IF the box is patched...
Boot the patch disk.
Insert your ORIGINAL (legitimate) DMS.
ALT+F4, hit ENTER. Get "#" prompt.
dd if=/dev/sda of=/tmp/image bs=512 count=2048
(substitute "sdb" if your DMS identified on sdb when inserted, etc)
WARNING: Mis-typing this command can HOSE your DMS!
Wait until you get a "#" back.
Remove old (valid) DMS. Wait 30 seconds to insure that it completely detaches the old USB volume.
Insert new (non-valid) DMS (the new disk) Wait 30 seconds until you see the attachment of the new (hack) DMS.
BE VERY SURE NOT TO INSERT THE WRONG DISK! YOU WILL OVERWRITE A VALID SIGNATURE AND RENDER THE DISK NON-ORIGINAL IF YOU DO!
dd if=/tmp/image of=/dev/sda bs=512 count=2048
(again, make sure "sda" is the correct device - whatever your new DMS identified as when you inserted it)
Wait until the green light goes out and the "#" prompt returns.
Remove the DMS.
Powercycle the machine.
Re-insert the (new, hack) DMS and wait for it to identify.
ALT+F3.
Repartition/reformat the DMS (fast, no block check)
Allow the operation to complete (will take a couple of minutes.)
Remove the DMS.
Remove the hack CD.
Reboot to Windows.
Insert the DMS. PMM starts and does some initialization stuff. Go to OPTIONS, DMS options, and load the firmware onto the new (hacked) DMS. Make sure the correct firmware for your head unit is selected before you load it!
Go into your PHTSYS directory and remove the "forceupdate" file (not strictly necessary, but there is no reason to force a box update.)
Use PMM to put your music on the new (hacked) DMS.
Do the usual save/eject function.
Enjoy.