MeizuM6Port < Main

Downloads

releases

current build

extras

Documentation

manual

wiki

index

Support

mailing lists

IRC

forums

Tracker

bugs

patches

requests

Introduction
Hardware
Port Status
Meizu M6 Pictures
Forums
Firmware analysis
- resource.bin
- M6.EBN
Firmware Upgrade
Recovery mode
Links

Introduction

This is a port to a series of flash based player by Meizu. The models are the "Mini Player" M6T1, M6TP, M6SP, M6SL and the "Music Card" M3.

Hardware

Type	Chip	M6 T1/TP	M6 SP	M6 SL	M3
CPU	Samsung SA58700	X	X	X	X
SDRAM	Samsung K4M28163PH (16MB)	X	X	X	X
Flash Memory	Samsung/Hynix SLC Type	X
Flash Memory	Samsung/Hynix MLC Type		X	X	X
Audio Codec	Philips UDA1380HN	X	X		X
Audio Codec	Wolfson WM8987			X
FM Radio	Sanyo LV24000	X	X
FM Radio	Philips TEA5760			X	X
RTC	Seiko Instruments S35390A	?	X	?	?
Sensor	QUANTUM QT411	X	X
Sensor	QUANTUM QT1106			X	X
Power Management	Linear Technology LTC3455	X	X	X	X
TFT Screen	Toshiba ?? 240x320	X
	Samsung ?? 240x320		X	X
	?? 176x132				X

The Samsung TFT seems to use the Samsung S6D0129/139 LCD-driver.

Port Status

The port is in a very early stage. These are the basic tasks which need to be done (not necessary in this order).

Task	Done	Who	Comment
gather info about the hardware	90%	kgb2008	mostly done, see MeizuReverseEngineering
add meizu skeleton to rockbox	90%	markun
compile the sim	70%	markun	no button mappings for plugins yet
button mappings for plugins	0%
write and run some test code	0%
write a DFU tool for linux	0%
implement the drivers		anyone	The drivers are specified below
compile the bootloader	0%
compile rockbox	0%
implement anything for which we used stubs	0%

The following rockbox drivers need to be implemented for the Meizu series:

Driver	Done	Who	Comment
LCD	0%
Backlight	0%
Buttons	?	A-4
ADC	0%	A-4
NAND	0%
USB	0%	gevaerts?
FM radio	50%	markun	both LV24000 and TEA5760UK
RTC	50%	A-4	both internal and external RTC

Meizu M6 Pictures

Forums

Firmware analysis

The firmware upgrade consists of two files: resource.bin and M6.EBN

resource.bin

This file is full of big-endian UTF-16 strings (strings -eb resource.bin). It probably contains other things like graphics.

M6.EBN

This file starts with some big-endian ARM code (arm-elf-objdump -b binary -m armv4 -EB -D M6.EBN). After 8KB there is a rar archive marker ("Rar!"). The rar file following this contains the file "Source/Blues_Dual_Lib_Data/SDRAM_SAMSUNG_DUAL/SDRAM_image.bin", which is a 1.3MB file with big-endian ARM code.

SDRAM_image.bin contains: "S5L8700 uCOSII with DOkdo FS", which seems to be μC/OS-II

Firmware Upgrade

Warning: After the update the player will format itself so save your data first.

Hold "play" for 3 seconds to power on.
Connect to the computer with the USB cable
The computer will identify the player automatically as a removable disk
Download the firmware upgrade from http://en.meizu.com/
Decompress the downloaded file
Copy "M6.EBN" and "resource.bin" to the root folder of the player
Disconnect the player from the computer
Hold "play" for 3 seconds to power off
Hold "play" for 3 seconds to power on again
The screen will show: "Upgrading Software, Please wait..." and after a while the player will shut down automatically
Hold "play" for 3 seconds to power on. The player should now work again normally with the new firmware.

If the screen shows: "No Resource! Please Upgrade Resource Again!"

Connect to the computer again and copy "resource.bin" to the root of the player
Disconnect the player via safe disconnection
Hold "play" for 3 seconds to power off, then power on again and now it should work again

Recovery mode

Meizu has implemented the DFU protocol to recover from a bad firmware flash.

They use Samsung's DFU Tools for this, but there is also an open source tool called DFU-Util for the OpenMoko^? project (although it hasn't been confirmend that it works with the Meizu players)

Here's the full DFU spec

To enter the recovery mode hold down POWER and M and connect the player over USB.