LITEON DG-16D4S - SLIM Failed Kamikaze?

L

LoneWolf913

Well think I just screwed my first Winbond unlock..took forever to get it to status 0x00, check the log below, JF claims to have unlocked at least two or three times but repeatedly failed reads/writes, finally drilled a tiny bit deeper and got it unlocked for good, or so I assume..wrote 0225u (mislabeled 9504), verify failed, outro'd just to test and the console started to load a retail game but failed with 'disc unrecognized, please try cleaning, etc'. Not sure if it's not actually unlocked, if the write was just bad, or if I damaged the chip. Tried re-writing a few times after restarting JF and it never verified, so I'm assuming I botched the Kamikaze, but thought I'd get a second opinion before tracking down a replacement PCB.

Edit: Just hooked it to my PC via my X360USBv2, still rips a valid ISO from a retail disc with XBC, that does verify the laser is good, and the chip obviously isn't totally f'ed, right?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
JungleFlasher 0.1.92 Beta (304)
Session Started Thu Aug 30 17:05:19 2012
This is a Wow 64 process running on 4 x 64 bit CPUs X360USB PRO detected, Version 0.18
Found 1 I/O Ports.
Found 1 Com Ports.
Found 10 windows drives C: D: E: F: G: H: I: J: K: L:
Found 2 CD/DVD drives F: G:
Drive is Slim Lite-On..
Drive is Slim Lite-On..
0000: 05 80 00 32 5B 00 00 00 - 50 4C 44 53 20 20 20 20 ...2[...PLDS
0010: 44 47 2D 31 36 44 34 53 - 20 20 20 20 20 20 20 20 DG-16D4S
0020: 30 32 32 35 00 00 00 00 - 00 00 00 00 00 00 00 00 0225............
0030: 00 00 00 00 41 30 41 30 - 00 00 00 00 00 00 00 00 ....A0A0........
0040: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0050: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0060: 44 37 31 31 43 47 30 32 - 36 38 31 31 30 30 33 35 D711CG0268110035
0070: 53 20 20 20 S
Sending Vendor Intro to port 0x0000Serial flash found with Status 0x72
Sending Device ID request to port 0x0000
Manufacturer ID: 0xEF
Device ID: 0x11
Flash Name: Winbond/NEX(W25P20/NX25P20)
Flash Size: 262144 bytes............
Key: C27ABF341DF12AE38E2A34DF71068E9F is verified, Thanks C4eva
Grabbing Key sector: ................
Key Sector verified.
Grabbing Serial info: ........
Drive is Slim Lite-On..
Key data saved to C:\Users\Wolf\Desktop\WinbondSlim\Key.bin
0000: 05 80 00 32 5B 00 00 00 - 50 4C 44 53 20 20 20 20 ...2[...PLDS
0010: 44 47 2D 31 36 44 34 53 - 20 20 20 20 20 20 20 20 DG-16D4S
0020: 30 32 32 35 00 00 00 00 - 00 00 00 00 00 00 00 00 0225............
0030: 00 00 00 00 41 30 41 30 - 00 00 00 00 00 00 00 00 ....A0A0........
0040: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0050: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0060: 44 37 31 31 43 47 30 32 - 36 38 31 31 30 30 33 35 D711CG0268110035
0070: 53 20 20 20 S
Inquiry String saved to C:\Users\Wolf\Desktop\WinbondSlim\Inquiry.bin
0000: C0 85 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0010: 00 00 00 00 37 44 31 31 - 47 43 32 30 38 36 31 31 ....7D11GC208611
0020: 30 30 35 33 00 53 00 00 - 00 00 00 00 00 00 32 30 0053.S........20
0030: 35 32 20 20 20 20 4C 50 - 53 44 20 20 20 20 47 44 52 LPSD GD
0040: 31 2D 44 36 53 34 20 20 - 20 20 20 20 20 20 00 00 1-D6S4 ..
0050: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0060: 00 00 00 0F 00 40 00 04 - 00 02 06 00 00 00 00 00 [email protected]
0070: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0080: 03 00 78 00 78 00 78 00 - 78 00 00 00 00 00 00 00 ..x.x.x.x.......
0090: 00 00 F8 00 10 02 00 00 - 02 02 00 00 60 00 40 00 ............`[email protected]
00A0: F8 00 10 02 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00B0: 3F 20 00 00 ? ..
Identify String saved to C:\Users\Wolf\Desktop\WinbondSlim\Identify.bin
0000: 44 37 31 31 43 47 30 32 - 36 38 31 31 30 30 33 35 D711CG0268110035
0010: 53 20 20 20 FF FF FF FF - 30 46 31 34 30 32 31 30 S ....0F140210
0020: 31 36 38 30 31 35 58 58 - 41 30 FF FF 53 34 50 30 168015XXA0..S4P0
0030: 36 32 36 30 30 30 30 30 - 30 30 33 34 37 34 00 00 62600000003474..
0040: 00 00 00 00 00 00 00 00 - 00 00 00 00 41 30 FF FF ............A0..
Serial String saved to C:\Users\Wolf\Desktop\WinbondSlim\Serial.bin
Hashing Drive: ................
Dummy.bin file saved to Dummy.bin
Loading firmware from buffer
Inquiry string found
Identify string found
Drive key @ 0xA030 C27ABF341DF12AE38E2A34DF71068E9F
Firmware Osig: [PLDS DG-16D4S 0225]
Firmware is: SlimKey Extract
Key added to database
Sending Vendor Intro to port 0x0000
Serial flash found with Status 0x72
Sending Device ID request to port 0x0000
Spi Status: 0x8C
Manufacturer ID: 0xEF
Device ID: 0x11
Flash Name: Winbond/NEX(W25P20/NX25P20)
Flash Size: 262144 bytes
Sending Spi UnLock request to Port 0x0000
.....................................................................................................................................................................................................................................................................................................................................................
Spi Status: 0x00
Getting Status from port 0x0000
Invalid Status 0x80
Sending Vendor Intro to port 0x0000
Serial flash found with Status 0x72
Sending Device ID request to port 0x0000
Spi Status: 0x8C
Manufacturer ID: 0xEF
Device ID: 0x11
Flash Name: Winbond/NEX(W25P20/NX25P20)
Flash Size: 262144 bytes
Sending Spi UnLock request to Port 0x0000
............................................
Spi Status: 0x00
Getting Status from port 0x0000
Invalid Status 0x0
Sending Vendor Intro to port 0x0000
Serial flash found with Status 0x72
Sending Device ID request to port 0x0000
Spi Status: 0x00
Manufacturer ID: 0xEF
Device ID: 0x11
Flash Name: Winbond/NEX(W25P20/NX25P20)
Flash Size: 262144 bytes
Getting Status from port 0x0000
Serial flash found with Status 0x72
Reading Drive Key.............
Authorised !
Grabbing sector 0x3E000.................
Blank 3E000 sector detected!
Known f/w confirmed !
Sending Vendor Intro to port 0x0000
Status 0x51
Re-sending Vendor Intro: ....
Serial flash found with Status 0x72
Sending Device ID request to port 0x0000
Manufacturer ID: 0xEF
Device ID: 0x11
Flash Name: Winbond/NEX(W25P20/NX25P20)
Flash Size: 262144 bytes
Updating flash for on-line dump.
Sending Sector Erase to Port 0x0000
Erasing: 0x3E000
Writing: 0x3E000
............
Reading Bank 0: ................
Reading Bank 1: ................
Reading Bank 2: ................
Reading Bank 3: ................
Dumped in 3766mS
Restoring sector 0x3E000.
Sending Sector Erase to Port 0x0000
Erasing: 0x3E000
Writing: 0x3E000
............
Authorised !
................
Restore 0x3E000 verified !
Lite-On Dump file saved to Lite-OFW.bin
Loading firmware from buffer
Drive key @ n/a C27ABF341DF12AE38E2A34DF71068E9F
Firmware Osig: [PLDS DG-16D4S 0225]
Firmware is: Stock
Key database updated
Auto-Loading firmware file C:\Users\Wolf\Desktop\JungleFlasher v0.1.92 Beta (304)\firmware\LTPlus-0225-v3.0u.bin
MD5 hash: db5c70eaaabb53501c2c4f53dce9abfd
Genuine LT plus v3.0 (9504 upgrade)
Drive key @ n/a FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Firmware Osig: [PLDS DG-16D4S 0225]
Firmware is: LT-Plus 3.0
Spoofing Target
DVD Key copied to target
Key Sector copied from Source to Target
Target is LT - ID strings not copied to Target
Drive is Slim Lite-On..
Key found in KeyDB at record (12 - WinbondSlim)Key is: C27ABF341DF12AE38E2A34DF71068E9F
Key has been tested and verified, thanks C4eva !
Loading firmware file C:\Users\Wolf\Desktop\JungleFlasher v0.1.92 Beta (304)\firmware\LTPlus-0225-v3.0u.bin
MD5 hash: db5c70eaaabb53501c2c4f53dce9abfd
Genuine LT plus v3.0 (9504 upgrade)
Drive key @ n/a FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Firmware Osig: [PLDS DG-16D4S 0225]
Firmware is: LT-Plus 3.0
Spoofing Target
DVD Key copied to target
Key Sector copied from Source to Target
Target is LT - ID strings not copied to Target
Sending Vendor Intro to port 0x0000
Status 0x51
Re-sending Vendor Intro: ....
Serial flash found with Status 0x72
Sending Device ID request to port 0x0000
Spi Status: 0x00
Manufacturer ID: 0xEF
Device ID: 0x11
Flash Name: Winbond/NEX(W25P20/NX25P20)
Flash Size: 262144 bytes
Getting Status from port 0x0000
SPi flash found with Status 0x72
Sending Chip Erase to Port 0x0000
Erasing:
Writing target buffer to flash
Writing Bank 0: ................
Writing Bank 1: ................
Writing Bank 2: ................
Writing Bank 3: ................
............
Flash Verification Test !
Reading Bank 0: ................
Reading Bank 1: ................
Reading Bank 2: ................
Reading Bank 3: ................
Dumped in 3776mS
Write Verify Failed !
Sending Vendor Outro to port 0x0000
Drive is Slim Lite-On..
Key found in KeyDB at record (12 - WinbondSlim)Key is: C27ABF341DF12AE38E2A34DF71068E9F
Key has been tested and verified, thanks C4eva !
Click to expand...
 
Last edited:
L

LoneWolf913

Martin C said:
So what happens if you write the OFW back? Does it work then?
Click to expand...
Verify failed, Play DVD on console with an XGD2 original. Something I find odd on this drive, to get it unlocked I had to add alcohol then place the drill bit back in the hole, and apply slight pressure before it unlocked..that's why I'm asking if I didn't drill far enough, of course it reads the firmware fine..so can't imagine it being locked at this point.
 
L

LoneWolf913

Martin C said:
Tried building a 0272 OFW from your dummy.bin?
Click to expand...
Not yet, as I assumed the drive was a 0225u and an 0272 OFW wouldn't work. Will try it now since I don't think there's much else that can go wrong.

Edit: Verify failed, Play DVD on console.
 
Last edited:
Martin C

Martin C

VIP Member
Jan 10, 2004
35,981
0
Scotland, UK
www.team-xecuter.com
I think the fact it's failing verification tells you there's definitely something wrong with the main chip. I reckon your only option here is a replacement board.
 
L

LoneWolf913

Martin C said:
I think the fact it's failing verification tells you there's definitely something wrong with the main chip. I reckon your only option here is a replacement board.
Click to expand...
Fair enough, just surprised it still reads, ejects, etc. Probably just leave it in place as a ripping drive on my PC, console it was in is getting RGH'd anyways so I'll replace the drive when I actually need it.
 
L

LoneWolf913

sick360mods said:
What are you using to drill. Sound like you were off a bit.

Pro bono work for the next 5 people. contact me for details
Click to expand...
0.8mm drill bit, counted off the pins and marked the chip as always. It did unlock but I'm guessing I went too far into the chip, either way it still rips games so I'll just stick on top of my PC and use it when I want to rip a new game or whatever.
 
sick360mods

sick360mods

BANNED
Mar 22, 2010
2,918
0
Longisland , New York
Try a xacto knife with #11 blade. Been using that and having had a problem since. I used to use the same thing and drill bit is to big.

Pro bono work for the next 5 people. contact me for details
 
M

mm53668

Use an old small phillips head that I took to the bench grinder till I got a fine point 1/8" long and then put a blade edge on two sides.
 
M

max games

Full Member
Jun 2, 2011
37
0
same thin happen to me, i found a way
here it is
save CFW using JF(correct one0225 or 0272..)
erase drive from flashing task
close JF
restart PC
download dosflash 32
flash CFW using dosflash

100% guarante
 
You must log in or register to reply here.