Jasper BB Demon/CR4 R-JTAG+ Glitches Successfully but Does Not Boot

[jerky333]

I have another Jasper with CR4 installed with R-JTAG method and the thing boots near perfectly every time and wanted to improve the boot times on this console with a CR4. I had R-JTAG v1.1 installed but the boot times were spotty, so I am trying to install a CR4 in this box.
I believe all my wiring and soldering is correct, and have re-flashed the Demon with with a JTAG XeBuild image with both R-JTAG and Aud_Clamp options selected.
The unit appears to begin to boot but never actually boots, the post entries never make it past 3F, iirc it should make it to Post 79.
I've tried all 3 resistor jumper settings on the CR4 itself, and both 470 and 0 ohms on the JTAG QSB, the only effects it had was to change the number of cycles it took to hang.

I'm looking for suggestions for what I can try to get this thing to fully boot.

Thanks in advance

CR4 Selected
Version: 10
Power Up
Waiting for POST to change
Post 01 - . 
Post 01 - . 
Post 03 - ... 
Post 04 - BOOT SEQUENCE STARTING 
Post 05 - ... 
Post 06 - .... 
Post 07 - ..... 
Post 08 - ...... 
Post 09 - ....... 
Post 0A - ........ 
Post 0B - ......... 
Post 0C - .......... 
Post 0D - GLITCH CHECK COMMENCE 
Post 0E - CB_B ENTRY REACHED 
Post 0F - GLITCH SUCCESSFUL 
Post 10 - ...... 
Post 11 - ....... 
Post 12 - ........ 
Post 14 - .......... 
Post 15 - CONTINUING 
Post 16 - . 
Post 17 - .. 
Post 18 - ... 
Post 19 - .... 
Post 1A - ..... 
Post 1E - . 
Post 1F - .. 
Post 20 - ... 
Post 21 - .... 
Post 22 - . 
Post 23 - .. 
Post 24 - Entrypoint reached 
Post 25 - ... 
Post 26 - .... 
Post 27 - ..... 
Post 28 - ...... 
Post 29 - ....... 
Post 2A - ........ 
Post 2C - ........... 
Post 2D - ............ 
Post 2E - LOAD XAM 
Post 2F - ............. 
Post 30 - .............. 
Post 31 - INIT KERNEL 
Post 32 
Post 33 
Post 34 
Post 35 
Post 36 
Post 37 
Post 38 
Post 39 
Post 3B 
Post 3D 
Post 3E 
Post 3F 
Shutdown
Power Up
Waiting for POST to change
Post 01 - . 
Post 01 - . 
Post 03 - ... 
Post 04 - BOOT SEQUENCE STARTING 
Post 05 - ... 
Post 06 - .... 
Post 07 - ..... 
Post 08 - ...... 
Post 09 - ....... 
Post 0A - ........ 
Post 0B - ......... 
Post 0C - .......... 
Post 0D - GLITCH CHECK COMMENCE 
Post 0E - CB_B ENTRY REACHED 
Post 0F - GLITCH SUCCESSFUL 
Post 10 - ...... 
Post 11 - ....... 
Post 12 - ........ 
Post 13 - ......... 
Post 15 - CONTINUING 
Post 16 - . 
Post 17 - .. 
Post 18 - ... 
Post 19 - .... 
Post 1A - ..... 
Post 1C - ....... 
Post 1E - . 
Post 1F - .. 
Post 20 - ... 
Post 21 - .... 
Post 22 - . 
Post 23 - .. 
Post 24 - Entrypoint reached 
Post 25 - ... 
Post 26 - .... 
Post 27 - ..... 
Post 28 - ...... 
Post 29 - ....... 
Post 2A - ........ 
Post 2C - ........... 
Post 2D - ............ 
Post 2E - LOAD XAM 
Post 2F - ............. 
Post 30 - .............. 
Post 31 - INIT KERNEL 
Post 32 
Post 33 
Post 34 
Post 35 
Post 36 
Post 37 
Post 38 
Post 39 
Post 3B 
Post 3D 
Post 3E 
Post 3F 
Shutdown

 

[lonix]

No guarantees it will work, but try making your image without rjtag selected, again not sure if it will work at all.

But it can't hurt either

 

[ps5tx]

on your jtag qsb on the bottom of the board, you have both aud clamp *and* the std jtag R2.. soldered. Try removing the R2.., (it's on top of the qsb board near the aud clamp wire) aud clamp settings should work after this.

let me know how it went.

 

[jerky333]

Thanks but unfortunately neither of those suggestions should work, removing the solder joint on the jtag QSB will only prevent that resistor from being connected to pad #2, which is not connected to anything else anyways. And flashing a jtag image shouldn't work because that is a different exploit and shouldn't boot or even glitch properly.

 

[gavin_darkglide]

the r-jtag image is a jtag image with the smc reset patched for the glitch. so it would work, as long as the chip doesnt glitch more then 4 or 5 times. if he is getting to the point of load xam, and getting nothing on the screen, and it still boots stock, I would look at modifiying smc config power settings.

 

[jerky333]

I'll give that a try.

As a reference for others I found this post outlining the process for Falcon's, I'm assuming I can try similar settings with my jasper.
I'll update with my results.

 

[gavin_darkglide]

Yeah, that is what you are looking for. as I said it seems to me the system is freezing before the boot animation, which I have seen on falcons before.

 

[jerky333]

I tried all combinations suggested in the post referenced earlier, with the same results, the boot hangs on 'Post 3F'.
I'm going to attempt an RGH2+ install and see if I have any better luck.

 

[jsinger47]

Any sort of fail after 2E is likely related to your Jtag wiring

 

[lonix]

Try bridge pads 1-2 on your JTAG qsb and write an image without aud_clamp

 

[jerky333]

Looks like I had to take the long way around, but the RGH2+ install did the trick.
Rater Results below, not 100% perfect, but I'll take it, boot times are vastly improved over the old R-JTAG 1.1 that I had in here.

#15 Dip Switch profile, Pro Coax Cable and 0 Ohm jumper set.

Overall: 20 / 20
Average: 1.75
Median: 1.5
Score: 8.50


Cycle 1 - 50.00%
Cycle 2 - 40.00%
Cycle 4 - 5.00%
Cycle 5 - 5.00%


50% within 1 Cycles
100% within 5 Cycles


5, 1, 1, 2, 1, 
1, 2, 2, 1, 1, 
4, 2, 1, 2, 1, 
1, 2, 2, 2, 1,