XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 24, 2013, 09:30:25 AM


Login with username, password and session length


Pages: 1
  Print  
Author Topic: DosFlash (handle with care)  (Read 9406 times)
Schtrom
Master Hacker
****
Posts: 155


View Profile
« on: August 11, 2007, 07:26:05 AM »

DosFlash and DosFlash32 V1.0 Beta
-----------------------------------
DosFlash can be used to read/write/erase the flash chips of most CD/DVD-ROM drives
that have a mediatek chipset installed. DosFlash is for DOS flashing, DosFlash32
for Windows flashing.


Features:
-----------
- flashes IDE and SATA drives
- supports parallel and serial flash chips
- flash drives in Windows with direct port access
- no vendor cdb flashing commands are used
- tested with the following drives:
  - TS-H943A MS25, MS28
  - SH-D162C
  - SH-D163A
  - and some other drives like Liteon, Hitachi, ...
- NEC drives are not supported, cause they have no mediatek chipset installed

Download-Link:
http://rapidshare.com/files/48309217/DosFlash_V1.0Beta.exe.html

Logged

Wanna do real programming? Try MASM!
jumba
Master Hacker
****
Posts: 167


View Profile
« Reply #1 on: August 14, 2007, 05:29:14 PM »

Great work!
Dosflash16, unloads f/w from Drom6316.
Logged
MoDInside
Hacker
***
Posts: 66


View Profile
« Reply #2 on: August 16, 2007, 04:27:53 PM »

DosFlash and DosFlash32 V1.0 Beta
-----------------------------------
DosFlash can be used to read/write/erase the flash chips of most CD/DVD-ROM drives
that have a mediatek chipset installed. DosFlash is for DOS flashing, DosFlash32
for Windows flashing.


Features:
-----------
- flashes IDE and SATA drives
- supports parallel and serial flash chips
- flash drives in Windows with direct port access
- no vendor cdb flashing commands are used
- tested with the following drives:
  - TS-H943A MS25, MS28
  - SH-D162C
  - SH-D163A
  - and some other drives like Liteon, Hitachi, ...
- NEC drives are not supported, cause they have no mediatek chipset installed

Download-Link:
http://rapidshare.com/files/48309217/DosFlash_V1.0Beta.exe.html


How do you read a Original MS28 drive with DosFlash? Have not got the chance to try one, but I am curious, if its possible to read it and flash it without the vcc or the 10 sec method.
Logged
routehero
Hacker
***
Posts: 81


View Profile
« Reply #3 on: August 18, 2007, 07:12:30 AM »

You mention Hitachi... what Hitachi drives are working with this?  Has someone created a list?
Logged
Schtrom
Master Hacker
****
Posts: 155


View Profile
« Reply #4 on: August 19, 2007, 12:34:20 AM »

Quote
How do you read a Original MS28 drive with DosFlash? Have not got the chance to try one, but I am curious, if its possible to read it and flash it without the vcc or the 10 sec method.
You won't be able to read the flash without the 10 sec or the VIA card. This was the reason I tried to include the VIA card in the PCI bus search. The problem is that the flash isn't unlocked by the mtk chip. DosFlash sends the mtk vendor intro command at startup in auto mode and tries to unlock the flash. On a MS28 used with the Enable0800 CD this will work one time if the drive is flashed with c4e's fw. On a retail MS28 only the vcc or via trick could be used.

Quote
You mention Hitachi... what Hitachi drives are working with this?  Has someone created a list?
No list yet. I only have done tests on all drives I had at home. The Hitachi was borrowed, but I can't remember the exact name, it started with something like HL-DT. This tool is not heavily tested, therefor it has Beta status. Main reason for the release was the BenQ drive that couldn't be read without a programmer, cause no tool seems to support SATA and serial flash.
« Last Edit: August 19, 2007, 12:38:57 AM by Schtrom » Logged

Wanna do real programming? Try MASM!
Schtrom
Master Hacker
****
Posts: 155


View Profile
« Reply #5 on: August 19, 2007, 12:19:02 PM »

Sorry, can't edit the thread.

The drive was named HL-DT-ST GCE-8526B. Hope that helps.
Logged

Wanna do real programming? Try MASM!
MoDInside
Hacker
***
Posts: 66


View Profile
« Reply #6 on: August 19, 2007, 04:35:16 PM »

Quote
No list yet. I only have done tests on all drives I had at home. The Hitachi was borrowed, but I can't remember the exact name, it started with something like HL-DT. This tool is not heavily tested, therefor it has Beta status. Main reason for the release was the BenQ drive that couldn't be read without a programmer, cause no tool seems to support SATA and serial flash.
so, with this tool is possible to dump the benq x360 drives?
Logged
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #7 on: August 20, 2007, 10:20:14 AM »

first of all great job Schtrom!!   Grin
that is maybe exactly what we all need! thx


for people who could try this app on x360 benq drive
please replace that part in DosFlash file.
I dont think that will work, but you never know!   Tongue

//---------------------------------------------
// Serial Flash Type
// ManufacturerID  DeviceID  Size  SectorEraseCmd  ChipEraseCmd  ChipName
//---------------------------------------------
.
.
// 2M-bit (256K bytes)
0x11  0x11  0x04  0xD8  0xC7  "ST(M25P20)(3.3V)"
0xEF  0x11  0x04  0xD8  0xC7  "Winbond/NEX(W25P20/NX25P20)(3.3V)"
0xC2  0x11  0x04  0x20  0xC7  "MX(25L2005)(3.3V)"
0xBF  0x43  0x04  0x60  0x50  "SST(25LF020A)(3.3V)"
0x9D  0x7D  0x04  0xD7  0xC7  "PMC(PM25LV020)(3.3V)"
0x1F  0x63  0x04  0x52  0x62  "ATMEL(AT25F2048)(3.3V)"
0x31  0x31  0x04  0xD8  0xC7  "Winbond/NEX(W25B20/NX25B20)(3.3V)"
0x00  0x00  0x04  0xD8  0xC7  "Unknown/Test SPI"

.
.
Logged

Schtrom
Master Hacker
****
Posts: 155


View Profile
« Reply #8 on: August 20, 2007, 12:34:43 PM »

Nice that you already modified the typ file!

To be honest the main interest in developing the app was getting the flash of the BenQ. Only prob is that I never get hold of one. So I hope with your modifications this will work and c4e could release the fw. Smiley
Logged

Wanna do real programming? Try MASM!
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #9 on: August 22, 2007, 07:35:54 AM »

small correction!!

// 2M-bit (256K bytes)
0x11  0x11  0x04  0xD8  0xC7  "ST(M25P20)(3.3V)"
0xC2  0x11  0x04  0xD8  0xC7  "MX(25L2005)(3.3V)"
0xEF  0x11  0x04  0xD8  0xC7  "Winbond/NEX(W25P20/NX25P20)(3.3V)"
0x31  0x31  0x04  0xD8  0xC7  "Winbond/NEX(W25B20/NX25B20)(3.3V)"
0xBF  0x43  0x04  0x60  0x50  "SST(25LF020A)(3.3V)"
0x9D  0x7D  0x04  0xD7  0xC7  "PMC(PM25LV020)(3.3V)"
0x1F  0x63  0x04  0x52  0x62  "ATMEL(AT25F2048)(3.3V)"
0x00  0x00  0x04  0xD8  0xC7  "Unknown/Test SPI"
« Last Edit: August 22, 2007, 07:46:26 AM by Team MODFREAKz » Logged

zouzzz
Master Hacker
****
Posts: 326


View Profile
« Reply #10 on: August 22, 2007, 01:01:16 PM »

Hello,
Thanks for yours jobs
I have tested with dvd drive hitachi 78.
But error : Unknown flash chip :


« Last Edit: August 22, 2007, 01:22:16 PM by zouzzz » Logged

idog
Master Hacker
****
Posts: 190


View Profile
« Reply #11 on: August 23, 2007, 07:46:40 AM »

Looks great. Thanks for this terrific app.

I'm wondering though. Can I resurrect my dead hitachi47DH with this tool ? I have the correct firmware file (bin) so maybe I can attempt to manually flash it ?

From the readme :

Quote
If you can't get a flash chip recognized due to a bad flash or other problems you should use the
Manual mode. In Manual mode you can enter all the parameters used for flashing by hand.

Would that work ? Maybe with the following command :

DOSFLASH W 01F0 1 A0 1 4 C:\before.bin

Assuming the above parameters are correct of course Smiley
Logged
Schtrom
Master Hacker
****
Posts: 155


View Profile
« Reply #12 on: August 23, 2007, 01:45:03 PM »

Code:
DOSFLASH W 01F0 1 A0 1 4 C:\before.bin
WARNING! This command will not succeed! Cause:
The port 0x01F0 is normally used for the primary IDE channel, so I think you need to change the port to your SATA one. As far as I know no known XBOX360 has IDE channels on board. Maybe something for future additions by MS, hehe! Wink
You could try to connect an already recognized retail SATA drive, start the auto mode and note down the used port.
Another point is the flash type, you selected 1 for serial flash, but I would bet the hitachi has a parallel flash installed. Maybe some hitachi experts can clean things up here, cause I am only a happy sammy user.
As a last tip I would recommend that you try a read of the flash first, I know it maybe corrupted, but you should try it, only to test if the drive accepts the commands. If the read will fail I would in no case try a write.

Sorry that I can't help more, but I had no hitachi for testing.
Logged

Wanna do real programming? Try MASM!
Schtrom
Master Hacker
****
Posts: 155


View Profile
« Reply #13 on: August 23, 2007, 01:47:47 PM »

There are only two reasons for the error "MTK Vendor Intro failed":
1. There is no mtk chip installed on the drive.
2. There is an mtk chip installed, but the flash is locked and needs to be unlocked by a secret vendor command.

Again: Hiatchi experts clean things up, please.
Logged

Wanna do real programming? Try MASM!
idog
Master Hacker
****
Posts: 190


View Profile
« Reply #14 on: August 24, 2007, 03:50:46 AM »

Code:
DOSFLASH W 01F0 1 A0 1 4 C:\before.bin
WARNING! This command will not succeed! Cause:
The port 0x01F0 is normally used for the primary IDE channel, so I think you need to change the port to your SATA one. As far as I know no known XBOX360 has IDE channels on board. Maybe something for future additions by MS, hehe! Wink
You could try to connect an already recognized retail SATA drive, start the auto mode and note down the used port.
Another point is the flash type, you selected 1 for serial flash, but I would bet the hitachi has a parallel flash installed. Maybe some hitachi experts can clean things up here, cause I am only a happy sammy user.
As a last tip I would recommend that you try a read of the flash first, I know it maybe corrupted, but you should try it, only to test if the drive accepts the commands. If the read will fail I would in no case try a write.

Sorry that I can't help more, but I had no hitachi for testing.

No prob, thanks for the answer Smiley Will try it this weekend and post the results back here. Would be real nice if it worked. Software solution for unbricking hitachis Smiley
(It's a longshot, but hey.. who knows Smiley )
Logged
NunyerB
Newbie
*
Posts: 2


View Profile
« Reply #15 on: November 09, 2007, 11:31:56 PM »

I have a hitachi 47dj (its partially bricked)
bad flash (froze on step 0/11 unstealthing)

anyhow it dont have the mtk chip.
it has the panasonic chip.

if there is anything i can do to help i will try my best.

it would be great if i could get into manual mode and tell it the port to force flash on

please someone help these guys "clean this up"
Logged
Arakon
Administrator
Xbox Hacker
*****
Posts: 6925


View Profile
« Reply #16 on: November 10, 2007, 04:57:53 AM »

a bricked drive doesn't allow flashing anymore. your only option there is an external programmer right now, or infectus.
Logged

I do NOT give support by email, PM, ICQ or whatever. Anyone annoying me that way will have his balls removed. With a rusty butterknife. Slowly. And I'll enjoy doing it.
Pages: 1
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM