Iriver T60 Port

Introduction

The iriver T60 is a flash-based player powered by AAA batteries.

Hardware

There are take-apart pictures on Chinese websites, which are mostly, if not all, done by dunefox.

• Blog post of T60 internals by dunefox: http://dunefox.blogchina.com/dunefox/6308181.html
  • PConline forum (mirror): http://itbbs.pconline.com.cn/topic.jsp?tid=7172356
  • iTime forum (mirror): http://bbs.itime.cn/viewthread.php?tid=58796
• Blog post of comparison on T50 and T60 by dunefox: http://dunefox.blogchina.com/dunefox/6418135.html
  • Sina article (mirror): http://tech.sina.com.cn/digi/mp3/2007-08-17/15491683638.shtml

Component	Chip	Notes
CPU	Samsung SA58700X07	With integrated 8 Mbit NOR Flash
RAM	???	No RAM chip seen on board
Flash	Samsung MLC
Codec	Wolfson WM8731/L	Not sure whether it's a WM8731 or WM8731L?
FM	???	There is a chip near the headphone jack, but the markings are unreadable
RTC	Epson E8564
LCD	??? 128x64	1 inch CSTN LCD with 65K colours

Firmware

Firmware file format

The firmware is encrypted and we can encrypt or decrypt it with irde. After decryption, it is very similar to the Meizu firmware, with the following sections:

The firmware is not protected by a checksum -- this has been verified by changing a string in the firmware image.

Firmware upgrade

Firmware upgrade is normally done by copying the encrypted firmware to the root of the player. After the player is disconnected, it will begin the firmware update process. If the battery does not have enough power for the whole firmware upgrade process, it will stop in the middle and the firmware upgrade will be cancelled.

Firmware recovery

Since the T60 is similar to the Meizu players, there may be a DFU mode available. However, there is currently no known way to activate this mode, if it exists at all.

Storage

Part of the flash is exported through the UMS interface as a USB mass storage device with 512-byte sectors. The OF doesn't divide it into partitions and instead just formats the whole exported area with FAT32.