Alternative FW for the Samsung SH-D162C Drive v0.8

Bring out the confetti. Kreon has just released the first all-in-one PC DVD-ROM drive with full XBox 360 back-up capabilities, and booting full image and SS extraction functions, while still maintaining all the basic functions of the DVD-ROM drive. Yes, this is the XBox 360 enabled alternative FW for the Samsung SH-D162C drive follow up. Welcome v0.80.

It’s not v1.00 yet because he’s still working on hardware correct timing of response types 5 & 7. He says that his research reveals that all current games uses the same timing scheme. This makes faked timing possible. So he’s added a “jitter” function that will make the fixed values vary a little bit, effectively making any attempt by Microsoft to detect a specific timer pattern for copied games impossible.

If you’re having any problems due to incorrect extraction of the SS, you’ll need to provide him with some necessary information like the name of the game you’re working on, a copy of the failing SS as well as a copy of a working SS extracted from a TS-H943 or a GDR-3120L.

Save some of your thanks to FlexyZ. If he hadn’t let kreon borrow, destroy and repair his TS-H943, we’d still be in the Dark Ages.

The full article awaits after the jump!

Save some of your thanks to FlexyZ. If he hadn’t let kreon borrow, destroy and repair his TS-H943, we’d still be in the Dark Ages.

This is what you get..
——————————–

Full challenge/response functionality.
Two types of unlock for XBOX 360 game discs. One for making xtreme style images and one for making wxripper style images.
Both types of iso can be made using isobuster. Ripping using wxripper isn’t supported for the time being
A ‘lock’ function that will cancel any enabled unlock state. This can be very useful for custom applications.
‘Error skipping’ which basically speeds up the error handling of the drive. A complete wxripper style image (including video) can be obtained in 15-16 minutes, when error skipping is enabled. Getting through the critical area of LBA 19408-20479 will take you more than 20 minutes alone, if error skipping is disabled Sad
A much more streamlined command interface which is good news if you intend to write an application that makes use of the drives extra features.
The drive will default to unlock state 2 and error skip enabled when a 360 media is inserted. You can in other words use isobuster to obtain a wxripper style image without issuing any commands to the drive Smiley
RPC1 support (RPC-2 actually but with automatic change of drive region and RCE support)

This is what you’ll have to wait for..
———————————————–

Hardware correct timing for response types 5 & 7.
You will probably notice that the the drive reports as being RPC-2, if you use a program like DVDinfo – this is not a bug! The drive changes it’s region setting according to the media inserted. The region code listed in DVDinfo (and other software like it) is the current region setting of the drive and it should match the region of the inserted media. If the media allows playback in more than one region, the drive region will be set to the region with the lowest number. An example could be a disc allowing playback in region 2 and 4 players, which would make the drive change it’s region to region 2. Media with no region restrictions or with RCE protection will make the drive default to region 1.

Ripping using Isobuster..
———————————

Not much to add here except for the number of LBA to read when using unlock 2 is 3697696 as opposed to 3567872 for unlock
A successful wxripper style image will have a size of 7.572.881.408 bytes, while a successful xtreme style image will have a size of 7.307.001.856 bytes.

Command set additions found in this FW..
———————————————–
FF 08 01 01, ‘Enable Unlock 1 (xtreme) state’ as we already know it from the 360 xtreme modded drives.
                    This command is supported for legacy reasons only. Custom applications should use the new
                    ‘Set lock state’ instead.

FF 08 01 11 xx, ‘Set Lock State’
                    xx=00 – Drive locked (no unlock state)
                    xx=01 – Unlock State 1 (xtreme) enabled
                    xx=02 – Unlock state 2 (wxripper) enabled

FF 08 01 15 xx, ‘Set Error Skip State’
xx=00 – Error skip is disabled
xx=01 – Error skip is enabled

AD 00 FF 02 FD FF FE 00 08 00 xx C0, This is the well known SS extract commands from the xtreme FW.

FF 08 01 10, ‘Get Feature List’
                    This command will return a list of the additional features supported by the drive.
                    All values returned are 16 bit values, and the list is terminated with null (0x0000)
                    The two first words of the returned list always reads as 0xA55A 0X5AA5 in order to guarantee
                    that a reply from a drive not supporting this command correctly isn’t mistaken for a feature list.

                    An example feature list could be:
                    0xA55A, 0x5AA5, 0x0100, 0xF000, 0xF001, 0x0000

                    This list would indicate that the drive supports Unlock 1, Lock and Error Skip, as it can be seen
                    from the values defined below:

                    XBOX 360 related features..
                    0x0100 : The drive supports the unlock 1 state (xtreme)
                    0x0101 : The drive supports the unlock 2 state (wxripper)
                    0x0120 : The drive can read and decrypt the SS
                    0x0121 : The drive has full challenge response functionality

                    General drive features..
                    0xF000 : The drive supports the lock (cancel any unlock state) command
                    0xF001 : The drive supports error skipping

Via xboxhacker

Related Posts

Add a Comment