Rockbox Technical Forums

Rockbox Development => New Ports => Topic started by: timbo on October 29, 2007, 12:14:52 PM

Title: iriver slimX iMP-550
Post by: timbo on October 29, 2007, 12:14:52 PM
So I got given an iriver slimX iMP-550 recently, so I could use the remote with my H140&H340. Then I got to wondering, what's in this thing anyway?

A bit of searching on the 'net and finally taking it apart and reading/photographing chips later, and it appears to be sort of similar to some of the other rockbox targets (accepting the additional hardware for the CD reader.)

So far, I've found:

Top
---

Sony
CXD3023R
245E17N
DSP, Digital Servo & DAC ??
http://www.alldatasheet.com/view.jsp?Searchword=CXD3023R

SAA7750EL/N102
CB8041--
Tu0313v04Y
CH3157.00
CB7634
ARM720T RISC CPU (ARM7TDMI, 32 bit RISC, max 72MHz) & interfacing (inc. DAC & ADC) w/ 3Mbit flash
http://pdf1.alldatasheet.com/datasheet-pdf/view/105987/PHILIPS/SAA7750-N1D.html

BD7920KS
234 H24
DC\DC-Converter for CD\MP3-player with Motor & Coils Drivers?

CXA2571N
304A92V
RF Matrix Amplifier (CD playback)
http://www.datasheetcatalog.com/datasheets_pdf/C/X/A/2/CXA2571N.shtml
http://www.ortodoxism.ro/datasheets/sony/a6802526.pdf

SST MPF
39VF160
70-4C-BK
0315118-GA
16 Megabit (1M x 16-Bit) Multi-Purpose Flash
http://www.alldatasheet.com/datasheet-pdf/pdf/115332/SST/SST39VF160-70-4C-BK.html


Bottom
------

Samsung
316
K4S28 632F- L75 (K4S281632F- L75 ??)
128 Mbit (16MB) SDRAM
http://www.alldatasheet.com/datasheet-pdf/pdf/37061/SAMSUNG/K4S281632F-TC60.html


LC14A
35K
FTXT
Transient Voltage Suppressor
http://www.datasheetcatalog.com/datasheets_pdf/L/C/1/4/LC14A.shtml


BD6609
3398
Spindle Motor Driver For Cd/Md
http://www.datasheets.org.uk/pdf/bd6609-datasheet/bd6609-datasheet.html

TEA5767
VAFSF3 (or VAF5F3?)
02
DP031523
single-chip FM stereo radio
http://www.alldatasheet.com/datasheet-pdf/pdf/82569/PHILIPS/TEA5767.html


I've had a quick look at a selection of firmware files in hexdump, and it looks like they're encrypted, I just hope this is much like the other iRiver encryption schemes...

I'm concerned that there might be a lot of driver software for the CD reading itself, but I'm hoping that this is mostly handled by the driver chips on board.

There's an unused 7-pin header on the board which I need to try and correlate with the SAA7750 or trace on the board, as I'm hoping this may help with debugging.


Am I mad to even attempt this, or is there hope that a rockbox port for iMP/slimX players is possible?
Title: Re: iriver slimX iMP-550
Post by: timbo on October 29, 2007, 05:01:16 PM
Well, I've decoded a firmware image. The decode tool for iFP firmware images (ifp_decode from http://www.rockbox.org/twiki/bin/view/Main/IfpCryptanalysis) works for iMP-550 images too.

Judging from the number of english strings and apparent images (they look like images to me in the hexdump ;)) this has worked correctly.

There doesn't seem to be an encode tool though and no description of how checksums are generated, although CoreyCason claims to have modifed images and uploaded and used them successfully.
Title: Re: iriver slimX iMP-550
Post by: drog on January 23, 2011, 12:59:22 PM
hi , guys
now 2011 and everybody choose newest touchscreen pmp for good life. bur i believe for imp 550 is the best of sound and power!
and i decided to repair my old imp550 and began to learn datasheet saa7750el - processor arm7 + DSP
its mean that i found info about usb and mmc sd:
1.1
Hardware Features
• Integrated ARM720T 32 bit RISC processor, capable of running at 72MHz.
• High performance 32-bits bus (AHB)
• Centralized address decoding for all AHB devices
• Four possible memory maps:
– external boot
– internal flash boot
– internal ROM boot
– normal operation
• Supports USB 1.1 compliant interface for down loading data from PC
• Support for flash-card applications:
– Supports the Multi Media Card (MMC)
– Supports Smart Media Card (EBI)
– NAND FLASH (EBI)

• Memory interface (EBI) supporting a number of memory types like Static RAM, SDRAM, external Flash.
The maximum bus frequency can be up to 48MHz.
• Integrated CD block decoder for CD-DA and MP3 CD applications
• UART + IrDA (IrDA is a new block on the N1D version)
• Integrated Master and Slave IIC interface
• Real-Time Clock (RTC)
• General-Purpose IO pins (28 pins)
• Integrated Remote Control interface
• Integrated LCD interface with 6800 / 8080 type interface
• Integrated 10 bits ADC with 8 selectable inputs (via analog multiplexer).
• Integrated SPDIF output interface
• Integrated IIS input and output interface
• Integrated stereo Audio Codec
– Stereo Line input with Programmable Gain Amplifier (PGA)
– Mono Microphone input with embedded Low Noise Amplifier (LNA) and Variable Gain Amplifier (VGA
– stereo analog input with analog volume control (e.g. for tuner applications)
– stereo line output
– integrated stereo headphone driver which can be used in DC coupling (short circuit protection and detection build
in).

therefore its can be possible connect to Pc!
i'll try tomorrow

Post Merge: January 23, 2011, 01:07:40 PM
So I got given an iriver slimX iMP-550 recently, so I could use the remote with my H140&H340. Then I got to wondering, what's in this thing anyway?

A bit of searching on the 'net and finally taking it apart and reading/photographing chips later, and it appears to be sort of similar to some of the other rockbox targets (accepting the additional hardware for the CD reader.)

So far, I've found:

Top
---

Sony
CXD3023R
245E17N
DSP, Digital Servo & DAC ??
http://www.alldatasheet.com/view.jsp?Searchword=CXD3023R

SAA7750EL/N102
CB8041--
Tu0313v04Y
CH3157.00
CB7634
ARM720T RISC CPU (ARM7TDMI, 32 bit RISC, max 72MHz) & interfacing (inc. DAC & ADC) w/ 3Mbit flash
http://pdf1.alldatasheet.com/datasheet-pdf/view/105987/PHILIPS/SAA7750-N1D.html

BD7920KS
234 H24
DC\DC-Converter for CD\MP3-player with Motor & Coils Drivers?

CXA2571N
304A92V
RF Matrix Amplifier (CD playback)
http://www.datasheetcatalog.com/datasheets_pdf/C/X/A/2/CXA2571N.shtml
http://www.ortodoxism.ro/datasheets/sony/a6802526.pdf

SST MPF
39VF160
70-4C-BK
0315118-GA
16 Megabit (1M x 16-Bit) Multi-Purpose Flash
http://www.alldatasheet.com/datasheet-pdf/pdf/115332/SST/SST39VF160-70-4C-BK.html


Bottom
------

Samsung
316
K4S28 632F- L75 (K4S281632F- L75 ??)
128 Mbit (16MB) SDRAM
http://www.alldatasheet.com/datasheet-pdf/pdf/37061/SAMSUNG/K4S281632F-TC60.html


LC14A
35K
FTXT
Transient Voltage Suppressor
http://www.datasheetcatalog.com/datasheets_pdf/L/C/1/4/LC14A.shtml


BD6609
3398
Spindle Motor Driver For Cd/Md
http://www.datasheets.org.uk/pdf/bd6609-datasheet/bd6609-datasheet.html

TEA5767
VAFSF3 (or VAF5F3?)
02
DP031523
single-chip FM stereo radio
http://www.alldatasheet.com/datasheet-pdf/pdf/82569/PHILIPS/TEA5767.html


I've had a quick look at a selection of firmware files in hexdump, and it looks like they're encrypted, I just hope this is much like the other iRiver encryption schemes...

I'm concerned that there might be a lot of driver software for the CD reading itself, but I'm hoping that this is mostly handled by the driver chips on board.

There's an unused 7-pin header on the board which I need to try and correlate with the SAA7750 or trace on the board, as I'm hoping this may help with debugging.


Am I mad to even attempt this, or is there hope that a rockbox port for iMP/slimX players is possible?

do you interesting still imp550 + rockbox + mmc sd?