Jasper 512 No Xell No retail backup

Status
Not open for further replies.

PetrozPL

Junior Member
Jun 6, 2013
24
0
TX Product(s) used: J-R Programmer, CR3 rev C, CR3 Lite
Console Type: Jasper
NAND size: 512
Dashboard version: 2.0.165XX
CB version: not relevant
Screenshot of NAND details from J-Runner:
no valid retail dump
J-Runner log:
not needed, pre-build ecc with replaced KV
Image of Coolrunner:
https://docs.google.com/file/d/0B_HJYRd45_OANWZkeFM2TmVad3M/edit
https://docs.google.com/file/d/0B_HJYRd45_OASHZSbjZlYzkzTmM/edit
https://docs.google.com/file/d/0B_HJYRd45_OAUGdFTlNMQ3U3ZzQ/edit

Images of close-up soldering to motherboard:
https://docs.google.com/file/d/0B_HJYRd45_OAQ05PbzFqZzhmbHc/edit
https://docs.google.com/file/d/0B_HJYRd45_OAbHpNT1pfMGtLem8/edit
https://docs.google.com/file/d/0B_HJYRd45_OAZTlBS2FQX0xXa28/edit
https://docs.google.com/file/d/0B_HJYRd45_OAYmNEekRleldnX3M/edit
https://docs.google.com/file/d/0B_HJYRd45_OAUnZtRjBFckZOMlk/edit
https://docs.google.com/file/d/0B_HJYRd45_OAcDFPeVhIUi10RUU/edit
https://docs.google.com/file/d/0B_HJYRd45_OAeEd3OG9qYmFBWms/edit

Description of problem:
A friend of mine has a bb jasper with 512mb nand flash. He started with successfull read of nand 2 times, next he generated jtag ecc (by mistake) and wrote it to the console. Console obviously didn't boot to xell, so he re-read nand flash 2 more times :facepalm:, re-writing his retail nand with those jtag-ecc'ed dumps... when he wrote to me for help, he couldn't generate RGH 2.0 ecc, so I've send him pre-builded one for jasper motherboard (also replaced KV with his KV, just as jrunner do). After this there was a lot of attempts with tons of different configurations, and as far console didn't boot to xell even once. The interesting thing is that console sometimes hung (coolrunner stops blinking, smc stops sending reset pulses every 5 seconds). He managed to read post_out with multimeter, and it's F2, so it's standard failed glitch attempt, so the console doesn't hung after successful glitch attempt.

At this point probably used all possible configurations for CR3 :
-> different routes and lenght for cpu_reset.
-> different configurations of jumpers on CR.
-> all XVSF files (A,B,C,D,falcon).
-> res-cap-cap (10ohm+68pfx2 serial) and res/cap (parallel) configurations
-> re-checked and re-solderd all point

Also he damaged stby_clk 33 Ohm resistor when re-checking soldering (while removeing hot glue), but he managed to repair resistor/trace.

At this point we have unglitchable brick (without cpu_key cant restore retail image). So maybe the best way to achieve anything would be starting from the beginning with CR3 rev C or CR3 Lite and TX forum members suggestions ;)

Was the console working before you started: Y
 
Last edited:

PetrozPL

Junior Member
Jun 6, 2013
24
0
Unfortunately R-JTAG is way to expensive (the only known reseller in our country sells those for aprox. 100$!!!, when CR3 is about 10 times cheaper), so we would like to use all alternatives before this kind of decision. Please, If anyone can help by posting some suggestions, what can be done with actual setup. At this point our ultimate goal is booting to XELL for cpu_key grab and retail nand rebuild.
 
Last edited:

PetrozPL

Junior Member
Jun 6, 2013
24
0
No one can help? Any suggestions for actual setup with CR3 Lite would be usefull.

Sorry for double-posting but couldn't delete previous and write new one instead for make this thread refresh, so wrote new one.
 
Status
Not open for further replies.