SX60 HS 1.00B fw dump - Firmware Dumping - CHDK Forum
« previous next »
Pages: [1]   Go Down

SX60 HS 1.00B fw dump

  • 7 Replies
  • 10115 Views
*

Offline JoshuaTP

  • *
  • 1
  • Joshua Przyborowski
    • Google+
SX60 HS 1.00B fw dump
« on: 23 / December / 2014, 00:48:20 »
Advertisements
start address is 0xFC000000

DRYOS version 2.3, release #0055+p6

https://www.dropbox.com/s/2we6zj10m3dg7jo/SX60_HS_100B.7z?dl=0
Logged
*

Offline fe50

  • ******
  • 3152
  • IXUS50 & 860, SX10 Star WARs-Star RAWs
    • fe50
Re: SX60 HS 1.00B fw dump
« Reply #1 on: 26 / December / 2014, 04:51:01 »
Hello & welcome !  :xmas

Quote from: JoshuaTP on 23 / December / 2014, 00:48:20
start address is 0xFC000000
DRYOS version 2.3, release #0055+p6
https://www.dropbox.com/s/2we6zj10m3dg7jo/SX60_HS_100B.7z?dl=0
Quote from: fe50 on 26 / December / 2014, 04:50:06
Added the
  • SX60 1.00B
full 32MB dump by JoshuaTP from this forum post to the CHDK P&S FW dumps repository.

Logged
*

Offline PinkFreud

  • *
  • 2
Re: SX60 HS 1.00B fw dump
« Reply #2 on: 27 / December / 2014, 16:55:01 »
I'm not sure if this makes a difference, but I've run the same utility on my SX60 to dump firmware (EXIF tags claim firmware 1.00 rev 2.00, which I assume is 1.00B).  primary.bin is the same up through offset 0x15a00ff, after which it differs (an md5sum of the first 22675712 bytes of both files is cad0e6d985269120925c49840beb3357).

If necessary, I can put my fw dump online as well.
Logged
*

Offline waterwingz

  • ******
  • 12140
    • Waterwingz
Re: SX60 HS 1.00B fw dump
« Reply #3 on: 27 / December / 2014, 17:15:21 »
Quote from: PinkFreud on 27 / December / 2014, 16:55:01
I'm not sure if this makes a difference, but I've run the same utility on my SX60 to dump firmware (EXIF tags claim firmware 1.00 rev 2.00, which I assume is 1.00B).  primary.bin is the same up through offset 0x15a00ff, after which it differs (an md5sum of the first 22675712 bytes of both files is cad0e6d985269120925c49840beb3357).
It is normal for the top area of a firmware dump to be different from dump to dump.  The Canon firmware store static data there.
Logged
Ported :   A1200    SD940   G10    Powershot N    G16
*

Offline PinkFreud

  • *
  • 2
Re: SX60 HS 1.00B fw dump
« Reply #4 on: 27 / December / 2014, 17:43:52 »
Quote from: waterwingz on 27 / December / 2014, 17:15:21
Quote from: PinkFreud on 27 / December / 2014, 16:55:01
I'm not sure if this makes a difference, but I've run the same utility on my SX60 to dump firmware (EXIF tags claim firmware 1.00 rev 2.00, which I assume is 1.00B).  primary.bin is the same up through offset 0x15a00ff, after which it differs (an md5sum of the first 22675712 bytes of both files is cad0e6d985269120925c49840beb3357).
It is normal for the top area of a firmware dump to be different from dump to dump.  The Canon firmware store static data there.

The bottom area, in this case - the first 22675712 bytes is the same.  :)

I wasn't sure if I was looking at configuration data or if I actually had different firmware.  I'll check back on occasion to see if CHDK has been ported to this camera, as that's all I'll be able to do at this point, I suspect.

Thank you!
Logged
*

Offline ralbelda

  • *
  • 2
Re: SX60 HS 1.00B fw dump
« Reply #5 on: 11 / January / 2015, 13:21:15 »
I own the SX60 and I would like to have the CHDK for it. I have programing skills and I´ll try to do it but I never did this before so any help will be welcomed.

Using the FW from JoshuaTP and the following helpful information from robertb in the SX280 HS Thread (the SX280 is also using the DIGIT 6) I was able to dissasemble the FW:

Quote
I can confirm that the firmware does seem to start at FC020000, and I've modified the dumper script to account for that.In IDA (v6.4), I set the processor architecture to ARM (not ARMB), and the specific type to ARMv7-A&R. Since IDA apparently enables THUMB instructions using a fake register T, I set that register (alt-G) to 1, pressed C at address FC020000, and got valid code that begins with a jump over the signature:
Logged
*

Offline srsa_4c

  • ******
  • 4451
Re: SX60 HS 1.00B fw dump
« Reply #6 on: 11 / January / 2015, 19:02:33 »
Quote from: ralbelda on 11 / January / 2015, 13:21:15
I own the SX60 and I would like to have the CHDK for it. I have programing skills and I´ll try to do it but I never did this before so any help will be welcomed.
Some threads you may want to read:
SX280 / 275 / 270 porting: see first post for the source repo, second page for a list of addresses found in the sx280 102b firmware.
chdk in the DIGIC6 world for generic DIGIC 6 info

I'd recommend getting a copy of sx280 102b and the address list mentioned above. You can use that to locate equivalent routines in your firmware. I'd also recommend getting some of the newer available DIGIC 4-5 firmwares that have working CHDK ports (for example sx510 as one of the latest), as the sigfinder has a good hit percentage on them (exception: sx170, where some kernel functions are not correctly found). Architecture independent parts of the firmware are very likely built from the same source by Canon.
Logged
*

Offline iax

  • *
  • 45
Re: SX60 HS 1.00B fw dump
« Reply #7 on: 21 / January / 2015, 02:29:11 »
Quote from: ralbelda on 11 / January / 2015, 13:21:15
I own the SX60 and I would like to have the CHDK for it. I have programing skills and I´ll try to do it but I never did this before so any help will be welcomed.

Hi do you have any progress to share on this? Few years ago I've successfully ported a camera to CHDK, I probably will be able to dedicate some time to help porting the SX60 as well, even if my memory is not that fresh!
Logged
Pages: [1]   Go Up
« previous next »
 

Related Topics


SimplePortal © 2008-2014, SimplePortal