|
miskan
|
 |
« Reply #140 on: August 04, 2011, 02:39:55 AM » |
|
Use a PMT on MPX01 with Jungleflasher -> Vendor Modus on VIA/nforce/ICH7 -Y Close Jungleflasher and run unlockSPI.exe
No go, 0225 drive always stays at 0x51 for me using this method... 1. Run JF 2. Power on -> LW 3. Press Intro Device ID 4. Put the PMT on MPX01 5. MTK Vendor -> Yes 6. Power off -> on 7. done!! Vendor Mode doesn't work for me on via 6421. BTW, where is exactly MPX01 on slim drive? i've two point, one on top and other on the bottom of the write. i'll try later with ich7 but i think the problem is that driver, with this chipset, can't going in vendor mode. please suggest a chipset that might work. thanks in advance. Didn't work for me yesterday, tried this exact method maybe 20 times. Today it worked on VIA 6421! The trick for me was, I had to power the drive off for about 10 seconds, apply MPX01, then power on. MPX01 point is marked on the top of the board, close to the SATA connector solder points. |
|
|
|
|
Logged
|
|
|
|
|
gavingt
|
|
« Reply #141 on: August 04, 2011, 02:44:31 AM » |
|
MPX01 is circled in white on the board. And you should never have drivers installed for the Via 6421. It worked for me on my Via 6421 card, so it definitely works.
|
|
|
|
|
Logged
|
|
|
|
|
tingedace
|
|
« Reply #142 on: August 04, 2011, 03:34:37 AM » |
|
That don't work because the ground pin connect internally to other ground pin.
I understand that but this mod is taking a drill bit and cutting down into that trace/wire which bridges off to two pins. The drill/cutting head is going to make contact with both sides of the trace/wire when cut and send voltage down both legs and to the other side which goes the actual chip. Or is the mothod to drill and cut the trace/wire internally then only supply voltage to one side? i have a easier way to do this mod rather than drilling a hole in the chip! i will update when i have tried it on a few other drives  I look forward to seeing details of that! |
|
|
|
|
Logged
|
|
|
|
bluemimmos
Hacker
Posts: 70
Its me, me, me and only me...... :D
|
|
« Reply #143 on: August 04, 2011, 03:55:33 AM » |
|
i have a easier way to do this mod rather than drilling a hole in the chip! i will update when i have tried it on a few other drives i am also waiting patiently as tingedace is. well hope phonsey will reveal it soon. |
|
|
|
|
Logged
|
|
|
|
|
tingedace
|
|
« Reply #144 on: August 04, 2011, 03:56:24 AM » |
|
That don't work because the ground pin connect internally to other ground pin.
I understand that but this mod is taking a drill bit and cutting down into that trace/wire which bridges off to two pins. The drill/cutting head is going to make contact with both sides of the trace/wire when cut and send voltage down both legs and to the other side which goes the actual chip. Or is the mothod to drill and cut the trace/wire internally then only supply voltage to one side? The process stops not when the wire is cut, but when the flash is unlocked i.e. when status comes back 0x00. I can only assume that the drill bit can touch either or both sides during the procedure but since the unlock commands are being sent continuously, it will at some point catch it when the drill is only touching the WP wire. The danger I see here is that even after the wire is cut and while the drill happens to be touching both sides the drive will not unlock, so you think you haven't drilled far enough (although you have) and you keep going too far. |
|
|
|
|
Logged
|
|
|
|
bluemimmos
Hacker
Posts: 70
Its me, me, me and only me...... :D
|
|
« Reply #145 on: August 04, 2011, 03:59:48 AM » |
|
That don't work because the ground pin connect internally to other ground pin.
I understand that but this mod is taking a drill bit and cutting down into that trace/wire which bridges off to two pins. The drill/cutting head is going to make contact with both sides of the trace/wire when cut and send voltage down both legs and to the other side which goes the actual chip. Or is the mothod to drill and cut the trace/wire internally then only supply voltage to one side? The process stops not when the wire is cut, but when the flash is unlocked i.e. when status comes back 0x00. I can only assume that the drill bit can touch either or both sides during the procedure but since the unlock commands are being sent continuously, it will at some point catch it when the drill is only touching the WP wire. The danger I see here is that even after the wire is cut and while the drill happens to be touching both sides the drive will not unlock, so you think you haven't drilled far enough (although you have) and you keep going too far. totally agree with tingedace; that is why i think you need to be very cautious.  Well do it at your own risk. |
|
|
|
|
Logged
|
|
|
|
|
tingedace
|
|
« Reply #146 on: August 04, 2011, 04:00:15 AM » |
|
i have a easier way to do this mod rather than drilling a hole in the chip! i will update when i have tried it on a few other drives i am also waiting patiently as tingedace is. well hope phonsey will reveal it soon. And in fact, phonsey, if you want me to try your method I'll give it a go. I have 2 spare winbonds sitting here waiting for a method such as yours i.e. one that doesn't involve drilling! |
|
|
|
|
Logged
|
|
|
|
bluemimmos
Hacker
Posts: 70
Its me, me, me and only me...... :D
|
|
« Reply #147 on: August 04, 2011, 04:04:53 AM » |
|
i have a easier way to do this mod rather than drilling a hole in the chip! i will update when i have tried it on a few other drives i am also waiting patiently as tingedace is. well hope phonsey will reveal it soon. And in fact, phonsey, if you want me to try your method I'll give it a go. I have 2 spare winbonds sitting here waiting for a method such as yours i.e. one that doesn't involve drilling! me too, i am also going to give a try, i have 5 of em' waiting patiently |
|
|
|
|
Logged
|
|
|
|
|
xbox360sexual
|
|
« Reply #148 on: August 04, 2011, 06:31:53 AM » |
|
That still wouldnt make much sense though because the drilling isnt gonna give you a clean cut voltage only this way hit. The bit is charged at 3.3v and when it hits and cuts the ground its still going to send voltage down the other wire/trace.
So why would it be any different that to just lift one of the two ground pins I can see and tap the 3.3v to that leg.
Best bet is to get someone who already has the TX replacement board and have them test this on the other factory board.
Because there is a split moment where you've cut the line and you're only making contact with the WP side, all it takes is a split moment at 3.3v with constant bombardment of software unlock commands and then the drive is unlocked. I don't know why this is hard to understand, and why so many of you are having trouble with it? You think if a simple pin lift and apply with 3.3v was possible, someone as knowledgeable as Geremia wouldn't have tested and dismissed it? As stated many many times, that pin is shared with other parts of the chip, applying 3.3v in any period wouldn't work as you'd be disabling other parts of the chip. The lighter / spark trick works because when cut, WP is floating so not at any potential and is susceptible to voltage spikes etc |
|
|
|
|
Logged
|
|
|
|
bluemimmos
Hacker
Posts: 70
Its me, me, me and only me...... :D
|
|
« Reply #149 on: August 04, 2011, 07:00:30 AM » |
|
That still wouldnt make much sense though because the drilling isnt gonna give you a clean cut voltage only this way hit. The bit is charged at 3.3v and when it hits and cuts the ground its still going to send voltage down the other wire/trace.
So why would it be any different that to just lift one of the two ground pins I can see and tap the 3.3v to that leg.
Best bet is to get someone who already has the TX replacement board and have them test this on the other factory board.
well said, my fren well said.. Because there is a split moment where you've cut the line and you're only making contact with the WP side, all it takes is a split moment at 3.3v with constant bombardment of software unlock commands and then the drive is unlocked. I don't know why this is hard to understand, and why so many of you are having trouble with it? You think if a simple pin lift and apply with 3.3v was possible, someone as knowledgeable as Geremia wouldn't have tested and dismissed it? As stated many many times, that pin is shared with other parts of the chip, applying 3.3v in any period wouldn't work as you'd be disabling other parts of the chip. The lighter / spark trick works because when cut, WP is floating so not at any potential and is susceptible to voltage spikes etc |
|
|
|
|
Logged
|
|
|
|
|
miskan
|
|
« Reply #150 on: August 04, 2011, 07:15:38 AM » |
|
WinIO initialized and running
Vendormode entered
SPI device ID = EF 30 12 Winbond
SPI status register = 8C
HW locked !!
SW locked !!
Do you want to continue unlocking? y/n y
SPI status register = 8C
Sound test...
Do what you have to do NOW!
ATA Timeout, status F2
Waiting for a drive repower
Are the bold lines benign, or shouldn't I drill when that happens? This happens a lot, immediately after "Do what you have to do NOW!".
|
|
|
|
|
Logged
|
|
|
|
|
engine620
|
|
« Reply #151 on: August 04, 2011, 07:23:56 AM » |
|
Use a PMT on MPX01 with Jungleflasher -> Vendor Modus on VIA/nforce/ICH7 -Y Close Jungleflasher and run unlockSPI.exe
No go, 0225 drive always stays at 0x51 for me using this method... 1. Run JF 2. Power on -> LW 3. Press Intro Device ID 4. Put the PMT on MPX01 5. MTK Vendor -> Yes 6. Power off -> on 7. done!! Vendor Mode doesn't work for me on via 6421. BTW, where is exactly MPX01 on slim drive? i've two point, one on top and other on the bottom of the write. i'll try later with ich7 but i think the problem is that driver, with this chipset, can't going in vendor mode. please suggest a chipset that might work. thanks in advance. Didn't work for me yesterday, tried this exact method maybe 20 times. Today it worked on VIA 6421! The trick for me was, I had to power the drive off for about 10 seconds, apply MPX01, then power on. MPX01 point is marked on the top of the board, close to the SATA connector solder points. IT WORKS!!!! confirm procedure, works on via 6421 with power off mwthod! god job man! |
|
|
|
|
Logged
|
|
|
|
|
miskan
|
|
« Reply #152 on: August 04, 2011, 08:11:51 AM » |
|
Drilled it down and it worked, Great! I suggest you go very light with drilling and stop every few seconds, check your direction.
Since I only have JF, is there a way to write to the drive with JF? I haven't managed so far. Most I managed to get to is (after PMT probe):
Sending Lite-On-Erase request to port 0xDF90
..............
Drive returned Status 0x72
Manufacturer ID: 0x0
Device ID: 0x0
Flash Name: Unknown type
Flash Size: n/a
Unknown flash type Write aborted !
|
|
|
|
|
Logged
|
|
|
|
rrkk123
Newbie
Posts: 5
|
|
« Reply #153 on: August 04, 2011, 12:09:57 PM » |
|
Intro again till u get the proper flash chip properties
|
|
|
|
|
Logged
|
|
|
|
|
DaMacFunkin
|
|
« Reply #154 on: August 04, 2011, 12:42:10 PM » |
|
Aint tried this yet because i aint got one to play with, but i must say just seen the vid on youtube and its piss funny, cant stop laughing my head off.  |
|
|
|
|
Logged
|
|
|
|
|
danthaman
|
|
« Reply #155 on: August 04, 2011, 12:44:22 PM » |
|
I'm pretty sure no-one has answered this question and apparently this problem occurred with tarablinda also,
When I do : UnlockSPI 3490
I get : WinIO error in writing to port 3493
IF I try port 3480, it gives same error but with 3483, it seems to add 3 to the port each time? I know there is a range there, I've tried various driver states/versiosn etc.. all work fine for JF.
HELP!!! please! This has got me stumped, and I don't have any other PC's I can use for flashing (Without drama, eg; 64bit win7 with SATA ports, non of which show in JF!
Oh yes, and BTW I am using 32 bit XP (VIA 6421) before you ask ..... I would try dos, but it wont boot from USB (Bloody IBM crap-ware BIOS!) and the floppy was removed ages ago to make room for everything else that's crammed-in there :p
Any help would be greatly appreciated.
|
|
|
|
|
Logged
|
|
|
|
unforgiven64
Newbie
Posts: 4
|
|
« Reply #156 on: August 04, 2011, 12:45:31 PM » |
|
well , here` the problem ,
first of all i hacked my 0225 slim with this new hack solution
everything was ok till i decide to write 0225 lt1.9 on drive with JF , i got "write verify failed" but it could play copy dvd .
so i locked my drive again , packed my whole xbox and after that!!!! when i turn it on again i got play DVD error with original or copy dvd ....
and even sometimes it gets stuck on booting up!
icant understand whats going on ... before packing up everything was fine but now ?!?!?
Any help appreciated....
|
|
|
|
|
Logged
|
|
|
|
|
engine620
|
|
« Reply #157 on: August 04, 2011, 12:51:37 PM » |
|
I'm pretty sure no-one has answered this question and apparently this problem occurred with tarablinda also,
When I do : UnlockSPI 3490
I get : WinIO error in writing to port 3493
IF I try port 3480, it gives same error but with 3483, it seems to add 3 to the port each time? I know there is a range there, I've tried various driver states/versiosn etc.. all work fine for JF.
HELP!!! please! This has got me stumped, and I don't have any other PC's I can use for flashing (Without drama, eg; 64bit win7 with SATA ports, non of which show in JF!
Oh yes, and BTW I am using 32 bit XP (VIA 6421) before you ask ..... I would try dos, but it wont boot from USB (Bloody IBM crap-ware BIOS!) and the floppy was removed ages ago to make room for everything else that's crammed-in there :p
Any help would be greatly appreciated.
first of all a clasic answer? did you install via's driver? if so, REMOVE IT!!! If you haven't instaled the driver, two suggestion: 1- try to change pci slot, maybe you have an issue on pci slot; 2- try to format your pc ( i know this is boring, but you have to try this solution too) hope that this can help you. please post feedback of everything. |
|
|
|
|
Logged
|
|
|
|
|
engine620
|
|
« Reply #158 on: August 04, 2011, 12:54:13 PM » |
|
well , here` the problem ,
first of all i hacked my 0225 slim with this new hack solution
everything was ok till i decide to write 0225 lt1.9 on drive with JF , i got "write verify failed" but it could play copy dvd .
so i locked my drive again , packed my whole xbox and after that!!!! when i turn it on again i got play DVD error with original or copy dvd ....
and even sometimes it gets stuck on booting up!
icant understand whats going on ... before packing up everything was fine but now ?!?!?
Any help appreciated....
well, if you get write verify failed, whyhave you packaged all? after that you have spi unlocked, it's just another try to write the firmware. so, what you have to do now is: 1- disassemble everything; 2- unlock the drive again (just put +5V in the hole with unlockspi launched); 3- rewrite firmware (until you get write verified SUCCESSFULLY) 4- package all post feedback of your work. |
|
|
|
|
Logged
|
|
|
|
|
miskan
|
|
« Reply #159 on: August 04, 2011, 01:04:34 PM » |
|
Finally managed to flash the 0225 with JF. But one big problem now:
- backups work, so flashing was OK
- tray close works (albeit it closes very rapidly, in less than a second!)
- eject won't work, have to eject manually. It twitches just a bit and stops.
I don't think it's mechanics problem. Anyone hit that problem yet?
|
|
|
|
|
Logged
|
|
|
|
|
