Post by: Xbox-Scene on August 28, 2008, 07:52:00 PM
| >>A new application that helps with the modification of Benq VAD6038 drives.. This exe is a win32 app that sends the "Magic" 28 unlock codes to you Benq 360 drive. The drive can then be dumped/erase/flashed using dosflash32 by chipsets other than Via/Nforce and without all that powering on/off or soldering. Be warned: This win32 program does not use the windows API. The exe writes directly to the ATA controller's I/O ports (which requires Geek Hideout's I/O dll, which I have included in the rarr). It also requires that you be using an ATA - SATA adapter to connect your 360 drive to your PC, or an SATA controller that has a legacy mode (try the BIOS setup options on your controller). Special thanks to: C4eva - for 28 magic keys and the CDB's to send them Podger - for the code Seventhson - for the userspace parallel ATA driver Official Site: n/a (by Podger and c4e) Download: here News-Source: xbins |
Post by: Iriez on August 28, 2008, 09:44:00 PM
QUOTE(podger @ Aug 30 2008, 01:01 AM) 
Here's how I would do it
1. It's easier and works better if the Benq is the only optical device attached. Dosflash32 only works in automatic mode, so you see all drives everytime, this can be a problem with NEC drives etc that don't use an MTK chipset
2. Launch Dosflash32 v1.3..... If it finds the Benq, It will ask the question....
MTK Vendor intro failed on port 0x????. If you choose to resend the command you should turn the drive off and on after you press "yes". Do you want to resend the command until the drive responds (Y/N)?
3. If the benq is the only drive attached, it will ask only once... Note that the 0x???? is the command port number, make note of this...
4. For now say "No" to the question in 2 above.
5. Once in Dosflash32 used the Port selection box to select the port 0x???? and confirm it is in fact the Benq.. It should say that the:
...Manufacturer ID = 0x00
...DeviceID = 0x00
... Name = PBDS VAD6038.......
this means the device is still locked.
6. Unrarr Benq_Un_Lock to a folder on you hard drive.. Open a CMD box and change to that folder... For people unfamiliar with dos... Google for XP powertools and install the command here tool, this allow you to right click the folder from the windows explore and launch a CMD right there....
7. for Benq_Un_Lock you need the command port, which you have from 3. above 0x????.... You also need the control port, from what I've seen so far on Via/Nforce this is 0x0a after the command port:
So if your command port is 0x7000 the control is 0x700A...
8. In the command window just type:
Benq_Un_Lock ???? ????+A
e.g. from 7.
Benq_Un_Lock 7000 700A
9. Relaunch Dosflash32 and this time if the unlock worked, it should not ask you the question in 2 above.
10. Once in Dosflash32 select your port 0x??? in the port drop down and you should see that this time the
...Manufacturer ID = 0xC2
...DeviceID = 0x11
this means the device is now unlocked.. it may not allways be the MXIC part.. so the number may be different, as long as they are not 0x00 then it worked.
11. Select "read" from the flashing tasks pull down and click "read flash".... Save the file in a million place as it contains you drive key... Leave Dosflash32 open for now
12. Also save or copy the file to the iXtreme 1.4.1 folder of choice and call it orig.bin
C:\.....\Benq iXtreme v1.41\8x\orig.bin
13. Double click the "Make iXtreme firmware.cmd", this will make the ix14.bin for you.... Make sure you get the green "Success" from Caster420's firmtools..
14. Back in dosflash32.... from the flashing tasks pull down select "Write"... select the ix14.bin you just created and click "Write Flash"
... It should say erasing 0, 1, 2, 3 in the status bar and then flashing 0, 1, 2, 3.
15. You're done!
Note: if you insist on not removing other drives, you run the risk of flashing them by accident OR dumping them and flashing you benq with garbage.... In any case say no the the MTK question in all cases as it should never be neede if the Benq is in fact unlocked.
If you have trouble finding the port try this
1. Boot from your Slax 2.1 cd
2. login to Slax user/pass root/toor
3. type: dmesg | grep sata
you should then see something like this:
sata_via 0000:04:0b.0: version 2.0
sata_via 0000:04:0b.0: routed to hard irq line 5
ata5: SATA max UDMA/133 cmd 0x1CC0 ctl 0x1CCA bmdma 0x1CA0 irq 22
ata6: SATA max UDMA/133 cmd 0x1CD0 ctl 0x1CDA bmdma 0x1CA8 irq 22
Line 3 is the first port in your card... line 4 is the second and so on...
Post by: Allen626 on August 28, 2008, 08:57:00 PM
Post by: BakedGoat on August 28, 2008, 11:53:00 PM
Post by: sandmanza on August 29, 2008, 12:18:00 AM
Would this method have more luck with the problem mp3boy faced and thus the one I MAY face (ordered benq's from the same place) where the benq drive could be read fine but erase/write just refused to work ? It was a benq drive buy just a foreign firmware version when he read it.
QUOTE
Hi,
I've found the problem - DosFlash.typ has the incorrect erase values for the SPI chip on these particular drives. Even replacing them with the values from the datasheet hasn't worked. However, I had some SPI chips left over from Argon Wii chips; I replaced the one from the BenQ board with a blank one of a different brand and it flashed fine
I've found the problem - DosFlash.typ has the incorrect erase values for the SPI chip on these particular drives. Even replacing them with the values from the datasheet hasn't worked. However, I had some SPI chips left over from Argon Wii chips; I replaced the one from the BenQ board with a blank one of a different brand and it flashed fine
I would hope not to go through the above process.
*crosses fingers that this may be the saving grace*
Post by: OggyUK on August 29, 2008, 01:51:00 AM
QUOTE(sandmanza @ Aug 29 2008, 09:02 AM)
Excuse my lack of knowledge here but...
Would this method have more luck with the problem mp3boy faced and thus the one I MAY face (ordered benq's from the same place) where the benq drive could be read fine but erase/write just refused to work ? It was a benq drive buy just a foreign firmware version when he read it.
I would hope not to go through the above process.
*crosses fingers that this may be the saving grace*
He did try the unlock cd Im sure, with no luck, Ill get him to post to confirm.
He used dosflash32 for one type but had to swap the SPI on ther other if I remember correctly
Post by: Penfoldian on August 29, 2008, 03:07:00 AM
I cant use my VIA sata port direct to my xbox anymore, I have to connect some type of IDE cable that converts into a sata cable?
Post by: sunnyhundal on August 29, 2008, 04:33:00 AM
QUOTE(Penfoldian @ Aug 29 2008, 11:51 AM)
So let me get this straight,
I cant use my VIA sata port direct to my xbox anymore, I have to connect some type of IDE cable that converts into a sata cable?
how bout reading the entire thing next time?
"or an SATA controller that has a legacy mode "
Post by: podger on August 29, 2008, 03:47:00 AM
Post by: Olmer on August 29, 2008, 06:09:00 AM
excuse my language, bad know English
This post has been edited by Olmer: Aug 29 2008, 01:11 PM
Post by: darren4004 on August 29, 2008, 08:03:00 AM
Post by: OggyUK on August 29, 2008, 09:13:00 AM
QUOTE(podger @ Aug 29 2008, 12:31 PM)
OggyUk: mp3boy got sorted on about half of the HK benq's he had... the tool unlocked them all to be read, but the ones with a SST spi would not erase.... we confirmed the settings for dosflash from the sst datasheet... in the end he replaced the 8 pin spi with a pmc part and had no more issues.
Yeah, I read the channel when I finished work, no timestamps + tiredness made it rather difficult to follow!
Post by: redmercury2006 on August 29, 2008, 10:05:00 AM
can't wait to get my new x360 elite with liteon and some rs232 stuff...
enjoy your weekend
Post by: podger on August 29, 2008, 11:37:00 AM
QUOTE(Penfoldian @ Aug 29 2008, 10:51 AM)
So let me get this straight,
I cant use my VIA sata port direct to my xbox anymore, I have to connect some type of IDE cable that converts into a sata cable?
Not not quite.. Via is fine.. but in the past it had to be a Via or Nforce4 to use schtrom's soft unlock, which was a brute force attack and involves power cycling the drive a few times....
This small windows exe sends unlock codes to the drive that simply make it readable/flashable from any Sata controller that support legacy mode....
If you have a Via/Nforce4 chipset it doesn't offer anything new....
Post by: darren4004 on August 29, 2008, 10:42:00 AM
Post by: Blank on August 29, 2008, 01:50:00 PM
QUOTE(darren4004 @ Aug 29 2008, 01:26 PM)
can anybody please explain how to use this, i have bin trying to do it for ages and its starting to get on my nerves lol
Really? Ages? It was just released yesterday.
Post by: darren4004 on August 29, 2008, 02:32:00 PM
QUOTE(Blank @ Aug 29 2008, 09:26 PM) 
Really? Ages? It was just released yesterday.
ok i have been trying all day then to be more specific just cant figure out where or how to run it, just looking for some help.
Post by: BakedGoat on August 29, 2008, 03:52:00 PM
QUOTE(darren4004 @ Aug 29 2008, 11:26 AM)
can anybody please explain how to use this, i have bin trying to do it for ages and its starting to get on my nerves lol
I was trying to get this to work most of last night too. I believe I found the right I/Os for the command and control base but it would just crash and restart my computer.
Just make sure to set legacy mode if you're using SATA to run the unlock, and use Slax 2.1 to figure out your command and control base I/Os.
Post by: darren4004 on August 29, 2008, 05:30:00 PM
Thanks.
Post by: haloskinner on August 29, 2008, 07:16:00 PM
This post has been edited by haloskinner: Aug 30 2008, 02:35 AM
Post by: cc2001a on August 29, 2008, 07:22:00 PM
QUOTE(BakedGoat @ Aug 29 2008, 11:28 PM)
Just make sure to set legacy mode if you're using SATA to run the unlock, and use Slax 2.1 to figure out your command and control base I/Os.
Would you mind explain more about how to set legacy mode?
Post by: darren4004 on August 29, 2008, 09:37:00 PM
QUOTE(haloskinner @ Aug 30 2008, 02:16 AM)
The | symbol is right above the \ symbol on your keyboard.
doesn't work just gives me a < symbol or ¦ i have literally tried every button combo going even tried it in VMware to see if it made a difference to keyboard layout but no luck got me stumped.
Post by: haloskinner on August 29, 2008, 10:53:00 PM
Post by: podger on August 30, 2008, 12:01:00 AM
1. It's easier and works better if the Benq is the only optical device attached. Dosflash32 only works in automatic mode, so you see all drives everytime, this can be a problem with NEC drives etc that don't use an MTK chipset
2. Launch Dosflash32 v1.3..... If it finds the Benq, It will ask the question....
MTK Vendor intro failed on port 0x????. If you choose to resend the command you should turn the drive off and on after you press "yes". Do you want to resend the command until the drive responds (Y/N)?
3. If the benq is the only drive attached, it will ask only once... Note that the 0x???? is the command port number, make note of this...
4. For now say "No" to the question in 2 above.
5. Once in Dosflash32 used the Port selection box to select the port 0x???? and confirm it is in fact the Benq.. It should say that the:
...Manufacturer ID = 0x00
...DeviceID = 0x00
... Name = PBDS VAD6038.......
this means the device is still locked.
6. Unrarr Benq_Un_Lock to a folder on you hard drive.. Open a CMD box and change to that folder... For people unfamiliar with dos... Google for XP powertools and install the command here tool, this allow you to right click the folder from the windows explore and launch a CMD right there....
7. for Benq_Un_Lock you need the command port, which you have from 3. above 0x????.... You also need the control port, from what I've seen so far on Via/Nforce this is 0x0a after the command port:
So if your command port is 0x7000 the control is 0x700A...
8. In the command window just type:
Benq_Un_Lock ???? ????+A
e.g. from 7.
Benq_Un_Lock 7000 700A
9. Relaunch Dosflash32 and this time if the unlock worked, it should not ask you the question in 2 above.
10. Once in Dosflash32 select your port 0x??? in the port drop down and you should see that this time the
...Manufacturer ID = 0xC2
...DeviceID = 0x11
this means the device is now unlocked.. it may not allways be the MXIC part.. so the number may be different, as long as they are not 0x00 then it worked.
11. Select "read" from the flashing tasks pull down and click "read flash".... Save the file in a million place as it contains you drive key... Leave Dosflash32 open for now
12. Also save or copy the file to the iXtreme 1.4.1 folder of choice and call it orig.bin
C:\.....\Benq iXtreme v1.41\8x\orig.bin
13. Double click the "Make iXtreme firmware.cmd", this will make the ix14.bin for you.... Make sure you get the green "Success" from Caster420's firmtools..
14. Back in dosflash32.... from the flashing tasks pull down select "Write"... select the ix14.bin you just created and click "Write Flash"
... It should say erasing 0, 1, 2, 3 in the status bar and then flashing 0, 1, 2, 3.
15. You're done!
Note: if you insist on not removing other drives, you run the risk of flashing them by accident OR dumping them and flashing you benq with garbage.... In any case say no the the MTK question in all cases as it should never be neede if the Benq is in fact unlocked.
If you have trouble finding the port try this
1. Boot from your Slax 2.1 cd
2. login to Slax user/pass root/toor
3. type: dmesg | grep sata
you should then see something like this:
sata_via 0000:04:0b.0: version 2.0
sata_via 0000:04:0b.0: routed to hard irq line 5
ata5: SATA max UDMA/133 cmd 0x1CC0 ctl 0x1CCA bmdma 0x1CA0 irq 22
ata6: SATA max UDMA/133 cmd 0x1CD0 ctl 0x1CDA bmdma 0x1CA8 irq 22
Line 3 is the first port in your card... line 4 is the second and so on...
Post by: darren4004 on August 30, 2008, 09:14:00 AM
QUOTE(podger @ Aug 30 2008, 07:01 AM)
Here's how I would do it
1. It's easier and works better if the Benq is the only optical device attached. Dosflash32 only works in automatic mode, so you see all drives everytime, this can be a problem with NEC drives etc that don't use an MTK chipset
2. Launch Dosflash32 v1.3..... If it finds the Benq, It will ask the question....
MTK Vendor intro failed on port 0x????. If you choose to resend the command you should turn the drive off and on after you press "yes". Do you want to resend the command until the drive responds (Y/N)?
3. If the benq is the only drive attached, it will ask only once... Note that the 0x???? is the command port number, make note of this...
4. For now say "No" to the question in 2 above.
5. Once in Dosflash32 used the Port selection box to select the port 0x???? and confirm it is in fact the Benq.. It should say that the:
...Manufacturer ID = 0x00
...DeviceID = 0x00
... Name = PBDS VAD6038.......
this means the device is still locked.
6. Unrarr Benq_Un_Lock to a folder on you hard drive.. Open a CMD box and change to that folder... For people unfamiliar with dos... Google for XP powertools and install the command here tool, this allow you to right click the folder from the windows explore and launch a CMD right there....
7. for Benq_Un_Lock you need the command port, which you have from 3. above 0x????.... You also need the control port, from what I've seen so far on Via/Nforce this is 0x0a after the command port:
So if your command port is 0x7000 the control is 0x700A...
8. In the command window just type:
Benq_Un_Lock ???? ????+A
e.g. from 7.
Benq_Un_Lock 7000 700A
9. Relaunch Dosflash32 and this time if the unlock worked, it should not ask you the question in 2 above.
10. Once in Dosflash32 select your port 0x??? in the port drop down and you should see that this time the
...Manufacturer ID = 0xC2
...DeviceID = 0x11
this means the device is now unlocked.. it may not allways be the MXIC part.. so the number may be different, as long as they are not 0x00 then it worked.
11. Select "read" from the flashing tasks pull down and click "read flash".... Save the file in a million place as it contains you drive key... Leave Dosflash32 open for now
12. Also save or copy the file to the iXtreme 1.4.1 folder of choice and call it orig.bin
C:\.....\Benq iXtreme v1.41\8x\orig.bin
13. Double click the "Make iXtreme firmware.cmd", this will make the ix14.bin for you.... Make sure you get the green "Success" from Caster420's firmtools..
14. Back in dosflash32.... from the flashing tasks pull down select "Write"... select the ix14.bin you just created and click "Write Flash"
... It should say erasing 0, 1, 2, 3 in the status bar and then flashing 0, 1, 2, 3.
15. You're done!
Note: if you insist on not removing other drives, you run the risk of flashing them by accident OR dumping them and flashing you benq with garbage.... In any case say no the the MTK question in all cases as it should never be neede if the Benq is in fact unlocked.
If you have trouble finding the port try this
1. Boot from your Slax 2.1 cd
2. login to Slax user/pass root/toor
3. type: dmesg | grep sata
you should then see something like this:
sata_via 0000:04:0b.0: version 2.0
sata_via 0000:04:0b.0: routed to hard irq line 5
ata5: SATA max UDMA/133 cmd 0x1CC0 ctl 0x1CCA bmdma 0x1CA0 irq 22
ata6: SATA max UDMA/133 cmd 0x1CD0 ctl 0x1CDA bmdma 0x1CA8 irq 22
Line 3 is the first port in your card... line 4 is the second and so on...
thanks podger i will try this out today and thanks to everyone else that helped i appreciate it a lot. (IMG:style_emoticons/default/biggrin.gif)
Post by: OOkladek on August 30, 2008, 12:21:00 PM
QUOTE(darren4004 @ Aug 30 2008, 06:14 PM)
thanks podger i will try this out today and thanks to everyone else that helped i appreciate it a lot.
Let us know how it tuernd out for you!
and thanks for podger from me aswell!
Post by: nu1mlock on August 30, 2008, 02:07:00 PM
nu1mlock
Post by: haloskinner on August 30, 2008, 02:15:00 PM
This post has been edited by haloskinner: Aug 30 2008, 09:17 PM
Post by: podger on August 30, 2008, 04:21:00 PM
Post by: darren4004 on August 30, 2008, 07:49:00 PM
QUOTE(OOkladek @ Aug 30 2008, 07:57 PM)
Let us know how it tuernd out for you!
and thanks for podger from me aswell!
it worked fine for me unlocked the drive on an Intel ich5 chipset couldn't get the sata info off slax but luckily i got the fixed I/O addresses off a pdf on the Intel website they worked fine it had the addresses for when the ports are set to legacy so all well hope everybody else gets this to work for them.
Post by: caster420 on August 30, 2008, 10:05:00 PM
QUOTE(nu1mlock @ Aug 30 2008, 04:07 PM) 
I'm sorry I have to ask this, but why exactly would one want to unlock a BenQ drive? What's it for?
nu1mlock
nu1mlock
To be able to read/write using any chipset.
Caster.
Post by: keyros2k3 on August 30, 2008, 09:34:00 PM
QUOTE(podger @ Aug 30 2008, 02:01 AM)
Here's how I would do it
1. It's easier and works better if the Benq is the only optical device attached. Dosflash32 only works in automatic mode, so you see all drives everytime, this can be a problem with NEC drives etc that don't use an MTK chipset
2. Launch Dosflash32 v1.3..... If it finds the Benq, It will ask the question....
MTK Vendor intro failed on port 0x????. If you choose to resend the command you should turn the drive off and on after you press "yes". Do you want to resend the command until the drive responds (Y/N)?
3. If the benq is the only drive attached, it will ask only once... Note that the 0x???? is the command port number, make note of this...
4. For now say "No" to the question in 2 above.
5. Once in Dosflash32 used the Port selection box to select the port 0x???? and confirm it is in fact the Benq.. It should say that the:
...Manufacturer ID = 0x00
...DeviceID = 0x00
... Name = PBDS VAD6038.......
this means the device is still locked.
6. Unrarr Benq_Un_Lock to a folder on you hard drive.. Open a CMD box and change to that folder... For people unfamiliar with dos... Google for XP powertools and install the command here tool, this allow you to right click the folder from the windows explore and launch a CMD right there....
7. for Benq_Un_Lock you need the command port, which you have from 3. above 0x????.... You also need the control port, from what I've seen so far on Via/Nforce this is 0x0a after the command port:
So if your command port is 0x7000 the control is 0x700A...
8. In the command window just type:
Benq_Un_Lock ???? ????+A
e.g. from 7.
Benq_Un_Lock 7000 700A
9. Relaunch Dosflash32 and this time if the unlock worked, it should not ask you the question in 2 above.
10. Once in Dosflash32 select your port 0x??? in the port drop down and you should see that this time the
...Manufacturer ID = 0xC2
...DeviceID = 0x11
this means the device is now unlocked.. it may not allways be the MXIC part.. so the number may be different, as long as they are not 0x00 then it worked.
11. Select "read" from the flashing tasks pull down and click "read flash".... Save the file in a million place as it contains you drive key... Leave Dosflash32 open for now
12. Also save or copy the file to the iXtreme 1.4.1 folder of choice and call it orig.bin
C:\.....\Benq iXtreme v1.41\8x\orig.bin
13. Double click the "Make iXtreme firmware.cmd", this will make the ix14.bin for you.... Make sure you get the green "Success" from Caster420's firmtools..
14. Back in dosflash32.... from the flashing tasks pull down select "Write"... select the ix14.bin you just created and click "Write Flash"
... It should say erasing 0, 1, 2, 3 in the status bar and then flashing 0, 1, 2, 3.
15. You're done!
Note: if you insist on not removing other drives, you run the risk of flashing them by accident OR dumping them and flashing you benq with garbage.... In any case say no the the MTK question in all cases as it should never be neede if the Benq is in fact unlocked.
If you have trouble finding the port try this
1. Boot from your Slax 2.1 cd
2. login to Slax user/pass root/toor
3. type: dmesg | grep sata
you should then see something like this:
sata_via 0000:04:0b.0: version 2.0
sata_via 0000:04:0b.0: routed to hard irq line 5
ata5: SATA max UDMA/133 cmd 0x1CC0 ctl 0x1CCA bmdma 0x1CA0 irq 22
ata6: SATA max UDMA/133 cmd 0x1CD0 ctl 0x1CDA bmdma 0x1CA8 irq 22
Line 3 is the first port in your card... line 4 is the second and so on...
I'm new here so first off lt me just say hows everybody doing hope everything is going well. Podger why do keep getting the no error message when i go into the benq un lock,should everything be lower case for the command or i'm putting in the i/o # what am' i doing wrong here. I'm using a p4c800-e deluxe ich5r chipset trying to find the pdf like the other guy did.
Post by: podger on August 31, 2008, 09:16:00 AM
QUOTE(darren4004 @ Aug 31 2008, 02:25 AM)
it worked fine for me unlocked the drive on an Intel ich5 chipset couldn't get the sata info off slax but luckily i got the fixed I/O addresses off a pdf on the Intel website they worked fine it had the addresses for when the ports are set to legacy so all well hope everybody else gets this to work for them.
Can you post i/o address for others please and my the link to the intel site
Post by: darren4004 on August 31, 2008, 11:03:00 AM
QUOTE(podger @ Aug 31 2008, 04:52 PM)
Can you post i/o address for others please and my the link to the intel site
Sure podger the fixed addresses for legacy mode are;
primary command port 01f0h secondary 0170h
primary control port 03f4h secondary 0374h i just took the H's off the end of the address and it sent all 28 unlocks to the drive, I had the sata set to legacy had ide port 1 enabled and sata port 2 enabled. I am still looking for the PDF data sheet i will post the link when i find it luckily i wrote them down.
Post by: darren4004 on August 31, 2008, 10:45:00 AM
QUOTE(keyros2k3 @ Aug 31 2008, 05:10 AM)
I'm new here so first off lt me just say hows everybody doing hope everything is going well. Podger why do keep getting the no error message when i go into the benq un lock,should everything be lower case for the command or i'm putting in the i/o # what am' i doing wrong here. I'm using a p4c800-e deluxe ich5r chipset trying to find the pdf like the other guy did.
this should work for you then when your in the benq cmd type benq_un_lock 01f0 03f4 if your using sata port 1 or benq_un_lock 0170 0374 if your using sata port 2 also remember you have to be set in legacy moe otherwise this will not work disable any other optical drives as this will only add to dosflash23 seeing more drives an could also end up messing them up, My motherboard is a Asrock p4i65G.
here is the PDF link just found it Intel PDF
the addresses are under Intel ICH sata controller basic attributes then legacy sub-mode. hope this helps any body with this chipset.
Post by: haloskinner on August 31, 2008, 12:39:00 PM
Post by: haloskinner on August 31, 2008, 02:05:00 PM
Post by: UnknownProjects on August 31, 2008, 02:52:00 PM
I am new to the xbox 360 modding scene but i always had fun with my original xbox, but i have just gotten bored with the games i have currently and don't have any cash.
So i was wondering if anybody could help me out,
i do have a benq drive, and my motherboard is the ecs ka3 mvp...
I would also like to know if my motherboard would be compatible to do this firmware hack.
http://www.ecsusa.co.../...=46&LanID=9
That is the link to my motherboard.
Thanks in advance guys.
Post by: Picturemn2 on September 01, 2008, 10:44:00 AM
many thanks to all for great help
Post by: daviddu54 on September 01, 2008, 12:09:00 PM
my port (sata 1) is 0XFF00 but when i tried this command "Benq_Un_Lock.exe FF00 FF0A" i have fatal error + send rapport to microsoft,what i do wrong? i've triying method slax 2.1 (dmesg | grep sata) for verify my control base,but doesn't work ,he wait of a new command.
My mother board is asus M2A-VM with chipset amd (i think ,i'm not sur),and i've allready flash a hitachi fl79 with it
Help me please
Post by: haloskinner on September 01, 2008, 01:22:00 PM
QUOTE(daviddu54 @ Sep 1 2008, 07:09 PM)
Hello all ,
my port (sata 1) is 0XFF00 but when i tried this command "Benq_Un_Lock.exe FF00 FF0A" i have fatal error + send rapport to microsoft,what i do wrong? i've triying method slax 2.1 (dmesg | grep sata) for verify my control base,but doesn't work ,he wait of a new command.
My mother board is asus M2A-VM with chipset amd (i think ,i'm not sur),and i've allready flash a hitachi fl79 with it
Help me please
Try the command dmesg | grep ata
Post by: UnknownProjects on September 01, 2008, 02:22:00 PM
Maybe just send a PM with a email or messenger, so it wont flood the thread...
Cause i really wanna firmware my drive.
Post by: OggyUK on September 01, 2008, 03:19:00 PM
Post by: UnknownProjects on September 01, 2008, 03:21:00 PM
QUOTE(OggyUK @ Sep 1 2008, 05:19 PM)
You are in the wrong forum, you want the newbie chat one!
Yeah but my question is relevant to this thread,
it is asking what i do with the program, anddd if my mobo is compatible.
So it is still relevant.
Post by: OggyUK on September 01, 2008, 03:26:00 PM
Post by: dpbmt on September 01, 2008, 03:27:00 PM
Post by: OggyUK on September 01, 2008, 03:30:00 PM
Post by: UnknownProjects on September 01, 2008, 03:52:00 PM
QUOTE(OggyUK @ Sep 1 2008, 05:30 PM)
Textbooks guide doesnt incorporate the BenQ Unlock yet.
Yeah what he said,
That is why i would like to know what to do and if my mobo would be compatible, in my post on page 3 i stated what my mobo is.
I know this isn't the area i just want to know if it will be compatible,
then i will go to newb area and request for help.
But i want to know if it is worth the new topic first.
Post by: daviddu54 on September 01, 2008, 06:33:00 PM
My mobo is not on list but it work,not forget to try all sata port,but in all case only the boot port can work,for example on my mobo i have 4 sata port (2 black and 2 red) only port 1 (boot hard drive) and port 3 (cd/dvd player) work.
Post by: OggyUK on September 02, 2008, 01:10:00 AM
QUOTE(daviddu54 @ Sep 2 2008, 01:33 AM)
I think,the best way to know if it work or not is to trying.
My mobo is not on list but it work,not forget to try all sata port,but in all case only the boot port can work,for example on my mobo i have 4 sata port (2 black and 2 red) only port 1 (boot hard drive) and port 3 (cd/dvd player) work.
Sound advice, try it and tell us if it worked.
There is no harm in trying to dump the drive and asking on here if the dump is valid.
Verifying that way beofre flashing, therefore helping others with the same mobo who actually use the search function to find out there answers - and maybe getting it added to the 'known working motherboasrds' list
You cant break it dumping the firmware! Well, never under estimate the power of the noob
Post by: UnknownProjects on September 02, 2008, 07:10:00 AM
QUOTE(OggyUK @ Sep 2 2008, 03:10 AM)
Sound advice, try it and tell us if it worked.
There is no harm in trying to dump the drive and asking on here if the dump is valid.
Verifying that way beofre flashing, therefore helping others with the same mobo who actually use the search function to find out there answers - and maybe getting it added to the 'known working motherboasrds' list
You cant break it dumping the firmware! Well, never under estimate the power of the noob
Yeah but i don't really know how to get started,
i have my xbox open and everything.
But i don't know how to use this program to get it to flash cause i have a benq, and im pretty sure my chipset isn't via or nforce.
Post by: OggyUK on September 02, 2008, 11:47:00 AM
Post by: mjstriker5 on September 02, 2008, 01:52:00 PM
Post by: OOkladek on September 03, 2008, 07:27:00 AM
QUOTE(darren4004 @ Aug 31 2008, 05:25 AM)
it worked fine for me unlocked the drive on an Intel ich5 chipset couldn't get the sata info off slax but luckily i got the fixed I/O addresses off a pdf on the Intel website they worked fine it had the addresses for when the ports are set to legacy so all well hope everybody else gets this to work for them.
Okay i'm gona need some help here.
So for started I got my drive hooked up to sata port 1 (but for some reason dosflash read the drive as if the drive is connected to sata port 2 since it gives me I/O address 0170 as the one that VAD is connected to...) anyway so I did the unlock command and all I get is alot of line of no error and thats it when I get back into dosflash and I try to read I get an error that it cant read the firmware....
what am I doing wrong here?
P.S
on my mother board I dont have legacy mode I have compatible mode or native mode to select but i guess compatible mode is the same as legacy mode right?
Thank you all for your help in advance!
Post by: OOkladek on September 03, 2008, 07:54:00 AM
Thanks!
Post by: k!ra on September 03, 2008, 10:00:00 AM
I have the same problem...
I launch Benq_unlock and I get is a lot of line of "no error" (28 exactly for 28 codes I think).
I launch dosflash32 and I get the same error : MTK Vendor intro failed on port 0x....
it's strange...
Thank you in advance !
Post by: KaosRain on September 04, 2008, 07:10:00 AM
170, 376 (command, control)
Someone else posted that on their ICH9 it was 1F0 and 3F6 (command, control).
This leads me to believe that you can take your command address, add 2 to the first digit, leave the second digit alone, and add 6 to the last digit to calculate your control address.
Once again, this is for Intel ICH9.
--------------------
Member for over five years, post count: 1
Total posts: 2 (forum doesn't include my 2004 post in calculation)
Post by: podger on September 04, 2008, 07:35:00 AM
170, 376
1F0, 3F6
these are the default ports for legacy IDE... they are pretty standard....
Post by: KaosRain on September 04, 2008, 01:07:00 PM
QUOTE(podger @ Sep 4 2008, 02:35 PM)
KaosRain:
170, 376
1F0, 3F6
these are the default ports for legacy IDE... they are pretty standard....
Thanks for the information, I didn't know this. Previously, the following combinations had been posted as working for Intel ICH5:
1F0, 3F4
170, 374
Haloskinner and I have ICH9, and while our command ports matched the above, our control ports differed:
1F0, 3F6
170, 376
That's why I noted how to figure out the control port for ICH9, because it seemed that it is chipset specific. And unless darren4004 mis-posted his addresses, it still seems that way. For the record, I wasn't referring to the command ports being chipset specific.
QUOTE(darren4004 @ Aug 31 2008, 06:03 PM)
Sure podger the fixed addresses for legacy mode are;
primary command port 01f0h secondary 0170h
primary control port 03f4h secondary 0374h i just took the H's off the end of the address
QUOTE(darren4004 @ Aug 31 2008, 06:21 PM)
this should work for you then when your in the benq cmd type benq_un_lock 01f0 03f4 if your using sata port 1 or benq_un_lock 0170 0374 if your using sata port 2
QUOTE(haloskinner @ Aug 31 2008, 09:05 PM)
Command:1F0 Control:3F6
Post by: haloskinner on September 04, 2008, 01:41:00 PM
Post by: crinnie666 on September 04, 2008, 03:14:00 PM
The hard drive and dvd writer are connected by IDE but there are 4 SATA ports on the mobo.
I connected my xbox to SATA1, set it to legacy mode in BIOS. When i ran Dosflash32 the port came up as 0x3058
I opened up cmd and tried all manner of command and control ports. 3058,305A. All of the sugestions in the previous posts but every one of them comes up with 28lines of 'no error'
I tried Slax disc but it doesnt come up with any numbers just says SATA1:sic_sata, SATA2:sic_sata etc
I am really running out of ideas, can anyone help?
Post by: podger on September 04, 2008, 06:48:00 PM
dmesg | grep SATA
SATA in caps btw...
Hope this helps...
Post by: jinayl on September 05, 2008, 05:28:00 PM
I'm new to the xbox modding and I have been
trying to flash my Benq drive with an Intel chipset, reason why I'm reading this post thanks to the help of
Martinchris23. The only thing is that there are lots of things I don't know how to do or don't even know what they mean,
like setting the bios to legacy mode, slax2.1 etc... So I was wondering if one of you could post a glossary or a little tutorial
on the newbies chat so that those who are not familiar with flashing can get started without always asking the same questions, that
would be nice!
Post by: KaosRain on September 05, 2008, 06:47:00 PM
QUOTE(jinayl @ Sep 6 2008, 12:28 AM)
like setting the bios to legacy mode, slax2.1 etc...
Legacy (or combined/compatability) makes your SATA devices act like non-SATA devices for compatability with OS' or programs that can't handle SATA.
The option is usually in the BIOS under "drive configuration" "SATA mode", or something along those lines. You'll find it.
Note that using this feature will take away the advantages of using SATA (speed, etc), so you want to reset it to "native" or "enhanced" mode after you're done.
(When you turn on your computer, it says "Press (***) to enter Setup". Press whatever button it says to enter the BIOS settings. It's usually F2 or DEL.)
-----------------------------------------------------
Slax 2.1 is a small linux distribution that you burn to a cd and can then boot into from the cd, without installing anything.
You can download it from http://rapidshare.com/files/8454344/pSlax21.iso.html
Post by: jinayl on September 05, 2008, 09:43:00 PM
QUOTE(KaosRain @ Sep 6 2008, 01:47 AM)
Legacy (or combined/compatability) makes your SATA devices act like non-SATA devices for compatability with OS' or programs that can't handle SATA.
The option is usually in the BIOS under "drive configuration" "SATA mode", or something along those lines. You'll find it.
Note that using this feature will take away the advantages of using SATA (speed, etc), so you want to reset it to "native" or "enhanced" mode after you're done.
(When you turn on your computer, it says "Press (***) to enter Setup". Press whatever button it says to enter the BIOS settings. It's usually F2 or DEL.)
-----------------------------------------------------
Slax 2.1 is a small linux distribution that you burn to a cd and can then boot into from the cd, without installing anything.
You can download it from http://rapidshare.com/files/8454344/pSlax21.iso.html
Thanks a lot for the explanation, you made things a little brighter
But nevertheless I feel like I'll have to struggle to get this done
Post by: jinayl on September 05, 2008, 10:41:00 PM
Cuz I'm not familiar with the Dosflash32 method and I would prefer to use the iPrep method if possible...
Post by: crinnie666 on September 07, 2008, 09:03:00 AM
am now happily playing CoD4 on a DL DVD :-)
random off topic question tho, can i do anything else with the xbox now i have it flashed? like the wii and psp homebrew scenes?
thanks for all your help guys
Post by: mdwin on September 07, 2008, 09:58:00 AM
Post by: mdwin on September 07, 2008, 10:19:00 AM
Post by: podger on September 07, 2008, 10:24:00 AM
Post by: mdwin on September 07, 2008, 12:36:00 PM
I changed it to secondary master and then it unlocked no problem. I just changed the profile in the bios not the actual cable.
Post by: podger on September 07, 2008, 04:11:00 PM
Post by: tinpusher on September 08, 2008, 02:45:00 PM
Dosflash32 gives initial error of 0xB880. I tried
Benq_Un_lock b880 b88a
My computer restarts after that command.
I ran grep ATA in Ubuntu and got
[ 22.722308] ata1: SATA max UDMA/133 abar m2048@0xff970000 port 0xff970100 irq 220
[ 22.722311] ata2: SATA max UDMA/133 abar m2048@0xff970000 port 0xff970180 irq 220
[ 22.722313] ata3: SATA max UDMA/133 abar m2048@0xff970000 port 0xff970200 irq 220
[ 22.722315] ata4: SATA max UDMA/133 abar m2048@0xff970000 port 0xff970280 irq 220
[ 22.722317] ata5: SATA max UDMA/133 abar m2048@0xff970000 port 0xff970300 irq 220
[ 22.722319] ata6: SATA max UDMA/133 abar m2048@0xff970000 port 0xff970380 irq 220
[ 23.196586] ata1: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
[ 23.197144] ata1.00: ATA-7: WDC WD2500JS-75NCB3, 10.02E04, max UDMA/133
[ 23.508073] ata2: SATA link down (SStatus 0 SControl 300)
[ 23.819541] ata3: SATA link down (SStatus 0 SControl 300)
[ 24.130984] ata4: SATA link down (SStatus 0 SControl 300)
[ 24.606177] ata5: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[ 24.607642] ata5.00: ATA-8: ST3750330AS, SD81, max UDMA/133
[ 25.081338] ata6: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[ 25.082774] ata6.00: ATA-8: ST3750330AS, SD81, max UDMA/133
[ 25.084774] scsi 0:0:0:0: Direct-Access ATA WDC WD2500JS-75N 10.0 PQ: 0 ANSI: 5
[ 25.084903] scsi 4:0:0:0: Direct-Access ATA ST3750330AS SD81 PQ: 0 ANSI: 5
[ 25.085019] scsi 5:0:0:0: Direct-Access ATA ST3750330AS SD81 PQ: 0 ANSI: 5
[ 25.085607] ata7: SATA max UDMA/133 port i16@0xb880 bmdma 0xb8c0 irq 22
[ 25.085610] ata8: SATA max UDMA/133 port i16@0xb890 bmdma 0xb8c8 irq 22
[ 25.085611] ata9: PATA max UDMA/133 port i16@0xb8a0 bmdma 0xb8d0 irq 22
[ 25.552677] ata7: SATA link up 1.5 Gbps (SStatus 113 SControl 310)
[ 25.717529] ata7.00: ATAPI: PBDS VAD6038-64930C, , max UDMA/100
[ 26.199427] ata8: SATA link down (SStatus 0 SControl 310)
[ 197.312846] res 40/00:03:00:00:00/00:00:00:00:00/a0 Emask 0x14 (ATA bus error)
[ 199.527906] ata7: SATA link down (SStatus 1 SControl 310) [ 204.850733] ata7: SATA link down (SStatus 0 SControl 310) [ 210.173563] ata7: SATA link down (SStatus 0 SControl 310)
It appears this is the important line
ata7: SATA max UDMA/133 port i16@0xb880 bmdma 0xb8c0 irq 22
So, I tried
Benq_Un_Lock b880 b8c0
Computer restarts after this as well.
Any ideas?
Thanks in advance.
Post by: tinpusher on September 08, 2008, 05:20:00 PM
Post by: monkey6 on September 08, 2008, 09:22:00 PM
Spent numerous hours on this and it just doesn't work.
Got the cmd/ctl numbers off linux using slax.
Boot into a clean winxp install on a gigabyte mobo with builtin SiS SATA chip.
Dosflash32 sees the locked drive at the expected command port.
Fireup unlock with the parameters and poof - blue screen
I have tried the 2nd SATA port and the same thing.
Tried the default paramters - nada.
podger: any ideas on getting this to work?
Are there any winxp apps to verify the ctl port?
Sigh...
Post by: FreshTendrils on September 08, 2008, 11:57:00 PM
SATA 0 = 1F0 3F6
SATA 1 = 170 376
You should note that only those two ports will run in legacy mode. Ports 2 and 3 won't. I imagine thats how it is on most, if not all mobo's running an Intel chipset. So, save yourself the trouble of trying to get shit to work on ports 2 and 3.
So thanks to everyone who had anything to do with this...
Post by: wrecks on September 09, 2008, 12:15:00 AM
I have an Intel P35 mobo with ICH9 chipset and can confirm dat the benq unlock program does indeed work.
This is wut i did....
I followed the entire tut up to step number 8 where it says:
8. In the command window just type:
Benq_Un_Lock ???? ????+A
e.g. from 7.
Benq_Un_Lock 7000 700A
With the above command I kept getting the (no error) error repeatedly and obviously it would not unlock the drive but after reading haloskinners comments i swapped with the following command
Benq_Unlock 01F0 0376 and it worked perfectly.
If youre having problems getting past step number 8 it probably means (im no expert by the way) that the command port you are entering is incorrect.
If you have an ICH9 chipset try the above command and if it unlocks, congratulations! The rest of the tut works perfectly from step 9 onwards.
Good luck everyone
Post by: FallenCow on September 09, 2008, 06:16:00 AM
Wrecks what command does DosFlash32 give you? i'm getting "0xF700" and I've been trying all sorts of command/control combos and nothing seems to work. I tried running slax but it wouldn't load... gave me an error. I did notice that while slax was loading it was showing my sata legacy ports w/ the command/control that FreshTendrils posted, but was unable to initialize them for some reason.
Any help definitely appreciated!
Post by: wrecks on September 09, 2008, 08:45:00 AM
I must mention the unlock utility wasnt working until i changed my sata settings in the bios to legacy mode. Before i switched to legacy mode i was also getting a different command type but i cant remember the numbers.
After i switched to legacy i recieved this message in dosflash :
MTK Vendor intro failed on port 0x01F0
I also switched da sata cable to SATA 0. In SATA 1 the command was
MTK Vendor intro failed on port 0x0170
I never attempted to unlock the drive in SATA 1
I dont know if any of that helps but goodluck anyway
Post by: FreshTendrils on September 09, 2008, 01:26:00 PM
QUOTE(FallenCow @ Sep 9 2008, 08:16 AM)
I have an Abit IP35 Pro w/ the ICH9r chipset and I can't seem to get it to read.
Wrecks what command does DosFlash32 give you? i'm getting "0xF700" and I've been trying all sorts of command/control combos and nothing seems to work. I tried running slax but it wouldn't load... gave me an error. I did notice that while slax was loading it was showing my sata legacy ports w/ the command/control that FreshTendrils posted, but was unable to initialize them for some reason.
Any help definitely appreciated!
Make sure your bios is set to have the SATA ports running in legacy mode. It may be labeled under something like "SATA Native Mode" which if set to Disabled would put the ports in legacy mode.
All the Intel chipsets have worked so far, so I can only imagine you don't have your ports set to legacy or your trying to use ports 2 or 3. But weird shit happens all the time, so who knows.
Post by: jinayl on September 09, 2008, 01:29:00 PM
I have been able to identify them yesterday using an Intel PDF and thanks to the clues given by Darell4004 and Haloskinner (thanks BTW!). I'll try this tonight and hope it's going to work as my box has been open for more than 2 weeks now and I want to see her up and running playing backups !!!
Post by: FallenCow on September 09, 2008, 01:58:00 PM
QUOTE(FreshTendrils @ Sep 9 2008, 08:26 PM)
Make sure your bios is set to have the SATA ports running in legacy mode. It may be labeled under something like "SATA Native Mode" which if set to Disabled would put the ports in legacy mode.
All the Intel chipsets have worked so far, so I can only imagine you don't have your ports set to legacy or your trying to use ports 2 or 3. But weird shit happens all the time, so who knows.
The odd thing with the IP35 Pro is that it doesn't seem to have a specific setting for turning the sata ports into "legacy" mode. There are three sata settings in the bios: RAID, AHCI, and IDE. The last one, IDE, should be the legacy mode according to Abit docs and info I've found online. I set sata mode to IDE from the get go and tried swapping ports, but I still haven't gotten it to work. Since DosFlash32 is telling me the device is on port 0x700, I'm thinking legacy mode still isn't enabled somehow. Any IP35 users out there try this yet? Anyone know if there's a "legacy" option I might have missed in the bios somewhere?
Post by: prelude on February 02, 2020, 04:55:00 PM
btw, great job guys.
Post by: Sentenced on February 03, 2020, 02:10:00 PM
Would have checked the dmesg output from Slax, but my $%!#& NEC burner seems to have resigned itself... Gonna go buy a new one tomorrow.
Btw, what output does the unlock app produce when the operation is successful?
Post by: Sentenced on February 03, 2020, 04:18:00 PM
Tried to unlock with F900 F800 (BenQ on SATA1), but all I got was a BSOD...
(Can't seem to edit my previous post anymore, but in it I accidentally left out the leading F from the hex addresses, in case anyone was wondering.)
Post by: slope420jo on September 14, 2008, 03:08:00 AM
Post by: kilohef on September 14, 2008, 03:44:00 AM
Post by: slope420jo on September 14, 2008, 03:46:00 AM
Post by: ditobot on September 14, 2008, 04:25:00 AM
ata1: SATA max UDMA/133 cmd 0x9E0 ctl 0xBE2 bmdma 0xD400 irq 16
ata2: SATA max UDMA/133 cmd 0x960 ctl 0xB62 bmdma 0xD408 irq 16
When I tried this on port 1:
Benq_Un_Lock 09E0 0BE2
I received the endless no error messages
When I tried this on port 2:
Benq_Un_Lock 0960 0B62
It completed but the drive is still locked.
I don't know if I am missing something but if anyone else has been able to get this to work on an nForce 4 chipset then let me know. I have an external SiI external SATA PCI card I am going to throw in tomorrow but I thought I would see if anyone could inform me if I am missing something simple.
Post by: ash1471 on September 14, 2008, 05:51:00 AM
QUOTE(ditobot @ Sep 14 2008, 11:25 AM)
Unlocking my drive is killing me. I have tried both ports on my nForce 4 mobo and used Slax to find the command and control ports. Here is what I get from Slax:
ata1: SATA max UDMA/133 cmd 0x9E0 ctl 0xBE2 bmdma 0xD400 irq 16
ata2: SATA max UDMA/133 cmd 0x960 ctl 0xB62 bmdma 0xD408 irq 16
When I tried this on port 1:
Benq_Un_Lock 09E0 0BE2
I received the endless no error messages
When I tried this on port 2:
Benq_Un_Lock 0960 0B62
It completed but the drive is still locked.
I don't know if I am missing something but if anyone else has been able to get this to work on an nForce 4 chipset then let me know. I have an external SiI external SATA PCI card I am going to throw in tomorrow but I thought I would see if anyone could inform me if I am missing something simple.
If you have an Nforce 4 motherboard there is no need to use Benq_un_lock.
ASH
This post has been edited by ash1471: Sep 14 2008, 12:52 PM
Post by: ditobot on September 14, 2008, 10:55:00 AM
QUOTE
If you have an Nforce 4 motherboard there is no need to use Benq_un_lock.
So are you saying there is another method I should be using or that it can't be done without an external PCI SATA card?
Sorry for being a little ignorant on the subject, I have been combing through information over the past 24 hours trying to determine the best way to do this.
Post by: kilohef on September 14, 2008, 12:44:00 PM
Post by: ditobot on September 14, 2008, 12:48:00 PM
The good news is my drive is flashed but the bad news is the first game I tried was Madden 09 and it wanted to do an update. Needless to say the update didn't work and now I need to go rent Madden 09 to see if the update file is corrupt on my burnt copy. (IMG:style_emoticons/default/cussing.gif)
I also installed the stealth firmware since I didn't feel like getting banned in the first week with my new console so maybe the disk I am trying to read from wasn't backed up using the stealth patch.
Post by: OOkladek on September 14, 2008, 08:51:00 PM
QUOTE(kilohef @ Sep 14 2008, 12:44 PM)
well, first off sorry i am not a pro hacker. I am a noob. But i have love for my currently taken apart xbox. I have the benq. And i was hoping someone would make a quick writeup tutorial of what i need to do to make my benq read backups. - This is now possible right? im not an idiot? i read the 2nd or so post, and its not quite as noobie as i need it to be. sorry and thanks- i plan to make a VERY easy to follow guide once i get this done.
Go to the second page there is a write up there on how to use the benq_un_lock there are other ways to hack the benq drive (google "textbook guide 360" or go to www.360mods.net).
To podger: I'm gona try the new version today hopefully it will work, quick question, what am I looking for here when I'm done with the unlock command in cmd? all I got untill now was the 28 no error lines and nothing happend.
P.S
what dose the no error lines mean?
Post by: Sentenced on September 15, 2008, 11:26:00 AM
Post by: brandogg on September 15, 2008, 03:20:00 PM
QUOTE(ditobot @ Sep 14 2008, 02:48 PM)
Okay I found out what you are talking about. Dosflash32 unlocked my drive just by selecting yes and turning my drive off and then on again immedieately.
The good news is my drive is flashed but the bad news is the first game I tried was Madden 09 and it wanted to do an update. Needless to say the update didn't work and now I need to go rent Madden 09 to see if the update file is corrupt on my burnt copy. (IMG:style_emoticons/default/cussing.gif)
I also installed the stealth firmware since I didn't feel like getting banned in the first week with my new console so maybe the disk I am trying to read from wasn't backed up using the stealth patch.
Good think you blatantly admit that you're a pirate.
Post by: OOkladek on September 16, 2008, 07:24:00 AM
It worked!
To anyone who wants to try: get dosflash 1.6 beta this version is amazing took some trail and error (my pc kept crashing) but got it in the end importent thing to do is to right click on flashdos32 and run it as an admin allso this only worked when I started my xbox right before starting flashdos (evreytime I started my xbox along with my pc from cold boot my pc crashed during flashdos32).
To Podger: Amazing work!!! Thanks you very very much! I see you are now working on B-mode for the hitachi I got another box with this drive might try to use your windows exe just for fun (IMG:style_emoticons/default/smile.gif)
Again thank you so much for your time and work!
OOkladek
Post by: V0rt3k on September 16, 2008, 08:42:00 AM
I tried to view the dmesg | grep sata but it don't show anything.
When I tried Benq Unlocker the application gives me error 12275 unable io service start.
Doen anyone knows a answer?
Post by: MaxEgg on October 15, 2008, 07:20:00 AM
however, using DMESG i had to make sure i typed it in like this (case sensitive)
dmesg | grep SATA
when i did sata in lower case, i got some generic looking response which didn't list the channels. in CAPS, it reported like previous tut's have been reporting.
hope this may help people down the stretch because I have not seen this reported anywhere.
Post by: slapgw on October 19, 2008, 02:15:00 PM
benq_un_lock 1f0 3f6
If your unlock is good, you will just get the dos prompt when finished. It will not tell you that it was sucessfull. If it reports anything after you run the program (no error, incomplete packet, ect.), then it was not sucessfull.
After that, I followed steps 9-15. Easy as pie. I ran everything in administrator mode. Cant wait to see the Lite-on hacked.
This post has been edited by slapgw: Oct 19 2008, 09:16 PM
Post by: georgc on October 19, 2008, 05:10:00 PM
Post by: b0bx13 on October 19, 2008, 09:52:00 PM
And if this keeps giving me problems, is there a way to dump the key from the drive without unlocking it? I have a pre-flashed Hitachi from my just-RRoD'd box.
This post has been edited by b0bx13: Oct 20 2008, 04:53 AM
Post by: slapgw on October 20, 2008, 06:02:00 PM
Post by: chewbeeb on October 24, 2008, 01:47:00 PM
Post by: klept0 on October 26, 2008, 08:48:00 PM
ninja edit: after 4 years of lurking I finally posted (IMG:style_emoticons/default/wink.gif)
This post has been edited by klept0: Oct 27 2008, 03:48 AM
Post by: FlexiPack on October 28, 2008, 07:54:00 PM
I'm just about ready to flash the BenQ. Just got a quick Q...
Is the process any different to the tut in post #2 when using Dosflash 1.6?
Cheers
Post by: cammacd on October 31, 2008, 05:49:00 AM
Post by: cammacd on October 31, 2008, 07:15:00 AM
QUOTE(FlexiPack @ Oct 28 2008, 10:54 PM)
Hi all,
I'm just about ready to flash the BenQ. Just got a quick Q...
Is the process any different to the tut in post #2 when using Dosflash 1.6?
Cheers
i used dosflash 1.6 to unlock my benq with great results. I have a gigabyte mainboard with a Sis694 Sata chipset. It found the 6038 on Sata1, it found nothing on Sata0. I put the sata in legacy mode by selecting IDE (legacy mode) through the bios.
When dosflash 1.6 picked up the drive it asked me if I wanted to send Magic command to unlock the drive, I said yes. This let me skip down to step 9 in post #2 from podger's original quote. Step 11 is a very important step -save - save - save!!
Post by: deshwasi on October 31, 2008, 04:37:00 PM
edit: ok, after reading elsewhere i found it should only take seconds. so i killed "DosFlash32" and restarted and redid the write and it seems to have successfully completed it in seconds. now, i do not have any backup to test (dont have any DVD+R DL yet). is there any other way to verify that its actually done right.
This post has been edited by deshwasi: Oct 31 2008, 11:45 PM
Post by: son of man on November 08, 2008, 08:55:00 AM
For this method, all I needed was dosflash v1.6 and ixtreme 1.41, both from xbins. v1.6 has the benq unlock integrated. I wanted to clear up any confusion, since tools are being updated all the time, and some tutorials are outdated now.
1. disable any secondary SATA/IDE controller in bios and make sure primary sata(ports 0-1) are set to legacy (NOT native). Unplug any drives or devices from your sata/ide except your primary C: drive (just in case!) All this is to make sure dosflash32 can only see your Benq to make things simpler.
2. plug in your benq to Sata-0
3. unzip the dosflash32 folder. Also have the ixtreme 1.41 folder of your choice unzipped and handy ( I opted for 12x)
4. Turn on your 360, wait 5 seconds.....then double click dosflash32.exe. If you start dosflash too quickly, you wont get the unlock option. If everything is fine between your drive and dosflash, it will shoot you a "MTK Vendor Intro failed....because there seems to be a BenQ VAD6038 drive connected....do you want to send the magic28 command"
5. Click YES. dosflash will pause briefly and shoot you a "MTK Vendor Intro failed...Do you want to resend command until drive responds?"
6. Click NO. At this point the drive will have been detected, unlocked, and available for read/write. Make sure the Manu and Device ID have values other than 0x00. Mine showed as 0xC2 and 0x11.
7. Click the "read flash" button and name the file "orig.bin"
8. Copy "orig.bin" to ..\Benq iXtreme v1.41\12x or the folder that corresponds to the speed you chose and double click Make iXtreme firmware.cmd in that folder to create the hacked ix14.bin.
9. back in dosflash, change flashing task to write and click the "write flash" button. Point it to your "ix14.bin"
10. It will erase banks 1.2.3.4 then write banks 1.2.3.4. the whole operation takes around 8 seconds. After you see "success" wait a moment and turn off the 360.
11. restart system and reenable anything you switched off in the bios and plug your drives back in if you followed step 1.
Post by: run187 on November 08, 2008, 10:30:00 AM
QUOTE(georgc @ Oct 19 2008, 11:10 PM)
Is there an option to have a dual boot with this? I would also like to play my originals on live. Is there a chip that would support the benq?
You could just make a offline and a online live account that would be easier than dual boot ..
Post by: shalomii on November 08, 2008, 07:10:00 PM
This post has been edited by shalomii: Nov 9 2008, 03:11 AM
Post by: son of man on November 08, 2008, 07:59:00 PM
QUOTE(shalomii @ Nov 8 2008, 06:10 PM)
I was wondering if someone could please help me out. I followed the instructions of the poster 2 posts above me, and am having some trouble now. everything seemed to go smoothly, but now my 360 doesnt read original games, so far ive tried a music cd, and will try and find a dvd to test also. The only problem that seemed to occur during any of this process, was with creating the iXtreme firmware, said the program or feature is not compatible with 64 bit windows vista or something like that, but the ix14 bin file was still created and the window ended up saying it created successfully, so i thought it was just a vista glitch or something. I hope someone knows of this issue and can help me out. Thanks
Before I heard about the benq unlock I used another comp with an nforce chipset running vista64. No luck. iprep kept giving me errors. I just tried an original game and a cd and both worked fine, so I would suggest trying the steps in xp. I just hope your drive isn't borked
Post by: shalomii on November 08, 2008, 09:25:00 PM
QUOTE(son of man @ Nov 8 2008, 06:59 PM)
Before I heard about the benq unlock I used another comp with an nforce chipset running vista64. No luck. iprep kept giving me errors. I just tried an original game and a cd and both worked fine, so I would suggest trying the steps in xp. I just hope your drive isn't borked
Dont worry about it man, I think i got it working. I just did the ixtreme firmware creation process on an xp machine and tried the flashing again, my originals are playing fine, now i just gotta try and make a backup of one and see if it works. fingers crossed
Post by: danillll on November 12, 2008, 09:04:00 AM
Thanks
QUOTE(son of man @ Nov 8 2008, 04:55 PM)
Just as thanks for the help on this board, I'm providing a step by step'er of my experience. This is using a P965-DS3 with an ICH8.
For this method, all I needed was dosflash v1.6 and ixtreme 1.41, both from xbins. v1.6 has the benq unlock integrated. I wanted to clear up any confusion, since tools are being updated all the time, and some tutorials are outdated now.
1. disable any secondary SATA/IDE controller in bios and make sure primary sata(ports 0-1) are set to legacy (NOT native). Unplug any drives or devices from your sata/ide except your primary C: drive (just in case!) All this is to make sure dosflash32 can only see your Benq to make things simpler.
2. plug in your benq to Sata-0
3. unzip the dosflash32 folder. Also have the ixtreme 1.41 folder of your choice unzipped and handy ( I opted for 12x)
4. Turn on your 360, wait 5 seconds.....then double click dosflash32.exe. If you start dosflash too quickly, you wont get the unlock option. If everything is fine between your drive and dosflash, it will shoot you a "MTK Vendor Intro failed....because there seems to be a BenQ VAD6038 drive connected....do you want to send the magic28 command"
5. Click YES. dosflash will pause briefly and shoot you a "MTK Vendor Intro failed...Do you want to resend command until drive responds?"
6. Click NO. At this point the drive will have been detected, unlocked, and available for read/write. Make sure the Manu and Device ID have values other than 0x00. Mine showed as 0xC2 and 0x11.
7. Click the "read flash" button and name the file "orig.bin"
8. Copy "orig.bin" to ..\Benq iXtreme v1.41\12x or the folder that corresponds to the speed you chose and double click Make iXtreme firmware.cmd in that folder to create the hacked ix14.bin.
9. back in dosflash, change flashing task to write and click the "write flash" button. Point it to your "ix14.bin"
10. It will erase banks 1.2.3.4 then write banks 1.2.3.4. the whole operation takes around 8 seconds. After you see "success" wait a moment and turn off the 360.
11. restart system and reenable anything you switched off in the bios and plug your drives back in if you followed step 1.
Post by: Teratani360 on November 24, 2008, 03:56:00 PM
Post by: gastromagig on December 01, 2008, 11:24:00 PM
I heard something about not being able to recover the port numbers properly with this method with the intel chipset. Does anyone know the port numbers?
whops my bad,
read the forum in closer detail
Post by: markyk1974 on December 05, 2008, 08:03:00 PM
QUOTE(shalomii @ Nov 9 2008, 04:10 AM)
I was wondering if someone could please help me out. I followed the instructions of the poster 2 posts above me, and am having some trouble now. everything seemed to go smoothly, but now my 360 doesnt read original games, so far ive tried a music cd, and will try and find a dvd to test also. The only problem that seemed to occur during any of this process, was with creating the iXtreme firmware, said the program or feature is not compatible with 64 bit windows vista or something like that, but the ix14 bin file was still created and the window ended up saying it created successfully, so i thought it was just a vista glitch or something. I hope someone knows of this issue and can help me out. Thanks
ok so everything seemed to run smoothly for me also but now nothing will play for me either. I try originals and it won't play, telling me to use and original xbox 360 disk. Same for backups also. anyhelp would be appreciated. Hope the read of the original firmware was ok. It is 256kb.
Post by: SorryBasyard on December 06, 2008, 04:15:00 AM
QUOTE(danillll @ Nov 12 2008, 11:04 AM)
Moderators, we need a sticky, below steps worked perfectly
Thanks
worked real well here...thanks :-)
This post has been edited by SorryBasyard: Dec 6 2008, 12:22 PM
Post by: podger on December 06, 2008, 06:51:00 AM
the magic keys only work for the 64930C, if DF32 detects as 62430C it will not offer the 28 key method... the Geremia method will work 100% with all... make sure you leave the tray half open....
Post by: markyk1974 on December 06, 2008, 05:29:00 PM
QUOTE(markyk1974 @ Dec 6 2008, 05:39 AM)
ok so everything seemed to run smoothly for me also but now nothing will play for me either. I try originals and it won't play, telling me to use and original xbox 360 disk. Same for backups also. anyhelp would be appreciated. Hope the read of the original firmware was ok. It is 256kb.
Anybody with any idea's why this happened or how i can rectify it. Thanks in advance
Post by: wutang138 on December 10, 2008, 08:14:00 AM
Post by: kandiman on December 22, 2008, 12:19:00 AM
QUOTE(son of man @ Nov 9 2008, 02:55 AM)
Just as thanks for the help on this board, I'm providing a step by step'er of my experience. This is using a P965-DS3 with an ICH8.
For this method, all I needed was dosflash v1.6 and ixtreme 1.41, both from xbins. v1.6 has the benq unlock integrated. I wanted to clear up any confusion, since tools are being updated all the time, and some tutorials are outdated now.
1. disable any secondary SATA/IDE controller in bios and make sure primary sata(ports 0-1) are set to legacy (NOT native). Unplug any drives or devices from your sata/ide except your primary C: drive (just in case!) All this is to make sure dosflash32 can only see your Benq to make things simpler.
2. plug in your benq to Sata-0
3. unzip the dosflash32 folder. Also have the ixtreme 1.41 folder of your choice unzipped and handy ( I opted for 12x)
4. Turn on your 360, wait 5 seconds.....then double click dosflash32.exe. If you start dosflash too quickly, you wont get the unlock option. If everything is fine between your drive and dosflash, it will shoot you a "MTK Vendor Intro failed....because there seems to be a BenQ VAD6038 drive connected....do you want to send the magic28 command"
5. Click YES. dosflash will pause briefly and shoot you a "MTK Vendor Intro failed...Do you want to resend command until drive responds?"
6. Click NO. At this point the drive will have been detected, unlocked, and available for read/write. Make sure the Manu and Device ID have values other than 0x00. Mine showed as 0xC2 and 0x11.
7. Click the "read flash" button and name the file "orig.bin"
8. Copy "orig.bin" to ..\Benq iXtreme v1.41\12x or the folder that corresponds to the speed you chose and double click Make iXtreme firmware.cmd in that folder to create the hacked ix14.bin.
9. back in dosflash, change flashing task to write and click the "write flash" button. Point it to your "ix14.bin"
10. It will erase banks 1.2.3.4 then write banks 1.2.3.4. the whole operation takes around 8 seconds. After you see "success" wait a moment and turn off the 360.
11. restart system and reenable anything you switched off in the bios and plug your drives back in if you followed step 1.
Thanks son of man, spent hours finding and trying different solutions this one worked flawlessly, i'm on ICH9/ICH9R controller mine showed the exact codes 0xC2 and 0x11 on sata port 2, i'm guessing ICH8 and ICH9 are identical
, set the sata to legacy used dosflash 32 and now have ixtreme 1.41 firmware 
VERY EASY TUTORIAL AND THIS SHOULD BE STICKIED!!!
Post by: shalomii on January 01, 2009, 04:51:00 PM
Post by: blackmh on January 01, 2009, 05:46:00 PM
be sure to turn off AHCI/RAID in BIOS and set SATA mode to disable (legacy).
Thanks!
Post by: InvidiousDemise on January 01, 2009, 09:46:00 PM
Note: To get Dosflash32 to run in Windows Vista, I had to right click and run as Administrator. If I didn't run as administrator, I got an error about portio32.sys
Post by: Dan7712 on January 02, 2009, 03:50:00 PM
Manu ID is 0xC2
Device ID 0x11
So I am guessing that bit is right. But when I click "Read flash" save it, and then it says at the bottem "Reading Bank 0" and then nothing. My PC crashs. It once got to reading Bank 3 but then crashed.
What am I doing wrong?
I am using:
DosFlash32 V1.7 BETA
Flashing BenQ
Windows XP
Wanting to flash 1.5
Any ideas?
Thanks
Post by: gizbug on February 14, 2009, 05:13:00 PM
Also, it seems like you are doing all this inside windows? I've used the textbook pdf before, and never booted up into windows, but a USB stick with the files on it. We should leave our boot drive with windows hooked up to our SATA,and disconnect everything else, and plug in our benq drive?
Post by: gizbug on February 14, 2009, 06:46:00 PM
I do not see IXtreme firmware.cmd. I just downloaded the 1.5 bios, your guide mentions 1.4. Any ideas?
Post by: gizbug on February 14, 2009, 07:25:00 PM