CHDK Forum
CHDK Development => General Discussion and Assistance => Firmware Dumping => Topic started by: srsa_4c on 08 / November / 2013, 14:24:31
-
This is meant to provide an alternative way of getting a full firmware dump - on older cameras. The module needs CHDK 1.2
or 1.3.
How to use:
- copy the attached .FLT module into the CHDK/MODULES folder on the SD card.
- start the camera, start the file browser, locate the MODULES folder, highlight MEMDMPER.FLT and press SET.
- When the module is loaded, press the RIGHT button to dump the camera's firmware. On older Ixus/SDxxx models the "whole ROM" option could be interesting too (press the UP button to get that full dump).
- If your camera is in the below list, please upload the firmware to a file sharing site and post the link here.
Note that the module tends to crash on starting attempts on ixus30/sd200 and ixus40/sd300, reason unknown (all other cameras below are newer, hopefully they won't crash). Always use the module in play mode. The camera's "debug LED" will blink during dumping. In the unlikely event of zero sized dumps, change the caching setting by pressing SET before dumping.
Cameras with incomplete firmware dump:
a450 | 100d |
a560 | 100a |
a570 | 101a |
a610 | 100e |
a610 | 100f |
a620 | 100f |
a630 | 100c |
a640 | 100b |
a700 | 100b |
a710 | 100a |
| g7 | 100e |
| g7 | 100g |
g7 | 100i |
| g7 | 100j |
| g9 | 100i |
ixus50_sd400 | 101a |
ixus50_sd400 | 101b |
| ixus55_sd450 | 100b |
| ixus55_sd450 | 100c |
ixus55_sd450 | 100d |
ixus60_sd600 | 100a |
| ixus60_sd600 | 100d |
ixus700_sd500 | 101b |
| ixus70_sd1000 | 100c |
ixus70_sd1000 | 101b |
| ixus70_sd1000 | 102a |
| ixus750_sd550 | 100f |
ixus750_sd550 | 100g |
| ixus750_sd550 | 100h |
| ixus75_sd750 | 100b |
| ixus75_sd750 | 101a |
| ixus75_sd750 | 102a |
ixus800_sd700 | 100b |
| ixus800_sd700 | 101b |
| ixus80_sd1100 | 100c |
| ixus870_sd880 | 102b |
| ixus90_sd790 | 100c |
ixus90_sd790 | 100d |
ixus950_sd850 | 100c |
ixusizoom_sd30 | 100g |
| s2is | 100e |
s2is | 100f |
| s2is | 100g |
| s90 | 101c |
| tx1 | 100g |
tx1 | 101b |
(https://chdk.setepontos.com/proxy.php?request=http%3A%2F%2Fimg203.imageshack.us%2Fimg203%2F4676%2Fm0ok.gif&hash=0790fd2ae4a640f64a11613a5f73b24c)
PS. keeping a copy of your cam's firmware can be useful later, if - for any reason - it gets corrupted.
edit:
Use CHDK 1.2, the module will likely crash on recent 1.3 releases.
edit2:
updated table
-
Perfect I'll have another crack at the Ixus 50 dump when I get a spare moment.
-
Ixus 50 PRIMARY.BIN Ixus50_SD400 ver 101b
http://ubuntuone.com/6CbWIvBJoQIBbqLt4jYswJ (http://ubuntuone.com/6CbWIvBJoQIBbqLt4jYswJ)
:D @srsa_4c - Your module makes this so much easier.
-
Ixus 50 PRIMARY.BIN Ixus50_SD400 ver 101b
http://ubuntuone.com/6CbWIvBJoQIBbqLt4jYswJ (http://ubuntuone.com/6CbWIvBJoQIBbqLt4jYswJ)
Thanks. Have you experienced any problems with the module?
As I suspected, this is one of the early, odd cameras, I'll have to adjust the sigfinder...
-
The module worked flawlessly first time on both the Ixus850 I was testing on, and the 50 that I did that dump from.
I may have a play with it on the Ixus Wireless SD430, and see what, if anything the ITCP and full dump reveal.
-
The module worked flawlessly first time on both the Ixus850 I was testing on, and the 50 that I did that dump from.
I may have a play with it on the Ixus Wireless SD430, and see what, if anything the ITCP and full dump reveal.
ITCM is (mapped to) the first 4kB of RAM, I only put this option there because the CHDK built-in RAM dumper can't dump it correctly.
You may or may not find data on early cameras in the 0xff800000 ... 0xff810000 area, the full dump will start from 0xff800000 (only applies to cameras with 8M flash ROM, of course).
-
I'm on a roll here.. Ixus60_SD600 100a
http://ubuntuone.com/3ZIWlakHczTBREAUdT3UCA (http://ubuntuone.com/3ZIWlakHczTBREAUdT3UCA)
-
I'm on a roll here.. Ixus60_SD600 100a
http://ubuntuone.com/3ZIWlakHczTBREAUdT3UCA (http://ubuntuone.com/3ZIWlakHczTBREAUdT3UCA)
Thx again, also looks correct.
-
I have also got ixusizoom_sd30 but it is 100f (although I just launched the 100g CHDK on it 'cos I thought that was what it was).
I presume you don't need a dump of Firmware Version 1.00 - Firmware Ver GM1.00F
If you do, I can post that too.
EDIT: I'm heading for bed, so here it is, just in case... http://ubuntuone.com/1SZgHMG4XBmrWjfpQ7yT5s (http://ubuntuone.com/1SZgHMG4XBmrWjfpQ7yT5s)
-
I have also got ixusizoom_sd30 but it is 100f (although I just launched the 100g CHDK on it 'cos I thought that was what it was).
100f and 100g are compatible, so
If you do, I can post that too.
yes, I do.
-
Posted ( http://ubuntuone.com/1SZgHMG4XBmrWjfpQ7yT5s (http://ubuntuone.com/1SZgHMG4XBmrWjfpQ7yT5s) )... see edit to previous message.
-
One more ancient camera ROM for the archive. Ixus 70 - 1.01b - PRIMARY.BIN_Ixus70_SD1000.101b
http://ubuntuone.com/2fnNBGfU2VuNo7oOtwnKIQ (http://ubuntuone.com/2fnNBGfU2VuNo7oOtwnKIQ)
-
One more ancient camera ROM for the archive. Ixus 70 - 1.01b - PRIMARY.BIN_Ixus70_SD1000.101b
http://ubuntuone.com/2fnNBGfU2VuNo7oOtwnKIQ (http://ubuntuone.com/2fnNBGfU2VuNo7oOtwnKIQ)
Thx.
About the Ixus I zoom: I was wrong. That dump is already in the collection (and I think the "old" dump is from you). Since my quick list is from grepping the CHDK source, it doesn't contain hints about dumps that are from "other" camera versions (supported or unsupported).
I'm collecting the missing ones because there is data in the unknown part of ROM that can be important.
I secretly hope that an S2IS owner will read this thread some day...
-
Hi there,
I have a Canon S2 IS and I would be happy to help out.
You are going to have to walk me through it as I'm not all that computer savvy.
I tried to load CHDK using STICK but got a message saying "No official build is available for this camera".
Here's some info I got on the camera using the Set/Disp hold down trick:
P-ID 30F0 NT
Firmware Ver GM1.00G
E18
Dec 19 2005
Cheers
-
Hi there,
I have a Canon S2 IS and I would be happy to help out.
You are going to have to walk me through it as I'm not all that computer savvy.
Once you have CHDK up and running, try following the instructions at the start of this (http://chdk.setepontos.com/index.php?topic=10893.msg106982#msg106982) post. You'll need the module that is linked to the bottom of the same post (memdmper.flt). Ask, if you have any questions.
-
I tried to load CHDK using STICK but got a message saying "No official build is available for this camera".
This must be a problem with stick, there is a 100G version in the autobuild on http://mighty-hoernsche.de/ (http://mighty-hoernsche.de/)
You should be able to follow the manual instruction on http://chdk.wikia.com/wiki/Prepare_your_SD_card (http://chdk.wikia.com/wiki/Prepare_your_SD_card)
-
Thanks for the replies.
OK, I've got CHDK installed! (This time without using STICK).
Thanks for your help.
-
One more camera ROM for the archive:
A560 1.00A
-
I also have these:
a450 100d
g7 100i
a570 101a
a630 100c
s2is 100f
I tried the memdmper.flt on all of them but it didn't work out. I did it in play mode. Either the camera shut off, or it said no memory card or the LED lit up and that was the last of it. Strange. A560 worked just fine... Alternatives?
-
I tried the memdmper.flt on all of them but it didn't work out. I did it in play mode. Either the camera shut off, or it said no memory card or the LED lit up and that was the last of it.
Try again with CHDK 1.2, changes in 1.3 may cause compatibility issues with older modules.
I just tried the module on an a460 running CHDK 1.2 (newest autobuild release), it worked flawlessly.
I'm especially curious how it can make the cam display "no memory card"...
If you could retrieve a romlog (http://chdk.wikia.com/wiki/Debugging#Camera_crash_logs_.28romlog.29) from the camera that crashed, that could give some hints.
Alternatives?
http://chdk.wikia.com/wiki/Canon_Basic/Scripts/Dumper (http://chdk.wikia.com/wiki/Canon_Basic/Scripts/Dumper)
-
If you could retrieve a romlog (http://chdk.wikia.com/wiki/Debugging#Camera_crash_logs_.28romlog.29) from the camera that crashed, that could give some hints.
I get a RomLogErr.txt with "Log is not Saved." inside on G7, A450 and A470.
ROMLOG.LOG from S2 is attached.
A630 ROMLOG.LOG contains:
Exception!! Vector 0x04
Occured Time 2014:07:14 23:50:22
TCB: 00274DAC
Task: tPhySw
Exc Registers:
0x00106DA1
0x1023AD14
0xFFFFFFE1
0x00157010
0x00000000
0x00000000
0x00000000
0x00000000
0x00000010
0x00000001
0x00000004
0x00000001
0xFFFFFFFE
0x000BAA8C
0x00156EDF
0x0016032C
0x00000013
StackDump:
0x00157330
0x00157330
0xFFFFFF3F
0x00094C00
0x00000000
0x00000000
0x00000000
0x00000000
0x00156EDF
0x000BABA8
0x000B46C0
0x00000000
0x00000000
0x00156FBB
0x0009B79B
0x000BAF00
0x0009C7E5
0x000B0F64
0x00000000
0x0009676C
0x00001FBC
0x000963F4
0xFFC11A6C
0x00000003
0x00001FBC
0x00001FBC
0x00000000
0x00000000
0x00000000
0x0009682C
0x00000000
0x00096878
-
Try again with CHDK 1.2, changes in 1.3 may cause compatibility issues with older modules.
Thanks, that was the perfect hint. I think I even had a CHDK 1.2 on the A560.
So let's get started.
Here is the dump of: S2IS 100F
-
I get a RomLogErr.txt with "Log is not Saved." inside on G7, A450 and A470.
There are cases when the camera can't record a romlog.
A630 ROMLOG.LOG contains:
Exception!! Vector 0x04
Occured Time 2014:07:14 23:50:22
TCB: 00274DAC
Task: tPhySw
Exc Registers:
0x00106DA1
0x1023AD14
0xFFFFFFE1
0x00157010
0x00000000
0x00000000
0x00000000
0x00000000
0x00000010
0x00000001
0x00000004
0x00000001
0xFFFFFFFE
0x000BAA8C
0x00156EDF
0x0016032C
0x00000013
Undefined instruction, call from thumb code to ARM, CPU is in ARM mode, the RAM either contains garbage or thumb code. I'm using an ARM routine for memory copy, perhaps doing that is not a good idea. (Excuse the tech details)
Thanks for the dumps, BTW.
-
Here comes g7-100i (part 1)
Had to split it into two posts due to board size limit)
-
Here comes g7-100i (part 2)
Had to split it into two posts due to board size limit)
-
Here is A630 100C
-
Here is A570 101A
-
And the (EDIT: almost) final one for today: PowerShot A450 1.00D
I'll look at the still older cameras another time (soon).
I might have one or two more.
-
Found another already, here comes TX1 101B (part 1)
Had to split it into two posts due to board size limit)
-
Found another already, here comes TX1 101B (part 2)
Had to split it into two posts due to board size limit)
-
Maybe this is the final one for today here comes IXUS 90 100D (part 1)
Had to split it into two posts due to board size limit)
-
Maybe this is the final one for today here comes IXUS 90 100D (part 2)
Had to split it into two posts due to board size limit)
-
Had to split it into two posts due to board size limit)
The dumps are appreciated but it would probably be more convenient for everyone if you uploaded them on a file hosting site like box.com, google drive etc.
No need to re-upload the ones you've already done.
-
It would probably be more convenient for everyone if you uploaded them on a file hosting site like box.com, google drive etc.
Sometimes you just have to live with the peculiarities of the folks you meet on-line ;).
I for one won't use one click hosters for this kind of thing out of principle. nafraf asked me via PM to please look at this request thread, so I did and I'll help where I can. I also preferred not to host any of that on my own sites or put it onto a personal account like google drive or drop box. All of that left the plain forum attachments as a viable option.
-
Four more FWs today:
Here comes IXUS 800 IS 100B (part 1)
I split it into two posts due to board size limit
EDIT: I had originally named this incorrectly but it was the same data
-
Four more FWs today:
Here comes IXUS 800 IS 100B (part 2)
EDIT: I had originally named this incorrectly but it was the same data
-
Four more FWs today:
Here comes A640 100B
-
Four more FWs today:
Here comes A700 100B
-
Four more FWs today:
Here comes A710 IS 100A
-
I made a mistake and I think there was a download before I corrected it. So whoever downloaded this look out: I had written IXUS 800 IS 100D and had files named accordingly. That was wrong. It was the requested IXUS 800 IS 100B.
I got confused by Canon's great names and numbers. My ixus850 / sd800 has FW 100d... But that wasn't asked for here :o
-
I'm going to be nosey here and let my curiosity get the better of me by asking if you will share how you happen to have access to all of these different cameras?
I won't be offended if you do not choose to answer.
-
asking if you will share how you happen to have access to all of these different cameras?
Straight answer that doesn't really tell anything? I bought them. That is one of everything thats currently on the Autobuild list and doesn't write RAW out of the box. 30 models ranging from 1010 to 2013 I parted from again already as I did what I intended to do with them and needed the funds back. The others I currently work with and if I find things that don't quite work out with them and CHDK I try to tell the community.
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes A610 100E
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes A620 100F
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes IXUS 700 101B
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes SD850 IS 100C (part 1)
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes SD850 IS 100C (part 2)
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes IXUS i Zoom 100G (part 1)
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes IXUS i Zoom 100G (part 2)
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes IXUS 750 100G (part 1)
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes IXUS 750 100G (part 2)
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes IXUS 55 100D (part 1)
-
This might be my final contribution to this thread's FW collection. 7 more of the requested FWs.
Here comes IXUS 55 100D (part 2)
That's all folks.
19 FWs total, not too bad I had not expected to have matches on so many cameras.
My IXUS 50 has a sensor defect so I'm getting a replacement. With luck that will have the right FW to fill the 20. We'll see.
-
This might be my final contribution to this thread's FW collection.
Well, thanks for that. With your help, we now have at least 1 complete ROM image from all 'critical' cameras. By 'critical' I mean those, mostly early, models that have an unusual ROM layout or other specialities (old ixus', s2is, tx1).
-
My IXUS 50 has a sensor defect so I'm getting a replacement. With luck that will have the right FW to fill the 20. We'll see.
It actually did turn out that way.
Attached is IXUS 50 101A
20 FWs total :-)
-
Here is a full dump a610-100f from gehtnix (german forum).
And I'm looking for the full dump from ixus700-101a. I'm not found a valid link and in fe50s file collection isn't a full dump.
rudi
-
Here is a full dump a610-100f from gehtnix (german forum).
Thanks.And I'm looking for the full dump from ixus700-101a. I'm not found a valid link and in fe50s file collection isn't a full dump.
http://filebin.net/am2oabkh02 (http://filebin.net/am2oabkh02)
-
Here is a full dump a610-100f from gehtnix (german forum).
Thanks.And I'm looking for the full dump from ixus700-101a. I'm not found a valid link and in fe50s file collection isn't a full dump.
http://filebin.net/am2oabkh02 (http://filebin.net/am2oabkh02)
Added the
full 8MB dump provided by srsa_4c from this forum post (http://chdk.setepontos.com/index.php?topic=10893.msg115899#msg115899) to the CHDK P&S FW dumps (https://drive.google.com/folderview?id=0B08pqRtyrObjTy11Y003Sk1lYTQ#list) repository.
(replaces the old small dump)
-
@fe50 the IXUS 50 101A re-dump from above still needs to be added to the repository. Same applies to the A610 100F rudi posted above I think.
@srsa_4c IXUS 50 101A and A610 100F also need to be crossed off from page 1's request list.
-
I think the IXUS 50 100A re-dump requested and added here (http://chdk.setepontos.com/index.php?topic=10893.50) still needs to be added to the repository. Same applies to the A610 100F rudi posted above that on the same page I think.
(type - the ixus 50 dump is 1.01A !)
Replaced the
IXUS 50 / SD400 firmware 1.01A and
A610 firmware 1.00F
with the new (full) dumps from the post quoted above...
-
(type - the ixus 50 dump is 1.01A !)
Thanks. At least I had the file name straight.
I edited the places where it was wrong in the posts' text.