EDITING FIRMWARE WITH HEX EDITOR!

[nabilash]

Lol, thats easy. :P
I improved the translations with extracting the firmware (you can write longer sentences without having errors when saving...). You need the prog "s1fwx_v30", then you create two batch files in the folder (new text document>rename to .bat instead of .txt).

the first one we call "extract_fw_file.bat"

@echo off

echo Firmware Modifying Tool 0.1
echo ===========================
echo.
:repair
echo 1. Repair firmware
pause
s1fwx r dump.bin
:scriptfordump
echo 2. Create script file for dump.bin
pause
s1fwx s dump.bin > dump.script
:extractdump
echo 3. Extract dump file
pause
s1fwx x dump.bin
:extractfwimage
echo 4. extract fwimage.fw
pause
s1fwx x fwimage.fw
:scriptforfwimage
echo 5. create script file for fwimage.fw
pause
s1fwx s fwimage.fw > fwimage.script

and the second one you call something like "pack_fw_file.bat"

@echo off

echo Firmware Modifying Tool 0.1
echo ===========================
echo.
:rename
echo 1. 1. rename oryginal fwimage.fw to some other name
pause
ren fwimage.fw fwimagebackup.fw
:scriptrecreate
echo 2. use script to recreate fwimage with modified files
pause
s1fwx a fwimage.fw:fw < fwimage.script
:createmoddump
echo 3. use dump.script to create modified dump file
pause
s1fwx a mod_dump.bin:afi < dump.script
:logs
echo 4. check logs displayed on screen for errors!!
pause
:scriptforfwimage
echo 5. check if final dump file size seems to be correct!!
pause

The extraction process was described in the wiki of s1mp3.org, I created the batch files to make it easier.

But I think switching games wont work, because nearly all resource files (for games, too) are in the UI30.RES file...

greets.

[moh3en]

yep, I think I screwd up my player.... tried editing the firmware with a hex editor, and uploaded it back on...now the player is stuck on the blue screen with the hourglass and doesnt do anything else. Windows can detect some USB device as USB2 (FS) ADFU Device, but no drive apears in "My computer" and the firmware upgrade tool cant "recover" or reload another firmware.

I guess i killed my MpxPlayer
if anyone has any suggestions just psot a reply

[nabilash]

In the "dead recovery section" of this forum are good tips, that may help you.

greets

[Superboto]

Originally Posted by nabilash";p=&quot

Lol, thats easy. :P
I improved the translations with extracting the firmware (you can write longer sentences without having errors when saving...). You need the prog "s1fwx_v30", then you create two batch files in the folder (new text document>rename to .bat instead of .txt).

the first one we call "extract_fw_file.bat"

and the second one you call something like "pack_fw_file.bat"

The extraction process was described in the wiki of s1mp3.org, I created the batch files to make it easier.

But I think switching games wont work, because nearly all resource files (for games, too) are in the UI30.RES file...

greets.

Very interesting indeed! ;D
I've just came back of a party and I'm too sleepy... =P
Tomorrow if I have time I'll create these batch files and see if I find something ok?!
Thaks for the contribuition!! =D

[Smeag]

Do you know what would be fantastic? A MP4 emulator for the PC! we wouldn't need to upload the firmware to check the changes... we could see the changes almost in real time.. and withouth the danger of harming the player...

probably it doesn't exist..but who knows...

[Fuma]

Any file that is executed in every machine in every S.O. can be read in Hexa. BUT if you want to make a change you must know the microcontroller that is executing the codes, how to program it, and the S.O. then diassemble the file. Then you must undertand what the code does, find what changes into the code you want to make and where in the address of the file you want to change and the code of it in hex. Then and just then you can open that file with an Hex Editor and change the values. If not, you're making a MPx killer firmware. :lol:

Never do HexEdit without diassembling the code and know what it do. And it's impossible to do it without having the processor model of the MP4, his instruction set, without knowledge of how the codes executes, etc...

Also, making a MP4 emulator needs the same kind of knowledge.

If you guys still want to make some hexedit, i've heard some rumors that the processor is Z80, a very extended use processor. Here's some info: http://en.wikipedia.org/wiki/Z80
The best way to verify this is opening the player.

[Fuma]

This is my third day with my MP4 player.
I've open the player and i've found 2 chips. 1 samsung memory and a atj2085tj chip. It works with Z80 intruction set. Also searching for the datasheet of the chip, i've found a page that is working on a proyect for making a firmware, an atj2085tj emulator and some interesting things. Here is: http://www.s1mp3.org/

[Bugmenot-User]

Bump!
Yep, Z80 is a very common chip. There have been many microcomputers based on the architecture, and TI calcs too. (I've been doing the USB flash drive to calc thing.)
What we need is some really good programmers. Anyone know where to look? I know camerahacking.com is a nice place, for one.
In any case, I thought s1mp3 released their firmware open source. True?

[nickyblast]

Originally Posted by Smeag";p=&quot

Do you know what would be fantastic? A MP4 emulator for the PC! we wouldn't need to upload the firmware to check the changes... we could see the changes almost in real time.. and withouth the danger of harming the player...

probably it doesn't exist..but who knows...

that's a awesome Idea!!

[lattesurf]

i've tried various Z80 dis-assembly softwares to dis-assemble the firmware file, but many at which either hangs my laptop while doing so, or totally is unable to dis-assemble it.

What Fuma had mentioned about editting the hex directly is true, editting directly without knowing the microcontroller's process handling would most definately kill the player. Just take a look at the number of dead players in the forum, all the wrong firmware updates were actual working extracted firmwares from other members. But in the wrong player with probably different hardware layout, killed their players instantly.

I guess it is pretty much a long way to go to be able to fully customise the player in every particular detail. But lets hope someone is able to do it!