Commodore4eva's Xbox1 DVDROM hack discussion

[Arakon]

Link to my tutorial:

http://arakon.dyndns.org/backup.html

Any further "how to.." discussion goes here, so it doesn't clutter up the other and technical threads.

[Interloper]

For those who've got it working, can you post what you've used?
or maybe post what you've had problems with?

Please report if you get blue screen of death while flashing firmware (605B using Atapi mode in MTK) -doesn't really seem to be an issue

[wans]

I used a Pioneer 108 for the ripping.  Ripped halo 2 using wxripper and isobuster, and clonecd for the .dvd file.

Biggest problem was inserting the SS into the correct location, but that was cleared up by geremia who figured to put it in the sector above the offset.

[Pandor]

Haven't looked into it much, but i was wondering why we couldn't use the unlocker to unlock the drive and then just aw rip it withouth swapping?
Wouldn't swapping yield a lot of dummy data being read/written and a different layerbreak then the original game disc?

Is there some catch to this?

[BlueCop]

heres my method to build a raw like image from the game and video part riped with your orginal xbox drive.

hook your xbox dvd drive up to your pc.
put in your game disc. use isobuster to rip the video part to iso. name it video.iso. it should rip really quick.
Then use theSpecialist unlocker to unlock the drive.
rip the iso like arakon instructions(don't swap just the software part).  name it game.iso

You will also need the Security Sector from your game. Arakon already covers this in his instructions.
name your Security Sector SS.bin

put these all in the same directory.
download the file attached. remove the .jpg from the name and then extract the rar
It contains 3 files.
build.bat - is a copy /b command to build the final iso.
IMAGE.dvd - LayerBreak=1913776 for the iso we're making
spacer.rar - extract this to spacer.bin used to space the video and game parts to correct sectors.

extract all these files in the same directory. run build.bat and it will copy video.iso + spacer.bin + game.iso + ss.bin into a file named IMAGE.000 which is the file IMAGE.dvd is set to burn with in CloneCD. the layer break is in the right position where the security sector is in the right place and the game data layers are in the correct place.

I guess i made the assumption that all Video and Game partitionss are consistant in their size between games. i assumed they are. This worked with halo 2.

my video size was 14,319,616 bytes
my game size was 7,027,228,672 bytes

the important thing i think is that the game partition start at offset 18300000h. i don't know if the video partition is even needed but i thought it would be better to have it.

someone else want to test my method. it worked fine for me. I have to admit i am a little blazed so forgive rambling

Edit: sorry the batch i included was one i tested where i was seperating the game into each layer. edit the build.bat to this
copy /b video.iso + spacer.bin + game.iso + ss.bin IMAGE.000

sorry its really simple but it works much quicker for me on the riping and burning games now.

[stonersmurf]

Hey bluecop nice work, but the link to TS's unlocker program is broken, http://www.barendb.herejezus.nl/zooi/unlocker.zip
could you post a new link please.

[BlueCop]

http://rapidshare.de/files/19120496/xbox_1_unlocker.rar.html

i think it might be over at xbox-scene too i am not sure

[BlueCop]

I think a plug in for altus would be cool. since it can read unlocked drives and dump their files avoiding secturity sectors. perhaps a plugin would be possible to rip the iso from the unlocked drive but only rip the sectors the file table actually uses to store data. That should improve rip times alot.

[Pandor]

nice tutor bluecop.
So judging from the fact that you rip the movie and game section seperatly i'm guessing that once unlocked, the drive skips the movie section and renders it unreadable?
so ripping in an unlocked state would just start at the fake toc (game data) and skip the first toc, right?

Time to take out /dev/null and create some dummy sectors 

[laomax]

Hey bluecop nice work, but i can't link to http://arakon.dyndns.org/backup.html
and see "tutorial" and get "attached.rar",could you post a new link please.

[BlueCop]

nice tutor bluecop.
So judging from the fact that you rip the movie and game section seperatly i'm guessing that once unlocked, the drive skips the movie section and renders it unreadable?
so ripping in an unlocked state would just start at the fake toc (game data) and skip the first toc, right?

Time to take out /dev/null and create some dummy sectors 

from what i understand when locked the video partition is read starting at PSN 30000 or offset 00h in a raw image. when unlocked it reads from PSN 60600 or 18300000h in our raw image.

[laomax]

THX bluecop,i have downlaoded it.

[MacDennis]

from what i understand when locked the video partition is read starting at PSN 30000 or offset 00h in a raw image. when unlocked it reads from PSN 60600 or 18300000h in our raw image.

Correct.

[Pandor]

another thing that comes to mind:

if you rip them seperatly wil it burnt correctly?
i recon you get something like this when you just pad the images together:

Code:

lead-in - movie data - lead-out - spacer (dummy track?) - lead-in - game data - lead-out

Won't the dvd-writer/software choke on the lead-in, lead-out's?

I could be going all crazy here,.. i realy should read op on some cd/dvd layout specs.. 

[MacDennis]

Haven't looked into it much, but i was wondering why we couldn't use the unlocker to unlock the drive and then just aw rip it withouth swapping?
Wouldn't swapping yield a lot of dummy data being read/written and a different layerbreak then the original game disc?

Is there some catch to this?

Yes, I have done this some time ago. I simply first ripped the video partition using clonecd. Then I unlocked the xbox1 drive using the unlocker and ripped the game partition. Combine these files using the standard dos copy command and you have a full raw rip. This is basically BlueCop his method. And yes, you also need some dummy data. But the video partition isn't really needed, simply create one big dummy data file. Can be easily done with a tool like Hex Workshop which I really recommend.

[BlueCop]

Yes, I have done this some time ago. I simply first ripped the video partition using clonecd. Then I unlocked the xbox1 drive using the unlocker and ripped the game partition. Combine these files using the standard dos copy command and you have a full raw rip.

plus a little dummy data.

[Pandor]

We'll i'm on linux so i was thinking about doing some shell scripting to make a dummy movie iso using dev/null as input since the movie data isn't used i can aswell make it a blank and save the trouble of ripping it. then unlock the drive, rip data section and then join the iso's.

so the above question is the only thing that remains for me.

[laomax]

bluecop please,if could we rebuild Game partitionss(game.iso) with using "xiso.exe" on pc by getting files and dict that xbox runs evox and ftp to pc?
Sorry my poor english.

[BlueCop]

lead in and lead out information isn't stored in iso. it is really just a raw binary sector dump of the data area of the disc from what i understand.

bluecop please,if could we rebuild Game partitionss(game.iso) with using "xiso.exe" on pc by getting files and dict that xbox runs evox and ftp to pc?
Sorry my poor english.

i haven't tried it so i dont' know if it will work. if you did do this you would need to pad the iso up the full size of a regular game partition for the layerbreak and SS PSN to be correct.

Hopefully a patch to read the ss from layer 0 will come out. i tried changing the PSN in the firmware to something in the first layer. when i burned my first dual layer i included the SS are a couple places in the null data between video and game parts of the disc. The firmware didn't work though =/ so i guess i might look at the disasm.

[Pandor]

now that you mention it, i believe it's written to the disc after writing the data.
where were my thoughts