User:Prehistoricman

From RECESSIM, A Reverse Engineering Community
Revision as of 01:36, 30 June 2025 by Prehistoricman (talk | contribs) (Created page with "{| class="wikitable" |+ !Project !Description !Links |- |Original Xbox v1.6 RAM upgrade |Upgrading the Xbox to 128MB on the final version, 1.6, is more challenging due to the...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
Project Description Links
Original Xbox v1.6 RAM upgrade Upgrading the Xbox to 128MB on the final version, 1.6, is more challenging due to the lack of footprints for the extra memory chips.

I solved this by stacking the extra RAM chips on top of the existing RAM chips.

https://www.ogxbox.com/forums/index.php?/topic/7548-16-128mb-ram-upgrade-tutorial/#comment-42441

https://www.youtube.com/watch?v=bcnf3LDe1pw

Original Xbox 256MB RAM upgrade I designed an interposer PCB to adapt the BGA RAM chips to the original Xbox's QFP footprint. 256MB also requires re-configuring the DRAM controller for an extra memory column address bit. https://www.ogxbox.com/forums/index.php?/topic/19155-256mb-ram-upgrade-release-and-tutorial/

https://www.youtube.com/watch?v=1idSEhUT4PM

Xyclops dumping Dumped via secret serial interface. Xyclops an the integrated SMC chip used in some original Xboxes. https://github.com/Prehistoricman/Xbox_SMC/
PIC16C63A dumping Unusual attack required on this chip. Flash can be somewhat overwritten despite code protection. https://github.com/Prehistoricman/Xbox_SMC/
TMS57070 audio DSP Unique late 90's DSP used in various audio equipment. I reverse-engineered the instruction set and wrote an emulator for it. https://github.com/Prehistoricman/TMS57070
AV7300 headset chipset Found in Corsair H2100 headset. I reverse-engineered its custom 8-bit CPU. Dumped ROM by blinking the LED https://github.com/Prehistoricman/AV7300
M38258MCM166FP dumping Dumped via chained clock glitching (any single glitch was not enough to dump the whole memory)
MN101C28DCC dumping Dumped by abusing its external memory pin. An immediate load instruction served externally can load data from the internal memory in this way.
STM8S105K6 dumping Dumped by power fault injection to the bootloader to enable memory readout.