|
|
ak475671 發表於 2011-8-22 13:03 ![]()
; [2 ]* ^7 d; s( X# I* m版主你好7 f+ V1 ?1 _. p; X
版主知道哪裡有教學嗎使用DOS提KYE的過程不是很了解不知道有沒有教學可以參考的呢
C: T) z/ a- P' b6 E. O4 [, V另外你說他提取 ...
( R9 Z* x7 Q! t6 qDosFlash ReadMe.txt 說明文件
- c7 }! M( o/ D g9 x" O: ~
! j# p+ y6 n/ j- [3 yDosFlash V1.9 Release Date 01.01.20113 I3 Z. P+ Q; g" p
---------------------------------------- h" E# t% T" w, i6 y/ \
- SATA and IDE port scan improved in DOS and Windows
# c6 g9 g1 o4 t8 F- A/ g7 N6 _ The ports are now enumerated with the CONFIG_ADDRESS and CONFIG_DATA register instead of using interrupts8 U( H/ _/ M3 T8 Y$ y( f
in DOS and SetupDixx functions in Windows. This change will detect more ports in Windows than the old
! Y8 p2 G$ s' S, C9 r6 [% a SetupDixx method.
- F+ G3 m, ?% m! j# [: j& D- Settings saved to ini file for DosFlash32 and DosFlash64
! e ~2 C5 K/ v- f7 U1 f& j Settings like Port, Position, Task, COM Port, Enable Drives and DvdKey state are now saved to an ini file) U! B+ c" s! o+ d
inside the program folder. If the ini file is not present it is created after the first run. On the first# Y' z" k' y# v
startup DosFlash will choose the most common and stable settings.
: ?; e: L: g8 b/ i( x9 @/ J$ m- EnableDrives option included in dialog as a check box- o& u2 I1 C5 f6 ~ T( ]
Due to high demand we removed the "Enabling CD-/DVD-ROMs" MessageBox on program termination and included! w: b- S1 r) ]5 k1 s
a check box "Enable Drives" inside the dialog. For security and more stability this is deactivated on the
# q) `( g; [( w* o first run. If you enable it the checked state is saved to the ini file.# S9 _" `2 j( k1 Y
- enabling drives in Windows caused some hangs from time to time, this is now fixed by a recoded enable
9 Q) `) ]) O( B drives function
8 b/ X- j( i- o9 W6 w/ u% L; \- port drivers portio32.sys and portio64.sys are now added to the executable and unpacked during runtime
% f- E4 j' ^& I" W; ?1 q" v% X" h0 f- PATA and SATA controllers list updated/ q4 ^9 k; A+ X
- Fix for NForce motherboards in combination with drives like the "Samsung SH-D163C", "LG DH18NS40" or T4 u1 M5 }) u4 x I
"LiteOn iHDS118"
/ n. b+ h& r* |$ ?. Y Some drives have problems with flash identify, read, write and erase. This is clearly related to the
8 y5 d z6 q( a. V" r7 C( \ NVidia NForce chipset. For manual mode in DosFlash16 an additional command line parameter is added called
6 y- g- m* t7 F "NFORCE FIX". This parameter should be set to 1 for NForce chipsets if you experience strange problems.
: A( j5 ?3 p9 w0 h In DosFlash32 and DosFlash64 we added a static control which shows if the NForce Fix is applied or not.1 Q* C, b9 h. U5 p; W) t4 R4 e4 l
Remember there is no need to activate this with every drive. It seems to be a combination between drive; p$ k% f4 c% S. y. V# Y
and NForce chipset that causes the problem. The fix is automatically applied for DosFlash16 in auto mode,
4 O9 }. ?. H# F1 { DosFlash32 and DosFlash64.
' E x& c( d3 J4 E4 c3 F8 G! h- DosFlash32 and DosFlash64 are now DPI Aware for Windows7( u3 Z. c+ k3 L5 H6 c
- New task Verfiy Key/Inject Key added for verification/injection of drive keys
~0 F% r7 P/ s: N& V* X6 e All DosFlash versions now have the possibility to validate drive keys against an XBOX360 drive and set3 q/ K7 i( N' z; [
the key for an XBOX360 drive. We use the same authentication method like the console to verify a key.9 Z) f: M/ y) U
In the Windows versions you have the choice to paste the drive key from the clipboard to our custom hex
* T- Y% w, `/ M. g. m4 T edit control or load a key file. To add a key simply click right inside the hex edit control and select
. C* X# k5 {6 r# [, ]$ P% C your choice from the shortcut menu. In DosFlash16 you can enter the key in the format "1A-2B-3C" without2 a9 ~+ O. U- j0 u. z7 G
quotes. Remember that a key has 16 bytes of data. The key file to import should also have 16 bytes of data3 |" p- b& L* _! n
like the key files exported by LiteOn Key functions.# o9 t$ c$ ~9 g6 F
- Removed multiple key extractions for LiteOn Key functions, added Verify Key after extraction' L+ u4 T1 V7 Z9 M2 X
For LiteOn Key functions we removed the multiple extractions, because the key is now verified immediately( M! E/ ^1 w) J1 E# _
against the XBOX360 drive.
4 a& m0 t' _8 f Z2 j- LiteOn Key V1 and V2 now also extract the file Serial.bin and the 2nd inquiry file Inquiry2.bin
, Y% ]- W. c( \6 L7 Z& H We added the file Serial.bin and Inquiry2.bin to LiteOn Key functions. Inquiry2.bin is only generated for0 W) u0 d/ u$ g
LiteOn drives V1 and V2.
1 e$ q) ]5 E" r0 r- The drive key of Maximus patched UART drives can be extracted by using the task "LiteOn Key V1 (DvdKey)"
! Z0 q5 ^. T% i4 w" v$ n+ Z The drive check has been removed from LiteOn Key functions. This way we can extract a key from an UART
' G# |8 [5 o: R9 @0 N" Q patched drive firmware by Maximus.
, \" h& h# |. v( q. D* P7 B8 p- LiteOn files are now extracted to a destination folder instead of prompting the user for every file name.; {! t5 U/ [8 x; B8 v( y9 h1 n* }
- LiteOn key extraction tasks separated per drive version in "LiteOn Key V1 (DvdKey)", "LiteOn Key V2 (FreeKey)"+ a5 W1 x5 s2 V. ~
and "LiteOn Key V3 (Tarablinda)"5 C) w: F2 [. K$ i% h( x5 k5 I
- In DosFlash32 and DosFlash64 the number of installed COM ports in the system are now enumerated instead of
8 I& M8 _# J3 y" ^- U: C adding port 1 to 4
' g5 {7 z# Z. |6 N9 Q: H2 b- For failing cdb commands the sense code is returned
1 I2 u9 r. ]4 ^8 L- Geremia's Tarablinda functionality added# P6 g5 {$ Y8 J1 c8 D, P: V5 H
We added all Tarablinda tasks to every DosFlash version. You can extract the key by choosing the task; z4 Z( Q6 e: o6 H
"LiteOn Key V3 (Tarablinda)". For read, write and erase of the flash simply use the standard functions.
" ]. c7 I( N1 |2 s0 M Pay attention that the "LiteOn Erase V1/V2" task is only available for older LiteOns and not for the Slim.
& A* u0 B x7 f p7 c: Q You should use "Read Flash", "Write Flash" and "Erase Flash" for the Slim. "LiteOn Key V3 (Tarablinda)") r7 z6 H" J$ q! s9 n
extracts 1 additional file in comparison to Tarablinda v04b, this file is called Xtram.bin and contains r+ P! v' X' X) f
a dump of the XTRAM8000 area. This can differ in a few bytes from one dump to the next.7 ^: u) M7 |" @) K
- Device Reset in DosFlash16 manual mode is now done automatically, there is no option to turn it off anymore
! f0 f6 H1 ?! H6 E6 v3 d' N8 R- Code optimization to work with modern SATA2 controllers added, remember to set SATA controllers to IDE and
& \( L6 w. u, c1 R3 | not AHCI mode otherwise Port I/O will not work
1 ^1 ^9 p# b6 L- Warning: The read, write and erase of the Slim drive is considered risky in general! So pay attention and
* [! c# [' b% o4 ^. Q8 v always remember you use DosFlash on your own risk every time! Even during flash read the Slim gets flashed
+ f! h0 q1 a S0 a with a patched firmware sector to retrieve the complete dump!; b& ~" L( f2 \4 d4 O' B
- We had to change many command line arguments for DosFlash16 Manual Mode, because of the NForce Fix, added6 C3 L" F; I0 Y3 L! Z
Tarablinda support and splitting of LiteOn Key functions. To get a better understanding we added the example9 f" O2 R7 r0 P7 o0 b
section below.3 C% K' i/ R A/ U
0 X9 ]. e9 W( A) W' r8 p/ F, j
( _* `( C. u; ~( H- TDosFlash16 Manual Mode Examples3 I6 K0 j5 o' `: A/ L$ X, s
---------------------------------
9 S' B. z1 T9 Y8 t3 A5 W- Extract drive key on a " LDS DG-16D2S 74850C" over UART -> "LiteOn Key V1 (DvdKey)"
7 n @' Q1 s1 Y/ A: \/ J) Q* S DOSFLASH LITEON K V1 0970 A0 1
2 W# q: w/ D2 d& T1 y0 e/ n2 a
- Extract drive key on a "LDS DG-16D2S 83850C" over SATA -> "LiteOn Key V2 (FreeKey)"
/ Q8 Q& ]7 H/ U& @3 z8 m) l DOSFLASH LITEON K V2 0970 A0( g% N* v# _3 U9 w$ S. z0 `
+ [. x9 y x+ `9 a. a7 m) }
- Extract drive key on a "LDS DG-16D4S 9504" over SATA -> "LiteOn Key V3 (Tarablinda)"7 q/ ` p8 ^- S: d2 q
DOSFLASH LITEON K V3 0970 A00 c$ D j7 ?2 D& s% M5 h1 K
/ U* H: B7 j. m. w# q
- Read firmware on a "LDS DG-16D4S 9504" -> "Read Flash" this is considered risky!9 C5 D1 \7 A5 z; M2 K/ ~# Q3 A
DOSFLASH R 0970 1 A0 3 0 4 FWOUT.BIN 00 u( N) P, }! o# t2 r2 z
/ \" ]# c C8 {' R
- Write firmware on a "LDS DG-16D4S 9504" -> "Write Flash" this is considered risky!* Q: u# D3 Z' w9 b
DOSFLASH W 0970 1 A0 3 0 4 FWIN.BIN 0$ ]1 m& I4 [: y8 C# C% ^
" x) @; U1 G# c4 l
- Erase firmware on a "LDS DG-16D4S 9504" -> "Erase Flash" this is considered risky!. v8 q" [, m# U1 `* t
DOSFLASH E 0970 1 A0 3 0 4 C7 0
: s* L# H+ m7 h% d
9 m0 A2 ~- l# S- Erase firmware on a "LDS DG-16D2S 74850C" or a "LDS DG-16D2S 83850C" -> "LiteOn Erase V1/V2"
P S& g2 a' p: l Y& x DOSFLASH LITEON E 0970 A0$ L6 |/ n, m, t6 P1 c% W9 \! S
. g: q# K5 {$ n2 v$ y- Read firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Read Flash"- I0 N- Y9 _ h3 S/ G) |. H
DOSFLASH R 0970 1 A0 2 0 4 FWOUT.BIN 1
' u+ e. Z# S3 V5 m- T
7 w6 E8 t! i( w' K- Write firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Write Flash"
p, S0 x! W/ C4 p$ Q4 w DOSFLASH W 0970 1 A0 2 0 4 FWIN.BIN 1( ] p- N9 s. E6 Q) \
3 P7 J# [" D9 V7 Z+ M4 y' B' u1 ^- Erase firmware on a "Samsung SH-D163C", "LG DH18NS40" or "LiteOn iHDS118" and a NForce motherboard -> "Erase Flash"
: J! h0 n- ~+ g1 N DOSFLASH E 0970 1 A0 2 0 4 C7 1
0 u/ s! l$ _/ u2 F2 E' N
8 o+ N7 L9 G& {0 [. e' E6 O- Verify drive key on a XBOX360 drive, enter the drive key manual
0 [) M/ r! ~& V. I2 { DOSFLASH V 0970 A0 12-34-56-78-90-AB-CD-EF-12-34-56-78-90-AB-CD-EF
- n, s# i' R$ G8 C/ } G# V& |! J& O1 @2 L4 K
- Verify drive key on a XBOX360 drive, load a drive key file1 y" m' k8 j5 \. r5 L3 G
DOSFLASH V 0970 A0 KEY.BIN \7 L/ x1 X6 I& [$ `* _8 e4 e7 r0 X
5 u, Z! Z# m O9 C' @- Inject drive key on a XBOX360 drive, enter the drive key manual
. J" \. n- f% w DOSFLASH I 0970 A0 12-34-56-78-90-AB-CD-EF-12-34-56-78-90-AB-CD-EF: |( \& J+ D B/ \7 U6 p3 S6 Z
1 N U1 J$ V, d. j1 n, h0 c- Inject drive key on a XBOX360 drive, load a drive key file1 S1 L$ X0 a2 `* U. i/ c, x" r
DOSFLASH I 0970 A0 KEY.BIN
, V' O4 W: {- K8 Q# _% `! q' {
2 m9 ?! _7 l9 P( nFor DosFlash drives on which we can extract the key via UART are considered V1. Drives we get the key over& d# K/ m; n$ O! w& F( P8 J8 C; D
SATA are considered V2. The new Slim is considered V3 but only firmware version 9504 is supported atm.) j' r( S: k5 V4 Z# H8 [/ O
' N; K) |( z4 g. G
. X8 A# J$ O: e$ c7 }7 p1 kMany thanks to Geremia, Modfreakz, Redline99 and Tiros for their support. Special thanks to Geremia and2 t2 Y7 J5 J3 ]) C: _
Modfreakz for drive sponsoring, testing, coding and much more. It is always a pleasure to work with you
/ @) Q7 ^& ~" c' yprofessional guys! Respect to Maximus for his UART enable patch. I'm looking forward to your magic Lizard
: W K; q, c! ohardware flasher!
# c) x: m4 R |- Y+ v# V' V
5 F2 K6 t" Q; A7 U! oHappy new year 2011!4 ~2 R1 O9 ^5 q" I0 e# l9 E: a
Kai Schtrom
/ l7 X! Q: D, G) L, Z/ x1 P: D+ W; ^4 d! H
************************************************************************************************9 ^* V; q( a' m* }
# f% {( W0 C9 W n7 Q; E1 l% Q6 |, U- W$ X) b, P6 C
DosFlash V1.8 Release Date 08.08.20096 K6 A9 O J) K6 M6 n
---------------------------------------/ Z8 r. A9 J; T
- now supports LiteOn PLDS DG-16D2S 83850C V2 Geremia/Maximus LiteOn FreeKey method% Y& J$ ]9 o; X1 ~* L- R
- huge firmware read/write speed increase, especially if run from a floppy disk* x3 A6 A6 i/ K7 ?1 V
- updated IDE/SATA motherboard chipset list
: Z3 C( x6 L) G) f0 q- e- new IDE/SATA detection for Windows and DOS
4 e( {+ t0 P/ |* ? D- DosFlash.typ embedded in executable file
! i( R4 t" t" r! Q% _' q6 `- LiteOn V1 drive key is now extracted 10 times and compared against each other,1 i3 b" F. v x- y
after the extraction a summary is displayed sorted by the most common matches
" z4 l' E q9 p- LiteOn V2 drive key is extracted 2 times and compared
y( b6 o4 x, _* O- new BenQ unlock keys added to unlock all known BenQ drive firmwares/ B$ f. d7 y5 a0 ?" R x
- command line parameter "EnableDrives" removed, DosFlash asks the user on
/ n% z2 y0 U$ K: ?- G application close if he wants to enable the drives or not, during the tests it
% N+ w# N, ~ Q2 d seems that IDE drives have problems with the enable, SATA drives seem to
7 f" b+ C! v( ~* h work fine
' k" I2 x q3 a- p- new 64-bit DosFlash edition added called DosFlash64, because some driver7 |7 x+ r# [9 R: v4 ^
functions don't work as expected in the 32 bit compatibility mode on Windows x64
5 z; f7 i) {/ e' \- Beta state removed E! q$ b6 G$ s% ~+ \
- ready and tested on Windows7 X86 and x64
7 |8 M& w( P3 ^
Y" v2 d+ I$ F# ^0 N5 j( Z! M9 ?, ~6 k5 j
Geremia/Maximus FreeKey method with DosFlash16
X( o2 L0 ]# e2 r------------------------------------------------
% ~& q1 ]8 l! m0 J8 yWe have added one cmd line parameter for DosFlash16 in manual mode. The COM port
5 G. J! y6 N( Dis simply ignored and can have any value for the V2 drives.9 C: q A5 y5 s3 {0 w) n2 M
Use the following command line to extract your free key from 83850C:
7 A0 M& K6 H" E3 |' Q' @0 l7 ~" e- DosFlash LITEON K 0970 1 inquiry.bin identify.bin key.bin dummy.bin enckey.bin
" X' H4 [) Y9 u5 I9 h' C" J! R# A1 k* E5 o
9 q t& _* d% V0 v
Tips for running DosFlash on Windows 7
; i( [/ U3 j2 o1 e" C. P5 F0 f----------------------------------------% {" v+ ?; \! O& e0 y+ {9 c
w* n' I) v$ r0 e; PSince Windows Vista 64 Bit and upwards it is necessary that every driver is signed. Because% l( w4 |6 t$ h
the DosFlash driver will not be signed by MS due to some unknown reason we need to circumvent+ A$ e# n5 ]; b' S7 Z
this check. You have the following 2 possibilities to do this.- x0 X/ I# ?+ c7 U! \
3 L# E4 v4 H7 Q; k
Safe Way of Disabling Driver Signature Enforcement
) }" V# w% E; Z7 _+ F$ x, W" }1) On Windows 7 bootup press F8 to get to the extended boot options screen
1 r3 i9 C7 W9 [; Z _( R$ a) r2) Choose "Disable Driver Signature Enforcement"
( K8 Y5 u( u& x1 |& R$ |) H0 K$ k3) To start DosFlash right click on it in Windows Explorer and choose
7 b/ y/ _- D8 ~/ G$ o" l7 B4 R0 e* y# V "Run as administrator" > answer the message box with "Yes"9 r$ R- B2 P, A3 b0 p
4) Short after the program started a "rogram Compatibility Assistant" warning message2 H! V* r! V" B# q4 ]9 E' x
is displayed, you can simply ignore this by pressing the "Close" button4 L! V# S) {$ L
) P5 x6 w/ R) s" f5 p; w
Recommended Way of Disabling Driver Signature Enforcement
{2 H7 y, I. v$ V1) Disable User Account Control (UAC)) C' O7 J7 ?# H; A0 g! ^
- go to "Start Menu" > "Control Panel" > "User Accounts and Family Safety" > "User Accounts"
8 m/ o( b2 U! m: \7 Y' @2 `( X - click on "Change User Account Control settings"( p" I5 q, U: K7 O. t( f3 a
- set the slider bar to the lowest value (Never notify) > click "OK"
# w/ ^ b0 v% k" M6 m2) Sign the DosFlash driver$ [4 L+ S! g1 {! m% y# T
- download the "Driver Signature Enforcement Overrider" (DSEO) from7 F) i- N- l. i; e4 S
http://www.ngohq.com/home.php?page=dseo
2 v' l2 |8 O( E% w" H- C - start DSEO > click "Next" > "Yes" > choose "Sign a System File" > "Next" > enter the path to
" F& ^7 t! o% T% I- ^ the used driver (portio32.sys or portio64.sys) > "OK" > "OK"
% ~1 W) [) K( A3) Disable Driver Signature Enforcement
; q. u3 w! U& W r - start DSEO > click "Next" > "Yes" > choose "Enable Test Mode" > "Next" > "OK"
( y: f0 e# G; A7 `3 \. L" G4) Restart the computer
0 @- F% Y5 g# l# x3 n) D- s. U* b( ^# j: L( \$ a- t4 k1 ?
Keep in mind that with the recommended way the changes will have effect on every reboot without
; S0 c( t3 S$ W$ ?6 V" wdoing anything manual. The first way needs to be done over and over again. In addition the second5 \. M* n: L+ B2 M+ t
way can be used to sign every driver that doesn't run natively on Windows 7.' t. ]' k" Y& |" E9 ?. Z
. Z# M: ~: `7 OFor use of the VIA Cards in Windows 7 it is recommended to uninstall the VIA driver. This can be
4 c9 j9 t6 O, _" b6 x7 Cdone like follows:
; M# W6 H* a- a; s) R4 K* g- start "Device Manager" > expand "Storage controllers" > right click on "VIA RAID Controller" > ; K) v3 d5 C" \$ [4 D
choose "Uninstall" > "OK"% x- n/ L0 j( E8 n
- rename C:\Windows\inf\vsmraid.inf to vsmraid.inf_4 m& Q- Y1 w% T- Z& O. ]
- rename C:\Windows\inf\vsmraid.PNF to vsmraid.PNF_
: s: W9 r/ V( p1 H- rename C:\Windows\System32\drivers\vsmraid.sys to vsmraid.sys_
# D, F) `+ n$ V: ]+ U7 h+ w- reboot computer# \3 D4 H6 o" A3 q8 W
) c" K' y! w) U3 \$ D0 Z
1 W. I- P2 L3 h/ l" d4 n# a2 ZMuch respect and credits go to Geremia and Maximus for their money saving FreeKey app6 l) P9 a& {/ Z; q0 k. m( J. A$ ?
and their lightning like decryption speed!
' [2 V2 m) Q( y0 {- n% o+ ~* Q& ?( a( @2 r& t2 J- ~2 _
In Dedication To The Birth Of FreeKey On August Fifth 2009: B! x% \ `! K" l$ X
Kai Schtrom M7 B6 n" J4 @/ ^
7 Y k% L! Z# g( \- z
4 k2 g2 Q( q- Z! ]************************************************************************************************" O8 y7 T1 O! i& M3 {9 g4 m; u6 W) T" d
* m& c; ?2 S9 c4 a$ r( F
* e! {& ^( l' @ Z. \
DosFlash and DosFlash32 V1.7 Beta Release Date 23.12.2008
0 P" k, [; g8 R-----------------------------------------------------------
. R2 |- n& V' B6 o- now supports LiteOn PLDS DG-16D2S 74850C and Geremia's LiteOn Erase and DvdKey method8 Z W0 ?% G% K
( O8 M- o! ]1 @# w/ @! E3 E& ^5 T" O- y8 f
The following only applies to the new XBox360 LiteOn drive PLDS DG-16D2S 74850C.
. I' s: Y, j f& a. _) n5 A+ d1 e2 P6 I0 ^% }
8 h, j. ~7 I$ x* t" v8 \
Geremia's DvdKey method with DosFlash16 with the PC's psu
2 p% X/ V' R& ~: G% q% ]4 g-----------------------------------------------------------1 s6 k. H j- ~& T5 m4 l4 R4 i
- disable CD-ROM boot option in BIOS
2 K7 ]& t4 q& E) c( t- connect LiteOn to your PC's power supply unit and SATA port
/ j( }' ^' x5 S. e/ ]* h- power up PC, wait until bootup is finished1 E% x' g% R; K' ?
- eject tray of the LiteOn and shutdown PC completely+ _) f& d/ T8 \$ I, ]5 j" ^
- push the LiteOn tray half in# c t8 T! M$ b$ I$ J
- power up PC and boot into DOS
. C4 W/ u1 D/ X- run DosFlash16 in auto mode; U& V6 ]/ M5 E% C, U4 o
- if you read the following:
7 a, i- k7 a" ?9 ^6 v, o) b MTK Vendor Intro failed on port 0x????.
: N* t+ C* _7 z7 p' _) P If you choose to resend the command you should turn the drive off and on
9 L1 h. e" r. q. N: D. j( I after you pressed "Yes".
, b; O- I4 g. Q Do you want to resend the command until the drive responds (Y/N)?* F+ V" U0 k6 s8 y/ U! m
- press 'N' for "No"
R s+ W0 D; X7 h5 X/ [1 \- choose the number of your LiteOn ATAPI drive
* X; L8 |) N% T6 r- a2 A5 h9 S; R9 i- enter "LITEON K" to read the drive key. a$ @- v8 P& W
- type the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files
. u3 a; \& Q4 T4 T3 |- enter the number of the COM port
- A( v: @# V h8 S- if you read the following:
) o. U/ ^& [ E' ], l To receive the drive key use Geremia's DvdKey method like follows:
7 ^5 A9 J+ Z3 D3 o: s' |6 x - Connect your drive with a serial cable to the COM port v2 i- D1 n! y5 g1 ^2 D" N1 d+ A
- Eject drive tray; Q# S2 C6 W7 ~) q4 K# c
- Power off drive
! ^0 G) B- @0 C6 ^3 R( U - Push drive tray in until it is half open& J$ z, O3 o! \4 T# ^& O
- Power on drive
; i! X- h s+ a7 W) U5 T, P - Press "Yes" if you are ready ]1 L; [& @" G1 m7 {! K0 ^; g
Are you ready (Y/N)?
" }% [. x+ s) Z4 @- simply press 'Yes' without doing anything of the above, because we
V; r6 L% @6 h) U* e. n" Z already did that before
$ U9 f% c* z4 K* l- x$ j# p- after this DosFlash16 displays your DVD-Key and saves your key and identify data# |9 h* {2 d; I
- to do the above steps in manual mode use the following command line if your drive; h& d9 t. {1 D
is connected to port 0x0970 and serial cable is on COM port 1" D; B( a4 f& ?, s2 X
DosFlash LITEON K 0970 1 inquiry.bin identify.bin key.bin dummy.bin
8 Z& z7 N$ Q7 k+ t6 c
8 U& A7 _0 F" G0 {/ l- Z, A! y& G" h% x
2 H$ E! O; {3 l3 J: r" sGeremia's DvdKey method with DosFlash16 and 2nd psu
# c7 U: b& W& v S" `-----------------------------------------------------( C) u- x( V& M
- connect a separate power supply unit to the LiteOn, don't turn it on yet; u( P5 n0 x0 }' ]2 [$ X1 k4 _5 z- g
- power up PC and boot into DOS9 _8 C/ X: g' M% L7 F" K( C
- turn on the LiteOn psu( @7 C4 Z% A& b& v* l$ s* e
- run DosFlash16 in auto mode6 R, X$ `# B- f; z2 w, X6 o
- if you read the following:; O9 }# m+ P P, t/ o
MTK Vendor Intro failed on port 0x????.
) K' g& e6 W1 g; K5 |6 y5 O' w- n If you choose to resend the command you should turn the drive off and on: w) a2 m) e1 m) i: f: h/ F* Y
after you pressed "Yes".1 n% T, p. U8 p7 F
Do you want to resend the command until the drive responds (Y/N)?& i, g( E" t- {. T# @
- press 'N' for "No"
0 n' k+ y5 w4 H" d( v! H4 U- choose the number of your LiteOn ATAPI drive; J. [8 X$ t" L' [6 A9 D: c
- enter "LITEON K" to read the drive key
6 i: U' [& k! T$ x- type the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files
1 ^( F: E i1 l9 W; p3 k- ~- enter the number of the COM port: l/ k9 n7 t* A8 l/ ?7 Q: D4 v8 Y
- if you read the following:
- X$ l9 |! D" B/ U0 w To receive the drive key use Geremia's DvdKey method like follows:
. z* m9 v3 y2 i3 o$ X - Connect your drive with a serial cable to the COM port
1 m" O6 o q i4 O - Eject drive tray% m6 ^; Z, ~, e5 M+ u
- Power off drive8 ]7 b+ o8 t, P2 P0 r) g* V/ \
- Push drive tray in until it is half open5 ^+ B9 c `# @- v' Q
- Power on drive
3 G. k7 g* ?" M) b/ r4 ` - Press "Yes" if you are ready
6 T) @ L3 U. {: t Are you ready (Y/N)?
6 E+ k, B+ E. p- do the above and press 'Yes'4 k( O! X* o7 w! o- G( T4 X q
- after this DosFlash16 displays your DVD-Key and saves your key and identify data
+ b, X, c: |2 z9 Y5 x) \2 ^, U& n! W
3 Z: t( j; O( nGeremia's LiteOn Erase method with DosFlash16 and 2nd psu
* v+ t* m1 |! I4 v3 \4 d, C- V `-----------------------------------------------------------3 n: ^# l3 t5 D+ b3 T
- connect a separate power supply unit to the LiteOn, don't turn it on yet
- E3 D1 M1 o0 l2 K v; ~; m7 M& b- power up PC and boot into DOS& d3 J& v. i# C8 q
- turn on the LiteOn psu6 d& u2 V3 ~; m0 b
- run DosFlash16 in auto mode2 @1 E3 n8 f6 m3 d
- if you read the following:% b; m- L x/ C5 L3 ^! U2 P
MTK Vendor Intro failed on port 0x????.+ a& B7 z6 O' S8 E+ m# [+ |/ S/ G- Q
If you choose to resend the command you should turn the drive off and on
8 O3 S9 F5 ` h after you pressed "Yes".
) B; }( h. I( e( t2 F Do you want to resend the command until the drive responds (Y/N)?: N" i1 R8 h+ V2 d% A+ j5 ^/ |: e
- press 'N' for "No"
; Q" n1 n' M( s: V* K6 d0 a- choose the number of your LiteOn ATAPI drive
- h7 m! M3 S' T d- Warning!!! Keep in mind that you will need the drive key before you erase the flash,
* Y: k7 `, |+ B without the drive key your XBox360 will not work anymore$ `! c3 |0 @/ w4 z$ c/ \9 y
- enter "LITEON E" to erase the flash
8 W& K6 `: |1 y- the first time after the LiteOn Erase the drive needs to be repowered to give3 T7 ]+ G) G" B4 W' m) Z7 a
flash chip access, this can be achieved by repowering the drive before another
& v# Y$ s8 c! O x4 V+ [" n1 q DosFlash16 start in auto mode or by doing a MTK Vendor Intro Power Brute
& ]1 O7 k2 i d3 S# s- in my tests it did not work to power the drive with the PC's psu, because it will% B! z, e& j6 d" \4 R! S# U' L$ ]
always respond with busy status
/ V8 [5 Y& E# l$ e1 _* n5 X, k. U- DosFlash16 can now read, write and erase the flash chip like usual
, h8 g4 Y3 a+ R6 Y2 [- to do the above steps in manual mode use the following command line if your drive4 Z+ x, I2 P z6 d( S5 a) q) J
is connected to port 0x09709 C" e1 i3 Z2 t& }0 Z
DosFlash LITEON E 0970: e* ^ i# k; R5 |# ~" L
. n+ W3 D- J9 Q' z: e
C+ e; M$ e! B+ A" EGeremia's DvdKey method with DosFlash32 with the PC's psu
! w' X5 a5 `6 h7 P: B-----------------------------------------------------------
. P% x% i. o( K: N1 U+ Q- disable CD-ROM boot option in BIOS" \+ F9 C5 B1 l, E' A8 |$ k
- connect LiteOn to your PC's power supply unit and SATA port4 v; R4 Q& J: f' I% D
- power up PC, wait until bootup is finished
4 ~5 ?2 @. i# l% m, F, e& P- eject tray of the LiteOn and shutdown PC completely/ p( {) A$ d1 G& m3 v1 V. V3 O
- push the LiteOn tray half in
) M7 x% s* Y% x$ e r0 c% v- power up PC and boot into Windows
9 Q. L2 G3 W5 K: o$ S- H- run DosFlash32
# O* V7 z6 M- G1 q; V- if you read the following:
$ q/ v' Z. G" q7 ^ MTK Vendor Intro failed on port 0x????.
) P- p2 |" i1 c If you choose to resend the command you should turn the drive off and on0 f* A( _. \4 ?7 Q2 L% P
after you pressed "Yes".1 ?; w: _( ?: e( `9 }# M
Do you want to resend the command until the drive responds?
! Q* ^) |% f" u, u- press 'No'4 l+ m2 ?& F5 g* A7 J& P9 U
- choose "LiteOn DvdKey" as flashing task6 A$ t- H: p. n5 W$ x& |2 p
- choose the COM port number
& g/ y6 ~0 ]0 K/ Q& B$ r- n- press on "LiteOn DvdKey" button
' j& R1 y! | S# `* }/ m2 K( e( H- enter the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files X N4 H" {: V( F, z8 u
- if you read the following:6 Q4 B$ B& E2 F; c
To receive the drive key use Geremia's DvdKey method like follows:, [# Z3 Y9 d5 f8 ~$ y
- Connect your drive with a serial cable to the COM port1 D+ F" H5 v0 s. m
- Eject drive tray+ t8 D! T1 H0 a; q$ ^1 y
- Power off drive
6 _7 R' r; A5 @4 i2 T5 p1 g4 N - Push drive tray in until it is half open
" `. x4 ?; P. Q( G: D- t - Power on drive
6 ^1 O. Z4 _% K; L& h - Press "Yes" if you are ready
' j* W+ Q/ c/ l1 b! N2 B Are you ready?
6 i0 R! F/ Y" L, p! D- simply press 'Yes' without doing anything of the above, because we# A( h7 Z. |9 \
already did that before
% l" w9 ^8 H( P2 o4 N- after this DosFlash32 displays your DVD-Key and saves your key and identify data
6 B5 i9 c8 a3 w8 q. C5 t9 m* C$ B% B# F
, Z: F3 i3 c% WGeremia's DvdKey method with DosFlash32 and 2nd psu' ]' f+ h: j# \6 [0 _
-----------------------------------------------------, ^4 m- ?, I+ W0 m6 Q; T
- connect a separate power supply unit to the LiteOn, don't turn it on yet
, C2 N- g7 Y: a" ?6 D: v+ j- power up PC and boot into Windows
( ~' ^1 p2 ?& d$ ]/ F$ S- turn on the LiteOn psu
. |6 h' r/ C- E7 X& Y0 Z- run DosFlash32* J! K. q; Z! K# d# Q& \
- if you read the following:* l5 n% R5 ^# E; P
MTK Vendor Intro failed on port 0x????.1 I2 `( Q0 K5 \
If you choose to resend the command you should turn the drive off and on
: Y- y1 g7 O: `2 j after you pressed "Yes".$ _6 r' V7 T$ ~% E* r
Do you want to resend the command until the drive responds?
; {1 {5 g1 A% w6 R$ q% V- press 'No'
* r9 X4 Q1 _2 O+ B+ M @5 ~- choose "LiteOn DvdKey" as flashing task! {9 L# N2 Z$ Y( \& u: K
- choose the COM port number
# q- `, l% }; U/ j. I" W2 h- press on "LiteOn DvdKey" button( R* a: c0 F0 Z% K
- enter the names of inquiry.bin, identify.bin, key.bin and dummy.bin output files
2 s1 r* ^/ y+ z- if you read the following:6 y& X/ E+ g2 H# E- d& y, h
To receive the drive key use Geremia's DvdKey method like follows:/ {7 r" C) c- Y: E$ C0 A, q
- Connect your drive with a serial cable to the COM port) q- t4 q0 T* x9 }
- Eject drive tray' w# d, y2 K* A9 m7 Y+ p4 V/ Z+ A
- Power off drive
. i3 z2 E# p7 r1 X' X' f - Push drive tray in until it is half open
6 e. Q& [1 H _0 g4 U1 a- m# }2 m5 t - Power on drive" |2 g- U# ^: c5 ]
- Press "Yes" if you are ready
- |2 `' \$ x: q3 W Are you ready?
% C- R- E) ^; ^5 u8 {* c. F- do the above and press 'Yes'+ f* a4 N! [9 [( v. G5 O
- after this DosFlash32 displays your DVD-Key and saves your key and identify data
/ L0 c6 U1 ^2 o9 P4 {6 y
5 I' G! y& ]/ \
, f& K G' n0 @( I! t) r) lGeremia's LiteOn Erase method with DosFlash32 and 2nd psu
W5 }0 P S8 y9 g. }; }, T-----------------------------------------------------------, m; `; x' F) t/ ?
- connect a separate power supply unit to the LiteOn, don't turn it on yet4 t$ D4 w4 j; @2 N9 b
- power up PC and boot into Windows! o# q. x$ E" c3 B Z' l1 g
- turn on the LiteOn psu
$ r' D5 @2 Z; j5 |* }. f- run DosFlash32* N4 E. T5 c; @6 Q# t, {
- if you read the following:
) @! S5 {( R! [, E8 ] MTK Vendor Intro failed on port 0x????." a% [: z* d' p0 C7 D( t4 u/ ^- a
If you choose to resend the command you should turn the drive off and on
/ a0 M9 w0 M6 {8 e after you pressed "Yes".
: N& j5 r, c3 x Do you want to resend the command until the drive responds?
k3 t9 N' ?( K. _% V- press 'No'2 l# ^2 F3 _, A. x- T# P
- the LiteOn flash is not identified
$ J+ B% L0 J& i# P7 U% O. M- choose "LiteOn Erase" as flashing task) M. s7 n' Z; K
- Warning!!! Keep in mind that you will need the drive key before you erase the flash,3 P8 e3 z' w6 d# ~* t
without the drive key your XBox360 will not work anymore
& y. M- w1 J. K; y- press on "LiteOn Erase" button
5 i* B+ R5 q* s, i% P- the first time after the LiteOn Erase the drive needs to be repowered to give. Q' H" o3 @7 A# Y: C3 M
flash chip access, this can be achieved by repowering the drive before another
. M" }/ k/ W# I6 g DosFlash32 start or by doing a MTK Vendor Intro Power Brute
( U& t1 w& |2 h7 u- K, n- in my tests it did not work to power the drive with the PC's psu, because it will
* v8 n! F3 }" l1 @ w/ x always respond with busy status
# m- B a* `1 e5 L+ d8 v' A* B- DosFlash32 can now read, write and erase the flash chip like usual
; r( C8 s0 l* i" G. K, {
5 `& M! s0 A4 B L$ L i# y7 k
; U& S, X9 m) ?: fRespect to Geremia, Modfreakz, Podger, Redline99 and Tiros.' z% E% g& K: o" h
3 A) S8 y9 \1 P# }% f Z$ QLike a wise man said: "0x2E is the MTK Intro of Death"$ b: B, l* ?! |/ J/ Y8 ]
Kai Schtrom
. I, T9 x6 J5 J* l3 X
+ y3 g" Q) r! {1 K" y3 E- _
5 n; V, m: `1 J% w* g6 C2 ]************************************************************************************************
3 R, T8 Z9 U; n' t
8 D K0 J% e! M, V5 Q0 P+ P- q Z/ i( @
DosFlash and DosFlash32 V1.6 Beta& ~, F9 U) }) y' Z, K
-----------------------------------$ o! _* O% m4 F: n1 J! o
- fixed power brute unlock bug for VIA cards, this can stop your VIA from working% `: Y) ]: O' Q/ R
with the power brute unlocking in Version 1.5
1 H' V9 m' o% K" h- c- for DosFlash16 in auto mode on DOS my VIA card works best if I do a cold boot3 Z/ {& d" E ]8 J- [
and power up the drive short before or with the PC9 D- P+ F+ [' d! l
- for DosFlash32 on Windows my VIA card works best if I power up the drive short
9 }7 ^5 g; i8 w, U5 M& A before starting DosFlash32' U3 T5 G$ B; x3 C) b3 ^- Z, S
- for me the VIA works with internal and external connectors on DOS and Windows8 b4 A/ g& h, S
4 U3 W c5 i& l. l+ p) P! q9 c) w
Sorry for the trouble!
3 _ b- W5 \! m) Q+ ]8 K- sKai Schtrom
' M" w6 k, [9 p& `# W9 `: _" a8 j4 ~! v, g4 l" j
/ P+ |( r* c6 F7 G/ V
************************************************************************************************
1 {! Q9 H L9 u- f8 b) H1 A q6 W2 t6 N/ @( \
( K- h6 ]# J/ J. h8 eDosFlash and DosFlash32 V1.5 Beta4 \; v6 K* X x8 G0 q4 b
-----------------------------------. n$ N4 j3 Z/ t# |$ l+ K, H
- now supports serial flash chip MT1309E with mediatek status 0x72 like the SH-D163B, SH-D162D,) D! Y0 H) k5 j- ^( b9 f9 H
Asus DVD-E616A3, Asus DVD-E818A3, Sony Optiarc DDU1671S
1 c5 ^" b1 q0 G) B6 O4 J- SST25LF020A and SST25LF040A chip support added: O, Z* P. v3 n9 i4 E; R
- DosFlash32.exe ported from MFC to plain Windows API, exe size is now 22 KB7 x( D) X# b* g0 M9 x" ~, ?
- new port i/o driver, because giveio.sys can't be compiled for 64 Bit Windows+ x2 h9 I1 f2 g. R" m
- DosFlash16 changed slighly in manual mode, one parameter is added to support SST25LF020A and
l7 M+ i: q0 v4 x/ e SST25LF040A
& C7 ]+ H" ]* o, n- two new methods of BenQ soft unlock are now possible on all motherboards with only one power0 u9 \! v6 a+ V. \8 ~1 s P
supply unit
- @/ r; H& J0 B- 1st method is powered by Geremia's unlock core, thanks for the complete idea, concept and
5 L+ W! B5 S$ J; H0 x$ r# @6 ]' H- G source to Geremia
9 {( d1 A# V; Z* N8 w% T0 h: h- 2nd method is the Magic28 key send, this only works on BenQ VAD6038 firmware, thanks to
+ e* ? B7 R6 X& [' e l/ j c4eva and podger for the initial idea
& V8 B( U) c/ }. i" U! n0 M( b$ Y- the two unlock methods are send one after the other if the drive is a possible unlock# G) O( n$ }; M" u& T7 X* }% U
candidate, first the Magic28 command, then Geremia's unlock commands and after that the
8 n2 D g6 f- I. } already known power brute unlock is send to the drive, you can cancel any of these methods9 [$ i# d+ u) K, N
before they are send to the target, this only applies to BenQ drives with a locked flash% ?) R! q' v' {& Y
- DosFlash.typ updated* n/ S- o3 ]+ ~" i
- other minor improvements/ R% S7 h! V7 R8 D6 v8 H4 U# D4 m
- DosFlash32 is now ready for
! s1 }# Y& A' c - Windows 20007 ]- C' _. x( M$ S$ x* ^" j" P
- Windows XP 32 Bit
+ T4 r6 u# I2 q0 G - Windows XP 64 Bit
. B7 C5 E& i8 H8 j# y1 r/ Y, o - Windows Server 2003 32 Bit6 R4 z& r- O. o9 E u Y$ B1 s
- Windows Server 2003 64 Bit
7 }0 N" u" b+ E6 `# U - Windows Vista 32 Bit
8 Z* z3 u+ ^, }6 @ - Windows Vista 64 Bit
% s& s, @# x0 o- F f8 w- Warning: Drivers for Windows Vista 64 Bit need to be signed, because we can't afford the
2 e6 F3 E: u: s) F5 a& N- ?. c1 _ money to let portio64.sys sign you need to do the following: i& L6 A, F+ n: {
1) Log on as Administrator3 j; j) m0 ~6 U. W
2) Enter the following command in a Dos-Box:7 y N) \) H2 B7 G2 L2 Z- D
"bcdedit -set loadoptions DDISABLE_INTEGRITY_CHECKS". w0 C4 |! O4 ], B! j' _
(we made sure there are no typos in the line above)  , C2 O5 }2 A* ?* b# v# L
3) Press enter and reboot your PC7 |% B, O/ |$ F+ k7 S# x- D1 u6 @! h
4) Press F8 key upon initial system boot up+ y; \. K! y2 S/ \
5) Choose to disable forced driver signing enforcement for that boot session$ s6 `0 V" ^0 r$ F [# t
2 d0 H, f5 {" b% I0 {/ g. f& F; U5 R. }
; @8 D8 N! q; n# t: x5 mThe following only applies to drives with a locked BenQ flash.1 A7 w/ {6 }: a( C5 N3 `
. X- o1 @3 v& b5 o, ^2 `+ ?3 ~; Y9 {! T4 }1 {! \! `+ l- [8 g, a" \
Geremia's BenQ unlock with DosFlash16 / DosFlash32 on any motherboard with the PC's psu
: j& p: @8 w6 E8 p8 h2 K-----------------------------------------------------------------------------------------& a% ^4 b$ d. J2 M7 ]
- disable CD-ROM boot option in BIOS- l5 m P2 T" z2 w9 f
- connect BenQ to your PC's power supply unit and SATA port- d9 X0 O2 n# V4 I L, |
- power up PC, wait until bootup is finished B1 {8 v9 Z, l, I9 @+ ]
- eject tray of the BenQ and shutdown PC completely, U$ L: K: p; ^+ s$ i# q
- push the BenQ tray half in6 b. F& n; O. z, T( @2 J( F w
- power up PC and boot into DOS for DosFlash16 or Windows for DosFlash32
" S n5 ]* J$ C& h9 A8 S; }- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows
! ~) N# J7 c- X- if you read the following:6 {* n" A. C$ z- T# ^
MTK Vendor Intro failed on port 0x????. Because there seems$ w# N7 ?" g) {( C
to be a BenQ drive connected you should try Geremia's' L' x1 ^! O i! ~
unlock method.
" |: {2 V" } @. W+ e - Eject drive tray
2 m6 i% o* z) _! y; I- T8 o - Power off drive- O: L" [- \6 [- T* A4 y$ C
- Push drive tray in until it is half open
4 b5 N/ _ o; e1 |5 \. G6 B L - Power on drive
& o' ~4 T7 [/ X8 L - Press "Yes" if you are ready3 k1 l$ ?2 n5 L
Are you ready (Y/N)?
+ p/ [9 y( `* e: ^6 N5 u5 P- simply press 'Yes' without doing anything of the above, because we5 z& c. S( Z2 ~
already did that before starting DosFlash16 / DosFlash32
3 a( u' k) a; q$ [0 x5 a W( M- the BenQ flash should now be identified
% d! ~/ W Y! m$ g6 ~2 g' a0 V- go on like usual
" g- F6 K5 H- k- i* I3 p
, Q0 g0 ~6 k0 o) j; M
+ l' \' h, b. x$ |- {( I. \4 rGeremia's BenQ unlock with DosFlash16 / DosFlash32 on any motherboard with 2nd psu3 V0 H* T: v& k7 R J
------------------------------------------------------------------------------------
- h8 l2 r+ [6 U( [/ V- connect a separate power supply unit to the BenQ, don't turn it on yet0 S" G7 {- o) V7 K" ^+ _
- power up PC and boot into DOS
$ r* f0 h1 j& U) O- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows; N/ N# d, Z( I/ E
- if you read the following:
% j" ?0 X" q% a" X" Q MTK Vendor Intro failed on port 0x????. Because there seems
, B- Z* u& a; Y( G4 v to be a BenQ drive connected you should try Geremia's/ U; S" f7 G" v. ]; Q
unlock method.+ C! M+ b6 h; A" h% w
- Eject drive tray) c# p h* W# J
- Power off drive1 C' T1 o5 `; s( [6 N) b
- Push drive tray in until it is half open1 m. ^. r0 r8 N2 |% x c
- Power on drive
7 }: W6 ~. i8 R2 ~) c - Press "Yes" if you are ready4 h0 P/ M, ~5 b2 r: `# _( t
Are you ready (Y/N)?8 Y8 [/ R- H" A) X" v
- do the above and press 'Yes') w+ b. \' Q" _$ S( [; R
- the BenQ flash should now be identified' ^3 l2 E, S( D0 m! A/ B
- go on like usual
K2 s% L+ ?; {) d2 c' E6 G/ y0 H. \0 s8 z4 v
: a$ L& y8 h }" c) O4 R. u# K! Y- {6 o
Magic28 BenQ unlock with DosFlash16 / DosFlash32 on any motherboard
9 P6 F9 P6 `/ S u- F% r---------------------------------------------------------------------
- c. q% C" n$ l: j* a5 Q- connect BenQ to your PC's power supply unit and SATA port2 \, V! |* Y# {2 z- ?; a# F8 a
- power up PC and boot into DOS for DosFlash16 or Windows for DosFlash32
0 Y5 g* L. _' ^- run DosFlash16 in auto mode for DOS or DosFlash32 for Windows
* R o# Z- ~' T* x- if you read the following:3 E/ B: \' C: Z9 m
MTK Vendor Intro failed on port 0x????. Because there seems
, `# P+ y5 D' c1 j to be a BenQ VAD6038 drive connected you should try the
6 l) i7 K5 j0 @ Magic28 unlock method.
; H' u! O$ s' e3 ^( e( Y; q2 c Do you want to send the Magic28 command?
. H1 c% ^# Z' h- L- press 'Yes'
& g' `' h) ^3 C3 \- the BenQ flash should now be identified
% V; Y" T d) R' `7 M$ ]+ J- go on like usual( E& z, a0 R# ]7 X: q
; t/ c; J3 J& |: A. s" ~# S% h% {
1 N9 q7 B, _/ ]5 S& TThanks to Redline99 and Tiros for help and support.
" I* ~( K9 ~3 ]7 z9 J$ T3 n' K- m, m
It's all about DOS!/ l. J' y- m5 f
Thanks guys for the excellent team work!
4 r1 \3 X* x4 T/ F9 A) p# eGeremia, Modfreakz and Kai Schtrom# k0 z8 N3 ~+ @( F
! C# u9 H5 `! i% n) m/ Q0 B2 g
1 y* a+ y6 @4 `6 C************************************************************************************************0 ~; u$ L# h" U/ y
$ p2 \$ k, M) S7 A1 ^
2 G" _3 O# c; @9 Q5 k; \2 G1 x; ?
DosFlash and DosFlash32 V1.4 Beta$ x) p% P; {/ q* A7 g- W
-----------------------------------! z( j! H8 U) \) d8 n3 i
- DROM6316 flashing support
% `" Y) {# `# n8 b1 U- a flash erase is now always done with a chip erase and not a sector erase command, because
; R& Z& K" _+ H" O7 h* d the sector erase gives problems for some Winbond flash chips including the DROM6316# F7 w b+ U6 l6 I$ {( ]
- DosFlash.typ corrected and updated
$ M/ C4 A& V% ~+ O0 a5 o; T- for a detailed explanation on the soft unlock look at the included file SoftUnlockByIriez.txt,8 v; n$ ` l7 D
it contains a very good explanation by Iriez from XBS, thanks for that one!
3 a2 O) O% @8 B9 b( W9 S8 F
7 A8 [8 C- ]" v y- D. D6 r5 L9 o. d: t5 PThanks to Iriez, Jumba, Redline99 and Tiros for help and support.
2 F" p7 L. _- M" S- P+ j
$ c! A" |$ R/ t3 H) bHappy DROM bricking!
+ |- ^3 [* S* O% C3 D K& WTeam Modfreakz and Kai Schtrom( u8 R: |3 T$ U
9 k( i' M; A% Q+ C
3 E' t+ c" d# j/ H$ f# i3 r************************************************************************************************; F7 w3 U. u: c# u
3 q E# I9 a+ v6 D
; H) e% V! r) B7 M9 j4 b* QDosFlash and DosFlash32 V1.3 Beta2 T: w* q) t- Q* U; S; K' I0 ~
-----------------------------------. B9 W) U/ V& c7 x1 A8 |$ l
- BenQ optimization in unlocking the flash chip, it should now be possible to read/write/erase
: g# V. {' `4 x. d3 s" y( D3 `8 T the flash without any soldering or wire tricks, the drive is polled for the correct mtk+ I( {" B& M4 I# d. x3 c* y4 I; T
unlocking status after power on, this only works for VIA cards and NForce boards atm
; d$ _7 y# m. D0 |! o/ L1 b- DosFlash32 has one additional parameter, if you start it with the parameter "EnableDrives"+ u/ u) F' ?$ n+ l6 d1 k) |) N0 t
all the DVD-ROMs are enabled in device manager after flashing, this could give BSOD on some. P8 d6 m! v- k. [1 h
systems, therefor you need to create a DosFlash32 link and add that parameter manual to use it2 q) G6 d1 I+ ^: ?0 n' ~
- DosFlash16 has one additional parameter "Send ATAPI Device Reset" in manual mode, this could" y- F; C5 Y9 q4 B& o- t( ?! K7 A% Q7 Q& {
give better chances for soft flashing on some VIA - motherboard combinations$ ]. V* K0 _# y' |2 a% {2 i, P
- better support of Intel chipsets, drives can now be flashed if the controller is not set to6 e Y5 ^% |+ e
native mode in the BIOS
" W3 d/ N. Z" p8 I5 E9 ~5 _: ]- the following controller list includes vendor and device IDs that are hardcoded to identify, l/ I9 v j% D
the controller type (IDE or SATA), this is needed if the BIOS uses IDE ports like 0x01F0 or
. S4 y& q% E1 V8 H T m 0x0170 as SATA and not as IDE channels, this list is NOT related to soft flashing1 H! Z% Q; W! V% L) V+ z* Q
- the following chipset support is added2 @ Y' U& h( i4 E& L( B/ w
- VIA cards" S( Q- l/ U3 \& j+ i S% w) o" {. C, q
- all VIA cards with a 6420 chipset5 k8 n3 }6 L J+ e% E
- IDE Controllers- R$ _# @& O4 p( z
- NVIDIA nForce 2 IDE Controller
3 f4 L! \/ [' [2 [+ b& D+ H3 x - NVIDIA nForce 4 IDE Controller
7 h" Z" V h3 y' u7 O5 A - Intel ICH9
% n& b+ b) R' e$ L# x1 U - Intel ICH (i810,i815,i840)' @1 l: c B. F/ ?. C3 \- f
- Intel ICH0) v* H. U" z9 C+ X! E
- Intel ICH2M+ _, ~' P4 w9 C
- Intel ICH2 (i810E2,i845,850,860)
8 i1 Q$ G- a$ ?: J6 R7 `+ \ - Intel C-ICH (i810E2)
i% i5 I; `, E! i/ N {' V - Intel ICH3M
* W* d! T2 b6 r9 l; R/ q0 e( X - Intel ICH3 (E7500/1)
; I- i" e: P1 L1 O7 ? - Intel ICH4 (i845GV,i845E,i852,i855)
4 ?- W3 [4 q% K' U! ~, B - Intel ICH5& F' z5 k# V' ~2 f0 ?
- Intel ESB (855GME/875P + 6300ESB)
5 U& H( V8 H7 A! x; m a3 L - Intel ICH6 (and 6) (i915)
8 i a2 ]+ Y3 N) {& F - Intel ICH7/7-R (i945, i975)) K& S# f. s+ [ E3 B! E9 U
- Intel PIIX3 for the 430HX etc4 ^2 Z# ~$ `3 z7 f5 t
- Intel PIIX4
5 e) E( S0 ]1 `- |& Q - Intel PIIX4 for the 430TX/440BX/MX chipset
* v R. N4 Q6 Z5 I R" q - Intel PIIX
! P6 H# k, D" u4 O( e4 l# N0 ? - SATA Controllers% ]$ z+ B8 k$ x5 }# ]3 _) J
- NVIDIA nForce 4 SATA Controller, u# s$ R7 K/ j' }
- NVIDIA nForce 2 SATA Controller. U7 m+ I# |2 Z# {" L( b
- NVIDIA nForce 3 SATA Controller
# B, P/ U* |, C# d' ~) Q - NVIDIA nForce MCP04 SATA Controller- D6 T* m+ m! n- D# s5 g: h% ?$ l
- NVIDIA nForce MCP51 SATA Controller0 H5 C6 c2 {8 g1 G4 t/ {% G6 L
- NVIDIA nForce MCP55 SATA Controller
, h- `! z& s0 o( x* D - NVIDIA nForce MCP61 SATA Controller) |- ]: N8 ], S) }* V9 j# Y
- Intel 82801EB (ICH5)
% @* O$ ?, R8 ?+ X" x - Intel 6300ESB (ICH5)3 {& R( ?- E+ J2 y. i
- Intel 82801FB/FW (ICH6/ICH6W)
& n5 e1 p/ e' u9 b' V; ? - Intel 82801FR/FRW (ICH6R/ICH6RW)
, [! Z/ T' D& O. t - Intel 82801FBM ICH6M
; b- U, k4 S& p* T5 o# O7 R8 h - Intel Enterprise Southbridge 2 (631xESB/632xESB)) h; N: a6 b/ { B+ g0 x6 V
- Intel 82801GB/GR/GH (ICH7, identical to ICH6)) }$ n( k* ~# G- t5 u
- Intel 2801GBM/GHM (ICH7M, identical to ICH6M)
1 G4 @3 M% U1 u) k7 G5 ~ - Intel SATA Controller IDE (ICH8)
E6 ^2 z9 t( p2 u - Intel Mobile SATA Controller IDE (ICH8M)
2 u) W' v$ d& `5 |1 X0 P) F - Intel SATA Controller IDE (ICH9)
5 W0 y. g- N0 r/ k - Intel SATA Controller IDE (ICH9M)
: i7 H! d' ?: `/ a6 [! f& i% N. i, a* t, h
# S+ i: ~; A+ D2 W
The following only applies to a software flash on a locked flash. The methods have been tested
$ ~+ T+ S X8 ]8 k) p( dwith the BenQ and the Sammy. The VCC trick will work on any motherboard, but you need to do & _+ S0 j& x# `( M8 p* ~
some soldering and cut traces.6 c7 y1 v, _& h1 f/ D
. M, r* u. }$ M5 i M2 ?) J/ i, c) ]7 O$ K! @- |
Soft Flashing the BenQ in DOS with a VIA card and DosFlash16 in manual mode3 y. K. y7 Y4 ], ]& e V( S
-----------------------------------------------------------------------------
! s; V3 e1 \* m- first you need to know the port addresses of your VIA card, you can get these by starting
3 _7 B2 f$ H+ z) q: w msinfo32 on Windows XP and looking at the port listing for SCSI devices
6 f" ~* |+ E; P4 P- for the 6421 the 1st port is internal SATA, 2nd is external SATA and 3rd is internal IDE8 n, \$ z" H3 u3 T/ w5 |
- for the 6420 the 1st and 3rd port are internal SATA( P( S& P; F7 C
- you need the starting address e.g. 0xD000 or 0x7000
1 ^) v2 K m% @6 U, e# |- be warned that these addresses can change from computer to computer, they are assigned8 _5 G4 _1 U+ N+ B/ m0 y M( O
at bootup, but Windows XP should display the ones you need for flashing in DOS0 v- ^/ `$ s6 P& I7 I+ P7 S
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or 8 l+ g1 V0 k' T6 z) a; B
Xecuter Connectivity Kit)/ a/ t% d$ i6 B6 Y3 M2 k- Q
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we# K& Y% i: R5 ?# r* I8 F/ G% H& q. y
need to power the drive off and on during soft flashing
/ h8 u# e. m4 V g" u7 [6 Q4 |- cold reboot or reset the computer
' f# s8 B% o: U$ F) I2 I- boot from a DOS disk, I used a Windows XP MS-DOS startup disk9 E5 @+ v, W2 V0 v
- at the prompt type:
. J% W) Q0 O. Q9 c4 f7 g$ V# I- ~ DosFlash r 7000 1 a0 1 4 a:\orig.bin 0 4 @! d* u. H0 s4 P/ ]( A& t U
- instead of port 7000 use the starting address your VIA card uses/ ~1 U1 W3 x( R. f& M S
- press return# s( h/ |# ~0 |- v H* @# y, I: H
- DosFlash16 will ask you if you wanna resend the mtk vendor intro cmd, press Yes0 y0 _3 X7 U6 a/ j
- after you pressed Yes the drive status is shown on the screen, it's something like 0x7F,
4 W5 p+ a1 y3 H w# F' d0 E this will change during the next few steps
% y% U7 W+ w I- turn on the BenQ psu and wait 2 or more seconds, status changes between 0x51 and 0xD1
5 w7 m7 t, Z6 U+ j, M- turn off the BenQ psu and wait 2 or more seconds, status will stay at 0xD1' a/ z# e* \0 f! g+ |4 Z4 P0 l
- turn on the BenQ psu, you should get a good drive status 0x73 and flashing should start4 P3 a+ Z- n( M* f! l' L9 _5 K; ]
- this worked only one time after the computer is powered on or resetted for me+ ]/ G# q* M6 e$ Z
- writing and erasing works the same way$ C2 ?9 ?: l# d$ h
- for writing type:) ]+ u) D" h$ t7 |8 x3 A& }4 E
DosFlash w 7000 1 a0 1 4 a:\ixtreme.bin 09 N8 h: x' `1 Y( J
- for erasing type:
& N# O& E2 i1 ]# n& J DosFlash e 7000 1 a0 1 4 D8 0 (D8 is the sector erase opcode for the BenQ flash, if you need! U/ y9 _* {' e- V; z$ D
to erase another drive, lookup the value in the datasheet or DosFlash.typ)
! B8 c5 }* P3 T8 w8 |- if you experience any problems try to use 1 as the parameter to the ATAPI Device Reset, cause: M# i0 O" [- m3 n) N+ d" z
the same VIA card will react differently on another motherboard sometimes
1 ?1 t2 U& M) P1 \
Q6 v4 T! E" w* p: [
# e! @" j% l8 _5 U0 M1 B4 y, WSoft Flashing the BenQ in DOS with a NForce motherboard and DosFlash16 in manuel mode" \3 e* |4 |! p2 P4 m# k3 J
---------------------------------------------------------------------------------------
6 L' \& x2 w" ]- first you need to know the port addresses of your NForce motherboard, you can get these by % O' ^6 Q# s. {! X3 ~
starting msinfo32 on Windows XP and looking at the port listing for IDE devices: _4 @% U# g& `5 Z) ^5 }- M* o) S
- on most motherboards the 1st and 3rd ports are used for SATA0 {+ t- t7 [2 T2 J4 u
- you need the starting address e.g. 0x0970 or 0xE900; e4 Q' }# ^' _( [
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or
& R, g# ]' o& r' N, L! c Xecuter Connectivity Kit)
6 n) J/ O6 H" x+ g' r, f! ^- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we7 V2 i9 o; U: X. f- o# e8 ~
need to power the drive off and on during soft flashing
( O; A5 v5 {/ ]; o; h0 R$ [: _) {; Y! c- cold reboot or reset the computer0 {' E$ |& J1 A3 |+ m
- boot from a DOS disk, I used a Windows XP MS-DOS startup disk9 \* n! u8 J: w& d3 R8 S; G
- at the prompt type: ! ?* Z% ? h: U8 N3 V7 F3 P% k
DosFlash r 0970 1 a0 1 4 a:\orig.bin 1 ; E7 c& Y6 N5 ? ~$ ]
- instead of port 0970 use the starting address your NForce motherboard uses
4 p3 E+ t* W! O7 x- press return* {4 s' ~6 n# T
- DosFlash16 will ask you if you wanna resend the mtk vendor intro cmd, press Yes: \# _( p5 Z. y9 g$ P/ R, r6 e
- after you pressed Yes the drive status is shown on the screen, it's something like 0xD1,
0 W* w4 O/ E" t this will change during the next few steps
7 N& b8 N3 ~1 j+ _. p& l- X- turn on the BenQ psu, you should get a good drive status 0x73 and flashing should start
9 C% V3 i: N! k1 ?- writing and erasing works the same way5 g+ ^$ P9 l0 o5 G% e6 f* k
- for writing type:
$ ]) _ P( r7 w5 O% p, M9 G/ Z0 H DosFlash w 0970 1 a0 1 4 a:\ixtreme.bin 1- _! {, c6 P0 G: I4 {
- for erasing type:
' y; L8 F2 ]9 Z* }8 N" T; W8 d DosFlash e 0970 1 a0 1 4 D8 1 (D8 is the sector erase opcode for the BenQ flash, if you need
7 d t/ [6 |0 {4 v to erase another drive, lookup the value in the datasheet or DosFlash.typ)" ]5 ]( g2 s1 E- Z5 T$ K* W b
# M9 d5 z* A* ~ V* N+ f" f" j( @8 d( c8 K" \( Q
Soft Flashing the BenQ in DOS with a NForce motherboard and DosFlash16 in auto mode
# p9 g' m; G- p) Z1 g0 P- a( ^-------------------------------------------------------------------------------------
1 K% e" H4 V+ w- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or 9 p" @1 b% s/ y3 |6 P
Xecuter Connectivity Kit)3 q; l9 H8 H/ h. e/ [
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we m% d, u1 u) v9 O0 k
need to power the drive off and on during soft flashing2 V& M- I9 `8 S* V) Y
- cold reboot or reset the computer
! o, x. l0 o' x8 h0 G9 L% \- boot from a DOS disk, I used a Windows XP MS-DOS startup disk
& ~; S2 q2 S+ D' O2 E- wait until you are at the cmd prompt
& c6 R( x! B1 T* |- turn on the BenQ psu
Z4 o( [ R* w0 w `% O) I- at the prompt type:
5 J- [$ ^# v7 a& @+ F DosFlash m. {! D1 ]* D2 u
- press return1 ?% |5 D' N/ Q4 Z3 Y; `* Q
- during scann of the BenQ's port DosFlash16 will ask you if you wanna resend the mtk vendor6 X, G8 B( R0 k, v" u
intro cmd, press Yes) c) b' K" g0 e8 h0 T
- after you pressed Yes the drive status is shown on the screen, it's something like 0xD1,
9 Y& r7 r( b& s# U) l this will change during the next few steps- o( i& l7 B1 h+ |. |
- turn off the BenQ psu and wait 2 or more seconds, status will stay at 0xD1
+ u: V: v8 _# Y5 A- turn on the BenQ psu, you should get a good drive status 0x73 and flash access is granted
1 [+ R+ ]5 [$ q" O) W- you can now continue as usual using DosFlash2 Y0 W* ?4 i$ P u
- writing and erasing works the same way% B% d+ d A7 `. [+ h8 O
- if the ports are scanned there is the possibility that you'll get the resend question for
6 V) E, m: f( |+ `' w4 g other drives like a NEC, this is because the NEC has no MTK chip and returns a bad status,
8 Y' c5 ?3 G( n9 k3 M2 O1 @* ~+ M6 h if you know the NEC is at that port you should press No and press Yes only if the port of
: J, [/ j. V; j" g the BenQ is shown or simply disconnect the NEC
: y$ d. t, A; }. x- ]4 ?9 S8 B! c7 e s
6 p" a1 r2 `0 J; QSoft Flashing the BenQ in Windows XP with a VIA card or NForce motherboard and DosFlash32 a4 O% ?6 n; Q: i5 e5 h
------------------------------------------------------------------------------------------- b& Q6 S, K& d' L% I
- connect a separate power supply unit to the BenQ, don't turn it on yet (can be XBOX360 or $ `1 j1 p: ~& J; s
Xecuter Connectivity Kit); w+ {) U5 ]7 q9 `
- don't use the Xecuter Kit to power the drive with the same psu as your computer, cause we
5 `% l, Y9 v- ~; I& Z+ G1 k) @ need to power the drive off and on during soft flashing. S) |" l+ {! @9 h* v( Z
- cold reboot or reset the computer4 Z6 G# K* `" h5 u4 x
- turn on the BenQ psu when you are in Windows XP
9 E O- I& z6 c1 j- start DosFlash32: R, T& t& @- ^7 h% d
- DosFlash32 will ask you if you wanna resend the mtk vendor intro cmd, press Yes) ]! b1 @/ t$ c
- turn off the BenQ psu and wait 2 or more seconds
( }2 O2 z4 z. e, ?; [* H- turn on the BenQ psu, the DosFlash32 dialog should show up+ ^4 ^# X+ i p9 d6 Q, v1 u6 u
- the flash should be recognized by DosFlash32
* m/ S0 J/ C& h1 T1 s- you can now read, write or erase the flash5 V. c |+ R2 U( \4 j' C
- you should be able to do the flashing more than one time in Windows, only do the power / C9 Y7 T, G3 L) q5 ~3 ~$ {
off/on trick again
2 n3 F2 |; T$ }; q' L$ w- if the ports are scanned there is the possibility that you'll get the resend question for, Z: s. A2 d' ~9 e
other drives like a NEC, this is because the NEC has no MTK chip and returns a bad status,' @3 T5 ^/ k1 V& V& p* S& l- ?/ i+ t
if you know the NEC is at that port you should press No and press Yes only if the port of, d% b% v- T) L' p4 R2 Y+ _: C$ K" M
the BenQ is shown or simply disconnect the NEC
4 A+ s+ _/ H" [6 e7 J# R! U3 A1 U. F# `6 S4 {* N
8 t( z: O" \0 O) L! E# P0 N" m
Many thanks to jumba for the great idea of BenQ polling!$ h$ e0 G# e% e5 e
Thanks to Iriez, Jumba, Redline99, TeamModfreakz, Tiros and all the IRC people for testing
: s# d" b l) K7 N# G' S2 yand support.) U: `9 M& s8 P2 B0 k+ H
# Z- A$ D& }+ EJoin us on IRC efnet at the channel #dosflash for support.1 s/ W! M- J) i1 |) {! x( N
- g# @. p( c8 W) r
Don't brick your BenQ!/ v2 W1 g0 g) f, W
Kai Schtrom
, z9 M8 A' G3 O9 E
: ~6 [) H- ], l( }) ~4 Z& p6 \: l# o2 |# H$ ~
************************************************************************************************: s- r" _) \" a+ Q; q4 X; O
3 R3 A8 ^% `3 X: ?6 k7 F
; z4 j1 T2 I$ \+ _+ `
DosFlash and DosFlash32 V1.2 Beta
2 t1 J3 a7 K( N$ M# k" m* H# F-----------------------------------
2 [5 F( z4 h8 G; u3 K7 p- bug fix for BenQ recognition
' a! }, c' t! {5 A" c - manufacturer and device id are sometimes 0x00 for a correct installed switch
1 h" |1 ]3 ~% j* v2 @ - this issue is fixed with an additional ATAPI device reset before the mtk vendor intro is sent
( j0 i* z& D$ V* I) |. |0 W- e5 Q2 u" d5 l
Thanks to Redline99 who fixed my buggy code by adding one line! . v3 \/ o9 g2 c* `
, i! r5 N l5 k9 l
; P4 c5 _0 k- [$ S G) b
************************************************************************************************
/ L% A1 ]) `4 V6 A. N
% O$ L5 d7 K$ q- k$ @; t) D W9 P! O, t* H4 a: x8 s
DosFlash and DosFlash32 V1.1 Beta
1 ?6 o- F1 p7 p0 X* ]5 ~-----------------------------------) V0 q* G. ]) B
- DosFlash.typ modified for better BenQ support
b! n$ Y6 y X2 Y2 p- DosFlash16 Flash Manufacturer and Device ID screen output restructured! }9 G5 _7 f: v* d: W+ P1 V
- flash chips are first erased before writing starts9 p& p$ _. @/ Z# @ h
- DosFlash32 no reenable of DVD-ROMs in device manager after flashing, this means you can't see the drive6 Y$ q" a4 b$ K& p
and maybe have to activate it manually again in device manager, this could give better compatibility and
: J' n( c) ]3 P/ r! ]( P hopefully no more blue screens/ Y0 `5 S+ g U# Q% m! y: x; w* U
' s) r- G4 D, \: k, \( C; E! MMany thanks to Jumba, Redline99, TeamModfreakz and Tiros for inspiration and help!* `8 e6 H+ ~* G4 t8 h
) E- h$ V+ q, l1 Y6 t2 R7 \1 H
/ P4 N$ s% F, `$ F7 B/ S" \
************************************************************************************************
+ H& _5 \- h' T: F0 ^6 c, p2 }. X4 q' }2 F1 v* `1 ?8 ?
& p2 O+ j% t7 O% v# f% c7 R' b' o
DosFlash and DosFlash32 V1.0 Beta
7 d" _3 c" W+ O! t2 \1 p5 B9 r: h; Q-----------------------------------3 J1 h, R0 b0 e# o
DosFlash can be used to read/write/erase the flash chips of most CD/DVD-ROM drives
0 ^' y& y) M) r$ q1 x& d+ jthat have a mediatek chipset installed. DosFlash is for DOS flashing, DosFlash32
4 Q) J" I+ ^% ?0 D# lfor Windows flashing.2 R& K7 B6 s# {) U0 }
" [/ u* }6 o, t* v
/ W J. E& [8 }% ]( C; h, fFeatures:2 A/ d# L1 d* \. _' Q+ \6 G% [$ n
-----------' C9 S9 W/ z; Y! U$ ?' T+ h) I
- flashes IDE and SATA drives
4 B9 B* q4 q$ \6 Y1 b( {- p# E" d1 q- supports parallel and serial flash chips
! `$ P% e, G0 A8 Q: Q- flash drives in Windows with direct port access1 y2 W: l5 m2 L8 j
- no vendor cdb flashing commands are used: \/ t& l7 @) t5 C9 n$ }
- tested with the following drives:
. W: i8 g4 w1 u. j) x6 ^ ^4 { - TS-H943A MS25, MS28
I l! E, t0 |2 K, n5 L - SH-D162C8 w: I* |8 h' M9 J1 a8 S+ f2 ~/ P
- SH-D163A
1 Z" c8 R) X' ^- t - and some other drives like Liteon, Hitachi, ...
/ L# ^0 L* G9 i8 @+ @& R2 L5 _- NEC drives are not supported, cause they have no mediatek chipset installed
! P! U2 C5 P8 _) Y7 S! N' P3 o
- a% z" m' G+ g& [7 A0 N3 S5 j2 B
0 ^( n# g& D( }DosFlash& H* c" h* |3 y
----------
5 p G' q. a* O% a% e4 E0 m ?DosFlash supports two flashing modes, Auto and Manual. If you type DOSFLASH at a DOS prompt it1 }- C; h5 C! p
will start in Auto mode. All drives and the corresponding flash chips are detected automatically.
& M$ k5 I/ R# I. lIf you can't get a flash chip recognized due to a bad flash or other problems you should use the
+ k* ]3 D4 v1 r; g" i9 Q1 iManual mode. In Manual mode you can enter all the parameters used for flashing by hand. The; W4 m3 N2 G! ]% y1 X# K N, W- k- ~
following help screen is displayed if you start DosFlash with a wrong number of parameters:
! k+ s2 k3 |* [7 `4 w( [1 j$ m" n5 _+ _$ \
( S' y* q/ l( w# s0 j
DOSFLASH by Kai Schtrom, 08/05/2007 (Ver 1.0 Beta)/ m2 N' D# n9 O: y) s
DOSFLASH [R|W|E] [PORT] [PORT TYPE] [DRIVE POS] [FLASH TYPE]
' h4 L, z0 G( ? [FLASH SIZE] [FLASH SECTOR ERASE OPCODE] [FILE NAME]
( ^1 ^, p9 F: b1 d' n R: Read FLASH
8 X- @% F, X" m% }" D' p W: Write FLASH$ ?; X8 t3 A# w* n
E: Erase FLASH, [5 M5 F# _; A+ k
PORT: Port to send command to( y& N9 Q4 p( I
PORT TYPE: 0 for IDE, 1 for SATA* q S. f s8 D8 z/ W! b$ b
DRIVE POS: A0 for Master, B0 for Slave
1 e( x, X/ l. Z( H+ ~ k FLASH TYPE: 0 for parallel flash, 1 for serial flash+ x+ \1 `5 \& ]/ I
FLASH SIZE: size of flash chip in number of banks. G( k8 s# ~' I- }5 Z
FLASH SECTOR ERASE OPCODE: individual sector erase opcode command byte5 P* b# r- y4 u4 S B
this is only needed for erasing a serial flash D7 J; g* f2 i% b; V1 Z. C
FILE NAME: name of the file to read/write from/to flash7 A: b' I6 G% h8 d7 p! ?
All numbers are intepreted as hex values!
, O1 q3 u8 A+ L- `9 Z
, J k0 V/ s6 b( k0 Y" I9 RExample Usage:/ s( a! \, I4 P+ q. ^5 w( \+ {
"DOSFLASH R 01F0 0 A0 1 4 C:\flash.bin"
% h6 `% n+ d9 g* v/ U=> Read serial flash with a size of 4 bank (262144 bytes) from Master Device% d& X+ k+ o& k
on IDE port 0x01F0
* o. n% S9 b4 {"DOSFLASH E C000 1 A0 1 4 D8"9 g8 r6 N/ O7 n' a0 q; d+ O4 e% m
=> Erase serial flash with opcode 0xD8 and a size of 4 banks (262144 bytes)0 R6 e& [6 Y. H0 c4 e
from Master Device on SATA port 0xC000) S7 U4 A! f+ M& B2 R2 F
: r. G9 O9 |; I1 ]4 b6 i. Z t2 |1 |% e3 \ b6 n6 P' k ]- l2 s# S. _
Explanation of the Parameters:: j/ v) v9 S. @5 s' N
--------------------------------3 r& ~# l d p7 @% l
4 K! r) i7 W; t+ s2 Q
[R|W|E]6 c! U ^- C/ d
---------. x; L$ d3 X4 y5 Q
- this will set the mode of flashing, it is recommended to first try read on any
3 T& x3 c/ f2 z: q+ _ drive, if the read will fail, it is highly unlikely that a write or erase will
* ^1 B$ l) `; T2 _6 b6 T6 Y succeed
( |! C) W( q( i' P( N% e
* C8 X0 G1 \' ^/ ~) A) G: u[PORT]+ [7 |# Q, ~: U/ a$ m
--------
4 k' g7 D9 X5 \: \8 ~- the port to which the drive is connected, a port number should always be entered
% e# A$ F! M! r, \( u in hexadecimal and have 4 hex digits, valid ports are: 01F0, 0170, C000, C800$ q8 N8 k# m. r) C+ C% }
- this option can be used if your PCI adapter card or on board IDE/SATA ports are
3 z) j: `5 D, U _0 Z not identified by the auto mode
5 ^8 B! f/ J1 C M7 p/ f [
5 @5 U, f) ]& z[PORT TYPE]
1 ^3 Y( {' E. N- b$ d* w+ [9 V F-------------
$ e# H8 I! s- {8 G1 f* S. {- B- D- the port type tells DosFlash what type of port is installed on the before entered, v' `0 z: N" x. M6 n
port address
7 b" d5 {$ y4 j# [/ h8 [- valid values are 0 for IDE and 1 for SATA
* r( w, `1 K4 x4 p" V- make sure you never mix the wrong port with the wrong port type, this could give
. J" d1 |. p8 [ strange results or in the worst case a bricked drive: ^$ I! y% K/ p4 F/ l
2 a9 \ w8 W3 t! c3 U+ b$ y[DRIVE POS]6 S* [4 s- g, G$ ^, x8 v2 I, t" Z
-------------
' y& @5 N& W* ?. r6 R2 {1 S7 I6 o' f- old style IDE channels have the possibility to connect two drives at one IDE
% L( e1 N& F0 L* `7 b channel, the first drive is called the master, the second drives is called the
" w* M7 ]* n5 m8 A slave; @2 ~, u; h# p
- you can select which drive should be flashed on the channel, A0 selects Master,
, E p( J5 X1 [* [% W" y B0 selects Slave7 I0 k- Z! \/ A
- on SATA ports this value is always A0, cause you can only connect one drive to
# _: c+ g3 R @# j a SATA port, so for SATA you will always type A0 here
9 [: i$ n; |. u5 Z: g, @ }- it is not recommended to flash IDE drives with another drive connected to the
: n$ t+ k2 H( }# b' X same IDE channel, this could be risky if something in the Master/Slave selection
; {0 ?) C6 K2 i0 ^& H5 g fails
( J* s* ^4 d; g0 S1 u; Z a' _ 7 k# ~6 e% ]3 i% D3 }4 S# g# ]
[FLASH TYPE]: M; R* u( Z: Q0 w
--------------
7 r+ ]3 q; c* X$ E- there are two types of flash chips out for CD/DVD-ROM drives atm/ C! J. v# W0 O$ L# M
- the older type is parallel flash, which is also supported by mtkflash for example
8 z$ E0 ]3 L _- the newer type is serial flash, which is supported by flashers like XSF1 `; Y- ^4 ?/ ~# x9 [6 T& E
- the problem here is that no tool is out that can flash serial flash chips on
7 D- D9 [: C; c! [8 w# _+ N6 E% Y. }4 | SATA ports/ ^) X. H& Y$ L1 T
& f- W1 C! d) P& O4 G, Z) m6 y+ c
[FLASH SIZE], g0 m2 J; ?: C: m
--------------
8 Z0 o- V3 x& m5 c- Q( f+ Z- this is specifies the flash chip size in banks
) u7 W4 J# Q# g4 ?- one bank is always 65.536 bytes in size
9 z+ N' @3 Q8 i& m- if you know your drive has a flash chip of 262.144 bytes in size you need to enter 4) ?. d. W1 i' V
! S7 @0 P1 i2 p[FLASH SECTOR ERASE OPCODE]
5 e& z6 _, b! q-----------------------------
L5 {* u0 l8 a- the opcode used in the flash chips datasheet for erasing
- K2 A+ }/ [4 l0 h2 L: O- for serial chips this command can be different from the standard and needs to be
! o( V8 S' @8 J entered for flash erase
6 n4 U) R$ x8 z4 Z- for parallel flash chips you can enter a dummy cmd byte, the integrated command; m( n' o" X, g
should work on all parallel flash chips without a prob( z- e7 u6 X0 H. o' M) k4 W) R0 P) k$ w |
1 e+ D; r# ?3 w# O v ^ R3 H4 A[FILE NAME]/ G2 n5 l' w% b9 N
-------------( C2 M% w% ]0 R' G* D
- name of the file that should be used for flashing
1 C; d4 h0 S4 e9 t, z- for reading operations this should be the output file
) T1 E7 U0 d: Q0 m( Q" \- for writing operations this should be the input file& W7 R0 l8 p8 j4 E' w
% T& W3 `, F) I0 K* e- G N
+ N& |7 `2 G' S2 Z! DHints and Warnings/ N* w( d5 V' u) s3 Q2 u
--------------------+ A/ Q, b5 N. S8 y1 H- V
- read, write erase TS-H943A MS28 after the firmware stealth has been disabled with Enable0800 disc1 ~% T9 c8 }3 @, I. @
- this only works one time, after the first mtk vendor specific intro cmd is send& R3 k( x6 b: {5 u/ ?3 q
- if the mtk vendor specific outro cmd is send the chip goes back to stealth mode and you need( c9 K8 j4 ]' E" g H3 }
again the Enable0800.iso to disable it
9 S4 P) m: x: P - therefor the mtk vendor specific intro is send at program start to all present devices and the
- E* e% |2 S& d mtk outro is sent at program end
& U* E3 s* G5 ^% J - if you have a chip manufacturer id of 0x02 and a chip device id of 0x02 for the TS-H943A5 v1 C! _4 [* T4 j0 m6 g
the flash chip is in stealth mode and won't give access to any reading, writing, erasing
( K% ?* m3 `& f V- C {- O1 W- always have a look at the DataSum generated, this is exactly the DataSum of mtkflash2 u7 @* ]! M9 z1 g( u
- the DataSum is calculated as the sum of all bytes of the firmware in a short integer
8 Y5 ?& J, Y# Y; n; j$ h - to make 100% sure that the flash is written right compare that DataSum to a known one, F, n/ [- I1 e
- this tool has not been tested on all drives out there, the typ list is simply copied from well5 N$ u+ A" Q0 ~, u# Z9 C
known programs like mtkflash and XSF& d& X' A3 C6 x/ e/ r. k7 _
- always try a flash read on a not yet tested drive before doing anything else3 D; m0 Z% X% \8 p8 O
- if the read doesn't succeed it is highly unlikely that a write or erase will
$ j# \* K# [9 F0 x- some LiteOn drives seem to have probs to write the firmware correct, this prob seems to be
% i% Q. Z9 Z e7 O) c/ v related to windows register flashing, cause even an assembler app can't do this error free- b* f& U2 R5 `( s, Y- q- _
- if you get errors on LiteOn drives, write the flash two times in a row7 a9 F$ t2 J9 L$ s5 L
- for direct port I/O in windows the givoio.sys driver is used, this driver is loaded at DosFlash32
/ {+ P4 B4 q6 H; w. l start and unloaded at program end, be warned, this driver can possibly make your system unstable,
; i' J- R2 P6 n it's intention is to let privileged assembler instruction like in and out pass, even in windows," ]3 I6 H1 s) O& i% j
if this driver is not used you will not be able to get direct access to port registers) R5 ^% N. \7 l" {4 j
- DosFlash was tested on MS-DOS 6.22 and later, you can easily copy it on a MS-DOS boot disk created' C: D( M+ o( R& p$ O) ]6 j- E+ w
in Windows XP and start DosFlash directly from the disk
+ ^8 O% Q) }- A9 e* W$ a% z- don't forget to also copy the DosFlash.typ file, it has all the informations about flash chips, _5 U9 a* c0 B- p$ N6 n* [
for auto mode flashing
) ?7 w, ]# W5 j7 F8 E5 j% ~! t, e- DosFlash32 was tested without a prob on Windows XP SP2, you'll need also the typ file for the
) h, W, o; q0 U9 I win version8 I, q2 Z$ Q) p7 y
- DosFlash32 will deactivate all CD-ROMs in device manager at startup, this is better for flashing,( T0 N# l$ a" Z6 T' v* F( I8 h x( w
cause Windows seems to poll the drives all the time and this could result in a bad fw file or' L+ s5 R+ Q, b0 y; \4 O- ]8 E/ `
a program hang, the drives are activated again at program end
+ i4 S v% E j3 Y X* l- you should make sure that the flash is not in an erased state at program end, cause device manager
: `$ `5 U' R2 a don't like drives that do not respond to the inquiry command; S. O' `7 N2 i7 i) {; {
- deactivating all CD-ROMs could take a few seconds, so please be patient at program start
( z" M. E+ |2 |3 L0 f' ^$ H- DosFlash and DosFlash32 will try to scan for the VIA 6421L Raid Controller card, based on vendor
: }0 l/ A/ o: v% v, }% {9 M id 1106 and device id 3249, it doesn't matter if the card driver is installed or not0 U" K5 b: K; V; V, y! j! m2 m# \
% c( c' D; ^7 y/ P/ ^
: w/ E3 c+ B9 z* r
Many thanks to Dale Roberts and his Direct Port I/O driver giveio.sys!
. o4 V6 I9 R. }, Q/ h4 E+ ~3 r/ y x& Y( P
Avoid a bad flash!
+ p5 B7 P6 o; v( nKai Schtrom |
|
窺視卡
雷達卡
發表於 2011-8-12 20:40:35
顯身卡