Project to dump the new BenQ drive - VAD6038

[Caveman007]

Hi everyone, justa wanna let u know, that method 1 worked fine for me,

Have a BENQ VA6038 FW Ver 64930C

The key was at c030,

I was able to dump the fw, extract the key, and spoff a MS 25, it ´s working
with originals and backups.

If someone wants the dumped fw, just let me know.

Cheers

Caveman007

[xry]

Sure if it wasn't c020?

[jelle2503]

i'd prefer trintiykate his way (as teh noob i am).

no cutting traces.. simply lifting the leg away from the chip and solder to the points.. and after flash, put leg back to chip.

how can that be anymore dangerous then cutting traces?

i think it's rather dangerous that a noob is cutting in chipboards with knifes etc.

[MODFREAKz]

do what you want!!

but I will not hear any complaints about broken pin or lifted pads!!

[gadget78]

as lifting the leg like that can easily make it break off... and once broke off its VERY hard to fix ...

but cutting a trace is esiy as it cannot really go wrong .. as the trace goes back along way, etc
u could even use wire to fix a trace by going right back to its source..

Mick ..

[TweakZ]

Team MODFREAKz from your PDF tutorial (VAD6038 Tutorial.pdf). I have come to realize, you have a different version of the
DOSFLASH by Kai Schtrom, 11.08.2007 (Ver. 1.1 Beta) the public one is the (Ver 1.0 Beta) from the links
you have provided on the PDF and an earlier posting. I do not know if that has anything to do with any of the problems I am currently
having. I would like to be able to dump (e.g. read) the firmware to extract the key on my 62430CR drive as noted on the label which I
have posted on the image below.


Team MODFREAKz I would appreciate it if you can help me out on figuring out this problem that I am having. Great tutorial and contribution you have done to the Scene by figuring out the way to read the BENQ drive firmware to extract keys. Also great job done by Schtrom in writing DosFlash.


The two drives you have noted on your website are:
H/W: J-DA0A1
&
H/W: J-DA0A3

THE HARDWARE VERSION of my drive is:
H/W: J-DA0A3R
I don't know if that is what you were referring to by the second one listed above.


DRIVE:


In standard test mode with the Switch 'ON-position' I get the following drive information:



1. I have tried METHOD 1 and was unsuccessful on many attempts (Min: 40 tries) I tried it with he XENO Dongle and with the XBOX-360 as the power source for the DVD drive.

(i).  Booted the USB-Stick with MS-DOS
(ii). connected the SATA cable from the 6421L VIA Card to PORT: SATA-0
(iii).Typed in "dosflash" and waited in the command prompt (Ver 1.0 Beta)
'dosflash.typ' Type definition had: 0xC2  0x11  0x04  0xD8  0xC7  "MX(25L2005)(3.3V)"
so it was properly defined for the MX chip we needed to read
(iv). I have the Switch which I have connected to the board 'OFF-position'
(v).  Powered on the XENO dongle (or) XBOX-360 system and then put the Switch connected to the board to 'ON-position' after about 1-second & clicked the 'ENTER' button on the keyboard and come up with the following message:

FAILED MESSAGE:


2. I have tried METHOD 2 and was unsuccessful on many attempts (Min: 25 tries) I tried it with he XENO Dongle and with the XBOX-360 as the power source for the DVD drive.

(i).  Booted the USB-Stick with MS-DOS
(ii). connected the SATA cable from the 6421L VIA Card to PORT: SATA-0
(iii).Typed in "dosflash" and waited in the command prompt (Ver 1.0 Beta)
so it was properly defined for the MX chip we needed to read
(iv). I have the Switch which I have connected to the board 'OFF-position'
(v).  Powered on the XENO dongle (or) XBOX-360 system and then put the Switch connected to the board to 'ON-position' after about 1-second & clicked the 'ENTER' button on the keyboard and come up with the following message:

FAILED MESSAGE:


3. I have tried METHOD 1 and was unsuccessful on many attempts (Min: 15 tries) I tried it with he XENO Dongle as the power source for the DVD drive.

(i).  Booted the USB-Stick with MS-DOS
(ii). connected the SATA cable from the ICH7 Intel onboard chipset to PORT: SATA-0
(iii).Typed in "dosflash" and waited in the command prompt (Ver 1.0 Beta)
so it was properly defined for the MX chip we needed to read
(iv). I have the Switch which I have connected to the board 'OFF-position'
(v).  Powered on the XENO dongle and then put the Switch connected to the board to 'ON-position' after about 1-second & clicked the 'ENTER' button on the keyboard and come up with about the same message but less ports.


Below you can also see the work that I have done to see if there are any -errors-.

Thanks,

TweakZ

Method 2 (Wire Diagram):


Method 2 (Zoomed - Wire Diagram):


Method 2 (Jumper Wire-fix - Wire Diagram to Redo Method 1):


Method 1 (Re Wire to Redo Method 1):


Method 1 (Redo of Close-up solder points):

[www.ChipEinbau.de]

same Problem here too ;o(

[Tiros]

When usiing method #2, the third terminal of the switch should connect to 3.3V.
So:
Center - connect to isolated or lifted pin #1, Left connect to 3.3V,  Right connect to point of pin #1 original connection.

[www.ChipEinbau.de]

@Tiros
sure !? why ?

[TweakZ]

I have also done it as the way you have stated by lifting PIN 1 on the MX (25L2005) soldering on to the pin
instead of cutting the board, but I still had the same problem. From what I see on the tutorial that
Team MODFREAKz has written is that the DOSFLASH is definitely different.
Easy way to tell is by looking at the way the TEXT is written:

On DOSFLASH by Kai Schtrom ~(-Ver 1.0 Beta-)~ which I have used you will see the
Flash ManufacturerID is Flash ManuID
DeviceID is DevID
Flash Size is Size
Flash Type is Name

I think Team MODFREAKz has a more updated DOSFLASH Version ~(-Ver 1.1 Beta-)~.
If Team MODFREAKz can post the updated DOSFLASH'er link I think we should be OK

When usiing method #2, the third terminal of the switch should connect to 3.3V.
So:
Center - connect to isolated or lifted pin #1, Left connect to 3.3V,  Right connect to point of pin #1 original connection.

[NEO_X]

also have the same mtk error

[MODFREAKz]

LOL people!!

the problem is not the method or version of the DosFlash!!
the problem is (I'm very sure) the mainboards chipset!! like via or intel

nForce4, 5 are best.


btw: Schtrom will release the new version soon.


EDIT: Look here done same with v1.0 Beta

[trintiykate]

is it possible for Schtrom to include an external dat or text file so people can enter the chipset information this should cure peoples problem if he designed dosflash around the nforce chip set, as for lifting the leg if it snaps that's is hardly a big problem to fix i can add a repair tut with 3 different repair solutions including if you lift the pad which if you use an iron to heat up the leg and gently lift in the first place this will not happen the switch can be left in place also for future flashing so no need to resolder the leg to its pad.

[Ellex80]

i can add a repair tut with 3 different repair solutions including if you lift the pad which if you use an iron to heat up the leg and gently lift in the first place this will not happen the switch can be left in place also for future flashing so no need to resolder the leg to its pad.

this is deeply interesting

[zoogderrick2]

same here i have the via vt6421 pci sata card, and when i power on the 360 with the switch is in the on position it reads the drive but i cant flash. But when i power on the 360 with the switch in the off position and then switch it on, it gives me "No Identify Possible". Can anyone help.  I would love to read my firmware to flash to a samsung drive.

[NEO_X]

zoogderrick tell me how you readed out your benq i also have the via 6421 card

[zoogderrick2]

zoogderrick tell me how you readed out your benq i also have the via 6421 card

sorry i misworded it i meant it read that it was a VAD6038, not read the actual firmware. SO i guess we need a dosflash formatted for the via chipset, if i'm not mistaken.

[mignmic]

so... would it work on my sata port on my motherboard M2N32SLI DELUXE with the chipset "NVIDIA nForce 590/570/550 Serial ATA Controller" ? I dont want to cut trace and things like that and it doesnt work

Thank you to anyone who helps me

AND!! :

Thank you VERY much Team MODFREAKz for your hard works on BENQ drive ... and to who ever work on it !

[caster420]

As i stated in my posts, dosflash did not work for me with my via chipset.  I have been able to read/erase/write with my VIA 6421 using method 1 and dosflash32.  So, for all you VIA users, you can try TMF's exact procedure, except boot into windows, then connect sata, load dosflash32, power on drive as per  the tutorial, and select your appropriate port using the pull down menu.  It will then display the same info as the dos version.

Worth a try.

Caster.

[NEO_X]

ok looks nice but wont work here