|
101
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Re: Cracked Samsung SDG-605B/616T/616F Firmware for Xbox 1 - V2
|
on: April 30, 2006, 04:01:40 AM
|
TS, I didn't try this firmware yet. But I am suspecting that the FW for downloading the SS might did the trick to decramble the SS with CPR_MAI then rescramble it with 00s. or maybe it's (the downloaded SS) simply a descrambled one then the "working" FW simply skip the descramble process. Didn't think of that, Anita999, very good remark, it's very well possible that the ripped SS's aren't 'standard' SS's as well. No, the SS extracted with commodore4eva firm is a standard one (ie: just the sector data) how did you confirm this?
|
|
|
|
|
106
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Re: Commodore4eva's DVDROM hack discussion
|
on: April 28, 2006, 10:59:12 PM
|
|
i verified the PSN 60000 one by reading logical block address 30000 with DVDInfro Pro and it is in fact the security sector.
I patched F9FA00 in the firmware to 60000 and it doesn't work in my xbox it shows up as a video disc.
i get this output from you unlocked in windows
Read capacity io succesful. Returned data -> 00 3E 9B AF 00 00 08 00 - 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 Mode sense io succesful. Returned data -> 00 1A 00 00 00 00 00 00 - 3E 12 00 00 00 D1 01 00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 Read DVD structure IO succesful. Returned data (only first few bytes) -> 06 64 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
am i patching the correct PSN value? did i miscalculate
|
|
|
|
|
110
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Re: Commodore4eva's DVDROM hack discussion
|
on: April 28, 2006, 10:08:13 PM
|
|
i mean PSN 30000 to PSN 60600. the padded area of the iso. could you not put the SS in here. it would eliminate the PSN calculations because it will always be a certain offset from the begining and it would enable single layer media i think.
i put copies of my SS at PSN 60000 and PSN 31B50 after the video part of the disc on my orginal hotswap image. i tried patching the location to the security sector code to read from PSN 60000 and the other PSN 31B50 but it didn't work
|
|
|
|
|
111
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Re: Commodore4eva's DVDROM hack discussion
|
on: April 28, 2006, 09:57:29 PM
|
|
i got a backup running with my own riped SS.
i tired patching the SS location to various points in the padding data before the game partition without it working. do you know what is needed to patch to make it read from a PSN in layer 0?
wouldn't manually setting the layer break to the padding + 1/2 game is size work better then leting the burning software do it. this will cause the game part of the disc to be split accross the layers evenly padded to a more central part of the disc. might get better loading times.
|
|
|
|
|
113
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Re: XBOX Security Sector Patcher / Extractor
|
on: April 28, 2006, 05:28:32 PM
|
|
you could rip the extra dummy data from the image and then it is as simple as placing the ss.bin at the end of the file and then change the layer break for your burn to 1913776.
if you take your orginal layer break from the hotswap dvd. like for this example my chasing amy was 2057632 or 1F65A0 x 800h = offset FB2D0000 in the raw image. the layer break for the orginal xbox dvd was 1913776 or 1D33B0 x 800h = E99D8000 hex is the end of the layer 0 part of the game partition. so E99D8000 - FB2D0000 is the extra space on layer 0. The next layer begins at FB2D0000 and will have a blank space the exact same size as between E99D8000 - FB2D0000 then game layer 1 starts. you could remove both these sections of sectors and change the layer break to 1913776 and your image would work correctly.
you could then also remove the the blank space after the end of the game layer 1. your game image starts at 18300000 and is 7,027,228,672 bytes long or 1A2DB0000 + 18300000 = 1BB0B0000 which from there to the end file could be removed. 1BB0B0000 should be the end of game layer 1. The Security Sector would simply be tacked on the end of the file.
edit: this speeds up your burning a little. my hotswap dvd image was 7.82 GB while the built one was 6.92 GB(which would look the same as a dummy striped raw image). the game data in each layer is in the same position on the disc in ethier image when burned to disc.
|
|
|
|
|
115
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Re: Commodore4eva's DVDROM hack discussion
|
on: April 28, 2006, 06:00:16 AM
|
lead in and lead out information isn't stored in iso. it is really just a raw binary sector dump of the data area of the disc from what i understand. bluecop please,if could we rebuild Game partitionss(game.iso) with using "xiso.exe" on pc by getting files and dict that xbox runs evox and ftp to pc? Sorry my poor english.
i haven't tried it so i dont' know if it will work. if you did do this you would need to pad the iso up the full size of a regular game partition for the layerbreak and SS PSN to be correct. Hopefully a patch to read the ss from layer 0 will come out. i tried changing the PSN in the firmware to something in the first layer. when i burned my first dual layer i included the SS are a couple places in the null data between video and game parts of the disc. The firmware didn't work though =/ so i guess i might look at the disasm.
|
|
|
|
|
117
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Re: Commodore4eva's DVDROM hack discussion
|
on: April 28, 2006, 05:40:53 AM
|
nice tutor bluecop. So judging from the fact that you rip the movie and game section seperatly i'm guessing that once unlocked, the drive skips the movie section and renders it unreadable? so ripping in an unlocked state would just start at the fake toc (game data) and skip the first toc, right? Time to take out /dev/null and create some dummy sectors  from what i understand when locked the video partition is read starting at PSN 30000 or offset 00h in a raw image. when unlocked it reads from PSN 60600 or 18300000h in our raw image.
|
|
|
|
|
120
|
Research & Technical XboxHacking (Xbox 360) / DVD-ROM Drive and Media / Make a Raw Like Image without Hot Swaping
|
on: April 28, 2006, 04:49:52 AM
|
|
heres my method to build a raw like image from the game and video part riped with your orginal xbox drive.
hook your xbox dvd drive up to your pc. put in your game disc. use isobuster to rip the video part to iso. name it video.iso. it should rip really quick. Then use theSpecialist unlocker to unlock the drive. rip the iso like arakon instructions(don't swap just the software part). name it game.iso
You will also need the Security Sector from your game. Arakon already covers this in his instructions. name your Security Sector SS.bin
put these all in the same directory. download the file attached. remove the .jpg from the name and then extract the rar It contains 3 files. build.bat - is a copy /b command to build the final iso. IMAGE.dvd - LayerBreak=1913776 for the iso we're making spacer.rar - extract this to spacer.bin used to space the video and game parts to correct sectors.
extract all these files in the same directory. run build.bat and it will copy video.iso + spacer.bin + game.iso + ss.bin into a file named IMAGE.000 which is the file IMAGE.dvd is set to burn with in CloneCD. the layer break is in the right position where the security sector is in the right place and the game data layers are in the correct place.
I guess i made the assumption that all Video and Game partitionss are consistant in their size between games. i assumed they are. This worked with halo 2.
my video size was 14,319,616 bytes my game size was 7,027,228,672 bytes
the important thing i think is that the game partition start at offset 18300000h. i don't know if the video partition is even needed but i thought it would be better to have it.
someone else want to test my method. it worked fine for me. I have to admit i am a little blazed so forgive rambling
Edit: sorry the batch i included was one i tested where i was seperating the game into each layer. edit the build.bat to this copy /b video.iso + spacer.bin + game.iso + ss.bin IMAGE.000
sorry its really simple but it works much quicker for me on the riping and burning games now.
|
|
|
|
|