xboxscene.org forums

Pages: [1] 2 3 ... 9

Author Topic: Benq Unlock  (Read 1044 times)

Xbox-Scene

  • Archived User
  • Hero Member
  • *
  • Posts: 4299
Benq Unlock
« on: August 28, 2008, 07:52:00 PM »

Benq Unlock
Posted by Iriez | August 28 23:00 EST | News Category: Xbox360
 
>>A new application that helps with the modification of Benq VAD6038 drives..
This exe is a win32 app that sends the "Magic" 28 unlock codes to you Benq 360 drive. The drive can then be dumped/erase/flashed using dosflash32 by chipsets other than Via/Nforce and without all that powering on/off or soldering.

Be warned: This win32 program does not use the windows API. The exe writes directly to the ATA controller's I/O ports (which requires Geek Hideout's I/O dll, which I have included in the rarr). It also requires that you be using an ATA - SATA adapter to connect your 360 drive to your PC, or an SATA controller that has a legacy mode (try the BIOS setup options on your controller).

Special thanks to:

C4eva - for 28 magic keys and the CDB's to send them
Podger - for the code
Seventhson - for the userspace parallel ATA driver


Official Site: n/a (by Podger and c4e)
Download: here
News-Source: xbins



Logged

Iriez

  • Administrator
  • Hero Member
  • *****
  • Posts: 1238
Benq Unlock
« Reply #1 on: August 28, 2008, 09:44:00 PM »

Here are instructions on how to use this method. Keep in mind all the 'unlock' is, is a way to read/write the Benq without all the turning on/off and MTK bruteforcing trickery that was used in the original method. If the previous method worked fine for you, you do not need to bother with this utility/method. If you are stuck with a non VIA/Nforce chipset and you need to mod a benq, this is the method for you!

QUOTE(podger @ Aug 30 2008, 01:01 AM) View Post

Here's how I would do it

1. It's easier and works better if the Benq is the only optical device attached. Dosflash32 only works in automatic mode, so you see all drives everytime, this can be a problem with NEC drives etc that don't use an MTK chipset

2. Launch Dosflash32 v1.3..... If it finds the Benq, It will ask the question....

MTK Vendor intro failed on port 0x????. If you choose to resend the command you should turn the drive off and on after you press "yes". Do you want to resend the command until the drive responds (Y/N)?

3. If the benq is the only drive attached, it will ask only once... Note that the 0x???? is the command port number, make note of this...

4. For now say "No" to the question in 2 above.

5. Once in Dosflash32 used the Port selection box to select the port 0x???? and confirm it is in fact the Benq.. It should say that the:
...Manufacturer ID = 0x00
...DeviceID = 0x00
... Name = PBDS    VAD6038.......
this means the device is still locked.

6. Unrarr Benq_Un_Lock to a folder on you hard drive.. Open a CMD box and change to that folder... For people unfamiliar with dos... Google for XP powertools and install the command here tool, this allow you to right click the folder from the windows explore and launch a CMD right there....

7. for Benq_Un_Lock you need the command port, which you have from 3. above 0x????.... You also need the control port, from what I've seen so far on Via/Nforce this is 0x0a after the command port:
So if your command port is 0x7000 the control is 0x700A...

8. In the command window just type:
   Benq_Un_Lock ???? ????+A
e.g. from 7.
Benq_Un_Lock 7000 700A

9. Relaunch Dosflash32 and this time if the unlock worked, it should not ask you the question in 2 above.

10. Once in Dosflash32 select your port 0x??? in the port drop down and you should see that this time the
...Manufacturer ID = 0xC2
...DeviceID = 0x11
this means the device is now unlocked.. it may not allways be the MXIC part.. so the number may be different, as long as they are not 0x00 then it worked.

11. Select "read" from the flashing tasks pull down and click "read flash".... Save the file in a million place as it contains you drive key... Leave Dosflash32 open for now

12. Also save or copy the file to the iXtreme 1.4.1 folder of choice and call it orig.bin
C:\.....\Benq iXtreme v1.41\8x\orig.bin

13. Double click the "Make iXtreme firmware.cmd", this will make the ix14.bin for you.... Make sure you get the green "Success" from Caster420's firmtools..

14. Back in dosflash32.... from the flashing tasks pull down select "Write"... select the ix14.bin you just created and click "Write Flash"
... It should say erasing 0, 1, 2, 3 in the status bar and then flashing 0, 1, 2, 3.

15. You're done!

Note: if you insist on not removing other drives, you run the risk of flashing them by accident OR dumping them and flashing you benq with garbage.... In any case say no the the MTK question in all cases as it should never be neede if the Benq is in fact unlocked.

If you have trouble finding the port try this

1. Boot from your Slax 2.1 cd
2. login to Slax user/pass  root/toor
3. type: dmesg | grep sata
   you should then see something like this:

   sata_via 0000:04:0b.0: version 2.0
   sata_via 0000:04:0b.0: routed to hard irq line 5
   ata5: SATA max UDMA/133 cmd 0x1CC0 ctl 0x1CCA bmdma 0x1CA0 irq 22
   ata6: SATA max UDMA/133 cmd 0x1CD0 ctl 0x1CDA bmdma 0x1CA8 irq 22

Line 3 is the first port in your card... line 4 is the second and so on...

Logged

Allen626

  • Archived User
  • Jr. Member
  • *
  • Posts: 90
Benq Unlock
« Reply #2 on: August 28, 2008, 08:57:00 PM »

Awesome!  Good work C4E and Podger!  And awesome dll!
Logged

BakedGoat

  • Archived User
  • Newbie
  • *
  • Posts: 4
Benq Unlock
« Reply #3 on: August 28, 2008, 11:53:00 PM »

Just tried this. It said "no error" for about 10 lines, and then my computer shut off. I guess I got the command base and control base on my SATA all wrong.
Logged

sandmanza

  • Archived User
  • Newbie
  • *
  • Posts: 36
Benq Unlock
« Reply #4 on: August 29, 2008, 12:18:00 AM »

Excuse my lack of knowledge here but...

Would this method have more luck with the problem mp3boy faced and thus the one I MAY face (ordered benq's from the same place) where the benq drive could be read fine but erase/write just refused to work ? It was a benq drive buy just a foreign firmware version when he read it.

QUOTE
Hi,

I've found the problem - DosFlash.typ has the incorrect erase values for the SPI chip on these particular drives. Even replacing them with the values from the datasheet hasn't worked. However, I had some SPI chips left over from Argon Wii chips; I replaced the one from the BenQ board with a blank one of a different brand and it flashed fine


I would hope not to go through the above process.

*crosses fingers that this may be the saving grace*
Logged

OggyUK

  • Archived User
  • Hero Member
  • *
  • Posts: 939
Benq Unlock
« Reply #5 on: August 29, 2008, 01:51:00 AM »

QUOTE(sandmanza @ Aug 29 2008, 09:02 AM) View Post

Excuse my lack of knowledge here but...

Would this method have more luck with the problem mp3boy faced and thus the one I MAY face (ordered benq's from the same place) where the benq drive could be read fine but erase/write just refused to work ? It was a benq drive buy just a foreign firmware version when he read it.
I would hope not to go through the above process.

*crosses fingers that this may be the saving grace*


He did try the unlock cd Im sure, with no luck, Ill get him to post to confirm.

He used dosflash32 for one type but had to swap the SPI on ther other if I remember correctly
Logged

Penfoldian

  • Archived User
  • Full Member
  • *
  • Posts: 140
Benq Unlock
« Reply #6 on: August 29, 2008, 03:07:00 AM »

So let me get this straight,

I cant use my VIA sata port direct to my xbox anymore, I have to connect some type of IDE cable that converts into a sata cable?
Logged

sunnyhundal

  • Archived User
  • Jr. Member
  • *
  • Posts: 64
Benq Unlock
« Reply #7 on: August 29, 2008, 04:33:00 AM »

QUOTE(Penfoldian @ Aug 29 2008, 11:51 AM) View Post

So let me get this straight,

I cant use my VIA sata port direct to my xbox anymore, I have to connect some type of IDE cable that converts into a sata cable?



how bout reading the entire thing next time?


"or an SATA controller that has a legacy mode "
Logged

podger

  • Archived User
  • Hero Member
  • *
  • Posts: 501
Benq Unlock
« Reply #8 on: August 29, 2008, 03:47:00 AM »

OggyUk: mp3boy got sorted on about half of the HK benq's he had... the tool unlocked them all to be read, but the ones with a SST spi would not erase.... we confirmed the settings for dosflash from the sst datasheet... in the end he replaced the 8 pin spi with a pmc part and had no more issues.
Logged

Olmer

  • Archived User
  • Newbie
  • *
  • Posts: 1
Benq Unlock
« Reply #9 on: August 29, 2008, 06:09:00 AM »

with this program can i dump and flash benq drive with chipset Intel 945PL/ICH 7??

excuse my language, bad know English

This post has been edited by Olmer: Aug 29 2008, 01:11 PM
Logged

darren4004

  • Archived User
  • Newbie
  • *
  • Posts: 26
Benq Unlock
« Reply #10 on: August 29, 2008, 08:03:00 AM »

is there any chance of a more detailed explanation on how to use it asi  dont quite get it blink.gif
Logged

OggyUK

  • Archived User
  • Hero Member
  • *
  • Posts: 939
Benq Unlock
« Reply #11 on: August 29, 2008, 09:13:00 AM »

QUOTE(podger @ Aug 29 2008, 12:31 PM) View Post

OggyUk: mp3boy got sorted on about half of the HK benq's he had... the tool unlocked them all to be read, but the ones with a SST spi would not erase.... we confirmed the settings for dosflash from the sst datasheet... in the end he replaced the 8 pin spi with a pmc part and had no more issues.


Yeah, I read the channel when I finished work, no timestamps + tiredness made it rather difficult to follow!
Logged

redmercury2006

  • Archived User
  • Newbie
  • *
  • Posts: 13
Benq Unlock
« Reply #12 on: August 29, 2008, 10:05:00 AM »

well. thank you so much, guys! it's goin' somewhere...

can't wait to get my new x360 elite with liteon and some rs232 stuff...

enjoy your weekend  pop.gif
Logged

podger

  • Archived User
  • Hero Member
  • *
  • Posts: 501
Benq Unlock
« Reply #13 on: August 29, 2008, 11:37:00 AM »

QUOTE(Penfoldian @ Aug 29 2008, 10:51 AM) View Post

So let me get this straight,

I cant use my VIA sata port direct to my xbox anymore, I have to connect some type of IDE cable that converts into a sata cable?


Not not quite.. Via is fine.. but in the past it had to be a Via or Nforce4 to use schtrom's soft unlock, which was a brute force attack and involves power cycling the drive a few times....

This small windows exe sends unlock codes to the drive that simply make it readable/flashable from any Sata controller that support legacy mode....

If you have a Via/Nforce4 chipset it doesn't offer anything new....
Logged

darren4004

  • Archived User
  • Newbie
  • *
  • Posts: 26
Benq Unlock
« Reply #14 on: August 29, 2008, 10:42:00 AM »

can anybody please explain how to use this, i have bin trying to do it for ages and its starting to get on my nerves lol
Logged
Pages: [1] 2 3 ... 9