Print

[Xbox-Scene]

Kreon Alternative FW for the Samsung SH-D162C drive v0.8 Posted by XanTium | September 9 13:33 EST

Kreon released a new version of his firmware for the Samsung SH-D162C PC DVD-drive. This modified firmware allows you to dump original Xbox and Xbox 360 discs with the cheap SH-D162 PC DVD drive (no Xbox(360)-drive or disc hot-swap required). This new version comes support for full Security Sector (SS) extraction! XBOX 360 enabled alternative FW for the Samsung SH-D162C drive - V0.80             Here it is... the first all in one PC DVD-ROM drive with full XBOX360 backup capabilities. Full image and SS extraction functions have been implemented in this release, while still maintaining all the basic functions of the DVD-ROM drive. Why not V1.00? Well... I'm still working on hardware correct timing of response types 5 & 7, which ultimately is the right way to do this. Studying a large amount of security sectors has shown however, that all (to my knowledge!) current games uses the same timing scheme, which makes faked timing possible. This release makes use of faked timing, and will use fixed values for all timed values. A 'jitter'function has been added that will make the fixed values vary sligthly, effectively making any attempt by M$ to detect a specific timer pattern for copied games impossible. So, will this work with all games? Yes... I believe it will with all existing games, but that might ofcourse change for future releases. Always keep that in mind when backing up games, and always test the first backup made before making more backups of the same game.   Should problems occur and you believe it to be caused by incorrect extraction of the SS, feel free to contact me at: [email protected] But...before doing so, a little extra effort from your side is needed Smiley In order to fix any bugs, i need to know what game you're working with, and I need a copy of the failing SS as well as a copy of a working SS extracted from a TS-H943 or a GDR-3120L. If you're unable to supply me with a working SS, I can not guarantee any kind of help, as it is very unlikely that I can get my hands on the same exact release of a given game.         This is what you get: * Full challenge/response functionality. * Two types of unlock for XBOX 360 game discs. One for making xtreme style images and one for making wxripper style images. Both types of iso can be made using isobuster. Ripping using wxripper isn't supported for the time being * A 'lock' function that will cancel any enabled unlock state. This can be very useful for custom applications. * 'Error skipping' which basically speeds up the error handling of the drive. A complete wxripper style image (including video) can be obtained in 15-16 minutes, when error skipping is enabled. Getting through the critical area of LBA 19408-20479 will take you more than 20 minutes alone, if error skipping is disabled Sad * A much more streamlined command interface which is good news if you intend to write an application that makes use of the drives extra features. * The drive will default to unlock state 2 and error skip enabled when a 360 media is inserted. You can in other words use isobuster to obtain a wxripper style image without issuing any commands to the drive Smiley * RPC1 support (RPC-2 actually but with automatic change of drive region and RCE support) This is what you'll have to wait for.. * Hardware correct timing for response types 5 & 7. Official Site: n/a (by Kreon on xboxhacker.net) Download: n/a (could be illegal under DMCA/EUCD)

[XanTium]

Rest NFO/ReadMe:

QUOTE

You will probably notice that the the drive reports as being RPC-2, if you use a program like DVDinfo - this is not a bug! The drive changes it's region setting according to the media inserted. The region code listed in DVDinfo (and other software like it) is the current region setting of the drive and it should match the region of the inserted media. If the media allows playback in more than one region, the drive region will be set to the region with the lowest number. An example could be a disc allowing playback in region 2 and 4 players, which would make the drive change it's region to region 2. Media with no region restrictions or with RCE protection will make the drive default to region 1.


Ripping using Isobuster..
---------------------------------
Not much to add here except for the number of LBA to read when using unlock 2 is 3697696 as opposed to 3567872 for unlock 1.
A successful wxripper style image will have a size of 7.572.881.408 bytes, while a successful xtreme style image will have
a size of 7.307.001.856 bytes.


And now some technical stuff....

Command set additions found in this FW..
-----------------------------------------------
FF 08 01 01               , 'Enable Unlock 1 (xtreme) state' as we already know it from the 360 xtreme modded drives.
                    This command is supported for legacy reasons only. Custom applications should use the new
                    'Set lock state' instead.
                                                           
FF 08 01 11 xx               , 'Set Lock State'
                    xx=00 - Drive locked (no unlock state)
                    xx=01 - Unlock State 1 (xtreme) enabled
                    xx=02 - Unlock state 2 (wxripper) enabled

FF 08 01 15 xx               , 'Set Error Skip State'
                    xx=00 - Error skip is disabled
                    xx=01 - Error skip is enabled

AD 00 FF 02 FD FF FE 00 08 00 xx C0      , This is the well known SS extract commands from the xtreme FW.
                   

FF 08 01 10               , 'Get Feature List'
                    This command will return a list of the additional features supported by the drive.
                    All values returned are 16 bit values, and the list is terminated with null (0x0000)
                    The two first words of the returned list always reads as 0xA55A 0X5AA5 in order to guarantee
                    that a reply from a drive not supporting this command correctly isn't mistaken for a feature list.
                                   
                    An example feature list could be:
                    0xA55A, 0x5AA5, 0x0100, 0xF000, 0xF001, 0x0000
                                         
                    This list would indicate that the drive supports Unlock 1, Lock and Error Skip, as it can be seen
                    from the values defined below:
                                                         
                    XBOX 360 related features..                                                  
                    0x0100 : The drive supports the unlock 1 state (xtreme)
                    0x0101 : The drive supports the unlock 2 state (wxripper)
                    0x0120 : The drive can read and decrypt the SS
                    0x0121 : The drive has full challenge response functionality
                                                         
                    General drive features..
                    0xF000 : The drive supports the lock (cancel any unlock state) command
                    0xF001 : The drive supports error skipping
                                               
                    This is the complete list of defined features at the moment. If you're working on a custom application you
                    might want to contact me in order to get the latest list.
                                                         

To those of you that might be wondering if this release will work with XBOX games.....well it probably will.... in theory at least. No extensive testing
has been made at this point, so I guess you will have to test that part by yourself Smiley



That's just about it for now. I hope to be back with more goodies soon and that this release will be helpful to you all.

A big thanks must go to FlexyZ for helping me test the FW and for letting me borrow, destroy and finally repair his TS-H943 Wink. Without this kind of help this release wouldn't be possible. I would also like to thank all of the other guys working hard on making the 360 a little more user friendly Smiley Keep up the good work!

Enjoy!
Kreon

[NCspecV81]

OMG! i felt all fuzzy inside for a moment.. then i just blew the biggest load of my life..

[bazza007]

Yipee, i never doubted you'd get there in the end (IMG:style_emoticons/default/smile.gif) (yeah right)

Well done matey & thank you

This post has been edited by bazza007: Sep 9 2006, 05:50 PM

[tortri]

I'm a newb at "360" backups and been reading around about 360 backups here and there, but the question i have with this is do you need to flash ur 360's firmware (regardless?)or can u just buy this dvd drive seperately, put it in my PC, put this firmware in it and burn back ups of my games and it'll work on a normal, non tampered 360?

[mrjkwik]

i must give props where they are due.  good job kreon.

in the xtreme 3.3 thread several of us suggested that c4e help or takeover the project.  not from total lack of faith, just from us not hearing any development news.  personally, it'd be hypocritacal of me not to apologize.  so i apologize.  i'll try it out later today and see what happens.

again, great job, and thanks.

EDIT: question, will this be able to dump an xbox 1 game, AND extract an xbox 1 ss?

This post has been edited by mrjkwik: Sep 9 2006, 06:04 PM

[Wffsoccer]

QUOTE(tortri @ Sep 9 2006, 06:02 PM)

I'm a newb at "360" backups and been reading around about 360 backups here and there, but the question i have with this is do you need to flash ur 360's firmware (regardless?)or can u just buy this dvd drive seperately, put it in my PC, put this firmware in it and burn back ups of my games and it'll work on a normal, non tampered 360?

Anyone else speechless?

[mrjkwik]

QUOTE(tortri @ Sep 9 2006, 01:02 PM)

I'm a newb at "360" backups and been reading around about 360 backups here and there, but the question i have with this is do you need to flash ur 360's firmware (regardless?)or can u just buy this dvd drive seperately, put it in my PC, put this firmware in it and burn back ups of my games and it'll work on a normal, non tampered 360?

your 360 will still need to be flashed in order to play the games.  you just wont need to do anything with the 360 to backup your games.

[cHodAX]

Great job Kreon, you just became another hero of the 360 scene

[Textbook]

QUOTE(mrjkwik @ Sep 9 2006, 01:08 PM)

EDIT: question, will this be able to dump an xbox 1 game, AND extract an xbox 1 ss?

Good question.  If I had the drive, I'd try it.

[hoodlum77]

If I use this FW can I make a stealth backup of my Pro Evo soc 5 (xbox1)??

[patricksull]

SWEET FANCY MOSES!

[CompFreak07]

That is great news.  I have two questions.  I dont have the Samsung SH-D162C yet but was planning on buying one.  What would be a average price of what these sell for and where can I get one?  Also will this new firmware work with Schtrom360Xtract v2.1 and give you the xtreme 3.0 stealth style image without having to manually inject the ss or anything?  Thanks

[sosotiit]

is there a recommended tool for extracting the ss.bin.
I tried schtom 2.1, drivetools1.2.0005 (aspi and spti) and they all provide slightly different resulting files. They are also all different from the ss.bin I got on the web ( that one worked OK).

rgds, Soso

[Perplexer]

This is excellent news!  THANKS, KREON!!!