Liteon 83850-v2 and Liteon 93450 DVD Key Can Now Be Dumped?

Xecuter

Staff member
Top TX Brass
Dec 6, 2002
11,468
128
Asia
team-xecuter.com
From team-xecuter.com:

There have been several news reports on Xboxhacker.net of users having success in dumping the keys of the newest un-moddable Liteon DVD drives. The methods posted so far are not for the beginner so do so at your own risk. The method seem crude at the moment, no doubt some easier methods will surface shortly. Remember with that DVD key you can install any flash-able DVD drive to that once un-moddable Xbox 360. Good job to all involved !

-Lift pin 101 and 122 (The MT Chip)
-solder a cable to pin 100, pin 101 and one to 3,3V
-use a 2-way switch which either connects 101 to 3,3V or to 100
-put the switch into the position so that it connects 100 to 101
-power drive
-start Dosflash, it will recognise the SPI with Status x72
-if you read it out now, it will just give you a .bin full of FFFFFFFF, but thats OK, this is how we tricked the Flash Controller to think the SPI is empty
-put the switch in the other position (so that 101 is connected to 3,3V)
-now read the flash
News-Source: team-xecuter.com | xboxhacker.net



 
More info



The way it works is the grd to 101 will disconnect the spi flash so it looks erased this will put the drive into vendor mode status x72 then with the switch turned back off after vendor mode x72 the 3.3v will allow it to see the real spi flash again then you hit read to get the full dump

kind of like hot swaping but without a 2nd flash as the drive sees a disconnected flash as a blank flash ffffff
 

bonnatron

Noob Account
Dec 3, 2009
5
0
kinda noobish, does it need to be a 22 ohm resistor or something close, and how does one go about cutting the wires imbeded without causing damage
 
kinda noobish, does it need to be a 22 ohm resistor or something close, and how does one go about cutting the wires imbeded without causing damage
you can use 2 10ohm resistors in series as thats what most are doing.

Cutting the track very carfully is the only way but remember these need to be reinstated after the dump.


 

bonnatron

Noob Account
Dec 3, 2009
5
0
Many thanks will be giving it a try as soon as i get to work, have all the tools i would ever need there
 
Nicee, will deff be givin it a go soon



Hopefully it will be flashable aswel soon enough!
It can be flashed

1. cut traces
2. solder wires
3. make sure you have your switch/jumper shorted so the switch has current through it, or grounded through it rather
4. open dosflash and find 0x72
5. disconnect jumper/disable switch so the grounding is gone
6. read flash
7. spoof dumped files
8. lite-on erase
9. write flash
10. mtk outro/reset (close dosflash)
11. turn off pc
12. disconnect soldered wires
13. reconnect cut traces using solder
14. re-assemble drive
15. enjoy.
 

bonnatron

Noob Account
Dec 3, 2009
5
0
can get the drive in vendor mode, with x72, comes back with invalid key, can u use jungleflasher or is it only dosflash
 

bonnatron

Noob Account
Dec 3, 2009
5
0
Got Key open jf and says invalid bin file or something liKe that have to open as target and loads everything but cant get 1.6 on there
 
Got Key open jf and says invalid bin file or something liKe that have to open as target and loads everything but cant get 1.6 on there
1. Open the dump in the target
note** i. liteon encrypted f/w will not open on the source tab.
ii. 93 f/w will show as 74 as they are very similar...
iii. 83 v2 will look like 83 again very similar
2. right click in the target tab and select "Save Dummy"
3. now reopen this dummy on the source side.
4. open which ever Lite-on f/w YOU think is best in the target side
note** 1.67 will NOT spoof a 93 correctly to non-encrypted types
however, 167 will not alter the inquiry between lite-on revs
 
Last edited:

RavinNinja

Senior Member
Oct 17, 2009
123
0
swindon.SN2.uk
Ahh kk didnt see that thread..



Need to get ma hands on one of these drives. Would buy one if they were for sale ANYWHERE =/
i think it works with any liteon if you jus wanted to have a go at dumping the firmware like this .... i think i got one knokin about im gonna practice on first

anyone correct me if im wrong
 
Last edited: