about this blog

Here you can find latest hack progress reports and other raw information.


recent entries   

Donate for GH1 hack project! 

-April 23, 2010

GH1 firmware update research 

-April 19, 2010

GH1 related 

-April 17, 2010

More info on Panasonic 

-April 14, 2010

Panasonic Cameras 

-April 12, 2010

recent comments

for two weeks i have been asking how to use frmcrypt.exe, it loads in win7 ... 

-October 04, 2014

hello I've discovered this site searching for the state-of-the-art about any pentax hack. With the ... 

-May 29, 2013

Just a hunch. The last three digits are 505 for K5, and 504 for ... 

-October 23, 2012

Is there a way to disable dfs on my K7 with v1.11 firmware? 

-February 22, 2012

As a practical matter since you can stuff 100,000 files into a FAT32 file system, ... 

-November 30, 2011


april 2010

march 2010

september 2009

august 2009


General (13)

Dumping (1)

Disassembling (5)

Features (0)


Saturday, August 15, 2009


Some information update
Latest Softune (with MB91680 support)

CPU definitions file have some info about MB91680 interrupts.
REALOS related stuff :-)
Last file has tools and good manuals on RealOS functions.
First one has libraries on sources of kernel functions (works with Softune).
It looks that DSLRs use RealOS, as they heavy use 0x40 and 0x41 interrupts.
In early Pentax DSLRs "Softune REALOS/FR.." string was present.
If you have good Japanese knowledge, contact me, please!

I really hope to get MB91680 manuals :-)

General  comments (0)

Wednesday, August 12, 2009


Four necessary improvements are:

1) Handing of jump tables. This is very frequently used feature.

2) Script to handle offset tables (many of them are present),

   so pressing two keys automatically changes all to offsets

   (until it is proper address and stops as soon as it is not)

   add xref and start analizing procedures.

3) Many parameters are passed by registers. If we could track them somehow and  allow to quickly define this in function definition, so comments can be seen right after commands before call (ala pc.w32).

4) FR module have almost ready auto-comments. Is it desirable to make them work inside IDE (as gray auto-comments). As most people are quite new to this assembler.

If you have time and expirience working with IDA writing IDC scripts and/or plugins and modules, please, contact me.

Disassembling  comments (2)

Wednesday, August 12, 2009


Cvetan Ivanov is joining our small team!
Welcome aboard, Cvetan!
I am sure you'll help us to get tail wind :-)
Some info from Cvetan about MODSET files for K10D/GX10 v1.20-v1.30 firmware.
Use MODSET.TXT and leave card door open.

General  comments (3)

Monday, August 10, 2009


Screenshot from disassembler during work on GX20 DSP firmware.
We are using IDA Pro 4.9 Free with special Fujitsu FR module.
If you know IDA Pro and want to help us in this hard work by writing IDC scripts,
updating FR module or just help with disassembling, contact me by email.

Disassembling  comments (0)

Saturday, August 8, 2009


AUTORUN.xxx working script
%A = 1000
WHILE %A < 1004
PRINT "Hex value %x" %A
%A += 1
%B = 50
PRINT "B=%d" %B


As you can see, it uses integer variables, loop and printing of values.

General  comments (1)

[FIRST]  [PREV]   1 2 [3] 4   [NEXT]  [LAST]
11 - 15 of 19

(c) 2009 Pentax Hacking Community