Reddmango Angora VX435

Device Images

• Front of device
• Back of device
• Side of device
• Top of device
• Battery
• Remote Control
• USB-OTG Adapter

Hardware

• Media Processing Unit Sigma Designs EM8511S-LF REALmagic
• Memory: 1x 128MB Winbond W9812G2GH-6 SDRAM chip
• Memory: 1x 64MB Winbond W9864G2GH-6 SDRAM chip
• Memory: 1x 32Mbit (4MB) Winbond W19B320ABT7H Flash Chip
• USB ALI M5637 USB-OTG Controller
• Flash SST 39VF010 70-4C-WHE Multi Purpose Flash
• Audio Decoder Wolfson WM8731LS Codec
• Shift Register Philips 74HC165D 8Bit Shift Register
• Micro Controller Philips P89LPC935F 8Bit Micro Controller
• LCD Samsung LTV350QV-F04 LCD Schematics
• Hard Disk Hitachi HTS421212H9AT00 4200RPM PATA 2.5" HDD

Board images

Aigo e235

• Front
• Back

Angora vx425

• Front
• Back
• Serial Connector < Not sure, but almost certain

Firmware

• The firmware for the Angora was never updated, however, the firmware for the Aigo E235 was. There are two firmware versions
  • English (No working sound in music and video everything else works)
  • Chinese (Everything works including sound)

Firmware File Format

The Firmware Update file contains everything uploaded to flash (that's why it is exactly 4MB), it seems to consist of several images. Images found so far:

• ROMFS: Starting at 0x40000. Contains ROMFS.
  This is a ROMFS used by Linux.
  Mount it from the binary yourself by doing:

  losetup -o 262144 /dev/loop1 FILE
  mount -t romfs /dev/loop1 /mnt/XXX

  • linux.bin.gz: Starting at 0x2d5250. Contains linux.bin.
  • khwl.o: Starting at 0x277770. Contains khwl.o.
    This contains a lot of useful references to the hardware.
    It seems to me this code is all part of Sigma's SDK.

Tree

.
|-- bin
|   -- init
|-- cdrom
|-- dev
|-- etc
|   -- sashrc
|-- fonts
|   -- chinese
|       |-- asc12
|       |-- asc16
|       |-- bmf12
|       -- bmf16
|-- hd
|-- img
|   |-- ebook
|   |   |-- ebk1.jpg
|   |   |-- ebk2.jpg
|   |   -- ebk3.jpg
|   |-- game_pic
|   |   |-- bar.gif
|   |   |-- bean.gif
|   |   |-- bigmap.txt
|   |   |-- bigpic.gst
|   |   |-- boxman
|   |   |   |-- background.jpg
|   |   |   |-- ball.gif
|   |   |   |-- box.gif
|   |   |   |-- box_des.gif
|   |   |   |-- in_wall.gif
|   |   |   |-- man.gif
|   |   |   |-- man_ball.gif
|   |   |   |-- map.txt
|   |   |   -- wall.gif
|   |   |-- boxman_ico.gif
|   |   |-- english_bk.jpg
|   |   |-- sb.gif
|   |   |-- sh_d.gif
|   |   |-- sh_l.gif
|   |   |-- sh_r.gif
|   |   |-- sh_u.gif
|   |   |-- snake.jpg
|   |   |-- snake_ico.gif
|   |   |-- st_d.gif
|   |   |-- st_l.gif
|   |   |-- st_r.gif
|   |   |-- st_u.gif
|   |   -- tank_ico.gif
|   |-- ico
|   |   |-- audio_ico.gif
|   |   |-- bin_ico.gif
|   |   |-- default_ico.gif
|   |   |-- folder_ico.gif
|   |   |-- pic_ico.gif
|   |   |-- txt_ico.gif
|   |   -- vedio_ico.gif
|   |-- keyboard
|   |   |-- hand.gif
|   |   |-- keyctrl.gif
|   |   |-- keynorm.gif
|   |   |-- keynum.gif
|   |   -- keyshft.gif
|   |-- music
|   |   |-- Thumbs.db
|   |   |-- album.gif
|   |   |-- all.gif
|   |   |-- artist.gif
|   |   |-- music_erase.jpg
|   |   |-- musictop.jpg
|   |   |-- musictop_CH.jpg
|   |   |-- pause.jpg
|   |   |-- play.jpg
|   |   |-- playbar.jpg
|   |   |-- playlist.gif
|   |   |-- repeat.jpg
|   |   |-- shuf.jpg
|   |   |-- single.jpg
|   |   -- title.gif
|   |-- nine_pic
|   |   |-- background.jpg.yuv.deflate
|   |   |-- browser_00.jpg.yuv.deflate
|   |   |-- browser_01.jpg.yuv.deflate
|   |   |-- browser_02.jpg.yuv.deflate
|   |   |-- browser_03.jpg.yuv.deflate
|   |   |-- ebook_00.jpg.yuv.deflate
|   |   |-- ebook_01.jpg.yuv.deflate
|   |   |-- ebook_02.jpg.yuv.deflate
|   |   |-- ebook_03.jpg.yuv.deflate
|   |   |-- game_00.jpg.yuv.deflate
|   |   |-- game_01.jpg.yuv.deflate
|   |   |-- game_02.jpg.yuv.deflate
|   |   |-- game_03.jpg.yuv.deflate
|   |   |-- music_00.jpg.yuv.deflate
|   |   |-- music_01.jpg.yuv.deflate
|   |   |-- music_02.jpg.yuv.deflate
|   |   |-- music_03.jpg.yuv.deflate
|   |   |-- nine_pic_config.ini
|   |   |-- photo_00.jpg.yuv.deflate
|   |   |-- photo_01.jpg.yuv.deflate
|   |   |-- photo_02.jpg.yuv.deflate
|   |   |-- photo_03.jpg.yuv.deflate
|   |   |-- recorder_00.jpg.yuv.deflate
|   |   |-- recorder_01.jpg.yuv.deflate
|   |   |-- recorder_02.jpg.yuv.deflate
|   |   |-- recorder_03.jpg.yuv.deflate
|   |   |-- setup_00.jpg.yuv.deflate
|   |   |-- setup_01.jpg.yuv.deflate
|   |   |-- setup_02.jpg.yuv.deflate
|   |   |-- setup_03.jpg.yuv.deflate
|   |   |-- title_browser_ch.jpg.yuv.deflate
|   |   |-- title_browser_en.jpg.yuv.deflate
|   |   |-- title_ebook_ch.jpg.yuv.deflate
|   |   |-- title_ebook_en.jpg.yuv.deflate
|   |   |-- title_game_ch.jpg.yuv.deflate
|   |   |-- title_game_en.jpg.yuv.deflate
|   |   |-- title_music_ch.jpg.yuv.deflate
|   |   |-- title_music_en.jpg.yuv.deflate
|   |   |-- title_photo_ch.jpg.yuv.deflate
|   |   |-- title_photo_en.jpg.yuv.deflate
|   |   |-- title_recorder_ch.jpg.yuv.deflate
|   |   |-- title_recorder_en.jpg.yuv.deflate
|   |   |-- title_setup_ch.jpg.yuv.deflate
|   |   |-- title_setup_en.jpg.yuv.deflate
|   |   |-- title_tv_recorder_ch.jpg.yuv.deflate
|   |   |-- title_tv_recorder_en.jpg.yuv.deflate
|   |   |-- title_usb.jpg.yuv.deflate
|   |   |-- title_video_ch.jpg.yuv.deflate
|   |   |-- title_video_en.jpg.yuv.deflate
|   |   |-- tv_recorder_00.jpg.yuv.deflate
|   |   |-- tv_recorder_01.jpg.yuv.deflate
|   |   |-- tv_recorder_02.jpg.yuv.deflate
|   |   |-- tv_recorder_03.jpg.yuv.deflate
|   |   |-- usb_00.jpg.yuv.deflate
|   |   |-- usb_01.jpg.yuv.deflate
|   |   |-- usb_02.jpg.yuv.deflate
|   |   |-- usb_03.jpg.yuv.deflate
|   |   |-- video_00.jpg.yuv.deflate
|   |   |-- video_01.jpg.yuv.deflate
|   |   |-- video_02.jpg.yuv.deflate
|   |   -- video_03.jpg.yuv.deflate
|   |-- photo
|   |   |-- jpeg_error.jpg
|   |   |-- photo_bk.jpg
|   |   |-- photo_bottom.gif
|   |   |-- photo_large_bk.jpg
|   |   |-- photo_small_bk.jpg
|   |   |-- photo_top.gif
|   |   |-- photo_top_CH.gif
|   |   -- wait.gif
|   |-- pmp_fun_pic
|   |   |-- bk.jpg
|   |   |-- cursor.gif
|   |   |-- enter_ico.gif
|   |   |-- exit_ico.gif
|   |   |-- finger.gif
|   |   |-- power0_ico.gif
|   |   |-- power1_ico.gif
|   |   |-- power2_ico.gif
|   |   |-- power3_ico.gif
|   |   |-- power4_ico.gif
|   |   |-- power5_ico.gif
|   |   |-- power_AC_ico.gif
|   |   |-- power_DC_ico.gif
|   |   |-- tool_cursor.gif
|   |   |-- tool_ico.gif
|   |   |-- vol_ico.gif
|   |   -- vol_mute_ico.gif
|   |-- recorder
|   |   |-- record_bk.jpg
|   |   |-- record_cursor.gif
|   |   |-- record_top.jpg
|   |   -- record_top_CH.jpg
|   |-- setup
|   |   |-- clock.gif
|   |   |-- default.gif
|   |   |-- display.gif
|   |   |-- lock.gif
|   |   |-- power.gif
|   |   |-- setup_ico.gif
|   |   |-- sound.gif
|   |   |-- system.gif
|   |   -- video_output.gif
|   |-- video_recorder
|   |   |-- TVR.gif
|   |   |-- TVR_small.jpg
|   |   |-- play.gif
|   |   |-- schedule.gif
|   |   |-- setup.gif
|   |   |-- video_recorder.jpg
|   |   -- video_recorder_CH.jpg
|   -- waiting.gif
|-- khwl.o
|-- language.txt
|-- linux.bin.gz
|-- logo.bmp
|-- minimod
|-- proc
-- sysconfig.ini

21 directories, 176 files

Contents of /etc/sashrc

This seems to be runned at startup (link)

#!/bin/sh
echo Welcome to the EM85xx prompt
#/minimod /khwl.o
#/minimod /irdrv.o
#dvdplay

minimod

The binary minimod is in the µClinux BFLT format.

Updating the firmware

• The firmware is updated by two methods:
  • Downloading the bin file, and renaming it to 'update.bin' loading it into the root directory of the hard disk of the device. Then, whilst on the device
    go into the menu system and navigate to 'System Update' and the device will update.
  • Downloading the bin file, storing it on the hard disk of the device. Then when on the device using the file navigator, navigate to the file and
    open it to start the update procedure, the device will do the rest

Bricked Firmware

• I completely misunderstood something that was discussed on IRC, and tried to corrupt the rom, I thought it was meant that I had to turn the device
  off mid-firmware upgrade, then see if the device had a fail-safe bootloader if the firmware didn't load as it should. this has turned out not
  to be the case, and now the device turns on, but all that happens is the disk starts spinning. so hopefully there's something
  I can do to get it working again

Other information

• The Aigo e235 and the VX435 are basically the same.
  Model differences:
  • The Aigo has a 40GB, 60GB, 80GB, 100GB, 120GB or 160GB HDD
  • The VX435 has a 40GB, 60GB, 80GB, 100GB or 120GB HDD
• Forum thread
• Similar target