JTAG HELP PLEASE! Freeboot don't work, always E71 error

[Mich91]

Hi guys, please give me a hand!
I got a falcon console with 7371 dash, CB 5770 (exploitable).
dumped nand 3 three times, only a 250 error on block 0B1 (empty block of all zeros). block was located in 3FF. using xbreboot i got dash 8995 fully jtag working, i can install e use xex loader!
but 8995 is very old, so i want at least 13599. i can't find xebreboot for 13599 (o for dash newer tha 8995), i must use freeboot. following the tutorial, using many tool (jtag tool, freeboot toolbox and many others) but result was awful: i tried in 20 different mode, but nothing, after about 4 seconds appear error E71!!! :mad2: (before error e71 there is the ultimate xbox logo)
Xell works great if I start pushing eject button.
i tried unmapped remapped nand, put my kv in another falcon clean nand (MU link found on this forum). It not work! I haven't any other ideas.
original nand reflashed works great, so i think it is a good dump.
using nand-x (v2 but i think v3 software is not requested for normal jtag, is it?)

this is my original nand: http://www.mediafire.com/?31mec7rv5yion1e
EDIT: added cpu key 2DDAF934172C33F7B70E1830A4095E80

if you can work on it e provide me a freeboot nand that don't give the E71 error, I'll thank you a lot!!!

 

[keil423]

Nobody can do anything with your nand without the CPU key!

 

[Mich91]

ops sorry, here is the key: 2DDAF934172C33F7B70E1830A4095E80

 

[keil423]

what are your smc points

 

[Mich91]

i use qsb provided with nand x, normal point. standard smc

 

[keil423]

Try this freeboot image.

http://www.megaupload.com/?d=8T3BZCWW

I'm off to eat a bird!

This is a freeboot image created from your nand dump useing your CPU key.

If that doesnt work then my last question would be have you tried a jumper from points 4 and 7?

 

[Mich91]

thank you very much, now i try to flash it.
and no, i don't put a jumper between 4 e 7

 

[Mich91]

don't work!
and, in my ignorance, i was using a jumper between points 4 and 7 with 330 ohm. i change it to 470 and to 0 (using the switcher). never work

 

[esbmaepo]

What kind of JTAG method are you using?

 

[Mich91]

normal "old" jtag, no rgh... normal smc points
next week i'll do rgh if can't find a solution... original nand reflashed, all ok, works perfectly

 

[mafia 5k]

I have ran into bad blocks before tthis same situation, instead of remapping manually i use Nand Flasher for windows v.1.2.0 to write my freeboot image and it always seems to work after the program will correct any bad blocks in your nand, hope it works for you aswell

 

[esbmaepo]

normal "old" jtag, no rgh... normal smc points
next week i'll do rgh if can't find a solution... original nand reflashed, all ok, works perfectly

Yes I understand its JTAG and not RGH. Are you using AUD_CLAMP DVD, Boxxrdr transistor method or the old method connecting to ROL?

 

[Mich91]

Yes I understand its JTAG and not RGH. Are you using AUD_CLAMP DVD, Boxxrdr transistor method or the old method connecting to ROL?

i am not a expert of jtag, i'm doing like this image

 

[Mich91]

I have ran into bad blocks before tthis same situation, instead of remapping manually i use Nand Flasher for windows v.1.2.0 to write my freeboot image and it always seems to work after the program will correct any bad blocks in your nand, hope it works for you aswell

i tried, it is an amazing software! but error e71 remains :frown:

 

[esbmaepo]

i am not a expert of jtag, i'm doing like this image

Try AUD_CLAMP and DVD_TRAY method instead. Its easy and more reliable than the method you are using.
Connecting to ROL is never a good idea and can sometimes give strange behavior.

Remember to select AUD_CLAMP and DVD_TRAY method in JTAG-tool, when you are creating Freeboot image.

 

[Mich91]

Try AUD_CLAMP and DVD_TRAY method instead. Its easy and more reliable than the method you are using.
Connecting to ROL is never a good idea and can sometimes give strange behavior.

Remember to select AUD_CLAMP and DVD_TRAY method in JTAG-tool, when you are creating Freeboot image.

ok, i'll try, thanks

 

[Mich91]

i changed the yellow wire to aud clamp but nothing, error e71 again, no i'll change also the red wire to dvd cable

 

[Martin C]

STOP!

Messing around with SMC wiring will NOT solve the problem.

The issue is that you need to deal with the remap of bad blocks.

Go back to your standard wiring.

Do you get an error when you try to write to 0x0B1?

 

[Mich91]

i remapped in 4651354616 different modes the block 0B1 and continue to give me error 202 while programming (standard SMC). also putting back original nand give me the error but console works perfectly. also with xbreboot works perfectly, with or without remap (standard SMC). i think freeboot is a f****ng b***h

 

[Martin C]

Us Multi_builder with your original NAND dump and CPU key. then use XeLL to update the console.