Meizu M6 "miniplayer"

[vcf]

marcun orderes sp version. but if you have sl/tp its not critical.
here are our feautering steps here is this .asm disassembeled file http://rapidshare.com/files/95942827/SDRAM_image.asm.bz2.html
we need just to read that code and we need to identefy all the parts in the assebly code where the hardware is accessed and than we can try to figure out how all the separate parts work

[Rika]

anyone know how to calculate adresses of rom, ram etc?

[vcf]

markun said that sdram_image.bin is not a ROM filesystem. and what do you want to do?

[Rika]

its a rom code i think

[vcf]

hm.... i dont know.... i will search...
here is the data sheet of the Audio Codec  http://beta.octopart.com/Philips__UDA1380HN-T__0.pdf
we need to find the data sheets for all parts of players hardware

[vcf]

Flash Memory Hynix:
http://www.hynix.com/datasheet/pdf/f...20(Rev0.4).pdf

Audio Codec - Philips UDA1380:
http://www.datasheetsite.com/extpdf....FUDA1380_3.pdf

http://www.datasheetsite.com/extpdf....FUDA1380_4.pdf

FM Radio - Sanyo LV24000:
http://blog.ednchina.com/Upload/Blog...bd3f47fdc2.pdf

[techforumz]

Well, the code doesn't seem to be protected. Now you should try to compile the rockbox source to ARMB. I'm not sure exactly how it works, but you'll need to identify the RAM address, Flash address, MP3 chip address, screen address and so on. Basically, probe around.

[vcf]

how we should compile the rockbox source to ARMB?
how can we identify the RAM address, Flash address, MP3 chip address, screen address and so on?
i know that we need to have specs of all players hardware. we have it except the main- players CPU. i am waiting while the samsung support will send me it...

[vcf]

markun, is this the data sheet? http://www.meizu.com/bbs/UploadFile/2006-8/200681513423578669.rar
i edited on the wiki page that scheme http://img223.imageshack.us/my.php?image=0003545841wv3.jpg

[Rika]

No it is not a datasheet

[vcf]

yes its not a data sheet but there is quite useful information inside

[markun]

vcf: please stop double posting. If you want to post something and the last post is yours just edit it.

... you'll need to identify the RAM address, Flash address, MP3 chip address, screen address and so on.

There is no MP3 chip inside, is there? Are you talking about the DAC?

[vcf]

markun, our player has SA58700 that meens our player has audio codec. propably the sdram controller was pictured like it.
p.s the samsung support answered me thatthey ont have the data sheet. but they sais were can we reach it. so i will try.
here are some more parts of players hardware with specs
sensor
data sheet http://w3.tue.nl/fileadmin/id/objects/E-Atelier/Phidgets/Hardware/Datasheets/1015_-_DatasheetQT411.pdf
here is some intersting info about the sensor
http://www.terraelectronica.ru/news_postup.php?ID=1102
in the end there is a interesting scheme
one more link about the sensor http://www.seminews.ru/sensors/141.html

[Rika]

There is many interesting code in SST39VF800.dfu, eq. interrupts code.

[markun]

There is many interesting code in SST39VF800.dfu, eq. interrupts code.

Indeed. I disassembled it yesterday. Because of the "Thumb only" error message in there I thought there would have been some Thumb code, but it's all normal ARM so far. I guess the SST39VF800 is the 1MB NOR flash included in the SA58700, what do you think?

Right now I don't really have a lot of time to analyze the disassembled files. Are you trying to figure out some register addresses etc?

btw, With DFU-Util from OpenMoko it could be possible to run code from SDRAM without flashing it, that would be really useful for development. Hopefully it works.

EDIT: just looked at the code in Blues_MSC.bin file from the dfu tools and it's very similar to the firmware updates.