Xbox 360:RGH: Difference between revisions

From ConsoleMods Wiki
Jump to navigation Jump to search
m (Added picoflasher to the list of readers)
No edit summary
Line 11: Line 11:
* S-RGH (Speeded-Up RGH) is a tweaked and better version of RGH2 which is far more consistent and quick.
* S-RGH (Speeded-Up RGH) is a tweaked and better version of RGH2 which is far more consistent and quick.
** Muffin RGH is '''not recommended'''. It essentially is a less consistent method of glitching and does not boot as fast or consistently as S-RGH.
** Muffin RGH is '''not recommended'''. It essentially is a less consistent method of glitching and does not boot as fast or consistently as S-RGH.
* EXT_CLK is similar to RGH1.2, but uses the EXT_CLK_EN point instead of CPU_PLL_BYPASS to slow the CPU by roughly 10.6x. It is the best method for Xenon and Zephyr boards that have PLL-crash issues.
* RGH3 is the newest RGH variant, and the first to work without a glitch chip by using the SMC to do the glitching instead. It is currently in open beta, and will be covered here once it has been fully released.
* RGH3 is the newest RGH variant, and the first to work without a glitch chip by using the SMC to do the glitching instead. It is currently in open beta, and will be covered here once it has been fully released.



Revision as of 21:54, 12 September 2022

Exclamation-triangle-fill.svgThe steps on this page are considered risky for your console, as there is a chance you can brick it. Please have someone else mod your console if you are not experienced in soldering!


Reset Glitch Hack (RGH) is a hardware modification which allows you to run unsigned code, mods, game backups, and homebrew. The hack relies on a vulnerability in the hardware found by GliGli that is triggered by sending a reset pulse to the processor at a specific moment, resulting in a power glitch that causes a bootloader hash check to return "valid" no matter what you have flashed in place of the stock bootloader. The timing of when and how long the pulse should be sent is dependent on the console and it may take some tweaking until it "glitches" and boots.

The RGH variants are as follows:

  • RGH1 is for Phat consoles with dashboard 14699 and lower. It uses CPU_PLL_BYPASS to slow down the CPU by 128x in order to precisely power glitch during a hash check on a bootloader..
  • RGH2 is for Slims (but also works for Non-Xenon Phats), which uses I2C slowdown instead of PLL slowdown, and works on any dashboard. However, it is considered more difficult to tune, and less consistent.
    • RGH2+ is the same as RGH2, except that the slowdown is sent by the southbridge, instead of the glitch chip. The glitch chip asserts a remapped GPIO pin to tell the southbridge when to send slowdown/speedup. It is exclusive to some Team Xecuter chips such as the CR4XL.
  • RGH1.2 combines RGH1-like PLL slowdown with RGH2 software to allow reliable glitching of Phat consoles after 14699 dashboard.
  • S-RGH (Speeded-Up RGH) is a tweaked and better version of RGH2 which is far more consistent and quick.
    • Muffin RGH is not recommended. It essentially is a less consistent method of glitching and does not boot as fast or consistently as S-RGH.
  • EXT_CLK is similar to RGH1.2, but uses the EXT_CLK_EN point instead of CPU_PLL_BYPASS to slow the CPU by roughly 10.6x. It is the best method for Xenon and Zephyr boards that have PLL-crash issues.
  • RGH3 is the newest RGH variant, and the first to work without a glitch chip by using the SMC to do the glitching instead. It is currently in open beta, and will be covered here once it has been fully released.

Requirements

Below are the requirements to RGH your Xbox 360. It’s recommended to read ahead and choose the NAND reading method and glitch chip specific wiring method that’s right for you, as you will need a NAND programmer and potentially more equipment depending on which methods you choose.

  1. Be experienced in soldering. The Xbox 360 is not a good place to learn to solder. Regardless of which reading method you choose, you will need a soldering iron, solder, and flux (MG 835 recommended)
  2. Determine your motherboard model. All models are compatible except the Winchester motherboard. You can use Octal’s Wizard to determine your model or look at the back of your console and use this chart and looking through the side vent of your console.
    • Corona: Determine if 16MB or 4GB NAND model by turning on the console, navigating to System Settings > Storage, and checking whether the onboard storage unit is 16MB or 4GB. Also determine if you need to buy a postfix adapter using this diagram.
  3. Use the recommended exploit chart to determine what RGH version is best for your console.

Reading your NAND

There are a few different tools for reading your NAND chip: xFlasher 360, Nand-X, JR Programmer, Matrix USB NAND Flasher, PicoFlasher, various SD card tools, or a LPT cable. However, the 4GB Corona requires that you use an xFlasher 360, PicoFlasher or a SD card tool. Consider the pros and cons below and choose the method that’s right for you. The LPT cable method is not listed here, as you will need one of these other flashers second device to program a glitch chip anyway.

4GB Corona

Device Pros Cons
xFlasher 360
  • Reads NAND in 40 seconds to 4 minutes
  • Can also program RGH glitch chips
  • One of three options for 4GB NAND Corona
  • Actively supported
SD Card Tools
  • One of three options for 4GB NAND Corona
  • You will need a programmer to program glitch chips
PicoFlasher
  • One of three options for 4GB NAND Corona
  • Can also be used as a RGH 1.2 chip
  • Super Cheap
  • You will need a programmer to program glitch chips

All Other Motherboards

Device Pros Cons
xFlasher 360
  • Reads NAND in 40 seconds to 4 minutes
  • Can also program RGH glitch chips
  • One of three options for 4GB NAND Corona
  • Actively supported
  • More expensive than JR Programmer
Nand-X
  • Reads NAND in 2-8 minutes
  • Can also program RGH glitch chips
  • More expensive than JR Programmer and xFlasher 360
  • Does not support 4GB Coronas
JR Programmer
  • Reads NAND fast in 3-10 minutes
  • Can also program RGH glitch chips
  • More expensive than LPT cable
  • Does not support 4GB Coronas
Matrix USB NAND Flasher
  • Reads NAND in 7-26 minutes
  • Cheap option
PicoFlasher
  • Reads NAND fast in 1-8 minutes
  • One of three options for 4GB Corona
  • Can also be used as a RGH 1.2 glitch chip
  • Super cheap
  • Can't be used for programming glitch chips

RGH Wiring

Phat

RGH1

RGH1.2

RGH2

RGH3 (will not be covered until out of beta)

S-RGH

Slim / E

RGH1.2

RGH2

RGH3 (will not be covered until out of beta)

S-RGH

Cleaning Up

Remove your NAND programmer wires and clean the points. Clean all flux off the board, allow it to dry, and test it once more before re-assembling.

Installing XeXMenu

  1. Plug a flash drive into your Xbox 360 and navigate to Console Settings > Storage. Select the flash drive and allow it to format the flash drive as a system drive.
  2. Extract the CODE9999 folder from the XeXMenu 1.2 rar to your Desktop.
  3. Plug the flash drive into your PC. Open Xplorer360 and select Drive > Open > Harddrive or Memcard. On the left-hand side, select Partition 3, then right-click the Content folder, select "New Folder", and name it 0000000000000000 (16 zeroes). Open the new folder, then drag the CODE9999 folder into it.
  4. Select Drive > Close, then close Xplorer360. Safely eject your flash drive and plug it into your Xbox 360. Navigate to the Demos section of your dashboard, and it should list XeXMenu there. Select it to launch it.
  • You can install XeXMenu to your hard drive by going to Console Settings > Storage, and copying it from your flash drive to the hard drive.

From here, you can install any homebrew or mods that you want. See this page for a list of recommended modifications and applications to install.