MT1335 MX/WB unlocking

[rockmetal]

http://www.youtube.com/watch?v=mSq-7OAyuRs

Have Fun with the Samba Nuke Unlock.

As says pacote, dont do it with jf, do it with geremia tool, its better to send spi unlock.

[morenomdz]

Jf works just fine, yes it is much slower detecting the unlock, but as it says on the video, you must do it slowly, don't rush in, and be watching for a status change for 3, if you wait to 3c and JF beep, it will be to late.

[Jrmc0]

Hey

am i right in saying that the MT1335WB is 256kb density?

[Blargharg]

I'm having a really weird problem with my Intel ICH10R integrated sata and unlockspi.exe. This is the thing - if I do a clean restart of the comp, I can usually get the drive to both dump properly via JF using the slimkey method, and have it show up in unlockspi just fine, ready to be drilled. However, after I do any of these things - either a dump in JF or unlockspi, the next time i run either program i get "intro failed, status 0x51" or in the case of unlockspi "ATA timeout, status 51, waiting for a drive repower". In either case, power cycling the drive doesn't do anything, it's constantly stuck in status 51, or sometimes status 80. The only solution is to restart the comp and pray that it works on the next boot. Naturally, this makes me extremely reluctant to try and drill while relying on the ich10r to give me proper feedback. Unfortunately, the only other solution i have is x360usb and JF, which seems is extremely unreliable as unlockspi alternative.

Before you ask - yes, I've tried all the other onboard ports in my comp, and it's the same thing with every one. The one that seems to work best is an eSATA Primary Master port on the back panel (i have an eSATA to SATA cable).

Has anyone experienced a similar problem with their Intel chipset? Have you found a solution?

[asapreta]

I'm having a really weird problem with my Intel ICH10R integrated sata and unlockspi.exe. This is the thing - if I do a clean restart of the comp, I can usually get the drive to both dump properly via JF using the slimkey method, and have it show up in unlockspi just fine, ready to be drilled. However, after I do any of these things - either a dump in JF or unlockspi, the next time i run either program i get "intro failed, status 0x51" or in the case of unlockspi "ATA timeout, status 51, waiting for a drive repower". In either case, power cycling the drive doesn't do anything, it's constantly stuck in status 51, or sometimes status 80. The only solution is to restart the comp and pray that it works on the next boot. Naturally, this makes me extremely reluctant to try and drill while relying on the ich10r to give me proper feedback. Unfortunately, the only other solution i have is x360usb and JF, which seems is extremely unreliable as unlockspi alternative.

Before you ask - yes, I've tried all the other onboard ports in my comp, and it's the same thing with every one. The one that seems to work best is an eSATA Primary Master port on the back panel (i have an eSATA to SATA cable).

Has anyone experienced a similar problem with their Intel chipset? Have you found a solution?

Have you probed MPX while repowering?

[Blargharg]

Have you probed MPX while repowering?

No, I haven't... You mean MPX01? You think it would work?

EDIT: Ok, so I tried it, and it does indeed kick it out of status 0x51 and into vendor mode, but after that it fails the slimkey method on stage 1 in JF. It does seem to be working for unlockspi as well, but considering the failure of read in JF, I'm reluctant to start drilling at this point... Do you think it would be safe?

[the-green]

Jf works just fine, yes it is much slower detecting the unlock, but as it says on the video, you must do it slowly, don't rush in, and be watching for a status change for 3, if you wait to 3c and JF beep, it will be to late.

hye man thanks for this video, as I see you're using a soldering iron for this method ! didn't you have errors after this hack (read DVD, tray problems..) ?

[morenomdz]

Jf works just fine, yes it is much slower detecting the unlock, but as it says on the video, you must do it slowly, don't rush in, and be watching for a status change for 3, if you wait to 3c and JF beep, it will be to late.

hye man thanks for this video, as I see you're using a soldering iron for this method ! didn't you have errors after this hack (read DVD, tray problems..) ?

Other than the first two pcbs I fked up no, so far all are working fine.

[faizy]

@blargharg .. dude drilling is no problem with ICH10 .. i use ICH10 too and the same problem is with me .. one dump per reboot ... and you can drill after probing MPX01 .. no issues at all .. when it is unlocked .. vendor intro again by probing MPX01 ... and write the FW .. it will fail at verification ...at that point .. power cycle the drive and click slim unlock .. it will kick into vendor mode and will write the fw with no issues ... have done 50+ drives on my ICH10 now ..


@all .. does anyone have any idea where the problem could be with my board ... tray ejects after method by riku but disc does not spin .. input appreciated

[Blargharg]

Thx faizy, I tried it and it WORKED  Basically, doesn't matter if you can dump with JF or not, if you can get into vendormode using a PMT/probe3 - you can use unlockspi. Also I couldn't believe how easy that was. Literally had to drill 0.1-0.2 mm and it was done. Unlockspi works great, started beeping right away. Dumped the full FW using JF and x360usb after that, everything went smooth, although i did have to reintro and powercycle a few times. After that i locked it and unlocked it a few more times for good measure, and that's that Thnx everyone for your help, it was most useful.

[DazEB]

Finally managed to complete this mod today on my locked 0225 with no errors using onboard AMD SB600 chipset in Legacy mode. I used the 100ohm resistor aswell..

I used unlockSPI aswell because jungleflasher did seem very slow to detect the unlock, although i got status 3 with jungleflasher it did not beep where as unlockSPI beeps immediately.

Many thanks Geremia

[deepeastoak]

What did I screw up when I put everything back together after a successful flash and the xbox tells me open tray with backups, real games, movies?

[modguru]

check your label of your drive maybe it is 9504 and inside 0225 if it is like that you must use the LT1.910225u.bin

[xfreaks]

Thanks Geremia for the briliant idea... i just done 2unit winbond without any error.
i didnt even use a dremmel for digging. )

Can you provide details please?

It's so easy you dont even need any dremmel or solder iron. but you must do it very carefully.
basically almost same like what mordock said.
btw, i use JF and  there's  a "DING" sound for unlocked sign. i have tested several times locked and unlocked it. the sound works good

[the-green]

& what you've used for dremling ?

[deepeastoak]

check your label of your drive maybe it is 9504 and inside 0225 if it is like that you must use the LT1.910225u.bin

it was a 9504 that was flashed to a 0272 after the xbox update.

[modguru]

then check your key if it is right .
and if stil  play dvd error try to flash it with the lt plus 1.9 0272

[the-green]

There will be a new CFW LT plus 1.92 for slim liteons soon:

[2011-08-13 01:51PM UTC] <c4eva> ok,1.92 for all slims soon

http://c4evaspeaks.com/c4eva-2011-08-13-team-channel/?utm_campaign=twitter&utm_medium=twitter&utm_source=twitter 

[the specialist]

It seems that the method discovered by staff of "Cursos Games" is being accepted!

http://www.youtube.com/watch?v=VCrrpaKp42I&feature=player_embedded#at=289

This method was found in day 03/08/11 as shown in the video below

http://www.youtube.com/watch?v=uGq3KKJcAz4

[DARKFiB3R]

It seems that the method discovered by staff of "Cursos Games" is being accepted!

http://www.youtube.com/watch?v=VCrrpaKp42I&feature=player_embedded#at=289

This method was found in day 03/08/11 as shown in the video below

http://www.youtube.com/watch?v=uGq3KKJcAz4

I wouldn't call using a different tool to make the hole, a new method, per se. I wouldn't expect any recognition if I did it with a fork for instance.

Geremia was the first to bring it to public attention, and it has been dubbed the kamikaze method. 

I'm happy to stick with that.