You are viewing our Forum Archives. To view or take place in current topics click here.
#11. Posted:
Steve_Perry
  • New Member
Status: Offline
Joined: Aug 06, 201113Year Member
Posts: 20
Reputation Power: 0
Status: Offline
Joined: Aug 06, 201113Year Member
Posts: 20
Reputation Power: 0
iTz_H4CKED wrote
Steve_Perry wrote
iTz_H4CKED wrote all the checks are in the nand image look for one called xexloadimagefrommemory if you really wanna get somewhere


You have no idea how this works do you?


i have no idea haha im farther into patching checks then you will ever be how bout extracting your xboxkrnl and start browsing through it before posting stupid **** heres a list of checks for you

text:81AAFBF8                 lis     %r11, ((aXoscUvU_xex+0x10000)@h) # "xosc%uv%u.xex"
.text:81AAFBFC                 lhz     %r7, 0x12A(%r31)
.text:81AAFC00                 li      %r4, 0x104
.text:81AAFC04                 lhz     %r6, 0x128(%r31)
.text:81AAFC08                 addi    %r5, %r11, -0x85C # aXoscUvU_xex
.text:81AAFC0C                 addi    %r3, %sp, 0x190+var_140
.text:81AAFC10                 bl      _snprintf
.text:81AAFC14                 addi    %r29, %r31, 0x26C
.text:81AAFC18                 li      %r7, 0
.text:81AAFC1C                 lwz     %r4, 0x264(%r31)
.text:81AAFC20                 li      %r6, 8
.text:81AAFC24                 lwz     %r3, 0x268(%r31)
.text:81AAFC28                 addi    %r5, %sp, 0x190+var_140
.text:81AAFC2C                 stb     %r28, 0x190+var_3D(%sp)
.text:81AAFC30                 mr      %r8, %r29
.text:81AAFC34                 bl      XexLoadImageFromMemory
.text:81AAFC38                 mr      %r30, %r3
.text:81AAFC3C                 lwz     %r3, 0x268(%r31)
.text:81AAFC40                 bl      XamFree
.text:81AAFC44                 cmpwi   cr6, %r30, 0
.text:81AAFC48                 stw     %r28, 0x268(%r31)
.text:81AAFC4C                 stw     %r28, 0x264(%r31)
.text:81AAFC50                 bge     cr6, loc_81AAFC5C
.text:81AAFC54                 oris    %r3, %r30, 0x1000
.text:81AAFC58                 b       loc_81AAFCE0


Xosc= if you dont know what that stands for give up
You'll also need to find the challenge itself that checks console certificate along with the HV check


Do you have any idea what is happening in the above code? I bet not.
#12. Posted:
iTz_H4CKED
  • Ladder Climber
Status: Offline
Joined: Jul 16, 201014Year Member
Posts: 371
Reputation Power: 47
Status: Offline
Joined: Jul 16, 201014Year Member
Posts: 371
Reputation Power: 47
u have any idea you do not need a kv for checks? obviously not the xosc online system challenge is y you cannot sign into xbl whether your unbanned or not theres also several other checks your just a typical low post 12year old kid that thinks he knows everything when you dont know jack so good luck with getting online cuz it will never happen peace
#13. Posted:
antigenocide15
  • Challenger
Status: Offline
Joined: Jan 09, 201014Year Member
Posts: 104
Reputation Power: 4
Status: Offline
Joined: Jan 09, 201014Year Member
Posts: 104
Reputation Power: 4
Steve Itz_H4CKED is right, So stop trolling around when obviously you have no idea what your talking about.

Nuff said .
#14. Posted:
Steve_Perry
  • New Member
Status: Offline
Joined: Aug 06, 201113Year Member
Posts: 20
Reputation Power: 0
Status: Offline
Joined: Aug 06, 201113Year Member
Posts: 20
Reputation Power: 0
iTz_H4CKED wrote u have any idea you do not need a kv for checks? obviously not the xosc online system challenge is y you cannot sign into xbl whether your unbanned or not theres also several other checks your just a typical low post 12year old kid that thinks he knows everything when you dont know jack so good luck with getting online cuz it will never happen peace


That's the kind of response I was looking for. Allow me to help you out a little bit.


.text:81AAFBF8        lis  %r11, ((aXoscUvU_xex+0x10000)@h) # "xosc%uv%u.xex"
.text:81AAFBFC        lhz  %r7, 0x12A(%r31)
.text:81AAFC00        li   %r4, 0x104
.text:81AAFC04        lhz  %r6, 0x128(%r31)
.text:81AAFC08        addi  %r5, %r11, -0x85C # aXoscUvU_xex
.text:81AAFC0C        addi  %r3, %sp, 0x190+var_140
.text:81AAFC10        bl   _snprintf


Seeting up the formatted name of the xosc.xex.  r3 is the output buffer. r4 is the size.
r5 is the string to be formatted, in this case "xosc%uv%u.xex". r6 and r7 are the arguments passed
to the format function.


.text:81AAFC14        addi  %r29, %r31, 0x26C
.text:81AAFC18        li   %r7, 0
.text:81AAFC1C        lwz  %r4, 0x264(%r31)
.text:81AAFC20        li   %r6, 8
.text:81AAFC24        lwz  %r3, 0x268(%r31)
.text:81AAFC28        addi  %r5, %sp, 0x190+var_140
.text:81AAFC2C        stb  %r28, 0x190+var_3D(%sp)
.text:81AAFC30        mr   %r8, %r29
.text:81AAFC34        bl   XexLoadImageFromMemory

Seeting up the call to load the xosc from memory. It is unclear at this time what the arguments
are but it is clear r5 is the name.



Next time you want to sound smart make sure you can back it up!
Jump to:
You are viewing our Forum Archives. To view or take place in current topics click here.