Lite-on here is what we know

[CoFree]

yep
sweet
nice post

i think in the next week or so we will see some nice new stuff for the lite-on.

[aasgaurd]

will not let me download the software from rapidshare

[aasguard]

scratch the last post got it to download but a big question is i have a sammy 28 already flashed can i put that in after i have done the spoofing

[MsK]

scratch the last post got it to download but a big question is i have a sammy 28 already flashed can i put that in after i have done the spoofing

you can change the drive over but you yes you will need to:

• a) inject the key
  b)spoof it as lite-on
  c)reflash with new data as A&B^

[MsK]

DVDKey32//
A new 32bit version has been released:

DVDKey32

This exe is a win32 app that extracts the drive key from the Lite-On 360 drive via Serial.

Be warned: This win32 program does not use the windows API. The exe writes directly to the ATA controller's I/O ports (which requires Geek Hideout's I/O dll, which I have included in the rarr). It also requires that you be using an ATA - SATA adapter to connect your 360 drive to your PC, or an SATA controller that has a legacy mode (try the BIOS setup options on your controller).

Geremia - initial concept
C4eva - the CDB's and how to send them
Podger - for the code
Seventhson - for the userspace parallel ATA driver

-----------------------------------------------------------------------------------------------------------------

USAGE:

Dumps Inquiry String to Inquiry.bin & Drive Key to Key.bin

usage: DVDKey32 command_base control_base com_port
command_base: base register of ATA command block in hex (e.g. 1F0 or 170)
control_base: base register of ATA control block in hex (e.g. 3F6 or 376)
legacy mode sata: command base = i/o from msinfo32, control base = command base + 0x0A (usually)
com_port: 1 to 9
pio_mode: 16 or 32 (default: 16)

As with Geremia's dos16 exe, power the drive on before each attempt and with the tray half open...


e.g.


DVDKey32 1cc0 1cca 1

Command base register is the port you would generally get from iPrep
Control base register in the case of Via 6421 at least is (Command base register + 0x0A)
Com port that the serila adapter is attached to

If you have trouble with 16-bit transfer, which you shouldn't, then you can try 32-bit PIO transfers, using the 4th optional parameter....

Msinfo32 does not mention the Control base register... However, a slax boot disk does.. If you are having problem figuring out the control base register try this.

1. Boot from your Slax 2.1 cd
2. login to Slax user/pass root/toor
3. type: dmesg | grep sata
you should then see something like this:

sata_via 0000:04:0b.0: version 2.0
sata_via 0000:04:0b.0: routed to hard irq line 5
ata5: SATA max UDMA/133 cmd 0x1CC0 ctl 0x1CCA bmdma 0x1CA0 irq 22
ata6: SATA max UDMA/133 cmd 0x1CD0 ctl 0x1CDA bmdma 0x1CA8 irq 22

Line 3 is the first port in your card... line 4 is the second and so on...

DVDKey32.rar

[MsK]

Personally I think i'll be sticking with the DOS version but the WIN version is here for those that want it

[CoFree]

yeea
ill be sticking with the dos also.

good post though man

[nelex]

Toobox 4.8
---------------------------------------------------------------------
Maximus - FIRMWARE TOOLBOX V4.8
---------------------------------------------------------------------

WHATS NEW ON V4.8:

- ADDED: Custom Spoofing Option on "Tools->Spoof Firmware" option
(it asks for your 96 bytes inquiry.bin), this could be
safer for spoofing drives to Liteon because appears
Liteon drives have per-drive specific inquiry response.

If you lost you inquiry.bin file and cannot redump it, then
go ahead with listed Liteon spoofing option (it will work
but you will not have the factory value).

- ADDED: You can now open key.bin file from main window instead of
manually type the key (will ask for a 16 bytes file).

- FIXED: Clicking on firmware file didnt open properly on toolbox.

copy this adress in browser :
http://www.devilsps3.centelia.net/toolb ... box-48.rar

[sadalius]

Those with lite-ons looking to replace them with a spoofed drive may want to wait a few weeks. Apparently, the lite-on handles the security sectore a little differently Here is an excerpt:

*Note - At this time, it is currently not confirmed safe to use a samsung or hitachi in place of the lite-on. This is due to a specific identification tag that is generated with the SS. There will be firmwares released in the next few weeks to account for the correct values!"

That was quoted from Iriez, one of the leading 360 hackers that works with C4E and a lot of others. The firmwares to be released will be for the samsungs and hitachi's that you would spoof and replace the lite-on with. No word yet as to a proposed release date for hacked firmware for the lite-on itself yet.

[Drivembig]

For now it is only recommended to use a BenQ drive.

[CoFree]

[Digital Menace]

so i hear the lite is now flashable but not dumpable ?

i sure hope they can get a dump! ^cross fingers*

and then c4eva works his magic and makes ixtreme for it....


maybe just wishful thinking, but i hope it's not far off.

[lilrevuk]

I don't think the drive is designed with the intention of never reading the firmware out, which means you wouldn't be able to get the drive key....

If they can sort that, then the new FW would be out a few days later, I just don't think it will be that easy

[Digital Menace]

yup man i hope they can get it.

[sadalius]

You can already get the drive key and drive ID string. The problem is the current method isn't to user friendly. You have to solder some wires from an rs-232 converter to the circuit board of the lite-on drive and then connect the converter to the computer. If everything is connected proper, when the program is run, the result will be the drives key and ID string. You can use this to spoof another drive to replace the lite-on with. At the moment, only Benq's are recommended as replacements.