iAudiophile.net Forums


Go Back   iAudiophile.net Forums > Flash-Memory Players > Cowon V5

Post New Thread  Reply
 
Thread Tools Display Modes
Old 08-08-2010, 08:38   #1
dfkt
 
 
dfkt's Avatar
 
Join Date: Jul 2005
Location: Vienna, Austria
Posts: 2,975
Default Unbricking the V5: SDCFG value for TCCtool needed

Can someone help me find out the SDCFG value for unbricking the Cowon V5 with TCCtool? I bricked the V5 for good, nothing to do with it anymore. And I have no idea how to find out the correct SDCFG value, I just collected all the info that might be helpful. Any help would be highly appreciated.

Here's an informative thread about the endeavors to get TCCtool working with the Cowon S9/J3: http://iaudiophile.net/forums/showthread.php?t=36073

Especially Joeyg's posts are very helpful, like this: http://iaudiophile.net/forums/showpo...6&postcount=59



Here's all the info I collected:

Cowon V5 PCB layout photo: http://i45.tinypic.com/wu2eqc.jpg

Cowon V5 1.12_ENG firmware: http://www.cowonglobal.com/zeroboard...?id=C08&no=415

+++++++++++++++++++++++++++++++++++++++++++

Telechips TCC9101 (ARM1176JZF-S - TCC91XX) - http://www.mp4nation.net/forum/viewt...p?f=20&t=16030

VID 140E / PID B077

"TCC91xx usb-boot mode"=LIBUSB_DEV, USB\VID_140E&PID_B077

+++++++++++++++++++++++++++++++++++++++++++

Memory: Samsung 007 K4T1G164QE-HCE6 ( GWA028GKN / GWL659JGS ) - http://www.samsung.com/global/busine...64QE&xFmly_id=

Data sheet: http://www.samsung.com/global/system...4qe_rev111.pdf

Device Operation & Timing Diagram: http://www.samsung.com/global/system...ram_may_07.pdf

+++++++++++++++++++++++++++++++++++++++++++

Memory: Shows up as 166636 KB RAM in Windows CE Task Manager
dfkt is offline View dfkt's Photo Album   Reply With Quote

Advertisement [Remove Advertisement]

Old 08-12-2010, 09:15   #2
rafa
Member
 
rafa's Avatar
 
Join Date: Aug 2010
Posts: 36
Default

I am not sure if this could help you, but from technical perspective, these players are very similar. Both the update process and I think the processor are the samo or very similar.

However FLACvest (maybe known from head-fi), bricked his Ramos T11TE and successfully unbricked it again. Here: http://amot.wordpress.com/2009/12/27...with-flash-ui/

There could be a similar way to unbrick your V5. I do not know, but it is maybe possible to copy an image from my player; or the hidden partition from it, where the os is and copy it on yours...
rafa is offline View rafa's Photo Album   Reply With Quote
Old 08-12-2010, 09:48   #3
rafa
Member
 
rafa's Avatar
 
Join Date: Aug 2010
Posts: 36
Default

Cannot find something, like an hidden partition on the V5...
rafa is offline View rafa's Photo Album   Reply With Quote
Old 08-12-2010, 10:04   #4
dfkt
 
 
dfkt's Avatar
 
Join Date: Jul 2005
Location: Vienna, Austria
Posts: 2,975
Default

Thanks for your replies. No, no regular hidden partitions on the V5 or any other TCC player - that's where TCCtool comes in, or FWDN. There's no way without these special tools to upload firmware to a TCC player's RAM. And finding the right entry point via SDCFG value unfortunately requires some major hacking and disassembling skills. But once one finds that value, unbricking such players is easy as pie (as seen on the D2, S9, J3, etc).
dfkt is offline View dfkt's Photo Album   Reply With Quote
Old 03-27-2011, 14:07   #5
rafa
Member
 
rafa's Avatar
 
Join Date: Aug 2010
Posts: 36
Default

Quote:
Originally Posted by dfkt View Post
Thanks for your replies. No, no regular hidden partitions on the V5 or any other TCC player - that's where TCCtool comes in, or FWDN. There's no way without these special tools to upload firmware to a TCC player's RAM. And finding the right entry point via SDCFG value unfortunately requires some major hacking and disassembling skills. But once one finds that value, unbricking such players is easy as pie (as seen on the D2, S9, J3, etc).
Do you think the 89xx, 91xx and the 92xx series have the same SDCFG value? If yes and if this value is a hex number, you could find it here...

http://ripz.smartru.com/Gpad/patches...el-V7003.patch
rafa is offline View rafa's Photo Album   Reply With Quote
Old 03-28-2011, 09:26   #6
dfkt
 
 
dfkt's Avatar
 
Join Date: Jul 2005
Location: Vienna, Austria
Posts: 2,975
Default

Thanks Rafa, that seems to be a great source of info for several issues concerning Rockbox ports to Telechips players, but unfortunately I couldn't get a working SDCFG out of it. Of course I have no clue how to retrieve it anyways (the prominent "0x07282000" doesn't work). I posted your find over on the Rockbox forums, maybe someone else can make heads or tails of it.
dfkt is offline View dfkt's Photo Album   Reply With Quote
Old 03-28-2011, 13:04   #7
rafa
Member
 
rafa's Avatar
 
Join Date: Aug 2010
Posts: 36
Default

Quote:
Originally Posted by dfkt View Post
Thanks Rafa, that seems to be a great source of info for several issues concerning Rockbox ports to Telechips players, but unfortunately I couldn't get a working SDCFG out of it. Of course I have no clue how to retrieve it anyways (the prominent "0x07282000" doesn't work). I posted your find over on the Rockbox forums, maybe someone else can make heads or tails of it.
For about 2 years I wanted to start to Rockbox a DAP myself... I have one of the first tablets ever, one of smartq..blabla

however I thought of your problem about this SDCFG stuff. Then I stumbled over that page...

The V5 seems to be the only DAP to have this chip. All the others have the 92xx and the 89xx cpus. The next thing you can try is to send telechips an email and ask for the datasheet.
rafa is offline View rafa's Photo Album   Reply With Quote
Old 03-28-2011, 13:09   #8
dfkt
 
 
dfkt's Avatar
 
Join Date: Jul 2005
Location: Vienna, Austria
Posts: 2,975
Default

There's lots of semi-legal stuff floating around in the meantime, like a full TCC Linux dev kit (google for "LINUX_BSP_100205-R0170B2750.tar.bz2"), and a torrent that contains several BSP docs and sources... but yeah, one probably needs more knowledge of the matter to make something useful of them.
dfkt is offline View dfkt's Photo Album   Reply With Quote
Old 03-28-2011, 13:35   #9
rafa
Member
 
rafa's Avatar
 
Join Date: Aug 2010
Posts: 36
Default

Another way could be to decompile the COWON_FWUPDATE.exe
rafa is offline View rafa's Photo Album   Reply With Quote
Old 03-29-2011, 06:41   #10
dfkt
 
 
dfkt's Avatar
 
Join Date: Jul 2005
Location: Vienna, Austria
Posts: 2,975
Default

Do you have any hints on how to do that?
dfkt is offline View dfkt's Photo Album   Reply With Quote
Old 03-29-2011, 16:38   #11
rafa
Member
 
rafa's Avatar
 
Join Date: Aug 2010
Posts: 36
Default

I used PE Explorer, since with this tool it is possible to look inside this file. Lots of hex numbers and no clue.

Genrerally there is not really possible to decompile a .exe file, only in some cases. I have to look inside this topic a little further... and fresh up my assembler.
rafa is offline View rafa's Photo Album   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 14:37.



Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.


Copyright © 2006-2014 CrowdGather |  About iAudiophile |  Advertisers | Investors | Legal | Contact