hacking DVD firmware ?

[cja100]

Before unlock

                            Media Information                           
Disc Regions are                                          1,2,3,4,5,6,7,8
Media code/Manufacturer ID                                N/A Pressed DVD
UDF Format Type                                                     V1.02
UDF Volume Name                                            SEP13011042072
UDF Application id                                                   None
UDF Implementation id                                 Smart Storage, Inc.
UDF Recording Date/Time (mm/dd/yyyy)                   9/13/2001 10:42:55
Format Capacity                                            0.01GB(0.01GB)
Book Type                                                         DVD-ROM
Media Type                                                        DVD-ROM
Data area starting sector                                          30000h
Data area end sector                                                1B4Fh
Layer 0 end sector                                                 31AAFh
Linear Density                                                0.293um/bit
Track Density                                                0.74um/track
Number of Layers                                                        2
Layer Track Path direction                      (OTP) Opposite track path
                                                                         
                           Complete Media Code     
after unlock
                            Media Information                           
Disc Regions are                                          1,2,3,4,5,6,7,8
Media code/Manufacturer ID                                N/A Pressed DVD
Format Capacity                                            6.54GB(7.03GB)
Book Type                                                         DVD-ROM
Media Type                                                        DVD-ROM
Data area starting sector                                          30000h
Data area end sector                                              345B5Fh
Layer 0 end sector                                                 31AAFh
Linear Density                                                0.293um/bit
Track Density                                                0.74um/track
Number of Layers                                                        2
Layer Track Path direction                      (OTP) Opposite track path
                                                                         
                           Complete Media Code

is there another app i can try instead of DVDInfoPro and DVD Decrypter

in the mean time i will try another disc

[cja100]

no im launching after, but if it works for other people then it doesnt matter right now, we need to think about the next step, the firmware!

[MacDennis]

no im launching after, but if it works for other people then it doesnt matter right now, we need to think about the next step, the firmware!

Seems like a good unlock to me. Try clone cd for a change as reported earlier in this thread.

[thecheekymonkey]

ok, ive just got my 360 in bits before me now, gonna shut down and see if i cant get it to detect my drive, back shortly



EDIT :


the bios picks it up, even trys to boot from but fails, as soon as windows is loaded its not recognized, not there, not even in device manager as an unknown device., im just gonna have a play to see if anything low leve like dos utilitys will pick it up.

[QuiescentWonder]

ok, ive just got my 360 in bits before me now, gonna shut down and see if i cant get it to detect my drive, back shortly



EDIT :


the bios picks it up, even trys to boot from but fails, as soon as windows is loaded its not recognized, not there, not even in device manager as an unknown device., im just gonna have a play to see if anything low leve like dos utilitys will pick it up.

I just tried this same thing with my origional Xbox Thomson drive (X0033-018 with model number TGM600 made July 2003 with FW v1.24) and get exactly the same results... maybe this was wasn't just a change in the way it worked but a deliberate attempt to thrawrt copying discs. Which gives me the impression that it shouldn't be too hard to bypass (not that I really know). Perhaps the protection (if that's what it really is) works in the same way the 360 drive(s) do(es). I do have three virtual drives which I'm going to disable and then I'll try this again.

[Geremia]

Tried with xbox 1 Thomson drive, not recognized by windows, but recognized and accessible by linux (on the same pc motherboard).
I can't test 360 drive because my 360 is dead, but you can try with a bootable linux cdrom, like slax http://ftp://ftp.linux.cz/pub/linux/slax/SLAX-5.0.x/slax-5.0.6.iso
Hope to have the unlocker under linux too

Great job TheSpecialist!!!!!

[cja100]

ok cd clone works guys so use that. im 42% through reading the disc (halo2)

[QuiescentWonder]

I have my Thomson drive up in Windows XP SP2...

My XBOX was shutting itself off... it may have been off at just the wrong time when Windows was booting. Also I switched to an 80 conductor IDE cable on the slave connector with my primary boot drive. I'll figure out what actually happened in a few minutes. So now I can put in an origional disc and the unlocker application tells me that it unlocked successfully and I check the properies and do a "Populate Volumes" which shows 6702MB (This is Spyro btw). I however couldn't read the Video partition before-hand. As it tells me there is no disc in the drive and shows up as CD Drive instead of DVD Drive in explorer. DVD Decryptor gives me some random error, Nero won't let me pick the drive as a source for a copy... I'll try CloneCD in a minute.

[parasven]

ok cd clone works guys so use that. im 42% through reading the disc (halo2)

when i made my iso i noticed that only clonecd works nero,dvd decrypter and alcohol gave me an error at about 3%

[thecheekymonkey]

ok sorry this was just a bit of a rushed attempt.

connected the 360 drive (hitatchi-LG) to my pc, the bios picked it up fine, and even tried booting from it (paused for ages and even the disk span up which incidently was CoD2, but failed lol  )

windows started , but no deal, nothing would pick up the drive, even sisoft sandra, just wasnt being reported in windows.

ok, tried a few dos utilitys , some would pick up the drive no problems , basic filmanagers, but wouldnt let me browse the disk.


dont have linux installed, could never get it to work on my main pc, but i did give it a go with `knoppix linux bootable from dvd`

which also didnt report the drive, however this could be to do with the llimitations of knoppix being bootable from a dvd, so not really sure on that one.


thats all i can do chaps, hope this helps anyone  

[cja100]

I have my Thomson drive up in Windows XP SP2...

My XBOX was shutting itself off... it may have been off at just the wrong time when Windows was booting. Also I switched to an 80 conductor IDE cable on the slave connector with my primary boot drive. I'll figure out what actually happened in a few minutes. So now I can put in an origional disc and the unlocker application tells me that it unlocked successfully and I check the properies and do a "Populate Volumes" which shows 6702MB (This is Spyro btw). I however couldn't read the Video partition before-hand. As it tells me there is no disc in the drive and shows up as CD Drive instead of DVD Drive in explorer. DVD Decryptor gives me some random error, Nero won't let me pick the drive as a source for a copy... I'll try CloneCD in a minute.

i think this happened to me to when i booted windows and it detected the drive and installed it. try rebooting and that might help to reading the video partition.

[QuiescentWonder]

I thought this was a bit interesting:

Here is the origional output of the unlocker

Read capacity io succesful. Returned data ->
00 00 1B 4F 00 00 08 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode sense io succesful. Returned data ->
00 1A 00 00 00 00 00 00 - 3E 12 00 01 00 D1 01 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Read DVD structure IO succesful. Returned data (only first few bytes) ->
06 64 00 00 D1 0F 31 10 - 00 06 06 00 00 F9 F9 FF
00 20 33 AF 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Decryption of challenge responsetable seems to be succesful !
Number of entries in challenge responste table = 23
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 1A 00 00 00 00 00 00 - 3E 12 00 01 01 D1 01 60
45 99 DA 40 87 C8 34 6D - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 1A 00 00 00 00 00 00 - 3E 12 00 01 01 D1 01 D8
45 99 DA 40 A5 14 A4 86 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 1A 00 00 00 00 00 00 - 3E 12 01 01 01 D1 01 D8
45 99 DA 40 A5 14 A4 86 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Read capacity io succesful. Returned data ->
00 34 5B 5F 00 00 08 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00

Reported capacity bigger than standard xbox video partition. Unlocking seems to be succesful !

The second attempt to unlock (immediatly afterwards without so much as moving the mouse)

Read capacity io succesful. Returned data ->
00 34 5B 5F 00 00 08 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode sense io succesful. Returned data ->
00 1A 00 00 00 00 00 00 - 3E 12 01 01 01 D1 01 D8
45 99 DA 40 A5 14 A4 86 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Read DVD structure IO succesful. Returned data (only first few bytes) ->
06 64 00 00 D1 0F 31 10 - 00 06 06 00 00 F9 F9 FF
00 20 33 AF 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Decryption of challenge responsetable seems to be succesful !
Number of entries in challenge responste table = 23
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Read capacity io succesful. Returned data ->
00 34 5B 5F 00 00 08 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00

Reported capacity bigger than standard xbox video partition. Unlocking seems to be succesful !

And then the third attempt, anything after this is redundant:

Read capacity io succesful. Returned data ->
00 34 5B 5F 00 00 08 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode sense io succesful. Returned data ->
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Read DVD structure IO succesful. Returned data (only first few bytes) ->
06 64 00 00 D1 0F 31 10 - 00 06 06 00 00 F9 F9 FF
00 20 33 AF 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Decryption of challenge responsetable seems to be succesful !
Number of entries in challenge responste table = 23
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Mode select IO succesful
Mode sense io succesful. Returned data ->
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Read capacity io succesful. Returned data ->
00 34 5B 5F 00 00 08 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00

Reported capacity bigger than standard xbox video partition. Unlocking seems to be succesful !

Anything after this just returned the same 3rd set of data over and over.

[TheSpecialist]

I have my Thomson drive up in Windows XP SP2...

My XBOX was shutting itself off... it may have been off at just the wrong time when Windows was booting. Also I switched to an 80 conductor IDE cable on the slave connector with my primary boot drive. I'll figure out what actually happened in a few minutes. So now I can put in an origional disc and the unlocker application tells me that it unlocked successfully and I check the properies and do a "Populate Volumes" which shows 6702MB (This is Spyro btw). I however couldn't read the Video partition before-hand. As it tells me there is no disc in the drive and shows up as CD Drive instead of DVD Drive in explorer. DVD Decryptor gives me some random error, Nero won't let me pick the drive as a source for a copy... I'll try CloneCD in a minute.

I'm pretty sure that the reason why you can't dump the disc with some software after unlocking is that windows caches data. If an application uses the cached data (which reports the disc structure as it was before unlocking) it will fail. An application really has to read the disc structure itself and shouldn't rely on the data that windows supplies

[TheSpecialist]

I have my Thomson drive up in Windows XP SP2...

Also I switched to an 80 conductor IDE cable on the slave connector with my primary boot drive. I'll figure out what actually happened in a few minutes. So now I can put in an origional disc and the unlocker application tells me that it unlocked successfully and I check the properies and do a "Populate Volumes" which shows 6702MB (This is Spyro btw).

So you're saying that windows didn't detect the Thompson before (but the bios did) and but after switching to an 80 conductor IDE cable windows detected it ?

[QuiescentWonder]

No, I'm not saying that was the reason, but that was one of the differences between the two setups...I doubt it has anything to do with it, yes I realize the Xbox uses 40-conductor cables. I was just saying for the sake of letting everyone know the differences between the working and not working setups.

The only way I can get Windows to recognise the drive is by having it attached to my Primary IDE as a Slave with the boot hard-drive jumpered as Master. So if anyone can't get their BIOS or Windows to recognise the drive, try that.

Also, is there any way to keep the Xbox from powering off after a certain amount of time? Maybe plugging in a controller and randomlly pressing buttons every once in a while? Does anyone have the pinout of the drive?

[TheSpecialist]

The only way I can get Windows to recognise the drive is by having it attached to my Primary IDE as a Slave with the boot hard-drive jumpered as Master. So if anyone can't get their BIOS or Windows to recognise the drive, try that.

Just to be sure: the bios detected it the first time, when windows didn't ?

[tser]

QuiescentWonder : plug in your Videocable this will prevent it from powering down.
nice indication y ou have there, i also have a thomson drive (which does not show up inside windows at all)
will try tomorow also what you did.

my bios detect it.

[MacDennis]

Just tried my Philips XBOX1 drive ..

BIOS detects it as: Philips J5 3235C
The model printed on the drive is: VAD6035/21
Production date: JAN 2004

But WindowsXP hangs on the startup screen. No harddisk activity at all.
It's detected as a slave on the primary controller. I tried to add another dvd-rom as master, also no-go.

When I unplug the XBOX drive, Windows starts normally. Any ideas? The locked drive also locks my system. 

[QuiescentWonder]

The only way I can get Windows to recognise the drive is by having it attached to my Primary IDE as a Slave with the boot hard-drive jumpered as Master. So if anyone can't get their BIOS or Windows to recognise the drive, try that.

Just to be sure: the bios detected it the first time, when windows didn't ?

Yes, the first time the BIOS did recognise it, but not Windows.

I still couldn't get any software to read the discs, I tried using the newest version of CloneCD but it didn't find anything but my virtual drives... which I thought I turned off. The video portion was jittery after I unlocked the disc and ended up freezing WMP.

[MacDennis]

Taken from http://www.xbox-linux.org/wiki/Porting_an_Operating_System_to_the_Xbox_HOWTO

Microsoft uses several different DVD drives in the Xbox, some of which have its compatibility problems:

drive string  problems 
"THOMSON-DVD"  pretends it cannot play audio or dvds; does not understand the ATAPI eject command 
"PHILIPS XBOX DVD DRIVE"  does not understand the ATAPI eject command 
"PHILIPS J5 3235C"  pretends it cannot play audio or dvds 
"SAMSUNG DVD-ROM SDG-605B"  no issues