Help - Search - Members - Calendar
Full Version: Xbox Version 1.6 found
Scenyx Entertainment Community > Xbox1 Forums > Hardware Forums > General Hardware/Technical Chat
Pages: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
Psilocybe
QUOTE (Exobex @ May 5 2004, 01:37 AM)
I hope this is of use. I sanded down the V1.0 MCPX PCB, then traced as many points as I could back to the LPC bus and flash chip. Maybe someone can check the same points on a V1.6 MCPX and see where they all go?
Might help:-
1) Determining the true identity of the mysterious Xyclops chip
2) Locating flash-enable jumpers, if any
3) Mapping out the new LPC bus

My apologies if there are any mistakes. This was done with no magnifying glass, no desk lamp (only had the "big light" on biggrin.gif ) and with standard Fluke test meter probes. In particular the LPC connections are vague, but they appear in that order as you move the probe across the traces.
user posted image

awsome, can't believe that no one else has done this before, now lets hope someone can trace it off to teh new mobo
explosive2
Hello,
I just bought a regular XBOX today manufactured March 18;
K: 1.00.5713.01
D: 1.00.5659.03
manufacture date.... 2004-03-18

The original V1.6 reported had a different Kernel;
K: 1.00.5838.01
D: 1.00.5659.03
manufacture date.... 2004-03-22

Do you think I got a V1.6? I don't want to open it since I have lots of XBOXs already but I was just looking for the 1.6.
Let me know what you guys think.
Thank you.
beerchug.gif
lordvader129
thats probably a 1.4 or possibly a 1.5
Orbiting234
QUOTE (Exobex @ May 4 2004, 10:36 PM)
It's possibly a date-of-manufacture code.
0350 = 2003, week 50
0340 = 2003, week 40

The last bit may be a day code 1 - 7, but I've not seen that before.

Just ripped apart a V1.0 (with dead Thomson DVD) downstairs, code is 0209B2. That'd be 2002, week 9. Machine was "born" in April 2002.

More important than the year/week info is the two digits that follow it. No, it is not a "day code" at all. That is actually the stepping (i.e. revision) of the MCPX. This new D3 stepping I have not seen in any other Xbox before.
Monoxide-Child
QUOTE (zuricksaves @ May 5 2004, 02:49 AM)
Hey guys, I got a green le xbox today...... it was v1.6, what gives?

Manufacture Date: 2004-03-22

Are you certain it was a 1.6? Please post some pictures of the board so we can be sure.
lordvader129
QUOTE (Monoxide-Child @ May 4 2004, 11:28 PM)
Are you certain it was a 1.6? Please post some pictures of the board so we can be sure.

well its ievitable the new board swill start to appear in all xboxs, not just non-LEs
droobie
QUOTE (lordvader129 @ May 5 2004, 05:57 AM)
well its ievitable the new board swill start to appear in all xboxs, not just non-LEs

I would've thought all the Halo XBOXen were already built though. There were only supposed to be something like 200,000 of them. We'll have to see what comes in the mail from FedEX tomorrow for me. It'll be a Halo one of some sort. Part of me hopes it's 1.4 (because I have a shiny new Xenium sitting here), part of me hopes it's a 1.6 so I can break out my tools.

The downside - Basement flooded here 2 hours ago and melted the hell out of a power strip and knocked all the servers offline. Not the day before my Xbox gets here... Son of a..

--D
Grez
QUOTE (raatjetoe @ May 4 2004, 10:19 PM)
I Asked the guy who posted the Dell chip pictures about what he tought was the "TSOP" to post the text writen on the top of the chip that is in the same picture but a litle lower (the big square one). (by E-mail.. if you read this and did not recieve it please do so)

we all know the X-Box is (or was) 99% PC. The dell Laptop would need a bios chip.. and if the litle 8 legged freak is on his board is indeed a serial chip, the bios chip would have to be near...

The little 8 legged chip in Dell as well as on Xbox is a serial eeprom. On Xbox it has been there since version 1.0 and it is connected thru I2C bus (or SMBUS).

On Xbox it contains xbox serial number, video mode, HD unlocking key and such.

There's no reason why it would have to be near any particular chip. Even the temperature sensor on the other end of the board is I2C connected so board design wise the serial eeprom chip might just as well somewhere near that chip.
SniperKilla
i bet the reason thery dident do this before.. is because they used the motherboard for debug and retail units... they just added the ramchips and changed the tsop to a debug kernel...

now they stopped making debug units.. they can put the bios in the mcpx because it wont need to be changed.. that also explains the loss of the extra ram spots...

this sucks :/
droobie
QUOTE (SniperKilla @ May 5 2004, 08:08 AM)
i bet the reason thery dident do this before.. is because they used the motherboard for debug and retail units... they just added the ramchips and changed the tsop to a debug kernel...

Unfortunately - That makes a fair deal of sense. They probably have a cache of debug units handy as well just in case other publishers join in.

I do think someone will find a way around this, but I think there will be some time involved and it won't be as simple as 'plug and play'.

Rightfully so, in a way. MS has to prove to their game publishers that it won't be ridiculously easy to pirate their games. You can somewhat assure that with 29 wire mods, but not so easily when someone can solder in a pin header and a jumper wire... or just use an adapter and screw down.

Besides - They can use this opportunity to see how long it takes for someone to circumvent and use that knowledge toward their next platform.

---D
Exobex
QUOTE (Orbiting234 @ May 5 2004, 03:09 AM)
More important than the year/week info is the two digits that follow it.  No, it is not a "day code" at all.  That is actually the stepping (i.e. revision) of the MCPX.  This new D3 stepping I have not seen in any other Xbox before.

Damn. That could be a very big stepping!
What others are out there? I guessed there'd be a stepping between V1.0 and V1.1 (much to the annoyance of nVidia who had to scrap a shitload of them), but I've never needed to look.

So far:-
V1.0 = B2
V1.1 = D1

I'll fill in some more after this weekend's modding, unless someone beats me to it.
syntrikz
V 1.4 - D1
shodanjr_gr
Well, we should still be thankfull that the LPC port is still there, because if it retains its original use, there WILL be someway to force the XBOX to load from it (heck MS must be doing it someway). What would totaly fubar most hacking attemts, would be the removal of the LPC port.
grimlock
QUOTE
Well, we should still be thankfull that the LPC port is still there, because if it retains its original use, there WILL be someway to force the XBOX to load from it (heck MS must be doing it someway). What would totaly fubar most hacking attemts, would be the removal of the LPC port.

Only problem is, as has been noted before, that the LPC could only be used to run signed code. In that case, it would be damn near impossible to use it, even if MS does.
Grez
It seems Team SmartXX has got themselves a 1.6. . I'm hoping we can expect more info from them soon.
Bwsk8
OzXodus Xbox v1.6 research/findings
>> From The_Mad_Maragan on ozxodus.com:
QUOTE

Due to booyeah's recent discovery of the much anticipated V1.6 motherboard it appears that things are about to get a little bit more interesting for the Xbox community.

OzXodus have been fortunate enough to aquire booyeah's V1.6 console for our research into what changes have been made to the console's motherboard. As many have already speculated it appears that major changes to the LPC have been made, our initial findings are indicating a redundant LPC with all 4 LAD lines no longer present.

We have found that the d0 point is in the general area of the d0 found in previous motherboard revisions.

We call on the other teams to confirm these initial results when they are able to aquire V1.6 motherboards for their own testing.

We would like to take this opportunity to thank booyeah and kris for their assistance in obtaining these motherboards for our testing, we will keep you updated on developments via our website as they become available.

But it's not all bad news, we are very confident that we will have a Xenium with Xenium-OS V2.0 booting on a V1.6 in the very near future (72 hours???). ;-)

Some good info from ozxodus.
---=Snyper=---
All halo boxes should be 1.4 i bought 2 of them and looked at about 8 boxes..

Both had v1.4 MB, WD 8GB, Phillips DVD, and 5659 5530.. chip-able but no exploit yet..

About the 1.6..

1. I believe its all in the Xyclops chip..
2. I dont believe MS could release a MB that cant be reflashed.. they make some money on refurbished xbox's and the're not going to just toss the boards...
3. Debug xbox is gone.. so no more need for the header.. plus i might not be right but they use recovery/builder disk to flash/install everything on the boxes.. so maybe no need of a chip anymore.. just a hacked disk.. So go ask Billy if you can borrow one of the disks.. beerchug.gif
4. still thinkin.. unsure.gif

no flamin.. just throwin ideas.. remember if a human makes it.. theres NO reason it cant be hacked.. unless they go to some controlled environment.. like a xbox terminal.. hehe that would suck..

Snyper
anverc
QUOTE (---=Snyper=--- @ May 5 2004, 02:21 PM)
Both had v1.4 MB, WD 8GB, Phillips DVD, and 5659 5530.. chip-able but no exploit yet..

This is way off topic, but I thought I'd respond to this one just incase anyone got confused. The 007 Linux exploit does work on these 1.4 halo boxes - I've flashed 3 of these boxes so far, one of them now runs as a gamebox/ switchable to devkit with Phoenix Bios Loader installed.
XanTium
Anyone still has a v1.6 they want to sell? Please PM me.

Would be useful if I also had one so I can take HD pictures and so.
And it'll probably take some time before they become available here in europe ... most stores still have tons of stock of xmas 03.
lookformeb
QUOTE (XanTium @ May 5 2004, 09:18 AM)
And it'll probably take some time before they become available here in europe ... most stores still have tons of stock of xmas 03.

They seems to be flodding the states. The last Xbox I purchased was 03/07/04... a 03/22/04 will be around in the next shipment I am sure (week for two for me). Around here, each truck shipment that comes in, the Xbox manufacturing dates progressively get newer and newer...

Good news that OzXodus plans to make the OS 2.0 boot on a 1.6 in the next 72 hours. Look forward to seeing that.
oCfuu
QUOTE (lookformeb @ May 5 2004, 02:23 PM)
Good news that OzXodus plans to make the OS 2.0 boot on a 1.6 in the next 72 hours. Look forward to seeing that.

hehehe ^^

now to add something usefull:

a few pages ago, someone posted a pic of the mcpx. Now that's what I call progressive-work! Keep it up, and my best luck to all the teams that have the new 1.6's... Interesting times right now!
droobie
Halo Xbox 02-13-2004 - Philips Drive - 8GB WD - Looks like a 1.4 but didn't voltmeter the LPC yet - Ordered it from Newegg.com on 4-30.

Damn, that's a shame. I wanted a 1.6. They didn't start getting them until almost the end of April, so I thought maybe, just maybe..

Ah well, to Xenium I go.

--D
Exobex
QUOTE (oCfuu @ May 5 2004, 02:26 PM)
a few pages ago, someone posted a pic of the mcpx. Now that's what I call progressive-work! Keep it up, and my best luck to all the teams that have the new 1.6's... Interesting times right now!

'twas me. Not the 1.6 MCPX though, actually the 1.0 MCPX so that the 1.6 can be compared (and hopefully traced from).

As nobody else appears to have posted such info anywhere (look for pictures of the MCPX on Google) I thought I'd do it. And share it.

67 hours to go. Come on ozXodus, you can do it!
Serious Sam
QUOTE (droobie @ May 5 2004, 03:41 PM)
Halo Xbox 02-13-2004 - Philips Drive - 8GB WD - Looks like a 1.4 but didn't voltmeter the LPC yet - Ordered it from Newegg.com on 4-30.

Damn, that's a shame. I wanted a 1.6. They didn't start getting them until almost the end of April, so I thought maybe, just maybe..

Ah well, to Xenium I go.

--D

Halo Xbox's are v1.4's mostly all made in Feb 2004.
zuricksaves
I work in a gamestore, so I know the halo xbox's have been selling quite well......

I KNOW my halo xbox is 1.6 because i checked it out. I am gonna try to get you guys some pics tonight, but here's my guess......

They've simply began to outsell their old stock and have been redoing them with the new parts. My store gets 4 green xbox's every 2 days so...... That's how fast they're selling here in Baltimore.
Ai_Bot
I just got a xbox last week, and open it up and has an nvidia encoder on it, instead of the focus or the conexant, is there a way to mod this, here are the kernal and dashboard version number

K: 1.00.5713.01
D: 1.00.5960.01
bucko
Yay mod chip devs got 1.6ers ohmy.gif, we don't really care if they are appearing in Halo boxs (just a green case), we gotta crack the board first.
JammDDR
QUOTE (Ai_Bot @ May 5 2004, 02:25 PM)
I just got a xbox last week, and open it up and has an nvidia encoder on it, instead of the focus or the conexant, is there a way to mod this, here are the kernal and dashboard version number

K: 1.00.5713.01
D: 1.00.5960.01

Sure you're not looking at the MCPX?
XanTium
Note: for those who wonder ... I'm deleting posts here.
I try to keep the thread on-topic and cleaner. I did not delete any post with any useful information (or atleast I hope so) nor did I censore any information (what would there be to censore anyway).
If I deleted one of your posts, don't take it bad ... doesn't mean your post was 'crap', I just try to make it easier for those who want to read/update about what we have so far here about the v1.6.

"I have a august 2002 xbox, do you think I have a v1.6?", "YEAH! Hack IT!!!" and totally offtopic posts about what-modchip-should-I-install-in-my-v1.4, refurbs, ... are removed to make the thread easier to read.

Also about naming ... it's a v1.6 ... v2.0 would not be logic ... v1.2 should have been v2.0 and this one v3.0 then in this logic. Even if we would like to change name, it would be too late. What comes after v1.9 ? v1.10 ... (!= v1.1.0)
powercntrl
QUOTE (XanTium @ May 5 2004, 02:55 PM)
Also about naming ... it's a v1.6 ... v2.0 would not be logic ... v1.2 should have been v2.0 and this one v3.0 then in this logic. Even if we would like to change name, it would be too late. What comes after v1.9 ? v1.10 ... (!= v1.1.0)

They had to deal with this on the highway before they renumbered all the exit signs anyway... After you hit v1.9, then comes v1.9a, v1.9b, etc. Hopefully there's enough letters in the alphabet to fend off a new naming scheme until the Xbox 2 is released. cool.gif

Edit: Or you could do it sorta hex-like and have v1.A, v.1.B, v1.C, etc... But that might confuse people.
walabie
saw this on xbox-scene news. suppose it can be useful here too.

from hamtitampti on http://www.smartxx.com/forum/thread.php?threadid=703
QUOTE

After working little bit, now little help for the Xenium's & others if you "dump" the bios, the MD5 of Retail (256) 5838.01 is = C5 90 7D 24 1D E3 7C 22 B0 83 B6 E3 0F A9 34 B0

Good luck guys and continue with these fake news

BTW:
The Power connector has changed.
Normal Power supply's will not work anymore (have to find out why)


It looks like they dumped the bios from the v1.6 ...
Maybe they did it with software exploits - or did they get it directly from the hardware chip where the bios is in (Xyclops if that's the one).
4NIC8TOR
QUOTE (Exobex @ May 3 2004, 01:07 PM)
Remember, before TSOP flashing, before LPC mods, there were 29-wire mods. The 29-wire mods will rise again!

Heh...I STILL use 29 wire mods when I'm not using an exploit or flashing the TSOP. I guess that's what I get for buying in BULK when the 1.0 came out. Plus, it's hard to beat a $3.00 modchip!!
javi
isnt saying "we dumped the bios and the BIOS md5 is blah blah" a little show-off?

the tools used to do so, where the bios is located or if u have to 'bridge' something to make it readable would be a usefull news..

heinrich
5838 bios dump is up on xbins for those who want to take a look at it. (thanks smartxx team)
javi
i tried a HomeBrew29 with that 5838 bios on a v1.2 mobo.

u get no video signal (and no audio).

Sometimes the front light stays solid green and the DVD drives makes some ticking noises.(the light flashes green on eject press but no tray eject at all ~only ticking noises); sometimes it's a FRAG, or a 2 boot attempt and solid green.
hippo
Looks like the next gen mod chips will have an expanded LPC host if the prelimenary reports of no LADS on the LPC port are true. No info on clk and lrst signals making me wonder what they are doing at the factory with the LPC port or the LPC host that's built in and how critical timing becomes if there is more than one host on the bus on signals with complex timing.

A nice road map to the address and data lines as they corrrespond to the MCPX PCB vias and traces was posted for reference from a 1.0 machine and that will help a lot of the kitchen table hackers. I'm working on a reliable way to get signals off the MCPX pcb and back to the LPC Port by hot glueing magnet wire exactly over the traces and soldering them all together and wicking them clean ala the smd technique. I just have a feeling the first modded 1.6's will pull signals off of there or or maybe the factory has an easy way but it's looking like the factory now uses a remote/external LPC host
emailer33
anyone tried say using the mechassault trick and flashing the TSOP?
.:Savage:.
unsure.gif

so is the Xyclops the Bios chip?

is it read-only or is it flashable?

do the available modchips right now work on it?

is there a "D0"?

is there a posibility that the ram could be upgraded or the only way is removing the ones that it haves and replace them with bigger ones?
jokk
Xyclops = bios + audio, "d0" is grounded
For the ram a quick look at the board is enough to se you cant "add" ram chips.
Kraven_UK
Flashed the 5838 bios to a SmartXX in a 1.3Box
Using the latest Dash from LIVE!

No Video or Audio.
Eject will not work.
Does not Frag
Will not boot original games on Disc, not that I thought it would, but tries to read the Disc.

Can some people with Focus Chips please try it.
hippo
I flashed split_5838 on to a sst 49lf020 and set it up cheapmod style and now I call my v 1.0 model xbox fraggy. Frag, no eject, no games load. As expected.


JayDee
Flashed split_5838 to a 1.1 and as soon as i launch it from smartxx os i get red flashing.
Eject works (wont even try to boot a game), and no a/v output.

K: 1.00.4817.01
D: 1.00.5659.03
Mr. Tom
Ok, i finally got to the end of it, and im going to add my $0.02

First off, I am not an electronics guru, but is it right to assume since the Xcalabur chip is where the video encoder went, that it is the video encoder? And the same goes for the Xyclops being a bios chips of sorts, how do you know its not the video encoder?

I'm going to go to EB tommorow and buy one, (it looks like ones made after march 22nd are 1.6's) If anyone wants one, PM me and ill see what i can do (i will charge actual cost + actual shipping)

I just bought my halo xbox as an XBL box, im going to mess with the 1.6, no matter what its going to be hackable, its just right now the only way it could get easier is if MS sold them with modchips pre installed, so god forbid you might have to solder something.
A.Z.BESTŪ
QUOTE (javi @ May 6 2004, 12:33 AM)
i tried a HomeBrew29 with that 5838 bios on a v1.2 mobo.

u get no video signal (and no audio).

Sometimes the front light stays solid green and the DVD drives makes some ticking noises.(the light flashes green on eject press but no tray eject at all ~only ticking noises); sometimes it's a FRAG, or a 2 boot attempt and solid green.

That's a good idea, but as we have heard only 1.4 and 1.5 kernels have support for the Xcalibur, so trying the new bios on mobos under 1.4 makes no sense cause they only have support for Conexant (up to 1.3) and Focus chips (from 1.3 to 1.5 and maybe 1.6).


Please, anyone try 29 wire at 1.6 using kernel from 1.4/1.5 box (or even the same - retail 5838), or try to use 5838.01 on 1.4-1.5 mobo. That would definately show if the mobo is moddable. At the first attemp - pretty simple wink.gif. Older kernel on the new 1.6 would show the ability to boot from any other bios than 5838, and booting from 1.6s bios would show the same (can't explain what I mean- abstractive thinking ;D). The problem is that the 1.6 are damn rares and not reachable anywhere else than i USA ;/. If I only live in USA I could help ya ;P.
heinrich
hippo, the rc4 key has changed since 1.0, not sure if thats what you meant by expected, but that is one reason wink.gif
Troed
hamtitampti: Can you confirm/deny that the MCPX has _not_ changed? I have no v1.6 to play with - but I've been under the impression that since the MCPX-change for v1.1 debacle between MS and nVidia no more MCPX revisions could be done.

Thus, all the changes will be bus/new chips/new logic related.

Also, I'm guessing due to your LPC-findings that not only will v1.6 need a new bios - it will need new modchip-designs as well?

hamtitampti
hehe
good question
it is YES / NO

best look regulary int he thread in our forum.
i will not work here, as there are to many n00b beliving what groups like "xenium" tell.

for Your question:
as the TEA hash == same
the bios has same structure
and the secret rom dump shows no change, there is no "new" security concept
but the mpcx itself is "new"

(seems, i have to invite you now to lab)

franz
Ph33r_Bob
QUOTE (XanTium @ May 5 2004, 08:55 PM)
Note: for those who wonder ... I'm deleting posts here.
I try to keep the thread on-topic and cleaner. I did not delete any post with any useful information (or atleast I hope so) nor did I censore any information (what would there be to censore anyway).
If I deleted one of your posts, don't take it bad ... doesn't mean your post was 'crap', I just try to make it easier for those who want to read/update about what we have so far here about the v1.6.

"I have a august 2002 xbox, do you think I have a v1.6?", "YEAH! Hack IT!!!" and totally offtopic posts about what-modchip-should-I-install-in-my-v1.4, refurbs, ... are removed to make the thread easier to read.

Also about naming ... it's a v1.6 ... v2.0 would not be logic ... v1.2 should have been v2.0 and this one v3.0 then in this logic. Even if we would like to change name, it would be too late. What comes after v1.9 ? v1.10 ... (!= v1.1.0)

i expect you to delete this post.. as i would to but im thinking if the time ever does come where we would have to start calling it above v1.9 the only logical choice would most likely be v1.10, v1.11, v1.12... and you know it does make complete sense... if you did v1.9.1 or v1.1.0 as you said....then its practical but it seems like it would be a revision of the v1.9 or v1.1.0... which technically we could do for all the boards boards with minure changes...when ever the v2.0 was to come out... but this is enough of rambling ... just delete this
Exobex
QUOTE (Ph33r_Bob @ May 6 2004, 01:59pm)
if the time ever does come where we would have to start calling it above v1.9 the only logical choice would most likely be v1.10, v1.11, v1.12... and you know it does make complete sense... if you did v1.9.1 or v1.1.0 as you said....then its practical but it seems like it would be a revision of the v1.9 or v1.1.0... which technically we could do for all the boards boards with minure changes...when ever the v2.0 was to come out...

We may not even get as far as a post-1.9 board, the numbering will be sorted out IF we get there. Not now.

QUOTE (Hamtitampti @ May 6 2004, 09:50am)
best look regulary int he thread in our forum.
i will not work here, as there are to many n00b beliving what groups like "xenium" tell.

Respect will be due to whichever team (SmartXX, ozXodus (there is no "xenium" group), Xecuter, EvolutionX or whoever) is first to release a working solution. Anyone can claim they're almost there, but until they can prove a working solution, it's just banter, spin, bullshit, whatever you want to call it.

Who'll be able to brand their mods or BIOSes with a gold medal? Watch this space!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2013 Invision Power Services, Inc.