XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 25, 2013, 10:08:37 PM


Login with username, password and session length


Pages: 1 2 3 4 5 6 7 »
  Print  
Author Topic: Alternative FW for Samsung SH-D162C V0.80 released...  (Read 32859 times)
kreon
Hacker
***
Posts: 64


View Profile
« on: September 09, 2006, 08:59:23 AM »


September 9th 2006

***************************************************************************
*  XBOX 360 enabled alternative FW for the Samsung SH-D162C drive - V0.80                      *
***************************************************************************

Here it is.... the first all in one PC DVD-ROM drive with full XBOX360 backup capabilities. Full image and SS extraction functions have been implemented in this release, while still maintaining all the basic functions of the DVD-ROM drive.

Why not V1.00? Well... I'm still working on hardware correct timing of response types 5 & 7, which ultimately is the right way to do this. Studying a large amount of security sectors has shown however, that all (to my knowledge!) current games uses the same timing scheme, which makes faked timing possible. This release makes use of faked timing, and will use fixed values for all timed values. A 'jitter'function has been added that will make the fixed values vary sligthly, effectively making any attempt by M$ to detect a specific timer pattern for copied games impossible.

So, will this work with all games? Yes... I believe it will with all existing games, but that might ofcourse change for future releases. Always keep that in mind when backing up games, and always test the first backup made before making more backups of the same game.   

Should problems occur and you believe it to be caused by incorrect extraction of the SS, feel free to contact me at: kreon.inside@gmail.com
But...before doing so, a little extra effort from your side is needed Smiley In order to fix any bugs, i need to know what game you're working with, and I need a copy of the failing SS as well as a copy of a working SS extracted from a TS-H943 or a GDR-3120L. If you're unable to supply me with a working SS, I can not guarantee any kind of help, as it is very unlikely that I can get my hands on the same exact release of a given game.         


This is what you get..
--------------------------------
- Full challenge/response functionality.
- Two types of unlock for XBOX 360 game discs. One for making xtreme style images and one for making wxripper style images.
  Both types of iso can be made using isobuster. Ripping using wxripper isn't supported for the time being
- A 'lock' function that will cancel any enabled unlock state. This can be very useful for custom applications.
- 'Error skipping' which basically speeds up the error handling of the drive. A complete wxripper style image (including video)
  can be obtained in 15-16 minutes, when error skipping is enabled. Getting through the critical area of LBA 19408-20479 will take
  you more than 20 minutes alone, if error skipping is disabled Sad
- A much more streamlined command interface which is good news if you intend to write an application that makes use of the drives
  extra features.
- The drive will default to unlock state 2 and error skip enabled when a 360 media is inserted. You can in other words use isobuster to
  obtain a wxripper style image without issuing any commands to the drive Smiley
- RPC1 support (RPC-2 actually but with automatic change of drive region and RCE support)

 
This is what you'll have to wait for..
-----------------------------------------------
Hardware correct timing for response types 5 & 7.


You will probably notice that the the drive reports as being RPC-2, if you use a program like DVDinfo - this is not a bug! The drive changes it's region setting according to the media inserted. The region code listed in DVDinfo (and other software like it) is the current region setting of the drive and it should match the region of the inserted media. If the media allows playback in more than one region, the drive region will be set to the region with the lowest number. An example could be a disc allowing playback in region 2 and 4 players, which would make the drive change it's region to region 2. Media with no region restrictions or with RCE protection will make the drive default to region 1.


Ripping using Isobuster..
---------------------------------
Not much to add here except for the number of LBA to read when using unlock 2 is 3697696 as opposed to 3567872 for unlock 1.
A successful wxripper style image will have a size of 7.572.881.408 bytes, while a successful xtreme style image will have
a size of 7.307.001.856 bytes.


And now some technical stuff....

Command set additions found in this FW..
-----------------------------------------------
FF 08 01 01               , 'Enable Unlock 1 (xtreme) state' as we already know it from the 360 xtreme modded drives.
                    This command is supported for legacy reasons only. Custom applications should use the new
                    'Set lock state' instead.
                                                            
FF 08 01 11 xx               , 'Set Lock State'
                    xx=00 - Drive locked (no unlock state)
                    xx=01 - Unlock State 1 (xtreme) enabled
                    xx=02 - Unlock state 2 (wxripper) enabled

FF 08 01 15 xx               , 'Set Error Skip State'
                    xx=00 - Error skip is disabled
                    xx=01 - Error skip is enabled

AD 00 FF 02 FD FF FE 00 08 00 xx C0      , This is the well known SS extract commands from the xtreme FW.
                   

FF 08 01 10               , 'Get Feature List'
                    This command will return a list of the additional features supported by the drive.
                    All values returned are 16 bit values, and the list is terminated with null (0x0000)
                    The two first words of the returned list always reads as 0xA55A 0X5AA5 in order to guarantee
                    that a reply from a drive not supporting this command correctly isn't mistaken for a feature list.
                                    
                    An example feature list could be:
                    0xA55A, 0x5AA5, 0x0100, 0xF000, 0xF001, 0x0000
                                          
                    This list would indicate that the drive supports Unlock 1, Lock and Error Skip, as it can be seen
                    from the values defined below:
                                                         
                    XBOX 360 related features..                                                   
                    0x0100 : The drive supports the unlock 1 state (xtreme)
                    0x0101 : The drive supports the unlock 2 state (wxripper)
                    0x0120 : The drive can read and decrypt the SS
                    0x0121 : The drive has full challenge response functionality
                                                         
                    General drive features..
                    0xF000 : The drive supports the lock (cancel any unlock state) command
                    0xF001 : The drive supports error skipping
                                                
                    This is the complete list of defined features at the moment. If you're working on a custom application you
                    might want to contact me in order to get the latest list.
                                                         

To those of you that might be wondering if this release will work with XBOX games.....well it probably will.... in theory at least. No extensive testing
has been made at this point, so I guess you will have to test that part by yourself Smiley



That's just about it for now. I hope to be back with more goodies soon and that this release will be helpful to you all.

A big thanks must go to FlexyZ for helping me test the FW and for letting me borrow, destroy and finally repair his TS-H943 Wink. Without this kind of help this release wouldn't be possible. I would also like to thank all of the other guys working hard on making the 360 a little more user friendly Smiley Keep up the good work!

Enjoy!
Kreon
Logged
evil_puck
Newbie
*
Posts: 4


View Profile
« Reply #1 on: September 09, 2006, 09:10:51 AM »

Where can we get it ?

thx Smiley
Logged
Pandor
Master Hacker
****
Posts: 130


Powered by Gentoo


View Profile WWW
« Reply #2 on: September 09, 2006, 09:29:33 AM »

excellent work m8!
Logged

Do no underestimate the power of stupid people in large groups.
acidflash
Member
**
Posts: 28


View Profile
« Reply #3 on: September 09, 2006, 10:09:35 AM »

Cheers!

Thanks much for the effort!
Logged
joblow
Member
**
Posts: 10


View Profile
« Reply #4 on: September 09, 2006, 10:21:50 AM »

Hey Kreon ,

You are the man !!!!
Logged
talaash
Member
**
Posts: 34


View Profile
« Reply #5 on: September 09, 2006, 10:34:12 AM »

kreon,

you are a champion. I now you guys all do this for your enjoyment and dont want money in exchange, probably because of your moral standpoint, but all of you guys have a right to put a paypal donate email address. I know its hard for people to donate all teh time, since there are so many people releasing quality, but you might be surprised,  Wink.

Thanks a great deal.
Logged
xenon80
Member
**
Posts: 30


View Profile
« Reply #6 on: September 09, 2006, 11:12:41 AM »

it doesn't work with my games. i take schtrom extract 2.1 and do ss.bin extraction and than it reports ss is currently full supported with this drive, and then it follows error can't extract ss.bin.


the same with drive tools 005 Error Message there :

Sense Error 5/30/02
Unkown Error
CDB: Read DVD Structure
0xAD 00 FF 02 FD FF FE 00 08 00 01 C0 00 00 00 00
Logged
kreon
Hacker
***
Posts: 64


View Profile
« Reply #7 on: September 09, 2006, 11:18:35 AM »



5/30/02 is an "Incompatible Format" sense error!

This means that the disc in the drive wasn't recognized as being a XBOX game disc. Are you sure that you have actually put an original game disc in the drive??
Logged
xenon80
Member
**
Posts: 30


View Profile
« Reply #8 on: September 09, 2006, 11:28:16 AM »

no i have got a burned 360 sk inside. now i checked with an original and it works. but i can not make a backup of a sk.then it ends up to this error message.
is it wanted that you cannot make a copy of a backup, or is it just a bug in the fw?
« Last Edit: September 09, 2006, 11:34:24 AM by xenon80 » Logged
kreon
Hacker
***
Posts: 64


View Profile
« Reply #9 on: September 09, 2006, 11:34:36 AM »


.
Quote from: xenon80 link=topic=3622.msg27489#msg27489date=1157819296
no i have got a burned 360 sk inside. now i checked with an original and it works. but i can not make a backup of a sk.then it ends up to this error message.

Well.... the FW is intended for handling original game discs. You should use clonecd for making copys of your backup discs.
Logged
xenon80
Member
**
Posts: 30


View Profile
« Reply #10 on: September 09, 2006, 11:38:54 AM »

allright, but my intention was to readout the backup again to add some stealth infos. but it is not possible to read it out again with this fw  Sad
Logged
kreon
Hacker
***
Posts: 64


View Profile
« Reply #11 on: September 09, 2006, 11:43:29 AM »

allright, but my intention was to readout the backup again to add some stealth infos. but it is not possible to read it out again with this fw  Sad

Yes... no problem. Make an image of the disc using clonecd. When done, you can use the SS/DMI/PFI extract/inject tools found in sctrom extract to fix whatever needs fixing.
Logged
xenon80
Member
**
Posts: 30


View Profile
« Reply #12 on: September 09, 2006, 11:44:23 AM »

thanks a lot Smiley
Logged
embaned
Member
**
Posts: 13


View Profile
« Reply #13 on: September 09, 2006, 12:15:37 PM »

u are a god kreon just started opening my 360 as  i speak dam thing bust my fingers aghh great work Kreon i expect those drives to b discontinued soon thk Kreon i got one
Logged
DaMacFunkin
Master Hacker
****
Posts: 113


View Profile
« Reply #14 on: September 09, 2006, 12:35:01 PM »

Hi, just bought my drive today and flashed with the new 0.8 firmware... is there a certain way to extract the ss or fully back up a disk? i have tried by sending the commands by dvdinfo pro and saving readout as bin, then read from/to with iso buster using fill with zeros for errors?? but it doesn't work after video partition and ss are added... any ideas? p.s. drive is connected by usb 2 ide adaptor.
Thanks.
Logged
xenon80
Member
**
Posts: 30


View Profile
« Reply #15 on: September 09, 2006, 01:13:34 PM »

use schtrom 2.1 is much easier and you dont need dvdinfopro at all then. just start schtrom 2.1 and click extract...thats all
Logged
Romps
Member
**
Posts: 39


View Profile
« Reply #16 on: September 09, 2006, 01:15:01 PM »

Nice work Kreon

But i have just 1 question about your firmware its no big deal really at the moment but after trying your new firmware i came up with a problem on the way i extract the disks

Ive allways used dvdinfo pro and iso buster and the 360 to make backups
Due to the fact of needing the ss i didnt see the point in uses 2 drives to make one backup..

But anyways i thought i would try use the 162c to rip kameo i used dvdinfo pro to extract ss pfi and dmi and see if any differences

there is a small diff in ss as expected with timing so no prob

but looking at the dmi and pfi i notice the first 4 bytes are 0802 on the dmi and pfi extracted from kameo using 162c and dvdinfo wich as i understand is the header of the dmi/pfi that isint needed as ce64 has hard coded this into his firmware

with pfi its not a problem but with dmi i am loseing the last 4bytes of the data needed for dmi

is there a way around this ? or am i not able to use dvdinfo anymore

b4 i posted this i read a little and found the schtrom Xtract V2.1 this extracts the dmi and pfi as it should be extracted ....
Logged
kreon
Hacker
***
Posts: 64


View Profile
« Reply #17 on: September 09, 2006, 01:32:28 PM »


but looking at the dmi and pfi i notice the first 4 bytes are 0802 on the dmi and pfi extracted from kameo using 162c and dvdinfo wich as i understand is the header of the dmi/pfi that isint needed as ce64 has hard coded this into his firmware

with pfi its not a problem but with dmi i am loseing the last 4bytes of the data needed for dmi

is there a way around this ? or am i not able to use dvdinfo anymore

b4 i posted this i read a little and found the schtrom Xtract V2.1 this extracts the dmi and pfi as it should be extracted ....

Yes... both Schtrom extract and Redline99's drivetools will do the job.

You can read more about DMI/PFI extraction here: http://www.xboxhacker.net/forums/index.php?topic=3127.0
Logged
rlvbrussel
Newbie
*
Posts: 9


View Profile
« Reply #18 on: September 09, 2006, 01:35:31 PM »

I have use the Schtrom360XtractV2.1 and have no luck!
I use a originel game and want to extract the ss.
"Security sector exraction is currently not full supported on the "SH-D612C"!
"Inject the ss.bin later."

Can anyone help me!!

Greetings....
Logged
kreon
Hacker
***
Posts: 64


View Profile
« Reply #19 on: September 09, 2006, 01:44:14 PM »


I have use the Schtrom360XtractV2.1 and have no luck!
I use a originel game and want to extract the ss.
"Security sector exraction is currently not full supported on the "SH-D612C"!
"Inject the ss.bin later."

Just ignore that message!!

Schtrom extract V2.1 doesn't read the feature list from the drive, and will display the message no matter what the drive reports.
This will be fixed in the V2.2 release I've been told, so I guess we'll see an update soon  Smiley

So for now.... just ignore the message, and the image/SS extraction will work just fine.l
Logged
Pages: 1 2 3 4 5 6 7 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM