release
dev builds
extras
themes manual
wiki
device status forums
mailing lists
IRC bugs
patches
dev guide



Search | Go
Wiki > Main > SonyNWZE460 > SonyNWZE460Analysis

Sony NWZ-E460 Analysis


Overview

This page describes what we know about the Sony NWZ-E460 Series.

Dumps

Here are a few useful pieces of information:

In firmware upgrade mode:
  • output of mount NOTE: the /contents file-system is mounted read-only, but the dumping script remounts in read-write mode.
  • output of dmesg
  • output of sysinfo
  • output of mmcinfo map
  • live content of FU initrd

Dumps were obtained using scripts in utils/nwztools/scripts in the repository.

History (aka Ode to AmauryPouly)

The NWZ-E460 was the very first Linux-based Sony player of which I successfully dumped the root filesystem. By removing the SonyNWZE460MMCBoard and hooking it up to a microcontroller, I was able to dump the entire flash. This allowed me to reverse engineer the upgrade and encryption code from the device. I was also able to reverse engineer the SCSI command, the NVP map. After bricking my device 2 times and recovering by rewriting parts of the eMMC using a microcontroller, I was able to create the vert first non-Sony firmware upgrade.

-- AmauryPouly - 17 Aug 2016
I Attachment Action Size Date Who Comment
dmesg.txttxt dmesg.txt manage 6.6 K 17 Aug 2016 - 13:41 AmauryPouly  
fu_initrd.tar.gzgz fu_initrd.tar.gz manage 3004.1 K 17 Aug 2016 - 20:53 AmauryPouly  
mmcinfo_map.txttxt mmcinfo_map.txt manage 1.0 K 17 Aug 2016 - 14:16 AmauryPouly  
mount.txttxt mount.txt manage 0.3 K 17 Aug 2016 - 13:41 AmauryPouly  
sysinfo.txttxt sysinfo.txt manage 0.2 K 17 Aug 2016 - 14:16 AmauryPouly  
r2 - 17 Aug 2016 - 20:54:37 - AmauryPouly


Parents: SonyNWZE460
Copyright by the contributing authors.