You are viewing our Forum Archives. To view or take place in current topics click here.
#11. Posted:
Streamah
  • Summer 2020
Status: Offline
Joined: May 24, 201013Year Member
Posts: 10,103
Reputation Power: 3697
Status: Offline
Joined: May 24, 201013Year Member
Posts: 10,103
Reputation Power: 3697
the steps to rgh'ing a phat

1. wire up nand wires, then read the nand. (will need powerbrick plugged in but do not turn xbox on) then plug nand wires into jrprogrammer or nand x then read your nands.

then take your matching dumps and create a ecc then write to xbox. then you program the coolrunner with timing file of your choice. (use the _18) , then you solder the chip into the board. then boot into xell.

then you grab the cpu key, and build your new image and write that to the board. then typically you can just unsolder the nand wires since you can update the rgh then with a usb.
#12. Posted:
mag00
  • Wise One
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
Yes I've done this before years ago, using the old jtag wiring and nandx. I've the NAND x wires still attached in case off a bad flash, I don't want to have to solder to the board again. I've done all those steps but the thing won't boot cell or glitch on either console
#13. Posted:
mag00
  • Wise One
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
Initializing $RJG7MTM.bin..
Falcon/Opus
Glitch2 Selected
Nand Initialization Finished
* unpacking flash image, ....
Spare Data found, will remove.
Removed
* found decrypted CD
* found XeLL binary, must be linked to 0x1c000000
* we found the following parts:
SMC: 1.6
CB_A: 5773
CB_B: 5773
CD (image): 5773
CD (decrypted): 9452
* checking required versions...
ok
* patching SMC...
Patching Falcon version 1.6 SMC at offset 0x12A3
* Replacing CD...

* XOR HACK NEEDED FOR CB 5773
* patching CB_B...
patchset for 5772 found, 4 patch(es)
* Applying XOR Hack to CB_B 5773
*** Re-encrypting CB_B with xor keystream
*** Fixing entrypoint
* Replacing CB_A 5773 with 5772
* encrypting CB...
* constructing new image...
* base size: 70000
* No separate recovery Xell available!
* Flash Layout:
0x0..0x1FF (0x200 bytes) Header
0x200..0xFFF (0xE00 bytes) Padding
0x1000..0x3FFF (0x3000 bytes) SMC
0x4000..0x7FFF (0x4000 bytes) Keyvault
0x8000..0x9ABF (0x1AC0 bytes) CB_A 5772
0x9AC0..0x1313F (0x9680 bytes) CB_B 5772
0x13140..0x1913F (0x6000 bytes) CD 9452
0x19140..0xBFFFF (0xA6EC0 bytes) Padding
0xC0000..0xFFFFF (0x40000 bytes) Xell (backup)
0x100000..0x13FFFF (0x40000 bytes) Xell (main)
* Encoding ECC...Done!
------------- Written into output\image_00000000.ecc

Device Not Found.
Version: 10
Flash Config: 0x01198010
Writing Nand
image_00000000.ecc
Done!
in 0:18 min:sec
#14. Posted:
Streamah
  • Summer 2020
Status: Offline
Joined: May 24, 201013Year Member
Posts: 10,103
Reputation Power: 3697
Status: Offline
Joined: May 24, 201013Year Member
Posts: 10,103
Reputation Power: 3697
mag00 wrote Yes I've done this before years ago, using the old jtag wiring and nandx. I've the NAND x wires still attached in case off a bad flash, I don't want to have to solder to the board again. I've done all those steps but the thing won't boot cell or glitch on either console


the jtag and rgh is a bit different..

i always soldered nand wires, dumped nands. then while the nands are dumping i'll wire the chip . then i get two matching dumps create and write my .ecc then program the chip and install and boot up into xell every time. but if the chip is installed then that'll definitely screw ya up.

Wiring is also very crucial to getting a reliable boot. so, that could be part of your problem also. but i have high reason to believe that since you had coolrunner installed before dumping nands that thats giving you some problems..

i'd write the original nand dump back to board and unsolder the rev c, then see if it boots into retail then redo the process. but this time without coolrunner installed before dumping nands.
#15. Posted:
mag00
  • Wise One
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
Checking Console..
Version: 10
Flash Config: 0x01198010
01198010
Xenon, Zephyr, Opus, Falcon
CB Version: 5772
Falcon/Opus
USB XSVF Player Initialized
Xilinx XC2C64A-VQ44 ......... [DETECTED]
Erase Succeeded
File: C:\Users\magoo\Downloads\RGH\rgh12\try_these_first\matrix\xsvf\rgh12_18.xsvf
Sending Out Packets .........
Success
#16. Posted:
mag00
  • Wise One
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
Status: Offline
Joined: Aug 09, 201013Year Member
Posts: 552
Reputation Power: 31
then try to boot and gives me 3rrod error code 0002?? WTF!
#17. Posted:
Rodent
  • Fairy Master
Status: Offline
Joined: Jan 21, 201212Year Member
Posts: 9,964
Reputation Power: 11685
Status: Offline
Joined: Jan 21, 201212Year Member
Posts: 9,964
Reputation Power: 11685
[quote="mag00"]then try to boot and gives me 3rrod error code 0002?? WTF![/quote

Short in the motherboard
#18. Posted:
GeordieXbP
  • Blind Luck
Status: Offline
Joined: Jun 23, 20176Year Member
Posts: 1,078
Reputation Power: 2190
Motto: Discord: cj1892
Motto: Discord: cj1892
Status: Offline
Joined: Jun 23, 20176Year Member
Posts: 1,078
Reputation Power: 2190
Motto: Discord: cj1892
This is why you buy from a reputable seller.
#19. Posted:
Rodent
  • Winter 2021
Status: Offline
Joined: Jan 21, 201212Year Member
Posts: 9,964
Reputation Power: 11685
Status: Offline
Joined: Jan 21, 201212Year Member
Posts: 9,964
Reputation Power: 11685
mag00 wrote Checking Console..
Version: 10
Flash Config: 0x01198010
01198010
Xenon, Zephyr, Opus, Falcon
CB Version: 5772
Falcon/Opus
USB XSVF Player Initialized
Xilinx XC2C64A-VQ44 ......... [DETECTED]
Erase Succeeded
File: C:\Users\magoo\Downloads\RGH\rgh12\try_these_first\matrix\xsvf\rgh12_18.xsvf
Sending Out Packets .........
Success


This is to program the chip. You do not write this to the motherboard!!!
Jump to:
You are viewing our Forum Archives. To view or take place in current topics click here.