|
|
I purchased an inexpensive mp3 player for when I was working and didn’t want my phone getting broken while listening to tunes. I was mildly annoyed that the text on the main menu was all squished together and did this odd scrolling thing. I looked to see if there was some way to modify it, I found some tools to do so, but they were not compiled. https://github.com/ilyakurdyukov/smartlink_flash I figured out how to get them working and managed to modify my main menu’s string table, and figured I’d document the process if anyone else wanted to try modding this thing.
|
Setup Install LibUSB
Download site: https://zadig.akeo.ie/
Boot in Bootloader mode- On YP3 Turn off MP3, then hold Vol Button while connecting to PC
Connect Device: Plug in your USB device and turn it on (if applicable).
Run Zadig: Start the Zadig application.
Select Device: In Zadig, go to Options and check List All Devices, then select your device from the dropdown menu.
Install Driver: Choose WinUSB as the target driver and click Replace Driver (or Install Driver)
Device will have one of the following ID’s
SL6801
Card reader: id = 301a:2801, inquiry = SMTLINK CARDREADER
1.00, serial = 20201111000001
Bootloader mode: id = 301a:2800, inquiry = SMTLINK DEVICE 2.00, serial =
20201111000001
SL6806
Card reader: id = 301a:2800, inquiry = SSTLINK DDVICE 2.02
(with typos), serial = 20221008000002
Bootloader mode: id = 301a:2800, inquiry = SMTLINK DEVICE 2.00, serial =
20220320000001
Click yes to the popup.
Now you can backup firmware:
Git Page: https://github.com/ilyakurdyukov/smartlink_flash
Open a command prompt in directory with smtlink_dump and fwhelper
smtlink_dump init flash_id read_flash 0 2M dump.bin
Runing
fwhelper dump.bin scan
will provide useful information like the partition sections and sizes. also the address of partition table address you will need to update the check sums here if you change anything
Runing
fwhelper dump.bin dump2fw update.up
Will turn the firmware dump into a file that can be flashed with the official flash tool
There is no confirmation unless there is a problem.
To use the official flash tool you have to uninstall WinUSB driver
Open Device Manager
Under Universal Serial Bus
devices (or possibly libusbk devices/libusb-win32 devices if
you didn't pick WinUSB as your driver), right click on your device. In this
example, USB 2.0 Device is our device.
Select Uninstall and on the
dialog box that appears, make sure to check the box that says "Delete
the driver software for this device" then click OK.
Flash Firmware:
Install
RUN Program ---- Click Option -> Develp Settings
Click following Settins
Click Save
Click Burn Tack and select .up file
Click open
Turn off MP3 and hold down boot loader key while connecting to PC
MP3 will reboot when done.
Download Zip with all files:
The Aimoonsa B27 uses same chip, but the buttons are different so it’s impossible to navigate the menus if you cross flash to YP3.
Make Sure to backup firmware before uploading any other firmware.
Notes: for Firmware Mods
|
Original |
Mod |
|
|
|
The MP3 players chip uses an ArmV7-M 32Bit with Little Indian encoding
The check sums are in the partition table
Run “fphelper flash.bin scan” for partition table address
If check sums are off “fwhelper flash.bin dump2fw update.up” will tell you what they should be
The check sum is little Indian in the hex dump so it’s the reverse of what fwhelper says
The menus use the open source library LVLG if that helps
All I’ve been able to do is change the text strings. The alarm ringtone is an mp3 in the tone partition, that could be swapped out, but any other mods require Arm disassembly

Comments
Post a Comment