Xbox 360:RGH/RGH1.2: Difference between revisions
Jump to navigation
Jump to search
(Alt phat points mentioned) |
(Some stuff) |
||
Line 5: | Line 5: | ||
* A glitch chip: | * A glitch chip: | ||
** Coolrunner Rev A/B/C/D | ** Coolrunner Rev A/B/C/D | ||
** CR3 Lite | |||
** Matrix Glitcher | ** Matrix Glitcher | ||
** Squirt BGA/Reloaded | ** Squirt BGA/Reloaded | ||
Line 20: | Line 21: | ||
==Glitch Chip Installation== | ==Glitch Chip Installation== | ||
===Falcon | ===Motherboard points on Falcon & Jasper === | ||
[https:// | *3.3v | ||
**[[:File:Y5p0dxP.jpg|Topside near AV]] | |||
*PLL | |||
**[[:File:PLL and RST.png|Bottom]] | |||
**[https://cdn.discordapp.com/attachments/610257524108820491/640289576035942411/image0.jpg Top] (under CPU heatsink, requires scraping) | |||
*STBY_CLK | |||
**[[:File:CLK.png|Bottom]] (recommended and easier to solder) | |||
**[[:File:PMlJpmS.jpg|Topside]] (There are 2 points boxed, either can be used.) | |||
*POST | |||
**[[:File:Post.png|Bottom]] | |||
**[https://i.imgur.com/5hnaIJ9.jpeg Top (requires scraping)] | |||
*CPU_RST | |||
**[[:File:VXi9LgC.jpg|R8C2]] (Performs better, recommended) | |||
**[[:File:PLL and RST.png|Near PLL]] | |||
**[[:File:Cp2OBF3.jpeg|J8C1]]: (Easier to solder) | |||
* GND | |||
**[https://i.imgur.com/mLSd4ZX.png Near 3.3v] (clean installation) | |||
**AV Port (A bit easier to solder) | |||
=== Glitch chip pinouts & diagrams on Falcon & Jasper === | |||
====[[:File:Coolrunnerrevcrgh12.jpg|Coolrunner Rev A/B/C/D]]==== | ====[[:File:Coolrunnerrevcrgh12.jpg|Coolrunner Rev A/B/C/D]]==== | ||
Line 60: | Line 74: | ||
* Remember to remove the diode and connect 1.8V | * Remember to remove the diode and connect 1.8V | ||
===Trinity / Corona== | === Motherboard points on Trinity & Corona === | ||
* [[:File:RGH1.2 Slim PLL.jpg|PLL]] | |||
** No alternative point! | |||
* [https://i.imgur.com/WKCqX1T.png POST & RST] | |||
** If POST on the bottom is disabled (like in Waitsburg & Stingray boards) or damaged, a postfix adapter is required. The adapter can also be used on Trinity in case it's damaged. [[:File:5lY3TID.png|Postfix installation and identification visible here]]. | |||
** [https://i.imgur.com/du6nk7d.png FT4R2] '''(Only on Trinity)''' | |||
** [https://i.imgur.com/C8dIFkk.png R4P4] '''(Only on Corona)''' | |||
* STBY_CLK (Trinity only) | |||
** [https://s00.yaplakal.com/pics/pics_original/7/4/3/14351347.jpg C3B10] (Top) | |||
** [https://www.se7ensins.com/proxy.php?image=http%3A%2F%2Fi.imgur.com%2FcawRm.jpg&hash=e977fe24e64a0ca76170a127e06e10e8 FT3N2] (Bottom) | |||
* [https://i.imgur.com/rCE0mds.png GND & 3.3V] | |||
=== | ===Glitch chip pinouts and diagrams for Trinity & Corona=== | ||
====Coolrunner Rev A/B/C/D==== | ====Coolrunner Rev A/B/C/D==== | ||
Line 84: | Line 109: | ||
* A - RST | * A - RST | ||
* B - POST | * B - POST | ||
* C - STBY_CLK | * C - STBY_CLK (only if not using oscillator) | ||
* E - PLL (10K ohm resistor recommended) | * E - PLL (10K ohm resistor recommended) | ||
Line 129: | Line 154: | ||
#* If you are using an xFlasher, ensure the switch is set to <code>SPI</code>. | #* If you are using an xFlasher, ensure the switch is set to <code>SPI</code>. | ||
# In the upper right of J-Runner, ensure the <code>Glitch2</code> radio button is selected. | # In the upper right of J-Runner, ensure the <code>Glitch2</code> radio button is selected. | ||
#* Make sure <code>SMC+</code> is enabled for better boot times. | |||
# Click "Create XeBuild Image". This will take a few moments. | # Click "Create XeBuild Image". This will take a few moments. | ||
# Click "Write NAND". | # Click "Write NAND". |
Revision as of 17:06, 7 July 2023
RGH1.2 combines RGH1-like PLL slowdown with Glitch2 images to allow reliable glitching of Falcon/Jasper consoles with split CB (post 14699 kernel). RGH1.2 V2 ports this hack to Trinity/Corona consoles as well as fixing a few issues on Jaspers.
Equipment Needed
- A glitch chip:
- Coolrunner Rev A/B/C/D
- CR3 Lite
- Matrix Glitcher
- Squirt BGA/Reloaded
- X360ACE V1/V2/V3
- X360ACE V4/V5/V3+ (Trinity/Corona only)
- DGX
- A PC running Windows Vista or later
- A soldering iron, solder, and flux (MG 835 recommended)
- Isopropyl alcohol (91% or higher recommended) and cotton swabs
- xFlasher 360, NAND-X, JR-Programmer, or Matrix Flasher
- J-Runner with Extras (Includes RGH1.2 V2 Matrix/Coolrunner Timings)
- RGH1.2 V2 Timing Files (X360ACE/Squirt chips only)
Glitch Chip Installation
Motherboard points on Falcon & Jasper
- 3.3v
- PLL
- STBY_CLK
- POST
- CPU_RST
- GND
- Near 3.3v (clean installation)
- AV Port (A bit easier to solder)
Glitch chip pinouts & diagrams on Falcon & Jasper
Coolrunner Rev A/B/C/D
- A - PLL
- B - STBY_CLK (only if not using oscillator)
- C - POST
- D - RST
CR3 Lite
- A - PLL
- B - STBY_CLK (only if not using oscillator)
- C - POST
- D - RST
Matrix Glitcher
- A - RST
- B - POST
- C - STBY_CLK (only if not using oscillator)
- F - PLL
Squirt
- Squirt BGA 1.2: Disable the onboard 670pf and/or 480pf caps by removing R7 and R8
- Squirt Reloaded 2.X: remove R2 and connect STBY_CLK
- Pinout follows written labels
- Don't use POST or RST tuners
X360ACE (V1/V2/V3), DGX
- C - POST
- D - RST
- E - STBY_CLK (only if not using oscillator version)
- F - PLL (22K ohm resistor required)
- Remember to remove the diode and connect 1.8V
Motherboard points on Trinity & Corona
- PLL
- No alternative point!
- POST & RST
- If POST on the bottom is disabled (like in Waitsburg & Stingray boards) or damaged, a postfix adapter is required. The adapter can also be used on Trinity in case it's damaged. Postfix installation and identification visible here.
- FT4R2 (Only on Trinity)
- R4P4 (Only on Corona)
- STBY_CLK (Trinity only)
- GND & 3.3V
Glitch chip pinouts and diagrams for Trinity & Corona
Coolrunner Rev A/B/C/D
- B - STBY_CLK (only if not using oscillator)
- C - POST
- D - RST
- E - PLL (10K ohm resistor recommended)
CR3 Lite
- B - STBY_CLK (only if not using oscillator)
- C - POST
- D - RST
- E - PLL (10K ohm resistor recommended)
Matrix Glitcher (Corona)
- A - RST
- B - POST
- E - PLL (10K ohm resistor recommended)
Matrix Glitcher (Trinity)
- A - RST
- B - POST
- C - STBY_CLK (only if not using oscillator)
- E - PLL (10K ohm resistor recommended)
X360ACE (V1/V2/V3/V3+), DGX
- C - POST
- D - RST
- F - PLL (10K ohm resistor recommended)
X360ACE V4/V5
- A - RST
- B - POST
- C1 - CPU_CLK_DP
- C2 - CPU_CLK_DN
- D - PLL (10K ohm resistor required)
Squirt
- Squirt Reloaded 2.X: remove R2 and connect STBY_CLK or remove 100 MHz and add 48 MHz oscillator
- Use SCL pad for PLL
- Pinout follows written labels
- Don't use POST or RST tuners
Programming the Glitch Chip
- Plug the cable from your programmer into the chip programmer.
- If you are using an xFlasher, ensure the switch is set to
SPI
. - CoolRunner: Slide switch to "PRG".
- If you are using an xFlasher, ensure the switch is set to
- Open J-Runner with Extras. Click "Program Timing File" in the upper left and select your console’s tab and the relevant radio button for RGH 1.2.
- Click "Program". When complete, unplug the cable from the glitch chip.
- Coolrunner: Set the switch back to "NOR".
X360ACE V4/V5/V3+
- xFlasher or other Gowin compatible programmer required in order to program these chips
- Programming Instructions
Decrypting the NAND
- Connect Ethernet and power on the console. The Coolrunner should blink once or more times, and then the console should start into XeLL RELOADED.
- Once XeLL finishes, it will display your CPU key and some other info. There is also an IP address.
- Enter the IP address into the box on the lower right of J-Runner and click "Get CPU Key". J-Runner will pull the info from the box, and decrypt the NANDs automatically.
Writing New NAND Image
- Power down the console, and connect your programmer to the motherboard.
- If you are using an xFlasher, ensure the switch is set to
SPI
.
- If you are using an xFlasher, ensure the switch is set to
- In the upper right of J-Runner, ensure the
Glitch2
radio button is selected.- Make sure
SMC+
is enabled for better boot times.
- Make sure
- Click "Create XeBuild Image". This will take a few moments.
- Click "Write NAND".
- Disconnect your programmer when the process completes.
- Boot the console several times and ensure it boots consistently. If not, make sure your wiring is clean and neat and avoids noisy area. Run the wires near the X-Clamps for best results.
- Return to the RGH main page and continue in the Cleaning Up section.