The Flaming Yinlips

furan-yinlips

No, that’s not a Playstation Vita up there, it’s a “Yinlips YDPG18A” portable game system. [Ian] found that his Yinlips was lacking in the flash memory department, so he fired up his soldering iron. The Yinlips is based on an Allwinner Sunxi series processor, and uses a standard TSOP48 footprint flash. There is some standardization in flash pin out and packages, so [Ian] picked up the largest pin compatible chips he could find – a pair of 256 gigabit (32 gigabyte) chips from Micron. Desoldering the existing flash proved to be a bit of an adventure as the flash was glued down. [Ian] also didn’t have his hot air gun handy, making things even more interesting. Careful work with a razor blade broke the glue bond.

It turns out that the soldering was the easy part. All flash chips have geometry, die count, page size, block count, sector size, etc. The geometry is similar to the geometry in a hard drive. In fact, just like in modern hard drives, a system will read some basic information before accessing the full storage array. In the case of NAND flash, the processor can access the first page of memory, and query the flash for its part number. Once the part number is known, the geometry can be determined via a lookup table. [Ian] checked the NAND table on github, so he knew going in that his flash chips were not supported. Due to the complexities of booting Allwinner processors into Linux or Android, the table and the NAND driver that uses it exist in several places. The bootloader’s axf file, U-Boot, and several flash application binaries sent from the PC based LiveSuit flash app all required modification. Most of these files were packed into a single flash image. [Ian] used imgrepacker to unpack the image, then opened the hex files. The fact that he knew what the original flash parameter tables looked like was key. He searched for an existing Micron flash table entry, and replaced the parameters with those of his new chips.

With all the files modified, [Ian] re-packed his flash image and sent it over. The Yinlips rewarded his hard work by continually resetting in a bootloop. [Ian] wasn’t going to give up though. He wired into the boot console, and discovered that a CRC check failure on one of his modified files was causing the reset. He then disassembled binary issuing the reset. Changing the return value of the CRC to always pass fixed the issue. [Ian’s] now has a collagen infused Yinlips with 58GB of internal storage. Pretty good for a device that only started with 2GB.

11 thoughts on “The Flaming Yinlips

  1. “Due to the complexities of booting Allwinner processors into Linux or Android”

    Implying that booting Allwinner devices is in any way difficult…

    Still, nice hack! I’ve wanted to do this before myself on occasion, but didn’t have the balls.

  2. I have had my eye on that thing for a while. I wish I was smart enough to do that hack. Other than the clock speeds standard flash size is the deal breaker on that thing. Now if only Sony would make an official phat PSP/xperia they could shame this clone.

    Can’t argue that its an awesome hack though, good for him… I wonder if he’d sell it…

  3. Restecp!

    Having once gone through the agonies of creating a usable Livesuit image, I can appreciate what he’s doing. “All” I had to do was “just” package the partitions from a working tablet into a single Livesuit image, but that took a lot of experimenting, since the tools that were available seemed to come in different versions, and I didn’t really have much idea what I was doing.

    A neat trick I saw somewhere is reconfiguring the processor pinout so that an RS232 serial port is mapped to the SD card connector – a simple breakout board, and you’ve got a nice serial interface!

          1. No probs – while we’re at it, have an EBay search for “Micro SD extension cable” and that should throw up some cables that could be modified. One end is a dummy micro SD card, the other is a SD card slot.

Leave a Reply to ianhanschenCancel reply

Please be kind and respectful to help make the comments section excellent. (Comment Policy)

This site uses Akismet to reduce spam. Learn how your comment data is processed.