HF10 & HV30 (Digic DV II) decrypted!

  • 212 Replies
  • 64223 Views
  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #100 on: 09 / October / 2008, 07:26:06 »
    Advertisements
    It's possible to get the latest firmware when/if they launch a firmware update online, or, if someone manages to get it from the camera itself.

    Ah alright, I guess I misunderstood your first post. A pity though that Canon didn't implement any other new features (like zebra or better focusing) in the HF11 firmware... I'm curious if the shorter battery lifetime of the HF10/100 compared to the HF11 is a software issue as well... that would be that HF11 "feature" I want the most on my HF10.

    Anyway, thanks for the info! I hope a HF11 FW will be available sometime...

  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #101 on: 11 / October / 2008, 02:50:45 »
    HV10 circuit board photos.
    The white plug is accessible through a utility panel hidden by the battery when the camera is assembled. No cable is attached to it; diagnostics?

    SST34HF324G
    SST > Products > ComboMemory™ > SST34HF324G
    The SST34HF324G ComboMemory integrates a 2M x16 CMOS flash memory bank with 256K x16 CMOS SRAM memory bank in a multi-chip package (MCP).


    ELPIDAtwn
    S2532EE-75-E (two present)
    Part Number Decoder
    32mb SDRAM Module

    Spansion 016d70
    Stacked Multi-Chip Product (MCP) Flash Memory and
    RAM
    16 Megabit (1 M x 16-bit) CMOS 3.0 Volt-only
    Flash Memory and 2 Megabit (128K x 16-bit) Static RAM/
    Pseudo Static RAM


    Fujitsu 39A102
    Unknown

    Fujitsu MB44C006
    Unknown

    « Last Edit: 11 / October / 2008, 20:07:31 by thesprawler »

    *

    Offline Zibri

    • **
    • 53
  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #102 on: 06 / November / 2008, 10:21:18 »
    Interesting...
    I started disassembling HV30 firmware too..
    I think we should find a way to access the embedded DryOs Shell.
    Using calib.dll should be the way.
    Did you try passing command "dminfo" to calib.dll and get the result ?
    If that works, a shell could be obtained issuing command "shell" and using
    ComMethod_ReceiveData
    ComMethod_SendData

    *

    Offline cail

    • *
    • 49
  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #103 on: 09 / November / 2008, 12:48:06 »
    Zibri,

    Thanks for the interest, calib.dll analysis is a good and promising way ;)

    See the attached source - using it I've managed to get some control over the my HV10. ComMethod is the point I've also thought about, however it's quite difficult to get to API parameters and usage logic. I believe "SetEventCallBack" method should be discovered to move forward. Some hints could be helpful if you'll try to run UploadFirmware.exe under "Auto Debug" call tracer - it helps much.



  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #104 on: 15 / December / 2008, 10:06:10 »
    Hello Cail,

    would it be possible to get the fixed IDA scripts for the FR processor? I am having a look at the HV30 firmware too, and it wouldn't hurt to have correct output :-)

    Also, the correct ROM loading procedure into IDA for this specific ROM wouldn't hurt...

    Cheers!

    Jollyroger

  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #105 on: 19 / December / 2008, 01:46:30 »
    I'm new here, but I am a programmer, and I'm interested in helping out.  I just got an HF100, and I have not upgraded the firmware in any way, and I'm willing to try and update if you guys have something you want tried out on a "clean" HF100.  Is there something that you want tried?

  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #106 on: 19 / December / 2008, 15:48:55 »
    I'm new here, but I am a programmer, and I'm interested in helping out.  I just got an HF100, and I have not upgraded the firmware in any way, and I'm willing to try and update if you guys have something you want tried out on a "clean" HF100.  Is there something that you want tried?

    Which firmware version do you have on your hf100? We still need to find out if the firmware update has a checksum attached so if you're up for it I can provide an update test file to find that out...

  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #107 on: 19 / December / 2008, 21:36:26 »
    I have been watching this topic for a while and am quite interested too.  I just got an HG20, which so far, no one has mentioned, although I assume it would have similar firmware to the HF10/11/100.  Lately I've just been examining the HF10 firmware in IDA (btw, is the free version of this much different from the paid one?).

    I'm thinking maybe I should see if I can connect to the camera with calib.dll.


  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #108 on: 20 / December / 2008, 11:44:02 »
    I've looked, and it seems that I have 1.0.1.0.  I was hoping it would be 1.0.0.0.  Either way, if it can be updated, I'm willing to try.  There is a 1.0.2.0 out now right?

  • Publish
    Re: HF10 & HV30 (Digic DV II) decrypted!
    « Reply #109 on: 20 / December / 2008, 13:13:44 »
    I have created 3 different firmware upgrade files that need to be tested and can be tested on HF10 and HF100 with firmware version 1.0.0.0 and 1.0.1.0. I have uploaded them including an instructions and info file as a self-extracting password protected 7zip archive.

    If anyone wants to try and report back here, please send me a PM to get the password.

    Here's the link: RapidShare: Easy Filehosting

     

    Related Topics