R-JTAG Can't Boot Xell

ChoCho346 · Feb 18, 2014

TX Product(s) used: Nand-X, R-Jtag V1.0
Console Type: Jasper
NAND size: 16
Dashboard version: 2.0.16537
CB version: 6754
Screenshot of NAND details from J-Runner:
(says ive used up 25mb already)
J-Runner log: Friday, February 14, 2014 1:25:25 PM
J-Runner v0.3 Beta (4) Started

Checking Files
Finished Checking Files
Version: 03
Flash Config: 0x00000000
Can not Continue
Version: 03
Flash Config: 0x00023010
00023010
Trinity, Jasper 16MB
CB Version: 6754
Jasper 16MB
Reading Nand to C:\Users\Jorge\Desktop\J-Runner\output\nanddump1.bin
Reading Nand
Error: 250 reading block 11
Error: 250 reading block 36E
Done!
in 2:12 min:sec
Reading Nand to C:\Users\Jorge\Desktop\J-Runner\output\nanddump2.bin
Initializing nanddump1.bin..
Reading Nand
Jasper 16MB
Jtag Selected
Nand Initialization Finished
Error: 250 reading block 11
Error: 250 reading block 36E
Done!
in 2:10 min:sec
Reading Nand to C:\Users\Jorge\Desktop\J-Runner\output\nanddump3.bin
Comparing...
Reading Nand
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Error: 250 reading block 11
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Error: 250 reading block 36E
Done!
in 2:09 min:sec
Comparing...
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Nands are the same
Version: 03
Flash Config: 0x00023010
00023010
Trinity, Jasper 16MB
CB Version: 6754
Jasper 16MB
Reading Nand to C:\Users\Jorge\Desktop\J-Runner\output\nanddump1.bin
Reading Nand
Error: 250 reading block 11
Error: 250 reading block 36E
Done!
in 2:08 min:sec
Reading Nand to C:\Users\Jorge\Desktop\J-Runner\output\nanddump2.bin
Initializing nanddump1.bin..
Reading Nand
Jasper 16MB
Nand Initialization Finished
Error: 250 reading block 11
Error: 250 reading block 36E
Done!
in 2:10 min:sec
Reading Nand to C:\Users\Jorge\Desktop\J-Runner\output\nanddump3.bin
Comparing...
Reading Nand
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Error: 250 reading block 11
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Nands are the same
Error: 250 reading block 36E
Done!
in 2:09 min:sec
Comparing...
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Bad Block ID 0011 Found @ 0x03FF [Offset: 0x107BE00]
Bad Block ID 036E Found @ 0x03FE [Offset: 0x1077C00]
Block ID 03FF [Offset: 0x107BE00] remapped to Block ID 0011 [Offset: 0x46200]
Block ID 03FE [Offset: 0x1077C00] remapped to Block ID 036E [Offset: 0xE25C00]
Bad Blocks Remapped
Nands are the same
Aud_Clamp Selected
R-Jtag Selected
Patching Jasper version 2.3 SMC at offset 0x12BA
XeLL file created Successfully jasper_hack_aud_clamp.bin
Version: 03
Flash Config: 0x00023010
Writing Nand
jasper_hack_aud_clamp.bin
Error: 202 writing block 11
Done!
in 0:09 min:sec

Image of Coolrunner: (says ive used up 25mb already)
Images of close-up soldering to motherboard:
(says ive used up 25mb already)

Description of problem: Cannot boot Xell to retrieve CPU Key and also tried alternate D on topside but when I used that no debug light.

Was the console working before you started: Y

Do you get a green debug light appear on the RGH chip every 4-5 seconds: Y

How long is the light on for each time: Few seconds

john mathews · Feb 18, 2014

we need pics of ur install

ChoCho346 · Feb 18, 2014

Just Figured out how to delete old attachments to make up space about to upload now.

ChoCho346 · Feb 18, 2014

gavin_darkglide · Feb 18, 2014

Where is the rater log?

ChoCho346 · Feb 18, 2014

I've actually never used rather before. How do I do that exactly.

Martin C · Feb 18, 2014

You connect your J-R Programmer v2 to the R-JTAG chip and run the POST monitor/rater. If you don't have one, get one (as the basic kit was designed for people who already had one).

ChoCho346 · Feb 18, 2014

Code:

Phat Selected
Version: 10
Power Up
Waiting for POST to change
Post EF 
Post ED 
Post CD 
Post CC 
Post 8C - Panic - SYSTEM_CALL 
Post 84 - Panic - INSTRUCTION_STORAGE 
Post 04 
Post 20 - CB entry point reached 
Post 30 - VERIFY_OFFSET_4BL_CD 
Post 34 - HMACSHA_COMPUTE_4BL_CD 
Post 3C 
Post BC 
Post BE 
Post FE 
Post FE 
Post FC 
Post F4 
Post E4 
Post E0 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 14 - FSB_CONFIG_TX_CREDITS 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 14 - FSB_CONFIG_TX_CREDITS 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 14 - FSB_CONFIG_TX_CREDITS 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 0C 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 14 - FSB_CONFIG_TX_CREDITS 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 14 - FSB_CONFIG_TX_CREDITS 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 14 - FSB_CONFIG_TX_CREDITS 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 14 - FSB_CONFIG_TX_CREDITS 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Post 10 - Payload/1BL started 
Post 11 - FSB_CONFIG_PHY_CONTROL 
Post 12 - FSB_CONFIG_RX_STATE 
Post 13 - FSB_CONFIG_TX_STATE 
Post 15 - FETCH_OFFSET 
Post 16 - FETCH_HEADER 
Post 17 - VERIFY_HEADER 
Post 18 - FETCH_CONTENTS 
Post 19 - HMACSHA_COMPUTE 
Post 1A - RC4_INITIALIZE 
Post 1B - RC4_DECRYPT 
Post 1C - SHA_COMPUTE 
Post 1D - SIG_VERIFY 
Post 1E - BRANCH 
Post 20 - CB entry point reached 
Post 21 - INIT_SECOTP 
Post A0 - Panic - VERIFY_SECOTP_6 
Most Fails(cumulative): 0xA0
Shutdown

- - - Updated - - -

That was for 10 cycles

Martin C · Feb 18, 2014

POST looks good, but I'm not seeing any progression past 2E. Therefore you need to try ALL DIPs 1-6 in combination with ALL power settings, making 18 combinations in total.

ChoCho346 · Feb 18, 2014

Ok, Will do sir. Any reason why the alternate D on the topside would not give me a debug light? Thanks for the help.

Martin C · Feb 18, 2014

It's likely you've damaged the point. There are no images or MM readings for me to base that on.

ChoCho346 · Feb 18, 2014

I'll check it with the MM in the morning. I literally tinned and dabbed it. Thanks again Martin. I'll post an update with all the voltage and dip settings.

ChoCho346 · Feb 18, 2014

Ok still haven't found the sweet spot. I also returned to stock just in case and everything booted fine but then again come to think of it, it booted with the jtag qsb on the on position?

Also tried it with the no aud_clamp but on that type still need/going to try the different voltage settings.

Martin C · Feb 18, 2014

ChoCho346 said:
Ok still haven't found the sweet spot. I also returned to stock just in case and everything booted fine but then again come to think of it, it booted with the jtag qsb on the on position?

Also tried it with the no aud_clamp but on that type still need/going to try the different voltage settings.

Leave your JTAG wiring. As I said before, you're not getting past 2E so it's not relevant.

Yes, the console will still boot stock with the QSB set to on. That's why dual NAND R-JTAGs work.

ChoCho346 · Feb 18, 2014

I see makes perfect sense

. I'll work on it after work later today. Your help and time is greatly appreciated Martin.

Search

Search

R-JTAG Can't Boot Xell

ChoCho346

john mathews

ChoCho346

ChoCho346

gavin_darkglide

ChoCho346

Martin C

ChoCho346

Martin C

ChoCho346

Martin C

ChoCho346

ChoCho346

Martin C

ChoCho346