Liteon secrets? I'll share something with you

[Geremia]

Today I made some progress too. I was able to dump the O-FW of a 74850. So here is how it works (although I just tried it with one drive til now):

-Lift pin 101 and 122
-solder a cable to pin 100, pin 101 and one to 3,3V
-use a 2-way switch which either connects 101 to 3,3V or to 100
-put the switch into the position so that it connects 100 to 101
-power drive
-start Dosflash, it will recognise the SPI with Status x72
-if you read it out now, it will just give you a .bin full of FFFFFFFF, but thats OK, this is how we tricked the Flash Controller to think the SPI is empty
-put the switch in the other position (so that 101 is connected to 3,3V)
-now read the flash

---> Voila, you got your dump!

Maybe someone else is going to give it a try, would be nice to get some feedback. For today my tests are finished, its pretty late....

Oh yes, and of course: no warranty at all, I even fried one drive myself a few days ago, when I was performing some tests. I suppose working on it a 4:30 in the morning obviously wasn´t the best idea...

Thanks for reporting your findings, nice one

That's the power of knowledge spreading

[halo2jumper]

so with this method is it possible to dump an LiteOn 83850 and 93450??

[MRA]

I don´t know that yet. Just keep cool, some people will hopefully try it out. But even if this is possible, we still have to get the DVD Key out of the dump, and even then there is still no iXtreme at least for the 93450 Liteons.

[damn!]

I see people can not wait few days and poking in the dark.
Really a shame.

If you like kill your drive so go on.

It's a laser dead drive an i'm kinda bored now... So i'll try this.. btw why does youtube convert this video soo long, or are there any other problems?

If you have icq could you please let me add you to my contact list? i'm german too btw.

[carranzafp]

All liteons so far use same MTK chipset, so yes, will work for all Liteon models known till today

[carranzafp]

I don´t know that yet. Just keep cool, some people will hopefully try it out. But even if this is possible, we still have to get the DVD Key out of the dump, and even then there is still no iXtreme at least for the 93450 Liteons.

Just hex compare 2 dumps, even 2 ixtreme dumps and you got your key locations

[Oggy]

MRA - send me dump, Ill give you drive key

[Oggy]

Max, IIRC Liteon desnt have a set location, its scrambled

[halo2jumper]

I don´t know that yet. Just keep cool, some people will hopefully try it out. But even if this is possible, we still have to get the DVD Key out of the dump, and even then there is still no iXtreme at least for the 93450 Liteons.

i dont want tu push or to stress. it was only a question^^
And thx to u guys that u share this with the community not like some other people---

[gupek]

how long is it gonna take for this video to be processed on youtube? eh... put this video on any other server...

[raidenxtribe]

Hi man, i'll share something too... I dumped my 83850 with MRA method ... Work like a charm ...

JF opens the original firmware in Destination Firmware and I can clearly see the key ^_^

We can mod all liteon drive now.

Cheers to Microsoft, Liteon and MT ^_^

[MRA]

Hi man, i'll share something too... I dumped my 83850 with MRA method ... Work like a charm ...

JF opens the original firmware in Destination Firmware and I can clearly see the key ^_^

We can mod all liteon drive now.

Cheers to Microsoft, Liteon and MT ^_^

Wow, that was quick. Off course, I didn´t think that getting the key was sooooo simple. Just tried it myself, loading the OFW as Destination(!) FW works, and we can see the key! Thanks mate for that brilliant idea

[carranzafp]

For liteon 83 v1 and v2 dump:
0x1C138
0x1CAEC
0x1C742
0x1C680
0x1CECD
0x1CB34
0x1C83F
0x1C725
0x1C52A
0x1C201
0x1C9DF
0x1C023
0x1C4A0
0x1C59A
0x1C3FE
0x1CF49

For liteon 74 (and possible same for liteon 93):
0x1E138
0x1EAEC
0x1E742
0x1E680
0x1EECD
0x1EB34
0x1E83F
0x1E725
0x1E52A
0x1E201
0x1E9DF
0x1E023
0x1E4A0
0x1E59A
0x1E3FE
0x1EF49

just load the bin on JF and will show you the key, the above locations were get replacing the key and hexcomparing

[Oggy]

right click, save dummy.bin

In case anyone cares.

[halo2jumper]

So some to test an liteon 93??

[Oggy]

Dump is solid - TMF wouldnt post otherwise.

All you need is iX

[carranzafp]

some 93 fw appears very similar to 74, so hex comparing you could get the bytes to change to spoof it (even if you dont know the encryption)

[damn!]

So some to test an liteon 93??

I would, but i won't get one at this time. Have to look tomorrow for it.

[aliena]

Hellowe tested 83850C firmware on 93450C undumbale drive. It runs OK. So IXTREME 1.6 83850C is ok for unmoddable drives.

[carranzafp]

Of course ixtreme 1.6 spoofed will work, but why to ban a just purchased console, well at least if you dont want to play online