Sony NW-A1000/1200/3000 Port Index

---

Introduction

This series of DAPs shares the same microprocessor as the iAudio X5/M5 series players. The firmware appears to be encrypted as there are no visible strings after the initial "NWA3000" and IDA-Pro doesn't seem to know what to do with it.

---

Port Status

There is no code written for this device. Things that need to be done are: find a way to recover from a bad flash and understanding the firmware files. Perhaps someone with a A1000/1200 could try booting with the drive removed to see what happens (the A3000 requires de-soldering 4 pins just to get at the HDD). I found a report that said holding the volume-up button while connecting to a PC would execute a recovery mode but haven't been able to confirm this.

---

USB Modes

When the unit is plugged in from the Off state, the bootloader skips the "Walkman" logo and tries to make a USB connection. It could be that this is a USB boot mode that could be used to recover from a bad firmware flash.

---

Firmware Update

Sony NW-A1000 Firmware v2.01
Sony NW-A1000 Firmware v3.00
Sony NW-A1200 Firmware v2.01
Sony NW-A1200 Firmware v3.00
Sony NW-A3000 Firmware v2.01
Sony NW-A3000 Firmware v3.00

Firmware updates are performed by placing a NW_AX000.bin file in the root directory and restarting the player. For the v3 update, an extra file called NW_A3000.UPG is placed in the root as well. You can extract the files from the installer executables with common archive programs (7zip, WinRAR, etc).

---

Firmware Format

---

Test Mode

There is a production test mode built into the firmware (bootloader?) whose usefulness at this point is unclear. It can be accessed through the following method:

1. Turn the power on.
2. Long-press the Hold button to set the hold on.
3. While holding the Link button, press the buttons in the following order: Up → Down → Option → Up → Down → Right → Left → Right → Left → Left → Play/Pause → Option
4. Long-press the Hold button to set the hold off to enter test mode.

To exit, hold the Back button for until the unit shuts off.

---

Docs

NW-A1000 service manual
NW-A3000 service manual

Both of these require registration. They contain tons of details regarding the components.

---

Insides

Item	A3000	A1000/1200	Docs
Microprocessor	SCF5250		ColdFire
DAC	BB TI 1772 5BM 188		http://www.digchip.com/datasheets/parts/datasheet/477/PCM1772RGAR.php?
Amp	AN17020A?-VB		http://www.datasheetcatalog.com/datasheets_pdf/A/N/1/7/AN17020A.shtml
32Mbit Flash	PL032J60BFI12		http://www.amd.com/us-en/assets/content_type/white_papers_and_tech_docs/S29PL127_129_064_032J_00_A6.pdf
SDRAM	K4M281633H-BG75	EDS1216AABH?-75-E/KM	http://www.alldatasheet.com/datasheet-pdf/pdf/118959/ELPIDA/EDS1216AABH.html
RTC	R2061K01?-E2		Datasheet
Power Control	Sony 55Y03 4802
Regulator	XC6219B302DR?	XC6219B282DR?
Acceleration sensor	HAAM-313B		http://www.hdk.co.jp/english/topics_e/tpc042_e.htm
TI Dual Analog Switch	SN74LVC2G66DCUR? x 2
TI (De)Multiplexer	TS5A3357DCUR?		http://www.alldatasheet.com/datasheet-pdf/pdf/111839/TI/TS5A3357DCUR.html
CMOS Schmitt Inverter	TC7SH14FU? (T5RSOYJF?) x 2		http://www.datasheetcatalog.com/datasheets_pdf/T/C/7/S/TC7SH14FU.shtml
Complex Programmable Logic Device	LC4128ZC-75MN132C-U5	LC4128ZC?-75MN132C
Boost Converter	TPS61045DRBR?
Boost Conveter	TPS61041DBVR?
?	S1R72003BOOA100
?	CXR710160-215GH
Drive	MK2008GAL? HDD	Unknown Microdrive

---

Useful Links

Forum thread

---