XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 23, 2013, 05:11:05 AM


Login with username, password and session length


Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 »
  Print  
Author Topic: MT1335 MX/WB unlocking  (Read 75020 times)
xbox4g
Newbie
*
Posts: 3


View Profile
« Reply #400 on: August 15, 2011, 02:30:48 PM »

after HW unlock my 0225 success and record the new LTplus 225 1.91 FW the tray open normal, but not spin the disk (motor) I wrote the original FW back but the same behavior.... any one now whate F***ck happen???
Logged
alanyoung
Newbie
*
Posts: 7


View Profile
« Reply #401 on: August 15, 2011, 02:51:25 PM »

Your chip has been broken ~
Logged
haris2887
Member
**
Posts: 14


View Profile
« Reply #402 on: August 16, 2011, 03:32:12 AM »

check this out...
http://www.youtube.com/watch?v=Tn8W2Sl7vtI

Using a CNC to drill in under 5 Secs...
Pretty amazing stuff...
Logged
ferid
Member
**
Posts: 10


View Profile
« Reply #403 on: August 17, 2011, 01:33:26 AM »

Did a 0401 yesterday and after marking the lines I noticed it was not the same location as the rest. It was a little to the left. Like others have said before, be sure you always use the lines.
The other thing is I had the feeling I didn't had to drill that deep as others. Can anyone confirm that the depth of the line is not always the same?
Logged
cypher21
Member
**
Posts: 41


View Profile
« Reply #404 on: August 17, 2011, 02:35:36 AM »

Did a 0401 yesterday and after marking the lines I noticed it was not the same location as the rest. It was a little to the left. Like others have said before, be sure you always use the lines.
The other thing is I had the feeling I didn't had to drill that deep as others. Can anyone confirm that the depth of the line is not always the same?
It differs per chip is my experience. Some are deeper then the other and some are a bit to the left/right
Even 0225's differ from eachother, so be very carefull as always
Logged
bluemimmos
Hacker
***
Posts: 70

Its me, me, me and only me...... :D


View Profile
« Reply #405 on: August 17, 2011, 04:44:31 AM »

Did a 0401 yesterday and after marking the lines I noticed it was not the same location as the rest. It was a little to the left. Like others have said before, be sure you always use the lines.
The other thing is I had the feeling I didn't had to drill that deep as others. Can anyone confirm that the depth of the line is not always the same?
yeah! really, i was amazed to see my 0225 unlocked in just few touchs of the drill, it was near the surface, so the wires depth differs from chip to chip so always be careful. Cheesy
Logged
miragui
Master Hacker
****
Posts: 125


View Profile
« Reply #406 on: August 17, 2011, 07:41:53 AM »

I've noticed the different depth of the wires also. I still think the unlock wire is well above the others. Just go slow with the drilling and I should be almost impossible to hit other wires.
Logged
greddost
Newbie
*
Posts: 2


View Profile
« Reply #407 on: August 17, 2011, 07:44:30 PM »

with lots of courage, i tried to do one 0225 but i t eventually died, no spinning of disk and no eject, but bought another 0225 main pcb and this time did, with another engraving bit and digged slowley and eventually i sucessed with sucess. Cheesy
so my points:
1) be very patience.
2) measure and mark very correctly, that is the key to sucess.
3) Clean it and see time by time.


Where did you get spare pcb's?
I need 3 new pcbs
Don't care if they are locked or not.
Prob. be best if they where untouched.

if anyone know where to get spare pcbs at a decent price please send a PM or reply here  Smiley
Logged
gavingt
Hacker
***
Posts: 95


View Profile
« Reply #408 on: August 17, 2011, 08:02:03 PM »

The best tip I can give is to poke around with a needle after every little bit of drilling you do. I drilled way too deep, expecting the program to sound an alert when I'd gone deep enough. As it turned out, though, I had already drilled through the trace, and I simply needed to touch it with a needle to send the unlock command.

The trace can be anywhere between .3 and .7 mm deep. Go look at a ruler and see how f***ing small a millimeter is.
Logged
bluemimmos
Hacker
***
Posts: 70

Its me, me, me and only me...... :D


View Profile
« Reply #409 on: August 18, 2011, 02:13:16 AM »

with lots of courage, i tried to do one 0225 but i t eventually died, no spinning of disk and no eject, but bought another 0225 main pcb and this time did, with another engraving bit and digged slowley and eventually i sucessed with sucess. Cheesy
so my points:
1) be very patience.
2) measure and mark very correctly, that is the key to sucess.
3) Clean it and see time by time.


Where did you get spare pcb's?
I need 3 new pcbs
Don't care if they are locked or not.
Prob. be best if they where untouched.

if anyone know where to get spare pcbs at a decent price please send a PM or reply here  Smiley

actually, my one friend did replaced the 0225 drives with 9504 prevoiusly and he had that drive in stock and he gave me for hacking his another 0401 xbox360 drive.
Cheesy
i was kinda lucky to get it.
Logged
jackinthexbox
Master Hacker
****
Posts: 181


Xbox.ee


View Profile WWW
« Reply #410 on: August 18, 2011, 11:43:58 AM »

So as i understand 3v and resistor is not needed at all?
Why was it sayed we need then anyway? Geremia i would like your take on this.
Logged
miskan
Member
**
Posts: 27


View Profile
« Reply #411 on: August 18, 2011, 04:00:31 PM »

Very silly mistake today. Drilled one 0225, got status 0x00. Only then I noticed it's MXIC and not Winbond! (MFR date 2010-09)

Drive still ejected/closed fine, but read didn't work anymore (didn't test drive if it still read originals). I tried erase and write and it wrote OK, all four lines. But verify of course didn't work since it can't read it.

Now after write, drive doesn't give any life signs at all. No eject/close or laser movement on power-on. Is it time to get a new Mediatek chip or is this situation maybe salvageable?

EDIT: i can still get drive to 0x72, reading always stops after about 10 seconds with "unknown flash" - no dots, but can still erase and write fine.
« Last Edit: August 18, 2011, 04:04:04 PM by miskan » Logged
gavingt
Hacker
***
Posts: 95


View Profile
« Reply #412 on: August 18, 2011, 06:36:56 PM »

Very silly mistake today. Drilled one 0225, got status 0x00. Only then I noticed it's MXIC and not Winbond! (MFR date 2010-09)

Drive still ejected/closed fine, but read didn't work anymore (didn't test drive if it still read originals). I tried erase and write and it wrote OK, all four lines. But verify of course didn't work since it can't read it.

Now after write, drive doesn't give any life signs at all. No eject/close or laser movement on power-on. Is it time to get a new Mediatek chip or is this situation maybe salvageable?

EDIT: i can still get drive to 0x72, reading always stops after about 10 seconds with "unknown flash" - no dots, but can still erase and write fine.


Are you using Via 6421? It won't read slim drives any more without modifications. XUSB works fine, though.

It sounds like just a bad firmware flash. BTW, I believe the drilling method does work for MXIC, it's just much riskier than the Spartan method.

Also, take off the drive housing and see if the center motor spins.
« Last Edit: August 18, 2011, 06:39:33 PM by gavingt » Logged
fcani
Newbie
*
Posts: 1


View Profile
« Reply #413 on: August 18, 2011, 08:42:35 PM »


Perfect job !!!
Owned TeamXMafia !!!! Tongue

Thanks Geremia !!! Grin




Logged
halito2009
Member
**
Posts: 22


View Profile
« Reply #414 on: August 19, 2011, 12:13:02 AM »

 este metodo tambien funciona en 1071





quien necesite los archivos http://www.megaupload.com/?d=U4TYVBRI
Logged
johnsmith
Hacker
***
Posts: 59


View Profile
« Reply #415 on: August 19, 2011, 01:08:05 AM »

halito2009: Could you please dump the whole OFW 1071? It isn't present in the file you uploaded, only the dummy is there. - THANK YOU! Smiley
Logged
cypher21
Member
**
Posts: 41


View Profile
« Reply #416 on: August 19, 2011, 02:17:31 AM »

And if you have the complete OFW,

Send it to OFW4TJ@gmail.com  (the bin file, not links please!)

Thanks for the help!!
« Last Edit: August 19, 2011, 02:19:04 AM by cypher21 » Logged
miskan
Member
**
Posts: 27


View Profile
« Reply #417 on: August 19, 2011, 03:10:44 AM »

Are you using Via 6421? It won't read slim drives any more without modifications. XUSB works fine, though.

It sounds like just a bad firmware flash. BTW, I believe the drilling method does work for MXIC, it's just much riskier than the Spartan method.

Also, take off the drive housing and see if the center motor spins.

I'm using XUSB. I've done about 10 drives now without problem. Write seems OK, just read always fails. No movement from motor, laser or eject since that write.

READ:

Getting Status from port 0x0000
Serial flash found with Status 0x72
Reading Drive Key.
............ (stops for 10 secs)
Stage 1 failed

Authorisation Failed!

WRITE:

Getting Status from port 0x0000
SPi flash found with Status 0x72

Sending Chip Erase to Port 0x0000
Erasing:
Writing target buffer to flash
Writing Bank 0: ................
Writing Bank 1: ................
Writing Bank 2: ................
Writing Bank 3: ................
............
Flash Verification Test !
Reading Bank 0: Dump Failed
« Last Edit: August 19, 2011, 04:06:32 AM by miskan » Logged
cypher21
Member
**
Posts: 41


View Profile
« Reply #418 on: August 19, 2011, 03:43:04 AM »

Are you using Via 6421? It won't read slim drives any more without modifications. XUSB works fine, though.

It sounds like just a bad firmware flash. BTW, I believe the drilling method does work for MXIC, it's just much riskier than the Spartan method.

Also, take off the drive housing and see if the center motor spins.

I'm using XUSB. I've done about 10 drives now without problem. Write seems OK, just read always fails. No movement from motor, laser or eject since that write.

Had the same thing on a winbond, it's fubar
Don't spend more time on it, just replace the pcb or chip
Logged
bluemimmos
Hacker
***
Posts: 70

Its me, me, me and only me...... :D


View Profile
« Reply #419 on: August 19, 2011, 06:03:55 AM »

Are you using Via 6421? It won't read slim drives any more without modifications. XUSB works fine, though.

It sounds like just a bad firmware flash. BTW, I believe the drilling method does work for MXIC, it's just much riskier than the Spartan method.

Also, take off the drive housing and see if the center motor spins.

I'm using XUSB. I've done about 10 drives now without problem. Write seems OK, just read always fails. No movement from motor, laser or eject since that write.

READ:

Getting Status from port 0x0000
Serial flash found with Status 0x72
Reading Drive Key.
............ (stops for 10 secs)
Stage 1 failed

Authorisation Failed!

WRITE:

Getting Status from port 0x0000
SPi flash found with Status 0x72

Sending Chip Erase to Port 0x0000
Erasing:
Writing target buffer to flash
Writing Bank 0: ................
Writing Bank 1: ................
Writing Bank 2: ................
Writing Bank 3: ................
............
Flash Verification Test !
Reading Bank 0: Dump Failed

ok,
now erase your drive and make it blank.
disconnect everything including usb pro, power supply for dvd drive
and after some time, conect all and write your firmware by doing intro/dev id to enter vendor mode.
note you will go immediately on vendor mode when your drive is blank, no need to mpower cycle.
i think this may help you.
this is how i do when i am stuck on same positions as yours but with vt6421.
Logged
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM