XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 22, 2013, 02:53:28 PM


Login with username, password and session length


Pages: 1
  Print  
Author Topic: Freeboot Patch file  (Read 1814 times)
RAMBO
Hacker
***
Posts: 56


View Profile WWW
« on: March 30, 2011, 01:00:36 PM »

Hi,

I've been trying to figure out the patches_xenon.bin file and from what I've learned there is a format for each patch line in the file, some for HV and some for Kernel. I am trying to figure out just how to add in my own patch lines? Do the entire patch file need to be recreated? or can I simple split the file and add in my own patch lines and then put it back together? Is there any public program to edit/create the patch files??

Welcome back xboxhacker.
Logged

JTAG hobbiest
Icekiller
Master Hacker
****
Posts: 184


View Profile
« Reply #1 on: March 30, 2011, 01:25:05 PM »

get the first released ever done by freeboot.. (or ikari better yet..) hit has all the details you need.
Logged
RAMBO
Hacker
***
Posts: 56


View Profile WWW
« Reply #2 on: March 31, 2011, 12:12:13 AM »

get the first released ever done by freeboot.. (or ikari better yet..) hit has all the details you need.

Hi, ok so I have it, but my next question is if i create a new patch bin file will it work with fbbuild?
Logged

JTAG hobbiest
nickcas
Master Hacker
****
Posts: 123


View Profile
« Reply #3 on: March 31, 2011, 01:52:42 PM »

get the first released ever done by freeboot.. (or ikari better yet..) hit has all the details you need.

Hi, ok so I have it, but my next question is if i create a new patch bin file will it work with fbbuild?

The patch format did not change between freeboot and fbbuid, so yeah you're fine.
Logged
Deep3r
Member
**
Posts: 25


View Profile
« Reply #4 on: March 31, 2011, 02:09:29 PM »

Just enter you patch line before the closing "FF FF FF FF", at the end of the .bin.

Smiley
Logged
RAMBO
Hacker
***
Posts: 56


View Profile WWW
« Reply #5 on: April 01, 2011, 05:58:09 PM »

why not use kxam to apply patches?

Building and applying patches is really easy and if you fail using kxam patchbuilder you're better off quitting this journey of yours.

I'm not familiar with kxam patch builder, I'll look it up.

I compared the patch bin files from freeboot .02 and the one from fbbuild .11 and they are different sizes, is this because the 12611 dashboard requires more patches for it to work?? Also I wanted to see what patches were in the latest patches bin files could I use IDA Pro to do so?

I noticed too that the 0.02 version has two files the base bin file and the normal bin file I'm assuming that the base is used to create the finial patch bin file using patch lines that I specify. Ok, i'm gonna see if I can break my jtag.
« Last Edit: April 01, 2011, 06:00:13 PM by RAMBO » Logged

JTAG hobbiest
Deep3r
Member
**
Posts: 25


View Profile
« Reply #6 on: April 03, 2011, 03:34:17 PM »

why not use kxam to apply patches?

Building and applying patches is really easy and if you fail using kxam patchbuilder you're better off quitting this journey of yours.

I'm not familiar with kxam patch builder, I'll look it up.

I compared the patch bin files from freeboot .02 and the one from fbbuild .11 and they are different sizes, is this because the 12611 dashboard requires more patches for it to work?? Also I wanted to see what patches were in the latest patches bin files could I use IDA Pro to do so?

I noticed too that the 0.02 version has two files the base bin file and the normal bin file I'm assuming that the base is used to create the finial patch bin file using patch lines that I specify. Ok, i'm gonna see if I can break my jtag.

The format of Kxam builder is great definitely recommended. Cheesy
Yeah you could but if you know the original format of the patches it is much easier, I recommend you open the HV/Kernel in some kind of Hex editor
and patch the offsets using the patch data in the patches before opening in IDA. If you don't the branches will be off.
If you mess patches up as-long as you keep your offsets in the HV/Kernel region you'll be able to boot Xell for a reflash.
Logged
nitramb1991
Member
**
Posts: 24


View Profile
« Reply #7 on: April 04, 2011, 04:21:49 PM »

From what I understand this is the Freeboot patches structure,

Code:
Target Address :1
Number of Patches :2
Patches :3
Terminated/End of Patches : FF FF FF FF

Examples: Patches for Kernel 8955.

#   Disable XEX Signature Check
<====1====> <====2====> <====3====>
00 07 78 4C 00 00 00 01 60 00 00 00

#   Disable PIRS/LIVE Signature Check
<====1====> <====2====> <====3====> <====3====>
00 0F 41 E0 00 00 00 02 38 60 00 01 4E 80 00 20

#   Disable Harddisk Authentication
<====1====> <====2====> <====3====> <====3====>
00 12 37 E0 00 00 00 02 38 60 00 01 4E 80 00 20
« Last Edit: April 04, 2011, 04:23:38 PM by nitramb1991 » Logged
RAMBO
Hacker
***
Posts: 56


View Profile WWW
« Reply #8 on: April 04, 2011, 10:03:01 PM »

Hi,

Using kxam is the easiest way for me, I just need to learn a little PPC and translate the calls I want to patch. This is just something I work on when bored, not a priority.
Logged

JTAG hobbiest
Pages: 1
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM