黑皮論壇(手機維修/電玩維修/電腦維修)

標題: 360舊機軟改問題? [打印本頁]
作者: ak475671    時間: 2011-8-12 20:21
標題: 360舊機軟改問題?
我有幾個問體想請問^^
. b6 r% n8 W! j& z: @
2 X  g/ ]$ r- e0 x8 ]# q8 `9 `一我有上網爬文一下發現有自製系統和LT+1.91這兩種可以軟改我的是舊機BENQ光碟機主機系統是2.0後面是什麼199什麼的如果我想玩T片是不是只要刷光機的韌體刷成LT+1.91就可以玩T片了
! w/ h8 f: g9 ?  B2 L+ L5 k0 j' W
二友人刷了LT+1.91然後主機更新最新的韌體發現沒辦法玩T片還要再刷一次LT+1.91才可以玩
* O5 M8 {7 ?/ j* ?) m7 F$ b
& r- e$ C0 A( W6 C  q那我的狀況視不是先跟新到現在最新的主機韌體13146之後再刷LT+1.91就可以玩目前的所有遊戲呢
/ Z- b8 f% U9 \% d! T4 L! P
6 u: z0 |: P7 q: L% r( b! a如果更新主機韌體到13146跟LT+1.91會不會有什麼問題呢?
( {% z; V5 J) _3 ^/ N. [* p# x. @* I; A6 \. h, B5 J* {
我是新手請有經驗的可以替我解答嗎謝謝^^6 E8 e7 b0 a, A, L. C
作者: basely    時間: 2011-8-12 20:40
不太了解您的意思，但LT+1.91是給升級至2.0.13146以上版本主機使用，( i7 i$ W- b  x
因為BENQ光碟機以及Liteon光碟機升級至20.13146型號均會變更，升級成支援10G光碟格式，$ s8 B- m; n2 ?5 C* ]7 D$ j
所以您說的舊版本升級新版本?何意?
0 @4 u9 E, F7 v' j6 f9 {$ C: x1 V) f" {4 U' v' a+ N3 K3 k
至於升級至LT+1.91沒辨法玩T片?應該不太可能吧，除非它光碟機壞了，不然就是跟本沒刷進去....
作者: ak475671    時間: 2011-8-12 21:08
超級版主你好
* J4 ]/ _6 `( N; V" Z- @- ?是這樣的我的主機是舊機沒有HDMI光碟機是明碁的我想玩T片但我都沒有改過機如果我想玩目前市面上的遊戲的話是不是光碟機本身要刷到LT+1.91就可以玩了呢因為不知道主機本身是不是也要更新韌體因為有看到網路有很多人要玩AP2.5或是AP2.6的遊戲跑去更新最新版的主機韌體因為我是新手所以想先了解一下依我的狀況要如何去軟改用比較好我有下載JungleFlasher v0.1.86 Beta (267)可是怎嚜沒辦法開啟這個軟體會顯示libusb0.dll然後無法開啟
4 v# L$ O4 R! ?, Y% {$ a# |可以請版主小弟解答一下嗎謝謝版本^^
作者: basely    時間: 2011-8-12 21:19
ak475671 發表於 2011-8-12 21:08
6 q; |  O% m5 C超級版主你好6 w; ^; K. H, N- n! e- m7 G
是這樣的我的主機是舊機沒有HDMI光碟機是明碁的我想玩T片但我都沒有改過機如果我想玩目前市面 ...
, I, @2 r) E. K$ i+ Q9 Q$ A
JungleFlasher是給要自行刷機的，您是要自刷?! _$ r* F* b% b8 T  l7 @  w7 ^% U
至於您的主機是何版本都沒有差別，1 b" p# e- t/ w. S8 \1 P: C# r
升級LT+1.91的用意是讓主機系統版本已在2.0.13599可以玩AP25遊戲，
4 R4 n% U5 P: J  T  uAP25遊戲也需要打上補丁才能夠在LT+韌體讀取，2 ~5 U/ R0 }: r  _" K9 [  P
若是光碟本身沒補丁，不管您的韌體版本為何均無法讀取該遊戲。
, g& X# h9 z; [' }(2.0.9199尚未有AP25，但新遊戲都沒辨法玩)
( L" A4 A7 z, s, M! a+ X6 |% T4 X
作者: ak475671    時間: 2011-8-12 21:41
超級本主你好' }0 b/ T2 S! S4 i. ^0 f  t
是的我是想要自刷LT+1.91對360軟改很有興趣所以想先了解一下先自己動手試看看以版主的意思是說
! |* |3 u8 h/ |& J我目前的主機版本是2.0.9199如果刷了LT+1.91就可以玩T片舊的遊戲但無法玩新遊戲所以我還必須要打上相對應的補丁才可以玩是嗎還是目前沒有2.0.9199該韌體對應的補丁呢
: X, Z* i* ~: D) E* r' h' f* y+ x另外我碰到另一個問題是我電腦作業程式是XP要開啟JungleFlasher的時候出現找部到謀個檔案
9 f* \7 b! g! E超級版主可以在幫我解答嗎謝謝^^
作者: basely    時間: 2011-8-12 21:52
ak475671 發表於 2011-8-12 21:41 8 M( b" @1 j# ]7 ?* }
超級本主你好) b$ q# Y3 U/ p+ R2 Q
是的我是想要自刷LT+1.91對360軟改很有興趣所以想先了解一下先自己動手試看看以版主的意思是 ...

# J6 P/ |5 Y1 i% n( ?2.0.9199並沒有AP25遊戲...  P1 a# u  \- D- c( M
所以越來越不懂您的意思，要升級至2.0.12611以上版本才會出現AP25遊戲。
作者: ak475671    時間: 2011-8-12 22:57
超級版主你好^^" Q, C+ M, M+ E2 H: E
可能我表達不清楚讓版主摸不找頭緒~"~% C: x; V" m0 i- S3 a) [
我這樣說好了如果我想玩T片的話包含新遊戲那我是不是需要先把主機更新到最新的版本然後我再把光碟機韌體刷LT+1.91然後在打上新遊戲所需要的補丁這樣就OK了呢^^# r0 C" ?% C5 W
作者: ak475671    時間: 2011-8-13 18:51
感謝超級版主耐心的指教^^謝謝
作者: ak475671    時間: 2011-8-15 21:21
超級版主你好^^
7 B, y* T) I2 w3 b我打算自刷LT+1.91如果沒成功可以拿去你那裡處理嗎?
" k" W) G& I' ?: s謝謝^^
作者: basely    時間: 2011-8-16 11:55
ak475671 發表於 2011-8-15 21:21 1 B# p& H/ P5 g; y! I# H
超級版主你好^^
4 s4 j/ `/ m9 O* s0 _9 H6 P我打算自刷LT+1.91如果沒成功可以拿去你那裡處理嗎?! p: f1 @/ M: u; ?7 c' v9 N
謝謝^^

6 W# @  D+ S- C2 I3 I可以，但千萬記得先讀出DVDKEY然後把它記下來，不然主機沒有了DVDKEY就無法讀取任何遊戲光碟，
! E3 R% d* _" [: M) u很重要，DVDKEY讀光碟機韌體時會顯示出來，可以另存KEY.BIN檔。
作者: ak475671    時間: 2011-8-20 14:19
版主你好^^
3 b. r% A5 Z4 a3 k2 z. ^我測試了1.86要刷LT的時候要提取DVDKEY的時候沒辦法提key提完key之後出現一個問題因該是光碟機沒有解鎖造成無法提key~"~
" L  Y) S! O7 M, `$ L雖然我有案解鎖的按鈕可是在提key的時候還是顯示解鎖的訊息然後沒辦法提取不知道版主有什麼方法可以解鎖光碟機呢我用的也是JF1.86
作者: ak475671    時間: 2011-8-20 14:20
對了我的主機是2006年出產的360主機
作者: basely    時間: 2011-8-20 15:29
ak475671 發表於 2011-8-20 14:19 ) `7 _. K1 p" C) K; ?
版主你好^^: Y( [7 J  P8 X! d
我測試了1.86要刷LT的時候要提取DVDKEY的時候沒辦法提key提完key之後出現一個問題因該是光碟機 ...
- Z3 z/ O6 H) F. [; ~
是什麼型號光碟機?有些SATA無法解鎖，需要使用X360USB PRO才能解開，
, U4 Q+ J" q4 v如果是LG 0079FK/FL則需要使用Audio 79 unlock光碟片。
作者: ak475671    時間: 2011-8-20 15:38
我的光碟機是BENQ 型號是64930C這個
作者: basely    時間: 2011-8-21 11:53
ak475671 發表於 2011-8-20 15:38
, S( i# [+ _( M/ W我的光碟機是BENQ 型號是64930C這個

+ T: i6 Z1 ?* e* s# `  O! ?1 }BENQ光碟機在JF有一個BENQ UNLOCK的選項，
3 |, `% z9 {- s) q  S解開後才能讀取或刷寫。
作者: ak475671    時間: 2011-8-21 17:46
^^版主你好
6 }6 U5 V& x2 c$ v) ]- r8 I我有按BENQ UNLOCK這個選項不過還是沒辦法解鎖不知道為什麼因為我是P4主機然後使用網路上所說的3112晶片的SATA轉接卡進行刷機布過可以讀到360的64930C卻無法解鎖想說會部會是需要主機板本身也有SATA介面的電腦後來試了有SATA的電腦後發現電腦系統是WIN7好像需要使用XP系統才可以進行刷機
& C! `$ F- R' q6 @1 M% ]因為WIN7好像會抓不到360的光碟機
作者: basely    時間: 2011-8-21 21:08
ak475671 發表於 2011-8-21 17:46
* x# K; h7 I# L( r^^版主你好; x* H& F8 V/ |  n- b
我有按BENQ UNLOCK這個選項不過還是沒辦法解鎖不知道為什麼因為我是P4主機然後使用網路上所說的 ...
) X$ z! ]0 k( \5 z. W/ Q9 ~0 N- j
如果您在Windows下無法解鎖的話可以試試用純DOS的Dosflash工具，$ O9 W8 T% M  y3 O. E
不必像在Windows下要解鎖才能讀取，BENQ在DOS下取出韌體比較容易，: u) E; J  r" E8 E, r& e
也比較不會挑主機板的SATA晶片組，DOS讀出來後再用JF開就行了。
作者: ak475671    時間: 2011-8-21 22:10
Dosflash目前想要提取key使用哪個版本比較好呢^^
% p; P9 O$ C- e. g7 d
作者: basely    時間: 2011-8-22 12:01
ak475671 發表於 2011-8-21 22:10 * P/ G! z; ?6 K  a$ G$ ~. G: E
Dosflash目前想要提取key使用哪個版本比較好呢^^
  e) T5 k; x) D( o2 M8 P: Z& ]
Dosflash v1.9版，它是取出整個韌體，
4 q5 u& N8 t" b) W7 ]不止是取DVDKEY而已。
作者: ak475671    時間: 2011-8-22 13:03
版主你好" ~9 O# Z4 H9 g5 G
版主知道哪裡有教學嗎使用DOS提KYE的過程不是很了解不知道有沒有教學可以參考的呢
* x  N3 \4 N; R另外你說他提取的是整個韌體而不只單單DVDKEY而已這個不太懂一\般向JF所提去的是單單只有KEY嗎如果Dosflash v1.9版把整個韌體包含DVDKEY整個提取那光碟機本身不就沒有任體了然後用JF把DVDKEY刷進光碟機裡布就變成只有DVDKEY沒有任體??
. b% S% Z7 R7 [  `1 {- u3 h. c: X6 [$ G; K9 t: ]& C
再麻煩版主解答一下7 ]4 C; ?' l. V/ M
0 u  K6 a5 \. s, K' M8 H% A) a3 F
謝謝版主~~
. o: `$ v1 ~8 w6 U5 L9 q
作者: basely    時間: 2011-8-22 13:31
ak475671 發表於 2011-8-22 13:03 1 Q% v+ A2 c5 e) U
版主你好0 K* b4 [' {7 T9 d( m- E
版主知道哪裡有教學嗎使用DOS提KYE的過程不是很了解不知道有沒有教學可以參考的呢
. p- I8 R" {1 g& h# ^* i# W另外你說他提取 ...
7 W3 F* Q- T2 i$ \
DosFlash ReadMe.txt 說明文件" h! S9 i# x. L' s. D) _

/ U: s  r5 [! b2 J/ i8 ?DosFlash V1.9 Release Date 01.01.2011
% c5 U& b4 s  j) ~5 O! d---------------------------------------
5 S/ t- I: s% E) x4 @. c- SATA and IDE port scan improved in DOS and Windows1 f& u$ u' X: c8 v
  The ports are now enumerated with the CONFIG_ADDRESS and CONFIG_DATA register instead of using interrupts7 e' e: I2 z% D( u+ K0 ?
  in DOS and SetupDixx functions in Windows. This change will detect more ports in Windows than the old / D( T! e8 ^* w+ |& B9 E
  SetupDixx method.) t& }: ~' a2 R/ a  Z
- Settings saved to ini file for DosFlash32 and DosFlash64
8 j% C) {  i* f) B! p7 y6 ~  Settings like Port, Position, Task, COM Port, Enable Drives and DvdKey state are now saved to an ini file
9 Y, e  A5 h6 C  inside the program folder. If the ini file is not present it is created after the first run. On the first. k8 d9 f" }& a' W& G+ L
  startup DosFlash will choose the most common and stable settings.7 \" s: @+ D; R
- EnableDrives option included in dialog as a check box
3 a6 B/ @4 o- u3 r- a. _" K$ r$ f  Due to high demand we removed the "Enabling CD-/DVD-ROMs" MessageBox on program termination and included
) y9 [& a8 G  i9 b; r/ U  a check box "Enable Drives" inside the dialog. For security and more stability this is deactivated on the
$ H+ N. N' ?/ |1 d  first run. If you enable it the checked state is saved to the ini file.1 @5 K+ m: L7 f( s7 H1 [& F
- enabling drives in Windows caused some hangs from time to time, this is now fixed by a recoded enable
3 r; h/ |0 G: f" m( B/ T  drives function% y" K% z, {3 {# j' B9 R
- port drivers portio32.sys and portio64.sys are now added to the executable and unpacked during runtime
" f  z* O" m& o+ L2 B5 @7 a' r- PATA and SATA controllers list updated
- S) u5 D/ @5 ~" b- Fix for NForce motherboards in combination with drives like the "Samsung SH-D163C", "LG DH18NS40" or' ~, k' W' Y; N' Y
  "LiteOn iHDS118"2 V2 b% a$ W; I+ g
  Some drives have problems with flash identify, read, write and erase. This is clearly related to the: x* e7 D; ]8 j: T% y  x/ p3 c
  NVidia NForce chipset. For manual mode in DosFlash16 an additional command line parameter is added called$ o) L, F, ?1 b) R7 f
  "NFORCE FIX". This parameter should be set to 1 for NForce chipsets if you experience strange problems.0 Y7 q9 f* _5 D7 l9 d7 w3 ^
  In DosFlash32 and DosFlash64 we added a static control which shows if the NForce Fix is applied or not.9 c: _8 r0 A$ V) W0 c
  Remember there is no need to activate this with every drive. It seems to be a combination between drive3 V0 f8 _- j: i6 v  \. v8 L
  and NForce chipset that causes the problem. The fix is automatically applied for DosFlash16 in auto mode,4 i/ y6 Q2 Q* X: X" @
  DosFlash32 and DosFlash64.
; ~- J4 }) B& r9 M! ^- DosFlash32 and DosFlash64 are now DPI Aware for Windows7
; B1 z" _0 f# Z& V- New task Verfiy Key/Inject Key added for verification/injection of drive keys; p1 Y( o" d) m  v4 ]0 B" |
  All DosFlash versions now have the possibility to validate drive keys against an XBOX360 drive and set
" u$ D! r: C& V/ n3 ~  the key for an XBOX360 drive. We use the same authentication method like the console to verify a key.
1 I, a0 h+ `+ G3 E( n  _  In the Windows versions you have the choice to paste the drive key from the clipboard to our custom hex! l6 x# U: X( H- I$ w  Q0 a
  edit control or load a key file. To add a key simply click right inside the hex edit control and select
3 X" h7 R0 w4 q# ?' V  your choice from the shortcut menu. In DosFlash16 you can enter the key in the format "1A-2B-3C" without( u  u& @/ C' M+ ^: m
  quotes. Remember that a key has 16 bytes of data. The key file to import should also have 16 bytes of data! ^$ h; }, p' J! x5 }
  like the key files exported by LiteOn Key functions.
' {( W1 ]8 e; m- A3 u- Removed multiple key extractions for LiteOn Key functions, added Verify Key after extraction
& r+ [$ y1 s+ z6 D  For LiteOn Key functions we removed the multiple extractions, because the key is now verified immediately, P9 D* T/ P$ G+ d. B% k- ]5 l
  against the XBOX360 drive.! [& [" u* F0 w2 k( J$ X
- LiteOn Key V1 and V2 now also extract the file Serial.bin and the 2nd inquiry file Inquiry2.bin, b+ e. ?" t4 {4 {4 G* M' [
  We added the file Serial.bin and Inquiry2.bin to LiteOn Key functions. Inquiry2.bin is only generated for2 |: t: C5 m" M2 m$ L/ u5 F6 b
  LiteOn drives V1 and V2.0 O  P" s5 e( [1 r0 r6 }( t
- The drive key of Maximus patched UART drives can be extracted by using the task "LiteOn Key V1 (DvdKey)"
* H8 a, }* v0 y$ j) A8 m  The drive check has been removed from LiteOn Key functions. This way we can extract a key from an UART
! f* t( w* @0 ^  b1 [: N  O$ j  patched drive firmware by Maximus.& C6 g" r) ?2 Y8 ]( ?- H& T
- LiteOn files are now extracted to a destination folder instead of prompting the user for every file name.
! e; E0 d% n2 Y0 C" ?- LiteOn key extraction tasks separated per drive version in "LiteOn Key V1 (DvdKey)", "LiteOn Key V2 (FreeKey)"; c7 n  t0 Q% ^' d; w
  and "LiteOn Key V3 (Tarablinda)"0 W+ T" Z4 P9 c' A! X: i; Y
- In DosFlash32 and DosFlash64 the number of installed COM ports in the system are now enumerated instead of
) c$ g7 O" O  M* Y  adding port 1 to 4% u; F$ w* ~) G) K' b" y# l
- For failing cdb commands the sense code is returned2 [. ]* I; ?4 `
- Geremia's Tarablinda functionality added
: v( x. u" u- P1 H& B  We added all Tarablinda tasks to every DosFlash version. You can extract the key by choosing the task
! {: u2 k. ^+ A9 P  "LiteOn Key V3 (Tarablinda)". For read, write and erase of the flash simply use the standard functions.3 t" ]- I8 m+ n8 A  l0 y  _# ]2 @
  Pay attention that the "LiteOn Erase V1/V2" task is only available for older LiteOns and not for the Slim.4 j& r; \# h8 }* Y; a+ g1 b- |
  You should use "Read Flash", "Write Flash" and "Erase Flash" for the Slim. "LiteOn Key V3 (Tarablinda)"( |" B: U9 o* L: i, \
  extracts 1 additional file in comparison to Tarablinda v04b, this file is called Xtram.bin and contains
1 c. g# ~# D2 g- _: J( a2 F7 r  a dump of the XTRAM8000 area. This can differ in a few bytes from one dump to the next.% w: m9 f) G0 G7 _! i" e' {( I
- Device Reset in DosFlash16 manual mode is now done automatically, there is no option to turn it off anymore9 Z$ `/ Y( g* q9 _
- Code optimization to work with modern SATA2 controllers added, remember to set SATA controllers to IDE and) E2 O! r$ [  T2 A5 b
  not AHCI mode otherwise Port I/O will not work& i, f. S( F6 r; G( r2 z
- Warning: The read, write and erase of the Slim drive is considered risky in general! So pay attention and8 j, k0 I+ l; b& `" ~1 e
  always remember you use DosFlash on your own risk every time! Even during flash read the Slim gets flashed% F9 X" j# T; f4 `! M! R* @) G
  with a patched firmware sector to retrieve the complete dump!! \# p1 p2 w' u4 u* ~8 N9 x
- We had to change many command line arguments for DosFlash16 Manual Mode, because of the NForce Fix, added1 x( H+ W& _: a3 U: v
  Tarablinda support and splitting of LiteOn Key functions. To get a better understanding we added the example
. u  A3 W' ?3 d' }  T$ `  section below.* v1 X% b! X% |$ c. t
- O8 `$ ^8 o1 Q  I( F/ Q

1 O) `& w! V  \! Q: |- O% J- UDosFlash16 Manual Mode Examples( }/ ?; j" X- U0 s* [
---------------------------------3 Z" p% v' ?: W' E: l
- Extract drive key on a "LDS DG-16D2S 74850C" over UART -> "LiteOn Key V1 (DvdKey)") c( N7 {3 h# q6 S3 E
  DOSFLASH LITEON K V1 0970 A0 1
- H; b9 q* x: t4 S% N4 ]. R
/ \9 g# G9 s1 k) ]' G; Z6 }0 ?; h- Extract drive key on a "LDS DG-16D2S 83850C" over SATA -> "LiteOn Key V2 (FreeKey)"0 O: m7 v% g. v$ `
  DOSFLASH LITEON K V2 0970 A00 ?5 A3 U& r, S5 A! N5 Y9 p: f
$ j1 y$ |+ ^3 d* T4 M6 j- C5 R
- Extract drive key on a "LDS DG-16D4S 9504" over SATA -> "LiteOn Key V3 (Tarablinda)"
4 w" L0 J& H# R: ]( H7 ~  DOSFLASH LITEON K V3 0970 A0
3 l: Q9 Z# x5 I  y9 L  o- A1 f7 ~$ v' v5 `$ k
- Read firmware on a "LDS DG-16D4S 9504" -> "Read Flash" this is considered risky!
! e- K# L% R& a  ]3 }2 S% ?# m+ W( C  DOSFLASH R 0970 1 A0 3 0 4 FWOUT.BIN 0# g7 h8 ]0 R$ G8 m! |+ [2 D# _. C5 T
! f3 v  O: R/ S2 O
- Write firmware on a "LDS DG-16D4S 9504" -> "Write Flash" this is considered risky!$ A1 y2 ^2 U9 c3 ~1 s5 g# k
  DOSFLASH W 0970 1 A0 3 0 4 FWIN.BIN 0
& [4 ^; B! W# S, h: ^9 I- |' I8 w  x3 @, x- s: a) j
- Erase firmware on a "LDS DG-16D4S 9504" -> "Erase Flash" this is considered risky!
! W; k9 V, b  R9 {  DOSFLASH E 0970 1 A0 3 0 4 C7 06 ]6 O2 v6 D4 l: d: n2 i
4 |4 S) m0 ^: L/ C
- Erase firmware on a "LDS DG-16D2S 74850C" or a "LDS DG-16D2S 83850C" -> "LiteOn Erase V1/V2"
/ V. Y. Y0 r; D! @; C+ ^  DOSFLASH LITEON E 0970 A0
  Y0 x0 T, x$ b- F4 F" l- o/ i' l; c+ `. J) z/ D5 E. f! L, y
- Read firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Read Flash"5 D( A6 _2 K6 Z1 n, z
  DOSFLASH R 0970 1 A0 2 0 4 FWOUT.BIN 1
. Z: ?+ ?9 S" `- y- c( _, k+ ]
  E/ h9 Q! O& Y5 j: n- Write firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Write Flash"
' P2 N1 T. \! ^  DOSFLASH W 0970 1 A0 2 0 4 FWIN.BIN 14 w8 l- K9 s0 d& }- K4 x
$ Y1 P4 P; ^' m2 Y' \
- Erase firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Erase Flash"
$ X4 J2 g4 v7 J+ S, U( ^  _; f  DOSFLASH E 0970 1 A0 2 0 4 C7 1
! C) z" S+ C  ?8 \$ A8 _! O. \0 M$ O; F& e' [' X0 d) s
- Verify drive key on a XBOX360 drive, enter the drive key manual9 R2 b- @" N7 e2 U7 ]0 S
  DOSFLASH V 0970 A0 12-34-56-78-90-AB-CD-EF-12-34-56-78-90-AB-CD-EF
5 m6 q# P# \" l3 O  R$ V5 u1 d* {& z+ t: ]( h
- Verify drive key on a XBOX360 drive, load a drive key file
5 j. [/ _0 F! C6 ^" f  DOSFLASH V 0970 A0 KEY.BIN2 C7 G* ^. U; p: L
5 j' \3 D. e, `/ u+ H6 j
- Inject drive key on a XBOX360 drive, enter the drive key manual
" o! B; B4 ^6 M9 E- }7 i  DOSFLASH I 0970 A0 12-34-56-78-90-AB-CD-EF-12-34-56-78-90-AB-CD-EF& X3 R8 U1 W) |; l* {( w2 p
3 g: A& F  U/ t9 s- X. \$ G
- Inject drive key on a XBOX360 drive, load a drive key file/ |6 u/ {( h* E: ]/ W7 z- x
  DOSFLASH I 0970 A0 KEY.BIN! k0 O7 T7 U8 L& [' h( K
3 b% M/ H/ [# @) X+ ^5 g
For DosFlash drives on which we can extract the key via UART are considered V1. Drives we get the key over# H  w$ F) ^' X+ U3 C
SATA are considered V2. The new Slim is considered V3 but only firmware version 9504 is supported atm.. s/ O. x8 _, }( i, y2 o$ g
+ Q9 X0 c# O8 s, [5 a9 Q
1 y- f! r6 \; n
Many thanks to Geremia, Modfreakz, Redline99 and Tiros for their support. Special thanks to Geremia and: y% U7 }0 b8 s) U6 g
Modfreakz for drive sponsoring, testing, coding and much more. It is always a pleasure to work with you
4 ?8 U$ i: Y% q5 r' y1 y' h. }professional guys! Respect to Maximus for his UART enable patch. I'm looking forward to your magic Lizard
; c* Y" b; ~9 S" B. `- Fhardware flasher!; V$ @8 P; K$ t4 `- J" D7 i

: q6 \8 ?9 @: K! lHappy new year 2011!4 }9 w9 i: q( G  a: g# L
Kai Schtrom! B, B$ v6 c# x2 N0 H  Q4 t- u
5 A" P* r9 U$ s) s; Q
************************************************************************************************& V6 q% Q+ X2 O2 l

: q& U% A5 z7 W' |& C* `  b8 ]$ [2 t9 |) R' s) X& r5 Z9 u. k6 q
DosFlash V1.8 Release Date 08.08.2009$ \7 F& [" ^! X- Z/ {
---------------------------------------. _& K1 h" N7 {; c
- now supports LiteOn PLDS DG-16D2S 83850C V2 Geremia/Maximus LiteOn FreeKey method3 t+ ]2 V7 ?* T/ D7 ^7 N* A' X/ _- w
- huge firmware read/write speed increase, especially if run from a floppy disk  u6 w5 s% v- a, M, ~- n+ D; {
- updated IDE/SATA motherboard chipset list
0 W& A$ S6 L2 W6 x7 D9 Q- new IDE/SATA detection for Windows and DOS6 r, N( k$ Q3 g
- DosFlash.typ embedded in executable file
9 G/ @8 F5 @' g( `% I1 x- LiteOn V1 drive key is now extracted 10 times and compared against each other,6 X9 C6 R) O1 A
  after the extraction a summary is displayed sorted by the most common matches
$ O5 D+ d; K5 D- LiteOn V2 drive key is extracted 2 times and compared
1 }* X3 Z/ k- Y6 A- new BenQ unlock keys added to unlock all known BenQ drive firmwares
. D% r0 E; c/ z; E) X; ?- command line parameter "EnableDrives" removed, DosFlash asks the user on
) {8 ?2 _9 j* U  application close if he wants to enable the drives or not, during the tests it
" k( G% p5 \3 H0 o! h: T- F  seems that IDE drives have problems with the enable, SATA drives seem to # o! \" D  j3 Z+ b' h* Z
  work fine# Q: y) k1 l5 L7 ?, M+ u
- new 64-bit DosFlash edition added called DosFlash64, because some driver
' T" J& m$ t( ~% ~9 c  functions don't work as expected in the 32 bit compatibility mode on Windows x64$ L: I0 K) N" d8 ~
- Beta state removed: c& Z1 z5 G. \' X/ ^9 T
- ready and tested on Windows7 X86 and x64
1 j8 H& }  H1 d8 v1 u& A
3 O9 c& B' B3 z' m, G6 R* ?" k
" G3 W2 R1 B3 H: V( {$ ]( DGeremia/Maximus FreeKey method with DosFlash16
/ j) m) f  h3 z0 I+ q1 Z: q- e------------------------------------------------
$ W: N, w, K% n+ X3 P: TWe have added one cmd line parameter for DosFlash16 in manual mode. The COM port5 Y( h: s9 W) o4 m( M, j# b
is simply ignored and can have any value for the V2 drives.
# S& p- v# r& t6 UUse the following command line to extract your free key from 83850C:
; u" m* A  h7 j- DosFlash LITEON K 0970 1 inquiry.bin identify.bin key.bin dummy.bin enckey.bin- t' G- Q* q7 w) l) g* |0 D0 D( |
$ u( i9 M1 I5 A( X' ^( P+ a
0 {& R: S7 ~9 k  M. s
Tips for running DosFlash on Windows 79 q0 q( N, `& V" D) D
----------------------------------------
, z6 w" G+ H+ R, B0 ^7 g- @3 f+ H* I# p0 k0 ^4 O. @; [
Since Windows Vista 64 Bit and upwards it is necessary that every driver is signed. Because* v% B7 @, q4 @. g8 G& V
the DosFlash driver will not be signed by MS due to some unknown reason we need to circumvent
5 }" \6 d+ ~" l% r( r8 P1 dthis check. You have the following 2 possibilities to do this.
; C  x6 a) z# i! t! a# J! d" v  T* V- l: C: V& C
Safe Way of Disabling Driver Signature Enforcement
  j$ s; r. U' S( A6 K8 W5 `$ W1) On Windows 7 bootup press F8 to get to the extended boot options screen/ {. j- D0 b) R. x" G$ ^) O" ^
2) Choose "Disable Driver Signature Enforcement"
' ?# Q3 x: W% b$ j$ }$ \3 n3) To start DosFlash right click on it in Windows Explorer and choose# D, ~, M( C: o7 e
   "Run as administrator" > answer the message box with "Yes", i' K# q( |+ o4 Z# K
4) Short after the program started a "rogram Compatibility Assistant" warning message
6 i% k# `; _, N   is displayed, you can simply ignore this by pressing the "Close" button
6 s* ?' v- ^/ P0 f3 b7 a# |) k6 b4 Z2 y& Z
Recommended Way of Disabling Driver Signature Enforcement5 p8 D5 u9 U1 e4 T: r  v; y7 F
1) Disable User Account Control (UAC). P9 M* A( r- l% V. B
   - go to "Start Menu" > "Control Panel" > "User Accounts and Family Safety" > "User Accounts", s9 I4 n9 a9 W( _; O5 @+ C
   - click on "Change User Account Control settings"
% r! W# [$ w  @0 l- O   - set the slider bar to the lowest value (Never notify) > click "OK"
# |9 z. O0 u  r- e' G2) Sign the DosFlash driver0 ~1 G( Z" ^# G- g5 d! ]
   - download the "Driver Signature Enforcement Overrider" (DSEO) from% o; p5 V( l4 s8 x9 [
     http://www.ngohq.com/home.php?page=dseo  [' d# a; v7 Z( [
   - start DSEO > click "Next" > "Yes" > choose "Sign a System File" > "Next" > enter the path to
+ f9 `& J5 u/ a8 f' ?  e# Q$ R     the used driver (portio32.sys or portio64.sys) > "OK" > "OK"
/ o3 J8 \# l! H" ?/ a4 Q3) Disable Driver Signature Enforcement" n: _4 [, d. q: n% J( ?2 S; p+ j
   - start DSEO > click "Next" > "Yes" > choose "Enable Test Mode" > "Next" > "OK"/ B  [; m$ N. Z; s
4) Restart the computer
" j# `' {5 Q1 R% D" }8 p3 \1 z; a5 z
Keep in mind that with the recommended way the changes will have effect on every reboot without
9 n; k1 v4 ^; b2 t* e7 K+ \, n+ Y& Pdoing anything manual. The first way needs to be done over and over again. In addition the second# l( d* K( V8 O! q$ k
way can be used to sign every driver that doesn't run natively on Windows 7./ o8 h) t6 P, D) K5 u' M: ?  O) U  [

& C: Z" Q, e5 u- UFor use of the VIA Cards in Windows 7 it is recommended to uninstall the VIA driver. This can be" B# m# `# w% l) |  e+ B
done like follows:
$ O# ~, M9 U& J1 `2 \- start "Device Manager" > expand "Storage controllers" > right click on "VIA RAID Controller" >
2 C* x; \; p7 V* R) D1 c  choose "Uninstall" > "OK"1 s4 j2 G0 R  ^, s$ H- t
- rename C:\Windows\inf\vsmraid.inf to vsmraid.inf_( }6 _- W/ ^1 Q* i7 R0 h: g5 w' d
- rename C:\Windows\inf\vsmraid.PNF to vsmraid.PNF_
  h& I& B( o2 h8 X  \$ l8 _) C- rename C:\Windows\System32\drivers\vsmraid.sys to vsmraid.sys_' d) [) p8 r- Z/ v) v+ B
- reboot computer
: |; k: h& P6 j; s2 u0 |% W* H% g5 n6 \5 f. b% f# g( q9 k
$ T7 i; a/ T+ h8 V- `# a+ S; G" h
Much respect and credits go to Geremia and Maximus for their money saving FreeKey app
9 S8 }) v7 C$ j- H5 sand their lightning like decryption speed!
7 G! N0 G! E4 F
$ C# [$ N5 v" W- L% Q9 u' \" @* FIn Dedication To The Birth Of FreeKey On August Fifth 2009
; q' Z6 Y3 q2 v; [% ?Kai Schtrom9 T7 |5 C# @) a* U
. R; O& d, I# I$ E

; P  s2 t* m3 A8 i3 J& ]************************************************************************************************
" U6 i: A) a. A$ g! |" o+ |9 Q
% Q) i. ?  t7 K; w! k
5 {) D) R% r( h. u- d( v, S% iDosFlash and DosFlash32 V1.7 Beta Release Date 23.12.2008, M8 P8 Q- R/ }7 v1 Q( F& }9 z
-----------------------------------------------------------
8 ?9 I: p5 w: q- now supports LiteOn PLDS DG-16D2S 74850C and Geremia's LiteOn Erase and DvdKey method  v9 R! v6 ?5 s( V& Q1 f3 o& E6 ~
; c0 l/ m& J2 P7 V0 z' Z
" K& Y9 m7 K8 t  y2 v5 V
The following only applies to the new XBox360 LiteOn drive PLDS DG-16D2S 74850C.
7 ]$ l; p7 X/ n" Q& Y& p4 @7 q' I6 v; [, A$ i& R

- U8 H0 @4 P4 r4 b' ?Geremia's DvdKey method with DosFlash16 with the PC's psu4 q% b0 E0 ^; a$ v0 N! x4 d
-----------------------------------------------------------* }. [, B4 o2 R8 u& @5 H+ H
- disable CD-ROM boot option in BIOS' h; ^4 D: o( d' _
- connect LiteOn to your PC's power supply unit and SATA port
# I( b# n4 v" a- w: ]7 B- power up PC, wait until bootup is finished
7 P9 w5 l; U6 Y- eject tray of the LiteOn and shutdown PC completely
9 L4 m  \: \6 X- Z- S- push the LiteOn tray half in6 w$ J/ r3 j+ C
- power up PC and boot into DOS' m! h: e- k" f& m" @
- run DosFlash16 in auto mode" N7 A" K+ f4 K7 j
- if you read the following:
5 b' F6 |+ V. G1 T4 @  i( l  MTK Vendor Intro failed on port 0x????.
) U# }0 c( U9 e  If you choose to resend the command you should turn the drive off and on% Z0 d) H; C) o1 X
  after you pressed "Yes".
2 O& b4 V$ r, O) t- F3 F1 |4 h6 {- L  Do you want to resend the command until the drive responds (Y/N)?
5 O6 P5 P* {  l  T! ]6 Y/ y- press 'N' for "No"
1 X+ }5 G& X! {/ O, @7 M) O- choose the number of your LiteOn ATAPI drive
; U# y3 I/ L  Q( X5 ^& b- N- enter "LITEON K" to read the drive key
! Z5 q- ?) x( _" s0 [9 W- type the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files$ f1 ?0 j2 f( U  ]
- enter the number of the COM port+ ?4 O8 x1 t( I5 j3 ?/ n- r; K
- if you read the following:4 M) c: S& `: a; k+ J% R
  To receive the drive key use Geremia's DvdKey method like follows:/ |7 O3 T( L8 p% ^2 [6 `
  - Connect your drive with a serial cable to the COM port
' i8 C2 \( y4 C. x: B/ X  - Eject drive tray
, \1 C+ A9 i) r. ~& c  - Power off drive
! S$ U6 H( t6 c; o, M+ G  - Push drive tray in until it is half open
; [2 }2 V+ J+ U/ _& l# S  p3 R+ j/ t  - Power on drive
$ ?' u1 N& I& i  - Press "Yes" if you are ready
( i3 |- \1 Z* ]+ y+ ]! ~    Are you ready (Y/N)?
/ S6 o9 q( N0 _) |0 R- simply press 'Yes' without doing anything of the above, because we
7 o) G- z2 L0 E# j7 Z4 m  already did that before, D" y6 m# q& g) H. B
- after this DosFlash16 displays your DVD-Key and saves your key and identify data' g9 j+ E& M# }% `1 I
- to do the above steps in manual mode use the following command line if your drive
& ]/ K: s3 D% J5 g2 H  is connected to port 0x0970 and serial cable is on COM port 13 B8 F# m2 h/ r! J& h3 L3 k; e: |
  DosFlash LITEON K 0970 1 inquiry.bin identify.bin key.bin dummy.bin! }( u' f$ I  `2 ?' L4 o
0 P2 Z' K) o2 M8 g9 o$ N8 l
8 u: V2 f2 a) K  J& ~- U
Geremia's DvdKey method with DosFlash16 and 2nd psu
8 N8 f1 w+ Q- D5 V-----------------------------------------------------2 V* Y$ E2 I* f2 Y3 R
- connect a separate power supply unit to the LiteOn, don't turn it on yet
, N1 W4 ]3 E4 G8 W- u! |- power up PC and boot into DOS0 \6 ~. ]# e, \' S2 Y% s+ D
- turn on the LiteOn psu
* c$ W  Q* F2 i* m/ v- run DosFlash16 in auto mode
- ?0 Q- _6 e. ]% H2 \- if you read the following:) [) d! O- G$ ~* I- A2 x6 l
  MTK Vendor Intro failed on port 0x????.# j1 E4 d* T# n3 |3 |# L. I. W: {
  If you choose to resend the command you should turn the drive off and on
  y7 K6 F' C% [0 Q  after you pressed "Yes".
3 y' k' Q5 V  ~  Do you want to resend the command until the drive responds (Y/N)?5 ?# S2 |6 q  {
- press 'N' for "No"$ X4 C2 \0 A8 a# ^' k
- choose the number of your LiteOn ATAPI drive
1 o% b; a$ y- Y* y: B# T- enter "LITEON K" to read the drive key0 U3 p0 H6 N, \/ Y. z: W
- type the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files! Q. d. R4 w! o4 u
- enter the number of the COM port
! N# v) r' m9 a" f( G, u0 {: z. l- if you read the following:$ @- V, C1 C- k) {& }# L
  To receive the drive key use Geremia's DvdKey method like follows:3 k  v  |( |3 L8 s+ R. @  T
  - Connect your drive with a serial cable to the COM port6 l- X% y7 b, V1 q* Y
  - Eject drive tray) L/ N  ^* w. \
  - Power off drive
& I0 W# f& {9 o/ W4 j7 T- p  - Push drive tray in until it is half open0 ]! Q/ @' x7 |$ l* T7 F' m; `: ~! t
  - Power on drive, v" _; w- K8 O: z6 l( q& N
  - Press "Yes" if you are ready! h! V3 s) U% `! k* {' R4 q6 [
    Are you ready (Y/N)?8 J* Y1 V3 O# y9 F# s$ r
- do the above and press 'Yes'' F- q. ?0 f- y2 l  w* a& ^" Q5 q
- after this DosFlash16 displays your DVD-Key and saves your key and identify data
( m. ~: S9 i  O3 b! j+ @) h5 q+ g
9 I% m& P4 l: m, R$ {) n3 u$ W2 k2 J$ N7 k" G
Geremia's LiteOn Erase method with DosFlash16 and 2nd psu6 ]" }5 y0 @- R% Y* K( f7 T
-----------------------------------------------------------
+ f/ ], }' J- L- connect a separate power supply unit to the LiteOn, don't turn it on yet* {% d& S% F5 b
- power up PC and boot into DOS: Z% k* Y# d5 b
- turn on the LiteOn psu
9 A7 h9 m% Y( Y! \  M# G2 {- run DosFlash16 in auto mode( r, t% ~( t. [7 ]8 W/ `
- if you read the following:
2 j$ Q- A# b) K$ e  MTK Vendor Intro failed on port 0x????.
! y' J/ k4 F9 S7 C  If you choose to resend the command you should turn the drive off and on, x' _+ E. r$ Y" J6 k. P: D
  after you pressed "Yes".
* i- a: \! L* V: u! \  _; U3 G  Do you want to resend the command until the drive responds (Y/N)?* e" {. `4 T  z3 d3 c7 {  }8 T
- press 'N' for "No") B8 r+ O8 T; p2 F
- choose the number of your LiteOn ATAPI drive
4 l9 f2 k( h5 I7 I1 \6 y" s- Warning!!! Keep in mind that you will need the drive key before you erase the flash,
7 B3 W' ?) y% T! W* `: F7 `0 c0 B  without the drive key your XBox360 will not work anymore7 N5 n- v  X' ]' W5 w% s' s- T( F
- enter "LITEON E" to erase the flash; @' O0 D. M1 I$ C+ y
- the first time after the LiteOn Erase the drive needs to be repowered to give6 h: l( O$ f# b: h& ^! X- O9 X* E% {
  flash chip access, this can be achieved by repowering the drive before another2 K! }- R- H7 b" _2 e: u6 s
  DosFlash16 start in auto mode or by doing a MTK Vendor Intro Power Brute5 b3 F' P' o* K0 S+ N5 Y
- in my tests it did not work to power the drive with the PC's psu, because it will7 J( [6 V/ p4 S
  always respond with busy status
2 Q* r$ m) q* }  Q- DosFlash16 can now read, write and erase the flash chip like usual
) N( s  |" S! _3 z& P3 U0 U- to do the above steps in manual mode use the following command line if your drive
5 M, E* j; Y8 ^: Y; ?* P  is connected to port 0x09709 g7 Q# ?' ]1 D$ F
  DosFlash LITEON E 0970
6 }/ j0 w7 J! x7 _% ^, v4 d- g* V* A4 L; ?  b
0 Z* D  ^7 U# u" A
Geremia's DvdKey method with DosFlash32 with the PC's psu& q$ B+ \  _: H( H$ ^( r; u
-----------------------------------------------------------/ Z" Z! U1 h' F
- disable CD-ROM boot option in BIOS+ \7 b7 I0 X2 z7 |' X. M
- connect LiteOn to your PC's power supply unit and SATA port, m1 v7 l% m; n
- power up PC, wait until bootup is finished; V) B$ g0 e9 _& w
- eject tray of the LiteOn and shutdown PC completely  A3 x6 h" @% ~" h( q7 ^
- push the LiteOn tray half in  a0 M  Q! I0 p; e0 X; H
- power up PC and boot into Windows
% G( b1 Y1 }5 L& b3 [- run DosFlash32
( V5 M2 I/ M( U. c0 t& }- if you read the following:
3 u# S- S- Z2 @" G! ~, l) }  MTK Vendor Intro failed on port 0x????.( F: X5 n$ q; e: ?7 r5 I' h
  If you choose to resend the command you should turn the drive off and on/ B; i  I9 T) q5 e" c. R
  after you pressed "Yes".! i6 B5 R6 |# [! V( A- h8 N6 O7 X& F
  Do you want to resend the command until the drive responds?/ `. r6 u$ V; B3 O! [+ N
- press 'No'6 a4 l( ?; F2 \$ ^) g
- choose "LiteOn DvdKey" as flashing task, f5 @8 T  [% w3 f) _( M3 c" V
- choose the COM port number
, `$ x3 j% j: I1 s) c/ }. l- press on "LiteOn DvdKey" button
5 n2 x$ r' Z+ t$ q8 K- enter the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files% y4 Y3 h4 X0 E* j. O
- if you read the following:
) ^4 \  n, S9 B4 |  To receive the drive key use Geremia's DvdKey method like follows:3 `7 H: b3 \  P) A) T& o9 X
  - Connect your drive with a serial cable to the COM port/ K* N- H$ a4 V8 T. k6 u( u
  - Eject drive tray& z9 h3 F' K! ^: c- ~: a7 p% X0 k
  - Power off drive; Y/ W: L$ W5 r& R! t
  - Push drive tray in until it is half open# H7 F1 }0 t7 }& ^
  - Power on drive
9 o; L6 p: f+ W  }/ V  - Press "Yes" if you are ready' p( H9 G0 ~0 O$ |( ]7 l
    Are you ready?
; A, X& v) C" }- simply press 'Yes' without doing anything of the above, because we
2 z, A, ^0 l: y) {  [) I, g3 @  already did that before- E3 K( O. g& n, J4 g! \! [
- after this DosFlash32 displays your DVD-Key and saves your key and identify data- L2 M/ H, _3 n2 m+ U" x8 q
3 V, Q. e) u! T6 I! O6 m% o
6 d9 N" n$ r7 X' j* n
Geremia's DvdKey method with DosFlash32 and 2nd psu
* S, R/ H1 L8 q5 u: M-----------------------------------------------------# }5 k* W+ F2 o0 f" }* g7 H: M
- connect a separate power supply unit to the LiteOn, don't turn it on yet% X6 P( p. v+ }( m1 X
- power up PC and boot into Windows( f5 q- f4 r8 o" u: |! c
- turn on the LiteOn psu% X, C( L# ?: p& g4 u) t& j8 H% ^% x
- run DosFlash320 ?' q0 D# S# G# z. u
- if you read the following:
8 l8 G) o& [  r! Y2 I5 y  MTK Vendor Intro failed on port 0x????.
! ~5 E( L+ [+ i- ^  O6 S1 M  If you choose to resend the command you should turn the drive off and on, Y7 H" w% @- k# t- ?4 w/ Y+ U- z1 o
  after you pressed "Yes".% ?* V: s6 z" |
  Do you want to resend the command until the drive responds?5 T, f/ Q; a. f) Y9 t
- press 'No'# a7 G) F( g7 t9 D
- choose "LiteOn DvdKey" as flashing task  X4 g+ J  R6 `4 }6 Z3 U
- choose the COM port number# |$ i" k, f* k: h0 E# X2 ?
- press on "LiteOn DvdKey" button! p2 P3 B  r& I" y5 X2 ~2 ^. I$ [# w
- enter the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files+ A  c$ V% j+ k8 c/ m% d
- if you read the following:' r# u8 }- q) Z- f8 S- m5 l
  To receive the drive key use Geremia's DvdKey method like follows:) |3 J5 P8 Z. E  g" [
  - Connect your drive with a serial cable to the COM port% r2 }; R& {0 A3 V. y7 z
  - Eject drive tray. Q& @2 G  G, ]* a; j8 [
  - Power off drive
" I& v  J+ B% P% h  - Push drive tray in until it is half open! q/ G: x  `0 e/ n0 z3 W$ R
  - Power on drive
1 O0 g& O* Q& }8 H$ o; X1 M) p0 _8 }4 Z  - Press "Yes" if you are ready7 }% ^4 J) S5 N* ?
    Are you ready?! s9 [0 k' K5 Q) ^& H) r1 f
- do the above and press 'Yes'
* `! {9 ]# P% }' |# L- after this DosFlash32 displays your DVD-Key and saves your key and identify data, ~( b' ^' h# l

- M& f4 ]* o' d( N7 N
4 n4 F0 k- a, P5 N9 e) ZGeremia's LiteOn Erase method with DosFlash32 and 2nd psu
$ `: j: V, |' w* t( n% |, f' f-----------------------------------------------------------7 f  I% \  A* ^/ \2 {
- connect a separate power supply unit to the LiteOn, don't turn it on yet
/ t0 {9 A  ?& b* Q8 P- power up PC and boot into Windows
- ~) n5 V3 Y- V7 W3 V- turn on the LiteOn psu6 z: F# c& N5 }& v. C
- run DosFlash32; Y( |6 ?. p' i3 \6 O
- if you read the following:
  a& [/ Q3 R; C' d  MTK Vendor Intro failed on port 0x????.
' |4 L4 m" b7 ?  If you choose to resend the command you should turn the drive off and on
/ o, L& r, u1 X* Y( c5 P  after you pressed "Yes".
. c  {0 k+ `- ^8 O. D( r  Do you want to resend the command until the drive responds?4 q1 ^. x  @# A- Y+ S
- press 'No'
6 |/ {0 m1 f- x. x; E* P' l- the LiteOn flash is not identified
3 T4 }# E/ V/ `  b( W! m; {2 p) t- choose "LiteOn Erase" as flashing task
! A7 S0 G- P, I/ C- Warning!!! Keep in mind that you will need the drive key before you erase the flash,
6 V: r/ P" b. K* v+ O' \  without the drive key your XBox360 will not work anymore
' i; ^5 F' `8 `1 z* y3 N5 C6 n- press on "LiteOn Erase" button
) ~" S# N+ H5 V- H3 M$ F2 L/ f- the first time after the LiteOn Erase the drive needs to be repowered to give0 j5 }. {' F/ s: ?1 k! o# a3 @
  flash chip access, this can be achieved by repowering the drive before another
- r0 y6 F3 p! R4 R  DosFlash32 start or by doing a MTK Vendor Intro Power Brute
5 n9 w% K0 Q8 Z* `# n- in my tests it did not work to power the drive with the PC's psu, because it will0 Q5 h& F$ k7 T5 Q$ G: |$ \
  always respond with busy status2 |- B/ W9 V: j1 L1 \5 r
- DosFlash32 can now read, write and erase the flash chip like usual
4 E5 |3 t- r1 G" J
+ p4 b: _9 |' [, G# f, t( o
5 s& v" Z( q+ W) W- q# T7 j! K! ^Respect to Geremia, Modfreakz, Podger, Redline99 and Tiros.5 w/ d! @$ m9 Y, n# X% _2 M# ]

  ]2 t( e# y3 w& b, _4 z6 [% JLike a wise man said: "0x2E is the MTK Intro of Death"
) J* N6 C9 n; X7 ]( H7 ^Kai Schtrom- ]% f- `' u) E
2 H& {! p' A. r8 s

1 K7 H  k7 s6 h" H************************************************************************************************
& b5 ~& k! }1 @' t& N* Z  a7 }! Y% a

' \# h; g  Y1 dDosFlash and DosFlash32 V1.6 Beta/ G/ g5 o) K) l+ N  {. ^5 S
-----------------------------------1 J8 r7 h) u  u' |2 _. l$ b
- fixed power brute unlock bug for VIA cards, this can stop your VIA from working# {5 W$ q. i* l' ]
  with the power brute unlocking in Version 1.5% T) p/ n( i0 V: }" a5 C
- for DosFlash16 in auto mode on DOS my VIA card works best if I do a cold boot2 M7 B; g- {" i' ]
  and power up the drive short before or with the PC% Z8 I5 J9 |0 p/ h, m: H$ K
- for DosFlash32 on Windows my VIA card works best if I power up the drive short8 L" F( Q0 D/ C2 J9 m  j# g
  before starting DosFlash32# ]2 D( \4 c: R1 w9 i( G- s
- for me the VIA works with internal and external connectors on DOS and Windows
/ Z; Y9 p0 e8 W. \9 U$ g0 s! C0 l& }
4 p" @: i; S; A& CSorry for the trouble!
  e# J, r7 S! W5 C' b# d6 k; FKai Schtrom
5 }! x1 \& x6 S
/ d$ C8 r& y( n  K( l$ e! q$ C8 f: U6 p2 k  i
************************************************************************************************
! [% o$ u8 H' z* k& D5 N/ Z) N- s1 A1 M: g

! h/ w, z9 |% E) E! q! U5 l6 bDosFlash and DosFlash32 V1.5 Beta
2 I( G" E/ X; c( a3 T8 i-----------------------------------5 C0 s) n0 n; }  Y+ S0 m  S
- now supports serial flash chip MT1309E with mediatek status 0x72 like the SH-D163B, SH-D162D,; i. Z  [& d  K8 I
  Asus DVD-E616A3, Asus DVD-E818A3, Sony Optiarc DDU1671S
3 E5 z- o$ R9 p: T( M- SST25LF020A and SST25LF040A chip support added8 N/ D: ^; q9 A: ~
- DosFlash32.exe ported from MFC to plain Windows API, exe size is now 22 KB
" X+ U2 {& c# z- new port i/o driver, because giveio.sys can't be compiled for 64 Bit Windows) k$ O9 ^8 s8 P% Y/ R
- DosFlash16 changed slighly in manual mode, one parameter is added to support SST25LF020A and
8 r0 ^# @* H0 z% b  SST25LF040A
, Q/ u9 A3 `& b( z$ K$ _6 }- two new methods of BenQ soft unlock are now possible on all motherboards with only one power; g, K1 b9 P+ L& t1 j& L
  supply unit# o9 L1 U2 I* _$ O. X
- 1st method is powered by Geremia's unlock core, thanks for the complete idea, concept and! D3 H; `$ N( k% y
  source to Geremia
& Z; k& R: d, S8 x- 2nd method is the Magic28 key send, this only works on BenQ VAD6038 firmware, thanks to4 n* E7 }, T# o
  c4eva and podger for the initial idea
# U/ W+ X  R; ?( T- the two unlock methods are send one after the other if the drive is a possible unlock
, E: C9 m+ P: ?# M7 E0 ~9 a1 X  candidate, first the Magic28 command, then Geremia's unlock commands and after that the. R. v0 Q7 P9 q, [
  already known power brute unlock is send to the drive, you can cancel any of these methods
' O3 L3 U# U# y+ X' W  before they are send to the target, this only applies to BenQ drives with a locked flash  `! @% U# ^& A2 i7 j
- DosFlash.typ updated
% e6 H: H: T1 b6 H5 a- other minor improvements
1 K' v' @' e) m- V( U2 i- DosFlash32 is now ready for$ w" T2 X/ t# R
  - Windows 2000
: Y2 x+ [- d( x7 S3 |( [  - Windows XP 32 Bit
* g+ p  Z( y4 m) e/ m7 |$ W  - Windows XP 64 Bit0 n2 f. N8 O8 |0 z
  - Windows Server 2003 32 Bit
  K# `$ l$ b" E- z" O' Q  - Windows Server 2003 64 Bit
) {0 ^% c. N1 W  - Windows Vista 32 Bit% M2 U: k! z, O5 u; S+ B
  - Windows Vista 64 Bit4 C0 r9 l# k% h4 V) {' d
- Warning: Drivers for Windows Vista 64 Bit need to be signed, because we can't afford the
# f' x" d! }. a- p  money to let portio64.sys sign you need to do the following:( a! [. q; m4 x( ?$ M& E9 x( ]
  1) Log on as Administrator
3 y1 i# y6 W& n8 a( _  2) Enter the following command in a Dos-Box:
7 t3 |  G. Z: I- j/ D8 n     "bcdedit -set loadoptions DDISABLE_INTEGRITY_CHECKS"
5 |% P% ^/ y  t) I8 x* T4 G( [     (we made sure there are no typos in the line above)
7 I+ D4 l0 q4 y% g- R  3) Press enter and reboot your PC! |- U4 w& ]2 _
  4) Press F8 key upon initial system boot up
! L1 l- ~, t+ a  5) Choose to disable forced driver signing enforcement for that boot session
1 E  s, g' \& X, \& S% o
/ J2 \5 G/ \: |6 a
) G2 n" W8 ~0 a4 tThe following only applies to drives with a locked BenQ flash.
4 D4 s0 s" E, @1 o0 l2 g+ R5 Z! H  U* S2 Y- Z; J1 A

, D" e1 L. l- S8 ~$ \& N! m  U( a  IGeremia's BenQ unlock with DosFlash16 / DosFlash32 on any motherboard with the PC's psu6 s7 q+ _* g3 |# [
-----------------------------------------------------------------------------------------
5 O5 e/ N. b+ G8 A$ U5 k/ L* j- disable CD-ROM boot option in BIOS- E( @  T/ F  ^3 G6 }9 Z; n& P
- connect BenQ to your PC's power supply unit and SATA port& H+ N8 U+ c) N
- power up PC, wait until bootup is finished
( z  c" z  g# \7 |6 h+ A- eject tray of the BenQ and shutdown PC completely4 ^3 v- }& ^: z- D
- push the BenQ tray half in
3 Z8 @1 M& ~/ o" V3 N, n- power up PC and boot into DOS for DosFlash16 or Windows for DosFlash32
8 k7 @' ]! t! g0 n( `% Q- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows
4 `$ G0 z1 d0 I; x4 I- if you read the following:+ b% P; f5 L2 A# n( h
  MTK Vendor Intro failed on port 0x????. Because there seems* }! O" b0 }: J
  to be a BenQ drive connected you should try Geremia's
. Y8 o% r9 {) a: n" E3 w, W3 g+ H  unlock method.
% ?9 Y& D; Y2 n/ i$ c& g  - Eject drive tray
7 w5 @, O( O  l* }) @  - Power off drive% l3 c! d9 k1 T; a+ ]  @
  - Push drive tray in until it is half open
& R- T" K  W! I$ j9 I, `- z  - Power on drive+ f: A6 P9 W' ~9 }3 Z) g% g
  - Press "Yes" if you are ready
/ @) u) O& _( [* ]0 t. i3 g    Are you ready (Y/N)?% E% i  N( p8 M7 k
- simply press 'Yes' without doing anything of the above, because we4 T& h0 q- ^, i9 Y- w3 a. ^
  already did that before starting DosFlash16 / DosFlash32
7 F' i$ @) F4 T. }) J) t. T- the BenQ flash should now be identified/ m2 \; [8 C' j2 ?" w% q
- go on like usual$ u/ g: j. B- B2 h( v( Z

0 S6 y) z9 Y: E! s5 e9 M: o( G- d% p2 R" x% v% `% P
Geremia's BenQ unlock with DosFlash16 / DosFlash32 on any motherboard with 2nd psu% C4 r* }: g7 U2 B1 \
------------------------------------------------------------------------------------
5 _3 a, Z% j; W) S' e' n, {- connect a separate power supply unit to the BenQ, don't turn it on yet) J" w; a1 f0 }8 e0 I: x
- power up PC and boot into DOS5 A2 V$ \* V5 c4 U3 E! R7 H
- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows* ]1 z0 M! V) v) g) T* M7 z- k
- if you read the following:
4 N! O3 s1 s: Y: w0 q: `" c$ I4 f  MTK Vendor Intro failed on port 0x????. Because there seems$ B2 O( k7 ]; T/ ~$ q8 C# \
  to be a BenQ drive connected you should try Geremia's
- @( }& q* n3 B  unlock method.
' H! s; z# s- f  - Eject drive tray
1 C6 K" V' P- u5 P  - Power off drive
' k6 b* n& j1 n  - Push drive tray in until it is half open% {( O* M9 K+ Q; y5 m$ N4 r' c
  - Power on drive
- i) W. @: @" Z  - Press "Yes" if you are ready) d% s9 O- c6 h
    Are you ready (Y/N)?
) x* n% j+ ^2 i( a- do the above and press 'Yes', z9 H  t3 p% z/ g- r; C
- the BenQ flash should now be identified
3 @. G, I- Y4 `. e! A: g( k- go on like usual. }& A: \6 w' Y3 j/ |: V3 Z2 T

$ F, G% L/ Q  u) y% Z  q: Q% ~) ~" A- W  I
Magic28 BenQ unlock with DosFlash16 / DosFlash32 on any motherboard& V6 a' t: v. m) c( t& h" ?$ x! @
---------------------------------------------------------------------1 N9 P2 Q. H8 X6 b0 Z* h/ m
- connect BenQ to your PC's power supply unit and SATA port
6 w! }& i/ S/ z( [- power up PC and boot into DOS for DosFlash16 or Windows for DosFlash323 }& G2 b/ H1 g: `# q: V
- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows5 }& o/ |, T) V6 N
- if you read the following:( s1 r" }3 S  y& q
  MTK Vendor Intro failed on port 0x????. Because there seems9 n7 ]* m  J# K
  to be a BenQ VAD6038 drive connected you should try the
7 N; V  U9 J, |; G! |  Magic28 unlock method.; `2 l$ _9 z" ?
  Do you want to send the Magic28 command?0 e* v$ c6 v  z. R
- press 'Yes'& [0 y' [% A: f
- the BenQ flash should now be identified2 q1 u" c; P: `; R6 C" ]
- go on like usual
+ r0 o* W% f, T% T! x6 p4 j; g( J+ H, G9 ~6 V3 ]7 ]0 R# _& B

1 R. [. G. ~' I2 UThanks to Redline99 and Tiros for help and support.4 w7 H) B9 b1 ?* @! l: b
- [. J8 J6 g/ x; q
It's all about DOS!; t7 {) I. e$ Z0 g7 t
Thanks guys for the excellent team work!9 J7 W9 Z+ `  Y" @* P
Geremia, Modfreakz and Kai Schtrom
/ ?4 |/ o1 Q  {& F! [) S9 t$ A1 N/ K: G/ T0 j# `6 q! Y

6 {( j9 ^$ \* h0 y5 m0 E) E************************************************************************************************
4 G% J2 J: H. d2 E) q8 c' ~5 R1 K
2 {( N% W# o- _8 E* T
DosFlash and DosFlash32 V1.4 Beta
6 f( {3 w1 t- C* x6 r1 s-----------------------------------
3 ~- ]; {# L0 G; j( l* x' `& e- DROM6316 flashing support& _3 j" H7 S0 ~' E  h: R# D# x; m4 h
- a flash erase is now always done with a chip erase and not a sector erase command, because' }, D/ U* M- v& U9 ]5 t1 ]$ l$ ^
  the sector erase gives problems for some Winbond flash chips including the DROM6316
) G9 s  G3 Q- V* M; T+ C+ t* e7 u( O- DosFlash.typ corrected and updated9 \- ]8 e+ k/ u* M4 P2 t6 y# h
- for a detailed explanation on the soft unlock look at the included file SoftUnlockByIriez.txt,
% d/ L; ^0 `- Y1 ^  it contains a very good explanation by Iriez from XBS, thanks for that one!, \# N( X% d" D$ n
  A* X2 b* g, Z( p0 \
Thanks to Iriez, Jumba, Redline99 and Tiros for help and support.2 R2 E; Z2 `4 M, o  u  ~6 r

+ D2 ?$ z2 ?1 h* _2 p4 x' B; B8 wHappy DROM bricking!
8 a9 E5 N8 |( z- mTeam Modfreakz and Kai Schtrom
5 I5 m5 H4 D! ~( J2 v, J( j9 _2 y$ ?) u: v7 [3 Y/ f

/ S. w+ V5 a8 _* j$ k  T************************************************************************************************8 H8 W5 H+ e- e/ t* p( w; G; z& z

+ B7 D& l" H  h+ w
0 ]; C: R! J# E) Z5 k2 l7 |% D8 oDosFlash and DosFlash32 V1.3 Beta9 `7 ~8 `6 L& D4 M, m/ m; q
-----------------------------------
1 b3 _! ]& [5 X- S8 T* S- BenQ optimization in unlocking the flash chip, it should now be possible to read/write/erase
$ q* f( G" {( ^5 Z* E  the flash without any soldering or wire tricks, the drive is polled for the correct mtk
7 p9 a9 J+ `+ [  unlocking status after power on, this only works for VIA cards and NForce boards atm3 m* t" |9 E6 [( P7 o
- DosFlash32 has one additional parameter, if you start it with the parameter "EnableDrives"9 @; g. l- @6 Z. o/ o/ P! t
  all the DVD-ROMs are enabled in device manager after flashing, this could give BSOD on some
8 ?) i: v) _' Q1 ?  systems, therefor you need to create a DosFlash32 link and add that parameter manual to use it
; z' k( Y+ F) [5 ~4 M- DosFlash16 has one additional parameter "Send ATAPI Device Reset" in manual mode, this could
4 }" w/ X3 k1 \+ j4 o! k  give better chances for soft flashing on some VIA - motherboard combinations) v8 e. e8 s0 R2 b! ?. o
- better support of Intel chipsets, drives can now be flashed if the controller is not set to4 S0 s3 E5 ~6 ?2 T' E
  native mode in the BIOS
: p" Q" F* K7 v- the following controller list includes vendor and device IDs that are hardcoded to identify
) Z, p' V% E1 P/ J  the controller type (IDE or SATA), this is needed if the BIOS uses IDE ports like 0x01F0 or8 E+ e$ m2 L/ R% g- j$ i
  0x0170 as SATA and not as IDE channels, this list is NOT related to soft flashing
1 L8 e( d1 _- t6 _1 _, g- the following chipset support is added
5 R& M, w! g7 n9 J+ y  - VIA cards
. u& Y" e* u2 _% Y; T9 i    - all VIA cards with a 6420 chipset) @' C0 o4 M' J; k& c6 I. x% i
  - IDE Controllers
& Q7 X' _3 M: V# U( y    - NVIDIA nForce 2 IDE Controller4 s; Q5 u4 X: i; S) T. p2 b, I
    - NVIDIA nForce 4 IDE Controller1 G: E' ?9 E8 t" h; `/ |4 |
    - Intel ICH98 [! s$ U" g2 [9 S2 z' D6 H
    - Intel ICH (i810,i815,i840). Y! r$ Z1 I' G% }& n
    - Intel ICH0
3 i0 B( E, u5 I8 M1 h6 G    - Intel ICH2M
( n+ P+ ^% Q! w1 X8 Y3 M8 m    - Intel ICH2 (i810E2,i845,850,860)4 p6 v$ e! [/ N3 W0 D9 m
    - Intel C-ICH (i810E2)
) a' i; O2 H6 K% [# J; c( K    - Intel ICH3M- E/ l% p  I: l2 |& A& d! ]
    - Intel ICH3 (E7500/1); F. F! a, V5 k; z8 x8 m$ `
    - Intel ICH4 (i845GV,i845E,i852,i855)
& Y5 x2 w( T. x6 ~3 x    - Intel ICH5
- D: u* H8 D2 H1 k0 A    - Intel ESB (855GME/875P + 6300ESB)
& i( p* X: }3 p/ V4 S    - Intel ICH6 (and 6) (i915)
- `& D8 I+ L6 \% k    - Intel ICH7/7-R (i945, i975)/ M$ B4 M! x2 N5 e. [; }, s
    - Intel PIIX3 for the 430HX etc. W+ ?. q& x% l, J1 r3 I( [
    - Intel PIIX4
! w- [; W8 `7 Z) Y2 q    - Intel PIIX4 for the 430TX/440BX/MX chipset
% T9 L0 ^. E8 O$ X    - Intel PIIX
6 J$ k, {+ s; U3 u4 X  - SATA Controllers* U7 {+ r( E7 G* G5 e, ?
    - NVIDIA nForce 4 SATA Controller% k* b' w: D8 O4 e4 Y
    - NVIDIA nForce 2 SATA Controller5 ?+ L- {- |3 ?3 k/ v" C; h; N% H
    - NVIDIA nForce 3 SATA Controller
1 _, n, j/ A$ w  h    - NVIDIA nForce MCP04 SATA Controller
  s+ o3 i8 ^% h# T4 _6 O    - NVIDIA nForce MCP51 SATA Controller: f! a4 ^  @; l/ z6 o) v
    - NVIDIA nForce MCP55 SATA Controller
: `1 F- l9 s4 x1 Z    - NVIDIA nForce MCP61 SATA Controller# @9 @# m+ i+ n- O. A6 F
    - Intel 82801EB (ICH5)
; x: w' r0 f& D" ^; }! J    - Intel 6300ESB (ICH5)8 [. J) V5 V+ `" p  B1 j6 {4 Z
    - Intel 82801FB/FW (ICH6/ICH6W)2 L/ ^. g* d: U! d& o
    - Intel 82801FR/FRW (ICH6R/ICH6RW)* Z0 m+ b1 ^, t
    - Intel 82801FBM ICH6M6 s. J0 Y) ?; ?/ I# j  g0 n* a
    - Intel Enterprise Southbridge 2 (631xESB/632xESB)
  {, B+ L* X2 M) h    - Intel 82801GB/GR/GH (ICH7, identical to ICH6)
) l4 v/ }( p$ F) Q+ o    - Intel 2801GBM/GHM (ICH7M, identical to ICH6M)
) G2 q* B/ ~) e- e& u+ I    - Intel SATA Controller IDE (ICH8)
; q/ J- E' t1 w% H8 {0 O    - Intel Mobile SATA Controller IDE (ICH8M)0 p3 T  P2 G, U& p% H
    - Intel SATA Controller IDE (ICH9)
/ j% U( h  R" i! L: \    - Intel SATA Controller IDE (ICH9M)5 d1 A3 U1 h. K- j' L9 p; Y

$ _$ d9 _0 N8 B1 D6 h9 M
2 c& Y. {* h+ q  Y; WThe following only applies to a software flash on a locked flash. The methods have been tested
) f4 E! u+ t4 o9 h  C7 uwith the BenQ and the Sammy. The VCC trick will work on any motherboard, but you need to do
# H3 F4 z' C0 S' i" c, R$ p3 Nsome soldering and cut traces.
- c' k; B; \2 E' X$ X
. A" R9 l1 u- Y/ W1 O: O" j, D# b3 a4 x5 J
Soft Flashing the BenQ in DOS with a VIA card and DosFlash16 in manual mode- O4 @1 p$ m. e9 H
-----------------------------------------------------------------------------
# O% j, `  K6 Q3 I. ]- Q% d$ Q- first you need to know the port addresses of your VIA card, you can get these by starting
% F1 T$ `8 L" |1 @2 E' F  msinfo32 on Windows XP and looking at the port listing for SCSI devices
4 o3 a  e/ Q2 D' q4 ^# `! S& B- for the 6421 the 1st port is internal SATA, 2nd is external SATA and 3rd is internal IDE$ C" W2 m; i- m/ E; ^8 L
- for the 6420 the 1st and 3rd port are internal SATA* N. b8 I1 i) n$ c" P/ E
- you need the starting address e.g. 0xD000 or 0x7000
) K3 c9 m+ U$ G: k( T9 {* I- be warned that these addresses can change from computer to computer, they are assigned
/ e; J$ A' r+ H  at bootup, but Windows XP should display the ones you need for flashing in DOS- h- ~8 @/ i/ L# @/ ?
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or 7 k4 F+ \, S' l3 G* {
  Xecuter Connectivity Kit)! e2 f' k9 r5 [6 I4 N/ ^
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we
$ E1 m: d1 p+ ^# X  @  need to power the drive off and on during soft flashing" w/ i% t$ {3 v' _4 U* x- ^
- cold reboot or reset the computer
+ M" [& N4 q- F1 b- boot from a DOS disk, I used a Windows XP MS-DOS startup disk
6 T# {. o9 \' b0 k6 h- at the prompt type: # `, U* `; i! i% |7 i- ^; [' q
  DosFlash r 7000 1 a0 1 4 a:\orig.bin 0
, a# i7 E' M5 r/ s7 J' u" H% S* S  - instead of port 7000 use the starting address your VIA card uses+ T9 R  I5 h5 W5 E
- press return5 W! T8 `% R0 S3 D. K
- DosFlash16 will ask you if you wanna resend the mtk vendor intro cmd, press Yes, ~: f  A% x) Q# x" }
- after you pressed Yes the drive status is shown on the screen, it's something like 0x7F,8 T; i, X& g# Q! S+ e) z0 \
  this will change during the next few steps
. e. a) P- d* P4 K6 v- turn on the BenQ psu and wait 2 or more seconds, status changes between 0x51 and 0xD1( K" ?6 ?- d( w$ T9 N* `; i
- turn off the BenQ psu and wait 2 or more seconds, status will stay at 0xD1
" u, h' r1 x. y+ _' S- turn on the BenQ psu, you should get a good drive status 0x73 and flashing should start6 p- k( R: i* R' @: _/ R, z
- this worked only one time after the computer is powered on or resetted for me
. j' z$ q; `' f' u8 ~4 Z# x- writing and erasing works the same way( U0 {; L' ?" {
- for writing type:% H9 L9 q+ r* C3 u  n  p  R0 S/ r
  DosFlash w 7000 1 a0 1 4 a:\ixtreme.bin 0
) r/ O" n! Z3 w) T+ p8 w- Q- for erasing type:1 m% g) \* M( L6 j" I+ X  t
  DosFlash e 7000 1 a0 1 4 D8 0 (D8 is the sector erase opcode for the BenQ flash, if you need
) T: G. z$ \' r' i  to erase another drive, lookup the value in the datasheet or DosFlash.typ)
- x- A" I4 ^2 D3 }3 H2 g, E8 u- if you experience any problems try to use 1 as the parameter to the ATAPI Device Reset, cause
  n8 m5 m1 A1 A3 G! l  the same VIA card will react differently on another motherboard sometimes
' a( y) M+ d- v& k+ |$ ~
( O: Y" |5 g2 s) h/ N! \3 o4 ?" n) I0 O
& \- W) C$ k  T$ ^3 M2 \( aSoft Flashing the BenQ in DOS with a NForce motherboard and DosFlash16 in manuel mode
5 P: A: O) X9 J, u% R2 O  f1 P  E---------------------------------------------------------------------------------------* u( I+ K6 ^  W% h* c
- first you need to know the port addresses of your NForce motherboard, you can get these by 5 N9 z5 n6 e4 W, E2 M
  starting msinfo32 on Windows XP and looking at the port listing for IDE devices2 ]/ y3 B; Z! f6 O, e  f+ I" Y
- on most motherboards the 1st and 3rd ports are used for SATA1 v8 G; }' E$ G* {7 r% {5 U) r3 Q
- you need the starting address e.g. 0x0970 or 0xE900& E* F3 g9 j, v9 ^) |# A
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or
2 ^) }- V; M; g2 [/ q2 G: f, S  Xecuter Connectivity Kit)- ~/ b" H2 R( }) f2 ^4 M
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we4 O8 n5 o* U8 _& t
  need to power the drive off and on during soft flashing
% P5 T. c; M' u: N- cold reboot or reset the computer9 T! u+ p  u- e) p/ }+ K
- boot from a DOS disk, I used a Windows XP MS-DOS startup disk
/ U) L1 b1 L# T6 D! e' w- at the prompt type:
6 F" _2 g  o5 S8 N, s2 o, D5 `3 ^  DosFlash r 0970 1 a0 1 4 a:\orig.bin 1
4 J6 G4 D9 a/ c7 ~( r. ]  - instead of port 0970 use the starting address your NForce motherboard uses1 z0 b9 c: h2 f# s2 q
- press return' R; }4 B7 v  q$ p2 V, ]+ P
- DosFlash16 will ask you if you wanna resend the mtk vendor intro cmd, press Yes
3 x- b: H2 C! H  _4 w0 P+ I" Q- after you pressed Yes the drive status is shown on the screen, it's something like 0xD1,& l9 f( q0 `/ u& H) x0 l
  this will change during the next few steps& D- @+ q0 L4 y5 J; w9 g
- turn on the BenQ psu, you should get a good drive status 0x73 and flashing should start/ T9 O9 s4 C" z0 M: u: }
- writing and erasing works the same way. `  q) ^6 A0 \" V, |( J
- for writing type:
8 E1 V: d/ J" J1 Q0 I  DosFlash w 0970 1 a0 1 4 a:\ixtreme.bin 1
+ Q" V1 Q- S# O1 l3 _& P. J" z8 O- for erasing type:
1 @, O+ _) L5 I1 F  DosFlash e 0970 1 a0 1 4 D8 1 (D8 is the sector erase opcode for the BenQ flash, if you need
0 ?# C3 j* s8 p7 t; _. y& K  to erase another drive, lookup the value in the datasheet or DosFlash.typ)
' {4 B6 `) w4 ~* L2 j3 B0 z& S  v1 k2 @5 @

: J) ]2 u3 h4 z+ x* k" a6 gSoft Flashing the BenQ in DOS with a NForce motherboard and DosFlash16 in auto mode1 m2 h# b" n8 P1 ?, V- u: X1 |
-------------------------------------------------------------------------------------4 D" z1 I" e% [7 Q7 T
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or
* T9 w2 k& F( [0 k. Q  {  Xecuter Connectivity Kit). B: p9 W2 T  ~& }/ A
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we# X( K3 Y! u/ a
  need to power the drive off and on during soft flashing
8 a' I' v1 z) K# U8 u- cold reboot or reset the computer
: H( G) r& s. P$ f- }8 ?- boot from a DOS disk, I used a Windows XP MS-DOS startup disk( I9 w" N' B+ p( i9 b
- wait until you are at the cmd prompt4 n  ~2 m2 u; \4 m. s" |
- turn on the BenQ psu
( o! D# q: \) O) g  O7 s- at the prompt type:
( n$ \/ |; G) h  DosFlash
, g7 i. ^* _) P7 S* S+ }- press return# C) X8 ?; b& d" j( y# [7 Z
- during scann of the BenQ's port DosFlash16 will ask you if you wanna resend the mtk vendor
' B* [) u! ~% U9 c* A9 T0 v  intro cmd, press Yes
7 {& |% m8 K+ ^- after you pressed Yes the drive status is shown on the screen, it's something like 0xD1,
6 _: }8 V. }3 r' P  this will change during the next few steps
1 B: w' y' R- ]+ N- h- turn off the BenQ psu and wait 2 or more seconds, status will stay at 0xD1/ [/ d7 \9 g0 B+ S+ C
- turn on the BenQ psu, you should get a good drive status 0x73 and flash access is granted
2 ^! t# A3 D" ?# r0 ^, j+ T- you can now continue as usual using DosFlash
  w4 \0 c+ o. p# i8 ?- writing and erasing works the same way
9 m- e+ {" ?# _' O: @% {4 z- if the ports are scanned there is the possibility that you'll get the resend question for7 R. S' I0 f) e1 y0 }) z
  other drives like a NEC, this is because the NEC has no MTK chip and returns a bad status,
; R( P6 k- z# |  F' J! H  if you know the NEC is at that port you should press No and press Yes only if the port of
2 {; G" c; i( `4 d! T9 Q/ S  the BenQ is shown or simply disconnect the NEC" U7 F" D; ~" G4 R

8 f7 P; A: Z2 ?% @# U6 o( V1 R* P
" e- L# w& y" b# }Soft Flashing the BenQ in Windows XP with a VIA card or NForce motherboard and DosFlash321 b4 \5 [, S; q/ G5 Q; G0 @
-------------------------------------------------------------------------------------------. k- ^3 _* e) n  ^, H2 G, g
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or & z8 `( p' P. ?5 ]+ s' y
  Xecuter Connectivity Kit)
! y9 q* S" M& P2 a' Q% E* s- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we
4 M' L0 R- o2 m" l8 L. |  need to power the drive off and on during soft flashing
- Y1 }# J) q  w) j" l- cold reboot or reset the computer9 s$ k$ H8 d$ E. x
- turn on the BenQ psu when you are in Windows XP& }9 f  F# \" m+ `( \) x+ f' M
- start DosFlash32+ R4 U: b4 }9 V* t2 U; S, |1 L/ ?: J
- DosFlash32 will ask you if you wanna resend the mtk vendor intro cmd, press Yes
0 ^! e4 l8 e9 m* x8 u' b8 d% F+ ]- turn off the BenQ psu and wait 2 or more seconds; [4 c6 F' A& i; t
- turn on the BenQ psu, the DosFlash32 dialog should show up
9 j5 u' i, _5 l+ C' ^1 k3 l+ W8 U- the flash should be recognized by DosFlash32
; N8 X# p/ i" ~% ~- you can now read, write or erase the flash# h: B8 m: w+ U
- you should be able to do the flashing more than one time in Windows, only do the power * K) ?3 n- D  Y) ]. D4 B
  off/on trick again
: ]. u: _; E% r. |+ g' ^! Q1 d- if the ports are scanned there is the possibility that you'll get the resend question for, V3 e; c- j/ B/ F: l" t. F
  other drives like a NEC, this is because the NEC has no MTK chip and returns a bad status,# Q- a8 n  O! E* \9 b5 s* ], f& [
  if you know the NEC is at that port you should press No and press Yes only if the port of
6 |+ d. m& M% _) E5 q6 F  the BenQ is shown or simply disconnect the NEC" B& i% k: U6 e
3 u* {! H6 D2 ]& |6 I

  A/ F6 r( M% I: Z3 q/ YMany thanks to jumba for the great idea of BenQ polling!
# N7 f+ }- }4 [9 JThanks to Iriez, Jumba, Redline99, TeamModfreakz, Tiros and all the IRC people for testing
! A$ z: h9 \9 R. M7 X3 c) zand support.! r: _5 F, X) W0 Q
2 t  C+ I( V- v
Join us on IRC efnet at the channel #dosflash for support.
- m  C: G. }  X5 i
' N! s8 a8 `) o( ~6 u, H( zDon't brick your BenQ!
$ c1 t1 i) S0 F2 ~% K+ |Kai Schtrom
7 H4 _- c& h5 _* J' `
" I# z( |. x9 {' K" w6 `$ F2 Y6 _% m, p2 H, ^# r1 c! A
************************************************************************************************
% D: D) V1 _7 D- }! {& \, T9 _
8 x# I3 M, v5 k2 z# x3 A
, N3 O8 i* j' [7 h  G% jDosFlash and DosFlash32 V1.2 Beta. F& t  d* P( L8 P! X, U' C* ^2 |4 Q: c. ^
-----------------------------------6 ?8 A2 e( j7 V* I; {3 t+ u
- bug fix for BenQ recognition: z. g- y& a  A) Q0 I
  - manufacturer and device id are sometimes 0x00 for a correct installed switch
: `4 J$ N4 e! j) x  - this issue is fixed with an additional ATAPI device reset before the mtk vendor intro is sent
6 t- |! Q, v8 H% I# k" d8 X0 j) ^  F2 i; S
Thanks to Redline99 who fixed my buggy code by adding one line!
0 o/ d0 _% A4 N, r: C
/ j4 j; F9 n$ ]. Q+ j4 L- J0 H$ G: ^, h* Y& Z1 z1 c
************************************************************************************************( k  u% K2 @. A$ {/ ?

3 h- P6 X/ T( s+ @) G0 H# q8 B7 R) {& A
DosFlash and DosFlash32 V1.1 Beta3 S! X' A2 n8 V* a) C* y, h
-----------------------------------& m8 t, L6 Y$ {  W6 w  H- B
- DosFlash.typ modified for better BenQ support 9 `/ |& G/ m, |8 M/ F$ U2 H
- DosFlash16 Flash Manufacturer and Device ID screen output restructured2 q; d# j" A, ~. x( J. r% F
- flash chips are first erased before writing starts: [7 Y' ~/ o* j( ~5 O" ^- r* f
- DosFlash32 no reenable of DVD-ROMs in device manager after flashing, this means you can't see the drive
  \- v0 {) Z, Y3 l/ s7 L  o& f- K0 F  and maybe have to activate it manually again in device manager, this could give better compatibility and5 l5 g$ e3 W4 G/ R
  hopefully no more blue screens
" |4 e+ ]( s% Q
; u9 ~3 Y$ I. r7 f1 n0 h* A( IMany thanks to Jumba, Redline99, TeamModfreakz and Tiros for inspiration and help!* i4 K2 a( Z. o9 w( ^
5 m" e- ~2 P, i& C. X

" N- C; }3 ?+ x: Q# P4 m* x1 ^, Z5 |************************************************************************************************
8 T5 m. {; L& B! [% q" }# |6 z
0 g( r' A+ y7 k" ?( ?1 @4 w& `! Y; Y5 c! y9 O4 R1 [9 r3 K! v
DosFlash and DosFlash32 V1.0 Beta
: z2 V, a% |8 H4 \7 r- k  ?-----------------------------------
4 L( @; _# l) O. w9 ?/ \DosFlash can be used to read/write/erase the flash chips of most CD/DVD-ROM drives4 O/ j0 p: |: O8 e, V: p: a
that have a mediatek chipset installed. DosFlash is for DOS flashing, DosFlash32
. x6 H, g! M3 U% h5 |for Windows flashing.1 L' y: P( A6 b9 Y

: p, v' J0 B$ r- v$ c" Z
' X6 n+ o! e5 y4 PFeatures:4 [2 s* I3 V  P. C3 N) i& u( ~, {3 t
-----------
$ h* E) ]4 {. u7 E5 Y- R- flashes IDE and SATA drives
8 _/ O7 p8 _0 g# E7 G- supports parallel and serial flash chips
4 Q7 I; Q7 V, \& A- flash drives in Windows with direct port access/ J. p* d; B! P9 c
- no vendor cdb flashing commands are used
$ ]- e2 s8 P0 m% Z% i5 A+ B: C- tested with the following drives:, ?9 n4 B8 i$ x' S- ?& C
  - TS-H943A MS25, MS282 z/ ]4 J) }( s' p- t
  - SH-D162C
9 {0 C9 `1 w- K( h6 u  - SH-D163A
- A$ e2 ?1 r& |3 ?1 Y  - and some other drives like Liteon, Hitachi, .... @8 @/ P$ ^3 D9 m! Z  [
- NEC drives are not supported, cause they have no mediatek chipset installed; e+ U+ \1 s. N. V5 T8 f$ o2 @5 }
% w1 u* ^) \. V5 j. `

3 ^. N/ X- h; `  @DosFlash2 F8 f( K* f$ W1 ^1 k
----------
$ c& G( T0 Y3 Q# n  `: z7 I/ aDosFlash supports two flashing modes, Auto and Manual. If you type DOSFLASH at a DOS prompt it
4 `/ [8 G# d6 @9 v- j: ~' dwill start in Auto mode. All drives and the corresponding flash chips are detected automatically.
) O0 Q8 L9 u! j8 c# O  |1 SIf you can't get a flash chip recognized due to a bad flash or other problems you should use the' j! L. x' l8 g1 r) l
Manual mode. In Manual mode you can enter all the parameters used for flashing by hand. The2 f8 q% e) v3 ^& U6 L# \* x* ]! u
following help screen is displayed if you start DosFlash with a wrong number of parameters:
2 D- \" Q. Y! \, K. D- V" c
3 C+ \* m0 p4 F4 y+ M+ [  ?& m' a
$ _, j# Y! M$ Y4 M) p% i( K0 V& PDOSFLASH by Kai Schtrom, 08/05/2007 (Ver 1.0 Beta)
0 W* l& v/ ^- `: |: XDOSFLASH [R|W|E] [PORT] [PORT TYPE] [DRIVE POS] [FLASH TYPE]0 p9 r0 j) s; V5 u$ ]
         [FLASH SIZE] [FLASH SECTOR ERASE OPCODE] [FILE NAME]
; v8 q2 ?: w: Q2 K2 ]& o1 F- H                        R: Read FLASH
1 A8 B3 O/ \* |9 [                        W: Write FLASH
( ?: |' W; ]- h1 M. X; H                        E: Erase FLASH) Q) j* v# w* b/ _
                     PORT: Port to send command to
! o8 p% R$ T2 O0 B8 g% ?) z                PORT TYPE: 0 for IDE, 1 for SATA  L# j/ X4 {6 s' K
                DRIVE POS: A0 for Master, B0 for Slave
1 ~5 ?) c( l, h3 [! M& Y# `               FLASH TYPE: 0 for parallel flash, 1 for serial flash! i" x7 A) l( H, F$ p& c) r, E) D6 J
               FLASH SIZE: size of flash chip in number of banks$ m7 K1 C6 _! p# r5 r  X4 h, Z
FLASH SECTOR ERASE OPCODE: individual sector erase opcode command byte2 i: p% u8 W/ G, J1 S1 D: t! i5 w
                           this is only needed for erasing a serial flash
+ |5 g$ v& |- S6 q! ~* J                FILE NAME: name of the file to read/write from/to flash
! q  ^0 n6 M0 x/ w0 o5 I6 rAll numbers are intepreted as hex values!7 _9 J6 c: R4 [6 r. e
& S$ Y: q2 C5 g# z9 O5 {
Example Usage:2 S7 N; K7 l  k! k' _1 Q
"DOSFLASH R 01F0 0 A0 1 4 C:\flash.bin"  Z" f. e& |% i
=> Read serial flash with a size of 4 bank (262144 bytes) from Master Device
- Y& O) c+ ^) y: f3 j   on IDE port 0x01F0) c9 u* a% E  p0 Y9 i
"DOSFLASH E C000 1 A0 1 4 D8"
  z+ g9 }( Q/ `4 O5 E=> Erase serial flash with opcode 0xD8 and a size of 4 banks (262144 bytes)
) M3 X5 q' Q+ I+ _  m1 T. ~) ~   from Master Device on SATA port 0xC0009 P( _) D4 \, U, A2 A6 t
   
9 m% q- `* q8 Q: K* c$ |   
1 a3 a1 t' N" @+ c6 z9 VExplanation of the Parameters:( B9 s) Y. X& @
--------------------------------4 d# `! x5 L; Y- R

, a7 ^- q/ F, A; e! C1 x/ Y[R|W|E]2 c# s$ }( e) d$ o
---------
2 S% E0 h1 Y" w6 _+ E8 B* ?- this will set the mode of flashing, it is recommended to first try read on any, L5 `3 l5 Q* ?- A' O
  drive, if the read will fail, it is highly unlikely that a write or erase will
) s- u, m6 g* Q  d, X' ^  succeed9 N1 p8 K* _7 @8 [

% E7 s5 e2 d5 }. T7 @  t[PORT]: r  e1 Z9 d3 c9 \
--------
3 J6 [+ ~. @* w& w, s6 e- the port to which the drive is connected, a port number should always be entered4 D! Z" b- K2 z9 X
  in hexadecimal and have 4 hex digits, valid ports are: 01F0, 0170, C000, C800
; g9 |5 T8 o( f# |4 t  x- this option can be used if your PCI adapter card or on board IDE/SATA ports are
* ^' ^' g. m" v6 p/ C) x  \) D  not identified by the auto mode( D$ ^- C$ D  _2 W

* X5 Q. Q) ~! a[PORT TYPE]
  E. @/ A6 I! N: ^. |/ ?-------------
! B. `" u+ C* ]' o- the port type tells DosFlash what type of port is installed on the before entered
! b& @3 f6 S3 y3 r  port address
' C: P' n* d8 ~: k8 c& i- valid values are 0 for IDE and 1 for SATA
: A/ Q. P* F9 r9 C! p" M- make sure you never mix the wrong port with the wrong port type, this could give) a+ h) a! e* t- \' ~, C
  strange results or in the worst case a bricked drive
& e# y6 m& `2 @4 N  ; s0 j9 ]+ ^' e
[DRIVE POS]2 N7 m4 k7 B+ d4 l3 r
-------------4 K' X3 Z5 Y; c0 i+ e) {
- old style IDE channels have the possibility to connect two drives at one IDE
: `) B- R0 m( b6 B: k* U# U4 A  channel, the first drive is called the master, the second drives is called the
0 C9 i. ?  X2 b9 l, ]  slave# B' b* J* Z$ h5 j" _
- you can select which drive should be flashed on the channel, A0 selects Master,0 C  c) S, w* l) o: K- t; N' u
  B0 selects Slave
  h  c, }0 u  y9 E+ k- _- on SATA ports this value is always A0, cause you can only connect one drive to
( B, s* B1 D! Y2 `  a SATA port, so for SATA you will always type A0 here
7 A1 E  v" ?. W: X: _1 \- it is not recommended to flash IDE drives with another drive connected to the
8 p8 g3 P( Q/ b+ V  same IDE channel, this could be risky if something in the Master/Slave selection
1 u7 T% ]1 K; m5 w5 _  fails
* k0 d* U1 Y. f/ l( Q  + F" _0 _* w/ y
[FLASH TYPE]" h; |+ K2 T, s6 w' H, V) W
--------------
6 S' B* H) N; f- i9 I- there are two types of flash chips out for CD/DVD-ROM drives atm7 y: z6 E7 ]+ M: x
- the older type is parallel flash, which is also supported by mtkflash for example: H% I1 x2 {; ~; z
- the newer type is serial flash, which is supported by flashers like XSF
6 t4 S6 B/ y* f0 Y2 o5 p- the problem here is that no tool is out that can flash serial flash chips on 5 R: k2 |* N1 P3 v
  SATA ports4 n$ N) s! ~: D: a) w
  ; C3 N2 }8 l0 K  v
[FLASH SIZE]# y' a( y2 k. @) Y6 }/ s6 I8 H- i
--------------( F, E% `: k6 ], o3 }0 {) o, V. v
- this is specifies the flash chip size in banks, Y0 @6 r0 f) x( }9 N$ j% x
- one bank is always 65.536 bytes in size
3 {8 \7 I1 f& R- if you know your drive has a flash chip of 262.144 bytes in size you need to enter 4) L. s6 [8 X& p5 |3 O: e- A& Y  L
3 W6 p5 `4 B+ o  u# C4 c
[FLASH SECTOR ERASE OPCODE]/ J7 \& Y& B7 h+ j; W
-----------------------------0 G3 a) s. K8 u. y
- the opcode used in the flash chips datasheet for erasing  F6 W: D9 F- X% R( {8 o( F
- for serial chips this command can be different from the standard and needs to be2 n3 t( }/ J+ v  u; N7 a+ e
  entered for flash erase, w! c2 D$ G& W7 p% i
- for parallel flash chips you can enter a dummy cmd byte, the integrated command
7 {; X* q* t3 O- J: G  should work on all parallel flash chips without a prob5 \1 r% z+ A% K: r+ t0 j$ g
  
2 S* D4 [. J5 k1 L[FILE NAME]: w- N$ c2 u5 u: i) q0 |! y
-------------8 C! g/ L' i- A# r4 b0 l* y, N
- name of the file that should be used for flashing. f9 M. I- c) z' I8 E+ v5 W! N" n. Y
- for reading operations this should be the output file
0 w% [& @) t$ F4 p) \  R- for writing operations this should be the input file
- X& S, \: l9 t1 Y' y4 n. A9 n8 v( H; Q# I' r8 u

8 i7 b0 e/ t& U/ h$ Q* }; i2 ?Hints and Warnings7 _3 h: d' z, d* k2 d& E
--------------------
" {3 L% U  }) h9 E: h+ A6 O- read, write erase TS-H943A MS28 after the firmware stealth has been disabled with Enable0800 disc# W2 x& T* J/ b- a# Y4 g
  - this only works one time, after the first mtk vendor specific intro cmd is send7 @. H: }( q3 O
  - if the mtk vendor specific outro cmd is send the chip goes back to stealth mode and you need
& \, J( T; t6 E7 G2 w    again the Enable0800.iso to disable it# p" t- Z: F6 c+ R  @# h, I. M6 o
  - therefor the mtk vendor specific intro is send at program start to all present devices and the
! q: F$ I( e7 b5 W  u% d& F    mtk outro is sent at program end$ ~; e# S' y$ Z* @- a2 S% h: K
  - if you have a chip manufacturer id of 0x02 and a chip device id of 0x02 for the TS-H943A% T0 _+ x6 e( M4 y8 ]* a- ?  }
    the flash chip is in stealth mode and won't give access to any reading, writing, erasing$ e- h0 ~' x' }) H
- always have a look at the DataSum generated, this is exactly the DataSum of mtkflash
( [. j+ s6 J0 P/ \, B  - the DataSum is calculated as the sum of all bytes of the firmware in a short integer
& G0 W  N) w1 r. K7 i$ X  - to make 100% sure that the flash is written right compare that DataSum to a known one, r+ x! E  h& O' r5 p
- this tool has not been tested on all drives out there, the typ list is simply copied from well; [# ]. a" _. e" L# L7 u9 s
  known programs like mtkflash and XSF
9 Y5 Y. ~0 ^$ P' s  - always try a flash read on a not yet tested drive before doing anything else
/ ]/ \; z: e2 n+ m3 R/ a. x" \# r  - if the read doesn't succeed it is highly unlikely that a write or erase will
4 P6 P% ~8 K) Y* D9 z" V- some LiteOn drives seem to have probs to write the firmware correct, this prob seems to be
5 E6 f  {# B" ~8 _& y9 [  related to windows register flashing, cause even an assembler app can't do this error free
5 @' t0 z# X5 e# c  - if you get errors on LiteOn drives, write the flash two times in a row
& }" _/ F# ]  M' j& n7 G: V# n. }- for direct port I/O in windows the givoio.sys driver is used, this driver is loaded at DosFlash325 M( v) L' A+ W  k# T& v
  start and unloaded at program end, be warned, this driver can possibly make your system unstable,% w3 v8 F4 q1 {) Y; y+ z
  it's intention is to let privileged assembler instruction like in and out pass, even in windows,, z$ [& y3 a6 g
  if this driver is not used you will not be able to get direct access to port registers& \. ~; Z1 V1 \. g' B
- DosFlash was tested on MS-DOS 6.22 and later, you can easily copy it on a MS-DOS boot disk created
+ z, x0 q; P1 H% d  in Windows XP and start DosFlash directly from the disk' H: P7 G8 U) b; {3 e7 l
- don't forget to also copy the DosFlash.typ file, it has all the informations about flash chips
5 ^# n# i6 v3 ]4 i# l  for auto mode flashing
0 s( Q/ X, Y2 [/ E- DosFlash32 was tested without a prob on Windows XP SP2, you'll need also the typ file for the
7 t) ^5 E4 L6 i5 i' u# k8 N  win version) l7 f, [9 m2 E
- DosFlash32 will deactivate all CD-ROMs in device manager at startup, this is better for flashing,
5 |8 K. e# O7 l  cause Windows seems to poll the drives all the time and this could result in a bad fw file or
  w  T: l! \2 u; X; e5 R  a program hang, the drives are activated again at program end6 z$ A' t" C* F0 E: ]- J5 ~
- you should make sure that the flash is not in an erased state at program end, cause device manager
; k! Q. \( w) Q9 @3 o/ i; f  don't like drives that do not respond to the inquiry command" F  J* W- j4 Z9 Y  O! g
- deactivating all CD-ROMs could take a few seconds, so please be patient at program start8 Z7 ^: ]- A9 V( o( j
- DosFlash and DosFlash32 will try to scan for the VIA 6421L Raid Controller card, based on vendor
5 w3 [! L/ ^7 e2 ^. v" J; r) k  id 1106 and device id 3249, it doesn't matter if the card driver is installed or not# n5 N( w2 z1 Q+ Q7 c' f5 I

8 l, L! ^- ^5 d4 ?1 }, l- c/ |3 C" ^; o9 P4 ?% _+ O
Many thanks to Dale Roberts and his Direct Port I/O driver giveio.sys!
: B- L" ~- |+ h4 R% Z  E1 X  T# v# |7 b! U( s
Avoid a bad flash!
4 b) A$ ?( Q$ R* |- ZKai Schtrom
作者: ak475671    時間: 2011-8-23 00:02
版主你好^^
$ ]2 o6 u! z% p8 d* d非常感謝版主的用心貼這個給小弟^^只是小弟技術還沒有到那裡有看沒有懂^^|||在試著找看看如何使用dos介面下提取dvdkey雖然有找到一些訊息不過還是有看沒有等以小弟的目前的能力還需要多看多參考^^
2 d! l9 p: {: r' P% Q- w感謝版主的耐心回覆小弟在多上網找看看看有沒有新的發展如果可以成功自己刷機因該會很有成就感^^
作者: basely    時間: 2011-8-23 12:08
ak475671 發表於 2011-8-23 00:02
' d% C8 k/ M/ F4 l版主你好^^
+ \7 p" i( U& `: W5 e, p: l非常感謝版主的用心貼這個給小弟^^只是小弟技術還沒有到那裡有看沒有懂^^|||在試著找看看如何使 ...

" V5 O2 t& E0 G) v/ A( B  `以下是實際圖片示範：, e; Z# h. ], ^4 y8 |( M

% ~6 `, M$ x5 B' q8 N! k在DOS模式下輸入DOSFLASH並開啟XBOX360光碟機插上電腦SATA，就能抓到以上資訊" K9 O; D+ L3 y* Y0 s9 o4 z
* B/ O% f+ G5 S9 ]3 T5 ]+ q4 v4 h
接下來它會問你要幹什麼，這裡我們要取得它的韌體，按R讀取) o" a8 B, e( X+ V* x
/ K& P! c3 @  D( {# T6 ?- G
上圖就是取出test.bin韌體名稱，您可以任意取其它名字4 L3 V# |* C3 M# G& C  a7 b6 k/ O
+ ^* M4 J+ M& }' i
再使用16進位編輯器去開test.bin檔，可以在其中一行找到DVDKEY，至於其它韌體的DVDKEY位址不一定像上圖一樣，有可能在其它位址。
9 a) O/ Z: y/ o' m8 {3 \) c* X6 C
作者: ak475671    時間: 2011-8-23 23:28
感謝版主還這麼用心幫小弟找圖片教學謝謝版主我再去試看看
1 n$ c. e- V' }* c# R  Y% a. O5 `! L. ~" H
^^謝謝版主了^^. T" i1 y* F  R  ?+ M0 g9 Q
作者: ak475671    時間: 2011-8-25 00:26
版主你好
' c8 S- f7 d/ Q% a請問要進到dos去提key是要開機就直接進到DOS還是附屬應用程式裡面的DOS就可以進行提KEY了
% D; H1 F  i1 n$ o6 j& _! L另外我下載了DOSFLASH1.9版裡面有DOSFLASH16    DOSFLASH32    DOSFLASH64   這樣檔案是正確的嗎" m( P/ b; }) H( x. }- W
我有看了16的點了跳出畫面右不見了然後32的點了出現視窗因該是可以讀取DVDKEY的東西  那我可以直接從32那邊去提KEY嗎   或是需要進到DOS去才識正確的提KEY方式( |- q. [, Z3 f
作者: basely    時間: 2011-8-25 12:18
ak475671 發表於 2011-8-25 00:26
2 f& `1 ]) W) L( n版主你好
$ A+ O- j) f9 s$ ^$ u請問要進到dos去提key是要開機就直接進到DOS還是附屬應用程式裡面的DOS就可以進行提KEY了
  R. ~( E! F$ k) e7 u, E# L  T: |另外我 ...

1 n/ ^7 J1 R7 d; |4 c7 ADosflash16純DOS模式使用(早期的Windows 95、98或更早的DOS 6.22開機使用)4 @4 v) r9 K$ e% d6 I
Dosflash32在Windows作業系統32位元使用
! ^* y$ q" r! @: W/ U& ?8 c3 \Dosflash64在Windows作業系統64位元使用
0 z: X( Y- U$ E建議使用純DOS來執行，其實可以不必這麼麻煩用DOS下的16進位去找DVDKEY，
$ v; q  z- ~* D) V4 E可以使用DOS讀出韌體後再進到Windows下，使用JF去開您讀出來的韌體檔就能取得DVDKEY。



歡迎光臨 黑皮論壇(手機維修/電玩維修/電腦維修) (http://happytvgame.com/) Powered by Discuz! X3.2