This exploit allowed users to run unsigned code (linux/loaders) without needing to patch the BIOS or deal with the TEA encryption. It rendered the security improvements in mcpx11.bin irrelevant.
The mcpx10.bin is the first link in a chain of trust that starts the Xbox. Here is how it functions: 1. Initial Power On (The Hook) xbox bios mcpx10bin work
For years, the exact contents of mcpx_10.bin were a mystery. Because the ROM disables itself before control is handed over to the dashboard, hackers could not write a program to dump it. This exploit allowed users to run unsigned code
The CPU relies on the Southbridge to map the MCPX ROM to 0xFFFFFFF0 . The Southbridge controls this mapping via a register. When the MCPX code finishes, it attempts to unmap this ROM so the kernel can use the full address space. Here is how it functions: 1
The is the Southbridge of the original Xbox motherboard. Inside this chip is a tiny 512-byte hidden ROM known as the Boot ROM. Its primary job is to initialize the CPU and then decrypt the actual system BIOS stored on the motherboard's flash chip.