R-JTAG Can't boot Xell

[AllyNerd]

Console Type: Jasper
NAND size: 256
Dashboard version: 2.0.16547
CB version: e.g 5774
Screenshot of NAND details from J-Runner:
(attach an image to your post)
J-Runner log: had bad blocks in the first 50 which jrunner remapped.
Initializing nanddump1.bin..
Reading Nand
Jasper 256MB
Error: 250 reading block 10
Error: 210 reading block 11
Error: 210 reading block 12
Error: 210 reading block 13
Error: 210 reading block 14
Error: 210 reading block 15
Error: 210 reading block 16
Error: 210 reading block 17
Jtag Selected
Nand Initialization Finished
Error: 250 reading block 3F0
Error: 210 reading block 3F1
Error: 210 reading block 3F2
Error: 210 reading block 3F3
Error: 210 reading block 3F4
Error: 210 reading block 3F5
Error: 210 reading block 3F6
Error: 210 reading block 3F7
Error: 250 reading block 668
Done!
in 15:10 min:sec
Comparing...Takes a while on big nands
Bad Block ID 0002 Found @ 0x01FF [Offset: 0x41DF000]
Block ID 01FF [Offset: 0x41DF000] remapped to Block ID 0002 [Offset: 0x42000]
Bad Blocks Remapped
Bad Block ID 0002 Found @ 0x01FF [Offset: 0x41DF000]
Block ID 01FF [Offset: 0x41DF000] remapped to Block ID 0002 [Offset: 0x42000]
Bad Blocks Remapped
Nands are the same


Initializing jasper_hack_bigblock_aud_clamp.bin..
Too Many Bad Blocks
Header is wrong..
Too Many Bad Blocks
Jasper BB
Too Many Bad Blocks
Jtag Selected
Nand Initialization Finished
Initializing nanddump1.bin..
Jasper BB
Aud_Clamp Selected
Nand Initialization Finished
R-Jtag Selected
Bad Block ID 0002 Found @ 0x01FF [Offset: 0x41DF000]
Block ID 01FF [Offset: 0x41DF000] remapped to Block ID 0002 [Offset: 0x42000]
Bad Blocks Remapped
Patching Jasper version 2.3 SMC at offset 0x12BA
XeLL file created Successfully jasper_hack_bigblock_aud_clamp.bin
Version: 10
Flash Config: 0x008A3020
Writing Nand
jasper_hack_bigblock_aud_clamp.bin
Error: 202 writing block 10
Done!
in 0:19 min:sec

POST output from J-Runner (either POST_OUT monitor or RATER output): cant boot xell this is the furthest I have gotten...


Post 10 - Payload/1BL started
Post 11 - FSB_CONFIG_PHY_CONTROL
Post 12 - FSB_CONFIG_RX_STATE
Post 13 - FSB_CONFIG_TX_STATE
Post 14 - FSB_CONFIG_TX_CREDITS
Post 15 - FETCH_OFFSET
Post 16 - FETCH_HEADER
Post 17 - VERIFY_HEADER
Post 18 - FETCH_CONTENTS
Post 19 - HMACSHA_COMPUTE
Post 1A - RC4_INITIALIZE
Post 1B - RC4_DECRYPT
Post 1C - SHA_COMPUTE
Post 1D - SIG_VERIFY
Post 1E - BRANCH
Post 20 - CB entry point reached
Post 21 - INIT_SECOTP
Post 22 - INIT_SECENG
Post 2F - RELOCATE
Post 2E - HWINIT
Post 33 - FETCH_CONTENTS_4BL_CD
Post 34 - HMACSHA_COMPUTE_4BL_CD
Post 35 - RC4_INITIALIZE_4BL_CD
Post 36 - RC4_DECRYPT_4BL_CD
Post 37 - SHA_COMPUTE_4BL_CD
Post 3A - BRANCH
Post 40 - Entrypoint of CD reached
Post 42 - FETCH_HEADER
Post 44 - FETCH_CONTENTS
Post 45 - HMACSHA_COMPUTE
Post 46 - RC4_INITIALIZE
Post 47 - RC4_DECRYPT
Post B3 - Panic - SHA_VERIFY
Post 10 - Payload/1BL started

updflash.bin log (if applicable):

Image of R-JTAG board:

Images of close-up soldering to motherboard:

Checked continuity from topside point (r8c2) to rjtag board


Retouched post points. All points give me about 16 kohms resistance checking from rjtag board against ground.


Aud clamp


Jtag alt kit #2 used. Red wire goes to bottom point on board after using the original point (db1f1 I think it is). Yellow wire is soldered to another kynar wire which goes to aud clamp
Description of problem:

Was the console working before you started: Y

Maybe something stupid im forgetting. Its getting past post 2E which would lead me to assume the rjtag board is good... HELP

 

[XxGLITCH3RSxX]

you have greated xell with the aud_clamp but you have not used the aud_clamp method ?

have you tried all dip settings ?

why have you used that qsb and not the one that comes with the r-jtag ?

and why have you not post_out qsb ?

and you should tidy all your wires up to

 

[Martin C]

You'll need to manually remap the bad block (0x10 to 0xFF8).

- - - Updated - - -

you have greated xell with the aud_clamp but you have not used the aud_clamp method ?

have you tried all dip settings ?

why have you used that qsb and not the one that comes with the r-jtag ?

and why have you not post_out qsb ?

and you should tidy all your wires up to

You can see quite clearly that AUD_CLAMP is being used. Please refrain from replying.

 

[XxGLITCH3RSxX]

You'll need to manually remap the bad block (0x10 to 0xFF8).

- - - Updated - - -



You can see quite clearly that AUD_CLAMP is being used. Please refrain from replying.

i am sorry that picture would not load for me it has now

my fault it did not load i should not of said until i saw all pictures

sorry guys my fault :s :s

 

[AllyNerd]

You'll need to manually remap the bad block (0x10 to 0xFF8).

- - - Updated - - -



You can see quite clearly that AUD_CLAMP is being used. Please refrain from replying.

Ok. Just to clarify I'm using a Jr programmer v2. I read my nand and created Xell from it and wrote Xell to my console. I get the error writing block 10. So since Xell is written all I have to do is read block 10 and write it to FF8. Is it correct I can go to advanced nand functions and my start block is 10 with a length of 8. I read that to a file then I write that file with start block FF8 with a length of 8?

Thank you for your help.

 

[Martin C]

I have a sticky for remapping (as well as posting it on the free60 wiki). Provided you follow the steps correctly, it should be fine.

 

[AllyNerd]

I have a sticky for remapping (as well as posting it on the free60 wiki). Provided you follow the steps correctly, it should be fine.

I have read the guide and free60 a million times lol. I understand what I need to do I just can't do it. All I see is nand pro and I don't have a nand x. I only have a jr programmer v2 and for some reason advanced nand functions is not writing my block to the correct block. Maybe I need some sleep who knows :crazy:

 

[gavin_darkglide]

Just use advanced menus demon/fusion remap option and it will automatically remap the blocks. this should only be needed when writing the ecc as the new nand will automatically remap upon creation.

 

[AllyNerd]

Just use advanced menus demon/fusion remap option and it will automatically remap the blocks. this should only be needed when writing the ecc as the new nand will automatically remap upon creation.

I used that but it was weird I got an error on block 11 instead of 10... And that was remapped to 3ff which I believe would be correct for a 16mb jasper but since it's a big block then i believe it should be remapped to ff8... How can I make jrunner remap it to ff8?
thanks for your reply by the way

 

[BL4K3Y]

I used that but it was weird I got an error on block 11 instead of 10... And that was remapped to 3ff which I believe would be correct for a 16mb jasper but since it's a big block then i believe it should be remapped to ff8... How can I make jrunner remap it to ff8?
thanks for your reply by the way

It remaps it to 3FF because the DemoN only has a 16MB NAND and that function was written primarily to deal with bad blocks on the DemoN's NAND (hence it's name).

Remap the block manually as Martin advised you to do earlier (you can use the Custom NAND/CR Functions option to do this).

 

[gavin_darkglide]

if the bad blocks are moving around, maybe you should check the soldering on the nand-x points.

 

[AllyNerd]

It remaps it to 3FF because the DemoN only has a 16MB NAND and that function was written primarily to deal with bad blocks on the DemoN's NAND (hence it's name).

Remap the block manually as Martin advised you to do earlier (you can use the Custom NAND/CR Functions option to do this).

Yes I tried to do that. Maybe I don't understand the details. I tried to read starting at block 10(my bad block) with a length of 8 and it output it to a file. I then loaded that file and tried to write it starting at block ff8 with a length of 8. It doesn't seem to write as it says done in 1 second and I see no progress or anything. Just give it to me in noob terms I am ready for the spoon feed. FYI this is with Xell written to my console already with block 10 failing of course.

edit: well I'm resulting to using the old lpt with nandpro. If anyone could shed some light on using jrunners advanced nand function to manually remap it would be appreciated.
Thanks