Efforts to develop firmware for Transpeed 8K Ultra HD MX10 RK3528 BOX

[pessimism]

Purchase Link

 

This should be a fun one.

 

Bought the 4GB/128GB variant.

AP6330 Wifi

 

Stock software is a really, really bad Android TV port.  Looks like a Google Pixel 5 image that has had RK3528 support hacked into it.  Some parts report the device as Pixel 5, others MX10. 

 

RKdumper wouldn't work. 

 

Wifi is hardcoded to China region in the kernel commandline, so wifi doesn't work in North America.  Boots into a setup wizard that can't be closed, and forces an internet connection.  Since wifi is broken out of the box, had to use ethernet to get past the setup wizard.

 

Transpeed does not have a website or offer stock firmware.  The vendor I purchased it from refused to supply a stock image.

 

Image was pre-rooted, so used ethernet+adb to adb pull the entire flash chip.  Unfortunately the Android partitions appear to be encrypted and only show gibberish directory names.  Was able to use extract-dtb on one of the raw binary partitions to get the stock DTB, which is all I cared about anyway.  It is pretty close to an existing one in Armbian (rk3528-demo1-lp4-v10)

 

Located and soldered the tiny UART pads without destroying the box.

 

Tried my different garbage clone USB UART adapters to find one that could handle RockChip 1.5 megabit over serial, fake CH340G did the job, fake CP2102 would not.  May the best fake product win!

 

Followed @Hqnicolas guidance from this thread and used the hinlink-h28k trunk release with 5.10 kernel as a base, and changed the dtb referenced in armbianenv to the stock android DTB extracted from the device, and of course it would not boot.  Lots of errors, kernel panics on UART, errors from SD reader.

 

Changed to Kernel 6.1 base hinlink-h28k image, and tried rk3528-demo1-lp4-v10.dtb, that one almost boots but doesn't see the SD card so can't mount root filesystem.  

 

Began DTB surgery, added pieces of the SD card initialization from the factory DTB to the rk3528-demo1-lp4-v10.dtb, got it to boot.  Black USB port dead, Blue USB port working.  No HDMI output on console (only UART)  but does load XFCE when the GUI autostarts.

 

Will keep slicing and dicing DTB to gain functions.  Will need to drop in proper NVRAM file to get AP6330 working as I've had to do on other boards.

 

	//rk3528-demo1-lp4-v10.dts  SD Not Detected
	mmc@ffc30000 {
		compatible = "rockchip,rk3528-dw-mshc\0rockchip,rk3288-dw-mshc";
		reg = <0x00 0xffc30000 0x00 0x4000>;
		interrupts = <0x00 0x85 0x04>;
		max-frequency = <0x8f0d180>;
		clocks = <0x02 0x198 0x02 0x197 0x7a 0x01 0x7a 0x02>;
		clock-names = "biu\0ciu\0ciu-drive\0ciu-sample";
		fifo-depth = <0x100>;
		resets = <0x02 0x2a9>;
		reset-names = "reset";
		rockchip,use-v2-tuning;
		status = "disabled";
		phandle = <0x10e>;
	};

//Factory DTB - SD reader stuck Busy, can't select voltage etc.
	mmc@ffc30000 {
		compatible = "rockchip,rk3528-dw-mshc\0rockchip,rk3288-dw-mshc";
		reg = <0x00 0xffc30000 0x00 0x4000>;
		interrupts = <0x00 0x85 0x04>;
		max-frequency = <0x8f0d180>;
		clocks = <0x02 0x198 0x02 0x197 0x68 0x01 0x68 0x02>;
		clock-names = "biu\0ciu\0ciu-drive\0ciu-sample";
		fifo-depth = <0x100>;
		resets = <0x02 0x2a9>;
		reset-names = "reset";
		rockchip,use-v2-tuning;
        //status = "disabled"
		status = "okay";
		bus-width = <0x04>;
		cap-mmc-highspeed;
		cap-sd-highspeed;
		disable-wp;
		pinctrl-names = "default";
		pinctrl-0 = <0x6d 0x6e 0x6f 0x70>;
		rockchip,default-sample-phase = <0x5a>;
		supports-sd;
		sd-uhs-sdr12;
		sd-uhs-sdr25;
		sd-uhs-sdr50;
		sd-uhs-sdr104;
		phandle = <0xff>;
	};

//Combo that works enough to boot
	mmc@ffc30000 {
		compatible = "rockchip,rk3528-dw-mshc\0rockchip,rk3288-dw-mshc";
		reg = <0x00 0xffc30000 0x00 0x4000>;
		interrupts = <0x00 0x85 0x04>;
		max-frequency = <0x8f0d180>;
		//clocks = <0x02 0x198 0x02 0x197 0x7a 0x01 0x7a 0x02>;
		clocks = <0x02 0x198 0x02 0x197 0x68 0x01 0x68 0x02>;
		clock-names = "biu\0ciu\0ciu-drive\0ciu-sample";
		fifo-depth = <0x100>;
		resets = <0x02 0x2a9>;
		reset-names = "reset";
		rockchip,use-v2-tuning;
		//status = "disabled";
		//from stock dtb
		status = "okay";
		bus-width = <0x04>;
		//cap-mmc-highspeed;
		//cap-sd-highspeed;
		disable-wp;
		pinctrl-names = "default";
		pinctrl-0 = <0x6d 0x6e 0x6f 0x70>;
		//rockchip,default-sample-phase = <0x5a>;
		supports-sd;
		//sd-uhs-sdr12;
		//sd-uhs-sdr25;
		//sd-uhs-sdr50;
		//sd-uhs-sdr104;
		//end from stock dtb
		phandle = <0x10e>;
	};

 

rk3528-transpeed-8k-ultra-hd-mx10.dts

[pessimism]

wifi operational with:

 

ln -sf /lib/firmware/brcm/brcmfmac4330.bin /lib/firmware/brcm/brcmfmac4330-sdio.rockchip,rk3528-demo1-lp4-v10.bin 
ln -sf /lib/firmware/brcm/brcmfmac-ap6330-sdio.txt /lib/firmware/brcm/brcmfmac4330-sdio.rockchip,rk3528-demo1-lp4-v10.txt

and a reboot, then nmtui to set up a connection

[Hqnicolas]

Nice!
 

18 hours ago, pessimism said:

that one almost boots but doesn't see the SD card so can't mount root filesystem.  

Enable SDHCI + emmc1 + emmc2 + emmc3
on DTS and recompile

 

  

18 hours ago, pessimism said:

Black USB port dead,

 
Check if usb*_dphy it's OTG or HOST on DTS
 

Edited May 23 by Hqnicolas

[Pico]

Hi Pessimism,

I have  this box ( purchased from same vendor) it worked well for me,.....since I've mistakenly deleted the build.prop file in root/system. Would you mind to send me the file?

Tks for your help.

Regards Pietro

[Pico]

Olà Farlei,

Thanks for your prompt reply. I do not need the complete archive .If you have the TV box , then you can copy the bulid.prop file( it's a text file) from root/system with ES explorer or any other file management apk.

 

Thanks again

[pessimism]

Updated wireless enablement, use ap6330 files for both firmware and nvram, I goofed and didn't see it before:

mv ./brcmfmac4330-sdio.bin ./brcmfmac4330-sdio.bin.org
ln -sf ./brcmfmac-ap6330-sdio.bin brcmfmac4330-sdio.bin
ln -sf ./brcmfmac-ap6330-sdio.bin brcmfmac4330-sdio.rockchip,rk3528-demo1-lp4-v10.bin
ln -sf ./brcmfmac-ap6330-sdio.txt brcmfmac4330-sdio.rockchip,rk3528-demo1-lp4-v10.txt

 

Performance is still quite slow.  May be more DTB work needed for it.  Though it is only an SDIO connected single-stream, single-band 2.4/5.8 wireless N adapter with a top speed of 72 megabit, so we can't be asking for miracles here.  The internal antenna is also just a tiny piece of stamped steel soldered to the PCB.

 

Also edit the NVRAM file (brcmfmac-ap6330-sdio.txt) and change ccode=ALL to your country code

Edited May 30 by pessimism

[Hqnicolas]

1 hour ago, pessimism said:

single-band 2.4/5.8 wireless N adapter with a top speed of 72 megabit

I think this is the top performance.
you can swap to android and benchmark VPU, GPU, WIFI, LAN, CPU.
and bring this tests to the forum.

after that. you can compare if you reach 100% of performance

[pessimism]

I think you're right.  I can't easily test using the factory image as its wifi was hardcoded to China region in the kernel commandline so the channels don't work in north america, i had to string a 50 foot ethernet cable just to sign into the thing

 

hilarious they put 8K on the case of this thing, I doubt the wifi would stream 720P stably let alone 8K

 

I think the wifi component may be used and salvaged, the RF shielding over it is discolored and has dents in it, like it was heated and pulled off another device

Edited May 30 by pessimism

[alencar]

Got this device to use as a media player, it turns out that it's awful at it, so I'll try to repurpose it.

Got 2 Mbps max over wireless on mine.

Anyways, I extracted these files using root adb shell.

rk-kernel.dts build.prop config