RGH Problems glitching Zephyr RGH 1

guitarguy

Senior Member
Jul 31, 2012
119
0
I have a Zephyr that I can't seem to glitch using a Coolrunner Rev C and RGH1. I have left it sitting for over 20min but no luck booting Xell. The strange thing is the Coolrunner will flash a solid bright green like normal for about 1min then after that it still flashes green but it only stays green for 1/2 second and it's not as bright. I have tried with and without the capacitor between A and Ground. I have not tried with a shielded cable for CPU_RST yet. Coolrunner has JP1 closed, JP2 2-3 closed, 100nf CAP open.

Here's my j-runner log

J-Runner v0.2 Beta (282) Started

Checking Files
Finished Checking Files
Version: 03

Flash Config: 0x01198010
Zephyr
Reading Nand to C:\Users\mr\Desktop\J-Runner v02 (278) Core Pack\output\nanddump1.bin
Reading Nand
Done!
in 2:01 min:sec

Reading Nand to C:\Users\mr\Desktop\J-Runner v02 (278) Core Pack\output\nanddump2.bin
Initializing Nand..
Nand Initialization Finished
Reading Nand
Done!
in 2:01 min:sec

Comparing...
Nands are the same
Programming Coolrunner
C:\Users\mr\Desktop\J-Runner v02 (278) Core Pack\common\xsvf\zephyr.xsvf
Flashing C:\Users\mr\Desktop\J-Runner v02 (278) Core Pack\common\xsvf\zephyr.xsvf to CoolRunner
Input Filesize: 593E
Output Filesize: 28C6
Done!


Exited!

* unpacking flash image, ....
ECC'ed - will unecc.
UnECC'ed
* found decrypted CD
* found XeLL binary, must be linked to 0x1c000000
* we found the following parts:
SMC: 1.10
CB_A: 4578
CB_B: missing
CD (image): 8453
CD (decrypted): 8453
* this image will be valid *only* for: zephyr
* patching SMC...
Patching Zephyr version 1.10 SMC at offset 0x1257
* zero-pairing...
* constructing new image...
* encrypting CB...
* encrypting CD...
* base size: 6C000
* No separate recovery Xell available!
* Flash Layout:
0x0..0x1FF (0x200 bytes) Header
0x200..0xFFF (0xE00 bytes) Padding
0x1000..0x3FFF (0x3000 bytes) SMC
0x4000..0x7FFF (0x4000 bytes) Keyvault
0x8000..0xFF1F (0x7F20 bytes) CB_A 4578
0xFF20..0x15F1F (0x6000 bytes) CD 8453
0x15F20..0xBFFFF (0xAA0E0 bytes) Padding
0xC0000..0xFFFFF (0x40000 bytes) Xell (backup)
0x100000..0x13FFFF (0x40000 bytes) Xell (main)
* Encoding ECC...Done!
------------- Written into output\image_00000000.ecc

Arm Version: Version: 03
Flash Config: 0x01198010
Writing Nand
Done!
in 0:09 min:sec
















 

guitarguy

Senior Member
Jul 31, 2012
119
0
I tried moving cpu_rst away from coils but still no luck. I have now replaced that cable with the shielded one included with the coolunner rev c but it's still not booting xell. What else can I try?
 

guitarguy

Senior Member
Jul 31, 2012
119
0
I double checked post_out to make sure it wasn't touching FT6U6 with my multimeter and it's ok. Is this the correct bottom point for cpu_rst? I put it there and it's still not booting xell.

 
  • Like
Reactions: jorvan10

Martin C

VIP Member
Jan 10, 2004
35,981
0
Scotland, UK
www.team-xecuter.com
CPU_RST is the same top and bottom. It's a through-hole.

Didn't think I'd need to keep stating this. Thought the 'hey - that arrangement of holes is the same top and bottom. Wonder if they're linked? I'll get my meter out to check' conversation to yourself would have happened long before posting the question.
 

PimpleX

Full Member
Sep 16, 2012
44
0
Zephyrs appear to be hit and miss, ..or in my case miss and miss. I've tried 2 zephyrs now and neither will boot xell for key recovery, tried all the guides and even 50ohm low loss cable etc and repeatedly booting as some say let it try for 30 seconds then reboot, and 1 in 10 times it "may" glitch (no luck for me though)) others say leave it for 15 minutes etc (again no luck).

So Zephyrs are not like falcons and no two are the same, you may get lucky, you may spend 20+ hours trying to make it glitch and it wont. Given the value of the boards these days and the sheer hours of effort involved, i'm now of the opinion that if it doesnt glitch in the first few minutes then give up on it ...they aint worth it.
 

guitarguy

Senior Member
Jul 31, 2012
119
0
From what I've read online I think I'll agree with you. I've tried everything I could think of and it's still not booting xell. How do I flash back to stock?
 

nfidel

Junior Member
Jan 28, 2004
20
0
Portland, OR
Zephyrs appear to be hit and miss, ..or in my case miss and miss.

So Zephyrs are not like falcons and no two are the same, you may get lucky, you may spend 20+ hours trying to make it glitch and it wont. Given the value of the boards these days and the sheer hours of effort involved, i'm now of the opinion that if it doesnt glitch in the first few minutes then give up on it ...they aint worth it.
Have to agree with this 100%. Had one Zep that glitched great and another one that is still super stubborn even after 20+ hours of fiddling. The other issue is that they all run hot as hell, somewhere in the vicinity of 80C just idling. Even if you manage to get them to glitch reliably, you will likely need to run the fan louder than a hair dryer to keep the temps down
 

PimpleX

Full Member
Sep 16, 2012
44
0
In Jrunner make sure the correct nanddump you took when you dumped the nands is in the Source File target path and then flash it using nandx (Write Nand button in jrunner)

Pull the power cord on xbox mobo when finished and wait 30 seconds as per normal. If all is well xbox will boot (CR removed or set to PRG).
 
Last edited:
  • Like
Reactions: guitarguy

guitarguy

Senior Member
Jul 31, 2012
119
0
I reverted to stock and it works fine. The xbox is on dash 13699, would there have been any point updating to a newer dash and trying the glitch?
 

janam4u

Full Member
Jan 17, 2012
38
0
LI NY
Im having the same problem and had the same question regarding RGH1 Vs RGH2 in these infamous Zephyr

PS
checked wiring 3 times\
CB 4578
dash-12625