rk27 usbhandler and rk27nand tool.
Do you have a rk27xx series player and can’t open the firmware partition?
These tools will back up the entire content of your nand including your firware
partition.
First get the player into rkusb mode.
Then select the device to dump the chip contents.
All you need to do then is examine the dump to find the hidden .tag string.