Ok. I have try to glitch this all day and it will not work. Still boots with stock nand with the CR in program mode.
I'm now questioning J-Runner. Here is the my screen of J-Runner
![IPB Image](http://www.freeimagehosting.net/t/1pspv.jpg)
Every time I read the nand, J-Runner wants to flash my CR with RGH 1, not 2.0. I know my dash is 14719, as you can see in the pic, but why is it also saying that I have 14699.
I'm sure I must use RGH 2.0 due to the dash being 14719. Do I need to use the old RGH to glitch this Zephyr console? If so, I will wire it up to use it.
Here is the log of the J-Runner pic.
CODE
===================================================
Saturday, May 05, 2012 6:39:18 PM
J-Runner v0.2 Beta (273) Started
Checking Files
Arm Version: 3
Flash Config: 0x01198010
Finished Checking Files
Zephyr
Reading Nand to D:\XBOX 360 FIXES AND MODS\RGH Tools\J-Runner v02 (271) Core Pack\output\nanddump1.bin
Reading Nand
Done!
Reading Nand to D:\XBOX 360 FIXES AND MODS\RGH Tools\J-Runner v02 (271) Core Pack\output\nanddump2.bin
Initializing Nand..
Reading Nand
Nand Initialization Finished
Done!
Comparing...
Nands are the same
Programming Coolrunner
Flashing D:\XBOX 360 FIXES AND MODS\RGH Tools\J-Runner v02 (271) Core Pack\common\xsvf\TX_RGH2_C.xsvf to CoolRunner
Input Filesize: 593E
Output Filesize: 2C7E
Done!
Exited!
* unpacking flash image, ....
ECC'ed - will unecc.
UnECC'ed
* found decrypted CD
* found XeLL binary, must be linked to 0x1c000000
* we found the following parts:
SMC: 1.10
CB_A: 4575
CB_B: 4575
CD (image): 4575
CD (decrypted): 9452
* checking required versions...
ok
* patching SMC...
Patching Zephyr version 1.10 SMC at offset 0x1257
* Replacing CD...
* XOR HACK NEEDED FOR CB 4575
* patching CB_B...
patchset for 4577 found, 4 patch(es)
* Applying XOR Hack to CB_B 4575
*** Re-encrypting CB_B with xor keystream
*** Fixing entrypoint
* Replacing CB_A 4575 with 4577
* encrypting CB...
* constructing new image...
* base size: 70000
* No separate recovery Xell available!
* Flash Layout:
0x0..0x1FF (0x200 bytes) Header
0x200..0xFFF (0xE00 bytes) Padding
0x1000..0x3FFF (0x3000 bytes) SMC
0x4000..0x7FFF (0x4000 bytes) Keyvault
0x8000..0x9ABF (0x1AC0 bytes) CB_A 4577
0x9AC0..0x11D1F (0x8260 bytes) CB_B 4577
0x11D20..0x17D1F (0x6000 bytes) CD 9452
0x17D20..0xBFFFF (0xA82E0 bytes) Padding
0xC0000..0xFFFFF (0x40000 bytes) Xell (backup)
0x100000..0x13FFFF (0x40000 bytes) Xell (main)
* Encoding ECC...
100%
------------- Written into output\image_00000000.ecc
Arm Version: 3
Flash Config: 0x01198010
Writing Nand
Done!