The Firmware Page

It is currently Thu Jun 20, 2013 11:38 am


Post new topic Reply to topic  [ 93 posts ]  Go to page Previous  1, 2, 3, 4  Next
Author Message
 PostPosted: Tue Jan 18, 2011 9:07 am 
Administrator
Administrator
User avatar

Joined: Fri Aug 09, 2002 11:39 am
Posts: 23440
Location: .de #...still playing LLAMATRON! # sprite killing around level 138 and higher....
That's enough for a simple check by the flasher, but it could be that other checks are buil-in too.

_________________
.:The rpc1.org FAQ:. Please read & follow our firmware request rules precisely! .:The DiscInfo tool:.

I am looking for DVD-R for Authoring DVD-R (A) & HD-DVD media, any size, any brand. Please pm me if you can help. \:D/

Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 2:04 pm 
Junior Member

Joined: Sat Mar 06, 2004 1:31 am
Posts: 41
freeman2006 wrote:
I find drive id sring on memory and replace if with one of the old drive id
I am with windows 7


Are you having problems watching blu-ray movies or with blank BD-R[E] media? If the media, what brand & type are you using?


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 2:42 pm 
Rookie

Joined: Mon Dec 20, 2010 8:53 am
Posts: 9
Blank Disk, i have Maxel BD-RE, BD-R and TDK DL BD but not recognize


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 3:57 pm 
Fresh meat

Joined: Thu Nov 11, 2010 1:20 pm
Posts: 13
Still no go for me.
Everything went good 'till opening WinHex. The pb is that "MATSHITABD-MLT UJ-220S 1.00 071213" is my original drive string... so I should probably match it to another one that the updater will accept, but which one...

ala42's idea is a good one though. I've given it a try, and so far (still for my UJ-220S updater) :
I assume offset 20148 'see attached pic) gives the length of the fw : 00 10 81 78

So I should just erase everything that's before the header... however, which offset is the beginning of the actual firmware ?


Attachments:
1.JPG
1.JPG [ 53.4 KiB | Viewed 6565 times ]
Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 4:16 pm 
Junior Member

Joined: Sat Mar 06, 2004 1:31 am
Posts: 41
freeman2006 wrote:
Blank Disk, i have Maxel BD-RE, BD-R and TDK DL BD but not recognize


Hmmm...perhaps you have a software/driver problem. Can you install ImgBurn and list your upper and lower filters? What other CD/DVD/BD software do you have installed?


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 4:21 pm 
Junior Member

Joined: Sat Mar 06, 2004 1:31 am
Posts: 41
CoinCoin88 wrote:
Still no go for me.
Everything went good 'till opening WinHex. The pb is that "MATSHITABD-MLT UJ-220S 1.00 071213" is my original drive string... so I should probably match it to another one that the updater will accept, but which one...

ala42's idea is a good one though. I've given it a try, and so far (still for my UJ-220S updater) :
I assume offset 20148 'see attached pic) gives the length of the fw : 00 10 81 78

So I should just erase everything that's before the header... however, which offset is the beginning of the actual firmware ?


Using my method, were you able to get to the "good" dialog box where it begins the flash process? If not, then you need to make your string exactly as the one I did (make sure you do the number of spaces correctly and the string is NULL terminated (0x00)).

For ala42's method, you need to preserve the header and the firmware.

Keep us posted.


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 4:53 pm 
Fresh meat

Joined: Thu Nov 11, 2010 1:20 pm
Posts: 13
tqhoang wrote:
Using my method, were you able to get to the "good" dialog box where it begins the flash process? If not, then you need to make your string exactly as the one I did (make sure you do the number of spaces correctly and the string is NULL terminated (0x00)).

I don't think so... but the screen you posted a couple days ago (the one that shows the "drive is closed - please open tray") doens't mean the updater's been tricked, IMO. Actually, this is the first warning that pops up (and it's only then that I can set the breakpoint in windbg) as soon as I launch the flasher. Or maybe the scren is just wrong and you actually got past the warning and the flashing process was starting... ?

Just to be sure : the string you edited (the ELBY one from your virtual drive) was located just after the drive letter in RAM ?
In my case (1 virtual daemon tools lite virtual drive + my physical one) :
run upgrader > Processing... > disc tray is closed > attaching windbg to process and setting breakpoint > F5 > opening tray > hit f5 8 times (9th breakpoint is the last one), then skipping calls as you explained.
In Winhex, 8 occurences of "MATSHITABD". First :

Image
several occurences at once, first describing the new fw, and the old one that's currently on my drive. Those shouldn't be edited (if i'm following what you did).

The interesting one should be :
Image
it's located right after "G:" which is indeed the drive I'm trying to flash.

So I would need to edit the one after "G:" so that it matches a valid one that the updater would recognize. I really don't understand how you managed to use this string (with 1.00 071213) on your end, as it is not a correct Sony one... or if it is, I'm really not understanding anything anymore xD !


tqhoang wrote:
For ala42's method, you need to preserve the header and the firmware.

Keep us posted.

Got that part, but I'm not sure how to determine the exact starting offset of the firmware. I should have the length right, but how do you know which byte after the length ths fw starts ?


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 4:58 pm 
Firmware Patcher
User avatar

Joined: Sun Nov 02, 2003 4:18 am
Posts: 990
Location: Germany
CoinCoin88 wrote:
Still no go for me.
Everything went good 'till opening WinHex. The pb is that "MATSHITABD-MLT UJ-220S 1.00 071213" is my original drive string... so I should probably match it to another one that the updater will accept, but which one...

ala42's idea is a good one though. I've given it a try, and so far (still for my UJ-220S updater) :
I assume offset 20148 'see attached pic) gives the length of the fw : 00 10 81 78

So I should just erase everything that's before the header... however, which offset is the beginning of the actual firmware ?

$30 bytes header starting with MATSHITABD, $108178 firmware length, $1081A8 bytes to be saved for header + firmware.

_________________
LiteOn/Benq/LG/NEC/Pioneer/Samsung/Toshiba stuff: MediaCodeSpeedEdit V 1.2.0.10, released October 3rd 2011


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 5:04 pm 
Fresh meat

Joined: Thu Nov 11, 2010 1:20 pm
Posts: 13
ok the header is always 30 bytes. And it seems correct, after the assumed length of fw i end up just at the beggining of a veyr veyr very repeting part. I'll keep this as a bin file for the moment, i'd rather succeed in doing the crossflash trick, but who know :)

edit : whan trying ala42's method, it ends up with a checksum error. wtf ? The length of the file is correct though...


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 7:29 pm 
Junior Member

Joined: Sat Mar 06, 2004 1:31 am
Posts: 41
Here's the extracted UJ-225 Q113 firmware: UpDate_UJ225_Q113.zip

Here's the extracted UJ-220 1.05 firmware: UJ-220B_for_VAIO_V105.zip

UPDATE: Don't bother to use the UJ-220 firmware bin...it generates a checksum error (thanks ala42 for the clarification on the UJ-225 being ok)


Last edited by tqhoang on Sun May 06, 2012 4:08 pm, edited 5 times in total.

Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 7:37 pm 
Fresh meat

Joined: Thu Nov 11, 2010 1:20 pm
Posts: 13
I had exactly the same file, and it gives the same checksum error


Top
 Profile  
 
 PostPosted: Tue Jan 18, 2011 11:35 pm 
Junior Member

Joined: Sat Mar 06, 2004 1:31 am
Posts: 41
Thanks...I updated my post with a disclaimer.
Out of curiosity, have you tried adding 4 or even 8 bytes to the firmware bin file?


BTW, regarding my thinking the UJ-220 firmware updater got tricked:

1. When I run the flasher, it gives me the standard error dialog about a compatible drive not found.

2. I normally don't run the firmware updater first and then attach to it. I launch it directly from WinDbg and then set the breakpoint at the very first opportunity. I think by you attaching to it, the initial drive check is already done.

Sorry I don't actually have a UJ-220 drive here, otherwise I'd probably be able to go further with the testing.


Top
 Profile  
 
 PostPosted: Thu Jan 20, 2011 2:49 pm 
Fresh meat

Joined: Thu Nov 11, 2010 1:20 pm
Posts: 13
Nop didn't try adding bytes at the end of the file... I'll do that this week-end if I got time.


Top
 Profile  
 
 PostPosted: Fri Jan 21, 2011 12:10 am 
Firmware Patcher
User avatar

Joined: Sun Nov 02, 2003 4:18 am
Posts: 990
Location: Germany
tqhoang wrote:
Here's the extracted UJ-225 Q113 firmware: UpDate_UJ225_Q113.zip

Here's the extracted UJ-220 1.05 firmware: UJ-220B_for_VAIO_V105.zip

UPDATE: Don't bother to use these...they generate checksum errors. Help ala42...

The UJ-225 Q113 is fine and does not return a checksum error. The UJ-220 1.05 returns a checksum error because the header is longer than expected.

_________________
LiteOn/Benq/LG/NEC/Pioneer/Samsung/Toshiba stuff: MediaCodeSpeedEdit V 1.2.0.10, released October 3rd 2011


Top
 Profile  
 
 PostPosted: Fri Jan 21, 2011 4:19 pm 
Junior Member

Joined: Sat Mar 06, 2004 1:31 am
Posts: 41
Any hints on the UJ-220's header size?

Also I updated my post above to clarify that the UJ-225 bin firmware has a good checksum...thanks!


Top
 Profile  
 
 PostPosted: Wed Feb 16, 2011 8:34 pm 
Fresh meat

Joined: Thu Nov 11, 2010 1:20 pm
Posts: 13
Tried to mess around with this last week-end, still nothing so far. I'll try again when I get time, but I'm running out of idea :/ Any luck on figuring out the correct size of the header ??


Top
 Profile  
 
 PostPosted: Wed May 04, 2011 3:31 pm 
New Member

Joined: Wed May 04, 2011 3:18 pm
Posts: 1
Ok so i've read this thread about 10 times and I don't understand anything. I need to update my firmware since my drive is producing 6 dollar coasters out of dual layer blurays. Before I go out and buy another more modern burner which I really can't afford, I'd like to give this a try. I'm a med student so I know ABSOLUTELY nothing about programming, hex editors or basically anything that has been mentioned in this thread. Is there like an online crash course you guys would recommend to read about how to use these programs? I really want to flash my drive and maybe learn something along the way, but I need some serious help. Thanks again!


Top
 Profile  
 
 PostPosted: Sun May 15, 2011 3:09 pm 
Administrator
Administrator
User avatar

Joined: Fri Aug 09, 2002 11:39 am
Posts: 23440
Location: .de #...still playing LLAMATRON! # sprite killing around level 138 and higher....
Either get reliable BD media recommended for your burner or get another, more reliable burner and try your luck.

Crap media will always stay the same: crap media.

_________________
.:The rpc1.org FAQ:. Please read & follow our firmware request rules precisely! .:The DiscInfo tool:.

I am looking for DVD-R for Authoring DVD-R (A) & HD-DVD media, any size, any brand. Please pm me if you can help. \:D/

Top
 Profile  
 
 PostPosted: Mon Jun 27, 2011 2:55 pm 
New Member

Joined: Mon Jun 27, 2011 2:47 pm
Posts: 1
Hello All,

Could this idea be used to flash the sony firmware into a oem UJ-220 drive? Or has someone already found a way? I can't seam to get the file length quite right.. Even if it is possible or i'm doing it wrong.

D.

ala42 wrote:
The approach you take is much too complicated. Just extract the firmware from the .exe file, and flash it using a flasher that does not check the drive ID.
Load the UpDate_UJ225_Q111.exe file in a hex editor, search for MATSHITABD, you will find it at $2D07A.
Code:
02d070  32 30 2d 4e 41 44 45 53 49 4b 4d 41 54 53 48 49  20-NADESIKMATSHI
02d080  54 41 42 44 2d 4d 4c 54 20 55 4a 2d 32 32 35 53  TABD-MLT UJ-225S

Now delete the data before that from 0-.$2D079, so you get
Code:
000000  4d 41 54 53 48 49 54 41 42 44 2d 4d 4c 54 20 55  MATSHITABD-MLT U
000010  4a 2d 32 32 35 53 20 20 51 31 31 31 20 20 20 1a  J-225S  Q111   .
000020  00 00 00 00 00 10 21 5c 00 01 27 8a 00 00 00 50  ......!\..'....P
000030  a5 59 62 5a eb 1d 76 b8 63 de 4f c3 43 51 fb 8f  ¥YbZë.v¸cÞOÃCQû.

At offset $24 you see 00 10 21 5c, which is the plain firmware length of $10215c bytes. The firmware starts at $30. Now save the $30 byte header and $10215c byte firmware, totally $10218c bytes to a firmware.bin file and flash it with MatshitaWinFlash available here.
The flasher refuses to flash files having a wrong length or wrong checksum.
The crossflash only works if the firmware running on the drive accepts the firmware, so you can not crossflash to all firmwares you find somewhere.


Top
 Profile  
 
 PostPosted: Thu Nov 03, 2011 6:57 am 
Rookie

Joined: Sat Mar 05, 2005 10:43 am
Posts: 5
thanks tqhoang, I have tested on UJ 220 UJ230 bluray drive with Sony v1.05 v1.11 firmware, all sucessful pass. but tqhoang not say right about hareware line. the first "ELBY" string and changed it to "MATSHITABD-MLT UJ-220S 1.00 071213" not work, the really line is start with commFwHeader............


I will upload the picture later.

Now I have trouble work with UJ230 firmware V1.23 from 123ware website . open firmware UJ230 V1.23 inside hareware line is UJ 240. very strange! it fail at last step.


Top
 Profile  
 
 PostPosted: Thu Nov 03, 2011 7:07 am 
Rookie

Joined: Sat Mar 05, 2005 10:43 am
Posts: 5
the working commFwHeader need extract from previous firmware version like sony 220v1.04 , 230 v1.01.


Top
 Profile  
 
 PostPosted: Wed Feb 01, 2012 8:47 pm 
New Member

Joined: Wed Feb 01, 2012 11:16 am
Posts: 1
I've been trying to flash the UJ-220 on my Dell XPS M1730 using both of these methods but it seems to get stuck at a second checkpoint. As hzqstrong has pointed out, there's a commonFwHeader line; my experiments show that unless that matches the string read from the drive, it will fail the first test. If I change either string to match the other (using WinDbg to edit the memory) it gets to the next stage of checking whether the door is open but then claims that my drive is unsupported.

I've seen various Sony firmwares marked UJ-220S and UJ-220B but my drive claims to be a "MATSHITA BD-RE UJ-220" with no letter at the end. Has anyone determined the meaning of these letters?


Top
 Profile  
 
 PostPosted: Wed Mar 07, 2012 7:08 pm 
New Member

Joined: Wed Mar 07, 2012 6:50 pm
Posts: 1
@crok: Mine as well. The UJ-220 on my M1730 enumerates as "MATSHITA_BD-RE_UJ-220___________________1.00____"
tqhoang wrote:
Also since your drive ID indicates "BD-RE" and not "BD-MLT", then I'm inclined to think that your UJ-225 OEM (maybe Packard Bell?) only licensed CD/DVD/BD support and not DVD-RAM. So for legal licensing reasons, one can see why Panasonic/Matsushita tries to prevent cross-flashing.


I've been trying to use ala42's method @ viewtopic.php?f=13&t=46473&start=50#p229637 , but MatshitaWinFlash dies with "fatal: checksum error in file H:, expected 5C37, current B0E0". tqhoang's method is a little over my head. It's a shame that this thread died.


Top
 Profile  
 
 PostPosted: Sun Apr 29, 2012 6:23 pm 
Rookie

Joined: Sun Apr 29, 2012 6:16 pm
Posts: 8
Hello,

I just saw this thread the other day- I have a Dell XPS M1530 which has a "MatshitaBD-RE UJ-225s" (According to DiscInfo) drive, running Q310 firmware version. I bought a 25 pack of LTH BD-R discs, not knowing that my drive isn't compatible with it, so I've come here to figure out if my drive can be crossflashed to a newer firmware, and if so, will that solve my issue.

By reading through this thread, it appears that I can do this, however, I now see there are two methods (tqhoang and ala24's). Can someone point me in the right direction as to which method works best and also, the exact steps I need to take? According to Ala24's post here (viewtopic.php?f=13&t=46473&start=25#p229573), he is referencing "UpDate_UJ225_Q111.exe" but the one I got from Sony's website is UpDate_UJ225_Q113.exe. Is that okay?

Basically, I want to be sure I am following the right steps (and I am pretty technically savvy, so I don't mind using hex editors and such), so if someone can point me in the right direction, it would be greatly appreciated.

Thanks in advance.


Top
 Profile  
 
 PostPosted: Mon Apr 30, 2012 8:08 pm 
Administrator
Administrator
User avatar

Joined: Fri Aug 09, 2002 11:39 am
Posts: 23440
Location: .de #...still playing LLAMATRON! # sprite killing around level 138 and higher....
Forget it!

Buy discs your drive supports.

_________________
.:The rpc1.org FAQ:. Please read & follow our firmware request rules precisely! .:The DiscInfo tool:.

I am looking for DVD-R for Authoring DVD-R (A) & HD-DVD media, any size, any brand. Please pm me if you can help. \:D/

Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 93 posts ]  Go to page Previous  1, 2, 3, 4  Next


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style based on FI Subice by phpBBservice.nl