Estude fácil! Tem muito documento disponível na Docsity
Ganhe pontos ajudando outros esrudantes ou compre um plano Premium
Prepare-se para as provas
Estude fácil! Tem muito documento disponível na Docsity
Prepare-se para as provas com trabalhos de outros alunos como você, aqui na Docsity
Encontra documentos específicos para os exames da tua universidade
Prepare-se com as videoaulas e exercícios resolvidos criados a partir da grade da sua Universidade
Responda perguntas de provas passadas e avalie sua preparação.
Ganhe pontos para baixar
Ganhe pontos ajudando outros esrudantes ou compre um plano Premium
Criacao de PMT para desbloqueio de XBOX360
Tipologia: Notas de estudo
1 / 20
Esta página não é visível na pré-visualização
Não perca as partes importantes!
First of all you need to create your PMT Probe. This requires, basically 3 items
On this one, I knocked of all the surface components with my soldering iron (we are only interested in the pin itself)
These pre-wired probe cables that come with CK Probe 1 & 2 are ideal as they already have the cables spliced into the main cable
If not you will need to splice 2 cables into your main loom
With the plug upwards (notice the pegs on top) the indicated cable is GND. The one directly below it is 3.3V. If you are splicing into one of these cables attach a BLACK cable to GND And a RED or BROWN cable to the cable below it.
Cut the red cable away – you don’t need it.
Now strip the ends of remaining 2 cables and tin them with your soldering iron, in preparation for next stage.
Now – you need to decide what you are using as a probe/pin
I have tried a few things – took the pin from a Vampire and pushed it into the vamps cable end. Cut away all the other cables – looks like this.
Or use a CK Probe 1
As I mentioned earlier – we are only interested that you can press it onto the PCB – It’s just a pin!
SO – for the sake of this tutorial I’m using the CK Probe 1. Take your probe and solder the negative (-) leg of the capacitor to it
In the picture below, the 2 large solder point are both connected to the pin, so I choose to keep the cap further from the tip to aid visibility when using it.
Alternatively you could do it this way – Brown to Positive (+) leg of capacitor Black and probe cable to the negative (-) leg
This is my own one that has a lot longer cable so I taped it to the body to keep it out the way and protect the solder joints from being pulled.
Incidentally – as I didn’t want to have a charged capacitor at all time if I was using that cable for other drives – I fitted a small switch into my cable at the drive end. Cutting into the Brown wire. This is not necessary for it to work – just something I added.
Using the PMT
With drive powered on and showing in drive properties, click refresh ([…])
Notice the drive being identified!
Now press the “PhatKey” Button
The following message will appear
Please read this carefully. Then click YES
Switch drive power OFF Probe the point MPX
This message should appear in log window
As soon as you see status 0x52 appear – lift the probe off from the point
Within a few seconds this should appear
Again read it carefully, Switch drive power OFF Wait 5 seconds Switch drive power back ON Then Press “OK” IF All has gone well You will see the save box appear to save your Dummy.bin Click “SAVE”
Then you will be presented with the question to auto-load the iXtreme FW
If this is what you wish to do Click “YES”
This will as normal take you to the Firmware Tool 32 tab, with your Dummy.bin loaded as source and the target Firmware loaded and spoofed with your drives details. From here the Jungleflasher procedure is identical to the previous versions
The Next step is to ERASE the drive, its vitally important you
only do this once you KNOW you are ready and have read the tutorial, in full, to understand the risks.
Sending the erase command to the Lite-On using VIA Card with drivers installed poses the potential risk of the system locking up due to the VIA chipset polling the erased Lite-On and not liking the response!!!!!!!
NOTE- You CANNOT SPOOF a LiteOn Drive with LT Firmware as a DIFFERENT DRIVE
Once you erase the drive, there is NO GOING BACK. Click the MTKFlash 32 Tab.
Verify I/O Port is correct(for your setup!) and click Lite-On Erase.
JungleFlasher will warn of the importance of having a verified Good Drive Key.
Please Note, the only ways to know 100% that a key is good, is to ensure your drive key was verified by JF or flash your firmware to a identical drive first and test it in the xbox itself
Click Yes if you wish to Proceed. JungleFlasher will present you with another warning.
Drive is now in Vendor Mode (0x72).
Click the Write button to write Target Buffer to the drive.
Write Verified OK! in Running Log signals good write. Now send an Outro to the drive. Done by pressing the Outro / ATA Reset Button
This will release a drive from Vendor Mode and send ATA Reset to the Drive. It then sends an inquiry command to the drive.
Different properties would appear when flashing an 83850C, for example
