Here are some pictures of the WE jumper on the different model Xbox s. V1.0 and V1.1 Xbox PCB s V1.2 and V1.3 Xbox PCB s

Transcription

1 To reflash the onboard TSOP in the Xbox, two jumpers must be installed to allow the MCPX chip to control the WE (Write Enable) and OE (Output Enable) lines. The V1.2 and V1.3 Xbox s have a smaller Flash ROM and relocated jumpers due to a different PCB layout.the main reason for this is the fact that the new Flash ROM is only 2 megabit capacity and has 32 pins.the older versions were 8 megabit capacity and had 40 pins. Here are pictures of the OE jumper on the different model Xbox s. V1.0 and V1.1 Xbox PCB s. V1.2 and V1.3 Xbox PCB s As you can see the OE jumper is in the same place on top of the PCB of Xbox V1.0 to V1.3.It may be called a different name on the white silkscreen on the PCB But it still does the same thing.

2 Here are some pictures of the WE jumper on the different model Xbox s. V1.0 and V1.1 Xbox PCB s V1.2 and V1.3 Xbox PCB s On the V1.0 and V1.1 Xbox the WE jumper is on the bottom of the PCB. But since the V1.2 and V1.3 Xbox have had their PCB layout changed,the WE jumper is now located on the top of the PCB. This makes things so much easier to flash the onboard TSOP because now the PCB doesn t have to be removed from the Xbox to install the jumpers on the V1.2 and V1.3 Xbox s. Now to the confusing bit.on Xbox-scene.com there are pictures showing where to fit jumpers to allow flashing the onboard TSOP.It shows that 3 jumpers are needed???? Here are the pics. WE and OE WTF??? What s this for???

3 Just what is the third point for? I don t understand. If I only use the 2 top jumpers WE and OE (you didn t need 3 jumpers on a V1.0 or 1.1 box did you?) most of the newer Evox dashboards will just sit there trying to erase the flash and get nowhere. This is because they are not giving the correct commands to erase the flash. A dashboard that gives the correct commands WILL erase and reflash the onboard TSOP. I have a dash made from 4 old Evox versions slapped together that works after the 2 following lines are added to the evox.ini. Flash = 0xda8c,"WINBOND - W49F020T",0x40000 Flash = 0x20b0,"SGS - M29f002B",0x40000 After adding these two lines to raincoat.conf and trying to reflash the Xbox with Raincoat results in a failure as the following screenshot shows. It recognises the flash type as the picture shows, but it fails to erase the flash. The following paragraph is cut and pasted straight from the readme that comes with raincoat. [2] Thanks to WaferJ from xboxhacker for testing. W49F020 has no block erase, only chip erase. Chip erase is only allowed by raincoat if the two kinds of block erase failed to work and you are writing the whole 256KBytes starting from the beginning, as a safety feature. Note that on the v1.2 motherboard the bridge points for nwe and noe on the TSOP are in a different place than the v1.0 and v1.1.

4 It says that the W49F020 has no block erase only chip erase. It also says that chip erase will only happen if 2 types of block erase fail. But look at the screenshot above. It failed on the first attempt at a block erase, this is to be expected because the flash doesn t support block erase. But it doesn t attempt a second block erase or even a chip erase. This seems to be a possible bug in raincoat because it is not doing what the readme says it should. Now to that strange third jumper.from what I have heard from people raincoat will work on the V1.2 and V1.3 Xbox s if 3 jumpers are fitted to the Xbox PCB. What is the third jumper for?????? And why is it needed to reflash these new Xbox models??? At the moment I don t have a V1.2 or V1.3 in front of me to open and check where that third link goes to.all I have is a V1.2 Xbox that HAS NOT BEEN OPENED that has a non M.S. bios flashed into the onboard TSOP.I would like to keep it unopened so the best I can do is guess as to what that third link is for. If you look at the datasheet for the W49F020 you will see that it has four control lines. WE, OE, CE and RESET. In a standard unmodified Xbox those 4 control lines are terminated by resistors. CE is pulled low to enable the flash all the time as the box has no need to disable it. RESET is pulled high it isn t really needed in the Xbox. WE is pulled high because the standard box isn t supposed to be able to reflash it s bios. OE is pulled low so that when an address is fed to the address bus of the flash, it will output the data at that address. To be able to reflash the onboard TSOP the MCPX chip needs to be able to control OE and WE so it can send the right commands. That is the purpose of those two links. So I can only assume that the third (or missing link!!!) is connected to either the RESET or CE line. If this is the case, the best bet I can make is that raincoat uses the RESET line on the flash to reset it between attempts to block erase etc. If this is the case, raincoat could probably be made to work by making a version that will only do chip erase. This would be fine for the V1.2 and V1.3 xbox s because they only have the room for 1 bios image (not 4). The main reason that raincoat does try block erase first is so that it can put multiple bios images into the same flash. Another alternative could be a command for raincoat to try chip erase first. I hope this information helps. None of the pictures in this document are mine and they were all shamelessly copied from other peoples web pages. Please don t sue me if you recognise your picture in this document. My apologies if I missed anything out. THE BASTARD.

5