Hacking RGH: rewriting ECC

puss2puss

.. well ..
OP
Member
Joined
Dec 18, 2013
Messages
927
Trophies
0
Age
37
XP
835
Country
Canada
Hell0 Tempers!
If i re-write the ECC from my nand for RGH, will the console boot as normal if i remove the chip?
 

brickmii82

Well-Known Member
Member
Joined
Feb 21, 2015
Messages
1,442
Trophies
1
Age
41
XP
2,930
Country
United States
The ECC should render normal boot inoperative if correctly written to the nand. It’s just programming Xell to the first 50 blocks to get the cpu key on initial glitch and boot. After successfully building and flashing a whole nand build from xebuild or Jrunner, it will look normal but will run unsigned code like Xexmenu
 
  • Like
Reactions: puss2puss

puss2puss

.. well ..
OP
Member
Joined
Dec 18, 2013
Messages
927
Trophies
0
Age
37
XP
835
Country
Canada
The ECC should render normal boot inoperative if correctly written to the nand. It’s just programming Xell to the first 50 blocks to get the cpu key on initial glitch and boot. After successfully building and flashing a whole nand build from xebuild or Jrunner, it will look normal but will run unsigned code like Xexmenu
thanks for the reply!
So, after a few try, i noticed in jrunner that, its not even writing the ECC :P
Now i need to find out why i'm unable to write the ECC to the nand but am able to read it correctly.. any ideas?
..i was thinking maybe the sd adapter's lock pin, but i added a tape on it to unable the read/write..
 

brickmii82

Well-Known Member
Member
Joined
Feb 21, 2015
Messages
1,442
Trophies
1
Age
41
XP
2,930
Country
United States
Jrunner has a special 4gb nand function in case you haven’t been using it. Also, you have to manually compare the SHA hash of 2 dumps to best verify proper nand dumps. The console has to be plugged in, not on. Other than that we’d need pics and Jrunner logs
 

puss2puss

.. well ..
OP
Member
Joined
Dec 18, 2013
Messages
927
Trophies
0
Age
37
XP
835
Country
Canada
Jrunner has a special 4gb nand function in case you haven’t been using it. Also, you have to manually compare the SHA hash of 2 dumps to best verify proper nand dumps. The console has to be plugged in, not on. Other than that we’d need pics and Jrunner logs
what do you mean '4gb fonction' ? i just use it like usual: choose correct board and nand version, read nand, i make 4 backups+1 full dump,create ECC, write ECC... but here, in jrunner it doesnt show anything or do anything at this point when i click write ECC..as if the write protection lock was off on the sd adapter..

nothing shows in jrunner logs except the normal stuff and actions done, last action in log is ''create ECC'' its not even showing write ecc, its just not writing it..
..is there any particular version of jhrunner for corona v2?
 

brickmii82

Well-Known Member
Member
Joined
Feb 21, 2015
Messages
1,442
Trophies
1
Age
41
XP
2,930
Country
United States
You still use those for the Xell flash and Xebuild, but to read and write there is a tab under Advanced iirc. It lists all of your available drives also, because the 4gb system is flash storage so it changes communication protocol from what you’d use a JR Programmer, SPI or LPT, to just standard USB stuff.
 

puss2puss

.. well ..
OP
Member
Joined
Dec 18, 2013
Messages
927
Trophies
0
Age
37
XP
835
Country
Canada
You still use those for the Xell flash and Xebuild, but to read and write there is a tab under Advanced iirc. It lists all of your available drives also, because the 4gb system is flash storage so it changes communication protocol from what you’d use a JR Programmer, SPI or LPT, to just standard USB stuff.
ah i see!
well, i noticed i wasnt looking correctly and now i see the write button, i click, but get the error:
''request could not be performed because of an i/o device error''

(the console boots normally if i unsolder the crystal, and i can read the nand correctly in jrunner)
 

brickmii82

Well-Known Member
Member
Joined
Feb 21, 2015
Messages
1,442
Trophies
1
Age
41
XP
2,930
Country
United States
ah i see!
well, i noticed i wasnt looking correctly and now i see the write button, i click, but get the error:
''request could not be performed because of an i/o device error''

(the console boots normally if i unsolder the crystal, and i can read the nand correctly in jrunner)
Get it to read it first I’d say. Don’t write anything until you get the 48mb dump or whatever (don’t do a full dump)
 

puss2puss

.. well ..
OP
Member
Joined
Dec 18, 2013
Messages
927
Trophies
0
Age
37
XP
835
Country
Canada
alright so, soldered both ground and now it works! was able to write it, then launch xell and get cpu key.
Built the xebuild image and write it to nand, but when i power on the console, the chip blinks but never actually boot and after a while it stiops blinking.
..will the console still boot if i leave the sd adapter soldered in it? (with the crystal unsoldered)
..when writing the image to the nand, is it better to do it through jrunner or with a usb in xell?
 

puss2puss

.. well ..
OP
Member
Joined
Dec 18, 2013
Messages
927
Trophies
0
Age
37
XP
835
Country
Canada
Got it!
the issue, was that i used the backup with ECC writen on it to write the xebuild image.
I now created the xebuild image with my first backup and voila, glitch and boot.

Peace.
 

George_Fung

New Member
Newbie
Joined
Mar 18, 2024
Messages
1
Trophies
0
Age
42
XP
12
Country
Australia
alright so, soldered both ground and now it works! was able to write it, then launch xell and get cpu key.
Built the xebuild image and write it to nand, but when i power on the console, the chip blinks but never actually boot and after a while it stiops blinking.
..will the console still boot if i leave the sd adapter soldered in it? (with the crystal unsoldered)
..when writing the image to the nand, is it better to do it through jrunner or with a usb in xell?
Hi I have the same error and I can't write ECC successfully, could you please let me know "soldered both ground " mean? thank you very much
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • SylverReZ @ SylverReZ:
    @Bunjolio, Proxy sites, not very effective.
  • Bunjolio @ Bunjolio:
    if ur on a Chromebook and cant change jack about the laptop that's what I gotta use
  • SylverReZ @ SylverReZ:
    One of the sites that weren't blocked on the school's network was some file uploading sites. I would upload some games, write down the URL and take it to school one day.
  • Bunjolio @ Bunjolio:
    lol
  • SylverReZ @ SylverReZ:
    I did it when the teachers werent looking ofc. I even managed to take in a USB stick that wasn't allowed.
  • Bunjolio @ Bunjolio:
    my school has a chrome extension called light speed filter agent and it legit blocks YouTube pfps since the file cdn(I think aka yt3.ggpht.com) is classed as mature
  • Bunjolio @ Bunjolio:
    mhm
  • Bunjolio @ Bunjolio:
    they have other stuff like goguardian too
  • SylverReZ @ SylverReZ:
    Ours mainly relied on the router, I believe.
  • Bunjolio @ Bunjolio:
    our school network and chrome policies block stuff too
  • Bunjolio @ Bunjolio:
    alot of yt to mp3 sites are blocked by light speed for "Security"
  • SylverReZ @ SylverReZ:
    It was easy to bypass some of the restrictions, as one of the admins left a registry key in the administrative shares drive, which allowed me to get around the blocking of some sites.
  • Bunjolio @ Bunjolio:
    tf does tta mean
  • Bunjolio @ Bunjolio:
    yeah this is chrome os
  • Bunjolio @ Bunjolio:
    cant do shit
  • SylverReZ @ SylverReZ:
    @Bunjolio, Wdym 'TTA'?
  • Bunjolio @ Bunjolio:
    that* as in why yt to mp3 sites are blocked for security
  • SylverReZ @ SylverReZ:
    @Bunjolio, Remember when YouTubetoMP3 was a thing back in the 2010s?
  • SylverReZ @ SylverReZ:
    Until YT updated some stuffs and broke the website.
  • Bunjolio @ Bunjolio:
    I was 2 in 2010
  • SylverReZ @ SylverReZ:
    Oh lol
  • Bunjolio @ Bunjolio:
    lol
  • SylverReZ @ SylverReZ:
    This was in the Minecraft-era.
    Bunjolio @ Bunjolio: a