SX60 HS 1.00B fw dump

JoshuaTP

1
Joshua Przyborowski

« on: 23 / December / 2014, 00:48:20 »

Advertisements

start address is 0xFC000000

DRYOS version 2.3, release #0055+p6

https://www.dropbox.com/s/2we6zj10m3dg7jo/SX60_HS_100B.7z?dl=0

Logged

fe50

3152
IXUS50 & 860, SX10 Star WARs-Star RAWs

Re: SX60 HS 1.00B fw dump

« Reply #1 on: 26 / December / 2014, 04:51:01 »

Hello & welcome !

Quote from: JoshuaTP on 23 / December / 2014, 00:48:20

start address is 0xFC000000
DRYOS version 2.3, release #0055+p6
https://www.dropbox.com/s/2we6zj10m3dg7jo/SX60_HS_100B.7z?dl=0

Quote from: fe50 on 26 / December / 2014, 04:50:06

Added the
SX60 1.00B
full 32MB dump by JoshuaTP from this forum post to the CHDK P&S FW dumps repository.

Logged

-->FIRMWARE DUMPS<-- * Manual * Lua * me

PinkFreud

2

Re: SX60 HS 1.00B fw dump

« Reply #2 on: 27 / December / 2014, 16:55:01 »

I'm not sure if this makes a difference, but I've run the same utility on my SX60 to dump firmware (EXIF tags claim firmware 1.00 rev 2.00, which I assume is 1.00B). primary.bin is the same up through offset 0x15a00ff, after which it differs (an md5sum of the first 22675712 bytes of both files is cad0e6d985269120925c49840beb3357).

If necessary, I can put my fw dump online as well.

Logged

waterwingz

12140

Re: SX60 HS 1.00B fw dump

« Reply #3 on: 27 / December / 2014, 17:15:21 »

Quote from: PinkFreud on 27 / December / 2014, 16:55:01

I'm not sure if this makes a difference, but I've run the same utility on my SX60 to dump firmware (EXIF tags claim firmware 1.00 rev 2.00, which I assume is 1.00B). primary.bin is the same up through offset 0x15a00ff, after which it differs (an md5sum of the first 22675712 bytes of both files is cad0e6d985269120925c49840beb3357).

It is normal for the top area of a firmware dump to be different from dump to dump. The Canon firmware store static data there.

Logged

Ported : A1200 SD940 G10 Powershot N G16

PinkFreud

2

Re: SX60 HS 1.00B fw dump

« Reply #4 on: 27 / December / 2014, 17:43:52 »

Quote from: waterwingz on 27 / December / 2014, 17:15:21

Quote from: PinkFreud on 27 / December / 2014, 16:55:01
I'm not sure if this makes a difference, but I've run the same utility on my SX60 to dump firmware (EXIF tags claim firmware 1.00 rev 2.00, which I assume is 1.00B). primary.bin is the same up through offset 0x15a00ff, after which it differs (an md5sum of the first 22675712 bytes of both files is cad0e6d985269120925c49840beb3357).
It is normal for the top area of a firmware dump to be different from dump to dump. The Canon firmware store static data there.

The bottom area, in this case - the first 22675712 bytes is the same.

I wasn't sure if I was looking at configuration data or if I actually had different firmware. I'll check back on occasion to see if CHDK has been ported to this camera, as that's all I'll be able to do at this point, I suspect.

Thank you!

Logged

ralbelda

2

Re: SX60 HS 1.00B fw dump

« Reply #5 on: 11 / January / 2015, 13:21:15 »

I own the SX60 and I would like to have the CHDK for it. I have programing skills and I´ll try to do it but I never did this before so any help will be welcomed.

Using the FW from JoshuaTP and the following helpful information from robertb in the SX280 HS Thread (the SX280 is also using the DIGIT 6) I was able to dissasemble the FW:

Quote

I can confirm that the firmware does seem to start at FC020000, and I've modified the dumper script to account for that.In IDA (v6.4), I set the processor architecture to ARM (not ARMB), and the specific type to ARMv7-A&R. Since IDA apparently enables THUMB instructions using a fake register T, I set that register (alt-G) to 1, pressed C at address FC020000, and got valid code that begins with a jump over the signature:

Logged

srsa_4c

4451

Re: SX60 HS 1.00B fw dump

« Reply #6 on: 11 / January / 2015, 19:02:33 »

Quote from: ralbelda on 11 / January / 2015, 13:21:15

I own the SX60 and I would like to have the CHDK for it. I have programing skills and I´ll try to do it but I never did this before so any help will be welcomed.

Some threads you may want to read:
SX280 / 275 / 270 porting: see first post for the source repo, second page for a list of addresses found in the sx280 102b firmware.
chdk in the DIGIC6 world for generic DIGIC 6 info

I'd recommend getting a copy of sx280 102b and the address list mentioned above. You can use that to locate equivalent routines in your firmware. I'd also recommend getting some of the newer available DIGIC 4-5 firmwares that have working CHDK ports (for example sx510 as one of the latest), as the sigfinder has a good hit percentage on them (exception: sx170, where some kernel functions are not correctly found). Architecture independent parts of the firmware are very likely built from the same source by Canon.

Logged

iax

45

Re: SX60 HS 1.00B fw dump

« Reply #7 on: 21 / January / 2015, 02:29:11 »

Quote from: ralbelda on 11 / January / 2015, 13:21:15

I own the SX60 and I would like to have the CHDK for it. I have programing skills and I´ll try to do it but I never did this before so any help will be welcomed.

Hi do you have any progress to share on this? Few years ago I've successfully ported a camera to CHDK, I probably will be able to dedicate some time to help porting the SX60 as well, even if my memory is not that fresh!

Logged