Xtaf-CLI (Xtaf v1.0)

Xtaf is a Windows CLI for Xbox 360 image mounting, recovery, and size tooling.

About

The installed terminal command is xtaf.

Xtaf-CLI is a focused Xbox 360 filesystem utility intended for automation and integration workflows (including xecli). It provides partition-aware mounting, recovery/carving workflows, and image-size reduction tooling for FATX-based storage images.

Scope

• Xbox 360 only.
• FATX, STFS (CON / LIVE / PIRS), and GDFX (XISO) handling.
• Partition-aware mount flow plus custom-volume flow for non-standard images.

Quick Start

1. Install WinFsp 2.x on Windows.
2. Use .NET Framework 4.5.2 (or newer compatible runtime).
3. Run:

xtaf -i "D:\images\hdd.img" --list-partitions
xtaf -i "D:\images\hdd.img" --partition content -m X:

When run from an elevated prompt, drive-letter mounts are created as WinFsp global mount-manager drives so they appear in regular File Explorer.

Core Features

• Mount one partition or all partitions.
• --all-partitions reports partitions that fail to mount, such as invalid cache partitions, and keeps any valid partitions mounted.
• Diskpart-style helper (--diskpart).
• Recovery pipeline:
  • metadata scan
  • bounded metadata scan for large-image proof runs (--metadata-scan-limit)
  • deleted file recovery
  • signature carving
  • cross-reference CSV linking recovered/carved artifacts by probable directory groups
• Image size tools:
  • trailing-zero audit
  • trimmed copy creation
• Custom volume tools:
  • explicit --volume-offset / --volume-length targeting
  • FATX used/free stats
  • direct volume extraction for smaller standalone images

Build

dotnet build .\Xtaf.sln -c Release

Run tests after building:

dotnet build .\Xtaf.sln -c Debug
.\build\Debug\Xtaf.Tests.exe
dotnet build .\Xtaf.sln -c Release
.\build\Release\Xtaf.Tests.exe

Build notes:

• WinFsp 2.x must be installed on systems that mount images.
• The checked-in dist\winfsp-msil.dll is a compile-time reference from the official winfsp.net NuGet package. Release folders should not include an app-local winfsp-msil.dll; Xtaf.exe loads the WinFsp-installed MSIL so it matches the installed driver.
• Recovery metadata scans print start/progress lines. Use --metadata-scan-limit <N> with bytes, KiB, MiB, or GiB units for bounded proof runs on large images.

Usage

xtaf -i <ImagePath> [mount|recovery|size options]

For full command list and examples, see COMMAND_GUIDE.md.

Output Conventions

• Recovery output contains:
  • metadata_scan.csv
  • carve_scan.csv (if carving enabled)
  • cross_reference.csv
  • grouped metadata_recovered\...
  • grouped carved_files\...
• Exit codes:
  • 0 success
  • 1 runtime failure
  • 2 CLI usage error

XeCLI Integration

Fully integrated in XeCLI.