Opened A Xbox To Find A Hitachi-lg Dvdrom, **MERGED TOPICS** Options

[truBB]

Cool. I'll try these tonight.

[rutgerius]

I've read all the pages and ordered my one LG GDR-8163B. Now I see that the work is almost done for me, thanks guys.
truBB could you let us now if it works. And could you tell me if you stuck to your schematics from your earlier post. Can I use your schematics and wenid's points?
I ask this because in the picture of menelik I believe to see an other configuration.

[menelik]

@rutgerius

my picture was different because we didnt now how the get all the signals we need without technical addons. if wenid is right we wont need those addons anymore - wait for trubb to confirm that.

[rutgerius]

So you mean no difficult schematics, just 4 solder points and that's it...
That would be the best xbox-mod-news ever.

[maximilian0017]

First, it would be much harder to change the speed than to change the region locks.  The reason is that the xbox firmware is encrypted, and regular dvd-rom firmware is not.

Second, most firmware hackers, including the Dangerous Brothers don't want to get on M$'s bad side.  They don't want to be sued.  So,you would have to find a firmware hacker with encryption experience who is willing to put a few hundred man hours into hacking the firmware with no pay for their services, and the risk of being sued by M$.

Have you seen both firmwares?, ofcourse i can be wrong but i'm pretty sure they have exactly the same encryption, just look at it an you can see large pieces of code that are exactly the same(such as the beginning).

Maby it's only an adressline shift or something, probably not something big because otherwise it would probably consume too much resources.

The brothers were able to crack the 8163b firmware so i'm sure they can tell us how to "read" the image because the standard way of looking at it doesn't seem to work.

Ofcourse m$ can't sue anybody if there's an anounimous firmware post in some p2p network.

Hey Wenid, knew you would be back, the question im burning to ask is "did you do a retrace or did you just look for the signals?"
100 points and a for the man!!

p.s. it's probably not a good idea to mass mail the brothers, or is it? , normally they crack fw's if there's enough animo for it

[LenteSubigo]

Have you seen both firmwares?, ofcourse i can be wrong but i'm pretty sure they have exactly the same encryption, just look at it an you can see large pieces of code that are exactly the same(such as the beginning).

Maby it's only an adressline shift or something, probably not something big because otherwise it would probably consume too much resources.

The brothers were able to crack the 8163b firmware so i'm sure they can tell us how to "read" the image because the standard way of looking at it doesn't seem to work.

Ofcourse m$ can't sue anybody if there's an anounimous firmware post in some p2p network.

Hey Wenid, knew you would be back, the question im burning to ask is "did you do a retrace or did you just look for the signals?" 
100 points and a  for the man!!

p.s. it's probably not a good idea to mass mail the brothers, or is it? , normally they crack fw's if there's enough animo for it

The brothers have said no to repeatedly over hacking the samsung firmware, I don't think they will feel any different with this issue.

[bourke]

The brothers have said no to repeatedly over hacking the samsung firmware, I don't think they will feel any different with this issue.

How about we ask the Brothers to 'limit' the original 8163B firmware to 4X max. speed!


That way we can probably work out what to do with the 8050 firmware with a hex editor and a few minutes!


cheers,
Bourkie

This post has been edited by bourke: Mar 29 2005, 01:46 AM

[maximilian0017]

The brothers have said no to repeatedly over hacking the samsung firmware, I don't think they will feel any different with this issue.

Ok, no hacking from their side, but maby a small tip how they managed to read the lg8163b firmware?, that would probably be enough for our needs.
(and maby some simple info like witch decompiler they used or what processor is used in the drive)

[LenteSubigo]

Ok, no hacking from their side, but maby a small tip how they managed to read the lg8163b firmware?, that would probably be enough for our needs.
(and maby some simple info like witch decompiler they used or what processor is used in the drive)

Well, their email address is publicly available. tdb@rpc1.org

If you would like to ask them, feel free. I would expect a no or no responce myself.

They may give you a hint, but that is about it.

[truBB]

No-go. Wenid, could you check those connections again?

ready/pink - pin 50
tray 1/yellow - pin 49
valid/blue - pin 52
tray 2/red - pin 65

For me, pin 49 goes to this orange point, not the yellow as you pointed out. I tried that too, but still nothing. All the others seem to be labeled correctly.





Pin 49, front side of ucontroller




Also, are you sure that all these four signals go thru 1Kohm resistors? I only found 3 per the front side of the 8050L pictures:


Then again, I don't have the drive to check it.

[truBB]

I looked at the pics again, to track down these traces. I feel like some kind of forensic scientist looking at these pics for hours... Wenid or NE1 else who has this xdrive 8050L drive, does this look like where the serial line runs to (pin3 on ucontroller) ?? Sure looks like it:

Bottom side:




Top side:

[menelik]

that yellow ready point never worked for me too

[wenid]

No-go. Wenid, could you check those connections again?
For me, pin 49 goes to this orange point, not the yellow as you pointed out.

Oops. You're right. It is in fact the orange point that I'm using. I dunno how I manged to circle the wrong one.

I tried that too, but still nothing.

Well I don't know what to tell you. With these points and 1k resistors (plus eject) it's working perfectly for me.

Also, are you sure that all these four signals go thru 1Kohm resistors? I only found 3 per the front side of the 8050L pictures:

Yes, I'm sure. The resistor for the "valid" signal is elsewhere. My 8050L is now reassembled and I don't really want to dismantle it again just to re-find the location of this one resistor.

[wenid]

that yellow ready point never worked for me too

Ready is the pink one

[menelik]

sorry for that, typo, meant the pink one.....all those colors...just too many for my brain

just took a closer look on your pics and saw that pink is 'serial data' and blue is 'ready'. got to try that.

This post has been edited by menelik: Mar 29 2005, 11:40 AM