DiscImageCreator

[Savagesteel]

Forgive me for asking this I'm new here.
When a drive supports the 0xD8 instruction, does it also mean that it supports scrambled mode?

[reentrant]

Yes. What drive is it?

[sarami]

*2017-04-11
- added: exec EccEdc for GD-ROM dumping
- changed: in gd command, /s 0 is default (because /s 1 is very slow for GD-ROM dumping)
- changed: wait time for GD-ROM dumping (5000 millisec -> 30000 millisec)
- fixed: some log

[reentrant]

Sarami: In function IsValidIntentionalSubSector I see limits on LBA. Are you really sure that such errors are only present in that range? What would happen if I had a sector outside that range?

Maybe you could add a switch to remove the limits from LBA 0 till end of the disc?

[sarami]

Are you really sure that such errors are only present in that range?

This range is temporary, for I don't have the specification of SecuROM.

What would happen if I had a sector outside that range?

It is fixed to "correct value" as "incorrect value".

Maybe you could add a switch to remove the limits from LBA 0 till end of the disc?

See below.
https://redump.info/discs/quicksearch/sec … ction/only
It is obvious that the protected subs exist in specific range. I don't think that needs to read from 0 to end. But about SecuROM old, there is only a little report in db, so I think this range is not more exact.
SecuROM Old below
src: http://www.cdmediaworld.com/hardware/cd … urom.shtml

Code: Select all

SecuROM R1    :    Forsaken Incoming    Hexplore Frankreich 98
SecuROM R2    :    Decent FreeSpace Heart of Darkness Max II    Panzer Commander Team Apache
SecuROM R3    :    FIFA 99 F.A. Premier League FM 99 Moto Racer 2    Populous 3 WarGasm War of the Worlds
SecuROM R4    :    Alpha Centauri Brian Lara Cricket SimCity 3000 South Park    SuperBike Silver Turok 2
SecuROM R5    :    Brain Lara Cricket  S.A.G.A: Rage of the Vikings Machines

Code: Select all

SecuROM New    :    Diablo 2 GroundControl Music 2000 Orion Burger    Re-Volt Shadow Man Soulbringer V-Rally 2

I want to buy to test but I don't know in which country these disc are sold...

[Savagesteel]

Yes. What drive is it?

Thanks for your answer, I have a Plextor PX-712A that supports scrambled mode.

When I run the following sdparm command:

Code: Select all

sdparm --all --long E:

I get the following output:

Code: Select all

    E:: PLEXTOR   DVDR   PX-712A    1.09  [cd/dvd]
Read write error recovery [rw] mode page:
  AWRE          0  [cha: n, def:  0]  Automatic write reallocation enabled
  ARRE          0  [cha: n, def:  0]  Automatic read reallocation enabled
  TB            0  [cha: y, def:  0]  Transfer block
  RC            0  [cha: y, def:  0]  Read continuous
  EER           0  [cha: y, def:  0]  Enable early recovery (obsolete)
  PER           0  [cha: y, def:  0]  Post error
  DTE           0  [cha: y, def:  0]  Data terminate on error
  DCR           0  [cha: y, def:  0]  Disable correction (obsolete)
  RRC           10  [cha: y, def: 10]  Read retry count
  COR_S         0  [cha: y, def:  0]  Correction span (obsolete)
  HOC           0  [cha: y, def:  0]  Head offset count (obsolete)
  DSOC          0  [cha: n, def:  0]  Data strobe offset count (obsolete)
  EMCDR         0  [cha: n, def:  0]  Enhanced media certification and defect reporting
  WRC           0  [cha: y, def:  0]  Write retry count
  ERWS          0  [cha: n, def:  0]  Error reporting window size (blocks)
Disconnect-reconnect (SPC + transports) [dr] mode page:
  BFR           4  [cha: y, def:  4]  Buffer full ratio
  BER           240  [cha: y, def:240]  Buffer empty ratio
  BIL           0  [cha: n, def:  0]  Bus inactivity limit
  DTL           0  [cha: n, def:  0]  Disconnect time limit
  CTL           0  [cha: n, def:  0]  Connect time limit
  MBS           0  [cha: n, def:  0]  Maximum burst size (512 bytes)
  EMDP          0  [cha: n, def:  0]  Enable modify data pointers
  FA            0  [cha: n, def:  0]  Fair arbitration
  DIMM          0  [cha: n, def:  0]  Disconnect immediate
  DTDC          0  [cha: n, def:  0]  Data transfer disconnect control
  FBS           0  [cha: n, def:  0]  First burst size (512 bytes)
Mount rainier reWritable (MMC) [mrw] mode page:
  TPZ           0  [cha: y, def:  0]  Tracks per zone
  LBAS          0  [cha: y, def:  0]  LBA space
Write parameters (MMC) [wp] mode page:
  BUFE          0  [cha: y, def:  0]  Buffer underrun free recording enable
  LS_V          0  [cha: y, def:  0]  Link size valid
  TST_W         0  [cha: y, def:  0]  Test write
  WR_T          1  [cha: y, def:  1]  Write type
  MULTI_S       3  [cha: y, def:  3]  Multi session
  FP            0  [cha: y, def:  0]  Fixed packet type
  COPY          0  [cha: y, def:  0]  Serial copy management system (SCMS) enable
  TRACK_M       4  [cha: y, def:  4]  Track mode
  DBT           8  [cha: y, def:  8]  Data block type
  LINK_S        16  [cha: y, def: 16]  Link size
  IAC           0  [cha: y, def:  0]  Initiator application code
  SESS_F        0  [cha: y, def:  0]  Session format
  PACK_S        0  [cha: y, def:  0]  Packet size
  APL           150  [cha: y, def:150]  Audio pause length (blocks)
Verify error recovery (SBC) [ve] mode page:
  V_EER         0  [cha: y, def:  0]  Enable early recovery (obsolete)
Caching (SBC) [ca] mode page:
  IC            0  [cha: n, def:  0]  Initiator control
Power condition - old version [poo] mode page:
  IDLE-OLD      1  [cha: y, def:  1]  Idle timer active
Power condition [po] mode page:
  PM_BG         0  [cha: n, def:  0]  Power management, background functions, precedence
  STANDBY_Y     0  [cha: n, def:  0]  Standby_y timer enable
  IDLE_C        0  [cha: n, def:  0]  Idle_c timer enable
  IDLE_B        0  [cha: n, def:  0]  Idle_b timer enable
  IDLE          0  [cha: y, def:  0]  Idle_a timer enable
  STANDBY       0  [cha: y, def:  0]  Standby_z timer enable
  ICT           0  [cha: y, def:  0]  Idle_a condition timer (100 ms)
  SCT           0  [cha: y, def:  0]  Standby_z condition timer (100 ms)
Timeout and protect (MMC) [tp] mode page:
  WORMM         0  [cha: n, def:  0]  Worm mode
  G3E           0  [cha: n, def:  0]  Group 3 timeout capability enable
  TMOE          0  [cha: y, def:  0]  Timeout enable
  DISP          0  [cha: n, def:  0]  Disable (unavailable) until power cycle
  SWPP          0  [cha: n, def:  0]  Software write protect until power cycle
  G1MT          0  [cha: y, def:  0]  Group 1 minimum timeout (sec)
  G2MT          0  [cha: y, def:  0]  Group 2 minimum timeout (sec)
CD/DVD (MM) capabilities and mechanical status (MMC) [cms] mode page:
  D_RAM_R       0  [cha: n, def:  0]  DVD-RAM read
  D_R_R         1  [cha: n, def:  1]  DVD-R read
  D_ROM_R       1  [cha: n, def:  1]  DVD-ROM read
  METH2         1  [cha: n, def:  1]  Method 2
  CD_RW_R       1  [cha: n, def:  1]  CD-RW read
  CD_R_R        1  [cha: n, def:  1]  CD-R read
  D_RAM_W       0  [cha: n, def:  0]  DVD-RAM write
  D_R_W         1  [cha: n, def:  1]  DVD-R write
  TST_WR        1  [cha: n, def:  1]  Test write
  CD_RW_W       1  [cha: n, def:  1]  CD-RW write
  CD_R_W        1  [cha: n, def:  1]  CD-R write
  BUF           1  [cha: n, def:  1]  Buffer underrun free recording
  MULT_S        1  [cha: n, def:  1]  Multi session
  M2F2          1  [cha: n, def:  1]  Mode 2 form 2
  M2F1          1  [cha: n, def:  1]  Mode 2 form 1
  DP_2          0  [cha: n, def:  0]  Digital port 2
  DP_1          0  [cha: n, def:  0]  Digital port 1
  COMP          1  [cha: n, def:  1]  Composite
  AUDIO_P       1  [cha: n, def:  1]  Audio play
  RBC           0  [cha: n, def:  0]  Read bar code
  UPC           1  [cha: n, def:  1]  Uniform product code
  ISRC          1  [cha: n, def:  1]  International standard recording code
  C2PS          1  [cha: n, def:  1]  C 2 pointers supported
  RW_DC         1  [cha: n, def:  1]  R-W de-interleaved and corrected
  RW_S          1  [cha: n, def:  1]  R-W supported
  CDDA_SA       1  [cha: n, def:  1]  CD-DA stream accurate
  CDDA_CS       1  [cha: n, def:  1]  CD-DA commands supported
  LMT           1  [cha: n, def:  1]  Loading mechanism type
  EJECT         1  [cha: n, def:  1]  Eject (individual or magazine)
  PJ            0  [cha: n, def:  0]  Prevent jumper
  LS            0  [cha: n, def:  0]  Lock state
  LOCK          1  [cha: n, def:  1]  Lock (supported)
  RWILI         1  [cha: n, def:  1]  R-W in lead in
  SCC           0  [cha: n, def:  0]  Side change capable
  SSS           0  [cha: n, def:  0]  Software slot selection
  CSDP          0  [cha: n, def:  0]  Changer supports disc present
  SCM           1  [cha: n, def:  1]  Separate channel mute
  SVL           1  [cha: n, def:  1]  Separate volume levels
  MRSS          7056  [cha: n, def:  0]  Maximum read speed supported (kBps) (obs)
  NVLS          256  [cha: n, def:256]  Number of volume levels supported
  BSS           8192  [cha: n, def:8192]  Buffer size supported (1024 bytes)
  LENGTH        0  [cha: n, def:  0]  Length (bit length of IEC958 words)
  LSBF          0  [cha: n, def:  0]  LSB (least significant bit) first
  RCK           0  [cha: n, def:  0]  High on LRCK indicates left channel
  BCKF          0  [cha: n, def:  0]  BCK signal falling edge
  CMRS          0  [cha: n, def:  0]  Copy management revision supported
  RCS           0  [cha: n, def:  0]  Rotation control selected
  CWSS          8467  [cha: n, def:  0]  Current write speed selected

Which flag confirms that the drive supports scrambled mode?

[reentrant]

Savagesteel: I think none of them. You just have to issue 0xD8 command.

sarami: We probably will never get specification of SecuROM. I spoke to Jackal once and he gave me a nice tool (CDGTool) that is able to clean subs and it's clearly visible which sectors are part of SecuROM and which are just badly read. The tool detects single bit errors and compares it with CRC. The rest should be inspected manually. You can apply another layer of processing in which you check data if single bit error occured in CRC. After those two passes you are left with high probability SecuROM sectors. There are 3 types from what I have seen:
1) Error in RM and error in AM (2 errors)
2) Error in RS and error in AS (2 errors)
3) Error in RF and error in AF (2 errors)

I think I have also seen a mix of 1 and 2 or 3 (there were 2+ errors). Have you seen this tool? It's very useful if you want to cross validate the result from DIC and CDTool (which will not correct any errors).

Sarami, please add a switch to skip processing Q sub (I want to get rid of CDTool).

[F1ReB4LL]

No C2 errors
Copying .scm to .img
Descrambling data sector of img (LBA)  35433/ 35433
Descrambling data sector of img (LBA) 177323/177323
...
Checking data sectors (LBA) 252444/252444
Number of sector(s) where sync is invalid: 73725
Number of sector(s) where sync is zero: 1396

Why does DIC check the audio sectors for sync?

[Savagesteel]

Savagesteel: I think none of them. You just have to issue 0xD8 command.

OK, thanks for the clarification.

[sarami]

*2017-04-13 test
-added: /np /nq

Code: Select all

        /np     Not fix SubP
        /nq     Not fix SubQ

-changed: /g -> /nr, /l -> /nl, /se -> /ns

Why does DIC check the audio sectors for sync?

This is coded by reentrant. The reason is that only consider the data sector. To read the data sector certainly, I'll fix EccEdc.exe so that can read the subchannel file.