EurAsiaWiki - Lite On Dvd Key Spoof

SoulHeaven @ http://www.xboxhacker.net/index.php?topic=10204.msg66292#msg66292

Hi to everyone,

The purpose of this tutorial is to summarize all equipment and handling necessary for the extraction of clée and the line identification lite-on.

With that, you will be able to replace this dvd drive not yet flashable so far by a hitachi / samsung / benq that can be flashed.

Here we go :

I. Summary of hardware and software needed.

To do this you will need: The software dvdKey by Geremia: download it here
A cable RS232 based on a chip MAX3232 for a conversion TTL: Buy here
A hex editor: http://mh-nexus.de/downloads/HxDen.zip
A DOS boot floppy or USB DOS Bootable Key.
Optional: A connectivity kit v2, 360ToPC and CK1 also works, but I will not discuss their modification.
My software 360 Drive Switcher v1.3.848.0 download here

II. Preparation of materials.

A. Preparation player

Dvdkey The software allows the extraction of dvd Key and the line of identification. And this is possible on the benqs as on lite-on. With the uniqe difference for lite-on this requires a little modification on the drive.

If you have a benq dvd drive go to step B

Open your dvd drive lite-on, and watch the PCB thereof at the power connector. There are two small tracks to be rebuilt so that the link Tx, Rx of the power plug is connected to the chipset itself. (No need to touch the epoxy).

So two small points of welding indicated by the arrow "Reconnect both solder points." Do not pay attention to other indications.

You can close your dvd drive. Needless to discard these items at the end of the tutorial, the dvd drive can stay like that.

B1. Preparation of connectivity Kit v2 (Optional)

This step is optional, but recommended because you can not even touch the welds on the lite-on. And it helps to use the connectivity kit several times for the same manipulation. If you do not, go to step B2.

Here, we must connect the outputs of the RS232 cable to the connectivity kit. There is 4 cables to be welded.

Your cable RS232 must respect the following pattern:

More specifically, it looks like this:

We will therefore connect points : Tx, Rx, Gnd, and V +

Connect points as follows:

Cable RS232 --------------> Connectivity Kit
Gnd ===================> 1
V + ====================> 10

You will notice that the basic connectivity kit doesn't propose connectors for points Tx and Rx. We must take them on the cable itself:

So I add two new cables to the connectors on how well I plug the output of cable RS232:

Cable RS232 --------------> Connectivity Kit
Tx ====================> 6
Rx ====================> 12

B2. Preparations for the dvd drive step 2 (Only if you do not have connectivity kit)

In case you don't have connectivity kit v2, you can solder the RS232 cable directly to the PCB.

Relying on these two photos:

Weld points like this:

Cable RS232 --------------> DVD
Tx ====================> TxD
Rx ====================> RxD
Gnd ===================> Gnd
V + ===================> 3.3v

C. Preparation connections

There is, now we will prepare the connections.

1. Turn off your PC.

2. Connect your lite-on to the connectivity Kit (Only power/ No RS232 cable plugged / No SATA cable Wired)

3. Turn on the PC, and turn on the connectivity Kit. Use the Eject button to open your dvd drive, once opened, use the button again to close the drive, but cut off the connectivity kit (or dvd power) just before the drawer is completely closed and turn off your PC.

4. Handly Close (Without forcing too) the drawer of your lite-on but only half.

/!\ Warning /!\ stages 3 and 4 are very important, because it requires that the dvd drive is open but with closed status. In other words, it must be physically half-open, but the last known status of the dvd drive must be closed. It must feel closed. Obey therefore step 3, not cutting off power when the drawer is in the process of being closed.

An alternative is also a dvd drive closed, use a paper clip to manually unlock the drive door to open it in half.

5. Plug the cable RS232 to the Port COM1 of your motherboard. Always the SATA cable unplugged.

Go to the next step

III. Dump the Key and the line identification.

At this stage there, you should have: -- The cable RS232 (linked to your connectivity kit) connected to the COM1 port of your PC
-- The dvd drive lite-on with his half-open drawer, and power connected to the connectivity kit.
-- The SATA cable unplugged.

1. Turn on your PC, and boot on DOS.

2. Once under DOS, the SATA connect your dvd drive lite-on on a SATA port on your motherboard, or card VIA 6421.

3. Turn the connectivity kit to power your dvd drive lite-on.

4. Sub dos Type "dvdkey xxxx" where xxxx must be the address of your port SATA. If you do not know, run dosflash in Auto mode to find (You refer to the tutorials on benq for this manip). Here in the example the port is the EFE0.

After 20 seconds, you should get this:

Keep well following generated files namely: Key.bin
Inquiry.bin
Identify.bin

These files will then be used to prepare a replacement player.

You can turn off and unplug. The dump of the key and the line of identification is completed.

IV. The spoof of another dvd drive (Manual method).

Now that we have all the info of the lite-on, we will see how to prepare a replacement dvd drive.

A. Hack firmware and injection of key

To begin with, Apply the ixtreme patch to your firmware (Warning it must be originate firmware). The method depends on the dvd drive brand, please refer to the corresponding tutorials.

Then open your firmware of your replacement dvd drive in fwtoolbox v4.6, and open in the hexadecimal editor the file Key.bin of your lite-on.

Report the same key shown in the Key.bin to fwtoolbox

Click "Replace the key" and close both windows.

B. Spoof firmware in lite-on

This step is the same whatever the firmware of replacement dvd drive is. Hitachi / Samsung / Benq

Open your firmware of your replacement dvd drive in the hex editor.

Open the file Inquery.bin of your lite-on.

You should get this:

Keep the tab firmware of replacement drive replacement active, then select the search option (Find) in the Search menu, then select Hex Values from the drop list. Next, enter the following value: 000005800032

The research should lead you to the place where firmware stores identification line . In Inquery.bin tab, select the data set (6 lines), and do a CTRL + C.

Move now on the tab of your firmware of replacement drive at level "05 80", and select the menu option "Write Paste".

In the end you should get this:

We'll have to save your firmware and flashing your drive replacement with it, as usual. Please refer to the corresponding tutorials.

V. The spoof of another dvd drive (Method auto).

With the latest update of my program, everything goes as simply the world.

Run the software, then click on "Browse" to select the firmware source, and select the file INQUERY.BIN previously dumpedfrom your lite-on:

If the file KEY.BIN is placed in the same folder as the file INQUERY.BIN you just selected, it takes care alone, else the application invites you to select it.

Then select the firmware destination. Here it is a Benq firmware, you should get this:

We'll have to click Generate the firmware. Choose the destination location of your new firmware and validate.

We'll have to flash your new drive with the firmware.

Thanks: Geremia, C4eva, Tiros, Schtrom, TMF, Redline99. XboxHacker.net for the initial info.