Hacking the XBOX 360 for Dummies

8/13/2019 Hacking the XBOX 360 for Dummies

http://slidepdf.com/reader/full/hacking-the-xbox-360-for-dummies 1/96

http://www.360mods.net/



Textbook’s Xbox 360 Firmware Tutorial

www.360mods.net

Table of Contents

IntroductionWarningsSamsung or HitaciSamsung !"ening Te Xbox 360 #S$% or #S$& #S$%

Sata'#T(Flas )om"atibilit* +ownloading Te Firmware Xtreme ,oot #aker -S,/ "dating x360sam 1dding (e*ceck Flasing 2our +rie -S,/ Xtreme ,oot #aker -4TFS5+!S )+/ "dating x360sam 1dding (e*ceck Flasing 2our +rie -4TFS5+!S )+/ Xtreme ,oot #aker -Flo""*/

"dating x360sam 1dding (e*ceck Flasing 2our +rie -Flo""*/ #S$& )) Switc #etod -re7uires soldering/ Setting " Te Switc Flasing ,ad Flas #etod -solderless/ Setu" Flasing "grading From 5.x ' %.x -disabling Firm8uard/

Hitachi !"ening Te Xbox 360 #ode, Slax )+ $9Wire Trick )onnectiit* (its






Hotswa" #ode, Indicators +etecting Te +rie in Windows Installing :)#+ Here; <owerto*

+ownloading Te Firmware =estoring Te +rie -i> "reiousl* >lased/ Flasing Te +rie 00?&F( InstructionsMaking Backups of Your Xbox 360 ames sing te Samsung drie sing a (reon drie Wx=i""er #etod ,itsetting ,urning sing I#8,urn

,urning sing )lone)+






%arnings

Te Xbox 360 >irmware ack ma* be illegal under te +igital

#illennium )o"*rigt 1ct -nited States/ te Duro"ean nion)o"*rigt +irectie -Duro"e/ or oter co"*rigt laws in *our countr*.+ownloading installing and using tis >irmware could "otentiall* beillegal. 2ou are doing so at *our own risk.

)o"*ing or downloading games tat *ou ae not legall*"urcased or own is illegal in all countries. Tis iolates not onl*laws in *our own countr* but international co"*rigt laws as well.Te "ur"ose o> te >irmware ack is >or making backu" co"ies o>games tat *ou legall* own. So>tware "irac* is illegal carries a uge

"enalt* i> conicted is eticall* wrong and urts te gamecom"anies. Su""ort te game deelo"ers b* "urcasing te games*ou "la*. 2ou wouldn’t work >or >ree would *ouE

sing tis >irmware ack and running *our backu"s on XboxAie iolates te Xbox Aie Terms o> Serice agreement tat *ouagreed to wen *ou signed u". #icroso>t witolds te rigt toterminate te Xbox Aie serice >rom *ou >or an* reason at an* "ointwit no warning and no re>unds. Wit acks on te original Xbox

te Xbox was banned "ermanentl* >rom Xbox Aie. Te same riska""lies to te Xbox 360. Sim"l* "ut i> *ou are worried about XboxAie do not install tis >irmware modi>ication 9 or "urcase two Xbox360 s*stems. Wit tat said at tis time nobod* as been banned>or using te >irmware ack but *ou use it at *our own risk andsould ex"ect to be banned one da*.

"grading *our Xbox 360 >irmware re7uires *ou to o"en *ourXbox 360 o"en *our <) and connect te Xbox 360 ++9=!# drieto *our com"uter ia a S1T1 cable. Tis will oid *our Xbox 360

warrant*. Tere is no wa* to >las te drie >irmware witout o"eningte Xbox 360. 1lso tis >irmware u"grade is not recommended >ornoices. 1 tecnical leel o> com"uter knowledge is re7uired wit anunderstanding o> ow to con>igure *our <) ,I!S use #S9+!S orte #S9+!S command "rom"t and te use o> )+'++ so>tware. I>a>ter reading troug tis tutorial *ou still do not understand itcom"letel* get an ex"erienced installer to do te @ob >or *ou.








MS&' or MS&(

Tere are currentl* two ersions o> te Samsung drie. Te

ardware is identical but tere are di>>erent >irmware reisions. Te#S$% is te easier drie to >las. Te #S$& can be >lased butdi>>erent :tricks; need to be used in order >or #T(Flas to read orwrite to te drie. !nce *ou ae *our Xbox 360 o"ened ceck testicker to see i> *our drie is #S$% or #S$& and >ollow teinstructions below. I> *ou ae an #S$% drie @ust continue reading.I> *ou ae an #S$& drie click ere.




S)T)*MT+,lash Compatibilit-

#T(Flas is te "rogram used to >las te Samsung dries. It is anolder "rogram and because o> tis it does not work wit all S1T1

ci"sets. 2ou must >irst >igure out i> *ou een ae S1T1 "orts on*our moterboard. S1T1 connections are A9sa"ed and ae ?contacts.

I> *ou do not ae S1T1 *ou must "urcase a <)I S1T1 card. ForSamsung dries te most com"atible card is one wit te I1 65$ ci"set.

I> *ou do ae onboard S1T1 alread* on *our <) moterboard *ouwill ae to >igure out wat ci"set it is and com"are it to tiscom"atibilit* cart. 2ou can determine *our S1T1 ci"set b* reading

te manual tat came wit *our moterboard or looking u" *ourmoterboard s"ecs on te manu>acturer’s website or doing researco> *our own -8oogle/.2ou can also determine *our S1T1 ci"set b* doing te >ollowing

Start J =un J msin>o3$ J )om"onents J Storage J S)SI.

http://www.360mods.net/Forums/viewtopic/t=155.html

http://www.google.com/






2ou will want to see i> tere is a S1T1 controller listed usuall*containing Serial 1T1 or =1I+ in te name. I> *ou see @ustS)SI'=1I+ Host )ontroller tis is not te ci"set it is te de>aultWindows drier. I> *ou see 1XS)SI in te list tis is most likel* an

image drie "rogram on *our <) like +aemon Tools or 1lcool $0K.

I> *ou do not see *our S1T1 ci"set listed in S)SI go to Storage JI+D and see i> it is in tere some are. =emember *ou’re looking >orSerial 1T1 =1I+ or in some cases ltra 1T1. #$T I+D.

Onboard SATAMotherboard Chipset Requires Hex

EditingMTKFlash?

Wors? Co!!ents

Abit "F#$S%&" nFor'e% "o (es Must be !apped as )*E ports +

and ,

Asus A-"./ S)0 +11, (es (es Reported 2oring onl3 i4 3ou

4lash the 'hip to non$RA)* 5)OS?

A006 7)A 7T -%.1 (es (es Tested b3 Matt Tra'3

A006 8ro!ise Fastra'

+#9

*oesn:t Wor "o Tested on AS;S A#7-/

Motherboard

Asus 8,C-<<e$

deluxe

8ro!ise

=unno2n in4o>

"o (es

A006 )ntel )CH9 "o (es Tested 2ith AS;S 8. A*%

8re!iu!

ECS AM* +

RS,-<$M

AT) /press %<< *oesn:t Wor "o

A006 )ntel )CH. "o (es

A006 )ntel )CH.R "o (es

? )ntel )CH# (es (es -%-<1&5 @ &R @ &H )CH#

MTKFlash

Marell )CH# needs a di44erentMTKFlash

&igab3te &A$

-1,.8$0

)ntel ,.80

Express

"o (es

&igab3te &A$

K-"SC$+

nFor'e+ "o (es

A006 "F,SAT1

nFor'e ,

(es (es

ECS K7%

Extre!e

S)S9, "o (es Must 'onne't to Sata port + or ,B

ports 1 and % 2ill not 2or

A006 S)0 +11% *oesn:t Wor "o

A006 S)0 +1+% *oesn:t Wor "o

MS) K#"%

*elta%

8ro!ise *oesn:t Wor "o

MS) K#"%

*elta%

nFor'e% (es (es

http://rapidshare.de/files/21560201/MTKFLASH.exe.html







A006 7)A 7T -%+# "o (es So!e people reported su''ess onl3

2hen hex$editedB tr3 one o4 these

MTKFlash1 MTKFlash%

A006 7)A 7T 9,1< (es (es Tr3 !anual hex$edit 4irstB or tr3one o4 these MTKFlash1

MTKFlash%

7)A Epia S8Mini$iT/

7)A E8)A S8 (es (es MTKFlash

8C) SATA CAR*SChipset Requires Hex$

Editing MTKFlash?

Wors? Co!!ents

S)0 +11% *oesn:t Wor "o

S)0 +1%% *oesn:t Wor "o

S)0 +11.A *oesn:t Wor "o

S)0 +.1% *oesn:t Wor "o

S)0 +11, *oesn:t Wor "oAdapte' ASH$1%<.SA

=S)0 +11%>

*oesn:t Wor "o

A0) M.%-+ (es Ma3be "ot re'o!!endedB &ere!ia sa3s it

hangs during 2riting

A0) M.%- (es (es

Maxtor SATA =8ro!ise> *oesn:t Wor "o

Ro'etRA)* 1.%< (es (es Rather expensie

Ro'etRA)* 19,< (es (es Rather expensie

7)A 7T -%+# "o (es *i44i'ult to 4ind a 8C) Sata 'ard

2ith this 'hipset

7)A 7T 9,%10 (es (es This is the 'ard to get CheapB

2idel3 aailableB 2ith a pre$hex$

edited MTKFlash 4or do2nloadMTKFlash1 MTKFlash%

7)A 7T 9%+#R (es (es (ou 'an hex edit !anuall3 or tr3

the lins aboe 4or the 9,%10

7)A 7T 9,%1A (es (es (ou 'an hex edit !anuall3 or tr3

the lins aboe 4or the 9,%10

"e2lin "0$

8C)SATA)E/T

"o ? (es Thans to ThraxedB best 'ard to bu3

in ;K

"oteD Een i4 3our 'hipset is listed as not requiring that MTKFlash be hexeditedB it is still probabl3 a good idea to do so ;se /tre!e 5oot Maer to !ae a 'usto! hexedited

MTKFlash spe'i4i'all3 4or 3our SATA 'hipset

http://rapidshare.de/files/20676748/MTKFLASHvia.zip.html


http://rapidshare.de/files/22716234/mtk183c_VIA.rar.html



http://www.xboxrepair.plus.com/raincoat/MTKFLASHepiaSP.rar

http://www.newegg.com/Product/Product.asp?Item=N82E16815124022



http://svp.co.uk/products-solo.php?pid=1248







http://www.xboxrepair.plus.com/raincoat/MTKFLASHepiaSP.rar

http://www.newegg.com/Product/Product.asp?Item=N82E16815124022







.o/nloa"ing The ,irm/are

Te acked >irmware ma* be illegal under te +#)1 D)+ oroter local national and international co"*rigt laws. Te acked

>irmware contains "ortions o> #icroso>t’s co"*rigted >irmware andtere>ore cannot be linked to or downloaded "ublicl*. +o not re7uestte >irmware on an* >orums because it is against most >orum rulesand *ou will most likel* be banned. Te best metod to obtain te>irmware is b* using Xbins. Xbins is an I=) cannel and FT< serertat osts Xbox and Xbox 360 mod >iles omebrew "rograms anddeelo"ment so>tware.

I> *ou ae neer used Xbins be>ore te easiest metod is to use8round Lero’s automated Xbins downloader.

+ownload

+ownload te sel>9extracting arcie and run te xbins.exe >ile. It willask *ou were *ou want to sae te >iles coose *our deskto". 4owgo into te :Xbins; >older on *our deskto" and run te .bat >ile. Te"rogram will automaticall* connect to te I=) cannel message tebot and connect to te FT< serer. Wen >ileMilla o"ens u" *ousould see te local Xbins >older on *our le>t side and a >ew >olders

on *our rigt side -tis is te FT< serer/.

http://www.360mods.net/Downloads/details/id=29.html





Te acked >irmware can be >ound in

'X,!X 360'>irmware'acked >irmware'Tosiba9Samsung TS9HG53'

Sim"l* drag te :Xtreme%$.rar; >ile oer to te le>t side o> FileLilla andwait >or it to >inis downloading. 2ou can use Win=1= or ?9Mi" toextract te =1= arcie.

http://www.rarlab.com/rar/wrar362.exe

http://easynews.dl.sourceforge.net/sourceforge/sevenzip/7z442.exe


http://www.rarlab.com/rar/wrar362.exe

http://easynews.dl.sourceforge.net/sourceforge/sevenzip/7z442.exe



Xtreme Boot Maker 1SB2

Te >ollowing "rocess will set u" a bootable S, >las driewit eer*ting necessar* to read *our original >irmware and write te

acked >irmware onto te drie. We will use Xtreme ,oot #aker toex9edit #T(Flas >ormat te S, drie and co"* te >iles onto it.

First *ou need to make sure #icroso>t .4DT Framework $ isinstalled. It is needed >or Xtreme ,oot #aker to run. I> *ou do notae tis installed *ou will be "rom"ted to download and install it.

Second *ou need to make sure te driers >or *our S1T1 ci"set areinstalled. se eiter te )+ tat came wit *our com"uter'S1T1card or use te manu>acturer’s web site to install te driers.

!nce *ou ae tat taken care o> *ou can download and installXtreme ,oot #aker .

http://filehippo.com/download_dotnet_framework_2/

http://www.x-projects.org/index.php?name=Downloads&file=details&id=1






. Hit te !"en button to browse *our com"uter and select *our>irmware. 2ou sould select xtrem%$a.bin xtrem%$b.binxtrem%$c.bin or xtrem%$d.bin >rom te arcie *ou downloadedo>> Xbins.

Wit Xtreme %.$1 backu"s are alwa*s read at $x s"eed te sames"eed as originals. Te read s"eeds o> original discs are una>>ected.Wit te >aster reading s"eed te drie is signi>icantl* louder andma* ae "roblems reading cea"er media but *ou ae te bene>ito> sligtl* >aster loading times.

Wit Xtreme %.$, backu"s are alwa*s read at 5x s"eed. Te reads"eeds o> original discs are una>>ected. Wit te slower readings"eed te drie is 7uieter ma* read cea"er media better but as

sligtl* longer loading times.

Wit Xtreme %.$) te de>ault backu" read s"eed is $x. Wen anoriginal disc is "laced in te drie all subse7uent backu"s will beread at 5x. =ead s"eed o> original game discs will remain una>>ected.=estart te s*stem i> *ou wis to read backu"s at $x.

Wit Xtreme %.$+ te de>ault backu" read s"eed is 5x. Wen anoriginal disc is "laced in te drie all subse7uent backu"s will be

read at $x. =ead s"eed o> original game discs will remainuna>>ected. =estart te s*stem i> *ou wis to read backu"s at 5x.

$. Select te ceckbox :se custom #T(Flas.;3. Select *our S1T1 ci"set >rom te dro"9down list.5. )lick :+etect I+ N I'!.; It sould in"ut some caracters in te

+eice I+ and I'! <ort boxes wen it >inises.%. Select *our Target +rie as te S, Flas +rie6. )eck te box labeled :Format and #ake ,ootable;?. Select :<re"are +rie.; Wait until te "rogram >inises.




1p"ating X360S)M an" +e-check

Te current ersion o> Xtreme ,oot #aker includes ersion 0.5 o>

X360S1#. Te latest ersion is 0.6 and includes a >eature tatco"ies te drie ersion string. Tis is necessar* >or aoiding teerror code 66. Te newest ersion o> X360S1# will make teacked >irmware re"ort as wateer drie ersion *our original>irmware was.

In addition to tis u"date )aster5$0 wrote a dos9based "rogramnamed (e*ceck tat will ceck *our drie ke* o> te original>irmware as well as te acked >irmware tat x360sam creates anderi>* tat te* matc. Tis is im"ortant because some "eo"le were

aing :"artial; reads o> te >irmware and ended u" bricking teirdries.

2ou can download bot te u"dated x360sam and ke*ceck in oneMi" arcie ere.

Sim"l* co"* te tree >iles >rom te Mi" arcie to *our S, >lasdrie. I> it asks *ou i> *ou want to oerwrite x360sam.exe andsamread.bat select 2es.






,lashing Your .rie 1SB2

4ea"ing The $riginal ,irm/are

<ower o>> bot *our <) and Xbox 360. #ake sure te Xbox 360"ower cable and ideo cable are bot "lugged in. 2ou do not need toook u" te ideo to a T but te cable does ae to be "lugged intote Xbox 360. nook te small black S1T1 cable connecting teXbox 360 ++ drie to te moterboard. Hae a long S1T1 cableconnected to *our <) but leae it un"lugged >rom te Xbox 360drie.

-Te "icture sows te S1T1 cable connected leae it un"lugged

>rom te drie/

+isconnect all oter dries in *our <). 2ou sould disconnect botard dries and ++ dries so te* do not accidentall* get >lasedwit te acked >irmware. +isabling tese deices in *our ,I!S ma*not work so "*sicall* unooking tem is te best solution.




Turn on *our <) and Xbox 360 at te same time and boot *our

<) >rom te S, >las drie into +!S. Wen *ou reac te +!Scommand "rom"t "lug te S1T1 cable into te Xbox 360 ++ drie.

Type in the following command, using your Xbox 360 serial numberfound on the back of the Xbox 360 case.

(e!ll use the serial number "#3$%6& "#3$% as an example'




S1#=D1+ $35%6? $35% O"ress enterP

I> *ou get an error like :+irector* alread* exists; or :#(+I= >ailedQ;

don’t worr*. X360S1# is tr*ing to create a new >older but *oualread* ae one so tere’s no need to.

#T(Flas sould run and *our S1T1 controller sould be listed. I>*ou see an item in te list named :XT=D#D; coose tat. Tis is not*our S, >las drie as some "eo"le were guessing. It is actuall**our S1T1 controller. Xtreme ,oot #aker will name it tis wen itcreates te #T(Flas. Select *our S1T1 controller and it souldmake a backu" o> *our original >irmware. Ten *ou will see X360 "o"u" reall* >ast. 1>ter it is done creating te acked >irmware it will gie

*ou te next instructions

:4ow un"lug te S1T1 cable and "ower9c*cle te <) and ++ driebe>ore running S1#H1)( $35%6? $35%;

So do @ust tat. n"lug te S1T1 cable >rom te 360 ++ drie and"ower o>> te Xbox 360 ten te <).




,lashing The Hacke" ,irm/are

Turn on *our <) and Xbox 360 at te same time and boot *our <)>rom te S, >las drie into +!S. Wen *ou reac te +!S

command "rom"t "lug te S1T1 cable into te Xbox 360 ++ drie.

Type in the following command, using your Xbox 360 serial numberthat you used with the )*+)- command.

S1#H1)( $35%6? $35% O"ress enterP

#T(Flas sould run and *our S1T1 controller sould be listed.Select *our S1T1 controller and it will >las te drie wit *ouracked >irmware. It sould >las 5 banks. Te 5t bank ma* sa*

someting like +atasum tis is normal. Wen it is done >lasingun"lug te S1T1 cable >rom te 360 ++ drie "ower o>> te Xbox360 and "ower o>> *our <). =econnect te 360 ++ drie to te360 moterboard and test it.

Backup Your $riginal ,irm/are5

,oot into Windows. <lug in *our S, drie and >ind *our orig.bin inte ,1)(<S >older. Tis is *our Xbox 360 drie >irmware and

needs to be ke"t sa>eR #ake a co"* o> te >ile. Ten make anoterone on anoter drie. Ten make anoter somewere else. Dmail itto *oursel>. 2ou get te dri>t.




Xtreme Boot Maker #T,S.$S C.2

Te >ollowing "rocess will set u" an 4TFS9mountable boot )+so tat *ou can use *our com"uter’s ard drie to >las *our Xbox

360 >irmware. We will use Xtreme ,oot #aker to ex9edit #T(Flasand co"* te >iles to *our ard drie.










Wit Xtreme %.$1 backu"s are alwa*s read at $x s"eed te sames"eed as originals. Te read s"eeds o> original discs are una>>ected.Wit te >aster reading s"eed te drie is signi>icantl* louder andma* ae "roblems reading cea"er media but *ou ae te bene>ito> sligtl* >aster loading times.

Wit Xtreme %.$, backu"s are alwa*s read at 5x s"eed. Te reads"eeds o> original discs are una>>ected. Wit te slower readings"eed te drie is 7uieter ma* read cea"er media better but as

sligtl* longer loading times.

Wit Xtreme %.$) te de>ault backu" read s"eed is $x. Wen anoriginal disc is "laced in te drie all subse7uent backu"s will beread at 5x. =ead s"eed o> original game discs will remain una>>ected.=estart te s*stem i> *ou wis to read backu"s at $x.

Wit Xtreme %.$+ te de>ault backu" read s"eed is 5x. Wen anoriginal disc is "laced in te drie all subse7uent backu"s will be

read at $x. =ead s"eed o> original game discs will remainuna>>ected. =estart te s*stem i> *ou wis to read backu"s at 5x.


+eice I+ and I'! <ort boxes wen it >inises.%. Select *our Target +rie as te ard drie6. Select :<re"are +rie.; Wait until te "rogram >inises.

+ownload te 4TFS5+!S IS! and burn it to a blank )+9=using an* recording so>tware ca"able o> burning IS! >iles. -I#8,urn is a nice >ree "rogram/

http://www.360mods.net/tutorial/NTFSDOS.iso

http://fileforum.betanews.com/detail/ImgBurn/1128426215/1


http://www.360mods.net/tutorial/NTFSDOS.iso

http://fileforum.betanews.com/detail/ImgBurn/1128426215/1





,lashing Your .rie #T,S.$S2



-Te "icture sows te S1T1 cable connected leae it un"lugged>rom te drie/

+isconnect all oter dries in *our <). 2ou sould disconnect botard dries and ++ dries so te* do not accidentall* get >lasedwit te acked >irmware. +isabling tese deices in *our ,I!S ma*not work so "*sicall* unooking tem is te best solution. !>course since *ou will ae to use one o> te <) ++ dries to boot>rom te 4TFS5+!S )+ *ou sould leae tis drie connected butdisconnect all oters.




Turn on *our <) and Xbox 360 at te same time wit teS1T1 cable still disconnected. ,oot *our <) >rom te 4TFS5+!S)+. 1>ter a wile it sould sa*

elect from *enu /0"#3, or press /1T+ 2 inglestepping (4' is5 7




Hit te Dnter ke* and *ou sould see an 4TFS >or +!S logo screenwit a disclaimer. !n tis screen "lease notice *our drie letter tatas been mounted at te to". 2ou will need to know tis wen t*"ingin commands. It is normall* not assigned te same drie letter as

Windows doesB it is usuall* a letter a>ter. #* Windows ) "artition is+ in 4TFS5+!S >or exam"le.

Te disclaimer asks *ou i> *ou are going to use tis >or "riate usageonl* "lease t*"e in :2es; witout te 7uotes and it te Dnter ke*.

+ O"ress enterP use te drie letter *our ard drie was giencd X,F O"ress enterP

1t tis "oint "lug te S1T1 cable into te Xbox 360 ++ drie.



S1#=D1+ $35%6? $35% O"ress enterP




I> *ou get an error like :+irector* alread* exists; or :#(+I= >ailedQ;don’t worr*. X360S1# is tr*ing to create a new >older but *oualread* ae one so tere’s no need to.

#T(Flas sould run and *our S1T1 controller sould be listed. I>*ou see an item in te list named :XT=D#D; coose tat. Tis is not*our S, >las drie as some "eo"le were guessing. It is actuall**our S1T1 controller. Xtreme ,oot #aker will name it tis wen itcreates te #T(Flas. Select *our S1T1 controller and it souldmake a backu" and ten *ou will see X360 "o" u" reall* >ast. 1>ter itis done creating te acked >irmware it will gie *ou te nextinstructions

:4ow un"lug te S1T1 cable and "ower9c*cle te <) and ++ drie

be>ore running S1#H1)( $35%6? $35%;

So do @ust tat. n"lug te S1T1 cable >rom te 360 ++ drie and"ower o>> te Xbox 360 and ten *our <).

4ote Some "eo"le ma* ae trouble reading te >irmware were itgets to 0K ten sto"s and sa*s Inalid !"code. Tr* making a newsmaller "artition on *our ard drie around gb in siMe. For somereason 4TFS5+!S does not su""ort all dries wit 3$gb or larger

"artitions. 2ou will ae to run Xtreme ,oot #aker again and mountte new small "artition ten run te S1#=D1+ command again.





<ower on *our Xbox 360 and *our <) at te same time leaing teS1T1 cable disconnected. ,oot *our <) >rom te 4TFS5+!S )+.

+o te same tings as be>ore it Dnter at te singleste""ing "rom"tt*"e 2es and it enter at te "riate usage disclaimer ten mount*our drie and use te command cd X,F to cange to te X,Fdirector*. Wen *ou’re back into +!S "lug te S1T1 cable backinto te Xbox 360 ++ drie.


S1#H1)( $35%6? $35% O"ress enterP

#T(Flas sould run and *our S1T1 controller sould be listed.Select *our S1T1 controller and it will >las te drie wit *ouracked >irmware. It sould >las 5 banks. Te 5t bank ma* sa*someting like +atasum it is normal. Wen it is done >lasingun"lug te S1T1 cable >rom te 360 ++ drie "ower o>> te Xbox360 and "ower o>> *our <). =econnect te 360 ++ drie to te360 moterboard and test it.


,oot into Windows. 8o to te ) drie and >ind *our orig.bin in te,1)(<S >older. Tis is *our Xbox 360 drie >irmware and needs tobe ke"t sa>eR #ake a co"* o> te >ile. Ten make anoter one onanoter drie. Ten make anoter somewere else. Dmail it to*oursel>. 2ou get te dri>t.




Xtreme Boot Maker ,lopp-2

uick warning about >lo""ies. #ore and more "eo"le latel* aebeen bricking teir Samsung dries. Te >lo""* disk is deciding to

die out rigt in te middle o> a >las. Sometimes te "erson is luck*and te bad >las recoer* metod can be used to re>las te drie.#an* "eo"le ae not been so luck*. Te onl* wa* to >ix te driewen te bad >las recoer* metod will not work is b* o"ening te++ drie remoing te e"ox* on te >irmware ci" desoldering teci" and re>lasing it externall* ia a "rogrammer. Flo""ies are oldtecnolog* >or a reason. Te* are er* unreliable. <lease tr* tore>rain >rom using a >lo""*. I> *ou can use a bootable S, stick orburn an 4TFS5+!S )+ do tat instead. I> *ou absolutel* must usea >lo""* use a new oneR

Te >ollowing "rocess will set u" a >lo""* disk wit eer*tingnecessar* to read *our original >irmware and write te acked>irmware onto te drie. We will use Xtreme ,oot #aker to ex9edit#T(Flas >ormat te >lo""* disk and co"* te >iles onto it.











read at 5x. =ead s"eed o> original game discs will remain una>>ected.=estart te s*stem i> *ou wis to read backu"s at $x.

Wit Xtreme %.$+ te de>ault backu" read s"eed is 5x. Wen an

original disc is "laced in te drie all subse7uent backu"s will beread at $x. =ead s"eed o> original game discs will remainuna>>ected. =estart te s*stem i> *ou wis to read backu"s at 5x.


+eice I+ and I'! <ort boxes wen it >inises.%. Select *our Target +rie as 16. )eck te box labeled :Format and #ake ,ootable;

?. Select :<re"are +rie.; Wait until te "rogram >inises.




1p"ating X360S)M an" +e-check

Te current ersion o> Xtreme ,oot #aker includes ersion 0.5 o>X360S1#. Te latest ersion is 0.6 and includes a >eature tat

co"ies te drie ersion string. Tis is necessar* >or aoiding teerror code 66. Te newest ersion o> X360S1# will make teacked >irmware re"ort as wateer drie ersion *our original>irmware was.

In addition to tis u"date )aster5$0 wrote a dos9based "rogramnamed (e*ceck tat will ceck *our drie ke* o> te original>irmware as well as te acked >irmware tat x360sam creates anderi>* tat te* matc. Tis is im"ortant because some "eo"le wereaing :"artial; reads o> te >irmware and ended u" bricking teir

dries.

2ou can download bot te u"dated x360sam and ke*ceck in oneMi" arcie ere.

Sim"l* co"* te tree >iles >rom te Mi" arcie to *our >lo""* disk. I>it asks *ou i> *ou want to oerwrite x360sam.exe and samread.bat select 2es.






,lashing Your .rie ,lopp-2



-te "icture sows te S1T1 cable connected leae it un"lugged>rom te drie/

+isconnect all oter dries in *our <). 2ou sould disconnect botard dries and ++ dries so te* do not accidentall* get >lasedwit te acked >irmware. +isabling tese deices in *our ,I!S ma*not work so "*sicall* unooking tem is te best solution.




Turn on *our <) and Xbox 360 at te same time and boot *our

<) >rom te >lo""* disk into +!S. Wen *ou reac te +!Scommand "rom"t "lug te S1T1 cable into te Xbox 360 ++ drie.






S1#=D1+ $35%6? $35% O"ress enterP

I> *ou get an error like :+irector* alread* exists; or :#(+I= >ailedQ;

don’t worr*. X360S1# is tr*ing to create a new >older but *oualread* ae one so tere’s no need to.

#T(Flas sould run and *our S1T1 controller sould be listed. I>*ou see an item in te list named :XT=D#D; coose tat. Tis is not*our S, >las drie as some "eo"le were guessing. It is actuall**our S1T1 controller. Xtreme ,oot #aker will name it tis wen itcreates te #T(Flas. Select *our S1T1 controller and it souldmake a backu" and ten *ou will see X360 "o" u" reall* >ast. 1>ter itis done creating te acked >irmware it will gie *ou te next

instructions


So do @ust tat. n"lug te S1T1 cable >rom te 360 ++ drie and"ower o>> te Xbox 360.





=eboot *our <) back into +!S "ower on *our Xbox 360 and "lugte S1T1 cable back in wen *ou get to +!S.


S1#H1)( $35%6? $35% O"ress enterP

#T(Flas sould run and *our S1T1 controller sould be listed.Select *our S1T1 controller and it will >las te drie wit *ouracked >irmware. It sould >las 5 banks. Te 5t bank ma* sa*someting like +atasum it is normal. Wen it is done >lasing

un"lug te S1T1 cable >rom te 360 ++ drie "ower o>> te Xbox360 and "ower o>> *our <). =econnect te 360 ++ drie to te360 moterboard and test it.


,oot into Windows and insert *our >lo""* disk. Find *our orig.bin inte ,1)(<S >older. Tis is *our Xbox 360 drie >irmware andneeds to be ke"t sa>eR #ake a co"* o> te >ile. Ten make anoter

one on anoter drie. Ten make anoter somewere else. Dmail itto *oursel>. 2ou get te dri>t.




MS&( !nstructions

4ewer Xbox 360 s*stems ae been si""ing wit Samsungdries wit a newer >irmware. Tis >irmware #S$& as certain

lockout routines and can not be normall* >lased ia #T(Flas likean #S$% can. Tere are a cou"le workarounds to get te drie>lased. Te )) switc metod re7uires *ou to o"en u" te driedesolder a resistor and use a switc or wires to read'write to tedrie. Te ,ad Flas =ecoer* metod does not re7uiredesoldering'soldering but will onl* work wit I1 ci"sets. Te"re"aration >or >lasing an #S$& drie is te same as i> *ou were>lasing an #S$%. Te onl* di>>erence is te actual >lasing.

7reliminar- Setup -same as #S$%/

. )eck te S1T1'#T(Flas )om"atibilit* Aist$. +ownload Te Hacked Firmware3. se Xtreme ,oot #aker to "re"are a >lo""*'S,'4TFS)+-instructions >or tese are in te #S$% tutorial/




,lashing an MS&( 1sing The 8CC S/itch Metho"not for noobs9 re:uires "esol"ering of a small smt resistor2

!"en u" *our drie and desolder te middle )) resistor

-resistor =50&/ like in te >ollowing "icture

Wire u" a sim"le S<ST toggle'slide switc -or use wires/ to one o>te blue locations and te oter to te onl* red location. Set teswitc to :!>>.;

Since *ou alread* ae te drie a"art and now ae a switcinstalled on it it’s "robabl* easier to >las te <), out o> te ++drie. Tis is wat xboxto did in te >ollowing "icture. Uust makesure *ou su""l* "ower to te board troug te Xbox 360 and makesure *ou still ae te ideo cables ooked u" to te Xbox 360.








<ower o>> bot *our <) and Xbox 360. #ake sure te Xbox 360"ower cable and ideo cable are bot "lugged in. 2ou do not need to

ook u" te ideo to a T but te cable does ae to be "lugged intote Xbox 360. nook te small black S1T1 cable connecting teXbox 360 ++ drie to te moterboard. Hae a long S1T1 cableconnected to *our <) but leae it un"lugged >rom te Xbox 360drie.

+isconnect all oter dries in *our <). 2ou sould disconnect botard dries and dd dries so te* do not accidentall* get >lasedwit te acked >irmware. +isabling tese deices in *our ,I!S ma*not work so "*sicall* unooking tem is te best solution.

Turn on *our <) and Xbox 360 at te same time and boot *our <)>rom te S,'>lo""*'4TFS5+!S into +!S. Wen *ou reac te+!S command "rom"t "lug te S1T1 cable into te Xbox 360 ++drie.


S1#=D1+ XXXXXXX 22222 using *our Xbox 360 serial number 5 .o not hit enter -et 5 -leae te S1#=D1+ command u" tere/

Flick *our )) switc to :on; -or cross *our wires/ and ten *ou canit enter >or te S1#=D1+ command.

It sould dis"la* *our S1T1 ci"set. Select *our ci"set and itsould read and dum" *our >irmware.

1>ter te >irmware is dum"ed X360S1# creates te acked >irmware

and gie *ou te next instructions








=eboot *our <) back into +!S "ower on *our Xbox 360 and "lugte S1T1 cable back in wen *ou get to +!S.


S1#H1)( $35%6? $35%5 .o not hit enter -et 5 -leae te S1#H1)( command u" tere/

Flick *our )) switc to :on; -or cross *our wires and old tem/ andten *ou can it enter >or te S1#H1)( command.

#T(Flas sould run and *our S1T1 controller sould be listed.Select *our S1T1 controller and it will >las te drie wit *ouracked >irmware. It sould >las 5 banks. Te 5t bank ma* sa*someting like +atasum it is normal. Wen it is done >lasingun"lug te S1T1 cable >rom te 360 ++ drie "ower o>> te Xbox360 and "ower o>> *our <). =econnect te 360 ++ drie to te360 moterboard and test it.


,oot into Windows and insert *our >lo""*'S, or go to te ) drie.Find *our orig.bin in te ,1)(<S >older. Tis is *our Xbox 360drie >irmware and needs to be ke"t sa>eR #ake a co"* o> te >ile.Ten make anoter one on anoter drie. Ten make anotersomewere else. Dmail it to *oursel>. 2ou get te dri>t.




,lashing an MS&( 1sing the Ba" ,lash 4ecoer- Metho"-tis metod is easier and sa>er tan te )) metod/

ideo Tutorial Here

=e7uirements9 I1 ci"set sim"l* will not work >or oter ci"sets9 4eed to be able to "ower o>> te drie and "ower it back on.

=ecommend using te console to "ower te drie or teXecuter )onnectiit* (it $ -wic as a "ower switc/.

9 4eed to use te 'sata switc in te #T(Flas command or tedrie will not sow u"

http://www.360mods.net/News/article/sid=63.html








Setup

se Xtreme ,oot #aker to "re"are *our S,'>lo""*') wit tecorrect >iles. In order to use te bad9>las recoer* metod select

te two ceckboxes in te middle >or #S$& ,ad Flas )om"atibilit*and >or enabling ,oke’s Hexedit >or detection o> a single drie.



+eice I+ and I'! <ort boxes wen it >inises.%. Select te ceckbox >or #S$& ,ad Flas )om"atibilit*.6. 1""l* ,oke’s <atc >or #S$& +ries?. Select *our Target +rie as te S, >lo""* or ) drie.




&. )eck te box labeled :Format and #ake ,ootable;G. Select :<re"are +rie.; Wait until te "rogram >inises.







<ower o>> bot *our <) and Xbox 360. #ake sure te Xbox 360"ower cable and ideo cable are bot "lugged in. 2ou do not need to

ook u" te ideo to a T but te cable does ae to be "lugged intote Xbox 360. nook te small black S1T1 cable connecting teXbox 360 ++ drie to te moterboard. Hae a long S1T1 cableconnected to *our <) but leae it un"lugged >rom te Xbox 360drie.

-Te "icture sows te S1T1 cable connected leae it un"lugged>rom te drie/

+isconnect all oter dries in *our <). 2ou sould disconnect bot

ard dries and ++ dries so te* do not accidentall* get >lasedwit te acked >irmware. +isabling tese deices in *our ,I!S ma*not work so "*sicall* unooking tem is te best solution.

Turn on *our <) and Xbox 360 at te same time and boot *our <)>rom te >lo""* disk into +!S. Wen *ou reac te +!S command"rom"t "lug te S1T1 cable into te Xbox 360 ++ drie.

Type in the following command, using your Xbox 360 serial number

found on the back of the Xbox 360 case.

S1#=D1+ XXXXXXX 22222 using *our Xbox 360 serial number

<ress Dnter

It sould dis"la* *our S1T1 ci"set. .$ #$T select te "ort *et.Aeae it at te :menu.;

Wile at #T(Flas’s "ort selection menu "ower o>> te Xbox 360.

Select te "ort tat te 360 is connected to een toug te 360 isnow o>>. It will :"ause; wen *ou select tat "ort giing *ou a "orterror. )ount to about ten ten turn on te Xbox 360. It sould startreading and dum"ing automaticall*. It sould go >rom 0900K 395times all on te same line. It looks like it is doing te same tingoer and oer again because it doesn’t start a new line but let it goit will >inis in a little wile.




1>ter te >irmware is dum"ed X360S1# creates te acked >irmwareand gie *ou te next instructions


So do @ust tat. n"lug te S1T1 cable >rom te 360 ++ drie and"ower o>> te Xbox 360.


=eboot *our <) back into +!S and "ower on *our Xbox 360. Insert*our bootable >lo""*'S, '4TFS+!S )+ and turn on te com"uter

booting to a command "rom"t. I> *ou boot to Windows restart *ourcom"uter and set *our ,I!S boot "riorit*. I> using te 4TFS+!Sboot )+ it Dnter at te :Select >rom #enuQ; it 2es at te4TFS+!S "icture and ten moe to *our 4TFS drie.

2ou sould get to a command "rom"t. 1t tis "oint *ou can "lug teS1T1 cable back into te drie. T*"e te >ollowing command usingte serial number *ou entered wen using S1#=D1+.

S1#H1)( XXXXXXX 22222 using *our Xbox 360 serial number

<ress Dnter

It sould dis"la* *our S1T1 ci"set. +! 4!T select te "ort *et.Aeae it at te :menu.;

Wile at #T(Flas’s "ort selection menu "ower o>> te Xbox 360.Select te "ort tat te 360 is connected to een toug te 360 isnow o>>. It will :"ause; wen *ou select tat "ort. )ount to about ten

ten turn on te Xbox 360. It sould start >lasing automaticall*. Itwill go >rom 0900K 395 times all on te same line. It looks like it isdoing te same ting oer and oer again because it doesn’t start anew line but let it go it will >inis in a little wile.




Wen te >las is done it will tell *ou to restart *our "c. +isconnectte S1T1 cable and "ower o>> te Xbox 360. <ut *our Xbox 360back togeter and test.


,oot into Windows. <lug in *our >lo""*'S, -or go to te ) drie/drie and >ind *our orig.bin in te ,1)(<S >older. Tis is *our Xbox360 drie >irmware and needs to be ke"t sa>eR #ake a co"* o> te >ile.Ten make anoter one on anoter drie. Ten make anotersomewere else. Dmail it to *oursel>. 2ou get te dri>t.




1pgra"ing ,rom a ;x or <ater ,irm/are

Firmware ersions 5.x or iger included Firm8uard wic makesreading and writing to te drie muc more di>>icult. Tis Firm8uard

uses te #S$& core >irmware lockout routines. In order to be able toread or write >rom a drie tat is >lased wit 5.x'%.x >irmware *ouwould >ollow all te "reious directions >or setting u" Xtreme ,oot#aker and >ollow te directions >or reading'>lasing wit tis oneextra ste"

2ou need to disable Firm8uard. ,urn te enable0&00.iso >ound ere to a ++C= +A using I#8,urn or )lone)+. Den toug te .isoimage is onl* about $%0mb it needs to be burned onto ++C= +A >orit to work correctl*.

4ow wen >ollowing te aboe instructions remember to do tisinstead

1 ,oot *our <) to +!S wit S1T1 disconnected >rom te 360drie but wit bot "ower and ideo cables connected. <oweron *our 360 as well.

% Wen *ou reac te +!S command "rom"t connect te S1T1cable into te drie it te e@ect button and insert *our 0&00

disc. Aet it s"in u" and read te disc. It usuall* takes a good0 to $0 seconds. I> *ou listen care>ull* *ou can ear te drielaser si>t and wen *ou ear no more sounds exce"t >or teconstant s"inning disc te disc as done te @ob.

3. D@ect te drie back o"en and take out te 0&00 disc.5. Firm8uard sould now be disabled and *ou sould be able to

read and write to te drie @ust like it was a normal #S$% drie.%. sers wit a I1 ci"set can aoid using te 0&00 disc

altogeter i> te* can correctl* >ollow te instructions >or :,ad9Flasing an #S$& +rie; in tis tutorial. Te Firm8uard is

basicall* @ust te #S$& >irmware and tis metod >or >lasingte #S$& dries also works wit 5.x >irmware reisions.

6. =estarting te Xbox 360 disables te 0&00 mode.






Hitaci9A8 8+=3$0A Tutorial

ideo Tutorial Here -non9?& dries/

$pening The Xbox 360

Te outer Xbox 360 :sell; is entirel* screwless. <lastic >rictiontabs old te case togeter. Tere are man* di>>erent tutorials >oro"ening te Xbox 360 wit di>>erent metods. Here are some linksto :o"ening te Xbox 360; tutorials. I >elt it unnecessar* to coero"ening te Xbox 360 in tis tutorial wen tere are alread* so man*oter guides out tere. 4eerteless ere are some 7uick notes

9 Te 1nandtec guide sa*s *ou need to use a Torx $screwdrier. Tere is no suc ting. 2ou need a Torx 0screwdrier.

9 =emoing te gre* side grill on te ard drie side is a littletrick*. Te >irst >riction tab is actuall* inaccessible >rom te to"oles in te case so *ou need to stick *our screwdrier in teole b* were te ard drie button is and uncli" it.

9 In order to "us in te back cli"s *ou can do a >ew tings. 2oucan use a tin metal ob@ect suc as a "recision >latead

screwdrier ' bobb* "in ' "a"ercli" != *ou can make ano"ening :ke*; out o> a )+ s"indle case or old credit card.

1noter alternatie is "urcasing an :unlock kit.;9 I> all *ou want to do is @ust >las te >irmware *ou onl* need to

remoe te six long Torx screws on te bottom o> te insidemetal casing.

1nandtec 8uideIn>ormIT 8uide

Xbox91ccessories +isassembl*H*dras 8uide to #aking an nlock (e*Textbooks ideoS*rax$,etas ideo8oogle ideosisnits ideo sisnits ideo


http://www.anandtech.com/systems/showdoc.aspx?i=2610&p=2

http://www.informit.com/articles/article.asp?p=430626

http://www.xbox-accessories.com/instructions/disassemble360.html

http://www.clevermod.com/index.php?article=24



http://video.google.com/videoplay?docid=2886649985510902277&q=open+xbox+360&hl=en

http://www.youtube.com/watch?v=KrSKJZHpIho





http://www.anandtech.com/systems/showdoc.aspx?i=2610&p=2

http://www.informit.com/articles/article.asp?p=430626

http://www.xbox-accessories.com/instructions/disassemble360.html

http://www.clevermod.com/index.php?article=24



http://video.google.com/videoplay?docid=2886649985510902277&q=open+xbox+360&hl=en





%hat 8ersion

2ou can determine wat ersion Hitaci drie *ou ae sim"l* b*looking at te sticker. 2our =!# ersion /ill matter in tis tutorial.

=!# ersion 56'5?'%G dries will all ae te same instructions.=!# 00?&F( dries can onl* use te Slax disc to be "ut into #ode,and must use a di>>erent metod wen >lasing te drie.

4$M 00=(,+

I> *ou ae a drie wit =!# 00?&F( *ou will need to >ollowdi>>erent instructions >or >lasing. Te drie must still be "ut into#ode, but can onl* be done using #etod te Slax )+.

)urrentl* S1T19to9S, ada"ters like te X360S, and genericada"ters will not work. SIA S1T1 ci"sets are also not su""orted at

tis time due to read corru"tion. 2our best bet would be to useonboard Intel I)HV ci"sets or 4>orce ci"sets. I1 ci"sets workwit most ?& dries but not all o> tem.




Mo"eB

#ode, is te Hitaci drie’s built9in debug mode tat we need to getinto be>ore an*ting else can be done. Wen in #ode, te drie

can be recogniMed in Windows and >lased wit te acked >irmware.Tere are a >ew di>>erent wa*s to get into #ode,. 2ou onl* need touse wateer metod works and *ou >eel com>ortable wit.

Mo"eB Metho" > ? S<)X

Te >irst metod *ou can use to get *our Hitaci drie into #ode, isb* using a bootable SA1X Aie )+. It is a s"eciall* edited AinuxAie)+ tat will send custom commands to te Hitaci drie trougon bootu".

1 +ownload te latest SA1X image >rom Xbox9Scene $. !"en te .rar arcie using Win=ar and extract te .iso image >ile.3. ,urn te .iso image to a blank )+9= using I#8,urn )lone)+

4ero or an* oter recording so>tware ca"able o> burning .isoimage >iles.

5. #ake sure *our com"uter’s ,I!S is set to boot >rom )+ >irst.#ost are set to tis b* de>ault.

%. <ower o>> bot te Xbox 360 and <).

6. #ake sure bot "ower and ideo cables are "lugged into te Xbox360. 1lso "roide a true "at to ground between te Xbox 360case and <) case b* using croc cli"s small wire or setting temagainst eac oter so te* are toucing.

?. n"lug te small black S1T1 cable >rom te back o> te Hitaci++ drie and connect *our Hitaci drie to *our <) ia a S1T1cable.

&. <ower on te Xbox 360 and <) at te same time. ,oot te <)>rom te Slax )+ and wait until *ou reac te login "rom"t.

G. I> *ou get a line o> text tat sa*s :S"inning " +iscQ; e@ect te

Hitaci drie and Slax sould continue loading.1< )eck >or #ode,R -see below/

I> *ou ae te Hitaci 00?&F( drie click ere >or te instructions.

http://dwl.xbox-scene.com/xbox360pc/dvd/pSlax21.rar






Mo"eB Metho" & ? T/o@%ire*4esistor Trick

4ote Tis #ode, metod will not work on Hitaci 00?&F( dries.2ou must use Slax i> *ou ae a 00?&F( drie.

Dx"erimentation and researc b* SeentSon and oters earl* on>ound a wa* to "ut te drie into #ode, b* grounding one o> te "inson te ++ "ower "lug. Tis metod works eer* time wen donecorrectl* but take caution. Tis metod is muc more dangeroustan oter #ode, metods. 2ou must read tis entirel* andunderstand wat *ou are doing. I> *ou screw u" on tis *ou ma*brick *our drie and wat is worse is witout an original >irmwarebacked u" *ou won’t be able to "urcase a new drie >or *our Xbox360. Screw u" on tis and it’s a good cance *ou’ll make a

"ermanent drie9less Xbox 360.

For sa>et* reasons -less cance o> bricking/ "lease use a (9omresistor wen doing te :two9wire trick.; 2ou can "urcase resistorsat a local =adiosack or oter obb* electronics so". Tis resistor

as brown9brown9red9gold bands on it. =adiosack modelnumber $?9&.

4ow take a look at te back o> *our ++ drie and *ou sould see a

black S1T1 cable to te rigt and te "ower cable to te le>t. Te"ower cable consists o> ten smaller black wires and as a witeconnector.

Wat *ou will want to obsere is "ins 0 and G. Since te le>t side

oles o> te connector are em"t* te wires *ou want end u" beingte to" rigt and bottom le>t wires.

Stick a sewing "in in next to tese wires as sown in te imagebelow.




Wat *ou need to do is use te resistor to touc tese two "instogeter wen booting te Xbox 360 ten release te resistor

immediatel* a>terwards. So wit te Xbox 360 o>> old te resistorso tat eac end touces te sewing "in. Wit *our oter and itte "ower button on *our Xbox 360 and as soon as *ou see te"ower ligt come on remoe te resistor and break te connection.Tis is te trick* "art and were "eo"le were bricking teir dries.2ou can screw tis u" in two wa*s. First some "eo"le wereaccidentall* using te wrong "oints on te "ower cable. Second"eo"le were olding te two wires togeter >or too long. Te "inssould be connected at most >or onl* a al> second on bootu".

1gain @ust >or clarit*. #ake te cable as sown aboe b* sticking sewing "ins in te

0 and G locations on te "ower "lug.$. <lug tis newl* made "ower "lug back into te back o> te ++

drie wit te Xbox 360 o>>.3. Wit te Xbox 360 "owered o>> use a (om resistor and old

it to connect te two "ins togeter.




5. <ower on te Xbox 360 and immediatel* remoe te resistor assoon as *ou see te green "ower led on te Xbox 360 ligt u".

. )eck >or #ode,R -see below/




Mo"eB Metho" 3 ? Connectiit- +it

4ote Tis #ode, metod will not work on Hitaci 00?&F( dries.2ou must use Slax i> *ou ae a 00?&F( drie. Te kit can still be

used to "ower te drie but te debug'#ode, button will not work.

I> te Slax disc did not work >or *ou and *ou are too a>raid to use tetwo9wire'resistor trick metod *ou can "urcase a Xeno or Xecuter)onnectiit* (it to "ut te drie into #ode,.

Some im"ortant warnings about te kits N

2ou can >r* te kit and'or drie i> *ou "lug in te ++ "ower cablesu"side down. Aook on te connector. Tere are small tabs to make

sure *ou are connecting te cables correctl*.

2ou can also >r* te kit and'or drie i> *ou sort it out on someting.Te back o> te kit is not "rotected and *ou can see bare solder"oints on te circuit. I> *ou aren’t care>ul *ou can sort te kit onto*our <) case Xbox drie or anoter metal ob@ect.

For a clear ex"lanation o> te danger take a look at tis "d> .

+isconnect bot "ower and S1T1 cables >rom te ++ drie andtake it out o> te Xbox 360. <ower o>> *our <) and ook u" teconnectiit* kit. Hook u" te S1T1 cable to te ++ drie as well.<us te #ode, button down and "ower on *our <) and boot intoWindows.

http://www.cheapestmods.com/manuals/XODD_en.pdf


http://www.cheapestmods.com/manuals/XODD_en.pdf



For te Xecuter kit make sure te D@ect button is u" and te #ode,button is down be>ore "owering u" te s*stem.




Te same status AD+ con>iguration is used >or te Xeno kit. I> *ou"ower u" te drie and te AD+ is green it te #ode, button sotat te AD+ turns red >or #ode,.




Mo"eB Metho" ? Hots/apTe >ourt metod o> #ode, in >act is not a metod to get into#ode, at all. Te drie neer goes into #ode, but using tismetod *ou will be able to >las *our drie and since tat’s wat we

are tr*ing to do ere it is still included as a :#ode, metod.; Tismetod is not er* a""licable to man* "eo"le so I won’t s"end toomuc time going oer it.

2ou need a S1T1 ++9=!# drie ooked u" to *our <) anddetected in Windows. Tis can be a normal <) S1T1 ++9=!#drie like te SH9+631 or it can also be an Xbox 360 Samsung driein 0&00 mode. Wateer it is it as to be a S1T1 ++9=!# driedetected and working in Windows. 4ote *our drie letter ten un"lugte S1T1 cable >rom *our :normal; drie and "lug it into te Hitaci

drie. 2ou can ten >las *our Hitaci wit tat drie letter.






.rie .etection in %in"o/s

Wen *ou ae made sure *our drie is in #ode, connect it to *our<) and "ower u" *our <). I> *ou used Slax remember to take out

te Slax disc because *ou need to boot >rom te ard drie intoWindows. 1t te Windows loading bar *ou sould e@ect te Hitacidrie in and out a >ew times. Some "eo"le beliee tat te* onl*need to e@ect te drie i> te loading gets stuck but tis is 4!T trueRTesting as sown tat +eice I'! Drrors wile >lasing were a result>rom te >ailure to e@ect te Hitaci drie at te Windows loading bar.

Wen Windows boots u" ceck to see i> te drie is detected. Firsto"en deice manager. =igt9click :#* )om"uter; and select:#anage.; 1 )om"uter #anagement window sould o"en u" wit a

list to te le>t. In tat list to te le>t under S*stem Tools is +eice#anager.

)eck *our )+'++ dries to see i> te Hitaci 8+=93$0A is listed.I> it is not listed tr* u"dating *our S1T1 driers.

!"en u" :#* )om"uter; and see i> *ou ae a new )+9=!# drie.=igt9click on *our drie and e@ect it. 2ou @ust want to make sure *ouknow wic drie is te Hitaci drie. =emember te drie letter.




4ote Te >ollowing instructions are >or Hitaci drie ersions56'5?'%G. I> *ou ae a Hitaci ?& >ollow tese instructions.

) #eat 7o/erto-

To sae time and make it easier *ou sould download and install aWindows X< "owerto* titled :!"en )ommand Window Here.; ,*using tis *ou will not ae to naigate to *our director* using tecommand "rom"t. Tis is an absolute must i> *ou do not ae mucex"erience using a command "rom"t.

+ownload

=un te :)mdHere.exe; and go troug te installation.

.o/nloa"ing The ,irm/are

Te acked >irmware ma* be illegal under te +#)1 D)+ oroter local national and international co"*rigt laws. Te acked>irmware contains "ortions o> #icroso>t’s co"*rigted >irmware andtere>ore cannot be linked to or downloaded "ublicl*. +o not re7uestte >irmware on an* >orums because it is against most >orum rulesand *ou will most likel* be banned. Te best metod to obtain te

>irmware is b* using Xbins. Xbins is an I=) cannel and FT< serertat osts Xbox and Xbox 360 mod >iles omebrew "rograms anddeelo"ment so>tware.


+ownload

+ownload te sel>9extracting arcie and run te xbins.exe >ile. It will

ask *ou were *ou want to sae te >iles coose *our deskto". 4owgo into te :Xbins; >older on *our deskto" and run te .bat >ile. Te"rogram will automaticall* connect to te I=) cannel message tebot and connect to te FT< serer. Wen >ileMilla o"ens u" *ousould see te local Xbins >older on *our le>t side and a >ew >olderson *our rigt side -tis is te FT< serer/.

http://download.microsoft.com/download/whistler/Install/2/WXP/EN-US/CmdHerePowertoySetup.exe



http://download.microsoft.com/download/whistler/Install/2/WXP/EN-US/CmdHerePowertoySetup.exe





'X,!X 360'>irmware'acked >irmware' Hitaci9A8 8+=93$0A'

Sim"l* drag te :#aximus98ar*o"aXT=#9HIT1)HI$3Stealt.rar; >ile oer to te le>t side o> FileLilla intote Xbins >older and wait >or it to >inis downloading. 2ou can useWin=1= or ?9Mi" to extract te =1= arcie.




1pgra"ing ,rom $l"er ,irm/areA

I> *ou are u"grading >rom an older acked >irmware like a "reious8ar*!<1 >irmware a ,ird* >irmware or te original )ommodore5Da

"ackage *ou must restore *our drie to te original >irmware be>orecontinuing. I> *ou are >lasing te >irmware to a stock drie ignoretis section and ski" to :Flasing Te +rie.;

=igt9click on te X9A8 >older and select :!"en )ommand WindowHere.; 1 command window sould o"en u".

T*"e in te >ollowing command and it Dnter

=DST!=D.,1T

It will searc >or an* Hitaci dries connected and restore te>irmware back to te original. Tis is necessar* be>ore >lasing to telatest >irmware. 1>ter restoring te >irmware it is "robabl* a goodidea to disconnect te S1T1 cable "ower o>> te Xbox 360 and <)ten continue te "rocess o> getting te drie into #ode, be>ore>lasing wit te u"dated >irmware.




,lashing The .rie

=igt9click on te X9A8 >older and select :!"en )ommand WindowHere.; 1 command window sould o"en u".

T*"e in te >ollowing command and it Dnter were X is *our Hitacidrie letter and is an* >our numbers *ou want

FA1SH$3S X

For exam"le i> m* Hitaci drie is sowing u" in :#* )om"uter; asD I ma* >las te drie using te command

FA1SH$3S D 33?

Wait until te "rocess to >inis. 2ou will >ind a backu" o> *our original>irmware in te X9A8 >older. Tere will be a >older in tere namedX$3S9 >or wateer >our numbers *ou cose wen *ou >lasedte >irmware. Li" or =ar tis >older u" and email it to *oursel> >orbacku" "ur"oses.




,lashing the 00=(,+ .rie

ideo Tutorial Here

!nce *ou ae te ?& drie in #ode, using te Slax disc anddetected in Windows >ollow tese instructions >or >lasing te00?&F( drie.

1 +ownload #aximus 360 Firmware Toolbox 3.0 >rom ere. It isa .4DT a""lication tat re7uires #icroso>t .4DT >ramework $ to run "ro"erl*.

% Insert an original retail game or moie ++ into te Hitacidrie. =emember tat te Hitaci drie in #ode, likes toautomaticall* e@ect a>ter a >ew seconds. Follow one o> tese

metods to kee" te drie closed.

9 Wit te Hitaci drie tra* o"en "ress te e@ect button onceten "us te tra* in manuall* or..

9 <ress e@ect a tird time wile te tra* is closing

3. Wait >or Windows to recogniMe te disc inserted ten close outo> an* autoruns caused b* te disc.

5. !"en 360 Firmware Toolbox.

%. Select Tools J +irect +rie +um" -8+= !nl*/

6. #ake sure *our Hitaci drie is selected in te dro"9down list?. Select :=aw +um" Firmware 1sQ;










&. Sae te original >irmware as original.bin somewere sa>e

G. Te "rogram will tell *ou tat *our >irmware as been dum"edand asks i> *ou want to o"en it select :2es;

0.#ake sure te ke* dis"la*ed looks >airl* uni7ue wit nomulti"le FF or 00 b*tes. 2ou ma* also want to dum" te>irmware a cou"le times and make sure te ke* is te same >oreac dum".








$3.)lose out o> te "rogram ook te drie back u" to te 360and test it out.




,acking " Xbox 360 8ames

Tere are a >ew di>>erent wa*s to back u" *our Xbox 360 games.Tere are two >ree'cea" metods but are "rett* com"lex. Tere isa muc easier metod as well but it re7uires tat *ou "urcase as"eci>ic ++9=!# drie and install it in *our <).

Metho" > ? 1sing Your Xbox 360 .rie Samsung onl-2

Tis metod inoles connecting te Samsung drie to *our <). Tismetod currentl* does not work wit te Hitaci drie because tegame "artition >ails to unlock correctl*. In order to get te Samsungdrie recogniMed in Windows te drie needs to alread* ae te

>lased >irmware on it. 2ou will need to enable te built9in 0&00 modeo> te >irmware. First *ou need to burn te enable0&00.iso >ound inte >irmware "ackage to a ++C= +A using I#8,urn or )lone)+.Den toug te .iso image is onl* about $%0mb it needs to beburned onto ++C= +A >or it to work correctl*.

Hae te Xbox 360 and <) bot "owered o>>. ,ot "ower and ideocables sould be ooked u" to te Xbox 360. )onnect te Samsungdrie to *our <) ia a S1T1 cable. <ower on te 360 -leae *our <)o>>/ and insert te 0&00 disc *ou burned. Aisten to te drie let it s"inu" and read te disc. 1>ter 09$0 seconds *ou can take e@ect tedrie and take out te 0&00 disc. 4ow *ou can "ower on *our <)and boot into Windows. 2our drie sould sow u" in :#* )om"uter;

Te easiest metod to backu" *our games is b* using Xbox ,acku")reator . 1ll *ou need to do is insert *our game and run Xbox ,acku")reator.

http://dwl.xbox-scene.com/xbox360pc/isotools/Xbox_Backup_Creator_v2.3.0.185.zip







. #ake sure *our Xbox 360 drie is selected.$. Select te =ead tab.3. Select )om"lete ,acku"5. Hit Start




4ame te >ile an*ting *ou want and it Sae.

Wait >or te game to backu" to *our com"uter.

To burn te game *ou can also use Xbox ,acku" )reator.




. #ake sure *our ++ recorder is selected.$. Select te Write tab3. Select *our writing s"eed $.5x recommended5. Hit Start and select *our .dd >ile







Metho" & ? 7urchasing a +reon .rie

Te >ollowing dries can be "urcased installed in *our <) ten>lased wit one o> (reon’s alternate >irmwares >or reading Xbox 360

games.

SH9+6$) -I+D/TS9H3%$) -I+D/SH9+631 -S1T1/TS9H3%31 -S1T1/

1>ter "urcasing te drie install it in *our <) and ten get on Xbinsand download te >irmware.

.o/nloa"ing the +reon ,irm/are

Te best metod to obtain te >irmware is b* using Xbins. Xbins isan I=) cannel and FT< serer tat osts Xbox and Xbox 360 mod>iles omebrew "rograms and deelo"ment so>tware.


+ownload

+ownload te sel>9extracting arcie and run te xbins.exe >ile. It willask *ou were *ou want to sae te >iles coose *our deskto". 4owgo into te :Xbins; >older on *our deskto" and run te .bat >ile. Te"rogram will automaticall* connect to te I=) cannel message tebot and connect to te FT< serer. Wen >ileMilla o"ens u" *ousould see te local Xbins >older on *our le>t side and a >ew >olderson *our rigt side -tis is te FT< serer/.







'X,!X 360'>irmware'acked >irmware'Samsung SH9+6$)'

!r

'X,!X 360'>irmware'acked >irmware'Samsung SH9+631'

Sim"l* drag te :SH9+6$)(=D!40&.=1=; or :SH9+631(=D!40&0.=1=; >ile oer to te le>t side o> FileLilla andwait >or it to >inis downloading. 2ou can use Win=1= or ?9Mi" to

extract te =1= arcie.

=ead te :How to u"grade >irmware.txt; included in te =1= arcie>or instructions on >lasing *our drie wit te (reon >irmware.

Wen te drie is >lased wit te (reon >irmware *ou can startmaking backu"s o> *our Xbox 360 games.




Te easiest metod to backu" *our games is b* using Xbox ,acku")reator . 1ll *ou need to do is insert *our game and run Xbox ,acku")reator.

1 #ake sure *our (reon drie is selected. -"ic sows a 360 drie/$. Select te =ead tab.3. Select )om"lete ,acku"5. Hit Start








4ame te >ile an*ting *ou want and it Sae.

Wait >or te game to backu" to *our com"uter.

To burn te game *ou can also use Xbox ,acku" )reator.




%. #ake sure *our ++ recorder is selected.6. Select te Write tab?. Select *our writing s"eed $.5x recommended&. Hit Start and select *our .dd >ile







Metho" 3 ? %x4ipper

Tere is anoter metod used to backu" Xbox 360 games b*otswa""ing discs wit a normal <) ++9=!# drie. Tis metod

inoles otswa""ing a large -&gbC/ moie ++ wit *our Xbox 360game. Te reason tis is done is because te Xbox 360 discs ae a>ake table o> contents. So otswa""ing and >inding te :magicnumber; o>>set is te onl* wa* to read te real contents o> discs.Hotswa""ing te discs means switcing tem witout actuall* ittingte e@ect button on *our drie. So *ou will ae to eiter use teemergenc* e@ect ole on *our drie or o"en te drie u" and make itexternal wit te screws o>> so *ou can take o>> te lid.

Here is an exam"le o> m* setu" using a magnet >rom a drie lid to

kee" te discs in "lace.

+ownload Wx=i""er .$

http://gael360.free.fr/files/wxRipper-1.2.rar


http://gael360.free.fr/files/wxRipper-1.2.rar



Insert *our large ++ let it get recogniMed b* Windows and tenclose out o> an* autoruns or installers. Ten o"en u" Wx=i""er.

. #ake sure *our ++ drie is selected$. Hit te Sto" button to sto" te disc >rom s"inning

Tis is wen *ou swa" te ++ wit *our Xbox 360 game. Diteruse te emergenc* e@ect ole or take o>> te lid and stick in *our Xbox360 game. #ake sure *ou re"lace te lid com"letel* so te disc wills"in correctl*.




. Select te <la* button to s"in te Xbox 360 disc.$. Select te magni>*ing glass to >ind te magic number.3. Select te green arrow to start dum"ing te game.

I> *ou get errors in Wx=i""er *our ++ drie doesnt like te bad

sectors between A,1G50& Y A,1$05?G. A,1$05&0 isnt a badsector but *our drie as a "roblem aligning te lens on A,1$05&0...To >ix

9 )lick on Find magic number te action list is generated$ 9 Sae te action list to a la*out >ile -File9JSae la*out >ile.../3 9 Ddit te la*out >ile wit note"ad *ou sould ae tese 3 >irstlines

)G50&+0?$)0G355

i> *ou want to make an IS! wit te X++FS session starting atA,1$G&$5 like a raw dum" re"lace tese 3 lines wit tese ones




+G50&+0?$+0G355

Ten File9J Aoad Aa*out File and dum" as normal.

$4 MDTH$. &E

+egarding the layout file5

9 suall* te >irst 3 lines are like tis

• )G50&

• +0?$• )0G355

9 <eo"le sa* to cange tem to tis -bold re"resents te canges/

• .G50& Z9 + [ +umm* instead o> ) -)o"*/• +0?$ Z9 Same as original• .0G355 Z9 +[ +umm* instead o> ) -)o"*/

In tis case all *oure doing is >aking te >irst tree lines. I >igured

out tat G out o> 0 "roblems occur at te 3rd line so tats reall* teonl* one *ou need to +umm*. Tere>ore

9 #ost o> te time tis will work -bold re"resents te onl* cange/

• )G50& Z9 Same as original• +0?$ Z9 Same as original• .0G355 Z9 + [ +umm* instead o> ) -)o"*/

Tis wa* *ou get more o> te original in>ormation. Im not sure i> tis

matters but I sa* more is better wen it comes to du"licating a game.

8f you want to go e9en further5

9 Since I noticed most "eo"le -m*sel> included/ occasionall* get a




)=) error at G36 esc"eicall* on games like Tomb =aider andHitman I use tis la*out -re"lace >irst 3 lines wit tese 5/

• )G50& Z9 Same as orignal• +0?$ Z9 Same as orignal• )G3% Z9 !riginal used to be )0G355 wic I s"lit into $

"arts sto""ing at b*te be>ore m* )=) error \ G36• +&$0G Z9 +umm* te remainder o> te "art tat gies te

error. &$0G -tis line/ C G3% -"reious line/ [ 0G355-original number/




7atching Your !mage

1>ter making te dum" wit Wx=i""er *ou must in@ect te securit*sector ">i and dmi >iles into te image be>ore burning it. To do tisdownload Hell+oc’s SS #erger .?,.

+ownload

. !"en te IS! *ou dum"ed using Wx=i""er $. Select te SS >ile3. Select te <FI >ile5. Select te +#I >ile%. Hit te uge merge button to "atc te IS! and make a .dd

>ile.

To burn te game *ou can use Xbox ,acku" )reator.

http://dwl.xbox-scene.com/xbox360pc/isotools/XBOX360_SS_Merger_1.7b.rar


http://dwl.xbox-scene.com/xbox360pc/isotools/XBOX360_SS_Merger_1.7b.rar








Bitsetting

Te latest >irmware >or bot te Xbox 360 Hitaci and Samsungdries does not re7uire bitsetting. For te most "art tis is true.,ut in some cases bitsetting is still re7uired and it is stillrecommended een wen using te latest >irmware. It onl* takesa second and i> it doesn’t cause an* "roblems and ma* actuall*el" w* not do itE

,itsetting is a standard o> te C= ++ >ormat. It allows *ou sette bookt*"e o> *our C= and C= +A discs to ++9=!# >or greatercom"atibilit*. Since bitsetting'bookt*"ing is de"endent on watburner *ou are using I can’t gie *ou uniersal instructions tat

eer*bod* will be able to >ollow but I can el".

I would recommend using *our >aorite searc engine suc as8oogle and searc >or *our dd burner model number wit teterms bitsetting and'or bookt*"e. Uust do a little researc on *ourdrie. Some dries auto9bitset some ma* need a >irmwareu"date some ma* need to use a s"eci>ic "rogram and some ma*work wit I#8,urn alone.

. <ioneer burners including te "o"ular <ioneer + are

alread* set to auto9bitset all C= and C= +A media to ++9=!#. 4o >irmware u"date is needed no "rogram no settingsat all. Uust burn te discs witout messing wit an*ting. Te*will alread* be set >or *ou.

$. Aite!n burners enable bitsetting di>>erent >rom oter dries.2ou can use te Aite!n ,itsetting tilit* or I#8,urn to bitset to++9=!#. In order to bitset *ou must ae a blank C= discalread* inserted into te drie. 1lso i> te bookt*"e does notlook like it canged don’t worr*. #ine doesn’t a""ear tocange wen I use tis but eer* burn does end u" being++9=!# bookt*"e.


http://us.liteonit.com/DOWNLOADS/utilities/BookType135.zip



http://us.liteonit.com/DOWNLOADS/utilities/BookType135.zip



+ For oter dries *ou can tr* using I#8,urn. Wit a C= discin te drie o"en I#8,urn and go to Tools J +rie J)ange ,ookt*"e.

http://fileforum.betanews.com/download/ImgBurn/1128426215/1


http://fileforum.betanews.com/download/ImgBurn/1128426215/1





Burning 1sing !MBurn

2ou can also burn an* backu"s using I#8,urn. Te latestersion o> I#8,urn su""orts setting te la*erbreak ia .dd >iles.

. Insert *our blank ++C= +A into *our burner % !"en I#8,urn3. #ake sure te destination drie is *our burner 5. )ange te bookt*"e i> necessar*%. Aoad *our .dd >ile6. Set *our write s"eed -$.5x recommended a""roximatel* 5%

minutes to burn/?. nceck eri>* as it is unnecessar* and will @ust add time to te

"rocess&. ,urn te image to te disc




Burning 1sing CloneC.

)lone)+ also su""orts te custom la*erbreak ia te .dd >ile. Toburn using )lone)+

. Insert *our blank ++C= +A into *our burner $. !"en )lone)+3. Select :Write >rom image >ile;

5. Hit te browse button and o"en *our .dd >ile. )eck to makesure te la*erbreak is set to G3?60.

. Hit next and select *our burner >rom te list o> dries to te le>t.




Documents

Hacking the XBOX 360 for Dummies