LITEON DG-16D4S - SLIM Quick question on key changing

Hi there, I have recently tried to do the kamikaze hack on one of my old boards and wanted to get some practice at it. I have gotten it to unlock and took my time. I was able to dump the firmware, but my question can you change the key like you would if we used a after market pcb or phat liteon. Everytime I try to put in a different key in the source and flash the board which does fine and verifies. When I go redump it shows the old key but shows the LT 3.0 firmware but just the old key. Am I missing something? I even load the key.bin from the xbox that I want to use the key with. Still no go.. Just loads old key. Thanks for any help.
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

JungleFlasher 0.1.96 Beta (323)


Session Started Fri Dec 19 09:33:06 2014






This is a Wow 64 process running on 6 x 64 bit CPUs 


portio64.sys Driver Installed 


portio64.sys Driver Started, thanks Schtrom ! 


Found 4 I/O Ports.


Found 1 Com Ports.


Found 12 windows drives C: D: E: F: G: H: I: J: K: L: M: N:


Found 3 CD/DVD drives G: H: I:






XECUTER X360USB PRO attached.






Drive is Slim Lite-On.. 






Key found in KeyDB at record (40 - D714CG0478070017B)


Key is: xxxx


Key has been tested and verified, thanks C4eva ! 


Drive is Slim Lite-On.. 


Drive is Slim Lite-On.. 


XECUTER X360USB PRO removed.






XECUTER X360USB PRO attached.






Drive is Slim Lite-On.. 


Sending Vendor Intro to port 0x0000






Serial flash found with Status 0x72






Sending Device ID request to port 0x0000


Spi Status: 0x8C


Manufacturer ID: 0xEF


Device ID: 0x11


Flash Name:  Winbond/NEX(W25P20/NX25P20)


Flash Size:  262144 bytes






Sending Spi UnLock request to Port 0x0000


............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................


Spi Status: 0x00






Getting Status from port 0x0000


Serial flash found with Status 0x72


Reading Drive Key.


............


Authorised !


Grabbing sector 0x3E000.


................


Blank 3E000 sector detected!


Known f/w confirmed !


Sending Vendor Intro to port 0x0000


Status 0x51


Re-sending Vendor Intro: 


..........


Serial flash found with Status 0x72






Sending Device ID request to port 0x0000


Manufacturer ID: 0xEF


Device ID: 0x11


Flash Name:  Winbond/NEX(W25P20/NX25P20)


Flash Size:  262144 bytes






Updating flash for on-line dump.






Sending Sector Erase to Port 0x0000


Erasing: 0x3E000


Writing: 0x3E000 


............


Reading Bank 0: ................


Reading Bank 1: ................


Reading Bank 2: ................


Reading Bank 3: ................


Dumped in 4802mS






Restoring sector 0x3E000.






Sending Sector Erase to Port 0x0000


Erasing: 0x3E000


Writing: 0x3E000 


............


Authorised !


................


Restore 0x3E000 verified !






Lite-On Dump file saved to Lite-OFW2.bin


Loading firmware from buffer


Drive key @ n/a xxxx


Firmware Osig: [PLDS    DG-16D4S        0225]


Firmware is:  Stock                           


Key added to database






Auto-Loading firmware file D:\Downloads\Jungle Flasher\JungleFlasher v0.1.96 Beta (323)\firmware\LTPlus-0225-v3.0.bin


MD5 hash:  1a38d3a2a6519339599fa1866642c513


Genuine LT plus v3.0


Drive key @ n/a FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF


Firmware Osig: [PLDS    DG-16D4S        0225]


Firmware is:  LT-Plus 3.0                     


Spoofing Target


DVD Key copied to target


Key Sector copied from Source to Target


Target is LT - ID strings not copied to Target






Drive is Slim Lite-On.. 






Key found in KeyDB at record (57 - Documentation)


Key is: xxxxxx


Key has been tested and verified, thanks C4eva ! 


DVD Key copied to target


Target is LT - ID strings not copied to Target






Getting Status from port 0x0000


Invalid Status 0x50


Sending Vendor Intro to port 0x0000


Status 0x51


Re-sending Vendor Intro: 


.........


Serial flash found with Status 0x72






Sending Device ID request to port 0x0000


Spi Status: 0x00


Manufacturer ID: 0xEF


Device ID: 0x11


Flash Name:  Winbond/NEX(W25P20/NX25P20)


Flash Size:  262144 bytes






Getting Status from port 0x0000


SPi flash found with Status 0x72






Sending Chip Erase to Port 0x0000


Erasing:


Writing target buffer to flash


Writing Bank 0: ................


Writing Bank 1: ................


Writing Bank 2: ................


Writing Bank 3: ................


............


Flash Verification Test !


Reading Bank 0: ................


Reading Bank 1: ................


Reading Bank 2: ................


Reading Bank 3: ................


Dumped in 4781mS






Write verified OK !






Restoring sector 0x3E000.






Sending Sector Erase to Port 0x0000


Erasing: 0x3E000


Writing: 0x3E000 


............


Authorisation Failed!


Restore Verify Failed !
 

Antalpromille

VIP Member
Aug 4, 2011
3,165
0
Borås, sweden
You can only spoof keys on 9504 and 0272 and get it to work. There are ways to get the key on other Fw also but the drive won't work with the xbox they are paired for unless they run RGH with nofcrt patch enabled.
 
How about the [FONT=proxima-nova, Helvetica Neue, Helvetica, Arial, sans-serif] mxic boards with cut trace? Just curious never tried to change keys on those but just for future reference. Now if say I get a board thats on earlier firmware thats not been locked, can the key be changed? To bad I didn't get a couple more of those 4s boards xconsole had on sale for 18 bucks. I guess its going to be a ltu2 board for this drive. Thanks[/FONT]