Samsung SA58xxx series

General information

The Samsung SA58450 and SA58700 series of SoC's are both based on a ARM 940T core with a DSP: CalmRISC16 and 24bit MAC(MAC2424)

Players using these CPUs:

SA58700 (codename "Blues")

This is a S5L8700A + 8Mbit Nor Flash memory

http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=SA58700

• SA58700X07
  • Meizu M6
  • iriver (E10, Clix, S10, T60)
• SA58700X08
  • Samsung YP-T9
• S5L8701B05
  • supposedly: iPod nano 2 (and Shuffle 2 ?)

SA58450 (no codename)

This is a S5L8450 + 8Mbit Nor + Audio Codec

• SA58450X01
  • iriver T10, H10jr
• SA58450X02
  • iriver T20, T30, N11(?), N12, U10

S5L8424

This is a CalmRISC16 core and a 24bit MAC(MAC2424) (without an ARM core, or anything such).

http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8424

Used by:

• Samsung Yepp U3

S5L840F (codename Waltz)

This is the ancestor of S5L8424, with eg. less SRAM (76k) and only USB 1.1 support.

• S5L840FX01
  • Perception Digital PD-205 / mymusix PD-205 / Nexx NF-250 see http://web.interware.hu/rudas/dbalatoni/pd205.html , for info about reverse engineering this player, and the chip datasheet

SA5841* (codename Orchestra)

Reverse engineering

Because not much information is available it might be a good idea to look at the assembly code of the various firmwares.

• iriver firmwares: http://nyaochi.sakura.ne.jp/iriverupdate/ use ifp_decode from IfpCryptanalysis to decrypt them.
• meizu firmwares: http://en.meizu.com/firmware.asp?myShow=goto&gotoBt=p
• samsung firmware: http://www.yepp.co.kr/support/support_file_down.jsp?pds_num=1658&seq_num=1

Links

• http://mp3.zol.com.cn/45/456745.html
• http://epa6.enet.com.cn/article/2006/1031/A20061031278111_4.shtml
• http://www.eetimes.com/news/semi/showArticle.jhtml?articleID=193000601
• http://www.eetimes.com/news/semi/showArticle.jhtml?articleID=193000601
• http://bbs.itime.cn/viewthread.php?tid=58796