How to flash the TSOP of ANY version xbox using ANY LPC modchip
first thing first, make sure your xbox can boot with the modchip disabled, if you cant youll need to fix it so you can boot with it disabled (this might include checking the d0 soldering, locking the HD and making sure your MS dashbaord files are intact, but i wont get into those details as that is not the focus of this tutorial)
once you have confirmed your xbox will boot with the chip disabled you will need the following items:
Hardware:
an XBOX (duh)
an LPC modchip (double duh)
a sodlering iron (or window defogger repair kit or conductive ink pen)
Software:
MS 4920 dashboard (run a Live game to upgrade, or grab it off a SlaYers installer)
A dashboard font exploit
Evolution-X dashboard
xbeDump.exe
007savewithraincoat.zip
Raincoat .7 (get it Here)
a compatible bios (suggested: evox M7 or x2 4981)
ok, now on with the tutorial
extract the evoxdashboard and put the xbe file into the same directory as xbedump, now open the command prompt and type
QUOTE
C:\XBOX STUFF\xbedump.exe default.xbe -font
substituting the correct path to xbedump on your computer
rename out.xbe to default.xbe (or whatever your font exploit loads) and put it in a different folder, then do the same with the default.xbe out of the 007savewithraincoat.zip, putting the default.xbe (renamed from out.xbe) back into the UDATA\4541000d\000000000000\ folder
put raincoat and raincoat.conf from raincoat .7 into the Udata\4541000d\000000000000\raincoat folder
in evox.ini put this into the menu section:
QUOTE
[Menu]
Section "Root"
{
Item "Flash BIOS",ID_Flash_Bios
Item "Raincoat","E:\UDATA\4541000d\000000000000\default.xbe"
Item "Backup",ID_Backup
Item "Settings",ID_Settings
Item "Reboot",ID_Quick_Reboot
Item "Power Off",ID_Power_Off
}
now, open up your xbox,
youll have to determine whether you have a version 1.0/1.1 or 1.2+ (if you already know you can skip this part)
look for where the power supply connects to the motherboard, if it looks like this
(IMG:http://www.xbox-scene.com/imageserver2/versions/v10-11_power.jpg)
then you have a 1.0/1.1
if it looks like this
(IMG:http://www.xbox-scene.com/imageserver2/versions/v12_power.jpg)
then you have a 1.2+
for 1.0s and 1.1s you need to remove th emotherboard and solder these points on the top, just put a drop of solder between the 2 points in the circle and these on the bottom, same thing, put a drop of solder between the 2 points
(IMG:http://img3.photobucket.com/albums/v32/davicoro/TSOP/1_0_MOBO_POINTS.jpg)
Note: if you have a 1.1 with a sharp TSOP you need some extra steps
Tutorial Here
if you have a 1.2+ you dont need to remove the motherboard, and just solder these 2 sets on top
(IMG:http://img3.photobucket.com/albums/v32/davicoro/TSOP/1_2_TOP.jpg)
inside the circles
now boot your xbox with the chip enabled to load evox (or any dashboard that allows FTP access) backup C:\Fonts to your PC and FTP the eploit .xtf files to that folder, overwriting the existing files
FTP the evox default.xbe and evox.ini to wherever your exploit loads it from (usually C:\default.xbe or C:\Fonts\default.xbe)
FTP the Udata folder from the 007save to E:\ confirm any overwrites
FTP whatever bios you want to use to C:\Bios (or C:\Fonts\Bios)
WITHOUT UNPLUGGING THE XBOX OR REMOVING THE MODCHIP reboot the xbox with the chip disabled, it should load into evox, select Flash Bios and select the bios you FTP'd to C:\Bios it will bring up another screen, if it says Manf 0x09 Dev 0x00 you need to check your soldering, anything else hit Y to flash
it will flash, then shut down, and your all done
if it hangs on Erasing youll need to FTP the bios to E:\Udata\4541000d\000000000000\raincoat\ and select raincoat from the evox menu
now you can either connect with Telnet, or if you have a USB keybaord you can use with your xbox that will work as well
for Telnet make sure your PC is ont eh 192.168.0.* IP range and type Telnet 192.168.0.64 at the Run command, it will connect to the xbox
Login: root
Password: xbox
for keyboard simply plug it in and hit any key to bring up the Linux command prompt
now type cd ../../media/E/UDATA/4541000d/000000000000/raincoat
and then ./raincoat -p <<bios name>>.bin (where <<bios name>> is the name of the bios you FTP'd)
and now your done
Special Thanks: sharpie00, Exobex, A@ron, Team Xecuter, Team Evox, Xbox-Linux, all the other exploit teams/groups and all the scene members who pics i jacked
To all: feel free to post any comments and suggestions here, if anything isn't clear I'll try my best to expand on that area of the tutorial
*EDIT by StrictPuppet* updated some bad image links
This post has been edited by StrictPuppet: Dec 3 2007, 12:36 AM
| QUOTE (FlashKick @ Mar 24 2004, 11:32 AM) |
| can you do this with a xecuter 2.3b lite plus? or is this not a real lpc modchiP? |
yes, all xecuters are "real" LPC modchips, lol, so the 2.3b Lite+ will work
FlashKick.. i use "bigfonts25" and that workes perfect for me.. but i think u can use any font exploit apart from "Bert_is_Cheating_on_Ernie".
A little tip for u... allways use raincot when u flash your tsop... and use a 256Kb bios... if u do that u will never get any problems with wrong sized bios for the wrong tsop... raincot will allways fix the size for u... just a tip =)
peace out
/corn3y
why use raincoat.07 and waste more time/effort by telneting to your pc when you can just use the eurasia flash 'disc' instead? you don't have to use it as a disc but since there's no download link for the actual files instead of the iso you're going to have to rip it someway and transfer the files to your computer(unless someone put the actaul files to this online somewhere).
after that, just sign the xbe of the ripped eurasia disc with the font exploit setting with xbedump and use this instead of raincoat 07.
only downside is it's based on raincoat 05 so i'm guessing you're going to have to make sure your bios sizes are correct, but that's no problem since that's how it is with evox anyway and still less of a hassle than hooking up your xbox to your machine to flash.
lordvader, which font exploit do you recommend, im looking in *the usual places' ftp* (heh) and theres several. im curious as to which i should pick and which you used.
i used bigfont25 or something and it works good all the time
k thnx
Quote:
"now boot your xbox with the chip enabled to load evox (or any dashboard that allows FTP access) backup C:\Fonts to your PC and FTP the eploit .xtf files to that folder, overwriting the existing files:
Ok, I back up the Fonts folder to my PC, then I copy my fonts over to the Fonts foolder on the XBOX, but what do I name the fonts, and what font package should I use on a 1.5 XBOX?
"FTP the evox default.xbe and evox.ini to wherever your exploit loads it from (usually C:\default.xbe or C:\Fonts\default.xbe)"
How do I know where my Font exploit wants the file default.xbe file?
that tutorial has already been written, mine is for epopel who cant find a working copy of any exploitable games in their area
@Tadango
hotswapping wont work (i assume you mean boot with modchip then remove it or disable it) because once the xbox boots the LPC it will always look to teh LPC for the bios, so youll only be able to flash your modchip, not the TSOP, if you have one of those shitty kernels youll need to use a gamesave exploit (or a 29-wire modchip)
I did not understand your tutorial in the least bit. No offence.
It did not tell me what FONT pack to use, because I read a lot of stuff in the forums about certain FONT packs not working with certain model XBOX's, also in your tutorial you stated that I would need to back up my fonts directory on the PC, then copy my hacked ones over and let them overwrite the old ones?
Well I downloaded all the Font packs I could find off XBINS and none of them shared a commen name with the fonts already in the directory.
Also if you are not using a copy of 007, then what is the point of having the 007 game save in place at all? Or are you just suggesting that so that the person has easy acess to the Raincoat Default.xbe?
Finanally, I don't understand how you could possibly boot into Evox after merely copying those files over unless that hacked Font trick is supposed to do it for you. I dunno, I'm not familiar at all with the Font exploit.
Perhaps if you could elaberate a bit more on the subject I may have a means to correct my apparently corrupted TSOP on my 3rd XBOX.
Just wanted to say that I flashed my first tsop with this tutorial today. I've done dozens of modchip installs, and had a spare xbox lying around. Thought i'd give it a go.
I used the bert and ernie reloaded and evox 3921. So anyone who said that these items were the cause of their problems would appear to have other issues.
Thanks again to everyone involved in getting this tutorial sorted.
A few things you might need to do (I have just follwed this exact method, works a treat)
REname the evoxdash to default.xbe in youre C:\ directory. from what I understand the exploits load default.xbe in you're C:\ root dir.
I used bigfonts25, put bert and ernie in C:\fonts, then renamed the original font files to .xft (left them in C:\fonts) I didn't bother backing up etc, but I have enough box's and chip's lying around to sort myself out (And I had already unlocked and relocked the HD with config magic so I new if worst came to worse I could figure something out).
From what I could tell it doesn't matter where you put raincoat , I tried it in a few diff places, so Long as you can get to it from evox (put the right path in the ini) From what I gather it needed to be in the udata/xxx/0000/xx whatever directory so it could be accessed by a memory card or some such thing, but since this method doesnt necessarily use the memcard technique at all then it;s ok.
From youre description it sounds like the hack is loading (almost loading msdahboard) , but then service warning , I'm fairly sure it's because of the evoxdash.xbe not being called default.xbe , but I could be mistaken - Make a copy of it and rename the copy default.xbe, won't hurt to have a signed evoxdash.xbe as well I guess)
*** THIS IS MY OPINION ONLY, IT MIGHT PAY TO WAIT FOR OTHERS TO COMMENT BEFORE YOU DAMAGE YOU'RE XBOX FURTHER *** If anyone sees flaw in what I've said please feel free to comment.
Ok Faramisimo.....just flashed 2 ..a hynix with 1mb and a winbond with 256
USED BERT AND ERNIE RELOADED
You place the bios.bin in the raincoat folder
i also put an evox.ini and evoxdash.xbe in the font folder for good measure
on the winbond fitted xbox i got an error 21 on reeboot with the chip disabled
so what i did was replace the 2 folders for xbox live with slayers from his disc
cant remember what folder they r located but if u browse the disc you will find them
after doing this i rebooted with the chip turned off and it went to the raicoat option
..did the rest of the tut and it worked
Folders that need replaced to fix error 21 are xodash and xboxdashdata
a tip when using telnet "make sure u type it exactly as seen"
i didnt leave a space between cd and the ../
started to panic lol
bumpity du da
| QUOTE (blindguyinanorgy @ Jul 23 2004, 08:52 PM) |
| at any point do you remove the connection of those 2 jumper points |
only if your worried about someone reflashing your bios and messing something up, otherwise just leave then bridged so you can update your bios easily
| QUOTE (raydenz @ Aug 5 2004, 08:25 PM) |
| Has anyone figured out a soldier point scheme for the v1.6 yet?? |
the 1.6 has no TSOP, and the bios chip it does have appears to be a write-once
so if you want to mod a 1.6 your going to need a chip, and it will most liekly always be that way
i have the same problem on a 1.2, did everything, even tried replacing the two folders that catt said to, do i need to do anything special with the files in c: otherwise? i am going to start from scratch again, but i dont know why this isn't working, also i renamed bert xbox and ernie xbox data dunno if that was the right way but is seems noone will say, please reply, thanks!
-parker
| QUOTE (parkerbender @ Oct 7 2004, 09:49 PM) |
i have the same problem on a 1.2, did everything, even tried replacing the two folders that catt said to, do i need to do anything special with the files in c: otherwise? i am going to start from scratch again, but i dont know why this isn't working, also i renamed bert xbox and ernie xbox data dunno if that was the right way but is seems noone will say, please reply, thanks! -parker |
My problem was that I had the wrong dash I grabbed it off slayers 2.6 if you use slayers 2.5 use restore retail dash 4920.
Also rename bert to Xbox Book.xtf rename ernie to Xbox.xtf place in font folder
Use ernie_and_bert_reloaded it's what worked for me
I tried everything ..and double checked everything but still dont know whats up. Using a xenium..did all the xbedump stuff...ftp's everything that needed to be(fonts and stuff)..got 4920 dashboard from slayers
... but i get an error code 13...i read this has something to do with the dashboard...can someone point me in the right direction at least...does this have to do with MS dashboard or evox dash that the font is supposed to load. should i recheck my soldering? i'm lost and have been at this for DAYS!!! any help would be greatly appreciated
whats your kernel version? likely its 5713, which will not load 4920 dashbaord, you need to get a newer dashbaord and try UDE
can i still use this tut if my Tsop has a bad flash?
QUOTE(lordvader129 @ Apr 21 2004, 04:10 AM)
(i assume you mean boot with modchip then remove it or disable it) because once the xbox boots the LPC it will always look to teh LPC for the bios, so youll only be able to flash your modchip, not the TSOP, if you have one of those shitty kernels youll need to use a gamesave exploit (or a 29-wire modchip)
QUOTE
Why is it that when you disable an lpc modchip the xbox still boots to evox? I always thought that it would simply disregard the modchp and boot from the normal xbox bios. This means that it would load the normal xbox dashboard. Why is this not the case?
Are you saying that after you disable the modchip, then turn off the xbox and reboot, it still loads EvolutionX?
-OR-
Do you disable the modchip (while xbox is still on), then do a restart from the EvoxlutionX menu?
Please clarify what steps you take?
does it make a difference, i think both ways boot to evox though
QUOTE(A5thZeke @ Jan 4 2005, 11:53 AM)
does it make a difference, i think both ways boot to evox though
ok, ill try that, thanks
"WITHOUT UNPLUGGING THE XBOX OR REMOVING THE MODCHIP reboot the xbox with the chip disabled, it should load into evox"
How does that way work? Im guessing thats the b01 said with disabling modchip while xbox is one, then rebooting through evox
for 0x09 double/triple/quadruple check your solder points (clean them off completely and solder again) also make sure you are using raincoat .7
for 0xFF make sure you are booting with the modchip removed/disabled and not removing it after booting
umm, i have a nonworking board. but when i put a chip in it it will work with the mod functional, but switch the mod off and it shows no screen. so basically it works with the x2 bios when its on.
QUOTE(eXo @ Feb 8 2005, 09:32 PM)
sig hail lord vader, I have teh following question:
QUOTE(eXo @ Feb 8 2005, 05:16 PM)
correction, I have a Xecuter2 pogo chip. Just wonder how do you get it to work like that ?
im about to get cracking on this but the first image isnt popping up with the 2 spots on the topside. any chance of reupping that?
well i joined only the bottom spots seeing as how there the only ones that are showing, but when i load raincoat i get a bunch of errors at the top screen. the box im doing has a shot ethernet port, could that have something to do with it. i cant try flashing from evox because no bios i put in the bios folder shows up. im burning slayers now and seeing if that does the trick.
I was able to flash the TSOP on one xbox successfully. Is it possible to use the same HD to flash another xbox. if so how. Help please
QUOTE
if it says Manf 0x09 Dev 0x00 you need to check your soldering
Mine said this, but my soldering was perfect. I was forced to use raincoat to flash.
Thanks again,
Alex
QUOTE(quickline @ May 29 2005, 01:55 AM)
I'd like to thank everyone who contributed to this thread. Thanks to you, I was able to flash my first TSOP.
QUOTE(Great2bfree @ Jun 17 2005, 01:51 PM)
It is apparent that this won't work with out MS Dashboard 4920. I'm unable to obtain Slayer 2.5 . Would anyone be so kind and share the thing on bitorrent. Or even better, send it?
QUOTE(lordvader129 @ Aug 4 2004, 01:25 AM)
only if your worried about someone reflashing your bios and messing something up, otherwise just leave then bridged so you can update your bios easily
QUOTE(Zanzang @ Aug 20 2005, 11:03 PM)
So, if I just boot, disable the chip, then reboot, then I could go into linux and telnet in and flash it.
Sorry for the noobness - i thought a modchip gave you free access to the xbox? Surely you can just boot a modded xbox into slayers (or similar) and just run raincoat (or similar) to flash the tsop. Then remove the modchip.
Are the soldering changes essential for a tsop mod to work?
QUOTE(D3xx @ Jul 29 2007, 07:31 PM)

Sorry for the noobness - i thought a modchip gave you free access to the xbox? Surely you can just boot a modded xbox into slayers (or similar) and just run raincoat (or similar) to flash the tsop. Then remove the modchip.
Are the soldering changes essential for a tsop mod to work?
This was already answered in your other thread.