Falcon v3 jtag aggiornamento dash e problemi boot

[heretic]

Provato ... nulla le saldature non sono un granché è la 6 volta che le rifaccio ... ma ho paura di aver rovinato lo squirt sbagliando il collegamento ieri notte... puo essere ?

anche adesso appena lo collego si scollega e ricollega ... ad output viene fuori qualcosa ma tutto alla rinfusa

[Babilozzo]

Ola! Prendi i 3,3v da un altro punto e controlla la resistenza dei post verso gnd e fra loro con lo slave collegato a console in standby e anche senza alim. E riporta tutte le misure se puoi. Appena ho tempo mi metto pure a pastrocchiare con tool a vedere se trovo qualcosa di interessante nei log di xebuild, abbi fede. =}

[heretic]

Arrivato lo SPI nuovo ... era danneggiato l'altro ....

ora ... saldato diciamo alla rovescia---

d0 pin 8
d1 pin 7
d2 pin 6
d3 pin 5
d4 pin 4
d5 pin 3
d6 pin 2
d7 pin 1

out sempre incasinato ma una sequenza dritta da :


POST: 0x10 -> Payload/1BL started
POST: 0x11 -> FSB_CONFIG_PHY_CONTROL
POST: 0x12 -> FSB_CONFIG_RX_STATE
POST: 0x13 -> FSB_CONFIG_TX_STATE
POST: 0x14 -> FSB_CONFIG_TX_CREDITS
POST: 0x15 -> FETCH_OFFSET
POST: 0x16 -> FETCH_HEADER
POST: 0x17 -> VERIFY_HEADER
POST: 0x10 -> Payload/1BL started
POST: 0x11 -> FSB_CONFIG_PHY_CONTROL
POST: 0x12 -> FSB_CONFIG_RX_STATE
POST: 0x13 -> FSB_CONFIG_TX_STATE
POST: 0x14 -> FSB_CONFIG_TX_CREDITS
POST: 0x15 -> FETCH_OFFSET
POST: 0x16 -> FETCH_HEADER
POST: 0x20 -> CB entry point reached
POST: 0x21 -> INIT_SECOTP
POST: 0x22 -> INIT_SECENG

il resto è un casino ....

[shebang]

Posta un log con flash vecchia e con flash aggiornata.

[heretic]

Ecco i tre log che mi spara fuori. sono ancora un po incasinati ma non capisco come sistemarli ...
cmq ce il nuova dash boot e no boot ... e la vecchia ... che boota sempre...

Grazie

SPI Post Sniff.zip

[shebang]

Quei post sono assolutamente casuali. Foto installazione di tutti i punti per favore

[heretic]

[URL]http://3thbit.com/lastspi.jpg[/URL]

ecco ... dimmi tu .. io non so più cosa fare .. ho finito lo stagno buoni e vengono un po peggio .... ma non mi sembrano cosi disastrose ...



di questo cosa mi dici---->spiout.txt

[Babilozzo]

E che vuoi farci, perché non lasci i fili dei postbit lunghi tipo quei 30 cm in modo da tenere lo slave lontano dalla scheda e da possibili interferenze? E poi mi devi ancora misurare i valori di resistenza dei post (fra di loro e verso gnd)... Per capire un pò cosa fare puoi sempre attaccare lo slave ad un'altra delle console che hai.
Cmq i valori esadecimali dovrebbero essere in sequenza da quando accendi fin quando si avvia, cioè se hai un 0x00 (per dire) nel bel mezzo della sequenza è palese che sussiste qualche problema di interferenza o di console.
Discriminare la causa di questo però è impossibile finché procedi "a caso". Lol...

@heretic ti ho inviato updflash via email prova a flasharlo e facci sapere se si avvia 10/10

come detto non ho riscontrato problemi se no nche trova un smc jasper ma non saprei se per jtag è normale.
SMC checksum: c507f5ba
unknown SMC found, type: Jasper v4.1(2.03)
jtag hack found in SMC binary!
Per i curiosi ecco spoilerato il log di xebuild.

==================================
Swizzy's xeBuild GUI version 2.096
Log Started: Saturday 16/04/2016 13:58:21
==================================

*** Some console information ***
CB Version: 5770
Serial number:
Console region: PAL/Europe (0x02FE)
DVDKey:
Console ID:
MFR-Date: 02-08-08
OSIG String: PLDS DG-16D2S 7485
FCRT.bin Required: False

Using xell-reloaded for JTAG/SMC hack
Copying Normal (Old) hack patched SMC... Done!
Including dashlaunch... Done!
dashlaunch defaults will be used...
Copying nand to data directory, this may take a while... Done!
Enabling Verbose mode output for xeBuild...

Parameters sent to xeBuild:

-noenter -t jtag -c falcon -d data -f 17349 -b -p -v output.bin

Building nand using xeBuild (this may take a while):

---------------------------------------------------------------
xeBuild v1.15.709
---------------------------------------------------------------
base path changed to B:\[XBOX PC SOFTWARE]\XeBuildGui\files
---- { Image Build Mode } ----
building jtag image

verbose set to level 1
file name overridden from command line to 'output.bin'

------ parsing user ini at 'data\options.ini' ------
loading file...done!
pre-parsing and sanitizing
done!
User options.ini loaded, 0x7b bytes in memory
default console DVD eject button is being used to start xell

------ parsing ini at '17349\_jtag.ini' ------
ini version 17349

ini: label [falconbl] found
found (1) 'cb_5770.bin' crc: 0x3279f0d5
found (2) 'cd_5770.bin' crc: 0xd04e8927
found (3) 'ce_1888.bin' crc: 0xff9b60df
found (4) 'cf_4532.bin' crc: 0xd28ef722
found (5) 'cg_4532.bin' crc: 0x2530f8ce
found (6) 'cb_5771.bin' crc: 0x859140f0
found (7) 'cd_8453.bin' crc: 0x25e0acd0
found (8) 'cf_17349.bin' crc: 0x2214497c
found (9) 'cg_17349.bin' crc: 0xd68555aa

[rawpatch] label not found in ini

ini: label [flashfs] found
found (1) 'aac.xexp' crc: 0xf8eb9fc2
found (2) 'bootanim.xex' crc: 0x5927de8b
found (3) 'createprofile.xex' crc: 0x150e2fd2
found (4) 'dash.xex' crc: 0x78a4c4b1
found (5) 'deviceselector.xex' crc: 0xd213aa7d
found (6) 'gamerprofile.xex' crc: 0x75baa3a4
found (7) 'hud.xex' crc: 0xddf5d430
found (8) 'huduiskin.xex' crc: 0x3f40ca47
found (9) 'mfgbootlauncher.xex' crc: 0x35ebb139
found (10) 'minimediaplayer.xex' crc: 0x21071346
found (11) 'nomni.xexp' crc: 0x48549239
found (12) 'nomnifwk.xexp' crc: 0x7e7b8333
found (13) 'nomnifwm.xexp' crc: 0xb3f9b73a
found (14) 'SegoeXbox-Light.xtt' crc: 0xe0ee6049
found (15) 'signin.xex' crc: 0x6eba3ee8
found (16) 'updater.xex' crc: 0xd915f51f
found (17) 'vk.xex' crc: 0x21315915
found (18) 'xam.xex' crc: 0xed837c51
found (19) 'xenonclatin.xtt' crc: 0xd5d17ff5
found (20) 'xenonclatin.xttp' crc: 0x7a507ad1
found (21) 'xenonjklatin.xtt' crc: 0xdde4a14c
found (22) 'xenonjklatin.xttp' crc: 0xe2adddfb
found (23) 'ximecore.xex' crc: 0xf040324c
found (24) 'ximedic.xex' crc: 0x1d992bfb
found (25) 'ximedic.xexp' crc: 0x7825f71a
found (26) '..\launch.xex' crc: 0x00000000
found (27) '..\lhelper.xex' crc: 0x00000000
found (28) '..\launch.ini' crc: 0x00000000

ini: label [security] found
found (1) 'crl.bin' crc: 0x00000000
found (2) 'dae.bin' crc: 0x00000000
found (3) 'extended.bin' crc: 0x00000000
found (4) 'secdata.bin' crc: 0x00000000
------ ini parsing completed ------

output name overridden to: output.bin

1BL RSA pub key file is not available, signature checks will not be performed
PIRS RSA pub key file is not available, signature checks will not be performed
MASTER RSA pub key file is not available, signature checks will not be performed

------ Checking data\nanddump.bin ------
data\nanddump.bin file size: 0x1080000
nanddump header checks passed OK!
Loading NAND dump (0x1080000 bytes)...done!
Detecting NAND controller type from dump data...
NAND dump is from a small block machine
NAND dump uses small block controller
parsing dump into user and spare...
done!
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypted OK, will use if no kv.bin is provided
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0xf7c000! Using if no smc config is provided.
CF slot 0 decrypted ok LDV 0x01 Pairing: 0xac44ef
setting LDV from image to 1
setting pairing data from image to 0xac44ef
pairing set to: ac 44 ef
Scanning for mobile data and fsroot...done! fsroot found ok!
Mobiles found:
fsroot version 05 found at offset 0x00d38000 len 0x4000 page 0x000069c0
mobileB.dat version 17 found at offset 0x00d6e800 len 0x0800 page 0x00006b74
mobileC.dat version 01 found at offset 0x00d18000 len 0x0200 page 0x000068c0
mobileD.dat version 01 found at offset 0x00d20000 len 0x0800 page 0x00006900
mobileE.dat version 01 found at offset 0x0009de00 len 0x0600 page 0x000004ef
extracting MobileB.dat from page 0x6b74 (offset 0xd6e800), size 2048 (0x800) bytes
extracting MobileC.dat from page 0x68c0 (offset 0xd18000), size 512 (0x200) bytes
extracting MobileD.dat from page 0x6900 (offset 0xd20000), size 2048 (0x800) bytes
extracting MobileE.dat from page 0x4ef (offset 0x9de00), size 1536 (0x600) bytes
Statistics.settings found at offset 0xf78000, size 4096 (0x1000) bytes
seeking security files...
crl.bin found in sector 0x347 size 0x9b0...verified! Will use if external file not found.
extended.bin found in sector 0x34d size 0x4000...verified! Will use if external file not found.
secdata.bin found in sector 0x349 size 0x400...verified! Will use if external file not found.
done!
Writing initial header to flash image

------ loading system update container ------
17349\su20076000_00000000 found, loading...done!
Read 0xb3d000 bytes to memory
checking integrity...
header seems valid, version 2.0.17349.0
header hash is OK, checking content hashes...
content hashes seem OK, everything looks good!
extracted SUPD\xboxupd.bin (0x7a410 bytes)
decrypting SUPD\xboxupd.bin\CF_17349.bin (0x4560 bytes)...done!
decrypting SUPD\xboxupd.bin\CG_17349.bin (0x75ea2 bytes)...done!

------ Loading bootloaders and required security files ------
could not read 17349\bin\payload.bin, using built in payload (0x200 bytes)
reading data\smc.bin (0x3000 bytes)
reset smc load address to 0x1000 size 0x3000
reading data\kv.bin failed, using kv.bin from nand dump
reading .\common\cb_5770.bin (0x8e40 bytes)
loaded cb_5770.bin, could not check signature rsa key not present!
reading .\common\cd_5770.bin (0x56c0 bytes)
reading .\common\ce_1888.bin (0x5606a b pad 0x56070 b)
reading .\common\cf_4532.bin (0x44c0 bytes)
reading .\common\cg_4532.bin (0x2ef40 bytes)
extracted SUPD\xboxupd.bin\CF_17349.bin (0x4560 bytes)
extracted SUPD\xboxupd.bin\CG_17349.bin (0x75ea2 bytes)
could not read 17349\bin\freeboot.bin, using built in core (0xd40 bytes)
reading 17349\bin\patches_falcon.bin (0xa6c bytes)
xell not found in perbuild directory, checking firmware /bin folder
xell not found in firmware /bin folder, checking base path
reading xell-2f.bin (0x40000 bytes)
reading .\common\cb_5771.bin (0x9340 bytes)
loaded cb_5771.bin, could not check signature rsa key not present!
reading .\common\cd_8453.bin (0x5780 bytes)
reading data\smc_config.bin failed, using smc_config.bin from nand dump
-------------------
checking smc_config
-------------------
extracting config
------------------
SMC config info:
------------------
Target temps: Cpu: 80øC Gpu: 75øC Edram: 78øC
Max temps : Cpu: 100øC Gpu: 100øC Edram: 102øC
Cpu Fan : (auto)
Gpu Fan : (auto)
MAC Address : 00:1d:d8:73:62:1f
AVRegion : 0x00000300 (PAL50)
GameRegion : 0x02fe (PAL/EU)
DVDRegion : 2
resetKey : LRAA
---------------------
Checking for smc config data patches
smc config was not patched
---------------------
could not check signature of cb_5770.bin, 1BL RSA key not present!
could not check signature of cb_5771.bin, 1BL RSA key not present!
done!

------ Patching boot reasons and options into flash header ------
Patching header for xell power reason

------ Encrypting and finalizing bootloaders ------
Fuse CF LDV set to : 0xF0000000000000000000000000000000
Fuse CPU Key set to: 0x
encoding payload.bin size 0x200 (JTAG)
patching payload.bin to load size 0xd40 (0x350 reps)
encoding smc.bin size 0x3000 (JTAG)
SMC checksum: c507f5ba
unknown SMC found, type: Jasper v4.1(2.03)
jtag hack found in SMC binary!
encoding kv.bin size 0x4000 (JTAG)
decrypted keyvault has been set for reference
Master RSA pub not available, not checking hash
encoding cb_5770.bin size 0x8e40 (JTAG)
CB 5770 seq 0x01050018 type: 0x01 cseq: 0x05 allow: 0x0018
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0 (retail)
fuseset 02: 0000F00000000000 (sequence)
fuseset 02: 000F000000000000 (allow cseq 4)
fuseset 02: 0000F00000000000 (allow cseq 5)
encoding cd_5770.bin size 0x56c0 (JTAG)
encoding ce_1888.bin size 0x56070 (JTAG)
encoding cf_4532.bin size 0x44c0 (JTAG)
encoding cg_4532.bin size 0x2ef40 (JTAG)
encoding cf_17349.bin size 0x4560 (JTAG)
encoding cg_17349.bin size 0x75eb0 (JTAG)
encoding freeboot.bin size 0xd40 (JTAG)
patching freeboot.bin with with kernel version string '17349'
Boot options set:
- console DVD eject button is being used to start xell
- alternate xell button disabled
encoding patches_falcon.bin size 0xa70 (JTAG)
encoding fuses.bin size 0x60 (JTAG)
encoding xell-2f.bin size 0x40000 (JTAG)
encoding cb_5771.bin size 0x9340 (JTAG)
CB 5771 seq 0x01070058 type: 0x01 cseq: 0x07 allow: 0x0058
expected fuses:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0 (retail)
fuseset 02: 000000F000000000 (sequence)
fuseset 02: 000F000000000000 (allow cseq 4)
fuseset 02: 0000F00000000000 (allow cseq 5)
fuseset 02: 000000F000000000 (allow cseq 7)
CBENC pairing set to: ac 44 ef
encoding cd_8453.bin size 0x5780 (JTAG)

Virtual Fuses set to:
fuseset 00: C0FFFFFFFFFFFFFF
fuseset 01: 0F0F0F0F0F0F0FF0
fuseset 02: 000FF0F000000000
fuseset 03:
fuseset 04:
fuseset 05:
fuseset 06:
fuseset 07: F000000000000000
fuseset 08: 0000000000000000
fuseset 09: 0000000000000000
fuseset 10: 0000000000000000
fuseset 11: 0000000000000000
done!

------ Adding bootloaders to flash image ------
adding payload.bin at raw offset 0x00000200 len 0x200 (end 0x400)
adding smc.bin at raw offset 0x00001000 len 0x3000 (end 0x4000)
adding kv.bin at raw offset 0x00004000 len 0x4000 (end 0x8000)
adding cb_5770.bin at raw offset 0x00008000 len 0x8e40 (end 0x10e40)
adding cd_5770.bin at raw offset 0x00010e40 len 0x56c0 (end 0x16500)
adding ce_1888.bin at raw offset 0x00016500 len 0x56070 (end 0x6c570)
adding cf_4532.bin at raw offset 0x00070000 len 0x44c0 (end 0x744c0)
adding cg_4532.bin at raw offset 0x000744c0 len 0x2ef40 (end 0x80000, rest in fs)
adding cf_17349.bin at raw offset 0x00080000 len 0x4560 (end 0x84560)
adding cg_17349.bin at raw offset 0x00084560 len 0x75eb0 (end 0x90000, rest in fs)
adding freeboot.bin at raw offset 0x00090000 len 0xd40 (end 0x90d40)
adding patches_falcon.bin at raw offset 0x00091000 len 0xa70 (end 0x91a70)
adding fuses.bin at raw offset 0x00095000 len 0x60 (end 0x95060)
adding xell-2f.bin at raw offset 0x00095060 len 0x40000 (end 0xd5060)
adding cb_5771.bin at raw offset 0x000d5060 len 0x9340 (end 0xde3a0)
adding cd_8453.bin at raw offset 0x000de3a0 len 0x5780 (end 0xe3b20)
Fixing up FS table...done!
Writing CG patch slot overflow data to sysupdate.xexp1
at raw offset 0xe4000 len 0x00023400 (end: 0x00107400)...done!
Writing target CG patch slot overflow data to sysupdate.xexp2
at raw offset 0xe4000 len 0x0006a410 (end: 0x0014e410)...done!

------ adding 28 firmware files ------
extracted SUPD\aac.xexp (0x14000 bytes) (crc32: 0xf8eb9fc2 ini: 0xf8eb9fc2)
adding as aac.xexp2 at raw offset 0x172410 len 0x00014000 (end 0x00186410)
extracted SUPD\bootanim.xex (0x61000 bytes) (crc32: 0x5927de8b ini: 0x5927de8b)
adding as bootanim.xex at raw offset 0x188000 len 0x00061000 (end 0x001e9000)
extracted SUPD\createprofile.xex (0xc000 bytes) (crc32: 0x150e2fd2 ini: 0x150e2fd2)
adding as createprofile.xex at raw offset 0x1e9000 len 0x0000c000 (end 0x001f5000)
extracted SUPD\dash.xex (0x5a0000 bytes) (crc32: 0x78a4c4b1 ini: 0x78a4c4b1)
adding as dash.xex at raw offset 0x1f8000 len 0x005a0000 (end 0x00798000)
extracted SUPD\deviceselector.xex (0xa000 bytes) (crc32: 0xd213aa7d ini: 0xd213aa7d)
adding as deviceselector.xex at raw offset 0x798000 len 0x0000a000 (end 0x007a2000)
extracted SUPD\gamerprofile.xex (0x1b000 bytes) (crc32: 0x75baa3a4 ini: 0x75baa3a4)
adding as gamerprofile.xex at raw offset 0x7a2000 len 0x0001b000 (end 0x007bd000)
extracted SUPD\hud.xex (0x1d000 bytes) (crc32: 0xddf5d430 ini: 0xddf5d430)
adding as hud.xex at raw offset 0x7bf000 len 0x0001d000 (end 0x007dc000)
extracted SUPD\huduiskin.xex (0x14000 bytes) (crc32: 0x3f40ca47 ini: 0x3f40ca47)
adding as huduiskin.xex at raw offset 0x7dd000 len 0x00014000 (end 0x007f1000)
extracted SUPD\mfgbootlauncher.xex (0x8000 bytes) (crc32: 0x35ebb139 ini: 0x35ebb139)
adding as mfgbootlauncher.xex at raw offset 0x7f4000 len 0x00008000 (end 0x007fc000)
extracted SUPD\minimediaplayer.xex (0xc000 bytes) (crc32: 0x21071346 ini: 0x21071346)
adding as minimediaplayer.xex at raw offset 0x7fc000 len 0x0000c000 (end 0x00808000)
extracted SUPD\nomni.xexp (0xc800 bytes) (crc32: 0x48549239 ini: 0x48549239)
adding as nomni.xexp2 at raw offset 0x808000 len 0x0000c800 (end 0x00814800)
extracted SUPD\nomnifwk.xexp (0x2000 bytes) (crc32: 0x7e7b8333 ini: 0x7e7b8333)
adding as nomnifwk.xexp2 at raw offset 0x814800 len 0x00002000 (end 0x00816800)
extracted SUPD\nomnifwm.xexp (0x5000 bytes) (crc32: 0xb3f9b73a ini: 0xb3f9b73a)
adding as nomnifwm.xexp2 at raw offset 0x81a000 len 0x00005000 (end 0x0081f000)
extracted SUPD\SegoeXbox-Light.xtt (0x6000 bytes) (crc32: 0xe0ee6049 ini: 0xe0ee6049)
adding as SegoeXbox-Light.xtt at raw offset 0x821000 len 0x00006000 (end 0x00827000)
extracted SUPD\signin.xex (0x1a000 bytes) (crc32: 0x6eba3ee8 ini: 0x6eba3ee8)
adding as signin.xex at raw offset 0x82a000 len 0x0001a000 (end 0x00844000)
extracted SUPD\updater.xex (0x7000 bytes) (crc32: 0xd915f51f ini: 0xd915f51f)
adding as updater.xex at raw offset 0x846000 len 0x00007000 (end 0x0084d000)
extracted SUPD\vk.xex (0xb000 bytes) (crc32: 0x21315915 ini: 0x21315915)
adding as vk.xex at raw offset 0x84f000 len 0x0000b000 (end 0x0085a000)
extracted SUPD\xam.xex (0x252000 bytes) (crc32: 0xed837c51 ini: 0xed837c51)
adding as xam.xex at raw offset 0x85b000 len 0x00252000 (end 0x00aad000)
extracted nanddump\xenonclatin.xtt (0x11b000 bytes) (crc32: 0xd5d17ff5 ini: 0xd5d17ff5)
adding as xenonclatin.xtt at raw offset 0xaae000 len 0x0011b000 (end 0x00bc9000)
extracted SUPD\xenonclatin.xttp (0x18000 bytes) (crc32: 0x7a507ad1 ini: 0x7a507ad1)
adding as xenonclatin.xttp2 at raw offset 0xbcb000 len 0x00018000 (end 0x00be3000)
extracted nanddump\xenonjklatin.xtt (0x1a8000 bytes) (crc32: 0xdde4a14c ini: 0xdde4a14c)
adding as xenonjklatin.xtt at raw offset 0xbe4000 len 0x001a8000 (end 0x00d8c000)
extracted SUPD\xenonjklatin.xttp (0x7000 bytes) (crc32: 0xe2adddfb ini: 0xe2adddfb)
adding as xenonjklatin.xttp2 at raw offset 0xd8c000 len 0x00007000 (end 0x00d93000)
extracted SUPD\ximecore.xex (0x17000 bytes) (crc32: 0xf040324c ini: 0xf040324c)
adding as ximecore.xex at raw offset 0xd93000 len 0x00017000 (end 0x00daa000)
extracted nanddump\ximedic.xex (0x90000 bytes) (crc32: 0x1d992bfb ini: 0x1d992bfb)
adding as ximedic.xex at raw offset 0xdab000 len 0x00090000 (end 0x00e3b000)
extracted SUPD\ximedic.xexp (0x2800 bytes) (crc32: 0x7825f71a ini: 0x7825f71a)
adding as ximedic.xexp2 at raw offset 0xe3c000 len 0x00002800 (end 0x00e3e800)
reading 17349\..\launch.xex (0xd000 bytes)
adding as launch.xex at raw offset 0xe3e800 len 0x0000d000 (end 0x00e4b800)
reading 17349\..\lhelper.xex (0x6000 bytes)
adding as lhelper.xex at raw offset 0xe4d000 len 0x00006000 (end 0x00e53000)
***** could not read file '..\launch.ini', skipping *****

------ adding 4 security files ------
<- Processing crl.bin ->
reading data\crl.bin (0xa00 bytes)
crl appears crypted, attempting to decrypt with CPU key...failed! Trying alternate key...success!
adding as crl.bin at raw offset 0xe58000 len 0x00000a00 (end 0x00e58a00)

<- Processing dae.bin ->
reading data\dae.bin (0xad30 bytes)
dae appears encrypted, attempting to decrypt with CPU key...failed! Attempting to decrypt with alternate key...
success!
adding as dae.bin at raw offset 0xe5c000 len 0x0000ad30 (end 0x00e66d30)

<- Processing extended.bin ->
reading data\extended.bin (0x4000 bytes)
adding as extended.bin at raw offset 0xe68000 len 0x00004000 (end 0x00e6c000)

<- Processing secdata.bin ->
reading data\secdata.bin (0x400 bytes)
adding as secdata.bin at raw offset 0xe6c000 len 0x00000400 (end 0x00e6c400)

------ checking for Mobile*.dat ------
MobileB.dat found, adding from previous parse
adding MobileB.dat as type 0x31 at raw offset 0xe70000 len 0x800 (end 0xe70800)
MobileC.dat found, adding from previous parse
adding MobileC.dat as type 0x32 at raw offset 0xe74000 len 0x200 (end 0xe74200)
MobileD.dat found, adding from previous parse
adding MobileD.dat as type 0x33 at raw offset 0xe78000 len 0x800 (end 0xe78800)
MobileE.dat found, adding from previous parse
adding MobileE.dat as type 0x34 at raw offset 0xe7c000 len 0x600 (end 0xe7c600)
Statistics.settings found, adding from previous parse
adding Statistics.settings at raw offset 0xf78000 len 0x1000 (end 0xf79000)

------ adding smc_config.bin ------
adding smc config to offset 0x00f7c000, len 0x400

------ cleaning up image ------
Fixing up empty FS block entries...done!
Writing FS table to image offset 0xe80000 len 0x4000 (end 0xe84000)...done!

------ finalizing image ------
calculating ECD bytes and assembling raw image...done!
done remapping!

------ writing image to disk ------
writing file 'output.bin' to disk...done!
---------------------------------------------------------------
output.bin image built, info:
---------------------------------------------------------------
Kernel : 2.0.17349.0
Console : Falcon
NAND size : 16MiB
Build : JTAG
Xell : power on console with console eject button
Serial :
ConsoleId :
MoboSerial:
Mfg Date : 08/02/2008
CPU Key :
1BL Key :
DVD Key :
CF LDV : 1
KV type : type2 (hashed - unchecked, master key not available)
---------------------------------------------------------------
xeBuild Finished. Have a nice day.
---------------------------------------------------------------

[heretic]

Grazie della disponibilità ma ho provato e niente ..

in settimana compro materiale nuovo... e a questo punto provo a fare qualcosa modificando con i transistor il jtag se si può con il punto alternativo... o rifare bene le andature si dello sniffer che del jtag... a presto aggiornamenti !