Zephyr Jtag Issues (surprise, surprise)

cab0747

VIP Member
Jan 12, 2011
334
0
Pittsburgh
Alright, so I have successfully jtagged a Jasper, Xenon, and 2 Falcon's. This is my first attempt at a Zephyr (Dash 7357).

I have heard these console are VERY picky, and I am running into issues already.

I have dumped the NAND 3 times. All 3 dumps matched. No bad blocks, no read errors. I have wired it using the AUD_CLAMP and OPEN_TRAY points. After reading and comparing the dumps, I wrote Xell. Everything booted perfectly and I got the CPU key(since Xell booted I am assuming my wiring is fine).

After getting the CPU key from Xell, I decrypted the NAND to get he DVD key, CB value, etc. and it was all decyrpted fine. This rules out me writing down the wrong CPU key.

After getting the CPU key, I used Coolshrimp's Jtag Tool to create the FreeBoot.bin using the original NAND, the correct CPU key, and selecting both alternate points in the options menu.

After flashing the FreeBoot.bin, the console will start up and then just open and close the DVD drive over and over until I turn it off.

I tried re-building and re-flashing the FreeBoot.bin and had the same issue.

I have had issues in the past with CoolShirimp's tool so I created a FreeBoot.bin with EFB. This time I got the E79 error (alt SMC points were selected when creating the FreeBoot.bin)

I got a bit desperate and got the old 8955 XBR NAND from xbins, injected the KV and config, manually updated the correct smc points and flashed the XBR.bin.

This time, the console started to boot, but during the boot sequence (about 1/2 way through when the lights on the RF board are doing the 'dance') the console will throw the E71 error (no HD is connected at the moment).

Any ideas here? I know Zephyr's are weird creatures.

Pics of wiring:






I am at work and had to upload the images using my phone then email the links to my work email account... If the images do not work, I will fix the links when I get home!

As always, thank you in advance for your help!
 

TilVl

VIP Member
May 11, 2011
1,383
0
instead if open tray try just AUD_CLAMP and DB1F1

What is the CB? cause some of them you need to use falcon files for.
 

cab0747

VIP Member
Jan 12, 2011
334
0
Pittsburgh
instead if open tray try just AUD_CLAMP and DB1F1

What is the CB? cause some of them you need to use falcon files for.

Ughhhh DB1F1. I will do it, but I wont like it!

I am at work right now. I took a Screenshot of the details of the NAND and then sent it to my work email address. However, the screenshot isnt showing up correctly. Once I get home I will let you know the CB value.

The console IS exploitable, however. Xell boots fine. I have heard that some Zephyrs need a Falcon NAND. Will the CB value give me/us a clue if this one requires it?
 
Jun 4, 2010
3,080
0
Which version of jtag tool did you use? I would recommend version 3.00, also select the option of no dvd when compiling freeboot.
 

cab0747

VIP Member
Jan 12, 2011
334
0
Pittsburgh
Which version of jtag tool did you use? I would recommend version 3.00, also select the option of no dvd when compiling freeboot.
I updated and I am using 3.13. What issues are there with the new version?

Also, as I stated before, I am currently at work but will try anything suggested when I get home in a few hours.

Thanks!
 
Jun 4, 2010
3,080
0
Just uninstall the latest version and install v3.00 again.
 
Jun 4, 2010
3,080
0
I personally didn't have issues with it because I didn't use it but other people did (feel free to browse the various posts in the homebrew section). I stuck with v3.00 cause I used it and know it works and with my experience with using jtag tool I don't update whenever a new version comes out straight away as they always tend to have issues.
 

cab0747

VIP Member
Jan 12, 2011
334
0
Pittsburgh
I got it working using the 9199 dash selection on CoolShrimp's Jtag tool 3.00. I am still using AUD_CLAMP and OPEN_TRAY points.

I am going to try to update the dash using the 3.00 tool.

At least I know I have a working FreeBoot.bin for this console!

Thanks for all the help! Mods, feel free to close this, I am pretty sure I have got it all from here!
 

cab0747

VIP Member
Jan 12, 2011
334
0
Pittsburgh
I had a load of problems with a Zephyr. In the end I replaced the nand chip. Worked fine afterwards. Ive got another 2 Zephyrs here and am not looking forward to doing them
Works fine with 9199. If I got to 12611 or higher, it just boots to Xell 1/2 of the time (even when turning it on with the power button)

Never heard of this. If anyone has an idea or two, let me hear em!

thanks!
 

cab0747

VIP Member
Jan 12, 2011
334
0
Pittsburgh
The one I had booted to xell 9 out of 10 times. I set the option on jtag tool, DVD drive - No. The still tray opened at turn on but it stopped it booting into xell
Sounds like a decent solution.


Now to see if I can get the 13xxx dash working. Coolshrimp's tool (v3.13) doesnt seem to build the NAND properly. Anyone have another tool to build the 13xxx NAND for a Zephyr?
 

doctorC

Junior Member
Feb 21, 2011
18
0
Ok I had also problems with Zephyrs and previous Jtag tool versions BUT v3 builds correctly 12625 dash nand and 3,13 13146 nand....
Yesterday I upgraded a zephyr to AUD clamp&DVD tray AS ORIGINAL JTAG POINTS MESS WITH HDMI CONNECTIONS (e79 and setup every time you boot..)
Freeboot 13146 was correctly written to nand....so go with this option in your zephyr..
I DIDN'T USE THE NO DVD OPTION.. AND YES THE TRAY OPENS EVERY TIME I BOOT BUT BYE BYE E79 WITH HDMI
JTAGTOOL is a bit peculiar... JUST SET RIGHT FROM THE START THE BASIC OPTIONS (BEFORE YOU EVEN LOAD A NAND.BIN)
1. JTAG POINTS
2. DASH VERSION
THEN DO THE REST WRITE XELL AND AFTERWARDS XELLOUS...
Pay also attention to the CB version as some zephyrs NEED falcon setup....
 

cab0747

VIP Member
Jan 12, 2011
334
0
Pittsburgh
Ok I had also problems with Zephyrs and previous Jtag tool versions BUT v3 builds correctly 12625 dash nand and 3,13 13146 nand....
Yesterday I upgraded a zephyr to AUD clamp&DVD tray AS ORIGINAL JTAG POINTS MESS WITH HDMI CONNECTIONS (e79 and setup every time you boot..)
Freeboot 13146 was correctly written to nand....so go with this option in your zephyr..
I DIDN'T USE THE NO DVD OPTION.. AND YES THE TRAY OPENS EVERY TIME I BOOT BUT BYE BYE E79 WITH HDMI
JTAGTOOL is a bit peculiar... JUST SET RIGHT FROM THE START THE BASIC OPTIONS (BEFORE YOU EVEN LOAD A NAND.BIN)
1. JTAG POINTS
2. DASH VERSION
THEN DO THE REST WRITE XELL AND AFTERWARDS XELLOUS...
Pay also attention to the CB version as some zephyrs NEED falcon setup....

This issue has been sorted (well, as much as it can be). I got it running using Jtag Tool v3.00 and No DVD fix. The drive still opens but wont boot to Xellous unless I actually hit the eject button. Not a perfect solution, but it works.

In addition, I got bold and made a 13xxx NAND using Jtag Tool v3.13. Flashed it using Flash360 and it worked fine. Maybe there was some issue with my LPT port the first time.

Either way, it is working great now. Thanks to everyone who helped me with this.