Xbox360 Stealth

[holy.concept]

Backups, Xbox-live, Security Sectors, Stealth and more

Microsoft is sometimes doing additional checks on discs: PFI/DMI (so images without these sectors (or if using an old FWs without support for PFI/DMI) can probably be detected easily), drive inquiry (reads ascii string from drive), and capacity (reports capacity of disc) are requested. Strange thing here is MS requests 0x8000 bytes for PFI and DMI, while it should normally be 0x0800 bytes. TheSpecialist pointed out that the remaining 0x7800 bytes contains the relocated SS and PFI on burned discs ... which would make it very easy to detect backups for MS. C4E however said this would not work on TS drives as its cut off to 0800 even if more data is asked, it's unconfirmed how modified HLG FWs drives respond to this atm.
The "read capacity check" will also work as detection on HLG because, unlike the newest TS FWs, it doesn't have true 'stealth media' yet, these drives are reporting back the burned disc based size of PFI instead of the correct PFI.

Current situation:

• Read Capacity of disc; this reports wrong disc size for ALL Hitachi FW, Samsung (Xtreme +3) will pass this check.
• All images without DMI/PFI will fail. Hitachi fails to report back, Samsung reports correct DMI/PFI.
• All Hitachi's will fail the read capacity.
• MS is banning based only on the timings of the drive, ss/pfi/dmi checks, capacity, drive inquiry and c/r verification.

Apparently there's also an issue with SS (Security Sector) extracted from Hitachi-LG, some necessary data is screwed ... which means that probably only the Toshiba-Samsung / Kreon setup has been extracting correct SS. It's also highly suggested to use an external power to flash next time, since MS could possible be logging if your Xbox 360 has ever booted without a DVD-drive connected to it.

The new Xtreme Online FW will have less features than the current Xtreme FWs: no single-layer (DVD5) support, no ripping of games (0800 mode), but more features to safely play from burned discs (emulate the exact speed and timings of the original games) and prevent booting from un-safe discs (without PFI and DMI or bad SS - so discs not passing the 'Stealth Check' are not going to boot on the new firmware), or images that aren't exact dumps of the original. Of course no guarantee MS will never ban you based on new checks.
This new FW will be for new consoles being modded, because even if you're not banned from LIVE yet there's no way to know if MS already has info/logs on your console ID regarding timings or other stuff.

 
How to check your dvd-backups for stealth and present PFI/DMI sectors:

XDVD mulleter



This is an alternative method:

1. Insert back-up
2. Start DVD Mulleter
3. Toggle view ISO details
4. Click Next
5. Select "Load from DVDR" tab
6. Select Drive from drop down menu
7. Click Load disk
8. ISO loaded successfully
9. Next
10. If all boxes are ticked, your backup should be stealthpatched

How to rebuild your backups, so they are stealth.

Firstly you'll have to backup your backup, either by using your PC Kreon drive, or your Xbox 360 samsung drive. Read more about making a backup further down in this tutorial.

Then after you have dumped the image, you might want to scan it by using DVDmulleter to see which partitions are missing, so you know which sectors are missing. Mostly the PFI, DMI, and video sectors are missing from disc, which makes the disc non-stealth.

The new Autofix feature on XDVDMulleter beta9, will autostealth your image, if the files for it are present in the online database. If the files aren't present, you'll need to manually find them, and inject them with XDVDMulleter. Or you could ask around so someone will upload proper stealthpatches from an original disc. Patches :
- ss.softmodfiles.net
- 360patches.com

How to check your images for stealth and present PFI/DMI sectors:

XDVD Mulleter (highly recommended)



This is an alternative method:

1. Insert back-up
2. Start DVD Mulleter
3. Toggle view ISO details
4. Click Next
5. Select "Load from file" tab
6. Select Drive from drop down menu
7. Click Load disk
8. ISO loaded successfully
9. Next
10. If all boxes are ticked, your backup should be stealthpatched

Extra info about Stealth Media, SS, PFI, DMI and video sectors.

* Stealth Media
This is to clear up a few misconceptions about what Stealth Media is and how it works. This is not firmware stealth. Reading the firmware itself for changes is not controlled by the firmware itself, it is a low level hardware function which cannot be stopped by firrmware code.

Stealth Media is all about making a backup disc appear to the Xbox360 host exactly the same as an original. Although this was already done by the Security Sector and the challenge/response, there remained a number of differences on the disc that are currently not checked for. It would be very easy for the dash or the particular game to perform these extra disc checks. There are four main aspects to Stealth Media:

* PSN Lockdown:
This is a two part process:
-Before disc authentication (security sector,challenge response) is performed the drive will only allow vaild PSN reads as defined in the PFI sector. This is currently the standard video partition. Any request to read outside this range is not allowed - as per originals. (No more reading of the backup PFI,DMI,SS sectors.)
-After disc authentication is performed and the drive is unlocked only valid PSN reads are allowed from the range defined by the Security Sector, this is the standard game partition. Any request to read outside this range is not allowed - as per originals.

* PFI Sector (Physical Format Information):
This sector is contained within the lead-in and contains information about its physical format. Disc booktype, start PSN and end PSN and Layerbreak are contained here. Currently all Xbox360 and Xbox1 games have the same PFI information, but that may change.
On Writable media (our backups), this also contains media specific information such as Media Code/Manufacturer ID and Media Product Revision number.
Any requestes for this information is now redirected to the the PFI sector now at $04FB1D (for Xbox 360 backups) or $0605FD (Xbox 1 backups), if it exists. If it does not exist (pre V3 backup) a seperate embedded PFI is used for Xbox 360 and Xbox 1.

* DMI Sector (Disk Manufacturing Information):
This sector is also contained within the lead-in and contains information about the Disc manufacturer, such as Company name, batch id etc. This is currently different for each Xbox360 and Xbox1 game in each region.
Any requestes for this information is now redirected to the the DMI sector now at $04FB1E (for Xbox 360 backups) or $0605FE (Xbox 1 backups).
A pre V3 backup will always return blank information for this. (A possible detection method.)

* Video Partition:
When Extreme V1 was released ,the disc build included a blank video partition as it wasn’t required for games to boot. As this can be checked by the XBox360 host, the standard video partition from any game was included with the stealth firmware. The video partition is nothing more then the message you will get once you put the 360 game in a dvd player; “To play this disc, please put it in an Xbox 360”.

* Conclusion:
As of today , these extra disc checks are being performed.

Non-Stealth backups will still boot with stealth firmware and will be enhanced with the PSN Lockdown and PFI Sector embedded in the firmware. These backups will have no DMI and possibly have a blank video partition, both of which can be checked for.

Stealth backups will still boot with non-stealth firmware but will be exposed to the above top three differences (PSN Lockdown,PFI,DMI) making the backup detectable.


not made by me from 360hax

[Demonkunga]

I don't care if you ripped this from somewhere. Thank you for your contribution to MMOwned.

[Dragonshadow]

Put it on milkthenet!!!