Support and General Use > Hardware
New cheap portable player in the market
pmp4:
I put here the eBay name of the product to make the thread easily reachable:
Mini Portable Bluetooth MP3 MP4 Music Player FM Radio Hi-Fi Media Lossless Sound
And I put a image of player too, to make the thread easily identificable for the people who enter in it (menu icons images are different from "official" product images, but it's the same product, so at least must be two versions of the original firmware).
I have some news, SC6531 SoC operating system is MOCOR, but MOCOR is based in ThreadX operating system. So maybe another ThreadX RTOS devices experience can be useful in here (I saw Sansa Fuze + original firmware is based in ThreadX too).
Here the output of binwalk opening the firmware of a SC6531 based feature phone (with a 128x160 screen): (Firmware size 4.2 MB, 0x400000 bytes)
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
62844 0xF57C Unix path: /source/src/c/sci_mem.c
66668 0x1046C Unix path: /source/src/c/threadx_os.c
77644 0x12F4C Unix path: /source/src/c/threadx_appmem.c
235336 0x39748 Unix path: /Layer1/source/c/datacnfproc.c
330384 0x50A90 Unix path: /Layer1/source/c/systeminfo.c
Anyway, as I said before, that means nothing, because UniSoc Spreadtrum SC6531 is not the SoC of this portable player, but must be something similar.
Bilgus:
First day with these devices and I already had one stop enumerating as USB and now won't even turn on that was before I started messing with getting into boot mode :-\
taking it apart it has the same QA 2100 but with 2022ad005c
the back side of the board is marked j01 wb vl1 210315
The second one I have managed to brick and disconnecting power / reconnecting brought it back luckily
also no need to use the reset button simply turn player off (long press play/pause) then hold M while plugging USB
i then enumerates as 4d00
Bilgus:
Unfortunately I think without having a upgrade file for the firmware or at the very least some idea of the internal chip and its layout
we are never going to be able to do anything with this player
I was hoping there was jtag on the device that might allow some probing but it appears everything is done with the USB to me
maybe some deal with the chinese manufacturer and a SDK but where to start without knowing who that is IDK
speachy:
The real question is how much onboard RAM this SoC contains.
The various Actions Semi SoCs found in most of these shovelware players contains only a couple hundred KB, for example. Even the higher-end rockchip ones have less than half the RAM for rockbox to be minimally viable.
pmp4:
--- Quote from: Bilgus on August 03, 2022, 12:00:08 AM ---First day with these devices and I already had one stop enumerating as USB and now won't even turn on that was before I started messing with getting into boot mode :-\
taking it apart it has the same QA 2100 but with 2022ad005c
the back side of the board is marked j01 wb vl1 210315
The second one I have managed to brick and disconnecting power / reconnecting brought it back luckily
also no need to use the reset button simply turn player off (long press play/pause) then hold M while plugging USB
i then enumerates as 4d00
--- End quote ---
My experience is the next:
Boot mode always works, but device normal start up can be blocked doing tests.
To restore normal mode start, I use the SC6600 fdl file, with this command: uniflash.py -t sc6600l_generic dump test.bin
(using the Uniflash soft) and the portable player comes back to life. The file can't read the flash, but can come back to life a blocked device, I dont know why.
The problem with Spreadtrum SoC is that is needed a file (different for every soc) to read the firmware of the device (the file is called "nor" or "fdl", "nor" by the kind of memory to boot I guess, nor flash memory).
If we can read the firmware, things will be easy.
Here is a more complete list of fdl files than that it come with uniflash soft: http://chomikuj.pl/hubertus/Serwis+GSM/boxy/GPG+Dragron+3.55/55/GPG+Dragon+v3.50c+Crack+Download+Link+*26+Enjoy+!!/system/spreadtrum
Note: To use those files with UniFlash you must rename correctly and put in fdls folder, because UniFlash take params from the fdl filename, like the memory address to load the file.
I dont have tested all fdls that I got yet, and I can't guarantee than some fdl wont block forever the player.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version