restore hdd game install after ban with nand backup?

[HB]

There is hope for all of us. Check this out! Thank you very much boby2pc for your constant support. Xbox 360 gaining USB storage support in 2010 update.” Once the update occurs, Xbox 360 owners will be able to download Xbox Live Arcade games, Xbox Live Indie games, Games on Demand, DLC and Title Updates to the storage device. "USB storage devices may, however, have far greater memory capacity than MUs (at the date of writing, the largest MU is 512 MB), and may therefore support previously infeasible operations-such as installation of a full disc-based title." That's right, you can also store disc-based games to the USB device; however, it will require the disc to be in the tray for authentication, identical to the current functionality.”

Source:

Code:

http://www.joystiq.com/2010/03/18/xbox-360-gaining-usb-storage-support-in-2010-update/

Sweet! 

My gut feeling is that if your HDD usage has already been revoked (IE you were banned and your secdata modified), that this new USB feature won't work either... so you'll still be screwed.  Hopefully I am wrong, but I am pretty sure that once the ability of your console to sign data has been revoked, you will never be able to install Live content, games, or move saves and profiles between other consoles (unless you can recover your secdata).  Plus, supposedly there is going to be a 16GB limit imposed on USB drives, which means you could only install roughly three games at a time.

[oxonater]

Hi boby2pc not sure what date I was banned I know I was playing online then suddenly got disconnected and hey presto I was banned. The log file you speak of where can i find this is it where findsecdata puts the patched files.
Also I had a similar problem as eric attack with the message

Old secdata.bin not found. Console might be not banned, already patched or secd
ta.bin overwritten.

However only got this message when using patched files from findsecdata and when I restored original nand never appeared again so its hard to say if my old sec.bin data been over written ?

Just wondered if the program is overlooking one of the files that needs patching also did try the zeroing in hex editor but that didn't work thanxs

[boby2pc]

Old secdata.bin not found. Console might be not banned, already patched or secd
ta.bin overwritten.

that message means that there's no known method for You to uncripple HDD

[oxonater]

Hi but I don't get that message now as rewrote the original nand and all is well just wondered where the log file you need is I just got one from flash tool. Also does anybody know what odd.bin is in the nand mmm I wonder thanxs

[boby2pc]

Hi but I don't get that message now as rewrote the original nand and all is well just wondered where the log file you need is I just got one from flash tool. Also does anybody know what odd.bin is in the nand mmm I wonder thanxs

Log I mean is something like that:

findsecdata v0.62 2009-12-09 by boby2pc
Controller version 1
Last filetable change: 0x9D
ECC change: 0x9D Filetbl: 0x00CB Secdata: 0x00CA Timestamp: 3B98A0FD 2009-12-24
ECC change: 0x9C Filetbl: 0x00C9 Secdata: 0x00C8 Timestamp: 3B98A0AC 2009-12-24
ECC change: 0x9B Filetbl: 0x00C7 Secdata: 0x00C6 Timestamp: 33766001 2005-11-22
ECC change: 0x9A Filetbl: 0x00C5 Secdata: 0x0217 Timestamp: 3B5C635B 2009-10-28
ECC change: 0x92 Filetbl: 0x0216 Secdata: 0x022E Timestamp: 3B377218 2009-09-23

Checking secdata:
022E containts not 0 values above offset 1024 or zeros below 1024 (overwritten)

Searching for recommended

Extracting secdata:
secdata00CA.bin
secdata00C8.bin
secdata00C6.bin
secdata0217.bin

Extracting filetables:
filetable00CB.bin
filetable00C9.bin
filetable00C7.bin
filetable00C5.bin

Creating patched secdata:
Patchedsecdata00CA.bin
Patchedsecdata00C8.bin
Patchedsecdata00C6.bin
Patchedsecdata0217.bin

Creating patched filetables:
Patchedfiletable00CBBy00C9.bin
Patchedfiletable00CBBy00C7.bin
Patchedfiletable00CBBy00C5.bin

Use:
nandpro.exe lpt: -w16 Patchedsecdata00C8.bin 0CA 1
nandpro.exe lpt: -w16 Patchedfiletable00CBBy00C9.bin 0CB 1

Press ENTER

[oxonater]

K gotcha here you go but tried this already and no go also when I use secdata scan it recommends 0x11D
mmm Im confused

findsecdata v0.61 2009-12-01 by boby2pc
Controller version 1
Last filetable change: 0x5D
ECC change: 0x5D Filetbl: 0x01BB Secdata: 0x01BA Timestamp: 33766001 2005-11-22
ECC change: 0x5C Filetbl: 0x01B9 Secdata: 0x01B6 Timestamp: 33766001 2005-11-22
ECC change: 0x5B Filetbl: 0x01B5 Secdata: 0x01B4 Timestamp: 33766001 2005-11-22
ECC change: 0x5A Filetbl: 0x01B0 Secdata: 0x01AF Timestamp: 33766001 2005-11-22
ECC change: 0x59 Filetbl: 0x01AE Secdata: 0x01AD Timestamp: 33766001 2005-11-22
ECC change: 0x58 Filetbl: 0x01AC Secdata: 0x01AB Timestamp: 33766001 2005-11-22
ECC change: 0x57 Filetbl: 0x01AA Secdata: 0x01A9 Timestamp: 33766001 2005-11-22
ECC change: 0x56 Filetbl: 0x0192 Secdata: 0x0191 Timestamp: 33766001 2005-11-22
ECC change: 0x55 Filetbl: 0x0190 Secdata: 0x018F Timestamp: 33766001 2005-11-22
ECC change: 0x54 Filetbl: 0x018E Secdata: 0x0124 Timestamp: 33766001 2005-11-22
ECC change: 0x53 Filetbl: 0x0123 Secdata: 0x0122 Timestamp: 33766001 2005-11-22
ECC change: 0x52 Filetbl: 0x0121 Secdata: 0x0120 Timestamp: 33766001 2005-11-22
ECC change: 0x51 Filetbl: 0x011F Secdata: 0x011E Timestamp: 33766001 2005-11-22
ECC change: 0x50 Filetbl: 0x011D Secdata: 0x011C Timestamp: 3B6701BB 2009-11-07
ECC change: 0x4F Filetbl: 0x011B Secdata: 0x0341 Timestamp: 3B62B44D 2009-11-02
ECC change: 0x47 Filetbl: 0x031B Secdata: 0x0340 Timestamp: 3B4EAA19 2009-10-14

Checking secdata:

Searching for recommended

Extracting secdata:
secdata01BA.bin
secdata01B6.bin
secdata01B4.bin
secdata01AF.bin
secdata01AD.bin
secdata01AB.bin
secdata01A9.bin
secdata0191.bin
secdata018F.bin
secdata0124.bin
secdata0122.bin
secdata0120.bin
secdata011E.bin
secdata011C.bin
secdata0341.bin
secdata0340.bin

Extracting filetables:
filetable01BB.bin
filetable01B9.bin
filetable01B5.bin
filetable01B0.bin
filetable01AE.bin
filetable01AC.bin
filetable01AA.bin
filetable0192.bin
filetable0190.bin
filetable018E.bin
filetable0123.bin
filetable0121.bin
filetable011F.bin
filetable011D.bin
filetable011B.bin
filetable031B.bin

Creating patched secdata:
Patchedsecdata01BA.bin
Patchedsecdata01B6.bin
Patchedsecdata01B4.bin
Patchedsecdata01AF.bin
Patchedsecdata01AD.bin
Patchedsecdata01AB.bin
Patchedsecdata01A9.bin
Patchedsecdata0191.bin
Patchedsecdata018F.bin
Patchedsecdata0124.bin
Patchedsecdata0122.bin
Patchedsecdata0120.bin
Patchedsecdata011E.bin
Patchedsecdata011C.bin
Patchedsecdata0341.bin
Patchedsecdata0340.bin

Creating patched filetables:
Patchedfiletable01BBBy01BB.bin
Patchedfiletable01BBBy01B9.bin
Patchedfiletable01BBBy01B5.bin
Patchedfiletable01BBBy01B0.bin
Patchedfiletable01BBBy01AE.bin
Patchedfiletable01BBBy01AC.bin
Patchedfiletable01BBBy01AA.bin
Patchedfiletable01BBBy0192.bin
Patchedfiletable01BBBy0190.bin
Patchedfiletable01BBBy018E.bin
Patchedfiletable01BBBy0123.bin
Patchedfiletable01BBBy0121.bin
Patchedfiletable01BBBy011F.bin
Patchedfiletable01BBBy011B.bin
Patchedfiletable01BBBy031B.bin

Use:
nandpro.exe lpt: -w16 Patchedsecdata0341.bin 1BA 1
nandpro.exe lpt: -w16 Patchedfiletable01BBBy011B.bin 1BB 1

Press ENTER

[boby2pc]

K gotcha here you go but tried this already and no go also when I use secdata scan it recommends 0x11D
mmm Im confused

Looks good. Do 3 things:
1) redump again because You have lot of "Timestamp: 33766001 2005-11-22" entries which means You rebooted without dvd drive connected many times. Plug dvd drive every time You boot.
2) download findsecdata v.0.62 it's more strict about old secdata.bin
3) run findsecdata with -rc 5 option on new dump. If nothing change to the log You should try:

nandpro.exe lpt: -w16 Patchedsecdata0341.bin 1BA 1
nandpro.exe lpt: -w16 Patchedfiletable01BBBy011B.bin 1BB 1

and try HDD installs. If won't work try:

nandpro.exe lpt: -w16 Patchedsecdata0340.bin 1BA 1
nandpro.exe lpt: -w16 Patchedfiletable01BBBy031B.bin 1BB 1

[oxonater]

K mate gotcha thanxs for your help u are correct in for the first few dumps didn't have dvd drive connected at all as worried wires connecting nand would short on the side of the drive chasiss. Will it matter that I have wrote over the nand more than once with  original nand dump last writes where with the dvd drive connected so all gotta do is read out the nand again fingers crossed lol. Does finsecdata need to be in the same directory as nandpro wasn't aware of this will it not function correctly if not. Again thanxs for your time an effort much appriciated regards :PKris.

[boby2pc]

Does finsecdata need to be in the same directory as nandpro wasn't aware of this will it not function correctly if not.

It will work, but it's more comfortable that files You operating on are on the same directory.

[euromp]

Hello, I've been struggling for the past couple of days to sort out this Xbox. It belongs to my friend who is not very technical, therefore he was not able to give me much details like number of updates, when exactly he got banned etc. Findsecdata failed to find a good copy but since there are situations where people manage to uncripple their boxes with manual patching I was hoping that there is still a solution for me. All I know is, that box was banned somehow this year, so probably 2010-02-20 is when it happened. However the most recent entry (highest ECC value) is the one with timestamp 2005-11-22. I am not sure if this was caused by an offline update after the ban occured or maybe I didn't understand everything properly while reading about ECC change values. If 2005-11-22 update is really more recent than 2010-02-20, then it probably also contains a banned secdata.bin, leaving only one more location to look for good secdata.bin (0x0357). Unfortunately according to findsecdata this location is no good. I'm hoping that there are still some options left for me to try. So far I tried the zeroing method on block 347, and then on blocks 347,344,12d,12c but now I understand it couldn't work. I'd be very thankful if someone could have a look at my dump and logs and submit their opinion.

http://consolexperts.net/nand/nand1.rar

------------------------------
FINDSECDATA LOG
------------------------------
C:\Documents and Settings\dr_romanow\Desktop\X360\FindSecDatav0.62>findsecdata n
and1.bin

findsecdata v0.62 2009-12-09 by boby2pc
Controller version 1
Last filetable change: 0x55
ECC change: 0x55 Filetbl: 0x011D Secdata: 0x0348 Timestamp: 33766001 2005-11-22
ECC change: 0x4D Filetbl: 0x0347 Secdata: 0x012B Timestamp: 3C548BAB 2010-02-20
ECC change: 0x49 Filetbl: 0x012A Secdata: 0x0357 Timestamp: 3B3A65B0 2009-09-26

Checking secdata:
0357 containts not 0 values above offset 1024 or zeros below 1024 (overwritten)

Searching for recommended

Extracting secdata:
secdata0348.bin
secdata012B.bin

Extracting filetables:
filetable011D.bin
filetable0347.bin

Creating patched secdata:
Patchedsecdata0348.bin
Patchedsecdata012B.bin

Creating patched filetables:
Patchedfiletable011DBy011D.bin

Use:

Old secdata.bin not found. Console might be not banned, already patched or secda
ta.bin overwritten.
------------------------------

------------------------------
HEx WORKSHOP (secdata.bin find)
------------------------------
LOCATION/TIMESTAMP/BLOCK/POINTING TO

00490210 33766001 11B 0348
00494410 33766001 11C 0348
00498610 33766001 11D 0348
004CE010 3B3A65B0 12A 0357
004D6410 3C548BAB 12C 012B
004DA610 3C548BAB 12D 012B
00D79410 3C548BAB 344 012B
00D85A10 3C548BAB 347 012B
00D8DE10 33766001 349 0348
00D96210 33766001 34B 0348
00D9A410 33766001 34C 0348
00D9E610 33766001 34D 0348
00DA2810 33766001 34E 0348
------------------------------

[oxonater]

Thanxs boby2pc it worked first turned on xbox and ejected tray then turned of dumped the nand and the relevant finsecdata voila I now have access to dump games to the hdd

[an01523]

can somebody have a look at this nand-dump (16MB)?
http://rapidshare.com/files/367706261/nandorig.bin.html
FindSecData have troubles with this one.

Code:

C:\nandpro20b>FindSecData.exe nandorig.bin -rc 15

findsecdata v0.62 2009-12-09 by boby2pc
Controller version 1
Last filetable change: 0x64
ECC change: 0x64 Filetbl: 0x0100 Secdata: 0x0254 Timestamp: 33766001 2005-11-22
ECC change: 0x5C Filetbl: 0x0253 Secdata: 0x0113 Timestamp: 3C279C4E 2010-01-07
ECC change: 0x58 Filetbl: 0x0112 Secdata: 0x033E Timestamp: 3B387894 2009-09-24

Checking secdata:
033E containts not 0 values above offset 1024 or zeros below 1024 (overwritten)

Searching for recommended

Extracting secdata:
secdata0254.bin
secdata0113.bin

Extracting filetables:
filetable0100.bin
filetable0253.bin

Creating patched secdata:
Patchedsecdata0254.bin
Patchedsecdata0113.bin

Creating patched filetables:
Patchedfiletable0100By0100.bin

Use:

Old secdata.bin not found. Console might be not banned, already patched or secda
ta.bin overwritten.

Press ENTER

1. Does "033E containts not 0 values above offset 1024 or zeros below 1024 (overwritten)"  mean, that the SecData in Block 0x033E is overwritten or not overwritten?
If no zeros are above or below, than it is overwriten secdata.bin?

2. And why there are allways so much more FileTables (with -vft command) that all point to a single SecData?

3. FileTable is only the pointer to SecData? One Filetable is in block 0x0112 and one SecData is in the Block above at 0x0113.

1 Block = 4200 Bytes (hex) = 16896 Bytes (dec) = 16,5 KB (dec)
So 16KB are real data and 0,5KB are ECC data?

4. What does ECC change: 0x5C mean? How you can compute it, or it stay somewhere in FileTable?

5. If disconnect Xbox360 from power, it looses time and date settings? And time is set to 22/11/2005 (release date of Xbox 360). So thats why some new FileTable are with date 22/11/2005 and you can not compare the newest date and have to look at "ECC change"?

[boby2pc]

1. Does "033E containts not 0 values above offset 1024 or zeros below 1024 (overwritten)"  mean, that the SecData in Block 0x033E is overwritten or not overwritten?
If no zeros are above or below, than it is overwriten secdata.bin?

2. And why there are allways so much more FileTables (with -vft command) that all point to a single SecData?

3. FileTable is only the pointer to SecData? One Filetable is in block 0x0112 and one SecData is in the Block above at 0x0113.

1 Block = 4200 Bytes (hex) = 16896 Bytes (dec) = 16,5 KB (dec)
So 16KB are real data and 0,5KB are ECC data?

4. What does ECC change: 0x5C mean? How you can compute it, or it stay somewhere in FileTable?

5. If disconnect Xbox360 from power, it looses time and date settings? And time is set to 22/11/2005 (release date of Xbox 360). So thats why some new FileTable are with date 22/11/2005 and you can not compare the newest date and have to look at "ECC change"?

1. Means that secdata at block 033E is overwritten
2. Filetable changes when xbox writes files in flash. secdata.bin is one of them
3. each filetable entry has pointer to block with secdata.bin.
3a. in fact each block consists of 1kb data and 0.5kb spare+ecc info
4. ECC change is in spare data of each small block. NAND controller increases that number when writes new version of filetable.
5. Max ECC change is needed for creating patch. (You don't have propper old secdata.bin then patch was not created).

[an01523]

5. Max ECC change is needed for creating patch. (You don't have propper old secdata.bin then patch was not created).

1. And how FindSecData knows if SecData.bin in my example at 0x0113 and 0x0254 is not propper?

2. So in the output of "Checking secdata:" are listed all the overwritten SecData.bin (multiple lines/rows possible) or just the oldest overwritten one?

[boby2pc]

1. And how FindSecData knows if SecData.bin in my example at 0x0113 and 0x0254 is not propper?

2. So in the output of "Checking secdata:" are listed all the overwritten SecData.bin (multiple lines/rows possible) or just the oldest overwritten one?

1. 0x0113 is later copy of 0x254 and 0x254 is last created by live which assumes that is banned.
2. they are valid but banned.

[Zheez]

Trying to uncripple a friend's box here but if my interpretation of this is correct then there is no valid secdata.bin that can be used (as the oldest one is overwritten) so he's out of luck.  If anyone could confirm my suspicion that'd be great:

Code:

E:\>FindSecData.exe orignand.bin

findsecdata v0.62 2009-12-09 by boby2pc
Controller version 1
Last filetable change: 0x61
ECC change: 0x61 Filetbl: 0x00F7 Secdata: 0x024C Timestamp: 3C79A856 2010-03-25
ECC change: 0x59 Filetbl: 0x024B Secdata: 0x010A Timestamp: 3C79A81B 2010-03-25
ECC change: 0x55 Filetbl: 0x0109 Secdata: 0x0261 Timestamp: 33766001 2005-11-22

Checking secdata:
0261 containts not 0 values above offset 1024 or zeros below 1024 (overwritten)

Searching for recommended

Extracting secdata:
secdata024C.bin
secdata010A.bin

Extracting filetables:
filetable00F7.bin
filetable024B.bin

Creating patched secdata:
Patchedsecdata024C.bin
Patchedsecdata010A.bin

Creating patched filetables:
Patchedfiletable00F7By024B.bin

Use:
nandpro.exe lpt: -w16 Patchedsecdata010A.bin 24C 1
nandpro.exe lpt: -w16 Patchedfiletable00F7By024B.bin 0F7 1

[boby2pc]

there is no valid secdata.bin that can be used (as the oldest one is overwritten) so he's out of luck.

right

[seronoser]

Hello,

I have since October 2009 that was banned by MS which I take the opportunity to install games on the HDD, my bad luck was that in attempting to recover the option to install games on my NAND HDD found was overwritten ...... .

Is there to this day some solution to this situation?

Thank you very much.

In special a boby2pc for your special help.

[boby2pc]

Is there to this day some solution to this situation?

sorry, It's not possible for now.

[seronoser]

Thank you very much for your quick reply.

I will be waiting for yours news.