JTAG Rebuilding NAND

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
Alright so I've got the donor Zephyr NAND as well as a type 2 KV. Most guides say to inject the KV & Config however I don't have the config file and I'm not sure if that is what is holding me back. I opened up the decrypted KV with Bincrypt2 and added my CPU key where it asked for it. I then encrypted & injected the KV into the Zephyr NAND and tried to create a FreeBoot image using the Zephyr NAND and it yielded E79 (1033) yet again. Not sure if I'm doing something wrong here but any help would be greatly appreciated. I'm thinking of dumping my DVD Key and changing it to the one listed in the KV then just flashing the rebuilt NAND with the JTAG switch Off to see if that helps.
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
I'm using the AUD_Clamp/DVD_Tray points with the NAND-X QSBs. Yesterday I did manage to get Xell working at one point then flashed Freeboot and it was a no-go with the Christmas lights which soon turned into a single red light (hardware failure) every boot on each of the switch settings. Then I tried to flash Xell back to hopefully leave it with Xell until I could figure out what else to do but that resulted in E79. I forgot to mention it in the previous post but I'm using a donor KV as well as the "Original" donor NAND since I don't have a useful original NAND dump of my own. I'll try again to see if I can get Xell to boot. I've checked the wiring on the underside of the board and the solder points are clean and not shorting out but I'll see if the secondary code has changed.
 

Martin C

VIP Member
Jan 10, 2004
35,981
0
Scotland, UK
www.team-xecuter.com
KV issues don't give E79 - that's normally SMC related.

I had major issues with JTAG Tool v3.00 and Zephyr consoles. You are best to use v2.76 and see if that gives a better result.
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
Ok well I tried 2.76 writing Xell with the points as well as Drive both enabled and disable (not sure if this matters but still tried it) and got 0020 which then turned into E79 with the switch set to 0 & 470. Then tried the other two positions Off & 330 which gave me 0020. So I tried to create a freeboot image with the NAND image I created last night with the donor NAND & KV in JTAG Tool. When fbBuild popped up it said "WARNING: cannot verify smc.bin! If you know this SMC is hacked then disregard this message use -v for additional info" since Martin said its likely an SMC issue how can I resolve this? I tried to provide as much info as I could so hopefully someone could provide some incite.
 

Martin C

VIP Member
Jan 10, 2004
35,981
0
Scotland, UK
www.team-xecuter.com
Ok well I tried 2.76 writing Xell with the points as well as Drive both enabled and disable (not sure if this matters but still tried it) and got 0020 which then turned into E79 with the switch set to 0 & 470. Then tried the other two positions Off & 330 which gave me 0020. So I tried to create a freeboot image with the NAND image I created last night with the donor NAND & KV in JTAG Tool. When fbBuild popped up it said "WARNING: cannot verify smc.bin! If you know this SMC is hacked then disregard this message use -v for additional info" since Martin said its likely an SMC issue how can I resolve this? I tried to provide as much info as I could so hopefully someone could provide some incite.
At any point have you been able to boot to XeLL?

Can you post a pics of your soldering?
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA

Martin C

VIP Member
Jan 10, 2004
35,981
0
Scotland, UK
www.team-xecuter.com
So open JTAG Tool 2.76 and in the options screen, ensure you've selected the wiring type as AUD_CLAMP and TRAY_OPEN, then click write Xellous.

Try booting after this. Leave your switch on 330 for now.
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
It was off for the pic nut I switched the jumper back to 330 as well as the switch in the 330/470 position. I cycled through all four settings both with the drive enabled and disabled

Sent from my DROIDX using Tapatalk
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
Later tonight I'll try it again starting with the JTAG points in the DB1F1/ROL position and move on to the standard AUD_Clamp, followed by the current setup AUD_Clamp/DVD_Tray. Hopefully I can get atleast Xell/Xellous working at that point I'll dump the NAND as it sits just in case something goes screwy then it should boot Xell/Xellous fine.
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
Alright finally found time to start working on the Zephyr JTAG. I flashed the Freeboot I created earlier with the Donor NAND & KV using my CPU key and it throws 0020 no video or anything. I'm thinking I'll redo the entire NAND all over again to see if that is what it may be.
 

TilVl

VIP Member
May 11, 2011
1,383
0
When you use a donor it needs to be built with the CPU key the nand comes from. You can't use your CPU key. That is your problem.
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
Alright I just learned that the NAND dump already contained a KV so I tried just flashing that dump with my CPU key and this time it returned a 0022. I'm gonna try it with the dumps CPU key. Hopefully that will help
 

Johnny8675309

VIP Member
Feb 9, 2011
232
0
Palm Springs CA
Ok after flashing with the donor NAND (unmodified) it just shows the power light. No video however no error code either. I'm not sure if this is progress but I'll try and flash Xell and Xellous to see if either work.

Xell/Xellous didn't help with any switch position. Would spit out either 0020 or 1033.
 
Last edited:

korn_16_f_t_l

VIP Member
Dec 30, 2005
686
0
Muir, Michigan
www.ps2hd.com
ohhh lordy how i hate the zephyr boards XD

well for 1 thing lets tackle one thing at a time here:

have you tried simply using the download clean NAND button in JTAG tool and injecting your KV info, as well as un-wireing th JTAG points just to see if it works as a retail 360?

from what i have gathered from what little bit of modding i have done 1 mod at a time, it sounds to me like your trying it all at once just do one step at a time to help eliminate issues

for example build stock NAND from donor KV and what ever else you need to do and ensure the system works as it should as a retail, if it works properly and you successfully rebuilt your NAND than move on to re-wiring your JTAG points and move on to flash xell, and move down the flow chart as long as things keep working properly

once you run into your actual problem in the process it will than give you some where to start looking for problems be it human error or JTAG tool not functioning properly or what ever

this is just my suggestion Martin up there has been around a lot longer than i have but this is the process i would take in you scenario just to help narrow down what exactly the problem is

if it dosent work after building the retail NAND and trying to have it function as a normal 360 than either you are inputting the wrong data some where (like the CPU key) or JTAG tool is messing some thing up or some thing along those lines

but ya all in all that is how i would narrow down your problem hope you get it figured out i hate these zephyrs XD
 
Last edited: