Print

[sosotiit]

This thread is now closed and moved to

Tutorial On Making Backup With Xbc / Imgburn



---------------------------------------



Backup and media stealth (DMI, PFI, Video partition) and how to check: After you extracted your image with  XBCreator or Schtrom,  you can check the stealth with XdvdMulleter

• How to test a burned DVD in post #2 below: If some of the components are missing or in the event that you are unsure how you built that backup, we suggest to redo it from the original with a samsung drive**/Kreon drive.
• Using Wxripper and a hitachi drive: Not recommended anymore. It seems the SS extracted with Hitachi drive should not be used  because easier to detect. For those who want to prepare for the day the Hitachi FW supports media stealth, you should till extract your backups with a Samsung**/Kreon Drive using XBCreator/Schtrom. You would then be able to do a "Complete backup" so no point in extracting separate pieces and merging.
  
  WHAT NOT TO ASK at XS
• How to extract an image from a backup:  NO image extraction from a backup. We do not care what the cute reason is, we heard them all and it is no.
• How to merge additional stealth components in an existing image. Redo them from the originals.

-----

QUOTE

**The lastest iXtreme Samsung FW will not allow you to rip (extract)  games with any software (XBCreator, schtrom, IsoBuster...). You will need to reflash to 5.3 or acquire a Sh-D162C(ide)/SH-D163A(sata) for your PC in order to backup games.

This post has been edited by sosotiit: Dec 22 2008, 04:07 AM

[sosotiit]

With a burn dvd you can validate that the three stealth components (DMI, PFI and Video) are present. When this started, many were always using the same components for all their backups, so the presence of all components is not a guarantee of 1 to 1 backup.

Only you know how you prepared your backups, and if you always used the proper components. In doubt, we strongly suggest you redo your backup using XBCreator (or Schtrom) and a samsung/kreon drive. Obviously if any components are missing you should redo it as well.

*** EDIT NOTE***
Badsheepy issued a new version of XDVDMulleter which introduced many new features and a few corrections. At this point that seems like the easiest method to verify your burned DVD for stealth. See post below for how to use it.
****************************
Updated version to come

-soso

This post has been edited by sosotiit: Jul 4 2007, 02:37 PM

[mace1337]

Tutorial: Verifying media stealth using XDVDMulleter

For this tutorial you will need:

-XDVDMulleter, currently version 9 (referred to as XDVDM from now on)
-A xbox backup
-A computer with a DVD drive  (IMG:style_emoticons/default/smile.gif)

NOTE: As above, you can only verify the presence of the Video, SS, PFI, DMI and other factors required for stealth.
The validity of these can only be verified against the original, as always, when in doubt. re-rip it.
Also: This does NOT guarantee that microsoft is not able to see if you are running backups or not, it is simply an extra check for your own peace of mind.

I've verified results against the method described above and they give the same results.

Now let us begin.

Step 1
Here you can see the main screen of XDVDM, you can see a few options, the one we need is the top one.
Select that and click next.

(IMG:http://memberuploads.xbox-scene.com/uploads/2007_07_05/00_48_15_image1.jpg)

Step 2
If you haven't already, insert your backup into your DVD drive. Remember what drive letter the DVD drive has.

-Click on the "Load from DVDR" tab (if you have just done a rip and want to validate the file do "Load from File")
-Select your drive's letter with the drop-down box
-Now click "Load Disc"
-Loading takes a short while, don't worry. It will eventually say ISO loaded successfully*
-When it's done and the next button is active, click the next button for the stealth analysis to start

(IMG:http://memberuploads.xbox-scene.com/uploads/2007_07_05/00_48_38_image2.jpg)
* if it does not load successfully the first time you press "Load Disk", it sometimes require a second "Load Disk" request to function properly.

Final step

If there are any stealth issues, then you will be prompted during the analysis.

In the final screen you can see all sorts of handy information, like game region, number of files etc...
The thing we're interested in is the "Xtreme Compatibility" and "ISO Type".

The top left checkboxes under "Xtreme Compatibility" tell you which elements of the backup is stealthed or not.

The bottom radiobuttons and checkbox tell you about compatability with the xtreme firmware.
Important is the "iXtreme Compatible" checkbox, it needs to be checked.
The ISO type needs to match with your game,xbox360 for 360 games and xbox for xbox game.

Below are two images I made of 2 games.

This is a backup, one I made "back in the day" of one that has DMI or PFI present but improper video files.
You can clearly see the checkbox that is unchecked. This backup is considered UNSAFE.
(IMG:http://memberuploads.xbox-scene.com/uploads/2007_07_05/00_48_58_image3.jpg)

This is a backup which I made later on, and it has all the stealth sectors present, this backup is theoretically safe,
but with all the recent bannings no-one can be sure. This method is purely for your own peace of mind.
(IMG:http://memberuploads.xbox-scene.com/uploads/2007_07_05/00_49_17_image4.jpg)

validating a redone image
For all the backup that are not adequate and must be redone from the original, you can verify the image before burning it by selecting "Load from File" instead of "Load from DVDR" in Step 2 adn then following the same step as above.

----------------
Updated on july 4th by sosotiit with permission of mace1337

This post has been edited by sosotiit: Jul 5 2007, 04:58 PM

[sosotiit]

Mace1337, great job, luv it  (IMG:style_emoticons/default/biggrin.gif) ,

great job on the tut  (IMG:style_emoticons/default/smile.gif)


-------------------the  old & long way to check  (IMG:style_emoticons/default/biggrin.gif) ----------

Following is how to verify that each component is present on your backup DVD. The DMI/PFI part is adapted from information published by FuzzyLogic for at xboxhacker.net , all credits to him.

Samsung(fw 5.3 or before) /Kreon SS only
Another key point, it seems that SS extracted with Hitachi drive may be detectable and backup made with such ss files will not boot under the new firmwares. You will therefore need SS extracted with either a Samsung ms25/ms28 or a Kreon fw drive (SH-D162C/SH-D163A).
There is no way to test this, but you should know how you have made your backups. Note that the new firmwares will prevent you to boot from a SS extracted on a Hitachi Drive so that will tell you.
Until then we suggest you do not use backups if you are unsure the SS were made with Samsung/Kreon Drive


Video partition
Insert your backup in your PC DVD drive and if you click on that specific drive in Explorer you should see something like this.
(IMG:http://memberuploads.xbox-scene.com/uploads/2007_05_23/23_37_02_video.jpg)
If you cannot see that structure Audio_TS/Video_TS directory with similar files, then you do not have a valid video partition on you backup. Note that the file may vary in size (the two larger files should be typically in the 2000 to 4000KB). There is sometimes 1 or 2 additional files.
If you do not have a structure like that, or that there is no files in it then you do not have a valid partition and should redo your backup from the orginal.
Note that the label (in this case XBOX360) can vary.
For a more advanced validation, you can extract your video partition with XBCreator from your original. It requires ripping the entire image and extracting the video section (in Image Tools)  The resulting file is in .bin format and can be mounted with Alcohol or daemon tools, and you can then confirm that you see the same files and label. In my case this is what I have
(IMG:http://memberuploads.xbox-scene.com/uploads/2007_05_24/01_01_45_video2.jpg)
Backup done with XBCr (or Schtrom) and a Samsung/Kreon drive using the Complete backup methods, that section should present.

Physical Format Information
The PFI is relatively generic and only a few games have minor differences in it.
You can view the PFI info on your backup using DVDInfoPro: put the bakup in, select the proper drive, in the right-bottom corner choose Read blocks from media and enter 1FB1D and hit Read.
(IMG:http://memberuploads.xbox-scene.com/uploads/2007_05_24/01_15_40_dvdip1.jpg)
You will get the info currently at the PFI position displayed.
The first line (line 00000000) should contain some data and all the rest should be 00
(IMG:http://memberuploads.xbox-scene.com/uploads/2007_05_24/01_19_15_dvdip2.jpg)
If the entire file is filled with zero, or not as per the pattern above, we suggest you redo your backup.
For a more advanced validation, you can extract your PFI with XBCreator from your original. The resulting file is in .bin format and can be open with an Hex editor allowing to compare to what your backup contains.
Backup done with XBCr (or Schtrom) and a Samsung/Kreon drive using the Complete backup methods, that section should present.

Disc Manufacturing Information
The DMI has significant differences from one game to the next.
You can view the DMI info on your backup using DVDInfoPro: put the bakup in, select the proper drive, in the right-bottom corner choose Read blocks from media and enter 1FB1E and hit Read.
You will get the info currently at the DMI position displayed.
The first 4 and the last 29 lines (lines 00000000 to 00000030 and lines 00000630 to 000007F0)  should contain some data and all the rest should be 00.
(IMG:http://memberuploads.xbox-scene.com/uploads/2007_05_24/01_34_24_dvdip3.jpg)
If the entire file is filled with zero, or not as per the pattern above, we suggest you redo your backup.
For a more advanced validation, you can extract your DMI with XBCreator from your original. The resulting file is in .bin format and can be open with an Hex editor allowing to compare to what your backup contains.
Backup done with XBCr (or Schtrom) and a Samsung/Kreon drive using the Complete backup methods, that section should present.

If you have more information, comments or suggestions, plse post them (while respecting the XS posting rules and the one in the first post above)

Hope it helps,

thks, -soso

This post has been edited by sosotiit: Jul 4 2007, 10:11 PM

[badsheepy]

Checking of video data is in the forthcoming beta 8, as is a whole load more stuff.

It actually never occured to me to have it test the data in the video partition until someone mentioned it, because generally i just put the disc in and see if windows bugs me with the 'do you want to play this dvd' dialog.
So whilst there is a video checkbox in xdvdmulleter atm, it checks for the presence of a video partition, not for the presence of video files. If you want to check the video files, pop it in the drive/mount it and see if there is files on it

Oh and Xdvdmulleter, and xbox backup creator i think, both check the content of ss/pfi files also in an attempt to validate them. So you can be pretty sure if the files are marked there that they are there and genuine stealth files. (Although a perfectly valid set of stealth files for a different game will pass the test too, but obviously not contain the same data)

And people who are considering rebuilding their ISOs, it may well be worth waiting a little longer for new releases of xbc etc which will have support for split video files. (Although non split video isos will still supposedly be supported in ixtreme fw, and perhaps indetectable?) Or at least for the next fw and a bit more information

[sosotiit]

Hey badsheepy, huge thanks

Currently the video partition in original is split between the two layers, whereas current backups with XBC (and schtrom) where all made with the entire video partition on the first layer.
It seems that according to C4Eva this is not a big issue and that there might be a feature in the new fw that will compensate for that in the new FW.

Xbcreator can do a backup as per the splitvideo format with an entry in the register. But just after your post ( it is always like that), Redline issued a warning at Xboxhacker that a conflict between the splitvid and the new C4Eve Ixtreme firmware was identified and that people should stick to current XBC format with stealth.

It seems for all of you avid of hacking, some challenging times and your SH-d162c/burner will see some actions.

Another key point, it seems that SS extracted with Hitachi drive may be detectable and backup made with such ss files will not boot under the new firmware

QUOTE( Conclusion & Recommendations, May 27th 2007  @  9am)

X360 with Samsung Drive

Your backups already have all stealth components (DMI, PFI, Video, samsung/Kreon SS)
• Keep them like that until the situation with splitvid is clarified
  
  Your backups DO NOT have all stealth components
• For all those you want to play offline now, you should redo them with all components (DMI, PFI, Video, samsung/Kreon SS)
• You may have to redo them when the situation with splitvid is clarified

X360 with Hitachi Drive

Wait for the new firmware before playing any backups (even with stealth backup) as the current FW do not use the stealth components.

It will be interesting time  
-soso

[MPA]

Haven't seen any mention of this elsewhere so I'm not sure if I'm in the right place.

Noticed the XDVDMulleter sometimes gives inaccurate responses concerning video patched backups.

I was wondering if video patching is the least important of the security issues. I understand it is highly recommended backups have all procedures in place but was wondering if the pfi and dmi sectors where of more importance than the video?

[sosotiit]

good question, it seems that DMI/PFI is more likely to be checked, but who knows. For a 2$ disc, it is not worthed to risk a few hundred $ console. if you are to redo it, you might just as well include it.

It is not difficult to check put it in you pc and check if the video_TS directory has files as described above, no need of any soft for that.

-soso

This post has been edited by sosotiit: May 27 2007, 09:23 PM

[lukebe]

Interesting... acidf;ash test was fine with schtrom 3.2 but failed (video) when I checked with older 2.1. Must be a bug in the older version. The image was ripped using 3.2.

[Pinion]

What should be done about older backups with the fake video partitions? Is it necessary to inject the actual video360.iso with schtrom or are they ok with the padded/false video partition?

[sosotiit]

QUOTE(Pinion @ May 28 2007, 12:39 AM)

What should be done about older backups with the fake video partitions? Is it necessary to inject the actual video360.iso with schtrom or are they ok with the padded/false video partition?

  (IMG:style_emoticons/default/blink.gif) In the pinned, even in the first post of this thread (IMG:style_emoticons/default/blink.gif) , REDO from originals

QUOTE

...
WHAT NOT TO ASK at XS
• How to extract an image from a backup:  NO image extraction from a backup. We do not care what the cute reason is, we heard them all and it is no.
• How to merge additional stealth components in an existing image. Redo them from the originals.

-----

-soso

This post has been edited by sosotiit: May 28 2007, 03:46 PM

[sosotiit]

UPDATE  ,  may 28th, 2007
Currently the video partition in original is split between the two layers, whereas current backups with XBC (and schtrom) where all made with the entire video partition on the first layer.
According to C4Eva this am, the new fw that will compensate for that.

Xbcreator can do a backup as per the splitvideo format, but it is not recommended at this point.

It seems for all of you avid of hacking, some challenging times and your SH-d162c/burner will see some actions.

Another key point, it seems that SS extracted with Hitachi drive may be detectable and backup made with such ss files will not boot under the new firmware

QUOTE( Conclusion & Recommendations, May 28th 2007  @  1pm)

X360 with Samsung Drive

Your backups already have all stealth components (DMI, PFI, Video, samsung/Kreon SS)
• Keep them like that. if ever the need for splitvid becomes clear we will post it.
  
  Your backups DO NOT have all stealth components
• For all those you want to play offline now, you should redo them with all components (DMI, PFI, Video, samsung/Kreon SS)
• You may have to redo them if ever splitvid becomes a requirement.

X360 with Hitachi Drive

Wait for the new firmware before playing any backups (even with stealth backup) as the current FW do not use the stealth components. Note that you will need SS made with a samsung or Kreon drive.

-soso

This post has been edited by sosotiit: May 28 2007, 05:29 PM

[Graph]

where can some one find (get)the pfi and dmi.bins of an specific game if they are missing when checked with xbc...  

thanks

[xnoelahg]

I noticed that mulleter doesn't detect the region on NTSC/J games... weird.

[Muzzakus]

QUOTE(badsheepy @ May 27 2007, 09:49 AM)

.
...
Oh and Xdvdmulleter, and xbox backup creator i think, both check the content of ss/pfi files also in an attempt to validate them. So you can be pretty sure if the files are marked there that they are there and genuine stealth files. (Although a perfectly valid set of stealth files for a different game will pass the test too, but obviously not contain the same data)
...

I'm curious as to the actual purpose of the information the DMI, PFI contains, and why they may be different from one game to game.  And as you mention - what if you have some kind of a Frankenbuild..E.g. an old image patched with these sectors from another game?

Can this result in a valid stealth check - yet detectable by M$ as something fishy ?

Cheers,
Muz