Unbricking the V5: SDCFG value for TCCtool needed

[dfkt]

Can someone help me find out the SDCFG value for unbricking the Cowon V5 with TCCtool? I bricked the V5 for good, nothing to do with it anymore. And I have no idea how to find out the correct SDCFG value, I just collected all the info that might be helpful. Any help would be highly appreciated.

Here's an informative thread about the endeavors to get TCCtool working with the Cowon S9/J3: http://iaudiophile.net/forums/showthread.php?t=36073

Especially Joeyg's posts are very helpful, like this: http://iaudiophile.net/forums/showpo...6&postcount=59



Here's all the info I collected:

Cowon V5 PCB layout photo: http://i45.tinypic.com/wu2eqc.jpg

Cowon V5 1.12_ENG firmware: http://www.cowonglobal.com/zeroboard...?id=C08&no=415

+++++++++++++++++++++++++++++++++++++++++++

Telechips TCC9101 (ARM1176JZF-S - TCC91XX) - http://www.mp4nation.net/forum/viewt...p?f=20&t=16030

VID 140E / PID B077

"TCC91xx usb-boot mode"=LIBUSB_DEV, USB\VID_140E&PID_B077

+++++++++++++++++++++++++++++++++++++++++++

Memory: Samsung 007 K4T1G164QE-HCE6 ( GWA028GKN / GWL659JGS ) - http://www.samsung.com/global/busine...64QE&xFmly_id=

Data sheet: http://www.samsung.com/global/system...4qe_rev111.pdf

Device Operation & Timing Diagram: http://www.samsung.com/global/system...ram_may_07.pdf

+++++++++++++++++++++++++++++++++++++++++++

Memory: Shows up as 166636 KB RAM in Windows CE Task Manager

[rafa]

I am not sure if this could help you, but from technical perspective, these players are very similar. Both the update process and I think the processor are the samo or very similar.

However FLACvest (maybe known from head-fi), bricked his Ramos T11TE and successfully unbricked it again. Here: http://amot.wordpress.com/2009/12/27...with-flash-ui/

There could be a similar way to unbrick your V5. I do not know, but it is maybe possible to copy an image from my player; or the hidden partition from it, where the os is and copy it on yours...

[rafa]

Cannot find something, like an hidden partition on the V5...

[dfkt]

Thanks for your replies. No, no regular hidden partitions on the V5 or any other TCC player - that's where TCCtool comes in, or FWDN. There's no way without these special tools to upload firmware to a TCC player's RAM. And finding the right entry point via SDCFG value unfortunately requires some major hacking and disassembling skills. But once one finds that value, unbricking such players is easy as pie (as seen on the D2, S9, J3, etc).

[rafa]

Originally Posted by dfkt

Thanks for your replies. No, no regular hidden partitions on the V5 or any other TCC player - that's where TCCtool comes in, or FWDN. There's no way without these special tools to upload firmware to a TCC player's RAM. And finding the right entry point via SDCFG value unfortunately requires some major hacking and disassembling skills. But once one finds that value, unbricking such players is easy as pie (as seen on the D2, S9, J3, etc).

Do you think the 89xx, 91xx and the 92xx series have the same SDCFG value? If yes and if this value is a hex number, you could find it here...

http://ripz.smartru.com/Gpad/patches...el-V7003.patch

[dfkt]

Thanks Rafa, that seems to be a great source of info for several issues concerning Rockbox ports to Telechips players, but unfortunately I couldn't get a working SDCFG out of it. Of course I have no clue how to retrieve it anyways (the prominent "0x07282000" doesn't work). I posted your find over on the Rockbox forums, maybe someone else can make heads or tails of it.

[rafa]

Originally Posted by dfkt

Thanks Rafa, that seems to be a great source of info for several issues concerning Rockbox ports to Telechips players, but unfortunately I couldn't get a working SDCFG out of it. Of course I have no clue how to retrieve it anyways (the prominent "0x07282000" doesn't work). I posted your find over on the Rockbox forums, maybe someone else can make heads or tails of it.

For about 2 years I wanted to start to Rockbox a DAP myself... I have one of the first tablets ever, one of smartq..blabla

however I thought of your problem about this SDCFG stuff. Then I stumbled over that page...

The V5 seems to be the only DAP to have this chip. All the others have the 92xx and the 89xx cpus. The next thing you can try is to send telechips an email and ask for the datasheet.

[dfkt]

There's lots of semi-legal stuff floating around in the meantime, like a full TCC Linux dev kit (google for "LINUX_BSP_100205-R0170B2750.tar.bz2"), and a torrent that contains several BSP docs and sources... but yeah, one probably needs more knowledge of the matter to make something useful of them.

[rafa]

Another way could be to decompile the COWON_FWUPDATE.exe

[dfkt]

Do you have any hints on how to do that?

[rafa]

I used PE Explorer, since with this tool it is possible to look inside this file. Lots of hex numbers and no clue.

Genrerally there is not really possible to decompile a .exe file, only in some cases. I have to look inside this topic a little further... and fresh up my assembler.