Jasper JTAG: aggiornando la dash briccka la console e da' 2 o 3 led rossi

Ciao,
Premetto che sono un niubbone enorme, abbiate pazienza.
Ho una Jasper BB Jtaggabile old-style, ho saldato diodi e ponte per il jtag e ponticellato, protetto gli e-fuse e ovviamente saldato l'interfaccia parallela.
E' una Jasper BB, CB 6712, 256mb nand.

Seguendo le tantissime guide, ho letto con nandflash via parallela tre vole la nand, ho ottenuto due letture coincidenti.
Ho estratto il config ed il keyvault, li ho iniettati nel xbr_BB_8595_3. Cosi' ho caricato in nand xell 0.3 (non xellous o xell reloaded, dannaz...), ma poco male. Preso in prestito un HD di una falcon jtag, con lo xex loader ho flashato xellous 1.0.

Ora a random la jasper si avvia con due e anche 3 led rossi, resettandola si riprende.

Preparo l'upgrade alla dash 13604 a modino, ho usato 360 Multi Builder v0.4 ed ho scritto la nand con NAND Flasher.
Mentre scrive la rom, NAND Flasher mi riporta errori in scrittura (parecchi, una dozzina ed in locazioni basse a partire 0x18), finisce, riavvio, BRICK! La console si accende, niente video, spin-up del dvd e il pickup cerca, ma poi non parte o addirittura da' 2 o 3 led rossi.

Riflasho con la parallela e nandpro, carico la nand dumpata prima di aggiungere la dash 13604. Nandrpo non riporta errori in scrittura (ma lo fa mai? mi risulta di no), la consolle boota correttamente, riprovo ad aggiornare la dash. Seguo un'altra guida e uso 360 jtag tool (ultima release) per preparare la rom. Di nuovo, dalla dash MS avvio Xex menu (?) e carico la rom preparata con NAND Flasher. Di nuovo mi riporta errori in scrittura (come la volta prima), faccio reboot e... BRICK!

Adesso la console e' di nuovo attaccata alla parallela, in meno di 5 ore avro' riscritto la nand con la stessa rom appena preparata (con la ddash 13604). Spero che scrivendo la NAND via parallela con nandpro in maniera "ignorante" (ignorando gli errori in scrittura) si arrivi da qualche parte.

Dove sbaglio? Perche' sto casino? E' possibile che solo con la parallela riesco a riprogrammare la nand? Come posso interpretare sti led rossi a casaccio? Perche' ci mette ore (piu' di 4!) a scrivere 64 MB?

Se vi servono altri dati, chiedete pure. Ora mi sento incastrato.

Grazie, ciao
Rick.

Ci mette tanto perchè usi la parallela... se prendi un programmatorino (o te lo fai riduci i tempi)
Posta una foto del montaggio e sopratutto cambia metodo di scrittura

O.T
Uno fa il jtag e l'RGH e poi sta li ad aggiornare ogni 5 minuti(specialmente chi usa la parallela o non ha il flasher saldato.....),io ho ancora il 12xxx e creando il mio backup da originale e trasformandolo in god vanno tutti i giochi che ho....
Fine O.T

Ma la lettura che hai fatto e' a posto?Hai badblock?

Citazione:

---

Originariamente Scritto da nottolo

Ciao,


Seguendo le tantissime guide, ho letto con nandflash via parallela tre vole la nand, ho ottenuto due letture coincidenti.
Ho estratto il config ed il keyvault, li ho iniettati nel xbr_BB_8595_3. Cosi' ho caricato in nand xell 0.3 (non xellous o xell reloaded, dannaz...), ma poco male. Preso in prestito un HD di una falcon jtag, con lo xex loader ho flashato xellous 1.0.

Ora a random la jasper si avvia con due e anche 3 led rossi, resettandola si riprende.

Preparo l'upgrade alla dash 13604 a modino, ho usato 360 Multi Builder v0.4 ed ho scritto la nand con NAND Flasher.
Mentre scrive la rom, NAND Flasher mi riporta errori in scrittura (parecchi, una dozzina ed in locazioni basse a partire 0x18), finisce, riavvio, BRICK! La console si accende, niente video, spin-up del dvd e il pickup cerca, ma poi non parte o addirittura da' 2 o 3 led rossi.



Adesso la console e' di nuovo attaccata alla parallela, in meno di 5 ore avro' riscritto la nand con la stessa rom appena preparata (con la ddash 13604). Spero che scrivendo la NAND via parallela con nandpro in maniera "ignorante" (ignorando gli errori in scrittura) si arrivi da qualche parte.

Dove sbaglio? Perche' sto casino? E' possibile che solo con la parallela riesco a riprogrammare la nand? Come posso interpretare sti led rossi a casaccio?
Grazie, ciao
Rick.

---

Hai incluso dashlaunch nell'immagine che parte solo se la flashi da lpt?

La lpt e' l'interfaccia piu' facile da fare. Cerchero' uno schemino per farmi l'USB (ma non serve programmare un controllore??)
Che foto ti serve? Del JTAG o della LPT?
Che metodo di scrittura suggerisci per ora via lpt:? Alla fine il tempo che ci mette non e' un problema. La bonta' della scrittura si (se questo e' il punto).

Citazione:

---

Originariamente Scritto da MARCHISIO80

O.T
Ma la lettura che hai fatto e' a posto?Hai badblock?

---

Contavo di flashare solo la mia Jasper e di farlo una volta sola. Ecco perche' ho scelto la lpt:, non ha senso sbattersi oltre.

La lettura della nand originale e' stata ripetuta 3 volte senza mai errori di lettura, la prima lettura e' BAD, la seconda e la terza sono identiche e quindi le ritengo GOOD. Indietro non si torna, o mi sbaglio?
Cmq grazie mille

L'hai aperta con 360 flash tool?Ti da badblock?

Scusa il post mega prolisso, e' il log di fbbuild, col quale ho tentato l'aggiornamento della nand.

Come puoi leggere, riporta dei bad blocks e li rimappa. Caricando il bin prodotto qua, la console si briccka.

---------------------------------------------------------------
fbBuild v0.33 (R:272)
---------------------------------------------------------------

data directory overridden from command line to '13604'
per build directory overridden from command line to 'mydata'
file name overridden from command line to 'updflash.bin'

------ parsing user ini at '.\mydata\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x13a bytes in memory
loading cpukey.txt from .\mydata\cpukey.txt
CPU Key set to: 0xC50--------------------------BB8
loading 1blkey.txt from 1blkey.txt
1BL Key set to: 0xDD8--------------------------EFA sum: 0x983 (expects: 0x983)
Using nonandmu option (ini file)

------ Checking .\mydata\nanddump.bin ------
Loading NAND dump...done!
NAND dump is from a big block machine
NAND dump uses big block controller
parsing dump into user and spare...
block 0x8 was remapped to block 0x1, entering remap instance 1
block 0x10 was remapped to block 0x2, entering remap instance 2
block 0x18 was remapped to block 0x3, entering remap instance 3
block 0x20 was remapped to block 0x4, entering remap instance 4
block 0x28 was remapped to block 0x5, entering remap instance 5
block 0x30 was remapped to block 0x6, entering remap instance 6
block 0x38 was remapped to block 0x7, entering remap instance 7
block 0x40 was remapped to block 0x8, entering remap instance 8
block 0x48 was remapped to block 0x9, entering remap instance 9
block 0x50 was remapped to block 0xa, entering remap instance 10
block 0x58 was remapped to block 0xb, entering remap instance 11
block 0x60 was remapped to block 0xc, entering remap instance 12
block 0x68 was remapped to block 0xd, entering remap instance 13
block 0x70 was remapped to block 0xe, entering remap instance 14
block 0x78 was remapped to block 0xf, entering remap instance 15
block 0x80 was remapped to block 0x10, entering remap instance 16
block 0x88 was remapped to block 0x11, entering remap instance 17


**************** WARNING *************************
nanddump.bin has NAND memory unit data, make
sure you back up any important data off the
internal MU before flashing a new image!
************************************************** **

done!
cleaning up stray remaps
done!
--remap summary--
0: source: 0x0008 dest: 0x0001
1: source: 0x0010 dest: 0x0002
2: source: 0x0018 dest: 0x0003
3: source: 0x0020 dest: 0x0004
4: source: 0x0028 dest: 0x0005
5: source: 0x0030 dest: 0x0006
6: source: 0x0038 dest: 0x0007
7: source: 0x0040 dest: 0x0008
8: source: 0x0048 dest: 0x0009
9: source: 0x0050 dest: 0x000a
10: source: 0x0058 dest: 0x000b
11: source: 0x0060 dest: 0x000c
12: source: 0x0068 dest: 0x000d
13: source: 0x0070 dest: 0x000e
14: source: 0x0078 dest: 0x000f
15: source: 0x0080 dest: 0x0010
16: source: 0x0088 dest: 0x0011
-----------------
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, checking for hack
SMC in image is hacked, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0x3be0000! Using if no smc config is provided.
MobileB.dat found at page 0x1ca94, size 2048 (0x800) bytes
MobileC.dat found at page 0x1ca00, size 512 (0x200) bytes
MobileD.dat found at page 0x1ca80, size 2048 (0x800) bytes
MobileE.dat found at page 0x1ca08, size 1536 (0x600) bytes

------ parsing ini at '.\13604\filelist.ini' ------
ini version 13604

ini: label [jasperbl] found
found (1) 'cb_6723.bin' crc: 0xe9292b90
found (2) 'cd_6723.bin' crc: 0x0fcff305
found (3) 'ce_1888.bin' crc: 0xff9b60df
found (4) 'cf_4532.bin' crc: 0xd28ef722
found (5) 'cg_4532.bin' crc: 0x2cc9b951
found (6) 'cb_6750.bin' crc: 0xf7afa8cc
found (7) 'cd_8453.bin' crc: 0x25e0acd0
found (8) 'cf_13604.bin' crc: 0x639a4cd7
found (9) 'cg_13604.bin' crc: 0x7e9f5364

ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0xdaed8bc7
found (2) 'bootanim.xex' crc: 0x8a7ab1b4
found (3) 'createprofile.xex' crc: 0xe19ca8c4
found (4) 'dash.xex' crc: 0xecdaf6c0
found (5) 'deviceselector.xex' crc: 0xaa4579d1
found (6) 'gamerprofile.xex' crc: 0xebc5fec3
found (7) 'hud.xex' crc: 0xe2410ee1
found (8) 'huduiskin.xex' crc: 0x390eac39
found (9) 'mfgbootlauncher.xex' crc: 0xf3637ed9
found (10) 'minimediaplayer.xex' crc: 0x23d28bb8
found (11) 'nomni.xexp' crc: 0xed7cd3f5
found (12) 'nomnifwk.xexp' crc: 0x2c6fd7e8
found (13) 'nomnifwm.xexp' crc: 0xaa978831
found (14) 'signin.xex' crc: 0xf7436a62
found (15) 'updater.xex' crc: 0xd0cd6753
found (16) 'vk.xex' crc: 0x65f4eec0
found (17) 'xam.xex' crc: 0x2a74ee0f
found (18) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (19) 'xenonclatin.xttp' crc: 0x7a507ad1
found (20) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (21) 'xenonjklatin.xttp' crc: 0x945b7092
found (22) 'ximecore.xex' crc: 0xccb87938
found (23) 'ximedic.xex' crc: 0x1d992bfb
found (24) 'ximedic.xexp' crc: 0x47a55af9
found (25) '..\launch.xex' crc: 0x00000000
found (26) '..\lhelper.xex' crc: 0x00000000

ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------

output name overridden to: updflash.bin

Writing initial header to flash image

------ Loading bootloaders and required security files ------
could not read \bin\payload.bin, using built in payload (0x200 bytes)
reading .\mydata\smc.bin failed, using smc.bin from nand dump
reading .\mydata\kv.bin failed, using kv.bin from nand dump
reading .\13604\cb_6723.bin (0x9550 bytes) (crc32: 0xe9292b90 ini: 0xe9292b90)
reading .\13604\cd_6723.bin (0x56f0 bytes) (crc32: 0x0fcff305 ini: 0x0fcff305)
reading .\13604\ce_1888.bin (0x5606a b pad 0x56070 b) (crc32: 0xff9b60df ini: 0xff9b60df)
reading .\13604\cf_4532.bin (0x44c0 bytes) (crc32: 0xd28ef722 ini: 0xd28ef722)
reading .\13604\cg_4532.bin (0x2ef40 bytes) (crc32: 0x2cc9b951 ini: 0x2cc9b951)
reading .\13604\cf_13604.bin (0x4450 bytes) (crc32: 0x639a4cd7 ini: 0x639a4cd7)
reading .\13604\cg_13604.bin (0x659e0 bytes) (crc32: 0x7e9f5364 ini: 0x7e9f5364)
could not read \bin\freeboot.bin, using built in core (0xd50 bytes)
reading .\13604\bin\patches_jasper.bin (0x8bc bytes)
**** ldv line 3 set to 00 f0 type: c
xell not found in perbuild directory, checking firmware /bin folder
xell not found in firmware /bin folder, checking base path
reading xell-2f.bin (0x38a60 bytes)
reading .\13604\cb_6750.bin (0x9a40 bytes) (crc32: 0xf7afa8cc ini: 0xf7afa8cc)
reading .\13604\cd_8453.bin (0x5780 bytes) (crc32: 0x25e0acd0 ini: 0x25e0acd0)
reading .\mydata\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 71øC Edram: 73øC
Max temps : Cpu: 95øC Gpu: 90øC Edram: 92øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:22:48:68:60:68
AVRegion : 0x00000300 (PAL50)
GameRegion : 0x02fe (NTSC/EU)
DVDRegion : 2
resetKey : XXUD
---------------------
Checking ini for smc config data patches
smc was not patched
---------------------
done!

------ Encrypting and finalizing bootloaders ------
patching payload.bin to load size 0xd50 (0x354 reps)
hack found in smc.bin!
done!

------ Adding bootloaders to flash image ------
Writing zeropair CG patch slot overflow data to sysupdate.xexp1...done!
Writing target CG patch slot overflow data to sysupdate.xexp2...done!

------ adding 26 firmware files ------
reading .\13604\aac.xexp (0x4800 bytes) (crc32: 0xdaed8bc7 ini: 0xdaed8bc7)
reading .\13604\bootanim.xex (0x55000 bytes) (crc32: 0x8a7ab1b4 ini: 0x8a7ab1b4)
reading .\13604\createprofile.xex (0xc000 bytes) (crc32: 0xe19ca8c4 ini: 0xe19ca8c4)
reading .\13604\dash.xex (0x5e7000 bytes) (crc32: 0xecdaf6c0 ini: 0xecdaf6c0)
reading .\13604\deviceselector.xex (0x9000 bytes) (crc32: 0xaa4579d1 ini: 0xaa4579d1)
reading .\13604\gamerprofile.xex (0x1a000 bytes) (crc32: 0xebc5fec3 ini: 0xebc5fec3)
reading .\13604\hud.xex (0x1f000 bytes) (crc32: 0xe2410ee1 ini: 0xe2410ee1)
reading .\13604\huduiskin.xex (0x11000 bytes) (crc32: 0x390eac39 ini: 0x390eac39)
reading .\13604\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0xf3637ed9 ini: 0xf3637ed9)
reading .\13604\minimediaplayer.xex (0xc000 bytes) (crc32: 0x23d28bb8 ini: 0x23d28bb8)
reading .\13604\nomni.xexp (0xd000 bytes) (crc32: 0xed7cd3f5 ini: 0xed7cd3f5)
reading .\13604\nomnifwk.xexp (0x2000 bytes) (crc32: 0x2c6fd7e8 ini: 0x2c6fd7e8)
reading .\13604\nomnifwm.xexp (0x5000 bytes) (crc32: 0xaa978831 ini: 0xaa978831)
reading .\13604\signin.xex (0x12000 bytes) (crc32: 0xf7436a62 ini: 0xf7436a62)
reading .\13604\updater.xex (0x8000 bytes) (crc32: 0xd0cd6753 ini: 0xd0cd6753)
reading .\13604\vk.xex (0x9000 bytes) (crc32: 0x65f4eec0 ini: 0x65f4eec0)
reading .\13604\xam.xex (0x218000 bytes) (crc32: 0x2a74ee0f ini: 0x2a74ee0f)
reading .\13604\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
reading .\13604\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
reading .\13604\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
reading .\13604\xenonjklatin.xttp (0x7000 bytes) (crc32: 0x945b7092 ini: 0x945b7092)
reading .\13604\ximecore.xex (0x15000 bytes) (crc32: 0xccb87938 ini: 0xccb87938)
reading .\13604\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
reading .\13604\ximedic.xexp (0x2800 bytes) (crc32: 0x47a55af9 ini: 0x47a55af9)

***** could not read .\13604\..\launch.xex, skipping *****

***** could not read .\13604\..\lhelper.xex, skipping *****

------ adding 4 security files ------
reading .\mydata\crl.bin (0x9e0 bytes)
writing as crl.bin to flash
reading .\mydata\dae.bin (0xad30 bytes)
writing as dae.bin to flash
reading .\mydata\extended.bin (0x4000 bytes)
writing as extended.bin to flash
reading .\mydata\secdata.bin (0x400 bytes)
writing as secdata.bin to flash

------ checking for Mobile*.dat ------
MobileB.dat was found in dump, 0x800 bytes, adding type 0x31
MobileC.dat was found in dump, 0x200 bytes, adding type 0x32
MobileD.dat was found in dump, 0x800 bytes, adding type 0x33
MobileE.dat was found in dump, 0x600 bytes, adding type 0x34

------ adding smc_config.bin ------

------ finalizing image ------
Fixing up empty FS block entries...done!
Writing FS table to image...done!
fixing up big block LBA numbers in spare...done!
calculating ECD bytes and assembling raw image...done!
remapping 17 blocks
copying 0x21000 bytes of LBA 0x8 to block 0x1...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x10 to block 0x2...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x18 to block 0x3...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x20 to block 0x4...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x28 to block 0x5...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x30 to block 0x6...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x38 to block 0x7...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x40 to block 0x8...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x48 to block 0x9...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x50 to block 0xa...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x58 to block 0xb...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x60 to block 0xc...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x68 to block 0xd...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x70 to block 0xe...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x78 to block 0xf...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x80 to block 0x10...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
copying 0x21000 bytes of LBA 0x88 to block 0x11...zero fill origin...
dest block is empty, fixing up LBA and EDC...done!
done!
writing file 'updflash.bin' to disk...done!
updflash.bin written OK

---------------------------------------------------------------
updflash.bin built, info:
---------------------------------------------------------------
console : jasper (big block)
NAND size: 64MiB + NAND MU area
xell : power on console with console eject button
CPU Key : C50--------------------------BB8
1BL Key : DD8--------------------------EFA

---------------------------------------------------------------
fbBuild Finished. Have a nice day.
---------------------------------------------------------------

Ho appena aperto una delle due letture "buone" con Flash Dump Tool. Ecco la schermata
Allegato 1691

Citazione:

---

Originariamente Scritto da MARCHISIO80

L'hai aperta con 360 flash tool?Ti da badblock?

---

Hai la schermata piu su. Nessun bad block, il tab del file system riporta un elenco di files sensato.

Mi fai vedere il file system?le ultime righe.....

Certo che ti faccio vedere la schermata del FS!
Allegato 1692

[url=http://www.megaupload.com/?d=7VBNRHED]MEGAUPLOAD - The leading online storage and file delivery service[/url]
Per la CPU key, in PM vi prego.

oppure qua...
[deleted as per suggestion]

Nel log di fbbuild ci sono badblock che nel dump che hai letto non sono presenti.
Prova con un altra applicazione, tipo jtag-tool
Fai un erase della nand, anche la parte della MU.
Leggi il debug.log di nand pro per vedere eventuali errori
Poi usa solo xellous per flashare la nand che ci metti 2 minuti.

Ho fatto il tuo freeboot ma di badblock non ne da. Sembra ok.

---------------------------------------------------------------
fbBuild v0.33 (R:272)
---------------------------------------------------------------
data directory overridden from command line to '13604'
per build directory overridden from command line to 'my360'
file name overridden from command line to 'nandflash.bin'

------ parsing user ini at '.\my360\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0xe6 bytes in memory
loading cpukey.txt from .\my360\cpukey.txt
CPU Key set to: 0xC50***********************1BB8
setting 1blkey from ini: 0xDD8*************************68563EFA
1BL Key set to: 0xDD88AD0C******63EFA sum: 0x983 (expects: 0x983)
Using nonandmu option (ini file)
default console DVD eject button is being used to start xell

------ Checking .\my360\nanddump.bin ------
Loading NAND dump...done!
NAND dump is from a big block machine
NAND dump uses big block controller
parsing dump into user and spare...


**************** WARNING *************************
nanddump.bin has NAND memory unit data, make
sure you back up any important data off the
internal MU before flashing a new image!
************************************************** **

done!
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, checking for hack
clean SMC found in nanddump.bin, you will need to provide a hacked smc.bin
seeking smc config in dump...found at offset 0x3be0000! Using if no smc config is provided.
MobileB.dat found at page 0x1d258, size 2048 (0x800) bytes
MobileC.dat found at page 0x1d204, size 512 (0x200) bytes
MobileD.dat found at page 0x1d208, size 2048 (0x800) bytes
MobileE.dat found at page 0x1d240, size 1536 (0x600) bytes

------ parsing ini at '.\13604\filelist.ini' ------
ini version 13604

ini: label [jasperbl] found
found (1) 'cb_6723.bin' crc: 0xe9292b90
found (2) 'cd_6723.bin' crc: 0x0fcff305
found (3) 'ce_1888.bin' crc: 0xff9b60df
found (4) 'cf_4532.bin' crc: 0xd28ef722
found (5) 'cg_4532.bin' crc: 0x2cc9b951
found (6) 'cb_6750.bin' crc: 0xf7afa8cc
found (7) 'cd_8453.bin' crc: 0x25e0acd0
found (8) 'cf_13604.bin' crc: 0x639a4cd7
found (9) 'cg_13604.bin' crc: 0x7e9f5364

ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0xdaed8bc7
found (2) 'bootanim.xex' crc: 0x8a7ab1b4
found (3) 'createprofile.xex' crc: 0xe19ca8c4
found (4) 'dash.xex' crc: 0xecdaf6c0
found (5) 'deviceselector.xex' crc: 0xaa4579d1
found (6) 'gamerprofile.xex' crc: 0xebc5fec3
found (7) 'hud.xex' crc: 0xe2410ee1
found (8) 'huduiskin.xex' crc: 0x390eac39
found (9) 'mfgbootlauncher.xex' crc: 0xf3637ed9
found (10) 'minimediaplayer.xex' crc: 0x23d28bb8
found (11) 'nomni.xexp' crc: 0xed7cd3f5
found (12) 'nomnifwk.xexp' crc: 0x2c6fd7e8
found (13) 'nomnifwm.xexp' crc: 0xaa978831
found (14) 'signin.xex' crc: 0xf7436a62
found (15) 'updater.xex' crc: 0xd0cd6753
found (16) 'vk.xex' crc: 0x65f4eec0
found (17) 'xam.xex' crc: 0x2a74ee0f
found (18) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (19) 'xenonclatin.xttp' crc: 0x7a507ad1
found (20) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (21) 'xenonjklatin.xttp' crc: 0x945b7092
found (22) 'ximecore.xex' crc: 0xccb87938
found (23) 'ximedic.xex' crc: 0x1d992bfb
found (24) 'ximedic.xexp' crc: 0x47a55af9
found (25) 'launch.xex' crc: 0x00000000
found (26) 'lhelper.xex' crc: 0x00000000

ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------

output name overridden to: nandflash.bin

Writing initial header to flash image

------ Loading bootloaders and required security files ------
could not read \bin\payload.bin, using built in payload (0x200 bytes)
reading .\my360\smc.bin (0x3000 bytes)
reading .\my360\kv.bin failed, using kv.bin from nand dump
reading .\13604\cb_6723.bin (0x9550 bytes) (crc32: 0xe9292b90 ini: 0xe9292b90)
reading .\13604\cd_6723.bin (0x56f0 bytes) (crc32: 0x0fcff305 ini: 0x0fcff305)
reading .\13604\ce_1888.bin (0x5606a b pad 0x56070 b) (crc32: 0xff9b60df ini: 0xff9b60df)
reading .\13604\cf_4532.bin (0x44c0 bytes) (crc32: 0xd28ef722 ini: 0xd28ef722)
reading .\13604\cg_4532.bin (0x2ef40 bytes) (crc32: 0x2cc9b951 ini: 0x2cc9b951)
reading .\13604\cf_13604.bin (0x4450 bytes) (crc32: 0x639a4cd7 ini: 0x639a4cd7)
reading .\13604\cg_13604.bin (0x659e0 bytes) (crc32: 0x7e9f5364 ini: 0x7e9f5364)
could not read \bin\freeboot.bin, using built in core (0xd50 bytes)
reading .\13604\bin\patches_jasper.bin (0x8bc bytes)
**** ldv line 3 set to 00 f0 type: c
reading .\my360\xell-2f.bin (0x3f848 bytes)
reading .\13604\cb_6750.bin (0x9a40 bytes) (crc32: 0xf7afa8cc ini: 0xf7afa8cc)
reading .\13604\cd_8453.bin (0x5780 bytes) (crc32: 0x25e0acd0 ini: 0x25e0acd0)
reading .\my360\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 71øC Edram: 73øC
Max temps : Cpu: 95øC Gpu: 90øC Edram: 92øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:22:48:68:60:68
AVRegion : 0x00000300 (PAL50)
GameRegion : 0x02fe (NTSC/EU)
DVDRegion : 2
resetKey : XXUD
---------------------
Checking ini for smc config data patches
smc was not patched
---------------------
done!

------ Encrypting and finalizing bootloaders ------
patching payload.bin to load size 0xd50 (0x354 reps)
hack found in smc.bin!
done!

------ Adding bootloaders to flash image ------
Writing zeropair CG patch slot overflow data to sysupdate.xexp1...done!
Writing target CG patch slot overflow data to sysupdate.xexp2...done!

------ adding 26 firmware files ------
reading .\13604\aac.xexp (0x4800 bytes) (crc32: 0xdaed8bc7 ini: 0xdaed8bc7)
reading .\13604\bootanim.xex (0x55000 bytes) (crc32: 0x8a7ab1b4 ini: 0x8a7ab1b4)
reading .\13604\createprofile.xex (0xc000 bytes) (crc32: 0xe19ca8c4 ini: 0xe19ca8c4)
reading .\13604\dash.xex (0x5e7000 bytes) (crc32: 0xecdaf6c0 ini: 0xecdaf6c0)
reading .\13604\deviceselector.xex (0x9000 bytes) (crc32: 0xaa4579d1 ini: 0xaa4579d1)
reading .\13604\gamerprofile.xex (0x1a000 bytes) (crc32: 0xebc5fec3 ini: 0xebc5fec3)
reading .\13604\hud.xex (0x1f000 bytes) (crc32: 0xe2410ee1 ini: 0xe2410ee1)
reading .\13604\huduiskin.xex (0x11000 bytes) (crc32: 0x390eac39 ini: 0x390eac39)
reading .\13604\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0xf3637ed9 ini: 0xf3637ed9)
reading .\13604\minimediaplayer.xex (0xc000 bytes) (crc32: 0x23d28bb8 ini: 0x23d28bb8)
reading .\13604\nomni.xexp (0xd000 bytes) (crc32: 0xed7cd3f5 ini: 0xed7cd3f5)
reading .\13604\nomnifwk.xexp (0x2000 bytes) (crc32: 0x2c6fd7e8 ini: 0x2c6fd7e8)
reading .\13604\nomnifwm.xexp (0x5000 bytes) (crc32: 0xaa978831 ini: 0xaa978831)
reading .\13604\signin.xex (0x12000 bytes) (crc32: 0xf7436a62 ini: 0xf7436a62)
reading .\13604\updater.xex (0x8000 bytes) (crc32: 0xd0cd6753 ini: 0xd0cd6753)
reading .\13604\vk.xex (0x9000 bytes) (crc32: 0x65f4eec0 ini: 0x65f4eec0)
reading .\13604\xam.xex (0x218000 bytes) (crc32: 0x2a74ee0f ini: 0x2a74ee0f)
reading .\13604\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
reading .\13604\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
reading .\13604\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
reading .\13604\xenonjklatin.xttp (0x7000 bytes) (crc32: 0x945b7092 ini: 0x945b7092)
reading .\13604\ximecore.xex (0x15000 bytes) (crc32: 0xccb87938 ini: 0xccb87938)
reading .\13604\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
reading .\13604\ximedic.xexp (0x2800 bytes) (crc32: 0x47a55af9 ini: 0x47a55af9)
reading .\13604\launch.xex (0x9000 bytes)
reading .\13604\lhelper.xex (0x6000 bytes)

------ adding 4 security files ------
reading .\my360\crl.bin (0x9e0 bytes)
writing as crl.bin to flash
reading .\my360\dae.bin (0xad30 bytes)
writing as dae.bin to flash
reading .\my360\extended.bin (0x4000 bytes)
writing as extended.bin to flash
reading .\my360\secdata.bin (0x400 bytes)
writing as secdata.bin to flash

------ checking for Mobile*.dat ------
MobileB.dat was found in dump, 0x800 bytes, adding type 0x31
MobileC.dat was found in dump, 0x200 bytes, adding type 0x32
MobileD.dat was found in dump, 0x800 bytes, adding type 0x33
MobileE.dat was found in dump, 0x600 bytes, adding type 0x34

------ adding smc_config.bin ------

------ finalizing image ------
Fixing up empty FS block entries...done!
Writing FS table to image...done!
fixing up big block LBA numbers in spare...done!
calculating ECD bytes and assembling raw image...done!
writing file 'nandflash.bin' to disk...done!
nandflash.bin written OK

---------------------------------------------------------------
nandflash.bin built, info:
---------------------------------------------------------------
console : jasper (big block)
NAND size: 64MiB + NAND MU area
xell : power on console with console eject button
CPU Key : C ****************************BB8
1BL Key : D*****************************EFA
---------------------------------------------------------------
fbBuild Finished. Have a nice day.
--------

-------------------------------------------------------

Alle 20:40 ti posto il link e poi prova

[url]http://www.megaupload.com/?d=WOQUVYYI[/url]

@tsunami: Grazie mille, la flasho senz'altro.

Facci sapere se parte.....

Visto che la console e' in laboratorio, posso toccarla appena domattina.
Supponiamo che debba programmare da lpt con nandpro. Se ho capito bene dovrei:
- nandpro lpt: -e256 #per cancellare tutta la nand
- nandpro lpt: -w256 flash_tsunami.bin #per scrivere la flash, anche se e' di 64MB

Se invece riuscissi a bootare xellous, puo' bastare caricare la nand preparata da tsunami in una chiavetta usb e rinominarla per usare il flasher della xell? Potrei anche bootare col liveCD gentoo (gia' fatto) e flashare da li'. Oppure ancora boot in dash MS, eseguire xex manager e un flasher.

Chge consigliate?

Cmq grazie a tutti, davvero.
Rick.

PS: @marchisio: hai mail

Dai il comando w64....non ha senso w256.....
Se va xellous prova da li,almeno 5 minuti e finisci di scrivere.....

Eureka! C'e'! E' andata! Perfetto!
Grazie di cuore, la nand preparata e' perfetta!!!
Grazie ancora a Tsunami (non posso darti altri like, ma sappi che saltello come un bambino la mattina di Natale) e a Marchisio!
Vi tediero' ancora per l'installazione del SW, ma per ora (e credo per sempre) ho finito di pasticciare con nand e flash.

R.