Home

The Official JungleFlasher User Guide

Contents

1. __ System Restore ih Automatic Updates Remote f bE p Control Panel gt System and Security Syste Sustem Control Panel Home T a View basic informat Microsoft Windows F Professional l Device Manager Windows edition apy Version 2002 aa Dy Sence Fact Remote settings Windows 7 Ultimate oil Reaistered to W System protection Copyright 2009 Mic e Oggy Advanced system settings Computer AMD Athlonjtm 64 2 Dual Core Processor 5000 2 61 GHz 3 00 GB of RAM Eee Physical Address Extension system Manufacturer Rating Then click Device Manager Page 157 of 272 Things not going as expected Read the FAQ s System Properties System Restore Automatic Updates o Remote i General Computer Name Hardware Advanced Device Manager 3 The Device Manager lists all the hardware devices installed on your computer Use the Device Manager to change the properties of any device Device Manager Drivers Driver Signing lets you make sure that installed drivers are compatible with Windows Windows Update lets you set up how Windows connects to Windows Update for drivers Driver Signing Windows Update Hardware Profiles Hardware profiles provide a way for you to set up ard store ea different hardware configurations Hardware Profiles
2. Organize New folder Date modified ad Homegroup No items match your search jM Computer Local Disk C ca Local Disk D Local Disk E ca MAIN H c Win7 ca DATA Lh th Network 4 File name 9 Hit OFW bin Save as type Firmware Images bin Hide Folders Upon saving the Firmware from the Drive you can verify the key appears good and it reports as GDR 3120 ROM Ver Source Joa kent Ove Senai User Guide J Shithest SHED VY bin Save Drive Vendor Model Rev Firmware Type DVD Key 4F00 Ox67 178885 Key Hitachi GDR3I2Z0L 0059 Stock ASQ09C SAFE S605 70 7E0S494079A2DC 36 a OSG HL OT STOVD ROM GDR3120L0059 The Running Log should also show this data FLASH iX FIRMWARE CLICK HERE Page 65 of 272 Things not going as expected Read the FAQ s UNLOCKING v79 FIRST Ensure ModeB is set V79 ONLY The Hitachi v79 requires unlocking via Audio CD which can be downloaded here Burn the bin using the cue sheet in IMGBurn done by right clicking cue file and selecting burn with imgburn and write to CD R Insert the disc into the Hitachi v79 wait for it to spin up windows media player may try to ix DAO Found drive Found drive Port Properties a Firmware Tool 32 MTK Flash 32 ial Use Port IL Vendor HL DT ST Name DVD ROM GDR3120L 32 40 E FAW Rev 0073 r Dump Drive 46 4
3. 2 H Ze E gt ee Me B B Drive is Lite On Page 179 of 272 Things not going as expected Read the FAQ s Now press the PhatKey Button cee bap inn Lupton sehen 2 MERCI NE MA pota ey E Additional functions _ 000 Include non IDE Ports 7 Himen bin Orty 7 a ee Ox0000 Compatible Channel Primary ke DVD drives Liteon amp EN Ss Hitachi SLIM Device XECUTER X36015 PRO Ver 0 19 Vendor FLDS a A 0CA0A2D610CG93891000 Not Found portio3z aya Driver Started thanka Schtrom HSGOUSER PRO detected Version 0 15 Found 12 I O Bortsa Found 0 Com Ports Found 11 windows drives C Dz E Fz H I Ez bz M Nz 0 Found 2 CD DVD drives F G Z X360USB PRO Drive is Lite n The following message will appear Fh To resend the command you should click Yes ae Power off the drive Probe MPXOL Then power back on Press Escape to cancel Please read this carefully Then click YES Switch 3 3v inline switch OFF Probe the point MPX01 shown below Page 180 of 272 Things not going as expected Read the FAQ s MT13194L 0832 ANSI JAK3GF O5XCAB1216100AA hI ER ee Fa Al lt am Aia z _ a D z Things not going as expected Read the FAQ s nnn le wah tte 0 Ma E f Page 182 of 272 Things not going as expected Read the Switch 3 3v inline switch ON again This message should appear in
4. Serial flash found with Status x7 Note this Button displays the ST Sending Device ID request to port Ox0000 of the Spi lock Spi Status x 0x00 Unlocked Manufacturer ID OxEF Device ID 0x11 Ox8C Locked 7 Flash Name Winbond NEX W25P20 NX25P20 This is the Lock that MS employs o Flash Size 262144 bytes not the HW switch on the PCB J Page 213 of 272 Things not going as expected Read the FAQ s NOTE If the button is Ox8C ensure switch on board is set to wp 1 then press the button to unlock the board Now press the Write button Firmware Tool 32 MTK Hash 32 Hitachi GDR3120 IRC Channel USB Only VIA ports Only Coc Include non IDE Ports Port Properties scheint ieete Flash Chip Properties es ei Vendor ID OxEF SEE AE Device ID 0x11 iai Name Winbond NEX Ww25P20 NX25P20 Device XECUTER X360U56 PRO ee re Ver 0 13 Size 262144 bytes Type Serial flash with status 0x72 Drive Properties Vendor Drive in Vendor Mode Hashing Tasks Name Intro 7 Device ID FAN Rev i Reserved Read DVD Key Verified Phat Slim Writing Bank 3 __ gt Flash Verification Test Reading Bank Reading Bank 1 Reading Bank z Reading Bank 3 Write verified OF Jungleflasher will proceed to write the firmware that was loaded in target buffer on the FirmwareTool 32 Tab Once complete check the log for the Write Verified OK Message Now
5. BOTH OS INSTRUCTION S NOW BECOME IDENTICAL Navigate to SCSI and RAID Controllers and click the sign to expand the list Device Manager File Action view Help Bal 4 m A 5 OGGY D364C2231E B Acronis Devices W Computer Se Disk drives y Display adapters J DVD CD ROM drives 34 PIONEER DYD RW DYR 115D 36 PIONEER DVD RW DYR 215D 34 5152 MNOHA3K9I SCSI CdRom Device Sy Floppy disk controllers 5 Standard Floppy disk controller iy Human Interface Devices 3 IDE ATA ATAPI controllers IEEE 1394 Bus host controllers 2 Keyboards Mice and other pointing devices Monitors BM Network adapters Y Ports COM amp LPT Sige Processors ESI and RAID controllers amp ALEOJPLR IDE Controller amp VIA T6421 RAID Controller Sound video and game controllers Ge Storage volumes System devices s Universal Serial Bus controllers 4x VSO devices BB Xbox 360 1 0 Device Drivers Right Click the VIA 6421 RAID Controller may report as 3249 if using 550b drivers or above and Page 158 of 272 Things not going as expected Read the FAQ s select Disable lt SCSI and RAID controllers 41EQIPLA IDE Controller lS vote RAID tee IW Sound video and gam See Storage volumes i E System devices Uninstall 5 HESA Ferial BGs ta Scan For hardware changes F 4p VSO devices ool fe BB sbo 360 1o Device Properties Update Drive
6. This will as normal take you to the Firmware Tool 32 tab with your Dumm y bin loaded as source and the target Firmware loaded and spoofed with your drives details Page 184 of 272 Things not going as expected Read the FAQ s From here the Jungleflasher procedure is identical to the previous versions Ensure the 2 keys match each other then proceed to erase and write your drive aaia MTK Flash 32 IRC Channel _ User Guide C ungleflasher Dummy bin Save Drive Compatible LiteOn DG 16D2S 93450C Phatkey extract F8FEDOASC49AC7CD715326092E6118E4 FF DVD drives OSIG PLDS DG 16025 j iw cay Firmware Hitachi Samsung cone Key gus Identify oa from Source to Target Beng amp Liteon Target pen oe eae FAT Advanced View D FBeta 0 1 69 Firmware LTPlus 934v 1 1 bin U i Manual Vendor Model Rev Firmware Type DVD Key ma Spoofing Lite On DG 16025 93450C LT Plus 1 1 F8F6D0A9C49AC7CD715326092E6118E4 OSIG FLDS DG 16D25 9245 Firmware OGaig PLDS DE 16025 Firmware is LT Plua 1 1 r s Spocting Target i Price DVD Key copied to target 95 r i i i Inquiry string copied to Target Identity atring copied to Target Serial data copied from Source to Target ei X360US PRO No Calibration data in source WORLD WIDE SHIPPING CLICK TO CONTINUE TO ERASE amp WRITE SECTION Page 185 of 272 Things not going as expected Read the FAQ s PMT Probe wi
7. VO Address On0000 Cer Type USB Channel Primary Paii Device ID O11 Device XECUTER X360USB PRO seh Ss Ret Ver 0 12 ize 26214 bytes fie Ponai Serial flash wath status 0x72 Vendor Drive in Vendor Mode Mame FAN Rew Reserved DVD Key Not Found Sending Device ID request to port 0x0000 Manufacturer ID OxCz Device ID Oxil Flash Name MAIC MAS5L2005 Flash Size 262144 bytes Drive is now in Vendor Mode 0x72 Click the Write button to write Target Buffer to the drive Flashing Tasks Intro Device ID utro ATA Reset et Cee Ee Phat 8 Shim Sending Chip Erase to Port OxA000 Writing Bank O __ Writing Bank 1 _ __ Writing Bank 7 _ _ Writing Bank 3 ___ Page 107 of 272 Things not going as expected Read the FAQ s Flash Verification Test Reading Bank O __ Reading Bank 1 _ _ Reading Bank 2 _ _ Reading Bank 3 __ Write verified OF Write Verified OK in Running Log signals good write Now send an Outro to the drive aressing the Outro ATA Reset Button Drive Properties Vendor PLDS D 16D25 1 J i 5 IRC Channel Name FAN Rew 0251 activate iso Reserved 0CA0A0D608CG73880800 rts Onity 360 Tools DVD Key Verified F DE Fors v p Son iy Lite On j Slim U
8. Done write verify test Dumping Flash Read back amp compare completed write verified Flash Complete Power Off Disconnect drive connect SATA back to console and test YOU ARE FINISHED RETURN TO START OF TUTORIAL Page 73 of 272 Things not going as expected Read the FAQ s Restoring from Hacked Firmware As the title suggests it is simply a reversal of flashing the Drive with Hacked Firmware This also applies to Hitachi Drives Spoofed as other Drive types Revisions Again JungleFlasher will depend on the JungleFlasher Firmware Pack being in the same directory as JungleFlasher exe With the Drive in Mode B and unlocked if it s a v79 simply select Restore Firmware from the Flashing Options list FimmwareTool 32 DVDKey 32 MTK Aash 32 Hitachi GDR3120 Port Properties Hee Win API a Drive CDAD LISE ror iL F H L DT STDVD ROM GDR3120L0079 Name DVD ROM GDR3T20L 32 402 Hashing Options Sector List ie a HE Mre Se Fi Rev 0079 Dump Drive Geta tatid ab 46 47 i Run time Reserved OBMAB O6 05 25 Manual Spoof i Beh AD Auto Spoof Send Mode B 78 79 r scone Mode css Flash LT Plus Open Close Transfer Method 4 79 Unlock automatic Mode Select Insert the 79 Unlock Audio CD Free Hash Ram Upload a a Ram Poke Found drive E CD DVD Found drive F Cb DVD Hitachi found Found drive G CD DWD
9. Remove sector List Disable Enable All Samsung Send Mode B Beng amp Liteon FAT 78 79 Firmware Tool 32 DVD Key 32 Part Prapedie Driv i idi Use Win API ee _ E meena TALE reste Ss TCLS x wert DA TSSTcomCDDVDW TELERA TOU i Se rar Io Op aA Vendor fae Pay ee npotbie Hash LT Plus Temata heth or disconnect it OR don t be a tight wad and buy a X360USB Pro I have an xxxxxxxx Drive but JungleFlasher sees it as yyyyyyyy This is more than likely a Spoofed Drive This is where a manufacturer of one drive is used in place of a different manufacturer s drive The Xbox 360 checks what DVD Drive is in there using the drives OSIG If this doesn t match the console will report E66 To overcome this we can change one string in the drives Firmware making one drive report as the other this fools the Xbox 360 but has an adverse affect with JungleFlasher as it will also report as the other drive Just treat it as the drive it really is so if it is physically a Samsung unlock it like a Samsung write Samsung Firmware too it with spoofed OSIG I LiteOn Erased my LiteOn and it failed Device Intro Failed now JungleFlasher won t detect my drive Calm down your drive isn t bricked JungleFlasher tries to automate as much of the process as possible making it seamless This time sadly it didn t work All you need to do is
10. please keep it safe Page 248 of 272 Things not going as expected Read the FAQ s Save As ae QU T Desktop gt 360usb 950 Riy Organize Aag eea New Folder santo Links Date modified Type Desktop amp Dummy Recent Places E E Computer Documents Pictures Music Recently Changed Searches Public Folders File name Save as type Firmware Images bin a Hide Folders Now Jungleflasher will change to the Firmware Tool 32 Tab and automatically load your OFW as the source Then ask if you wish to Auto Load Latest Firmware p Lite On firmware loaded to Source buffer P Do you wish to auto load Lite On iXtreme Click yes to Auto Load the Firmware and Auto Spoof your data from your drive into the ixtreme Page 249 of 272 Things not going as expected Read the FAQ s i JungleFlasher 0 1 81 Beta FimwareTool 32 DVDKey32_ MTK Rash 32 Hitachi GDR3120 s mt ae eS tne Pentre E E A seaman 2 Save Drive Vendor Model Rew Firmware Type DVD Key nma 7 Key lieOn DG IGD4S 9504 Sick e M OSIG PLDS DG 16D45 9504 Open Bets User Guide Open Target Fj g DEI TIT are ai gt ll T ra Vendor Model Rev Firmware Type DVD Key na j Spoofing lteOn DG 6D45 SEO LTP Sd OS G PLDS DG 16D45 9504 Save to File Firmware OGsig PLDS DE 1eb4s Firmware is LT Flug Spooting Target DOVO Key copied to target
11. First ensure it inquires on the I O port Pod Properties PO Address O 0000 ee Type USB Charmel Primary Poston Master Device KECUTER SS60US8 PRO Ver 017 Vendor PLOS Name DG 16045 Fis Rew ani Fesemed ipag DVD Key Het Found Page 246 of 272 Things not going as expected Read the FAQ s Now select Slim Unlock a JungleFlasher 0 1 81 Beta Firmware Tool 32 DVDKey 32 i Hitachi GDR3120 activate iso VO Port USB Only VIA porte Ony 360 Tools hel OO Y e Ti Incdude no in IDE Ports k Beng a Sammy EA FEN Lite On Port Properties es sl as VO Address 0000 i USB Flash Chip Properties Type Vendor O Device ID Channel Frimary Postion Master Device XECUTER X360USB PRO Ware Ver 0 18 Size Drive Properties Type Jungleflasher will unlock the drive and place it into Vendor Mode ga JungleFlasher 0 1 81 Beta FirmwareTool 32 DVDKey32 MTK Fash 32 HitachiGDR3120 IRC Channel activate isa VO Fort USB Only VWiAports Only 360 Tools aT TC aes San 3 00000 la Include mon IDE Forts E EN Eer nq Sammy TFA Dn Slim Eat itor Connect any Address ren ie W Flash Chip Properties SATA device Type Chaniet TERRY Vendor ID OxEF to any Postion Master eae 7 PC or la ptop Device XECUTER X360US6 PRO an i i via USB Ver 0 18 ize 262144 bytes Serial flash with status 0x72 bird Beeline ha AA ieee aa a ett Phat i Slim
12. Verify Key Firmware Type DVD Key Spoofing Open the firmware file you think is the correct Dummy bin or Lite OFW bin Allow it to autoload the latest iXtreme Firmware Then right click over the source firmware section again Select Verify Key Firmware Tool 32 DVDKey 32 MTK Hash 32 Hitachi GDR3120 IRC Channel Source Dive Seral User Guide C JungleHasher v0 1 74 Beta 138 old Lite OFW bin Vendor Model Rev Firmware Type DVD Key ma Lite On DG 16D2S 93450C Stock 5B 749DEBF3935822C0950FB44B82D 1486 OS G PLDS DG 1602S 9345 A Load fw RlAdvenced View SpookSou o Sar Sores Donate Updated b Target Inga ety Open Key d b History C JungleRlasher v0 1 74 Beta 1 38 firmware octty gt Verify Key Manual Vendor Model Rew Firmware Type OORS EN Spoofing LiteOn DG 16025 9450C iXtreme LT 1 1 9B 49D EBF3935822C 0950F B44B2D 14868 OSIG PLOS OG 16025 9345 Now check the Running log for this Attempting to verify Source Fey to drive on port OxEs00 It s Verified against drive click MTKFlash 32tab and proceed to ERASE WRITE Page 152 of 272 Things not going as expected Read the FAQ s Using the KeyDatabase to Create your Firmware If you are convinced that you have flashed this drive before regardless of type but it doesn t show as verified initially you can test all the keys in your Key Database by using Dummy from KeyDB
13. ab Writekey ab Xewitch Computer HEEY_CURRENT_USER JungleFlasher Page 174 of 272 Things not going as expected Read the FAQ s e Adview Remembers whether Advanced View was selected or not e BackupFolder Contains the location set for backup folder for modder mode blanked if modder mode not set COMPort Remembers last COM Port selected number represents position in drop down menu e Delay32 timed delay between clicking dvdkey32 and running the command to allow time to probe r707 milli seconds e DoCom Enumerates comports for debug use only e DoDevID Will send Intro if drive reports as in Vendor Mode e DoDrives Enumerates drive letters for debug use only e DolO Enumerates O ports for debug use only e DoUSBOnly Selects USB only option HitAPi Remembers if WinAPi is selected 1 yes O no HitRev Remembers last drive revision selection e HitTran Remembers last Tranfer Method selection e lOPort Remembers last IO Port selected number represents position in drop down menu Left Remembers postion of JungleFlasher window left hand side Mods Counter for CTRL F7 operations e OnlyDummy Remembers if Dummy bin only is enabled ScsiPorts enumerate SCSIAdapter IO ports also NON IDE e Top Remembers postion of JungleFlasher window Top e ViaPortsOnly enumerate only Via IO ports for safety Value 1 Lists all if removed or Value 0 e WriteKey Allows
14. drive on a sector by sector basis and as such needs to be performed in a very controlled way so the process is heavily automated JungleFlasher will only flash iXtreme to a stock drive and so a restore facility is provided which allows for a full restore to stock f w of previously modded drives Several additional features like setting Mode B over PortlO USmodeB and 79Unlock are included for convenience Dumping and flashing is also possible over PortlO for those who removed VIA drivers to work around Lite On Erase lockup issues JungleFlasher is intended to be rich in information providing as much relevant and useful information as possible On the DVDKey 32 and MTKFlash 32 tabs all I O and COM port information is detected and displayed as well as drive and device properties for the currently selected drive Page 3 of 272 Things not going as expected Read the FAQ s Overview of JungleFlasher and its functions When you start JungleFlasher you will be presented with 5 tabs FirmwareTool32 DVDKey32 MTKFlash32 Hitachi GDR 3120L amp IRC Channel Firmware Tool 32_ DVDKey 32 MTKAlash 32 HitachiGDR3120 IRC Channel FirmwareTool32 is used to view firmware details manipulate these firmwares and to save the firmware and or details of the firmware It is split into 2 sections Source and Target with function buttons surrounding it Source this is the originating firmware this can be previously dumped firmware c
15. the drive reboots when trying to dump the drive or JungleFlasher seems to Lag OR I get erroneous issues Try changing the USB cable you are connecting the device with failing that try another USB Port JungleFlasher warns me of No VIA Ports Found Due to quirky issues with some VIA Motherboards with VIA PCI SATA Cards causing JungleFlasher to fail to load we ve forced via ports only as default Page 260 of 272 Things not going as expected Read the FAQ s This for those without a VIA PCI SATA card or VIA motherboard will get this warning If you do not have a VIA PCI card or a VIA Motherboard proceed to the DVDKey32 Tab and ensure Non IDE Ports is checked You will no longer get the warning when running JungleFlasher JungleFlasher cannot see my drive There are multiple causes to this so first of all ensure VIA Ports Only is unchecked and Non IDE is checked under the DVDKey32 Tab If using RAID it will cause issues Set it to Native IDE Disable AHCI Intel Raid in your computers BIOS Use a Primary SATA port where possible If using a VIA card ensure you use the correct port If problems persist please join us in the support channel HERE JungleFlasher doesn t see my DVD Drive cont Quite a few users believe JungleFlasher will report their Xbox 360 DVD Drive being Present in the Running Log Found 4 I Portes E Found 1 Com Forts Found 8 windows drives C D E F G I gd af USE T
16. Channel Primary lame The Hottest Fasko Asia z Product of Device XECUTER A260U568 PRO z Ver 0 19 2 0 i JungleFlasher 0 1 73 Beta 207 Session Started Sun Feb 70 15 14 40 27011 This is a 32 bit process running on 4 x 32 bit CPUs BPoOrtioasz ays Driver Installed BPOrtias2 ays Driver Started thanks Schtrom HSG0USER PRO detected Version 0 15 Found 17 I O Porta Page 178 of 272 Things not going as expected Read the FAQ s Using the PMT With drive powered on and showing in drive properties click refresh fr WAports Only C n Additional functions Include non IDE Ports Dummy bin Only XECUTER 260U58 PRO Ver 0 19 Drive Properties Vendor No Drive Detected Nanve FAN Rew JungleFlasher 0 1 79 Beta 207 Session Started Sun Feb 20 15 14 40 2011 This is a 32 Bit process running on 4 x 32 bit CPUs Portios2 ays Driver Installed BPOortios2 ays Driver Started thanks Schtrom HSoOUSBR PRO detected Version 0 15 Found 17 I O Ports Notice the drive being identified Device XECUTER X360USB PRO Ver 0 19 SA hie Drive Properties Vendor PLDS cy va 83 keyfie Reserved OCAQAZD6100G93691000 DvDKey32 DVD Key Not Found Dummy from KeyDB Dummy from iXtreme portio ays Driver Started thanks Sehitren L HSG005R PRO detected Version 9 15 Found 12 I O Porta Found 0 Com Ports Found 11 windows drives C D Found 2 CD DVD drives F oO
17. Clicking Ok will fix Checksum for you Check Log for confirmation Setting Checksum Calculated Checksum OX6717S5B9 Actual Checksum OxO0000000 Flashing Sector 3003E000 Bead back compare completed Write Verified Flash Checksum Complete PROCEED TO FLASH iX FW Page 76 of 272 Things not going as expected Read the FAQ s Spoofing a Hitachi Drive to report as a Different Drive Revision Version NOTE _ SPOOFING DRIVES IS NOT ADVISED FOR XBOX LIVE USE If you wish to flash a Hitachi Drive using JungleFlasher and change the Drive String ID you should follow the procedure of 1 Restore to Stock if necessary 2 Flash iXtreme to the Drive 3 Auto Spoofing OR Manual Spoofing WARNING YOU MUST Flash iXtreme to the drive first before Auto manual Spoofing Manual Spoofing As usual you will need to first get the Drive into Mode B v79 unlocked and assigned a drive letter VIA No Drivers utilize PortlO The drive should as above be flashed with iXtreme to start Open JungleFlasher and proceed to the Hitachi GDR3120L tab Ensure correct Drive Revision is selected choose chosen transfer method Pre78 use Mode Select or RAM Upload v78 79 users can only use RAM Upload Then select Manual Spoof radio button Then press Manual Spoof Button Page 77 of 272 Things not going as expected Read the FAQ s Hitachi GDR3120 DVDKey 32 MTK Fash 32 Firmware Tool 32 bane Breye
18. Ok EB00 SATA Hash Chip Properties Vendor ID Primary Master Device D VIA VT6421 RAID Controller Narma SIZE Type sa see al Flashing Tasks Mame DVD ROM TS HS444 ira Device ID ATA Rese Fi Rev ms2Z aai Red Ease White DVD Key Vented P Phat Slum Found Com Ports Found if windows drives C D2 E Fz Hz Found 1 CD DVD drives Dz E i E Gs Hr He Key NOT in KeyDB Key is 84FS012RB2EEAOO17TFIAGSSCT1S199254 Fey has been tested and verified thanks Cdeva Drive is Samsung Page 26 of 272 Things not going as expected Read the FAQ s JungleFlasher will prompt you with instructions WTE Vendor Intro failed a 1 If you wish to resend the command you should click Yes Se Power off the drive and then back on within 1 second Press Escape to cancel TEJ Ge Click Yes the Running Log will display something similar to this Sending Vendor Intro to port OxCFoOoO Invalid Status Be sending Vendor Intro When seses Are appearing do as previously instructed by JungleFlasher Power off the drive then within 1 second power it back on The drive should be in Vendor Mode 0x70 now and return good flash chip properties you can check in the Running Log or Flash Chip Properties The drive should also show as Drive In Vendor Mode in the Drive Properties Port Properties UnLock UnLock Erase UnLock VO Address OhcE800 Type SATA Hash Chip Pro
19. Checking the box removes all non via sata ports this will stop you trying to Inquire DVDKey a drive on your non via SATA IDE ports Some chipsets don t like the Inquiry and will hang the system NOTE If you do not actually have any VIA ports JungleFlasher will itself uncheck the box and re enable the non VIA ports Include non IDE Ports This option allows you to scan port for contollers Classed as SCSIAdapter Some newer chipset use the Class rather than hdc aka IDE However this will also show actual SCSI contoller which are obviously of no use for flashing Please avoid this function unless you know what you are doing CLICK HERE TO RETURN Page 163 of 272 Things not going as expected Read the FAQ s LiteOn Serial Fixer If you are prompted that serial data is missing in an error similar to this Loading Dummy bin Dummy bin is missing some drive specific information If possible you should re extract your drive info again with the latest tools 1 JungleFlasher this tool DVDKey32 Tab 2 Dosflash 1 7 3 DVDKey32 0 7 You can rebuild the serial info if you have the original drive available Tick advanced view select the Serial sub tab in the Source tab Double click the serial data to launch the Serial Re build applet Do you wish to proceed anyway To fix proceed click Yes JungleFlasher will then ask if you wish to repair this data only possible if you have original source lit
20. Either method proceed as follows CLICK HERE TO CONTINUE Page 229 of 272 Things not going as expected Read the FAQ s WINBOND UNLOCKING Kamikaze Unlock WARNING THIS LOOKS EASY BUT IT CAN BE MESSED UP VERY VERY EASILY Using this method it is very easy to cut wrong wire or more than 1 wire destroying the chip and rendering it useless DO NOT START COMPLAINING IF YOU MESS THIS UP YOU HAVE BEEN WARNED This involves cutting into the IC with a Dremel whilst providing 3 3v with a 100 QO Capacitor in series at the Dremel tip and sending SPI unlock command at the same time The picture below show the complexity and point you are aiming to cut A A a c oy i iy uf Na T jai S a boa E _ 5 59 qf A Ip hy r y hig 1 a e uel GM IK A LINSE Please research as much on this method as possible before even considering using it It wasn t named Kamikaze Unlock Method for nothing Page 230 of 272 Things not going as expected Read the FAQ s You must first be as accurate as possible and mark the top of the chip with the correct point at which you are aiming to find the correct internal wire The picture below shows the location of the point DO NOT RELY ON THE WHITE TEXT ON THE CHIP IT VARIES IN POSITION FROM CHIP TO CHIP fem p MEDIATEK AAKER 1016 8LSL 8 pins down eE Set By 8 pins down from top B3078380
21. Playing 7S3Unlock Audio CD Fausing 7S3Unlock Audio CD after 500m5 Ejecting 73Unlock Audio CD Setting bit 3 Ox5BD Executing code in Ram Done mm 4 Then click Restore to Stock Page 74 of 272 Things not going as expected Read the FAQ s Hashing Options Dump Drive Manual Spoof i Auto Spoof Flash LT Plus Restore Firmware Set Checksum JungleFlasher will dump the Hacked Firmware from the drive check key location and compare to the corresponding Original Firmware in the Firmware Pack JungleFlasher will take control throughout this Found 3 CD DVD drives Playing 79Unlock Audio CD Fausing 73Unlock Audio CD after 750m5 Ejecting 3Unlock Audio CE Setting bit 3 b OXxSED Executing code in Pam Done Restoring Stock frw ta Hitachi OO7S O079 by Fam Upload Method wia WIN3 AFI After it has dumped and compared the firmware it will flash a test sector If this flashes ok it will report it has passed the Stability Test It should show as below Page 75 of 272 Things not going as expected Read the FAQ s Restore Firmware Do you wish to Continue lamas No Click Yes to proceed Again JungleFlasher will take control and flash the sectors required It will then check the checksum and prompt you to fix the Checksum Fix Checksum i Master Checksum ts still Set this ts normal for a modded drive E However Checksum should be set for a full restore
22. Postion Master XECUTER AS60USB PRO FAN Rew Reserved DVD Key Vented F Sending Vendor Intro to port x00000 Parallel flash found with Status 0x70 Sending Device ID request to port Oo20000 Manufacturer ID OxBF Device ID OxB6 Flash Name SST S55T395F020 Flash Size 262144 bytes activate iso 360 Tools Beng Samm Lite On Slim UnLock UnLock Erase UnLock f Fash Chip Properties Vendor ID OxBF Device ID OxB6 S5T SSTS9SF 020 262144 bytes Parallel flash with Status 0x70 ia ZDevice ID Outro ATA Reset Metical n a Phat Now CLICK HERE to proceed Page 17 of 272 Things not going as expected Read the FAQ s Oi Pee glia ged alee nT A Connect any SATA device to any PC or laptop via USB Unlocking the drive Before we can do anything to the drive it must be in Vendor Mode status 0x70 All Unlocking is taken place under the MTKFlash 32 tab Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 Source Inquiy identify Drive Seral aeons Firmware Tool 32 DVDKey 32 MTK Hash 32 Hitachi GDR3120 VO Port VIA ports Only F activates 360 Tools mE Include non IDE Ports Beng Sammy Lite On Port Properties Un Lock UnLock Erase VO Address OxE800 Type SATA Hash Chip Properties Channel Primary Postion Master VIA VT6421 RAID Controller DVD ROM TS HS434 Intro Device ID Outro ATA Reset ce We Vertied F This ia a 32 bit process running on 4 x 32 bit CPUs Port
23. The HDMI cable can be used instead but it MUST BE connected to the TV It keeps saying serial data missing OMG what do I do There is the option to rebuild the serial data from the serial numbers on the LiteOn case laser and PCB You can proceed and fill this data in IF YOU WISH Go HERE for instructions on how But remember if the data is missing from the drive do you really want to add it now If it s a brand new drive that s not been touched before then it may be advisable to leave it Page 265 of 272 Things not going as expected Read the FAQ s am trying to insert the unlock79 CD but press twice to close and it opens again This is fairly common in mode B some drives take 3 presses of eject button instead of 2 to get the drive to stay closed Every time I connect my drive to my VIA card my PC slows down or freezes Try readi NE the tutorial Remove your drivers for the card Instructions for how to do it properly are HERE OR in the less likely event that you have already correctly removed the drivers from the card and it still freezes try moving your card into another PCI slot You may be required to reinstall drivers then remove using same method as before just flashed my LiteOn placed in a game and it doesn t work OMG Before you panic try ejecting then closing and then reboot the console It s possible the tray wasn t fully closed when the console booted and 0800
24. Very importantly The original drives should all be locked so you need to ensure your replacement is the same Page 214 of 272 Things not going as expected Read the FAQ s Press the Spi Lock Status Button Currently displaying 0x00 Hashing Tasks Intro Device ID Outro ATA Reset XECUTER DG 16D45 UNLOCKED PCB XECUTER DG 16D45 PRO INSTALL KIT You should not attempt to lock a Phat Lite on If you do LO Erase will fail You will have no recourse other than to MRA the drive to Intro it Click OK to lock the drive This sends the command to lock the Spi just as MS did with 0272 drives on the 13599 dashboard update you should see this in the log Reading Bank 1 _ ____ Reading Bank 2 Reading Bank 3 __ _ _ Write verified OF Now note the button text has changed to 0x8C Page 215 of 272 Things not going as expected Read the FAQ s Now pressing the Spi Lock button again will fail to unlock it that is exactly the way MS expect an original drive to behave So Ensure you set the switch to WP 0 NOTE If you wish to reflash later set switch to WP 1 and pressing the Ox8C button will allow unlocking of the Spi Very Important Final Step Press the Outro ATA Reset Button Page 216 of 272 Things not going as expected Read the FAQ s _ FimwareTool 32 DVDKey32 MTK Fash 32 HitachiGDR3120 IRC Channel activate iso O Port
25. WILL OCCUR WHEN YOU ACHIEVE AN UNLOCKED STATUS OF 0x00 Dependent on your drive Vendor Manufacturer and the method you are attempting to unlock the drive choose the appropriate item from the table below UNLOCK PROCEDURE OF CHOICE Page 236 of 272 Things not going as expected Read the FAQ s MXIC WINBOND a Put switch to unlock on Start up your Dremel and begin SPUTNIK360 MX Switch grinding ensuring you have the 3 3v power supply with resistor in contact b Probe the VIA Sputnik360 MX with the Dremel tip Probe SLOWLY DOES IT c Probe The VIA Russian hack wire Good Luck PREVIOUSLY UNLOCKED DRIVES Carry out as above Simply touch same 3 3v 100 Q wire in hole Or drop a little rubbing alcohol or similar into hole At the point that Jungleflasher is able to successfully unlock the drive a DUAL TONE BEEP will be heard through your speakers and you should see this Serial flash found with Status OTZ Sending Device ID request to port 0x0000 n amr e ID OxEF Device ID 0x11 Flash Name Winbond NEX W25P20 NA25P20 Flash Size 62144 bytes once 0x00 has been achieved stop probing switch sputnik back to normal stop dremeling Now as always read the Original Firmware from the drive for safe keeping by pressing the Read button Page 237 of 272 Things not going as expected Read the FAQ s Rest sme Le Phat Slim as part of the read you wil
26. WU Address UWEHUD Type SATA Fash Chip Properties Channel Primary Vendor ID BF Postion Master Device ID OBE Device VIA VTE421 RAID Controller S57 SS7 39SF 020 262144 bytes Drive Properties Parallel fash with Status 0x70 Vendor Drive in Vendor Mode l Flashing Tasks intro Deviee ID Outro ATA Reset Then click Write Hash Chip Properties Vendor ID OxBF Device ID OxB Name oo SST SSF 020 Size 267144 bytes Type Parallel fash with Status x70 Hashing Tasks intro Dewice ID Outro ATAReset Read Bese Wie Write Command will erase and flash all 4 banks in turn then read back the flash and verify A series of 16 5 is JungleFlasher writing the 16 sectors of each bank 4 banks 0 1 2 3 After writing all 64 sectors signaled by 64 dots 16 dots across 4 banks JungleFlasher will verify what it wrote by reading back and comparing against the Target Buffer So what we really want to see is Write Verified OK Page 33 of 272 Things not going as expected Read the FAQ s Flash Verification Test Write verified OE Ok now you have flashed your Samsung Drive successfully Power off connect back to console and test Should you not get Write Verified OK Please ask for support in the JungleFlasher support channel found at irc efnet net channel JungleFlasher or click HERE If you have just Returned your drive to stock Firmware to allow
27. ify Drive Seral C JungleFlasher v0 1 74 Beta 138 New folder Lite OFW bin Firmware Tool 32 User Guide Vendor Model Rev Firmware Type DVD Key Wa Lite On DG 16025 9450C Stock 5B 49DEBF 39358221 OStG PLDS DG 16025 9345 7 Advanced View Sol i roe neta deny Eiu enia T Lite On firmware loaded to Source buffer nware m am SO Do you wish to auto load Lite On iXtreme Manual Booting Vendor Model Rev Firn p 5 seve to rile DSIG Reading Bank 3I Lite On Dump file saved to Lite OFW_bin Loading firmware trom butter Drive key n a JBT49DERBFS935822CO9S5S0FR44B2D146B Firmware Osig PLDS DG 1LeD2zs 3345 Firmware is Stock Eey added to database E Page 124 of 272 Things not going as expected Read the FAQ s Select Yes Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel Dive Serai C Jungleasher v0 1 4 Beta 138 New folders Lite 0 FW bin Vendor Model Rew Firmware Type DVD Key LiteOn DG 16D25 3450C Stock 9B749DEBF3935822C0950F B44B7D 1486 OSIG PLDS DG 16D25 9345 Advanced View C Jungle Hasher v0 1 4 Beta 138 Mfinnware ietty 1 1 93 4 bin Vendor Firmware Type DVD Key ma Lite On DG 16D25 9350C iXtreme LT 1 1 96 749DEBF3935822C0950F B44B2D 1486 OS IG PLDS DG 16D25 9345 FLEMWare is iktreme LI 1 1 Spoofing Target DVD Key copied to target Target is LI ID strings not copied to Target Serial da
28. with the eject status set Open JungleFlasher RETURN TO FLOWCHART AND CONTINUE CLICK HERE Page 91 of 272 Things not going as expected Read the FAQ s If you have LiteOn files from previous extractions methods Jungleflasher maintains backwards compatibility with files that have been extracted from earlier methods A FRESH extraction is recommended where possible but the option remains available For 74850C Files Key bin Inquiry bin Identify bin Read On For 83850C File unique bin key Click Here For 74850C firmware files Key bin Inquiry bin Identify bin simply go to DVDKey32 tab DVDKey 32 MTKAlash 32 HitachiGDR3120 IRC Channel And press the DummyGen button this will allow you to load each file into Jungleflasher which then creates a Dummy bin and loads it as source Ready for spoofing to target file and then to proceed onwards to erasing and writing ummyG 83 key file i CLICK TO PROCEED TO FIRMWARE MANIPULATION For 83850C v1 firmware files unique bin key Page 92 of 272 Things not going as expected Read the FAQ s Note If you wish to include calibration data from the 83850C v1 VIRGIN drives ONLY you must do a full dump using MRA style method CLICK HERE if you are not bothered continue Go to DVDKey32 tab FimwareTool 32 MTK Flash 32 HitachiGDR3120 IRC Channel Then press the Import83 key button this will allow you to load the
29. 00 006 ORS ee Once Jungleflasher has carried out its Unlock Procedure it will Automatically Grab the Key and all other required information from the drive and generate a Dummy bin You will be prompted to save the generated Dummy bin Page 254 of 272 Things not going as expected Read the FAQ s a _ a l Search My New we Save As PEN a t Computer DATA F BACKUPS myxbox My New Slim Slim Organize New folder J ie C Documents Name Date modified Type Size E Downloads LS _A S S a a R a E E a hii L Dummy bin 01 04 2011 23 49 Open 256 KB Music a EE EE ee Lite OFW bin 01 04 2011 19 49 Open 256 KE E Pictures Videos a Homegroup m iL Computer E Local Disk C cow OLD win 7 E cow DATA F cow Local Disk G coy New Volume H r LE l Mr Ly File name Durnmy bin Save as type Firmware Images bin Hide Folders Please do so having a saved copy of your Dummy bin will enable very easy updating at any point in the future Jungleflasher will then proceed to Load your newly generated Dummy bin as the Source File in FirmwareTool 32 Tab and ask if you wish to Auto Load the latest iXtreme Firmware Loading Source Lite On firmware loaded to Source buffer Do you wish te auto load Lite On iXtreme Select Yes You will be faced with this Page 255 of 272 Things not going as expected Read the
30. 1 74 Beta 138 finnwareiectty 1 1 934 bin Vendor Model Rew Firmware Type DVD Key ma LiteOn DG 16025 9850C iXtreme LT 1 1 96749DEEF393582A OSIG PLDS DG 16D25 9345 Firmware ia iktreme LI 1 1 Spoofing Target DVD Key copied to target Target is LI ID strings not copied to Target Serial data copied from Source to Target Calibration data copied from Source to Target E Loading MIF Flash source file 4 Just follow the standard write procedure So return to MTK Flash 32 tab NOW CLICK HERE Page 131 of 272 Things not going as expected Read the FAQ s Xecuter Probe IlI Method Connect the Xecuter probe II to the CK3 Pro Make sure the OP Switch is in the UP ON position and switch the mode to MRA Power on the CK3 pro you will see that the Xecuter probe Il BLUE POWER LED is on and the MRA GREEN NORMAL LED is on IF RED is LIT op switch is in WRONG position This shows that everything is functioning Now turn the CK3 Pro power OFF i lose cawal eS Aas 7 i ae aon Use a fiberglass scratch pen and clean up the 2 holes to make the Probes contact better Do this before cutting traces as you are less likely to stress the pad 101 while it s still connected to trace Cut traces on the PCB The cuts are small and not difficult to do Most people use a Xacto knife or a small dremel tool Make 2 small cuts where the yellow lines are Be very careful not to damage pad 101 once cut from
31. 1071 Stock OS G PLDS DG 16D45 Advanced View m Ensure the keys In source and target match before proceeding FAJFBeta Fimware LT Plus Vendor Model Rev Firmware Type Lite On DG 16045 1071 LT Plus 1 92 OS G PLDS DG 16D45 1071 DVD Key copied to target Key Sector copied from Source to Target Target is LI ID strings not copied to Target Drive ia Lite On Key found in FeyDB at record 20 N A Key 5 Fey has been tested and verified thanks Ceva E To write the prepared firmware to the drive you must place the drive into vendor mode once again Simply select MTK Flash 32 tab FmwareTool 32 MTK Fash 32 Hitachi GDAGT2O Now press Intro Device ID button You may or may not be asked to resend and power cycle Page 240 of 272 Things not going as expected Read the FAQ s MTK Vendor Intro failed e F you wish to resend the command you should click Yes F Power off the drive and then back on within 1 second Press Escape to cancel If so click YES then Cycle the power to drive The drive should appear in vendor mode once again Fimware Tool 32 MTK Fash 32 HitachiGDR3120 IRC Channel USB Only VIA ports Only 360 Tools Port Properties UnLock UnLock Erase UnLock IO Address Ox0000 Type USB d S Pr Vendor ID OxEF Postion TER Device ID 011 Device XECUTER 360USB PRO Mame Winbond NEA W25P20 NA2Z5P20 Ver 0 18 262144 bytes Drive Properti
32. 18 22 resistor is required and a switch such as dpdt double pole double throw using one side only A IN LOGIZO Alla fOCe gt j tlie ae as geg an AAN T nd go a S89 02 sis TS89 Pic 1 Page 119 of 272 Things not going as expected Read the FAQ s Eas 2 J CNOI TEAS A wE a i uE Ea Petaeeavesen STRIP Pic 2 The 2 trace locations in yellow must be cut With Jungleflasher running have the switch so it connects 3 3v line to the middle cable showing in picture 1 switch selected OFF Connect drive to PC s SATA and power drive select MTK Flash 32 tab Refresh drive properties so drive shows up Page 120 of 272 Things not going as expected Read the FAQ s FimnwareTool 32 DVDKey 32 MTK Hash 32 Hitachi GDR3120_ IRC Channel E200 hi iclude non IDE Ports ee Port Properties Unlock ized hase VO Address OxE800 Type SATA Hash Chip Properties Channel Primary Vendor ID Postion Master Device ID Device VIA VT6421 RAID Controller Name Size Type Hashing Tasks Intra Device ID Outro ATA Reset PE Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal GP Pal Pal Pal Pal Pal Pal SPB Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pil Pal Pal Pal SP Pal Pal Pal Pal SPN Pal Pal Pal Pal Pal P
33. 50 devices fl CR R RR If so reboot your PC Upon reboot verify VIA 6421 still has a Yellow Exclamation Mark in Device Manager You have successfully removed VIA drivers from your machine CLICK HERE TO RETURN TO STARTING POINT Page 160 of 272 Things not going as expected Read the FAQ s Manual Spoofing Hopefully the excellent key OSIG and serial spoofing of FirmwareTool32 should satisfy your needs but sometimes you need the manual method for whatever reason Located in FirmwareTool32 You need the firmware you wish to Spoof loaded into the target buffer NOTE You CANNOT SPOOF a Drive with LT LT Firmware as a DIFFERENT DRIVE Once loaded Click Manual Spoofing Open Target Firmware Manual Spoofing Save to File Changing Drive Keys Here you can manually type a Drive Key It must be in Hex Decimal format It should ONLY EVER really be used if you have your Drive Key in a text file or email If you have a key bin or Original Firmware you can save to key bin as shown above in the Save key to file section and use the Load key bin option Load key bin Just click load key bin and navigate to your key bin file select it then it will automatically load it into the Manual Spoof Window Changing Drives OSIG String ID Page 161 of 272 Things not going as expected Read the FAQ s Simply select the drive you want your new drive to report to the console as f
34. 86 BIN File 256 KE a ee L Dummy bin 14 03 2011 19 42 BIN File 256 KE Hit OFW bin 14 03 2011 1 47 BIN File 256 KB Identify bin 02 03 2011 12 28 BIN File 1 KB iiaii Inquiry bin 02 03 2011 12 28 BIN File 1 KB Key bin 02 03 2011 12 28 BIN File LKB nee SAM OFW bin 04 03 2011 21 32 BIN File 256 KB ik toink Serial bin 02 03 2011 12 28 BIN File LKB a OLD win 7 E ca DATA F cow Local Disk G ga Local Disk H Alo Lote a T File name Eman A in Save as type Firmware Images bin w Hide Folders i Then will automatically load the new firmware as source Page 154 of 272 Things not going as expected Read the FAQ s gaz JungleFlasher 0 1 80 Beta FimwareTool 32 DVDKey32 MTKAlash 32 Hitachi GDR3120 z oNN fan ic tre Rs ae ge we a E oy Xecuter Lite On DG 16025 74850C Presents The Hottest Product of OS IG PLDS DG 160D295 7485 ge Lite On firmware loaded to Source buffer i Do you wish to auto load Lite On iXtreme FA JFBeta SAM OFW bin Vendor Model Rev OSG TSSTcorpDVD ROM TS H343 Ams dey Loading firmware from butter Inquiry string found Identity string found Drive key OA0OS0 S5EDEBCIFASSTZE4FS4ACl1TEETSEFEDS4 Firmware Osig PLDS DE 16D25 7485 Firmware is Eey database updated Click Yes Page 155 of 272 Things not going as expected Read the FAQ s Fi
35. BO Ch BO Ge BB OO BO Ob AO OQR 2s es eee ae BESO 00 00 BO 08 d BO Gh BO 00 BO BO G8 80 s u ecs lessees ie Sending LOSsinto request to I O port OxESOO DO NOT POWER CYCLE THE DRIVE AT THIS STAGE DOING SO WILL RESULT IN A BAD FAILED DUMP Eject the drive so it is fully open OR manually move the tray fully open by hand Once tray is fully ejected click OK lf the dump appears to JungleFlasher that it was valid JungleFlasher will prompt you to save but look for this in the log with Your key Extracted drive key SBT459DERBRFS935822C0950FB44B2D145B Extracted drive key Passed Verification Page 114 of 272 Things not going as expected Read the FAQ s Jungleflasher will now prompt you to save Save as type Firmware Images bir s Save this file Note only save dummy bin as have dummy bin only enabled in the DVDKey32 Tab JungleFlasher may prompt you to save Inquiry bin Identify bin Serial bin and Key bin also if this isnt enabled Once saved JungleFlasher will load Dummy bin as Source Firmware in FirmwareTool32 and prompt you to auto load iXtreme from the firmware pack IF YOU INTEND TO UPDATE YOUR DASHBOARD TO 13146 STOP HERE AND UPDATE YOUR DASH THEN RETURN TO START OF TUTORIAL Firmware Tool 32 DVDKey 32 MTKAash 32 HitachiGDR2120 IRC Channel Source Drive Serial User Guide C JungleFlasher v0 1 74 Beta 138 New folder Dummy bin Save
36. Firnware LTPlus 934v 1 bin AU Manual Vendor Model Rev Firmware Type DVD Key nla Spoofing LiteOn DG 16D2S 93450C LT Plus 1 1 FSFEDOASCASACTCD715326097E6118E4 OS IG PLDS DG 16D25 9345 Firmware OGsig PLDS DE 1Lleb2s Firmware is LT Plua 1 1 4 2 Price Spocting Target DVD Key copied to target 59 95 Inquiry string copied to Target Identify string copied to Target Serial data copied from Source to Target i X360US8 PRO No Calibration date in source CLICK TO CONTINUE TO ERASE amp WRITE SECTION Page 193 of 272 Things not going as expected Read the FAQ s Badflash Recovery Using X360USB Pro of Samsung BenQ amp LiteOn Drives This method is to recover from those horrible moments when something has gone wrong during flashing erasing procedure You know the ones You forgotten to plug in AV cable and your Xbox powered off even though we told you not to use Xbox for power or your child has stood on a power cable and yanked it out the wall you forgot to pay the electricity and have been cut off So get it all up and running and now the drive doesn t show up on the port where it was previously eject does nothing don t even bother plugging it into console it s Bad Flashed With the X360USB Pro recovery works very simply 99 of the time sometimes Samsung can be a pain but usually it works in the end Unplug your X360USB Pro and power off the drive Close JungleFlasher Reopen Jun
37. Forts Port Properties Bas Lite On Erase VO Address OxE800 Type SATA Hash Chip Properties Channel Primary Vendor ID Postion Master Device ID Device VIA VT6421 RAID Controller Name Size Type Flashing Tasks Intra Device ID Outro ATA Reset vie PE Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pial Pal Pal Pial Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal SPB Pal Pial Pal Pal Pal Pal Pial Pal Pal Pal Pial Pal Pial Pal Pal Pal SP Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Pial Pal Pial Pial Pal Pal Session Started Sat May 22 15 54 36 2010 This is a 32 Bit process running on 4 x 32 bit CPUs Portio3sz2 sys Driver Installed Portiosz sys Driver Started thanks Schtrom Found 1 Com Ports Drive is Lite On Turn power to the drive off Operate switch to the R W position Press Intro Device ID button The following will appear Press Yes button Page 127 of 272 Things not going as expected Read the FAQ s MTK Vendor Intro failed i you wish to resend the command you should click Yes j l Power off the drive and then back on within 1 second Press Escape to cancel Then turn power to the drive ON again Note the LED will now be RED instead of GREEN z E3 e2 es r H Normal Xi y ii IF your drive has a WINBOND chipset then this will produce a screen showing furthe
38. Found 17 I O Ports Notice the drive being identified Device XECUTER X260U56 PRO Ver 0 19 Drive Key Key Drive Properties Vendor PLDS Status Filia Rew O45 Doe B kei Reserved 0CA0A2D610CG93691000 DVD Key Not Found 4 Dummy from Key DB Dummy from iXtreme BoOrtiosz sys Driver Started thanks Schtrom H3000S5R PRO detected Version 0 15 Found 12 I O Porta Found 0 Com Ports Found 11 windows drives C D Found 2 CD DVD drives F oO 2 H Ze E gt le Me N B Drive is Lite On Page 187 of 272 Things not going as expected Read the FAQ s Now press the PhatKey Button wow Include non IDE Ports Dummy bin Only v7 me ey ces om ia Compatible Sy gh Ce i with Xbox 360 ey PPB DVD drives Aap Liteon amp Postion Master Device XECUTER X2360USB PRO Ver 0 19 Hitachi SLIM PUDS DG 16D25 OCA0A2D610CG92691000 ea _ Dummer _83 key fle Not Found eyDE Dummy from iXtreme p riiotr aya i Tiii Pe nmi a Senecio HSocOUSR PRO detected Version 0 13 Found 12 I O Bortsa Found 0 Com Ports Found 11 windows drives C Dz E Fz H I Ez bz M Nz 0 Found 2 CD DVD drives F 0 A X360uUS Sola Drive is Lite On The following message will appear Ch To resend the command you should click Yes P Power off the drive Probe MPAOL Then power back on Press Escape to cancel Please read this carefully Then cli
39. Key Sector copied from Source to Target Inquiry string copied to Target Identity string copied to Target Serial date copied from Source to Target Now re select MT Flash 32 Tab FimwareTool 32 DVDKey 32 MTK Hash 32 You will notice in the log that the key has now been Verified against the drive Drive 15 Slim Lite on Key found in KeyDB at record 10 My New slim Key 15 F REMOVEDSS este eeeeeeeeas Key has been tested and verified thanks C4eva To be able to write the target firmware to the drive you must unlock the drive once more it was taken out of Vendor mode to Verify the Key Page 250 of 272 Things not going as expected Read the FAQ s Write Firmware to the Slim 9504 0272 Select Slim Unlock war JungleFlasher 0 1 81 Beta FimwareTool 32 DWDKey 32 MTK Hash 327 HitachiGDR3120_ IRC Channel l activate iso u Dy st VO Port USB Only ViAports Onh 260 Toole TR ETC ac hess TOU FALREN T liza Ine dude ner JO Ports Port Properties PA ag ae Ce Fash Chio Propert Send Unique Password to unlock Spi Fuck USE a ip Properties T a _Hnlock _Hnlock Channel Primary Vendor ID Postion Master Device ID Device XECUTER X360USB PRO Ware Ver 0 18 SIZE Type i Drive Properties iai Jungleflasher will unlock the drive and place it into Vendor Mode g JungleFlasher 0 1 81 Beta _FimwareTool 32 DVDKey32 MTKFash32 Hitachi GDR3120 activate isa Q US
40. Outro ATA Reset mil Notice the Outro in the log twice _ Success Spi Status Ooxect The 2nd one Outros fully and shows the drive type and the key verification This is now Properly Outro d ere THIS IS VITAL DONOT FORGET Drive ig Slim Lite On TO DO THIS Switch off power to drive Disconnect and test in your xbox YOU ARE FINISHED CLICK HERE TO RETURN TO START Page 218 of 272 Things not going as expected Read the FAQ s Using a Spare Unlocked 9504 PCB You should already have Slimkey d your drive and obtained a dummy bin This should be loaded as source and allowed to auto load iXtreme Firmware as target Firmware Tool 32 DVD Key 32 MTK Hash 32 Hitachi GDR3120 IRC Channel e Dive Seral FABACKUPS my xbox Black SUM 0225 Dummy bin Vendor Model Rev Firmware Type LiteOn OG 16D4S 0225 SlimKey Extract OS G PLDS DG 16D45 0225 Advanced View Spoof Source to Target FJ FBeta Finmware LT Plus 0225 y 1 5_bin Vendor Model Rev Firmware Type Lit On OG 16D4S 0225 LT Plus 1 9 OS IG PLDS DG 16D45 0225 Genuine LI plus w1 9 Drive key i o Firmware Osig PLDS DG 16D4s 0225 Firmware is LI Plus 1 9 Spoofing Target DVD Key copied to target Key Sector copied from Source to Target Target is LI ID strings not copied to Target m T Connect your spare 9504 PCB Select MTK Flash 32 Tab Press Slim UnLock Button Page 219 of 272
41. Page 58 of 272 Things not going as expected Read the FAQ s Hardware Update Wirard Please choose your search and installation options C Search for the best driver in these locations Use the check boxes below to limit or expand the default search which includes local paths and removable media The best driver found will be installed Chooge this option to elect the device driver fram alist Windows does hot guarantee that the driver you choose will be the best match for your hardware Click Have Disk Hardware Update Wirard Select the device diver you want to install for this hardware Select the manufacturer and model of your hardware device and then click Next fF you Aa have a disk that contains the driver you want to install click Have Disk Show compatible hardware Model Now click Browse and Navigate to JungleUSB inf can be downloaded from the usual places Select it and click Open Then click OK Page 59 of 272 Things not going as expected Read the FAQ s Hardware Wodate Wirard Select the device driver you want to install for this hardware Insert the manufacturer s installation disk and then Ck make sure that the corect drive is selected below Cancel Copy manubacturer s files fron Browse Now click next and the Driver should install Hardware Update Wirard Select the device driver you want to install for this hard
42. Sending Vendor Intro to port 0x000O Serial flash found with Status 0x72 Sending Device ID request to port O20000 Manufacturer ID OnEF Device ID 0x11 Flash Name Winbond NEX W25P20 NX25P20 Flash Size 262144 bytes Page 247 of 272 Things not going as expected Read the FAQ s Now the drive is in Vendor Mode simply click on the Read Button Flashing Tasks Intro Device ID Outro ATA Reset Te Gee Ge Phat 7 Slim This will produce some text in the log as it reads the original Firmware from the drive Sending Device ID request to port 0x0000 Manufacturer ID OxEF Device ID Ox1l Flash Name wWwinbond NEX wW25P20 NX25P20 Flash Size 262144 bytes Updating flash for on line dump Sending Sector Erase to Port Ox0000 Erasing Ox3E000 Writing Ox3E000 Reading Bank O 00 eee Reading Bank 1 0200008 Reading Bank 2 Reading Bank 3 02 ene ene Dumped in 4828ms Restoring sector Ox3E000 Sending Sector Erase to Port Ox0000 Erasing Ox3E000 Writing Ox3E000 Authorised Restore Ox3E000 verified Lite On Dump file saved to Lite OFW bin Loading firmware from buffer Drive key n a 772REMOVEDFeeeeeeeeeeeeeese Firmware Osig PLDS DG 16D45 9504 Firmware 15 stock Key added to database You will also be prompted to save the file you have just dumped It is recommended you do so Note This is your original firmware
43. UDUS all PotlO Kai_Schtrom tt 30 12 200 You Must JungleFlasher Firmware Pack vital for Hitachi Drives Place all the individual bin firmware files inside the firmware folder Download the latest iXtreme firmwares from usual sources place all the bin files into the firmware folder that is inside the JungleFlasher folder This allows for auto loading of firmware as well as being essential for operation during Hitachi manipulation flashing If you are using a VIA card remove the drivers It is advisable as the drivers tend to cause problems on a lot of drives but very noticeable with erased LiteOn causing the infamous Lite On VIA Freeze CLICK HERE TO FIND OUT HOW TO DO IT PROPERLY NOTE 0225 0401 1071 SLIM DRIVES DON T WORK WELL WITH VIA CHIPSET If using ANY Operating System other than Win XP x86 you must right click on Jungleflasher Icon and select Run as Administrator Page 7 of 272 Things not going as expected Read the FAQ s Name Date modified Type SIZE ae Documentation 26 02 2011 18 48 File folder i firmware 28 02 2011 18 48 File folder uh libusb 26 02 2011 18 48 File folder JungleFlasher exe m2 IO11 2319 Anolication 1 916 KB JungleFlasher Open ocument libusbO dll ation extens S PortlO Kai_Se Troubleshoot compatibility ocument Share with Add to archive JungleFlasher exe Properties F you have problems with this program and it worked corectly on an
44. USB Only F VIA ports Only C 360 Tools 0000 Include nontIDE Ports Benq Sammy Lite On slim UnLock UnLock Erase UnLock Port Properties VO Address 0x0000 Fash Chip Froperties Type USE TEER Channel Primary Device ID Fostion Master 7 Name Device XECUTER X360USE PRO eg Ver 0 18 si Type Drive Properties Vendor Mo Drive Detected Hashing Tasks flere Intro Device ID Outro ATA Reset FAW Rev Seco Read Erase Write DVD Key Verified F Phat io E Slim Reading Hank 22 gt _ tee ssa OE IMPORTANT After sending Outro ATA Reset lf this is all you see YOU MUST press Outro ATA Reset AGAIN Sending Spi Lock to Port 020000 Success Spi Status XBT Sending Vendor Outro to port 020000 If you do NOT get a Key tested and Verified message in log Press Outro ATA Reset Button AGAIN Page 217 of 272 Things not going as expected Read the FAQ s MTK Fash 32 Hitachi GDR3120 activats i30 cee o a l Hl VO Port USB Only 7 VI ports Only oa ie 0000 us Include non DE Ports Sammy LiteOn Sim UnLock UnLock Erase UnLock Port Properties win A ee i Ce Flash Chip Properties Type USB Vendor ID ee Aree Device ID Postion Master Name Device AECUTER A360USB PRO Size Ver 0 18 af Type Drive Properties Vendor PLDS Hashing Tasks be Nae Rea Cwe Phat m Slim Name DG 16045 Intro Device ID
45. bytes IRC Channel FimwareTool 32 DVDKey 32 MTK Fash 32 Hitachi GDR3120 Source Inquiry Identify Drive Serial FAJFBeta Fimware Origina T5 H943 MS2 bin Vendor Model Rev Firmware Type samsung TS Ho43A M528 stock Save Drive Key OSIG TSSTcorpDVD ROM TS H343Ams28 User Guide Qpen Target Firm Manual Spooting Save to File FJ F Beta Finnware LT sammy v 1 9 bin Vendor Model Rev Firmware Type Samsung TS H943A MS28 LT vi 9 OSG TSsTcorpDVD ROM TS H343Ams28 To save a firmware file based on what s currently in Target Buffer click Save to File Page 31 of 272 Things not going as expected Read the FAQ s Open Target FJ F Beta Finnware L T sammy v1 3 bin Vendor Model Rev Firmware Type DVD Key 4044 Samsung TS H3434 MS28 LT vig 64F9012B2EEAQ017F 146350713199254 Save to File JEN 0Sa TSsTcorpDVD ROM TS H3434ms28 JungleFlasher will ask you where to save the hacked firmware and what you want to name it and then you can proceed to write the firmware to the drive PROCEED Page 32 of 272 Things not going as expected Read the FAQ s Writing Firmware to the drive To write the firmware as long as drive is still unlocked Vendor Mode we just click MTKFlash 32 tab FimnwareTool 32 DVDKey 32 MTK Fash 32 Hitachi GDA3120 Source inguiry Identity Drive Seral User Guide Verfify you have good flash chip properties still
46. file into Jungleflasher which then creates a Dummy bin and loads it as source Ready for spoofing to target file and then to proceed onwards to erasing and writing CLICK TO PROCEED TO FIRMWARE MANIPULATION Page 93 of 272 Things not going as expected Read the FAQ s Obtaining Key Inquiry Identify and Dummy bin from iXtreme flashed Lite On Drives DOES NOT WORK ON iXtreme LT LiteOn drives of either FW version that have already been flashed with iXtreme can be easily dumped using only SATA connection no requirement for probe or TTL convertor this is a function of the iXtreme firmware NOT a workaround for dumping stock drives For this method we still need to power on the drive with the half open tray FOR INSTRUCTIONS ON HALF OPEN TRAY CLICK HERE Now with the eject status set Open JungleFlasher you will be presented with the Welcome Screen After a few seconds the main window will load Now click the DVDKey32 Tab MTK Hash 32 Hitachi GDR3120 IRC Channel Select Correct I O port check for drive properties in the Drive Properties section it should report as PLDS DG 16D2S unless spoofed you can choose to dump dummy bin only as opposed to all 5 files Key Inquiry Identify Serial and dummy bin as dummy bin contains all the information of the other 4 files Page 94 of 272 Things not going as expected Read the FAQ s MTK Hash 32 HitachiGDR3120 IRC Channel sje ee VIA
47. it will only create new firmware for Lite ons but it will find the correct key of other types of drive if you have it in the database if you have a lot of keys in DB it may take some time You no longer have the Dummy bin or OFW bin but the drive is showing as verified in KeyDB Connect the drive and refresh the port ensure it shows up as having a verified key Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel activate is0 USB Only W VIA ports Only 360 Tools Cc D000 Include non IDE Ports Port Properties VO Address Ox0000 Type Channel Primary Postion Master Device XECUTER AS60USB PRO Ver 0 18 PLDS DG 16D25 kirosi DeviceiD 7485 acanaosocaeazsra Verified F Phat Slim XECUTER XS60USB PRO attached PortlIO unloaded Drive is Lite On_ Key found in FeyDB at record 1 JFBeta Key ia SS5EDSCLFASSTZE4FS4AC TEETSCEFEDS4 Key has been tested and verified thanks Cdeva F 4 Click Dummy from KeyDB button Page 153 of 272 Things not going as expected Read the FAQ s Then it will ask you to save the new Firmware it has created from the Key DB and querying the drive itself the Save As lantia m d Ceo gt Computer DATA F JFBeta gt bid Senta R Organize New folder Hez 71 E Documents Name 5 Date modified Type Size ial re iD Firmware 04 03 2011 20 26 File folder 2 ee BENQ OFW bin 04 03 2011 21
48. log window PhatKey extraction failed Drive is Lite On Drive is Lite On Sending Vendor Intro to port 020000 Status Ox51 Re gsending Vendor Intro Serial flash found with Status Ox52 As soon as you see status 0x52 appear lift the probe off from the point Within a few seconds this should appear eS 7 Extract complete To continue you must Ensure probe is removed Power Off Drive Wait 3 seconds Power On then press OF Again read it carefully note the 5 sec timing not required Switch 3 3v switch OFF then ON again Then Press OK IF all has gone well You will see the save box appear to save your Dummy bin Page 183 of 272 Things not going as expected Read the FAQ s Click SAVE Gv aaa t DATA F JFBeta Search JF Sen E E O o Organize New folder Documents Name Date modified Type ig Downloads al Music E Pictures Pe Videos ue Firmware 04 03 2011 20 26 File folder T BENQ OFW bin 04 03 2011 21 46 BIN File C Dummy bin 02 03 2011 12 28 BIN File C Hit OFW bin 30 01 2011 13 48 BIN File C Identify bin 02 03 2011 1478 BIN Fite C Inquiry bin 02 03 2011 12 78 BIN File C Key bin 02 03 2011 12 28 BIN File sompen d saan 04 03 2011 21 32 BIN File EERE ES C Serial bin 02 03 2011 12 28 BIN File ca OLD win 7 EB cay DATA F a Local Disk G a Homegroup Hide Folders L e If this is what you wish to do click YES
49. manually do the process again power cycle the Drive then send a MTK Intro to the drive Page 264 of 272 Things not going as expected Read the FAQ s JungleFlasher Will not see the Drive No Drive Detected as it is actually now erased get Drive Rev Undetermined Aborting When trying to dump my Hitachi There are two main causes for this the main one being a user trying to dump the drive using WinAPI but not having the correct drive selected in the Top Right drop down box Try closing JungleFlasher scanning in Device Manager and reopening JungleFlasher The second is caused by trying to dump a v79 that hasn t been 79unlocked I ve set Mode B but my drive won t show in the drop down box If using Windows Vista or Windows 7 please close JungleFlasher scan in Device Manager and re open JungleFlasher if this doesn t help please leave your drive tray Ejected and reboot your PC with drive still powered and in Mode B If the problem persists please feel free to join the support channel and seek further assistance HERE If you are using PortlO option in Hitachi tab It s not meant to My Xbox keeps turning itself off while I m trying to flash my drive If you are using the Xbox to power your drive during flashing you MUST have the AV cable plugged into the Xbox other end does NOT need to be connected to TV otherwise it will power down after a few minutes disaster if you are flashing a Hitachi
50. method It is awkward and fiddly If you don t feel confident then pay someone to do the job for you CLICK HERE TO CONTINUE Page 233 of 272 Things not going as expected Read the FAQ s Locked Slim LiteOn Drives First You should have prepared your Winbond or MXIC unlock method in advance Then open Jungleflasher select MTK Flash 32 Tab Select the correct I O port Power on your drive click I O Port refresh button and ensure drive properties show up Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel activate iso USB Only VIA ports Onbhy Ox0000 Include non IDE Ports Port Properties VO Address Ox0000 Type USB Channel Primary Postion Master Device XECUTER X360USB PRO Ver 0 18 Drive Properties Vendor PLDS Name DG 16045 Intra Device ID Qutro ATA Reset FAW Rew 0225 Reserved ADAD DVD Key Verified F hat H Slim Found 0 Com Ports Found 14 windows drives C D E F Hz I J K Lz M Nz Oz PB Found CD DVD drives D O Drive is Slim Lite n aa Key found in KFeyDB at record 13 Black SLIM 0225 Key is Key has been tested and verified thanks C4eva Now Press Intro Device ID button Page 234 of 272 Things not going as expected Read the FAQ s Once in vendor mode Press the Spi Status Button currently showing Ox8C FimwareTool 32 DVDKey32 MTK Hash 32 activate iso USB Onby VIA ports Only Include non
51. mode was activated ix 1 6 1 61 only causing an error In what sequence should switch things on connect things Generally apart from the occasional stubborn Hitachi drive you should boot the pc then connect the SATA then power on the drive by which ever method you re using Xbox or kit then open JungleFlasher My VIA 6421 Raid Controller is showing up as a VIA 3249 controller You installed the wrong drivers for the card Go to HERE download the correct drivers install those the drive will now show as VIA 6421 now reboot Now return to HERE and remove them as previously instructed didn t save my OFW I lost my key what can I do Do not fear Jungleflasher updates its key database on every dump carried out box in firmwaretool 32 tab Select Open Key d b Page 266 of 272 Things not going as expected Read the FAQ s FimwareTool 32 DVDKey 32 MTK Flash 32 HitachiGDR3120 IRC Channel bese coral tes ave n Y e Lr T ar Key Vendor Model Rev Firmware Type DVD Key ss During spoofing the firmware I got No Calibration data in source With the release of Jungleflasher 1 70 a section of data is now copied over starting from hex address 3C000 this data has been talked about as calibration data At the time of writing the data is considered to be manufacturing test data and is unused by the drive but for completeness is now copied over to your iXtreme firmware T
52. ports Only Com Port USB Mractor Switch include non IDE Ports COM7 Rea bin Ordy Fort Froperties Com Port Properties VO Address ho A000 Port COM Type 5 Type Xecuter CKS Pro Rev D Primary Name Prolific USB to Serial Comm Port Master Status Ready rank ee Channel PCI IDE Drive Key Key Status Pal Fal Pal Fial Fal Fal Pal Pial Fal Pal Pal Pial Pal Fal Pal Pial Fal Pal Pial Fial Pal Fal Pal Pial Fal Pal Pial Pial Pal Pal Pal ee F JungleFlasher 0 1 74 Beta 138 Session Started Sat May 2 14 51 46 2010 This ia a 32 Bit process running on 4 x 32 bit CPUs Portios s sys Driver Installed Portio3s sys Driver Started thanks Schtrom Found Com Ports Drive is Lite On_ Then simply click Dummy from iXtreme Phat Key LOS3into ki Dummy trom KeyDB Dummy from iAtreme Save as prompted Filename Dummy bin Save as type Firmware Images bin Hide Folders CONTINUE WITH FIRMWARE SPOOF CLICK HERE Page 95 of 272 Things not going as expected Read the FAQ s Extracting Key and drive info from 74850C LiteOn Note If you wish to include calibration data from the 74850C VIRGIN drives ONLY you must do a full dump using MRA style method CLICK HERE if you are not bothered continue You need to power on the drive with Eject status closed but Tray Half Open FOR INSTRUCTIONS ON HALF OPEN TRAY CLICK HERE With the correct tray status Open JungleFlasher As you ar
53. still cannot figure out your problem please feel free to use the chat function and get some live support with your problem Please DO NOT expect us to help you if you have not even tried to research your problem There is a huge amount of information in this tutorial and the vast majority of methods are covered for almost all situations NOTE If requesting advice help in IRC Channel PLEASE give a good description of your setup OS Drive FW SATA chipset Difficulty you re experiencing etc DO NOT give a single line of info and expect people to magically know what your problem is IRC Channel DVDKey 32 MTK Fash 32 Hitachi GDR3120_ Firmware Tool 32 ee ee eee a EY JungleF lashergnet g Welcome to Jungle Flasher support Please read the Tutorial all the answers are in there Or have a search on ow forum Page 6 of 272 Things not going as expected Read the FAQ s BEFORE USING JUNGLEFLASHER You Must Have net framework installed net framework 2 0 or later for Windows XP machines net framework 3 5 SP1 on Windows Vista Machines net framework is built into Windows 7 easy life IF you get a libUSBO dIl error Copy libUSBO diIl file from its folder into the same directory as JungleFlasher exe Pa Name Date modified Dype Size di Documentation 28 02 24 di firmware 2800272 di libusb j 28 02 2 ate JungleFlasher exe JungleFlasher tt p tea TE Lim Tl 3
54. to Target Serial data copied from Source to Target No Calibration data in source Then if you wish you can click Save to File button to save a copy of your hacked Firmware CLICK HERE TO CONTINUE TO ERASE WRITE SECTION Page 116 of 272 Things not going as expected Read the FAQ s Dumping OFW from LiteOn for 83850C v2 amp 93450C amp All LiteOn flashed with iXtreme LT firmware unless you previously dumped this drive and have the details in the Key database When this hack was first released there was several differing methods appeared varying mainly in where to connect certain wires and which traces to cut After testing several of them we have listed the popular methods the original MRA Hack The Xecuter Probe Il The Xecuter LT Switch Vampire amp Rebuild Board and Vampire w o Rebuild Board NOTE With the release of Jungleflasher 1 70 a section of data is now copied over starting from hex address 3C000 this data has been talked about as calibration data At the time of writing this it s thought to contain data from manufacture tests but is not used However for completeness is now copied over to your iXtreme firmware This is shown in the running log at time of spoofing the firmware like Spoofing Target DVD Key copied to target Inquiry string copied to Target Identify string copied to Target Serial data copied from Source to Target Calibration data copied from Source to Target A full dump of your VIRGI
55. you started Is the Probe Spear connected properly have the correct lights Double check these connections Using a home made Well unfortunately we can t troubleshoot this for you if you choose the home made method it s your responsibility Never rule out the possibility of one of the cables being faulty If you have tried all of the other checks then try using alternative cables My Maximus power adapter doesn t eject This is acommon one and deceives every user of the kit You must keep eject pushed in for the drive to eject Letting go will close the tray back over don t know what SATA Chipset I have Download this program CPU Z HERE and install it Once installed run the application click on the Mainboard Tab Your SATA Chipset is listed under Chipset got an x y when reading writing verifying my drive One or a couple of instances is fine JungleFlasher retries and as long as you have the 16 dots and Write Verified OK It s fine It fails during read write It has been discovered that some CD DVD ROMS in your PC can cause issues with Jungleflasher when using onboard SATA Disable it in in Hitachi Tab by right clicking on it in drive list and selecting disable Page 263 of 272 Things not going as expected Read the FAQ s Hitachi GDR3120 MTE Rash 32 IRC Channel Name 32 4017 aa Hashing Options Fin Rev 3 Dump Drive io Reserved Manual Spoof C Auto Spoof
56. 00 from top ee Eag pins in from right siili Uninstalled chip shown for clarity Measure 5 pins in from the right on the top and bottom row of pins mark the line with a very thin bladed scalpel and steel rule Then measure 8 pins down from the top on the left and right side pins mark the line Page 231 of 272 Things not going as expected Read the FAQ s Where these lines cross is the point you are aiming to cut There are several methods to achieve the cut Dremel soldering iron knife The Dremel appears to be the most accurate providing you have a steady hand and good eye again DO NOT ATTEMPT UNLESS YOU ARE SURE YOU UNDERSTAND THE RISKS Dremel Method The method is to slowly perform the grinding whilst contacting the cutting tip with a 3 3v supply with a 100 resistor in the line keep in contact at all times during cutting Page 232 of 272 Things not going as expected Read the FAQ s 3 3v can be obtained from the PCB itself or from your 3 3V cable in drive power cable the cable the switch is on on the probe 3 cable a 3 3V source on PCB The important thing is accuracy and very light pressure Cutting slowly to ensure you don t overcut and destroy other wires in the chip Listen for the BEEP and keep a check on the screen status Dremel tip used here is 0 8mm cutting head TEAM JUNGLE and Jungleflasher author take no responsibility if you screw your drive using this
57. 000 Fal Use Port IO Vendor HL DT ST Usmodee Name DVD ROM GDR3120L Flashing Options Sector List Dump Drive FAW Rev 0059 0 46 47 E Reserved OBMAB 06 01 24 i Manual Spoof 58 7 59 Flash treme Tener ato mais Classic Auto Spoof 79 Unlock automatic Mode Select Insert the 79 Unlock Audio CD Free Flash Ram Upload Play 79 Unlock Read to Source Ram Poke This ia a 32 bit process running on 4 x 32 bit CPUs Portio3se says Driver Installed Portios sys Driver Started thanks Schtrom Found 0 Com Ports Drive is Hitachi Drive key FEFSeDOASCSSACTCDTSS5F90092E6118E4 Key NOT in KeyDB Eey is FaFSaeDOASCSSACTCDTGSF96092E6118E4 Fey has been tested and verified thanks C4deva WW 4 The drive needs to inquire on I O port for Raw ModeB Commands to work this applies to spoofed drives also Once it inquires Click send ModeB you will be presented with the following message do as it states as the ModeB built in on some Connectivity Kits can cause issues Send Mode B Command m i You are about to send the mode B command to your Hitachi Drive P For Best results open drive tray now and power off the drive Then press OF to continue When dots show power on the drive Drive should respond to normal windows Inquiry and close Wait 15 seconds for Windows to recognise drive When done it s important to confirm Mode B with double press to open and close
58. 12 I O Ports Found 0 Com Porta Found 14 windows drives C D E Fz Hr I J E BEz M N FP Found 2 CD DVD drives D 0 PortIO unloaded Drive is Slim Lite n__ You will be faced with Jungleflasher asking if you want to send Unlock to slim click YES Page 253 of 272 Things not going as expected Read the FAQ s FimwareTool 32 DVDKey32 MTKAash 32 HitachiGDR3120 IRC Channe HoOo0 gola gozo 0030 oggi o050 oged OoO7O INO Port USB Only VIA ports Only E Com Port Additional functions 7 0000 a Include non DE Ports V COMS Pa Dummy bin Only E Port Properties Com Port Properties WO Address Ox 0000 Z Fort COMS Type USE Type Xecuter CKSCP CK3 Channel Primary Name XECUTER CK3CP USE Controller Postion Master Device XECUTER X360USB PH Ver 0 17 Drive Properties Vendor PLDS Name DG 16D45 FAW Rev S504 Reserved ADAD e SS DVD Key Not Found Dummy from KeyQe Dummy trom iXtreme 05 80 00 32 5B 00 00 00 50 4C 44 53 20 20 20 20 _ 2 PLDS 44 47 ZD 31 36 44 34 53 20 20 20 20 20 20 20 20 DG 10D45 39 35 30 34 00 00 00 00 00 00 00 00 g0 00 00 00 S504 _ 00 00 60 00 41 30 41 320 60 00 00 00 60 00 0606 00 ___ _AODAOQ_ _____ fo 020 00 00 00 00 06 g 80 00 j0 80 OO D0 O0 J esse es cccscca ss a 00 00 00 00 00 00 00 00 OC OO t 00 00 00 T se siaaa 44 37 31 31 43 47 30 31 37 39 30 32 30 30 33 52 D711CE017902003R 44 00
59. 144 bytes Dive Propatics Type Serial flash with status 0x73 ive Vendor Drive in Vendor Mode aT Name Intro Device ID Outro ATA Reset FAN Rew zesanei pad CE Cwe DWD Key Not Found Phat Slim Sending Vendor Intro to port O20000 Serial flash found with Status 0x73 Sending Device ID request to port on0000 Manufacturer ID Oxtz Device ID 0x11 Flash Name MAIC M 25L2005 Flash Size 262144 bytes foo L 4 NOTE Please ignore the DVD Key Not Found message in drive properties BenQ cannot automatically verify key Once drive is in Vendor Mode you can proceed with Reading the Drives Firmware CLICK HERE TO PROCEED Page 37 of 272 Things not going as expected Read the FAQ s BenQ UnLock Stock iXtreme 1 1 gt 1 41 Xtreme iXtreme LT Firmware s Only Please note BenQ Un Lock WILL NOT work on drives that have iXtreme 1 5 gt 1 61 firmware on them please use VCC Trick or Half Open Tray Connect your BenQ drive up via SATA to your PC power on and run JungleFlasher After a few seconds you will be taken to the main application Click the MTKFlash32 tab FimwareTool 32 DVDKey 32 Hitachi GDR3120 Source lncpuiry Identity Drive Serial User Guide Then select correct I O Port by verifying PBDS VAD6038 or SATA DVD ROM shows in the Drive Properties and click BenQ UnLock ga JungleFlasher 0 1 79 Beta TK Flash 32 Hitachi GD
60. 30003000 Flashing Sector 30006000 Flashing Sector 30004000 Once finished JungleFlasher will verify the firmware written to the drive and report back Page 72 of 272 Things not going as expected Read the FAQ s Flashin UnLocke Dumping a Dem aces ee ee ye EEREN indore nee Drive 15 rev 0059 Loading firmware from buffer Inquiry string found Identify string found Drive key Ox4FO00 14634C0258B0AB2B2A4B9DC 3B0CB62D02 Firmware 0sig HL DT STDVD ROM GDR3120L0059 Firmware 15 stock Key database updated Hacked T w to Hitachi 0058 0059 by Ram Upload Method via WIN32 API Drive 15 Stock rev 0059 Auto Loading firmware Tile F JFBeta Firmware LTPlus 59 1 1 bin MD5 hash efc86 bar cdbt7 amp 295d4d03 cc32dt st see nana string found Identify string found Drive key Ox4FO0O 00000000000000000000000000000000 Firmware osig HL DT STDYD ROM GDR3120L0059 Firmware is LT Plus 1 1 11 sector Differences Found Flash Stability Test Flashing Sector 9003F000 Dumping sector 9003F000 Read back amp compare completed Repairing Test Sector Flashing Done Flashing Flashing Flashing Flashing Flashing Flashing Flashing Flashing Flashing Flashing Flashing Sector Sector Sector Sector Sector sector Sector Sector Sector Sector Sector sector 9003F000 9003E000 90003000 90005000 90006000 90004000 9001C000 9002 7000 9002E000 90033000 90034000 90035000 Flashing stable
61. 5 Note the keys Now Match CLICK HERE TO CONTINUE Page 259 of 272 Things not going as expected Read the FAQ s Common problems and Frequently Asked Questions JungleFlasher tells me Cant install portio32 64 sys driver If you are running any OS other than XP x86 then you must run the program as Administrator see here for explanation how JungleFlasher tells me No Com ports found during enumeration The LiteOn DG 16D2S 74850c Drive requires the utilization of an RS232 Serial Adapter to obtain the DVD Drives key Unless you are using a Probe 3 PMT Unless you are doing one of these drives simply ignore it and proceed If you no longer use COM ports With PMT there is no need then you can stop Jungleflasher from Enumerating COM ports by setting DoCom in registry see advanced user functions to the value 0 ay Registry Editor _ _ _ File Edit View Favorites Help a jE Computer Name Type Data gt HKEY_CLASSES_ROOT ab Default REG SZ value not set T HKEY_CURRENT_USER ee REG lt 7 t aai 28 COMPort REG SZ 4 2 X d Console St Delay32 REG SZ Le Control Panel Socom a a aw Environment DoDevID REG_SZ 0 ts p EUDC DoDrives REG SZ 1 Identities ab Dold REG SZ 1 t J JF_KeyDB a DoUSBOnly REG SF 0 2 4 JungleFlasher HitAPi REG SF 1 op Keyboard Layout ab HitRev REG SZ 47 ial Network ab HitTran REG SZ 1 When using X360USB Pro
62. 7 Reserved OBMAB O6 05 25 Manual Spoof 58 5907 Auto Spoof Hash LT Plus Oper c e pen ose Transfer Method Restore Fimware 79 Unlock ea Set Checksum C automatic v Mode Select Insert the 79 Unlock Audio CD a aaa Flash Ram Upload ia Play 79 Unlock Fedi Sauce to Source Send Mode B a open just close it then click 79 unlock Hitachi GDR31240 Use Win API a Hashing Options Sector List 36 CE OVO CD DVD No Hitachi drives were found Scanning for hardware changes Found drive Found drive Found drive Found drive Found drive re a ia oe D T iml i om F G Hard Drive Hard Drive EEEN gt CD DVD Hitachi found Ch OVD m 4 JungleFlasher should display a log similar to the one below Page 66 of 272 Things not going as expected Read the FAQ s Found drive E Found drive Fz Found drive Gr Playing 73Unlock Pausing 7SUnlock CD DVD CD DVD Hitachi found CD DVD Audio CD Audio CD after 500m5 Ejecting 753Unlock Audio CD Setting bit 3 OxS5HD Executing code in Ram Done The Drive is now unlocked UNLOCKED PROCEED NOW TREAT IT AS PER A 78 CONTINUE FROM POINT IN FLOWCHART YOU WERE AT CLICK HERE Page 67 of 272 Things not going as expected Read the FAQ s V78 V79 Now onto dumping the drive With the V79 unlocked or the v78 in ModeB We can now dump the drive usin
63. 86 08 00 OH Be 00 00 0E 00 BE H0 O88 BO 00 A0 O80 _22_ ss pea ees 2040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 _ __ _ GASO BO 00 BO OF H0 OA BO FA 80 CE 88 C8 BO Ob 86 OA _ s s ies_ eue m Sending LOB3info request to I O port OxESsOO d Here you must set the tray to Half Open but half closed status FOR INSTRUCTIONS ON HALF OPEN TRAY CLICK HERE Please ensure you have the drive fresh power cycled after setting Half Open Tray this is essential Then click OK JungleFlasher will then send the LO83info command to the drive you will see the following in the Running Log Page 113 of 272 Things not going as expected Read the FAQ s FimmwareTool 32 DVDKey 32 MTKAlash32 HitachiGDR3120 IRC Channel WO Port VIA ports Only Com Port USB Atractor Switch E800 ke include non tDE Ports V COM7 x Dummy bin Only V Port Properties Com Port Properties VO Address OxE800 Port COM Type SATA Type ecuter CKS Pro Rev D Channel Primary Name Prolific USB to Senal Comm Port Postion Master LO83info Device VIA VT64271 RAID Contra PLDS Name DG 16D25 FAN Rev 8385 Reserved OCADAZD608C G97 1800 0010 44 47 2D 31 36 44 32 53 20 20 20 20 20 20 20 20 DE 1eD25 2020 36 35 30 35 30 43 20 32 00 00 00 O00 BS050C 2_____ ae 2030 00 dA Be Of A 88 BE A BE 00 BG BE G8 BO A sos tsetse eke H040 BO GA BO OF BO Gb
64. B Only V VIA ports Only 360 Tools ap ToT CN Mia es TTL 0000 ha include nondDE Ports Em Bisa Gas com eae Slim Port Properties 7 VO Address O00000 cer ie Hash Chip Properties Type USE Vendor ID OxEF Device ID O11 XECUTER X360US8 PRO Winbond NEX W 5P2A0 NX25P20 Ver 0 18 Size 262144 bytes five Popeia Serial flash with status 0x7 Vendor Drive in Vendor Mode Flashing Tasks Name Intro Device ID Outra ATA Reset FAN Rev Reserved Read Base Write DVD Key Ventied f Phat i Slim Sending Vendor Intro to port x0000 Serial flash found with Status Ox Sending Device ID request to port O20000 Manufacturer ID OxEF Device ID 0x11 r r EN rir RI Flash Name Winbond NEX W25R20 NA25P20 X360USS80 Flash Size 262144 bytes Notice that the drive shows Verified this time Page 251 of 272 Things not going as expected Read the FAQ s Now the drive is in Vendor Mode select the Write Button Flashing Tasks serial flash found with status Oxy sending Dewice ID request to port Ox0000 Manufacturer ID OxEF Dewice ID Oxil Flash Name wWwinbond NExX w25P20 NX25P20 Flash size 262144 bytes Getting Status from port 0x0000 SP1 flash found with Status Oxf sending Chip Erase to Port Ox0000 Erasing writing target buffer to flash writing Bank OF ween eee ee ee Writing Bank 1 www writing Bank 22 2 2 2 eee ee eee Writing Bank 3 2 ee ee ee
65. Check the Running Log and you will see it reading the firmware from the drive Beading Bank O Beading Bank l Beading Bank Z ii Once the firmware has been read JungleFlasher will prompt you to save the firmware Name it what you wish and select directory path of your choice and click Save gag Save As me OU es JungleFlasher w0 1 74 Bet New folder 4 jeg SSS 2 a Organize New folder Documents Name Date modified fal Downloads l sdt a a Musi _ SAM OFW bin 22 05 2010 8 28 AM Music E Pictures E Videos wy Homegroup amp Win 7086 C3 ga DATA D ca Local Disk E coy Backup H cay Win 7 64 E Computer File name BENQ OFW bin Once saved JungleFlasher will then prompt you asking if you would like to auto load iXtreme for BenQ Drives You must have installed the JungleFlasher Firmware Pack into the same directory as JungleFlasher exe if you wish to benefit from this feature Page 45 of 272 Things not going as expected Read the FAQ s Loading Source Beng firmware loaded to Source buffer ME Do you wish to auto load Beng iXtreme CO Click Yes to auto load iXtreme from the firmware pack for BenQ into the Target Buffer JungleFlasher will also load your previously dumped BenQ OFW bin as Source Firmware Then copy data from Source to Target automatically Just verify Source data reports as it sh
66. Controller Name Size Type TSST corp DVD ROM TS H9434 Flashing Tasks E Ouro ATA Resa Verified F This ia a 32 bit process running on 4 x 32 bit CPUs POortiosz sys Driver Installed Portio3sz sys Driver Started thanks Schtrom Found 0 Com Porta Drive is Samsung Key NOT in KeyDe Eey is 7131840BC423EA16F 2CC9097F166433 Eey has been tested and verified thanks C4eva m If Activate iso worked correctly you will get good flash chip properties 0x70 and drive will appear in Vendor Mode in Drive Properties Port Properties iunii k pa IO Address 0xEB00 ee ee ee ee H Type SATA Flash Chip Properties Channel Primary Vendor ID OxBF Postion Master Device ID OxB Device VIA VT6421 RAID Controller SST SST395F 020 262144 bytes Parallel flash with Status 0x70 Drive Prooerties Vendor Drive in Vendor Mode Flashing Tasks Intro Device ID Outro ATA Reset Fy Rev Now CLICK HERE to proceed Page 23 of 272 Things not going as expected Read the FAQ s Unlocking iXtreme 1 5 gt 1 61 For this method we still need to power on the drive with the half open tray If using a 360 to power the drive This method can be tricky to accomplish You need to power on the drive with Eject status closed but Tray Half Open To do this using an Xbox 360 as Power source eject the DVD drive then press eject to close the tray Now this is the important part you MUST re
67. D drive taking extreme caution to plug the plug the right way around once done the drive is now powered console thinks its closed but it is in fact half open Using a Connectivity Kit Xtractor power dongle to power the drive For this method we still need to power on the drive with the half open tray You need to power on the drive with Eject status closed but Tray Half Open To do this using a connectivity kit power unit Xtractor as Power source eject the DVD drive then press eject to close the tray Now this is the important part you MUST switch off the kit BEFORE it closes fully Wait for a few seconds and switch the connect kit on again drive is now at half open tray NOTE if using Maximus power unit you must hold in the eject switch till fully open then release to close as it closes switch off then switch back on Manually The easiest way to do this is to use manual eject before powering the drive to manual eject simply push this slider along until the tray is released Page 90 of 272 Things not going as expected Read the FAQ s N A fe Vey Ey 1 E k Then pull the tray out fully and push half way back in Now hook it up to the PC using Connectivity Kit and SATA then power on If powering with Xbox then DVD power plug must be removed before this process with Xbox powered on then power plug connected after tray position is set Now
68. Desktop N A samtest WA lteontest 20 22 23 24 25 26 Zi 28 29 30 31 32 33 Vendor Model Rev Firmware Type Sams ngTS HM3A ms28 iXTREMET61 12x FINAL TSq Bjanked out for obvious reasons OSIG TSSTeorpDVD ROM TS HS43Ams28 Spoofed As Created Tue Nov 03 23 26 01 2009 Last Updated Wed Nov 0407 06 11 20093 C3 JABACKUPS my xbox my original xbox Page 173 of 272 Things not going as expected Read the FAQ s Registry Settings Only really for troubleshooting and debugging and should only be attempted by those confident enough to play about in the systems registry settings Click Start click run type regedit and press enter Navigate to HKEY_CURRENT_USER Click on JungleFlasher You will see something similar to this sove EIES File Edit View Favorites Help 4 Computer Name b HKEV_CLASSES_ROOT a J HKEY_CURRENT_USER eh a AppEvents 7 Console ai ree a Contral Panel et a 2 7 Environment eager b D EUDC ab DoDrives b D Identities at Dolo b i JF KeyDB ak DoUSBOnly JungleFlasher ab HitAPi b Keyboard Layout ab HitRew ab HitTran ab OPort gt i Software ab eft bd System ab Mods EMD Volatile Environment ab OnlyDummy fl HKEY_LOCAL MACHINE at scsiports bedl HKEY_USERS 28 Top 3 mn HEEY CURRENT CONFIG ab ViaPo rtsOnly ab Default value not set ab Adwiew i ab COMPort
69. Drive It is ONLY for use with Slim PCBs Replacement 0225 PCB s and Pro Kit Modified PCB s DO NOT PRESS IT IT WILL LOCK YOUR DRIVE IT IS A PAIN IN THE ASS TO UNLOCK AGAIN WARNING PROCEED Page 10 of 272 Things not going as expected Read the FAQ s Which Drive do you have Click on the appropriate link below Original Xbox360 Slim Xbox360 Other Info for troubleshooting or the inquisitive mind FAQ s Advanced User VIA Ports Only X64 additional Functions Include Non IDE instructions Support for earlier Missing Serial Data Return a LiteOn to Verified Lite On LiteOn dumps Stock Key Manual Spoofing Spoofing a Hitachi Spoofing a Thanks different drive Bad Flash Recovery with PMT Probe 3 Samsung What is Pogo Mo Thoin X360USB Unlock Recovery PMT Probe 3 Bad Flash PMT Probe 3 Bad Flash Recovery Slim LiteOn Recovery BenQ Page 11 of 272 Things not going as expected Read the FAQ s Which Phat Drive Samsung CLICK HERE Hitachi CLICK HERE You can check the Xbox 360 DVD drive type by removing the faceplate and checking the hole underneath the DVD bezel White Wires BenQ Yellow Wires LiteOn For Exact model information of drive you must read the label on top of the drive case You will require this information to enable you to choose the correct methods for your drive Page 12 of 272 Things not going as expected Read the FAQ s Currently several differen
70. Drive LiteOn DG 16D25 3850CC LO8S3info Extract SB 7459DEBF3935022C 0950F B44B20 1466 0Sa PLOS DG 1bD25 8305 Advanced View on pga nais Identify Drive Serial 1 Lite On firmware loaded to Source buffer e Do you wish to auto load Lite On iXtreme Vendor Model Rev Firmwa DSIG Dummy bin file saved to Dummy birn Loading firmware from buffer Inquiry string found Identify string found Drive key OxA030 SBT49DERRPS9S5822C09S5S0FRB44B2D1468 Firmware OGsig PLDS De 1eb25 838685 Firmware ist L BS3info Extract Eey added to database Page 115 of 272 Things not going as expected Read the FAQ s If you have selected YES target firmware will be loaded and automatically spoofed Check the keys match and the OSIG model info is the same Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel User Guide C Jungle Hasher v0 1 74 Beta 138 New folder Dummy bin Vendor Model Rev LiteOn DG 16025 838500 LOS83info Extract OSIG PLDS DG 16D25 8388 Check The Key has beer copied from source to target C Jungle Aasher v0 1 4 Beta 138 Minnwareietty 1 1 838 bin Vendor Model Rew Firmware Type DVD Key ma LiteOn DG 16025 83850C iXtreme LT 1 1 SB 49DEBF 3935822 0950F B4462D 1488 OS IG PLDS DG 16D25 83889 Drive key n a FRPP ee eae Firmware Osig PLDS DeE 16epbz5 8365 Firmware is ikxtreme LT 1 1 Spoofing Target DVD Key copied to target Target is LI ID strings not copied
71. F6 key Hitachi read block size 100 gt 2000 78 and 79 FK models will fail on this Ctrl F7 key Set working folder in Modder mode clear all tabs and save log Ctrl F8 key Enable Hitachi Expert Mode Ctrl F10 key To add update key database from Source tab info Ctrl F11 key To create csv from key database Ctrl F12 key To open key database in Notepad Page 171 of 272 Things not going as expected Read the FAQ s Key Database For those who have NOT saved their dumped file and need their key details back Try right clicking on source box and select Open Key d b Firmware Tool 32 DVDKey 32 Hitachi GDR3120 MTK Hash 32 oureg Inquiry Identity Drive Serial Ha l UMM User Guide Firmware Type DVO Key Key Load fjw Clear Source W Advanced View S Update dib Identify Drive Serial Open Key d b Open Target History Marital Vendor Model Rev Firmware Type DVD Key Spooring OsIG Saveto Alle JungleFlasher 0 1 69 Bete Session Started Wed Dec 09 00 51 17 2009 This ia a 32 bit process running on 4 32 bit CPUs BOEtiosz sya Driver Installed Bortios2 ays Driver Started thanks Schtrom Found 0 Com Porta Page 172 of 272 Things not going as expected Read the FAQ s ID _ JobName Key phil3 NIA Desktop Desktop amp Blanked out for obvious Desktop reasons Desktop
72. FAQ s Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 IRC Channel FABACKUPS my xbox My New Slim Lite OFW 0272 bin Vendor Model Rew Firmware Type Lite On DG 16D45 0272 Stock Rew Firmware Type DVD Key ma LiteOn OG 16045 0272 LT Plus 1 9 OSIG FPLDS DG 16D45 0272 Genuine LI plus w1 9 Drive key n a FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF Firmware Osig PLDS DE 1eD45 O2 72 Firmware is LI Plus 1 9 Spoofing Target DVD Key copied to target Key Sector copied trom Source to Target Target is LI ID strings not copied to Target Now return to the MTK Flash 32 Tab FirmwareTool 32 DVDKey 32 MTK Hash 32 HitachiGDR3120 IRC Channel You will notice in the log that the key has now been Verified against the drive Drive is Slim Lite on Key found in KeyDB at record 10 My New Slim Key 15 F REMOVEDSHeeteeteeereeas Key has been tested and verified thanks C4eva To be able to write the target firmware to the drive you must unlock the drive once more it was taken out of Vendor mode to Verify the Key Page 256 of 272 Things not going as expected Read the FAQ s CLICK HERE TO CONTINUE Page 257 of 272 Things not going as expected Read the FAQ s Sammy Return to Stock When asked to auto load firmware select NO Select Open Target Firmware Firmware Tool 32 DVDKey 32 MTK Flash 32 Hitachi GDR3120 Source F Sam_CFVW bin Vendor Model Rev Firmware Type DVD Key 40EC Sam
73. Firmware Type Spoofing Save to File Loading firmyare file C BENQ OFW bin MDS hash 79tGbachS1l3edet4s5to0chcsbeeadzb75 Inquiry string found Identify string found Drive key OxA050 ABSEDLOATEF40CEFSEOLSCESFEESCEOA Firmware Osig PBDS5S YADGoss e49s0c Firmware is Stock Lm 4 Page 81 of 272 Things not going as expected Read the FAQ s Now select the Hitachi GDR3120 tab select the Auto Spoof radio button Then press Auto Spoof button FimwareTool 32 DVDKey 32 _MTK Rash 32 Hiach GDR3120 Fot Pops Use Win API Sa Ok AGDO T TETAN PA THL DT STOVD ROM GOR3120L0059 Jas Port 10 ee ao Drive Revision Refresh Query USmode Name DVD ROM GDR3120L a2 40 6 Hashing Options Sector List FAW Rev 0059 Cuno Drive a re Calculated at ab 4 Run time Reserved OCBMAB D614 Manual Spoof kiawe 537598 Auto Spoof a Send Mode B wine a a e eee Fash iXtreme i asec eutomunths Mode Select hn i Free Hash Ram Upload e Ram Poke Flash Complete r Loading fizcemware file Users Andy Downloads 64930c SERO OFW bin MDS hash dbbbbetT dd Tasp46osactsco95o4b4F5 inguiry string found identify string found Drive key O 2050 FreraDOASC4SACrTCoTesroe0szrollgEes Firmware Ogigr PEDS VaDaoss 64530 J Firmware is Stack Jungleflasher will then test flash a sector for stability check and ask for confirmation to proceed Select YES Flash ID Strings a Flashi
74. Flash Verification Test Reading Bank OF 2 wee eee eee Reading Bank 1 2 wwe ee Reading Bank 2 2 wee eee ee Reading Bank 3 1 eee ee ee Dumped in 488 amp 5ms write verified oK Restoring sector Ox3E000 sending Sector Erase to Port Ox0000 Erasing Ox3E000 Writing Ox3E000 Authorised Restore verified OK Drive is slim Lite on Key found in KeyDB at record 10 My New slim Key 15 774FFFREMOVE DF SF FFF FFF FFF FS eF Key has been tested and werified thanks C4ewa Writing will commence and its progress shown in the log YOU ARE FINISHED CLICK HERE TO RETURN TO START Page 252 of 272 Things not going as expected Read the FAQ s Method B Using SlimKey First select the correct I O port and ensure drive shows up in drive properties ga JungleFlasher 0 1 81 Beta DVDKey 32 MTK Fash 22 IRC Chamel z 2 tak VO Port USB Only VIA ports Only aie Additional functions ines t0000 hi Include non DE Parts u 7 al m Dummy bin Only Port Properties Com Port Properties VO Address C0000 Port Se ets at BUY NOW Channel Primary Name FROM Master Status www modiraders co uk XECUTER X360USB PRO Ver 0 18 Drive Key Key Drive Properties Status Vendor PLDS Name DG 16D45 SimKey LOB3info seat ae T DvDKey32 DummyGen 83 keyfile ESenved DVD Key Not Found Dummy from KeyDB Dummy from iXtreme HZSGOUSB PRO detected Version 0 18 Found
75. HIS PORT em Page 261 of 272 Things not going as expected Read the FAQ s Second HDD ic Sgn Local Disk D Koh Sgh WIT Es wey DVD RW Drive Es a AL CO Drive Gi n Local Disk lt I Eg Local Disk 4 3 External K JungleFlasher will only show drives that have been assigned a drive letter in windows The only 360 DVD Drive that has this during the process is the Hitachi Drives Once in mode b and using WinAPI Please don t be surprised if JungleFlasher doesn t enumerate your DVD Drive keep getting Warning Serial Data is Bad Errors when trying to DVDKey my LiteOn Are you sure it doesn t have LT Firmware on it LT Firmware does NOT allow DVDKey key extraction Using Probe 2 ensure Standby is disabled Is it definitely a 74850c version The 83850c V1 uses LO83Info instead If this is the case there are several things you will need to check Are you probing the R707 hole Using the USB connection from your CK3 Xtractor If so check their websites for installation instructions i e installing USB etc Using the Serial cable double check this is connected properly Is the tray half in You can check the User Guide on how to do this Without the tray half in you will get this error Page 262 of 272 Things not going as expected Read the FAQ s When Jungleflasher tells you to power drive with half open tray cycle power then even if you set it before
76. IA VT6421 RAID Controller Name Size Type Drive in Vendor Mode Serial flash found with Status OxTez Sending Device ID request to port OxEsOO Manufacturer ID Oxtz Device ID 0x11 Flash Name MAIC MEA2Z5L2005 Flash Size 262144 bytes In case you get STATUS 0x72 but the VENDOR ID DEVICE is OxFF press INTRO DEVICE ID If status keeps OxFF try removing the Vampire first then press INTRO DEVICE ID Button Now if you have not done remove the Vampire from touching the board and press READ button activate Isc 0x11 MXIC MX25L2005 262144 bytes Serial flash with status Oh 2 Page 139 of 272 Things not going as expected Read the FAQ s Power off the 360xtractor and proceed to join jumper as required Ta Once you have soldered the jumper of your choice Power on the 360xtractor again Proceed to ERASE amp WRITE Page 140 of 272 Things not going as expected Read the FAQ s Using Vampire if you are NOT USING REBUILD BOARD Visit website For their own Tutorial they suggest cutting PCB as follows 2 REQUENEESaES 4 R P Fit YOU CAN ANEP EETS asaabeeg MODTA pe SPE t w r 4 R P NAY KIPARA On MtkFlash32 Tab of Jungleflasher Press intro Device ID Button then press the Yes on the pop up window that appears Page 141 of 272 Things not going as expected Read the FAQ s Hashing Tasks Intro Device ID Outro ATA Reset Erase Write i W
77. IDE Ports Hash Chip Properties Vendor ID OxEF Device ID 0x11 Master Mame Winbond NEX WwW25P20 NxX25P20 XECUTER X360USB PRO we 7 Ver 0 18 3 Size 262144 bytes Type Serial flash with status 0x72 Drive Properties Vendor Drive in Vendor Mode Hashing Tasks Name Intro Device ID FAN Rew Reserved DVD Key Verified F Sending Device ID request to port 0x000 Spi Status xD Manufacturer ID OxEF Device ID 0x11 Flash Name Winbond NEX W25P20 NX25P20 Flash Size 62144 bytes Sending Slim Spi Lock request Spi Status OxBC E Because your drive has a locked Spi this message will show up SPI Status 0x8C Press Escape to cancel le Se Page 235 of 272 Things not going as expected Read the FAQ s Press Yes Jungleflasher will now start to continuously send the unlock command to the drive This will be shown in the log represented by appearing dots Postion Master Device XECUTER A360USB PRO Ver 0 18 Drive Properties Vendor PLDS Name DG 16D045 FAN Rew 0225 Reserved ADAD DVD Key Verified F Key found in KeyDB at record 13 Black SLIM 0Z 5 Eey is Key has been tested and verified thanks C4eva Sending Vendor Intro to port 020000 Serial flash found with Status OxT2 Mm At this point you commence with which ever unlock procedure you are following NOTE FOR EASE ENSURE YOUR SPEAKERS ARE ON AND VOLUME IS UP AS AN AUDIBLE BEEP
78. IO Port USB Only ViAports Only F 260 Tools Cia WN AL esl aT erate NT E 0000 eal Include non IDE Ports W Beng Lite On Slim Port Properties EA R Ee EA Connect any VO Address 00000 ae hes W Flash Chip Properties SATA device Channel Primary Vexnloe tt to any XECUTER X360USB PRO is p Ver 0 18 via USB Vendor TSSTcorp Name DVD ROM TS H3434 intra Device ID Sutra ATA Reset FAN Rew ms2c Reserved Read Bese Write DVD Key Vented F Phat 8 E Slim portios2 sys Driver tasting i 4 ty portio3s2 ays Driver Started thanks Schtrom _ Notice the Key IS already Verified HS6OUSB PRO detected Version 0 18 Samsung drive keys are verified upon the drive being detected Hover your mouse over the Key ta Found 9 windows drives C D E F G H I J K see if the key E in your KeyDb Found 1 CD DVD drives D Found 11 IO Porta Found 0 Com Forts Please note unmodified Samsung MS25 s have no FirmGuard therefore do not need an unlock method to be applied simply click Intro DevicelD and check flash chip properties for status 0x70 Page 16 of 272 Things not going as expected Read the FAQ s ge JungleFlasher 0 1 79 Beta FimwareTool 32 DVDKey32 MTKAash 32 HitachiGDR3120 IAC Channel VO Port USB Ony VIA ports Only woo L include non DE Ports Port Properties WO Address Ox D000 A USE Type Channel Primary
79. JungleFlasher v0 1 87 x86 and x64 Compatible Complete User Guide X360USB MA to read this tutorial by scrolling through all the pages Use the flowchart links and links at bottom of each section to take you directly to the correct instructions for your situation Trying to read through each page regardless IS POINTLESS And confusing USED JUNGLEFLASE I AM A NEW USER O JUNGLEFLASHER BEFORE Page 2 of 272 Things not going as expected Read the Introduction JungleFlasher is developed in conjunction with Team Jungle in an effort to bring all 360 DVD Drive flashing functions together in one easy to use Win32 Application JungleFlasher provides several functions that up until now were carried by several different app s in both Dos and Win32 JungleFlasher is also fully supported in x64 environments Recent revisions of JungleFlasher have added support for Xecuters X360USB Pro For USB based flashing on ALL systems with no freezing unsigned driver issues The FirmwareTool 32 tab is used to process firmware files Jungle Flasher will parse the files identify the firmware type and display relevant information such as the all important DVD key and OSIG strings etc On the Target sub tab MD5 hash checking of iXtreme firmware files is conducted to confirm authenticity With both source and target files loaded the relevant source data can be transferred to the Target a k a Sooofed which can then be flashed to t
80. M0000 Type USE Channel Primary Master XECUTER AS60USB PRO Ver 0 18 Hash Chip Properties Drive Properties Vendor No Drive Detected tani Tasks ee SS Fan Rew Reserved DVD Key JungleFlasher 0 1 84 Beta 250 Session Started Mon Jul 18 02 08 39 Z011 mM This is a Wow 64 process running on 4 x 4 bit CPUs H3c0USB PRO detected Version 0 18 Portioo4 ays Driver Installed BPortioo4 sys Driver Started thanks Schtrom Found 11 I O Ports ae A popup will appear when the Intro command fails Power off your drive using the ck3 switch or by unplugging the drive from your xbox MTE Vendor Intro failed F you wish to resend the command you should click Ves Power off the drive and then back on within 1 second Press Escape to cancel Page 205 of 272 Things not going as expected Read the FAQ s Probe MPX01 on the PCB shown above Press YES Power on the drive and watch Jungleflasher for status 0x72 FimwareTool 32 DVDKey32 MTK Fash32 HitachiGDR3120 IRC Channel VO Port USB Ony F VIA ports Only F 0000 hi leas Include non IDE Ports C Port Properties VO Address Ox0000 Ce Type USB Channel Primary Postion Master Device XECUTER X360USB PRO Ver 0 18 Drive Properties Vendor Drive in Vendor Mode Name FAN Rew Reser
81. Master oe Device XECUTER X360USB PRO oar Ver 0 18 Size Drive Properties ies Vendor No Drive Detected Flashing Tasks Name Intro Device ID Outro ATA Reset FW Rev diii Pht Slim JALPA RI PL PE AL R AL PL AE AL A PE PL AL AL AL PL A AL IAL PL PE AL R PL AL ALI AL IAL PL PE ALAL PL PE AL AR AL AL A AL A PL PE AL AL PL AL AL AL IAL PL PE ALAL PL PAL A L PL A AL AL PL A AL AL AL AL PL AL IAL PL PL ALAL PL PLE ALI AL ALN PLN PLL LNPA 5 JungleFlasher 0 1 84 Beta 250 Session Started Mon Jul 18 02 33 08 27011 This is a Wow 64 process running on 4 x 64 bit CPUs X360USE PRO detected Version 0 18 Portioo4 sys Driver Installed BPortioo4 sys Driver Started thanks Schtrom Found 11 I O Porta A popup will show when the Intro command fails MTK Vendor Intro failed Click YES and probe MPX01 on the PCB with the Probe 3 or PMT Page 202 of 272 Things not going as expected Read the FAQ s Power on the drive and watch in Jungleflasher for status 0x73 FimwareTool 32 DVDKey32 MTKAlash 32 HitachiGDR3120 IRC Channel activate iso VO Port USB Only VIA ports Only C 360 Tools 0000 Include non IDE Forts I Beng licOn Slim UnLock UnLock Erase UnLock Port Properties VO Address Ox D000 map ce Hash Chip Properties Type USB Channel Primary Vendor ID OxC2 Postion Master Device ID O11 Device XECUTER X360USB PRO Le MAIC MA25L 2005 Ver 0 18 Size 67144 b
82. N LED LIT when probing R707 to indicate good connection circuit BLUE LED SHOWING when in contact with R707 and ready to read USBXtractor Page 99 of 272 Things not going as expected Read the FAQ s MTK Hash 32 Hitachi GDR3120 IRC Channel VIA ports Only Include non IDE Ports Port Properties VO Address OxA000 Type SATA Channel Primary Master Standard Dual Channel PEI IDE Controller Com Port USB tractor Switch COM Dummy bin Only Com Port Properties Port COM Type Xecuter CKS Pro Rev D Name Prolific USB to Senal Comm Port Status Ready Drive Key Key Status 7485 DVDKey32 83 key file OCADAIDE08CG22081402 Dummy from KeyDE PLDS DG 16025 Not Found Dummy from iXtreme Session Started Sat May 22 14 51 46 2010 This isa a 32 bit process running on 4 x 32 bit CPUs Portios sys Driver Installed portic3 sys Driver Started thanks Schtrom Found Com Ports Drive is Lite On _ Providing serial connection was good DVDKey 32 will dump the key then will test the key against the drive for 100 Verification that it is the correct key DVDkey delayed by 5 seconds Sending DVDEKey request to IZO port O04000 and COM Bees 6 eee eee Serial Data looks ok key returned SBV49DERFS935822CO950FRB44B2D148B Extracted drive key passed Verification Quickly followed by a lot of actual dumped information from drive then prompt you to save key bin inquiry bin id
83. N drive not one that has been returned with other stock firmware is the ONLY WAY to get the ORIGINAL DATA from your drive into the iXtreme LT firmware So IF your drive has been flashed before please IGNORE i No Calibration data in source the statement that appears as itis NOT important and there is NOTHING you can do it has been lost forever All the methods involve cutting traces on the PCB Please read on for some handy information regarding this topic Page 117 of 272 Things not going as expected Read the FAQ s For your information Trace cuts Thickness 4 oe Width Back Side Copper Plane Cutting traces on the PCB The traces that requires cutting on the PCB are only a thin strip of copper laid on top of the PCB They do NOT need carving up with a chainsaw A reasonable pressure with a sharp craft knife is sufficient to cut through them Easily less than 5mm thick Moral of the story You don t have to cut right through half the PCB to cut the trace Click on the link for the method of your choice The MRA Hack Xecuter Probe Il Xecuter LT Switch Vampire With Board Vampire w o Board Page 118 of 272 Things not going as expected Read the FAQ s The MRA Hack Can be used on ALL current LiteOn Drives Soldering Electronics skills are required for these modifications It Should NOT be attempted by people without such skills Basic wiring guide for the drives PCB A
84. Name Fiw Rev Reserved DVD Key JungleFlasher 0 1 79 Beta 207 Session Started Wed Mar 02 00 11 07 2011 This is a 32 bit process running on 4 x 32 bit CPUs X360USB PRO detected Version 0 17 Found 1 I O Ports Found 0 Com Ports Found 9 windows drives C D E F G H I J K MTK Vendor Intro failed Ei i If you wish to resend the command you should click Yes Power off the drive and then back on within 1 second Press Escape to cancel Click YES then Power on the drive again Page 195 of 272 Things not going as expected Read the FAQ s At this point dependant on which drive you should be faced with the drive in vendor mode with appropriate status for drive type Hash Chip Properties Vendor ID QEF Device ID O11 Flash Chip Properties Vendor ID hel 4 Device ID 0x11 j Name MAIC M25 2005 Size 267144 bytes Name Winbond NEX W 5P20 NX25P20 Size 262144 bytes Type Serial flash with status 0x72 Type Serial flash with status 0x72 LiteOn Device ID 0x1 Name M amp IC M2 5L 2005 Size 262144 bytes Type senal flash with status hc 3 BenQ Hash Chip Properties Vendor D xBF Device ID OBS Name SoT S5TS9SF 020 Size 262 144 bytes Type Parallel flash with Status 0 0 Samsung Now simply proceed at the part of the flashing process you were at when the writing of your drive went wrong Remember you must load your previously d
85. PBDS VAD6038 SATA DVD ROM shows in the Drive 04421C which has different properties 70 MTK Hash 32 Hitachi GDR3140 IRC Channel Drive Properties Vendor PEDS lanie VAD6038 VIA ports Only FAN Rev 0442 Include non IDE Forts W Reserved 1C DVD Key Not Found activate iso 360 Tools Drive Properties Vendor SATA Name DVD ROM Fi Rew 6243 Reserved OC DVD Key Not Found Session Started Sat May 22 09 12 32 2010 This is a 32 bit process running on 4 x 32 bit CPUs POrtio3szZ sys Driver Installed Portio3sz sys Driver Started thanks Schtrom Found 0 Com Ports Drive is Beng Page 40 of 272 Things not going as expected Read the FAQ s JungleFlasher will prompt you with instructions MTK Vendor Intro failed i If you wish to resend the command you should click Yes Power off the drive and then back on within 1 second Press Escape to cancel Click Yes the Running Log will display something similar to this Sending Vendor Intro to port OxCFOO Invalid Status Pe sending Vendor Intra When neess are appearing do as previously instructed by JungleFlasher Power off the drive then within 1 second power it back on The drive should be in Vendor Mode 0x73 now and return good flash chip properties you can check in the Running Log or Flash Chip Properties Drive properties should display Drive in Vendor Mode Page 41 of 272 Things not going as expect
86. R3120 INFO Drive could also be 64930C mise ai activate iso which has different properties VIA ports Only E PEEN mts de non IDE Ports v i EA TFN E EM _ Erase Un Xecuter Ce Flash Chip Properties Presents Name FAW Rev Reserved DVD Key Not Found j USB PRO Vendor ID Device ID Name The Hottest Product of Size Type Drive Properties Vendor SATA Flashing Tasks Name DVD ROM Intra Device ID zi Outro ATA Reset Outro ATA Reset FAN Rev 6243 Reserved 0C Read Write Phat a Slum JungleFlasher 0 1 75 Bete 210 Session Started Fri Mar 04 21 41 27 7011 This ia a 32 Bit process running on 4 x 32 bit CPUs BPortios sys Driver Installed BPorticose sys Driver Started thanks Schtrom X360USE PRO detected Version 0 18 Found 11 IO Ports JungleFlasher will send the Magic Keys to unlock the drive and should return this message in the Running Log JungleFlasher has also sent the Intro command to the drive Page 38 of 272 Things not going as expected Read the FAQ s Sending Magic Keys to Drive on port OxOxCFoOO Sending Vendor Intra Requesting Dewice ID Manufacturer ID Oxte Device ID Oxll Flash Mame MIC MHS5L24005 Flash Size 262l44 bytes E The drive should be in Vendor Mode 0x73 now and return good flash chip properties you can check in the Running Log Drive Propertie
87. Screen After a few seconds the main window will load Follow the flowchart below to obtain the correct method for your setup and drive Page 14 of 272 Things not going as expected Read the FAQ s Alternative option for Nforce or Via chipset users For ALL Samsung drives Alternative option for those with PMT Probe 3 failed unlock or bad flashed CLICK HERE CLICK HERE e eee Is The Firmware on drive STOCK n e e IF UNSURE ASSUME NO Hacked Firmware Which Version Xtreme 3 3 gt iXtreme 1 5 gt iXtreme LT iXtreme 1 4 iXtreme 1 61 CLICK HERE CLICK HERE CLICK HERE IF you ASSUMED MS28 drive did not have stock firmware BUT have no luck unlocking it using these methods try Page 15 of 272 Things not going as expected Read the FAQ s Unlocking the drive Before we can do anything to the drive it must be in Vendor Mode status 0x70 All Unlocking is taken place under the MTKFlash 32 tab Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 Source i ive Ser Inquiry Identify Drive Serial re Note Upon selecting the correct port the drive shows up and key is dumped and verified against the drive Before doing anything to the drive The firmware has NOT yet been dumped However if you save the log you now have a known verified key from your drive ga JungleFlasher 0 1 79 Beta Frosted VOR A e RC Chart a OWNERS
88. THOUT Opening the drive you know what the key is for this drive As it s in the Key Database To use this information to re flash your drive with an update or back to stock firmware you have several choices Follow the route below Page 148 of 272 Things not going as expected Read the FAQ s AIS FHIII AIc Load Last File Open Job Folder Job History Open KeyDE L 74 Beta 1 iat May 22 15 The other options in that menu are self explanatory If you need to ask what they do then maybe you shouldn t be modding drives Page 149 of 272 Things not going as expected Read the FAQ s IF you want to open the folder containing the firmware you dumped from the drive originally select Open Job Folder e ae a Pz JungleFlasher v0 1 74 Bet New folder Search New folde Organize New folder i Downloads Name Date modified E Recent Places l Ci Daniy 22 05 2010 2 54 PM Open Libraries E Documents ill Downloads a Music Pictures E Videos E Homegroup jE Computer A Win 7086 C3 cy DATA D ca Local Disk E 7 File name Palaa Select the Dummy bin or Lite OFW bin dependant on how you dumped firmware in first place NOTE If you have moved the folder you will see this Open Job Folder If you know where it is CLICK HERE NOTE IF YOU DONT HAVE THE FIRMWARE SAVED CLICK HERE Page 150 of 272 Things not going as ex
89. There are 2 differing vendor producers of LiteOn PCB Chips Open your Drive and look at the Main IC on the PCB click on the chip you have MEDIATEK MT 1335WE 1044 CMSL BTP3Y162 03xXC60144380003 03 MXIC SSSR SEE FT FF FF MEDIATEK MT1335WE 1044 CMSL BTP3Y162 05XC60144380003 05 WINBOND Page 226 of 272 Things not going as expected Read the MXIC UNLOCKING There are several methods to unlock these PCB s we will only mention the 3 main ones here They all work on exactly the same principle any way And their use is almost identical 1 The Sputnik360 MX Edition PCB from Team Xecuter A simple to fit PCB with switch and selectable resistors Makes this a very easy to use unlock solution 1 simple trace cut and 3 solder points will permanantly attach to the PCB in your drive This will make future updating of firmware simple as can be Or Page 227 of 272 Things not going as expected Read the FAQ s 2 The Sputnik MX Probe Make the same trace cut shown below and use it to probe same via point 3 The Basic Russian Hack a Ry KAAP T cut along Red Line i e ae Probe the orange circle 7 gt a F era ty CR led Eh Page 228 of 272 Things not going as expected Read the FAQ s This involves 1 trace cut and soldering a 10 O approx Resistor to GND then momentarily touching the VIA that you cut from the trace at the appropriate time
90. Things not going as expected Read the FAQ s Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel activate isa 360 Tools USB Only VIA ports Only 0000 i Include non IDE Ports Beng Sammy Lite On Slim UnLock UnLock Erase UnLock VO Address OhD000 Type USB Channel Primary Postion Master Device XECUTER AS60U5B PRO Ver 0 18 Outro ATA Reset Write Found 0 Com Ports Found 13 windows drives C D E F H I K Lz M N 0z PB Found CD DVD drives D O Drive is Slim Lite On__ Key found in KeyDB at record 10 New folder Key is Eey has been tested and verified thanks C4deva The screen should now show the drive in vendor mode Unlocked Page 220 of 272 Things not going as expected Read the FAQ s Mi FimwareTool 32 DVDKey 32 MTK Hash 32 IRC Channel activate iso USB Only VIA ports Only 360 Tools 0000 Include non IDE Ports Beng Sammy Lite On Slim UnLock UnLock Erase UnLock VO Address Ox0000 ai Vendor ID OxEF Type USB Primary Master Device ID 0x11 Mame Winbond NEX W25P20 NX25P20 rari m iii Size 262144 bytes Serial flash with status 0x72 Drive Properties Vendor Drive in Vendor Mode Mame FAW Rew Reserved DWD Key Verited F Serial flash found with Status xT Sending Device ID request to port Oo20000 Spi Status 0x00 Manufacturer ID OxEF Device ID Ox1l Flash Name Winbond NEX W25P20 NxAZ5P20 Flash S
91. Things not going as expected Read the FAQ s Setting ModeB Connect your Hitachi Drive via sata power it on then open JungleFlasher and you will be presented with the welcome screen Then click the Hitachi GDR 3120 tab Hitachi GDR3120 You will be presented with the dedicated Hitachi tab shown below or similar to Firmware Tool 32 DVD Key 32 MTK Hash 32 Hitachi GDR3120 IRC Channel Port Properties Drive Use Win API A000 Use Port IO ae Dive Revision afres Name DVD ROM GDR3120L 32 400 EF Hashing Options Sector List ae j Dump Drive 46 47 Reserved OBMAB O6 01 24 Manual Spoof 58 59 Auto Spoof Send Mode B Ta AH 7 Hash iXtreme Transfer Method eee Classic F3 Unlock Set Checksum automatic Mode Select Insert the 79 Unlock Audio CD Free Flash Ram Upload Play 79 Unlock Read to Source This is a 32 Bit process running on 4 x 32 bit CPUs PoOrtios2 sys Driver Installed Portiosz sys Driver Started thanks Schtrom Found 0 Com Ports Drive is Hitachi Drive key FSF DOASC49ACTCDTGSFS6092E6115E4 Key NOT in KeyDE Eey is FaFrseDoAgsc45AcCTCDTesSroe092E6118E4 Fey has been tested and verified thanks C4eva Mm 4 Note the Hitachi Drive inquires on my I O Port and that PortlO is disabled using non VIA chipset Page 53 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 MTK Flash 32 Port Properties Use Win API A
92. VO Port USB Ony F VIA ports Only activates in eal e 360 Tools GeO a Include non4IDE Ports Beng Sammy TR Port Properties Uninet Ihid Lite On Erase VO Address Oe 0000 ZJ Type USE Flash Chip Properties Channel Primary Vendor ID OxBF Postion Master Device ID OxB6 Device XECUTER A360U5B PRO lame SS7 SSTS9SF 020 Ver G 17 62144 bytes Drive Properties Parallel flash wath Status 0x70 Vendor Drive in Vendor Mode a Hashing Tasks ie Intra Device ID Outra ATA Reset Reserved Read Base Write DVD Key Re sending Vendor Intro Parallel flash found with Status 0x70 Sending Device ID request to port O20000 Manufacturer ID OxBr Device ID OxBe Flash Name S85T S5T395F020 Flash Size 262144 bytes Immediately lift the probe then Continue with the correct procedure for what you were doing If you had bad flashed it then Write your target firmware If you were unlocking proceed to the Reading of your firmware Page 200 of 272 Things not going as expected Read the FAQ s Beng Badflash Recovery Badflash can happen if your PC freezes midway through flashing your xbox powers off during flashing you should have had the A V cable inserted if you took the 13146 update with custom firmware or a spoofed drive or for other reasons If things haven t gone as planned with your Beng flash then you might need badflash recover
93. X CLICK HERE TO PROCEED Page 69 of 272 Things not going as expected Read the FAQ s Flashing iXtreme to a stock Hitachi Drive Flashing iXtreme to a Hitachi has taken a huge step in development with JungleFlasher s methods JungleFlasher WILL NOT allow you to flash iXtreme over iXtreme it will detect the checksum and detect its hacked by checksum and force restore first Typical error if user tries Flash iXtreme Master Checksum ts Set this is normal for a modded drive Restore Drive to Stock first So onto flashing iXtreme You will need the JungleFlasher Firmware Pack for this to work With the drive in Mode B and Unlocked if a v79 simply select Flash iXtreme from the Flashing Options list Page 70 of 272 Things not going as expected Read the FAQ s Fimware Tool 32 MTK Flash 32 Hitachi GDR3120 Port Properties Drive l Use Win AFI i ECDAT Use Port I0 F HL DT STDVD ROM GDR3120L0079 Name DVOKROM GDR3120L 32 40 af Flashing Options Sector List FAW Rev 0079 p Drive l i nee Dump Drive _ Calculated at Reserved OBMAB 0605 25 S Manual Spoof 7 m Eigi 58 5910 Auto Spoof 1 Send Made B l 78 79 A Flash LT Plus Open Close Transfer Method Restore Firmware 7 79 Unlock Set Checksum automatic x Mode Select Insert the 79 Unlock Audio CD Free Flash Ram Upload bai a a howl Ea Ram Pake Found drive E CD DWD Fou
94. _ Writing Hank 32 ___ After writing all 64 sectors signaled by 64 dots 16 dots across 4 banks JungleFlasher will verify what it wrote by reading back and comparing against the Target Buffer what we really want to see is Write Verified OK Flash Verification Test Reading Bank z naana Reading Bank 1l Reading Bank 2 Reading Bank 3z Write verified OF Now send an Outro to the drive Flashing Tasks Intro Device ID Outro ATA Reset Read Gave Write This will release a drive from Vendor Mode and send ATA Reset to the Drive It then sends an inquiry command to the drive This will save you power cycling the drive and then changing port away and change it back again with the click of a button drive will reset itself and JungleFlasher will send an inquiry command to the drive If successfully flashed the drive should Inquire correctly and display drive properties Page 48 of 272 Things not going as expected Read the FAQ s PRE DASH UPDATE Drive Properties Drive Properties Vendor PEDS Vendor SATA Name VAD6038 64930C Name DVD ROM FAW Rev FAN Rew 6243 Reserved Reserved OC DVD Key Not Found DVD Key Not Found POST DASH UPDATE Drive Properties Vendor PBDS Name VAD6038 FAW Rev 0442 Reserved 1C DVD Key Not Found Which drive properties you have depends on BenQ FW version Po
95. al Pal Pil Pal Pial Pal Pial P I a Session Started Fri Mar 04 20 08 13 2011 This is a 32 bit process running on 4 x 32 bit CPUs F POrtiosz sys Driver Installed Portiosz sys Driver Started thanks Schtrom BROGOUSER PRO detected Version 0 18 Found 11 I O Ports Ai Check to see the 83850c Inquires on the port Page 111 of 272 Things not going as expected Read the FAQ s Select LO83info SimKey Lo83info J ERs If you see this message LOB3info qP Drive responds as Lite On 85 version 2 LOB3info is only for Lite On 83 version 1 You have a 83850C v2 so CLICK HERE TO PROCEED IF NOT then you have the 83850C v1 and should the image shown below Page 112 of 272 Things not going as expected Read the FAQ s DVDKey 32 MTKAlash 32 Hitachi GDR3120 VO Port VIA ports Only C Com Port USE tractor Switch E800 i include non DE Ports M COM7 Dummy bin Only F Port Properties Com Port Properties VO Address OxE800 Port COM Type SATA Type Xecuter CKS Pro Rev D Channel Primary Name Prolific USB to Senal Comm Port Postion Master LOB3info Device VIA VT6421 RAID Controller Drive Properties Vendor PLDS DG 16D25 2000 85 80 00 32 5E 00 00 00 50 4C 44 53 20 20 20 20 __2 PLDS 2010 44 47 20D 31 36 44 32 53 20 20 20 20 20 20 20 20 DE 16025 2020 28 25 30 35 30 43 20 a2 00 00 00 00 BO 80 O8 BSB50C 2 _2 _ 030
96. al Pial Pal Pial Pial Pal Pal Session Started Sat May 22 15 54 36 2010 This is a 32 bit process running on 4 x 32 bit CPUs Portio3sz2 sys Driver Installed Portiosz sys Driver Started thanks Schtrom Found 1 Com Ports Drive is Lite On Turn power off to the drive Operate switch you added To connect to the 22 Q resistor side On Press intro Device ID button The following will appear Press Yes button Page 121 of 272 Things not going as expected Read the FAQ s MTK Vendor Intro failed Then power on the drive IF this produces a screen showing BAD FLASH PROPERTIES shown below Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 ay ols KE h m Include non DE Parts Beng Sammy Port Properties UnLock UnLock Lie On Erase VO Address Type Hash Chip Properties Channel Vendor ID hFF Postion Device ID OxFF Device Hame Unknown type SIZE ma Drive Properties Type Serial flash with status O 72 Vendor Drive in Vendor Mode care Hashing Tasks intro Device ID Qutro ATA Reset Fi Rev Besenacd Read ase Write Re sending Vendor Intro Serial flash found with Status xT Sending Device ID request to port Manufacturer ID OxFF E Device ID OxFF Flash Name Unknown type Flash Size n a m 4 then press Intro Device ID button again Page 122 of 272 Things not going as expected Read the FAQ s DO NOT POWER CYCLE Hashing Tasks intro D
97. atically saves every key dumped using JF 2 Allows you to search the KeydB for a working key for any drive you attach Page 176 of 272 Things not going as expected Read the FAQ s 3 Will create a dummy bin from the info in the KeydB if it verifies a key against a drive 4 Gives you piece of mind you lost the original dump it ll be in the dB In Short If you used JF to dump a drive on the same PC re flashing the drive becomes incredibly easy No need to MRA LiteOn drives more than once You no longer need to have a complex way to track all the drives you flashed to be able to locate original firmwares How do take advantage of this phenomenal feature CLICK HERE TO RETURN Page 177 of 272 Things not going as expected Read the FAQ s PMT Probe Non Cap or CK Probe 3 The PMT Probe is designed to be able to allow you to dump the Key from ALL Phat LiteOn without resorting to MRA This method works regardless of current FW on the drive In the following example I use the X360USB Pro for my SATA connection This is NOT a pre requisite If you have a currently working SATA setup it will work just as well So select your I O port as Normal You will notice a new Button PhatKey Pa ie E M ial hemo Ea USB Only C WIA ports Only C Additional functions exal Include non IDE Ports V 7 Port Properties n Port Propertie Xecuter VD Address 0000 ce ort Tyee USB ae Presents
98. ave to File Open Target Target li FAJFBeta Fimware LTPlus beng v 1 1 bin Manual Vendor Model Rev Firmware Type DVD Key H040 In Beng VADB0SG 6849300 LT Plus 1 1 1AB34C0258B0AB2B2AB9DC3B0CB62D02 J OSlG PBDS VADE032 b4530C Writing Firmware to the drive To write the firmware as long as drive is still unlocked Vendor Mode we just click MTKFlash 32 tab Finnware Tool 32 DVDKey 32 Hitachi GDR3120 Source inquiry Identify Drive Serial Verfify you have good flash chip properties still Hash Chip Properties Vendor ID th Device ID 0x1 Name KIC MAZSLA00S Size 262144 bytes sanal flash with status 73 See ee intro Dewice ID Outo ATA Reset Read Ese Write eet fa mo Then click Write Page 47 of 272 Things not going as expected Read the FAQ s Hash Chip Properties Vendor ID C Device ID 0x11 Name MAIC M25 L2005 Size 262144 bytes Type Serial flash with status 0x73 Hashing Tasks Intro DevcelD Outro ATA Reset _ iat nema Write Command will send Chip Erase prior to writing and then proceed to write the 4 banks of the firmware banks 0 1 2 3 A series of 16 5 is JungleFlasher writing the 16 sectors of each bank 4 banks 0 1 2 3 Sending Chip Erase to Port OxEso0o Writing target butter to flash Writing Hank O ___ Hriting Bank 22 lt csseeesesi aus riting Bank 2 _
99. ce ID Outro ATA Reset i DVD Key Vernfied f a a yn Slim Dandie Ban HS fete te 2225522222 hikes erna BRAY PPT ROTTS IMPORTANT After sending Outro ATA Reset lf this is all you see YOU MUST press Outro ATA Reset AGAIN Sending Spi Lock to Port 0ox0000 Success Spi Status OBC Sending Vendor Outro to port 020000 Page 244 of 272 Things not going as expected Read the FAQ s m 4 If you see this Key Verification message then Outro has been successful Sending Slim Spi Lock request Spi Status Oxec Sending Vendor Outro to port 0x0000 Drive is Lite On Key found in KeyDB at record 20 N A Eey is M Eey has been tested and verified thanks C4teva Now Power off the drive disconnect and refit to your xbox and test YOU ARE FINISHED CLICK HERE TO RETURN TO START Page 245 of 272 Things not going as expected Read the FAQ s LiteOn Slim FW Ver 09504 0272 dash 13146 There are 2 methods available to obtain the drive details you require from this drive You can either A Dump the original Firmware from the drive always recommended B Use SlimKey Method A Dump the original Firmware Dumping the Original Firmware is very straight forward Select MTK Flash 32 tab FimnwareTool 32 DVDKey 32 MTKAash 32 HitachiGDR3120 IRCChannel
100. ck YES Switch drive power OFF Probe the point MPX01 shown below Page 188 of 272 Things not going as expected Read the FAQ s MT13194L 0832 ANSI JAK3GF O5XCAB1216100AA aa gt UA ee Fa adi nr aa 4 not S ad Bs O a Things not going as expected Read the FAQ s nd Fe Af Page 190 of 272 Things not going as expected Read the Switch Drive Power ON again This message should appear in log window PhatKey extraction failed Drive is Lite On Drive is Lite On Sending Vendor Intro to port 020000 Status O2x51 Re gsending Vendor Intro Serial flash found with Status Ox52 As soon as you see status 0x52 appear lift the probe off from the point Within a few seconds this should appear i j Extract complete To continue you must Ensure probe is removed Power Off Drive Wait 5 seconds Power On then press OF Again read it carefully Switch drive power OFF Wait 5 seconds Switch drive power back ON Then Press OK IF all has gone well Page 191 of 272 Things not going as expected Read the FAQ s You will see the save box appear to save your Dummy bin Click SAVE it rs e t Computer DATA F JFBeta 4 Sagnch Jae _ Organize Mew folder E Documents Name Date modified Type Hll Downloads al Music E Pictures Ee Videos gt P Firmware 04 03 2011 20 26 File
101. clude non IDE Parts 7 Port Properties VO Address E800 Type SATA Hash Chip Properties Channel Primary Vendor ID OxBF Postion Master Device ID OnB6 Device VIA VT64271 RAID Controller Name SOT S5T39SF 040 262144 bytes Drive Properties Vendor Drive in Vendor Mode Name Hashing Tasks FA Rew Reserved DVD Key Vented F Type Parallel flash with Status 0x70 Sending Vendor Intro to port OxEs800 Parallel flash found with Status 0x70 Sending Device ID request to port OxEsoo Manufacturer ID OxBF Device ID OxBe Flash Name SS8T SST39SF020 Flash Size 262144 bytes amj d Now CLICK HERE to proceed Page 25 of 272 Things not going as expected Read the FAQ s DevicelD Unlock Vcc Trick VIA Nforce only Stock Modified Drives This method has only really been tested on VIA no drivers or 530c drivers and Nforce Chipsets although there is no harm in trying on others this method works on Hacked and Stock Drives Load JungleFlasher and select MTKFlash 32 tab ga JungleFlasher 0 1 79 Beta FimwareTool 32 DVDKey a MTK Hash 32 Hitachi GDR3120 Select correct I O Port check for TS H943 in Drive Properties and click Intro Device ID ga JungleFlasher 0 1 79 Beta Hitachi GDR3120 IRC Channel Fimware Tool 32 MTE Hash 32 activate 50 USB Only VIA ports Only W 460 Tools Include non IDE Ports W Beng g Lite On Slim UnLock UnLock Erase UnLock 3
102. copied to Target Identity string copied to Target Serial data copied from Source to Target PROCEED TO ERASE amp WRITE CLICK HERE Page 147 of 272 Things not going as expected Read the FAQ s Using the KeyDatabase to Retrieve Create your Firmware So you have connected your drive that you flashed already You know it s in your Key Database as you flashed it previously Connect it and refresh the port FimwareTool 32 DVDKey32 MTK Ash 32 HitachiGDR3120 IRC Channel VO Port VIA ports Only C Pa Include non DE Ports M Port Properties VO Address OxA000 Type SATA Channel Primary Postion Master Device Standard Dual Channel PCI IDE Controller Drive Properties Vendor PLDS Mame DG 16D25 FAN Rew 7485 Reserved OCAQAIDG08CG82081402 DVD Key Verified F Session Started Sat May 22 15 04 34 2010 Com Port USB Xractor Switch COM Dummy bin Only Com Port Properties Port COM Type Xecuter CK3 Pro Rev D Name Prolific USB to Senial Comm Port Status Ready Drive Key Key Status This ia a 32 bit process running on 4 x 32 bit CPUs POEtioOSsZ sys Driver Installed POrtio3sZz sys Driver Started thanks Schtrom Found 1 Com Ports Drive is Lite On Just from refreshing the port Jungleflasher has identified that you have previously dumped this drive it looks up the key from the database and tests it on the drive It s verified So WI
103. corner of the MTKFlash 32 tab g leOn UnLock Unlock burnt to Dual Layer R Media this is vital for later firmwares Simply burn it with no 360 Tools layerbreak settings with all data present on first Layer IMGBurn 2 5 0 0 will do this fine just select the ISO and confirm you want to burn to a large capacity disc with all data present on LO Layer 0 Once burned simply place it in your Samsung drive while connected to the PC wait 30 seconds and run JungleFlasher Unlocking the drive Before we can do anything to the drive it must be in Vendor Mode status 0x70 All Unlocking is taken place under the MTKFlash 32 tab Firmware Tool 32 DVDKey 32 MTK Flash 32 Hitachi GDR3120 Source Inquiry Identify Drive Serial User Guide You will presented with a screen resembling this select correct I O Port check for TS H943 in the Drive Properties click Intro Device ID and then check the Running Log Page 22 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 DVDKey 32 sn HitachiGDR3120 IRC Channel VO Port VIA ports Only F activate iso ae include non IDE Ports F Port Properties VO Address OxE800 SATA Hash Chip Properties Primary Vendor ID Master Device ID VIA VTE421 RAID
104. ct I O Port check for TS H943 in the Drive Properties and click Sammy Unlock gm JungleFlasher 0 1 79 Beta MTK Flash 32 TEN activate iso USB Only F ViAporte Oriy F PEA ae a Biia es CS TL 0000 a include non IDE Ports Beng Pot Popenes Bees ss i Connect any D ea Ce Flash Chip Properties SATA device Channel Primary Fern to any hank AEN p PC or laptop Device XECUTER X360USB PRO a via USB Drive Properties Type Veir Pakean Flashing Tasks Name DVD ROM TS H3434 intra Device ID Outro ATA Reset FAN Rew ns2e Reserved Read Erase Write DVD Key Verified F Phat E Slim po ortig3z sya Driver Installed BOrtios2 sys Driver Started thanka Schtrom HScOUSER PRO detected Version 0 18 Found 11 IO Ports Found 0 Com Ports Found 9 windows drives C D E F Hz I J E Found 1 CD DVD drives D You will be presented with the following warning notifying you that Sammy Unlock only works on stock drives amp drives with iX LT firmware and how to unlock if using i Xtreme sammy Un Lock I and LT flashed drives For tAtreme ver 1 4 and before unlock using 0800 DVD For iXtreme 1 5 unlock drive by powering up with tray half open Do you wish to proceed anyway Page 20 of 272 Things not going as expected Read the FAQ s Select yes and watch the Running Log in JungleFlasher this is a good return message JungleFlasher will also automatically send t
105. d Identify eecrcing Feaund save Key JADO GIDGCESZSTAIADIIFAT LISS TABS LEAI Firsware Daig FLIS DG 1L6D25 B326 Firmaza is Dummy from L f info bin kapy It Load the stock firmware as target Then press Spoof Source to Target button Page 146 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 MTK Fash 32 Hitachi GDR3120 User Guide JABACKUP S my xbox Dummy1 bin Vendor Model Rew Firmware Type DVD Key A30 Lite On DOG 16025 38500 Dummy from 61D08CE929789A349F AF 1334FFAB 11842 LOSsinto bin kev OSIG PLDS DG 16D25 2389 Advanced View Spoof Source to Target J JF Beta 0 1 69 Finmware 83850C BIN Vendor Model Rew Firmware Type DVD Key ma Lite On DG 16025 3650C Stock ASSAD 78502989622 1951 53326F SC AGE OSIG PLDS DOG 16025 6205 Check the running log to see all the info has been copied over double check the key matches Then if required press Save to File button Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 User Guide JABACKUFS my xbox Dummy 1 bin Vendor Model Rew Firmware Type Lite On DG 160D25 83850C Dummy from LO83info bin kew OS G PLDS DG 16025 305 Advanced View JF Beta 0 1 69 Firmware e3850C BIN Vendor Model Rew Firmware Type OVD Key oe Lite On OG 16025 83850C Stock 61D8C E929 9A345F AF 1S34FF ABI 1SA2 OSIG PLDS DG 16025 6385 Firmware Osig PLDS Firmware igs Stock Spoofing Target DVD Eey copied to target Inquiry string
106. d bin when prompted CLICK HERE TO RETURN Page 166 of 272 Things not going as expected Read the FAQ s Spoofing as a different type of drive Apart from spoofing a hitachi drive as another type the technique is very simple To begin with you should have a original dump from the drive you wish to clone NOTE You CANNOT SPOOF a Drive with LT Firmware as a DIFFERENT DRIVE so you should have a pre dumped bin file from the donor drive for LiteOn a Dummy bin for Samsung a Sam OFW bin for Beng a Ben OFW bin for hitachi a Hit OFW bin Now follow the tutorial to unlock follow the tut for that specific drive up to the point you would write to the drive for whichever drive you are going to spoof as the donor drive For instance you have a spare samsung drive you want to test a liteOn key with before you erase your LiteOn you have already dumped the drive and saved the Dummy bin So you take your samsung unlock it in accordance with the tutorial Page 167 of 272 Things not going as expected Read the FAQ s Which would then be in vendor mode ready to write firmware to FimwareTool 32 DVDKey32 MTKFlash32 HitachiGDR3120 activate iso 170 Port 360 Tools OxCFOO X Beng Sammy Lite On Port Properties UnLock UnLock Erase 170 Address OxCFOO Type SATA Flash Chip Properties Channel Primary Vendor ID OxBF Postion Master Device ID OxB6 Device VIA T6421 RAID Co
107. ditional Hardware that the 74850C Firmware drives do 83850C v1 drive s information is extracted through SATA Obtaining Dummy bin Please Note Dummy bin is not Original firmware it is FAKE firmware based on the structure of an Original firmware file and this makes everything easier to work with Connect your 83850c to your PC via S ATA Power on and run JungleFlasher v0 1 69b or above JungleFlasher0 1 74b gi For Support join JungleFlasher on EFnet example only Page 110 of 272 Things not going as expected Read the FAQ s Select DVDKey32 Tab FimwareTool 32 OVOKey 32 MTK Fash 22 Hitachi GDR3120_ _IRC Chanel VO Port USB Only C VIA ports Only C Com Fort Additional functions 0000 k Include nonIDE Ports eal Dummy bin Only Port Properties Com Port Properties VO Address Ox0000 Port Tipe USB iiis Type Channel Primary Mame Postion Master Status Device XECUTER X360U5B PRO a Ver 0 18 the Key Key C Drive Properties Status Vendor PLDS Name oeieo SF PhatKey SlimKey LO83info Dummy from KeyDB Dummy from iXtreme Pal Pal Pil Pal Pil Pal Pal Pal Pal Pal Pil Pal Pal Pil Fil Pal Pial Pal Pial Pal Pal Pil Pil Pil Pil Pil Pil Pil Pal Pial Pal Pil Pal Pil Pal Pal Pal Pil Pal Pil Pal Pial Pal Pal Pid Pil Pal Pal Pal Pal Pal Pal Pil Pil Pal Pial Pil Pial Pil Pal Pil Piat Pil Pal Pil Pal Pil Pial Pil Pal Pal Pal Pil Pal Pal Pal Pil Pal Pil Pal Pial Pal P
108. drive tray Press Escape to cancel os Page 54 of 272 Things not going as expected Read the FAQ s The drive should now report as in ModeB Drive answers normal Windows Inquiry 12 00 0 24 0 HoO00 05 80 00 324 5B 00 00 00 48 4C ZD 44 54 2D 53 54 __ 2z HL DT ST 0010 44 56 44 2D 52 4F 4D 20 47 44 52 33 31 32 30 4C DVD ROM EDRS1zZ0L OHO20 30 30 35 35 0059 Mode B Done Scanning for hardware changes Found drive C Hard Drive Found drive D Hard Drive Found drive E Hard Drive Found drive F CD DVD lt Hitachi found Found drive G CD DVD Once ModeB is set if using WinAPI JungleFlasher will scan for hardware changes automatically after 15 seconds if using vista win 7 ensure you run jungleflasher as administrator if drive does not show up then scan for changes in device manager WinAPI users should see similar to this under the Drive section Drive FA HL DT STDVD ROM GDR3120L0059 m Refresh Scan Query USmodes If not click Refresh List JungleFlasher WILL NOT scan for Hardware Changes after setting ModeB for PortlO users The Drive will NOT appear in drive list on right hand side Instead the tasks are carried out as long as the drive Inquires on the I O Port Port Properties Vendor HL DT ST Name DVD ROM GOR3120L Fi Rev 0059 Reserved OBMAB 0601 24 Open Close BACK TO FLOWCHART Page 55 of 272 Things not going as expect
109. drives but is also applied to pre 78 Hitachi drives and Samsung drives and can be verified on Beng too though not automated like Lite on Using this ability it s now possible to create a new Dummy bin from the key database and Verify that it is correct Page 4 of 272 Things not going as expected Read the FAQ s There are also 5 checkboxes found in this tab USB Only VIA Ports Only and Include non IDE ports added for extra safety and compatibility Additional Features for use with the CK3 CP and Maximus USB Xtractor Push Button to extract feature this launches the DVDKey32 command from the Hardware Device itself The final one being Dummy bin Only this being a cleaner method of storing files as Dummy bin incorporates the other files obtained FimwareTool 32 DVDKey 32 MTK Flash 32 HitachiGDR3120 IRC Channel MTKFlash32 contains a variety of functions from unlocking and reading of BenQ Samsung and Slim LiteOn drives using their dedicated Unlock buttons or LiteOn drives after placing them in Vendor Mode using MRA Hack MTKFlash32 is also where you are able to send the Intro of Death a k a LiteOn Erase to the LiteOn PLDS DG16 D2S after obtaining DVDKey and for writing to the drive after Intro of Death or once drive placed in Vendor Mode using MRA Hack MTKFlash32 will also erase and write Samsung and BenQ and LiteOn drives once the drives have been unlocked placed in v
110. e a replacement PCB Pro kit modified Orig PCB Option 2 Use a spare 9504 PCB During 13599 Dash update 0272 stock firmware is flashed to your PCB and locked Option 3 Unlocking your PCB more difficult Page 210 of 272 Things not going as expected Read the FAQ s Flashing your Replacement PCB T X or Pro Kit modified PCB You should already have Slimkey d your drive and obtained a dummy bin This should be loaded as source and allowed to auto load iXtreme Firmware as target FimwareTool 32 DVDKey32 MTKAash 32 HitachiGDR3120 IRC Channel C Users SNES LIM 407 Dummy bin Vendor Model Rev Firmware Type LiteOn DG 16D4S 0401 SlimKey Extract OSIG PLDS DG 16D45 401 User Guide Ensure Keys in both source and target Match Open Target Firmware F3 JF Beta Finnware LT Plus 0401 7 1 59 bin Manual Vendor Model Rev Firmware Type Spoofing LiteOn DG 16D45 0401 LT Plus 1 9 OS IG PLDS DG 16D45 401 Save to File Genuine LI plus v1 59 Drive key n a Firmware Osig PLDS DE 1eb45 0401 Firmware is LI FPlus 1 9 Spoofing Target DVD Key copied to target Key Sector copied from Source to Target Target is LI ID strings not copied to Target a um Connect your Replacement PCB And select MTK Flash 32 Tab Note PCB s are blank when shipped as are the Pro kit installed chips So Drive properties will NOT show up Page 211 of 272 Things not going as expected Read the FAQ s Ensu
111. e inserted or for other reasons You will need a Xecuter Probe 3 PMT or a GND probe of your own building the switch of the Probe 3 PMT isn t required Open the drive case and expose the bottom of the PCB Locate MPX01 it is labeled on the PCB NS ge Ley 06 c6060 oe _s se Se Pe 4 I lt i d Fi a 1 eee qalis H i i 9 a ee S e ee ie ee 3r F i n ki A gri Hi A a di vaj be s ak E a ai a o a a Ci 1 5 a s t amp 2 e E Eb e a aje 4 a tl 1 ba eo i i b m a a bo ad Y e 2 2 8 ie b a e a Ely Ife ote Q o LR uI Le Of MOOR TA TEAR E ad a h T ide m eS MEDINTEK HT 1335WE 100T 5LEL Cur aropa G2 8108 Tea oo gt OSH 2 on 23 O22 F s cOSA4 osni 7 i tie a7 x a Fa gt gt l 399 959 gt e rey Paa T LTL AAA ETETETT ee ARAALU S 2o y e nis Page 204 of 272 Things not going as expected Read the FAQ s Load up Jungleflasher and make sure you have the correct IO port selected If your drive is badflashed it will NOT show in Jungleflasher even after a port refresh Make sure the Slim button is ticked Then press Intro Device ID Firmware Tool 32 MTK Fash 32 HitachiGDR3120 IRC Channel activate iso VO Port USB Only C VA ports Only C 360 Tools Port Properties roe linl ack ra Unlock VO Address
112. e using DVDKey 32 to obtain data select DVDKey32 Tab Firmware Tool MTK Fash 22 Hitachi GDR3120_ IRC Channel Check Drive Properties for PLDS DG 16D2S Select Correct I O port check for drive properties in the Drive Properties section VO Port VIA ports Only Include non IDE Ports K Port Properties VO Address boA000 Type SATA Channel Primary Postion Master Device Standard Dual Channel PCI IDE Controller Drive Properties Vendor Name FAA Rev Reserved DVD Key PLDS DG 16D25 7485 0CA0ATD608CGE2081402 Not Found Select COM port relavant to your setup shown in table below Page 96 of 272 Things not going as expected Read the FAQ s optionally choose to dump dummy bin only shown in red as opposed to all 5 files Key Inquiry Identify Serial and dummy bin USB tractor Switch Dummy bin Onhy USB Xtractor user should enable Additional Functions check box shown in blue Additional functions Right click on DVDKey32 button for time delay settings if you require a little settling time to ensure probe is correct position before Jungleflasher attempts to read the key time after button press before key read starts Du 5 Secs ba key ile 10 Secs 15 Secs 20 Secs kl Par Pal Pal Pal Pal Pal Pal Pal Pal Pal Pal Phl Fal then insert probe spear into R707 via as p
113. eTool 32 DVDKey 32 MTK Rash 32 Htach GDR3120 DABACKUPS my xbox Dummy bin n Save Dive Vendor Model Rey Firmware Type DVD Key 0xA030 Key LitOn OG 16D25 83850 LO 3info Extract SIDBCES29729A349F AF 1334FFABIISA OSIG PLOS DG 16025 8385 eho 7 Advanced View DJF Beta 0 166505 Finmwae toc 1 6 samsung bin Se gt Manwal Vendor Model Re Firmware Type DVD Key O40EC Spooting Samsung TSHA ms28 iXTREME1 6 1256F TSHA OSIG TSSTcopDVD ROM TSHM34ms28 Spoofed As PLDS DG 16D25 8385 Fifteiviare type is LOSSinfo Extract a Spoofing Target DVD Key copied to target Inquizy string copied from Source to Target Identify string copied from Source to Target Identify string copied reversed E Larget spooted as PLDS DG 16D25 EEE Then all you have to do is Write to the drive the same way as you would for that type of drive In a samsungs case click Write when on the MTK tab The same method applies to all drives apart from Hitachi which is covered HERE CLICK HERE TO RETURN Page 170 of 272 Things not going as expected Read the FAQ s Advanced User Info Advanced Ctrl Fkey Functions Ctrl F1 key Enable context menus Ctrl F2 key Disable context menus Ctrl F3 key To Send Vendor Intro to currently selected Port Ctrl F4 key To open iXtreme from firmware folder to Target Ctrl F5 key Set Modder mode backup directory clear folder to disable it Ctrl
114. earlier version of Windows select the compatibility mode that matches that earier version Help me choose the settings Run this program in compatibility mode for Windows XP Service Pack 3 settings E Run in 256 colors Run in 640 x 480 screen resolution Disable visual themes Disable desktop compos Digable display scaling on high DPI settings CLICK HERE FOR ADDITIONAL INSTRUCTIONS FOR USE WITH x64 VISTA WIN 7 Page 8 of 272 Things not going as expected Read the FAQ s WHEN you run Jungleflasher you MUST ensure PortlOXX sys is RUNNING Unless using X360USB Pro You can do this easily by looking at the log at the bottom of the window as shown XX will be either 32 for x86 operating systems or 64 for x64 operating systems Fal Fal a Fal Phl Phl Phl Mhl a Phl Phl Phl Phl Phl Fal Mhl Phl Fal Phl Phl Phl Fal Phl Phl Fahl a a lt Fal i JungleFlasher 0 1 79 Beta 210 Session Started Sat Mar 05 07 56 26 2011 This is a 32 bit process running on 4 x 32 bit CPUs Found 10 I O Ports Found 0 Com Ports Found 93 windows drives C D E F Hz I Jd Kz IF YOU ARE USING X360USB Pro PortlO is NOT REQUIRED Page 9 of 272 Things not going as expected Read the FAQ s WARNING Flashing Tasks Intro Device ID Outro ATA Reset Read Erase Write Phat E Slim _ a IF YOU SEE THIS BUTTON WHILST WORKING ON A Phat LiteOn
115. ed Read the FAQ s 2 3 Mode B on an already flashed drive Mode B can be easily achieved on a pre flashed Hitachi Ensure SATA cable connected to pc To do this using a Xbox 360 console for powering the drive Eject the drive Pull the power cable from the rear of the DVD Rom Plug cable back in ensuring correct orientation of plug 4 The drive tray will close if pre flashed 5 Check that it takes 2 presses to eject and 2 or 3 to close Using a connectivity kit power dongle 1 Eject drive using button on kit 2 Switch power off then on again 3 The drive tray will close if pre flashed 4 Check that it takes 2 presses to eject and 2 or 3 to close Start Jungleflasher click on Hitachi Tab ensure correct I O port If using WinAPI drive should show in drive list on right hand side If using PortlO option drive should be visible in port on left hand side ONLY CONTINUE ON FLOWCHART Page 56 of 272 Things not going as expected Read the FAQ s JungleUSB Drivers and USmodeB XP ONLY JungleUSB is a hacked USB Storage driver that enables windows to see a Mode A drive over USB this enables USmodeB command to be sent and the drive Installing JungleUSB Driver can be downloaded from the usual places First you need to connect the drive to your PC with a SATA USB Bridge Adapter Windows will automatically install the device as USB Mass Storage Device You will need to upda
116. ed Read the FAQ s Firmware Tool 32 DVD Key 32 MTK Aash 32 Hitachi GDR3120 IRC Channel VO Port VIA ports Only F activate i30 kE800 Include non IDE Ports ben Sammy i VO Address OxE200 Type SATA Hash Chip Properties Channel Primary Vendor ID het Postion Master Device ID O11 Device VIAVT6421 RAID Controller MAIC MA2Z5L 2005 262144 bytes Serial flash with status 0x73 CLICK HERE TO PROCEED If it didn t work read on Alternate method if you are struggling with the above Load JungleFlasher and select MTKFlash32 tab FinmwareTool 32 DVDKey 32 Hitach GDR3120 Source inquiry identify Drive Serial Then select correct I O Port by verifying PBDS VAD6038 or SATA DVD ROM shows in the Drive Properties and click Intro Device ID Page 42 of 272 Things not going as expected Read the FAQ s INFO Drive could also be 62430C 04221C which has different properties MTK Flash 32 HitachiGDR3120 IRC Channel Drive Properties Vendor SATA VIA ports Ordy EJ activates ame DVD ROM 3 Took FAV Rey 6243 Include non IDE Ports Reserved 0C DVD Key Not Found Drive Properties Hash Chip Properties Vendor PBOS Vendor ID Name VAD6038 Device ID Faw Rew TH Reserved 1C RAID Controller DVD Key Not Found Session Started Sat May 22 09 12 32 2010 This isa a 32 bit process running on 4 x 32 bit CPUs POLtLOsSzZ sys Driver Installed POLtLOsSZ sys Driv
117. ed Read the FAQ s Possibly Stock 83850C v1 CLICK HERE Which FW Version If this fails return here and use PMT Method Want to use Legacy Methods CLICK HERE ONLY MRA will work on 0251 Page 85 of 272 Things not going as expected Read the FAQ s Page 86 of 272 Things not going as expected Read the FAQ s Lite On PLDS DG 16D2S 09C Legacy Methods Firmware versions 74850C 83850C 83850C v2 93450C Overview With the release of the 83850C firmware LiteOn drives required two totally different methods With the release of the 83850C v2 and the 93450C there was no known way to extract the key However there is now a method to dump the whole FW from any of these LiteOn drives which is the ONLY method to get the key from the 83850C v2 amp the 93450C Although MRA method works on all current LiteOn s DVDKey32 LO83Info will always remain the simpler method to obtain info from earlier drives The 74850C requires additional hardware it requires the utilization of a RS232 to TTL serial hardware or a popular variant such as Xecuter CK3 Pro or Xecuter CK3 Lite with the Xecuter Probe v1 or v2 or Maximus USBXtractor amp powerunit or Maximus Xtractor with optional spear to obtain the drive specific data key inquiry identify Serial which once extracted are used to create the dummy bin Whereas the 83850C v1 does NOT require additional hardware and can be dumped flashed us
118. eel Dummy bin Only Port Properties Com Port Properties VO Address Ox0000 Port Type USE Type Channel Primary Name Postion Waster Status Device XECUTER X360USEB PRO Di Ver 0 183 i Key Drive Properties Status Wendor Drive in Vendor Mode Name PhatKey Slim Es Fan Rev 3 DVOKey32 Dummyisen Reserved DVD Key Verified Dummy from KeyDB Dummy trom treme 00 01 60 03 o0 00 00 00 o0 005 60 00 oa 00 00 00 oa gg 00 ad oo 00 00 AO verified Thanks C4evve You will be faced with this Page 208 of 272 Things not going as expected Read the FAQ s MTK Vendor Intro failed oa Click Yes the power off then on again Once dump has completed it will also verify the Key as shown below keyi eee ia verified Thanks Cdeva Grabbing Key sector Key Sector verified Grabbing Serial infor _ Drive is Slim Lite On Key found in FeyDB at record 21 slimd emc Hey i Glabrae ee Jungleflasher will then populate this information and create a Dummy bin You will be asked to Save the file as always Please do so Page 209 of 272 Things not going as expected Read the FAQ s Ee Pictures Me Music jaf Recently Changed M searches d Public Folders A File name Save as type Firmware Images bin Hide Folders es Firmware Tool 32 tab will be automatically opened and your Dummy bin loaded as source Option 1 Us
119. endor mode MTKFlash32 will show in the lower left section the details of the drive inquiring on the respective I O Port listed above This is where you will identify which S ATA Port to use for carrying out the process FimwareTool 32 DVDKey 32 IRC Ch annel Hitachi GDR3120 As mentioned previously the Hitachi Drives are flashed completely differently to the MTK Based drives Hitachi s are flashed as a Live Drive on a sector by sector basis For this reason JungleFlasher has its own dedicated Hitachi tab all the flashing options you may need to do can be done under this tab As with the other Tabs JungleFlasher will show the I O port list for identifying what S ATA Port your drive is on It also incorporates a Raw Mode B command for putting a drive into Mode B and automates the Play Pause Eject for 79Unlock Audio Disc still required Once the drive is actually in Mode B you can use the flashing options located in this section of the application the options themselves are pretty self explanatory With the Firmware Pack installed JungleFlasher will automatically load the correct iXtreme file for your drive or Original Firmware if restoring Page 5 of 272 Things not going as expected Read the FAQ s FimwareTool 32 MTK Flash 32 Hitachi GDR3120 With the release of JungleFlasher 1 71 there is now a IRC Channel tab within the actual program If you have read this tutorial and
120. entify bin serial bin unless you have selected dummy bin only box and dummy bin Of course should you have enabled the Dummy bin Only option you will only be prompted to save Dummy bin Page 100 of 272 Things not going as expected Read the FAQ s ate j eg uit ti Ten ES o Organize New folder H Documents Date modified gt ital Downloads b al Music b Pictures l Videos No items match your search be Homegroup a jE Computer gt Ey Win 7686 C3 b cq DATA D l gt a Local Disk E b g Backup H b a Win 7 64 4 File name Durmmy bin There is now No Requirement to dump the key multiple times Nor is there a requirement to test it in a spare drive The key is dumped then Verified against the drive itself Using c4eva s extremely clever verification routine Jungleflasher tests the key against the drive much like the xbox itself does There is a 1 in 3 4025 x 10438 chance of guessing the right key so the fact it verifies means it s correct Page 101 of 272 Things not going as expected Read the FAQ s Firmware Manipulation JungleFlasher will then prompt you asking if you would like to auto load iXtreme for Lite On Drives You must have installed the JungleFlasher Firmware Pack into the same directory as JungleFlasher exe if you wish to benefit from this feature Loading Source ee Lite On firmware loaded to Source buf
121. eon available Loading Dummy bin x Do you wish to repair the serial from drive barcodes Yes Mo Click yes to rebuild data JungleFlasher will then pop up the Serial Rebuilder Applet Update Serial Info 9999929999 9999999909099 PCB HW Ver ORO To rebuild the Serial Data you must copy the information from the physical drive itself into the boxes in the applet shown Page 164 of 272 Things not going as expected Read the FAQ s The data required is located in 4 places 1 The Drive Chassis Shell 2 The Hardware Revision of the drive 3 The Laser 4 The PCB of the drive itself 1 The Drive chassis Shell Located on the top of the drive and 17 Characters long Insert into the cover area on the Serial Rebuilder 2 Hardware Revision Possibly the easiest of the four located on the top sticker of the drive and usually AOA1 or AOA2 Insert this data into the HW Ver section of the Serial Rebuilder 3 The Laser Self explanitory located on the base of the laser Page 165 of 272 Things not going as expected Read the FAQ s Insert this into the Laser area of the Serial Rebuilder 4 The PCB of the Drive You will need to remove the top of the Drive Case to see this data and it is sometimes obscured by pen The Data will start S4P It s the 2 and 3 Line you require Insert this data to the PCB section of the Serial Rebuilder Once done click Ok and save Dummy_fixe
122. er Started thanks Schtrom Found 0 Com Ports Drive isa Beng JungleFlasher will prompt you with instructions MTE Vendor Intro failed Click Yes the Running Log will display something similar to this Page 43 of 272 Things not going as expected Read the FAQ s Sending Vendor Intro to port OxCFOO Invalid Status Pe sending Vendor Intra The drive should be in Vendor Mode 0x73 now and return good flash chip properties you can check in the Running Log or Flash Chip Properties Drive properties should display Drive in Vendor Mode Firmware Tool 32 DVD Key 32 MTK Hash 32 Hitachi GDR3120 IRC Channel VO Port VIA ports Only F activate 150 E200 Include non IDE Ports Port Properties VO Address OxE800 Type SATA Hash Chip Properties Channel Primary Vendor ID het Postion Master Device ID 0x11 Device VIAVT6421 RAID Controller Name MAIC MA25L 2005 262144 bytes Drive Properties Seral flash with status 0x73 Vendor Drive in Vendor Mode Hashing Tasks FAV Rev Intra Device ID Outro ATA Reset Resend ied DVD Key Not Found CLICK HERE TO PROCEED Page 44 of 272 Things not going as expected Read the FAQ s Reading the Firmware from the drive Now we would like to read the firmware from the drive first so select read Drive Properties Type Vendor FEDS Name VAD6038 64930C Flashing Tasks Fi Rev Intro Device ID Reserved DVD Key Not Found
123. er table below Page 97 of 272 Things not going as expected Read the FAQ s PROBE VARIATIONS AND LED INDICATION AS FOLLOWS CHECKED SELECTED THIS WHAT YOU SHOULD SEE Com Port USB Xtractor Switch COM7 x Dummy bin Only Com Port Properties COM Xecuter CK3 Pro Rev D Lad once probe Prolific USB to Serial Comm Port a ae b O gi touches R707 to Ready Ji aa ey Ssh indicate a good 7 5329 ee a circuit connection Using USB cable to connect can also use serial Mode switch to PROBE BLUE POWER LED o PMES LIT power Com Port na POE r E Xtractor Switch i USB Xtractor Switch supplied to probe COM7 x Dummy bin Only 7 Com Port Properties ON ee R GREEN Pot COM AA o CONENCTION LED Type Xecuter CK3 Pro Rev D g lt LIT indicates Name Prolific USB to Sernal Comm Part a good connection Ready na n w to R707 circuit Using USB cable to connect can also use Me Sh p ORANGE ma a i STANDBY LED EXTINGUISHED safety circuit serial disengaged XECUTER PROBE 2 in PROBE v1 MODE Page 98 of 272 Things not going as expected Read the FAQ s Com Port J Com Port Properties Port COME Type 360 tractor Name USB Serial Port Status Ready Using USB Cable to connect can also use Serial Com Port E Com Port Properties Port COM3 Type USB Xtractor Name USE Serial Port Status Ready USB ONLY GREEN POWER LED LIT CONNECTIO
124. ers Hy System devices oe Universal Serial Bus controllers ie JungleUSB 760 Mass Storage Driver ng SS TOOL PCT te USB Open Hast Controller gt SiS T001 PCT to USB Onen Host Controller Now Start JungleFlasher and select the Hitachi GDR3120 tab Click the USmodeB button Page 61 of 272 Things not going as expected Read the FAQ s Fims Toal 32 DYDKey 32 MTK Flesh 32 Hiashi GORIAD Fan nips Une Win APT i ia t Use Fat 6 7 Vee Nobina ighin Name 40 320 x Flashing Oplan You are about te scan for your Hetachs Dove and send USrmodeE You will need to use the JungleWSB diver for this ta work Connect the USB 2 SA TA te the USB port with the dive connected and powered on wact 15 seconds then press OF Preji Escape ta cancel ok Cancel OR A RR EAD RR ee ee JungleFlasher 0 L 89 Beta Session Started Sat Bay Of L i4dd 33 20050 Thit is a Jd bas precete running cn a J2 Ease CPU FortId if installed and runnir JungleFlasher will scan for any 360 Hitachi Drives connected via USB and send Mode b Command to that drive The Drive should now be selectable in the drop down box Dave GA HUD TS TDVO AOM GOR S120 Oe oe Usmodes Hae Flashing Options ive Sento Lit Manual Spoof 3 Auto Spoof Flash iMtreme Trarniie Meth Restore Firmware Cheeta Set Checksum Mocks Seles Free Flash FAJ Upc Read to Source Found a
125. es Type Serial flash with status 0x72 ive i Vendor Drive in Vendor Mode Flashing Tasks Name 7 Quiron AbAeset FAW Rew Reserved DVD Key Verified Phat Slim Sending Vendor Intro to port 0O x0000 Serial flash found with Status Ox7TZz Sending Device ID request to port 020000 Manufacturer ID OxEF Device ID 0x11 Flash Name Winbond NEX W25P20 NA2ZSP20 Flash Size 62144 bytes Now the drive is in Vendor Mode select the Write Button Page 241 of 272 Things not going as expected Read the FAQ s Hashing Tasks intro Device ID Outro ATA Reset Read Erase Write Phat Slim Writing will commence and its progress shown in the log Getting Status from port Ox0000 SP1 flash found with Status Ox72 Sending Chip Erase to Port Ox0000 Erasing writing target buffer to flash Writing Bank O Writing Bank 1 2020005 Writing Bank 2 writing Bank 3 2 wwe nee anes Flash Verification Test Reading Bank O 0220022 es Reading Bank 1 0222 22a aes Reading Bank 2 1 2 2 enna naaes Reading Bank 3 s Dumped in 4912m5 Write verified OK Restoring sector Ox3E000 Sending Sector Erase to Port Ox0000 Erasing Ox3E000 Writing Ox3E000 Restore verified OK Drive 15 Lite on Key found in KeyDB at record 20 N A le eS a SC EE Key has been tested and verified thanks C4eva Now to RE LOCK
126. esting in console Page 136 of 272 Things not going as expected Read the FAQ s Vampire Using Rebuild Board Install the Rebuild board as shown on 360Xtractor website On MtkFlash32 Tab of Jungleflasher Press intro Device ID Button then press the Yes on the pop up window that appears Which will lead to show the following This ia a 32 bit process running on 4 x 32 bit CPUs POLrtio3szZ sys Driver Installed POrtio3sz sys Driver Started thanks Schtrom Found 0 Com Porta Sending Vendor Intro to port 0xE800 Status Ox7TF Re sending Vendor Intro DONT POWER XTRACTOR YET PRESS THE BUTTON ON THE VAMPIRE AND HOLD IT then make the PIN101 Probe touch the VAMPIRE P101 Pad on the rebuild board IMPORTANT IT S RECOMMENDED TOUCH ON THE PAD SURFACE AND NOT ON THE HOLE Page 137 of 272 Things not going as expected Read the FAQ s pS E a a id a si 3 2 E would read u T JB 4 4 While you are holding the button in and the probes are in contact with board TURN ON XTRACTOR after 1 or 2 seconds you should see the drive gets detected with a Status 0x72 Page 138 of 272 Things not going as expected Read the FAQ s FimwareTool 32 MTK Flash 32 HitachiGDR3120 IRC Channel VO Port VIA ports Only E KES Include non IDE Ports Port Properties VO Address OxE800 Type SATA Channel Primary Postion Master Device ID Device V
127. ewiee ID Outro ATA Reset Read Bese o Wte If everything has been done correctly you should be faced with this Firmware Tool 32 MTK Fash 32 Hitachi GDR3120 IRC Channel I O Port VIA ports Only C 360 Tools E800 Include non IDE Ports Beng Sammy p VO Address OxE800 Type SATA Hash Chip Properties Channel Primary Vendor ID OxC2 Postion Master Device ID 0x11 Device VIA VT6421 RAID Controller MAIC MA25L2005 62144 bytes Drive Properties Serial flash with status Ob 2 Vendor Drive in Vendor Mode Vendor ID OxEF Device ID 011 Name Winbond NEXIW25P20NX25P20 262 184 bytes Serna flash with status x72 Serial flash found with Status OxTz Sime Type Sending Device ID request to port OxEsoo Manufacturer ID OxtCz Device ID 0x11 Flash Name MAIC M Z5L2005 Flash Size 262144 bytes Could look like this if it s Winbond instead of MXIC After you get these good flash properties quickly operate the added switch again to 3v3 side Off in pic 1 Now press the Read button Page 123 of 272 Things not going as expected Read the FAQ s tra DevicelD Outro ATA Reset Ee we Jungleflasher will now dump your Original LiteOn Firmware When prompted to SAVE it is advised you do so The dumped firmware will now automatically be loaded into source in firmwaretool 32 tab MTK Flash 32 Hitachi GDR3120 IRC Channel
128. fer E Do you wish to auto load Lite On iXtreme Click Yes to auto load iXtreme from the firmware pack for Lite On into the Target Buffer JungleFlasher will also load your previously dumped Dummy bin as Source Firmware Then copy data from source to target automatically Just verify Source data reports as it should DVDKey 32 Extract with OSIG of PLDS DG 16D2S with the same key you dumped check log for reference Now verify unique Source Data matches that in Target Buffer and click save to file if you wish to backup your Hacked firmware Page 102 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel Source Dive Sera C Jungle Hasher v0 1 74 Beta 138 New folder Dummy bin User Guide Vendor Model Rev Lite On DG 16025 748500 OVDKeya2 e OSIiG PLDS DG 16D25 7485 Advanced View Check The Key has been check the OSIG models info match copied from source to target 1 74 Beta 136 Minmware iettv 11 748 bin Rev Firmware Type DVD Key ma LiteOn DG 16025 74850C iXtreme LT 1 1 9B 49DEBF 39358220 0950F B4487D 1486 OSIG PLDS DG 16D25 7485 At this stage use Drive key 8 n a PPP ee eee eee eee eee eae ae Firmware Osig PLDS DE 1eDz5 7485 this to save year Firmware is iXtreme LT 1 1 hacked FW Spoofing Target DVD Key copied to target Target is LI ID strings not copied to Target Serial data copied from Source to Target Wo Calibration data
129. folder _ BENQ OFW bin 04 03 2011 21 46 BIN File Durmmy bin 02 03 2011 12 28 BIN File Hit OFW bin 30 01 2011 13 48 BIN File _ Identify bin 02 03 2011 12 28 BIN File _ Inguiry bin 02 03 2011 12 28 BIN File Key bin 02 03 2011 12 28 BIN File _ SAM OFW bin 04 03 2011 21 32 BIN File Serial bin 02 03 2011 12 28 BIN File a Homegroup iL Computer amp Local Disk C DVD RW Drive D ca OLD win 7 EJ cay DATA F ga Local Disk G File name Save as type Firmware Images bin Lite On firmware loaded to Source buffer Do you wish to auto load Lite On iXtreme If this is what you wish to do click YES Page 192 of 272 Things not going as expected Read the FAQ s This will as normal take you to the Firmware Tool 32 tab with your Dummy bin loaded as source and the target Firmware loaded and spoofed with your drives details From here the Jungleflasher procedure is identical to the previous versions Ensure the 2 keys match each other then proceed to erase and write your drive Hitachi GDR3120 ser Caves Pee evatiar ia geil he earn 23 C jungleflasher Dummy bin 3 Save Drive Compatible Vendor Model Rev Firmware Type DVD Key A030 LiteOn DG 16025 93450C Phatkey extract FSFEDOASC4SACTCD715326092E6118E4 with Xbox 360 3 DVD drives OSIG PLDS DG 16D25 9345 Hitachi Samsung Beng amp Liteon Tanget Ap i 7 FAT E Advanced View D JFBeta D 1 69
130. g RAM Upload method IK Hash 22 1 Hitachi GDR3120 Lee Fon i Drive Revision 32 y 40 Ex Ra Sector List Dump Drive 4G A7 Manual Spoof AE f pg Auto Spoof Flash LT Plus 5 Transter Method Restore Firmware Set Checksum C re i Free Aash Ram Upload a Read to Source So click Read to Source Hashing Options Dump Drive Manual Spoof Auto Spoof E Aash LT Plus Restore Firmware _ Page 68 of 272 Things not going as expected Read the FAQ s JungleFlasher will now dump the drive using RAM Upload Method Found 3 CD DVD drives Playing 9U0nlock Audio CD Fausing Y3Unlock Audio CD after 750m5 Ejecting 73U0nlock Audio CD Setting bit 3 OxSEPE Executing code in Fam Done Dumping frw of Hitachi 00787 0079 by Fam Upload Method wia WIN3 AFI Once it has read the Firmware it will prompt you to save the Firmware Medel gt Firmware OOO search EEEEEE EE z BOO iy cig a By Organize saa Views E New Folder ote Linke Date modified Type Size Tiaan This folder is empty Desktop H Recent Places Computer Pictures Music More Folders File name Save as type Firmware Images bin i gt Hide Folders Once saved it will open it as Source in FirmwareTool32 Vendor Model Rev Firmware Type DVD Key 4600 bc 0000000 Hitachi GDR3120L 0079 Stock RIAA OSG HL DT ST DVD ROM GDR3120L00793 FLASH i
131. gleFlasher plug the X360USB Pro back in select it from the IO Port list if it hasn t automatically done it for you Power on the drive So you clicked refresh the drive is powered on and nothing shows up _FimnwereTool 32 _DVDKey 32 MTK Rash 32 Hitachi GDR3120 IRC Channel VO Port USB Only F ViAports Only activate iso 360 Tools 00000 Include non DE Ports Beng Sammy Port Properties E UnLock meren EA Te te On Erase lO Address Ox D000 Type USB Hash Chip Properties Channel Primary Vendor ID Postion Master Device ID Device XECUTER 360U56 PRO Name Ver 0 17 Size Drive Properties Type Vendor No Drive Detected ime Hashing Tasks Svea intro Dewice ID Outro ATA Reset_ Reserved Read Read Erase o Eese Write Oo Wie DVD Key Page 194 of 272 Things not going as expected Read the FAQ s Then select Intro Device ID button n ee lt JungleFlasher 0 179 Beta i i lt mS Firmware Tool 32 DVDKey32 MTK Flash 32 Hitachi GDR3120 IRC Channel 0 Port USB Only F VIA ports Only C activate iso RAL T Tr Aen 360 Tools 00000 v Include non IDE Ports Beng Sammy Port Properties UnLock UnLock eon tee Connect any KaT A SATA device USB Flash Chip Properties Primary Vendor ID to any Master Device D PC or laptop XECUTER X360USB PRO Drive Properties Vendor No Drive Detected
132. he target drive The DVDKey32 tab is used to extract info from LiteOn the undumpable drive All unique information is extracted DVD key unique inquiry and identify strings and drive serial information This info is stored in one easy to use file Dummy bin This is a 256kb file that mimics the approximate structure of a BenQ firmware file and is automatically loaded to the source sub tab in the FirmwareTool 32 Tab Jungle Flasher v0 1 79b introduced support for P g Mo Th in PMT a new method of extracting the DVDKey from all Phat LiteOn DVD Drives using only a switch on the 3 3v line and a probe to GND at the very least or using such devices as the Xecuter Probe 3 Legacy methods are still supported under this tab such as LO83info DVDKey32 Dummy from iXtreme and rebuilding a Dummy bin from individual files key inquiry identify serial Users who wish to utilise these methods can find information contained within the LiteOn Flow Chart of the User Guide The MTKFlash 32 tab is used to unlock Beng Samsung Slim 9504 LiteOn drives and then dump the current flash for use in the source sub tab in FirmwareTool 32 tab You can also erase a LiteOn in preparation for flashing All MTK Mediatek Based drives can be flashed using this tab The Hitachi GDR3120 tab is for Hitachi drives which are flashed differently from the MTK based drives mentioned above therefore have their own dedicated tab Hitachi s are flashed as a Live
133. he intro command and put the drive in Vendor Mode Sending Sammy Un Lock to Drive on port OxE600 Stage 1 Complete Stage Complete Stage 3 Complete Done Sending Vendor Intro The drive should be in Vendor Mode 0x70 now and return good flash chip properties you can check under Flash Chip Properties Drive Properties should show Drive in Vendor Mode ge JungleFlasher 0 1 79 Beta MTK Flash 32 HitachiGDR3120 IRC Channel activate so J Mee E Eal l oc I O Fort USB Oniy VIA ports Only 360 Tools w000 include non DE Ports V Beng Sammy Lite On Sim nae UnLock UnLock Erase UnLock Xecuter VO Address Ox D000 USB PFa Chin Properties iad Presents N Vendor ID OxBF The Hottest Device ID OxB6 Master a Product of XECUTER X360USB PRO n Mtg sagt eure me Gage 9011 Parallel flash with Status 0x70 Drive in Vendor Mode an eee Intra DeviceID Outro ATA Reset ite Redo o Base i Wt DVD Key Verified F Phat Ei Sim stage 2 Complete Stage 3 Complete Done Sending Vendor Intro Requesting Device ID Manufacturer ID OxBF Device ID OxB6 Flash Name SST S55T395F020 Flash Size 262144 bytes Now CLICK HERE to proceed Page 21 of 272 Things not going as expected Read the FAQ s Xtreme 3 3 gt iXtreme 1 4 Unlock using Activate iso For this you need the Activate iso found in the upper right hand
134. her will now Dump your Original LiteOn Firmware When prompted to SAVE it is advised you do so Page 129 of 272 Things not going as expected Read the FAQ s The dumped firmware will now automatically be loaded into source in firmwaretool 32 tab FimwareTool 32 DVDKey32 MTK Fash 32 Hitachi GDR3120 User Guide C ungleFlasher v0 1 74 Beta 138 New folder Lite OFW bin Save Drive Vendor Model Rev Firmware Type DVD Key Wa Ra TE Key lit On DG 16D2S 93450C Stock 9B749DEBF3935822C0950FB44B2D 1488 OSIG PLDs DG 16D25 S345 V Advanced View Target inquiry ident ofa a n Target i Inquiry Identify Dive Sera Lite On firmware loaded to Source buffer mware e Do you wish to auto load Lite On iXtreme fanua Vendor Model Rev Firmwal pocting OSIG eto File Reading Bank 325 Lite On Dump file saved to Lite OFW_bin Loading firmware from butter Drive key n a SBT49DER RPS 935s822C0950FR44B2D1488R Firmware Osig FLDS DE 1eD25 9345 Firmware is Stock Eey added to database TEA Select Yes Page 130 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 MTK Fash 32 Hitachi GDR3120 IRC Channel User Guide C Jungle Aasher v0 1 74 Beta 138 New folder Lite OFW bin Vendor Model Rew Firmware Type DVD Key na Lite On DG 16075 H50C Stock SB749DEBF39359221 OSIG PLDS DG 16D25 9345 uy ent Dive Sera CAJungleHasher v0
135. hich will lead to show the following This ia a 32 bit process running on 4 x 32 bit CPUs POrtio3sz sys Driver Installed POrtio3sZ sys Driver Started thanks Schtrom Found 0 Com Porta Sending Vendor Intro to port OxE6OO Status Ox7TF Re sending Vendor Intro Probe the 101 pad and 3 3v points on PCB whilst holding the button on vampire pressed in Page 142 of 272 Things not going as expected Read the FAQ s cate 2 al trie Tm L Tete AN Tad ae A a se gt Way v 4 d A E ane ene 4 44 lt A Ate em S ss 3 ad gt a AVF KESE F 4 gt oo While you have the button on Vampire pressed in and probing the correct holes TURN ON XTRACTOR after 1 or 2 seconds you should see the drive gets detected with Status 0x72 Page 143 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel VO Port VIA ports Only F activate sc 360 Tools E800 X Include non IDE Ports Beng Sammy VO Address OxE800 Type SATA Hash Chip Properties Channel Primary Vendor ID Ohne Postion Master Device ID 0x11 Device VIA VT64271 RAID Controller MIC M2 5L 2005 262144 bytes Drive Properties Serial flash with status x72 Vendor Drive in Vendor Mode Name Fin Rew Reserved DVD Key Not Found Re sending Vendor Intro Serial flash found with Status OxTzZ Sending Device ID request to port OXESOg Manufac
136. his is shown in the running log at time of spoofing the firmware like Spoofing Target DYD Fey copied to target Inquiry string copied to Target Identity string copied to Target Serial data copied from Source to Target Calibration data copied from Source to Target A full dump of your VIRGIN drive not one that has been returned with other stock firmware is the ONLY WAY to get the ORIGINAL DATA from your drive into the iXtreme LT firmware So IF your drive has been flashed before please IGNORE the statement that No Calibration data in 30urce appears As there is NOTHING you can do about it it has been lost forever l ve dumped the OFW using MRA Hack and get Parse Failed on loading firmware There is a good chance you clicked read whilst the resistor is selected to GND or in case of LT Switch switch is in R W position After you have vendor mode put switch back to 3 3v or normal LT Switch BEFORE pressing READ Page 267 of 272 Things not going as expected Read the FAQ s I ve been banned from the JungleFlasher support channel wtf You have obviously been bashing noobs talking piracy or generally being obnoxious the support channel doesn t tolerate that sort of thing Start groveling and change your ways CLICK HERE TO RETURN Page 268 of 272 Things not going as expected Read the FAQ s Additional Info for running JungleFlasher in VISTA WIN 7 x64 In VISTA and Wi
137. in source Please note the picture above is an example only If you have a different firmware versioned drive then obviously you will have different numbers appearing The important part is that Key and OSIG matches Page 103 of 272 Things not going as expected Read the FAQ s The Next step is to ERASE the drive its vitally important you only do this once you KNOW you are ready and have read the tutorial in full to understand the risks IMPORTANT Sending the erase command to the Lite On using VIA Card with drivers installed poses the potential risk of the system locking up due to the VIA chipset polling Please CLICK HERE and follow instructions to remove Card Drivers if you have not done so already Page 104 of 272 Things not going as expected Read the FAQ s Erasing a Lite On PLDS DG 16D2S PLEASE READ THE WARNINGS ABOVE Once you erase the drive there is NO GOING BACK Click the MTKFlash 32 Tab Sammy Lite On Slim UnLock Erase UnLock JungleFlasher will warn of the importance of having a verified Good Drive Key Please Note the only ways to know 100 that a key is good is to ensure your drive key was Verified by JungleFlasher or flash your firmware to a identical drive first and test it in the xbox itself Lite On Erase i i j Are you 100 sure you have the Correct Drive Key This Command will Completely Erase your Drive f w Do you Wish t
138. ing Status from port OxEsooO Parallel flash found with Status 0x70 Reading Bank O ___ Reading Bank 1 __ Reading Bank 2 Reading Bank 3 __ Once the firmware has been successfully read JungleFlasher will prompt you to save it Organize v New folder A Tr Favorites Documents library zy Recently Change New folder d Public Name Date modified Type Arrange by Folder _ B Desktop i B Downloads No items match your search Recent Places ae Libraries Documents ical Downloads Pi Music Pictures Videos D a i Filename SAM OFW bin Save as type Firmware Images bin Hide Folders Once saved JungleFlasher will then prompt you asking if you would like to auto load iXtreme for Samsung Drives You must have installed the JungleFlasher Firmware Pack into the same directory as JungleFlasher exe if you wish to benefit from this feature Page 30 of 272 Things not going as expected Read the FAQ s IF YOU NEED TO RETURN TO STOCK FOR DASH UPDATE CLICK HERE Click Yes to auto load iXtreme from the firmware pack for Samsung into the Target Buffer JungleFlasher will also load your previously dumped Sam OFW bin as Source Firmware Then copy data from Source to Target automatically Just verify Source data reports as it should OSIG of TSSTcorpDVD Rom TS H943 with a key with no multiple FF 00 77
139. ing as expected Read the FAQ s go to Start Menu gt Control Panel gt User Accounts and Family Safety gt User Accounts Click Turn User Account Control on or off gt click continue untick the box click OK 2 Sign the portio sys driver download the Driver Signature Enforcement Overrider DSEO from http www ngohq com home php page dseo start DSEO gt click Next gt Yes gt choose Sign a System File gt Next gt enter the path to the used driver portio32 sys or portio64 sys gt OK gt OK 3 Disable Driver Signature Enforcement Start DSEO gt click Next gt Yes gt choose Enable Test Mode gt Next gt OK 4 Restart the computer CLICK HERE TO RETURN Page 270 of 272 Things not going as expected Read the FAQ s Page 271 of 272 Things not going as expected Read the FAQ s JungleFlasher v0 1 87 beta Thanks to c4eva amp Team Jungle Team Xecuter Schtrom Legend in his own right Seacrest Openkey Team Modfreakz for all you have contributed MRA Geremia Kamikaze Unlock Maximus for Scorpion2 to reverse and improve Giampy LiteOn Barcode Rebuilder amp The Testers well obviously for testing CLICK HERE TO RETURN TO STARTING POINT Page 272 of 272 Things not going as expected Read the FAQ s
140. ing only a SATA connection The key inquiry identify serial files are merged into a dummy bin this allows for easy manipulation of the drive info for placing into the iXtreme firmware They contain information that is required for proper identification and security related issues The 83850C v2 was quickly released to combat key retrieval by the earlier methods so key retrieval using 83850C v1 or original method was no longer an option This change occurred around July Aug 09 drive manufacture dates There is no outward difference between the 83850C v1 and the 83850C v2 the only way to discover which you have is to try the 83850C v1 method If successful you have the version 1 IF NOT Jungleflasher will tell you you have an 83850C v2 and Lo83 function is ONLY for v1 The 93450C quickly followed Once again key retrieval was not an option with simple SATA commands or probe used for 74850C Now available is a method to dump the whole firmware from ALL current LiteOn Drives The MRA Hack method is a little more complex than previous methods and requires some soldering skills and cutting and reconnection of traces on the PCB However there are now some other options available the best of these are described in this tutorial Page 87 of 272 Things not going as expected Read the FAQ s WITH THIS IN MIND IT SHOULD ONLY BE ATTEMPTED BY SOMEONE WITH SOME PREVIOUS SKILL OF WORKING WITH ELECTRONICS SOLDERING It is recom
141. ings not going as expected Read the FAQ s m JungleFlasher will prompt you with instructions MTK Vendor Intro failed If you wish to resend the command you should click Yes ce Power off the drive and then back on within 1 second Press Escape to cancel Then click YES Click Yes the Running Log will display something similar to this fending Vendor Intro to port OxCFoOoO Invalid Status BRe sending Vendor Intro When Are appearing The drive should be in Vendor Mode 0x70 now and return good flash chip properties you can check in the Running Log or Flash Chip Properties The drive should also show as Drive In Vendor Mode in the Drive Properties Port Properti UnLock UnLock Erase UnLock VO Address E800 SATA Flash Chip Properties Vendor ID OxBF Device ID OxB amp SST SST39SF020 262144 bytes Parallel flash with Status 0x70 Type Channel Primary Postion Master Device VIAVT6421 RAID Controller Drive Properties Vendor Drive in Vendor Mode Name FA Rew Reserved DVD Key Now CLICK HERE to proceed Page 29 of 272 Things not going as expected Read the FAQ s Reading the Firmware from the drive Now we would like to read the firmware from the drive first so select read Hashing Tasks Intra Device ID Outro ATA Reset i i Again watch the Running Log for constant status updates Firmware reading Gett
142. iosz sys Driver Installed PoOrtiosz sys Driver Started thanks Schtrom Found 0 Com Porta Drive is Samsung Key NOT in KeyDE Key is T1IS18A0BC423EA1LGF92ZCCIO9TFLGGASS Key has been tested and verified thanks C4deva Note Upon selecting the correct port the drive shows up and key is dumped and verified against the drive Before doing anything to the drive The firmware has NOT yet been dumped However if you save the log you now have a known verified key from your drive Page 18 of 272 Things not going as expected Read the FAQ s m Simply click Intro DevicelD and check flash chip properties for status 0x70 Write oo VIA ports Only E kES00 include non IDE Ports Port Properties VO Address OxES00 Type SATA Hash Chip Froperties Channel Primary Vendor ID OxBF Postion Master Device ID OxB6 Device VIA VT6421 RAID Controller Name S51 SST39SFR0 262144 bytes Drive Properties Parallel flash with Status bc 0 Vendor Drive in Vendor Mode Mame FAN Rew Reserved DVD Key Verified F Sending Vendor Intro to port xE800 Parallel flash found with Status 0x70 Sending Device ID request to port OxEsOO Manufacturer ID OxBF Device ID OxBe Flash Name SS5T SS5T39S5F020 Flash Size 262144 bytes Lm 4 Now CLICK HERE to proceed Page 19 of 272 Things not going as expected Read the FAQ s Stock MS28 s Unmodified Sammy Unlock Select corre
143. ize 62144 bytes TELS Press the Write Button The log window will scroll through the operation as it erases writes and then authorizes the process Showing similar to below Page 221 of 272 Things not going as expected Read the FAQ s Getti Status from port 0x0000 Invalid Status 0x50 Sending Vendor Intro to port Ox0000 Status Ox5l1 Re sending Vendor Intro serial flash found with status 0x72 Sending Device ID request to port 0x0000 Spi Status 0x00 Manufacturer ID XEF Device ID Ox1l Flash Name Wwinbond NEX W25P20 NX25P20 Flash Size 262144 bytes This is what you should see appearing inthe log as you write to the drive Key Found in KeyDB at record 10 New folder Key 15 Key has been tested Now you must Lock the Spi if you intend to use this on Xbox live Then press Intro Device ID This box will appear Page 222 of 272 Things not going as expected Read the FAQ s MTK Vendor Intro failed bell Press the Spi Lock Status Button Currently displaying 0x00 Hashing Tasks intra DevicelD Outro ATA Reset Read rise Write SPi Lock Warning This lack can be quite permanent You should stop if You do not have a Sputnik or Russian type hack for MAIC OR Cannot do a Kamikaze hack on Winbond Heed this warning once locked you will require hardware modification to unlock the PCB in the future Click OK Page 223 of 272 Things not goi
144. l be faced with this MTK Vendor Intro failed Click YES then Cycle the power to the drive OFF then ON You will then be asked to save your Firmware DO SO This is your Original Firmware stock keep it safe Page 238 of 272 Things not going as expected Read the FAQ s CIOL J gt Computer DATA F BACKUPS myxbox 130test Organize New folder z Documents Name A Date modified Type i Downloads d bias _ Lite OFW bin 02 08 2011 21 46 Open sic bh ies __ SAM OFW bin 26 01 2011 18 59 Open Pictures F Videos Homegroup j Computer amp Local Disk C amp OLD win 7 E ca DATA F Local Disk G cow New Volume H ll rr D om 8 nt FEY File name Lite OFW bin Save as type Firmware Images bin f Hide Folders Save Cancel Click Save Your firmware will automatically be loaded into source in the Firmware Tab You will then be asked if you wish to autoload iXtreme Click YES Loading Source The latest firmware will be autoloaded from the firmware folder where you should have placed it earlier And your drive details will be spoofed into the firmware in target buffer ready to be written to the drive Page 239 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 DVDKey 32 MTK Hash 32 Hitachi GDR3120 IRC Channel Dive Sera Vendor Model Rev Firmware Type Lit On DG 16D45
145. mended to use the original Simpler methods for the 74850C and the 83850C v1 The FULL firmware dump can be performed on these drives BUT it is a lot easier and less likely to go wrong if using the earlier methods described in this tutorial Here are some examples of those people without skill enough for the job JUUL sei BC iin a 3 Ne La e a eee J i If you are going to produce results like these Don t expect any sympathy And expect to pay to have a professional fix it for you YOU HAVE BEEN WARNED Page 88 of 272 Things not going as expected Read the FAQ s IF you have previously flashed this drive and think you have its details in the Key Database Consider this option No need to re dump or MRA the drive CLICK HERE DVD Key Verified Otherwise continue through the flowchart 83850C V2 or 93450C Pre flashed with ix1 61 CLICK HERE 83850C STOCK Firmware OR iX LT CLICK HERE SATA only Additional skills and some modification See Note 2 req d 74850C Requires extra HW if stock See Note 2 I stoce areal gt i mes Stock Firmware Pre iX LT continue down chart i If LT See Notes 1 amp 2 i l A TOS i 2m TESA i i Yes l l i I LiteOn Erase Wri 838500 tried it but CLICK HERE it s a V2 LOW LINK ABOVE 1 Ifyour Drive has been previously flashed with iXtreme LT then you will no longer be able to use 74850C or 83850C
146. move the DVD power plug from the DVD Drive BEFORE it closes fully Wait for a few seconds and replace the power plug into the DVD drive taking extreme caution to plug the plug the right way around once done the drive is now powered console thinks its closed but it is in fact half open If using a connectivity kit to power the drive You need to power on the drive with Eject status closed but Tray Half Open To do this using a connectivity kit as Power source eject the DVD drive then press eject to close the tray Now this is the important part you MUST switch off the power BEFORE it closes fully Wait for a few seconds and switch power on connectivity kit back on once done the drive is now powered console thinks its closed but it is in fact half open Load JungleFlasher and select MTKFlash 32 tab FirmwareTool 32 DVDKey 32 MTK Fash 32 Hitachi GDR3120 Source ing iry Identify Y Drive Senal User Guide Press Intro Device ID button Flashing Tasks Paidia Eese White The drive should be in Vendor Mode 0x70 now and return good flash chip properties you can check in the Running Log or Flash Chip Properties The drive should also show as Drive In Vendor Mode in the Drive Properties Page 24 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 IRC Channel prere VIA ports Only F kE sx in
147. mp mindus driver Found E CRD dave G24 CHEDT STOUD h08 ORALIG LD0 I returns with moreal Windows Inquiry a2 26 0O D0 J d a 20 di S4 36 T3 fe _ 2i HL BT 2T 2D G2 F db fh T aah CE 33 31 FE JO 4C DVG ROUH COoRELIOL a9 30 2 iD 1 47 20 20 20 30 36 2F 20 DOCICRRAD p ri i H IF BE J4 Z0 EG 20 OF Lika CLICK TO RETURN TO HITACHI FLOWCHART Page 62 of 272 Things not going as expected Read the FAQ s Dumping the Firmware from the drive Pre v78 Older ROM Versions of the drive v32 v36 v40 v46 v47 v58 and v59 are dumped using Classic Mode Mode Select or RAM upload For the purpose of the tutorial I ll use Mode Select Dumping the firmware from a Drive Using Classic Mode will be fooled by firmware stealth this means it WILL report as stock even though it isnt As the drive is in ModeB already we simply ensure drive revision matches that of the drive FimwareTool 32 DVDKey32 MTKAash32 HtechiGDR3120 Port Properties Use Win AP a Ce AO Use Port 10 Vendor HL DT ST ni Dive Revisor Name DVD ROM GDR3120L 32 40 Fw Rev 0059 36 Flashing Options s Sector List Dump Drive i Reserved OBMAB OGMDI 24 va esene amp Wiles Dr i Manual Spoof ao 590 j m a aM Auto S f Fj d Mode 78 79 ai Flash LT Plus Transier Method z Restore Firmware Classic Set Checksum Mode Select Free Flash Ram Upload Fam Paka Read to Source Found d
148. mware and JungleFlasher will also take over from the user as soon as possible to prevent user error its not necessary to dump the drive to patch the firmware JungleFlasher will dump before you try to do anything to the drive JungleFlasher also incorporates a Stability Test prior to modifying the drive as safety is paramount X360USB PRO The x360USB Pro is a unique piece of hardware It incorporates WinAPI and Portio usage when flashing a Hitachi winAPI is a lot faster so select WinAPI before you start Jungleflasher will automatically switch between the two without user interference PortlO drivers are not required at all when using the X360USB Pro and if you tick USB Only box DVDKey 32 tab you will see the PortlO drivers are even unloaded CLICK TO CONTINUE Page 51 of 272 Things not going as expected Read the FAQ s If using USB SATA convertor _ Flashed Use ee mee ae eset ener Either Method Stock or flashed follow this CLICK HERE E Mode B l Firmware l Stock A Win XP ONLY Setting Mode B Set Mode B on Setting Mode B CLICK HERE Flashed drive CLICK HERE CLICK HERE If the flashed Drive isa V79 CLICK HERE Flashed Pre 79 with stock FW You MUST Restore First CLICK HERE Drive in Mode B Info If you have a 79 that is flashed with iX1 51 there is no need to unlock proceed down on flowchart Page 52 of 272
149. n lt JungleFlasher 0 1 79 Beta FimwareTool 32 MTK Fash 32 Hitachi GDR3120 IRC Channel ar Q O Port USB Only T i vl A po ts Only activate iso TNNT ie modras TAE 00000 hd sid Include non4IDE Parts 360 Tools Pot Petes UnLock Unlock aeons Connect any rian Kees CP Senter SATA device Channel Primary Vendor ID to any Master Device ID PC or laptop Device Aa eae PRO gt vi a U S B ze Drive Properties Type Vendor No Drive Detected Name Flashing Tasks FW Rev Outro ATA Reset Reserved DVD Key JungleFlasher 0 1 79 Beta 207 Session Started Wed Mar 02 00 11 07 2011 This is a 32 bit process running on 4 x 32 bit CPUs X360USB PRO detected Version 0 17 Found 1 I O Ports CF X360US5 PRO Found 0 Com Ports Found 9 windows drives C D E F G H I J K Page 198 of 272 Things not going as expected Read the FAQ s Then power off your drive you will be asked for confirmation MTK Vendor Intro failed b Ifyou wish to resend the command you should click Yes Power off the drive and then back on within 1 second Press Escape to cancel Click YES and probe the point on the board Power on the drive and watch Jungleflasher window for status 0x70 Page 199 of 272 Things not going as expected Read the FAQ s ge JungleFlasher 0 1 79 Beta _FimwareTool 32 DVDKey32 MTKAash 32 HitachiGDR3120 IRC Channel mits
150. n 7 it is a requirement that every driver must be signed Because PortlO driver is NOT signed it becomes necessary to work around the Driver Signature Enforcement There are 2 ways to do this One is simple but is required to be done every time you boot the pc and wish to use the driver The other is a way of setting test mode to be selected upon every boot of the system Easy Way of Disabling Driver Signature Enforcement 1 On boot up press F8 to get to the extended boot options screen 2 Choose Disable Driver Signature Enforcement 3 To start JungleFlasher right click on it in Windows Explorer and choose oroperties compatibility tick Run as administrator gt click ok This will enable JungleFlasher to run as Administrator every time you run it 4 If a Program Compatibility Assistant warning message is displayed whilst you run JungleFlasher you can simply ignore this by pressing the Close button Recommended Way of Disabling Driver Signature Enforcement PortlO64 sys file is no longer included in Jungleflasher download if you wish to sign it download it here 1 Disable User Account Control UAC In WIN 7 go to Start Menu gt Control Panel gt User Accounts and Family Safety gt User Accounts click on Change User Account Control settings set the slider bar to the lowest value Never notify gt click OK Disable User Account Control UAC In Vista Page 269 of 272 Things not go
151. n to work reliably for 0225 and subsequent drives Hence why we are using X360USB Pro Ensure it inquires on the I O port Click the SlimKey Button JungleFlasher 0 1 81 Beta _ FimwareTool 32 OVRE 32 TK Rash 32 If getting Dummy from other drives it P _ Firmware Tool 32 DVEINEY 26 l e will show diff properties i e ok VO Port USB Only F WIA ports On LT ae TO 0000 a include non4DE Port Port Properties VO Address c0000 Xec uter Type USE Channel Primary The Hottest Postion Master Prod U ct of Device XECUTER AS60USB PRO Ver 0 17 20 1 z d Presents Drive Properties Vendor FLOS Name DG 16045 PhatKey Simkey Losanio Fan Rew 0225 DVDKey32 DummyGi Sim LiteOn extract Key build dummy and open Reserved ADAD a F i DT DVD Key Verified Dummy from KeyDB Dummy from iXtreme JungleFlasher 0 1 81 Beta 223 Session Started Mon Apr 04 11 42 32 This is a 32 Bit process running on 2 ux 3z bit CPUs Bortios2z ays Driver Installed BPortiosz ays Driver Started thanks Gchtrom m iy E T X360USamu HSc0USB PRO detected Version 0 17 Found 3 I O Ports Bee ial agile Page 207 of 272 Things not going as expected Read the FAQ s You will be presented with an option box asking if you wish to send Slim Unlock Select NO SlimKey nt Oo Additional functions _ CA ALEC Te CT Include non IDE Ports
152. nd drive F CD DWD lt Hitachi found Found drive G CD DVD Playing 7T3Unlock Audio CD Pausing 7T5Unlock Audic CD after 500m5 Ejecting 79Unlock Audio CD Setting bit 3 Ox5BD Executing code in Ram Done 4 amy Then click Flash LT Plus Hashing Options Sector List ir i Dump Drive i Calculated at Manual Spoof Kun time Auto Spoof i Flash LT Plus Set Checksum Free Hash Flash LT Plus JungleFlasher will then dump the drive so it can compare sectors that will need to be written Dore Flashing Hacked frw to Hitachi OO7S 007TS by Ram Upload Method wia WINse APL x Page 71 of 272 Things not going as expected Read the FAQ s JungleFlasher will seemingly take control don t worry this is normal If you view the log you see that JungleFlasher has automatically loaded iXtreme LT Plus 1 1 copied all your data key sector 90004000 isn t touched into iXtreme and flashed a test sector for stability The stability test should return as stable if so you will see this message Flash ID Strings g5 q Flashing stabilty test reports stable Do you wish to Continue If you wish to proceed click Yes Again JungleFlasher will take over and you will see it flashing the sectors like below Read back amp Compare completed Flashing Stable Repairing Test Sector Flashing Sector 3003F000 Done Flashing Sector 3003E000 Flashing Sector
153. ng as expected Read the FAQ s You should see the Spi lock message in the log and the button will show Ox8C like this Sending Device ID request to port 020000 Spi Status 0x00 Manufacturer ID OxEF Device ID 011 Flash Name Winbond NEA W25P20 NAZSP20 Flash Size 62144 bytes Now press Outro ATA Reset button _FimnwareTool 32 DVDKey32 MTK Flash 32 HitachiGDR3120 IRC Channel activate iso darini USB Only 7 VIA ports Only L HL Ths C0000 ismi Include nonJDE Pots F Ba nh T Port Properties 5 MDE Hash Chip Properties Tyne USB Been Channel Primary Device ID Postion Master T Device XECUTER 360US6 PRO Sine Ver 0 18 Type Drive Properties Vendor No Drive Detected Hashing Tasks Name Intro Device ID Outro ATA Reset FAW Rew l Read Erase Write Ewer iets zee Came DVD Key Verified F Phat Fi Slim Reading Bank 2 Beading Hank Si ili isi bti dsi Write verified OF IMPORTANT After sending Outro ATA Reset f this is all you see YOU MUST press Outro ATA Reset AGAIN Sending Spi Lock to Port 020000 Success Spi Stetus 9x8C Sending Vendor Outro to port 020000 Now Power off the drive disconnect and refit to your xbox and test Page 224 of 272 Things not going as expected Read the FAQ s YOU ARE FINISHED CLICK HERE TO RETURN TO START Page 225 of 272 Things not going as expected Read the FAQ s Unlocking a Slim Liteon PCB
154. ng stabilty test reports stable De you weeh to Continue T Jungleflasher will then proceed to read compare and write to drive Firmwaretool 32 tab will automatically open to show you the source the drives previous firmware and the target the Firmware that is now on your drive including the spoof information Page 82 of 272 Things not going as expected Read the FAQ s Fre To 32 DVOR 3 MTK Fesh 32 ac GORSO Ie sd ee eee Source inqury Identify Dave Seal ike CABENQ OFW bin a E Save rve Vendor Model Pev Firmware Type OVD Key A030 Kay Beng WAD60GE 64930C Stock ARSED IGATEFADCEFSEQIGCRIFSEACENA OSIG PEDS VADEOGS 64930C O V Advanced View Spoof Source to Target Donate Rev Fiaa Type DWD Key 4FOO bf Hitachh GDRII2Z0L 0059 Mireme 1 51 v5S5 12 FEPRDOASLASAC ACD SSFS60S2E6 11854 O5IG HL DT STOVD ROM GDRI20L0059 Spoofed As PBDS VADG038 64930C Repairing Test Sector Flashing Secter 30037000 Dons Fia shing Sector 00sD000 Dene Write verify teat Ousping Flash Read back amp oes KAEA write Verified Flash Complete Power Off Disconnect drive connect SATA back to console and test Finished YOU ARE FINISHED CLICK HERE TO RETURN TO START OF TUTORIAL Page 83 of 272 Things not going as expected Read the FAQ s LiteOn Phats and Slims Currently in circulation there are several distinct ve
155. nlock UnLock Erase UnLock Different properties when flashing a TA Hash Chip Properties 02510C for example Vendor ID Device ID Name Size Type eels Flashing Tasks Sia INEIES intra Device ID Outro ATA Reset OCADATD608CG83390701 Read Erase Wiite Verified j Phat Slim Reading Bank 3 Lid ihian Write weritfied OF Sending Vendor Outro to port Oo20000 Drive is Lite On Rey found in FeyDB at record 2 Firmware Fey is B 82393DEFCC104E539F74EA54466745 Eey has been tested and verified thanks C4eva This will release a drive from Vendor Mode and send ATA Reset to the Drive It then sends an inquiry command to the drive Page 108 of 272 Things not going as expected Read the FAQ s This will save you power cycling the drive and then changing port away and change it back again with the click of a button the drive will reset itself and JungleFlasher will send an inquiry command to the drive If successfully flashed the drive should Inquire correctly and display drive properties Power Off Disconnect SATA from PC connect SATA back to console and test COMPLETE CLICK HERE TO RETURN TO START OF TUTORIAL Page 109 of 272 Things not going as expected Read the FAQ s LiteOn 83850c v1 Extraction How to obtain the unique data from your PLDS DG 16D2S 83850c v1 drive and create a Dummy bin The 83850C v1 Firmware drives DO NOT require the ad
156. ntroller Name SST SST39SF020 Size 262144 bytes Drive Properties Type Parallel flash with Status 0x70 Vendor Drive in Vendor Mode Flashing Tasks Name Intro Device ID Outro ATA Reset FAW Rev Reserved Read Erase Write Sending Vendor Intro to port OxCFOO Parallel flash found with Status 0x70 Sending Device ID request to port OxCFOO Manufacturer ID OxBF Device ID OxB6 Flash Name SST SST39SFOZ0 Flash Size 262144 bytes lt Now go to firmwaretool 32 tab _FerwareToo 32 ovDkey32 MTK ash 32 Htechi GOR3IZ0 Source inquity Identify Drive Sedal Load your dummy bin as source decline any auto load ix messages Load target firmware you are about to flash a samsung so choose ix firmware for a samsung drive Page 168 of 272 Things not going as expected Read the FAQ s FimwareTool 32 DVDKey 32 MTK Rash 32 HiachiGDR3120 1DBCES297294349F AF 1334FFAB 11802 Fireware type is iXTREME1 6 lL2x FINAL TS 8343A Loading Source File D BACHUFS my xbox Dummy bin Inquiry string found Identify string found DVD key found OxA030 key is GLOBCESZSTESAS4SFAFLSS4IFFABLLIGAZ Firevare is a Lite On Dummy OSIG Firmware type is LO amp sinto Extract 4 pit Now click Spoof Source to Target Notice the difference in the target firmware now Page 169 of 272 Things not going as expected Read the FAQ s Fimwar
157. o Proceed artesa ec Click Yes if you wish to Proceed JungleFlasher will present you with another warning Page 105 of 272 Things not going as expected Read the FAQ s Lite On Erase Fa When Erase ts complete Vendor Intro will be sent Power drive Off then On in quick succession Once Drive should return Status 0x72 and a good Device ID Do you Wish to Proceed a Ge Read this carefully in most cases JungleFlasher wil return a Running Log similar to this We have had 0xDO 0x80 OxF2 OxD1 and all worked fine After pressing yes and during the sequence of dots shown below switch drive Power Off then On ONCE As Soon as this line appears Cycle Resting Hark FE ik Sk A AAL A oe Re Festtig Bank H op ube yl ee obese Write verified OE power to drive i e Switch Power OFF then ON bending Vendor Outro to port OxCFOO Sending Lite On Erase request to port oO Drive returned Status ODO Hopefully you will see good Flash Chip Properties and Status 0x72 2 known SPi Chips for Lite On s Winbond and MXIC MXIC Shown drive will appear in Vendor Mode under Drive Properties Page 106 of 272 Things not going as expected Read the FAQ s FimnwareTool 32 DVDKey32 MTK Fash 32 HitachiGDR3120 IRC Channel a activate iso I O Port USB Ony VIA ports Only 360 Tools 0000 ineludenon4DE Ports M Bea Sammy en e Port Properties UnLock 1
158. ond IC you may see a warning to switch LT switch back to normal then press ok Simply operate OP Switch to up position then click ok Page 135 of 272 Things not going as expected Read the FAQ s Device ID Failed i Please return LT Switch to the Normal position Then press OK to continue You should now get Status 0x72 and you are in vendor mode As soon as you see the flash chip properties switch the OP SWITCH up to Normal mode right away Green LED Hold probes in place and dump firmware by pressing READ button Hash Chip Properties Vendor ID Okt Device ID 0x1 Name PRIC MXZSL2005 Size 262144 bytes Type Serval flash wrth status x72 Hashing Tasks intro Device ID Outro ATA Reset Now you have a choice you can either 1 ONCE save button appears you can remove probe power off CK3 and SAVE that OFW Once you have dumped the drive simply repair the traces with the conductive glue that is included with the Xecuter Probe II or use your own if you bought the early batch that wasn t included simply solder and you can then proceed to erase and flash your liteOn as normal Simply load your Lite OFW as source if you have closed Jungleflasher whilst you repaired your PCB traces AUTO load the target firmware then Proceed to ERASE amp WRITE OR 2 Continue to hold probe in place allow JF to Autololad the fw select Mtk tab then press WRITE remember to repair your trace cuts when finished before t
159. ontaining console specific drive key Drive string ID and serial data original firmware dummy firmware etc This data should always mimic what the Xbox 360 should expect from the DVD Drive The Target area buffer should contain the firmware you wish to apply to the drive itself this firmware will be manufacturer specific BenQ firmware for BenQ drives LiteOn firmware for LiteOn Drives etc Hitachi Drives do not use FirmwareTool32 in the same manner this is fully explained in Hitachi section MTK Fash 32 _ Hitachi GDR3120 _ _IRC Channel Firmware Tool 32 DVDKey32 is primarily used to obtain Key bin Inquiry bin Identify bin Serial bin and Dummy bin from all LiteOn PLDS drives both Phat and Slim It also has an option to rebuild from previous files for people who used other older applications or those who followed poor advice before Slim 9504 Users can utilize Slim unlock in the MTKFlash32 Tab to read the full FW from the drive JungleFlasher v0 1 79b introduced PhatKey A method of obtaining the DVDKey from Phat LiteOn drives using only a probe and a switch on the drives 3 3v line Xecuters Probe 3 is a professional affordable tool targeted at this method and comes highly recommended Older legacy methods such as DVDKey32 and LO83info remain supported for those wishing to use these exploits Jungleflasher v0 174 brought a Key verification routine which tests the keys primarily on Lite On
160. ould OSIG of VAD 6038 or SATA DVDROM with a key with no multiple FF 00 77 bytes Now verify unique Source Data matches that in Target Buffer and click save to file if you wish to backup your Hacked firmware ga JungleFlasher 0 1 79 Beta FimwareTool 32 DVDKey 32 MTKAash 32 HitachiGDR3120_ Source Open KeyDb PA ater e ea F WFBeta BENG OFW bin Save Drive Companiple Vendor Model Rev f DVD Key 030 Key ih VWkhny 240 idea the 3 wilh Xbox 360 Beng VAD6038 64930C Stock 1AB34C0258B0AB2B2AB9DC3B0CBS2D02 run a UYU grives a l a Open Source a OSIG PBDS Vv j ERER Hitach Somsung Advanced View E ee ee bounnne F User Guide Target Keys Matct ee eae f Firmware Beng amp Liteon FAJ FBeta Fimware LTPlu s heng y1 1 bin Manual poge m ioware E DVD Key a E040 Spoofing Beng WADS038 64930C LT Plus 1 1 1 ABI4C 0 58ROABPB2ABSDC3B0CRS2D02 OS G PBDS VAD6038 64930C Save to File Firmware Osig PEDS vVADE038 64930C Firmware is LT Flus 1 1 Spoofing Target DVD Key copied to target ID strings already match Serial date copied from Source to Target Loading MTE Flash source file This Example is for PRE DASH 13146 FOR POST DASH UPDATE Rev will be 04421 Target will be LT 1 91 FW Type Page 46 of 272 Things not going as expected Read the FAQ s You can now Save the Target Buffer to file by clicking S
161. pected Read the FAQ s It will open as source and auto load the latest iXtreme firmware Firmware Tool 32 MTK Aash 32 Hitachi GDR3120 Source Inquiry Identify Dive Serial User Guide C Junglelasher v0 1 74 Beta 138 New folder Dummy bin Save Drive Vendor Model Rev Firmware Type DVD Key A030 Key Lite On DG 16D2S 74850C DVDKey22 extract 9B749DEBF3935822C0950FB44B2D 1488 OSIG PLDS DG 16D25 7485 Advanced View lt P Lite On firmware loaded to Source buffer SOF Do you wish to auto load Lite On iXtreme f mim OSI wave to File Found 1 Com Ports Drive is Lite On Loading firmvare file C JungleFlasher vO 1 74 Beta 138 New folder Dummy bin MDS hash ccacaebd7fct5081l0357a53d46Ttdaf Inquiry string found Identify string found Drive key OxA030 SR745DERFS935822C0950FR44R201458R Firmware Osig PLDS DE 160D25 7485 Firmware is DVDRey3S2 extract Then follow the normal ERASE WRITE procedure Page 151 of 272 Things not going as expected Read the FAQ s Have the firmware saved in another location Go to Firmwaretool 32 tab right click over the source section and select load fw or click Open Source Firmware button FimwareTool32 DWDKey 32 MTK Hash 32 Hitachi GDR3120 IRC Channel Source Drive Seral User Guide Firmware Type DVD Key Clear Source Advanced View a a Update db Open Key d b Target Identify Drive Serial History
162. perties Channel Primary Vendor ID OxBF Postion Master Device ID OxB6 Device VIA VT6421 RAID Controller Name SST SSTSISF020 Size 262144 bytes Type Parallel flash with Status bc Drive in Vendor Mode Hashing Tasks Phat Slim Now CLICK HERE to proceed if it didn t work read on Page 27 of 272 Things not going as expected Read the FAQ s Alternate method if you are struggling with the above Load JungleFlasher and select MTKFlash 32 tab ga JungleFlasher 0 1 79 Beta Firmware Tool 32 MTK Fash 32 Hitachi GDR3120 Select correct I O Port check for TS H943 in Drive Properties and click Intro Device ID ge JungleFlasher 0 1 79 Beta FimwareTool 32 DVDKey32 MTKAash 32 Hitachi IRC Channel activate is0 0 Port USB Only VIA ports Only W 360 Tools Include non4IDE Ports W Sa Lite On Slim Bret Pronet UnLock Erase UnLock VO Address OxE80O Tie SATA Hash Chip Properties Channel Primary v i Poston Master Bene Device VIA VT6421 RAID Controller Nettie SIZE Type Drive Properties Vendor TSSTcorp Mame DVD ROM TS H9434 FAN Rew ma28 Reserved DVO Key Vented P Found Com Porta Found if windows drives G D E F Hz I J K Lt Mz Nz Found 1 CD DVD drives Dz Key NOT in KeyDB Key is 84FS012RB2EEAOO17TFIAGSSCT1S199254 Fey has been tested and verified thanks Cdeva Drive is Samsung Page 28 of 272 Th
163. phanumeric code on the top of the Drive like shown below When you have selected ALL the sections you require to be changed press the OK Button Page 78 of 272 Things not going as expected Read the FAQ s FSF eDOASCSSACTCDTOSF96092F6118E4 Check Lite On Barcode Load bin file D608CGESS90TO1LOFO Current HL DI STDYVD ROM GDR3120L0055 Spoofed s JungleFlasher will then read compare and carry out a test flash and ask if you wish to continue Select YES Manual spoofing will be carried out FimwareTool 32 DVDKey 32 MTK Aash32 Hitachi GDR3120 Source inquiry Identify Drive Serial User Guide Vendor Model Rew Firmware Type DWD Key Key OSIG W Advanced View Target a ir l Tp amh a ea tahil AE tated 5 bie arget Inquiry 2 Flashing stabilty test reports stable Do you wish te Continue Vendor Model Rev Hitachi GDR3120L 0059 611864 OSIG HL DT STOVD ROM UIS 1 Sector Differences Found Flash Stability Test Flashing Sector 3003F000 Read back amp compare complete Flashing Stable Repairing Test Sector Flashing Sector 3003F000 Done jj The example below is a Hitachi manually spoofed to show as a BenQ Page 79 of 272 Things not going as expected Read the FAQ s FimwareToo 32 DVDKey 32 MTK Resh 32 Hitachi GDR3120 User Guide Vendor Model Rev Firmware Type OVO Key Km Osis Am
164. r Disable Acknowledge the warning by clicking Yes VIA V16421 RAID Controller A Disabling this device will cause it to stop Functioning Do you really want to disable it It should now show as disabled in Device Manager like so 5 SCSI and RAID controllers 1EQJPLR IDE Controller YIA V76421 RAID Controller Now to remove drivers we must navigate to where relevant file is mine were located and most will be C WINDOWS system32 drivers XXXXXXX sys file Depending on your motherboard and OS J For XP normally called viamraid sys For Vista Win 7 normally called vsmraid sys For some x64 setups it may be called viamrx64 sys Once found delete this file Once deleted go back to device manager using the same steps outlined above Find your disabled VIA 6421 Card right click and select enable Page 159 of 272 Things not going as expected Read the FAQ s amp SCSI and RAID controllers ALEOJPLR IDE Controller YIA Tede1 RAID Co S Sound video and game c Update Driver z Storage volumes 2 System devices Uninstall Universal Serial Bus contr Scan For hardware changes sf WSO devices H H It should now show as the image below L amp SESIL and RAID controllers 41E0IPLR IDE Controller er WIA WTE42 L RAID Controler Sound video and game controllers swe Storage volumes I System devices 4 Universal Serial Bus controllers a gt
165. r Use Win API G A000 r Le Part 10 MA HL DT STDVD ROM GDR3120L0059 x se Port IO vedo FEDS sion Name VAD6038 64930C ME cm Haag Opin Sector List Fy Rev H Dump Drive 0 Na a a 46 r AT l Calculated at Reserved A AE Manual Spoof 1 Kg y 59 Ato Snook iF Send Mode B w e eT a Plus Open osp Transfer Method Restore Firmware Classic 79 Unlock ry Set Checksum automatic W Mode Select Insert the 79 Unlock Audio CD r Free Flash Ram Upload 8 r Play 79 Unlock ae Manual Spoof Flashing Sector 3002E000 Flashing Sector 90033000 Flashing Sector 90034000 Flashing Sector 530035000 Done Write verify test Dumping Flash o 1 AP Se PP Read back amp compare completed Write Verified Flash Complete E You will then be presented with the screen below You can alter the drive key by manually typing it pasting it loading a saved key bin Key bin can be saved by loading donor drives firmware in FirmwareTool32 as Source and Clicking Save Drive Key You can Change the OSIG ID String by selecting the desired drive from the drop down list And IF you have selected a LiteOn drive from OSIG list then you are able to enter the liteon Barcode details by either 1 If you have the Inquiry bin from the Donor Lite On you can load it through Load bin file button and navigating to the file and opening it 2 If you have the Donor Lite On Drive to hand you can manually type the Al
166. r instructions shown below Device ID Failed i Please return LT Switch to the Normal position Then press OK to continue then put LT Switch back to Normal and press OK lf everything has been done correctly you should be faced with this Page 128 of 272 Things not going as expected Read the FAQ FimwareTool 32 DVDKey 32 MTK Hash 32 HitachiGDR3120 IRC Channel VO Port VIA ports Only F activate 150 360 Tools E00 i Include non IDE Ports Port Properties Lite On Erase VO Address ObcE800 Type SATA Hash Chip Properties Channel Primary Vendor ID Onl Master Device ID 0x11 Device VIAVT6421 RAID Controller Name MAIC MA25L2005 Size 262144 bytes Postion Drive Properties Type Serial flash with status he Vendor Drive in Vendor Mode Fw Rev Reserved DVD Key Not Found ae pete Vendor ID OxEF Re sending Vendor Intro Device ID x11 Baa Sees ts ie eid ess oa enter Harma Winbond HEGIARSFPADH GSP 20 Serial flash found with Status xTZ x Sze 2b 144 bytes Sending Device ID request to port OxEsOO Manufacturer ID OxtCe Device ID Ox11 Flash Name MAIC M 25L2005 DONEA Flash Size 2627144 bytes Could look like this if it s Winbond instead of MXIC Type Serva fash with status Ox72 Once you have the Correct status shown above Now press the Read button Flashing Tasks intro Device ID Outro ATA Reset Jungleflas
167. r powering it on You need to power on the drive with the Tray Half Open To do this using an Xbox 360 as Power source eject the DVD drive and then remove the power lead from the Drive Close the tray half way and plug the DVD Drive power cable back into the drive being VERY cautious to ensure the plug is the right way around Using a Connectivity Kit Xtractor to power the drive The easiest way to do this is to simply use the eject button on your connectivity kit to eject the drive tray power off the connectivity kit push the tray half in and power back on the connectivity kit Ok now we half the half open tray we navigate to MTKFlash32 tab if you haven t already MTK Fash 32 Hitachi GDR3120 Source inquiry Identify Drive Serial Finnware Tool 32 DvDKey 32 ger Gui Select correct I O Port then Click Intro DevicelD If tray status is correct drive should return good Flash Chip Properties showing status 0x73 Drive Properties should show Drive In Vendor Mode Page 36 of 272 Things not going as expected Read the FAQ s FimwareTool 34 DVDKey 32 MTK Hash 32 Hitachi GDR3140 activate iso USB Only C VIA ports Only C 360 Tools ort TEER m a jalod Mial cack Lh 7 oa Maea p UnLock UnLock Erase UnLock VO Address Ox0000 b Hash Chip Properties Type USB Cmd Primary Vendor ID Uz ER PONN Device ID 0x11 Device XECUTER X360USB PRO Sane daii a i i Ver 0 18 Cirp 262
168. re you are on the correct I O Port Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel activate iso USB Onhy VIA ports Onhy 0000 Include non IDE Ports Port Properties VO Address Ox0000 USB Primary Master XECUTER A360USB PRO Ver 0 18 b JungleFlasher 0 1 85 Beta 255 Session Started Sun Jul 17 11 53 41 7011 mW This ia a 32 bit process running on 4 x 32 bit CPUs ZSGOUSB PRO detected Version 0 18 Found 1 I O Ports Found 0 Com Porta Found 17 windows drives C D E F Hz I K Lz M OQ Pc Ensure Phat is selected Then press Intro Device ID You may get this box appear Page 212 of 272 Things not going as expected Read the FAQ s MTK Vendor Intro failed S If you wish to resend the command you should click Yes V Power off the drive and then back on within 1 second Press Escape to cancel a If so then press Yes and turn drive power OFF then ON again quickly You should now see this Including a button 0x00 that was previously blank MTK Fash 32 Hitachi GDR3120 IRC Channel activate iso VO Port USB Ony W VIA ports Only T Ta woot iv Include non IDE Parts inia Et reat roe Port Properties VO Address D000 cer Flash Chip Properties Type USB Vendor ID OxEF Channel Primary Device ID O11 Postion Master Name Winbond NEX Ww25P20 NX25P20 Device eee PRO Size 262144 bytes Serial flash with status 0x72 DVO Key Ventied F
169. rive H Hard Drive A Found drive I Hard Drive Found drive J Hard Drive Found drive E Removable Found drive L Removable Found drive H Removable Found drive Hr Removable Found drive r CD DVD Found drive BP CD DVD t Hitachi found Select Dump Drive and Mode Select Page 63 of 272 Things not going as expected Read the FAQ s Use Win API G Ate PA HL DT STDVD ROM GDR3120L0059 E Use For 10 Name DVD ROM GDR3120L 32 400 Fi Rev 0059 360 45 47 Reserved OBMAB 06 01 24 5B 59 Send Mode B 787 795 Fash LT Plus 5 Open Close Transfer Method Restore Bm 79 Unlock Set Checksum C Insert the 73 Unlock Audio CD 3 Free Flash Play 91 3 z r so Redio Some Hard Drive Hard Drive Hard Drive Removable Removable Removable Removable CD OND CD DVD Hitachi found a eRe ae Then click Read to Source Hashing Options Dump Drive Manual Spoof 0 Auto Spoof Hash LT Plus Restore Firmware _ Set Checksum Free Hash You should see something similar to below Page 64 of 272 Things not going as expected Read the FAQ s OO40 30 30 35 39 Mode B Done Scanning for hardware changes Found 7 windows drives Found 3 CD DVD drives Dumping frw af Hitachi 005870059 by Mode Select Method via WINse AFI UnLocked Once firmware is read JungleFlasher will prompt you to save it
170. rmware Tool 32 MTK Fash 32 HitachiGDR3120 IRC Channel Vendor Model Rev Firmware Type DVD Key A030 LiteOn DG 16D25 74850C S5EDSC1FAS5 2E4F HMAC 76E 6EFEDA4 OSI G PLDS DG 16025 7485 Advanced View Spoof Source to Target PDanate User Guide FoF Beta Firmware LT Plus 481 1 bin Vendor Model Rew Firmware Type DVD Key ma Lite On DG 16D25 74850C LT Plus 1 1 S5EDSCTFASS ZE4FA4AACT SOE 76EFED J4 OS G PLDS DG 16D25 7485 Drive key n a FRPP TTT TTT TTT TTT TTT TTT Firmware Osig PLDS DE 1eb25 7485 Firmware ia LI Plus 1 1 Spoofing Target DVD Key copied to target ID strings already match Serial data already matches No Calibration data in source then follow the normal procedures for erasing and writing to the drive For Slim LiteOn 9504 CLICK HERE For Phat LiteOn CLICK HERE Page 156 of 272 Things not going as expected Read the FAQ s Removing VIA drivers Windows XP Vista Win 7 NOT TO BE DONE IF YOUR MAIN HARD DRIVE IS ON VIA SATA CARD or IF YOUR VIA CHIPSET IS ONBOARD i e NOT A PCI CARD This is how done it it worked fine may not be 100 Right Click My Computer select properties Open Explore Search Manage Manage Map network drive Map Network Drive Disconnect network drive Disconnect Network Drive By SS 4 Create shortcut Create Shorkcut Delete Delete Rename Rename Properties Properties System Properties
171. rom the drop down list and click OK If Changing OSIG to a Lite On PLDS DG 16D2S this will activate the Lite On Barcode section of Manual Spoofing please see below for instructions Spoofing Lite On Barcode into Inquiry String This is for Spoofing a drive in place of a Lite On manually once Drive Key is inserted you will want to spoof as PLDS DG 16D2S next you want to load your identify bin by clicking Load Inquiry bin and navigating to Inquiry bin upon selecting it JungleFlasher will load it into the window now you can click OK to finish spoofing the firmware If you don t have the Inquiry bin file JungleFlasher will let you manually type the barcode located on the top of the Lite On into the cox in the format of 17 Alpha Numberic Characters followed by 3 spaces You MUST include the spaces manually e g D608CG82690600G2W___ Then click Ok to finish Spoofing the Firmware CLICK HERE TO RETURN Page 162 of 272 Things not going as expected Read the FAQ s USB Only VIA Ports only amp Include Non IDE ports Found under DVDKey32 tab O Port USB Only VIA ports Only 0000 Include nonDE Ports W USB Onl This feature allows automatic selection of the use of the new X360USB Pro from Xecuter Checking the box unloads the PortlO Drivers too less unnessasary stuff running VIA Ports Only This feature suits those who have quirky onboard Sata Cntrollers SIL JMicron and a VIA6421 PCI Sata Card
172. rsions of LiteOn drive These can be split into 2 Categories Phats Firmware versions 74850C 83850C 83850C v2 93450C 02510C These all had differing methods of obtaining the drive keys which have been kept in the tutorial for completeness however a new method Pogo Mo Thoin PMT has been released and can be used to obtain all the required info from ALL these drives The only drive that you shouldn t need to use the PMT method for is the 83850C v1 with stock Firmware as this can be done without opening the drive case the easier the better Right NOTE AFTER DASHBOARD UPDATE 13146 ALL PHAT LITEONS ARE NOW STOCK 02510 FW NOTE ALL PHAT LITEON POST DASH UPDATE WILL REQUIRE PMT PROBE 3 or MRA IF YOU HAVE A STOCK 83850 v1 YOU CAN DUMP DUMMY BIN BEFORE UPDATE THEN UPDATE MANUAL LOAD LT 1 91 AND SPOOF THIS WILL AVOID OPENING YOUR DRIVE The other remaining drives are the Slims Firmware Versions 9504 0272 0225 0401 1071 Currently Only the LiteOn Slim Drive with 9504 0272 pre 13599 dashboard can be written to unless you have a unlocked 0225 0401 Rare The Drives with Firmware Version 0272 if you have dashboard 13599 0225 0401 and 1071 can ONLY have their Keys Read unless they have been modified or unlocked NOTE AFTER DASHBOARD UPDATE 13146 ALL SLIM 9504 LITEONS ARE NOW STOCK 0272 FW AFTER DASHBOARD UPDATE 13599 0272 ARE NOW LOCKED PROCEED Page 84 of 272 Things not going as expect
173. s or Flash Chip Properties Fe Tal 32 MTK Flash 32 HitachiGDR3120 IRC Channel activate iso USB Only VIA ports Only 360 Tools 0000 include non IDE Ports Port Properties VO Address Ox0000 Type USB Channel Primary Posto Master Device ID 0x11 Device XECUTER X360USB PRO e MXIC MXZ5L2005 Ver 0 18 ae re Drive Properties tyre Vendor Drive in Vendor Mode Name rT F W Rev Reserved Eae Erase Tite DVD Key Not Found EY H Slim Sending Magic Keys to Drive on port ox0000 Sending Vendor Intro Requesting Device ID Manufacturer ID OxtCz Device ID 0x11 Flash Name MAIC MA25L2005 Flash Size 262144 bytes NOTE IF USING X360USB Pro the Status DOES NOT INITIALLY SHOW as 0x73 BUT THE DRIVE IS STILL IN VENDOR MODE press Intro Device ID again if you wish status to show up Once the drive is in Vendor Mode you can proceed with Reading the Drives Firmware CLICK HERE TO PROCEED Page 39 of 272 Things not going as expected Read the FAQ s DevicelD Unlock Vcc Trick VIA Nforce only Stock Modified Drives This method has only really been tested on VIA no drivers or 530c drivers and Nforce Chipsets although there is no harm in trying on others this method works on Hacked and Stock Drives Load JungleFlasher and select MTKFlash32 tab FimwareTool 32 DVDKey 32 Hitachi GDR3120 Source inquiry identify Drive Serial a Then select correct I O Port by verifying
174. sung TSHA MS28 IXTREME1 6 12x FIN 92F3CBFSDMEASSCADEDAASDSCDATEF2 TS HM3A OSIG TSSTcorpDVD ROM TS H943Ams28 Spoofed As TSSTcorpDVD ROM TS H943Ams25 LLE EL LE Spoof Source to Target Donate User Guide ge Drive Sera Manual Firmware Type DVD Key amp Spoofing Spoofed As Save to File Select the stock firmware for your drive MS25 or MS28 A MS25 is shown in the example Page 258 of 272 Things not going as expected Read the FAQ s Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 IRC Channel F Sam_CFW bin Vendor Model Rew Firmware Type DVD Key 40BC Samsung TS H9434 MS28 XT REME1 6 12 FIN S2FSCBF9DS4EASSCADEDAASDSCDAIEFZ TSH943A OSIG TSSTcorpDVD ROM TS H943Ams28 Spoofed 4s TSSTcorpDVD ROM TSHM3Ams2 ace FF Beta FirmwaresOnginal TS H543 M525 bin Vendor Model Rev Firmware Type DVD Key 4014 Samsung 1S HS434 MS25 Stock Ba4E44 6 F6E5SCBBORC43SD 1 BOS0B4858 OSIG TSSTcorpDVD ROM TSs HS43Ams25 Press the Spoof Source to Target button Firmware Tool 32 MTK Flash 32 HitachiGDR3120 IRC Channel F Sam_CFVW bin Vendor Model Rev Firmware Type DT be tice ul Samsung TS HS434 M528 iXTREME1 6 12 FIN S2F3C BFSD84EASSCADEDAASDSCDAIEF2 TS H943A OSIG TSSTcorpDVD ROM TS HS43Ams28 Spoofed As TSSTcorpDVD ROM TSHM3Ams25 Shin hah hee FAJF Beta Firnware Onginal TS H543 M525_bin Vendor Model Rew Firmware Type Samsung THA MS25 Stock OSIG TSSTcorpDVD ROM TS HS43Ams2
175. t slim drives exist LiteOn DG 16D4S FW Ver 9504 or if updated 0272 The Other Drives are LiteOn DG 16D4S FW Ver 0225 0401 1071 Drive Key can be dumped ONLY unless unlocked Hitachi FW Ver 0500 You can tell the difference between LiteOn and Hitachi by the drive tray XBOX 360 SLIM DVD ROM DRIVE CHECK _ Read the label on the drive as which LiteOn drive you have Note There are also some mislabelled as 9504 and are actually 0225 the only 100 method is to connect your drive to your PC and see how it reports in Jungleflasher If it reports as 0272 is has been updated by dashboard update 13146 CONTINUE Page 13 of 272 Things not going as expected Read the FAQ s Samsung TS H943 MS25 MS28 Overview The steps to modifying restoring a Samsung Drive follow the basic outline of e Unlocking the Drive MS28 or Xtreme 3 3 Firmwares e Reading the Original firmware e Patching Key into hacked Firmware e Writing Drive The tutorial covers multiple unlock methods which are dependent upon which drive its current firmware and your SATA chipset The following flowchart will help you decide which method you should use to achieve the unlocked state on a Samsung drive Vendor Mode status 0x70 in preparation for READING and or WRITING to the drive Now we can proceed to modifying the drive Power drive with it connected to PC via SATA then open JungleFlasher exe You will be presented with the Welcome
176. ta copied from Source to Target Calibration data copied from Source to Target Loading MIF Flash source file Now Just follow the standard write procedure So return to MTK tab NOW CLICK HERE Page 125 of 272 Things not going as expected Read the FAQ s 4 Dumping Firmware from a drive with a Xecuter LT Switch Fitted For full fitting instructions go here Essentially the board preparation is the similar to the MRA hack but once fitted need not be removed and has a switch on it to select between normal operation and R W presumably meaning read write though technically all reading and writing is done with switch in normal position the R W position is ONLY used to place the drive into vendor mode then switched back to normal for reading and writing operations NOTE v1 5 has now been released Added MULTI R feature Select 200s normally if drive status fails to leave 0x51 try selecting 180s or 220s and try again r LT SWITCH 13 O ad A Once installed as per fitting instructions XECU With switch in Normal position and MULTI R set to 20 Os Connect drive to PC s SATA and power drive GREEN LED will be LIT select MTK Flash32 tab Refresh drive properties so drive shows up Page 126 of 272 Things not going as expected Read the FAQ s FimnwareTool 32 DVDKey 32 MTK ash 327 HitachiGDR3120 IRC Channel lO Port VIA ports Only E easi E800 ka Include non IDE
177. te driver and install JungleUSB Open Device manager and Find USB Mass Storage Device under Universal Serial Bus Controllers Right click on it and Update Driver a Unreersal Serial Bus controllers cS oS 7001 Pel to USB Open Hast Controlle ad oS 7001 Pol te USB Open Hast Controller co USE Composite Device e USB Mass Storage Device amp USB Root Hub e USB Root Hub Ha Mbox 3600 VO Device Drovers Select No not this time Then click Next Page 57 of 272 Things not going as expected Read the FAQ s Hardware Update Wizard Welcome to the Hardware Update Wizard Windows will search for current and updated software by looking on your computer on the hardware installation CD or on the Windows Update Web site ith pour permission Can Windows connect to Windows Update to search for software Ci Yes this time only Yes now and every time connect a device i Mo not this time Click Next to continue Next gt Cancel Select Install from specific location and click Next Hardware Update Ward This wizard helps you install software for USB Mass Storage Device Ts qt If your hardware came with an installation CD E or floppy disk insert it now what do you want the wizard to do E Install the software automatically Recommended Click Hest to continue Back I Nest gt Cancel ee Select Don t search will choose the driver to install and click Next
178. th capacitor The PMT Probe is designed to be able to allow you to dump the Key from ALL Phat LiteOn without resorting to MRA This method works regardless of current FW on the drive In the following example I use the X360USB Pro for my SATA connection This is NOT a pre requisite If you have a currently working SATA setup it will work just as well So select your I O port as Normal You will notice a new Button PhatKey USB Ony C WA ports Only C n Additional functions x Include non IDE Ports V 7 Dummy bin Only B Master XECUTER 260U568 PRO Ver 0 19 Vendor No Drive Detected Hata lestee 0 1 79 Beta 207 Sesggion Started Sun Feb 70 15 14 40 27011 This is a 32 bit process running on 4 x 32 bit CPUs Portios2 ays Driver Installed portic32 sys Driver Started thanks Schtrom HSG0OUSE PRO detected Version 0 15 Found 17 I O Porta Page 186 of 272 Things not going as expected Read the FAQ s Using the PMT With drive powered on and showing in drive properties click refresh USB png VIA ports Only Additional functions _ nclude non IDE Ports Dummy bin Only XECUTER 260U58 PRO Ver 0 19 Drive Properties Vendor No Drive Detected Nanve FAN Rew Session Started Sun Feb 20 15 14 40 7011 This is a 32 Bit process running on 4 x 32 bit CPUs Portios2 ays Driver Installed BPOortios2 ays Driver Started thanks Schtrom HSoOUSBR PRO detected Version 0 15
179. the ability to write the key Only from context menu e Xswitch Remembers if USBxtractor switch is enabled In addition to the above registry settings The key database is also stored in registry Page 175 of 272 Things not going as expected Read the FAQ s The Jungleflasher Key Database So you know about the all important KEY The one that every tutorial about xbox360 drive flashing tells you to SAVE WRITE DOWN EMAIL IT TO YOURSELF Well the exceedingly clever guys from Jungleflasher have been helping you out with this since version 0 1 74 Yet somehow very few people know about this fantastic addition The JF JungleFlasher key database dB is a store of all locally dumped keys whilst using JF on that particular PC This dB is only kept on the PC the keys are dumped on The dB itself is held within your pc s registry shown below File Edit View Favorites Help a JM Computer IKEY A Nata HKEY_CURRENT_USER Defautt value not set indes J Console _ Control Panel J DefaultScope fo i i Environment f alj JF KeyDB si d SerList d Keyboard Layout a Network d Printers 4 Software System 7 0 Volatile Environment b oa HKEY_LOCAL MACHINE Computer HKEY_CURRENT_USER JF_KeyDB To see the information shown above you simply run Regedit from the Run line in start menu and then select HKEY_ CURRENT USER What does the JF KeydB do for me 1 Autom
180. the drive To re lock the drive it must be in vendor mode So once again Press Intro Device ID Page 242 of 272 Things not going as expected Read the FAQ s You will be asked to resend and power cycle MTK Vendor Intro failed b If you wish to resend the command you should click Yes Power off the drive and then back on within 1 second Press Escape to cancel click YES then Cycle the power to drive The drive should appear in vendor mode once again Simply press the Spi Status Button currently 0x00 Hashing Tasks _ rim Device ID _Outro ATA Reset Read Erase Write The following warning will appear Warning This lock can be quite permanent You should stop i You do not have a Sputnik or Russian type hack for MAIC R Cannot do a Kamikaze hack on Winbond Click OK You should see the following in the log Page 243 of 272 Things not going as expected Read the FAQ s Sending Device ID request to port o20000 Spi Status 0200 Manufacturer ID OxEF Device ID Ox1l Flash Name Wainbond NEA W25P20 NAZSP20 Flash Size 62144 bytes Sending Slim Spi Lock request Spi Status Ooxec And the Spi Status Button should now show Ox8C Hashing Tasks Intro Device ID Outro ATA Reset Phat Slim at oh Now press Outro ATA Reset button Ver 0 18 size Type Drive Properties Vendor No Drive Detected Hashing Tasks Name Intro Devi
181. the trace it becomes quite fragile Page 132 of 272 Things not going as expected Read the FAQ s Probe V2 trace cut and touch point pogo touch point trace cut Now take the Xecuter Probe Il and place the points onto the marked red and green positions The Probe s pins are clearly marked Remember at this stage the CK3 Pro power should be OFF oN F Now turn the CK3 Pro power switch to on You will now see the Xecuter Probe II BLUE POWER LED come on and also the MRA GREEN NORMAL LED come on Page 133 of 272 Things not going as expected Read the FAQ s Refresh the I O port in Jungleflasher on MTK tab You should see the DVD drive properties if everything is connected and setup correctly This is also an indication that your SATA is setup correctly You may need to select another I O port then return to the correct I O port for it to Drive Properties Vendor Name FAW Rev Reserved DVD Key show properly PLDS DG 16D25 oH45 OC ADAZD609C 697180800 Not Found ONLY EXAMPLE You will see FW revision of YOUR drive Press the Intro Device ID Button Page 134 of 272 Things not going as expected Read the FAQ s Turn the power OFF on the CK3 Push the OP Switch on the Xecuter Probe II down gh I you wish to resend the command you should click Yes Power off the drive and then back on within 1 second Press Escape to cancel NOTE If you have a Winb
182. turer ID Oxntz Device ID 0x11 Flash Name MIC MES5L27005 Flash Size 02144 bytes Mm 4 Now release the button on vamp whilst still Holding the probes in contact with PCB Then press READ Hashing Tasks Intra Device ID Outro ATA Reset i i when the Save option appears it s safe to remove probe from PCB Power off the 360xtractor Proceed to join jumper with solder as required Page 144 of 272 Things not going as expected Read the FAQ s Once you have soldered the jumper of your choice Power on the 360xtractor again Proceed to ERASE amp WRITE Page 145 of 272 Things not going as expected Read the FAQ s Return a LiteOn to Stock Firmware To return a LiteOn drive to stock you need your Dummy bin and a Stock FW for your relevant drive Simply load your Dummy as Source Decline the Auto load of iXtreme firmware Famware Tool 32 DVDKRey 32 MIK Rash 32 Htachi GDR3120 Uper Guide J BACKUPS my shor Dummy 1 ban z Sawe Orve Vendor Model Rey Firmware Type DVO Key A030 Key Lite On DG 16025 KEC Dummy from SIDECES ZS TESA MOFAF i IMFFABTI BA LOE Sih bin kev AEE OSG PLOS OG 16025 8385 ea Ji Ache Vie roost lay cen 2 Lite On firmvare loaded te Source buffer Do you wish to auto load Lite On iMbrere Loading firmare file J SACEURS my b rsi Domm bin MOS hash d fdcteliStetdlabcfasaSe chaastbae Inquiry string foun
183. umped Dummy bin OFW bin as source and auto load your iXtreme firmware as target CLICK HERE TO PROCEED Page 196 of 272 Things not going as expected Read the FAQ s Samsung Drives Using PMT or CK Probe 3 When normal bad flash won t work For those awkward moments when things just haven t gone as planned There is a longer but simple method Utilize the Xecuter Probe 3 or PMT probe goes to GND Open the drive case and expose the bottom of the PCB Then locate the point you need to probe with your PMT CK Probe 3 Then load Jungleflasher ensure you have correct IO port selected If the drive is Bad flashed it won t show up even after a port refresh like the example below Page 197 of 272 Things not going as expected Read the FAQ s FimwereTool32_ _OVDKey 32 MTK Resh 22 hitachi GDR3120 IO Port activate isa sa 2 360 Tools 0000 Beng Sammy On ese VO Address CheD000 Type Flash Chip Properties Channel Primary Vendor ID Postion Master Device ID Device XECUTER 360US6 PRO Name Ver 0 17 Size Drive Properties Type Vendor No Drive Detected Mime Hashing Tasks FAN Rew Intro Device ID Outro ATA Reset DVD Key portiosz sys Driver Started thanks Schtrom Found 10 I 0 Porta Found 0 Com Ports Found F windows drives C D E F H I J E Found 1 CD DVD drives D HECUIER X360USE PRO attached m Portl unloaded d Then select Intro Device ID butto
184. v1 or Dummy from iXtreme methods to retrieve Dummy bin A full dump can still be performed using MRA method CLICK HERE 2 During Flashing process IF your drive has been flashed before i e NOT a VIRGIN DRIVE OR you have not used MRA hack to get a FULL OFW then you are going to get a statement like this EMSS EFE This is normal for a PRE FLASHED drives or you have used a Dumm y bin Ignore it If you wish to include this info from a 74850C or 83850C v1 VIRGIN drive you must do a full dump using MRA style method CLICK HERE Page 89 of 272 Things not going as expected Read the FAQ s LiteOn HALF TRAY OPEN method To obtain the key and other drive specific info from LiteOn drives the user must be familiar with the correct method to set Half Tray Open this is especially important when doing 83850C fw d drives as the drive must be set into this position twice during the extract Using xbox360 to power the drive If using a 360 to power the drive this method can be tricky to accomplish You need to power on the drive with Eject status closed but Tray Half Open To do this using an Xbox 360 as Power source eject the DVD drive then press eject to close the tray Now this is the important part you MUST remove the DVD power plug the black cable with white plug on back of DVD ROM from the DVD Drive BEFORE it closes fully Wait for a few seconds and replace the power plug into the DV
185. ved DVD Key activate isa 360 Tools Beng Sammy Lite On Slim UnLock UnLock Erase UnLock Flash Chip Properties Vendor ID OxEF Device ID 0x11 Mame Wwinbond NEX Ww 5P20 NX25P20 Size 262144 bytes Type Serial flash with status Ohe Hashing Tasks Intro Device ID Outro ATA Rese RBe sending Vendor Intro Serial flash found with Status OxT2 Sending Device ID request to port 020000 Manufacturer ID OxEF Device ID 011 Flash Name Winbond NEX W25P20 NX25P20 Flash Sige 62144 bytes When 0x72 appears immediately lift the probe f good flash chip properties appear then continue to the correct procedure to whatever you were doing If you do not get flash chip properties and get n a for size check to make sure that the Slim button is ticked NOTE If Slim is ticked and you still get bad flash chip properties make sure that you are using an original Slim Lite on PCB If the PCB has been modified with an Xecuter Pro Unlock Kit or is an Xecuter Unlock PCB then Jungleflasher must have Phat ticked CONTINUE Page 206 of 272 Things not going as expected Read the FAQ s LiteOn Slim FW Ver 0225 Locked 0272 0401 1071 Dumping the required drive info is very straight forward First select the DVDKey 32 tab FimwareTool 32 DVOR 32 TK Aash 32 Hitachi GDR3120 IRC Channel NOTE Very few chipsets are know
186. ware Select the manufacturer and model of your hardware device and then click Mest If you ca have a disk that contains the diver pou want to install click Have Disk Show compatible hardware Model JungleLlSb 360 Mass Storage Driver a This diver is not digitally signed Have Disku Tell me whit oliver gidning z important Ee e lt Back 1 Next gt 1 Cancel Click finish and Return to Device manager Page 60 of 272 Things not going as expected Read the FAQ s Hardware Update Ward Completing the Hardware Update Wizard The wizard has finished installing the software for a JungleUSB 360 Mass Storage Driver Click Finish to close the wizard If all went well you should now have JungleUSB 360 Mass Storage Driver listed under Universal Serial Bus Controllers and HL DT ST DVD ROM GDR3120 USB Device listed under DVD CD ROM drives m om Device Manager File Action View Help Fe eAa nzne g8 DVD CD ROM drives 4 HL DT ST DVD ROM GORSL20L USB Device 4 HL DT ST DVD ROM GDRS1L63B aL PIONEER DVD RW DVR 1160 4 Floppy disk controllers if Floppy disk drives fey Human Interface Devices IDE ATA ATAPI controllers 248 Keyboards J Mice and other pamting devices Bi Network adapters ml Ports COM amp LPT i SHR Processors l ec SCH and RAID controllers Sound video and game contrall
187. ware y m W Advanced View Soom Source to Tangel ary l i T Target nguy tty Dove Sena et Manual Vendor Model Rev Firmware Type DVD Key 4F00 000000000 Spoofing Hitachi GDRSIZ0L 00459 Wirama 1 51v59S 12x FEFEDOASC4SAC ACD 765 S6097E6118E4 OS51G HL DT STOVD ROM GDR3120L0059 Spoofed As PEDS VADG6038 64530C Save to Fie Repairing Test Sector Flashing Sector S003F000 Done Flashing Sector S00sD000 Done Write verify test Head back compare completed Write Verified Flash Complere Power Off Disconnect drive connect SATA back to console and test Job Done YOU ARE FINISHED CLICK HERE TO RETURN TO START OF TUTORIAL Page 80 of 272 Things not going as expected Read the FAQ s Auto Spoofing a Hitachi As with all Hitachi Tasks you must set Mode B and unlocked if v79 first have a drive letter assigned if using Win API or PortlO for VIA No Drivers Ensure Drive is flashed with iXtreme prior to spoofing Proceed to the Firmwaretool 32 tab Click Open Source Firmware button load the Dumped firmware file from the donor drive In this example from a BenQ drive Firmware Tool 32 MTK Flash 32 Hitachi GDR3120 Dive Sei CABENG OFW bin Save Drive Vendor Model Rew Firmware Type DVD Key A030 Key Beng VAD6038 6930C Stock Ado6D 164 8F40C EFSE01SCESFEEACADA User Guide OSIG PBDS VAD6038 64530C W Advanced View Spoof Source to Targe Manual
188. wer off connect back to console and test CLICK HERE TO RETURN TO START OF TUTORIAL Page 49 of 272 Things not going as expected Read the FAQ s Hitachi GDR 3120L Rom Versions 32 36 40 46 47 58 59 78 79 Overview Hitachi drives are completely unique in the way and which they are modded We modify Hitachis on a sector by sector basis For this to happen the drive must be in Mode B mode b allows windows to recognise the drive there are several transfer methods available some only to certain revisions But RAM Upload can be used for all drives JungleFlasher can be used over Windows API or PortlO a Use Win AFI Use Port IQ a WinAPI should used where possible although WinAPI requires the drive to be assigned a drive letter this isnt possible with a VIA 6421 with Drivers Removed PortlO functionality was added for VIA 6421 Sata users who removed drivers to hack the Lite On drives without freezing issues To enable PortlO usage check VIA Ports Only under DVDKey 32 tab VIA ports Only F Page 50 of 272 Things not going as expected Read the FAQ s Regardless of option chosen the Hitachi Drive must still be in ModeB this is essential to be assigned a drive letter in Windows for using WinAPI but also vital for PortlO users as most dump and flash commands require it JungleFlasher uses a unique way of calculating the checksum of the fir
189. y methods outside of a simple intro device id yes power cycle This version of badflash recovery should NOT be needed for VIA 6421 cards but may be necessary for many onboard setups and use of the x360usb pro You will need a Xecuter Probe 3 PMT or a GND probe of your own building as the switch of the Probe 3 PMT isn t required Open the drive case and expose the bottom of the PCB Locate MPX01 as shown below as it is unlabeled on the PCB If your MPXO1 point is covered in epoxy you can use a soldering iron on low heat to burn away the epoxy Make sure to not damage any o f the solder points ro tsogo a OF iscsi iraa ria ri a br ded EET a x a D he ie i Clie he 1 ALL ITTE ETEEER il i Page 201 of 272 Things not going as expected Read the FAQ s Load up Jungleflasher and ensure you are using the correct IO port The drive will NOT show up in JF if the drive is badflashed even if you refresh the port Power off your drive NOTE This power off is done with the switch on the ck3 or by unplugging the drive from the xbox The Probe 3 PMT switch will NOT suffice Press Intro Device ID FimwareTool 32 DVDKey 32 MTK Hash 32 Hitachi GDR3120 IRC Channel activate iso VO Port USB Only gt VIA ports Only C esr cin i i il me UnLock Erase UnLock VO Address Ox0000 oP Bie USB Flash Chip Properties Pri Vendor ID Postion
190. you to update the console then update your console using Xbox Live USB or CD all explained on Xbox Live Then return to the start and follow the tutorial for a STOCK drive RETURN TO START OF TUTORIAL Page 34 of 272 Things not going as expected Read the FAQ s BenQ VAD6038 62430c and 64930c Overview The BenQ Drive revision is tackled in a very similar way to the Samsung Drives The steps to modifying restoring a BenQ Drive follow the basic outline of e Unlocking the Drive e Reading the Original firmware e Patching Key into hacked Firmware e Erasing Drive e Writing Drive The tutorial will state multiple unlock methods once drive is Unlocked In Vendor Mode 0x73 you should proceed to the next step of reading the firmware from the drive The following Flowchart Enables you to use the correct method for your drive aN N Alternative method iXtreme 1 5 gt for Nforce or Via iXtreme 1 41 iXtreme 1 61 chipset users Or iX LT CLICK HERE For ALL BenQ Drives CLICK HERE CLICK HERE Page 35 of 272 Things not going as expected Read the FAQ s Unlocking the drive Before we can do anything to the drive it must be in Vendor Mode status 0x73 the majority of the unlock methods are found under MTKFlash32 tab Half Open Tray Unlock for iXtreme 1 5 gt iXtreme 1 61 If using a 360 to power the drive this method can be tricky to accomplish as the 360 likes to close the DVD Drive afte
191. ytes Drive Properties Type Serial flash with status x73 a eve cae Hashing Tasks name N Outro ATA Reset FAN Rev Reserved Read Erase Write iin Phat Slim Be sending Vendor Intro A Serial flash found with Status 0x73 Sending Device ID request to port on0000 Manufacturer ID OxCe Device ID Ox11 Flash Name MATIC MAS5L2005 Flash Size 262144 bytes When you see 0x73 immediately lift the probe f your flash chip properties are shown similar to above you can continue to the normal section of the tutorial and proceed to your next step However if your flash chip properties are not shown and you get n a for size you will not be able to read or write firmware to the drive Often simply pressing Intro Device ID will fix the problem and Jungleflasher will return good flash chip properties CONTINUE Page 203 of 272 Things not going as expected Read the FAQ s Slim Lite on Badflash Recovery If things haven t gone as planned with your Slim Lite on flash then you might need badflash recovery methods outside of a simple intro device id yes power cycle NOTE most often only needed for semi compatible chipsets like VIA 6421 and some onboards The X360USB Pro should almost always be able to get Slim Lite ons into Vendor Mode without probing Badflash can happen if your PC freezes midway through flashing your xbox powers off during flashing you should have had the A V cabl

Download Pdf Manuals

Related Search

Related Contents

MANUAL DEL USUARIO SLIT LAMP  ServiceManual UR5 en 3.0  "user manual"  Philips 9005CVSM  Philips BTM1360  DNA/DNR-CT-651 Precision Timing Interface Board — User Manual  表 3 部位別の管理手法（内部）（1/3）  Top-Loading Washer Use and Care Guide Laveuse _ chargement  Graco 311209R User's Manual  Introduction Cruising with your Quilter`s Cruise Control® User`s  

Copyright © All rights reserved. Failed to retrieve file