jtag info

[Modded Matt]

ok so I am working on my first jtag xbox. There is info all over the net about this, most of which is a year or more old. Crazymodder provided us with a very good tut for the hardware based mods, but then lacks a bit on the software side, and provides no user support. I want to change this. So I plan to add the other board schematics to his tut, and pick up a detailed software description/tutorial, but I dont know what I am doing. so...lets start by identifying ALL of the needed programs, their functions, and the order in which they need to be installed/used. as stated, I am not 100% sure of what I am doing so any member please feel free to post. I will continuously update the first thread as more info is posted, and confirmed, then update crazy's tutorial.


step one: hardware
1. jtag wiring
     notes: A. need pics for all boards

2. jtag nand dump cable.
      notes: A. crazy's tut shows this part well
                B. I had to use a diode at LPT pin11 to read the nand

step two dumping the nand:
1. nandpro- this program is used to preform the dump
     notes:  A. move to c directory
                B. run "port95nt.exe" to install drivers
                C. any changes for 64 bit os???
                D. nandpro use command prompt, it just states "reading" and starts counting through the blocks. it read through my nand in about 30 minutes and had one error #250 at 1d2 which appears to be normal (these errors are just how the nand is)
                E. after reading the nand through block 003FF the cmd prompt is waiting for another command....where is the nand? nand found, it was in my user account file... nandpro20e created the "nand1" file, thats all it knows how to do, each time you dump it it either creates this file, or overwrites the existing one (if "nand1" already exists) so after each dump, rename it. 


2. hex editor workshop (or any hex editor) is used to compare two copies of the nand to ensure its a clean accurate dump. tools>compare>compare file... i dumped three matching nand files

[robin1989]

also there was the new method recently released that allows you to jtag any 360 i think

[Modded Matt]

ok, so Im not getting much help from the community here???? so first attempt and the nand read error on every sector. this was with out the diode in the lpt cable per crazy's tut. so now I added the diode, and gave the read command and it states"

testing lpt device address 0378
using lpt
flash config 0x01198010
....bl;ah
...blah
...blah
file nand1.bin
reading
0011---0094+++ and counting.

does that seam right, it says reading and is going through the sectors. nothing is comming up, but no errors yet either....ill let it keep going.

[Rodent]

Sorry matt, I been  away most of the day, had to help a friend out with some work .  I  dont know if thats right, or  not, only started on jtag and then it E-73 on me. I  will try and get some more info on this  for you .

[magic_man185]

Matt,

I wish I could be of some help, but I have never had a box to JTAG personally.  Robin, technically speaking that is not a JTAG.  The method is different, and so far none of the JTAG software works for the new glitch (all that is available for the glitch so far is XEX).

[Modded Matt]

lol @ rodent, ill sell you this one back when im done

[Rodent]

lol @ rodent, ill sell you this one back when im done

Why did you F it up? ...lmao

[grantfar]

*Install the jtag wireing (http://i35.servimg.com/u/f35/14/85/91/33/jtag11.jpg) (http://i33.tinypic.com/2i8dx5v.jpg) also look up the aud *Clamp jtag for non-xenons.
*Install a nandx (Nandx is highly recommended)  or lpt cable.
*Download the jtag tool (http://team-xecuter.com/forums/showthread.php?t=54178).
*Install drivers (64 bit is iffy in my experience)  then read your nand 3+ times.
*Compare the nands using the jtag tool.
*once you have got 2 matching nands use the kv info tab to get your cb version.1888, 1902, 1903, 1920,1921: xenon 4558:Zephyr
5761, 5766, 5770: falcon 6712, 6723: jasper cbs are jtaggable.
*If it is jtaggable install xell or xellous to get your cpu key
*put the cpu key on a .txt file then put it in the jtag tool or other freeboot maker with your original nand.
*Flash that freeboot bin onto you nand.
*See that you xbox works
*Store your original nand and Cpu key somewhere safe

[crazy-modder]

ok, so Im not getting much help from the community here???? so first attempt and the nand read error on every sector. this was with out the diode in the lpt cable per crazy's tut. so now I added the diode, and gave the read command and it states"

testing lpt device address 0378
using lpt
flash config 0x01198010
....bl;ah
...blah
...blah
file nand1.bin
reading
0011---0094+++ and counting.

does that seam right, it says reading and is going through the sectors. nothing is comming up, but no errors yet either....ill let it keep going.

Hmmm that doesnt look right to me. I dont use lpt anymore cause its slowing than molasses river. Usb is the way to go if you want to get it done in a decent amount of time. The only time i ever use diodes is if im jtagging a falcon or jasper.  I also use this to make my freeboot img, this will give you the latest 13599 kinect dash http://digiex.net/downloads/download-center-2-0/xbox-360-content/apps/9086-bestpigs-freeboot-toolbox-0-04-maker-v2-7-2-13599-kernel-dashboard.html. There is no need to flash xbr to it, once you have 2 successful nand dumps compare them. If they check identical the go ahead and flash xell.bin. Download xellous v1.0 to make the xell for your xbox version, its a gui. Now once you have xell flashed, connect your xbox to a tv and turn it on via the dvd drive eject button. This will boot you into xell so you can retrieve your cpu key. Once you have your cpu key, you can make your freeboot image with the best pigs program. Remember to extract your kv.bin and confing.bin from your original nand. Flash your kv.bin and config.bin to the freeboot image, it will look something like this.


nandpro.exe freeboot.bin: -w16 kv.bin 1 1
nandpro.exe freeboot.bin: -w16 config.bin 3de 2

Then flash the freeboot.bin to your xbox like this

nandpro.exe usb or lpt: -w16 freeboot.bin

For lpt wait 10 years for it to flash, usb wait 4-5 minutes.

Then once its done flashing test it out and hope you didnt miss something and get the christmas lights lol.  Sorry for how jumbled this is, if you need help feel free to ask.

[Rodent]

where can  we  get a usb to flash  the xbox? dont have time to wait an hour to dump it twice

[crazy-modder]

I use this one http://www.diygadget.com/jtag-cables/usb-spi-jtag-utility-bundle.html

[xxijbixx]

where can  we  get a usb to flash  the xbox? dont have time to wait an hour to dump it twice

canda - http://www.modchip.ca/store/product.php?productid=16683&cat=284&page=1

usa - http://www.modchipcentral.com/store/?cat=294

[Modded Matt]

where is the nand stored after reading? I read twice it read through block 3ff with one error 250 both time

[crazy-modder]

where is the nand stored after reading? I read twice it read through block 3ff with one error 250 both time

ahhh i had that error yesterday when jtagging. Did it fail block 2D2?? The nand is stored in the nandpro folder after you dump. Bad block 2D2 is a normal block. I went ahead and did a remap just in case.

[Modded Matt]

ok, so you have to slow down as this is my first time. lol im back at it again.

so I put the nandpro20e in the root of the c drive, but after reading the nand twice, the nand is still no where to be found. I found it in my documents and settings/all users file. but there is only one copy, I am assuming it over wrote the original each time I made a dump. sop the lesson learned is find the nand dump and copy it before making the second dump, save an hour of your life.

[crazy-modder]

When you dump your nand, name them something like this.

1st dump

nandpro.exe usb or lpt: -r16 nand1.bin


2nd dump

nandpro.exe usb or lpt: -r16 nand2.bin

[Modded Matt]

ok, so I dumped the nand, compared it and they matched. I then flashed xell to it without getting the kv and config... will it still read or do i need to reflash it with the original nand?

xell did run and I have my cpu key.

[crazy-modder]

No thats fine, you did it right.

extract your kv and config like this


nandpro.exe nand1.bin: -r16 kv.bin 1 1


nandpro.exe nand1.bin: -r16 config.bin 3de 2

THen flash those to your freeboot img you created using your cpu key.


nandpro.exe freeboot.bin: -w16 kv.bin 1 1

nandpro.exe freeboot.bin: -w16 config.bin 3de 2




Then go ahead and flash the freeboot image to your xbox

nandpro.exe usb or lpt: -w16 freeboot.bin

[Modded Matt]

ok, so looking at the command its pulling the kv and config from my "nand1" file, not the xbox itself, technically I do already have it.

nandpro.exe(the program)    nand1.bin(the file/device):       -r16(the action)       kv.bin 1 1(this will be the new kv file??)

is that basically correct?

thanks crazy, I will get back at it tomorrow.

[crazy-modder]

Yeah its pulling it from the actual nand. It should show up as kv.bin and config.bin. It wont show up as kv.bin 1 1 or config.bin 3de 2 when you extract them. And no problem man, im glad to help you. I will be packing up all my computer stuff tomorrow cause im moving on friday. So i wont be able to get back on for a week or two.

[Modded Matt]

ok. so after I create and flash this new freeboot dash, then what steps should I start with next?

[crazy-modder]

Turn your xbox on and enjoy your new jtag  <---if u flashed it correctly 

[Nevbox]

be cool is someone made a tut on this

[Rodent]

be cool is someone made a tut on this

crazy-modders tutorial for  jtags
https://www.acidmods.com/forum/index.php/topic,36590.0.html

[Modded Matt]

I will be rewriting crazys tutorial when I am finished, as I am learning alot of this as I go. I will write a tutorial that has all steps and schematics needed. along with all needed programs. (clean copies) the only program that wont clear a virus scan is xbins and that is due to the ftpscript.

[Rodent]

He has a good tut, and its good your going to rewrite it, files changed and alot more motherboards then just  the xenon and falcon and jasper. I been searching for stuff since i bought these but never know whats the best thing to use, so maybe together we can get the easiest way to make the tut, my memory isnt fresh on the jtags though.

[Modded Matt]

ok, so I added the kv and config to my freboot dash and am now writing to the xbox. hope all goes well. 

[Rodent]

Wish  you luck fingers crossed

[Modded Matt]

yea, that didnt work, but I loaded xbr and it now have the outdated xbr. now to update

[Rodent]

damn your scaring me, I didnt know it was that much trouble to jtag, crazy-modder made it look so easy 

[robin1989]

http://xbox-scene.com/   -    seems to have a lot of news on jtag apps etc

[Rodent]

Thanks Robin for the info,

[Modded Matt]

th jtag part is easy. its the software that there is no direction for, (the part crazy didnt finish) and so much different out there I am really getting pissed off. am at the end of crazys tut and dont know where to go next. he told me to skip xbr and just load freeboot, but that donst work, the three pigs app gives a different file everytime it compiles, with different unusable results each time I flash it to the xbox. and 90% of the tuts you see use xexmenu. but how do I get that on there.


I think I have to burn xexmenu to a dvd-r then load it to the xbox, and uses xex to update everything. but i dont know. I wish someone would finish the tutorial. every tut on the web stops in the same place crazy's tut stops......

[robin1989]

they have just released a new version of freeboot and renaimed it something else i thnk

[Mogler]

you can put xbr on it right now it and then when u get it all setup on the jtag you can reflash it with flash360 on the actual console with "updflash.bin" the updated freeboot i think its 5.32 now? 13359 you can look up how to update your jtag that on youtube after you load xbr on it.

[Modded Matt]

I put xbr on it following crazy tut. It just appears to be an outdated dash. 8xxx. All the freeboot updates use xexmenu. How do i get that on the box? Di i have to burn the so to a dvd?

[crazy-modder]

I put xbr on it following crazy tut. It just appears to be an outdated dash. 8xxx. All the freeboot updates use xexmenu. How do i get that on the box? Di i have to burn the so to a dvd?

Sry ive been away, just got back to indiana after a long drive. Matt lol....your making it harder than what it needs to be. The best pigs freeboot works for me EVERY time. Save it as freeboot.bin or whatever you want. Flash your kv and config.bins to the freeboot and flash the freeboot to your xbox. Simple as that. Thats why most people stop where i left off cause its pretty straight forward.

[Modded Matt]

I used freeboot and compiled it with my kv and config...three times, each time the hex editor showed a that they were different files. I got three different results, 1st was 3 red rings, 2nd was hang up at the xbox screen, 3rd was 1 red light. but then I compiled and flashed the xbr file  (from your tut) and it booted fine, so im sure my wiring part is fine.

I will try freeboot one more time.

so I will compile a feeboot with my original nand and cpu key, then write kv to it, then write config to it and finally flash it to the xbox. here goes....

[Modded Matt]

froze at the loading screen, I did have a bad block at 1D2, I remapped it and am reflashing

after remapping the bad sector, it boots into the new dash with xex menu installed. now to figure out how to put it to work.

that took much longer than it should due to the bad block. I read that the system overlooks the bad blocks and looks for them to be reinserted from the end of the bank. therefore when it got to the end of mine, it wasnt there. this is how microsoft and freeboot both address the problem. I also read that I should open it back up and do something to protect it against an accidental official update...must look into that.

thanks for all the help getting it this far

[crazy-modder]

froze at the loading screen, I did have a bad block at 1D2, I remapped it and am reflashing

after remapping the bad sector, it boots into the new dash with xex menu installed. now to figure out how to put it to work.

that took much longer than it should due to the bad block. I read that the system overlooks the bad blocks and looks for them to be reinserted from the end of the bank. therefore when it got to the end of mine, it wasnt there. this is how microsoft and freeboot both address the problem. I also read that I should open it back up and do something to protect it against an accidental official update...must look into that.

thanks for all the help getting it this far

yeah, theres a resistor your can remove to prevent the update. Im not exactly sure which one cause i never remove them.

[Anonamous]

Its the R6T3 resistor its as easy as removing an 0603 led lol. It is on the bottom of the board where the cpu is. It says R6T3 next/near the resistor.

[Modded Matt]

jtag's running good, got 500 gig hdd working. I could only use 16 gigs of space for official DLC games. but I can play backups from hdd on the rest of it. I wish I could transfer my arcade games to the fat32hdd portion and play them through xexmenu.

talk to me about emulators and applications??? what is xmod4u?