”Just copy EOS_M3.FI2 to SD card and start update from camera's menu.
// handles both ROMs, even with a single call; block size is 0x2000// returns 0 on success, 5 = out of range, odd values = other errorsFC0F83CA int erase_flash(uint32_t addr, uint32_t size)// similarFC0F8362 int write_flash(uint32_t rom_addr, uint32_t ram_addr, uint32_t size)
print "== Hivshd_VOffset Write ==\r"if erase_flash(hivshd_rom_addr, hivshd_size)) & 1: print "\r\nHivshd Voffset EraseError" returnprint "Hivshd_VOffset ROM %p RAM %p ( Size %ld )\r" % (hivshd_rom_addr, hivshd_ram_addr, hivshd_size) if write_flash(hivshd_rom_addr, hivshd_ram_addr, hivshd_size) & 1: print "\r\nHivshd VOffset WriteError" return
You can, however, use LED blinks and TIO messages, correct?
FC003180 void uart_puts(char* msg)
FC0008A4 int mount_sd_card(void)FC00257C int sd_load_file(int drive_maybe, char* filename, void* buffer, int unknown, int* out_file_size) // high-level function, e.g. sd_load_file(0, "DISKBOOT.BIN", 0x40008000, 0x5FC00000, &diskboot_size);FC0008F4 sd_read_sector(int drive_maybe, int start_sector, int num_sectors, void* buffer) // low-level sector read function (512 bytes at a time)
FWIW, if you manage to switch the camera to factory mode, you might be able to start the main firmware and do tricks from a diskboot.bin.Factory mode leaves out much of the hw initialization, has no display and doesn't start PTP - camera looks nearly bricked.However, UART and diskboot are available.Factory mode is controlled by a flag in flash ROM. See event procedures that have "FactoryMode" in their name (addresses in funcs_by_name.csv, provided by finsig).
Text messages "NotInit", "StartDiskboot", "Start Program on RAM" are printed from main firmware.
Started by cyrustam
DSLR Hack development
Started by udo
« 1 2 3 4 »
Hotwire! Hardware Mods, Accessories and Insights
Started by srsa_4c
« 1 2 ... 19 20 »
Started by leGorb
General Discussion and Assistance
Started by cedricb