Rockbox Technical Forums

Rockbox Development => New Ports => Topic started by: LordOfThePings on May 13, 2006, 02:43:11 PM

Title: Tatung Elio
Post by: LordOfThePings on May 13, 2006, 02:43:11 PM
Hi, i have a 20GB Hdd Mp3-Player (TPJ-1022/P772) from tatung/elio. It is similar to the newer ipods, and the iriver H10 (it uses the pp5020 chip, has a 220x176 color lcd, a sd-reader, usb otg, a remote connector similar to the ipod mini's one (4 pin) and a (bigger) connector on the bottom, for which i haven't found a pinout yet).
The firmware is divided into a flash part, and a part on the hdd, which is a .mi4 (encrypted) file.  It can go to usb disk mode, even when a corrupt firmware is on the hdd.
Is there any possibility I could try to run rockbox (maybe the ipod port?) and then help to port it fully to this player?
I have some experience in C/C++, but unfortunately none in linux kernel development :(   (but I'm able to compile one).
Is there any way I can run rockbox with the original bootloader, so i don't have to reflash it? (I don't want to brick it...)

Title: Re: tatung elio port possible?
Post by: Llorean on May 13, 2006, 02:58:37 PM
Well, a few bits of information I can offer you:
-Rockbox isn't Linux based, so lack of linux experience is not a handicap.
-Rockbox on iPod is loaded by way of the built in flashed bootloader. We put ours on disk where it loads from. It loads ours, ours loads either Rockbox or the Retail OS depending.

The first thing you'd need to figure out is how to encrypt a firmware file so that the built in loader will load it, I imagine. As well you'd need to document any hardware a Rockbox driver doesn't already exist for so drivers can be created, as the iPod port has a decent enough chance of not working at all without at least some modifications.

Other useful info may be found here, as well: http://www.rockbox.org/twiki/bin/view/Main/NewPort
Title: Re: tatung elio port possible?
Post by: LordOfThePings on May 13, 2006, 03:50:27 PM
ok, so i will first try to get some informations the "soft" way (I didn't manage to open the player yet... it's quite sealed).
I know the lcd is a 16-bit (5r, 6g ,5b) 220x176 one, and will try to get more infos about the other internals later.
Apparently the H10 uses a encrypted .mi4 firmware as well, but the tools i found could not decrypt this one...
The stock firmware itself has a 67 byte "header", followed by 0s until 512 bytes, where another 224 byte block of strings is, after that it's binary code...
I will try to find a disassembler/decoder for it, then post my experiences back here.


edit: I know how to open it now... (it's back is very tightly hold in place by plastic clips, bit of the ipod style).
I'll try to find something about the internals next.
Title: Re: tatung elio port possible?
Post by: LordOfThePings on May 13, 2006, 07:46:34 PM
AH. The d**n forum login timeout got my message killed... I will retype the chip informations later...

Can anyone identify this logo?
www.dboys.de/lord/chip1.png (http://www.dboys.de/lord/chip1.png)
I know i've seen it before, but don't remember which company it belongs to. The chip may be the LCD controller. The sticker on it doesn't come off easily, and I don't want to ruin the chip...

Anyway, the bigger problem will be the encrypted .mi4 file (the iriver H10 port has the same problem, it's the same style of firmware, but not compatible)
Title: Re: tatung elio port possible?
Post by: Scimmia on May 13, 2006, 10:02:24 PM
Looks like an AMD logo to me  ???
Title: Re: tatung elio port possible?
Post by: Llorean on May 14, 2006, 01:36:44 AM
Yeah, definitely looks like an AMD logo. Odd. http://www.amd.com/images/hd_amd_lg.gif
Title: Re: tatung elio port possible?
Post by: LordOfThePings on May 14, 2006, 12:18:55 PM
OK, I have created a wiki page to gather infos about the player (Should i link it to the ports page yet? I don't know if I'm able to get this working...), and finally got the sticker off the chip. It is really an AMD, it's the flash.

http://www.rockbox.org/twiki/bin/view/Main/ElioTPJ (http://www.rockbox.org/twiki/bin/view/Main/ElioTPJ)
Title: Re: tatung elio port possible?
Post by: tucoz on May 14, 2006, 03:44:07 PM
Funny. That player looks exactly what I thought to be a Norwegian Mp3-player called Asono Elio.
Title: Re: tatung elio port possible?
Post by: LordOfThePings on May 14, 2006, 04:26:00 PM
the asono elio is the same player, but with a fm-radio built in... it's from a company called tatung (elio is some kind of series-brand, i think)
Title: Re: Tatung Elio
Post by: mememe on August 18, 2006, 03:42:16 AM
About the Firmware. I've been able to decrypt the Firmware with the mi4code (http://daniel.haxx.se/sansa/mi4code.html) utility. Maybe it's possible to use the iRiver H10 port or fork from it.

In order to decrypt it, get the Firmware from support.eliohome.com (http://support.eliohome.com/Download/Europe/P722/OSImage/Firmware_Setup_2005_Dec_28(Europe).zip), extract the executable with 7-Zip (http://www.7-zip.org/).
Now to get the key use the bootloader.rom in the keysearch:
Code: [Select]
./mi4code keyscan -v pp5020.mi4 bootloader.romThen decrypt with the key:
 
Code: [Select]
mi4code decrypt  pp5020.mi4  pp5020.raw <key>
Title: Re: Tatung Elio
Post by: Bagder on August 18, 2006, 08:14:22 AM
If you have the mi4 + BL for this and can provide it to me, I'd like it for my mi4 collection and possibly include the key for it in upcoming mi4code releases...

(I'm also interested in mi4+BL pairs for the other Elio players in case anyone happens to have them)
Title: Re: Tatung Elio
Post by: linuxstb on August 29, 2006, 04:34:16 AM
I bought one of these players yesterday and have made a little progress on a Rockbox port.  With the help of mi4code.c, I can compile my own test programs and run them on the player.

I've been compiling a cut-down version of the ipod bootloader, and then encrypting it using:

../tools/mkmi4.sh h10_5gb bootloader/bootloader.bin test.mi4

You then need to copy test.mi4 onto your Elio, renaming it "/system/pp5020.mi4"

I've managed to access the hard drive from my test program and write a file on disk.  I've also tried dumping the GPIO ports and it seems that at least some of the buttons are attached to GPIO pins - making at least a partial button driver easy to implement.

Next stage will be to try and figure out the LCD.  
Title: Re: Tatung Elio
Post by: LordOfThePings on August 29, 2006, 10:26:42 PM
ok, thanks to linuxstb's pm, i'm back here....

to the lcd: the info that was on the lcd itself is posted in the wikipage, the toppoly part is, according to the company's webpage the lcd driver chip. http://www.toppoly.com/toppoly/Product/SB_Phone_T.asp+Toppoly+TD022SREA1
www.toppoly.com/toppoly/Product/SB_Phone_T.asp+Toppoly+TD022SREA1
(try looking in the google cache or at archive.org for that one, it's apparently offline)

on the lcd module, there are these labels:

TD022SREA1 442T0MA0000503
M479844911.34

apart from the lcd module (it has two chip in it, without any labels), i can see no chip, that seems to be connected with the lcd.

the portalplayer 5020d  has a lcd controller built in, so maybe that is used for the elio.


@Badger: the other tatung/elio firmwares can be downloaded at their support site as well.

and @linuxstb: which one do you have? the tatung elio, or the asono? they use different firmwares that are not compatible (possibly due to the radio chip and/or different encryption keys)


and a final advise: do not take the player apart, if you don't have to... it's difficult to do without breaking some of the plastic clamps that hold it together...
Title: Re: Tatung Elio
Post by: barrywardell on August 30, 2006, 05:04:37 AM
The iriver H10 uses the same address for the LCD interface as the colour iPods (0x70008a0c) so that would be a good place to start. You could even just try using the H10 or one of the iPod LCD drivers and see if it works.
Title: Re: Tatung Elio
Post by: linuxstb on August 30, 2006, 05:42:40 AM

The iriver H10 uses the same address for the LCD interface as the colour iPods (0x70008a0c) so that would be a good place to start. You could even just try using the H10 or one of the iPod LCD drivers and see if it works.


I did quickly try both the H10 and ipod drivers - but with no success.  Although I will probably try again more carefully, just to make sure.

I've also been searching the firmware disassembly for references to the 0x70008a0c (and related) addresses, but can't find any.  However, address 0x70003000 (the LCD_BASE for the greyscale ipods) is being used.
Title: Re: Tatung Elio
Post by: linuxstb on August 30, 2006, 05:46:38 AM

@linuxstb: which one do you have? the tatung elio, or the asono? they use different firmwares that are not compatible (possibly due to the radio chip and/or different encryption keys)

and a final advise: do not take the player apart, if you don't have to... it's difficult to do without breaking some of the plastic clamps that hold it together...


I have the "Tatung Elio TPJ1022" - the box also labels it as the "Tatung P722" - so the same one as you by the sounds of it.   It doesn't have the FM radio module.

Thanks for the advice about disassembling the player - but sadly it's too late.  I did take it apart, and now it doesn't fit back together as snugly as it used to...  But it's nothing major.
Title: Re: Tatung Elio
Post by: LordOfThePings on September 01, 2006, 08:20:49 AM
Has anyone tried using the iPod Color driver with the greyscale LCD_BASE yet? I'd like to try this, but i haven't been able to get the build system for the elio working... (As I don't own any of the other rockbox-enabled players, I'm totally new to compiling rockbox). How do you run your test programs?

And I have the TPJ1022/P722 too.
Title: Re: Tatung Elio
Post by: Bagder on September 01, 2006, 08:41:51 AM
1. Get the rockbox sources

2. Get a cross-compiler setup

3. Build a rockbox bootloader for your target (you select that with tools/configure)

4. Copy the .mi4 file to your player.

5. test
Title: Re: Tatung Elio
Post by: LordOfThePings on September 02, 2006, 09:13:10 AM
OK, I got the buildsys working, but now I have a new problem:
my elio does not accept the mi4 encrypted by the makefile. I tried scanning my firmware-upgrade file's bootloader (I have the latest firmware installed) for a key with mi4code, it found this one:
6af3b9f8 777483f5 ae8181cc fa6d8a84 , so I tried decrypting the pp5020.mi4 generated by the makefile and re-encrypting it with my key and encrypting the bootloader.bin directly. None of these worked, the elio just displays "Invalid Image" and after that "Operating System not Found", then it shuts down.
Title: Re: Tatung Elio
Post by: Bagder on September 02, 2006, 02:34:46 PM
Did you try decrypting, encrypting your original firmware file to verify the process?

Do you have a 010301 header by any chance?
Title: Re: Tatung Elio
Post by: linuxstb on September 02, 2006, 03:16:03 PM
The build system uses the command:

../tools/scramble -mi4v2 bootloader/bootloader.bin pp5020.mi4

to create a firmware image.  This works fine for me on my TPJ1022.

Alternatively, you could download mi4code.c from http://daniel.haxx.se/sansa/mi4code.html and compile it and put it somewhere in your PATH, and then use the mkmi4.sh script as follows:

../tools/mkmi4.sh h10_5gb bootloader/bootloader.bin pp5020.mi4

If that doesn't work, you will need to experiment with the various options to mi4code

EDIT:

After talking to Bagder, it seems almost certain that you've got a "v3" bootloader.  So try the following command:

../tools/scramble -mi4v3 bootloader/bootloader.bin pp5020.mi4
Title: Re: Tatung Elio
Post by: LordOfThePings on September 02, 2006, 06:00:30 PM
Ok, I really have a v3 bootloader, using the scramble command with -mi4v3 works. The resulting file is accepted by the player. After the bootloader loads the .mi4, the player seems to hang, it does not write anything to the disk, and does not reboot when pressing the FF button.

Should I test any new versions in the cvs, or wait until you get the LCD working (I doubt I can really help you...) ?
Title: Re: Tatung Elio
Post by: celi89 on September 12, 2006, 03:39:44 PM
Please, I need help!!!

I have the elio photo jukebox, which I think is the same as tatung. The thing is that the firmware wasnt working well, it didnt show me any file except for the photos.
So I went into the official site and downloaded the firmware that is there. I installed but it doesnt work!!!!!!! =(
It says: "File loaded failed", and then "Operating system is not found!".
And the support never answers, so I dont know what to do, im desperate!!

If you know what to do please answer here or to: celi89@gmail.com

Thank you!!!! and sorry for my english =P
Title: Re: Tatung Elio
Post by: mdauso on December 19, 2006, 07:45:42 AM
Hello,

I´m new here and I have some questions. LordOfThePings wrote, that he knows how to open the Elio. Can You give a detailed instruction for this? I want to know which kind of akku is used in the Elio, because I think I need a new one.
Has anyone a shematic of the Elio?
I want to connect it to my car for listening music and charging. For this I have ordered two connectors from Panasonic. I think this is the right one.
The part number is AXR30541.
If there is a dockingstation there must be an audio-out on the connector of the Elio and i will try to find out.

Thank You,

Mario




Title: Re: Tatung Elio
Post by: LordOfThePings on December 22, 2006, 10:31:47 PM
Hi,
as I said, it is very difficult to open it without breaking/damaging at least some of the clamps. If you look at the side/back of the player, you will see its back is made of different plastic (the front is shiny, the back isn't). You can insert a knife at the corner, but do not cut too deep, or you will damage the clamps. It is very tightly hold together (and you will not get it back to fit that exact), so you need quite some pressure to get it open. I used two flat screwdrivers and the knife, and worked from the corners on (the upper-left one, when viewed with the back facing you, seems to be the easiest one to get started). When you get to open all the clamps, you can remove the back (slowly, as the battery is fixed to it)
You can find some photos of the back here:
http://www.dboys.de/lord/elio
The QC sticker is in the lower-right(left from the outside) corner (just to show the orientation, you can perhaps avoid breaking clamps when looking at the pictures first)

I cannot give you useful details about the battery itself, mine does only have a barcode on it and I did not find anything on the number printed there. (ABC4C6207711111)
I also do not have schematics for the player, all the info I had collected is(was?) in the wiki, which is apparently offline, but I had no pinout for the connector anyways... It has to have at least some pins for charging and audio-out. If you have an oscilloscope, try plugging in the spare connector and measure the signals there (you do not have to open your player that way).

Good luck opening your elio,

LordOfThePings



PS: don't forget to post your findings on the connectors, etc here
Title: Looking for help with my Tatung Elio
Post by: Val on December 28, 2006, 07:16:23 AM
Hello,

I just suscribed here, because I am having troubles with my (brand new) Tatung Elio TPJ 1022: I tried to update the firmware, but I just crashed the whole thing. It still worked as a USB Port, but is not playing anything else (I get some nice "Invalid Image" and " ! Operating System is not found" notice...)

Have somebody an idea? Could somebody send me a backup of his system files??

Thanx a lot!!
Val
Title: Re: Tatung Elio
Post by: scorche on December 28, 2006, 07:23:15 AM
These are the Rockbox forums.  They are about Rockbox.
Title: Re: Tatung Elio
Post by: nicox on January 03, 2007, 04:58:56 PM
Is Rockbox now working on the Tatung Elio?

Thanks for the info.

Nico
Title: Re: Tatung Elio
Post by: mdauso on January 05, 2007, 11:00:27 AM
Hello LordOfThePings,

thank You for your description for opening the Elio. I´ve been succsessfull with using the 26pin connector on the upper side of the Elio for charching and audio out with a selfmade connector to my car radio based on the same Panasonic connector also used on the charger. I will make a description as soon as possible and inform you about this. There will be some pictures added. Please be patient, I think it will take a while.

Best regards, Mario
Title: Re: Tatung Elio
Post by: Smail on January 12, 2007, 12:21:50 PM
Hello,
I have a tatung elio too and i want to help but i'm new to all this i got some experience in developpement but i don't know what to start with
could someone help me ?
thanks
Title: Re: Tatung Elio
Post by: wolly-p on January 12, 2007, 06:01:24 PM
@Smail,

the wiki might be a good starting point, in particular the howto for setting up the VMware development environment, see http://www.rockbox.org/twiki/bin/view/Main/VMwareDevelopmentPlatform .

@all,

however, when I tried to compile a bootloader build from the latest daily source (2007-01-09) it stops with a missing directory error message, or - when I create that dir - a complaint about the Makefile. Any ideas what to change? Happened on above-mentioned VMware platform, other builds run through without any errors.
Title: Re: Tatung Elio
Post by: linuxstb on January 12, 2007, 08:33:59 PM
I've just tried building a bootloader for the Elio, and it compiled fine.  This was from a copy of the source code checked out from svn (svn co svn://svn.rockbox.org/rockbox/trunk rockbox).

It's possible that the source tarball is missing some files - what was the error you got?

The current stumbling block for the port is the lack of an LCD driver.  Someone needs to do some reverse-engineering of the existing Tatung firmware and try to work out how to control the LCD.
Title: Re: Tatung Elio
Post by: wolly-p on January 13, 2007, 06:57:23 AM
@linuxstb,

thanks, now it works with the svn sources! Previously, I took the source tarball, and I guess that is not complete.
Title: Re: Tatung Elio
Post by: mdauso on January 14, 2007, 08:22:52 AM
Hello LordOfThePings,

I finished the manual for using the Panasonix AXR 30541 connector as Audio-out and charging adapter for the Tatung Elio P722.

Download Manual: http://www.oberboesa.de/webmaster/Elio/AXR30541_ELIO_P722.pdf

Download specification of the connector: http://www.oberboesa.de/webmaster/Elio/panasonic_axr.pdf
Title: Re: Tatung Elio
Post by: Bagder on January 14, 2007, 10:07:46 AM

thanks, now it works with the svn sources! Previously, I took the source tarball, and I guess that is not complete.


It'd be great if you took a moment to check which files that were missing so that we can correct this flaw.
Title: Re: Tatung Elio
Post by: wolly-p on January 15, 2007, 05:13:11 PM


thanks, now it works with the svn sources! Previously, I took the source tarball, and I guess that is not complete.


It'd be great if you took a moment to check which files that were missing so that we can correct this flaw.


Of course, but I'm not sure if I am on a completely wrong track here ...
I downloaded the tarball from http://download.rockbox.org/daily/source/ , and I took the last version 2007-01-09. However, the changelog since that day tells me "no changes" (?), which cannot be true when looking at the svn version. I wonder if the above is still the correct download location? Compared to the svn version the directories "bootloader", "manual", and "rbutils" were missing (detailed diff between both directory listings is attached). Hope this helps.

[attachment deleted by admin, too old]
Title: Re: Tatung Elio
Post by: Raphy on April 07, 2007, 05:10:03 AM
Hello, Im a french Elio tatung user and i try to put rockbox on it , since 3 days i search information about compiling and upgrading with rockbox.
i've found how to compile, but i dont now how to start my elio in MTP mode.
And i dont now really if, using this compiled file (from svn) is dangerous for my player because this firmware seem not to be enterly compatible is'nt it ?

And if it dosent work, could i inverse the manipulation ?
could i again start my player in MTP mode ? and replace the original file ?

Another question: did anybody will do an executable file for the tatung ?

thank :)
Raphy
Title: Re: Tatung Elio
Post by: eXomaniac on March 12, 2008, 06:55:03 PM
Hello There,

i also got the Elio TPJ-1022.
Did anything happen here the last time, and, is there a chance to help ?
I really would like to see Rockbox running on the elio... :/
Title: Re: Tatung Elio
Post by: shadows1990 on March 18, 2008, 02:14:09 PM
I also have a Tatung Elio, and would love to see Rockbox working on it, and I will help in any way i can