Support and General Use > Hardware

New cheap portable player in the market

<< < (2/26) > >>

pmp4:
I put here the eBay name of the product to make the thread easily reachable:
Mini Portable Bluetooth MP3 MP4 Music Player FM Radio Hi-Fi Media Lossless Sound

And I put a image of player too, to make the thread easily identificable for the people who enter in it (menu icons images are different from "official" product images, but it's the same product, so at least must be two versions of the original firmware).

I have some news, SC6531 SoC operating system is MOCOR, but MOCOR is based in ThreadX operating system. So maybe another ThreadX RTOS devices experience can be useful in here (I saw Sansa Fuze + original firmware is based in ThreadX too).

Here the output of binwalk opening the firmware of a SC6531 based feature phone (with a 128x160 screen): (Firmware size 4.2 MB, 0x400000 bytes)

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
62844         0xF57C          Unix path: /source/src/c/sci_mem.c
66668         0x1046C         Unix path: /source/src/c/threadx_os.c
77644         0x12F4C         Unix path: /source/src/c/threadx_appmem.c
235336        0x39748         Unix path: /Layer1/source/c/datacnfproc.c
330384        0x50A90         Unix path: /Layer1/source/c/systeminfo.c

Anyway, as I said before, that means nothing, because UniSoc Spreadtrum SC6531 is not the SoC of this portable player, but must be something similar.

Bilgus:
First day with these devices and I already had one stop enumerating as USB and now won't even turn on that was before I started messing with getting into boot mode  :-\
taking it apart it has the same QA 2100 but with 2022ad005c
the back side of the board is marked j01 wb vl1 210315

The second one I have managed to brick and disconnecting power / reconnecting brought it back luckily
also no need to use the reset button simply turn player off (long press play/pause) then hold M while plugging USB
i then enumerates as 4d00

Bilgus:
Unfortunately I think without having a upgrade file for the firmware or at the very  least some idea of the internal chip and its layout
we are never going to be able to do anything with this player

I was hoping there was jtag on the device that might allow some probing but it appears everything is done with the USB to me

maybe some deal with the chinese manufacturer and a SDK but where to start without knowing who that is IDK

speachy:
The real question is how much onboard RAM this SoC contains.

The various Actions Semi SoCs found in most of these shovelware players contains only a couple hundred KB, for example.  Even the higher-end rockchip ones have less than half the RAM for rockbox to be minimally viable.

pmp4:

--- Quote from: Bilgus on August 03, 2022, 12:00:08 AM ---First day with these devices and I already had one stop enumerating as USB and now won't even turn on that was before I started messing with getting into boot mode  :-\
taking it apart it has the same QA 2100 but with 2022ad005c
the back side of the board is marked j01 wb vl1 210315

The second one I have managed to brick and disconnecting power / reconnecting brought it back luckily
also no need to use the reset button simply turn player off (long press play/pause) then hold M while plugging USB
i then enumerates as 4d00

--- End quote ---

My experience is the next:

Boot mode always works, but device normal start up can be blocked doing tests.

To restore normal mode start, I use the SC6600 fdl file, with this command: uniflash.py -t sc6600l_generic dump test.bin
(using the Uniflash soft) and the portable player comes back to life. The file can't read the flash, but can come back to life a blocked device, I dont know why.

The problem with Spreadtrum SoC is that is needed a file (different for every soc) to read the firmware of the device (the file is called "nor" or "fdl", "nor" by the kind of memory to boot I guess, nor flash memory).

If we can read the firmware, things will be easy.

Here is a more complete list of fdl files than that it come with uniflash soft: http://chomikuj.pl/hubertus/Serwis+GSM/boxy/GPG+Dragron+3.55/55/GPG+Dragon+v3.50c+Crack+Download+Link+*26+Enjoy+!!/system/spreadtrum

Note: To use those files with UniFlash you must rename correctly and put in fdls folder, because UniFlash take params from the fdl filename, like the memory address to load the file.

I dont have tested all fdls that I got yet, and I can't guarantee than some fdl wont block forever the player.

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version