NandPro: LPT and USB nand flash programmer with only 7 wires

[petrm]

hi ppl

i need ur help
i make all right and dump good nand
after all experiments i find my dvd key and start playng on my xbox 360
i play in batman with new update (it stil 7XXX dont remember exactly)
after that i dicide to change region
i make changed nand and flash it on xbox 360

but i think it my main problem
in nand left information about old update but somewhere in xbox lay new update information and because of that now i sitting near black screen tv ((((
i flash all my nands (i mean good nands that work 100%)

xell loader work

and now question what can i do now?
it possible to add files from batman update to my nand?
any help needed

sorry for my english

[sandungas]

I cant find a better place/thread to post this diagram
Is a high-resolution picture of SPI (LPT) & JTAG for "non-xenon" motherboards



Edit:
with all points in the motherboard (not needed to solder in the RF panel)

[mickaaa]

hi ppl

i need ur help
i make all right and dump good nand
after all experiments i find my dvd key and start playng on my xbox 360
i play in batman with new update (it stil 7XXX dont remember exactly)
after that i dicide to change region
i make changed nand and flash it on xbox 360

but i think it my main problem
in nand left information about old update but somewhere in xbox lay new update information and because of that now i sitting near black screen tv ((((
i flash all my nands (i mean good nands that work 100%)

xell loader work

and now question what can i do now?
it possible to add files from batman update to my nand?
any help needed

sorry for my english

im still in the process of doing this mod, so i dont know the answer, but if you backup your NAND image after you installed update from batman game could you not load that NAND image into xbox 360 flash tools and change the region back then reflash the xbox.

if you didnt make a backup of the NAND after putting the batman update on, i think this would have blown 1 of the fuses which means you cant go back to a earlier version the reason you are getting a blank screen. you may be able to rebuild an NAND image with your cpu /dvd key etc by downloading the update (same version as in the  batman game) from the internet  i dont know exactly how this would be done but im sure if you google it someone must have done this already.

[pancus]

I decided to try this out. Grabbed a diode off an old power supply and soldered away. Unfortunately I was too lazy to bother looking for registers. Dumped it 4 times off an old laptop, no errors, md5s were the same, everything was going smoothly. Write back the xell, now it won't turn on, won't do anything whatsoever. Can no longer read/write the nand.

So the damn thing is probably bricked. Anything I can check/test to know for sure? Also since I have a successful dump can i swap a tsop from another board and reflash that?

Boy I love learning the hard way...

[Grim187]

alternative rf board point (closer to the jtag); http://i12.photobucket.com/albums/a246/Grim187/pin2alt.jpg

@pancus use the resistors, its probably a bad flash; are you sure you got the right version of the hack for your motherboard?, use external (from pc; usb, molex, etc.) power to provide +5 and gnd to the chip (dont connect the 360 to its psu while you have the wires connected); http://i12.photobucket.com/albums/a246/Grim187/tsopbfr.jpg

[pancus]

Thanks for that. However I should have mentioned before I don't have a xenon, I have a zephyr.

[pancus]

nvm I figured it out, goes to roughly the same spots they just moved. Also as a point of interest going this route I can now read the nand on a computer that would error out every time.

[Zakwarrior]

Anyone know a way of opening jasper nands with flash tool ?

Also I dunno why but I wired everything right (Twice) and I always get a flashconfig 00023010 with my 16Mb nand on jasper

The dump looks ok (7 times the same dump) but each time I get 1 error:

Testing LPT device address:0378
Using LPT device at address:0378
FlashConfig:00023010
Starting Block:0x000000
Ending Block:0x0003FF
Error: 250 reading block 221        <<<<<<

When checked with infectus tool I get this :



Is my Backup good ? Or do I obviously need a 01198010 flashconfig ?


EDIT: Nvm the backup is good and works, I flashed my jasper and got cpu key and then got back my dvd key So the flashconfig 00023010 for jasper 16Mb is good

[d05register]

Can we use a simple USB to DB25 converter like this http://www.amazon.com/Serial-RS232-Female-Converter-Cable/dp/B000K04SB2
instead of LPC2148 Olimex USB header board?

[Arakon]

Considering that's a serial port and not a parallel port: no way.

[d05register]

Oh yes, it's my fault. I mean something like that
http://www.amazon.com/Cables-Go-16899-Parallel-Printer/dp/B000UX21PY/ref=pd_cp_e_1

[doveman]

As I anticipate needing to backup the NAND repeatedly as updates are applied, I've been thinking of ways of leaving the wires connected permanently but with a way to disconnect the lead going to the LPT.

What I'm planning on doing is fitting a 15-pin D-Sub socket to the back of the Xbox (Xenon) case, above the video port, and a piece of stripboard beneath that. On the stripboard I'll have a 4-pin and a 3-pin connector at one end, which is where the 15-pin D-sub will connect, and the same connectors at the other end, with the 4-pin going to J1D2 (pins 1-4) and the 3-pin to J2B1 (pins 5,6 and 12). In between the two ends I'll mount the 100ohm resistors and the diode. I'm guessing this should be OK to leave connected when the external LPT cable isn't plugged in, but if not I can just disconnect the plugs connected to the motherboard wires from the stripboard.

Then my external cable will just be a LPT cable with one end cut-off and a 15-pin D-sub fitted in it's place.

Just looking for some feedback on this idea really in case I'm overlooking something important.

[Shaun]

shame no1 else came up with that idea
http://www.xboxhacker.net/index.php?topic=12222.msg80777#msg80777

[doveman]

Alright Mr Sarky-Pants

I'd missed the posts showing that others had already done that when I posted. I came across them afterwards and meant to post back earlier but I couldn't log in at the time. Besides, I don't see that anyone's put the components and connectors on a piece of stripboard as I proposed.

I've actually mounted a 9-pin (wasn't room for a 15-pin) socket in the same place as they've done now and mounted the stripboard on the back above the video port. I managed (with a bit of help) to solder the wires through the motherboard points, so they should be pretty safe but I haven't had a chance to test it yet. The soldering, drilling and filing took a lot longer (and was more stressful) than I thought it would be, so I'll leave the testing till tomorrow when I'm feeling a bit more relaxed.

I'd still be grateful if anyone wants to advise whether it'll be OK to leave the motherboard connected to the stripboard permanently or if there's any risk from having the resistors and diode connected when using the 360 normally.

[doveman]

Well I managed to do two dumps. The Xbox stayed off during the first one but at the end of it, or when I started the next one, the fans spun up briefly and the RROD was flashing for the duration of the second dump, at the end of which it shut itself off again.

Comparing the two dumps with Total Commander shows quite a few differences. I was using SPP mode, so I'm going to try again in Normal mode.

For some reason Degraded crashes on both my PCs, so I can't check the dumps with that.

[doveman]

Well I've done dumps in SPP, Normal and EPP1.9 mode now and they all have hundreds of differences and all show numerous bad pages.

I've disabled Polling, uninstalled all printers and disabled the NIC. Nandpro shows the correct output with no errors. After the Xbox came on when starting the second SPP dump, I've been rebooting the PC before each dump which has prevented that happening again.

The first SPP dump shows 14 bad pages and 1463 empty pages, whilst the second shows 29 bad pages and 1449 empty pages.

The first Normal dump shows 15 bad pages and 1463 empty pages, whilst the second shows 29 bad pages and 1449 empty pages.

I've only done one EPP dump and that shows 31 bad pages and 1463 empty pages.

I'm trying now in ECP mode but if that doesn't work I guess I'll have to try shortening the LPT cable.

[hawkeye06]

Hi,

I am doing the jtag hack on a xeon motherboard. I have everything soldered up with lpt cable. When I run nandpro I get errors that the flash controller is not found. Also I have heard that if your xbox is not unable to turn on when its plugged into the cable its a good thing. This is the case for me and when I unplug, it will turn on fine.  Does this mean I have things soldered correctly? Some say it might be the LPT port on the computer cuasing issues. I have tried all the modes listed in the bios (output only, bidirectional, and epp/ecp) I am going to try an older computer today. Anyone else having this issue?

Thanks!

[doveman]

Well ECP mode didn't help.

My LPT cable is about 170cm, plus there's the (solid-core) cable inside the xbox, so I guess I shouldn't be surprised that it's not working 

Any recommendations on what length I should make the LPT cable? Obviously the longer it can be, the more convenient it is for connecting the PC and Xbox but if it's not going to work beyond a certain length I might as well just cut it down to that straight away rather than messing about, as it's quite a pain covering up the 18 unused wires and soldering the 7 used wires to the 9-pin connector.

[entropy1911]

Hello,

just a question what are the gpio of the lpc being used for (the ones connected to J2B1.6 and 6 and so on.)  These seem to be outside of the 4-wire SPI specification and I was just wondering, what their purpose is.  I checked the motherboard specs and J2b1 and J1d2 are both SDK headers.  And since the other pins are spoken for either by ground or SPI pins, I cant seem to figure this out, although my guess would be something to do with JTAG. 

Thanks

./

[doveman]

Well I tried halving the length of the lead to 80cm and now I get FlashConfig:00012000 instead of FlashConfig:01198010

I've checked the cable but something's obviously not right. Any ideas what could be causing the wrong FlashConfig?

80cm is about the shortest that I can use and allow me to get from the back of the PC to the Xbox in front, but if that's still too long I'll have to rearrange my PC so that I can put the xbox on top or something.