| QUOTE (kornkob69 @ Jul 18 2003, 06:14 PM) |
| anoyne get a hold of this and try it out yet? kinda wondering where to get it myself... hmm |
| QUOTE (harlekin @ Jul 18 2003, 06:52 PM) |
| ? what the? loading the a ms bios, to manipulate it? what about loading the x2 4977 bios, (this phoenix loader supports this allready)? this bios is a well known modchip bios, which enables you to load unsigned code, and evox, without even using a loader application. |
| QUOTE (Wooger @ Jul 18 2003, 06:43 PM) |
| If im reading this right ... this would be shweet... Boot the 4034.bin bios and use the complex 1.1 dash on any xbox ?? Able to read xbox games here i come! Although now I need to find out what the hash is for the 4034 kernel Wooger |
| QUOTE |
You will need to provide your own bios and RC4 key as those are illegal to distribute without permission from MS. Currently working bioses: X2 4977 Boot From Media version (uses Debug RC4 key) Step 1 - Install files Install the included default.xbe, phoenix.raw, and boot.cfg file into the directory of your choice on your xbox, using any method you prefer (007 hack, dash hack, evox). Also install the bios you wish to load (only 1 works for now) into the same directory, and name it xboxrom.bin. Don't forget to sign the default.xbe for the boot method you are using. Step 2 - Edit boot.cfg Edit the RC4Key entry to be the appropriate RC4 key for the bios you are loading. If you specify the key to be all 0x00's, it will assume the 2BL is decrypted already in the rom you are providing. Also note that if you really want to rename your bios file, you can provide the name here with the Romfile parameter. Step 3 - Launch the application. Depending on your preference you may be launching the application via the dash hack, or the 007 hack, or the audio hack, or from any 3rd party dashboard. Just go ahead and launch our app! You will see our intro being rendered (don't worry, it will only display the full intro the first time you run it), and then you will find yourself in whatever dash the bios normally will launch. Note that if you are launching the application automatically from the dash hack, you will need to be careful as you could find yourself in an infinite loop if you are loading a bios which tries to boot the MS dashboard. The X2 4977 BFM bios looks for evoxdash.xbe, so as long as you have another dashboard named evoxdash.xbe, it will launch that one first. |
| QUOTE |
| ========= Usage ========= You will need to provide your own bios and RC4 key as those are illegal to distribute without permission from MS. Currently working bioses: X2 4977 Boot From Media version (uses Debug RC4 key) Step 1 - Install files Install the included default.xbe, phoenix.raw, and boot.cfg file into the directory of your choice on your xbox, using any method you prefer (007 hack, dash hack, evox). Also install the bios you wish to load (only 1 works for now) into the same directory, and name it xboxrom.bin. Don't forget to sign the default.xbe for the boot method you are using. Step 2 - Edit boot.cfg Edit the RC4Key entry to be the appropriate RC4 key for the bios you are loading. If you specify the key to be all 0x00's, it will assume the 2BL is decrypted already in the rom you are providing. Also note that if you really want to rename your bios file, you can provide the name here with the Romfile parameter. Step 3 - Launch the application. Depending on your preference you may be launching the application via the dash hack, or the 007 hack, or the audio hack, or from any 3rd party dashboard. Just go ahead and launch our app! You will see our intro being rendered (don't worry, it will only display the full intro the first time you run it), and then you will find yourself in whatever dash the bios normally will launch. Note that if you are launching the application automatically from the dash hack, you will need to be careful as you could find yourself in an infinite loop if you are loading a bios which tries to boot the MS dashboard. The X2 4977 BFM bios looks for evoxdash.xbe, so as long as you have another dashboard named evoxdash.xbe, it will launch that one first. |
| QUOTE (jeks @ Jul 18 2003, 06:57 PM) |
| anyway you CANT load retail bioses .. if I read the nfo correctly |
| QUOTE (harlekin @ Jul 18 2003, 06:52 PM) |
| ? what the? loading the a ms bios, to manipulate it? |
| QUOTE (BenJeremy @ Jul 18 2003, 06:59 PM) |
| The NFO makes little sense though... 4977 is a "retail" BIOS (hacked, but hacked RETAIL) with NO RC4 - but the NFO claims it's a Debug BIOS with a Debug RC4. What gives here? The NFO should be clearer... from what I GATHER, they seem to abuse the term "debug BIOS" to mean any hacked BIOS when referring to what they can load. The use of the phrase "retail BIOS" may relate to unhacked BIOSes (maybe so some modders can use XBL without a switch to disable a mod chip?) |
| QUOTE (Troed @ Jul 18 2003, 07:15 PM) |
| The only thing not clear in the nfo is: *) It says it requires the bios to load to be signed with the debug key (fully understandable, although easily changed) *) HOWEVER - it also says an RC4 key consisting of zeroes will work for bioses that aren't encrypted (which includes the bog standard XII bioses) All in all I'm quite a bit impressed though, nice work. |
| QUOTE (stealth @ Jul 18 2003, 02:14 PM) | ||
the X2 4977 bios is based on a debug bios. The X2 4977 boot from media bios has been slightly patched and the 2bl is encrypted with the Debug RC4 key. Stop distributing misinformation |
| QUOTE (BenJeremy @ Jul 18 2003, 07:20 PM) | ||||
Well, I've never heard this.... if the 4977 BIOS is based on the Debug, why is it 256k and not handle the XDK? The "BFM" has an RC4? Again.... the 'standard' 4977 doesn't have an RC4. |
| QUOTE (kornkob69 @ Jul 18 2003, 06:14 PM) |
| anoyne get a hold of this and try it out yet? kinda wondering where to get it myself... hmm |
| QUOTE (stealth @ Jul 18 2003, 02:25 PM) | ||||||
It is based on the debug bios. I can only assume they mucked around with it a bit to get it to compress to smaller than 512k. The 2bl in the x2 4977 boot from media _IS_ encrypted with the debug rc4. |
| QUOTE (Lord Alderon @ Jul 18 2003, 07:32 PM) |
| FURTHER INFRACTIONS WILL LEAD TO BANNING. DO NOT POST RC4 KEYS ON XBOX-SCENE!!! |
| QUOTE (tjfontaine @ Jul 18 2003, 07:40 PM) |
| I tried it. It works for me. Make sure you sign the xbe for the exploit you're booting from. |
| QUOTE (DBZRacer @ Jul 18 2003, 07:41 PM) |
| Terayon: Yup that was my train of thought at the end too but was too lazy to change my post. So essentially boot sequence would go: 1. Bert&Ernie 2. Complex Loader! (set to autolaunch Phoenix Bios Loader) 3. Bios Loader runs and voila! 4. evoxdash.xbe just like any other mod chipped xbox. |
| QUOTE (BenJeremy @ Jul 18 2003, 07:30 PM) |
| It is based on the debug bios. I can only assume they mucked around with it a bit to get it to compress to smaller than 512k. The 2bl in the x2 4977 boot from media _IS_ encrypted with the debug rc4. [/QUOTE] Using the Debug BIOS'es 2BL doesn't mean it's based on the debug BIOS. As I am starting to understand, the "BFM" version was created to emulate what the XDK's "BFM" Retail BIOSes do: load via the Debug BIOS'es "BFM" feature. I take it the RC4 key might have been required due to checking on the Debug BIOSes part, or using their 2BL loader. Why, then, does Pheonix claim a BIOS will work with an unencrypted 2BL (Dual Boot)? I'm telling you... it makes little sense to me. |
Quote from: BenJeremy,Jul 18 2003, 07:30 PMIt is based on the debug bios. I can only assume they mucked around with it a bit to get it to compress to smaller than 512k. The 2bl in the x2 4977 boot from media _IS_ encrypted with the debug rc4.
Using the Debug BIOS'es 2BL doesn't mean it's based on the debug BIOS.
As I am starting to understand, the "BFM" version was created to emulate what the XDK's "BFM" Retail BIOSes do: load via the Debug BIOS'es "BFM" feature. I take it the RC4 key might have been required due to checking on the Debug BIOSes part, or using their 2BL loader.
Why, then, does Pheonix claim a BIOS will work with an unencrypted 2BL (Dual Boot)?
I'm telling you... it makes little sense to me.
| QUOTE (BenJeremy @ Jul 18 2003, 07:50 PM) |
| The "official" M$ "Boot From Media" BIOSes are, in fact, retail BIOSes. This is why the NFO from Pheonix is a bit confusing. What's require, probably, is special code to allow for a warm boot of the BIOS, with full initialization. Normally, initialization data is grabbed from the shadowed BIOS image, and much is left undone on a warm reboot... mixing with a new shadowed BIOS can screw up a system, since the data is no longer in the same spots. "BFM" must use special code to bypass this issue by doing something completely different. I think at issue here is that the only compatible BIOSes are those set up for "Boot From Media" with the proper init code to restart with a new BIOS. The 2BL must be the key to making a BIOS "BFM", hence the usage of the Debug 2BL. |
| QUOTE (stealth @ Jul 18 2003, 02:54 PM) | ||
Last time I checked, you can't find an official M$ boot from media bios in a retail box. How are they retail then? What do you think a debug bios is then? Oh wait, maybe a bios that MS distributes in debug xboxes. And shockingly, those debug bioses are the ones that support booting from media. |
| QUOTE (BenJeremy @ Jul 18 2003, 08:13 PM) |
| No, they are distribruted with the XDK. "BFM" BIOSes are developer's tools for testing software using a pseudo-retail Xbox. |
| QUOTE (klime @ Jul 18 2003, 03:49 PM) |
| Umm I don't really understand everything but I'll ask a question. What is the RC4 key and can I find it in my Xbox? And also, will this work with just evox and not using complex !loader with a 3944 kernal Xbox? |
| QUOTE (BenJeremy @ Jul 18 2003, 08:04 PM) | ||
Find the RC4 http://forums.xbox-scene.com/index.php?act=ST&f=45&t=78827 Ok, so that isn't what I said it was, at least you know have seen the X-S statement on it and other info on it. Seems the only way to get newbs to understand before they get banned. |
| QUOTE (klime @ Jul 18 2003, 04:11 PM) | ||||
Umm... I never asked anyone to post it. I just asked what it is and if I can get it from MY OWN xbox. |
| QUOTE (Noilegnave Siseneg Noen @ Jul 18 2003, 04:40 PM) |
| so what do the nay-sayers to software mods have to say about this one? Is this software mod as good as owning a modchip? It certainly sounds to be as good, to me. but then again, I'm a dumb shit. what's the opinion now? |
| QUOTE (PheoniX_Project @ Jul 18 2003, 09:16 PM) |
| http://www.maxconsol...ents&newsid=366 Nothings gunna stop this revolution called freedom of information Cheers |
| QUOTE (BenJeremy @ Jul 18 2003, 09:52 PM) |
| It's still far from perfect, and other issues haven't been resolved. Close, but still no cigar. |
| QUOTE (vintage_guitar @ Jul 18 2003, 05:15 PM) |
| is it legal for someone to post the filesize of the rc4 or even the filename? if so, list these |
| QUOTE |
| Just for example a modified nforce bios is now not out of the question to use your box as a PC. |
| QUOTE (tutu @ Jul 18 2003, 11:33 PM) |
| this rocks!! If only the audio exploit worked then this would be the best thing in conjuction with it, Xbox Live compatibility (I hope) |
| QUOTE (tutu @ Jul 18 2003, 11:45 PM) |
| not according to every single post on here.... it will only boot linux? and xbedump -audio doesn't seem to work (key isn't working?) |
| QUOTE (tutu @ Jul 18 2003, 11:33 PM) |
| Xbox Live compatibility (I hope) |
| QUOTE (tjfontaine @ Jul 18 2003, 11:44 AM) | ||
more like: 1 B&E 2 Phoenix Loader 3 Evox Dash |
| QUOTE (Ubergeek @ Jul 18 2003, 11:01 PM) | ||
if you had an ounce of a clue as to how this shit worked - you ppl would stop gagging for an xbl exploit it aint happening - forget it - get over it go jerk off over some other shit seriousley |
| QUOTE (tutu @ Jul 18 2003, 07:13 PM) | ||||
With all due respect with what you have done for the scene, I don't think you undertand what I mean in my post. Yes I am a little excited, but who isn't? I simply wan't to use the audio exploit so I can run the BIOS loader and then use XBMP + Emulators, when I choose. This should mean I can continue to use my Xbox live with my Xbox live originalls, thank you very much. This has got nothing to do with "xbl exploits". Now grow up.. Back to topic please |
| QUOTE |
| .....and load evox off say a cd |
| QUOTE (Cain @ Jul 18 2003, 04:34 PM) |
| I'm just waiting for the Pheonix guys to put this into ernie, then it'll be pretty much perfect. |
| QUOTE (Cain @ Jul 19 2003, 12:34 AM) |
| I'm just waiting for the Pheonix guys to put this into ernie, then it'll be pretty much perfect. |
| QUOTE (Mordenkainen @ Jul 19 2003, 12:46 AM) |
| This is working great! Do any of the BIOS tools support modifications to this bios? I would like to stop the flashing LED. If not, does anyone know the offset and values to change that will stop this and I will patch it with a hex editor. Preferably for green. Thanks Morden. |
| QUOTE (Artifex @ Jul 18 2003, 11:48 PM) | ||
this will not happen. it would be silly, and pointless, as ernie can just launch the Phoenix Loader directly! --Artifex |
| QUOTE (Ridley @ Jul 19 2003, 12:48 AM) |
| I wish ppl would stop trying to hack XBL, it's just going to be the last straw for M$. Just be grateful that you are able to play backups without a modchip. geez! |
| QUOTE (Cain @ Jul 19 2003, 12:57 AM) | ||||
I can see the point, you on the other hand are being a little shortsighted. If the kernel is replaced in the font file and the location of the dash is changed (to evoxdash.xbe or neXgen.xbe) without having to launch another xbe then the clock reset issue should become nothing but a horrible memory. |
| QUOTE (vintage_guitar @ Jul 19 2003, 01:02 AM) |
| wooger, you got it working, when you boot it up, do you get the original xbox intro,then a bird intro, then an evox screen, with the 3 different flashing colors LED? explain exactly what happens for you please |
| QUOTE (Artifex @ Jul 19 2003, 12:01 AM) | ||
|
| QUOTE (Wooger @ Jul 19 2003, 01:09 AM) | ||
I have yet to try to set the pheonix bios loader working as the base dash.... I was only able to get the XBox to boot the loader dash... and then execute the pheonix.. which in turn loaded the new bios and booted evox.... If you read the nfo file... the first time you boot the bios you will get the animation... then the evox bios will boot... the consecutive times you boot the bios you should only get the pheonix logo and then the evox will come up. Wooger |
| QUOTE |
| no, the clock issue will still be there. |
| QUOTE |
| but, the clock issue is resolved, if you know where to get the newest bert&ernie. :-) and i mean RESOLVED, not just a shoddy cmos workaround. |
| QUOTE (Cain @ Jul 19 2003, 01:13 AM) | ||||
Not when my hacked MS dash is called neXgen.xbe
I know where to get it (in fact i've already got them), but i'm not using it until i know how it works. And seing as no nfo was given, and the author is anonymous i'm not ready to try it yet. |
| QUOTE (vintage_guitar @ Jul 19 2003, 01:14 AM) |
| thanks wooger for clearing that up for me, so now im able to change the led and what not,as if i have a modchip? |
| QUOTE (vintage_guitar @ Jul 19 2003, 01:17 AM) |
| thanks again wooger, you're the man |
| QUOTE (ripcurl @ Jul 19 2003, 01:18 AM) |
| whats happens when u try to access the ms dash after the exploit?? |
| QUOTE (vintage_guitar @ Jul 19 2003, 01:25 AM) |
| well, it works for me, after i did the renaming to .xft exploit,and repointing evox to the dash i resigned and hex edited |
| QUOTE (vintage_guitar @ Jul 19 2003, 01:32 AM) |
| woohoo just noticed that it does fix the dvd problem |
| QUOTE (vintage_guitar @ Jul 19 2003, 01:44 AM) |
| no, for some reason, it no longer clones my C drive on D when i FTP to it using flashFXP |
| QUOTE (BenJeremy @ Jul 19 2003, 12:29 AM) |
| Nonetheless, you'll never get XBL compatiblity without a different exploit. XBL will detect anything you do that can exist on the hard drive, including a test to validate every data file on the system and correcting the xboxdash.xbe file. I think I understand what YOU are asking for, and it's one of the "Close but no cigar" things I mentioned. These exploits are getting better.... but still not mature. I'd give it an "early Alpha" rating. |
| QUOTE (oracle2 @ Jul 19 2003, 02:33 AM) |
| Okay...I've got a question. Is there any way to boot the Phoenix Loader using the 007aufsave hack? All on a memory card? That way I won't have to install anything on my hard drive and can only boot this when I want to and still boot original XBL titles? |
| QUOTE (Mordenkainen @ Jul 19 2003, 04:02 AM) |
| I don't see why not, though it would require a few changes... 1. Sign the Pheonix with the habib key. 2. replace the default.xbe in the save with this one. 3. put Evox in there as evoxdash.xbe with whatever config you need. 4. Put a bios file in the that trys to load the evoxdash.xbe in the save folder (Can this be done? I don't know if you can modify the bios in this way.) This should do it, I think. the only tricky part is that BIOS mod. Once again I ask, is there any way we can modify this BIOS's parameters? Any way we can get the BIOS utils to recognize it? It always comes up as "unknown" for me. Morden. |
Once Phoenix succeeds in getting retail bioses to load, and once they implement something to switch between bioses on bootup, it would be simply PERFECT! You would basically have an on/off switch for xblive, just like a chip.
Correct me if I'm wrong but doesn't the retail bios check for a game in the drive and load it first. Failing to find a game it loads the dashboard.
So if you have a game in the drive before the dashboard loads then the bert/ernie fonts don't load nor does the chain of events that leads to a patched bios.
Playing with a retail game uses a full retall bios and can be used on live so I'd assume. A backup would require patched bios and get you banned.
So.....no switch needed. Just pop in a retail and play on live. Or boot it into dash and do as you please![]()
Is my assumption correct ?
| QUOTE (punkasscrab @ Jul 19 2003, 05:05 AM) |
Correct me if I'm wrong but doesn't the retail bios check for a game in the drive and load it first. Failing to find a game it loads the dashboard. So if you have a game in the drive before the dashboard loads then the bert/ernie fonts don't load nor does the chain of events that leads to a patched bios. Playing with a retail game uses a full retall bios and can be used on live so I'd assume. A backup would require patched bios and get you banned. So.....no switch needed. Just pop in a retail and play on live. Or boot it into dash and do as you please Is my assumption correct ? |
Now, what you are talking about -- running a DVD before you get to the dash -- still has the X2 bios loaded, thus you'll still get banned from M$ live.
I don't think so. The X2 bios is not loaded until the dash attempts to load with the font exploits. Having a retail game in the drive will cause it to boot and run from the retail bios.
| QUOTE (punkasscrab @ Jul 19 2003, 06:24 AM) |
| The X2 bios is not loaded until the dash attempts to load with the font exploits. Having a retail game in the drive will cause it to boot and run from the retail bios. |
| QUOTE (matt03 @ Jul 19 2003, 06:44 AM) |
| A quick question - Say I have a matrix with some evox bios on it, and I boot from the matrix and use the phoenix Bios loader to load the x24977 bios, and go into evox, and then utilities, then flash, and tried to flash a new bios. Would it: A) Flash the LPC bus (the Matrix) C) Just Write to the memory D) Allow me to use other bioses with the Pheonix bios loader or E) Simply screw up? |
| QUOTE (Mordenkainen @ Jul 19 2003, 04:02 AM) |
| I don't see why not, though it would require a few changes... 1. Sign the Pheonix with the habib key. 2. replace the default.xbe in the save with this one. 3. put Evox in there as evoxdash.xbe with whatever config you need. 4. Put a bios file in the that trys to load the evoxdash.xbe in the save folder (Can this be done? I don't know if you can modify the bios in this way.) This should do it, I think. the only tricky part is that BIOS mod. Once again I ask, is there any way we can modify this BIOS's parameters? Any way we can get the BIOS utils to recognize it? It always comes up as "unknown" for me. Morden. |
| QUOTE (Ubergeek @ Jul 18 2003, 11:01 PM) | ||
if you had an ounce of a clue as to how this shit worked - you ppl would stop gagging for an xbl exploit it aint happening - forget it - get over it go jerk off over some other shit seriousley |
| QUOTE (b166ir @ Jul 19 2003, 09:01 AM) |
| so if i get this right with phoenix loader you can use xbox live with out getting banned ?? |
| QUOTE (docster @ Jul 19 2003, 10:27 AM) |
| tutu learn to spell fuckwit seriousley ;-) |
| QUOTE (xboxwannabe @ Jul 19 2003, 12:29 PM) |
| load loader FX1.0 with led patch then load biosloader.... no more flashing led !! |
| QUOTE (wimpie007 @ Jul 19 2003, 12:30 PM) |
| Is the eject-issue resolved? some say yes, others say no??? |
| QUOTE (BleedingEdge @ Jul 19 2003, 08:29 AM) |
| Just another day of typical Ubergeek and Benjerremy posts. Dont you guys get it anything that looks like taking sales from executor gets flamed Just look at theyre previous posts on similar subjects Didnt the scene know that if it doesnt come from executor the scene doesnt deserve to have it? let me get this right we have a guy that is on an anti piracy high horse that releases a program thats compiled with the XDK oh yeah and then he asks for donations for his time etc lol isnt that the pot calling the kettle black. Open your eyes people its time to stop looking thru those rose coloured glasses. ffs |
| QUOTE (BleedingEdge @ Jul 19 2003, 09:32 AM) |
| Does live check the contents of C?(do you actually know this for a fact due to looking at the routines?) i was under the impression it did a checksum on shadow ram bios! (As I thought Cs contents could change depending on drive fragmentation and a few other factors) If what I have been led to think is true then the following can and will be done. A modified bios to do the following will easily in theory beat live and get us back to playing with our backups on live like we were able to do for the 1st few hours with Bert & Ernie and just signing everything to run from hdd. same as what the current phoenix bios loader does but with the following changes made into the kernel. Kernel is modified to contain a 2ndary bios loader(for use of a better word so evox loads the game xbe and then the last thing before handing execution over to the game xbe this modified kernel copies a virgin M$ bios back into memory, the xbe is then executed and when live does its checks the bios is fine and passes all current checks. It looks like my cheapmod can shortly run the debug bios I have been told for so long would never run without a 512k chip. And now that I can save by not needing a chip I can afford a second box where my nomod box will also run the debug and any other bios the scene decides will run. Live has been unlocked for those that tried a few different things atleast for some time it was until a patch was forcefed to users and im sure again in the future but next time i guess the hackers will go 1 step further and disable theyre impotent update routines altogether . Comrende Atleast u have proved you can infact take those executor coloured glasses off after all more than i can say for some of teh fanboys on irc. I'm glad u proved some of my statement incorrect i was not promoting piracy i think you better go back and re read i was simple pointing out here is a Mod that seems to flame any new developments in these areas and say that all pirates are evil etc and then on the other hand releases a program that uses a very expensive pirated Application development package to release his software that in turn he asks for donations hmmmm who is the pirate? Edit I am no programmer but the ones i base my opinions on say my theory is infact very valid and doable and may infact have already been done by some quarters |
| QUOTE (tutu @ Jul 19 2003, 12:13 AM) | ||||
With all due respect with what you have done for the scene, I don't think you undertand what I mean in my post. Yes I am a little excited, but who isn't? I simply wan't to use the audio exploit so I can run the BIOS loader and then use XBMP + Emulators, when I choose. This should mean I can continue to use my Xbox live with my Xbox live originalls, thank you very much. This has got nothing to do with "xbl exploits". Now grow up.. Back to topic please |
| QUOTE (BleedingEdge @ Jul 19 2003, 01:29 PM) |
| Just another day of typical Ubergeek and Benjerremy posts. Dont you guys get it anything that looks like taking sales from executor gets flamed Just look at theyre previous posts on similar subjects Didnt the scene know that if it doesnt come from executor the scene doesnt deserve to have it? let me get this right we have a guy that is on an anti piracy high horse that releases a program thats compiled with the XDK oh yeah and then he asks for donations for his time etc lol isnt that the pot calling the kettle black. Open your eyes people its time to stop looking thru those rose coloured glasses. ffs |
| QUOTE (caustic @ Jul 19 2003, 02:18 PM) |
| I dont think the original XBL quesion was wanting to run backups on XBL, but rather have the exploit installed, but still be able to boot your xbox to a non-modded state so that you can play with originals as normal. I am still interested in this question, and i will be watching developments closley. |
| QUOTE (tutu @ Jul 19 2003, 04:19 PM) | ||
Thanks Someone understood what I mean't hehe |
| QUOTE (Telemachus @ Jul 19 2003, 10:06 AM) |
| The point is, this whole exploit is (currently) good for mod-chips. Kiddies see all the stuff they can do, and get addicted. Kiddies erase the 007 savegame file, the original fonts, and default.xbe. Kiddies are screwed. Kiddies buy a mod chip. This exploit is also great for those of us who have mod chips, because we can play around with it with no problem getting out of trouble. Which brings me to the question: BenJeremy, you haven't even TRIED this thing yet? Not much to lose as long as evoxdash (or, |
| QUOTE (tutu @ Jul 19 2003, 10:19 AM) | ||
Thanks Someone understood what I mean't hehe |
| QUOTE (XanTium @ Jul 19 2003, 03:26 PM) | ||||
that's very easy I guess. Open tray, put dvd in, close tray, shut down xbox, boot xbox. xbox will directly boot from dvd (not boot dash, so also not boot the exploit). edit: note that the hacked xtf/st.sb files are still on your HD. But so far MS is doing anything against it. The bios/kernel in mem. should be clean though. |
| QUOTE (BenJeremy @ Jul 19 2003, 01:13 PM) |
| ...and I'd really like to see you explain HOW this hack will EVER let them play Xbox Live with 100% assurance. How am I wrong on this? I'm NOT. I've been doing this (Xbox) for over a year now... but consoles in general for many, many years, and I've got 20 years experience writing software. I know from whence I talk, and my caution is stated out of concern for USERS, not modchip makers. |
| QUOTE (Telemachus @ Jul 19 2003, 04:34 PM) | ||||||
YOu have to admit... that is almost as easy as flipping a switch on a mod-chip, if not easier. Might be a little discomforting... but technically it should work great. BTW: Totally off topic question... has anyone ever actually PLAYED 007? Maybe the 16 bucks at Target would be well spent... although MechAssault is a fun game, for $35. |
| QUOTE (PiP @ Jul 19 2003, 05:50 PM) |
| would you be able to use the Phoenix Bios Loader to load up a retail 4034 bios, for example, to be able to go on xbox live if you have a tsop flash of an x2 4977 bios? |
| QUOTE |
| But anything M$ does to stop that from working (ie: examining files on C:) will also stop modded xbox's from working. |
| QUOTE (Troed @ Jul 19 2003, 11:38 AM) | ||
It's software that detects whether the bios shadow in ram has been changed or not. Software on a modded box is under our control. Any software. Updated software aswell. Imagine running cxbx as a VM around any software not passing a checksum test. The scene would distribute checksums of all XBEs found not f*cking up a softmod or an xboxlive-hack - any software not passing the checksum would be run in that VM to see what it would do. If it was found to muck around with softmod files or xboxlive-hack files would be disallowed to do those changes, and since its checksum wouldn't be in the OK'd database it wouldn't run on other boxes either. If the software would perform a needed update a cracked update could be distributed instead. The above is the _big_ all-in-all solution, I have no hopes of seing it implemented. I have big hopes of seing modded boxes on XboxLive in the near future though (some already are, and have been for quite some time). Why? I don't like MS. Deal with it. |
| QUOTE (Artifex @ Jul 19 2003, 05:49 PM) |
| We also now believe that the flashing red led problem may be easily soveable with a hexeditor! We're also looking into this. |
| QUOTE (Artifex @ Jul 19 2003, 05:49 PM) |
| Can we move the flaming to another thread, perhaps? This WAS a good thread for information on this application. We now believe the reset on eject problem may be related to the BiCoE fonts, and the Complex !loader being used in conjunction with this application. It is being looked into. We also now believe that the flashing red led problem may be easily soveable with a hexeditor! We're also looking into this. More info coming soon! --Artifex |
| QUOTE (matt03 @ Jul 19 2003, 07:59 PM) |
| It seems like everyone is starting to get this to work. Great Job Pheonix crew. Now, any word on new bioses? A vga bios would be nice. Or a debug bios. And how are you going to go about adding the compatibility? By patching your software or patching the individual bioses? Thanks again. |
| QUOTE (igotgame @ Jul 19 2003, 08:16 PM) |
| cool deal..so this works with RELOADED too.. gotta tell my friend about this..he will indeed be happy does this work if he is just using bert and ernie reloaded fonts in conjuction with the BICOE default.xbe and evox.ini?? in other words he is not using the Bios Loader yet so will this LED fix still work for him? |
| QUOTE (Benu @ Jul 19 2003, 07:06 PM) |
| well, one problem left, is that the menu DVD selection doesnt update. You have to go into an app, back out, and then you can select play DVD. Or just boot with disc in. |
| QUOTE (Artifex @ Jul 19 2003, 07:04 PM) |
| If you really want an in-depth technical explanation, i suppose i could provide you with one. But i doubt you really do. |
| QUOTE (Artifex @ Jul 19 2003, 08:26 PM) | ||
Yes. But the reloaded fonts are somewhat silly, as they dont do much towards fixing the cmos time problem. |
| QUOTE (Hajaz @ Jul 19 2003, 09:28 PM) |
| gah! people keep refering to bert and ernie but i only got the bert.xtf file (cant remember witch was witch) and that snuffleupagus.xtf witch ive renamed to xbox.xtf or xbox book.xtf or smt. Could someone plz fill me in on what bert and ernie files ure on about, and what to do exactly with that bigfonts file that was posted earlier A short step by step explanation on how to go from BiCoE to "signed phoenix bios loader" would be very nice. I dont wanna fk up my xbox by doing this too fast |
| QUOTE (underthebridge @ Jul 19 2003, 08:10 PM) |
| does somebody still have the old bigfonts (the one where the red led wasn't fixed yet) ? If so can you post a dl link plz? I can't change the led color with the new one... thx |
| QUOTE (vintage_guitar @ Jul 20 2003, 01:09 AM) |
| Artifex, can you explain to me why exactly the BICOE fonts left the LED the same 3 different colors, and the RELOADED fonts changed it from blinking red(which i had to hex edit) to make it solid red(i prefer red over green)i was just wondering what was different about the BICOE and RELOADED LED hex values to make them even make the problem in the first place |
| QUOTE (UnhappyKlown3 @ Jul 20 2003, 01:48 AM) |
| I just want to thank the whole entire Phoenix Team for their hard work. I guess you guys caught up on that sleep you mentioned in the BiCoE nfo, eh? I have it running perfectly, with no rset on eject, and a solid green light, and complete access to the MS Dashboard. All that's left to fix is the whole entire "Run DVD Game not getting updated when you put a disc in the tray" thing and some IGR bugs. Thanks again, to Phoenix, these forums, and the whole scene entirely. |
| QUOTE |
| (Gracefully and respectfully burying the remnants of our ancestors.) |
| QUOTE (sarcoptic @ Jul 19 2003, 09:32 PM) |
| HappyKlown what did you modify so you are able to boot back to MS Dashboard? I just installed bigfonts and have the blinking LED fixed, but booting to msdashboard if needed would be nice. |
| QUOTE (AuXBoXx @ Jul 20 2003, 03:49 AM) |
| do exactly what the Complete_Signed_Phoenix_Bios_Loader .nfo says then add the hacked msdash to c: as xboxdash.xbe and rename the original to something else like xboxdashorig.xbe thats it |
| QUOTE (Wooger @ Jul 20 2003, 05:16 AM) |
| So has anyone successfully signed this with habibi and booted it from a save game? Wooger |
| QUOTE (Artifex @ Jul 20 2003, 05:46 AM) | ||
yes. :-) --Artifex |
| QUOTE (tjfontaine @ Jul 20 2003, 07:22 AM) |
| You should use either the orginial font hack files (dayX) or the bigfonts version |
| QUOTE (xilicio @ Jul 20 2003, 07:16 AM) |
| I havent used Big Fonts yet..because its experimental so I wouldnt like messing with my Xbox. Im using the Reloaded ones and I havent had any clock issues just that LED blnking red...I will fix it soon by the hex-edit method. |
| QUOTE (vintage_guitar @ Jul 20 2003, 01:46 AM) |
| i dont thin this is just a porblem with the matrix, i havent gotton ANY DVD's to run without power on with DVD in..as in, i dont think ANY DVDs will load when the loader is on first(at least i can't and sounds like noboy else can either) |
| QUOTE (dawhiz @ Jul 20 2003, 09:46 AM) |
| Artifex: I read on the front page about dvd remote causing xbox to reboot, thought that would be cool.. that way i could reboot it without getting up.. hehe.. turns out mine doesnt reboot.. still can scroll down to reboot though with it.. but i'm running the new big fonts from today.. the one that fixes the led (just stays green).. so it must fix the problem. |
| QUOTE (cmcd @ Jul 20 2003, 05:08 AM) |
| Ok we have just signed the default.xbe to work with habibi and tested it now runs from 007 savegame but stops on the LOGO's we are working to try and fix this at the moment so hopefully not long Just remember people this is all alpha not even beta yet the reason we released is because it was working perfectly on all boxes we had access to in ntsc and pal across every different version. Like al things at this stage BEWARE unless u have a mod or a made you can borrow one off please dont try this stuff yet. Cheers -OzShAdOw |
| QUOTE (Johno @ Jul 20 2003, 09:25 AM) |
| Can someone just clear up a quite question please! Its about the font files! Is is a case of using bert and ernie, bert and ernie reloaded or bigfonts?? Or do I needed bert and ernie reloaded and bigfonts?? If I only need one, can someone just tell me straight which is the best one to use? For this Pheonix Loader (One that fixes reset on dvd eject and clock reset bug would be great) Cheers guys!!! Johno |
| QUOTE (AuXBoXx @ Jul 20 2003, 02:56 AM) |
| It doesnt matter what line A0 is on just change those to letter numbers to: 00 for no light AF for Blinking Orange Green FA for Blinking Red Orange 0A for Blinking Green 0F for Solid Green A0 for Blinking Red F0 for Solid Red FF for Solid Orange AA for Blinking Orange And only upload ernie to fonts |
| QUOTE (LafferUSA @ Jul 20 2003, 02:16 PM) |
| I just deleted that sonovabitch RAW file. I couldn't stand that EAGLE!!! LOL Artifex |
| QUOTE (GJCD @ Jul 20 2003, 03:51 PM) |
| I have the Complete_Signed_Phoenix_Bios_Loader and the bert-ernie-big-font-green-light.rar and everything is working fine, except the option MSDASBOARD in the evox menu. When I click it it goes to a black screen, and I have to reboot. In evox.ini I have (MSDashBoard= "c:xboxdash.xbe") but there aren´t any xboxdash.xbe in the C drive of the Xbox. I have the evoxdash.xbe (I think is this name) and a defaul.xbe. Should I rename this default.xbe to xboxdash.xbe? Can I have any problem doing this next time I boot? Thanks. |
| QUOTE (Telemachus @ Jul 20 2003, 03:55 PM) |
| Very curious, all of this. Artifex, I have tested this pretty thouroughly (been running the XBOX without the chip on for last 3 days, and have watched several DVD movies...) The DVD remote works without flaws. It navigates through MXM, evox, and DVD movies. I can ff, rw, menu nav, whatever. They KEY is, I have to run the DVD through evolution X (launch DVD). Of course, if you put the DVD in before Pheonix even loads, the DVD remote will not work. Trying to navigate will cause a system reset (somehow related to the orinigal BIOS/DVD player/missing fonts). I am using the original Bigfontz, which I have Hex Edited to be permanently Red. |
| QUOTE (GJCD @ Jul 20 2003, 02:51 PM) |
| everything is working fine ... but there aren´t any xboxdash.xbe in the C drive of the Xbox... |
| QUOTE (vintage_guitar @ Jul 20 2003, 04:19 PM) |
| Telemachus what is your DVD set to in the evox.ini? DVDPlayer = "c:default.xbe" AutoLaunchAudio = No right there..what do you have it set too? paste it if you will? that's a nasty thing you did in the pheonix file, swapping the default DVD player lmao!..i just now noticed,and that fixed my problem loading it, but i still have the remote reset problem |
| QUOTE (igotgame @ Jul 21 2003, 12:37 AM) |
| QUESTION: in system utilities by BIOS Version: should it say X2 4977??? my friends say Original Bios 4034 |
| QUOTE |
| to use the phoenix loader w/ BIOS the correct way.....open the top cover of the xbox until you can see its hard drive and CPU, then take a few magnets then run the magnets on it for 2 mins, then leave the magnets on them for 10 mins, then rub your feet on a carpet to get some static electricty and touch the CPU so it shocks it, it will allow any mem stick, card or anything backup device even a external CD Burner almost anything USB, also this will reset the BIOS and allow for you to load BIOS from the phoenix loader w/o soldering anything, there is 1 more way get the static and touch the 2 points you need to solder to defrag them then load the BIOS & load & form of memory/backup thats how no AR or Mem-X Needed!!!! |
| QUOTE (Artifex @ Jul 19 2003, 12:05 AM) |
| I just wanted to dispell some misinformation, and maybe make some kiddie's lives easier. I dont know why there's so much confusion, since the tool was distributed with source! Why cant people just inform themselves? Anyways... sorry... ranting... The rc4 key is unnecessary if one has a bios with an already decrypted 2bl. How to go about making one: Obtain an x2 4977 BFM rom image, 256k Obtain the RC4 key Unpack the x2 4977 BFM bios with xbtool Insert the unpacked 2bl.img over the original 2bl in the rom image This starts at offset 0x6200 (iirc) Make the rom image 1024k using the age-old techniques Upload to the usual sources for all to enjoy. Then, noone will need to go trying to find the rc4 key. To get the RC4 key without blatently breaking laws: Obtain a bios that contains it in the 2bl, and has a decrypted 2bl. (not sure which ones do, offhand. try evoxd6) Open in a hexeditor. Find the key... it's offset will vary, but it will start with the magic letters W and B All the bytes should add up to 0x063D, iirc Also... to cover some other bases: Using complex !loader with this is silly. The whole point of complex !loader is to patch a stock bios at runtime. With this, youre already running a patched bios, so there's no need. A good setup would be to use bert & ernie to launch the Phoenix loader directly, which will in turn load x2 4977 bfm, which will in turn launch evox. A STEP-BY-STEP: Install Bert&Ernie Font exploit as has been covered a million other times Sign Phoenix Loader with the Font exploit key using xbedump. (also well covered) Put RC4 key in config file, and copy to c: copy phoenix.raw to c: Copy signed .xbe to c: put evoxdash.xbe on c: rename x2 4977 bfm bios to xboxkrnl.bin and put on c: Your box will now boot just as if it had a modchip. :-D ENJOY! btw... im extremely tired, so, correct me if any of this is wrong. :-) --Artifex |
| QUOTE |
| To get the RC4 key without blatently breaking laws: Obtain a bios that contains it in the 2bl, and has a decrypted 2bl. (not sure which ones do, offhand. try evoxd6) Open in a hexeditor. Find the key... it's offset will vary, but it will start with the magic letters W and B All the bytes should add up to 0x063D, iirc |
| QUOTE (vannguye @ Jul 21 2003, 07:14 PM) |
| Can someone show me how to get the Complete_Signed_Phenonix_Loader.rar in xbins.....I in there but I don't know what to do..... |
Quote from: vannguye,Jul 21 2003, 07:14 PMCan someone show me how to get the Complete_Signed_Phenonix_Loader.rar in xbins.....I in there but I don't know what to do.....
| QUOTE (Wooger @ Jul 24 2003, 06:31 AM) | ||
Has anyone actually successfully done this? Ive been trying for some time now and STILL have yet to get it right Wooger |
| QUOTE (stealth @ Jul 29 2003, 06:17 AM) |
| if it hangs at calculating 2bl then you either have the wrong RC4 key or the bios you are trying to load is not a bfm bios. |
| QUOTE |
Section "Root" { Item "Launch DVD",ID_Launch_DVD Item "MS Dashboard",ID_MS_Dash Item "Reboot",ID_Quick_Reboot Item "Power Off",ID_Power_Off |