Post by: Vibore on December 04, 2007, 07:19:00 AM
As you can see i'm new here, and i hope you ppl can help and later myself help someone to...(sory my english (IMG:style_emoticons/default/smile.gif) )
Well i buy myself a new xbox360 that comes with a hitachi 79 fl(as i can understand only flashable with a 79pass key chip to put the drive in mode B ONLY)
But i just tryed to flash it anyway without soldering a passkey(just to see what happens) only using slax....
And guess what? The drive is on Mode B, my computer detects it ... but when i put a original dvd to dump the drive the tray always open.... (IMG:style_emoticons/default/grr.gif) Is this normal? What is happening?
Hope someone can help me,
Thanks in advance
Vibore
Post by: rowandacres on December 04, 2007, 03:50:00 PM
Good Luck
Post by: Vibore on December 05, 2007, 09:11:00 AM
QUOTE(rowandacres @ Dec 5 2007, 01:26 AM) 
lol thats what happends in mode b .. To Keep It Closed To Can Either press eject once and push the drive in or press twice and press once more while its closing ..There is an video Showing ho to do it Here You Go http://www.360mods.net/News/article/sid=87.html
Good Luck
Ok, thanks
So... it is posible to put a 79 drive in mode b whitout a passkey chip?
Thanks again
Post by: spanky456 on December 05, 2007, 06:46:00 PM
edit: nvm, I misread the post.
This post has been edited by spanky456: Dec 6 2007, 02:50 AM
Post by: snyder80 on December 06, 2007, 10:03:00 AM
Actually i became a proud x360 owner (falcon hdmi). i realy read across this board and xbh-forum, becaue i got a hitachi in there and since the 79 ers are used since about jan/feb 2007 i bet ive got one, too.
There are different approaches to get the 79 software done (http://www.xboxhacker.net/index.php?PHPSESSID=2536f8132335057f74868ec7ce1617e3&topic=6963.100)
Well after all, i didnt exactly find my question answered:
1. The problem seems to be, there is a copy-protection bit on the tsop/firmware, avoiding to read/write the firmware in casual and recovery-mode. Also there would be two adresses where the drive-key is located (4E10 and 4E90) .
2. The Pro´s on xbh they found out, the problem was to get the drive into recovery-mode and read out the drive-key by using firmwaretoolbox. It gave just some wrong data.
But:
If i am right, there is a difference in between MODE B and RECOVERY Mode !!! (IMG:style_emoticons/default/huh.gif)
If u would try the communication, described on page 5/6 in the xbh-forum mentioned (ie. by Geremia) but in MODE B (by using the slax 2.1 since Vibore found a way to get the drive into mode B, actually),
all we would need should be a FIX for the firmwaretoolbox 4.5 acessing/fixing the TWO adresses in the firmware, right ??
PS: Please dont blame for noob-knowledge... and i read across efnet, there should be a C4Eva 1.4 hitachi/Benq fix released soon. It shall help with the lateset kreon issues, but could it help with Redmond 79ers. too
Post by: miltont on December 06, 2007, 12:43:00 PM
I also tried it too.
The drive appears on My Computer Letter Assigned F:
I put a Movie on the drive , but when i close the tray the DVD starts to
read, but suddenly ejects the disc, if i do the trick of hitting 3 times the eject button
the movie loads i test it with windows media player and the movie plays, but when i go to try
to read the firmware to make the backup the program says that drive is not ready!
I see that the Xbox is flashing the green light.
Post by: snyder80 on December 07, 2007, 08:19:00 AM
So u tried to read the firmware with a Movie disc in there?? And what version of firmwaretoolbox did u try it??
Slightly OT,but lets face the facts and dream about future:
1. Fact: Live Demos/Arcade Demos are already playable from a burned CD/DVD WITHOUT the need of any firmware-flashing... on any Kernel (even the latest fall 07 !?) and stock x360
2. Fact: Also PJ:KK is available as a Demo...
3. Future: A smart guy/girl, finding a Live Demo or Arcade demo with editable shaders... that could make a slax beeing bootable by shader-patch. Linux mabe could be on the same Disc as the exploit demo or be installed by network.
With *nix running on x360 (but any Kernel, since demo disk was actually blacklisted) and the right linux-software a fw patch should be able on x360 itself, without the need for opening the box. (IMG:style_emoticons/default/tongue.gif)
3 Fact: So we REALY could have a softmod...after finding the right Game - but if im wrong maybe the shader-hack itself for KK got blacklisted....nah (IMG:style_emoticons/default/grr.gif)
This post has been edited by snyder80: Dec 7 2007, 04:37 PM
Post by: miltont on February 03, 2020, 03:27:00 PM
I used 360Toolbox 4.5 the one from Maximus
I tried and tried and retried to make the backup of original Firmware
but i got the error message that cant read.
I can take video of what im doing and post it also i have Print screens
when i try to read the firmware
QUOTE(snyder80 @ Dec 7 2007, 11:55 AM)
Hi miltont!
So u tried to read the firmware with a Movie disc in there?? And what version of firmwaretoolbox did u try it??
Slightly OT,but lets face the facts and dream about future:
1. Fact: Live Demos/Arcade Demos are already playable from a burned CD/DVD WITHOUT the need of any firmware-flashing... on any Kernel (even the latest fall 07 !?) and stock x360
2. Fact: Also PJ:KK is available as a Demo...
3. Future: A smart guy/girl, finding a Live Demo or Arcade demo with editable shaders... that could make a slax beeing bootable by shader-patch. Linux mabe could be on the same Disc as the exploit demo or be installed by network.
With *nix running on x360 (but any Kernel, since demo disk was actually blacklisted) and the right linux-software a fw patch should be able on x360 itself, without the need for opening the box. (IMG:style_emoticons/default/tongue.gif)
3 Fact: So we REALY could have a softmod...after finding the right Game - but if im wrong maybe the shader-hack itself for KK got blacklisted....nah (IMG:style_emoticons/default/grr.gif)
Post by: snyder80 on December 08, 2007, 03:12:00 AM
Well, atm there is NO WAY to read/flash a 79er with fwtb 4.5, because the adress where the drive-key has been stored did got changed in 79er.
BUT a new version could be able to access the firmware and read from the new Drive-Key sections after using slax 2.1.
And sadly i could´nt find more information wether there REALY is a difference in Mode B and Recovery mode.
At least we need to wait for a new FWTB version...or need a path for the firmwarepatcher released by Hitachi...
Post by: BiruZ on December 08, 2007, 04:19:00 AM
thnx (IMG:style_emoticons/default/smile.gif)
Post by: snyder80 on December 08, 2007, 06:06:00 AM
QUOTE(BiruZ @ Dec 8 2007, 12:55 PM)
hi guys, i got a 79FL too that came with my xbox halo edition. after i put it in mode B using slax, i got to windows and it displays Unknown Device in device manager (IMG:style_emoticons/default/sad.gif) am i missing something? (IMG:style_emoticons/default/sad.gif)
thnx (IMG:style_emoticons/default/smile.gif)
Yes, the installation of a passkey or the invention of an upcoming version of Firmwaretoolbox/modified Hitachi firmware-flasher to read/write at the right adress...
FOR NOW THER IS NO FLASHING POSSIBLE WITHOUT SOLDERING
And to correct my thoughts about fact n future:
There is now KK demo on Live... sadly. And i got told there is no demo/arcade game known not having editable shaders out there... (IMG:style_emoticons/default/huh.gif)
This post has been edited by snyder80: Dec 8 2007, 02:11 PM
Post by: BiruZ on December 08, 2007, 09:11:00 AM
Post by: viperone on December 10, 2007, 04:46:00 PM
QUOTE(rowandacres @ Dec 4 2007, 06:26 PM)
lol thats what happends in mode b .. To Keep It Closed To Can Either press eject once and push the drive in or press twice and press once more while its closing ..There is an video Showing ho to do it Here You Go http://www.360mods.net/News/article/sid=87.html
Good Luck
That video is for the 78fk and not a 79fl, am i missing something here, or is it the same for both? thanks
Post by: staple123 on December 10, 2007, 05:59:00 PM
This is the same thing done in satellite TV boxes to protect their firmware..but that was easy to get around using an external VID modification that blasts the chip with higher 12DC voltage to unlock that bit/register...these bits stay locked at 5 volts typically and unlock when its raised...but this is a more complicated issue with the Hitachi 79 drives.
thus Maximus invented the 79Passkey that acts as bridge to skip over that locked security bit and allow FWtoolBox to read/flash the 79FL/Fk's just like a regular "unlocked" 78 drive...it performs the same function as the VID mod. described above.
but these 79PASSKEYS are very poorly designed IMHO especially the ribbon cable option..the clearance of the bridge was NOT well thougth out by Maximus...most of the people who have bought them have damaged their DVD trying to install them because the bridge wont seat properly or flat on the board and it damages surrounded IC's..its EXTREMELY difficult surface mounted soldering in a poorly designed and too tight a package...not easy even for experts to install...
so the 79PASSKEY is an expensive and impractical option in every sense of the word..plus its going to eventually fail because its so poorly seated on the mother board to begin with..that eventually I can see several of its tiny solder leads losing electrical conductivty in these very hot 360 consoles...and if that happens it will corrupt the firmware and eventualy brick the Hitach Drive...possibly making it impossible to re-flahsed again...
trust me guys you do NOT want that thing installed in your Hitachi 79FL/FK mother board...its not a smart idea.
what is the smarter way to flash a 79FL/FK?
send it out to an expert who removes the hitachi 79Fl/FK DVD chip and externally dumps to obtain your 79FL key and then re-flashes it with latest hacked ixterem v1.4 firmware...using an eeprom programmer like the Willem.
this is one of the "official" experts that repairs bricked Hitachi/Samsung drives and dumps the 79FL keys externally and re-solders back onto the motheboard..I think he charges $40 for the whole service., plus $10 shipping and qith extremely fast turn around.
why is this better than 79 Passkey?
safer and costs about the same anyway as that Passkey nonsense.
because once he dumps the 79FL/FK and reinstalls the orginal chip flashed with 78 firmware..thus your 79FL is now a hardcoded 78 drive....and the 78 drives are fully recognized by FWtoolbox4.5 under Windows XP and will allow this former 79 drive to be flashed in modeB easily just like anyother 78 drive.
just NEVER NEVER NEVER flashback the original 79FL/FK firmware bacause it has that security BIT still hardcoded and locked in its firmware and you will have to remove the Hitachi chip all over again or dump it with 79Passkey all over again if you want to play backups.
the ixtereme software v1.4 should still enable modeB moving forward in these 79 drives flashed backwards into 78 drives.....using either that Slax2.1 CD or just startup the Hitachi with the TRAY already pulled out and fully open.
I suggets this guy he does fast and great work and is recommended by Maximus and in fact advertises in that banner that loads when you startup his FWtoolBox v4..5:
Location: Yakima, WA 98908
Aim: Grim1873
Email/MSN:[email protected]
its much better to send out the 79FL's and get them externally dumped and reflashed with 78 ixtreme v1.4 firmware...you will regret that 79passkey if you buy it...its more trouble than its worth..plus its very unreliable from all the reports I have read...too inconsistant...and eventually it might evenl unseat itself and brick the Hitachi or serioulsy corrupts its firmware...I can see that easily happening.
p.s.
my 79FL drive key was at location: 4E10 and my chip was removed, dumped and reflashed externally and then solder back onto the Hitachi board...cleaner and now its just like any other 78 drive...I can re-flash in windows any time I want since its NO LONGER permantly locked...
p.s.s.
the 79Fl/FK chip is also been encased in hard epoxy by MS...so that has to be phsically melted off with a micro torchh before you can install the 79Passkey..that's another very delicate process and if done wrong can fry your Hiatchi chip...
This post has been edited by staple123: Dec 11 2007, 02:14 AM
Post by: gabe681 on December 12, 2007, 03:17:00 PM
Post by: staple123 on December 12, 2007, 04:43:00 PM
but has anyone contacted him to ask him if these externally dumped 79FL's will now re-flash proeprly with latest ixtereme v1.4 using the new FWtoolbox v4.6?
we don't want to screw up this technique or otherwise that chip will need to be physically removed and re-flashed again..and thos trace points on that 32 pin chip are very delicate and they can't take too many removals and reinstallations...and no TSOP adpater (i.e ZIFF socket style) was installed.
that would have been an excellent idea, but those 32 pin ZIFF-TSOP sockets are extremely expensive and costr almost as much as a 79Passkey.
so do we have confirmation from GRIM that Fwtoolbox v4.6 can updated our 79FL's he exteranally dumped/re-soldered to ixterem v1.4 safely?
and also why not just patch an MS28 OEM drive with our 79FL key (address 4E10)..but does FWToolBox v4.6 patch function provide the proper spoofing string?
Post by: ydgmms on December 13, 2007, 12:56:00 PM
You know, remove the TSOP, flash the original firmware (we have backups). etc...
Post by: staple123 on December 13, 2007, 04:16:00 PM
and yes, he can unbrick any Hitachi or Samsung drive...but you have to contact him for pricing..I believe its $40 +$10 shipping 2-3 day US mail Prioity...that's what he charges to physically remove that 32 pin TSOP chip in the 79FL's, and he re-programs it externally with a Willem and then he re-solders it back on to the drive mother board...basically spoofing or turning it into an older 78 drive.
Post by: staple123 on December 13, 2007, 11:19:00 PM
GRIM does NOT re-program your 78 or 79 drives with ixtreme, he merelly unbricks it and restores the original 78/79 firmware and he dumps their drive keys, but that is it...you will have to find your own way to flash it with ixtreme hacked firmware....and he does NOT do that...
but if yuo have your 78/79 drive key then you can always spoof an Samsung OEM MS28 which cost for about $60-75
Post by: Perplexer on December 15, 2007, 11:44:00 AM
QUOTE(staple123 @ Dec 12 2007, 07:19 PM)
but has anyone contacted him to ask him if these externally dumped 79FL's will now re-flash proeprly with latest ixtereme v1.4 using the new FWtoolbox v4.6?
Sorry, no luck in dumping a 0079 with iXtreme1.2 without using a passkey.
I have a 79FL which I removed TSOP, read and programmed with iXtreme1.2 in a Willem, and reinstalled.
Then I put the drive in ModeB (tried two ways, with Slax and the tray eject method.) Both methods showed a drive letter in Windows. VIA6421 card. "Cannot read from drive" with RAW and classic dump.
QUOTE(staple123 @ Dec 12 2007, 07:19 PM)
and also why not just patch an MS28 OEM drive with our 79FL key (address 4E10)..but does FWToolBox v4.6 patch function provide the proper spoofing string?
Spoofing does work properly in Toolbox; I have inserted a 79fl key and version spoofing in a ms28 with iXtreme1.3, works fine.
Post by: staple123 on December 15, 2007, 03:16:00 PM
your setup is exactly identical to mine...and your findings excatly identical to mine
VT-6421, 79FL drive externally dumped and reflashed with ixtreme v1.2 using a Willem etc..etc...no 79Passkey was ever used in my tests.
I get the same errors that your reporting...it goes into ModeB fine and show up in Windows as drive letter: F,
but it wont READ let alone flash it..
the problem is that FWToolBox v4.6 is NOT fully conmpatible with these VIA6421 cards when used on an Hitachi--especially thess newer 78/79 drives..it all started when rev 59 Hitachis started to be sold...the old 47 Hitachis work much better with the 6421 cards...and others have had better sucess using SIL chip set based SATA cards...despite the warnings form Maximus that SIL chip sets cause corruption of the RAW dump...but regardless of that, SIL chip set based SATA cards do work form comments I have read..
do you think Maximus has a check routine in FWToolBox v4.6 that is specially looking for the 79Paskey to activate ModeB on the drive and rather then the software encocded modeB tweak that ixtreme v1.2 has included in the firmware (i.e the open tray @ startup technique)?
is the FWtoolbox v4.6 software competing with ixtereme v1.2 to activate modeB on the 79 drive...because it assumes that the 79passkey was never removed and should still be there....so it checks for it at launch and wants the tray left closed as opposed to OPEN at startup?
Post by: Maverick-DBZ- on December 15, 2007, 04:42:00 PM
QUOTE(Perplexer @ Dec 15 2007, 11:44 AM)
Spoofing does work properly in Toolbox; I have inserted a 79fl key and version spoofing in a ms28 with iXtreme1.3, works fine.
Thats good to know. With the drive now spoofed as a MS28 can it be updated to a newer hacked firmware using the Samsung flash methods? I'm guessing not since its still a 79 drive, but I'm just curious.
Post by: staple123 on December 15, 2007, 04:54:00 PM
the spoofing is to allow us to take the drive key we dumped phsyciclly and externally from a de-soldered Hitachi 79FL chip and patch this drive key dierctly into a modified Samsung ixtereme v1.4 MS28 firmware...then we flash a real OEM MS28 drive using DOS tools such as Mktflash...such a modified MS28 with a 79FL drive key will then work in the original 360 that previoulsy was using a real 79FL drive..
this is eactly why many 79FL owners went out months ago and bought spare OEM MS28 drives...we knew long ago that FWToolBox did NOT flash properly these 78/79 drives...and someday we would need a spare OEM MS28 if we wanted to test the newer ixetreme firmwares such a v1.4. This is how one must think forward in this hacking game...
also I don't like to see C4eva come out with different drive speeds in his newer v1,4 Hitachi firmware...
that was a major strategic error and he should NOT have done that...it will force MS to play much closer attention now to speed srcutinzation of certain insisignificant bytes that do NOT normally trigger the throttle down functions of the stoick firmware. I warned him before about this and he wisely dis-continued it whren he stopped supporting the older EXTREME firmwares v5.0-5.3
It was an extremely bad stretgic decision to return to non-offical drive speeds...it may not be detectable today, but it can be tomorrow....and it starts at the facotory when they press new games with insiginificant tracking bytes (i.e markers) that must ONLY be read natively at stock 12x drive speeds...and that throttle down theory will NOT protect us in that type of future scenario...it is not only possible but exactlky what they are probbalythinking today aftre they saw his return to non-stock drive speed firmwares....(i.e 5x and 8x speeds)
I suggest keeping your dirve speeds uniform at 12 x especially when switching to newer ixtreme v1.4 firmwares...yeah its noisy at 12x speed but its also may prove down the road less detectable if they implement a new kernel to screen for certain values/bytes in the iso that must read natively at stock 12 speed...
eitherwayif you believe that "throttle down" theory will protect you against speed scrutination, keep it mind it has never been proven.... and in this dynamic kernel driven environment with the proven ability now to re-press the games differently at the factory (i.e Halo 3 and Star Trek Legacy), means you can't rule anything out.....
This post has been edited by staple123: Dec 16 2007, 01:00 AM
Post by: Maverick-DBZ- on December 15, 2007, 08:06:00 PM
QUOTE(staple123 @ Dec 15 2007, 05:30 PM)
you have it backwards...
the spoofing is to allow us to take the drive key we dumped phsyciclly and externally from a de-soldered Hitachi 79FL chip and patch this drive key dierctly into a modified Samsung ixtereme v1.4 MS28 firmware...then we flash a real OEM MS28 drive using DOS tools such as Mktflash...such a modified MS28 with a 79FL drive key will then work in the original 360 that previoulsy was using a real 79FL drive..
Got it, thanks for the clarification. (IMG:style_emoticons/default/smile.gif)
I have a xbox 360 with a 79FK drive and as far as I know is the same as the 79FL. I'm in the process of getting the drive key from the 79FK so I can "inject" it into a modified iXtreme 1.4 MS-28 firmware. So from what I understand I simply flash the iXtreme 1.4 MS-28 firmware to the MS-28 drive with the 79FK drive key and I'm all good to go.
It's a much better method when I think about it. (IMG:style_emoticons/default/biggrin.gif)
Post by: albons on December 16, 2007, 10:52:00 AM
there is something I don't understand here : how can the firmware/eeprom be supposedely unreadable when mounted on the DVD and suddenly become fully accessible when unsoldered and placed into a programmator?
Can we imagine that Maximus locked its access on purpose, by checking the presence of the passkey at start? To sell the passkey79s.
Post by: staple123 on December 16, 2007, 09:44:00 PM
but that's why these Willems are so popular..powerful, cheap ($50) and suppoirt literally thousands of different types of IC or chips and has built protocals for trapping and dumping them properly...
and reading such a 79FL chip that has security sectors/registers locked, means you can't easily trap or dump them "in-circuit" (i.e unsoldered and in windows) with limited DOS flash tools like MKtFlash and FWToolbox
The Willem is memely a cheap chinese made version of an industrial eeprom/chip programmer with very accurate and updated IC protocals for unlocking and reading thousand of different IC's..
the only problem is they tend to cause subtle corruption of the RAW dumps sometimes when they externally read these 79FL chips...but fortunately we have FWToolBox programthan can fix these minor checksum errors and at the very least it always gets the proper drive key values for these 79FL's.
also its NOT a smart idea to use spoofed firmware (i.e 79FL key flashed to an MS28)..
get someone to flash that 79FL with a Willem with ixterem v1.4 at native 12x speed (I don't suggest using non-stock speeds such as 5 or 8x)...keep your XBOX360 closer to native sppeds and use that 79FL chip with ixtereme v1.4 at 12x speed.
Post by: pedro_gaucho on March 13, 2008, 01:40:00 PM
Post by: caster420 on March 13, 2008, 10:37:00 PM
QUOTE(pedro_gaucho @ Mar 13 2008, 03:16 PM)
this thread was so nice, why people have stopped answering it? what about the 79FK software unlocking?
Because there havent been any posts in three months?
79 software unlocking isnt (yet) possible and it doesnt seem as though anyone is working on making it possible.
Caster.
Post by: beratfb on April 03, 2008, 01:34:00 AM
QUOTE(caster420 @ Mar 14 2008, 05:37 AM)
Because there havent been any posts in three months?
79 software unlocking isnt (yet) possible and it doesnt seem as though anyone is working on making it possible.
Caster.
Can I get hitachi 79fl pass key I wouldlike to exchange with other dvdrom. Is any one can help me how can I get hitachi 79fl pass key with out chip.
Thanks
Post by: s_s_warrior on December 16, 2008, 11:06:00 PM
let me know please.