Print

[PedrosPad]

QUOTE (eh. @ Sep 28 2004, 10:00 AM)

Hopefully the xboxdash.xbe can be the default.xbe for the disc (thus enabling an "any region" boot of the 5680 dash) eh.

The few tests I've had time to perform have been in this area.

For those who didn't notice in the root post, the Hulk SFX XBE that Kthulu has had success with is XBE_REGION_US_CANADA only!.

However, the 5680 Dashboard is all regions. - but, personally, I've struggled to get this to boot

At the moment I think I'm struggling with bad burns (I'll try with the 4GB dummy file Kthulu suggests in future )

But Kthulu also mentioned that the Dashboard itself seems to check for, and if present attempts to execute, D:\default.xbe on launch - which would cause a recursive loop (since the Dashboard itself is named to D:\default.xbe).

More tests needed to confirm theories and verify findings.....

If this is the case, I'm kind'a hoping that
1. the font exploit does work (although rmenhal's not been wrong yet)
2. and the fonts fire ahead of the D:\default.xbe check.

[Anusko]

QUOTE (wrayal @ Sep 28 2004, 03:17 PM)

Sorry about my totally useless suggestion - my knowledge of the audio hack is basically non-existant. One thing, however Pedros: what is the point in a font hack for it? It still loads themn from HD doesnt it? So it will be loading the same fonts as the HD-dash would be -> all the normal problems, or does it have a different boot order. Plus, is there any chance of a true utopia disc? Because this (it seems to me) is like the gamesave but worse. A hard to get hold of xbe, difficult disc to create, and it screws up your custom tracks... Imi probably being an idiot and missing something entirely, but hey... Wrayal

no, we are talking about reading font files from the dvd.

i can't see any BIG advantage in this audio exploit, we still have to do the game save hack... i hope that a font exploit is possible, that would be a "boot" disk

d:/default.xbe (hulk dash and font exploit) --> d:/nkpatcher.xbe (or pbl) --> d:/game/default.xbe

[wrayal]

Font files load from the DVD?? Sorry, missed that - my bad! That would be _exceedingly_ cool, I didnt realise it was possible. Ignore me, Im an idiot!

BTW: rmenhal, if the 5659.03 is crashable with that null pointer thing, does that effectively mean an audio exploit could be made for it? Just wondering...

Wrayal

[Kthulu]

QUOTE (PedrosPad @ Sep 28 2004, 05:09 AM)

The few tests I've had time to perform have been in this area. For those who didn't notice in the root post, the Hulk SFX XBE that Kthulu has had success with is XBE_REGION_US_CANADA only!. However, the 5680 Dashboard is all regions. - but, personally, I've struggled to get this to boot At the moment I think I'm struggling with bad burns (I'll try with the 4GB dummy file Kthulu suggests in future ) But Kthulu also mentioned that the Dashboard itself seems to check for, and if present attempts to execute, D:\default.xbe on launch - which would cause a recursive loop (since the Dashboard itself is named to D:\default.xbe).

in my excitement over the 5680, i had forgotten about this.  it really sucks for soft-modders that don't live in US or Canada because you have to use this xbe to launch the hulk demo xbe on hdd, which launches \xboxdash\xboxdash.xbe.  there's no other way i've found that will work.  yes, it will go into an infinite reboot loop if you have 5680 as d:\default.xbe.  that was what i tried the first 5 coasters i burned.  this is why i believe that the hulk demo on hdd is passing a parameter to xboxdash.xbe that tells it to ignore d:\default or to at least play DVD content first.

5680 WILL NOT load fonts from dvd.  consider the layout of my last disc:

\fonts\
\fonts\Xbox.xtf
\fonts\Xbox Book.xtf
\xboxdash\  (4920 xips over-written with 5680 xips)
\xboxdash\fonts\Xbox.xtf
\xboxdash\fonts\Xbox Book.xtf
\xboxdash\Xbox.xtf
\xboxdash\Xbox Book.xtf
default.xbe (original default.xbe from Hulk)
Xbox.xtf
Xbox Book.xtf

as you can see, the fonts are in every directory + root on the disc.  with this disc, if i deleted the fonts from C, i did not get a menu.  the dash did load without lock  ups, but there is only the green globe screen.  you can make movements with the dpad and you'll here the sounds.  you can press buttons and hear the sounds, but there's nothing on the screen other than the green globe.

[triggernum5]

I don't know if this is at all useful, but I was broswing text I found in various xboxdash.xbe files and found references to passed parameters to the dash..  Kthulu mentioned parameter passing as a possibility..  I found code like this in both 4920, and 5659..

[PedrosPad]

QUOTE (wrayal @ Sep 28 2004, 03:17 PM)

One thing, however Pedros: what is the point in a font hack for it? It still loads themn from HD doesnt it? So it will be loading the same fonts as the HD-dash would be -> all the normal problems, or does it have a different boot order. Plus, is there any chance of a true utopia disc? Because this (it seems to me) is like the gamesave but worse. A hard to get hold of xbe, difficult disc to create, and it screws up your custom tracks...

Good and fair questions all, Wrayal.

My thinking goes like this...
The HulkAudio exploit requires manual intervention to use - doesn't boot directly to the on-media homebrew .
The GameSav doesn't allow you to exchange the XBOX original game disk with one that contains your homebrew program.
If possible, custom fonts, seeded on the HDD, would facilitate seamless launching of the on-media homebrew program.

Most of what I'm doing is just fun (but I do still have a few ideas at the back of my mind).

QUOTE (wrayal @ Sep 28 2004, 03:31 PM)

Font files load from the DVD?? Sorry, missed that - my bad! That would be _exceedingly_ cool, I didnt realise it was possible. Ignore me, Im an idiot! BTW: rmenhal, if the 5659.03 is crashable with that null pointer thing, does that effectively mean an audio exploit could be made for it? Just wondering... Wrayal

Wrayal, you're right - The font files are read from HDD - Unfortunately.

And yeah I wondered about the rmenhal's new audio exploit too.  If it now works a new way, any chance it now works on newer Dashboards?

[mkjones]

QUOTE (PedrosPad @ Sep 28 2004, 04:12 PM)

And yeah I wondered about the rmenhal's new audio exploit too.  If it now works a new way, any chance it now works on newer Dashboards?

This caught my eye as well as it would go really well with a new package idea I had a while ago  

Anyone tried it out?

[Kthulu]

QUOTE (wrayal @ Sep 28 2004, 10:59 AM)

Oh, one last thing. Just because these won't run, doesn't mean others won't. Might it be worth having an ldots scanner type system to search for 1-layer-dvd signed xbe's? Would I be right in saying that any signed with this media type could be made to boot in the same way as this hulk dash does? Wrayal

that would be right, but they are going to be very rare.

[eh.]

QUOTE (PedrosPad @ Sep 28 2004, 08:12 AM - re fonts)

The font files are read from HDD - Unfortunately.

And if this previously posted test was an indicator, they seem to be explicitly validated too eh.
I. put only the retail "XBox Book.xtf" and "XBox.xtf" back into "C:\fonts";
II. confirm the dash works again;
III. rename "XBox Book.xtf" to be "XBox.xtf" and "XBox.xtf" to be "XBox Book.xtf" (in place on the disk, with an interim rename so it allows it);
IV. confirm whether the dash still works; if it doesn't, as is the case for me...
V. rename "XBox.xtf" back to "XBox Book.xtf" and "XBox Book.xtf" back to "XBox.xtf";
VI. confirm the dash works again.

QUOTE (PedrosPad @ Sep 28 2004, 08:12 AM - re audio)

And yeah I wondered about the rmenhal's new audio exploit too.  If it now works a new way, any chance it now works on newer Dashboards?

I'll try it with my setup and report back ASAP eh.

[PedrosPad]

QUOTE (eh. @ Sep 28 2004, 05:57 PM)

And if this previously posted test was an indicator, they seem to be explicitly validated too eh. I. put only the retail "XBox Book.xtf" and "XBox.xtf" back into "C:\fonts"; II. confirm the dash works again; III. rename "XBox Book.xtf" to be "XBox.xtf" and "XBox.xtf" to be "XBox Book.xtf" (in place on the disk, with an interim rename so it allows it); IV. confirm whether the dash still works; if it doesn't, as is the case for me... V. rename "XBox.xtf" back to "XBox Book.xtf" and "XBox Book.xtf" back to "XBox.xtf"; VI. confirm the dash works again.

The Hulk Dashboard XBE has an "XIPS" section containing an embedded XIPS file (like all Dashboards) - this file appears to be a manifest of the Dashboard's support files, along with their SHA1 digests (or some sort of digest anyway).  

The last four entries are:
y:\fonts\XBox.xtf
y:\fonts\XBox Book.xtf
y:\XBox.xtf
y:\XBox Book.xtf
along with their digests.

I believe these fonts were left out of the manifest on pre-live Dashboards and D:4290 - that's why the font files were targeted as exploit candidates.  But no longer.

[total_ass]

it doesn't look like this hulk exploit is going anywhere. do you guys have any other leads?

[eh.]

QUOTE (mkjones @ Sep 28 2004, 08:17 AM)

Anyone tried it out?

It gives me the 100 soundtrack message for 5960 and 5659.03 (whereas it reboots 4920) eh.

If anyone's got, or knows anyone with, a 5659.01 it'd be worthwhile trying it on that too.  (M$ must have had a good reason for superceding that so quickly eh... )

[Chicken Scratch Boy]

any way we can trick the ms track naming dealie into writing a st.db from binary?

maybe we can exploit a few of the resources loaded from the disk (which whould be? )

[eh.]

QUOTE (total_ass @ Sep 28 2004, 10:57 AM)

it doesn't look like this hulk exploit is going anywhere. do you guys have any other leads?

Huh? It's already been exploited (see page 15) eh!

[Kthulu]

were there any old dashboard versions that did not look for fonts specifically the C partition, but in their immediate directory?
is there any possibility whatsoever of injecting the code from one of these dashes into 5680 and still maintaining a valid signature on the xbe?  thereby, allowing us to font-exploit completely from dvd?

i'm way over my head here, but here's an illustration of what propose:

|5680 signature|5680 media flags|5680 code|

replaced with...

|5680 signature|5680 media flags|5680 code^4034 code^5680 code|

prolly not as it would be the same as hexediting the the dash to the proper media flags, right?