Xbox 360 Modding Guide To Play “Back up’s

How to Mod Your Xbox 360 To Play “Back up’s” [Tutorial]
I do not take credit for writing this.

Firmware Pack
Jungleflasher

This is a basic guide on flashing your Xbox Console to help you play your back-up games or repair it. I mainly specialise in Phat drives, these are LiteOn 02510c, BenQ, Samsung and Hitachi. I also have added tutorials for Winbond and MXIC unlocking for Slim Drives that require it. All the information found in this guide was written by me. Most images are owned by Team-Xecuter and other places.

For this you can use the On-Board SATA connectors, these should be fine just for flashing your drive. (Non-LiteOn)
The On-Board SATA connectors look like this:

If you’re flashing a LiteOn, your PC may freeze/lock-up if you try to Erase the drive if your using the On-Board SATA connector. If this is the case then you need to buy a VIA 6421a SATA Pci card. These can be bought on eBay, Ck3 or Modtraders. And are all under £10/$10.

The SATA Pci card looks like this

If you’re flashing a LiteOn, your PC may freeze/lock-up if you try to Erase the drive if your using the On-Board SATA connector. If this is the case then you need to buy a VIA 6421a SATA Pci card. These can be bought on eBay, Ck3 or Modtraders. And are all under £10/$10.

The SATA Pci card looks like this:


If you don’t want to waste time with Drivers, you can simply buy a Xecuter USBPro. These use the USB and there’s no drivers to disable or freezing to worry about.
This is a usbpro

POWERING THE DRIVE

If Flashing a Samsung or a Benq, you can use my 5v power supply solution. This only requires a DVD Drive power cable and a spare USB cable.

*CAUTION* – This does not work with Lite-On’s and Hitachi’s. Lite-On’s require a 3.3v Line and Hitachi doesn’t work for an unknown reason.

You can use an Xbox 360 to power the drive. Many say that powering up the Xbox without the drive may result in your Xbox getting and Banning Flag. I don’t believe in this as I’ve connected to live without a drive before and 2 years on I’m not banned yet. But it’s your choice.

Please also note that if your HDMI Xbox is powered up without a AV/HDMI cable then your Xbox will power down within 2 minutes. If using an HDMI Xbox, make sure you have a AV/HDMI cable plugged in!

Another way is to power the drive by using an Xecuter Ck3/Ck3i. These can be bought at Ck3 or Modtraders or any good Xecuter retailers. They are extremely great to have, can be used for 0800 drives and are brilliant for drive power cycles.

If you have a LiteOn 02510c Drive, then you will need a Probe 3 to dump the firmware and get the key. Probe 3’s can be bought at any good Xecuter retailers and are cheap.
If you don’t want to buy one, you can simply make one. The tutorial to make on is further down in this thread.

Here’s an official Probe 3

Quote:


Regarding Slim Drives – Winbond
It is very rare to find a compatible chipset, a VIA 6421a has very little chance of working. And on-board has an even lower chance. If you are going to flash a Slim Drive, it’s probably best to buy a USBPRO. They’re very handy indeed and will solve most problems. I had lot’s of problems with my VIA Card and I had to get a friend to flash my Slim using his USB Pro. Finally, if you’re doing a Slim, take your time!


LiteOn 02510c

This section is for flashing LiteOn 02510c Drives, you will need;
Power supply
Compatible SATA Chipset
Firmware pack
Probe 3
Average PC Skills
Quote:
Please Note: All Phat LiteOn’s after the May 19th Update are now FW Rev 02510c. All of the 3 Old series all now require a Probe v3 to extract the unique DVD Key. (Unless you have the key/ofw.bin)… They are now a “No Solder” drive thus meaning that you will not need to do the “MRA Hack” on them.
If you require a Probe v3 for your LiteOn, just search Google for one or use the link I provided in the Link, Download & FAQ Cection. Or you can make your own.
Quote:

1. Remove the metal plate from the bottom of your LiteOn drive, this requires a Phillips screwdriver to remove the 4 screws. Then connect your LiteOn drive to your PC by either using the On-Board sata/VIA 6421a or by other means.

2. Turn on the power to the drive by either using the Xbox 360/Ck3 or by other means.

3. Open JungleFlasher and go to the DVDKey32 Tab

4. You should see your drive in the Drive Properties box. If you don’t, give all the I/O ports a check. If still then you don’t see, you have a power/connection problem.

5. Now click “PhatKey”. Now get ready to probe MPX01 with your homemade probe or Xecuter Probe 3.

Here is MPX01 on the LiteOn Board:

Press Ok to the message and press the button on the probe, hold the tip of the probe on MPX01 and release the button. Remember to hold the probe until it tells you to take it off.
You should get this log along with this message.
Quote:
Sending Vendor Intro to port 0x9000
Status 0x51
Re-sending Vendor Intro:
. . . . . . . .
Serial flash found with Status 0x52

6. You should then be asked to save 5 files. Key, Inquiry, Identify, Serial & Dummy. Save these to place you won’t forget. They contain information about your drive. Click no to the Autoload message.
You should then see this log
Quote:
Loading firmware from buffer
Inquiry string found
Identify string found
Drive key @ 0xA030 CEA71BBCCD9E1B39FFB67BB5597388FC
Firmware Osig: [PLDS DG-16D2S 7485]
Firmware is: PhatKey Extract

Key database updated
7. You will now be at the Firmware Tool tab
Click Open Target Firmware and select “Lite-On 02510c LT+3.0.bin” from the LiteOn folder.

[NOTE: If you want to flash to Stock Firmware, Simply go here – Firmware/Stock/Lite-On Phat/[Stock] Lite-On 02510c.]

Click “Spoof Source to Target”
You should now have this log

Quote:
Loading firmware file C:UsersDaveDesktopFlash360JungleFlasher v0.1.89 Beta (284)FirmwareLite-On FirmwareLite-On 02510c LT+3.0.bin
MD5 hash: 0264149996f783b54629c1598072e50e
Genuine LT plus 3.0
Drive key @ n/a FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Firmware Osig: [PLDS DG-16D2S 0251]
Firmware is: LT-Plus 3.0
8. Go back to MTK Flash32 tab and click Lite-On Erase. Keep pressing yes to all of the warning messages until the get the one below;

Quote:
When Erase is complete, vendor Intro will be sent.
Power drive Off then On in quick sucession, Once!
Be prepaired to Power Cycle your drive. If you are using a Ck3, you will need to switch it off and back on. Or if you’re using the Xbox to power the drive, you’ll need to pull the power cable from the back of it and plug it back in again. Within a second.

Press yes to the final message and Power Cycle your drive when you see the second line of dots.

9. If you successfully did it, you will get this log
Quote:
Sending Lite-On-Erase request to port 0x9000
…………..
Drive returned Status 0xD0
…………..
Serial flash found with Status 0x72
Manufacturer ID: 0xEF
Device ID: 0x11
Flash Name: Winbond/NEX(W25P20/NX25P20)
Flash Size: 262144 bytes
10. Click write and you should get this log
Quote:
Getting Status from port 0x9000
SPi flash found with Status 0x72

Sending Chip Erase to Port 0x9000
Erasing:
Writing target buffer to flash
Writing Bank 0: …………….
Writing Bank 1: …………….
Writing Bank 2: …………….
Writing Bank 3: …………….

Flash Verification Test !
Reading Bank 0: …………….
Reading Bank 1: …………….
Reading Bank 2: …………….
Reading Bank 3: …………….
Write verified OK !
11. Now click “Outro ATA Reset”

You should see this log:
Quote:
Sending Vendor Outro to port 0x9000
Drive is Lite-On..
12. You can then disconnect your drive and put it back in the Xbox.

Samsung MS28 Drives

This section is for flashing Samsung MS28 Drives, you will need;
Power supply
Compatible SATA Chipset
Firmware pack
Some PC Skills
Quote:

1. Connect your Samsung drive to your PC by either using the On-Board sata/VIA 6421a Sata Card or by other means.

2. Turn on the power to the drive by either using the Xbox 360/Ck3 or by other means.

3. Open JungleFlasher and go to the MTK Flash32 Tab

4. You should see your drive in the Drive Properties box. If you don’t, Press “Intro Device” After that you still don’t see Drive Properties then you have a problem so check all connections.

5. Now click Sammy Unlock
You should see this in the Log:
Quote:
Sending Sammy_Un_Lock to Drive on port 0x9000
Stage 1, Complete!
Stage 2, Complete!
Stage 3, Complete!
Done!
Sending Vendor Intro
Requesting Device ID
Manufacturer ID: 0xBF
Device ID: 0xB6
Flash Name: SST(SST39SF020)
Flash Size: 262144 bytes
(Note- If you get “Sammy Unlock Failed”, Try putting the tray in “half open” mode)

6. Now click read
some dots should appear then you will get asked to save a file called “SAM-OFW”
Save this to a place you wont forget, it has your drive details within it. Click no to the Autoload message.

7. Now you will be brought to the Firmware Tab
You should see this in the Log:
Quote:
Drive key @ CEA71BBCCD9E1B39FFB67BB5597388FC (your key will be different)
Firmware Osig: [TSSTcorpDVD-ROM TS-H943Ams28]
Firmware is: Stock
Key database updated
If you have your OFW.bin, start from here!
1. Intro the Device
2. Unlock the Samsung with Sammy Unlock
3. Load the OFW.bin into the Source Buffer & Continue

8. Now click “Open Target Firmware” And navigate to the firmware folder, chose “Samsung MS28 LTv2.0.bin” select it.
Click “Spoof Source to Target”

[NOTE: If you want to flash to Stock Firmware, Simply go here – Firmware/Stock/Samsung And chose the appropriate Firmware.]

You should see this log:

Quote:
Loading firmware file C:UsersDaveDesktopFlash360JungleFlasher v0.1.89 Beta (284)FirmwareSamsung FirmwareSamsung MS28 LTv2.0.bin
MD5 hash: 9e9ecbed96b490375497e9acef8326ac (Your’s will be different)
Genuine LT v2.0
Inquiry string found
Identify string found
Drive key @ FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 0x4044
Firmware Osig: [TSSTcorpDVD-ROM TS-H943Ams28]
Firmware is: LT v2.0
9. Now go back to MTK Flash32 tab and select “Write”
You will get the Dots at the bottom of the screen then get this log
Quote:
Getting Status from port 0x9000
Parallel flash found with Status 0x70
Writing target buffer to flash

Sending Chip Erase request to port 0x9000
Erasing:…………
Writing Bank 0: …………….
Writing Bank 1: …………….
Writing Bank 2: …………….
Writing Bank 3: …………….

Flash Verification Test !
Reading Bank 0: …………….
Reading Bank 1: …………….
Reading Bank 2: …………….
Reading Bank 3: …………….
Write verified OK !
10. Now click “Outro ATA Reset”

You should see this log
Quote:
Sending Vendor Outro to port 0x9000

Key found in KeyDB at record (4 – N/A)
Key is: CEA71BBCCD9E1B39FFB67BB5597388FC
Key has been tested and verified, thanks C4eva !
Drive is Samsung..
11. You can then disconnect your drive & play.

BenQ VAD6038

This section is for flashing BenQ VAD6038 Drives, you will need;
Power supply
Compatible SATA Chipset
Firmware pack
Some PC Skills
Quote:

1. Connect your Benq VAD6038 drive to your PC by either using the On-Board sata/VIA 6421a Sata Card or by other means.

2. Turn on the power to the drive by either using the Xbox 360/Ck3 or by other means.

3. Open JungleFlasher and go to the MTK Flash32 Tab

4. You should see your drive in the Drive Properties box. If you don’t, Press “Intro Device” After that you still don’t see Drive Properties then you have a problem so check all connections.

5. Now click “Benq Unlock”
You should see this in the Log:
Quote:
Drive is Benq..
Drive is Benq..

Sending Magic Keys to Drive on port 0x9000
…………………………..……………..
Done!
Sending Vendor Intro
Requesting Device ID
Manufacturer ID: 0xC2
Device ID: 0x11
Flash Name: MXIC(MX25L2005)
Flash Size: 262144 bytes
6. Now click read
some dots should appear then you will get asked to save a file called “BENQ-OFW”
Save this to a place you wont forget, it has your drive details within it. Click no to the Autoload message.

7. Now you will be brought to the Firmware Tab
You should see this in the Log:
Quote:
Dumped in 4950mS
Loading firmware from buffer
Inquiry string found
Identify string found
Drive key @ 0xE040 CEA71BBCCD9E1B39FFB67BB5597388FC (your key will be different)
Firmware Osig: [PBDS VAD6038-64930C ]
Firmware is: Stock
Key database updated
If you have your OFW.bin, start from here!
1. Intro the Device
2. Unlock the BenQ with BenQ Unlock
3. Load the OFW.bin into the Source Buffer & continue

If you need to flash to Stock firmware, but don’t know which to chose from the Stock list, then scroll to the FAQ at the bottom of the page!

8. Now click “Open Target Firmware” And navigate to the firmware folder, chose “BenQ VAD6038 LT+3.0.bin” select it.
Click “Spoof Source to Target”

You should see this log
Quote:
Loading MTK_Flash source file
Loading firmware file C:UsersDaveDesktopFlash360JungleFlasher v0.1.89 Beta (284)FirmwareBenQ FirmwareBenQ VAD6038 LT+3.0.bin
MD5 hash: 847700a6b5f12a88c61cfe31a5514772 (yours may be different)
Genuine LT plus v2.0
Inquiry string found
Identify string found
Drive key @ 0xA020 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Firmware Osig: [PBDS VAD6038 0442]
Firmware is: LT-Plus 2.0
Spoofing Target
DVD Key copied to target
Target is LT – ID strings not copied to Target
9. Now go back to MTK Flash32 tab and select “Write”
You will get the Dots at the bottom of the screen then get this log
Quote:
Getting Status from port 0x9000
SPi flash found with Status 0x73

Sending Chip Erase to Port 0x9000
Erasing:
Writing target buffer to flash
Writing Bank 0: …………….
Writing Bank 1: …………….
Writing Bank 2: …………….
Writing Bank 3: …………….

Flash Verification Test !
Reading Bank 0: …………….
Reading Bank 1: …………….
Reading Bank 2: …………….
Reading Bank 3: …………….
Write verified OK !
10. Now click “Outro ATA Reset”

You should see this log
Quote:
Sending Vendor Outro to port 0x9000
Drive is Benq..
11. You can then disconnect your drive & play


Set mode B (Hitachi)

This section is for setting ModeB on Hitachi drives, you will need;
Power supply
Compatible SATA Chipset
Jungle Flasher
Some PC Skills
Quote:
Use this tutorial at your own risk! I have tried to make it from the original JungleFlasher tutorial. Meaning, I have not actually made this tutorial from flashing the Drive. Parts of this tutorial may be incomplete!

Quote:


[COLOR=”Sienna”]1. Connect your Hitachi 0036-0079 drive to your PC by either using the On-Board sata/VIA 6421a Sata Card or by other means.

2. Turn on the power to the drive by either using the Xbox 360/Ck3 or by other means.

3. Open JungleFlasher and go to the Hitachi GDR3120 Tab

4. On the left you should see your drive properties in the box. If you don’t you should go through the drop down menu until you find it. If you don’t you have a connection problem somewhere. Disconnect and check all connections and then try again.

5. Now click Send Mode-B
You will get a massage sating you should power off drive, open tray ect…
Do exactly what it says, so
Open the tray-
Power off the drive- (un-plug cable from back or by other means, ck3 ect)
Then press OK, once the dots appear power on the drive.
Drive should then close and about 15 seconds later windows should find it.

The JF Log should now show something like this-

Quote:
Drive, answer normal Windows Inquirery 12 0 0 0 24 0
0000: 05 80 00 32 5B 00 00 00 – 48 4C 2D 44 54 2D 53 54 …2[…HL-DT-ST
0010: 44 56 44 2D 52 4F 4D 20 – 47 44 52 33 31 32 30 4C DVD-ROM GDR3120L
0020: 30 30 35 39 00XX
And then get something like this Log

Quote:
Found drive C: – Hard Drive.
Found drive D: – Hard Drive.
Found drive E: – Hard Drive.
Found drive F: – CD/DVD.
Found drive G: – CD/DVD.
6. Jungleflasher will then scan for your drive, after about 15 seconds it should find it and you will see in the top right box something like this –

Quote:
F:/ [HL-DT-STDVD-ROM GDR3120L0059]

Hitachi 0032-0059

This section is for flashing all Hitachi drives revision 0032-0059.
You will need;
Power supply
Compatible SATA Chipset
Firmware pack
Some PC Skills
Quote:
To Flash any Drive upto 0078 (32/36/40/46/47/58/59) MAKE SURE DRIVE IS IN MODE-B BEFORE CONTINUING!

You will need the Original Firmware pack for this release by iXtreme. My custom firmware pack will not work!

Quote:

1. In the Flashing Options, select “Dump Drive”

Make sure your Drive properties are on the left, your drive is shown at the top right and you Drive revision is correct in the middle.
I’m flashing an Hitachi 0059 so I’ll be using 58/59!

Now click “Read to Source”
You should see this Log-
Quote:
Mode-B Done!
Scanning for Hardware changes
Found 3 Windows Drives
Found 2 CD/DVD Drives

Dumping F/W of Hitachi 0058/0059 by Mode Select Method via WIN32 API
Unlocked!
…….
2. You will then be asked to save your Firmware.

You will then need to go to the Firmware Tool tab to make sure you see your key!

3. Now go back to the Hitachi tab and tick “Flash LT-Plus”

Simply select the Flash LT-Plus button, you should see a log similar to this one
Quote:
Done!
Flashing hacked f/w to Hitachi 0058/0059 by RAM Upload Mehtod via WIN32 API
Dumping Flash . . . . . . .
4. If all goes well you shoud get a Stability test report, Just click Yes
You should then get a log like this-
Quote:
Dumping Sector 9003F000: . . . .
Read back & compare complete, Flashing Stable!
Repairing Test Sector.
Flashing Sector 9003F000
Done !
Flashing Sector 9003E000
Flashing Sector 90003000
Flashing Sector 90036000
Flashing Sector 9003A000
4. You can then disconnect your drive & play.

Hitachi 0078

This section is for flashing Hitachi 0078, you will need;
Power supply
Compatible SATA Chipset
Firmware pack
Some PC Skills
Quote:
Massive props to Hellrazor592 on this part, he helped me create the tutorial for 0078 so maximum rep goes to that guy! Thanks man!

To Flash 0078 (NOT 32/36/40/46/47/58/59/79) MAKE SURE DRIVE IS IN MODE-B BEFORE CONTINUING!

You will need the Original Firmware pack for this release by iXtreme. My custom firmware pack will not work!
Quote:
1. Once your Drive is in Mode-B, JungleFlasher should have already set up for the dump of the drive.
So go ahead and press Read to Source. You should get get a log like below and be asked to save a file. So save it, it’s important!

Quote:
Dumping f/w of Hitachi 0078/0079 by Ram Upload Method via WIN32 API
…………………………..
Drive is rev 0078-4E10
Dumped in 1345mS

Hitachi Dump file saved to Hit-OFW.bin
Loading firmware from buffer
Inquiry string found
Identify string found
Drive key @ 0x4E10 645F962F1E0B2AA7538B11EC269B2061
Firmware Osig: [HL-DT-STDVD-ROM GDR3120L0078]
Firmware is: Stock
Key database updated
2. Now you will be on the Firmware Tool tab, and should have a log similar to this one,

Quote:
Loading Hitachi Dump to Source Buffer
Loading firmware file C:UsersDaveDesktopJungleFlasherFirmwareKeysHit-OFW.bin
MD5 hash: 0d34f3886cd5010681e9abdfb5581d06
Inquiry string found
Identify string found
Drive key @ 0x4E10 645F962F1E0B2AA7538B11EC269B2061
Firmware Osig: [HL-DT-STDVD-ROM GDR3120L0078]
Firmware is: Stock
Loaing firmware file C:UsersDaveDesktopFlash360JungleFlasherFirmwareLTPlus-78-4b002.0.bin
MD5 hash: 24f05bd39d96122a80d6ebf25be55e19
Inquiry string found
Identify string found
Drive key @ 0x4B00 00000000000000000000000000000000
Firmware Osig: [HL-DT-STDVD-ROM GDR3120L0078]
Firmware is: LT-Plus 2.0
Now JungleFlasher has already loaded Custom Firmware to the Target buffer. You now just need to press Spoof Source to Target.

Quote:
Spoofing Target
DVD Key copied to target
ID strings already match
3. Now you’ve Spoofed it, go back to the Hitachi tab. Again JungleFlasher should have set itself up ready for you to flash the Drive. Now click Flash LT-Plus. You should get a message like the one below. Just click Yes.

Now JungleFlasher will flash your Drive, your log should be like the one below,

Quote:
Flashing Hacked f/w to Hitachi 0078/0079 by Ram Upload Method via WIN32 API

Dumping Flash:……………………..……
Drive is rev 0078-4E10
Loading firmware from buffer
Inquiry string found
Identify string found
Drive key @ 0x4E10 645F962F1E0B2AA7538B11EC269B2061
Firmware Osig: [HL-DT-STDVD-ROM GDR3120L0078]
Firmware is: Stock
Key database updated
Followed by this log,

Quote:
Drive is Stock, rev 0078

Auto-Loading firmware file C:UsersDaveDesktopFlash360JungleFlasherFirmwareLTPlus-78-4e10-2.0.bin
MD5 hash: c516263a394bc917bba6f4ddbccacd4d
Inquiry string found
Identify string found
Drive key @ 0x4E10 00000000000000000000000000000000
Firmware Osig: [HL-DT-STDVD-ROM GDR3120L0078]
Firmware is: LT-Plus 2.0
12 Sector Differences Found
Flash Stability Test
Flashing Sector 9003F000
Dumping Sector 9003F000:….
Read back & compare completed, Flashing Stable!
Repairing Test Sector.
Flashing Sector 9003F000
Done !
Flashing Sector 9003E000
Flashing Sector 90003000
Flashing Sector 90006000
Flashing Sector 9000A000
Flashing Sector 9001C000
Flashing Sector 90025000
Flashing Sector 90026000
Flashing Sector 90027000
Flashing Sector 9002A000
Flashing Sector 9002D000
Flashing Sector 90034000
Flashing Sector 90035000
Done !

Write verify test..
Dumping Flash:……………………..……
Read back & compare completed, Write Verified!
Flash Complete !
4. You can now disconnect and play


Winbond

This part of this thread is for Slim Winbond flashing. Please check the image below to find out if you have Winbond on MXIC.
On the bottom, they’re 4 Phillips screws. Remove these and pull the bottom plate off. At the top, they is a Chip. Have a look at the chip and read it.

If it is, please continue. If it’s MXIC, skip this and go lower.

Quote:
This section is for flashing Slim LiteOn Drives, you will need;
Power supply
Compatible SATA Chipset (Recommend USBPRO)
Original firmware pack (Put this in User/Jungleflasher/Firmware)
Above average skills (You will be grinding into your Drive!)
1. Plug your Slim drive into your PC by either using a Compatible Chipset or USBPRO.

2. Turn on the power to the drive by either using your CK3 or by other means.

3. Open Jungle flasher and go to DVDKey32 tab

4. You should see your Slim drive has already been found. If it hasn’t, go through all the I/O ports until you find it. If you don’t, you have a power/connection problem.

5. Now press Slim key, you will get a message like the one below;

Quote:
Do you wish to send Unlock to Slim
You must press No here!

You will then get another message asking you to power cycle the Drive. You must do exactly what it says.
After you do this, JungleFlasher will grab the Key and ask you to save it. Please do, this is important.

Press Yes to the Autoload message.

6. Now, we’re at the (possibly) tricky point. You need to unplug the DVD Drive from your PC and open it up if you haven’t done so.

7. Now, we need to mark the Chip up for drilling/cutting.

If you don’t feel comfortable doing this, get someone with experience to do it for you!

Here’s how to measure up where to drill/cut.

DO NOT RELY ON THE WHITE WRITING ON THE CHIP – IT’S IN A DIFFERENT POSITION ON EVERY ONE. USING THE WHITE WRITING AS A DIAGRAM COULD CAUSE YOU TO CUT THE WRONG WIRE AND MAKE THE PCB USELESS!

Make sure it is correctly marked. If it has epoxy on, you will need to remove it. Heat it up until it becomes soft and remove it. Be patient!

8. After you have marked it, we need to prepare JungleFlasher. So plug the drive back in and power it on. JungleFlasher should automatically find it. If not, go though the I/O ports until it does.

Remember, we are not using the Jungleflasher tone method, we are going to simply look at the screen changing while we’re unlocking it.

Now go to MTKFlash32 and press Intro, the Drive should intro without a Power Cycle, if it doesn’t, just power cycle it when asked.

Now, your SPI Status should be Locked, like this:

We need to Unlock it!
Now please take this part slow, it’s very easy to mess it up and we don’t wan’t that! So just go slow and take your time. You can do it!

9. Now press the SPI button, this one:

You will get a message,

Quote:
SPI Status Register is S/W Protected.
If you wish to resend clear Spi status Register
Press yes to the message, and begin.
Cut carefully into the markings you have made, you will need to check Jungleflasher very often. The SPI Status could change whenever.

Keep going slowly and carefully until you get this message:

Notice how the 0x8C has changed to 0x00.. We need this message.
Once you get it, congratz! You have unlocked your Slim Drive! That’s the hard part done!

10. Now click Read, JungleFlasher will read your Slim firmware and give you a full dump of it. You will have to Power Cycle again. When done, save it to a place you know, it’s important!

After it’s saved it, you will get another message,

Quote:
Lite-on firmware loaded to Source Buffer!
Do you wish to auto-load Lite-on iXtreme ?
Click Yes!

The firmware will now be auto-loaded for you to Write.
Make sure the DVD Keys match!

11. Now go back to MTKFlash32 and click Intro again, power cycle and the Drive should now be in Vendor Mode.
Now click Write. Jungleflasher will now write the new firmware to your Slim drive!

Once it’s finished, we need to Lock the Drive. So again, Intro the Drive.. then finally click this button again:

You will get the following message:

Quote:
*** Warning ***
The lock can be quite permanent… You should stop if:
You do not have a Sputnik or Russian type hack for MXIC
—OR—
Cannot do a Kamikaze hack on Winbond.
Click yes/Ok

12. Now the SPI should be back at 0x8C

When it is, you may Outro the Drive.

(NOTE: if you get this after Outro:

Quote:
Sending Vendor Outro to port 0x0000
You MUST Outro again.
When you get this message:

Quote:
Key found in KeyDB at record
Key is: (your key goes here)
Key has been tested and verified, thanks C4eva !
Then your Outro has been successful!

13. You may disconnect your Slim drive, and play.

MXIC

This part of my thread is for Slim MXIC flashing. Please check the image below to find out if you have Winbond on MXIC.
On the bottom, there’s 4 Phillips screws. Remove these and pull the bottom plate off. At the top, they is a Chip. Have a look at the chip and read it.

If it’s MXIC, please continue.

Quote:
This section is for flashing Slim LiteOn MXIC Drives, you will need;
Power supply
Compatible SATA Chipset (Recommend USBPRO)
Original firmware pack (Put this in User/Jungleflasher/Firmware)
Sputnik Probe, or a home made Sputnik probe. Go to the Link section to find where to buy one.
Above average skills (You will be cutting a trace on your Drive!)
1. Plug your Slim drive into your PC by either using a Compatible Chipset or USBPRO.

2. Turn on the power to the drive by either using your CK3 or by other means.

3. Open Jungle flasher and go to DVDKey32 tab

4. You should see your Slim drive has already been found. If it hasn’t, go through all the I/O ports until you find it. If you don’t, you have a power/connection problem.

5. Now press Slim key, you will get a message like the one below;

Quote:
Do you wish to send Unlock to Slim
You must press No here!

You will then get another message asking you to power cycle the Drive. You must do exactly what it says.
After you do this, JungleFlasher will grab the Key and ask you to save it. Please do, this is important.

Press Yes to the Autoload message.

6. Now we need to unlock the Drive. So power it down, and get the PCB out. There’s one little screw, 3 ribbons and 2 clips. Don’t unsolder any wires!
Flip the board over, and look at the image below.

7. It’s always best to scratch the area you’re cutting. To do this, take a flat screw driver or something similar and scratch at the area. Once you see the gold coming through, go slower until the area is big enough for you to see what you’re doing. Don’t go crazy!

Now, we need to unlock it and write to it. So follow the procedure below.

8 . Power on your MXIC Drive
Jf Should be open, if it’s not, go open it.
Got to the MTKFlash32 Tab, and you should see your Drive, if you don’t go through the IO Ports until you do.
Now press Intro / Device ID
You will see the Drive is now in Vendor mode, enabling up to unlock it,

9. Now press the SPI button, this one:

You will get a message,

Quote:
SPI Status Register is S/W Protected.
If you wish to resend clear Spi status Register
Press yes to the message, and begin.
Now, make sure your speakers are on and turned up! Click yes!
now, with your probe, touch the place that says “PROBE HERE”
You should hear 2/3 beeps, and that’s it. Remove the probe.

10. Now, your log should say similar to the following,

Quote:
. . . . . . . . . . . .
Serial flash found with Status 0x72
Spi Status: 0x00
Manufacturer ID: 0xEF
Device ID: 0x11
Flash name: Winbond/NEX (W25P20/NX25P20)
Flash Size: 262144 bytes
Now click Read, this will give you your OFW (Official Firmware)
You may have to Power Cycle the Drive OFF and then ON

11. Now, ensure the DVD Keys match and the latest firmware is loaded into the Target Buffer.
Now, go back to MTKFlash32 Tab and press Intro / Device ID. Power Cycle your Drive as asked.

The Drive will be in Vendor Mode again.
Click Write.

It will now write the firmware, and you will get something like this.

Quote:
Writing target buffer to flash
Writing Bank 0: . . . . . . . . . . . . . . . . .
Writing Bank 1: . . . . . . . . . . . . . . . . .
Writing Bank 2: . . . . . . . . . . . . . . . . .
Writing Bank 3: . . . . . . . . . . . . . . . . .
. . . . . . . . .
Flash Verification Test !
Reading Bank 0: . . . . . . . . . . . . . . . . .
Reading Bank 1: . . . . . . . . . . . . . . . . .
Reading Bank 2: . . . . . . . . . . . . . . . . .
Reading Bank 3: . . . . . . . . . . . . . . . . .
Dumped in 4912mS

Write Verified OK !

Restoring sector 0x3E0000

Sending Sector Erase to Port 0x0000
Erasing: 0x3E000
Writing: 0x3E000
. . . . . . . . . .
Authorised !
. . . . . . . . . . . . .
Restore verified OK !
12. Now, you need to re-lock the Drive, so click this button again

It will give you a Warning. Just click yes, and now your SPI should be Locked again.

13. Now, simply click Outro / ATA Reset.
You must get this message before disconnecting

Quote:
Sending Vendor Outro to port 0x0000
Drive is Lite-On . .

Key found in KeyDB at record (20 – N/A)
Key is “0YOURxKEYxGOESxHERE0”
Key has been tested and verified, thanks C4eva !

14. Now you can disconnect the drive and play

Making a probe

This section is for;
Making a Probe3
Making my USB Power Adapter
Removal of VIA Drivers
Links, Downloads & FAQ
Quote:
Okay, take a look at your power connector end, (Make sure it’s the right way up!)

We’re going to be focusing on Pin 6 (3.3v) and Pin 11 (grnd)

These will be the only wires you will be cutting into. So please before you do cut into them, make sure there the right ones!

Here’s how it should kind of look like once finished

& Heres my finished product

Once you have made your Probe you should now be ready to extract the key from your Lite-On.

(In case you’re wondering, you can still use this as a dvd drive power cable for general Xbox 360 use (playing games ect) just tape the probe up so it dosen’t short out anywhere on the xbox motherboard and you’re set to go.)

USB Power Adapter

Okay, this is a fairly simple guide on how to power your Sammy or Benq with a USB cable. This doesn’t work for LiteOn’s because they need a 3.3v line. And the USB only gives 5v & ground & It doesn’t work with Hitachi’s

What you need?
A USB Cable.
DVD Drive power connector.
(Optional) Soldering iron & Solder.

1. Chop the USB cable in half, then chop the plastic wire cover about 2″ from the end of the wire. You need to use the red wire (5v) & the black wire (gnd)
Here is the layout of the wire-

2. Now take your 360 drive cable and look at this picture-

3. Hold the cable facing you and do the following

Now the same again for the bottom wires

4. Now connect it to the USB like so

Now give it a test. Plug the drive into the PC via SATA and then the drive cable, and finally the USB into the PC. Open jungle flasher and go to MTK Flash32 tab and you should see your drive properties.


Remove VIA

This is only needed if your LiteOn freezes when try to Erase it.
Head over to device manager. Either search for it or follow this-

WinXP – Start/Control panel/Administrative tools/Device manager
WinV/7 – Start/Control panel/Device manager

I would imagine that’s were they are as mine is & i’m on Win7.

Right, once you are in Device manager, have a look for your VIA card, Mine in Win7 is in Storage Controllers,
Once you have found it, right click it and select Disable. This will disable so you can make changes to the drivers.

You may have to accept something for the change so just click yes.

Now, keep Device manager open as you will be needing it later to re-enable the device.

Now for hopefully this should be the same for everyone, follow this-

Start/My Computer/C:/WINDOWS/System32/drivers

You need to look for the file
XP – vsmraid.sys
Vista/7 – viamraid.sys

Once you have it, rename it, example- vsmraid00.sys. Something easy to remember

Now head back over to Device manager and re-enable your VIA card. you should now have a (!) next to the logo, most likely yellow/grey.

Now restart your PC!

FAQ

Q. Where can I buy a Probe 3 or Sputnik Probe from?
A.Either from www.360parts.co.uk or www.Modtraders.co.uk or Xconsoles.com.

Q. I don’t know what the firmware is called that I need for my Drive
A. Download my firmware pack, it has all the correct Firmware names in it.

Q. What is my “ofw.bin”?
A. Your OFW.bin is a file that you save if you’ve previously flashed your drive before. It’s a file you get when you read the firmware on your Drive. It’s used instead of reading the drives firmware, just to save time. If you don’t have your OFW.bin, skip the step.

Q. I already have my key, can I skip getting it from the Drive?
A. Yes you can,start from the part where you add the firmware. Once the firmware is added, click Manual spoof and type your key in. Then press OK and continue with the process.

Q. My dashboard is below 2.0.13146.0, can I update my dashboard with CFW on my Drive?
A. No! Doing this will either flash the Drive to stock. You must flash to stock before updating.

Q. My dashboard is above 2.0.13146.0, can I update with CFW on my Drive?
A. Yes, you can with no problems. With some spoofed Drive, you may get an error. But this is unlikely.

Q. I have my Dummy/key.bin already, can I skip Key extraction?
A. Yes, make sure the Key is for your Xbox, since the only back is RGH if you haven’t updated to the latest Dash yet. Simply follow the video below:

No comments yet.

Leave a Reply

0 WooCommerce Floating Cart

No products in the cart.