Type title here...

Type title here... http://www.pentax-hack.info/documents/blog.php Type description here... en-us Fri, 23 Apr 2010 03:22:36 -0500 Fri, 23 Apr 2010 03:22:36 -0500 http://blogs.law.harvard.edu/tech/rss www.ezgenerator.com Donate for GH1 hack project! We need your help to obtain GH1 body for experiments, as we can't risk cameras belonging to ordinary users until all testing will be complete.   Go to www.gh1-hack.info   and donate, even $5 could be very helpful.   If you donate more then $25, email me with request and your name to be present in dvxuser.com thread, on this blog and on upcoming www.gh1-hack.info  front page! http://www.pentax-hack.info/documents/blog.php?entry_id=1272010956 General http://www.pentax-hack.info/documents/blog.php?entry_id=1272010956&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1272010956 Fri, 23 Apr 2010 03:22:36 -0500 GH1 firmware update research Panasonic original V1.12 firmware update:   http://panasonic.jp/support/global/cs/dsc/download/fts/dl/gh1.html   My firmware manipulation tool   http://www.pentax-hack.info/firmware/pan/ptool.zip   We need you to test some parameters of update procedures   Detailed instructions:   1) Place prool.zip and GH1__V12.zip inside one folder. 2) Extract both archives and delete zip files. 3) Now you must have five files - ptool.exe, make1.bat, make2.bat, make3.bat, GH1___112.BIN 4) Run make1.bat (minimal risk version patch, firmware are touched only at the digest part) 5) ... http://www.pentax-hack.info/documents/blog.php?entry_id=1271689642 General http://www.pentax-hack.info/documents/blog.php?entry_id=1271689642&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1271689642 Tue, 20 Apr 2010 04:32:50 -0500 GH1 related Current progress of GH firmware reversing can be found at:   http://www.dvxuser.com/V6/showthread.php?t=206788   I'll upate my blog with more technical informaton soon.   If you have dead GH1 (dropped, completely broken, non-functional parts) contact me, please.   I will be also very grateful for any information that you have, but it private information or one that can ve released to public. http://www.pentax-hack.info/documents/blog.php?entry_id=1271489506 Disassembling http://www.pentax-hack.info/documents/blog.php?entry_id=1271489506&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1271489506 Sat, 17 Apr 2010 02:33:17 -0500 More info on Panasonic Here is additional info for Panasonic cameras reversing.     Loading address for GH1 seems to be 0x40000000.     Fixed some nasty bug in processor module (reload it if you need).     Below is also links for MN103 processor related documentation : http://pentax-hack.info/firmware/pan/A000131E.pdf http://pentax-hack.info/firmware/pan/13250-040e.pdf http://www.pentax-hack.info/documents/blog.php?entry_id=1271252393 General http://www.pentax-hack.info/documents/blog.php?entry_id=1271252393&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1271252393 Wed, 14 Apr 2010 08:39:53 -0500 Panasonic Cameras All Panasonic photo cameras use proprietary LSI chips. CPU command set looks like NM103.   If you want to research or modify GH1, TZ5, TZ7 etc firmware here are necessary tools   My firmware manipulation tool http://www.pentax-hack.info/firmware/pan/ptool.zip   It allow you to strip all unnecessary info and disassembly firmware, after modification you can use same tool to make all necessary checksums. Unfortunately this version can't recalculate big 32 byte digest at the end of firmware. According ... http://www.pentax-hack.info/documents/blog.php?entry_id=1271056475 Disassembling http://www.pentax-hack.info/documents/blog.php?entry_id=1271056475&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1271056475 Mon, 12 Apr 2010 02:15:20 -0500 News about Samsing NX10 Just looked on NX10 firmware and it looks that it also have special DEVELOPER MENU. One of the most useful functions is ability to disable movie recording limit and allow to work with any lenses without costly chipped adapter. May be it'll be possible to make it output RAW data during recording via HDMI, or at least bump H.264 bitrate even higher.   Some information: 1) Looks like CPU is FR based, so tools from ... http://www.pentax-hack.info/documents/blog.php?entry_id=1269385424 General http://www.pentax-hack.info/documents/blog.php?entry_id=1269385424&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1269385424 Tue, 23 Mar 2010 18:03:44 -0500 Some info about SYSPARAM.TXT In Debug page I published some info about SYSPARAM.TXT file. I belive that most interesting is to play with noise reduction setting. Do not use other commands without STORE prefix, as it is quite dangerous. http://www.pentax-hack.info/documents/blog.php?entry_id=1252482102 General http://www.pentax-hack.info/documents/blog.php?entry_id=1252482102&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1252482102 Wed, 09 Sep 2009 02:41:42 -0500 Disassembling progress Here is some illustration of progress   1) Primer of offset table usage to call functions. This is very interesting part, as it allows to dump vram.   2) Second part shows part of shooting speed related procedure, here you can find how big structure is used. I believe that at 0x68 we have mode wheel position.     http://www.pentax-hack.info/documents/blog.php?entry_id=1251213028 Disassembling http://www.pentax-hack.info/documents/blog.php?entry_id=1251213028&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1251213028 Tue, 25 Aug 2009 10:10:50 -0500 Info about Samsung GX1 from real users Debug mode can be succesfully enabled on Samsung GX-1S with firmware 1.02. Unfortunately, there is no debug menu like on newer cameras. The same procedure will probably work on all *ist and GX1 cameras. Only the MODSET and AUTORUN extensions may differ.   1. Format SD card in camera (I tested 16MB and 128MB) 2. Create file MODSET.TXT in root of SD with desired testmode (only one option at time) 3. Insert ... http://www.pentax-hack.info/documents/blog.php?entry_id=1250659365 General http://www.pentax-hack.info/documents/blog.php?entry_id=1250659365&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1250659365 Wed, 19 Aug 2009 00:22:45 -0500 Improved processor module Below is link where you can get improved FR processor module to work with IDA 4.9 Free.   1. This is first public release. 2. Fixed errors with processing cfg file. 3. New cfg files to make automatic parsing of all interrupts in TBR. 4. Includes FR assembler auto-comments file.   Press to get module.   http://www.pentax-hack.info/documents/blog.php?entry_id=1250514609 General http://www.pentax-hack.info/documents/blog.php?entry_id=1250514609&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1250514609 Mon, 17 Aug 2009 08:10:09 -0500 REALOS information Some information update   Latest Softune (with MB91680 support) www.pentax-hack.info/firmware/fujitsu/softune2.zip CPU definitions file have some info about MB91680 interrupts.   REALOS related stuff :-) www.pentax-hack.info/firmware/fujitsu/kernel.zip www.pentax-hack.info/firmware/fujitsu/tools.zip   Last file has tools and good manuals on RealOS functions. First one has libraries on sources of kernel functions (works with Softune). It looks that DSLRs use RealOS, as they heavy use 0x40 and 0x41 interrupts. In early Pentax DSLRs "Softune REALOS/FR.." string was present.   If you ... http://www.pentax-hack.info/documents/blog.php?entry_id=1250323548 General http://www.pentax-hack.info/documents/blog.php?entry_id=1250323548&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1250323548 Sat, 15 Aug 2009 03:08:27 -0500 Necessary IDA improvements Four necessary improvements are:   1) Handing of jump tables. This is very frequently used feature. 2) Script to handle offset tables (many of them are present),    so pressing two keys automatically changes all to offsets    (until it is proper address and stops as soon as it is not)    add xref and start analizing procedures. 3) Many parameters are passed by registers. If we could track them somehow and  ... http://www.pentax-hack.info/documents/blog.php?entry_id=1250062645 Disassembling http://www.pentax-hack.info/documents/blog.php?entry_id=1250062645&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1250062645 Wed, 12 Aug 2009 02:38:15 -0500 New team member Cvetan Ivanov is joining our small team!   Welcome aboard, Cvetan! I am sure you'll help us to get tail wind :-)   Some info from Cvetan about MODSET files for K10D/GX10 v1.20-v1.30 firmware.   Use MODSET.TXT and leave card door open. http://www.pentax-hack.info/documents/blog.php?entry_id=1250055442 General http://www.pentax-hack.info/documents/blog.php?entry_id=1250055442&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1250055442 Wed, 12 Aug 2009 00:37:22 -0500 Getting closer Screenshot from disassembler during work on GX20 DSP firmware.     We are using IDA Pro 4.9 Free with special Fujitsu FR module. If you know IDA Pro and want to help us in this hard work by writing IDC scripts, updating FR module or just help with disassembling, contact me by email.   http://www.pentax-hack.info/documents/blog.php?entry_id=1249962835 Disassembling http://www.pentax-hack.info/documents/blog.php?entry_id=1249962835&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1249962835 Mon, 10 Aug 2009 22:53:55 -0500 More complicated script AUTORUN.xxx working script %A = 1000 WHILE %A < 1004 { PRINT "Hex value %x" %A %A += 1 } PAUSE %B = 50 PRINT "B=%d" %B PAUSE EXIT   As you can see, it uses integer variables, loop and printing of values. http://www.pentax-hack.info/documents/blog.php?entry_id=1249739440 General http://www.pentax-hack.info/documents/blog.php?entry_id=1249739440&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1249739440 Sat, 08 Aug 2009 08:50:40 -0500 Additional info about MODSET commands Some info about GX20 v1.01 and MODSET and AUTORUN functions. MODSET.xxx works with turning on with open or closed (!) SD door (without any buttons). Note! You must not have AUTORUN.xxx for MODSET.xxx to work :-) All previously mentioned commands seems to work.   Additional info below: [VLENS_CTRL] displays VLENS CONTROL on screen and do not react to keys I tried. We must find key combination that toggles SDM On/off and PZ On/Off.   [OPEN_DEBUG_MENU] Opens large debug ... http://www.pentax-hack.info/documents/blog.php?entry_id=1249713583 General http://www.pentax-hack.info/documents/blog.php?entry_id=1249713583&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1249713583 Sat, 08 Aug 2009 01:41:19 -0500 First disassembly results Enabling debug mode.   Make file named 'MODSET.xxx' in flash card root. Note! xxx is different for each model. in file write commands exactly as they are provided, use notepad or other simple text editor.   MODSET file name Camera model File name K10D with firmware v1.10 MODSET.421 (don't work with v1.20 and v1.30!) GX10 with firmware v1.10 MODSET.429 (same as K10D) GX20 ... http://www.pentax-hack.info/documents/blog.php?entry_id=1249616275 General http://www.pentax-hack.info/documents/blog.php?entry_id=1249616275&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1249616275 Fri, 07 Aug 2009 05:40:24 -0500 Firmware dumping technique Dumping   Now you can dump any firmware from most PENTAX DSLR models. How to do it? Make two MODSET.xxx files   First MODSET.xxx file [CPU_ROM_STORE]   Second MODSET.xxx file [DSP_ROM_STORE]   Copy first file to root of your flash card. Turn on your camera. Wait before dumping is completed. Turn camera off. Copy second file to root of your flash card. Turn ... http://www.pentax-hack.info/documents/blog.php?entry_id=1249617298 Dumping http://www.pentax-hack.info/documents/blog.php?entry_id=1249617298&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1249617298 Thu, 06 Aug 2009 22:54:58 -0500 Script interpreter How to turn build in script interpreter   You must enable script mode :   MODSET.xxx file [SCRIPT_EN_MODE EN]   Make 'AUTORUN.xxx' file (xxx same as in MODSET file) with script inside.   Available BASIC keywords END, EXIT, PAUSE, WAIT, GOTO, IFGOTO, ALLCLR, CLS, PRINT, LANGUAGE, COLOR, $ % ( for values ) GOSUB, IFGOSUB , RETURN, IF, ELSE, WHILE, INTERVAL, CYCLE, FILEOUT, FSEARCH, TIMERON, ... http://www.pentax-hack.info/documents/blog.php?entry_id=1249616792 General http://www.pentax-hack.info/documents/blog.php?entry_id=1249616792&comments=comments http://www.pentax-hack.info/documents/blog.php?entry_id=1249616792 Thu, 06 Aug 2009 22:46:32 -0500