New video attachment files will be processed automatically for better playback

Anyone reverse-engineered the Sunplus 1506/1507 bootloader or register map?

Previous topicNext topic
FrenchPythonLover
Junior Member
Junior Member
Posts: 2
Joined: 02 Aug 2026, 8:14 pm

Anyone reverse-engineered the Sunplus 1506/1507 bootloader or register map?

Post by FrenchPythonLover »

Hello,

I'm an independent embedded systems developer working on a Linux port for the Sunplus SP1507A SoC (MIPS32 LE, used in various set-top box designs). I've reached out directly to Sunplus support without success, and I understand distributors sometimes have a more direct line to Sunplus FAEs for documentation requests.

I'm looking for:
- Technical Reference Manual / register map
- Memory controller (DDR3) initialization specs
- Interrupt controller and timer documentation

I'm not looking to place a component order at this stage — this is an open-source reverse engineering / hobbyist project, documented publicly here: https://github.com/FrenchPythonLover/echolink_hacking

If you have a contact at Sunplus who handles documentation requests for legacy/EOL parts, or if there's a standard process for this, I'd really appreciate being pointed in the right direction.

Thank you for your time,
Ilyès
Independent Embedded Systems Developer
https://github.com/FrenchPythonLover
User avatar
Leo5314
Registered Member
Registered Member
Posts: 271
Joined: 13 May 2015, 6:34 pm
Location: Dubai, United Arab Emirates
Been thanked: 1 time

Re: Anyone reverse-engineered the Sunplus 1506/1507 bootloader or register map?

Post by Leo5314 »

Hi Ilyès, I would have loved to work with you if this were 2016, but I actually left the field ten years ago. Back then, I only handled some basic data, info, and encryption/decryption algorithms etc,
The world is moving so fast these days that the man who says it can't be done is generally interrupted by someone doing it
FrenchPythonLover
Junior Member
Junior Member
Posts: 2
Joined: 02 Aug 2026, 8:14 pm

Re: Anyone reverse-engineered the Sunplus 1506/1507 bootloader or register map?

Post by FrenchPythonLover »

Hey Leo, thanks for taking the time to reply! Just curious — was that work specifically on Sunplus chips (1506/1507 or similar), or a different platform back then? And more on the CAM/PowerVU side or actual bootloader/hardware level? No pressure at all if it's too fuzzy after all these years, just curious where your experience overlaps with what I'm digging into.
User avatar
Leo5314
Registered Member
Registered Member
Posts: 271
Joined: 13 May 2015, 6:34 pm
Location: Dubai, United Arab Emirates
Been thanked: 1 time

Re: Anyone reverse-engineered the Sunplus 1506/1507 bootloader or register map?

Post by Leo5314 »

FrenchPythonLover wrote: 03 Aug 2026, 12:25 am Hey Leo, thanks for taking the time to reply! Just curious — was that work specifically on Sunplus chips (1506/1507 or similar), or a different platform back then? And more on the CAM/PowerVU side or actual bootloader/hardware level? No pressure at all if it's too fuzzy after all these years, just curious where your experience overlaps with what I'm digging into.
I worked on AliChip, PowerPC, and ST chips, plus CAS like Conax, Ir-deto, and NDS writing Oscam algorithms and running cards. Deleted everything and scrapped my STBs last year since it's all changed now. I have your GitHub and email, so I'll share if I find anything.
The world is moving so fast these days that the man who says it can't be done is generally interrupted by someone doing it
Previous topicNext topic

Who is online

Users browsing this forum: No User AvatarCCBot [Bot] and 1 guest