Xbox 360 Flashing Guide

1. To Flash a Samsung, Benq, Hitachi or LiteON, you can use the On-Board SATA

connectors, these should be fine just for flashing your drive.

The On-Board SATA connectors look like this:

If your flashing a LiteOn, you're PC may freeze/lock-up if you try to Erase the

drive if your using the On-Board SATA connector. If this is the case then you

need to buy a VIA 6421a SATA Pci card. These can be bought on eBay, Ck3 or

Modtraders. And are all under £10/$10.

The SATA Pci card looks like this:

If using an On-Board to flash a Lite-On. Remember to save your key before

erasing!

2. You need a Power Supply.

If Flashing a Samsung or a Benq, you can use my 5v power supply solution. The

guide is further down this thread and only requires a DVD Drive power cable and

a spare USB cable.

*CAUTION* - This is untested with Hitachi drives. And does not not work with

Lite-On's. Lite-On's require a 3.3v Line, something the USB doesn't have.

Alternatively, you can use an Xbox 360 to power the drive. Many say that

powering up the Xbox without the drive may result in your Xbox getting and

Banning Flag. I don't believe in this as I've connected to live without a drive

before and 2 years on I'm not banned yet. But it's your choice.

Please also note that if your Xbox is powered up without a AV/HDMI cable then

your Xbox will power down within 2 minutes. If using your Xbox, make sure you

have a AV/HDMI cable plugged in!

Another way is to power the drive by using an Xecuter Ck3/Ck3i. These can be

bought at Ck3 or Modtraders. They are extremely great to have, especially when

Power Cycling a Lite-On drive after Erase.

This is to help you identify what DVD Drive is in your Xbox. If your Xbox is closed, Take the front off and take a look at the Bottom right

of the disk tray.

If you have opened your Xbox have a look at your drive label -

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1. Connect your Samsung drive to your PC by either using the On-Board

sata/VIA 6421a Sata Card or by other means.

2. Turn on the power to the drive by either using the Xbox 360/Ck3 or by other

means.

3. Open JungleFlasher and go to the MTK Flash32 Tab

4. You should see your drive in the Drive Properties box. If you don't, Press

"Intro Device" After that you still don't see Drive Properties then you have a

problem so check all connections.

5. Now click Sammy Unlock

You should see this in the Log: Quote:

Sending Sammy_Un_Lock to Drive on port 0x9000

Stage 1, Complete!

Stage 2, Complete!

Stage 3, Complete!

Done!

Sending Vendor Intro

Requesting Device ID

Manufacturer ID: 0xBF

Device ID: 0xB6

Flash Name: SST(SST39SF020)

Flash Size: 262144 bytes

(Note- If you get "Sammy Unlock Failed", Try putting the tray in "half open"

mode)

6. Now click read

some dots should appear then you will get asked to save a file called "SAM-OFW"

Save this to a place you wont forget, it has your drive details within it. Click no

to the Autoload message.

7. Now you will be brought to the Firmware Tab


Drive key @ CEA71BBCCD9E1B39FFB67BB5597388FC (your key will be

different)

Firmware Osig: [TSSTcorpDVD-ROM TS-H943Ams28]

Firmware is: Stock

Key database updated

(If you have your OFW.bin, start from here!

1. Intro the Device

2. Unlock the Samsung with Sammy Unlock

3. Load the OFW.bin into the Source Buffer & Continue

8. Now click "Open Target Firmware" And navigate to the firmware folder, chose

"Samsung MS28 LTv2.0.bin" select it.

Click "Spoof Source to Target"

[NOTE: If you want to flash to Stock Firmware, Simply go here -

Firmware/Stock/Samsung And chose the appropriate Firmware.]

You should see this log Quote:

Loading firmware file C:\Users\Dave\Desktop\Flash360\JungleFlasher v0.1.89

Beta (284)\Firmware\Samsung Firmware\Samsung MS28 LTv2.0.bin

MD5 hash: 9e9ecbed96b490375497e9acef8326ac (Your's will be different)

Genuine LT v2.0

Inquiry string found

Identify string found

Drive key @ FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 0x4044

Firmware Osig: [TSSTcorpDVD-ROM TS-H943Ams28]

Firmware is: LT v2.0

9. Now go back to MTK Flash32 tab and select "Write"

You will get the Dots at the bottom of the screen then get this log Quote:

Getting Status from port 0x9000

Parallel flash found with Status 0x70

Writing target buffer to flash

Sending Chip Erase request to port 0x9000

Erasing:............

Writing Bank 0: ................

Writing Bank 1: ................

Writing Bank 2: ................

Writing Bank 3: ................

Flash Verification Test !

Reading Bank 0: ................

Reading Bank 1: ................

Reading Bank 2: ................

Reading Bank 3: ................

Write verified OK !

10. Now click "Outro ATA Reset"


Sending Vendor Outro to port 0x9000

Key found in KeyDB at record (4 - N/A)

Key is: CEA71BBCCD9E1B39FFB67BB5597388FC

Key has been tested and verified, thanks C4eva !

Drive is Samsung..

11. You can then disconnect your drive & play.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Quote:

1. Connect your Benq VAD6038 drive to your PC by either using the On-Board



means.

3. Open JungleFlasher and go to the MTK Flash32 Tab

4. You should see your drive in the Drive Properties box. If you don't, Press "Intro

Device" After that you still don't see Drive Properties then you have a problem so

check all connections.

5. Now click "Benq Unlock"


Drive is Benq..

Drive is Benq..

Sending Magic Keys to Drive on port 0x9000

.................................................

Done!

Sending Vendor Intro

Requesting Device ID

Manufacturer ID: 0xC2

Device ID: 0x11

Flash Name: MXIC(MX25L2005)


6. Now click read

some dots should appear then you will get asked to save a file called "BENQ-

OFW"

Save this to a place you wont forget, it has your drive details within it. Click no to

the Autoload message.

7. Now you will be brought to the Firmware Tab


Dumped in 4950mS

Loading firmware from buffer



Drive key @ 0xE040 CEA71BBCCD9E1B39FFB67BB5597388FC (your key will be

different)

Firmware Osig: [PBDS VAD6038-64930C ]

Firmware is: Stock



1. Intro the Device

2. Unlock the BenQ with BenQ Unlock

3. Load the OFW.bin into the Source Buffer & continue

If you need to flash to Stock firmware, but don't know which to chose

from the Stock list, then scroll to the FAQ at the bottom of the page!

8. Now click "Open Target Firmware" And navigate to the firmware folder, chose

"BenQ VAD6038 LT+3.0.bin" select it.



Loading MTK_Flash source file


Beta (284)\Firmware\BenQ Firmware\BenQ VAD6038 LT+3.0.bin

MD5 hash: 847700a6b5f12a88c61cfe31a5514772 (yours may be different)

Genuine LT plus v2.0



Drive key @ 0xA020 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Firmware Osig: [PBDS VAD6038 0442]

Firmware is: LT-Plus 2.0

Spoofing Target

DVD Key copied to target

Target is LT - ID strings not copied to Target

9. Now go back to MTK Flash32 tab and select "Write"

You will get the Dots at the bottom of the screen then get this log Quote:


SPi flash found with Status 0x73

Sending Chip Erase to Port 0x9000

Erasing:


Writing Bank 0: ................

Writing Bank 1: ................

Writing Bank 2: ................

Writing Bank 3: ................


Reading Bank 0: ................

Reading Bank 1: ................

Reading Bank 2: ................

Reading Bank 3: ................

Write verified OK !




Drive is Benq..

11. You can then disconnect your drive & play

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Quote:

Please Note: All Phat LiteOn's after the May 19th Update are now FW Rev

02510c. All of the 3 Old series all now require a Probe v3 to extract the unique

DVD Key. (Unless you have the key/ofw.bin)... They are now a "No Solder" drive

thus meaning that you will not need to do the "MRA Hack" on them.

If you require a Probe v3 you're LiteOn, you can find link at the bottom of this

post to trusted sellers or you can make your own. The tutorial for that is further

down this post.

Quote:

1. Connect your Lite-On drive to your PC by either using the On-Board sata/VIA

6421a Sata Card or by other means.


means.

3. Open JungleFlasher and go to the MTK Flash 32 Tab

4. You should see your drive in the Drive Properties box. If you don't, Press

"Intro Device" After that you still don't see Drive Properties then you have a

problem so check all connections.

5.Now go to DVD Key 32& click "PhatKey". Now get ready to probe MPX01 with

you're homemade probe.

Here is MPX01 on the Lite-On PCB:

Press Ok to the message and press the button on the probe, hold the tip of the

probe on MPX01 and release the button. Remember to hold the probe until it

tells you to take it off.

You should get this log along with this message. Quote:

Sending Vendor Intro to port 0x9000

Status 0x51

Re-sending Vendor Intro:

. . . . . . . .

Serial flash found with Status 0x52

6. You should then be asked to save 5 files. Key, Inquiry, Identify, Serial &

Dummy. Save these to place you won't forget. They contain information about

your drive. Click no to the Autoload message.

You should then see this log Quote:

Loading firmware from buffer



Drive key @ 0xA030 CEA71BBCCD9E1B39FFB67BB5597388FC

Firmware Osig: [PLDS DG-16D2S 7485]

Firmware is: PhatKey Extract



1. Intro the Device

2. Load up your OFW.bin into the Source buffer

3. Now continue.

7. You will now be at the Firmware Tool tab

Click Open Target Firmware and select "Lite-On 02510c LT+3.0.bin"

[NOTE: If you want to flash to Stock Firmware, Simply go here -

Firmware/Stock/Lite-On Phat/[Stock] Lite-On 02510c.]


You should now have this log Quote:


Beta (284)\Firmware\Lite-On Firmware\Lite-On 02510c LT+3.0.bin

MD5 hash: 0264149996f783b54629c1598072e50e

Genuine LT plus v3.0

Drive key @ n/a FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Firmware Osig: [PLDS DG-16D2S 0251]

Firmware is: LT-Plus 2.0

8. Go back to MTK Flash32 tab and click Lite-On Erase. Keep pressing yes to all

of the warning messages until the get the one below;

Quote:

When Erase is complete, vendor Intro will be sent.

Power drive Off then On in quick sucession, Once!

Be prepaired to Power Cycle you're drive. If you are using a Ck3, you will need to

switch it off and back on. Or if you're using the Xbox to power the drive, you'll

need to pull the power cable from the back of it and plug it back in again. Within

a second.

NOTE: When Power Cycling a DVD Drive, once you see the first 3 dots, switch

the DVD Drive off then on fast. Un-plug the cable from the Drive, not the Xbox!

*

Press yes to the final message and Power Cycle your drive.

9. If you successfully did it, you will get this log Quote:

Sending Lite-On-Erase request to port 0x9000

..............

Drive returned Status 0xD0

..............

Serial flash found with Status 0x72

Manufacturer ID: 0xEF

Device ID: 0x11

Flash Name: Winbond/NEX(W25P20/NX25P20)


10. Click write and you should get this log Quote:


SPi flash found with Status 0x72

Sending Chip Erase to Port 0x9000

Erasing:


Writing Bank 0: ................

Writing Bank 1: ................

Writing Bank 2: ................

Writing Bank 3: ................


Reading Bank 0: ................

Reading Bank 1: ................

Reading Bank 2: ................

Reading Bank 3: ................

Write verified OK !




Drive is Lite-On..

12. You can then disconnect your drive & play

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Quote:

1. Connect your Hitachi 0036-0079 drive to your PC by either using the On-Board



means.

3. Open JungleFlasher and go to the Hitachi GDR3120 Tab

4. On the left you should see your drive properties in the box. If you don't you

should go through the drop down menu until you find it. If you don't you have a

connection problem somewhere. Disconnect and check all connection and then try

again.

5. Now click Send Mode-B

You will get a massage sating you should power off drive, open tray ect...

Do exactly what it says, so

Open the tray-

Power off the drive- (un-plug cable from back or by other means, ck3 ect)

Then press OK, once the dots appear power on the drive.

Drive should then close and about 15 seconds later windows should find it.

The JF Log should now show somehting like this-

Quote:

Drive, answer normal Windows Inquirery 12 0 0 0 24 0

0000: 05 80 00 32 5B 00 00 00 - 48 4C 2D 44 54 2D 53 54 ...2[...HL-DT-ST

0010: 44 56 44 2D 52 4F 4D 20 - 47 44 52 33 31 32 30 4C DVD-ROM

GDR3120L

0020: 30 30 35 39 0059

And then get something like this Log

Quote:

Found drive C: - Hard Drive.

Found drive D: - Hard Drive.

Found drive E: - Hard Drive.

Found drive F: - CD/DVD.

Found drive G: - CD/DVD.

6. Jungleflasher will then scan for your drive, after about 15 seconds it should

find it and you will see in the top right box somehting like this -

Quote:

F:/ [HL-DT-STDVD-ROM GDR3120L0059]

If it isn't just click "Refresh" and it should find it.

Once it's found you may proceed.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

To Flash any Drive upto 0078 (32/36/40/46/47/58/59) MAKE SURE

DRIVE IS IN MODE-B BEFORE CONTINUING!

Older versions of the drive like the above are dumped using the "Classic mode,

Mode Select or RAM Upload".

In this tutorial I'll be using "Mode Select"

I suggest using this method as I cannot assist help if you use any other method.

1. In the Flashing Options, select "Dump Drive"

Make sure your Drive properties are on the left, your drive is shown at the top

right and you Drive revision is correct in the middle.

I'm flashing an Hitachi 0059 so I'll be using 58/59!

Now click "Read to Source"

You should see this Log- Quote:

Mode-B Done!

Scanning for Hardware changes

Found 3 Windows Drives

Found 2 CD/DVD Drives

Dumping F/W of Hitachi 0058/0059 by Mode Select Method via WIN32 API

Unlocked!

.......

2. You will then be asked to save your Firmware.

You will then need to go to the Firmware Tool tab to make sure you see your key!

Now go back to the Hitachi tab and tick "Flash LT-Plus"

*You will need the Firmware pack for this to work, (NOT MY PACK)*

Simply select the Flash LT-Plus button, you should see a loh simliar to this one Quote:

Done!

Flashing hacked f/w to Hitachi 0058/0059 by RAM Upload Mehtod via WIN32

API

Dumping Flash . . . . . . .

3. If all goes well you shoud get a Stability test report, Just click Yes

You should then get a log like this- Quote:

Dumping Sector 9003F000: . . . .

Read back & compare complete, Flashing Stable!

Repairing Test Sector.

Flashing Sector 9003F000

Done !

Flashing Sector 9003E000

Flashing Sector 90003000

Flashing Sector 90036000

Flashing Sector 9003A000

4. You can then disconnect your drive & play.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Quote:

These patches are only suitable for the following games:

XGD3: All current titles!

XGD2: COD Black ops, COD Modern Wafare 2, Halo Reach.

(If you require Topology for non of the games shown above, please go here for

the correct data. Thanks efaction!)

1. First, load up your updated Xbox Backup Creator! (v2.9.0.350)

2. Now follow the steps from 1 to 3. Select "Image Tools", then "Inject" and now finally "AP2.5 Sector"

http://www.xbox360iso.com/showpost.php?p=3493651&postcount=1

http://www.xbox360iso.com/showpost.php?p=3493651&postcount=1

3. Now open the iso, (Note: I'm using Modern Warfare 3 which is XGD3!)

4. After selecting you're game, you will be presented with another box. This time, you need to select the correct .bin file.

(Note: I'm patching MW3 which is XGD3. So I select the XGD3 file.

5. After you select the right .bin file, the patching will be done:

16608 - XGD3-Games excluding Halo Reach Beta

129808 - All non-XGD3 Games

For AP2.5 & non-XGD3 Games, you should get this log:

[B]Okay, take a look at you're power connector end, (Make sure it's the right way

up!)

We're going to be focusing on Pin 6 (3.3v) and Pin 11 (grnd)

These will be the only wires you will be cutting into. So please before you do cut

into them, make sure there the right ones!

Here's how it should kind of look like once finished

& Heres my finished product

Once you have made your Probe you should now be ready to flash your Lite-On.

(In case your wondering, you can still use this as a dvd drive power cable for

general Xbox 360 use (playing games ect) just tape the probe up so it dosen't

short out anywhere on the xbox motherboard and you're set to go.)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Okay, this is a fairly simple guide on how to power your Sammy or Benq with a

USB cable. This doesn't work for Lite-On's because they need a 3.3v line. And the

USB only gives 5v & ground & i haven't tried with Hitachi's

What you need?

A USB Cable.

DVD Drive power connector.

(Optional) Soldering iron & Solder.

1. Chop the USB cable in half, then chop the plastic wire cover about 2" from the

end of the wire. You need to use the red wire (5v) & the black wire (gnd)

Here is the layout of the wire-

[

2. Now take you're 360 drive cable and look at this picture-

3. Hold the cable facing you and do the following

Now the same again for the bottom wires

4. Now connect it to the USB like so

Now give it a test. Plug the drive into the PC via SATA and then the drive cable,

and finally the USB into the PC. Open jungle flasher and go to MTK Flash32 tab

and you should see your drive properties.

Head over to device manager. Either search for it or follow this-

WinXP - Start/Control panel/Administrative tools/Device manager

WinV/7 - Start/Control panel/Device manager

I would imagine that's were they are as mine is & i'm on Win7.

Right, once you are in Device manager, have a look for your VIA card, Mine in

Win7 is in Storage Controllers,

Once you have found it, right click it and select Disable. This will disable so you

can make changes to the drivers.

You may have to accept something for the change so just click yes.

Now, keep Device manager open as you will be needing it later to re-enable the

device.

Now for hopefully this should be the same for everyone, follow this-

Start/My Computer/C:/WINDOWS/System32/drivers

You need to look for the file

XP - vsmraid.sys

Vista/7 -viamraid.sys

Once you have it, rename it, example- vsmraid00.sys. Something easy to

remember

Now head back over to Device manager and re-enable your VIA card. you should

now have a (!) next to the logo, most likely yellow/grey.

Now restart your PC!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

If you aren't new to flashing and have all the required tool already, follow the quick guide below.

Find the MPX01 solder pad on your LiteOn drive pcb.

Press the Phatkey button, get ready to probe.

Press okay on Jungle Flasher.

Press your button on your Probe v3.

Put the probe on MPX01 solder pad.

Release the button on the probe.

Remove probe, press button for 5 seconds, release.

Jungle Flasher will then give you a full dump of your firmware.

Save to a place you won't forget.

Load you firmware up (Lite-On 02510c LT+v3.0).

Spoof Source to target.

Lite-On Erase.

Write. Outro/ATA Reset.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Here's a quick guide on opening you're Xbox up, if you don't know how.

You will need;

#A T10 Screwdriver or bit

#Something thin for the clips

Or you can just buy a TX Unlocking kit from most Xbox 360 modification

websites.

1.

Grab your Xbox 360 console. Mines been poorly modded so don't laugh!

2.

If it has an HDD. You will need to remove it. Push the button in and the HDD will

left up allowing you to remove it.

3.

Now you HDD is removed, you need to pop the front off. Grab the bottom of the

faceplate and pull it out wards. The whole faceplate will then come off.

4.

Now, on the bottom of the Xbox you will see some plastic meshing. If you look in

the holes you will see some plastic clips holding it on. You will need something

small and thin to push the clips inwards to release the meshing. Here's a rough

guide on where they are.

5.

There's another 3 on the other side and at the top of the Xbox there also 3 on

either side.

(Note: One of the clips are hidden by the rubber feet.)

6.

Now at the front, they are 4 clips holding the Xbox in 1 piece. You will need to

pull them out and then up. from the left to the right.

7.

Now at the back, you will need something thin again. There are 7 holes marked

by the picture below. You will need to push the clips in from the left to the right.

8.

Now the bottom should fall off. Finally you will need a T10 Screwdriver bit to take

out 6 screws. Marked below.

9.

You Xbox should now be in 2 half's so you can get to the Drive.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Firmware Pack Inc JF JungleFlasher

Team Xecuter Tricky's Flashing Thread(Inc Phatkey Fix) Credit to tricky for finding this!

How to Patch LT 3.0 Games to LT2.0

http://www.mediafire.com/?su0q0wm97a6bwmr

First of all extract the file

1)Open the xbox backup creator (the one in the folder)

2)go to "image tools"tablet

https://rapidshare.com/files/7579014/Firmware_Pack.rar

http://www.jungleflasher.net/

http://team-xecuter.com/

http://team-xecuter.com/

http://www.xbox360iso.com/flashing-all-phat-t410625.html

http://www.mediafire.com/?su0q0wm97a6bwmr

3)choose in the right "inject"

4)click the "ap25 sector" and load the iso of LT3.0 game.

5)Then load the topology data which i give in folder

If all go well at the bottom of the program we will see:

"Injecting Sector

Xbox Format Version = Xbox360 XGD3

AP25 Sector file injected at LBA sector 16608"

You are ready to burn your image which now is compatible with your LT2!!!

Caution!!Dont open this image with the new ABGX as this will return

the image to LT3 state again...

Gredits goes to the greek hacker "kokonelos"

Date post:	13-Oct-2014
Category:	Documents
Upload:	alex
View:	833 times
Download:	9 times

Xbox 360 Flashing Guide

Documents