EDITING FIRMWARE WITH HEX EDITOR!
 

Hey guys, at past times I've used a Hexadecimal Editor to "translate" games of GBC by changing some text strings and edited my CellPhone Firmware to add some cool look on it! ;)

By the way, have you ever tried to edit your MPX firmware on a HEXADECIMAL EDITOR?

It really could be interesting if we discover how to change somethings in the firmware directly, without using S1RES tool!! xD :D

I belive we could add more games, more "frames" for the animated menus, more fonts, and more and more!

We could also edit completly the menu system, without changing only the pics understand?

Admin, you should be expert on PC matters, so, if you don't mind, could you please work on it?

I'll be doing some researches here and tell you all if I find something! 8)

Re: EDITING FIRMWARE WITH HEX EDITOR!
 

Take a look at this! ;)
I've found something interesting!
There are some strings relative to the PICTURES OF MPX that are in the
picture below!
I bet we could add some frames here!
http://img475.imageshack.us/img475/9...imal2qz.th.jpg

Re: EDITING FIRMWARE WITH HEX EDITOR!
 

Thats a good find hopefully someone could try and find out how to make the mp4 prowse through songs and do to activities at once or even make the mp4 work faster. I have no clue what any of the pic ment though.

Hey ko thats the same mp3 player I have.

The hex thing is great, only I don't know much about hex editing. But we need to find away to display the songs in a list. I think this is a great find because we can really use this. We need someone that knows a whole lot about hex.

Superboto

Great idea.
Unfort, I'm no programmer :( So don't know too much about what hacking it with a hex editor....

Hopefully someone else who is reading this might be able???? ;)

I'll see if I find some hex programmer to decode the firmware. And when I have more time, I'll also see if I find something in the FW that can be changed w/ the Hex editor! ^^

If there is some programmer here, please adivise us! =D

you guys might want to read this, it may help:
http://forums.g4tv.com/messageview.c...05&STARTPAGE=1

gta3dude

Just had a look.
Doesn't look like anyone knows much about it. In actual fact, did you find the replies from that site wasn't very helpful?

I've seen the forum you showed up gta3dude, but those fellas doesn't really know what's hex compiling.. ¬¬
By the way, any of you have any Hex Editor? If you don't, i could upload mine here! ;D

I've been looking the forum and I found something interesting:
+---filename---+ +---size---+ +--chksum--+
| SYSCFG.SYS | | 14kb | | 8AB246B6 |
| SYSBNKA.SYS | | 23.5kb | | 59AD9204 |
| SYSBNKB.SYS | | 18kb | | 564831F6 |
| ASCII.BIN | | 6kb | | 1B4869CE |
| LATIN2.BIN | | 6kb | | ED683A6A |
| LANRS.BIN | | 6kb | | 8471B347 |
| LANTK.BIN | | 6kb | | 6D3CCABB |
| LANIW.BIN | | 6kb | | E30B3D40 |
| THAI.BIN | | 6kb | | F5314F40 |
| FONT_GB.$$$ | | 238kb | | 10763F2D |
| FONT_B5.$$$ | | 461.5kb | | D22E11D5 |
| FONT_JP.$$$ | | 282kb | | FBEAD101 |
| FONT_KR.$$$ | | 264.5kb | | F8E28BB1 |
| FTBL_GB.$$$ | | 128kb | | 15838D9E |
| FTBL_B5.$$$ | | 128kb | | B668C06A |
| FTBL_JP.$$$ | | 128kb | | 67B14D2A |
| FTBL_KR.$$$ | | 128kb | | 707CBF05 |
| L1.$$$ | | 512bytes | | D51592ED |
| L2.$$$ | | 512bytes | | F40AF4B5 |
| L3.$$$ | | 512bytes | | 9DC5925C |
| L4.$$$ | | 512bytes | | 3DA01171 |
| L5.$$$ | | 512bytes | | 9ED8225C |
| AEAWB.DSP | | 15.5kb | | 699DEAAD |
| DSCDEC.DSP | | 45.5kb | | C8C21861 |
| PCMDEC.DSP | | 6.5kb | | 10C9A950 |
| ADPCMENC.DSP | | 5kb | | 0387E7A3 |
| AG8DEC.DSP | | 20kb | | 5073404E |
| AG8ENC.DSP | | 32kb | | 9BCD06B7 |
| WMADEC.DSP | | 97.5kb | | 0E07584E |
| MP3DEC.DSP | | 69.5kb | | CA7DF938 |
| MP3ENC.DSP | | 36.5kb | | 45A2920F |
| MTVDEC.DSP | | 66.5kb | | A62344E1 |
| ADENCM.DSP | | 6.5kb | | D2C08C56 |
| OGGDEC.DSP | | 81.5kb | | DDEA2E29 |
| AMVDEC.DSP | | 44kb | | 5D5C97D3 |
| GIFDEC.DSP | | 41kb | | 0D931242 |
| WMATABLE.BIN | | 13.5kb | | 9993E9B4 |
| OGGTABLE.BIN | | 13.5kb | | C69734B6 |
| ADFUS.BIN | | 9kb | | 21D089D3 |
| UD_FF644.DRV | | 4.5kb | | 820B6416 |
| UD_FF641.DRV | | 4.5kb | | D6E15528 |
| UD_FF321.DRV | | 4.5kb | | C3FCC724 |
| UD_SF644.DRV | | 4.5kb | | AE29603B |
| UD_SF641.DRV | | 4.5kb | | D2EB1D96 |
| UD_SF321.DRV | | 4.5kb | | 98542FE4 |
| UD_SDMMC.DRV | | 4.5kb | | 38A947BF |
| FS_FAT16.DRV | | 51.5kb | | AC554B31 |
| FS_FAT32.DRV | | 51.5kb | | B3DB8BC2 |
| VM_NANF.DRV | | 3.5kb | | BDE806E4 |
| SD_FF644.DRV | | 3.5kb | | B41F3A16 |
| SD_FF321.DRV | | 3.5kb | | 83CB08ED |
| SD_FF641.DRV | | 3.5kb | | E1B6CEC7 |
| UI_6B33S.DRV | | 20.5kb | | D89D38D2 |
| UI_6B33T.DRV | | 20.5kb | | 334310F7 |
| UI_6B33L.DRV | | 20.5kb | | DE209D08 |
| UI_6B_JP.DRV | | 20.5kb | | 395005EA |
| UI_6B_KR.DRV | | 20.5kb | | 2335DFC5 |
| UI_6B_TH.DRV | | 20.5kb | | B951FCD3 |
| UI_6B_L2.DRV | | 20.5kb | | C84AAC20 |
| UI_6B_L3.DRV | | 20.5kb | | D2819D25 |
| UI_6B_L4.DRV | | 20.5kb | | 789C51FB |
| UI_6B_L5.DRV | | 20.5kb | | 2949A639 |
| KY_HARD.DRV | | 1.5kb | | E7A9E2BF |
| UI30.RES | | 1.72mb | | 08BAD8EC |
| LOGO.RES | | 520.5kb | | EAEAA3D7 |
| END.RES | | 260.5kb | | 726DB261 |
| KCFG.AP | | 3kb | | 0B3FB97A |
| MAIN.AP | | 7.5kb | | BE5E5832 |
| STANDBY.AP | | 6.5kb | | 3F5CBFB8 |
| USBDISK.AP | | 15kb | | 25A4C2D1 |
| MUSIC.AP | | 88.5kb | | C17B1A30 |
| RECORD.AP | | 36kb | | C165414F |
| VOICE.AP | | 43.5kb | | 10392AE2 |
| SETTING.AP | | 17.5kb | | AD620550 |
| FMRADIO.AP | | 15.5kb | | 81EECAA1 |
| TESTER.AP | | 7kb | | F41555CF |
| FMRECORD.AP | | 36kb | | C476C273 |
| VIEWPIC.AP | | 34kb | | 35DE6AD7 |
| AMVDEC.AP | | 34kb | | A49C883A |
| READER.AP | | 35kb | | 0CF3D204 |
| TELBOOK.BIN | | 12.5kb | | B4529D90 |
| G2PIC.BIN | | 1kb | | 72A1C87B |
| DEMO.BOX | | 5kb | | 56DA3C25 |
| GAME.AP | | 29kb | | D4C12A90 |
| LINE.AP | | 36kb | | A9765E18 |
| TELBOOK.AP | | 12.5kb | | 120D8818 |
+--------------+ +----------+ +----------+
Press any key to continue . . .

If this program says there's ALL THESE FILES "compressed" in the firmware, there might be some way of editing each of these separately, getting the Job easier! ;D

Any of you know how to "extract" the files individualy?

As you can see,
GAME.AP | | 29kb | | D4C12A90
Is a file that contain games information. So, if you edit or paste other's FW games here without changing the whole FirmWare, there might be a chance of we, sharing each ones FW, have a whole collection of games and everything else that we want!! =D

We just need to discover how to edit'em separatelly! ;)

Lol, thats easy. :P
I improved the translations with extracting the firmware (you can write longer sentences without having errors when saving...). You need the prog "s1fwx_v30", then you create two batch files in the folder (new text document>rename to .bat instead of .txt).

the first one we call "extract_fw_file.bat"

and the second one you call something like "pack_fw_file.bat"

The extraction process was described in the wiki of s1mp3.org, I created the batch files to make it easier.

But I think switching games wont work, because nearly all resource files (for games, too) are in the UI30.RES file...

greets.

Re: EDITING FIRMWARE WITH HEX EDITOR!
 

yep, I think I screwd up my player.... tried editing the firmware with a hex editor, and uploaded it back on...now the player is stuck on the blue screen with the hourglass and doesnt do anything else. Windows can detect some USB device as USB2 (FS) ADFU Device, but no drive apears in "My computer" and the firmware upgrade tool cant "recover" or reload another firmware.

I guess i killed my MpxPlayer :(
if anyone has any suggestions just psot a reply

In the "dead recovery section" of this forum are good tips, that may help you. ;)

greets

Very interesting indeed! ;D
I've just came back of a party and I'm too sleepy... =P
Tomorrow if I have time I'll create these batch files and see if I find something ok?! ;)
Thaks for the contribuition!! =D

Do you know what would be fantastic? A MP4 emulator for the PC! we wouldn't need to upload the firmware to check the changes... we could see the changes almost in real time.. and withouth the danger of harming the player...

probably it doesn't exist..but who knows...

Re: EDITING FIRMWARE WITH HEX EDITOR!
 

Any file that is executed in every machine in every S.O. can be read in Hexa. BUT if you want to make a change you must know the microcontroller that is executing the codes, how to program it, and the S.O. then diassemble the file. Then you must undertand what the code does, find what changes into the code you want to make and where in the address of the file you want to change and the code of it in hex. Then and just then you can open that file with an Hex Editor and change the values. If not, you're making a MPx killer firmware. :lol:

Never do HexEdit without diassembling the code and know what it do. And it's impossible to do it without having the processor model of the MP4, his instruction set, without knowledge of how the codes executes, etc...

Also, making a MP4 emulator needs the same kind of knowledge.

If you guys still want to make some hexedit, i've heard some rumors that the processor is Z80, a very extended use processor. Here's some info: http://en.wikipedia.org/wiki/Z80
The best way to verify this is opening the player.

This is my third day with my MP4 player.
I've open the player and i've found 2 chips. 1 samsung memory and a atj2085tj chip. It works with Z80 intruction set. Also searching for the datasheet of the chip, i've found a page that is working on a proyect for making a firmware, an atj2085tj emulator and some interesting things. Here is: http://www.s1mp3.org/

Bump!
Yep, Z80 is a very common chip. There have been many microcomputers based on the architecture, and TI calcs too. (I've been doing the USB flash drive to calc thing.)
What we need is some really good programmers. Anyone know where to look? I know camerahacking.com is a nice place, for one.
In any case, I thought s1mp3 released their firmware open source. True?

that's a awesome Idea!!

Re: EDITING FIRMWARE WITH HEX EDITOR!
 

i've tried various Z80 dis-assembly softwares to dis-assemble the firmware file, but many at which either hangs my laptop while doing so, or totally is unable to dis-assemble it.

What Fuma had mentioned about editting the hex directly is true, editting directly without knowing the microcontroller's process handling would most definately kill the player. Just take a look at the number of dead players in the forum, all the wrong firmware updates were actual working extracted firmwares from other members. But in the wrong player with probably different hardware layout, killed their players instantly.

I guess it is pretty much a long way to go to be able to fully customise the player in every particular detail. But lets hope someone is able to do it! :)

Re: EDITING FIRMWARE WITH HEX EDITOR!
 

I think you can do more when you try to disasemble it. You'll need an emulator for it so you can read the assembler code. When you have a emulator you can do virtually anything.