Full Xbox360 Game Raw Dump, without modified firmware

[Gael360]

Hi everyone,

To start sorry for my english, I do my best.

I found a way to make a full raw dump of your original Xbox360 games.
I didn't use a modified firmware because the existing ones are not public, and they are for only one or two models of DVD drive. My procedure use the hotswap method and a software I developed, named wxRipper.



So let's start with the hotswap method. I think everyone here already knows that the TOC of the original game is a fake one, so you have to load a big DVD (data or movie, more than 8Go) in your drive, then stop it (my software has a function for that), and replace by the game you want to backup.

Now the DVD drive thinks that you have a big DVD loaded, so it let you access all the Xbox DVD sectors (nearly 4000000). But because your hotswap DVD is larger than the Xbox DVD, you have to find the difference between the two DVD, to compensate the shift of the second layer (layer1).

The software has a function to find the shift, it's called 'Hotswap/Find magic number'. To do that, the software use some 'bench marks' on layer0 and layer1. These bench marks are already known by the software, and stored in a little text file (provided with the software). So for now you have to use a known game to find the magic number. When you have it, you can replace in the drive the known game by an unknown one. And if you want the software to add the unknown game to thje database, you just have to clic on 'Hotswap/Add game to database' and choose a name for the game.

For the moment, the known games are :

• PGR3_PAL
• QUAKE4_PAL
• QUAKE4_BONUS_PAL
• KAMEO_PAL
• PDZ_PAL
• PDZ_BONUS_PAL
• CONDEMNED_PAL
• CALL_OF_DUTY_2_PAL
• NEED_FOR_SPEED_MOST_WANTED_FRENCH_PAL
• NEED_FOR_SPEED_MOST_WANTED_ITALIAN_PAL
• FIFA_06_PAL
• FINAL_FANTASY_XI_BETA_PAL

(the last database file is available on my website : http://bouclier.free.fr/wxRipper.db)

So to recapitulate all the procedure :

For a known game :
1 - Select your DVD drive in wxRipper
2 - Load your big hotswap DVD in the DVD drive
3 - Let the drive read the TOC, then stop it with 'Hotswap/Stop drive'
4 - Replace the hotswap DVD by the Xbox DVD (without eject of course)
5 - Clic on 'Hotswap/Find magic number' and wait until the software give you the magic number and add a list of tasks in the main window
6 - Clic on 'File/Start dump', choose a name for the ISO file, and wait

For an unknown game :
1 - Select your DVD drive in wxRipper
2 - Load your big hotswap DVD in the DVD drive
3 - Let the drive read the TOC, then stop it with 'Hotswap/Stop drive'
4 - Replace the hotswap DVD by a known Xbox DVD
5 - Clic on 'Hotswap/Find magic number' and wait until the software give you the magic number and add a list of tasks in the main window
6 - Replace the known game by the unknown one
7 - Here you can clic on 'Hotswap/Add game to database' to add your game to the known list
8 - Clic on 'File/Start dump', choose a name for the ISO file, and wait

You should have issues with old DVD drives. During all the testing, I found working drives and non working drives, the only advice I can give you is to try with a recent drive, and if you can, a DVD burner.

The original post in french is here :
http://gueux-forum.net/index.php?showtopic=92178

I also posted an english topic on Xbox Scene :
http://forums.xbox-scene.com/index.php?showtopic=481609

And you can download the software from here :
http://bouclier.free.fr/wxRipper.php

To finish I want to remember you that this procedure do NOT solve the mediatype/mediaflag issue in any way, so you won't be able to burn the raw dump on a DVD9 and play with it, except if you do a hotswap with the original on the Xbox DVD drive.

This hotswap procedure is explained here :
http://forums.xbox-scene.com/index.php?showtopic=473693

And for the usual guys who say 'everything is useless if I can't play warez on my Xbox', the answer is to wait for a modchip or a firmware hack for the DVD drive, to make it report a false media type. This day I think you should be happy to be able to do a full rawx dump of your games ...

You can open the ISO file with another software I made : wx360. With this, you can explore the ISO, extract files or even replace files in it



It works with the raw dump ISO created with wxRipper, and the XDVDFS releases from Team Pi. It also should work with all Xbox1 ISO.
http://bouclier.free.fr/wx360.php

[BlueCop]

Interesting. I am going to try this in a few minutes. thanks for your work

[PS2MXBOX]

Hey this is GREAT! I have been following it on maxconsole by JSR but this was a much better guide. My only questions is, I have no access to PAL games and was wondering how hard it would be to add some NTSC games like COD2 NTSC to the database (other than ridge racer 6)?  Thanks alot for the tools!

[SiliconIce]

Have either of you (or anyone) attempted this? (curious if it should be moved)

[PS2MXBOX]

No I have not tried it as there isnt really NTSC support. Some other users are having success with it though

[Gael360]

I've made an update : wxRipper-1.1beta

The first modification is a second try on 'Find magic number', which occurs when the game is unknown.
So the software can find the magic_number, even if the game is not in the database. This function is new and not totaly tested, so I'm waiting for your feedback !!!

The second modification is the possibility to parse the game with wx360 directly from the DVD, no need to make an ISO! Because wx360 need the drive letter and the magic_number, it is started by wxRipper.

The command line is 'wx360.exe [drive] [magic_number]'. For example : wx360 D: 130016

You can download wxRipper-1.1beta from here : (wx360 is include in the archive)

http://bouclier.free.fr/wxRipper.php





Remember these versions are beta versions !!!

If you try this version on an unknow game, please add it to the database and send me the update.

[is0-mick]

Hi Guys,
Have tested both versions, both seem to work ok.

here are the entries for Kong (pal) and for Perfect Dark Zero
King_Kong_PAL   5F00438F3E585C89ADFA692CA1482F45   7A11F13874117772B2AC5B4634614FA5
perfect_dark_zero_PAL    66B16DB0081A36AC5F7511AD47F1F835   394E97D91170E7E1860B04E8D37D9095


While browsing the files, I found this in Perfect Dark Zero which may be of interest.
If its not ok to post, please edit.. thanks


; Are we enabling anything? On by default, if file present. This defaults to true,
; but if you ever want to disable all XeTV functionality temporarily without deleting
; your other settings in this file, just set "Enabled" to false.
;
Enabled=true

; Server IP address in string form
;
ServerIp=XX.XX.XX.XX (modified by mick)

; TCP port to hit on the server. May change from month to month on public test deployments
;
ServerPort=1000

; Are we running in Secure mode (through the SG). If against SENET or any other large-scale
; testing environment, then likely yes. If your own development machine, then most likely no.
;
SGEnabled=false
         
; Mask used when finding secure gateways, "*" for any. "" for none (as in the non-secure case)
; You may simply leave this blank or missing in order to leave a valid default mask for the
; non-secure server testing.
;
SGDefaultMask=

; Enable this flag to force all games to broadcast to server (instead of using server-side
; heuristics to determine which games are interesting). Makes it much easier to test
; spectator mode
;
ForceFeed=false

; Log all uploaded feeds to local devkit disk as well, making it easier to debug feed issues
; at a later date
;
FeedLogging=false


Mick

[is0-mick]

Just to add? are the "magic numbers" supposed to be the same on discs?  I kept getting 32544?
I dont know if it had anything to do with the DVD i used as 7.5gb was the largest one I could find?

Mick

[Gael360]

here are the entries for Kong (pal) and for Perfect Dark Zero
King_Kong_PAL   5F00438F3E585C89ADFA692CA1482F45   7A11F13874117772B2AC5B4634614FA5
perfect_dark_zero_PAL    66B16DB0081A36AC5F7511AD47F1F835   394E97D91170E7E1860B04E8D37D9095

Thanks for the checksums. For PDZ, can you tell me more about your version? Your checksum is good because I have the same for layer1, but the layer0 checksum is different, which means your version is different (language, version, DVD zone, ?!?) of mine.

For the file you found, (xetvconfig.ini), I already know this file, it seems to be a config file for dev purpose, but I think you should remove it from your post...

Your magic number still the same if you use the same hotswap DVD, no problem, keep it !

One time again, the magic number depends from the size of the hotswap DVD, and only from it !

[is0-mick]

Ok Thanks for the "magic number" info. I have edited the IP address.
I did a who is on the IP and it belongs to microsoft (now theres a suprise !)

My PDZ is PAL UK version, I cant find any identifiers other than that on the disk
750FF1D9-L1 21
750FF1D9-L0 25
are numbers that appear on the ring where the spindle goes (BCA area?)

My COD2 wasnt recognised either. I will try to get the numbers for that next.

Mick

[Gael360]

My PDZ is PAL UK version, I cant find any identifiers other than that on the disk
750FF1D9-L1 21
750FF1D9-L0 25

My numbers are :
509FBB6B-L1 03
509DBB6B-L0 01

It's the 'deluxe' version, with the bonus DVD. In the folder pdz\ASSETS\Audio, I have 3 sub folders : english, french and german. What about yours ?

[is0-mick]

My Call of duty 2
Call of duty 2 UK PAL   1576A612B33F5097532B6193F22F02B7   2C3D848E784BBB8F6F9CBB2D00FFF4C6

yes i have 3 folders on PDZ too english, french, german.
Is there anyway of remembering the magic number? if you use the same disk? as it would really speed things up if you could skip that part if using the same BIG disk

Mick

[is0-mick]

Project Gotham Racing 3 (also noticed another game on the disk called GeometryWars) gw.xex

PGR3_UK_PAL   73C4C9B6635731C7A386A0947564EED8   C0B524940B670CD3435167B4CCD62AD5

Also I didnt realise that you could just swap the disk without doing another "find magic number", so ignore previous comment.

Mick

[InterestedHacker]

Nice work, very interesting!

EDIT: BTW, I remember our little flame-ette war on the other post, but I take my hat off to you with this.  It proves that even the most apparently useless disovery (like hot swap) can produce something of value.  It's a good lesson for a lot of us to take in, with regards to some of the posts that we often dismiss as worthless comments.

[Tiros]

It occurs to me that putting a switch on the tray-out line may ease the hot swap effort. Maybe use the paper clip method after the switch is open.

[rekphiv]

I just added PGR3 NTSC to the database. i dont have the numbers in front of me anymore but hopefully the db will be updated shortly. Im going to do COD2 NTSC right now. wish me luck.

[rekphiv]

CALL OF DUTY 2 NTSC
layer0 1576A612B33F5097532B6193F22F02B7
layer1 2C3D848E784BBB8F6F9CBB2D00FFF4C6

now alot more people should beable to use this 

[rekphiv]

FINAL FANTASY XI OXM BETA NTSC
Layer0 88900171AD503E1B23E35029F65016B8
Layer1 28617DE6E8D64DF2A34E6FE6CFD62168

[Gael360]

FINAL FANTASY XI OXM BETA NTSC
Layer0 88900171AD503E1B23E35029F65016B8
Layer1 28617DE6E8D64DF2A34E6FE6CFD62168

Manyt thanks for your help. But it seems to take you time for this, do you know thaht you can do this :

find magic number with a known game
change the game by an unknown one
clic 'add to database'
change the game by an unknown one
clic 'add to database'
change the game by an unknown one
clic 'add to database'
...

It's fast and secure

[Serie]

Lo
Gael360 amazing work !
i have a question i noticed our dumps have the dvd video track and pi´s not , but ours are not mutch bigger so i ask ....
whats th difference betwen our dumps and pi´s ? are our dumps perfect dumps of the disc ?
thanks for ur great work keep it going !