[McPX Pictures]

If you can do hotair, remove the CPU, cut the ground line, maybe add a wire somehow to get that reset line out there if required and somehow solder back the CPU, you might have enabled the JTAG interface.

Please share the Jtag config files if your in luck.

[McPX Pictures]

On 7/6/2019 at 9:57 AM, neighbor said:

This is sick, I think I can play with that for scientific purposes, is there any profit the JTAG port gives? Is there a pinout available?

I love the entusiasm. Go check Bunnie Huangs old blogpost about Jtag: http://www.xenatera.com/bunnie/proj/anatak/xboxmod.html
come back to us when you enabled the jtag machine. (dont think you will, N64freak might make a breakoutboard someday to do it, but only because we are curious)

basicly you have to read: https://en.wikipedia.org/wiki/JTAG 

And thus, yeah sure, with it enabled you can start, stop, read all parts on the bus. IF you have the right bitstream to send (commands) on the jtag bus. for the CPU it might be posible to figure out how to do so, but the MCPX is Nvidia/AMD stuff and we dont know alott about it, im not even sure if its on the Jtag bus. you could theoreticly power the xbox, but keep everything in reset and then start the mcpx, poke it with some commands to expose the internal rom and download it that way. (both mcpx 1.0 and 1,1 are already dumped in diferent ways).
You can debug on a lower hardware level your xbox (yay, so much fun to poke at CPU registers, undocumented Video encoder registers and reset the SMC and be sad.)

Jtag is a awesome bus for hardware and maybe software debugging. for software it might be too slow tho. MS used it for their CPU I think, when done, they ofcourse added a serial port (check Devkit behind pictures) for Kernel debugging and they ofcourse have XBDM that will help with normal software debugging over the network. faster and less noisy for whoever got to debug something.

Im not saying its imposible, but its harder, you need the right Jtag adapter (as in, interface for your PC to talk Jtag) the pinout is easy, most pins where ground, and 5 or 6 pins for the protocol. BUT

You kinda need to know or learn wich IC is where on the bus, how to talk to them and make sense of the busses reply. without official configs, it will be hours, if not days of work. for what?
There are plenty of ways to dump required files (kernel, mcpx rom, eeprom, harddisk stuff, secret keys in ram) and all are far easier, as you dont need to desolder the CPU to fix that Permanent reset line and solder the cpu back.

Now if you where to redesign the motherboard, design your own and repurpose some components, then sure, go ahead. But even I, with 3 jtag programmers, jtag programmed and debuged a router and a RISCV board. (still a noob tho), I dont see why I need a working jtag on my xbox. Im sure I can get whatever I need in a way simpler way. Mcpx rom I would love to caputure myself, I rather look at one of those 2BL exploits and add a tsop mod or modchip than to fix jtag.
Waay too much text for anyone to read, but I would like to inform you, I love jtag, I hate jtag. Its an awesome debugging bus. But if a company disabled it in someway. consider your plan of attack. Nothing is impossible, everything can break.

for the curious, image is taken from bunnies blog.

[McPX Pictures]

On 7/1/2019 at 10:56 PM, neighbor said:

thank you for the pic, looks like there is a tiny connector near the Etherner port, if I'm not wrong. What can that be?

The 5th USB port from the MCPX, its no longer routed out from the mcpx on later revisions of the board. I cant find the pictures the new owner took for us to verify they truly go to (or the 2 datalines that is) to the mcpx. a leaked datasheet confirmed a 5th pair of datalines on the pinout.

FOund 3 images fromthis thread from when the last 4 where lost. check em. first was the full shot, the behind (Jtag port in the red box) and 3th was the closeup of the battery. I dont seem to have the later 4 here. grabbed a backup disk for other backup purposes and went looking anyway.
Jtag confirmed too btw, we traced the underside to the cpu, on retail the bga pin on the cpu is directly tied to ground, disableing jtag and only if you desolder the cpu, youd be able to "unground" the "disable" jtag pin. the other jtag pins are routed out to this connector. My personal believe is that each signal is paired with a ground pin. maybe some other debugging pins are there aswell, but could see that in those pictures. maybe they where shared on discord.
 

[McPX Pictures]

On 3/10/2019 at 6:45 AM, neighbor said:

hey bud, do you still have the images which disappeared from this deleted thread?
https://web.archive.org/web/20141109112845/https://assemblergames.com/forums/showthread.php?7221-Prototype-XBOX-Motherboard-HD-Combo

 

this particular string looks captivating.

I think this is the only picture I have currently. it might be from the new owner but I dont see a battery, so it might have been a diferent revision then the one in said topic.

[Greetings From Holland]

Yeah those Wii2hdmi adaptes are awesome, cheap too also: Hoi en welkom nederlands is overal wel een beetje vertegenwoordigd. (back to english)

[Mod To Use XBox 360 Controller]

2 hours ago, Michael McBride said:

What are AVRs? and where do you buy them?

Is it ok to just point you here? https://en.wikipedia.org/wiki/Atmel_AVR

Basicly Arduino like hardware. but a PC from 1995 wont play the newest game right? so specs of a IC matter

@ripdajacker did you look at the xboxdevwiki ? http://xboxdevwiki.net/Xbox_Input_Devices#Protocol Im not sure if it is complete or enough to recreate the USB device but the Xqemu emulator uses it for emulating a controllers for the emulator. the Xqemu USB Hid emulated source is here: https://github.com/xqemu/xqemu/blob/xbox/hw/xbox/xid.c maybe this helps.
Im watching this thread

[Mod To Use XBox 360 Controller]

arent 2 CY7C68013A-56 EZ-USB FX2LP USB Develope Board Module or somiliar be easier?
1 acting as a host, translating the packets to buttons and variables the other will reply as client on the xbox? this board is used as a usb debug and USB devices aswell. Im thinking of the following application note: http://www.cypress.com/documentation/application-notes/an63787-ez-usb-fx2lp-gpif-and-slave-fifo-configuration-examples
(I got 2 of these to sniff USB and debug my laptop, but havent used them yet... so no real world experiance with em yet)

Or, get a OG xbox controller IC and reroute all buttons of the 360 to the very similiar classic one? looks easier.

Else, yeah Linux/Rasp method migth be a trick: http://www.linux-usb.org/gadget/ the RaspberryPi zero has OTG apparently so maybe you could turn the Raspberry into a HID device: https://learn.adafruit.com/turning-your-raspberry-pi-zero-into-a-usb-gadget?view=all#other-modules
For reverence: http://xboxdevwiki.net/Xbox_Input_Devices and Xqemu emulator source might help you first with making the Raps act as a controller
But I personaly have enough ControllerS to just take the pcb, and put em in a 360 controller shell with cutting and such. Remmeber that a Rapsberry AND a 360 controller take alott more power from the USB port. and the XBox only has USB1.1. And no way of replacing "drivers" so it either act as a Xbox classic controller or use it with homrebrew software that supports whatever HID device your "emulating"

My 10 cents

[XBox Alpha Development Kit Build Log]

10 hours ago, Solomono said:

Do you have any Intel VC820 Desktop Board schematics diagram? I am want to read the hardware components.

I might have an idea what you wanna try, but I suggest you look at the chipset itself first
Intel i820 Chipset Family Technical Documentation

Some people had success with diferent motherboards but still the same chipset. basicly, if windows would see the same hardware (use the same drivers), it would work. CC820 I believe worked aswell.

Based on these docs and maybe combining these with the schematics for other parts on the VC820, you might work out a schematic for a Xbox alpha motherboard. I leave any reasons for why you would wanna try this or why not to another forum thread. meanwhile ill be downloading these for my personal reference   also, sometimes the servicemanuals are archived using other names, like the factory that maked them or nicknames (camino ?)

[Lpc Diagnostics (V0.1)]

Awesome LPC rebuild guide. might come in handy.
I found this next picture using google and it might help someone who is good with soldering and destroyed some pins. I am not sure if this still works for the 1.6 or the accuracy, but sure looks helpfull to know someone did this digging/reverse engineering already. (its damm small, most ppl, dont bother)

Whoever made this, Thank you and im more than happy to properly report your name (X-S source)

[Tsop Flashing At Wich Factory and Onboard?]

Awesome, Thanks both of you

[Tsop Flashing At Wich Factory and Onboard?]

Only recently ive been looking at this manufacturing proces part where they get the kernel on the motherboard.
"our" Blake Clements @OGXbox Admin linked me at facebook to the following url: http://www.ogxbox.com/archive/xboxsecurity.html
look at the Modchip part.

It states that

Quote

the flash chip gets programmed in-system, the first time they are turned on, using an external LPC ROM chip.

•  

But I do not know if this is said based on the observation mentioned or based on internal Microsoft or flextronics manufacturing personal.

Blake also said that:

Quote

The TSOP was not flashed prior to being soldered on the board. This is why the lpc port exists.

So, the LPC port was used for programming? A bed of nails (pogo pins) should and probably be used to connect the write enable pins on the motherboard to enable the flash writing of the then onboard tsop.
I do not know for sure if this is posible but I rather for now asume it was. because we cant flash tsop today whne the xbox has been booted from LPC (modchip boots can only flash modchip, not the tsop, even of you remove the modchip prior to flashing)

Connecting to lpc and connecting the write enable lines using pogopins could be done, altho I dont know how they would write to flash from LPC. the MCPX doesnt allow flash write in a LPC boot right? maybe a unkown mode? anyway, pure onboard tsop writing by connecting to the tsop directly would be a pain, but posible with fine pitched pins. not sure if the board would allow that with the mcpx on the same wires.

All logic I can come up with is that MS would send their kernel to the tsop manufactorer and let them preprogram all tsops before soldering. then at the factory MS could use a bed of pogopins and a "recovery disk" to install a newer kernel if  they wanted as long as the xbox booted from tsop.

any other sources or interviews that claim or verify either side are welcome. movies and pictures of this proces too. most details I know came or will be added to: http://xboxdevwiki.net/Manufacturing_Process

[XBox To 360 Mod (2008)]

We all have those moments of realisation later on. some sad ones, and some are funny to think back of I got banned once from X-S for talking bout Piracy XD, I learned from that, and only asked technical questions from there on. Wish I got into programming back then.

[XBox To 360 Mod (2008)]

Now thats a Xbox with a internal PSU cool

[Moutain Dew Slimbox (2008)]

Lots of work indeed it looks like. Also, the green is cool
sad the psu dint fit in the case. any other mods in that puppy ?

[McPX Pictures]

here is a list of all (rare) MCPX ic I know off:

• MCP X-mode 2
• MCP X2 (DVT3)
• MCPX X2 (found in DVT4 and Sega Chihiro)
• MCPX X3
• MCPX X3P (not sure, but my latest notes state I found some info on this

N64freak picture, repairing a Sega Chihiro (google this if you think "sega?")

N64 Freak in this thread on Assemblergames has also did some amazing soldering things :https://assemblergames.com/threads/what-is-the-diference-between-the-mcpx-chips-big-images.41069/#post-952246

[EDIT} from N64freak I now understand the SMC might not need to be swapped, so you can ignore the rest of this post below.
From various sources I know that if you would replace a X3 with a X2, you should swap the SMC ic to a matching set aswell (so just ordering X2 from china doesnt work?) I dont know if an MCP X2 is requireing its own SMC against X2. Those are even more rare, All retail have some kind of X3, but revisions where made. altho MS did a big fix and forced Nvidia to scap alott of mcpx, Nvidia disliked Microsoft verymuch after that. so MS couldnt that easely make newer Silicon designs after the 1.6 design.
 

[All Limited Edition XBox Consoles]

On 5/28/2017 at 2:08 AM, OGXbox Admin said:

Xbox Alpha Kit/Durango.

I hope youll edit it. The Xbox Alpha kit is not the same as Durango. Where ever you got that name from. The Durango was the prototype name for the Xbox one Development kit in its Alpha stage,
The Xbox 360 was called Xenon during Alpha stage.
The original xbox probably pretty early on got the Xbox name, but also was named DirectX box.

The Alpha Kit is known in 2 versions, first there was the Alpha I (1) and the Alpha II (2) came later. its basicly a Alpha 1 but a newer Videocard (upgrading form a Geforce 2 to prototype 3?) and the CPU went from 600Mhz(? not sure if this is correct) to the final speed of 733Mhz slot 1 cpu.

People owning an older ALpha I kit probably got send an upgrade kit. I personaly believe based on images released by MS at the time and recent pictures of the casing of an DirectX console case that Microsoft put a Alpha xbox hardware inside. Not sure wich hardware but the motherboard would fit with a adapter to fit the GPU and other cards.

There are also some Xbox live beta consoles (wich where probably relabeled Debug kits) and Test xbox consoles. I think one of the members on this forum also has a Xbox motherboard with coincel battery and some kind of debug connector near the CPU.

Dont forget about the Sega Chihiro its xbox based. (DVT4/DEBUG mobo)

[All Kernel Revisions]

ive made a new (seperate for now) list for 360 XDK: http://codeasm.com/xbox/xdk_360_BETA.htm Im thinking of doing the same for the OG xbox list and add some javascript (for if enabled) to make a nice timeline)

Link will change, as I want to change my site aswell. Found a few more OG xbox libaries, 4400 kernel (she works) and dashboard. I also want to have a list of availeble symbol files for atleast the kernel (handy for emulator writers, altho the cxbx guys already done most)

[Xbox Version]

Xqemu is trying to emulate an early xbox, probably there and the detection alchoritm arent compatible (maybe we have the source? patch it to detect Xqemu or Cxbx-reloaded aswell )

[Xbox Version]

works in Xqemu:

 

[All Kernel Revisions]

Thats my list
newest updates can be found http://codeasm.com/xbox/Kernel_Dash_versions.htm

Im still working on that list, its not entirely correct (not all version numbers have a kernel with them)
Its actualy more like a Build revision list, and some kernels have various versions of Libraries compiled and linked to them.

Ill update the list when I have the time, and I also plan on adding md5 hashes to confirm for you if you have a virgin clean file or someone modded it, or its a diferent version

I ocourse am open for suggestions and hint towards new files (also for the 360 and ONE am working with some other people to get those updated)

Have a nice day

 

[CodeAsm]

Hello hi,

saw one of my pages got posted here and some intresting topics showed up so I thought, lets register and see whats going on here
I hope we all can enjoy the original xbox and preserve whatever we can.

CodeAsm