1
edit
Changes
Jump to navigation
Jump to search
Created page with "{| class="wikitable" |+ !Project !Description !Links |- |Original Xbox v1.6 RAM upgrade |Upgrading the Xbox to 128MB on the final version, 1.6, is more challenging due to the..."
{| class="wikitable"
|+
!Project
!Description
!Links
|-
|Original Xbox v1.6 RAM upgrade
|Upgrading the Xbox to 128MB on the final version, 1.6, is more challenging due to the lack of footprints for the extra memory chips.
I solved this by stacking the extra RAM chips on top of the existing RAM chips.
|https://www.ogxbox.com/forums/index.php?/topic/7548-16-128mb-ram-upgrade-tutorial/#comment-42441
https://www.youtube.com/watch?v=bcnf3LDe1pw
|-
|Original Xbox 256MB RAM upgrade
|I designed an interposer PCB to adapt the BGA RAM chips to the original Xbox's QFP footprint. 256MB also requires re-configuring the DRAM controller for an extra memory column address bit.
|https://www.ogxbox.com/forums/index.php?/topic/19155-256mb-ram-upgrade-release-and-tutorial/
https://www.youtube.com/watch?v=1idSEhUT4PM
|-
|Xyclops dumping
|Dumped via secret serial interface. Xyclops an the integrated SMC chip used in some original Xboxes.
|https://github.com/Prehistoricman/Xbox_SMC/
|-
|PIC16C63A dumping
|Unusual attack required on this chip. Flash can be somewhat overwritten despite code protection.
|https://github.com/Prehistoricman/Xbox_SMC/
|-
|TMS57070 audio DSP
|Unique late 90's DSP used in various audio equipment. I reverse-engineered the instruction set and wrote an emulator for it.
|https://github.com/Prehistoricman/TMS57070
|-
|AV7300 headset chipset
|Found in Corsair H2100 headset. I reverse-engineered its custom 8-bit CPU. Dumped ROM by blinking the LED
|https://github.com/Prehistoricman/AV7300
|-
|M38258MCM166FP dumping
|Dumped via chained clock glitching (any single glitch was not enough to dump the whole memory)
|
|-
|MN101C28DCC dumping
|Dumped by abusing its external memory pin. An immediate load instruction served externally can load data from the internal memory in this way.
|
|-
|STM8S105K6 dumping
|Dumped by power fault injection to the bootloader to enable memory readout.
|
|}
|+
!Project
!Description
!Links
|-
|Original Xbox v1.6 RAM upgrade
|Upgrading the Xbox to 128MB on the final version, 1.6, is more challenging due to the lack of footprints for the extra memory chips.
I solved this by stacking the extra RAM chips on top of the existing RAM chips.
|https://www.ogxbox.com/forums/index.php?/topic/7548-16-128mb-ram-upgrade-tutorial/#comment-42441
https://www.youtube.com/watch?v=bcnf3LDe1pw
|-
|Original Xbox 256MB RAM upgrade
|I designed an interposer PCB to adapt the BGA RAM chips to the original Xbox's QFP footprint. 256MB also requires re-configuring the DRAM controller for an extra memory column address bit.
|https://www.ogxbox.com/forums/index.php?/topic/19155-256mb-ram-upgrade-release-and-tutorial/
https://www.youtube.com/watch?v=1idSEhUT4PM
|-
|Xyclops dumping
|Dumped via secret serial interface. Xyclops an the integrated SMC chip used in some original Xboxes.
|https://github.com/Prehistoricman/Xbox_SMC/
|-
|PIC16C63A dumping
|Unusual attack required on this chip. Flash can be somewhat overwritten despite code protection.
|https://github.com/Prehistoricman/Xbox_SMC/
|-
|TMS57070 audio DSP
|Unique late 90's DSP used in various audio equipment. I reverse-engineered the instruction set and wrote an emulator for it.
|https://github.com/Prehistoricman/TMS57070
|-
|AV7300 headset chipset
|Found in Corsair H2100 headset. I reverse-engineered its custom 8-bit CPU. Dumped ROM by blinking the LED
|https://github.com/Prehistoricman/AV7300
|-
|M38258MCM166FP dumping
|Dumped via chained clock glitching (any single glitch was not enough to dump the whole memory)
|
|-
|MN101C28DCC dumping
|Dumped by abusing its external memory pin. An immediate load instruction served externally can load data from the internal memory in this way.
|
|-
|STM8S105K6 dumping
|Dumped by power fault injection to the bootloader to enable memory readout.
|
|}
