FW 4 iPod Nano 3G clone -ZX-6302L-TLSTK V2.0 ACU7515
 

Hi all!

I have a "iPod Nano 3rd Generation" clone with strange features:

CPU: ACU7515
Flash: Samsung K9HCG08U1M-PCB0
Radio: SP3767AHN
MB: ZX-6302L-TLSTK V2.0 2007-09-21 MAIN HY
LCD (lateral): GXBL177-008-BL1023-08-10-21
LCD (flat cable): JYD GA177-0001FPC-A
LCD (under battery): JYD5056-081018-0011-B1-991

I have already tried all these firmware:

S1fw.com - Mp3|Mp4|Mp5|PMP|Player Firmware!

S1fw.com - Mp3|Mp4|Mp5|PMP|Player Firmware!

But none of these will work, the screen is always white! :(
Moreover:

1) I've found that this firmware does not work:

http://www.s1fw.com/Actions-AK102X/A...113-IPODM.html

The rar file contains a .fw file that is inconsistent (editing it with an HEX editor will show an header NewEncipheu and no other readable data: maybe it's encrypted? How?)

2) The flash memory is 8GB, as seen on Samsung site:

SAMSUNG's Digital World

But with all other firmwares, the memory is seen as 2GB only! :(

Can you help me?
Greetings!

hi,
the flash memory is real 2GB...

Hi matteo123,

The Samsung's site report this memory as 64G bit density in an 8x organization, so it should be 8G bytes total...

http://www.samsung.com/global/busine...d=672&sht_id=1

Apart from the memory (2GB would be nice too), my problem is that I can't find a full firmware that is compatible with the LCD, that this is why the display still white...

Greetings!

Ciao systembug ,

anche io ho lo stesso problema di driver video e non riesco a trovere nessun firmware combatibile con il mio mp4. fin ora avro provato 100 fw ma senza risultati...

Re: FW 4 iPod Nano 3G clone
 

s1fwx can decrypt NewEnciphe format of firmware file.

Decrypted format has "AFI" in header and you can see the directory entries of all the files in it.

Re: FW 4 iPod Nano 3G clone
 

Hi lolita,

I have tried with s1fwx v3.3, but it seems to not work...
I have renamed the file as 6302C.fw and tried to list the firmware content with these commands:

s1fwx.exe l 6302C.fw
s1fwx.exe l 6302C.fw:afi (it hangs)
s1fwx.exe l 6302C.fw:fw (it hangs)
s1fwx.exe l 6302C.fw:enc
Can you upload in this thread (or rapidshare, megaupload or other) an uncrypted version of this firmware? 1000 Thanks! :roll:

@matteo123: anche tu gabbato da eBay? :evil:

Re: FW 4 iPod Nano 3G clone
 

I will try decryption once download complete (~500 bytes per second from s1fw.com server, this may take a long time.)

Could you provide high-resolution pictures of the LCD assembly, showing the part numbers and the whole module clearly? I may be able to determine more information from that.

Re: FW 4 iPod Nano 3G clone
 

Yeah lolita! You are really kind! :wink:
Here there are some pics of the player taken at 6Mpix (about 1Mb each):

PCB CPU side: http://img16.imageshack.us/img16/6179/dsc0383.jpg
PCB LCD side: http://img8.imageshack.us/img8/6514/dsc0385b.jpg
PCB serial no: http://img6.imageshack.us/img6/5854/dsc0386y.jpg
LCD upper side: http://img14.imageshack.us/img14/4336/dsc0387rmy.jpg
LCD and flat: http://img16.imageshack.us/img16/3936/dsc0390f.jpg

1.000.000 thanks!!! :oops:

Re: FW 4 iPod Nano 3G clone
 

That sanded NAND chip looks suspicious... might be a remarked one (K9LAG rubbed off and changed to K9HCG.)

This is decrypted firmware:
http://rapidshare.com/files/20784846...1113_IPODM.zip

It's for a player with the LCM on CE4, which is rare, and also now we know GXBL177 LCM uses a Renesas/Hitachi HD66789 or compatible controller, which is also very rare. But judging from those pictures, your player has external memory expansion which may explain why the LCM got moved to CE4 from its usual place on CE3. The display is definitely the right one for your player, but the connectivity might not be correct...

FWDBINFO for your player, just for record-keeping purposes.

Re: FW 4 iPod Nano 3G clone
 

I have tried the firmware that you have uploaded and Product Tool 4.19 upload it without problems.
After the flash I remove the usb cable, wait about 20 seconds, then replug the usb cable: the display make a white blink, then off (also the LEDs) for about 15 seconds, then... white screen!!! :cry:
Windows XP and MP3 Player Disk Tool recognize (and format) it as 2Gb, so your and matteo123 assumption about the flash chip seems to be real :(
(@matteo123: avevi ragione, mi sa che ti devo una birra... :roll: ).

So, if I good understand, my player have the LCD of one player and the mainboard of another player... right?
Theoretically I need to extract all files from this firmware and "merge" the display files into the right firmware for my mainboard... mmmh, it seems to be VERY difficult... :?

Lolita, can you explain me what are CE3/CE4?

However, many many thanks for your support! :)

Re: FW 4 iPod Nano 3G clone
 

If you're getting a white screen, it probably means the backlight connectivity is correct. But we should verify that first.

Please install s1giveio and connect the player. Then issue following commands in s1giveio console (excluding the comments):

Then the following two commands will turn on and off the backlight if my guess about it being on B5 is correct:
About CEx and general display connectivity issues: http://wiki.s1mp3.org/Display

Re: FW 4 iPod Nano 3G clone
 

Hi lolita!

Sorry for the slow response but yesterday I was out of home.
Please don't kill me... but the s1giveio does not work... :(

I turn the player into ADFU mode, then I upgrade the driver with the one provided with s1giveio... and no hardware information is found. :?
I open the swan_adfu.inf file and I found this line:

Found the bug! The PID of my player is FF79! :D
Ok, I change the PID into the inf file to FF79, re-upgrade the driver... and it works!
Now in "device manager" I have a "LibUSB-Win32 Devices" icon, and into it a "Swan ADFU Driver".
Well, it seems al ok: I start a command line, type s1giveio.exe and...

Doh! It does not work again! :evil:
A fast search on mympxplayer forum show me this post:

http://mympxplayer.org/image-vp27739.html#27739

... and now? :(

Re: FW 4 iPod Nano 3G clone
 

>s1giveio v1.3

You are using an older version of s1giveio which does not properly support the newer devices.

Uninstall LibUsb driver and use s1giveio v1.4:

The latest version is only available in source form but I've compiled a binary here:

http://rapidshare.com/files/209057470/s1giveio14.zip

This version does not need the libusb driver.

Re: FW 4 iPod Nano 3G clone
 

Hi lolita!

Thank you for the tool. I have uninstalled the LibUSB driver and replaced it with the standard ADFU driver taken from this package. I had some problems because the ClassGUID key into the .inf file was incorrect, but I have corrected it.

After the installation I start the new version of s1giveio, but this is the response:

After some tries I plug the player into "normal mode" (as USB drive)... and the s1giveio recognize it! :shock:

Apart of these "problems", I tried your commands, but they does not work :(
I made some tries, and I found the command that enable and disable the backlight:

Further tests have shown that the backlight is enabled if the first nibble has a value from C to F, while the second nibble can be any value (i.e. 0c, 1d, 2e, 3f etc.).
FYI this is the dump of the memory from E0 to FF:

... strange player? 8)

Re: FW 4 iPod Nano 3G clone
 

hi..i have same problem. when i turn the device on then theres only a sandclock and that's it. i won't do anything else.and thisisn't my strongest side: and i can't fix it on my own.so can you help me ?

ciao systembug!
e si avanzo una birra mi sa! scusate per l'assenza.


work to me these steps:
-o ee 0 ; disable the backlight
-o ee 0e ; enable the backight

I use BKS25056 MV6 AK1025 HY XY-1.8CA-V1 ROHS.bin
file for my player.

Re: FW 4 iPod Nano 3G clone
 

That is correct. This version of s1giveio works with devices that are in U disk mode.

Port EE is the GPOA3 data register, and only the lower nybble is GPOA3[3:0]. Unless you have read GPIO registers map (http://wiki.s1mp3.org/ATJ209x_GPIO), please do not experiment too much with s1giveio. It is possible to cause hardware damage if you set the I/O ports wrong. The upper nybble of EE should be left alone, it controls other functions that should not be changed.

C = 1100, F = 1111. Do values 4 and 8 work? If only C and above works, your player has two backlight control lines, which is very unusual.

That is the I/O ports, not memory. You definitely have a strange player... I don't know of any other players with the backlight on both A3 and A2. Also, GPOA3 doesn't really exist, but the actual pin is CE3.

Please test the GPOA pins again via port EE and determine if your player really does have 2 backlight control lines. Try 1, 2, 4, and 8 only -- these turn on only GPOA0,A1,A2,and A3. Do not disturb the upper 4 bits of the port, leave them at 0.

Re: FW 4 iPod Nano 3G clone
 

Ok, I'm sorry! :roll:
I have "expanded" the test in order to use only the lower nibble, and this is the result:
Mmmh... can be that the backlight is connected only on A3, and A2 is for another use?

Re: FW 4 iPod Nano 3G clone
 

Thank you. We have now determined that your player has the backlight on GPO A2.
See?

Now we have to figure out LCM's reset and command/data pins.

Try the following commands in s1giveio (excluding the comments):
Show what values you get back on the final read.

Re: FW 4 iPod Nano 3G clone
 

Yeah, you're right! I forgot A0 and started pin count from A1 :roll: :oops:
At the end of the procedure i get these values:
It is good?

hi all!

At the end my mp4, get these values:


-r 8000 2

1F B3 .|


my player have the backlight on GPO A2!

LCM?

indeed, several times doing the same command (8000 r 2)
the variable changes each time:
is strange?

Re: FW 4 iPod Nano 3G clone
 

matteo123, that is correct. This is the scan line register, which should change on each read since the controller is scanning the screen.

systembug, if it stays at 0 your controller is either the wrong type or it's not working.

The next step I will create some BRECs with only the LCM code for the various controller types and GPIOs, so you can try them and see which one works.

Re: FW 4 iPod Nano 3G clone
 

Nope, it doesn't work... :x
Lolita, just a question: few days ago you said:
But the first line of the script is:
CE3? But should not be CE4?
Also: S1MP3 Wiki says:

"chip select lines are active low. It is usually connected to CE3- of the SoC, although there have been schematics of players that have it on CE2-, CE4-, or even CE5- (in the case of a particular ACU7515 design)."

Indeed in this ACU7515 schematic the CS of the LCM is connected to the CE5 pin.

So I was thinking: it can be that the LCM can't oscillate because it isn't connected to CE3, and the first command does nothing?

Thanks, Lolita!

I remember you that i have:

LCD ID : fgd177slw-33b9-1
f177091s
3g-7626

CPU ID: AK1025

What should I do now? Where can I find an explanation?

Re: FW 4 iPod Nano 3G clone
 

Then you can try initializing the LCM using the other CE lines. Replace the 18 in "o 2 18" with

20 - CE4
28 - CE5

or if you want to be more certain, try to trace the signals to the LCM. If you provide more high-resolution pictures of the connections, we can help.

This is the pinout: http://img3.imageshack.us/img3/3936/dsc0390f.jpg

The most important pins are the D/C, RESET, and CS. Try to figure out which pins they are connected to on the CPU.

matteo123, start another thread. I can't help two in one thread.

Re: FW 4 iPod Nano 3G clone
 

I have traced the signals with a digital multimeter and I have found this:
GPO ports are working correctly:
The CE5 line, instead, seems to not work because it's always at +3.03 volts.
I have given a look to the CPU port map: the register 0x02 enables the CEx ports, more precisely:

- 0x00 enables CE0
- 0x08 enables CE1
- 0x10 enables CE2
- 0x18 enables CE3
- 0x20 enables CE4 (not present on ATJ2085)
- 0x28 enables CE5 (not present on ATJ2085)

So, sending a command "o 2 28", the CE5 line must go to an high logic level (+0.01 volts, because the CEx lines are active low)... and instead the line remains always at low logic level (+3.03 volts), as if the command does nothing on this pin... then the LCM remains always disabled :?

Assuming an electrical problem on this line (bad PCB wash) I've measured the electrical resistance between the VDD and the CS lines, and it's 1.55 megaohms: I don't think that this very high value of resistance can affect the CS line...

Lolita, I don't have understood a thing: the commands written above are for enable the CEx lines... but for disable them? Enabling one line automatically disable the others?

Re: FW 4 iPod Nano 3G clone
 

Inspecting the schematics and datasheets for the 7515, it seems that CE5 is the same pin as what would be GPO A3, so it is likely a multifunction pin. Try setting bit 3 of EE (GPO A port) to see if CE5 does enable. If it does, then the pin is not in CE mode but in GPO mode.

Good job finding the RESET and CD, that will make it much easier to get a working firmware on your device. Now if my guesses are correct, we only need to figure out how to get CE5 into CE mode.

Which CE gets activated when you write 28 to port 2? Only one can be active at a time, and if all the external ones are disabled then CE0 is enabled, which only selects the internal boot ROM.

hi lolita,
I have created new topic, but admin removed the topic... :(

what is my lcm?

Re: FW 4 iPod Nano 3G clone
 

Hi lolita, and good monday! :roll:
Nope... setting GPO A3 bit (i.e. "o ee 8") seems to not affect the CE5 pin... :evil:
Always assuming an electrical problem on CE5 line, with the help of the Samsung's NAND flash datasheet (page 4), I've traced the CE- pin and I've found that it's connected to the pin 43 (CE1) of the CPU, as described in the ACU7515 schematic (U2 chip at upper right, with CE2 line not used).
At this point, because "Only one can be active at a time", I've tried to select the CEx lines in order to show some variations on this pin:
It's very strange... it seems that the "o 2 xx" command does nothing on the CEx lines... :?:

In order to exclude any doubt about the proper functioning of the CE1 line I did another test: I've plugged the player into the PC (USB drive mode), then I've copied a big file into the flash memory, following the CE pin of the flash with the digital multimeter: the voltage was fluctuating (as a rapid enable/disable of the chip), returning to +3.03 volts (chip disabled) after the copy finished. So, the CE1 line seems to work correctly.

Can be that the command "o 2 xx" does not work because it need some "initialization" before?

Re: FW 4 iPod Nano 3G clone
 

Sorry, I am not familiar with ACU75xx hardware. Possibly some other ports need to be set to enable CE function.

You can try downloading the ACU75xx firmware on s1fw.com, disassemble a BREC from one, then look at address 3000 for the code which displays hourglass. It will set the ports to select appropriate CE for the display.

More information at http://wiki.s1mp3.org/

and for ak1025 you know this hardware?

Re: FW 4 iPod Nano 3G clone
 

AK1025 = ATJ2091

you know atj2091????
can you help me????

Re: FW 4 iPod Nano 3G clone
 

I have tried almost all ACU7515 firmwares on s1fw.com, and I've found that this firmware work with my player! :shock: 8)
Just a little issue: this is a firmware for a 220x176 px display, while my display has a 160x128 px resolution! :evil: :(

Flashing the player with this firmware shows the hourglass in the upper-right portion of the display, then some "fluctuating pixel dust" because the CPU tries to display an higher resolution, and the display can't... but it works! :wink:

After the flash I have dumped the firmware from the player, and this is the s1fwx's result:
I have read the BRECF285.BIN file, but I'm not an expert like you and I don't have understood which are the CEx commands...

Meanwhile, with the help of s1fwx, i have (unsuccessfully) tried to build a new firmware using the *.BIN files from this firmware and the FWIMAGE.FW file from your firmware, but the player loop on hourglass (translated: the firmware does not work...)

Lolita, can you take a look to it for me? :roll: :oops:

Re: FW 4 iPod Nano 3G clone
 

The BREC code in the working firmware you provided selects CE5 by the usual means. However, your mention of CE1 fluctuating when accessing the flash suggests that the appropriate CE is enabled *only* during read/write operation.

Select CE5 ("o 2 28" in s1giveio), then try reading anything from memory address 8000 or above (e.g. "r 8000") while monitoring CE5. It should pulse low and then go high very very quickly, once the read is complete.

However, getting an hourglass means the controller code in the BREC is compatible with your player, but the one in the firmware you provided is for a "big PCF8833-compatible" type LCM controller; as you may remember, the original GXBL177-xxxx firmware you found is for a different controller, the rarer HD66xxx. Maybe that one was mislabeled or GXBL177 is actually the backlight's part number, and GA177 is the actual display's part#. This confirms that your player has the "big PCF8833-compatible" type controller, probably LDS285,ST7669, or ST7732/35/73. Firmware for those are much easier to find.

Is the only issue with that firmware the incorrect screen size? I.e. controls, playing music, etc. works?

s1fwx cannot work with v9 devices. Use s1res v4.0 instead.

Re: FW 4 iPod Nano 3G clone
 

I've tried, but the pulse is too much quick to be seen with a digital multimeter, even reading more data ("r 8000 200")...
I will try with an oscilloscope... if I find it :)
However, I've traced the CE line during the player's boot, and during the "pixel dust" it is fluctuating, so it seems that the CE5 line works correctly.
I've searched in s1fw.com for ST7732 firmware, but the only that I can download (it seems that Italians providers have some problems with asian fonts in URLs...) does not work because is a 3.xx.xx version...
I've found that:

- Internal flash memory works
- Additional MicroSD flash memory works (no SDHC support)
- Keys works
- MP3 playing works (the display shows - distorted - folder, track name and volume icon)

I don't have tested the FM radio (but this is a minor problem). :roll:
I don't understand how merge two firmwares with this software, it seems to be used only for resource edit... and its use with the "half working" firmware for a simple edit (changing the default language) has damaged it (hourglass loop). :?

Re: FW 4 iPod Nano 3G clone
 

http://www.s1fw.com/Actions-ACU75XX/...Y-1-8A-V1.html

This firmware is also for an LCM with the same controller type on CE5, and is also 128x160. The only problem is the connectivity is wrong -- the backlight is on E4 (you have it on A2), reset is A0 (same as yours), command/data A1 (yours is on B2). If you cannot find a 128x160 firmware with same LCM and connectivity, then we can edit the drivers in this one and change the connectivity so it matches your player, and probably will have to transplant your keyboard driver into here, since this one has a different keyboard connectivity as well.

The following LCM will have a compatible controller, try the firmware for these:

CGS172STBY-1V1
TGG000177NP02-02
TGG000177NP02-03
TGG000177NS02-03
TGG000177YP02-01
TGS177SH00
TGS177SH-ST
TGS177STWT-3V1
TGS177STWT-4V1
TGS177STWT-5V2
XY-1.8A
GA177

what is lcm for fgd177slw screen?

If you mean the controller, FGD177SLW has a Samsung S6B* or compatible, 132x162. The LCM itself appears to be equivalent to CM60002.

However it seems to be very rare, as the only firmware I could find with this LCM, and the one from which I got the controller type, is this:

http://bbs.mydigit.cn/read.php?tid=89348

The firmware itself only uses 128x160 though.