A9VG电玩部落论坛

 找回密码
 注册
搜索
查看: 2640|回复: 8

10分钟通过linux备份512M NAND方法(英文转载)

[复制链接]

精华
0
帖子
1055
威望
0 点
积分
1081 点
种子
1 点
注册时间
2009-4-18
最后登录
2023-2-20
 楼主| 发表于 2010-1-18 21:53  ·  黑龙江 | 显示全部楼层 |阅读模式
check your dash version to make sure you dont have the 1bl update (disables the smc hack which allows xbr to run).

turn on your console, go to system settings > console settings > system info.
2.0.XXXX.0

XXXX = your dash version.

if its 7371 or lower your good to continue, if its 8xxx then you have updated and there currently is no way to run xbr/freeboot/xell.

Note: if your console is new (you bought it 09 or later) then even if you have Dash version 7363 you could still have the 1bl update, so far the ones confirmed with the 1bl update are mfg date 6-23-09 and the ones confirmed w/o 1bl update (and exploitable) are 6-18-09.

If you have updated or bought a console with the 1bl update then there is no way to downgrade and you wont be able to run homebrew on your console for a long time if ever so Please Dont Ask/Talk About Downgrading Here.







1、Building a LPT Cable


An LPT Cable is Needed to read/write the nand (which has the stock dash on it and will have xbr (hacked dash) when your done).

Things you will need:
a pc with a lpt port
DB25 Header
5 x 100ohm Resistors (watt's dont matter; i use 1/8th)
3 x 1n4148 Diode
LPT Cable (DB25 male > female)
soldering iron
solder
rosin flux
some wire (30-24awg, the smaller the better)
your 360 apart


Credit for the Image Go's to sandungas.

Note: dont solder the Diode to db1f1, solder it to j2d2 like this.

Note2: The diodes/wires are for xbr/freeboot/xell, if they are connected and you boot your stock nand you will get 3 red lights error code 0020.







2、Checking to Make Sure You have a Exploitable Box


Software you will need:
Dos (comes with windows)
Nandpro2.0b

unpack nandpro to c:\nandpro\
install port95nt.exe
press windows key + r or click start > run
type cmd and click ok or press enter.
a command prompt will display, in it type

CODE
cd "c:\nandpro"

and hit enter.

type

CODE
nandpro lpt: -r3 c1.bin

hit enter

type

CODE
nandpro lpt: -r3 c2.bin

hit enter

type

CODE
fc c1.bin c2.bin /b

hit enter

if differances where found type

CODE
nandpro lpt: -r3 c3.bin

hit enter

type

CODE
fc c1.bin c3.bin /b

hit enter then type

CODE
fc c2.bin c3.bin

hit enter

use the 2 that match, if c2 and c3 match rename c3.bin to c1.bin

CODE
rename c3.bin c1.bin



open up c1.bin in a hex editor (free hex editor) and you should see


QUOTE
?2004-200X Microsoft Corporation. All rights reserved.

X = 5, 6, 7, 8 or 9 (depending on what dash you have/when your console was made).

now search in hex for "CB" (without quotes) your looking for the one at or around 8400 in hex (it has to be in caps).
copy the 4 hex digits after it and convert it from hex to dec with this Conveter
Like This

Xenon: 1921 or lower is Exploitable (exception: 8192 IS EXPLOITABLE)
Zephyr: 4558 or lower is Exploitable (exception: 4580 IS EXPLOITABLE)
Falcon: 5770 or lower is Exploitable
Jasper 16mb: 6712 or lower is Exploitable
Jasper Arcade (256/512): 6723 or lower is Exploitable

Board Version Detection

If you have confirmed your consoles version and have a higher version CB then listed above you cannot do homebrew,
there is no way to downgrade and you wont be able to run homebrew on your console for a long time if ever so Please Dont Ask/Talk About Downgrading Here.







3、Backing Up Your Original Nand


Things you will need:
Gentoo Beta 2
lflash for 16mb nand or lflash for 256/512mb nand
nandpro 2.0b
usb storage device
xell for your version of motherboard (get it from the usual places)

format your usb drive as fat32 (windows will do this; right click on it and click format)

put lflash.c on the thumb drive

burn gentoo beta 2 iso to cd.

rename the xell bin for your version of motherboard to xell.bin and put it in c:\nandpro\

unpack nandpro to c:\nandpro\
install port95nt.exe
press windows key + r or click start > run
type cmd and click ok or press enter.
a command prompt will display, in it type

CODE
cd "c:\nandpro"

and hit enter.

if you dident check to make sure you have a exploitable box then backup the first 2mb before flashing xell.

type

CODE
nandpro lpt: -r2 c1.bin

hit enter then type

CODE
nandpro lpt: -r2 c2.bin

hit enter then type

CODE
fc c1.bin c2.bin /b

hit enter, if there are differences then delete both files and start again.

type

CODE
nandpro lpt: -w2 xell.bin

and hit enter.

when thats done writing turn the console on, you should see a blue screen with lots of text, this means the first step is done, you might want to take a picture of fuses; combine lines 5 and 6 to get your cpu key (keep it safe; its needed for decrypting the key vault).

put the gentoo beta 2 disk in the console and reboot it; gentoo will automaticly load, once it has plug in a usb keyboard and mouse (if you have problems with dectection plug it in when you boot the console but make sure not to press anything while its booting)

note: user gentoo will automatically login after 10sec at the login screen; just let it.

once you get to the desktop click applications > accessories > terminal
and type the fallowing commands


CODE
sudo passwd

use a simple password; you wont need it agian

CODE
sudo -s


CODE
cd Desktop


CODE
mkdir flash


CODE
dmesg | grep -i "SCSI device"


CODE
mount -t vfat -o uid=gentoo,gid=users /dev/sdb1 /home/gentoo/Desktop/flash

"/dev/sdb1" refers to the usb drive; if you have a hdd plugged in it will be sdb, if you just have the usb storage device plugged in it will be sda.

CODE
cd /home/gentoo/Desktop/flash


CODE
gcc lflash.c -o lflash


CODE
./lflash 1.bin




assuming the dump and verify whent well
unplug the usb drive from the 360 and plug it in to your computer, take put 1.bin in c:\nandpro\

if it dident do another dump

CODE
./lflash 11.bin








4、Flashing XBRebooter


Things you will need:
Gentoo Beta 2
lflash for 16mb nand or lflash for 256/512mb nand
nandpro 2.0b
usb storage device
XBRebooter for your version of motherboard (get it from the usual places)
Xell flashed to your 360 (all xbr revs have xell embedded)

unpack nandpro to c:\nandpro\
install port95nt.exe
press windows key + r or click start > run
type cmd and click ok or press enter.
a command prompt will display, in it type

CODE
cd "c:\nandpro"

and hit enter.

rename xbr bin for your motherboard version to xbr.bin and put it in c:\nandpro\
rename your original nand to 1.bin and put it in c:\nandpro\

in the cmd window type

CODE
nandpro 1.bin: -w3 c1.bin

hit enter then type

CODE
nandpro 1.bin: -r16 kv.bin 1 1

hit enter then type

CODE
nandpro 1.bin: -r16 config.bin 3de 2

hit enter then type

CODE
nandpro xbr.bin: -w16 kv.bin 1 1

hit enter then type

CODE
nandpro xbr.bin: -w16 config.bin 3de 2

hit enter then type

CODE
rename 1.bin backupnand.bin

and hit enter

copy xbr.bin to your usb storage device.


if you still have gentoo running from above


plug the usb drive back in to the 360 and in terminal type

CODE
dmesg | grep -i "SCSI device"

if you have a hdd pluged in (like i did in the example above) the usb drive should now be sdc (if you dont it should be sdb)

type

CODE
mount -t vfat -o uid=gentoo,gid=users /dev/sdc1 /home/gentoo/Desktop/flash

and hit enter; the usb drive will be mounted in flash on the desktop agian.


CODE
./lflash 2.bin xbr.bin

will dump agian and flash xbr.bin

note: ignore "illegal logical block" error





if your updating xbr


format your usb drive as fat32 (windows will do this; right click on it and click format)

put lflash.c on the usb storage device.

burn gentoo beta 2 iso to cd.

put the gentoo beta 2 disk in the console, turn the console off
if you have xbr_1 or previous turn the console on via guide button of a wired controller pluged in to the back port or media center button on a 360 remote control.

gentoo will automaticly load, once it has plug in a usb keyboard and mouse (if you have problems with dectection plug it in when you boot the console but make sure not to press anything while its booting)

note: user gentoo will automatically login after 10sec at the login screen; just let it.

once you get to the desktop click applications > accessories > terminal
and type the fallowing commands


CODE
sudo passwd

use a simple password; you wont need it agian.

CODE
sudo -s


CODE
cd Desktop


CODE
mkdir flash


CODE
dmesg | grep -i "SCSI device"


CODE
mount -t vfat -o uid=gentoo,gid=users /dev/sdb1 /home/gentoo/Desktop/flash

"/dev/sdb1" refers to the usb drive; if you have a hdd plugged in it will be sdb, if you just have the usb storage device plugged in it will be sda.

CODE
cd /home/gentoo/Desktop/flash


CODE
gcc lflash.c -o lflash


CODE
./lflash 1.bin xbr.bin


note: ignore "illegal logical block" error


restart the console and your done, enjoy homebrew.


英文原址.

精华
0
帖子
1055
威望
0 点
积分
1081 点
种子
1 点
注册时间
2009-4-18
最后登录
2023-2-20
 楼主| 发表于 2010-1-18 21:53  ·  黑龙江 | 显示全部楼层
建议淘宝卖家,方便广大玩家搞些套装,强烈建议各省玩家通过qq群,互助刷机,共同提高并且节省成本,有想法的可以跟帖哦。

==============================
16M NAND套装:

并口打印插头
10个1/4瓦100欧电阻(实际用2个,其他备份)
10个1N4148二极管(实际用2个,其他备份)
两个10K的R6T3电阻
杜邦线10根
T10、T8和T6螺丝刀
恒温烙铁15W的,锡丝要0.8MM的
镊子
热缩管

初步合计50元左右,烙铁最贵,其他均为几元钱。

===============================
256、512M NAND套装:

LPC2148,USB口读取NAND的模块,价格80-135之间。
10个1N4148二极管(实际用2个,其他备份)
两个10K的R6T3电阻
杜邦线10根
T10、T8和T6螺丝刀
恒温烙铁15W的,锡丝要0.8MM的
镊子
热缩管

初步合计150元左右,LPC2148最贵,烙铁次之,其他均为几元钱。

精华
0
帖子
1055
威望
0 点
积分
1081 点
种子
1 点
注册时间
2009-4-18
最后登录
2023-2-20
 楼主| 发表于 2010-1-18 21:53  ·  黑龙江 | 显示全部楼层
16M刷自制系统的参数
nandpro orig.bin: -r16 rawkv.bin 1 1
nandpro orig.bin: -r16 rawconfig.bin 3de 2

nandpro XBR.bin: -w16 rawkv.bin 1 1
nandpro XBR.bin: -w16 rawconfig.bin 3de 2

nandpro lpt: -w16 XBR.bin

============
256M刷自制系统的参数

rename XBR_JasperBB_8955_3.bin to xbr.bin

For 256 meg nand: (256nand.bin is your nand that has already been extracted)

nandpro 256nand.bin: -r256 rawkv.bin 1 1
nandpro 256nand.bin: -r256 rawconfig.bin EF7 2

#INSERT INTO XBR
nandpro xbr.bin: -w256 rawkv.bin 1 1
nandpro xbr.bin: -w256 rawconfig.bin EF7 2

#WRITE TO NAND ON 360
nandpro lpt: -w256 xbr.bin

replace 256 with 512 for 512 meg nands

========
256、512刷自制系统的参数
almost, config address changes for the 256/512 Nands the commands are following

Corrected

* How To:

1) Extract KV and Config blocks from orig.bin
nandpro orig.bin: -r256/512 rawkv.bin 1 1
nandpro orig.bin: -r256/512 rawconfig.bin EF7 2

2) Inject those blocks into XBR.bin
nandpro XBR.bin: -w256/512 rawkv.bin 1 1
nandpro XBR.bin: -w256/512 rawconfig.bin EF7 2

3) Flash result
nandpro lpt/usb: -w256/512 XBR.bin

精华
0
帖子
505
威望
0 点
积分
506 点
种子
0 点
注册时间
2009-11-22
最后登录
2022-6-4
发表于 2010-1-18 21:58  ·  上海 | 显示全部楼层
小白问下备份了有啥用?~

精华
0
帖子
948
威望
0 点
积分
956 点
种子
0 点
注册时间
2006-10-6
最后登录
2019-8-12
发表于 2010-1-18 22:02  ·  上海 | 显示全部楼层
老子  6/25的  7371 还有机会么

精华
0
帖子
1055
威望
0 点
积分
1081 点
种子
1 点
注册时间
2009-4-18
最后登录
2023-2-20
 楼主| 发表于 2010-1-18 22:04  ·  黑龙江 | 显示全部楼层
下面是引用£阿仙奴£于2010-01-18 21:58发表的:
小白问下备份了有啥用?~

备份后,提取kv和config,

然后写入XBR

最后,刷回360

精华
0
帖子
505
威望
0 点
积分
506 点
种子
0 点
注册时间
2009-11-22
最后登录
2022-6-4
发表于 2010-1-18 22:04  ·  上海 | 显示全部楼层
6/18后的就没机会了!~
该用户已被禁言

精华
0
帖子
46
威望
0 点
积分
47 点
种子
0 点
注册时间
2008-11-14
最后登录
2023-9-18
发表于 2010-2-10 10:38  ·  江苏 | 显示全部楼层
太阳,俺的正好是6/18的。。。

精华
0
帖子
3
威望
0 点
积分
3 点
种子
0 点
注册时间
2009-11-7
最后登录
2013-4-24
发表于 2010-2-10 11:17  ·  广东 | 显示全部楼层
我要那个256/512套装,解ban用
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|手机版|A9VG电玩部落 川公网安备 51019002005286号

GMT+8, 2025-10-7 11:09 , Processed in 0.578939 second(s), 22 queries , Redis On.

Powered by Discuz! X3.4

Copyright © 2001-2020, Tencent Cloud.

返回顶部