Prehistoricman
Joined 28 June 2025
Revision as of 01:36, 30 June 2025 by Prehistoricman (talk | contribs) (Created page with "{| class="wikitable" |+ !Project !Description !Links |- |Original Xbox v1.6 RAM upgrade |Upgrading the Xbox to 128MB on the final version, 1.6, is more challenging due to the...")
| Project | Description | Links |
|---|---|---|
| Original Xbox v1.6 RAM upgrade | Upgrading the Xbox to 128MB on the final version, 1.6, is more challenging due to the lack of footprints for the extra memory chips.
I solved this by stacking the extra RAM chips on top of the existing RAM chips. |
https://www.ogxbox.com/forums/index.php?/topic/7548-16-128mb-ram-upgrade-tutorial/#comment-42441 |
| Original Xbox 256MB RAM upgrade | I designed an interposer PCB to adapt the BGA RAM chips to the original Xbox's QFP footprint. 256MB also requires re-configuring the DRAM controller for an extra memory column address bit. | https://www.ogxbox.com/forums/index.php?/topic/19155-256mb-ram-upgrade-release-and-tutorial/ |
| Xyclops dumping | Dumped via secret serial interface. Xyclops an the integrated SMC chip used in some original Xboxes. | https://github.com/Prehistoricman/Xbox_SMC/ |
| PIC16C63A dumping | Unusual attack required on this chip. Flash can be somewhat overwritten despite code protection. | https://github.com/Prehistoricman/Xbox_SMC/ |
| TMS57070 audio DSP | Unique late 90's DSP used in various audio equipment. I reverse-engineered the instruction set and wrote an emulator for it. | https://github.com/Prehistoricman/TMS57070 |
| AV7300 headset chipset | Found in Corsair H2100 headset. I reverse-engineered its custom 8-bit CPU. Dumped ROM by blinking the LED | https://github.com/Prehistoricman/AV7300 |
| M38258MCM166FP dumping | Dumped via chained clock glitching (any single glitch was not enough to dump the whole memory) | |
| MN101C28DCC dumping | Dumped by abusing its external memory pin. An immediate load instruction served externally can load data from the internal memory in this way. | |
| STM8S105K6 dumping | Dumped by power fault injection to the bootloader to enable memory readout. |