Well, of course you all know by now that backups on live is not possible. I'm not commenting on it's current state however it once was! In fact, it was quite simple and out of boredom and knowledge of this flaw being fixed already (your welcome MS!), I've decided to post about it.
First of all, XBOX Live authenticates your console by checksumming the kernel. If it is not retail, you are denied acces and your eeprom is banned. Therefore, if one could have a backup running, and return the kernel to retail.. One might be able to access the live features of a piece of software! This is what FuckMS allows... or ALLOWED.. before.
Basically FuckMS works in a way like XBEDump...Inputs the xbe and makes a few changes to it's structure. FuckMS after input, places the 'Return Kernel to Retail' payload right at the end of the last section in the XBE, extends the section if necessary, and modifies it's flags for execution. The Return to Kernel routine returns a kernel with ONLY THE MODIFIED PUBLIC KEY to RETAIL! For example, it won't return a kernel running nkpatcher back to its original state. Once finished with that routine, it adds a 'JMP' to the Entry Point of the xbe, so that when finished executing our code, the game continues to execute.
Once the payload is inserted and the correct entry point is recorded in the 'JMP', the original entry point is edited to point at our code. So when the XBE is executed, our code is executed first to return the kernel to retail and then the game continues to run thanks to our inserted 'JMP'.
In the end, you can setup a simple uxe font setup without any PBL or NKPatcher and a HABIBI signed Dashboard. Then execute your 'FUCKMS'ed backup from HDD or Disc. The kernel gets wiped and your backup continues to play!
Of course, this was never made public for obvious reasons. A few of my XBE's made it around to people they shouldn't have back in the day and I contacted MS and had the flaw fixed. Therefore, now you may all bask in whats left of it's glory.
This will also only work with RETAIL xbe's. Not DEBUG executables.. Firstly, because Debug XBE's will not attempt to contact XBOX Live servers, but also because of their structure..
I found it quite useful however, as it allowed me grab DLC for any game on command, 'downloader.xbe' but also use XBOX Live with titles on the HDD. Cuts down on those load times.
I wouldn't suggest 'attempting' to use this now and signing into live. There is a check to automatically TERMINATE your XBL account (not just ban the eeprom) and Blacklist the Credit Cad. So, use at your own risk. I take no responsibility for your stupidity. You've been warned!
And yes, it's got quite a naming scheme don't you think?
Who knowz.. Maybe the NDURE gurus might find a use for it for returning to a retail XBOX Live Dashboard?!? Or maybe it will lead you into your own XBOX Live adventures!
Download FuckMS v0.3
