XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 24, 2013, 11:39:02 AM


Login with username, password and session length


Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 »
  Print  
Author Topic: Project to dump the new BenQ drive - VAD6038  (Read 191324 times)
garyopa
Xbox Hacker
*****
Posts: 582


Oasis Pensive Abacutors


View Profile WWW
« on: February 05, 2007, 09:11:37 PM »

As of Nov. 2006 - M$ has finally got the shipment of the BenQ drives to replace the dropped Toshiba/Hitachi brands.

I thought these machines would start appearing in the new production lot just before XMAS'06 or early '07 in time
with the new 65nm cpu die also.

It looks like M$ has started finally using them, and those owners buying machines in the Dec.'06 mfr. date range may
not get a Toshiba MS28 or Hitachi v78 but the new super-quiet BenQ drive based on the Philips design - VAD6038.

Here is a picture:


I am hoping to get my hands on one soon, and get to work on this baby!
Logged

garyopa
Xbox Hacker
*****
Posts: 582


Oasis Pensive Abacutors


View Profile WWW
« Reply #1 on: February 05, 2007, 11:16:33 PM »

The prototypes of this drive in March 2006 were based on the BenQ 1650V PC drive.

As such if this is still the same design, you should be able to use MTKFLASH to dump the drive,
as the BenQ 1650V uses a SPI Flash eeprom with the MTK1359SE chipset.

If anyone gets one of them and has a VIA SATA chipset, which is known to work with the MS28 drives,
please do the same as you do on dumping the MS28 drive and email us the contents of what you get with this drive.

Thanks for all your support.
Logged

Arakon
Administrator
Xbox Hacker
*****
Posts: 6925


View Profile
« Reply #2 on: February 06, 2007, 01:29:37 AM »

a tray picture would be useful I think, to determine the drive without opening.
Logged

I do NOT give support by email, PM, ICQ or whatever. Anyone annoying me that way will have his balls removed. With a rusty butterknife. Slowly. And I'll enjoy doing it.
LordX
Master Hacker
****
Posts: 128


X-LAB


View Profile
« Reply #3 on: February 06, 2007, 09:06:39 AM »

And Drive board pic please, What SPI Flash eeprom used in there ? version ?
Logged

carranzafp
Master Hacker
****
Posts: 337


View Profile
« Reply #4 on: February 06, 2007, 10:13:17 AM »

If somebody got a dump of these drop me an email carranzap@hotmail.com 

I am not looking exactly on hacking this one, but on update the toolbox to handle the firmware key extraction/replace etc.
Logged
robinsod
Global Moderator
Xbox Hacker
*****
Posts: 648


Perl packed my shorts during global destruction


View Profile
« Reply #5 on: February 06, 2007, 10:25:25 AM »

If somebody got a dump of these drop me an email carranzap@hotmail.com 

I am not looking exactly on hacking this one, but on update the toolbox to handle the firmware key extraction/replace etc.

<cough>Illegal Distribution of Copyrighted Materials</cough>
Logged
jas0nuk
Hacker
***
Posts: 67


View Profile
« Reply #6 on: February 06, 2007, 11:53:23 AM »

a tray picture would be useful I think, to determine the drive without opening.
It's the same as the old Philips drive tray
(far left on this pic)

http://pictures.xbox-scene.com/xbox360/dvd/allthreedvdsxs.jpg
Logged
garyopa
Xbox Hacker
*****
Posts: 582


Oasis Pensive Abacutors


View Profile WWW
« Reply #7 on: February 06, 2007, 02:10:58 PM »

a tray picture would be useful I think, to determine the drive without opening.
It's the same as the old Philips drive tray
(far left on this pic)

http://pictures.xbox-scene.com/xbox360/dvd/allthreedvdsxs.jpg

Except the tray is all GREY in color now.
Logged

caster420
Master Hacker
****
Posts: 242



View Profile
« Reply #8 on: February 10, 2007, 11:08:08 PM »

Board pics can be found here.  Thanks to 1337pig at x-s for those.

Bong420 also took pics, which can be found here.

I have found one datasheet here, for the EliteMT M11B416256A 35T.  It can be found here.

I haven't been able to find a datasheet on the MediaTek MT1359SE.

Caster.
« Last Edit: February 10, 2007, 11:38:38 PM by caster420 » Logged
garyopa
Xbox Hacker
*****
Posts: 582


Oasis Pensive Abacutors


View Profile WWW
« Reply #9 on: February 11, 2007, 02:16:45 AM »

Board pics can be found here.  Thanks to 1337pig at x-s for those.

Bong420 also took pics, which can be found here.

I have found one datasheet here, for the EliteMT M11B416256A 35T.  It can be found here.

I haven't been able to find a datasheet on the MediaTek MT1359SE.

Caster.


The EliteMT is just the cache ram same as the Toshiba/Samsung drive
The MT1359SE is the controller also same as the Toshiba/Samsung drive
To the right of the controller is the MX25L2005 (2mbit SPI Serial Flash EEPROM)

That last chip is the key, we need to dump it to get the firmware.

So far all attempts at using MTKFLASH get the error status 73 should be 50.
Logged

Tiros
Master Hacker
****
Posts: 451


View Profile
« Reply #10 on: February 11, 2007, 11:55:34 AM »

I have some code for this part:
http://www.sparkfun.com/commerce/product_info.php?products_id=676
To dump spi rom. It's only a few connections, but you would have to get the rom off the board.
Logged
uberfry
Xbox Hacker
*****
Posts: 862



View Profile
« Reply #11 on: February 11, 2007, 01:05:07 PM »

it's easy to dump it with the LPT port alone too...
after all, it's just SPI (hell, you can even use a MAX3232 with your serial port...)
*smelling another upcoming product by TX*
Logged
caster420
Master Hacker
****
Posts: 242



View Profile
« Reply #12 on: February 17, 2007, 02:33:22 PM »

Are there any updates on this drive?

Thanks,

Caster.
Logged
uberfry
Xbox Hacker
*****
Posts: 862



View Profile
« Reply #13 on: February 17, 2007, 03:11:45 PM »

Are there any updates on this drive?

Thanks,

Caster.

do you have one?
Logged
caster420
Master Hacker
****
Posts: 242



View Profile
« Reply #14 on: February 18, 2007, 09:19:36 AM »

do you have one?

uberfly - I wasnt even going to dignify this with a response but i know that is exactly what you were hoping for....

No, i do not have an update.  I have read else where that mtkflash, even with updated flash definitions, was not successful in dumping the firmware.  I was hoping that someone who currently has a BenQ and actively working on it would give an update as to what the current status is.  I went out and bought a new console on Friday, hoping is was a BenQ, to hopefully start testing and potentially aid those who have much more knowledge than I.

It wasnt as if I asked when the firmware was going to be released.  Get a grip uberfly - dont let those 700+ posts get to your head.

Caster.

Logged
uberfry
Xbox Hacker
*****
Posts: 862



View Profile
« Reply #15 on: February 18, 2007, 12:46:53 PM »

I didn't mean any offence, I was only asking if you had one because I'd like to buy one
Logged
Tiros
Master Hacker
****
Posts: 451


View Profile
« Reply #16 on: February 18, 2007, 01:01:58 PM »

Has anyone tried ltnFW.exe?
I know it can dump MTK1359 chipset with SPI flash.
It can read/write the boot block as well.
http://www.softwaretipsandtricks.com/forum/hardware-problems/19714-my-sony-dw-d22a-wont-read-burn-cds.html
The link to it is in the last post of the page.
Logged
zillionare
Master Hacker
****
Posts: 378

Global Modifier


View Profile
« Reply #17 on: February 18, 2007, 02:22:36 PM »

I would love to help out on this drive....but I don't have one of em.

Is this drive anything like the 6037? I can aquire it.

also there are tools for doze...."Xflash" and the one mentioned above ---^ ltnFW

another one is for dos it's "XFS" . be careful with this one...there's alot of mention about writing the whole flash with bad results. but a whole read doesn't sound to bad.  Smiley

GL with the tools. If you need a link to either I can post them.

peace
zil
Logged

Why buy one, when you can buy two for twice the price.
uberfry
Xbox Hacker
*****
Posts: 862



View Profile
« Reply #18 on: February 19, 2007, 01:23:04 PM »

TMF can't post right now, so here's a message from him:

"I tried dumping the SH-D163A DVD drive and it shows the same error - can somebody else who has the same drive also try to dump it, please?
Tried dumping it using the DVD drive and the SPI eeprom reader/writer, but nothing could be extracted"
Logged
glaze83
Xbox Hacker
*****
Posts: 534


View Profile
« Reply #19 on: February 19, 2007, 05:01:48 PM »

TMF can't post right now, so here's a message from him:

"I tried dumping the SH-D163A DVD drive and it shows the same error - can somebody else who has the same drive also try to dump it, please?
Tried dumping it using the DVD drive and the SPI eeprom reader/writer, but nothing could be extracted"

If thats the case then wouldn't kreon know how to dump it as he ported his firmware over to it...  Shocked
Logged
Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM