|
gupek
|
 |
« Reply #60 on: January 18, 2010, 06:46:04 PM » |
|
this all links are down very very fast... hehe
|
|
|
|
|
Logged
|
|
|
|
|
joeyddr
|
|
« Reply #61 on: January 18, 2010, 06:49:42 PM » |
|
|
|
|
|
|
Logged
|
|
|
|
legueux
Newbie
Posts: 7
|
|
« Reply #62 on: January 18, 2010, 06:50:43 PM » |
|
|
|
|
|
|
Logged
|
|
|
|
|
Gazcoigne
|
|
« Reply #63 on: January 18, 2010, 07:00:17 PM » |
|
for the avoidance of doubt its clear to me you need to do a full MRA style dump of your fw, then copy paste the blocks mentioned in the readme into the freeLT with hex editor, then spoof manually with JF
nice work geremia thanks for keeping the scene 'free'
now to go buy a new xbox to play with this...
|
|
|
|
|
Logged
|
|
|
|
|
artik
|
|
« Reply #64 on: January 18, 2010, 07:00:40 PM » |
|
|
|
|
|
« Last Edit: January 18, 2010, 07:56:54 PM by artik »
|
Logged
|
|
|
|
|
joeyddr
|
|
« Reply #65 on: January 18, 2010, 07:04:37 PM » |
|
for the avoidance of doubt its clear to me you need to do a full MRA style dump of your fw, then copy paste the blocks mentioned in the readme into the freeLT with hex editor, then spoof manually with JF
nice work geremia thanks for keeping the scene 'free'
now to go buy a new xbox to play with this...
Well if someone never did that kind of dump with their firmware to begin with all we have is the dummy.bin and the orig.bin would be long gone... |
|
|
|
|
Logged
|
|
|
|
|
woop
|
|
« Reply #66 on: January 18, 2010, 07:05:19 PM » |
|
I noticed that in jungleflasher the key shows up as all ffs, do you think maybe jungle flasher can install the key and serials correctly?
|
|
|
|
|
Logged
|
|
|
|
|
Geremia
|
|
« Reply #67 on: January 18, 2010, 07:06:08 PM » |
|
3C000-3C2EF is a strange story, don't know yet exactly if it's a laser calibration data or just a log done during manufacturing tests. There are cmds to dump it or rewrite it with actual values for actual disc inserted, but not found yet a function that uses this area someway. In the doubt, take this area from you original.bin (if you have the full dump).
|
|
|
|
|
Logged
|
|
|
|
|
woop
|
|
« Reply #68 on: January 18, 2010, 07:09:11 PM » |
|
So copy that area as a safety precaution, so as far as I can tell jungleflasher copy's all data correctly, im gonna go ahead and try it.
GEREMIA FTW!!!!
|
|
|
|
|
Logged
|
|
|
|
|
ATHEiST
|
|
« Reply #69 on: January 18, 2010, 07:13:53 PM » |
|
3C000-3C2EF is a strange story, don't know yet exactly if it's a laser calibration data or just a log done during manufacturing tests. There are cmds to dump it or rewrite it with actual values for actual disc inserted, but not found yet a function that uses this area someway. In the doubt, take this area from you original.bin (if you have the full dump).
Could it be something to do with why the fw would only read Verbs initially? |
|
|
|
|
Logged
|
|
|
|
|
ReverseAffect
|
|
« Reply #70 on: January 18, 2010, 07:15:06 PM » |
|
3C000-3C2EF is a strange story, don't know yet exactly if it's a laser calibration data or just a log done during manufacturing tests. There are cmds to dump it or rewrite it with actual values for actual disc inserted, but not found yet a function that uses this area someway. In the doubt, take this area from you original.bin (if you have the full dump).
Could it be something to do with why the fw would only read Verbs initially? I don't think it's that as many can use other brands...I use sonys without a problem... |
|
|
|
|
Logged
|
sick like a mofo..not reballing for a while...
|
|
|
|
Gazcoigne
|
|
« Reply #71 on: January 18, 2010, 07:17:09 PM » |
|
i compared the orig liteon fw's that are available and they differ slightly in these sectors...
|
|
|
|
|
Logged
|
|
|
|
|
woop
|
|
« Reply #72 on: January 18, 2010, 07:17:50 PM » |
|
3C000-3C2EF is a strange story, don't know yet exactly if it's a laser calibration data or just a log done during manufacturing tests. There are cmds to dump it or rewrite it with actual values for actual disc inserted, but not found yet a function that uses this area someway. In the doubt, take this area from you original.bin (if you have the full dump).
Could it be something to do with why the fw would only read Verbs initially? I don't think it's that as many can use other brands...I use sonys without a problem... Actually I prefer sonys they are very good discs, About the same as verbatim. |
|
|
|
|
Logged
|
|
|
|
|
gupek
|
|
« Reply #73 on: January 18, 2010, 07:25:43 PM » |
|
there are 6 difference in this section beetwen my 8v2 orig fw nad lt...
|
|
|
|
|
Logged
|
|
|
|
|
ATHEiST
|
|
« Reply #74 on: January 18, 2010, 07:29:54 PM » |
|
I don't think it's that as many can use other brands...I use sonys without a problem...
I know that, I use Aone PLUS+ or Ridata. I was referring to the problem that LT initially had with non-Verb media, It was posted in the twitter. |
|
|
|
« Last Edit: January 18, 2010, 07:34:48 PM by ATHEiST »
|
Logged
|
|
|
|
|
Acton1
|
|
« Reply #75 on: January 18, 2010, 07:33:03 PM » |
|
which is the best hex edit to use guy's ?
|
|
|
|
|
Logged
|
|
|
|
|
Secret-Service
|
|
« Reply #76 on: January 18, 2010, 07:34:07 PM » |
|
Great work ! I has tested on a banned xbox and LT74.bin works fine. Not tested online yet. But great work  Tested games Fifa 08 Original Bad Comapany Backup COD MW 2 Backup |
|
|
|
|
Logged
|
|
|
|
DreXeL_UK
Newbie
Posts: 2
|
|
« Reply #77 on: January 18, 2010, 07:34:58 PM » |
|
Hi, just to let you all know I just flashed a 7485 with this, and it is playing back-ups just fine. I threw a variety of 'waves' at it and it's booting them just fine. I'm not using Verb media, I'm using 'RiDisc xtreme' discs. The drive in question was an upgrade from 1.6, I simply made a 'dummy from ixtreme' in JF, the opened the 'LT74.bin' as target (JF read it as original FW). I spoofed source to target and it works perfectly. Obviously doing it like that I didn't copy the 3C000-3C2EF area, but like I said above the drive is reading non-verb media just fine  |
|
|
|
« Last Edit: January 18, 2010, 07:37:31 PM by DreXeL_UK »
|
Logged
|
|
|
|
|
Secret-Service
|
|
« Reply #78 on: January 18, 2010, 07:37:49 PM » |
|
Hi, just to let you all know I just flashed a 7485 with this, and it is playing back-ups just fine. I threw a variety of 'waves' at it and it's booting them just fine. I'm not using Verb media, I'm using 'RiDisc xtreme' discs. The drive in question was an upgrade from 1.6, I simply made a 'dummy from ixtreme' in JF, the opened the 'LT74.bin' as target (JF read it as original FW). I spoofed source to target and it works perfectly. Obviously doing it like that I didn't copy the 3C000-3C2EF area, but like I said above the drive is reading non-verb media just fine. Here's the JF log: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
JungleFlasher 0.1.67 Beta
Session Started Mon Nov 23 23:41:26 2009
This is a 32 bit process running on 4 x 32 bit CPUs
PortIO is installed and running.
Found 8 I/O Ports.
Found 2 Com Ports.
Found 3 windows drives C: D: E:
Found 1 CD/DVD drives E:
Sending DVDKey request to I/O port 0xAF00 and COM4
................ Serial Data looks ok, key returned: A7C2DECBE0034C5E4A402A57B2BF0044
................ Serial Data looks ok, key returned: A7C2DECBE0034C5E4A402A57B2BF0044
................ Serial Data looks ok, key returned: A7C2DECBE0034C5E4A402A57B2BF0044
................ Serial Data looks ok, key returned: A7C2DECBE0034C5E4A402A57B2BF0044
................ Serial Data looks ok, key returned: A7C2DECBE0034C5E4A402A57B2BF0044
................ Serial Data looks ok, key returned: A7C2DECBE0034C5E4A402A57B2BF0044
Extracted drive key matched 6 times.
0000: 05 80 00 32 5B 00 00 00 - 50 4C 44 53 20 20 20 20 ...2[...PLDS
0010: 44 47 2D 31 36 44 32 53 - 20 20 20 20 20 20 20 20 DG-16D2S
0020: 37 34 38 35 30 43 41 30 - 41 31 44 36 30 38 43 47 74850CA0A1D608CG
0030: 38 34 37 38 30 32 30 30 - 33 50 30 20 20 20 00 00 847802003P0 ..
0040: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0050: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000: C0 85 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0010: 00 00 00 00 44 36 30 38 - 43 47 38 34 37 38 30 32 ....D608CG847802
0020: 30 30 33 50 30 20 20 20 - 00 00 00 00 00 00 34 37 003P0 ......47
0030: 35 38 43 30 20 20 4C 50 - 53 44 20 20 20 20 47 44 58C0 LPSD GD
0040: 31 2D 44 36 53 32 20 20 - 20 20 20 20 20 20 20 20 1-D6S2
0050: 20 20 20 20 20 20 20 20 - 20 20 20 20 20 20 00 00 ..
0060: 00 00 00 0B 00 00 00 04 - 00 02 06 00 00 00 00 00 ................
0070: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0080: 03 00 78 00 78 00 E3 00 - 78 00 00 00 00 00 00 00 ..x.x...x.......
0090: 00 00 00 00 00 00 00 00 - 02 02 00 00 68 00 00 00 ............h...
00A0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00B0: 20 20 00 00 ..
0000: 44 36 30 38 43 47 38 34 - 37 38 30 32 30 30 33 50 D608CG847802003P
0010: 30 20 20 20 FF FF FF FF - 38 4A 32 36 31 31 38 36 0 ....8J261186
0020: 31 37 42 30 31 34 58 58 - 41 30 FF FF 53 34 50 38 17B014XXA0..S4P8
0030: 42 31 33 30 30 30 30 30 - 31 34 34 30 31 34 00 00 B1300000144014..
0040: FF FF FF FF FF FF FF FF - FF FF FF FF 41 31 FF FF ............A1..
Dummy.bin file saved to C:\Documents and Settings\Administrator\Desktop\Temp FW\Dummy.bin
Loading DVDkey source file
Inquiry string found
Identify string found
DVD key found @ 0xA030 key is A7C2DECBE0034C5E4A402A57B2BF0044
Firmware is a Lite-On Dummy OSIG:
Firmware type is: DVDKey32 extract
Auto-Loading target file C:\Documents and Settings\All Users\Desktop\JungleFlasher v0.1.67 Beta (50)\firmware\ix16-liteon.bin
Target File MD5 hash is: c3a17c9726f4be3cc3e597797caba7f9
Genuine Lite-On iXtreme 1.6
Inquiry area found
Current DVD key is 55AA55AA55AA55AA55AA55AA55AA55AA
Firmware is a Lite-On encrypted iXtreme OSIG: PLDS DG-16D2S 7485
Firmware type is: iXtreme v1.60-12X-FINAL-DG-16D2S
DVD Key copied to target
Inquiry string copied from Source to Target
Identify string copied from Source to Target
Serial strings copied from Source to Target
Key added to database
Sending Lite-On-Erase request to port 0xAF00
..............
Drive returned Status 0xD0
....................
Device Intro failed!
Sending Vendor Intro to port 0xAF00
Serial flash found with Status 0x72
Sending Device ID request to port 0xAF00
Manufacturer ID: 0xFF
Device ID: 0xFF
Flash Name: Unknown type
Flash Size: n/a
Sending Vendor Intro to port 0xAF00
Serial flash found with Status 0x72
Sending Device ID request to port 0xAF00
Manufacturer ID: 0xFF
Device ID: 0xFF
Flash Name: Unknown type
Flash Size: n/a
Sending Vendor Intro to port 0xAF00
Status 0xF2
Re-sending Vendor Intro:
.....
Serial flash found with Status 0x72
Sending Device ID request to port 0xAF00
Manufacturer ID: 0xC2
Device ID: 0x11
Flash Name: MXIC(MX25L2005)
Flash Size: 262144 bytes
Getting Status from port 0xAF00
SPi flash found with Status 0x72
Sending Chip Erase to Port 0xAF00
Writing target buffer to flash
Writing Bank 0: ................
Writing Bank 1: ................
Writing Bank 2: ................
Writing Bank 3: ................
Flash Verification Test !
Reading Bank 0: ................
Reading Bank 1: ................
Reading Bank 2: ................
Reading Bank 3: ................
Write verified OK !
Sending Vendor Outro to port 0xAF00
You is wrong. Auto-Loading target file C:\Documents and Settings\All Users\Desktop\JungleFlasher v0.1.67 Beta (50)\firmware\ix16-liteon.bin Target File MD5 hash is: c3a17c9726f4be3cc3e597797caba7f9 Genuine Lite-On iXtreme 1.6 |
|
|
|
|
Logged
|
|
|
|
DreXeL_UK
Newbie
Posts: 2
|
|
« Reply #79 on: January 18, 2010, 07:38:47 PM » |
|
I posted the wrong log, that was the log from the original flash. Yes, I'm an idiot. Here's the correct one:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
JungleFlasher 0.1.69 Beta
Session Started Tue Jan 19 00:09:25 2010
This is a Wow 64 process running on 4 x 64 bit CPUs
portio64.sys Driver Installed
portio64.sys Driver Started, thanks Schtrom !
Found 8 I/O Ports.
Found 4 Com Ports.
Found 4 windows drives C: D: E: F:
Found 2 CD/DVD drives E: F:
Sending iXtreme DVDkey request to port 0xAF00
Extracted drive key A7C2DECBE0034C5E4A402A57B2BF0044
iXtreme v1.60-12x-
0000: 05 80 00 32 5B 00 00 00 - 50 4C 44 53 20 20 20 20 ...2[...PLDS
0010: 44 47 2D 31 36 44 32 53 - 20 20 20 20 20 20 20 20 DG-16D2S
0020: 37 34 38 35 30 43 41 30 - 41 31 44 36 30 38 43 47 74850CA0A1D608CG
0030: 38 34 37 38 30 32 30 30 - 33 50 30 20 20 20 00 00 847802003P0 ..
0040: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0050: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000: C0 85 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0010: 00 00 00 00 44 36 30 38 - 43 47 38 34 37 38 30 32 ....D608CG847802
0020: 30 30 33 50 30 20 20 20 - 00 00 00 00 00 00 34 37 003P0 ......47
0030: 35 38 43 30 20 20 4C 50 - 53 44 20 20 20 20 47 44 58C0 LPSD GD
0040: 31 2D 44 36 53 32 20 20 - 20 20 20 20 20 20 20 20 1-D6S2
0050: 20 20 20 20 20 20 20 20 - 20 20 20 20 20 20 00 00 ..
0060: 00 00 00 0B 00 00 00 04 - 00 02 06 00 00 00 00 00 ................
0070: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0080: 03 00 78 00 78 00 E3 00 - 78 00 00 00 00 00 00 00 ..x.x...x.......
0090: 00 00 00 00 00 00 00 00 - 02 02 00 00 68 00 00 00 ............h...
00A0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00B0: 20 20 00 00 ..
0000: 44 36 30 38 43 47 38 34 - 37 38 30 32 30 30 33 50 D608CG847802003P
0010: 30 20 20 20 FF FF FF FF - 38 4A 32 36 31 31 38 36 0 ....8J261186
0020: 31 37 42 30 31 34 58 58 - 41 30 FF FF 53 34 50 38 17B014XXA0..S4P8
0030: 42 31 33 30 30 30 30 30 - 31 34 34 30 31 34 00 00 B1300000144014..
0040: FF FF FF FF FF FF FF FF - FF FF FF FF 41 31 FF FF ............A1..
Dummy.bin file saved to C:\Users\Ben\Desktop\Temp FW\Dummy.bin
Loading DVDkey source file
Loading firmware from buffer
Inquiry string found
Identify string found
Drive key @ 0xA030 A7C2DECBE0034C5E4A402A57B2BF0044
Firmware Osig: [PLDS DG-16D2S 7485]
Firmware is: iXtreme v1.60-12x-
Key added to database
Key database updated
Loading firmware file C:\Users\Ben\Desktop\Temp FW\LT74.bin
MD5 hash: 80adba8a844523a53463ce007c263ad3
Drive key @ n/a FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Firmware Osig: [PLDS DG-16D2S 7485]
Firmware is: Stock
Spoofing Target
DVD Key copied to target
Inquiry string copied to Target
Identify string copied to Target
Serial data copied from Source to Target
Sending Lite-On-Erase request to port 0xAF00
..............
Drive returned Status 0xD0
....................
Device Intro failed!
Sending Vendor Intro to port 0xAF00
Serial flash found with Status 0x72
Sending Device ID request to port 0xAF00
Manufacturer ID: 0xFF
Device ID: 0xFF
Flash Name: Unknown type
Flash Size: n/a
Sending Vendor Intro to port 0xAF00
Serial flash found with Status 0x72
Sending Device ID request to port 0xAF00
Manufacturer ID: 0xFF
Device ID: 0xFF
Flash Name: Unknown type
Flash Size: n/a
Sending Vendor Intro to port 0xAF00
Status 0xF2
Re-sending Vendor Intro:
......
Serial flash found with Status 0x72
Sending Device ID request to port 0xAF00
Manufacturer ID: 0xC2
Device ID: 0x11
Flash Name: MXIC(MX25L2005)
Flash Size: 262144 bytes
Getting Status from port 0xAF00
SPi flash found with Status 0x72
Sending Chip Erase to Port 0xAF00
Writing target buffer to flash
Writing Bank 0: ................
Writing Bank 1: ................
Writing Bank 2: ................
Writing Bank 3: ................
Flash Verification Test !
Reading Bank 0: ................
Reading Bank 1: ................
Reading Bank 2: ................
Reading Bank 3: ................
Write verified OK !
Sending Vendor Outro to port 0xAF00
|
|
|
|
|
Logged
|
|
|
|
|
