From xboxdevwiki
Jump to: navigation, search

Format code: different codes / serial number relation

  • More data is needed to sort out which Xbox a particular code works on, and what other codes exist. Is it based on Xbox scene version numbers? Most likely, NOT! Is it based on factory of production? Is it based on BIOS version? Does anyone know?

This seems to be handled by settings3.xap: thePanelJoystick.secretKey = "Y" + theConfig.GetRecoveryKey();

The GetRecoveryKey function seems to look up symbols from "AXYUDLR" based on some variation of the Xbox HD Key + another random 16 byte key (hardcoded into the kernel). Combined using XcHMAC(hardcodedkeyimentioned, 16, XboxHDKey, 16, NULL, 0, buffer).

Then the key is generated using:

uint16_t* buffer_words = buffer;
for(unsigned int i = 0; i < 4; i++) {
  code[i] = "AXYUDLR"[buffer_words[i] % 7];

This function is similar to the one being used to generate Xbox Live account crypto keys. We should probably write a tool to locate these functions and extract the keys. All of these are contained in the dashboard app.

--JayFoxRox (talk) 02:16, 2 September 2017 (PDT)