Xbox 360:RGH/RGH3: Difference between revisions
No edit summary |
(Added images for individual motherboard points) |
||
Line 1: | Line 1: | ||
RGH 3 is a modern method of the Reset Glitch Hack that uses the SMC in the Xbox 360's southbridge instead of a glitch chip in order to boot unsigned code. | RGH 3 is a modern method of the Reset Glitch Hack that uses the SMC in the Xbox 360's southbridge instead of a glitch chip in order to boot unsigned code. | ||
The guides from | MrMario2011 has video guides for RGH 3 on Falcon/Jasper<ref>https://youtu.be/Gq1Svm-s-DM?si=bU1ANSEJRyFRf-G9</ref>, Trinity<ref>https://youtu.be/D3DDglRBqfY?si=nOD4cB6T6_gaQLwp</ref>, and Corona <ref>https://youtu.be/hpOlGeCHwro?si=CQHohmwYaSVUqG-F</ref> motherboards respectively. The guides from Larvs on Xbox 360 Hub<ref>https://xbox360hub.com/guides/rgh-3-guide/</ref> and BeefyDJ on Se7enSins<ref>https://www.se7ensins.com/forums/threads/rgh-3-0-guide-phat-slim-includes-quick-tool.1832979/</ref> are also great resources for RGH 3 tutorials. | ||
==Equipment Needed== | ==Equipment Needed== | ||
Line 28: | Line 28: | ||
==RGH3 Wiring & Diagrams== | ==RGH3 Wiring & Diagrams== | ||
[[File:Phat360PLLFix.jpg|thumb|PLL Repair on a Phat motherboard (required if bottom pad is damaged)|327x327px]] | [[File:Phat360PLLFix.jpg|thumb|PLL Repair on a Phat motherboard (required if bottom pad is damaged)|327x327px]] | ||
===[https:// | [[File:5lY3TID.png|thumb|Corona POSTFix Installation/Identification|867x867px]] | ||
===[https://xbox360hub.com/wp-content/uploads/2022/01/RGH3_PHAT.png Phat (Falcon/Jasper)]=== | |||
[https://imgur.com/rsKnsZy '''Alternative Phat Diagram'''] | |||
On Falcon and Jasper motherboards, you will need to place the diode on the wire that connects POST and SMC_POST. '''It is not recommended to use RGH 3 on a Falcon or Jasper without this diode.''' | |||
When using a through hole diode, it is recommended to solder it in the middle of the wire instead of soldering it directly to a pad. The wires will be less stiff than the diode's legs, causing less strain to the joint if it moves around. This also applies to the 22K resistor on the wire connecting PLL and SMC_PLL. | |||
* CPU PLL | |||
** [[:File:Fat360PLL.jpg|Bottom]] | |||
** [[:File:Fat360topPLL.jpg|Top (Requires scraping)]] | |||
* CPU POST | |||
** [[:File:FT6U7_POST.jpg|Bottom]] | |||
** [[:File:POST_OUT1_Top.jpg|Top (Requires scraping)]] | |||
* SMC_PLL | |||
** [[:File:Bottompll-1-scaled.jpg|Bottom]] | |||
** [[:File:Topsidepoint.png|Top]] | |||
* SMC_POST | |||
**[[:File:Bottompll-1-scaled.jpg|Bottom]] | |||
**[[:File:Topsidepoint.png|Top]] | |||
'''It is not recommended to use RGH 3 on Falcon/Jasper/Trinity without the suggested resistor.''' | |||
===[https://xbox360hub.com/wp-content/uploads/2021/12/Trinity-full-board-min.png Slim (Trinity)]=== | ===[https://xbox360hub.com/wp-content/uploads/2021/12/Trinity-full-board-min.png Slim (Trinity)]=== | ||
*On Trinity, you can skip the diode and use a 3K to 10K Ohm resistor on the PLL wire. | * CPU PLL | ||
** [[:File:RGH1.2_Slim_PLL.jpg|Bottom (No alt point!)]] | |||
* CPU POST | |||
** [[:File:TrinityPOSTandRST.png|Bottom (RST can be ignored with RGH3)]] | |||
* SMC_PLL | |||
** [[:File:FT2V1.png|FT2V1]] | |||
* SMC_POST | |||
** [[:File:TrinitySMC_POST.png|R3R22]] | |||
On Trinity, you can skip the diode and use a 3K to 10K Ohm resistor on the PLL wire. When using a through hole resistor, it is recommended to solder it in the middle of the wire instead of soldering it directly to a pad. The wires will be less stiff than the diode's legs, causing less strain to the joint if it moves around. | |||
'''It is not recommended to use RGH 3 on Falcon/Jasper/Trinity without the suggested resistor.''' | |||
===[https://xbox360hub.com/wp-content/uploads/2021/12/Slim_Corona.jpg Slim/E (Corona)]=== | ===[https://xbox360hub.com/wp-content/uploads/2021/12/Slim_Corona.jpg Slim/E (Corona)]=== | ||
The 1K Ohm resistor on Corona motherboards is optional, but still recommended for reliability if available. It also connects to the wire connecting SMC_PLL and the CPU's PLL. When using a through hole resistor, it is recommended to solder it in the middle of the wire instead of soldering it directly to a pad. The wires will be less stiff than the diode's legs, causing less strain to the joint if it moves around. Make sure to check if the POST point on the bottom is enabled or not using the provided diagram. | |||
* CPU PLL | |||
** [[:File:RGH1.2_Slim_PLL.jpg|Bottom (No alt point!)]] | |||
* CPU POST | |||
** [[:File:Corona_POSTandRST.png|Bottom (RST can be ignored with RGH3)]] | |||
* SMC | |||
** [[:File:CoronaSMC.png|SMC_POST and SMC_PLL]] | |||
==Decrypting the NAND== | ==Decrypting the NAND== | ||
Line 62: | Line 90: | ||
#Boot the console several times and ensure it boots consistently. If not, make sure your wiring is clean and neat and avoids noisy areas. Run the wires near the X-Clamps for best results. | #Boot the console several times and ensure it boots consistently. If not, make sure your wiring is clean and neat and avoids noisy areas. Run the wires near the X-Clamps for best results. | ||
#Return to the RGH main page and continue in the [[Xbox_360:RGH#Cleaning_Up|Cleaning Up section]]. | #Return to the RGH main page and continue in the [[Xbox_360:RGH#Cleaning_Up|Cleaning Up section]]. | ||
== References == |
Revision as of 13:10, 26 August 2023
RGH 3 is a modern method of the Reset Glitch Hack that uses the SMC in the Xbox 360's southbridge instead of a glitch chip in order to boot unsigned code.
MrMario2011 has video guides for RGH 3 on Falcon/Jasper[1], Trinity[2], and Corona [3] motherboards respectively. The guides from Larvs on Xbox 360 Hub[4] and BeefyDJ on Se7enSins[5] are also great resources for RGH 3 tutorials.
Equipment Needed
- Wire (Solid core 28-30AWG recommended)
- A resistor
- Falcon/Jasper: 22K Ohm
- Trinity: 3K-10K Ohm
- Corona: 1K Ohm (Optional)
- 1N4148 diode (Only needed on Falcon or Jasper)
- Wire Insulation (kapton tape, electrical tape, heatshrink, etc.) for through hole resistor/diode
- A PC running Windows Vista or later
- A soldering iron, solder, and flux (MG 835 recommended)
- Isopropyl alcohol (91% or higher recommended) and cotton swabs
- A NAND Programmer:
- J-Runner with Extras
- NAND Backup with RGH3 XeLL written to the console
RGH3 Wiring & Diagrams
Phat (Falcon/Jasper)
On Falcon and Jasper motherboards, you will need to place the diode on the wire that connects POST and SMC_POST. It is not recommended to use RGH 3 on a Falcon or Jasper without this diode. When using a through hole diode, it is recommended to solder it in the middle of the wire instead of soldering it directly to a pad. The wires will be less stiff than the diode's legs, causing less strain to the joint if it moves around. This also applies to the 22K resistor on the wire connecting PLL and SMC_PLL.
- CPU PLL
- CPU POST
- SMC_PLL
- SMC_POST
It is not recommended to use RGH 3 on Falcon/Jasper/Trinity without the suggested resistor.
Slim (Trinity)
- CPU PLL
- CPU POST
- SMC_PLL
- SMC_POST
On Trinity, you can skip the diode and use a 3K to 10K Ohm resistor on the PLL wire. When using a through hole resistor, it is recommended to solder it in the middle of the wire instead of soldering it directly to a pad. The wires will be less stiff than the diode's legs, causing less strain to the joint if it moves around. It is not recommended to use RGH 3 on Falcon/Jasper/Trinity without the suggested resistor.
Slim/E (Corona)
The 1K Ohm resistor on Corona motherboards is optional, but still recommended for reliability if available. It also connects to the wire connecting SMC_PLL and the CPU's PLL. When using a through hole resistor, it is recommended to solder it in the middle of the wire instead of soldering it directly to a pad. The wires will be less stiff than the diode's legs, causing less strain to the joint if it moves around. Make sure to check if the POST point on the bottom is enabled or not using the provided diagram.
- CPU PLL
- CPU POST
- SMC
Decrypting the NAND
- Connect an Ethernet cable and HDMI cable to the console and power it on. The glitch chip should blink once or more times, and then the console should start into XeLL RELOADED.
- Once XeLL finishes, it will display your CPU key and some other info. There is also an IP address.
- Enter the IP address into the box on the lower right of J-Runner and click "Get CPU Key". J-Runner will pull the info from the box, and decrypt the NANDs automatically.
- If you don't want to or aren't able to connect the Xbox 360 to a network or directly to the PC, you can also manually type in the CPU key from XeLL into J-Runner.
Writing New NAND Image
- Power down the console, and connect your programmer to the motherboard.
- If you are using an xFlasher, ensure the switch is set to
SPI
.
- If you are using an xFlasher, ensure the switch is set to
- In the upper right of J-Runner, ensure the
Glitch2
radio button is selected. Since RGH3 XeLL was written to the NAND earlier, Glitch2 and RGH3 should already be enabled. - Click "Create XeBuild Image". This will take a few moments.
- Click "Write NAND".
- Disconnect your programmer when the process completes.
- Boot the console several times and ensure it boots consistently. If not, make sure your wiring is clean and neat and avoids noisy areas. Run the wires near the X-Clamps for best results.
- Return to the RGH main page and continue in the Cleaning Up section.