JTAG HELP PLEASE! Freeboot don't work, always E71 error

[esbmaepo]

Ok, thank you smurph, i'll create a direct connection between the points and j2d2, on the bottom of the board. With diodes soldered to board

Sent from my HTC 7 Mozart using 'na beata minchia

Aren't diodes installed on NAND-X?

Maybe you should try removing NAND-X and solder wires and diodes directly to board.

 

[Martin C]

Personally I think after 5 pages of going round in circles, the OP should just bite the bullet and send it to someone who knows what they're doing!

 

[esbmaepo]

Personally I think after 5 pages of going round in circles, the OP should just bite the bullet and send it to someone who knows what they're doing!

Think your right.

He should buy a Coolrunner and do a RGH on it.
Falcons are easy to work with and works great with CR

 

[Mich91]

Personally I think after 5 pages of going round in circles, the OP should just bite the bullet and send it to someone who knows what they're doing!

i know what i'm doing, xbreboot works infact. Why i should pay a coolrunner without making any possible attemp?

Sent from my HTC 7 Mozart using 'na beata minchia

 

[n1ght0wl]

Personally I think after 5 pages of going round in circles, the OP should just bite the bullet and send it to someone who knows what they're doing!

well id have to dissagree, theres more satisfaction of doing summint yourself even after 5 pages of posts. OP stick with it, as long as your making progress :cool2:

 

[esbmaepo]

i know what i'm doing, xbreboot works infact. Why i should pay a coolrunner without making any possible attemp?

Sent from my HTC 7 Mozart using 'na beata minchia

Okay stick with it then

Dont think its hardware related if your xbreboot works. It must be the way you are creating your freeBoot bin. What dashboard version are you creating?

 

[Martin C]

well id have to dissagree, theres more satisfaction of doing summint yourself even after 5 pages of posts. OP stick with it, as long as your making progress :cool2:

If by progress you mean being dragged through every single step, then yeah. This is like teaching someone to swim by holding them under the water.

OP - I wish you the very best of luck in getting this sorted. 5 pages of info in addition to THOUSANDS of pages of information across the web should be more than enough to get yourself sorted.

Everything that I've suggested will work provided your connections are good and you know what you're doing.

 

[Mich91]

Okay stick with it then

Dont think its hardware related if your xbreboot works. It must be the way you are creating your freeBoot bin. What dashboard version are you creating?

i've tried every possible FBdash, using any possible software

If by progress you mean being dragged through every single step, then yeah. This is like teaching someone to swim by holding them under the water.

OP - I wish you the very best of luck in getting this sorted. 5 pages of info in addition to THOUSANDS of pages of information across the web should be more than enough to get yourself sorted.

Everything that I've suggested will work provided your connections are good and you know what you're doing.

I did't choice intentionally a "unlucky" console, i wouldn't ask you help if freeboot worked... i'm only searching a solution to this strange problem

 

[Martin C]

It's not unlucky that you don't know what you're doing with it - that really doesn't come into it.

Here's how to resolve this issue.

1. Wire your JTAG so it's standard SMC points - this eliminates all permutations of AUD_CLAMP etc. Look at normal JTAG wiring diagrams for correct orientation of diodes.
2. Write Xellous to your console with SMC standard wiring. It should boot to XeLL.
3. Run your NAND dump through Multi_builder 0.4 and build a JTAG image for your console. It will remap your bad block for you. Choose standard SMC wiring.
4. Either flash to your console using NAND-x or put on a USB stick and rename to updflash.bin.

THIS will resolve the problem. The reasons why you've not resolved this yet are:

1. Bad soldering.
2. No understanding of different SMC points.
3. Wrong process for bad block remapping.
4. issues with writing back NAND, possibly due to bad wires between nand-x and console (although #4 above would sort this if you used updflash.bin).

None of the above I would class as 'unlucky'. If I had it in front of me it would take me 10 minutes to resolve.

 

[Mich91]

i can only say thank you and
1- xbreboot works solder seems good (they was made from my friend that solder for work from 20 years)
2- using kit xecuter, they don't know?
3- i tried all possible method of remapping
4- i flashed nand also from usb using xell

i'll try soldering on the bottom of the board, using standard smc and following your advice

 

[Martin C]

ok - use your XBReboot file as the source image (rename it to nanddump.bin) and run it through multi-builder. It should keep the SMC file and correctly remap bad blocks. Once it's done, post the nandflash.log.

 

[Mich91]

as soon as possible, i'll solder wires correctly and flash console.
meanwhile i created freeboot like martin c said, from XBREboot working file, here is log:

---------------------------------------------------------------
fbBuild v0.33 (R:272)
---------------------------------------------------------------
data directory overridden from command line to '13604'
per build directory overridden from command line to 'my360'
file name overridden from command line to 'nandflash.bin'

------ parsing user ini at '.\my360\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0xe6 bytes in memory
loading cpukey.txt from .\my360\cpukey.txt
CPU Key set to: 0x2DDAF934172C33F7B70E1830A4095E80
setting 1blkey from ini: 0xDD88AD0C9ED669E7B56794FB68563EFA
1BL Key set to: 0xDD88AD0C9ED669E7B56794FB68563EFA sum: 0x983 (expects: 0x983)
Using nonandmu option (ini file)
default console DVD eject button is being used to start xell

------ Checking .\my360\nanddump.bin ------
Loading NAND dump...done!
NAND dump is from a small block machine
NAND dump uses small block controller
parsing dump into user and spare...
block 0xb1 was remapped to block 0x3ff, entering remap instance 1
done!
cleaning up stray remaps
done!
--remap summary--
0: source: 0x00b1 dest: 0x03ff
-----------------
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, checking for hack
SMC in image is hacked, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xf7c000! Using if no smc config is provided.

------ parsing ini at '.\13604\filelist.ini' ------
ini version 13604

ini: label [falconbl] found
found (1) 'cb_5770.bin' crc: 0x3279f0d5
found (2) 'cd_5770.bin' crc: 0xd04e8927
found (3) 'ce_1888.bin' crc: 0xff9b60df
found (4) 'cf_4532.bin' crc: 0xd28ef722
found (5) 'cg_4532.bin' crc: 0x2cc9b951
found (6) 'cb_5771.bin' crc: 0x859140f0
found (7) 'cd_8453.bin' crc: 0x25e0acd0
found (8) 'cf_13604.bin' crc: 0x639a4cd7
found (9) 'cg_13604.bin' crc: 0x7e9f5364

ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0xdaed8bc7
found (2) 'bootanim.xex' crc: 0x8a7ab1b4
found (3) 'createprofile.xex' crc: 0xe19ca8c4
found (4) 'dash.xex' crc: 0xecdaf6c0
found (5) 'deviceselector.xex' crc: 0xaa4579d1
found (6) 'gamerprofile.xex' crc: 0xebc5fec3
found (7) 'hud.xex' crc: 0xe2410ee1
found (8) 'huduiskin.xex' crc: 0x390eac39
found (9) 'mfgbootlauncher.xex' crc: 0xf3637ed9
found (10) 'minimediaplayer.xex' crc: 0x23d28bb8
found (11) 'nomni.xexp' crc: 0xed7cd3f5
found (12) 'nomnifwk.xexp' crc: 0x2c6fd7e8
found (13) 'nomnifwm.xexp' crc: 0xaa978831
found (14) 'signin.xex' crc: 0xf7436a62
found (15) 'updater.xex' crc: 0xd0cd6753
found (16) 'vk.xex' crc: 0x65f4eec0
found (17) 'xam.xex' crc: 0x2a74ee0f
found (18) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (19) 'xenonclatin.xttp' crc: 0x7a507ad1
found (20) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (21) 'xenonjklatin.xttp' crc: 0x945b7092
found (22) 'ximecore.xex' crc: 0xccb87938
found (23) 'ximedic.xex' crc: 0x1d992bfb
found (24) 'ximedic.xexp' crc: 0x47a55af9
found (25) 'launch.xex' crc: 0x00000000
found (26) 'lhelper.xex' crc: 0x00000000

ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------

output name overridden to: nandflash.bin

Writing initial header to flash image

------ Loading bootloaders and required security files ------
could not read \bin\payload.bin, using built in payload (0x200 bytes)
reading .\my360\smc.bin (0x3000 bytes)
reading .\my360\kv.bin failed, using kv.bin from nand dump
reading .\13604\cb_5770.bin (0x8e40 bytes) (crc32: 0x3279f0d5 ini: 0x3279f0d5)
reading .\13604\cd_5770.bin (0x56c0 bytes) (crc32: 0xd04e8927 ini: 0xd04e8927)
reading .\13604\ce_1888.bin (0x5606a b pad 0x56070 b) (crc32: 0xff9b60df ini: 0xff9b60df)
reading .\13604\cf_4532.bin (0x44c0 bytes) (crc32: 0xd28ef722 ini: 0xd28ef722)
reading .\13604\cg_4532.bin (0x2ef40 bytes) (crc32: 0x2cc9b951 ini: 0x2cc9b951)
reading .\13604\cf_13604.bin (0x4450 bytes) (crc32: 0x639a4cd7 ini: 0x639a4cd7)
reading .\13604\cg_13604.bin (0x659e0 bytes) (crc32: 0x7e9f5364 ini: 0x7e9f5364)
could not read \bin\freeboot.bin, using built in core (0xd50 bytes)
reading .\13604\bin\patches_falcon.bin (0x8bc bytes)
**** ldv line 3 set to 00 f0 type: 3
reading .\my360\xell-2f.bin (0x3f848 bytes)
reading .\13604\cb_5771.bin (0x9340 bytes) (crc32: 0x859140f0 ini: 0x859140f0)
reading .\13604\cd_8453.bin (0x5780 bytes) (crc32: 0x25e0acd0 ini: 0x25e0acd0)
reading .\my360\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 75øC Edram: 78øC
Max temps : Cpu: 100øC Gpu: 100øC Edram: 102øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:1d:d8:6a:e3:eb
AVRegion : 0x00000300 (PAL50)
GameRegion : 0x02fe (NTSC/EU)
DVDRegion : 2
resetKey : YYXY
---------------------
Checking ini for smc config data patches
smc was not patched
---------------------
done!

------ Encrypting and finalizing bootloaders ------
patching payload.bin to load size 0xd50 (0x354 reps)
hack found in smc.bin!
done!

------ Adding bootloaders to flash image ------
Fixing up FS table...done!
Writing zeropair CG patch slot overflow data to sysupdate.xexp1...done!
Writing target CG patch slot overflow data to sysupdate.xexp2...done!

------ adding 26 firmware files ------
reading .\13604\aac.xexp (0x4800 bytes) (crc32: 0xdaed8bc7 ini: 0xdaed8bc7)
reading .\13604\bootanim.xex (0x55000 bytes) (crc32: 0x8a7ab1b4 ini: 0x8a7ab1b4)
reading .\13604\createprofile.xex (0xc000 bytes) (crc32: 0xe19ca8c4 ini: 0xe19ca8c4)
reading .\13604\dash.xex (0x5e7000 bytes) (crc32: 0xecdaf6c0 ini: 0xecdaf6c0)
reading .\13604\deviceselector.xex (0x9000 bytes) (crc32: 0xaa4579d1 ini: 0xaa4579d1)
reading .\13604\gamerprofile.xex (0x1a000 bytes) (crc32: 0xebc5fec3 ini: 0xebc5fec3)
reading .\13604\hud.xex (0x1f000 bytes) (crc32: 0xe2410ee1 ini: 0xe2410ee1)
reading .\13604\huduiskin.xex (0x11000 bytes) (crc32: 0x390eac39 ini: 0x390eac39)
reading .\13604\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0xf3637ed9 ini: 0xf3637ed9)
reading .\13604\minimediaplayer.xex (0xc000 bytes) (crc32: 0x23d28bb8 ini: 0x23d28bb8)
reading .\13604\nomni.xexp (0xd000 bytes) (crc32: 0xed7cd3f5 ini: 0xed7cd3f5)
reading .\13604\nomnifwk.xexp (0x2000 bytes) (crc32: 0x2c6fd7e8 ini: 0x2c6fd7e8)
reading .\13604\nomnifwm.xexp (0x5000 bytes) (crc32: 0xaa978831 ini: 0xaa978831)
reading .\13604\signin.xex (0x12000 bytes) (crc32: 0xf7436a62 ini: 0xf7436a62)
reading .\13604\updater.xex (0x8000 bytes) (crc32: 0xd0cd6753 ini: 0xd0cd6753)
reading .\13604\vk.xex (0x9000 bytes) (crc32: 0x65f4eec0 ini: 0x65f4eec0)
reading .\13604\xam.xex (0x218000 bytes) (crc32: 0x2a74ee0f ini: 0x2a74ee0f)
reading .\13604\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
reading .\13604\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
reading .\13604\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
reading .\13604\xenonjklatin.xttp (0x7000 bytes) (crc32: 0x945b7092 ini: 0x945b7092)
reading .\13604\ximecore.xex (0x15000 bytes) (crc32: 0xccb87938 ini: 0xccb87938)
reading .\13604\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
reading .\13604\ximedic.xexp (0x2800 bytes) (crc32: 0x47a55af9 ini: 0x47a55af9)
reading .\13604\launch.xex (0x9000 bytes)
reading .\13604\lhelper.xex (0x6000 bytes)

------ adding 4 security files ------
reading .\my360\crl.bin (0x9e0 bytes)
writing as crl.bin to flash
reading .\my360\dae.bin (0xad30 bytes)
writing as dae.bin to flash
reading .\my360\extended.bin (0x4000 bytes)
writing as extended.bin to flash
reading .\my360\secdata.bin (0x400 bytes)
writing as secdata.bin to flash

------ checking for Mobile*.dat ------

------ adding smc_config.bin ------

------ finalizing image ------
Fixing up empty FS block entries...done!
Writing FS table to image...done!
calculating ECD bytes and assembling raw image...done!
remapping 1 blocks
copying 0x4200 bytes of LBA 0xb1 to block 0x3ff...zero fill origin...done!
done!
writing file 'nandflash.bin' to disk...done!
nandflash.bin written OK

---------------------------------------------------------------
nandflash.bin built, info:
---------------------------------------------------------------
console : falcon
NAND size: 16MiB
xell : power on console with console eject button
CPU Key : 2DDAF934172C33F7B70E1830A4095E80
1BL Key : DD88AD0C9ED669E7B56794FB68563EFA
---------------------------------------------------------------
fbBuild Finished. Have a nice day.
---------------------------------------------------------------

i would use this scheme, it seems good:

 

[Mich91]

using that scheme it's works! with a little problem, but works!
it's 3 am here, i'll tell you tomorrow, night and thank you