Print

[dmanjohn]

Hey thanks Boxxdr for putting this tutorial together, just ordered my supplies from nutech so I should be able to try it soon.

[Svantesson666]

QUOTE(saleem_hacks_360s @ Dec 10 2009, 01:18 AM)

no need to remove the board completely,just discoonect the 3 ribbons and then turn it over to expose the underneath,best is lay it beside the drive chassis.

as far as i know,it wont matter what way round it gos.

as for dosflash32 or jungleflasher,just try either and see which one works for you ie:which picks up the drive and allows you to read it.

the cut traces need reconnecting,how you do it is up to you,solder bridge,wire or conductive paint,its up to you.

I didn't disconnect any of the ribbons. Once the screws are gone you can flip the board without removing them.  

[ZerOneX]

I had to use a 12 ohms 1/4 resistor to get it working.... i tried to use 22, 18 and 15 without any sucess.

[LiquidXed]

does thi work on the 7xxxxx drives that the r707 points r dead? and can i get my key from it?

[gregeet]

This is an excellent post no doubt. I'm not a beginner when it comes to soldering but always try not to solder on traces. Your idea is definitely better. I could imaging trying to cut poin101 from the trace would be a pain. The GND is also better. Simple but great idea.All in all you improved the method, gave hi res pics, excellent advice. You deserve a thumbs up. I'm not going to do this till the firmware comes out but when I do I feel it will be much safer thanks to your method.

[LiquidXed]

QUOTE(LiquidXed @ Dec 10 2009, 01:22 AM)

will a lenline 70-171 work?

will it work the same as the 70-450 lenline?

[LiquidXed]

this is a great tuturial. it need to be Pinned.

[iateshaggy]

they did make it front page news.

[NEO_X]

i soldered the wires and cut the traces but i get status 0xF3 what could be wrong i use the xtractor for power and jungleflasher

[DuggyUK]

for those of you looking for the lenline (?!), all that you need is a "glass fibre abrasive" pen, put that into google and buy one.  

[TingedAce]

Has anyone tried this on a 74850C ?  (this is what I'm using to practise on incidentally)
-->I have and I'm not sure what's going on.
-->This is an unmodified stock Liteon 74850C, April 2008

Firstly the mod was done correctly, and tested with a multimeter. No shorts and everything connected where it should be.

According to the instructions you're meant to power up the drive with the switch in the ON position and get 0x72 status.
I power up in the ON position and there's no drive detected by JF, consequently I get 0x80 repeatedly.
If I power up the drive in the OFF position JF sees the drive but it won't Intro - you get 0xD1. Is that normal?

The switch is wired correctly, I've not got it the wrong way round.

I found out I have to click Intro while the drive is powered down, then click yes and when the dots start, turn the drive on with the switch in the ON position and I immediately get 0x72.

Now I put the switch to OFF, click read and get the firmware and save it to disk.

This all seems OK but now if you load this newly acquired firmware back into JF as target, it displays the wrong key. I know it's the wrong key because I've previously extracted the key with a probe and flashed it to another drive which is now working perfectly with that xbox.

See JF transcript below....

I've also done the whole process in dosflash, and got exact same (wrong) key.
Also, why does it think that it's encrypted iXtreme?

Any comments much appreciated.
Thanks

-------------
Found 1 Com Ports.
Found 6 windows drives A: C: D: E: F: J:
Found 2 CD/DVD drives E: F:

Sending Vendor Intro to port 0xD000
Status 0xD0
Re-sending Vendor Intro:
........
Serial flash found with Status 0x72

Sending Device ID request to port 0xD000
Manufacturer ID: 0xC2
Device ID: 0x11
Flash Name:  MXIC(MX25L2005)
Flash Size:  262144 bytes

Getting Status from port 0xD000
Serial flash found with Status 0x72

Reading Bank 0: ................
Reading Bank 1: ................
Reading Bank 2: ................
Reading Bank 3: ................

Lite-On Dump file saved to C:\Users\Default\Documents\Xbox Keys\Experiment\Lite-OFW3.bin

Loading MTK_Flash source file
Loading target file C:\Users\Default\Documents\Xbox Keys\Experiment\Lite-OFW3.bin
Target File MD5 hash is:  8c8ff5bbba218ae9d295f52ffe4846a4
Inquiry area found
Current DVD key is 9C3792D4387FCB649EE997BE39E1C7C1
Firmware is a Lite-On encrypted iXtreme OSIG: PLDS    DG-16D2S        7485
Firmware type is:

[LiquidXed]

ok. ive managed to solder everything and cut the traces, im finished ,btu i hav a ?
Is both point that is wired to the switch supposed to be a closed circuit before connecting to the switch?
When i test the 2 points on the board with my multimeter its showin up as closed circuit, without it wired to the switch, is that right?
ive got all the traces cut and everything and tested with my meter evrything is right on that end, just wandering why im getting a closed circuit with the ground point and the pad101 before i even wire up the switch. is that normal? sorry if i kept repeating im alittle high

[Maximize]

QUOTE(TingedAce @ Dec 11 2009, 08:23 PM)

Has anyone tried this on a 74850C ?  (this is what I'm using to practise on incidentally)
-->I have and I'm not sure what's going on.
-->This is an unmodified stock Liteon 74850C, April 2008

Firstly the mod was done correctly, and tested with a multimeter. No shorts and everything connected where it should be.

According to the instructions you're meant to power up the drive with the switch in the ON position and get 0x72 status.
I power up in the ON position and there's no drive detected by JF, consequently I get 0x80 repeatedly.
If I power up the drive in the OFF position JF sees the drive but it won't Intro - you get 0xD1. Is that normal?

The switch is wired correctly, I've not got it the wrong way round.

I found out I have to click Intro while the drive is powered down, then click yes and when the dots start, turn the drive on with the switch in the ON position and I immediately get 0x72.

Now I put the switch to OFF, click read and get the firmware and save it to disk.

This all seems OK but now if you load this newly acquired firmware back into JF as target, it displays the wrong key. I know it's the wrong key because I've previously extracted the key with a probe and flashed it to another drive which is now working perfectly with that xbox.

See JF transcript below....

I've also done the whole process in dosflash, and got exact same (wrong) key.
Also, why does it think that it's encrypted iXtreme?

Any comments much appreciated.
Thanks

-------------
Found 1 Com Ports.
Found 6 windows drives A: C: D: E: F: J:
Found 2 CD/DVD drives E: F:

Sending Vendor Intro to port 0xD000
Status 0xD0
Re-sending Vendor Intro:
........
Serial flash found with Status 0x72

Sending Device ID request to port 0xD000
Manufacturer ID: 0xC2
Device ID: 0x11
Flash Name:  MXIC(MX25L2005)
Flash Size:  262144 bytes

Getting Status from port 0xD000
Serial flash found with Status 0x72

Reading Bank 0: ................
Reading Bank 1: ................
Reading Bank 2: ................
Reading Bank 3: ................

Lite-On Dump file saved to C:\Users\Default\Documents\Xbox Keys\Experiment\Lite-OFW3.bin

Loading MTK_Flash source file
Loading target file C:\Users\Default\Documents\Xbox Keys\Experiment\Lite-OFW3.bin
Target File MD5 hash is:  8c8ff5bbba218ae9d295f52ffe4846a4
Inquiry area found
Current DVD key is
Firmware is a Lite-On encrypted iXtreme OSIG: PLDS    DG-16D2S        7485
Firmware type is:

IT MIGHT BE TOO LATE BUT PLEASE CUT OUT YOUR DVD DRIVE KEY

MODS PLEASE DELETE HIS POST


not that MS can do anything with individual drive keys but if they can you might already be effed

[LiquidXed]

for some reason the comp lags really bad when tryin to do this. whats the deal??
nevermind i forgot to delete the via driver, lol

[LiquidXed]

I still cant get the key....?
got the f/w but no key.