Deprecated: Assigning the return value of new by reference is deprecated in /home2/tster13a/pentax/documents/htmlMimeMail.php on line 405
Deprecated: Assigning the return value of new by reference is deprecated in /home2/tster13a/pentax/documents/htmlMimeMail.php on line 422
Deprecated: Assigning the return value of new by reference is deprecated in /home2/tster13a/pentax/documents/htmlMimeMail.php on line 433
Deprecated: Assigning the return value of new by reference is deprecated in /home2/tster13a/pentax/documents/htmlMimeMail.php on line 447
Deprecated: Assigning the return value of new by reference is deprecated in /home2/tster13a/pentax/documents/htmlMimeMail.php on line 463
Deprecated: Function split() is deprecated in /home2/tster13a/pentax/documents/blog.php on line 40
Warning: Cannot modify header information - headers already sent by (output started at /home2/tster13a/pentax/documents/htmlMimeMail.php:405) in /home2/tster13a/pentax/documents/blog.php on line 3766 Type title here...
http://www.pentax-hack.info/documents/blog.php
Type description here...en-usFri, 23 Apr 2010 03:22:36 -0500Fri, 23 Apr 2010 03:22:36 -0500http://blogs.law.harvard.edu/tech/rssDonate for GH1 hack project! We need your help to obtain GH1 body for experiments, as we can't risk cameras belonging to ordinary users until all testing will be complete.
Go to www.gh1-hack.info and donate, even $5 could be very helpful.
If you donate more then $25, email me with request and your name to be present in dvxuser.com thread, on this blog and on upcoming www.gh1-hack.info front page! <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1272010956
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1272010956&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1272010956Fri, 23 Apr 2010 03:22:36 -0500GH1 firmware update research
Panasonic original V1.12 firmware update:
http://panasonic.jp/support/global/cs/dsc/download/fts/dl/gh1.html
My firmware manipulation tool
http://www.pentax-hack.info/firmware/pan/ptool.zip
We need you to test some parameters of update procedures
Detailed instructions:
1) Place prool.zip and GH1__V12.zip inside one folder.
2) Extract both archives and delete zip files.
3) Now you must have five files - ptool.exe, make1.bat, make2.bat, make3.bat, GH1___112.BIN
4) Run make1.bat (minimal risk version patch, firmware are touched only at the digest part)
5) ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1271689642
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1271689642&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1271689642Tue, 20 Apr 2010 04:32:50 -0500GH1 related Current progress of GH firmware reversing can be found at:
http://www.dvxuser.com/V6/showthread.php?t=206788
I'll upate my blog with more technical informaton soon.
If you have dead GH1 (dropped, completely broken, non-functional parts) contact me, please.
I will be also very grateful for any information that you have, but it private information or one that can ve released to public. <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1271489506
Disassemblinghttp://www.pentax-hack.info/documents/blog.php?entry_id=1271489506&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1271489506Sat, 17 Apr 2010 02:33:17 -0500More info on Panasonic Here is additional info for Panasonic cameras reversing.
Loading address for GH1 seems to be 0x40000000.
Fixed some nasty bug in processor module (reload it if you need).
Below is also links for MN103 processor related documentation :
http://pentax-hack.info/firmware/pan/A000131E.pdf
http://pentax-hack.info/firmware/pan/13250-040e.pdf <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1271252393
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1271252393&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1271252393Wed, 14 Apr 2010 08:39:53 -0500Panasonic Cameras All Panasonic photo cameras use proprietary LSI chips.
CPU command set looks like NM103.
If you want to research or modify GH1, TZ5, TZ7 etc firmware here are necessary tools
My firmware manipulation tool
http://www.pentax-hack.info/firmware/pan/ptool.zip
It allow you to strip all unnecessary info and disassembly firmware, after modification you can use same tool to make all necessary checksums.
Unfortunately this version can't recalculate big 32 byte digest at the end of firmware.
According ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1271056475
Disassemblinghttp://www.pentax-hack.info/documents/blog.php?entry_id=1271056475&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1271056475Mon, 12 Apr 2010 02:15:20 -0500News about Samsing NX10 Just looked on NX10 firmware and it looks that it also have special DEVELOPER MENU.
One of the most useful functions is ability to disable movie recording limit and allow to work with any lenses without costly chipped adapter.
May be it'll be possible to make it output RAW data during recording via HDMI, or at least bump H.264 bitrate even higher.
Some information:
1) Looks like CPU is FR based, so tools from ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1269385424
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1269385424&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1269385424Tue, 23 Mar 2010 18:03:44 -0500Some info about SYSPARAM.TXT In Debug page I published some info about SYSPARAM.TXT file.
I belive that most interesting is to play with noise reduction setting.
Do not use other commands without STORE prefix, as it is quite dangerous. <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1252482102
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1252482102&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1252482102Wed, 09 Sep 2009 02:41:42 -0500Disassembling progress Here is some illustration of progress
1) Primer of offset table usage to call functions. This is very interesting part, as it allows to dump vram.
2) Second part shows part of shooting speed related procedure, here you can find how big structure is used. I believe that at 0x68 we have mode wheel position.
<br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1251213028
Disassemblinghttp://www.pentax-hack.info/documents/blog.php?entry_id=1251213028&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1251213028Tue, 25 Aug 2009 10:10:50 -0500Info about Samsung GX1 from real users Debug mode can be succesfully enabled on Samsung GX-1S with firmware 1.02.
Unfortunately, there is no debug menu like on newer cameras.
The same procedure will probably work on all *ist and GX1 cameras.
Only the MODSET and AUTORUN extensions may differ.
1. Format SD card in camera (I tested 16MB and 128MB)
2. Create file MODSET.TXT in root of SD with desired testmode (only one option at time)
3. Insert ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1250659365
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1250659365&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1250659365Wed, 19 Aug 2009 00:22:45 -0500Improved processor module Below is link where you can get improved FR processor module to work with IDA 4.9 Free.
1. This is first public release.
2. Fixed errors with processing cfg file.
3. New cfg files to make automatic parsing of all interrupts in TBR.
4. Includes FR assembler auto-comments file.
Press to get module.
<br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1250514609
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1250514609&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1250514609Mon, 17 Aug 2009 08:10:09 -0500REALOS information Some information update
Latest Softune (with MB91680 support)
www.pentax-hack.info/firmware/fujitsu/softune2.zip
CPU definitions file have some info about MB91680 interrupts.
REALOS related stuff :-)
www.pentax-hack.info/firmware/fujitsu/kernel.zip
www.pentax-hack.info/firmware/fujitsu/tools.zip
Last file has tools and good manuals on RealOS functions. First one has libraries on sources of kernel functions (works with Softune).
It looks that DSLRs use RealOS, as they heavy use 0x40 and 0x41 interrupts.
In early Pentax DSLRs "Softune REALOS/FR.." string was present.
If you ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1250323548
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1250323548&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1250323548Sat, 15 Aug 2009 03:08:27 -0500Necessary IDA improvements Four necessary improvements are:
1) Handing of jump tables. This is very frequently used feature.
2) Script to handle offset tables (many of them are present),
so pressing two keys automatically changes all to offsets
(until it is proper address and stops as soon as it is not)
add xref and start analizing procedures.
3) Many parameters are passed by registers. If we could track them somehow and ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1250062645
Disassemblinghttp://www.pentax-hack.info/documents/blog.php?entry_id=1250062645&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1250062645Wed, 12 Aug 2009 02:38:15 -0500New team member Cvetan Ivanov is joining our small team!
Welcome aboard, Cvetan!
I am sure you'll help us to get tail wind :-)
Some info from Cvetan about MODSET files for K10D/GX10 v1.20-v1.30 firmware.
Use MODSET.TXT and leave card door open. <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1250055442
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1250055442&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1250055442Wed, 12 Aug 2009 00:37:22 -0500Getting closer Screenshot from disassembler during work on GX20 DSP firmware.
We are using IDA Pro 4.9 Free with special Fujitsu FR module.
If you know IDA Pro and want to help us in this hard work by writing IDC scripts,
updating FR module or just help with disassembling, contact me by email.
<br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1249962835
Disassemblinghttp://www.pentax-hack.info/documents/blog.php?entry_id=1249962835&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1249962835Mon, 10 Aug 2009 22:53:55 -0500More complicated script
AUTORUN.xxx working script
%A = 1000 WHILE %A < 1004 { PRINT "Hex value %x" %A %A += 1 } PAUSE %B = 50 PRINT "B=%d" %B PAUSE EXIT
As you can see, it uses integer variables, loop and printing of values. <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1249739440
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1249739440&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1249739440Sat, 08 Aug 2009 08:50:40 -0500Additional info about MODSET commands
Some info about GX20 v1.01 and MODSET and AUTORUN functions. MODSET.xxx works with turning on with open or closed (!) SD door (without any buttons). Note! You must not have AUTORUN.xxx for MODSET.xxx to work :-) All previously mentioned commands seems to work.
Additional info below: [VLENS_CTRL] displays VLENS CONTROL on screen and do not react to keys I tried. We must find key combination that toggles SDM On/off and PZ On/Off.
[OPEN_DEBUG_MENU] Opens large debug ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1249713583
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1249713583&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1249713583Sat, 08 Aug 2009 01:41:19 -0500First disassembly results Enabling debug mode.
Make file named 'MODSET.xxx' in flash card root.
Note! xxx is different for each model. in file write commands exactly as they are provided, use notepad or other simple text editor.
MODSET file name
Camera model
File name
K10D with firmware v1.10
MODSET.421 (don't work with v1.20 and v1.30!)
GX10 with firmware v1.10
MODSET.429 (same as K10D)
GX20 ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1249616275
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1249616275&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1249616275Fri, 07 Aug 2009 05:40:24 -0500Firmware dumping technique Dumping
Now you can dump any firmware from most PENTAX DSLR models.
How to do it?
Make two MODSET.xxx files
First MODSET.xxx file
[CPU_ROM_STORE]
Second MODSET.xxx file
[DSP_ROM_STORE]
Copy first file to root of your flash card.
Turn on your camera. Wait before dumping is completed. Turn camera off.
Copy second file to root of your flash card.
Turn ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1249617298
Dumpinghttp://www.pentax-hack.info/documents/blog.php?entry_id=1249617298&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1249617298Thu, 06 Aug 2009 22:54:58 -0500Script interpreter
How to turn build in script interpreter
You must enable script mode :
MODSET.xxx file
[SCRIPT_EN_MODE EN]
Make 'AUTORUN.xxx' file (xxx same as in MODSET file) with script inside.
Available BASIC keywords
END, EXIT, PAUSE, WAIT, GOTO, IFGOTO, ALLCLR, CLS, PRINT, LANGUAGE, COLOR, $ % ( for values ) GOSUB, IFGOSUB , RETURN, IF, ELSE,
WHILE, INTERVAL, CYCLE, FILEOUT, FSEARCH,
TIMERON, ... <br clear="all">
http://www.pentax-hack.info/documents/blog.php?entry_id=1249616792
Generalhttp://www.pentax-hack.info/documents/blog.php?entry_id=1249616792&comments=commentshttp://www.pentax-hack.info/documents/blog.php?entry_id=1249616792Thu, 06 Aug 2009 22:46:32 -0500