上海PSP维修
RSS
热门关键字: psp iphone psp维修 ndsi ps3 wii

xbox360光驱固件83450c-v2和93450c 已被破解

来源: 作者:Admin 时间:09年12月05日 浏览:

此次破解对应建兴光驱固件 83450c-v2 , 93450c, 也就是2009年9月以后的新固件。

需要拆机,DumpKey的方法见下面,有了Key以后就之前的7XXX破解一样了。
附件为修改后的IX固件,请将dump出来的key合并后写入即可。

破解有风险,请勿轻易尝试

原文转载:

Again i've heard around big words about secret preservation in the name of the scene life, requesting a little sacrifice in $. There is a guy that owns a topsecret way to dump drive fw, and i'm not going to reveal, cause it's something he should do, not me. I'm sure i would have been able to discover myself, and i'm sure he would have been able to discover himself without my hints, why not, but i'm sure too that someone else can do it the same way. I've spent a lot of time reversing the 7xxx fw to find an alternative solution, but now some flashed 93450 appeared on the mod market (lame 7xxx spoofed as 93450, probably you great modder don't have the mkt scrambling/descrambling app to change the original inquiry) with epoxy removed and reapplied (great security, i'm sure MS can't see it). So, i'm sure the scene prefers to pay a MSproof modding to help the scene(rs), but if anyone wants to do some experiment and find the secret by himself, i'm happy to share something from my pocket, i'm sure someone with no $ in mind can report back some interesting result. As you know, liteons have embedded spi flash, it's an MX25L2005 and a winbond in some cases. during powerup, the spi is read by the mmtk internal flash controller, descrambled and copied to an internal sram. This sram is then connected to address and data pins of the 8051 core, which will start executing the code. The mtk checkmodule checks for the first 0x200 bytes of spi flash, if are blank (all FF), the vendormode is full enabled with an ata status 72 and you can access the spi flash (and dosflash can read/write). If the first 0x200 bytes are not blank, you can enter vendormode but you can't access the spi flash (status 52). What i tried times ago, was to mess with the pins of the mtk chip to find a way to disable the spi flash during powerup, cause in many cases of spi imlementation, if the spi flash does not pull down MISO pin, the spi master reads all FF (lifting one pin makes an old psp battery pandorized, same principle). The problem is that the embedded spi flash pins are not present outside of the mtk chip, except vcc and ground which are shared with other internal stuff). Use some imagination, and feel free to do what you want with your discovery.
最新评论
昵称
评论內容
最新公告
    上海PSP维修、NDSL维修、WII维修、PS3维修、XBOX360维修、NDSI维修等电玩游戏机售后修理服务提供商!最新到货:PSP3000屏幕,WII主板,NDSI上屏,NDSI下屏,NDSI触摸板,NDSI开关,PSP2000液晶屏,PSP1000摇杆,PSP2000摇杆,PSP2000主板,PSP1000屏幕等
相关文章
赞助商链接