|
|
ak475671 發表於 2011-8-22 13:03 ![]()
' f0 g+ g8 {7 Z. o; w4 u版主你好7 `% T& K+ F, u* v N) M0 ^6 o* y1 R
版主知道哪裡有教學嗎使用DOS提KYE的過程不是很了解不知道有沒有教學可以參考的呢
' ]" N8 `, D' Q7 q- m& x/ U2 D另外你說他提取 ...
DosFlash ReadMe.txt 說明文件
* d" F/ ?4 A5 Z L3 n& c1 w
; V7 M. {9 x2 [DosFlash V1.9 Release Date 01.01.2011
* b7 Q4 c. k+ v+ y- w$ n# q---------------------------------------
. _6 H9 H: z9 e7 g( J- SATA and IDE port scan improved in DOS and Windows
) W6 u7 i9 k- P, n The ports are now enumerated with the CONFIG_ADDRESS and CONFIG_DATA register instead of using interrupts4 U$ R* I, _; n6 \& p
in DOS and SetupDixx functions in Windows. This change will detect more ports in Windows than the old
0 C- {* ^+ ]) z+ w, Q SetupDixx method./ l: Y5 N$ I3 c% o4 m
- Settings saved to ini file for DosFlash32 and DosFlash64$ I9 x9 O& u: t" v! q
Settings like Port, Position, Task, COM Port, Enable Drives and DvdKey state are now saved to an ini file
! J! M! l( r1 ]1 S2 u inside the program folder. If the ini file is not present it is created after the first run. On the first
2 F( F$ J. f3 m% Q3 K startup DosFlash will choose the most common and stable settings.
2 z. y7 R4 w, Z$ Q$ m9 g7 h! W- EnableDrives option included in dialog as a check box
9 m4 H o2 A6 T8 w) q* U Due to high demand we removed the "Enabling CD-/DVD-ROMs" MessageBox on program termination and included
% Y Z) _- R! s/ I a check box "Enable Drives" inside the dialog. For security and more stability this is deactivated on the$ v2 t$ I7 h% i& S' ^
first run. If you enable it the checked state is saved to the ini file., L3 F. d5 A3 Q
- enabling drives in Windows caused some hangs from time to time, this is now fixed by a recoded enable
- x- }3 e& Y' M. B( `4 [5 B7 i drives function, b! j8 R# Y$ a2 W
- port drivers portio32.sys and portio64.sys are now added to the executable and unpacked during runtime
! S" G# `& K" ~5 g! ^& c# j- PATA and SATA controllers list updated: c: u1 Z/ G; r6 [! m K
- Fix for NForce motherboards in combination with drives like the "Samsung SH-D163C", "LG DH18NS40" or
# K; A: L- E( {; k "LiteOn iHDS118"8 N9 ]3 d# p+ I9 m( }2 H
Some drives have problems with flash identify, read, write and erase. This is clearly related to the l* G# ~" q; n! j0 q7 h8 M* R
NVidia NForce chipset. For manual mode in DosFlash16 an additional command line parameter is added called) W( {% T* `! p$ M' C: t: Z5 s
"NFORCE FIX". This parameter should be set to 1 for NForce chipsets if you experience strange problems.
" k) a+ b2 l4 Z' D; E In DosFlash32 and DosFlash64 we added a static control which shows if the NForce Fix is applied or not.
" M1 J% v% E7 X7 U" A. u; | Remember there is no need to activate this with every drive. It seems to be a combination between drive# G% `/ l( Q" e1 _
and NForce chipset that causes the problem. The fix is automatically applied for DosFlash16 in auto mode,7 x3 d, g" t7 @9 J s0 _
DosFlash32 and DosFlash64.
9 O s: c; n! g- DosFlash32 and DosFlash64 are now DPI Aware for Windows7
. l! G& a0 _3 x7 m- New task Verfiy Key/Inject Key added for verification/injection of drive keys
! d: i1 |# k# S3 }, u All DosFlash versions now have the possibility to validate drive keys against an XBOX360 drive and set
9 i3 K/ G+ y8 V2 O$ s the key for an XBOX360 drive. We use the same authentication method like the console to verify a key.; l1 C3 l& K8 _% j
In the Windows versions you have the choice to paste the drive key from the clipboard to our custom hex
$ F+ u' ^+ ~& w edit control or load a key file. To add a key simply click right inside the hex edit control and select" ]5 ^* o. _4 }9 `$ O7 w3 C3 z
your choice from the shortcut menu. In DosFlash16 you can enter the key in the format "1A-2B-3C" without
! l) R7 W1 N' A quotes. Remember that a key has 16 bytes of data. The key file to import should also have 16 bytes of data
3 P+ T4 x: s2 P; ^ like the key files exported by LiteOn Key functions.- t$ p- G+ J0 C7 R
- Removed multiple key extractions for LiteOn Key functions, added Verify Key after extraction
, y# W" N' P( v6 @: a( `. y For LiteOn Key functions we removed the multiple extractions, because the key is now verified immediately [7 c$ q$ F0 f
against the XBOX360 drive. Q$ x* ^ D% w4 M4 Y
- LiteOn Key V1 and V2 now also extract the file Serial.bin and the 2nd inquiry file Inquiry2.bin
3 f5 u9 T4 d& z- t We added the file Serial.bin and Inquiry2.bin to LiteOn Key functions. Inquiry2.bin is only generated for( l, a/ l2 J: L( ?3 N4 X) s9 P
LiteOn drives V1 and V2.6 {- H) P- W$ i0 y
- The drive key of Maximus patched UART drives can be extracted by using the task "LiteOn Key V1 (DvdKey)"
4 _# I" N+ s& V. z# {, q. M The drive check has been removed from LiteOn Key functions. This way we can extract a key from an UART
* Z) a9 p1 u6 L2 [+ Z7 X# o% i patched drive firmware by Maximus.
0 J1 |1 x& K# f( G" T; `6 g% P# o- LiteOn files are now extracted to a destination folder instead of prompting the user for every file name.3 R# F! T3 d1 S
- LiteOn key extraction tasks separated per drive version in "LiteOn Key V1 (DvdKey)", "LiteOn Key V2 (FreeKey)"
8 b2 e. h/ \4 f1 y: z4 D7 l and "LiteOn Key V3 (Tarablinda)"3 G/ r0 V S; G3 q
- In DosFlash32 and DosFlash64 the number of installed COM ports in the system are now enumerated instead of
$ E! V( z c% o adding port 1 to 4
; I( g8 V/ t3 q+ G- d3 R9 m- For failing cdb commands the sense code is returned8 T$ t& H; r: M7 Z9 Y
- Geremia's Tarablinda functionality added
$ A# Y4 K4 Y! { K# [; Z+ U We added all Tarablinda tasks to every DosFlash version. You can extract the key by choosing the task+ h& F( X9 B& |0 ^, Q' U
"LiteOn Key V3 (Tarablinda)". For read, write and erase of the flash simply use the standard functions.
3 c1 X3 ?6 b1 M9 J# j: q { Pay attention that the "LiteOn Erase V1/V2" task is only available for older LiteOns and not for the Slim. Y% _9 ~$ | E7 ]5 V
You should use "Read Flash", "Write Flash" and "Erase Flash" for the Slim. "LiteOn Key V3 (Tarablinda)"
4 g$ i) o @. z$ X! i0 b extracts 1 additional file in comparison to Tarablinda v04b, this file is called Xtram.bin and contains
4 M" i4 [! u) _& P2 A9 ` F5 t8 C a dump of the XTRAM8000 area. This can differ in a few bytes from one dump to the next.
* G" s! Z/ I6 K- Device Reset in DosFlash16 manual mode is now done automatically, there is no option to turn it off anymore. c% n$ u! c" y
- Code optimization to work with modern SATA2 controllers added, remember to set SATA controllers to IDE and! R2 I, o$ [7 p8 g
not AHCI mode otherwise Port I/O will not work
9 l } S$ a6 S- Warning: The read, write and erase of the Slim drive is considered risky in general! So pay attention and
' d1 Q% H( Y5 ~" [* k0 A& b always remember you use DosFlash on your own risk every time! Even during flash read the Slim gets flashed: A# s5 a4 x/ h2 P8 b9 Y" p
with a patched firmware sector to retrieve the complete dump!
$ f$ T7 N* l0 D* u0 c: F& L- We had to change many command line arguments for DosFlash16 Manual Mode, because of the NForce Fix, added. ~4 L) m! X+ [; A8 Q% @& T
Tarablinda support and splitting of LiteOn Key functions. To get a better understanding we added the example
$ F2 x6 k6 q8 Q* f! H) s- E% w section below.
6 V t/ B/ t. m( p/ k( {% w j, d" l# P0 I( F L7 n! y/ P
. k! {$ S1 o4 K: BDosFlash16 Manual Mode Examples" f! y( Z f* G: m; x9 o2 S0 g( U& B
---------------------------------
; l. ]/ P9 y) q) q9 N" r- Extract drive key on a " LDS DG-16D2S 74850C" over UART -> "LiteOn Key V1 (DvdKey)"! b. Z: T; s6 _, c
DOSFLASH LITEON K V1 0970 A0 1( W& L9 X3 B. \6 Q) [& E |4 n9 S
/ G0 [: H8 J; H- d. f; N- Extract drive key on a "LDS DG-16D2S 83850C" over SATA -> "LiteOn Key V2 (FreeKey)"
3 Y2 k, u( M- w; r- i g4 ^ DOSFLASH LITEON K V2 0970 A0
2 }- U3 O! w( S
- A8 [# x! k. H$ g$ d- k- T- Extract drive key on a "LDS DG-16D4S 9504" over SATA -> "LiteOn Key V3 (Tarablinda)"
! H6 e. ~8 x% [: F: C T- q( V" Q6 |1 _1 V DOSFLASH LITEON K V3 0970 A06 ` o; c0 @8 t7 p* {" l6 U
6 A/ w3 ] ?2 d% L( T
- Read firmware on a "LDS DG-16D4S 9504" -> "Read Flash" this is considered risky!% |; N3 B, J# {
DOSFLASH R 0970 1 A0 3 0 4 FWOUT.BIN 00 T: P% e) e/ B0 R
; _1 t- b% C0 [' k! H* k5 P- w- Write firmware on a "LDS DG-16D4S 9504" -> "Write Flash" this is considered risky!6 C# Z9 }: o9 k6 o2 q/ x* D. s; ^
DOSFLASH W 0970 1 A0 3 0 4 FWIN.BIN 04 e6 [" I9 B0 ]& x) T' }$ f- ]" B
9 |' m. p& R) z) y) a' }- Erase firmware on a "LDS DG-16D4S 9504" -> "Erase Flash" this is considered risky!
$ [* Q- `2 [. G* `4 w6 H; N! A DOSFLASH E 0970 1 A0 3 0 4 C7 0) i, y. }/ m4 R8 K
]9 d: N' Q3 Q x0 u- Erase firmware on a "LDS DG-16D2S 74850C" or a "LDS DG-16D2S 83850C" -> "LiteOn Erase V1/V2"
2 v% ], v* J, j DOSFLASH LITEON E 0970 A02 L M4 _' X) D; j( O
8 Y, B) I4 ~* P0 K5 K
- Read firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Read Flash"& ]1 ~# I/ A2 r' M0 P3 z0 A
DOSFLASH R 0970 1 A0 2 0 4 FWOUT.BIN 1$ D9 q# X1 `& m9 D4 C/ W
$ q2 z! V( p! u% f- Write firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Write Flash"
( @# f/ F" v- e0 Z6 i. U DOSFLASH W 0970 1 A0 2 0 4 FWIN.BIN 1' E" {# f+ \; h& D
* l* P4 T# E. H/ N2 Z- Erase firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Erase Flash"
4 J/ b# T C. ~; m- ]# T! d: ]- ?, [ DOSFLASH E 0970 1 A0 2 0 4 C7 15 q; P/ P2 D$ }# m/ ?: D' X4 K& u
M: W1 p' P% k' j2 b* E7 c$ f
- Verify drive key on a XBOX360 drive, enter the drive key manual
: }5 z+ Y+ Y: G9 i# o DOSFLASH V 0970 A0 12-34-56-78-90-AB-CD-EF-12-34-56-78-90-AB-CD-EF" b- [2 F @6 e2 `6 m
( ~) o5 a4 C! j8 {% Q- Verify drive key on a XBOX360 drive, load a drive key file
% e' A9 I) Q9 U% b& D/ n: E6 O DOSFLASH V 0970 A0 KEY.BIN1 W& C R2 f0 h) g, H3 M( k
( {. G% H: W# J- b. b# k
- Inject drive key on a XBOX360 drive, enter the drive key manual# [9 G c7 z- W
DOSFLASH I 0970 A0 12-34-56-78-90-AB-CD-EF-12-34-56-78-90-AB-CD-EF
5 [; K1 O# d# h$ z5 y3 j" B1 ^. }2 |1 F2 f o; ~1 ]2 j" V. v* T
- Inject drive key on a XBOX360 drive, load a drive key file
8 f4 |8 e8 e) B DOSFLASH I 0970 A0 KEY.BIN0 \" m4 I# u: G& T, P* x0 V1 L
' }8 U+ O9 W* r4 b/ q9 MFor DosFlash drives on which we can extract the key via UART are considered V1. Drives we get the key over0 B3 r; l1 K) f+ w# {7 _) }# J3 H
SATA are considered V2. The new Slim is considered V3 but only firmware version 9504 is supported atm.( u: v: R. E3 z. ?) N
4 a+ j% [2 x" r; X$ c/ b V
6 M9 Q) K8 j" l( R1 ^Many thanks to Geremia, Modfreakz, Redline99 and Tiros for their support. Special thanks to Geremia and
. t8 W. a' |7 k& R/ lModfreakz for drive sponsoring, testing, coding and much more. It is always a pleasure to work with you
& S5 O' Q4 `1 k9 K0 P7 zprofessional guys! Respect to Maximus for his UART enable patch. I'm looking forward to your magic Lizard
$ o4 a1 ?0 S( B- p/ a: Thardware flasher!3 n/ k5 a& w6 A2 i, _
+ X7 X/ }* Z: hHappy new year 2011!
0 A; w( ?) O: G" D; ^. H4 Z0 QKai Schtrom) E, f, B9 X. r6 @4 I$ v5 Y
5 y6 b0 O( P3 k3 K# Y- q5 q1 a************************************************************************************************2 E$ p4 H8 `2 i# |4 w
, Z( L: Q5 S) o
8 S3 O2 X" W9 b% L8 JDosFlash V1.8 Release Date 08.08.20099 y5 h `* g; L3 @( U9 b# A
---------------------------------------3 C8 B& r9 B& w) F4 X, V# s* j8 n
- now supports LiteOn PLDS DG-16D2S 83850C V2 Geremia/Maximus LiteOn FreeKey method. I% [8 H- l8 s9 l
- huge firmware read/write speed increase, especially if run from a floppy disk
) z) B6 J: a, p. a' ^- updated IDE/SATA motherboard chipset list$ d7 N* ?# b) P; T/ u
- new IDE/SATA detection for Windows and DOS! m8 b# Z/ |$ P
- DosFlash.typ embedded in executable file
# f" P1 U& \- u2 c- LiteOn V1 drive key is now extracted 10 times and compared against each other,
$ j5 A9 a/ q$ v$ z3 A' Y. \ after the extraction a summary is displayed sorted by the most common matches
3 l+ k0 |) o% q" ]1 P# `- LiteOn V2 drive key is extracted 2 times and compared" U' Q- |, f2 V. |
- new BenQ unlock keys added to unlock all known BenQ drive firmwares5 r+ h/ s6 e$ Z4 W* v1 Z8 }
- command line parameter "EnableDrives" removed, DosFlash asks the user on) P# ?% ^! d$ Q; B. B
application close if he wants to enable the drives or not, during the tests it
% N5 {- e5 k3 V( r- G. i& k( m# c seems that IDE drives have problems with the enable, SATA drives seem to ' I% z% y9 m3 a6 e3 j: J- N
work fine
. X. B/ ]' |. ^6 B: ]- new 64-bit DosFlash edition added called DosFlash64, because some driver& l( Y& I. a' N$ w* ]
functions don't work as expected in the 32 bit compatibility mode on Windows x649 Z) X/ X7 a$ ?- h9 P2 h
- Beta state removed: ` j/ J$ h5 y& T4 c1 N
- ready and tested on Windows7 X86 and x64# B! R" e$ e8 ]$ m1 M
" D3 U1 Y2 J( P9 e7 t5 |4 C: a
) s0 a* B! ~! w; S/ t0 G+ F9 x mGeremia/Maximus FreeKey method with DosFlash16
E8 d/ A1 B, P0 I, x [" \------------------------------------------------2 G A: r( H+ s- o! B& f/ i: c
We have added one cmd line parameter for DosFlash16 in manual mode. The COM port& k; y) S2 ?5 d; c
is simply ignored and can have any value for the V2 drives.
7 o0 |7 j. d7 v+ o% |/ wUse the following command line to extract your free key from 83850C:
3 B3 \* k" G9 w/ v- Z, f- DosFlash LITEON K 0970 1 inquiry.bin identify.bin key.bin dummy.bin enckey.bin5 y. k& m2 P5 w s% W
$ e$ R" X- x+ o) B. B* A3 b' K t( u7 H' Q* x* W) ]
Tips for running DosFlash on Windows 73 m( x5 p0 Z8 V
----------------------------------------7 ~* L! z y7 j, n
. w* ?; s4 r+ b9 q, J5 b6 ?
Since Windows Vista 64 Bit and upwards it is necessary that every driver is signed. Because
6 F7 k1 t' Q- g# e! d; J" H9 [the DosFlash driver will not be signed by MS due to some unknown reason we need to circumvent J5 Y# \. f+ F
this check. You have the following 2 possibilities to do this.
6 Z$ y. i7 d$ I% k& J* g3 l; ~3 l- g/ s
Safe Way of Disabling Driver Signature Enforcement3 a1 ?) U$ A& ?+ V7 x: {
1) On Windows 7 bootup press F8 to get to the extended boot options screen
+ C6 f/ I0 U2 M7 x: r2) Choose "Disable Driver Signature Enforcement"- I1 X' g9 a5 Q I( i
3) To start DosFlash right click on it in Windows Explorer and choose
9 G7 g! c) z5 k$ m! g- M3 g "Run as administrator" > answer the message box with "Yes"
0 _( G8 a% `0 u$ B0 h4) Short after the program started a "rogram Compatibility Assistant" warning message
G; O: }5 v B5 ]9 z6 l- T is displayed, you can simply ignore this by pressing the "Close" button
8 R7 p% |0 ^" h8 {2 X& C S. c
Recommended Way of Disabling Driver Signature Enforcement J! x- m, u5 {. T
1) Disable User Account Control (UAC)4 ?5 ^8 A2 o2 ^9 m1 L
- go to "Start Menu" > "Control Panel" > "User Accounts and Family Safety" > "User Accounts"7 A3 ?: K! ^& |( u/ C
- click on "Change User Account Control settings"7 G8 o) C5 W$ a7 @0 V6 p: W
- set the slider bar to the lowest value (Never notify) > click "OK"
% G4 r( y& b* a7 b w$ r: w2) Sign the DosFlash driver2 U! z. j$ Y9 S! ]9 x7 C4 x; M
- download the "Driver Signature Enforcement Overrider" (DSEO) from
: @' D+ V7 V% F/ K( l k, m" \ http://www.ngohq.com/home.php?page=dseo
2 c8 i* f+ Z) ]5 }5 } - start DSEO > click "Next" > "Yes" > choose "Sign a System File" > "Next" > enter the path to; C% d. C" E$ s( o' ]
the used driver (portio32.sys or portio64.sys) > "OK" > "OK"6 O( l$ @3 l: f- C# {+ z+ h4 ~
3) Disable Driver Signature Enforcement8 Y$ h9 x' V1 S" w+ P
- start DSEO > click "Next" > "Yes" > choose "Enable Test Mode" > "Next" > "OK"
6 f9 H% Q. h) q8 [' ^5 E) ?4) Restart the computer
6 t3 Y' A# ^5 M v, v+ j$ m
; T9 _+ H. x, WKeep in mind that with the recommended way the changes will have effect on every reboot without9 l6 P3 v7 w! w: W; @# \
doing anything manual. The first way needs to be done over and over again. In addition the second
0 q/ D! m( |- q, eway can be used to sign every driver that doesn't run natively on Windows 7.
a: W2 I, I: L2 k% S0 g' H& N, K G
For use of the VIA Cards in Windows 7 it is recommended to uninstall the VIA driver. This can be
6 O9 ]6 i* m% f. b) {1 |$ _/ k6 i( ydone like follows:
/ l: q$ W" o$ y0 ?$ P$ K- start "Device Manager" > expand "Storage controllers" > right click on "VIA RAID Controller" >
: U/ y1 }4 i( w' V3 g; }7 I+ R3 q4 y choose "Uninstall" > "OK"2 E. M; B" s/ m% b4 s f8 n; f) ?
- rename C:\Windows\inf\vsmraid.inf to vsmraid.inf_
2 u" c+ `0 a# m7 o- rename C:\Windows\inf\vsmraid.PNF to vsmraid.PNF_- w1 X; R% U9 a
- rename C:\Windows\System32\drivers\vsmraid.sys to vsmraid.sys_) x" o8 V. ~& A2 E6 \
- reboot computer' c* |* A- M, N( C
' L% S' c4 a8 J" r/ B5 }
; _" R! D, q6 J: \Much respect and credits go to Geremia and Maximus for their money saving FreeKey app
& s3 v* I6 U6 X" E# Z, H5 n. Sand their lightning like decryption speed!
) n- W5 o* N" M# c" k" D+ y" a, X S+ a4 z
In Dedication To The Birth Of FreeKey On August Fifth 2009
/ L1 N3 F& q0 w: W2 ZKai Schtrom$ `$ s% d* Q) g* V
% b( b/ V8 T- i7 U8 k) e: }- b0 n$ J3 V+ S
************************************************************************************************
1 b3 H& }0 x1 m% n5 s8 \/ @( l) \
) B! X/ J& ?# a- o* [, o* t4 K
* J' A) U8 e0 u( r* K. O; q% v8 G' DDosFlash and DosFlash32 V1.7 Beta Release Date 23.12.2008
M0 Q0 [& Y6 \, ~2 _-----------------------------------------------------------0 [! \! S3 m9 N; \4 @
- now supports LiteOn PLDS DG-16D2S 74850C and Geremia's LiteOn Erase and DvdKey method7 {8 K+ d2 F2 J1 d/ J; b& j% ]
" v/ C: I5 _* L
! v7 i- `+ B" o3 N- xThe following only applies to the new XBox360 LiteOn drive PLDS DG-16D2S 74850C.
: c& n7 k1 Q4 r
/ g/ u d4 a+ ~
# ]& o- _; }2 q P2 S5 i7 [4 OGeremia's DvdKey method with DosFlash16 with the PC's psu( H+ [; V+ [1 ^
-----------------------------------------------------------
6 ?9 v# D* ~( y7 W! J- disable CD-ROM boot option in BIOS( G6 O' v9 o2 V7 Y% z
- connect LiteOn to your PC's power supply unit and SATA port
. Q+ {2 ?1 @8 n/ P% N0 M5 A( t- power up PC, wait until bootup is finished
, O2 G6 V) r7 R2 S# k+ N5 C% C- eject tray of the LiteOn and shutdown PC completely
: t; h4 a# o7 G- E U$ P" q- push the LiteOn tray half in. J2 F3 F+ W F9 G, s
- power up PC and boot into DOS; \+ p. i; `9 G& N7 l4 q, U4 D
- run DosFlash16 in auto mode
) C1 }" L2 @ F) k/ s2 i; l+ ]- if you read the following:9 e/ }% W& p8 q5 G" ]8 P
MTK Vendor Intro failed on port 0x????.
) E* ? T7 O' B$ C' \7 x7 v If you choose to resend the command you should turn the drive off and on
4 ~; M: ~3 l& |0 b, c# [" O1 M after you pressed "Yes".
) K( V6 h. K6 A; l Do you want to resend the command until the drive responds (Y/N)?+ \) l9 q4 ^/ Z1 z9 d
- press 'N' for "No"* G! a* l( s% _
- choose the number of your LiteOn ATAPI drive
. d0 A$ n/ O8 _- enter "LITEON K" to read the drive key
1 i1 s6 r ~. R8 U- type the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files) p3 \; T, E$ e4 A
- enter the number of the COM port
+ q9 R: B2 W' w( w- if you read the following:" M0 D) ~! Z0 o. e) X2 f
To receive the drive key use Geremia's DvdKey method like follows:9 U/ k0 |0 {' p" p/ K; N* @
- Connect your drive with a serial cable to the COM port( |0 y0 P* B9 l/ K/ ]
- Eject drive tray' x. z' ]& M, g) _# R
- Power off drive
* _8 X3 J% G! i. x+ q) `3 F - Push drive tray in until it is half open( Y E# y1 C% @5 o- m: ~ Y. {
- Power on drive
& B3 G3 j: \3 `- n - Press "Yes" if you are ready
$ s4 c) T8 v4 y& Q0 X( p+ X Are you ready (Y/N)?' L% D+ }9 m% f" X2 F3 F$ Y8 L
- simply press 'Yes' without doing anything of the above, because we: @# F# r3 y, E) P9 b$ I
already did that before
1 H7 `$ G( _5 E! A1 `) L4 ~- after this DosFlash16 displays your DVD-Key and saves your key and identify data
5 W# i' q5 B; [- x8 R- to do the above steps in manual mode use the following command line if your drive) e# ^; ~ y0 j# `
is connected to port 0x0970 and serial cable is on COM port 1
- x( B7 D2 c) ?/ Q) E0 w* l DosFlash LITEON K 0970 1 inquiry.bin identify.bin key.bin dummy.bin1 P* J, b; e1 u* w
- d" u2 I, B1 u8 G6 q% a0 W' l
* K" n! V2 Y" _1 X" u7 @4 vGeremia's DvdKey method with DosFlash16 and 2nd psu: j) B2 k" o: c8 z/ m4 T& f
-----------------------------------------------------
) y- \0 N$ M) G2 T& _- connect a separate power supply unit to the LiteOn, don't turn it on yet
2 s. K* q5 H# \! j% m- power up PC and boot into DOS
; |- b: {$ M' g. E- `' j- turn on the LiteOn psu
n8 M. p' {8 G0 Y& A: W$ Z- run DosFlash16 in auto mode
/ X c, y# [% M: P4 g- if you read the following:2 y5 r- K r, a- f# s
MTK Vendor Intro failed on port 0x????.
: |+ J/ S) K' o If you choose to resend the command you should turn the drive off and on/ i* A+ P2 j: Z: C) u* G
after you pressed "Yes".( v' |5 g: H6 b# l
Do you want to resend the command until the drive responds (Y/N)?
2 x: P% [) @, z' Q- press 'N' for "No"
! Z) i, C( g, v1 Z6 a3 e7 b0 d- choose the number of your LiteOn ATAPI drive
& ~! b$ H2 y) b% d' S" G6 [: i- enter "LITEON K" to read the drive key$ G D3 `! z" j6 Q
- type the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files
- X' W; ]3 t @- N+ T- enter the number of the COM port
. K! V6 ?3 Y( i7 ^' \- if you read the following:/ r3 F! i! ?( q- J! {: e* c, P
To receive the drive key use Geremia's DvdKey method like follows:
. V/ {' _, a8 h0 ?' Z6 s - Connect your drive with a serial cable to the COM port( T N/ U9 y% J. ~
- Eject drive tray
& Q7 U8 \2 i) ~$ r3 _ - Power off drive
6 B: ^9 g' r+ X& m# v - Push drive tray in until it is half open
. }/ B, M7 x7 d9 w! x% J - Power on drive3 s2 F$ J3 k; ?4 c- e; a5 z
- Press "Yes" if you are ready$ Y2 S5 Y, N- }3 Z+ j% v
Are you ready (Y/N)?
: h( d$ s; _2 I! y" U- do the above and press 'Yes'5 s& \- a/ ]& g7 v# J& S
- after this DosFlash16 displays your DVD-Key and saves your key and identify data; m( V! U/ C% F. K( k) K! V
! [7 x8 f$ L+ x+ A
$ R$ y, H t( y
Geremia's LiteOn Erase method with DosFlash16 and 2nd psu7 h$ \: B2 {2 i& i$ n
-----------------------------------------------------------: N( J0 O+ p6 }
- connect a separate power supply unit to the LiteOn, don't turn it on yet
+ R& ~0 I& f9 v0 N7 V- power up PC and boot into DOS
6 @% r3 H9 h. X7 E! E. E5 S- turn on the LiteOn psu
7 I3 B6 a ~2 J( y9 w3 {6 d. f- run DosFlash16 in auto mode
( P7 H1 @! z( H5 c3 N9 j2 i$ f+ ]- if you read the following:
' Q% }2 {% v5 G MTK Vendor Intro failed on port 0x????.
$ C1 p5 u! c9 j! i1 G If you choose to resend the command you should turn the drive off and on
# L. W' F/ V- s. T/ t$ ~ after you pressed "Yes".
: L9 `& H9 K+ g; @ Do you want to resend the command until the drive responds (Y/N)?7 j# k8 A) ]' `* o1 c" i: E1 j# ]: ?
- press 'N' for "No"6 m0 {8 @* L, o
- choose the number of your LiteOn ATAPI drive7 O9 T' i) q! v5 V
- Warning!!! Keep in mind that you will need the drive key before you erase the flash,
2 Z8 R0 m& } q* ^: R without the drive key your XBox360 will not work anymore, L% q' O. `% E7 b
- enter "LITEON E" to erase the flash9 V% |+ G7 Y4 k; I2 r5 p
- the first time after the LiteOn Erase the drive needs to be repowered to give0 h6 b: e4 Y s3 ^5 W; ~! P
flash chip access, this can be achieved by repowering the drive before another
* h0 @+ r. n* _: q# P DosFlash16 start in auto mode or by doing a MTK Vendor Intro Power Brute) Z/ c1 ^7 j$ |+ ]0 S
- in my tests it did not work to power the drive with the PC's psu, because it will
1 q9 h- o/ D- F+ E, S always respond with busy status
. j3 N8 f7 o( ^4 j( Z- DosFlash16 can now read, write and erase the flash chip like usual4 }- F( \1 v" N; a3 l+ i, H
- to do the above steps in manual mode use the following command line if your drive1 Q- v6 I5 h# _+ I
is connected to port 0x0970
+ F' Z9 q. s$ }% N DosFlash LITEON E 09707 [" h0 j5 P. G2 m
6 X- S; t% z! U7 h/ {
0 C2 U' A/ \* h( oGeremia's DvdKey method with DosFlash32 with the PC's psu( D$ I. E& M. l: m
-----------------------------------------------------------2 Z' ]5 E+ A* X% J/ y, A
- disable CD-ROM boot option in BIOS' C3 @; U- `& E: O3 B, f; h) {( e
- connect LiteOn to your PC's power supply unit and SATA port+ h, k+ [* ]7 i2 L `0 P5 r
- power up PC, wait until bootup is finished
, J: F: y/ u7 _7 C* x! s! S- eject tray of the LiteOn and shutdown PC completely
% z1 J) t* L) D& h" _/ D3 p- push the LiteOn tray half in
7 {" b r; i x2 w& W- power up PC and boot into Windows. D$ X/ p# V8 m6 \
- run DosFlash32
. L& J5 w& `) |2 L. a7 t% X- if you read the following:
6 J. @2 k( }. G9 x9 J& |6 A MTK Vendor Intro failed on port 0x????.8 N* K# H2 Q9 b
If you choose to resend the command you should turn the drive off and on8 L9 c' M5 |/ p( ^! E6 ^. P% _7 L4 _
after you pressed "Yes".
4 a' w% n# K+ t Do you want to resend the command until the drive responds?
" ?& j; L* S, _ ~1 o" }3 R" c- press 'No'
( X( M" E, a6 l- choose "LiteOn DvdKey" as flashing task
1 ~7 ^" ?0 _7 r! [- s0 C) X1 B- choose the COM port number
8 I) r d5 t! Q' G; g- press on "LiteOn DvdKey" button
4 [! S% L n7 N% s" Z# C- \/ d- enter the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files) I) ?1 p, C4 U: b/ g# S; P
- if you read the following:. Q" a4 L6 }7 G0 Q N+ m5 u$ y
To receive the drive key use Geremia's DvdKey method like follows:
! X3 X4 J6 L2 k! E0 D) N$ { - Connect your drive with a serial cable to the COM port; P# L5 m! N( A: t* E3 a
- Eject drive tray0 M# S! s, o# F$ d4 K- Z! L: }2 Q
- Power off drive
0 [6 M8 N/ C0 y7 W - Push drive tray in until it is half open# l6 K b* P* @4 P7 B4 _# F! ^
- Power on drive
% @% o o3 A( H1 h1 g - Press "Yes" if you are ready
' G1 L& J7 D, x6 \ Are you ready?
: K( Q3 ~$ {" F- simply press 'Yes' without doing anything of the above, because we8 E9 B( V) j* Z! ~% B) {
already did that before' B5 T( X' o6 P" W3 I% B
- after this DosFlash32 displays your DVD-Key and saves your key and identify data
9 e8 I) L* j6 Z- \9 I/ n0 ?. Q6 d0 X6 f7 H' _6 m
+ F. Q( X3 }" q7 {" MGeremia's DvdKey method with DosFlash32 and 2nd psu
R9 b9 Z8 W" D! m$ `-----------------------------------------------------
L! d+ D. ~/ x5 m t- connect a separate power supply unit to the LiteOn, don't turn it on yet
' F4 Y4 d1 i+ R" B! }- m* [- power up PC and boot into Windows7 b& t% t, t, |
- turn on the LiteOn psu
. }8 Z: A, ^4 |6 A) x6 c6 Z; R& L- run DosFlash32
3 F. U/ [: O* ^) `- if you read the following:" Q+ ?% w" k6 U0 ^
MTK Vendor Intro failed on port 0x????.
7 b( N! {- \6 f, K1 X$ E If you choose to resend the command you should turn the drive off and on
2 p+ B, n1 K* w8 B+ r. X after you pressed "Yes".( r& o: s. \' w+ ~: c4 E
Do you want to resend the command until the drive responds?# _6 Z6 A: Q3 a$ B9 F( m
- press 'No'
) f# e& [8 l( d2 b8 M7 A7 |- choose "LiteOn DvdKey" as flashing task
- ~. _# B; c6 w% j7 {- choose the COM port number
" [8 ?$ B" ~$ f( b1 E+ j4 e- press on "LiteOn DvdKey" button, X8 R+ E9 Z; v2 N7 ?. D2 Y* J
- enter the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files
$ ~7 D1 Z% I# r0 |5 n8 r- T- if you read the following:
9 I5 i" n* @1 Q2 h To receive the drive key use Geremia's DvdKey method like follows:
& Z$ J% M5 ~' p% j. x, e) i4 @ - Connect your drive with a serial cable to the COM port
: n! G" \0 J0 W2 F3 @2 g, x - Eject drive tray/ V; h% o+ L2 g# W9 i" D$ [& r6 X
- Power off drive% P `' c1 b" h- U+ _
- Push drive tray in until it is half open
/ d5 w$ i: ^0 | - Power on drive \* W3 ^5 q6 R
- Press "Yes" if you are ready
3 ^) u- M F' M. W N Are you ready?
* P8 z3 d8 w8 K0 p- do the above and press 'Yes') _2 `# Q" u6 L3 J
- after this DosFlash32 displays your DVD-Key and saves your key and identify data+ l1 I9 S4 \9 N% _
& G- H! b. j: w& v* U) Q3 b5 a; d- t: f7 i: _# ]
Geremia's LiteOn Erase method with DosFlash32 and 2nd psu! c0 l M5 C, `! S6 @7 I4 y
-----------------------------------------------------------
5 F0 s( n+ V t6 k s* ~$ H* i- connect a separate power supply unit to the LiteOn, don't turn it on yet
0 |9 E7 {# @. [4 G3 K/ a1 E' F- power up PC and boot into Windows
0 X2 x: v7 M( R I& L( x1 T- turn on the LiteOn psu
& `5 A$ _. X, R4 K! u) Z p- run DosFlash328 X* S G' P% s$ e
- if you read the following:7 A% d) R F" `: w$ s% Q1 i* g3 G
MTK Vendor Intro failed on port 0x????.$ q/ D8 r( b$ |' z G' |
If you choose to resend the command you should turn the drive off and on
$ j6 N% z! A: S. e, G6 P after you pressed "Yes".* o! W- f4 {9 Z. b8 T5 c
Do you want to resend the command until the drive responds?5 P& R* L7 V& e
- press 'No'7 N0 }: s8 G6 T* u
- the LiteOn flash is not identified
) e* O* h9 G# G$ C: X% v$ ?- choose "LiteOn Erase" as flashing task
7 }& _2 @2 N" D5 [6 s- Warning!!! Keep in mind that you will need the drive key before you erase the flash,
4 u+ x6 ^; q2 x) j- Z9 b3 r without the drive key your XBox360 will not work anymore: \- P0 ]0 |! t) O3 d2 z( N. u& O
- press on "LiteOn Erase" button& Q: _3 M5 i/ F* ^1 c/ ]# i
- the first time after the LiteOn Erase the drive needs to be repowered to give7 N& R2 T9 N$ M2 H" U" l1 S
flash chip access, this can be achieved by repowering the drive before another' `3 e8 `3 \" ^) Y% _/ H
DosFlash32 start or by doing a MTK Vendor Intro Power Brute4 y+ S9 o/ E; A& u. ]# v4 X3 b
- in my tests it did not work to power the drive with the PC's psu, because it will% ?1 v+ b) Y" w' s* K9 D
always respond with busy status
! L% @5 k% O) ^# P* i* m- DosFlash32 can now read, write and erase the flash chip like usual) H7 k7 m4 `' q2 k: ^6 _8 o
$ L# n4 q, j; v" X$ N X8 @/ g6 M3 i, N
Respect to Geremia, Modfreakz, Podger, Redline99 and Tiros.
* ? J$ v* D& }8 l
% P% T7 ?! y5 Z+ t. E% i& ELike a wise man said: "0x2E is the MTK Intro of Death"; r- a/ p0 o- J' m
Kai Schtrom
. I- E) A9 ?, i2 w: g- C9 z4 a( E0 F
7 u: H3 U( M. U) w+ m$ q1 M4 ?' p8 t: y0 Q
************************************************************************************************
$ ~2 N3 L; E$ w, ^6 P. T5 Y
! M- Y/ c7 u& J4 f: Y$ q9 d! y, x7 s: b
6 V) Z& z# x! s. Q9 A6 QDosFlash and DosFlash32 V1.6 Beta7 m/ Z' F0 z5 N4 \
-----------------------------------8 g2 b& h9 @! `
- fixed power brute unlock bug for VIA cards, this can stop your VIA from working
, `1 ^6 ~" h" w- c; q. l7 Q. O% ^' A5 I with the power brute unlocking in Version 1.5) E [% C# Y# ~- T# T
- for DosFlash16 in auto mode on DOS my VIA card works best if I do a cold boot1 M% n) F. g3 r5 p$ i
and power up the drive short before or with the PC+ b; V& Y- w. p' h' l, s
- for DosFlash32 on Windows my VIA card works best if I power up the drive short
8 V% }7 K* _. b. r" l before starting DosFlash32! v {/ w) G$ ~. {- n0 J+ b
- for me the VIA works with internal and external connectors on DOS and Windows
C5 m% f7 }' f1 g: ]9 H0 {$ I- L+ T! Z
" M; F2 `, k0 Q6 CSorry for the trouble!0 H+ f+ O" }2 {8 E
Kai Schtrom
: ?4 H( C$ n" d
2 l% ^1 k2 c9 u, y* z2 Z( {/ u6 }* {! C0 {
************************************************************************************************
" _0 V4 y& B7 q' ^* L1 Q' y) j! A I* }6 @
`2 h8 [; h; ^$ eDosFlash and DosFlash32 V1.5 Beta+ a' X; E) ^/ o8 c2 {
-----------------------------------: L1 F+ s7 Q; t: a' j7 B
- now supports serial flash chip MT1309E with mediatek status 0x72 like the SH-D163B, SH-D162D,
1 d5 D1 [7 Y) H" C Asus DVD-E616A3, Asus DVD-E818A3, Sony Optiarc DDU1671S( y6 S, U+ q+ k$ c
- SST25LF020A and SST25LF040A chip support added
- ?/ X% L3 d- R! O( @- DosFlash32.exe ported from MFC to plain Windows API, exe size is now 22 KB9 S' z4 R# l! K) z' C; D0 t B* S) @
- new port i/o driver, because giveio.sys can't be compiled for 64 Bit Windows
) t6 ~4 c/ f+ Z- DosFlash16 changed slighly in manual mode, one parameter is added to support SST25LF020A and+ I5 s. g- ~4 [2 B/ s' I( \
SST25LF040A; U) {4 {+ l( q C9 r
- two new methods of BenQ soft unlock are now possible on all motherboards with only one power" v9 v( g8 u! ?# G
supply unit
2 c; v& c; x7 x4 G3 v! j* b- 1st method is powered by Geremia's unlock core, thanks for the complete idea, concept and% W) z5 f7 F0 K8 s$ ~
source to Geremia8 I9 O+ q. v1 K
- 2nd method is the Magic28 key send, this only works on BenQ VAD6038 firmware, thanks to! }: \$ m5 q! m/ D" o5 c
c4eva and podger for the initial idea4 W" C+ o& z: e
- the two unlock methods are send one after the other if the drive is a possible unlock
: a) z4 ]. D U3 C) p A candidate, first the Magic28 command, then Geremia's unlock commands and after that the
2 P% w Z- b1 a. u1 |$ M- u already known power brute unlock is send to the drive, you can cancel any of these methods2 [% P" D9 @# h0 _. J
before they are send to the target, this only applies to BenQ drives with a locked flash
1 R V. f1 [' W7 f! f7 a- DosFlash.typ updated1 {5 o" V# M4 G1 `3 N, v) w
- other minor improvements
9 T: s3 O( k; o% G8 S- DosFlash32 is now ready for0 K* x+ Z' P% N% b1 Y% Q
- Windows 2000
2 |1 i* \9 E- M3 @3 r - Windows XP 32 Bit1 U( x% k/ P3 ]! Z8 x
- Windows XP 64 Bit
$ Z' T7 }# e2 S - Windows Server 2003 32 Bit
# n8 t. B9 `" o* c" C6 ] J - Windows Server 2003 64 Bit) Q6 O0 O7 b# M0 \0 h. W
- Windows Vista 32 Bit
! r' |3 ~ C( q6 x: s - Windows Vista 64 Bit! _) I% j* J8 q7 p
- Warning: Drivers for Windows Vista 64 Bit need to be signed, because we can't afford the
- e) @/ M) z6 ~/ ?6 T: A, X money to let portio64.sys sign you need to do the following:7 ~/ M& u" M6 _) n6 X7 L
1) Log on as Administrator& F A6 J1 [# I% J3 X' t& B- o) g
2) Enter the following command in a Dos-Box:7 e0 k; j& B2 B' B* v5 ?" x! c7 W, v/ B
"bcdedit -set loadoptions DDISABLE_INTEGRITY_CHECKS"
- j6 d8 X8 j2 |: A (we made sure there are no typos in the line above) 
! _% t2 b8 U' x" e. `6 a: Z 3) Press enter and reboot your PC2 ~3 {5 G, \& J7 O% @) Z; U
4) Press F8 key upon initial system boot up. p: h3 Z, B+ {) }
5) Choose to disable forced driver signing enforcement for that boot session
% o( v1 t8 u2 i' M/ ^ q
- k; G! ^) f% Y& b5 s! h" w- _1 D! J' N: x# m! M
The following only applies to drives with a locked BenQ flash.
$ h0 N! J0 Z; V& a- I2 I, r9 r. V- M3 P6 M
& Q3 ^5 r$ t- O& q9 ~" M
Geremia's BenQ unlock with DosFlash16 / DosFlash32 on any motherboard with the PC's psu8 e0 r/ s }+ f
-----------------------------------------------------------------------------------------
3 m7 [- L# g8 z- disable CD-ROM boot option in BIOS
# |! X" R6 B* P9 E% Y% M- connect BenQ to your PC's power supply unit and SATA port
9 g2 S1 F' ~) d3 l w! }1 ~- power up PC, wait until bootup is finished
4 d% o3 |4 o# R- eject tray of the BenQ and shutdown PC completely
+ [) e+ V# d7 w) V+ V- push the BenQ tray half in
1 i& W' w5 L2 @3 n- power up PC and boot into DOS for DosFlash16 or Windows for DosFlash329 r! r$ B. y+ X7 a2 U
- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows
) U; X: e5 M% o5 G% Q9 N; r, N- if you read the following:
4 j [' ]5 w- y; ~- a: @ MTK Vendor Intro failed on port 0x????. Because there seems
, F! R2 S1 V2 {% _ to be a BenQ drive connected you should try Geremia's g6 A( S, z9 L5 T. s0 ]
unlock method.2 H8 ^' l# K+ O! d" z" a
- Eject drive tray1 Y* s: g7 y. A1 p5 Q8 ?8 Z; v
- Power off drive
8 l0 T/ u: l3 z I2 ^8 n - Push drive tray in until it is half open
8 \" ]) q. H% ? ^5 F% F$ ^) w1 U! ] - Power on drive
: i6 F B9 }) Y# G8 \) b Y J - Press "Yes" if you are ready5 k' _% x* h L
Are you ready (Y/N)?
* }; a% x% ^4 q7 Z. c1 I: d- simply press 'Yes' without doing anything of the above, because we
/ e l* P7 ^: f already did that before starting DosFlash16 / DosFlash32
7 N: ?3 a: F: a. |! B7 \- the BenQ flash should now be identified. h+ X$ F- \' {5 s
- go on like usual3 [& Z5 p- c2 t! x: _1 t" a4 J
\7 S- z3 P) A% M" X# z4 d
8 |4 z: C- C& g' S* L1 n8 M# E; N( fGeremia's BenQ unlock with DosFlash16 / DosFlash32 on any motherboard with 2nd psu( G" g8 z2 u3 i% |/ Q* ?# O
------------------------------------------------------------------------------------
1 z$ V# D: f" r- m5 Q' H: |- connect a separate power supply unit to the BenQ, don't turn it on yet- [ D% @. i P+ [* F
- power up PC and boot into DOS/ \9 P! H5 n6 b
- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows: t4 S U0 ^/ ]
- if you read the following:* _) A; b- n* x4 n
MTK Vendor Intro failed on port 0x????. Because there seems
0 ^* b3 K: F* j3 q& o to be a BenQ drive connected you should try Geremia's( w; H' b. q3 M) ?! M# U
unlock method.0 G$ J, f! a% ] @
- Eject drive tray
8 Y6 ?1 _- n7 y0 ]" H- a - Power off drive: s8 i0 U# d" i* S( {/ J$ L1 F, o
- Push drive tray in until it is half open
* z: u* G' n4 y$ C - Power on drive; `* m n1 T! @2 }6 z* ^( c/ W
- Press "Yes" if you are ready- [$ O1 [$ O2 k* T) D( J
Are you ready (Y/N)?- @: h2 a5 j4 |4 T1 y3 y. a1 a) |! S! P
- do the above and press 'Yes'
8 p; e" g ^6 _% z- the BenQ flash should now be identified" O! l- Q9 R2 g2 D1 S, B3 H s% x
- go on like usual
- ]2 k( i! o* Z4 s: \* ]* T1 a% r/ R: B; S" z" t
" I; y6 M% C+ J+ t3 b* L9 H: c) nMagic28 BenQ unlock with DosFlash16 / DosFlash32 on any motherboard, |- T# ]) @8 e$ H3 u
---------------------------------------------------------------------
, g4 _' {7 [" N0 h/ ~: }" f( W- connect BenQ to your PC's power supply unit and SATA port
* k" m: u: s5 B! ]; S- power up PC and boot into DOS for DosFlash16 or Windows for DosFlash32' d7 J" T, @# l9 ]
- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows2 A, s+ q' l6 e
- if you read the following:
( c5 ?& w: b# i8 P: |: { MTK Vendor Intro failed on port 0x????. Because there seems9 G6 y* w) K: G4 ]2 B' p6 A
to be a BenQ VAD6038 drive connected you should try the6 @5 E$ R, H$ t6 Q- Z& o
Magic28 unlock method.
2 }# `& ^" I# K6 v0 O1 V# w Do you want to send the Magic28 command?
! u2 K& k' `6 R+ i" y- press 'Yes'
! q2 c2 G9 E9 s% v& E) |+ c: @- the BenQ flash should now be identified9 c. Q w/ T# B' ~' Z* y% B
- go on like usual5 @# ^4 }- V3 p9 h
8 _* _5 x$ J) Z9 Q2 g' X
" u9 K$ i; c, ~( XThanks to Redline99 and Tiros for help and support.8 c" c( t# P) O' \
. c4 ?* E1 O: q+ k5 h6 ~3 @+ C
It's all about DOS!# B; p. s @4 ]" Z. N
Thanks guys for the excellent team work!+ T" l o( _! L; U! v3 V5 Y5 A, g
Geremia, Modfreakz and Kai Schtrom3 h; { N* `3 d1 c6 `
3 _9 }# a9 A' H6 {0 U0 a
4 [5 k c7 c9 `( e( n9 y U0 @
************************************************************************************************$ `' u! ^/ q6 j k
4 A: m" p5 ^3 N6 D$ ~. {. L# l. L0 p6 D9 A
DosFlash and DosFlash32 V1.4 Beta& ]% N( a. b2 o4 t5 a8 E1 C
-----------------------------------3 v5 l. O& @* v. w9 ]. S
- DROM6316 flashing support! S+ M# @8 h# X% M6 Z
- a flash erase is now always done with a chip erase and not a sector erase command, because
& m( `: C8 a" [$ ^9 D: ` the sector erase gives problems for some Winbond flash chips including the DROM6316( |/ X" d2 Z0 g; R- ]+ Z7 P# ~. A* U
- DosFlash.typ corrected and updated
2 P: v& S* h/ U- i Z Z$ P5 ^- for a detailed explanation on the soft unlock look at the included file SoftUnlockByIriez.txt,9 u, x, X4 V2 z; Y$ @. Y+ o
it contains a very good explanation by Iriez from XBS, thanks for that one!
. a1 V$ D9 k# n3 F
) v/ g1 G$ h" t" G' Z O6 mThanks to Iriez, Jumba, Redline99 and Tiros for help and support./ [& W: U; C6 L9 W4 a* m
0 T. j% h) N) f/ p! f$ i) ?! pHappy DROM bricking!
" j8 D7 ^" @! T& @* U, CTeam Modfreakz and Kai Schtrom3 H2 w- `8 R. t& [7 C- t
$ o# @" J* V: x( q( \2 M
* M/ l o9 q. c$ n" _) _ ~# `************************************************************************************************
" G# X8 k# B! l* D, R4 Y; w* e& |% u( G
8 x4 G" r* O$ ?3 I. S+ X0 s
DosFlash and DosFlash32 V1.3 Beta$ g1 _9 Z6 S( ]$ r+ i9 `6 P% a0 i
-----------------------------------' j- K9 H2 O* T2 O+ D9 l% f7 s3 V
- BenQ optimization in unlocking the flash chip, it should now be possible to read/write/erase/ a2 m: V% V5 f: U6 `
the flash without any soldering or wire tricks, the drive is polled for the correct mtk
! y5 n+ ]; @7 [, B6 g9 } unlocking status after power on, this only works for VIA cards and NForce boards atm
3 }6 D! D+ _+ W( t& {0 P1 y+ D( l" n- DosFlash32 has one additional parameter, if you start it with the parameter "EnableDrives"3 M0 y0 t9 M* z5 p6 K
all the DVD-ROMs are enabled in device manager after flashing, this could give BSOD on some
' k" e2 f" X: R! q) n% d systems, therefor you need to create a DosFlash32 link and add that parameter manual to use it
9 ]0 d* D6 w6 X- ?- DosFlash16 has one additional parameter "Send ATAPI Device Reset" in manual mode, this could3 `. K; A y" Y' a# d. G6 ]; m
give better chances for soft flashing on some VIA - motherboard combinations
& i4 z- ^ k' [2 u) v: m* K- better support of Intel chipsets, drives can now be flashed if the controller is not set to U' G- |/ B% I9 y
native mode in the BIOS
9 V; D/ Z( ?+ M. k7 T/ j* T- the following controller list includes vendor and device IDs that are hardcoded to identify
0 a- n& k) m4 n, I' }7 o& ] the controller type (IDE or SATA), this is needed if the BIOS uses IDE ports like 0x01F0 or2 r: L: e" ?- S: b% R M9 Q
0x0170 as SATA and not as IDE channels, this list is NOT related to soft flashing' e4 h0 G1 T& l- C& ?
- the following chipset support is added1 q7 N* y* ? U- f
- VIA cards
# A: s. p3 h1 @; R* ^7 }9 P - all VIA cards with a 6420 chipset
# a* `% r) a6 L! M5 w/ Z - IDE Controllers
, E' P y- n" s8 X2 A* ]. q - NVIDIA nForce 2 IDE Controller$ R4 X+ S8 i. F+ l a
- NVIDIA nForce 4 IDE Controller# X, Z. h# M1 G# L' B/ I: I/ v
- Intel ICH9
3 o6 g ?8 D! x: r* ]2 c7 @ - Intel ICH (i810,i815,i840): c3 J1 _- v |5 q# Y8 J( _
- Intel ICH0- J: X* B; s: O
- Intel ICH2M; g X3 D8 [0 v: F& j
- Intel ICH2 (i810E2,i845,850,860)
& O1 `% l) z& g, \ R8 g% L6 s - Intel C-ICH (i810E2)
, s, ]+ Y0 X9 \5 t3 Y) M5 t4 n - Intel ICH3M
3 [9 R) _. }1 y# ~ - Intel ICH3 (E7500/1)
9 e8 l0 d+ U6 ^5 o - Intel ICH4 (i845GV,i845E,i852,i855)
2 ~9 w- U$ ~% T' n% c& j. K - Intel ICH55 R+ b4 \" o: R* U* d' @
- Intel ESB (855GME/875P + 6300ESB)
4 c9 e; k4 h( P; P4 x - Intel ICH6 (and 6) (i915)
# \ O" L+ L4 L! N( d, V4 v+ _ - Intel ICH7/7-R (i945, i975)
1 m+ g* n2 v* R! q0 |# C% d% T6 Y - Intel PIIX3 for the 430HX etc# |. k- x& Y- X& g
- Intel PIIX47 M' ^6 e+ G+ s& U( R9 L6 I" u$ S, U
- Intel PIIX4 for the 430TX/440BX/MX chipset
+ w" H) _ B9 ]' \9 \2 a" Z - Intel PIIX
: A$ B+ A0 j1 r; g% \ - SATA Controllers
8 o% z/ e+ C; M6 A$ w# ~+ ] - NVIDIA nForce 4 SATA Controller
9 T, n$ K; i6 B" y1 E - NVIDIA nForce 2 SATA Controller
' }0 ]& O4 ]% S( { - NVIDIA nForce 3 SATA Controller* I2 u/ \1 U0 M
- NVIDIA nForce MCP04 SATA Controller: A |$ J$ v; y! j4 |
- NVIDIA nForce MCP51 SATA Controller/ N. r$ }# s( {& c9 R8 u3 k
- NVIDIA nForce MCP55 SATA Controller A' O' Z. O5 n1 P8 {" I
- NVIDIA nForce MCP61 SATA Controller1 b! ~- k2 m& f4 a, t4 G
- Intel 82801EB (ICH5) E1 u+ Z/ }6 @# o
- Intel 6300ESB (ICH5)
2 M" s7 Y6 P0 P& | - Intel 82801FB/FW (ICH6/ICH6W)+ [4 _6 _" M0 Z7 c
- Intel 82801FR/FRW (ICH6R/ICH6RW)4 H9 N: ]7 T( C/ c: G: } W! M3 ] X
- Intel 82801FBM ICH6M
/ D& Q/ Y3 D/ `0 Q9 @, Z, ~ - Intel Enterprise Southbridge 2 (631xESB/632xESB)
& R5 i- M3 t, I2 h% I$ L$ r - Intel 82801GB/GR/GH (ICH7, identical to ICH6)
( e, r' t% U1 a: w, T( Z+ F \ - Intel 2801GBM/GHM (ICH7M, identical to ICH6M)
6 _. b8 w4 D0 c( d, T7 v2 j - Intel SATA Controller IDE (ICH8)& M! {7 Y' M% ^# _* n4 Q+ K# ?
- Intel Mobile SATA Controller IDE (ICH8M)9 }- w+ o6 C" m, G4 c& }: o
- Intel SATA Controller IDE (ICH9)
" T5 `$ k W1 F1 P: Q - Intel SATA Controller IDE (ICH9M)% a9 Y; m! g9 s$ J: Q& R3 P- G- d5 \
7 m2 i- C5 b3 B e" z: g# f$ F
% r( l2 h/ ?* V7 P6 d0 DThe following only applies to a software flash on a locked flash. The methods have been tested% T+ W* ^7 b. N
with the BenQ and the Sammy. The VCC trick will work on any motherboard, but you need to do : _0 Q, U) X/ R* W# ]5 Q! R
some soldering and cut traces.) ~. Q3 {! g$ J" t6 |
- Y, s. V. j1 n3 X$ B
% Y8 P A) l0 N* H1 m1 V
Soft Flashing the BenQ in DOS with a VIA card and DosFlash16 in manual mode
0 N; F+ ?% d6 l4 R" s-----------------------------------------------------------------------------
& W, k) {$ I% W/ B- first you need to know the port addresses of your VIA card, you can get these by starting
2 v9 W9 C; O7 o" p. v6 D/ q msinfo32 on Windows XP and looking at the port listing for SCSI devices& d- u$ P/ n' U, {# p# g0 c8 ?
- for the 6421 the 1st port is internal SATA, 2nd is external SATA and 3rd is internal IDE: b7 h* X3 h+ }
- for the 6420 the 1st and 3rd port are internal SATA
' X$ y6 B0 s `; O/ r- you need the starting address e.g. 0xD000 or 0x70000 g$ E" d& ^( U1 K r5 H. ^& A2 I
- be warned that these addresses can change from computer to computer, they are assigned! C- G% P7 h' J4 \
at bootup, but Windows XP should display the ones you need for flashing in DOS& M* g' H* K* [7 K6 ?/ ~! g( U+ p) h
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or
7 L4 L8 ?! e8 h ^. X( W Xecuter Connectivity Kit)
8 m6 F7 n$ b' c8 Z2 `) B) S- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we3 Z" u6 X/ d# h
need to power the drive off and on during soft flashing! O, T! s/ h4 f9 B( [
- cold reboot or reset the computer
0 @" H! T7 F- K" x- boot from a DOS disk, I used a Windows XP MS-DOS startup disk
1 U- [9 ]4 U+ [; X- at the prompt type:
( \$ l8 C d, S4 T6 [4 ^ DosFlash r 7000 1 a0 1 4 a:\orig.bin 0
! a, `0 a3 o! {1 `9 @6 ] - instead of port 7000 use the starting address your VIA card uses% U2 ?$ b- |* I, _7 U9 L. a
- press return
. N% [! m5 H% x2 @) l% s- DosFlash16 will ask you if you wanna resend the mtk vendor intro cmd, press Yes8 I4 C8 _/ \% x0 Z8 X" t
- after you pressed Yes the drive status is shown on the screen, it's something like 0x7F,: W/ C6 U, A% } @. e4 h
this will change during the next few steps
0 j7 h' X8 V4 I6 o5 @! U8 y- turn on the BenQ psu and wait 2 or more seconds, status changes between 0x51 and 0xD1
& c) a& P$ P6 V* S, `) L. _$ ?- turn off the BenQ psu and wait 2 or more seconds, status will stay at 0xD1' Y/ o a% Y) F& M, M& u
- turn on the BenQ psu, you should get a good drive status 0x73 and flashing should start% @3 ^3 O' e, ]( D; j& }0 C
- this worked only one time after the computer is powered on or resetted for me- n$ q m' F: w$ d% ^
- writing and erasing works the same way6 ?$ ?5 ~" ~, A" N6 r% Y. i- b
- for writing type:2 x5 {7 b4 u, O7 A
DosFlash w 7000 1 a0 1 4 a:\ixtreme.bin 0
' W9 J7 f9 R C, u) A; p. @- for erasing type:
9 B. B- F, J F; E" M6 C# O/ v( A& \ DosFlash e 7000 1 a0 1 4 D8 0 (D8 is the sector erase opcode for the BenQ flash, if you need
/ H: F& w& |5 g5 q" l' w' u4 z. s u to erase another drive, lookup the value in the datasheet or DosFlash.typ)
6 d t1 _3 D% v0 H/ ^( b; Q- if you experience any problems try to use 1 as the parameter to the ATAPI Device Reset, cause
6 z& q, l5 {' p) ` the same VIA card will react differently on another motherboard sometimes
9 M: X" _7 t4 V' L% m4 b( Y) y$ H' o% B, ~) t6 @* F2 N# q1 m( c
2 m) x4 B6 B& U9 C) cSoft Flashing the BenQ in DOS with a NForce motherboard and DosFlash16 in manuel mode; M7 n1 r2 H' k
---------------------------------------------------------------------------------------
* q7 |' T' m9 q8 o% G E- first you need to know the port addresses of your NForce motherboard, you can get these by / c' g! N* \3 C* S& z
starting msinfo32 on Windows XP and looking at the port listing for IDE devices0 M0 M5 E: G, B' W. B
- on most motherboards the 1st and 3rd ports are used for SATA6 f" C+ A, P- q, q5 O) T' ~
- you need the starting address e.g. 0x0970 or 0xE900
7 B! w' {9 R' C! j( G( K* }- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or 4 l7 s U' L9 |, v1 \( o! v; v$ g
Xecuter Connectivity Kit)- ^0 k" B. a* v, X. N3 j
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we
' V6 l8 w5 k2 J- @ need to power the drive off and on during soft flashing
- O$ @% i: }4 t$ ~1 T$ h- cold reboot or reset the computer
0 U# v B( l, l+ P6 G2 m9 X# |- boot from a DOS disk, I used a Windows XP MS-DOS startup disk
( x1 o+ v: C& B0 ~$ @' B- at the prompt type: 4 Z, y* U! f, d
DosFlash r 0970 1 a0 1 4 a:\orig.bin 1 / L" C, K1 X! b3 f& U6 B Y
- instead of port 0970 use the starting address your NForce motherboard uses6 |9 l' r! S$ n/ d! P: ` b3 U
- press return
1 W% C1 p- m2 b+ q1 B% D @; ~' H- DosFlash16 will ask you if you wanna resend the mtk vendor intro cmd, press Yes
) g4 c; O6 ^" ?, j% b6 k* e0 @- after you pressed Yes the drive status is shown on the screen, it's something like 0xD1,
7 p8 E; V9 C* ^; I8 { i' F this will change during the next few steps9 _# ^- O8 H5 X: S
- turn on the BenQ psu, you should get a good drive status 0x73 and flashing should start4 O9 d& g! U5 r/ ]0 u- I
- writing and erasing works the same way
& a- m, A/ t% U5 E2 \; n9 Y: r- for writing type:& {2 j. t9 ]7 a! @( i* R3 `2 w
DosFlash w 0970 1 a0 1 4 a:\ixtreme.bin 1
1 a2 B8 h [: @# T- for erasing type:
: D$ L7 T0 F h) E& b( }( H, E DosFlash e 0970 1 a0 1 4 D8 1 (D8 is the sector erase opcode for the BenQ flash, if you need
" @; s1 I G" _ to erase another drive, lookup the value in the datasheet or DosFlash.typ)
Q4 ?+ `: Z# x2 G" A" w& N. P! E% t4 ~9 l, e J: t D
4 C( r0 a+ }1 b& o% h* Z
Soft Flashing the BenQ in DOS with a NForce motherboard and DosFlash16 in auto mode
% S1 T3 {" ~! d% q+ J-------------------------------------------------------------------------------------
/ F1 f% Q, ~4 R" m/ x- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or ' c/ D3 E7 E- u
Xecuter Connectivity Kit)/ \ A" t- S7 H. I1 ?6 T, ?
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we/ F1 k2 W3 u6 R& e+ W" s. R
need to power the drive off and on during soft flashing# T& V3 k& g6 X
- cold reboot or reset the computer' H! h& s7 L M
- boot from a DOS disk, I used a Windows XP MS-DOS startup disk
2 l: X% o$ r8 m- wait until you are at the cmd prompt
9 G. B6 M8 W% T- turn on the BenQ psu" Q' P) O: k" h1 R9 z/ |
- at the prompt type: ! L. }- }) d6 Z; l8 L! k$ f1 \0 x
DosFlash
3 q2 ]: ?/ W+ O0 M' Y, D& E) W- press return3 q' o: N, v) K
- during scann of the BenQ's port DosFlash16 will ask you if you wanna resend the mtk vendor3 S$ K) F! q* @5 @6 G& P4 E l
intro cmd, press Yes
0 [6 l8 L }! |* ]7 J0 F- m- after you pressed Yes the drive status is shown on the screen, it's something like 0xD1,
3 r- x! c! C7 ^3 I this will change during the next few steps
- W" C. c3 X9 Q5 n6 u% y' j3 W- turn off the BenQ psu and wait 2 or more seconds, status will stay at 0xD1$ @8 l" g& U5 o: c( v1 `% f
- turn on the BenQ psu, you should get a good drive status 0x73 and flash access is granted
' d. u$ M ?) a: x) h- you can now continue as usual using DosFlash
; ]2 Y2 I7 |3 E' D W- writing and erasing works the same way, u5 O1 K0 g" ?! S9 [
- if the ports are scanned there is the possibility that you'll get the resend question for
4 L/ F' [8 t% ~ other drives like a NEC, this is because the NEC has no MTK chip and returns a bad status,$ F1 e6 _2 W, M' N) D- i/ h0 W7 l
if you know the NEC is at that port you should press No and press Yes only if the port of6 X$ `% u8 j0 k: ~) E; D- A
the BenQ is shown or simply disconnect the NEC( m; ]% ^! t5 X
. s/ f6 g+ y Y/ J5 [( d' B; [0 `3 y* f0 Z8 D7 W, I6 N( s. Y
Soft Flashing the BenQ in Windows XP with a VIA card or NForce motherboard and DosFlash32
$ [" k0 E' ~4 d" M-------------------------------------------------------------------------------------------9 F3 s3 ` i0 `3 s0 L9 ]3 C, T
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or / H) | }! H. x1 |* g: J
Xecuter Connectivity Kit)
6 ^, Q- T! ~, n/ d, D: }+ n" @- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we6 I/ G" _( \ d0 s3 N
need to power the drive off and on during soft flashing
) `4 j$ t& `) u2 N2 H4 J4 u- cold reboot or reset the computer
; P# O, E/ G; `) _! ?- turn on the BenQ psu when you are in Windows XP$ Q2 ?+ i0 i* K+ O- w
- start DosFlash32
$ _* t! h. y; n" S F& }- ?( y- DosFlash32 will ask you if you wanna resend the mtk vendor intro cmd, press Yes
- A% Y& w* H; _1 w3 Y- turn off the BenQ psu and wait 2 or more seconds
0 E: F G( E' T* x- M/ u- turn on the BenQ psu, the DosFlash32 dialog should show up4 m2 {- n7 C5 X [* z
- the flash should be recognized by DosFlash32
" ^$ J' y: }& O2 u4 ^! z: }- you can now read, write or erase the flash* Z8 s1 m; ?# W7 v, @ i3 O
- you should be able to do the flashing more than one time in Windows, only do the power
! s7 Y- S% {9 y1 c* Q7 V) A! I: k off/on trick again
. _2 r- @4 V/ b5 }) P9 X& _- if the ports are scanned there is the possibility that you'll get the resend question for
) k A7 j0 {# @. h6 L other drives like a NEC, this is because the NEC has no MTK chip and returns a bad status,
) i# M; i O3 t& u( y) g5 v6 X if you know the NEC is at that port you should press No and press Yes only if the port of
8 o7 H1 }- R2 J" a' \ the BenQ is shown or simply disconnect the NEC
n# `' `( b8 L9 H7 V8 m% A) [* a* n% ~# i' P' |) Q
2 V6 ] |& w7 Z" @Many thanks to jumba for the great idea of BenQ polling!) ~: [' F0 d9 M! ]' C9 O6 }
Thanks to Iriez, Jumba, Redline99, TeamModfreakz, Tiros and all the IRC people for testing5 T' y) M6 a) c. K3 y+ }( {6 E7 x
and support.
$ X- ]3 q6 A1 U* |/ i, J6 B! m
' o6 q# j9 I) j) P/ P" x" ^1 m) CJoin us on IRC efnet at the channel #dosflash for support.7 W; \/ g3 K7 E& o p4 E, F& T& c
% }$ ~" {& ] s8 G/ u2 o/ q8 I
Don't brick your BenQ!
" [) x( d3 F9 b+ r R( k0 nKai Schtrom
+ V! F! H, y5 c9 L f$ E6 v8 ?- Z9 Y; r3 K
+ H! X, o8 w6 \' B************************************************************************************************
" \6 w/ f' g! f, s& t$ G3 I2 W- m5 w# z- G3 G+ C2 u
3 c7 Q* b, X) K8 F
DosFlash and DosFlash32 V1.2 Beta( {3 f# E/ a, ^6 M0 o, a3 B. e
-----------------------------------
\ S- N$ h( a( ?4 K- bug fix for BenQ recognition
( t5 K4 ~" G( y6 n( O6 O - manufacturer and device id are sometimes 0x00 for a correct installed switch3 C4 V s I+ ?7 M: F% l( S6 y
- this issue is fixed with an additional ATAPI device reset before the mtk vendor intro is sent
( R Q& s! ~/ ?) X9 }1 j$ E
# t m2 I) O. I: j; d8 F8 w5 qThanks to Redline99 who fixed my buggy code by adding one line!
2 K D' u. X8 F! i6 H0 M2 ?; K) C' r4 W8 V
; v3 G7 H# f& x; q
************************************************************************************************
! n, G" A5 U. R: Q' e r
9 x. c/ E: S! g8 ?1 j+ ]; n+ R/ |7 M5 Y9 B% v3 p: u7 H
DosFlash and DosFlash32 V1.1 Beta) m$ k6 ]* |+ X/ y
-----------------------------------
. c4 K% z) m) a. S- DosFlash.typ modified for better BenQ support
?8 [) _ Z+ \: A7 e$ r- DosFlash16 Flash Manufacturer and Device ID screen output restructured
$ E2 z) M: i5 Y& } m, k% j. Z- flash chips are first erased before writing starts
0 e* [% n+ L' ?2 p' U5 D/ `- DosFlash32 no reenable of DVD-ROMs in device manager after flashing, this means you can't see the drive2 r! B: E0 I1 g# F( E3 b
and maybe have to activate it manually again in device manager, this could give better compatibility and# F& C. X( k) n+ H. D) u
hopefully no more blue screens
( l5 @$ l L) I% q- `) W0 {
7 d+ T2 m! `. x; pMany thanks to Jumba, Redline99, TeamModfreakz and Tiros for inspiration and help!' h9 h/ Y$ K% R7 l* n
+ `/ s* j- M9 h! U% R$ E; L: m* [2 A' b& z" E
************************************************************************************************! B# k! t# z5 @* T# B. A* G, t8 O
; y5 N1 l- s4 ~2 B8 Y
$ U$ s+ d$ G; W m ?) V* u P1 lDosFlash and DosFlash32 V1.0 Beta, O& A" f1 p; k1 C. Y
-----------------------------------
: [1 Y3 \4 {4 F9 v0 nDosFlash can be used to read/write/erase the flash chips of most CD/DVD-ROM drives8 d% j% I; F/ H1 |$ [- c
that have a mediatek chipset installed. DosFlash is for DOS flashing, DosFlash32
# T# O/ H- c3 S1 _* i4 p# o+ ofor Windows flashing.& w( W$ T/ R7 a$ p# M$ [
( n' ? ?! @' g! w+ w+ Y) `- w5 {9 t( z* r% S
Features:! V6 M9 b9 o; d/ G5 j7 x4 }+ l6 X
-----------
# O% F3 z+ Y! O, g' y8 |8 d1 Z- flashes IDE and SATA drives+ b3 l( P( i' v; {
- supports parallel and serial flash chips
( v+ A3 `/ h" H- flash drives in Windows with direct port access% D" A' n5 Z U* b' {( l! B4 l, T
- no vendor cdb flashing commands are used
- V. l2 R5 U1 c- tested with the following drives:0 Q" a- }* z& M4 ~- }( a( q/ @; B
- TS-H943A MS25, MS28
1 ?3 X( j* i7 z+ ^" [: Q: S - SH-D162C" g! v+ T: N. l
- SH-D163A
: L% h$ c+ p3 R4 R - and some other drives like Liteon, Hitachi, ...
2 f8 @. L; t8 P; R! H0 m8 E- NEC drives are not supported, cause they have no mediatek chipset installed/ A3 T5 {$ L/ i7 J( A2 o2 O
9 T0 d% T3 t- W& s7 D
. S4 y( J% @ x7 k) r c3 u
DosFlash. w5 G! X1 k5 h. |% G8 k
----------. ^, X8 y' @" [4 Y, ~" r! ?
DosFlash supports two flashing modes, Auto and Manual. If you type DOSFLASH at a DOS prompt it
) Q2 G/ d w! n5 C C' twill start in Auto mode. All drives and the corresponding flash chips are detected automatically. E6 X* W, |% j3 U
If you can't get a flash chip recognized due to a bad flash or other problems you should use the
5 W- h7 q$ F. G! T3 q BManual mode. In Manual mode you can enter all the parameters used for flashing by hand. The
( L$ V) W' T# y. r8 s: h+ _" \following help screen is displayed if you start DosFlash with a wrong number of parameters:
1 V& W6 Z6 c) |9 A% v4 B6 f0 Y! Y/ W$ M
0 h3 j5 g0 O' V9 b; m, r
DOSFLASH by Kai Schtrom, 08/05/2007 (Ver 1.0 Beta)
# R/ D5 t$ s, j" e( a6 p/ `/ q) `DOSFLASH [R|W|E] [PORT] [PORT TYPE] [DRIVE POS] [FLASH TYPE]9 \4 |$ ^+ T) T3 y) @" p# C
[FLASH SIZE] [FLASH SECTOR ERASE OPCODE] [FILE NAME]
* A* p" A1 Z3 b R: Read FLASH0 {" `: @# W& W- x* b
W: Write FLASH9 s' E' J, w6 a5 w; N
E: Erase FLASH8 C% W8 \ j( v
PORT: Port to send command to
9 H- ?" I+ L4 {1 `3 q9 v PORT TYPE: 0 for IDE, 1 for SATA. p' R' I, t. l. o
DRIVE POS: A0 for Master, B0 for Slave
- `* p. I& P9 u; o3 l. Z0 L) d FLASH TYPE: 0 for parallel flash, 1 for serial flash. D7 ]8 s# @+ Y2 C6 i7 y# j! k2 n. o
FLASH SIZE: size of flash chip in number of banks6 a4 ~, u! {) U/ @
FLASH SECTOR ERASE OPCODE: individual sector erase opcode command byte
8 E' o B* ?0 W& H this is only needed for erasing a serial flash
4 F1 {3 l! z7 I" H6 m( O FILE NAME: name of the file to read/write from/to flash; r; b) A* r: F, G8 \- s! c
All numbers are intepreted as hex values!
3 D% H' H* g! C1 b, l6 Z& \$ M$ _; f
7 q7 [: @ u+ e, T0 vExample Usage:
3 h. M2 |0 i- C. ~ B"DOSFLASH R 01F0 0 A0 1 4 C:\flash.bin"
9 u: K4 L- X C5 q: {- k& {=> Read serial flash with a size of 4 bank (262144 bytes) from Master Device b5 _; D$ P0 }9 H
on IDE port 0x01F09 \' {0 Z. G3 n1 |) G9 z- ~
"DOSFLASH E C000 1 A0 1 4 D8"
7 ]. B% ~9 v- r/ A4 c. |=> Erase serial flash with opcode 0xD8 and a size of 4 banks (262144 bytes)# q9 D" [- j. w) O# d; \
from Master Device on SATA port 0xC0001 w! J* }5 m3 Q" g3 d+ y$ d# n
: j& X. }6 ^+ r- @. N5 i 0 ^: p1 X4 _; L6 a3 ]
Explanation of the Parameters:
' [/ b2 o$ h, _' X--------------------------------
& o: x4 l% k$ k. n( |1 E* b& \5 U# B, @$ H
[R|W|E]3 x9 Z q& V3 V% j" U1 t8 k7 Q
---------+ V ]3 n% B; @( [( v% }' F) x, ]
- this will set the mode of flashing, it is recommended to first try read on any
3 z8 x0 d6 Z) ]4 w3 D% [0 n drive, if the read will fail, it is highly unlikely that a write or erase will
: @6 g/ D. V# \& e6 F succeed
9 b8 `. K' ?$ O7 F8 z
. O3 o, o3 W0 [1 J& g, t[PORT]& r* B/ T* Y+ L; k4 G9 A/ r
--------5 x$ @% ]1 [+ j9 r* v" e- b
- the port to which the drive is connected, a port number should always be entered. j3 l8 m* U5 j% n
in hexadecimal and have 4 hex digits, valid ports are: 01F0, 0170, C000, C800
* }3 h# ]0 X# t* E+ R- f+ Y) O- this option can be used if your PCI adapter card or on board IDE/SATA ports are5 ?5 q7 e! x+ g( j* \8 W
not identified by the auto mode
! u0 r5 J6 O7 g# \& e' N! f0 x$ s& z+ g* ]3 M; v2 ^3 q: j+ P
[PORT TYPE]
7 _2 y [: s# |-------------
2 G6 e: C5 b5 V$ c: ]- the port type tells DosFlash what type of port is installed on the before entered) }+ y% l$ g' ]( M
port address* J# O( ^) O- H3 ^( y' J. V
- valid values are 0 for IDE and 1 for SATA
3 a+ ~( C0 v+ a. S- make sure you never mix the wrong port with the wrong port type, this could give
- C+ x, X: d3 \ \) D4 p strange results or in the worst case a bricked drive
" N+ ^# O! Y' y0 J d5 f / }& n9 `7 g7 h+ _% ?
[DRIVE POS]9 p. g1 c: ^3 H- B" w& X
-------------
% n8 R" }) j3 P0 P- old style IDE channels have the possibility to connect two drives at one IDE/ C0 N: L# w% D( m9 D6 i
channel, the first drive is called the master, the second drives is called the1 h7 J" t+ e% _" ^5 {# Y
slave
, G9 ?7 z g- v/ n5 x$ A- you can select which drive should be flashed on the channel, A0 selects Master,
# @; n2 ^% C) @/ b/ g" p B0 selects Slave
7 c2 ~6 q. v( ?- on SATA ports this value is always A0, cause you can only connect one drive to0 n: s8 W( X" s1 r4 k2 w; M( C, I
a SATA port, so for SATA you will always type A0 here
' h$ ?; w- q9 ?, G9 s6 ^& j- it is not recommended to flash IDE drives with another drive connected to the1 H! H8 k) J0 h$ I8 Y
same IDE channel, this could be risky if something in the Master/Slave selection
) o5 o* s# P" G fails) l: B, r' x M% s+ m
( H& Y) w6 u) \& ^6 X: x d0 [( `
[FLASH TYPE]
6 F/ q3 F8 T1 m" }) J6 g--------------# f! V, B t0 v1 T5 A
- there are two types of flash chips out for CD/DVD-ROM drives atm& }. g$ r* H7 E& x3 Y
- the older type is parallel flash, which is also supported by mtkflash for example
0 I! U0 ]% p% D6 a6 o- Z. |* w- the newer type is serial flash, which is supported by flashers like XSF& d9 i2 d! b1 J) k
- the problem here is that no tool is out that can flash serial flash chips on 0 e, c/ G/ ]5 p) X: o& d
SATA ports* u4 u. T: @* R1 E0 }
- Y, D$ n0 e3 X9 B3 K
[FLASH SIZE]
\* c" _0 K1 t5 m2 Z--------------0 N+ `3 l* t$ V% [9 k
- this is specifies the flash chip size in banks3 v+ M6 w S A5 |) }6 Y
- one bank is always 65.536 bytes in size; [* c, }2 ~2 x3 F! F; z. u* Y
- if you know your drive has a flash chip of 262.144 bytes in size you need to enter 4& ~7 G* J$ @9 R5 h5 W/ g
* a3 w6 Y% {. F- v' e) r[FLASH SECTOR ERASE OPCODE]
: V, V. n1 S, V. ]; h-----------------------------
- I: c! m: h# `- the opcode used in the flash chips datasheet for erasing
. J( \5 D2 @/ _6 Q- for serial chips this command can be different from the standard and needs to be1 l% W6 q) f7 E% I+ z5 P
entered for flash erase
' Z4 a8 i1 m- ~) F4 T. O- for parallel flash chips you can enter a dummy cmd byte, the integrated command
" x3 n" H0 q( B& |. T should work on all parallel flash chips without a prob" O" f& ^2 B0 J: W4 r! @' P
& \: p' o4 Y/ A0 `% Y) X9 x& T: k
[FILE NAME]$ h& j$ X3 X0 ]9 h+ D, r
-------------
5 l0 a8 U" c Y& I$ e4 E- name of the file that should be used for flashing2 [4 _2 y+ l. ?0 @+ x
- for reading operations this should be the output file" F2 E' j- s. }2 j8 n9 L
- for writing operations this should be the input file
! T* _. B( J6 N# p0 x$ O
- I; \+ \3 T+ y* n) @. s
% g- n6 W/ K) ~# I1 LHints and Warnings
1 E( T# y( [" y9 t: v$ k0 O5 s# B--------------------
% j& Y) R. a3 U- n F7 c- read, write erase TS-H943A MS28 after the firmware stealth has been disabled with Enable0800 disc7 J$ \, c, J3 s4 v1 Q: r) B
- this only works one time, after the first mtk vendor specific intro cmd is send$ Q8 k- j2 u! [$ M- F, T9 i
- if the mtk vendor specific outro cmd is send the chip goes back to stealth mode and you need; l& n; P. U5 F1 r
again the Enable0800.iso to disable it
- |% v, w4 R) e( l X - therefor the mtk vendor specific intro is send at program start to all present devices and the
9 b9 T4 x/ h6 p' f0 i( l mtk outro is sent at program end
/ c! C. I4 o: Y: f - if you have a chip manufacturer id of 0x02 and a chip device id of 0x02 for the TS-H943A
3 L) H0 e$ t' T the flash chip is in stealth mode and won't give access to any reading, writing, erasing) b+ ^0 o4 [/ x* c# m# T
- always have a look at the DataSum generated, this is exactly the DataSum of mtkflash
) |4 [$ S+ g3 ]1 |* r& R/ J5 o2 E& @ - the DataSum is calculated as the sum of all bytes of the firmware in a short integer
9 d: o3 H- b. S# S9 f - to make 100% sure that the flash is written right compare that DataSum to a known one, y g" P8 d: L
- this tool has not been tested on all drives out there, the typ list is simply copied from well# c; @; Q" m9 ?& ]
known programs like mtkflash and XSF
9 o* N: l' J4 `7 t* u - always try a flash read on a not yet tested drive before doing anything else
/ @/ j3 g0 E6 {$ A' S - if the read doesn't succeed it is highly unlikely that a write or erase will5 }& O E# v# w
- some LiteOn drives seem to have probs to write the firmware correct, this prob seems to be
( n. D# C& y( C4 E; Z9 S related to windows register flashing, cause even an assembler app can't do this error free6 P [2 @' s: j( k1 P) V
- if you get errors on LiteOn drives, write the flash two times in a row
" ^/ e3 M" G( t/ S* @) z; R" y" k- for direct port I/O in windows the givoio.sys driver is used, this driver is loaded at DosFlash32
- k9 V1 B8 O3 O start and unloaded at program end, be warned, this driver can possibly make your system unstable,
: p( z4 w3 W" x0 O- [1 N# \ it's intention is to let privileged assembler instruction like in and out pass, even in windows,
3 ]! F# q, X: S, e& J if this driver is not used you will not be able to get direct access to port registers
1 e, T, y9 B' h3 S) x8 S8 u- DosFlash was tested on MS-DOS 6.22 and later, you can easily copy it on a MS-DOS boot disk created/ r/ b. {& P O3 {+ S
in Windows XP and start DosFlash directly from the disk
( k8 e/ z- k: }0 y* c- don't forget to also copy the DosFlash.typ file, it has all the informations about flash chips
a; p0 I' ^) |7 f% }& D9 K for auto mode flashing% F1 T d. Y% w& `+ f
- DosFlash32 was tested without a prob on Windows XP SP2, you'll need also the typ file for the
0 [. Y$ P9 p8 T9 E- d0 V win version% F3 J5 V/ N2 ?- N. z# [
- DosFlash32 will deactivate all CD-ROMs in device manager at startup, this is better for flashing,
1 v& C& b- c. l6 i) _. _5 X cause Windows seems to poll the drives all the time and this could result in a bad fw file or
2 I3 m7 o5 d% M+ W) J+ u1 N a program hang, the drives are activated again at program end/ R2 |% @! e- P: B5 q, c
- you should make sure that the flash is not in an erased state at program end, cause device manager
( m: ~" V- {$ O* {" K8 T/ F/ A1 D don't like drives that do not respond to the inquiry command
* R" S/ d* G: |0 V* U- deactivating all CD-ROMs could take a few seconds, so please be patient at program start
, U j" Z6 S# i% b- DosFlash and DosFlash32 will try to scan for the VIA 6421L Raid Controller card, based on vendor
2 ~! z+ X% F2 E' _( i id 1106 and device id 3249, it doesn't matter if the card driver is installed or not/ v0 }5 ]# k* T* ]8 w$ T
% }% a5 v/ s. C7 e8 Z
3 z+ S% e9 E7 ^' J, ?; \6 l i5 T
Many thanks to Dale Roberts and his Direct Port I/O driver giveio.sys!
P) ]% Z+ {$ f9 Q. j8 T7 x9 i
) `/ N4 n( v, o# n7 [* x$ _$ @2 jAvoid a bad flash! K" k! T; J) g3 m: a
Kai Schtrom |
|
窺視卡
雷達卡
發表於 2011-8-12 20:40:35
顯身卡