From Free60 Project

Table of contents

1 Introduction 2 Disassembly 3 Integrated Circuits 3.1 Marvell MVPG16 3.2 STMicroelectronics M25P40 3.3 Marvell 88W8388-BDK1 4 Linux support 5 External Links

Introduction

The Wireless Network Adapter (http://www.xbox.com/en-US/hardware/x/xbox360wirelessnetadapter/) is a dual-band (2.4/5GHz) 802.11a/b/g interface for the Xbox 360.

This is a standard USB 2.0 device, and although it is designed to clamp onto the back of the console, it works when plugged into a standard USB port, given your operating system has accompanying device drivers. See below.

Disassembly

Integrated Circuits

Marvell MVPG16

MG16R
00A2R
521AC

The MVPG16 is an integrated DC-DC synchronous step-down switching regulator. Input voltage ranges from 3.0V-5.5V. Output voltage ranges from 0.72V-3.63V and is user-programmable via a single external resistor.

There's no readily available datasheet for this particular IC, however, one for it's modular MDx-G16 counterpart is, for download (http://www.marvell.com/products/power/dspswitchermodule/MV-S101948-00C.pdf). There's a two-page brochure (http://www.marvell.com/products/power/dspswitcher/DSPSwitcher_MVPG15_16_30_31.pdf) as well, but is rather lacking in the more technical details.

Product information page at http://www.marvell.com/products/power/dspswitcher/index.jsp

STMicroelectronics M25P40

25P40VP
ST 95298

The M25P40 (http://www.st.com/stonline/products/literature/ds/7737/m25p40.htm) from ST Microelectronics is a 4Mbit serial flash memory with a 50 MHz SPI bus interface.

Details on the numbering scheme used above may be gleaned from application note Serial Flash Memory Device Marking (http://www.st.com/stonline/products/literature/an/10625.pdf) (.pdf)

A datasheet (.pdf) is available for download (http://www.us.st.com/stonline/products/literature/ds/7737.pdf) on the vendor website.

Marvell 88W8388-BDK1

88W8388-BDK1
AGW1P .2
0530 A2P
TW

The 88W8388 is an 802.11a/b/g WLAN SoC from Marvell. Embedded are an ARM946E-S (http://arm.com/products/CPUs/ARM946E-S.html) core (as per the ARM Networking (http://www.arm.com/pdfs/116-4%20Networking.pdf) brochure) and on-chip memory. Together with an integrated TCP/IP stack, this allows for off-loading the host processor of protocol processing. This SoC is targeted at small-footprint devices, eg. cellular/VoIP phones, PDAs, video game consoles, etc.

The 88W8388 is 88W88305-derived, as indicated below (table reproduced from http://www.clv.macnica.co.jp/product/marvell/sub1.html):

Baseband Processor Product Selection table

Part no.	b/g/a	Package option	CLK Type	Interface	Feature/Advantage
88W8305	b	TQFP 128pin 14x14x1.2 TBGA no option Flip chip Yes	20, 40, 44 CMOS only	CF SDIO (SPI)	TKIP (firmware) AES (hardware) WPA (firmware) Power Save
88W8381	b	TQFP 128pin 14x14x1.2 TBGA 132pin 8x8x1 Flip chip Yes	19.2, 20, 26, 38.4, 40, 44 COMS & Low swing sine wave	CF SDIO (SPI)	8305 + TKIP (hardware) 802.11e (QoS) 802.11i (Security) BT coex
88W8385	a/b/g	TQFP 128pin 14x14x1.2 TBGA 132pin 8x8x1 Flip chip Yes	19.2, 20, 26, 38.4, 40, 44 COMS & Low swing sine wave	CF SDIO (SPI) Generic SPI	8381 + a/g
88W8388	a/b/g	TQFP No TBGA 132pin 8x8x1 Flip chip Yes	19.2, 20, 26, 38.4, 40, 44 COMS & Low swing sine wave	SDIO (SPI) USB 2.0	8385 + TCP/IP termination NAND Flash I/F Audio Codec I/F

Linux support

This device is currently unsupported. When plugged into a USB port, the status LED goes from red to orange, instead of a green. An indication that perhaps full initialization failed?

The OLPC project (http://www.laptop.org/) is using a similar Marvell wireless chip (called Libertas (http://wiki.laptop.org/go/Libertas)), probably the same driver can be used. It is reported not to work out of the box, but maybe we can tweak it? OLPC devel ML posting 1 (http://mailman.laptop.org/pipermail/devel/2007-January/003744.html), OLPC devel posting 2 (http://mailman.laptop.org/pipermail/devel/2007-January/003774.html). -- GeorgLukas 05:22, 4 May 2007 (PDT)

Marvell USB 8388 Fedora Redhat Linux Kernel 2.6 Driver (https://www.marvell.com/drivers/driverDisplay.do?dId=162&pId=38) - to be tested (firmware (https://www.marvell.com/drivers/driverDisplay.do?dId=160&pId=38) to be used with the driver)

There is a program floating around to change the boot2 code. That changes the boot protocol. There is a post somewhere (link please, if you find it) where some Marvell guy mentions the Xbox device as having different boot firmware. I'm betting the Xbox uses TCP/IP offload, with the Marvell chip handling connections.

reverse engineering here (http://wiki.laptop.org/go/88W8388)

$ lsusb -v
Bus 001 Device 006: ID 045e:0292 Microsoft Corp.
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x045e Microsoft Corp.
  idProduct          0x0292
  bcdDevice           30.06
  iManufacturer           1 Microsoft
  iProduct                2 Wireless Networking Adapter
  iSerial                 4 XXXXXXXXXXXXXX
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           47
    bNumInterfaces          2
    bConfigurationValue     1
    iConfiguration          3
    bmAttributes         0x80
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass       255 Vendor Specific Class
      bInterfaceSubClass    255 Vendor Specific Subclass
      bInterfaceProtocol    255 Vendor Specific Protocol
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               none
        wMaxPacketSize        512
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               none
        wMaxPacketSize        512
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           0
      bInterfaceClass       255 Vendor Specific Class
      bInterfaceSubClass    253
      bInterfaceProtocol     17
      iInterface              5 Xbox Security Method 1, Version 1.00, © 2005 Microsoft Corporation. All rights reserved.
  unknown descriptor type: 06 41 00 01 00 01
  Language IDs: (length=4)
    0409 English(US)

External Links

Here is some info on the Marvel 88W8388 chip:

• http://www.marvell.com/press/pressNewsDisplay.do?releaseID=479
• Marvell adds TCP/IP offload support to WLAN chip (http://www.commsdesign.com/showArticle.jhtml?articleID=57300160)
• World’s First 802.11a/g Single Chip Solution Embedding TCP/IP (http://www.physorg.com/news2627.html)

This hardware-related article is a stub. You can help the Free60 project by expanding it (http://www.free60.org/w/index.php?title=Wifi_Adapter&action=edit).