Topic: [tutorial]how To Dump The 1bl.bin, Fuses.bin And The Nand With Gentoo (Read 411 times)

zouzzz · « **on:** September 10, 2007, 06:26:00 AM »

How to dump the 1BL.bin, FUSES.bin and the nand

The original tutorial : http://gueux-forum.net/index.php?showtopic=166901
Sorry for english.

You need :
- xbox360 4532 or 4548
- USB keyboard and USB mouse
- PC with windows
- this files dumps with winscp403.exe, the dump32 et dump32.c files and the tmbincdump pack with : tmbincdump-read2, tmbincdump-read3, tmbincdump-read2.c and tmbincdump-read3.c files.

1 /Connect your xbox360 with the ethernet connection.

2/ Launch Cd live de Gentoo Beta 2 (don't work with the Beta 1)

3/ In Gentoo go to Applications->Accessories->Terminal and write :

QUOTE

gentoo@livecd ~ $ sudo passwd
New UNIX password : mylongpwd
Retype new UNIX password : mylongpwd
passwd: password updated successfully
gentoo@livecd ~ $ sudo /usr/sbin/sshd
gentoo@livecd ~ $

(IMG:http://img338.imageshack.us/img338/982/imgp2617hk3.jpg)

4/ In your PC, launch WinSCP and write the boxes like below. Write mylongpwd in Password and press Login :

(IMG:http://img261.imageshack.us/img261/3343/11ti7.jpg)

The WinSCP ask you the password, enter 2 times : mylongpwd and 2 times: mysecondpwd.
Now the xbox360 and the PC are connected.
At right -> the xbox360
At left -> the computer

(IMG:http://img77.imageshack.us/img77/6391/1aaj2.jpg)

5/ Copy/Paste the files : dump32 , dump32.c, tmbincdump-read2, tmbincdump-read3, tmbincdump-read2.c et tmbincdump-read3.c in /var/tmp :

(IMG:http://img48.imageshack.us/img48/6758/40uh9.jpg)

6/ In WinSCP, press ctrl+T.

(IMG:http://img187.imageshack.us/img187/911/29863706uj6.jpg)

In Enter command write chmod u+x ./dump32 and Execute, now write sudo ./dump32 and Execute. The dump of Fuses (with the CPUkey) and the 1BL.bin (with the 1BLkey) are copy in /var/tmp :

(IMG:http://img212.imageshack.us/img212/1415/96983126bl4.jpg)

Delete the nand.bin, it's corrupt.

7/ In WinSCP again, press ctrl+T.

(IMG:http://img187.imageshack.us/img187/911/29863706uj6.jpg)

In Enter command write chmod u+x ./tmbincdump-read2 and Execute, now write sudo ./tmbincdump-read2 and Execute.

In Enter command tapez chmod u+x ./tmbincdump-read3 and Execute, now write sudo ./tmbincdump-read3 and Execute.

The xbox360 nand is in tmbincdump.bin in /var/tmp.

8/ Copy/Paste all the dump files on your PC.
Here what should have to you on your PC :

(IMG:http://img301.imageshack.us/img301/8774/41kr6.jpg)

The description :
- The cpukey : the CPUkey is in FUSES.TXT file. Open the file with Blocnote, the key is in the lignes 3 and 6:

- The tmbincdump.bin file is the nand (17 301 504 octets), if the file is open with the Hexadecimal Editor, you se that :

(IMG:http://img260.imageshack.us/img260/6201/86220983zf3.jpg)

- The 1BL.bin file : if the file is open with the Hexadecimal Editor, you se that :

(IMG:http://img408.imageshack.us/img408/3443/12at4.jpg)

Thanks to :
openxdkman for his guide, cpasjuste, the xboxhackers BBS (TS, tmbinc and...) and the gx-mod forum.

This post has been edited by zouzzz: Sep 10 2007, 01:27 PM

Hodgey · « **Reply #1 on:** September 10, 2007, 08:38:00 AM »

Sweet tutorial! Quick question.Ive got a 360 TS dvd drive where the dvdkey was overwritten. Would it possible yto use this method to get the dvdkey and reflash the drive using the key extracted? Thanks for the help and the tutorial!

zouzzz · « **Reply #2 on:** September 10, 2007, 09:51:00 AM »

QUOTE(Hodgey @ Sep 10 2007, 05:14 PM)

Sweet tutorial! Quick question.Ive got a 360 TS dvd drive where the dvdkey was overwritten. Would it possible yto use this method to get the dvdkey and reflash the drive using the key extracted? Thanks for the help and the tutorial!

Your xbox360 is a 4532 or 4548?
If the dvddrive isn't reconize by the xbox360 you can't use this methode because you can't launch Gentoo.

openxdkman · « **Reply #3 on:** September 11, 2007, 04:42:00 AM »

Thanks for the snapshots.
Btw... the efuses snapshot is misplaced.

zouzzz · « **Reply #4 on:** September 11, 2007, 05:27:00 AM »

QUOTE(openxdkman @ Sep 11 2007, 01:18 PM)

Thanks for the snapshots.
Btw... the efuses snapshot is misplaced.

Yes, i'm sorry but i can't edit my tutorial.....

tsnake11 · « **Reply #5 on:** September 18, 2007, 10:51:00 AM »

Hi, why you say the first dump is corrupted? The .c files are not necessary unless you want compile the dump program, but it's not necessary because you already have the binary executable files.

Also the read2 command I think is not necessary, because you'll get the "fat" dump with the read3 command.

If you don't want to set up network stuff and so on you can also mount a usbdrive on the 360 and store all the files there, without ssh and without connecting the 360 to a pc. I made it this way

zouzzz · « **Reply #6 on:** September 18, 2007, 10:56:00 AM »

Hello,
thank you for your precise details.

4NIC8TOR · « **Reply #7 on:** October 03, 2007, 11:01:00 AM »

I should also be able to do this with FlashFXP, correct? I don't have to use WinSCP do I? Could I use the raw command feature in FlashFXP? I mean it's just an ftp client, right?

4NIC8TOR · « **Reply #8 on:** October 05, 2007, 03:46:00 PM »

Ok, I downloaded WinSCP but I am having troubles with this tutorial. When I ctrl+T to open the Console in WinSCP it takes me through the whole change your password thing again. Then after that it lets me in but when I run sudo ./dump32 it just dies. Any ideas? Anyone want to share with us how to dump it to a usb drive?
TIA

openxdkman · « **Reply #9 on:** October 06, 2007, 12:22:00 AM »

A few people reported dump32 crashed.
In your case, you should use tmbinc's software fw dumper with command 3, and only that.

This post has been edited by openxdkman: Oct 6 2007, 07:24 AM

brunnolouzada · « **Reply #10 on:** December 06, 2007, 01:38:00 PM »

Hello,

I am new here in the forum. I need backup of kernel 4532 of xbox360 please. It would be possible to order for my email [email protected]

Tanks.

Sonic-NKT · « **Reply #11 on:** December 14, 2007, 05:43:00 AM »

Hi,
i wanted to backup my 4532 nand for future downgrade but i have some problems...
when i wanted to start the sshd server it gives me a error that it couldnt load host keys and it wont start.
why is this happening? maybe a wrong version of the live cd? (i got i from someone)

Sonic-NKT · « **Reply #12 on:** December 14, 2007, 11:34:00 AM »

ok downloaded another live-cd and now it works... but the 360 crashes when i launch dump32 (ok fuses and 1bl work but when it starts nand everythign freezes)
can someone help me? i dont know what i can do else.
i cant even backup the fuses and 1bl cause the 360 crashes and i cant copy them (tried ssh and usb)

This post has been edited by Sonic-NKT: Dec 14 2007, 07:35 PM

Sonic-NKT · « **Reply #13 on:** December 15, 2007, 07:43:00 AM »

cant someone help me here?
tmbincdump-read2 and 3 are kind of working, both give many errors but it creats the tmbincdump.bin in the end.
what do i really need to downgrad in the future?
i can see the fuses (when ich launch the dump32 tool on the 360)

PhreeZ · « **Reply #14 on:** December 15, 2007, 12:51:00 PM »

as long as you have your fuses/CPU key, you shouldn't have a problem downgrading in the future. you don't really need your current NAND image, because you could just rebuild it.

sorry that i can't help you with your tmbincdump problems. i've always just used Infectus to get a dump. at some point you are going to want to write back a NAND image, so perhaps it's worth it for you to obtain one.

Author Topic: [tutorial]how To Dump The 1bl.bin, Fuses.bin And The Nand With Gentoo (Read 411 times)