MT1335 MX/WB unlocking

[seb_62500]

Flash with this method is good..

But my dvd drive can t open with xbox 360 , with ck3 it s ok to open..

Then dvd drive don t read anything ...

Maybe a solution ?

[miskan]

please reboot and run dosflash32 1.9 , after do it run unlockspi , try this methode and post the result please

I tried this method it on my HP i7 machine and it worked! Ran dosflash64 1.9, it gives Winbond properties, then I can run UnlockSPI. Thanks!
It works only once per boot thou. If you make a mistake, you need to reboot.

I guess I can use JF to write to 0225 when I unlock SPI on this thingy?

[rrkk123]

I used onboard sata for unlockSPI.exe needed to probe mpx01
Then jungleflasher 1.85 and x360usb to flash the drive worked great
Thank you so much Geremia.

I didn't even map out the coordinates on the chip
Didn't even remove epoxy just dremeled same spot as the picture
Worked with no problems.

[jackinthexbox]

you did not mark the spot?
Lucky bastard. The printed text is not allways on the same location.
Thats what i meen that noob should stay clear of this mod!

[engine620]

go buy a cheap ass sata to usb adapter -- a non powered one.

you then boot the drive connected to the usb to sata adapter, open the tray close, then connect the sata cable to your comp as its looking for the drive. Voila

tryed - i can't find the port of the driver. i've alredy have an usb to sata converter (not powered) that work perfectly with hdd, but with xbox it doesn't working. dosflash and jungleflasher don't even recognise the sata port.

[rrkk123]

Had an unlock chip didn't really care if it messed up

[DARKFiB3R]

Had an unlock chip didn't really care if it messed up

Still a lucky bastard lol.

[Screamo]

Great work, but problem running this program, win xp:

unlockSPI.exe XXXX
WinIO initialized and running

ATA Timeout, status 51
Waiting for a drive repower
ATA Timeout, status 51
Waiting for a drive repower
ATA Timeout, status 51
Waiting for a drive repower
ATA Timeout, status 51
Waiting for a drive repower
(repeats)

Same if I repower the drive. Tried with VIA 6421, ICH7 and x360usb pro.

Use a PMT on MPX01 with Jungleflasher -> Vendor Modus on VIA/nforce/ICH7 -Y Close Jungleflasher and run unlockSPI.exe

[jengen31]

WinIo Error in writing to port

whats worng here

who can help my out here thx

[xbox360sexual]

First of all, you did not answer any of my questions. no disrespect to geremia for his work as it actually works but it YOU think that feeding 3.3V trough a resistor to ground could kill other components on the board, what do you think happens before the bond-wire gets cut? does the voltage hits the ground? yes it does. and after the drilling and cutting you are told to use a electric lighter to get the unlock-status, how many volts do you need o get a spark like that and how do you know it only hits the wp-bond-wire? you could compare it to a electro static discharge.  if  you dont have the answer to the question, why do you answer?

Nope, I never said it would kill other components, I said that lifting the pin and forcing 3.3v wouldn't work as that pin is shared with other components, so you'd be raising expected ground potential to 3.3v. winbond has vcc protection so it wouldn't work, I didn't say it would destroy components. I believe I've answered your question

also where WP line is cut, it is floating and susceptible to voltage spikes ala ignitor spark.. other lines on that pin are grounded so there would be no change in potential

[jackinthexbox]

Im very scared to send an ignition spark to the chip. Am i the only one?
"Drilling the hole was the easy part... now comes the scary spark"

[glaze83]

found an alternative to the bbq lighter by accident. Put isopropyl on a cue tip and clean up the area -- voila unlocked.

[_javi_]

i guess that instead of the spark, we can just touch (no grind) the hole with the dremel+3V to unlock again. (but why lock after unlocking?)

my count goes: 2 ok, 1 ruined (dont trust in printed text for alignement).

thanks again, Geremia. very well done!!

[rrkk123]

jengen31
Newbie

Posts: 2


 
   
Re: MT1335 MX/WB unlocking
« Reply #108 on: Today at 03:17:35 PM »
Quote
WinIo Error in writing to port

whats worng here

who can help my out here thx
 Logged

Had same problem wrote orig firmware first
After no problem writing cfw

[morenomdz]

found an alternative to the bbq lighter by accident. Put isopropyl on a cue tip and clean up the area -- voila unlocked.

Nice one gonna try it later tonight. The perfect and fair way to do it will be putting some vodka on a cue tip to thank our russian folks for starting it all!

[miskan]

Use a PMT on MPX01 with Jungleflasher -> Vendor Modus on VIA/nforce/ICH7 -Y Close Jungleflasher and run unlockSPI.exe

No go, 0225 drive always stays at 0x51 for me using this method...

[cyanarnofsky]

Slim drives have alot of issues with Nforce chipsets, 0225 the most. My 0401 wont work with my onboard Nforce,
thus my wait for JF update.

[tingedace]

First of all, you did not answer any of my questions. no disrespect to geremia for his work as it actually works but it YOU think that feeding 3.3V trough a resistor to ground could kill other components on the board, what do you think happens before the bond-wire gets cut? does the voltage hits the ground? yes it does. and after the drilling and cutting you are told to use a electric lighter to get the unlock-status, how many volts do you need o get a spark like that and how do you know it only hits the wp-bond-wire? you could compare it to a electro static discharge.  if  you dont have the answer to the question, why do you answer?

Nope, I never said it would kill other components, I said that lifting the pin and forcing 3.3v wouldn't work as that pin is shared with other components, so you'd be raising expected ground potential to 3.3v. winbond has vcc protection so it wouldn't work, I didn't say it would destroy components. I believe I've answered your question

also where WP line is cut, it is floating and susceptible to voltage spikes ala ignitor spark.. other lines on that pin are grounded so there would be no change in potential

It's maybe not a completely stupid question, although I know it won't work. If you look at the image below it may look like the WP bond wire just goes directly to the pin, in which case why indeed wouldn't it work? But if you look closely you can just see there is another bond wire coming off the same pin, which is why, i'm assuming, you have to cut further in after that other wire has branched off.



Although it's probably been tried, I like the idea of just touching the lifted pin with Vcc (or lower??) momentarily in case you hit the timing.

As for me, I think I'll sit back and watch more results come in before I reach for my dremel   

[Screamo]

Use a PMT on MPX01 with Jungleflasher -> Vendor Modus on VIA/nforce/ICH7 -Y Close Jungleflasher and run unlockSPI.exe

No go, 0225 drive always stays at 0x51 for me using this method...

1. Run JF
2. Power on -> LW
3. Press Intro Device ID
4. Put the PMT on MPX01
5. MTK Vendor -> Yes
6. Power off -> on
7. done!! Vendor Mode

[cyanarnofsky]

Use a PMT on MPX01 with Jungleflasher -> Vendor Modus on VIA/nforce/ICH7 -Y Close Jungleflasher and run unlockSPI.exe

No go, 0225 drive always stays at 0x51 for me using this method...

1. Run JF
2. Power on -> LW
3. Press Intro Device ID
4. Put the PMT on MPX01
5. MTK Vendor -> Yes
6. Power off -> on
7. done!! Vendor Mode

LW?