Rockbox Development > New Ports

Creative Zen Vision:M

<< < (33/136) > >>

larryzotter:
What would be a good software to "see" whats in the nk.bin fle? I've tried a hex editor with not much luck.

jhulst:

--- Quote from: larryzotter on April 21, 2007, 07:47:22 PM ---What would be a good software to "see" whats in the nk.bin fle? I've tried a hex editor with not much luck.

--- End quote ---

Check out reply #157 for how mcuelenaere does it.

koston:
So watch this:

http://www.bilder-speicher.de/07042521261533.vollbild.html

Seems to be a lot of Cryptoshit inside ;)


--- Quote ---In the library, at line 7C93CF82, there are some references to Image Checksum.  From my understanding, one of the functions calls "LdrVerifyImageMatchesChecksum" which is at 7C93CFE4.  This may be where the checksum is calculated.
--- End quote ---

This is inside the ntdll.dll. There cant be a checksum calculation, because this is a Windows library. The checksum calculation must be inside the code of ZENVisionM_30GB_PCFW_L21_1_61_01.exe. The Windows DLLs you mostly use for creating Messageboxes (user32.MessageBoxW for example) or something like that.

mcuelenaere:

--- Quote from: koston on April 25, 2007, 03:55:12 PM ---So watch this:

http://www.bilder-speicher.de/07042521261533.vollbild.html

Seems to be a lot of Cryptoshit inside ;)

--- End quote ---
I got this:

--- Code: ---ADLER32 :: 0001609C :: 0041609C
The reference is above.
Adler32 checksum (unsigned 32-bit integer, BASE value); used by ZLIB compression library
ADLER32 :: 00016171 :: 00416171
The reference is above.
Adler32 checksum (unsigned 32-bit integer, BASE value); used by ZLIB compression library
CRC32 :: 0004F700 :: 0044F700
Referenced at 004162CF
Referenced at 0041631E
Referenced at 00416364
Referenced at 004163A6
Referenced at 004163E6
Referenced at 00416425
Referenced at 0041646A
Referenced at 004164AF
Referenced at 004164EF
Referenced at 00416544
Referenced at 00416570
CRC32 precomputed table for byte transform
DES [long] :: 00051D90 :: 00451D90
The reference is above.
DES: transformation nibbles
ECC: DRM (Microsoft), prime modulus :: 00051AB4 :: 00451AB4
Referenced at 0041972B
Microsoft elliptic curve, prime modulus of DRM curve
MD4 :: 00027663 :: 00427663
The reference is above.
MD4 transform & init constants (also used in SHA, RIPEMD, partly in CAST)
MD5 :: 0002586D :: 0042586D
The reference is above.
MD5 transform (\"compress\") constants
SHA1 [Compress] :: 0002326A :: 0042326A
The reference is above.
SHA1 additive constants (also used in SHA, SEAL, partly in RIPEMD)
SHA1 [Compress] :: 00023DBF :: 00423DBF
The reference is above.
SHA1 additive constants (also used in SHA, SEAL, partly in RIPEMD)
ZLIB deflate [word] :: 0004F600 :: 0044F600
Referenced at 00415D0C
ZLIB deflate compression algorithm - literal code lengths, used to build the trees

--- End code ---

mcuelenaere:
Some functions I've found in the .exe (named them myself):

FirmwareChk at 00413E10 (big function, has a lot of checks of nk.bin in it)
FORMAT_FIRMWARE at 00417A30 (I suppose here ZVM's firmware is erased)
FIRMWARE_DOWNLOAD at 00417CE0 (and here it is uploaded?)
CheckFormatSupport() at 00417FB0 (name was found in the strings)
ChkSumInit at 004229B0 (has something to do with the CheckSum; I strongly believe it is SHA1 or RIPEMD160) --> this one uses a lot of SHA1 constants, so I believe the SHA1 hash is generated here

(SetRegSeed at 00424275)
(CreateRegRNGKey at 004242B8)
-> these are from minor importance

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version