block entries...done!
Writing FS table to image offset 0xe5c000 len 0x4000 (end 0xe60000)...done!

------ finalizing image ------
calculating ECD bytes and assembling raw image...done!
done remapping!

------ writing image to disk ------
writing file '..\output\nandflash.bin' to disk...done!
---------------------------------------------------------------
..\output\nandflash.bin image built, info:
---------------------------------------------------------------
Kernel  : 2.0.14699.0
Console  : Xenon
NAND size : 16MiB
Build  : Retail
Serial  : 315259363505
ConsoleId : 021663127693
MoboSerial: 7866526103906355
Mfg Date  : 08/30/2006
CPU Key  : B2F4DE6516DF20D68
1BL Key  : DD88AD0C9ED669E7B56794FB68563EFA
DVD Key  : 925E120266B0A8B6021ECDE40C1B797B
CF LDV  : 5
KV type  : type1 (no hash)
---------------------------------------------------------------
  xeBuild Finished. Have a nice day.
---------------------------------------------------------------

It seems all is OK. :mad: sxxit.Time for more reading.
Well, this is my homemade reader/writer/sniffer/programmer.

http://postimg.org/image/raj5ihs6b/

I put the direct link because dont know how insert the image.

The hardware for the nand reader and for the CPLD programmer is the same. It uses the same PIC pins, and for the post sniffer, uses other pines. If you want to make one and need help, plaese count on me.

Here is the place I get it:
http://rgloader.spiffy360.com/post-43.html

Best regards.
Albert.
 
Last edited:
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,669
Reaction score
1,100
Points
1,045
Sin$
7
AH, I'm afraid I sang victory very fast. Console boots, but freeces in logo.
Try going back to 9199.
Well, this is my homemade reader/writer/sniffer/programmer.

http://postimg.org/image/raj5ihs6b/
Which diagram did you use? I actually made something similar myself.
The hardware for the nand reader and for the CPLD programmer is the same. It uses the same PIC pins, and for the post sniffer, uses other pines. If you want to make one and need help, plaese count on me.

Here is the place I get it:
http://rgloader.spiffy360.com/post-43.html
Thanks for this!
 
A

alcruma

Newbie
Messages
14
Reaction score
0
Points
35
Sin$
-7
You have all the info, schemas, firmawe in the link I posted, If you need/dont find some thing, just ask me. Use the PIC18F2550 (cheapest)
I'm going to flash 9199. I'll post the result.
Albert.
 
A

alcruma

Newbie
Messages
14
Reaction score
0
Points
35
Sin$
-7
Hi. I got it. Flashed a retail 9199 nand, and OK. But there is one think i dont understand. Please, can someone explain me difference between csec and ldv? My CF/CG ldv is 5, and with this value, its supposed that in a xenon, the highest dash must be 7371. Why then my xenon works with a 9199 dash? Would be possible to flash the 7371 and make it jtag? What would be the csec of my xenon?
I will be so grateful if someone could explain me this.
Regards.
Albert.
 
A

Abdulrhman Abbas

Newbie
Messages
16
Reaction score
0
Points
35
Sin$
0
does any type of flux work on rgh xbox? Even plumbing flux? if not what one should i get
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,669
Reaction score
1,100
Points
1,045
Sin$
7
does any type of flux work on rgh xbox? Even plumbing flux? if not what one should i get
I'm not really sure what that is, but from the sounds of it, I'm going to say no. What you need is no-clean soldering flux. This is what I use.
 
As an eBay Associate we earn from qualifying purchases.
RedEyedJesus

RedEyedJesus

✯UK Console Seller/Old Timer/Legend✯
Experienced Veteran Services Free Hoster
Messages
1,533
Reaction score
432
Points
355
Sin$
0
How are the Ace v3's for 1.2? Am i right in thinking we need a 22k resistor? Also point 'E' = clk? That right?
 
Luk3666yaraj

Luk3666yaraj

Enthusiast
Messages
310
Reaction score
51
Points
85
Sin$
7
Gonna be using this tut with my falcon 360 with jr2 programmer and coolrunner rev c any pointers or tips people?
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,669
Reaction score
1,100
Points
1,045
Sin$
7
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,669
Reaction score
1,100
Points
1,045
Sin$
7
Gonna be using this tut with my falcon 360 with jr2 programmer and coolrunner rev c any pointers or tips people?
Don't blink! Blink and you're dead. Don't turn your back! Don't look away! And don't blink! Good luck! :wink:
Anyway, try not to mess anything up while soldering, that's what most people fail at.
 
RedEyedJesus

RedEyedJesus

✯UK Console Seller/Old Timer/Legend✯
Experienced Veteran Services Free Hoster
Messages
1,533
Reaction score
432
Points
355
Sin$
0
Just done an Ace v3 install on a 512mb Jasper RGH1.2 with a 22k resistor & no clk = 10 sec boots
 
Luk3666yaraj

Luk3666yaraj

Enthusiast
Messages
310
Reaction score
51
Points
85
Sin$
7
Don't blink! Blink and you're dead. Don't turn your back! Don't look away! And don't blink! Good luck! :wink:
Anyway, try not to mess anything up while soldering, that's what most people fail at.
I'm sure it will be a good experience I'm skilled at soldering so shouldn't be bad :smile: that's the coolrunner here just waiting for jr2
 
C

Chxos

Newbie
Messages
15
Reaction score
1
Points
45
Sin$
0
Hi guys, i'm gonna try to RGH 1.2 soon my Falcon and i really wanted to use this chip: http: // i.imgur.com/zYs2hgv.jpg?1
Ace v3, i only have a few questions: do i need the 22k resistor for this? or do i just de solder that black resistor and solder the 1.8v cable on it?
I'm really confused, and i've already failed once with a Coolrunner rev C, so i decided to try this one instead, also, i only have a bunch of red wires, are those good or do i need some specific ones?
Thanks for your help.
Edit: If a 22k resistor is needed for RGH 1.2, can i do 2.0 without it? i don't care that much about boot times, as long as i don't need that resistor, thanks.
 
Last edited:
C

Chxos

Newbie
Messages
15
Reaction score
1
Points
45
Sin$
0
Hi guys, as i said i installed the Ace v3 and tried to do RGH 2.

But, obviously with my luck i got some problems actually, only one: It won't even boot into Xell.

I tried to de solder and solder again all of the points, same thing, tried different timing files and noticed that the green light on the ace was blinking in a different way, but still no boot.

It could be because of bad timing files? the ones i have are for the ace but i'm not sure if they are for RGH 2, maybe i have some 1.2 timing files and that's why it won't glitch, at least i hope that that's the reason.

Anyways, here are some images: http: // imgur.com/a/8c9mA And here's a video: https: // www.youtube.com/watch?v=Wo6rVlRkgio

Btw this xbox is on dash 2.0.16547.0 if that makes any difference, just telling this to you guys.

Also, if you are wondering what is that green wire on top of the chip, i soldered that to the points were the black resistor was because i couldn't program without it, every time after i programmed the chip i de soldered one end and tried to boot.

Thanks in advance for the help.

EDIT: Nevermind guys, got it working! it was just a really bad timing file and i written on the nand a speedup ecc and she booted :smile:
 
Last edited:
S

SonnY360

Newbie
Messages
6
Reaction score
0
Points
35
Sin$
0
Hi guys, got a question...

I have a falcon, an ace v3 glitch chip(first time i use this one) and try to do a RGH 1.2. If i try to write any timing file (.xsvf) to the ace with jrunner i got following message : "Factory FW sign detected .... ". Does that mean that the ace is "pre-flashed" at factory and i can confirm that with "Yes" and go on or is there going something wrong?

There is another thing that confuses me...if i remove the resistor (got the second ace v3 on the picture in the 1st post where all ace´s are shown) iam not able to program the ace cause it will not detected by jrunner (ace not installed to the box yet). Is the ace (without resistor) only pragrammable if its installed to the box?

Thanks for help
 
Last edited:
Newsk

Newsk

Contributor
Messages
2,602
Solutions
5
Reaction score
348
Points
350
Sin$
7
1.You can hit yes. They are preprogramed for coronas.
2. Yes after removing the resistor you must have it installed and power to console without it powered on to program.
 
Top Bottom
Login
Register