robinsod
Global Moderator
Xbox Hacker
    
Posts: 648
Perl packed my shorts during global destruction
|
 |
« Reply #20 on: September 11, 2006, 05:57:03 PM » |
|
Has anyone got a Samsung SH-D163A? I would be interested to know what the controller, flash and motor controller chips are - I'm wondering if the H943 firmware could be retrofitted. Is anyone else interested? PM me!
|
|
|
|
|
Logged
|
|
|
|
|
|
|
Pringle
|
 |
« Reply #22 on: September 12, 2006, 02:14:01 AM » |
|
 SST Did you try dumping the Firmware ?
|
|
|
|
|
Logged
|
|
|
|
|
zillionare
|
 |
« Reply #23 on: September 12, 2006, 02:52:05 AM » |
|
 SST Did you try dumping the Firmware ? Not yet! Just got it.  Just have to put it back together and into a box. I will post back here once done.
|
|
|
|
|
Logged
|
Why buy one, when you can buy two for twice the price.
|
|
|
|
|
|
zillionare
|
 |
« Reply #25 on: September 12, 2006, 09:46:07 AM » |
|
Thanks for the link to extract the flash....."FlashReader" works  Extracted a 256KB size file....saved as ES01.BIN  Loaded it into another app that was on that same page called xflash_utility....but only info it gave that was not know was the md5 checksum hope this is what ya wanted to know.....what next? anything else?
|
|
|
|
|
Logged
|
Why buy one, when you can buy two for twice the price.
|
|
|
|
|
|
Geremia
|
 |
« Reply #27 on: September 22, 2006, 02:12:06 PM » |
|
Got the Samsung SH-D163A, hope to have some time to make some experiment soon Note that the MT pins related to standard flash connection (near top-right corner) seems unconnected, like the liteon one. Note also that TS-H943 has pads for an SPI flash too. I think that my first test will be putting the SH-D163A SPI flash on the TS-H943  
|
|
|
|
|
Logged
|
|
|
|
|
MODFREAKz
|
 |
« Reply #28 on: September 25, 2006, 05:16:51 AM » |
|
hmm very interesting, samsung SH-D163A drive have "SF-HD68V" laser and xbox1 LG drive "SF-HD68".
how about liteon SHD-16S1S drive?? which laser is inside??
|
|
|
|
« Last Edit: September 25, 2006, 05:38:23 AM by Team MODFREAKz »
|
Logged
|
|
|
|
|
Geremia
|
 |
« Reply #29 on: September 25, 2006, 06:04:24 PM » |
|
I've started to look at disassembled SH-D163 fw, and an SPI port of xtreme seems not so easy. At first look (and first time for me about 8051 asm code) in SPI fw, there is a bootloader in first 64KB, then in second quarter of fw there is what looks like bank0 in xtreme fw, same initial routines, .... the routines to switch banks (at relative address 0x1800), also a switching to 4th bank is present but, of course, not xreferenced......but the problem is about terth and fourth quarter of fw, they are attached toghether, i can't see any switching routine, seems a 128KB chunk of code, but i've still to look deeply. Anyway, porting the xtreme fw to SPI flash means a complete readressing of the routines (to fit fw into 192KB), that's why i didn't try to see if SPI works on TS-H943, because it's secondary relevant.
I think that the MT chip first try to see if an SPI flash is connected to A16 and A17, if not it try for a normal flash, but it's only a speculation. The only stuff i've tried, is to solder an 25P10 (taked from maxtor HD) to SH-D162C and XSF.exe from dos was able to flash it, so the bootloader inside SPI flash (first 64KB chunk) is only something that probably copys the 192KB fw to ram.
Does anyone have taked a look to SPI flash FW? In second quarter there are a lot of jumps to switching routine to finally jump to bank0, 1, and 2 (relative to 192KB fw) using P1 port, but i've not already seen how the code comes back to bank0. Why P1 is used? maybe there is more ram internally and P1 is used to switch 64KB chunk inside it, instead of using P1 for external flash?
|
|
|
|
|
Logged
|
|
|
|
|
zillionare
|
 |
« Reply #30 on: September 25, 2006, 06:49:04 PM » |
|
hmm very interesting, samsung SH-D163A drive have "SF-HD68V" laser and xbox1 LG drive "SF-HD68".
how about liteon SHD-16S1S drive?? which laser is inside??
After closer examination.....the SHD-16S1S has the "SF-HD68V" laser inside. Will provide pic if necessary, but it's clearly printed on top of laser housing. I hope this is good news. =)~ peace zil
|
|
|
|
|
Logged
|
Why buy one, when you can buy two for twice the price.
|
|
|
|
MODFREAKz
|
 |
« Reply #31 on: September 30, 2006, 10:24:32 AM » |
|
thx for replay zillionare!
- Geremia any new progress??
|
|
|
|
|
Logged
|
|
|
|
|
Tiros
|
 |
« Reply #32 on: November 25, 2006, 02:10:05 PM » |
|
Reformatting the SPI rom content, and adding an extra adress line, I got the TS to run the SHD code in parallel mode. Some patches to the SHD were required to make it boot on the TS in parallel mode. It acknowleded in windows, responded to INQ, but would not eject or spin. Motor controller incompatibiites I suppose.
I was unable to make the 1359E on the TS emit the SPI clock and control signals, even though place on PCB for SPI rom. So I made it run parallel. I was wondering if this drive could be used for parts, IE source of 1359E, as its only a $20 drive. Anybody can swap an shd 1359 to the TS main board would be a good test.
|
|
|
|
|
Logged
|
|
|
|
|