FW 4 iPod Nano 3G clone

Posted: Mon Mar 02, 2009 6:37 am Post subject: FW 4 iPod Nano 3G clone

Hi all!

I have a "iPod Nano 3rd Generation" clone with strange features:

CPU: ACU7515
Flash: Samsung K9HCG08U1M-PCB0
Radio: SP3767AHN
MB: ZX-6302L-TLSTK V2.0 2007-09-21 MAIN HY
LCD (lateral): GXBL177-008-BL1023-08-10-21
LCD (flat cable): JYD GA177-0001FPC-A
LCD (under battery): JYD5056-081018-0011-B1-991

I have already tried all these firmware:

http://www.s1fw.com/plus/search.php?keyword=6302l&searchtype=titlekeyword

http://www.s1fw.com/plus/search.php?keyword=gxbl177&searchtype=titlekeyword

But none of these will work, the screen is always white! Sad

Moreover:

1) I've found that this firmware does not work:

http://www.s1fw.com/Actions-AK102X/AK1025/ZX-6302C-JLS-V1-2-GXBL177-008-BLL023-Z-1113-IPODM.html

The rar file contains a .fw file that is inconsistent (editing it with an HEX editor will show an header NewEncipheu and no other readable data: maybe it's encrypted? How?)

2) The flash memory is 8GB, as seen on Samsung site:

http://www.samsung.com/global/business/semiconductor/productListNonflexTable.do?fmly_id=672&sht_id=1

But with all other firmwares, the memory is seen as 2GB only! Sad

Can you help me?
Greetings!

Posted: Mon Mar 02, 2009 11:40 am Post subject:

hi,
the flash memory is real 2GB...

Posted: Tue Mar 03, 2009 1:04 am Post subject:

matteo123 wrote (View Post): ›
the flash memory is real 2GB...

Hi matteo123,

The Samsung's site report this memory as 64G bit density in an 8x organization, so it should be 8G bytes total...

http://www.samsung.com/global/business/semiconductor/productListNonflexTable.do?fmly_id=672&sht_id=1

Apart from the memory (2GB would be nice too), my problem is that I can't find a full firmware that is compatible with the LCD, that this is why the display still white...

Greetings!

Posted: Thu Mar 05, 2009 8:51 am Post subject:

Ciao systembug ,

anche io ho lo stesso problema di driver video e non riesco a trovere nessun firmware combatibile con il mio mp4. fin ora avro provato 100 fw ma senza risultati...

Posted: Fri Mar 06, 2009 12:38 am Post subject: Re: FW 4 iPod Nano 3G clone

s1fwx can decrypt NewEnciphe format of firmware file.

Decrypted format has "AFI" in header and you can see the directory entries of all the files in it.

Posted: Tue Mar 10, 2009 1:48 am Post subject: Re: FW 4 iPod Nano 3G clone

lolita wrote (View Post): › s1fwx can decrypt NewEnciphe format of firmware file.

Decrypted format has "AFI" in header and you can see the directory entries of all the files in it.

Hi lolita,

I have tried with s1fwx v3.3, but it seems to not work...
I have renamed the file as 6302C.fw and tried to list the firmware content with these commands:

s1fwx.exe l 6302C.fw

Code: › s1fwx v3.3 - copyright (c)2005-2008 wiRe (http://www.s1mp3.de/)

---[ info ]--------------------------------------------------------------------
filename = '6302C.fw'
filetype = unknown
md5 = 08502184FEF9A41417A8290DC05F0D58

s1fwx.exe l 6302C.fw:afi (it hangs)

Code: › s1fwx v3.3 - copyright (c)2005-2008 wiRe (http://www.s1mp3.de/)

---[ info ]--------------------------------------------------------------------
filename = '6302C.fw'
filetype = afi (overwritten)
md5 = 08502184FEF9A41417A8290DC05F0D58

---[ info:afi ]----------------------------------------------------------------
invalid checksum, file header maybe damaged
file id = 'NewE' (unknown)
vendor id = 0x636E
product id = 0x7069
version = 6.8.65
date = 23/17/0709

+---filename---+ +---size---+ +-type-+ +---+ +--chksum--+
| â↕ü¸→\b.►☺$ | | 2873.40mb| | KX↓f | | ' | | 00000000 | <- invalid checksum
| õ×Èh{¨g▓.`Ôb | | 828.32mb | | :♀â‼ | | Ä

s1fwx.exe l 6302C.fw:fw (it hangs)

Code: › s1fwx v3.3 - copyright (c)2005-2008 wiRe (http://www.s1mp3.de/)

---[ info ]--------------------------------------------------------------------
filename = '6302C.fw'
filetype = fw (overwritten)
md5 = 08502184FEF9A41417A8290DC05F0D58

---[ info:fw ]-----------------------------------------------------------------
invalid checksum, file header maybe damaged
file id = 0x4577654E (unknown)
vendor id = 0x0907
product id = 0x1723
version = 6.14.63
date = 75/1A/6865
info = 'â↕ü¸→\b►☺$'═¾9;2♂Æà~hû│KX↓f↔¢$'
manufacturer = 'õ×Èh{¨g▓`ÔbÄéiwïÌÔê∟}‼┼3:♀â‼ÊHb+'
device name = '►×r╣aêxDvÓÏâ╗D$ªÙ6▲q┤gTÎ█ì_Ý°Ê┐'
usb attr = '*¨♣▼Úc╔°'
usb ident = 'ƒ└<4↨ñ8Ê┐ï%lq¼Wÿ'
usb rev = '╦^Ïä'
rtc rate = 0x7131
display contrast = 3
light time = 213
standby time = 159
sleep time = 128
language = unknown (0x81)
replay mode = 0x68
online mode = 0x03
battery type = unknown (0x15)
radio/fm support = no

+---filename---+ +---size---+ +--chksum--+
| ÷N┬5¨ Z┌.ADë | | 2152.81mb| | 00000000 | <- invalid checksum
| ⌂÷─Ë═ ?¶.üòÚ | | 2925.50mb

s1fwx.exe l 6302C.fw:enc

Code: › s1fwx v3.3 - copyright (c)2005-2008 wiRe (http://www.s1mp3.de/)

---[ info ]--------------------------------------------------------------------
filename = '6302C.fw'
filetype = encoded (overwritten)
md5 = 08502184FEF9A41417A8290DC05F0D58
decrypting file...

---[ info ]--------------------------------------------------------------------
filename = '6302C.fw'
filetype = encoded (overwritten)
md5 = 08502184FEF9A41417A8290DC05F0D58

Can you upload in this thread (or rapidshare, megaupload or other) an uncrypted version of this firmware? 1000 Thanks! Rolling Eyes

@matteo123: anche tu gabbato da eBay? Evil or Very Mad

Posted: Tue Mar 10, 2009 11:45 pm Post subject: Re: FW 4 iPod Nano 3G clone

I will try decryption once download complete (~500 bytes per second from s1fw.com server, this may take a long time.)

Could you provide high-resolution pictures of the LCD assembly, showing the part numbers and the whole module clearly? I may be able to determine more information from that.

Posted: Wed Mar 11, 2009 2:31 am Post subject: Re: FW 4 iPod Nano 3G clone

lolita wrote (View Post): › I will try decryption once download complete (~500 bytes per second from s1fw.com server, this may take a long time.)

Could you provide high-resolution pictures of the LCD assembly, showing the part numbers and the whole module clearly? I may be able to determine more information from that.

Yeah lolita! You are really kind! Wink

Here there are some pics of the player taken at 6Mpix (about 1Mb each):

PCB CPU side: http://img16.imageshack.us/img16/6179/dsc0383.jpg
PCB LCD side: http://img8.imageshack.us/img8/6514/dsc0385b.jpg
PCB serial no: http://img6.imageshack.us/img6/5854/dsc0386y.jpg
LCD upper side: http://img14.imageshack.us/img14/4336/dsc0387rmy.jpg
LCD and flat: http://img16.imageshack.us/img16/3936/dsc0390f.jpg

1.000.000 thanks!!! Embarassed

Posted: Wed Mar 11, 2009 3:34 am Post subject: Re: FW 4 iPod Nano 3G clone

That sanded NAND chip looks suspicious... might be a remarked one (K9LAG rubbed off and changed to K9HCG.)

This is decrypted firmware:
http://rapidshare.com/files/207848461/ZX-6302C-JLS-V1.2_GXBL177-008-BLL023_Z_1113_IPODM.zip

It's for a player with the LCM on CE4, which is rare, and also now we know GXBL177 LCM uses a Renesas/Hitachi HD66789 or compatible controller, which is also very rare. But judging from those pictures, your player has external memory expansion which may explain why the LCM got moved to CE4 from its usual place on CE3. The display is definitely the right one for your player, but the connectivity might not be correct...

FWDBINFO for your player, just for record-keeping purposes.

Code: ›
DESC="ping guo san dai"
ID="ZX-6302L-TLSTK V2.0"
CPU=ACU7515
LCM=[
ID=GXBL177-008-BLL023
CONTROL=HD66789
WIDTH=160
HEIGHT=128
CE=4
RST=A1
CD=A2
BL=B5
]

Posted: Wed Mar 11, 2009 8:07 am Post subject: Re: FW 4 iPod Nano 3G clone

lolita wrote (View Post): › That sanded NAND chip looks suspicious... might be a remarked one (K9LAG rubbed off and changed to K9HCG.)

This is decrypted firmware:
http://rapidshare.com/files/207848461/ZX-6302C-JLS-V1.2_GXBL177-008-BLL023_Z_1113_IPODM.zip

I have tried the firmware that you have uploaded and Product Tool 4.19 upload it without problems.
After the flash I remove the usb cable, wait about 20 seconds, then replug the usb cable: the display make a white blink, then off (also the LEDs) for about 15 seconds, then... white screen!!! Crying or Very sad

Windows XP and MP3 Player Disk Tool recognize (and format) it as 2Gb, so your and matteo123 assumption about the flash chip seems to be real Sad

(@matteo123: avevi ragione, mi sa che ti devo una birra... Rolling Eyes

).

lolita wrote (View Post): › It's for a player with the LCM on CE4, which is rare, and also now we know GXBL177 LCM uses a Renesas/Hitachi HD66789 or compatible controller, which is also very rare. But judging from those pictures, your player has external memory expansion which may explain why the LCM got moved to CE4 from its usual place on CE3. The display is definitely the right one for your player, but the connectivity might not be correct...

FWDBINFO for your player, just for record-keeping purposes.

Code: ›
DESC="ping guo san dai"
ID="ZX-6302L-TLSTK V2.0"
CPU=ACU7515
LCM=[
ID=GXBL177-008-BLL023
CONTROL=HD66789
WIDTH=160
HEIGHT=128
CE=4
RST=A1
CD=A2
BL=B5
]

So, if I good understand, my player have the LCD of one player and the mainboard of another player... right?
Theoretically I need to extract all files from this firmware and "merge" the display files into the right firmware for my mainboard... mmmh, it seems to be VERY difficult... Confused

Lolita, can you explain me what are CE3/CE4?

However, many many thanks for your support! Smile

Posted: Thu Mar 12, 2009 3:10 am Post subject: Re: FW 4 iPod Nano 3G clone

Quote: › After the flash I remove the usb cable, wait about 20 seconds, then replug the usb cable: the display make a white blink, then off (also the LEDs) for about 15 seconds, then... white screen!!!

If you're getting a white screen, it probably means the backlight connectivity is correct. But we should verify that first.

Please install s1giveio and connect the player. Then issue following commands in s1giveio console (excluding the comments):

Code: ›
o ef 0 ; disable KEY mode on GPIO B
o f0 20 ; enable GPIO B5 for output
o f1 0 ; disable GPIO B5 for input

Then the following two commands will turn on and off the backlight if my guess about it being on B5 is correct:

Code: ›
o f2 20 ; this line should turn on the backlight
o f2 0 ; backlight should now be off after this one

About CEx and general display connectivity issues: http://wiki.s1mp3.org/Display

Posted: Fri Mar 13, 2009 2:24 am Post subject: Re: FW 4 iPod Nano 3G clone

lolita wrote (View Post): › Please install s1giveio and connect the player.

Hi lolita!

Sorry for the slow response but yesterday I was out of home.
Please don't kill me... but the s1giveio does not work... Sad

I turn the player into ADFU mode, then I upgrade the driver with the one provided with s1giveio... and no hardware information is found. Confused

I open the swan_adfu.inf file and I found this line:

Code: › "Swan ADFU Driver"=LIBUSB_DEV, USB\VID_10d6&PID_ff51

Found the bug! The PID of my player is FF79! Very Happy

Ok, I change the PID into the inf file to FF79, re-upgrade the driver... and it works!
Now in "device manager" I have a "LibUSB-Win32 Devices" icon, and into it a "Swan ADFU Driver".
Well, it seems al ok: I start a command line, type s1giveio.exe and...

Code: › s1giveio v1.3 - some small debug console to access the players hardware
copyright (c) 2006 wiRe <wiRe> - http://www.s1mp3.de/ - LGPL

give access to the device...
found 5 busses
error: failed to open device

Doh! It does not work again! Evil or Very Mad

A fast search on mympxplayer forum show me this post:

http://mympxplayer.org/image-vp27739.html#27739

... and now? Sad

Posted: Sat Mar 14, 2009 4:59 am Post subject: Re: FW 4 iPod Nano 3G clone

>s1giveio v1.3

You are using an older version of s1giveio which does not properly support the newer devices.

Uninstall LibUsb driver and use s1giveio v1.4:

The latest version is only available in source form but I've compiled a binary here:

http://rapidshare.com/files/209057470/s1giveio14.zip

This version does not need the libusb driver.

Posted: Mon Mar 16, 2009 6:19 am Post subject: Re: FW 4 iPod Nano 3G clone

lolita wrote (View Post): › use s1giveio v1.4

Hi lolita!

Thank you for the tool. I have uninstalled the LibUSB driver and replaced it with the standard ADFU driver taken from this package. I had some problems because the ClassGUID key into the .inf file was incorrect, but I have corrected it.

After the installation I start the new version of s1giveio, but this is the response:

Code: › s1giveio v1.4 - some small debug console to access the players hardware
copyright (c)2008 wiRe <wiRe> - http://www.s1mp3.de/ - FREEWARE

give access to the device...
error: no device found

After some tries I plug the player into "normal mode" (as USB drive)... and the s1giveio recognize it! Shocked

Apart of these "problems", I tried your commands, but they does not work Sad

I made some tries, and I found the command that enable and disable the backlight:

Code: › -o ee 0 ; disable the backlight
-o ee 0e ; enable the backight

Further tests have shown that the backlight is enabled if the first nibble has a value from C to F, while the second nibble can be any value (i.e. 0c, 1d, 2e, 3f etc.).
FYI this is the dump of the memory from E0 to FF:

Code: › -i e0 20
E0 00 78 40 01 07 00 00 00 - 00 78 78 09 00 78 0E 00 .x@......xx..x..
F0 00 15 31 87 07 00 00 00 - 00 00 00 00 00 00 08 00 ..1ç............

... strange player? Cool

Posted: Mon Mar 16, 2009 6:36 am Post subject: Re: FW 4 iPod Nano 3G clone

hi..i have same problem. when i turn the device on then theres only a sandclock and that's it. i won't do anything else.and thisisn't my strongest side: and i can't fix it on my own.so can you help me ?