Awesome No cut,No soldering,No damage

[nware]

Hello,
is this works for all lite-on? I have 74850c with LT+ 1.1 and I do all steps but i've got always fail.
I mean in the way without cap in PMT
When I Click Path key then ok, drive have status 0x51, next I turn of 3,3V from pin6 and connect GND probe to MPX01, then turn on 3,3V, drive status change to 0x52 but PC freeze for a moment about 30sec then work fine and freeze again, after next 30sec I have got information Extraction Complete, I disconnect probe from MPX01, turn off power for 5sec turn on, and when I click OK JF says that the verification is unsuccessful i.e. fail verification.
I did a lot of tests with different configure of power but always gets fail.

[jelle2503]

1. Power on drive, switch on.
2. Press PhatKey, then Yes
3. Put switch off, connect GND to MPX01, Put switch on.
4. After "Extract Complete" power off the drive, disconnect GND from MPX01. you can release the probe before powering off as well, just sayin
5. Power on the drive, then press OK.
6. Done!

had the opportunity to test on LT flashed Liteon and this works fine thx

[ZerOneX]

Just tested with Lizard and believe me, DIY Superfly is better and easier than Scorpion 2!!

[ttz]

I want to add that yesterday night I tested for the 1st time this "PMT method"

But I had no switch (thought I had it), shops were closed, so...powered on my ck3 pro, used phatkey command, disconnected the 3,3v wire on liteon pcb side, probed with the "mraprobe18ohm" (coming from gnd on ck3), replugged the 3,3v wire and voilà! extract complete.

so nothing extraordinary, I know, but you can do it without a capacitor, and without a switch!
just be careful

[Gazcoigne]

NICE!!

pic of my setup





got the cap from a dead 360 mobo, they are found around the GPU/CPU. 820uF and 4.0V rating.

first test got status 0x51, then 0x52 after applying probe.

removed probe and got complete message, power cycled the ck3, then to my horror got this message:

"Re-sending Vendor Intro:
.....
Serial flash found with Status 0x52

Extracted drive key failed Verification !


PhatKey extraction failed!"

drive kept spitting same error over and over again no matter how many times i tried.

hit IRC and got guidance from Oggy about adding a switch to the 3.3v line.

soldered a switch into the 3.3V line (brown colour number 6 in pic below) following this guide:



now if i do this, paying attention to the 3.3V switch:

1. CK3 Main Power ON, 3.3v Switch ON
2. Press PhatKey, then Yes
3. 3.3v Switch OFF, connect GND wire to MPX01, 3.3v Switch ON
4. After "Extract Complete" disconnect GND from MPX01, CK3 main Power OFF. Wait 5 seconds.
5. CK3 Main Power ON, press OK.
6. Done!

success!!

cheers to Oggy, spudnutz, BoNg420, & TX

[Gazcoigne]

Hello,
is this works for all lite-on? I have 74850c with LT+ 1.1 and I do all steps but i've got always fail.
I mean in the way without cap in PMT
When I Click Path key then ok, drive have status 0x51, next I turn of 3,3V from pin6 and connect GND probe to MPX01, then turn on 3,3V, drive status change to 0x52 but PC freeze for a moment about 30sec then work fine and freeze again, after next 30sec I have got information Extraction Complete, I disconnect probe from MPX01, turn off power for 5sec turn on, and when I click OK JF says that the verification is unsuccessful i.e. fail verification.
I did a lot of tests with different configure of power but always gets fail.

If i use my VIA 6421 i get a system freeze also if thats any help i used my onboard chipset and it worked fine after i added the switch

[ZerOneX]

Strange Gaz!!! I´m using windows Xp x86 + C3K rev d + VIA VT6421 with drivers removed + Probe with switch

Working like a charm here!!

[modguru]

everything gone be ok exept the last step i use a 870uf /10v from the mobo .
the drive gives me 0x52 status i remove the probe waiting for the message
and after the last message i power off the drive wait for 3, 5 , 6 , 10 , sec ,
 i have test in several times just to be sure that it is not mater of timing
and always take the message phatkey failed any opinions

i do not use any difrent swich to power off i power off from the connectivity is this wrong ?

ok problem solved need a secondary swich just to cut on and off only the 3.3 v
not the 5 v and 12 v thanks ...

[Gazcoigne]

ok problem solved need a secondary swich just to cut on and off only the 3.3 v
not the 5 v and 12 v thanks ...

bingo thats what worked for me, powering cycling the CK3 twice still gets status 0x52, but failed dump.

the first power cycle just before the probe is placed is done to the switch on the 3.3V line, not power cycling the CK3

then the final power cycle and 5 sec pause is done on the CK3

[ZerOneX]

Another diff here Gaz!! I´m using the switch for the second power cycle also, and it works fine for me. Did you tried the switch on the second power cycle?

In any case I made a quick video (average quality) so you can check that!!

http://www.youtube.com/watch?v=8Gc41B4ZtQY

The video is in portuguese but you can see I using the switch twice.

Cheers dude.

[xstationbr2]

It's working fine thank you 

[Gazcoigne]

Another diff here Gaz!! I´m using the switch for the second power cycle also, and it works fine for me. Did you tried the switch on the second power cycle?

In any case I made a quick video (average quality) so you can check that!!

http://www.youtube.com/watch?v=8Gc41B4ZtQY

The video is in portuguese but you can see I using the switch twice.

Cheers dude.

will try it next drive i do and report back

think its just the 1st power cycle that matters TBH

[Dream]

Easy Probe 3

I hope some of you get it now.

[RAMBO]

Hi,

after about 5 attempts I finally got the key out, but when I click to write a modded firmware I get message with error. Whats the trick to getting the drive to let me reflash it?

[Gazcoigne]

Hi,

after about 5 attempts I finally got the key out, but when I click to write a modded firmware I get message with error. Whats the trick to getting the drive to let me reflash it?

need to do an l-o-erase on the drive, then an erase followed by a flash

not normally required, but will solve your issue.

MAKE SURE THE KEY IS CORRECT BEFORE YOU DO!!

[RAMBO]

Hi,

Ok, my pc froze during the erase and now I can't access the dvd drive, each time I try to it just freezes up my pc. How can I access the drive to finish the erase and flash?

[Gazcoigne]

Hi,

Ok, my pc froze during the erase and now I can't access the dvd drive, each time I try to it just freezes up my pc. How can I access the drive to finish the erase and flash?

create a bootable usb pen and put 16bit versions dosflash, l-o-eras.exe onto it as well as your hacked fw

boot into dos

run dosflash to find port address of drive write it down

then exit out, and run l-o-erase.exe on the port attached to the drive. this will get you the correct status to flash the chip 0x72.

power cycle the drive

dosflash will show the device with a 0kb free space, then use the l-o-erase command within dosflash to erase the chip

then finally run dosflash again and you will see the flash has 256kb free space and you will then be able to write the cfw.

[RAMBO]

sorry guys, i was making a big mistake of using the via driver i installed in windows. I read the directions for jungleflasher and was able to delete the driver. I was then able to erase and flash my dvd. Thanks for the help guys!.

[HOMiE7]

ATM PMT/KMA hack wouldn't work for 02510C firmware. Maybe someone knew why?

I mean it's because current JF can't work with 02510C firmware or it's because this feature was removed from 02510C firmware?