September 9th 2006
* XBOX 360 enabled alternative FW for the Samsung SH-D162C drive - V0.80 *
Here it is.... the first all in one PC DVD-ROM drive with full XBOX360 backup capabilities. Full image and SS extraction functions have been implemented in this release, while still maintaining all the basic functions of the DVD-ROM drive.
Why not V1.00? Well... I'm still working on hardware correct timing of response types 5 & 7, which ultimately is the right way to do this. Studying a large amount of security sectors has shown however, that all (to my knowledge!) current games uses the same timing scheme, which makes faked timing possible. This release makes use of faked timing, and will use fixed values for all timed values. A 'jitter'function has been added that will make the fixed values vary sligthly, effectively making any attempt by M$ to detect a specific timer pattern for copied games impossible.
So, will this work with all games? Yes... I believe it will with all existing games, but that might ofcourse change for future releases. Always keep that in mind when backing up games, and always test the first backup made before making more backups of the same game.
Should problems occur and you believe it to be caused by incorrect extraction of the SS, feel free to contact me at: email@example.com
But...before doing so, a little extra effort from your side is needed
In order to fix any bugs, i need to know what game you're working with, and I need a copy of the failing SS as well as a copy of a working SS extracted from a TS-H943 or a GDR-3120L. If you're unable to supply me with a working SS, I can not guarantee any kind of help, as it is very unlikely that I can get my hands on the same exact release of a given game.
This is what you get..
- Full challenge/response functionality.
- Two types of unlock for XBOX 360 game discs. One for making xtreme style images and one for making wxripper style images.
Both types of iso can be made using isobuster. Ripping using wxripper isn't supported for the time being
- A 'lock' function that will cancel any enabled unlock state. This can be very useful for custom applications.
- 'Error skipping' which basically speeds up the error handling of the drive. A complete wxripper style image (including video)
can be obtained in 15-16 minutes, when error skipping is enabled. Getting through the critical area of LBA 19408-20479 will take
you more than 20 minutes alone, if error skipping is disabled
- A much more streamlined command interface which is good news if you intend to write an application that makes use of the drives
- The drive will default to unlock state 2 and error skip enabled when a 360 media is inserted. You can in other words use isobuster to
obtain a wxripper style image without issuing any commands to the drive
- RPC1 support (RPC-2 actually but with automatic change of drive region and RCE support)
This is what you'll have to wait for..
Hardware correct timing for response types 5 & 7.
You will probably notice that the the drive reports as being RPC-2, if you use a program like DVDinfo - this is not a bug! The drive changes it's region setting according to the media inserted. The region code listed in DVDinfo (and other software like it) is the current region setting of the drive and it should match the region of the inserted media. If the media allows playback in more than one region, the drive region will be set to the region with the lowest number. An example could be a disc allowing playback in region 2 and 4 players, which would make the drive change it's region to region 2. Media with no region restrictions or with RCE protection will make the drive default to region 1.
Ripping using Isobuster..
Not much to add here except for the number of LBA to read when using unlock 2 is 3697696 as opposed to 3567872 for unlock 1.
A successful wxripper style image will have a size of 7.572.881.408 bytes, while a successful xtreme style image will have
a size of 7.307.001.856 bytes.
And now some technical stuff....
Command set additions found in this FW..
FF 08 01 01 , 'Enable Unlock 1 (xtreme) state' as we already know it from the 360 xtreme modded drives.
This command is supported for legacy reasons only. Custom applications should use the new
'Set lock state' instead.
FF 08 01 11 xx , 'Set Lock State'
xx=00 - Drive locked (no unlock state)
xx=01 - Unlock State 1 (xtreme) enabled
xx=02 - Unlock state 2 (wxripper) enabled
FF 08 01 15 xx , 'Set Error Skip State'
xx=00 - Error skip is disabled
xx=01 - Error skip is enabled
AD 00 FF 02 FD FF FE 00 08 00 xx C0 , This is the well known SS extract commands from the xtreme FW.
FF 08 01 10 , 'Get Feature List'
This command will return a list of the additional features supported by the drive.
All values returned are 16 bit values, and the list is terminated with null (0x0000)
The two first words of the returned list always reads as 0xA55A 0X5AA5 in order to guarantee
that a reply from a drive not supporting this command correctly isn't mistaken for a feature list.
An example feature list could be:
0xA55A, 0x5AA5, 0x0100, 0xF000, 0xF001, 0x0000
This list would indicate that the drive supports Unlock 1, Lock and Error Skip, as it can be seen
from the values defined below:
XBOX 360 related features..
0x0100 : The drive supports the unlock 1 state (xtreme)
0x0101 : The drive supports the unlock 2 state (wxripper)
0x0120 : The drive can read and decrypt the SS
0x0121 : The drive has full challenge response functionality
General drive features..
0xF000 : The drive supports the lock (cancel any unlock state) command
0xF001 : The drive supports error skipping
This is the complete list of defined features at the moment. If you're working on a custom application you
might want to contact me in order to get the latest list.
To those of you that might be wondering if this release will work with XBOX games.....well it probably will.... in theory at least. No extensive testing
has been made at this point, so I guess you will have to test that part by yourself
That's just about it for now. I hope to be back with more goodies soon and that this release will be helpful to you all.
A big thanks must go to FlexyZ for helping me test the FW and for letting me borrow, destroy and finally repair his TS-H943
. Without this kind of help this release wouldn't be possible. I would also like to thank all of the other guys working hard on making the 360 a little more user friendly
Keep up the good work!