RGH Slim KV Swap / DVD Key Swap

[WNYConsoles]

I have a customer with a Slim (failed kamakazi) who decided to get RGH done. I have successfully RGH the Slim with the TX CoolRunner and I figured I would replace the bad Winbond PCB with a good working one by putting the DVD key from the PCB into the NAND.

The original drive was a 1071, the replacement is a 0225. I started first by just swapping the DVD key in the nand, play dvd, go figure.

The next step I did was take a full KV dump from the original nand from the Slim that the replacement 0225 PCB came from and injected that KV into the nand, play dvd.

I figured possibly there was some verification between the DVD key, drive type / OSIG so I took the manufacture date, serial numbers, keys, etc, and swapped them to make a perfect replacement KV and injected it, still play dvd.

Because this practice of swapping DVD keys on the nand side (instead of just flashing the DVD drive) is not common there is not a lot of information anywhere so if anyone has done this on a Slim and could help I would greatly appreciate it.

 

[garageinc]

i'm pretty sure the kv cannot be changed on a slim but i'm not 100% sure

 

[WNYConsoles]

Hmm, that is interesting news. Can anyone else confirm this?

 

[red dog]

You can change the keyvault but it didn't work for me.
I used 360 flash dump tool and extracted the key BIN File and manually spoffed the drive then used bestpig's newest toolbox remade nand to include latest fcrt.bin as this was what stopped me replacing the spoofed drive and now i got a phat benq as a slim liteon 0225

 

[TilVl]

When kv type 2 was made editing went out the window. The kv is hashed. Changing the osig and what not breaks the osig.

Sent from my SGH-T839 using Tapatalk

 

[x360ccm]

just write 9504 fw to his drive.then inject his drive key into it.

once done then read the drive save the dummy.then load LTPlus-0272-v2.0 into target.

click spoof source to target.

write to drive,outro

job done.

 

[TilVl]

His original drive is a 1701.

Sent from my SGH-T839 using Tapatalk

 

[TilVl]

Once I get my new xbox in feb and rgh my current online slim ill gladly donat the nand and cpu key. Can't currently its my live xbox.

Sent from my SGH-T839 using Tapatalk

 

[WNYConsoles]

I have like 6 or 8 Slims. I can get you a 9504 Nand/CPU Key from my personal XBOX.

Anyway, live is not a issue here. I am simply trying to put the DVD key from 0225 onto the NAND of a Slim that originally had a 1071 Lite-On.

 

[WNYConsoles]

You can't spoof a stock drive untouched Winbond..... Otherwise I would just flash it with the correct key.

 

[WestCoastConsoles]

Kv editing does not work on slims hence the type 2 kv. You would need to change more than just the key it will not work. There is hashing involved. Your best bet is to write the 1071 fw to your new pcb with drive key. Your going to have to unlock the pcb and write the firmware.