2,101 Reply by Jackal

  • Jackal
  • Moderator (Retired)
  • Online
  • Registered: 2006-12-23
  • Posts: 4,132

sarami wrote:

Siedler III, Die - Das Geheimnis der Amazonen (Germany)

========== LBA[339222, 0x52d16]: Main Channel ==========
       +0 +1 +2 +3 +4 +5 +6 +7  +8 +9 +A +B +C +D +E +F
0000 : 00 FF 00 FF 00 FF 00 FF  00 FF 00 FF 00 FF 00 FF   ................
0010 : A1 2D 9D 21 73 A3 4C 44  31 F6 87 EE 6E 6B E8 85   .-.!s.LD1...nk..
0020 : 30 65 FE 2B 55 00 1F BC  CB C5 45 61 5A 15 B7 93   0e.+U.....EaZ...
0030 : FB 91 30 70 CD 01 7B D2  DE 22 04 EE 48 2E B3 0B   ..0p..{.."..H...
0040 : F0 29 68 DE A2 62 63 24  B5 93 3F F3 EA 8E BA 72   .)h..bc$..?....r
0050 : D8 14 0E 03 66 D1 FB 79  49 BA 52 44 78 01 60 2C   ....f..yI.RDx.`,
0060 : BE A0 64 3B B3 B5 54 2E  E5 81 2C E5 7B A5 39 24   ..d;..T...,.{.9$
0070 : C2 E7 9A 40 D9 22 93 E3  CC BF D5 A9 A5 05 88 D0   ...@."..........
0080 : D2 34 61 66 34 E7 5C B6  01 52 72 20 40 C9 BA B0   .4af4.\..Rr @...
0090 : 08 CC D7 A1 32 BB 4C 6A  07 44 86 95 5B 6A EE 82   ....2.Lj.D..[j..
00A0 : 06 4D 7F 6D 25 A5 FD AA  CB 18 87 6D 2E 08 23 C7   .M.m%......m..#.
00B0 : 7A 29 09 73 24 DF BC 78  AC 9F 49 AF 28 11 0C 85   z).s$..x..I.(...
00C0 : FE 8D 68 5F AD 2F 58 95  69 0B AD 1D AD 33 B4 58   ..h_./X.i....3.X
00D0 : DE D4 BF FE 57 EC 7A 19  F3 B5 C3 91 D9 BD EE A0   ....W.z.........
00E0 : 2A 93 B3 EF E9 E3 52 07  43 B2 BA 0C 66 AD 85 B0   *.....R.C...f...
00F0 : ED 2E 20 34 24 F5 20 2E  A1 30 33 84 2B A0 D6 46   .. 4$. ..03.+..F
0100 : CC AF CB FE EF DD 75 AF  63 1D 4D ED AF EE 2D 7D   ......u.c.M...-}
0110 : F2 ED 77 13 EB B3 D3 CF  77 80 67 22 65 4B 42 36   ..w.....w.g"eKB6
0120 : 20 BC 6B EA E9 F6 C5 06  93 0F AB 99 1E 49 E3 B1    .k..........I..
0130 : 80 19 DE DC 26 13 1A 35  B9 1D 19 CE 1F 21 56 1E   ....&..5.....!V.
0140 : F9 39 57 9C 89 10 CF CB  26 D9 03 6D 90 93 40 78   .9W.....&..m..@x
0150 : E7 5D 61 B8 55 3B E5 D9  7F 8E 6F E0 EF D9 2C 55   .]a.U;....o...,U
0160 : 6A 6F D8 E9 9C B3 0F C7  65 82 0A 52 AA DE D0 CE   jo......e..R....
0170 : C8 92 0D 99 1A 05 38 EE  D3 58 65 B1 B9 C7 AA 00   ......8..Xe.....
0180 : 6E A8 D3 8F F4 BF CF FB  0D 4B 3C FF 11 F5 31 92   n........K<...1.
0190 : 14 93 A1 FF FA 13 18 6B  AC 93 AF 14 4D 74 26 D7   .......k....Mt&.
01A0 : D8 B4 40 42 5D 31 56 1D  50 08 4E B7 E5 3A 17 AC   ..@B]1V.P.N..:..
01B0 : 02 6E E2 53 54 3E 55 A7  98 5B 28 45 FE B3 6D 0C   .n.ST>U..[(E..m.
01C0 : 35 40 38 B6 35 DC D8 AA  A8 0E 14 F6 D1 23 8B 06   5@8.5........#..
01D0 : 59 4B 3F DD 6E 91 56 24  01 CA EE 19 AF 6C BD AF   YK?.n.V$.....l..
01E0 : 85 F1 2E 2B AE BF 4C 94  3F 18 C9 84 87 9A 0C 50   ...+..L.?......P
01F0 : 54 32 EA 4F ED 6C E3 BD  62 D3 D0 1A 2E C5 B8 80   T2.O.l..b.......
0200 : C8 E0 5C 13 ED F9 E4 30  F5 75 08 35 15 AE E4 7E   ..\....0.u.5...~
0210 : E2 13 D3 73 84 B5 2C F3  E1 D6 47 F3 A0 94 9D 81   ...s..,...G.....
0220 : CD 6F 80 CC 01 05 FA 6E  B2 B2 E3 7C 6A 7E 6F 65   .o.....n...|j~oe
0230 : FA 2B A4 11 73 6C AD 4E  8D BA AA 73 85 0C F2 56   .+..sl.N...s...V
0240 : C9 77 FA 7F 62 98 44 45  BC CF 4E 83 21 92 39 D3   .w..b.DE..N.!.9.
0250 : E9 8A 86 FE 80 CD 24 89  DA F6 8F 18 15 D3 E1 16   ......$.........
0260 : 3F 81 70 8D 6C AB ED 72  A6 30 27 5D 9E 23 DC 3D   ?.p.l..r.0'].#.=
0270 : 5E A6 C8 3E 10 D4 55 18  BE 84 3E 3C 21 4D 75 53   ^..>..U...><!MuS
0280 : 0F 83 3B FF F6 0C 3B 51  5F D4 4E 2D 28 FF 98 2E   ..;...;Q_.N-(...
0290 : 7E 4C BC 31 6A 46 9C 2E  AC C3 C1 15 2E EA 3A F9   ~L.1jF........:.
02A0 : EF EC E4 D2 93 E7 F5 F3  0F 73 31 E9 ED E0 DC E5   .........s1.....
02B0 : AA E2 43 41 23 92 89 2C  F0 6E 91 5E B5 93 E4 77   ..CA#..,.n.^...w
02C0 : 21 66 49 6E 15 DA 5A 39  CB FF 1C 77 10 6D B0 BA   !fIn..Z9...w.m..
02D0 : 3D BA 72 BC 9C 17 D3 A3  26 D4 32 0F 80 16 8E BB   =.r.....&.2.....
02E0 : 11 CC 99 84 0B 16 BC B1  BE B4 62 DC 0F 57 31 A1   ..........b..W1.
02F0 : BE 75 E4 FE 53 DB 7D E4  0B D7 72 BA 80 E6 EB FD   .u..S.}...r.....
0300 : 04 F9 A3 8B 91 94 CF 4D  3B E2 07 FF 06 E7 40 FF   .......M;.....@.
0310 : 4A 7D C1 FF 33 5D C4 F6  D9 49 19 1D 94 D1 68 FF   J}..3]...I....h.
0320 : 81 2F 87 FF 8F FE AE FE  E8 83 19 FF 5C 7F 7D FF   ./..........\.}.
0330 : BA AD 43 09 72 17 2E 26  CE DE 1B 8D EB E7 E1 ED   ..C.r..&........
0340 : D7 53 11 FF 9F EF 13 BD  3C 03 94 63 9D FF 6D FF   .S......<..c..m.
0350 : BB 09 ED FF BB 6F 3A FF  42 85 FC FE 57 AD B3 FF   .....o:.B...W...
0360 : 92 79 9E FF 5D FF E8 AE  6E 6E F8 FF 7B 53 6F FE   .y..]...nn..{So.
0370 : 07 29 EF FF AB F9 3F 31  71 32 24 FF E0 13 CA 1B   .)....?1q2$.....
0380 : C6 95 62 FF AB 69 23 F9  2D 71 3C A0 EF D7 2F 05   ..b..i#.-q<.../.
0390 : 9F 31 D1 FF 26 F9 E9 F9  B0 0E C6 FF AA FF 7D 53   .1..&.........}S
03A0 : C7 92 63 0B A1 FF 1D 86  3F C0 E8 FF DA 3E 11 F7   ..c.....?....>..
03B0 : 67 B9 BB FF 2D B5 C8 D7  E5 FF 6D 53 68 FF 87 D6   g...-.....mSh...
03C0 : 78 D4 74 F7 AB FD BA FB  0A 04 9A FF 67 FE FC FD   x.t.........g...
03D0 : 84 7B 51 04 5B 0D 5E 76  C9 0D FD FF C4 BF AF FB   .{Q.[.^v........
03E0 : 0E 1C 21 6B 8F 7F ED 7E  39 77 6F 55 02 7F F3 7D   ..!k...~9woU...}
03F0 : 6F F1 AB FE A1 DD 93 BA  AA D6 C4 FF 66 FF 3E C5   o...........f.>.
0400 : 93 F7 D4 FF F4 0C A2 0D  DB D8 CA FF 47 3B B8 A3   ............G;..
0410 : 28 FF 7D FF 29 C4 D9 F3  D9 19 68 FF 27 3D 11 EF   (.}.).....h.'=..
0420 : 7B D9 20 49 EA EB BE FF  4E 39 6F FF 68 D7 C4 2E   {. I....N9o.h...
0430 : 01 2A A0 FF 9E FF 3F 77  2C E7 CB FE 8A 17 D1 A3   .*....?w,.......
0440 : 30 0C B7 FF 56 4B 06 31  F8 FF 63 A8 39 2B 0B 16   0...VK.1..c.9+..
0450 : 61 C0 7A FE 04 AE A6 EC  4F E7 67 3F 7D 0F AB FD   a.z.....O.g?}...
0460 : 27 91 7C FF 67 C4 48 BF  28 E6 80 FF BC 65 02 66   '.|.g.H.(....e.f
0470 : 79 E1 2C FF 8C FF 27 0F  52 22 72 FB 20 A3 24 8F   y.,...'.R"r. .$.
0480 : 59 35 65 4A FA BF 87 E3  61 1E BD FF 41 F9 C4 C9   Y5eJ....a...A...
0490 : 81 99 27 3C 3A 57 50 0B  79 29 C3 FF E0 3F DC EF   ..'<:WP.y)...?..
04A0 : 76 1B 3C 03 E4 BB 3F A7  BE 85 5F 95 36 1F C1 FD   v.<...?..._.6...
04B0 : 0B D8 16 E4 2E 7D C6 FF  07 6C 24 DB 87 7F A1 F5   .....}...l$.....
04C0 : BC CF 1A FF BE 3F 87 DF  CC 11 59 69 47 FE DA D8   .....?....YiG...
04D0 : D4 1B 44 FF CD EF D6 FD  EE FF BF FF AE FF 25 5D   ..D...........%]
04E0 : C5 31 10 FF 61 5A 12 57  98 F6 35 FF E1 E3 01 E9   .1..aZ.W..5.....
04F0 : 68 21 54 47 15 7F 62 CB  99 7B A0 FE DC B5 C7 6E   h!TG..b..{.....n
0500 : 32 9B CE FF C8 F5 23 FF  9A 8B AD E4 A4 78 21 20   2.....#......x! 
0510 : 59 74 A2 57 2C 08 E4 41  F3 70 04 12 77 BB 8B 93   Yt.W,..A.p..w...
0520 : 9F F4 EB A0 43 B5 F8 D5  02 08 29 CC B6 92 64 65   ....C.....)...de
0530 : 93 EC 66 BE F3 55 E1 44  CA 35 F7 08 35 9F A9 8A   ..f..U.D.5..5...
0540 : 99 94 98 BC E1 E8 F3 76  A3 4A 26 97 2C 38 8C C7   .......v.J&.,8..
0550 : B2 8C A4 78 74 61 02 7C  51 21 A7 08 32 00 00 7E   ...xta.|Q!..2..~
0560 : 0B FC 52 55 3A D7 03 48  D9 FF 0A 31 33 A3 37 32   ..RU:..H...13.72
0570 : A8 15 79 13 36 4D 44 46  C9 26 4F 14 56 0A 43 BB   ..y.6MDF.&O.V.C.
0580 : F6 7F 66 71 CF C0 2A F5  F9 B1 F0 19 B7 9C 0E AE   ..fq..*.........
0590 : AE 98 49 1B 32 3D A9 B8  7A 67 D6 BB 07 C4 EF C4   ..I.2=..zg......
05A0 : 07 A5 77 31 0C E8 BC 16  6E 2B 00 22 35 92 B8 06   ..w1....n+."5...
05B0 : 22 49 74 E8 C6 3F CF D7  4E 53 0A AA A6 73 46 3A   "It..?..NS...sF:
05C0 : C6 2C FE 56 28 33 73 0F  44 17 91 F9 33 22 23 AF   .,.V(3s.D...3"#.
05D0 : 44 FA 19 01 CC 3C F1 6B  0F 90 A4 C8 DC 40 4C B6   D....<.k.....@L.
05E0 : 1F 42 3D 37 35 C7 B5 E9  D3 0D DE 8B 95 6B 6B FF   .B=75........kk.
05F0 : 99 A3 C4 01 12 7B 3B 19  8C E4 EF 51 6A A3 34 DD   .....{;....Qj.4.
0600 : 52 1B 88 2C A0 D8 64 BB  DC D5 B2 EB 6F 83 AC B9   R..,..d.....o...
0610 : 27 59 A4 42 A2 7E 5F B1  D4 18 2C 4F F9 EE FF 24   'Y.B.~_...,O...$
0620 : 62 94 36 8E 84 09 F9 51  1C 2B A9 1F 05 92 EB 85   b.6....Q.+......
0630 : 1E A7 B7 1B 9E 57 5F 48  79 EB 20 C4 84 7B 3E 92   .....W_Hy. ..{>.
0640 : BB A2 6B CB 33 42 AE A1  2D E9 DD 2B A5 AA 2D 0B   ..k.3B..-..+..-.
0650 : E6 89 27 E4 8C 6F F3 81  7D 46 AB 10 86 62 AA 34   ..'..o..}F...b.4
0660 : D8 AD 8D F8 3B 6C F1 7A  8F 87 61 9C 86 AE 0B 5C   ....;l.z..a....\
0670 : 11 3C 30 F6 E4 B1 C1 04  52 E7 12 83 AB B2 DD E1   .<0.....R.......
0680 : 7F 48 E4 B3 A2 12 8A 46  ED 3E F1 6E 47 69 7E FB   .H.....F.>.nGi~.
0690 : 08 54 24 AB BB A0 CB B8  FD BF F1 6D 25 15 71 6D   .T$........m%.qm
06A0 : 51 CD BC 52 97 6E 7E C8  43 0D 7F 77 7B BB 0A CB   Q..R.n~.C..w{...
06B0 : A4 72 A1 55 35 2E 53 E5  7F 2B 09 41 A8 21 E6 75   .r.U5.S..+.A.!.u
06C0 : C5 CF AE DB E6 29 15 6E  27 9B D6 B9 18 14 CA 85   .....).n'.......
06D0 : 9C B6 17 51 80 67 EC 54  0F F3 86 DF 05 20 9B AD   ...Q.g.T..... ..
06E0 : DB F1 28 FF 0F 58 35 05  F3 BE 19 C1 23 76 62 D8   ..(..X5.....#vb.
06F0 : 53 14 C5 F4 97 B1 6F 4E  23 BF 74 1A 17 01 E2 83   S.....oN#.t.....
0700 : 45 C5 4E 61 F7 04 01 10  9A AB 8C D7 7F 17 13 9D   E.Na............
0710 : 26 3D FD 98 9D AD 29 F2  39 CA 48 DF BE 09 C5 A7   &=....).9.H.....
0720 : 7D FC 99 1F 70 4F E0 9D  2B 0A 9F 0D B0 7F F5 06   }...pO..+.......
0730 : 64 A7 CD DB B7 A6 14 2D  FC B2 18 CD BC 03 4A 10   d......-......J.
0740 : FD 6E C4 C8 C3 F6 F2 B3  8F 23 85 16 87 93 1D EF   .n.......#......
0750 : DD 95 D8 42 11 91 E2 64  0A 8B 44 54 6E 7E DF AB   ...B...d..DTn~..
0760 : 47 5C C0 4E 18 28 0F C2  E5 C8 CE 4E FF 28 05 2A   G\.N.(.....N.(.*
0770 : 3D 80 5F 3E BF 4A C7 19  5C 45 4D E0 49 E9 74 04   =._>.J..\EM.I.t.
0780 : 60 99 E1 08 D1 3D 04 6C  E8 82 FF E3 07 B8 C8 C6   `....=.l........
0790 : B0 A5 18 0E 65 2C A0 B0  30 94 15 75 84 04 9E 76   ....e,..0..u...v
07A0 : C9 26 23 50 AF 8C EB 18  38 9A 5A FF 16 1D 74 AA   .&#P....8.Z...t.
07B0 : 42 F4 D9 CC 35 A4 C1 AA  67 76 9E C0 C4 4F 09 CF   B...5...gv...O..
07C0 : 78 E0 F2 7C 5A 63 DC D3  58 5F ED BF 76 D0 91 5A   x..|Zc..X_..v..Z
07D0 : EA 31 49 BB 5F 86 05 68  D7 D0 8C 50 0E 71 93 86   .1I._..h...P.q..
07E0 : B1 62 7B E4 15 AF 2A 08  EF 26 87 B7 E8 BC 5D 33   .b{...*..&....]3
07F0 : 1A DD CD D7 35 EF 27 2A  19 0B 29 7F 16 B9 7E 94   ....5.'*..)...~.
0800 : F8 80 29 E1 27 73 4F 83  35 B8 E5 71 95 B5 AC 82   ..).'sO.5..q....
0810 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0820 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0830 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0840 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0850 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0860 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0870 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0880 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0890 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
08A0 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
08B0 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
08C0 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
08D0 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
08E0 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
08F0 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0900 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0910 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................
0920 : FF 00 FF 00 FF 00 FF 00  FF 00 FF 00 FF 00 FF 00   ................

Is that scrambled or unscrambled?

It looks like it should be kept in that format

2,102 Reply by iR0b0t

  • iR0b0t
  • iR0b0t
  • Administrator
  • Offline
  • From: Research equipment
  • Registered: 2008-02-21
  • Posts: 6,703

Main channel data should not be fixed at all, also if you are overwritting the user data with 0x55 due to protection.

Did i read it right, sarami, are you fixing invalid sync/msf/mode?
It should not be a thing.

PX-760A (+30), PX-W4824TA (+98), GSA-H42L (+667), GDR-8164B (+102), SH-D162D (+6), SOHD-167T (+12)

2,103 Reply by Jackal (edited by Jackal 2019-08-28 15:45:34)

  • Jackal
  • Moderator (Retired)
  • Online
  • Registered: 2006-12-23
  • Posts: 4,132

iR0b0t wrote:

Main channel data should not be fixed at all, also if you are overwritting the user data with 0x55 due to protection.

Did i read it right, sarami, are you fixing invalid sync/msf/mode?
It should not be a thing.

It was fixed before, for protection-related sectors that were replaced with 0x55. But we are stepping away from that now.

2,104 Reply by iR0b0t

  • iR0b0t
  • iR0b0t
  • Administrator
  • Offline
  • From: Research equipment
  • Registered: 2008-02-21
  • Posts: 6,703

Should have never been a thing, i missed that.

PX-760A (+30), PX-W4824TA (+98), GSA-H42L (+667), GDR-8164B (+102), SH-D162D (+6), SOHD-167T (+12)

2,105 Reply by sarami

  • Registered: 2011-02-20
  • Posts: 1,747

Jackal wrote:

Is that scrambled or unscrambled?

scrambled.

Uploaded: http://www.mediafire.com/file/eq80y20l9 … st.7z/file

DiscImageCreator, UmdImageCreator, Conv2multiBin, bin2wav, PS3Auth (needs login), recompressTo7z_20150109.bat

sarami's Website

2,106 Reply by Jackal (edited by Jackal 2019-08-28 18:16:59)

  • Jackal
  • Moderator (Retired)
  • Online
  • Registered: 2006-12-23
  • Posts: 4,132

sarami wrote:
Jackal wrote:

Is that scrambled or unscrambled?

scrambled.

Can you tell us how the descrambling works again? I mean, for mastering errors, what are the criteria to descramble?

I guess we should use the same criteria for these sectors.

2,107 Reply by reentrant (edited by reentrant 2019-08-28 20:35:41)

  • Registered: 2014-10-06
  • Posts: 704

Descramble algorithm is the most critical aspect and it'd be very troublesome if it had to be changed once again...

Another idea:
Why to replace sector with C2 errors with 0x55 when you could just replace specific bytes with some pattern and leave the good data as is?

Another question:
What if there's a sector with few bits set to 1 in C2 and it's easily correctable by ECC? Should it be replaced with 0x55, fixed or left as is?

2,108 Reply by Jackal (edited by Jackal 2019-08-28 22:04:54)

  • Jackal
  • Moderator (Retired)
  • Online
  • Registered: 2006-12-23
  • Posts: 4,132

reentrant wrote:

Descramble algorithm is the most critical aspect and it'd be very troublesome if it had to be changed once again...

Another idea:
Why to replace sector with C2 errors with 0x55 when you could just replace specific bytes with some pattern and leave the good data as is?

Another question:
What if there's a sector with few bits set to 1 in C2 and it's easily correctable by ECC? Should it be replaced with 0x55, fixed or left as is?

A protection is detected with a particular range. The C2 errors within that range are the trigger for replacing sectors with 0x55. There is no good data there.

2,109 Reply by sarami

  • Registered: 2011-02-20
  • Posts: 1,747

Jackal wrote:

Can you tell us how the descrambling works again? I mean, for mastering errors, what are the criteria to descramble?

1. Sector needs to be the data [Ctrl byte of subQ is 4 or 6]
2. Sync needs to be valid [00 FF FF FF FF FF FF FF FF FF FF 00]
3-1. If mode is 0x60, 2336 bytes need to be zero.
3-2. If mode is 0x61 and reserved area (from 0x814 to 0x81b) is reversed (all zero), it's descrambled.
3-3. If mode is reversed (0x00 or 0x01 or 0x02), it's descrambled.
3-4. If mode is unknown and msf is reversed and reserved area isn't all zero, it's not descrambled.
3-5. If mode is unknown and msf isn't reversed and reserved area is all zero, it's descrambled.
3-6. If mode is unknown and msf isn't reversed and reserved area is invalid, it's not descrambled.

DiscImageCreator, UmdImageCreator, Conv2multiBin, bin2wav, PS3Auth (needs login), recompressTo7z_20150109.bat

sarami's Website

2,110 Reply by RibShark

  • Registered: 2017-09-29
  • Posts: 163

sarami wrote:

My drive is BC-12D2HT (FW:3.11). Do you know how to downglade the FW?

Use a custom flasher (info can be found on the MakeMKV forums) to flash the BC-12D2HT MK firmware (also found on the MakeMKV forums, custom firmware pack). That will enable firmware downgrading. Afterwards, flash the older firmware (crossflashing to the BW-16D1HT 3.02 DE firmware should work fine). Let me know if you have trouble finding anything.

PX-4824TA (offset +98), PX-755SA (offset +30), ASUS BW-16D1HT (offset +6)

2,111 Reply by sarami

  • Registered: 2011-02-20
  • Posts: 1,747

1. execute ASUS_ODD_FW_Changer_(Modified)
2-1. select DE_ASUS_BC-12D2HT_3.00.bin => Updating Failure #4.
2-2. ASUS-BC-12D2HT-3.01-WM00900-211711151926 => Updating Failure #4.
2-3. select DE_ASUS_BW-16D1HT_3.01.bin => Updating Failure #5.
2-4. select DE_ASUS_BW-16D1HT_3.02.bin => Updating Failure #5.

DiscImageCreator, UmdImageCreator, Conv2multiBin, bin2wav, PS3Auth (needs login), recompressTo7z_20150109.bat

sarami's Website

2,112 Reply by RibShark

  • Registered: 2017-09-29
  • Posts: 163

sarami wrote:

1. execute ASUS_ODD_FW_Changer_(Modified)
2-1. select DE_ASUS_BC-12D2HT_3.00.bin => Updating Failure #4.
2-2. ASUS-BC-12D2HT-3.01-WM00900-211711151926 => Updating Failure #4.
2-3. select DE_ASUS_BW-16D1HT_3.01.bin => Updating Failure #5.
2-4. select DE_ASUS_BW-16D1HT_3.02.bin => Updating Failure #5.

In that case first crossflash ASUS-BW-16D1HT-3.10-WM01601-211901041014.bin and then flash desired firmware.

PX-4824TA (offset +98), PX-755SA (offset +30), ASUS BW-16D1HT (offset +6)

2,113 Reply by Jackal (edited by Jackal 2019-08-29 06:55:44)

  • Jackal
  • Moderator (Retired)
  • Online
  • Registered: 2006-12-23
  • Posts: 4,132

sarami wrote:
Jackal wrote:

Can you tell us how the descrambling works again? I mean, for mastering errors, what are the criteria to descramble?

1. Sector needs to be the data [Ctrl byte of subQ is 4 or 6]
2. Sync needs to be valid [00 FF FF FF FF FF FF FF FF FF FF 00]
3-1. If mode is 0x60, 2336 bytes need to be zero.
3-2. If mode is 0x61 and reserved area (from 0x814 to 0x81b) is reversed (all zero), it's descrambled.
3-3. If mode is reversed (0x00 or 0x01 or 0x02), it's descrambled.
3-4. If mode is unknown and msf is reversed and reserved area isn't all zero, it's not descrambled.
3-5. If mode is unknown and msf isn't reversed and reserved area is all zero, it's descrambled.
3-6. If mode is unknown and msf isn't reversed and reserved area is invalid, it's not descrambled.

Ok, so the VOB sectors remain scrambled. Did we cover everything then?

2,114 Reply by reentrant (edited by reentrant 2019-08-29 08:34:28)

  • Registered: 2014-10-06
  • Posts: 704

Jackal wrote:
reentrant wrote:

Descramble algorithm is the most critical aspect and it'd be very troublesome if it had to be changed once again...

Another idea:
Why to replace sector with C2 errors with 0x55 when you could just replace specific bytes with some pattern and leave the good data as is?

Another question:
What if there's a sector with few bits set to 1 in C2 and it's easily correctable by ECC? Should it be replaced with 0x55, fixed or left as is?

A protection is detected with a particular range. The C2 errors within that range are the trigger for replacing sectors with 0x55. There is no good data there.

There's a good data there - bytes which have 0 in C2 map. Bad bytes are marked with 1 in C2 map. I know where this goes - all discs with any protection should be reripped, including safedisc. For me personally 0x55 is fine since it doesn't involve all the hassle. If someone wants pure image he can generate IPS patch and store it in DB.

2,115 Reply by Jackal (edited by Jackal 2019-08-29 09:05:14)

  • Jackal
  • Moderator (Retired)
  • Online
  • Registered: 2006-12-23
  • Posts: 4,132

reentrant wrote:
Jackal wrote:
reentrant wrote:

Descramble algorithm is the most critical aspect and it'd be very troublesome if it had to be changed once again...

Another idea:
Why to replace sector with C2 errors with 0x55 when you could just replace specific bytes with some pattern and leave the good data as is?

Another question:
What if there's a sector with few bits set to 1 in C2 and it's easily correctable by ECC? Should it be replaced with 0x55, fixed or left as is?

A protection is detected with a particular range. The C2 errors within that range are the trigger for replacing sectors with 0x55. There is no good data there.

There's a good data there - bytes which have 0 in C2 map. Bad bytes are marked with 1 in C2 map. I know where this goes - all discs with any protection should be reripped, including safedisc. For me personally 0x55 is fine since it doesn't involve all the hassle. If someone wants pure image he can generate IPS patch and store it in DB.

Yes there's 312 error bits out of 2352 for each sector that are marked 1? But we don't know if these C2 pointers are in any way reliable or of the rest of the data is even good. I'm just going with Nexy's standpoint that "hard errors" need to be replaced with 0x55, so any protection sectors that are physically unreadable (Rings) or with a fixed amount of C2 error pointers, regardless of how many bits. If someone has a better idea, let us know.

2,116 Reply by Nexy

  • Nexy
  • Nexy
  • Dumper
  • Offline
  • Registered: 2009-10-24
  • Posts: 867

I just haven't done any testing yet to see if SafeDisc is reliably dumpable and verifyable, I suspect the single byte (312) is like CDS and an intentional weak sector that the hardware can't read correctly.  I can test this with some of my Need For Speed games as I have several copies of the same disc and I now have 10 plextors to do testing with.

I mean that would be a huge pain to redump all safedisc, I'm not opposed to this but I think some people would be. I am more interested in dumping correctly though. It causes a lot of heated argument but we're getting on the same page mostly now. This is not an issue for me because I keep all discs, but this presents a problem where large parts of the db would be instantly invalidated, however I don't have issue with that. I do understand that others will. However I am in favor of as accurate as possible dumping, regardless of having to go do stuff again if it's found wrong. I have been redumping already my entire collection with DIC without a single complaint, and glad to do it. SafeDisc protection does not check for the bad sectors at all, they are just there to prevent copying easily,which is a bit silly since it's been easily defeated since early 2000's, so I don't think it really matters much when it comes to using the images, but is that preservation?

I guess we will have to work with what he have, and we can change things in the future when we have methods and hardware to do better. Eventually we *will* have means to dump entire discs linearly and we'll need a special image format for it. Until then we keep going as we are now.

Anyways back on topic, there should be no "correction" or "fixing" things imo, and that includes subchannel data. Too many discs have intentional errors, and too many drives/windows do not fix these errors when reading the disc, particularly edc/ecc errors.

Plextor PX-760A 1.07 (+30) : Plextor PX-716SA 1.11 (+30) : Plextor PX-W5224A 1.04 (+30) : Plextor PX-W4824 1.07 (+30) : Plextor PX-W4012TA 1.07 (+98) : Plextor PX-W1610TA (+99) : Plextor PX-W1210TA 1.10 (+99) : Lite-On LTR-48246S (+6) : Lite-On LTR-52246S (+6) : Lite-On LH-20A1H LL0DN (+6) : BenQ DW1655 BCIB (+618) : ASUS DRW-2014L1 1.02 (+6) : Yamaha CRW-F1 (+733) : Optiarc SA-7290H5 1H44 (+48) : ASUS BW-16D1HT 3.02 (+6)

2,117 Reply by reentrant (edited by reentrant 2019-08-29 10:40:01)

  • Registered: 2014-10-06
  • Posts: 704

How about IPS patches to convert between variants (0x55 and original data)?

DIC could generate it on the fly the same way the EccEdc replaces data with 0x55. The process of 'repairing' current dumps would involve only datting IPS patches not nuking current dumps.

The same way DMI, PFI, SS is handled already for XBOX.

There's a problem with LaserLock and RingProtech. I'm waiting for some HW that handles the rings better. I don't like nuking current dumps but otoh I like when you pull out more valid data from the discs wink

2,118 Reply by sarami

  • Registered: 2011-02-20
  • Posts: 1,747

RibShark wrote:

In that case first crossflash ASUS-BW-16D1HT-3.10-WM01601-211901041014.bin and then flash desired firmware.

I can change the firmware.

                VendorId: ASUS    
               ProductId: BW-16D1HT       
    ProductRevisionLevel: 3.02
          VendorSpecific: W000800K91HCMA5808

Uploaded: http://www.mediafire.com/file/eq80y20l9 … st.7z/file
- added: 0xF1 opcode for ASUS BW-16D1HT 3.02

Only 1 sector is overread if combined offset is plus, so offset +588 or more has not supported yet.

Jackal wrote:

Did we cover everything then?

I don't know 3PLock.

DiscImageCreator, UmdImageCreator, Conv2multiBin, bin2wav, PS3Auth (needs login), recompressTo7z_20150109.bat

sarami's Website

2,119 Reply by RibShark

  • Registered: 2017-09-29
  • Posts: 163

sarami wrote:

Uploaded: http://www.mediafire.com/file/eq80y20l9 … st.7z/file
- added: 0xF1 opcode for ASUS BW-16D1HT 3.02

Only 1 sector is overread if combined offset is plus, so offset +588 or more has not supported yet.

Thanks! Tested and this seems to work great.

PX-4824TA (offset +98), PX-755SA (offset +30), ASUS BW-16D1HT (offset +6)

2,120 Reply by user7

  • user7
  • Moderator
  • Offline
  • Registered: 2009-03-14
  • Posts: 2,621

Im' getting a crash right before the bin generation on a CD-R press kit (scm / img generate fine), no c2 errors.

https://drive.google.com/file/d/1S0PYwp … sp=sharing

All my posts and submission data are released into Public Domain / CC0.

2,121 Reply by Nexy

  • Nexy
  • Nexy
  • Dumper
  • Offline
  • Registered: 2009-10-24
  • Posts: 867

Also tested ASUS-BW-16D1HT with 3.02 firmware, looking forward to bigger positive offset support. Too bad the drive doesn't have better C2 correction, maybe a buffer flush is needed for re-reads.

Plextor PX-760A 1.07 (+30) : Plextor PX-716SA 1.11 (+30) : Plextor PX-W5224A 1.04 (+30) : Plextor PX-W4824 1.07 (+30) : Plextor PX-W4012TA 1.07 (+98) : Plextor PX-W1610TA (+99) : Plextor PX-W1210TA 1.10 (+99) : Lite-On LTR-48246S (+6) : Lite-On LTR-52246S (+6) : Lite-On LH-20A1H LL0DN (+6) : BenQ DW1655 BCIB (+618) : ASUS DRW-2014L1 1.02 (+6) : Yamaha CRW-F1 (+733) : Optiarc SA-7290H5 1H44 (+48) : ASUS BW-16D1HT 3.02 (+6)

2,122 Reply by sarami

  • Registered: 2011-02-20
  • Posts: 1,747

RibShark wrote:

I reverse engineered the firmware myself.

If possible, please tell me how to reverse engineer the firmware. I'm interested.

DiscImageCreator, UmdImageCreator, Conv2multiBin, bin2wav, PS3Auth (needs login), recompressTo7z_20150109.bat

sarami's Website

2,123 Reply by Nexy

  • Nexy
  • Nexy
  • Dumper
  • Offline
  • Registered: 2009-10-24
  • Posts: 867

sarami wrote:
RibShark wrote:

I reverse engineered the firmware myself.

If possible, please tell me how to reverse engineer the firmware. I'm interested.

IDA?

Plextor PX-760A 1.07 (+30) : Plextor PX-716SA 1.11 (+30) : Plextor PX-W5224A 1.04 (+30) : Plextor PX-W4824 1.07 (+30) : Plextor PX-W4012TA 1.07 (+98) : Plextor PX-W1610TA (+99) : Plextor PX-W1210TA 1.10 (+99) : Lite-On LTR-48246S (+6) : Lite-On LTR-52246S (+6) : Lite-On LH-20A1H LL0DN (+6) : BenQ DW1655 BCIB (+618) : ASUS DRW-2014L1 1.02 (+6) : Yamaha CRW-F1 (+733) : Optiarc SA-7290H5 1H44 (+48) : ASUS BW-16D1HT 3.02 (+6)

2,124 Reply by Parotaku (edited by Parotaku 2019-09-01 06:33:58)

  • Registered: 2019-04-01
  • Posts: 241

Hello

I just noticed that recent versions of DICUI now output the following when dumping PS3 discs with my (non-PS3/OEM) LG BH16NS40 blu-ray drive:

Disc Key: (REQUIRED)
Disc ID: (REQUIRED)

As I understand from the wiki, there's no way to get these infos (or create an IRD with redump2ird (D1/D2)) with this dumping method, or am I missing something?

So can I leave them like this in the 'submissionInfo' log, even if they are now marked 'required'?
Thanks.

2,125 Reply by user7

  • user7
  • Moderator
  • Offline
  • Registered: 2009-03-14
  • Posts: 2,621

sarami, i'm getting an issue with dumping a GameShark disc for Dreamcast:
https://drive.google.com/file/d/11WC8vG … sp=sharing

I dumped two other DC unlicensed discs fine, but now this one hmm

All my posts and submission data are released into Public Domain / CC0.