Thread: jtagging questions

** 1ST THING TO CHECK **

You will need to verify that the console is exploitable by checking the dashboard version to start, and dumping the NAND to check your CB version. An old Blade-Style dash is an ALMOST definite good sign.

1) Not hard if you can solder and use DOS commands, simple Win32 programs, and know the file system half-assed.

2) To unban a console you can flash an unbanned 360's keyvault to your JTAG'd system.

3) You will have an XBL lifespan of around 3 - 6 hours until your keyvault is banned.


Here is an example of some batch files i made to make things easier:

** The 7 LPT wires must be in place at this point! **

Read KeyVault 3 Times:

@echo off

nandpro lpt: -r16 rawkv1.bin 1 1
nandpro lpt: -r16 rawkv2.bin 1 1
nandpro lpt: -r16 rawkv3.bin 1 1

pause

Read Config 3 Times:

@echo off

nandpro lpt: -r16 rawconfig1.bin 3de 2
nandpro lpt: -r16 rawconfig2.bin 3de 2
nandpro lpt: -r16 rawconfig3.bin 3de 2

pause

Read SMC 3 Times:

@echo off

nandpro lpt: -r16 rawsmc1.bin 0 1
nandpro lpt: -r16 rawsmc2.bin 0 1
nandpro lpt: -r16 rawsmc3.bin 0 1

pause

Read NAND 3 Times:

@echo off

nandpro lpt: -r16 orig1.bin
nandpro lpt: -r16 orig2.bin
nandpro lpt: -r16 orig3.bin

pause

once finished use Total Commander or a hex editor to compare each of the 3 dumps to verify they are matching. If they don't match, you can use a program such as NandCompare to create a good dump from 3 off ones.

Write Xell (Once dumps are verified matching):

@echo off

nandpro lpt: -w16 xell.bin

pause

** The 3 JTAG wires must be in place at this point! **

Load Xell by hooking up a DVD Drive (any) and pressing the eject button.

Now, get your CPU Key (Fuse Sets 03 & 06) and power off the console.

Run a program called BestPig (google it) and load one of your original dumps. It will create a file called "freeBoot.bin".

Write freeBoot.bin:

@echo off

nandpro lpt: -w16 freeBOOT.bin

pause

Done!

** You can now remove the 7 LPT wires if the 9199 dashboard boots **



sorry, kinda went off track

EDIT: btw...this is for a Xenon board