How to Dump Firmware ? - page 3 - Firmware Dumping - CHDK Forum

How to Dump Firmware ?

  • 78 Replies
  • 147457 Views
*

Offline whim

  • ******
  • 2046
  • A495/590/620/630 ixus70/115/220/230/300/870 S95
Re: How to Dump Firmware ?
« Reply #20 on: 11 / August / 2008, 13:13:28 »
Advertisements
Just for reference's sake, since this is stickied:

If you got problems dumping a 'newer' cam ( ixus80_sd1100 & later, A580 & later, ....), and you're on Windows

try the new CardTricks here: Card Tricks - a small utility to help manage SD cards [currently v. 1.36]

it is an easy way to apply universal dumper 2008 (by chr)

wim
« Last Edit: 11 / August / 2008, 13:37:58 by whim »

*

Offline brake

  • *
  • 23
  • IXUS90IS / SD790IS
Re: How to Dump Firmware ?
« Reply #21 on: 21 / August / 2008, 04:18:54 »
I've been playing with the source of udumper and for the life of me can't work something out.  (Whole code attached, flash(x) just turns the LED_AF on/off x times, was using for debugging).

What I found odd was that even though the firmware is written to my SD card (so the wr() function runs), it never reaches the goto done (flash(10) never runs).

Does the SDWrite function normally crash the camera, or is the command somehow resulting in a memory overflow of some nature?

Any ideas?

(this is running on an ixus90is)

*

Offline whim

  • ******
  • 2046
  • A495/590/620/630 ixus70/115/220/230/300/870 S95
Re: How to Dump Firmware ?
« Reply #22 on: 21 / August / 2008, 04:52:08 »
Well, AFAIK, normally CHDK 'properly' inserts it's code in the DryOS task system, but the udumper

code just 'steals' the CPU from DryOS, so I guess after calling SDWrite the cams state
is undefined ...

just my 2 c though, better wait for some low level experts' comment  :)

wim

Anleitung dumping mit CardTricks
« Reply #23 on: 12 / October / 2008, 12:58:23 »
« Last Edit: 13 / October / 2008, 12:44:25 by Obihoernchen »
Canon PowerShot SX110 IS
CHDK: at Autobuild now
Wiki: SX110IS


Re: How to Dump Firmware ?
« Reply #24 on: 09 / November / 2008, 06:52:40 »
Help - I am trying to dump the firmware for a SD430 wireless.  I have gotten ver.req to work and get the following info:

Canon Powershot SD430 wireless

P-ID: 30F1 NT

Firmware Ver GM1.00F

E18

Dec 19 2005 21:32:29

I press DISP again and get:

Canon Powershot SD430 wireless

P-ID: 30F1 NT

Adj. Ver 004.003

ZoomLensError

E18

Dec 19 2005 21:37:29

Using vers.req and a third press of DISP I get:

Canon Powershot SD430 wireless

P-ID: 30F1 NT

Adj. Ver 004.003

Total Shoot: 1933
Open Shutter: 0
Close Shutter: 0

I assume this is a VxWorks OS camera - can anyone confirm that for me?

Then following the instructions at: CardTricks - CHDK Wiki
I format my SD cark for Udump using VxWorks, lock the SD card, place it in my camera, with the camera on review mode, I press the power button and nothing - no power on light, no display, etc. (I think this is what is supposed to happen isn't - instructions are somewhat vague here) - I wait well over a minute, remove batteries, remove card, place card in my reader and restart CardTricks (I've done this both with and without the SD card being locked) and there is nothing new on the card.  I have tried several times and nothing. I tried formatting for DryOS too with nothing.  Any suggestions.  I am new to this and would appreciate any help I can get.  If I get a firmware dump, anyone interested in helping with a prot? Sorry for such a newbie post, but I am what I am.

*

Offline fe50

  • ******
  • 3147
  • IXUS50 & 860, SX10 Star WARs-Star RAWs
    • fe50
Re: How to Dump Firmware ?
« Reply #25 on: 09 / November / 2008, 07:28:42 »
Hello & welcome jak5280  !

Canon Powershot SD430 wireless .. Firmware Ver GM1.00F .. I assume this is a VxWorks OS camera - can anyone confirm that for me?
Yes, the SD430 is a VxWorks camera with a Digic II image processor.

Quote
I format my SD cark for Udump using VxWorks, lock the SD card, place it in my camera, with the camera on review mode, I press the power button and nothing - no power on light, no display, etc. (I think this is what is supposed to happen isn't - instructions are somewhat vague here) - I wait well over a minute, remove batteries, remove card, place card in my reader and restart CardTricks (I've done this both with and without the SD card being locked) and there is nothing new on the card.  I have tried several times and nothing.
Should be ok, what do you get when you press the "Strings" button with this card ?
If you can see some strings: all ok, you have your dump...

Quote
If I get a firmware dump, anyone interested in helping with a prot?
The SD430 is an old cam, i'm not sure whether a developer owns one to port it...there was a first attempt, see here: SD430 (ixus wireless) porting.

Re: How to Dump Firmware ?
« Reply #26 on: 09 / November / 2008, 07:48:04 »
fe50,

Thanks for the quick reply.

When I press Strings, the BinText 3.01 window opens and it Scans F:\empty.dum and returns Text size: 0 bytes (0.00k).

I've tried this several times.

I have several SD430s and it sure would be nice to get a port for these, but it might be easier to simply buy a newer camera with an existing port.


*

Offline Hacki

  • ****
  • 359
  • EOS 80D
Re: How to Dump Firmware ?
« Reply #27 on: 09 / November / 2008, 08:15:45 »
How big is the empty.dum file? It should be 8 or 16M ..  When its 0, the data from the firmware dump gets written directly on the card, on a lower level than the filesystem, so you cant access it via the filesystem..



Re: How to Dump Firmware ?
« Reply #28 on: 09 / November / 2008, 09:41:39 »
After formatting with CarkTricks, I have the followinging files:

DISKBOOT.BIN        21 KB
dryos.BIN                21 KB
empty.DUM       10,176 KB
newdryos.BIN          16 KB
vxworks.BIN            21 KB

After LOCKing and placing SD card in camera (in review mode), pressing the "ON" button, waiting 2 minutes while nothing on the outside of the camera happens, removing the batteries, removing the card:

DISKBOOT.BIN        21 KB
dryos.BIN                21 KB
empty.DUM       10,176 KB
newdryos.BIN          16 KB
vxworks.BIN            21 KB

Restarting CardTricks and pressing STRINGS yields the same result as before: Text size 0 bytes (0.00 KB) and nothing in the window (BinText 3.01 window stays open).

Thanks again for any and all help.

*

Offline fe50

  • ******
  • 3147
  • IXUS50 & 860, SX10 Star WARs-Star RAWs
    • fe50
Re: How to Dump Firmware ?
« Reply #29 on: 09 / November / 2008, 10:05:22 »
@jak5280: What SD card did you use ?

You should use a card < 1GB, e.g. the small one shipped with the camera, also try another card if you have one.
You can also try older Cardtricks versions...As long as Cardtricks shows no strings, the dump process failed.

There's a dump of firmware 1.10a, but i found no information of the method it was dumped - there are 2 ways to do this, described here: CHDK wikia: Porting the CHDK - How can I get a firmware dump ? and Firmware Dumping.

 

Related Topics