Creative Zen Vision:M

[jhulst]

Hypothetically, would you be willing to do this, or else mail the EEPROM chip to someone with the equipment?

I don't have the equipment for this, but I would be happy to mail it to somebody who does.

hey are you sure his gonna send you it?

Last I heard he was going to.  This was on Monday or Tuesday, I have not heard back since.

jwh

[mitch04]

oh k i found it, it was toxi that has a creative zen vision m that the screen is broken so toxi
 would you be able to send it to  jhulst ? to help out for rockbox

[MagistrateD]

I do not know much (any) C++ or anything about hardware but i have a fully functional zvm that if someone tells me what to try i will (I do not want to give it away, sry, once the firmware is cracked im looking forward to using it).

[saratoga]

I do not know much (any) C++ or anything about hardware but i have a fully functional zvm that if someone tells me what to try i will (I do not want to give it away, sry, once the firmware is cracked im looking forward to using it).

Rockbox doesn't use c++, so you won't need to know anything about that.  What would be useful is someone figuring out a way to run code on the Zen, so feel free to look through this thread, and start digging into the Zen's retail firmware.

[mcuelenaere]

Hi,

I tried to disassemble the FBOOT block of the firmware with IDA, and I think I have some results, the only problem is I don't have any knowledge of ASM!

Could anyone with some IDA experience check if I'm on the right track, or if I'm doing this completely wrong ? (http://www.verzend.be/v/557093/FBOOT.rar.html)

Thx!

[saratoga]

Hi,

I tried to disassemble the FBOOT block of the firmware with IDA, and I think I have some results, the only problem is I don't have any knowledge of ASM!

I don't think theres any point in reading the asm if you don't understand it.  What are you trying to do?  If you just want to learn asm, theres easier ways to do that.

[jhulst]

We now have some initial scans of the ZVM in the wiki  Hopefully more will be coming soon.

jwh

[jhulst]

As of now, I have not heard from Toxi in about 8 days. I'm going to assume that he had a change of heart unless I hear otherwise.  Anybody have any ideas on how we could get a different unit to take apart and remove the EEPROM?  Maybe we could get a broken one off of Ebay or some other place.

jwh

[Bagder]

We've successfully bought broken players before on ebay for dissecting purposes...

[mitch04]

oh really so mabe we can put some money in to get one

[jhulst]

There seem to be a few cheap ones on Ebay ending in a few hours.
Here and here
Any thoughts on these?

jwh

[jhulst]

Toxi,
I'd be willing to buy your broken ZVM if you decided you don't want to donate it.  You can contact me off the forum if you are interested.

jwh

[bgdwie]

hi, i have no experience in programming what so ever, but, i have a unit, some will and a large amount of spare time. i was thinking, can't you just brute force the checksum somehow, once you get a match, do it a few more times then find a pattern or look through for where the player makes/generates the checksum?

[saratoga]

hi, i have no experience in programming what so ever, but, i have a unit, some will and a large amount of spare time. i was thinking, can't you just brute force the checksum somehow, once you get a match, do it a few more times then find a pattern or look through for where the player makes/generates the checksum?

If you figure out how to brute force the checksum, or to get the assembly used by the player to generate the checksum, be sure to tell us.  Until then, yes its possible, but someone needs to figure out a way to do it.

[iSE]

I am extremely interested in this issue and would very much like to help if I can.