myMPX
Advertisement


Go Back MyMPx.org > MyMPx.org Forum > General Discussion

Modifying Series 11 (AK2025/ATJ2111/3/5) Device Research Thread
Reply
Post New Thread
 
Thread Tools
  #1  
Old 20th Jun 2009, 10:35 pm
lolita lolita is offline
Senior Member
Valued Member
 
Join Date: Aug 2007
Posts: 1,240
Default Modifying Series 11 (AK2025/ATJ2111/3/5) Device Research Thread


In this thead we will attempt to modify the existing s1mp3 tools to work with these new Series 11 devices with the AK2025/ATJ2111/3/5 controllers.

These new designs have a different USB and NAND flash controller, but the same ADFU protocol is used. Existing tools will be able to set these devices to ADFU mode but proceed no further.

The first thing we'll need to understand these devices more is to get a dump of the BROM. This would originally be done with s1giveio, however the existing version doesn't work for the reasons explained above. Here is a new, untested version of s1giveio which may work with these new devices:

Download s1giveio for v11 ALPHA here

THIS IS ONLY FOR THOSE WISHING TO TRY THE PROCEDURES BELOW ON A V11 DEVICE WITH THE AK2025 OR ATJ2111/3/5 CONTROLLER. IT WILL NOT WORK ON OTHER VERSIONS AND MAY CAUSE DAMAGE. THE AUTHOR DISCLAIMS ALL RESPONSIBILITY FOR THE USE OF THIS TOOL.

The commands to get a dump of the BROM in s1giveio are as follows:
Code:
o 1 0
o 2 0
t 8000 8000
q
This will generate a file named dump8000.txt. Post that file here as an attachment if you want to help out.
__________________
I am no longer affiliated with Actions Semiconductor Co. Ltd. Do not ask me for firmware.
Reply With Quote
  #2  
Old 24th Jun 2009, 1:24 pm
uncleshred uncleshred is offline
New Member
 
Join Date: Jun 2009
Posts: 6
Default

That worked well.
This is the dump8000.txt file.
I thank you for the help.
Attached Files
File Type: zip dump8000.zip (21.1 KB, 155 views)
Reply With Quote
  #3  
Old 25th Jun 2009, 2:06 am
lolita lolita is offline
Senior Member
Valued Member
 
Join Date: Aug 2007
Posts: 1,240
Default

Thanks for your contribution. It would be helpful to post what the actual chip is, since there may be several different ones in the 11 series. Getting several other BROM dumps from other s11 players will help as well.

This indicates that my hypothesis about where the USB controller registers have moved is correct, and the USB still functions the same otherwise. We will now analyze the BROM to determine how the NAND controller functions.
__________________
I am no longer affiliated with Actions Semiconductor Co. Ltd. Do not ask me for firmware.
Reply With Quote
  #4  
Old 25th Jun 2009, 6:35 am
uncleshred uncleshred is offline
New Member
 
Join Date: Jun 2009
Posts: 6
Default

I am not certain which chip it is that you need identified. I posted pictures of the circuit board here.


Let me know if there is anything else you need.
Reply With Quote
  #5  
Old 25th Jun 2009, 8:01 am
speser speser is offline
New Member
 
Join Date: Jun 2009
Posts: 4
Default

thanks for your help with this, I have attached my dump file.

Now my question is what can I do with it :o) I guess I will need to wait before I could use the s1res with it. Thank you for your help with all this so far though, it is always great to have people like you helping hte little guys out. I used to do Assembly Programming a long time ago but it is all starting to look like greek to me.
Attached Files
File Type: zip dump.zip (22.4 KB, 92 views)

Last edited by speser; 25th Jun 2009 at 8:22 am.
Reply With Quote
  #6  
Old 25th Jun 2009, 5:51 pm
speser speser is offline
New Member
 
Join Date: Jun 2009
Posts: 4
Default

I was thinking, if the Utility updater (4.21) can access the player, can you uncode it or the dlls to to find out more about how it all works?
Reply With Quote
  #7  
Old 26th Jun 2009, 1:37 am
lolita lolita is offline
Senior Member
Valued Member
 
Join Date: Aug 2007
Posts: 1,240
Default

Quote:
Originally Posted by uncleshred View Post
I am not certain which chip it is that you need identified. I posted pictures of the circuit board here.
The square one.

Quote:
Now my question is what can I do with it ) I guess I will need to wait before I could use the s1res with it. Thank you for your help with all this so far though, it is always great to have people like you helping hte little guys out. I used to do Assembly Programming a long time ago but it is all starting to look like greek to me.
It's a hexdump, so we convert it back to binary and then use a disassembler to get readable code. The CPU is Z80-compatible. For more information on the overall architecture etc., read the articles on wiki.s1mp3.org.

We hope to start analyzing the BROMs at the beginning of next week. Depending on the changes that have been made, the time until we can get the existing tools to work with these devices may vary, so have patience.
__________________
I am no longer affiliated with Actions Semiconductor Co. Ltd. Do not ask me for firmware.
Reply With Quote
Sponsored Links
  #8  
Old 26th Jun 2009, 10:28 am
vicnaum2 vicnaum2 is offline
New Member
 
Join Date: Jun 2009
Posts: 6
Default

Great! It worked!

Here's my dump. The info about the player is inside.
Attached Files
File Type: zip ak2025.zip (21.8 KB, 225 views)
Reply With Quote
  #9  
Old 28th Jun 2009, 10:17 pm
mdjava mdjava is offline
New Member
 
Join Date: Jun 2009
Posts: 3
Default Here's mine.

Here is my dump text file:

I have an ipod Nano 4th Gen clone, represented as 8gb. I can't tell if it has 4 or 2 GB, it seems to act up no matter what I do.

By the way, what's the safest way to open up these units? I don't see any place where there are screws to loosen.

Thanks for working on this problem.
Attached Files
File Type: rar dump8000.rar (18.6 KB, 51 views)
Reply With Quote
  #10  
Old 29th Jun 2009, 6:56 am
uncleshred uncleshred is offline
New Member
 
Join Date: Jun 2009
Posts: 6
Default

Quote:
By the way, what's the safest way to open up these units? I don't see any place where there are screws to loosen.
Mine has two small screws in the bottom. Pull out the bottom end and then push the guts out the top. The display cover may have to be peeled off first, can't quit remember. It is just stuck on with sticky adhesive.
Reply With Quote
Reply

Tags
ak2025, atj2111, atj2113, atj2115, series 11

Sponsored Links

Thread Tools


Similar Threads
Thread Thread Starter Forum Replies Last Post
Where is the s1clone thread? SayNoMore Support and How To 1 9th Jul 2007 4:42 pm
Modifying player with 9.1.50 FW? I_SAY Mods and Themes 14 6th Jul 2007 7:39 am
modifying firmware xeongx Mods and Themes 13 14th Dec 2006 9:48 am
modifying my original FW raz Support and How To 2 4th Sep 2006 7:11 pm
The noob thread Lorne Support and How To 8 4th Sep 2006 7:00 am


All times are GMT -7. The time now is 4:53 am.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Back to Top

Designed by indiqo.media