Can anyone provide an EPROM Image for the PhatBox in a hacked state?

[Waldemar]

I need the memory content of the flash 29LV200BC-90 from the Phatnoise VA-012-PBOX after the HACK procedure.
After editing of DMS cartridge with DMSTool I have got the message No Changer. Then, I have restored all the data on DMS using Acronis utility, but the device does not see the box anyway.
I would like to program the 29LV200BC-90 directly.
I would like to connect the Phatnoise to the Audi Concert. In the past this box
 was installed in VW and worked with the VW Premium5 correctly (Version DMS 5.01, Released 1/15/2003.), but during attempts to connect to the Audi Concert did not work
Now, after a multiple attempts to recover the device the Phatnoise does
not operate with  one audio.     After the power supplying the green LED becomes rapidly flashing
I've taken another DMS cartridge from the Phatnoise CAS-012-PBOX revA (Pioneer Version 2.01, Released 6/19/2003. ) and inserted into my VA-012-PBOX. The all became to work fine with Premium5 as well as Audi Concert. After this, I have tried to copy onto my DMS, it does not work anyway.
Finally, I tried to perform the HACK procedure on the second cartridge and as a result I have got two invalid DMS 

 Please help. Thanks in advance.

[markbowen]

I'm sorry, but I don't think anyone here can understand this.  Es tut mir leid, aber wir verstehen nicht.

[VorTechS]

I think you must wait longer... you say:

'After the power supplying the green LED becomes rapidly flashing'

...which is PhatBox updating firmware and will take 15 minutes or more.

You mentioned using Acronis to re-ghost your drive.  This will not work, as you will lose the special signature in the first 1MB of the drive.

Now, if the FIRST thing you did was run the hack tool... it does a backup of this 1MB and you can recover.  Check the log files in 'My Documents\PhatHack Media Manager\Logs', and you will see the DD command used to backup the file and the location the backup was saved to.

When you have this written back to the drive, then using v2.12 of the DMS tools reset the box back to stock (factory defaults) using the Repair DMS (Full) options, choosing the correct version of firmware that was on the box and choosing the option 'Install non-hacked firmware'.  Do not install the AAC plugin and do not choose the option 'Reflash box'.  A playlist will be created for you automatically assuming there is no problems.

When you have the DMS working again. then try applying the hack.. but only the hack and do nothing else.

If you still have problems, reset the DMS back to stock (as before) but please delete the log files I mentioned earlier first.  Then mail the logs to me and I will see if I can see any problems.

[Waldemar]

How can I restore DMS data in DMSTools? The DMS Restore button is disabled.

[VorTechS]

The restore button functionality has not been coded (which is why it is disabled)..it is also now unnecessary given the new Repair modes I have built into the DMS tools.

The original 'backup' function simply ZIPS up files from the DMS into a specific location that I'll try and dig out....more than likely somewhere under 'My Documents\PhatHack Media Manager', but gives the zip files a different extension.  However, re-extracting these back onto the DMS would require extraction in a very specific manner.

***Edit***  I just checked the source:   m_BackupPath = m_StartupPath & "Backups\", so the backup files are located in the installation directory under the folder Backups

If you ran the hack, or backup (and in the backup you chose to backup the drive signature) before running Acronis the drive can be recovered.  If not, you will need to find another original drive..or someone close to you that can hack your box for you to enable you to put another drive in the DMS.

[Waldemar]

I have found all the files with Backup, that were made automatically by the DmsTool as well as files that were made manually with DMSbackup button.
So I have 3 files:
***.DDB
***.DTB
***.DSB
I cannot understand how can I put them onto DMS?

If I fill the DMS with the files that were made automatically, the box becomes working
in another manner: the green LED goes ON, then goes OFF, I can hear the hard disc becomes
stoped. However finally I have "No Changer".

[VorTechS]

.DDB = DD.exe backup = drive signature backup.  Rename the file .ZIP and then extract the contents of the file somewhere on your pc.  In the DMS hack tools installation path you will see the dd.exe program.

If you locate the log file files in 'My documents\PhatHack Media Manager\Logs' you will be able to find the command that extracted the backup file.  Find it, and paste it back here and I will tell you what command you need to do to put the signature back on the DMS.

[Waldemar]

Re: VorTechS: I have sent You email

[VorTechS]

I have now had a chance to take a look through the log files of the DMS tools.  I think you have a bad disk, as most of the procedures fail, as the following extracts show:

Checking mounted drives for disk...
...new disk mounts found successfully!
Checking available disk space...
...which is: 000 Bytes.
Checking available disk space...
...which is: 000 Bytes.

Preparing format parameters....
PHTSYS Arguments: -v -n PHTSYS -F 32 J: 0
PHTDTA Arguments: -v -n PHTDTA -F 32 K: 0
Formatting PHTSYS....
completed: Failed!.
Formatting PHTDTA....
completed: Failed!.

The new DMS preparation has failed.
Completion time: 22:10:34

Preparing format parameters....
PHTSYS Arguments: -v -n PHTSYS -F 32 J: 532480
PHTDTA Arguments: -v -n PHTDTA -F 32 K: 19105791
Formatting PHTSYS....
completed: OK.
Formatting PHTDTA....
completed: Failed!.

The new DMS preparation has failed.

Preparing format parameters....
PHTSYS Arguments: -v -n PHTSYS -F 32 K: 131072
PHTDTA Arguments: -v -n PHTDTA -F 32 J: 38939007
Formatting PHTSYS....
completed: Failed!.
Formatting PHTDTA....
completed: OK.

The new DMS preparation has failed.

Preparing format parameters....
PHTSYS Arguments: -v -n PHTSYS -F 32 J: 532480
PHTDTA Arguments: -v -n PHTDTA -F 32 K: 19105791
Formatting PHTSYS....
completed: Failed!.
Formatting PHTDTA....
completed: Failed!.

The new DMS preparation has failed.

Preparing format parameters....
PHTSYS Arguments: -v -n PHTSYS -F 32 J: 532480
PHTDTA Arguments: -v -n PHTDTA -F 32 K: 38535167
Formatting PHTSYS....
completed: Failed!.
Formatting PHTDTA....
completed: Failed!.

The new DMS preparation has failed.

Having 'spoken' to you via e-mail, what you were originally requesting is that if anyone is able to provide you with an image from the EPROM within the PhatBox in a hacked state.  I have therefore amended the topic subject accordingly and if anyone is able to help you, I'm sure they will (upon their return from wherever it is they are).

I don't know how feasible this is given that I believe this data is encrypted on the chip so getting access to it may be difficult.

[Waldemar]

YES!!! Phatnoise works now and operates with any hard disc.
I've taken the same Phatnoise and made a Hack on it successfully.
I've read 29LV200 and copied it's memory content into my box using the Omega programmer.
It seems that now I can recover even the box has not the genuine DMS.
All the works were made with the Omega programmer from
www.scorpio-lk.com
Especial thanks to VorTech !!!

[sbingner]

for future reference -- if you look in the source for the hack (on downloads.phathack.com) it lists all the offsets and hex code changes -- if you can read the firmware you can edit those manually (using XVI32 or something similar) then reflash it.

I don't want to release actual firmware since that is probably copywrited or something... but the hack reads your flash (and saves it to your PHTSYS partition) whenever it tries a hack, so anybody with a box could easily extract it...