Anyone who wants rockchip firmware extractor read this

Dancemammal · #1 (**permalink**) 16th May 2008, 1:44 am

Hi All,

Having tried for some time now to get information from Rock-Chip with no success, I need your help to get them to listen to our request for firmware extraction.

We can do one of two things,

1. Individually mail the company asking them to release information to us to help us create the extractor.

or

2. Create a mail with a list of people that request the information, and send that to them.

Without this information, the firware extraction cannot proceed, believe me I have tried without it.

I will monitor this thread for ideas,

Regards

Dancemammal

knob · #2 (**permalink**) 16th May 2008, 11:56 am

Hi dancemammal

Sorry to hear you had no luck with this bit, and thanks for all your efforts so far.

If anyone wants to try contacting Rockchip here are 2 email addresses:-

E-mail:support@rock-chips.com

投诉邮箱:customer@rock-chips.com

Pity the company can't see the benefit of providing this information. I'll give them a try myself.

(noticed the website has changed now, the english version seems to have gone altogether)

http://www.rock-chips.com/newEbiz1/E...Contactus.html

makd511 · #3 (**permalink**) 16th May 2008, 5:01 pm

nice to see you again dancemammal

sorry to hear about rockchip but it does not surprise me at all

i have emailed them countless times with no response whatsoever.

doing a mass email to them, would it work, in truth i am unsure that it really would.

i really wonder who makes the firmwares for these players, there may be a co pletely different company designated to doing the software for this hardware, but how to get that info aswell is a mystery

skat325is · #4 (**permalink**) 17th May 2008, 2:33 pm

I'm in for helping in whatever you guys decied on doing.
I wish to re-skin my Onda clone, but don't want risk it.

knob · #5 (**permalink**) 20th May 2008, 12:18 pm

If anyone is interested I managed to get hold of some RK2608 mp4 player source code in C . :shock:

http://www.megaupload.com/?d=IKUP8H6Q

makd511 · #6 (**permalink**) 29th May 2008, 11:05 pm

dancemammal

since the new version of the rockchip came out (RK2706) i can not use your tool as the images inside are 32bit and the editor can not handle those (for most anyway - ramos rm970 an example) - i currently use a tools called image searh editor)

also i am finding the the new firmwares are now using animated gifs!!! and png files etc

now, is it possible to expand on your current editor and do something do you think to handles these things, we need to be able to get at all images in whatever format they exist in

i am sure you are a busy man but any help on this would be great

the new chip, ingenic/chinachip (ainol v2000se example), has a homebrew extractor the extracts out all images and other files with the click of a button, is this possible

i have several firmwares and also a breakdown of the actual files that make up the firmwares and parts of the firmware, so we are looking at a file callled bmp0.bin, this is the part of the firmware that contains the images only

any ideas

cheers
makd511

Pesho · #7 (**permalink**) 30th May 2008, 4:49 pm

Man, that's bad news! I doubt mass-nagging them would work (although im not saying no to it, whatever we can do, we should do it

) Would that sourcecode knob posted do any good?

wiRe · #8 (**permalink**) 2nd Oct 2008, 5:38 am

some days ago i got access to a rockchip player including the RK260x chip. i took a look on it and found a way to extract the first 0x200 bytes of the first block inside the RFW firmware file (you don't need any informations by the manufacturer to do this, just investigate their protocol and you know how to do it). anyway, i still have problems to understand the RFW file format. against s1mp3 players format, these files don't contain any text strings which would simplify analysis a lot. i investigated the file header and found several entries which point to different blocks inside the file. i also recognized one of these block is the ressource file (e.g. similar to UI30.RES on s1mp3 devices), while others contain program code of the firmware. if anybody can give me more detailed information about the RFW file header and structure, i guess i will be able to write a firmware extractor for the RK260x series. btw. which machine code get's used for the controller, are there any disassemblers?

Dancemammal · #9 (**permalink**) 2nd Oct 2008, 6:38 am

Hi All,

I am more than willing to help, perhaps Wire would share what he has learned with the forum, and we can build on what has been discovered.

Dancemammal

knob · #10 (**permalink**) 2nd Oct 2008, 9:53 am

It's a zsp400 based processor, I have uploaded the technical manual here:-
http://www.mympxplayer.org/zsp400pdf...-am-df930.html
with the complete instruction set.

There is already an assembler and dissassember which just works with "Rock" .rkp games at the moment, uploaded by Benny here:-
http://www.mympxplayer.org/rockchip-sdk-vt11147.html

Same instruction set. so we have a good start.

and datasheet with example code here:-
http://www.mympxplayer.org/rock26xx-...pdf-df609.html