40D Disk Dumping. More Trials

ASalina

Re: 40D Disk Dumping. More Trials

« Reply #30 on: 11 / June / 2008, 07:41:42 »

Advertisements

The trick was to use "A:/DUMP.DMP" in the path. Very very good, guys!

Those with 40D's who want to make their own dump can D/L mx3's dumper from this thread and change the path.

Give me a few minutes for the adrenaline to fade and I'll find a place to post the dump.

Logged

DataGhost

314
EOS 40D, S5IS

Re: 40D Disk Dumping. More Trials

« Reply #31 on: 11 / June / 2008, 07:43:18 »

Huh

but that's already in mx3's code? Or how is it different?

Logged

ASalina

Re: 40D Disk Dumping. More Trials

« Reply #32 on: 11 / June / 2008, 07:52:37 »

Quote from: DataGhost on 11 / June / 2008, 07:43:18

Huh but that's already in mx3's code? Or how is it different?

Yes. It was mx3's dumper2 (plan B) but with your suggestion to change the path from "A/DUMP.DMP" to "A:/DUMP.DMP"

Actually, since I had hacked up mx3's code, what I wound up using was:

Code: [Select]

        f = open("A:/DUMP.DMP", O_WRONLY, 0777);
        if (f>=0){
                write(f, (void*)FW_ADDRESS, FW_SIZE);
                close(f);
        }else{
                *((int *)LEDBLUE) = 0x46; //ON
        }

And I manually created the file on the card before running it.
His code, with O_CREATE|O_WRONLY should work as well. It was just the path that was the problem.

Logged

ASalina

Re: 40D Disk Dumping. More Trials

« Reply #33 on: 11 / June / 2008, 08:01:17 »

Here's the dump. Let me know if anyone has any problems getting it.

RapidShare: 1-Click Webhosting

Logged

_MAG_

47

Re: 40D Disk Dumping. More Trials

« Reply #34 on: 11 / June / 2008, 08:58:16 »

ASalina. some questions:
You can do 3 RAM dump for me?
dump with lens in af mode?
dump without lens
dump with lens in M focus mode
ah i need to know what lens you use. If you use zoom lens need know current zoom position.

« Last Edit: 11 / June / 2008, 09:04:29 by _MAG_ »

Logged

ASalina

Re: 40D Disk Dumping. More Trials

« Reply #35 on: 11 / June / 2008, 09:07:21 »

Quote from: _MAG_ on 11 / June / 2008, 08:58:16

ASalina. some questions:
you do this dump with lens in af mode?
pls do dump without lens and dump with lens in M focus mode
ah i need to know what lens you use. If you use zoom lens need know current zoom position.

This is just a dump of the ROM, not the RAM. I know you are interested in the lens data. What you want is a dump of the RAM with the lens in different settings. I just now got the dump loaded into IDA. It gave me trouble because it needs a file offset of 0x10000

Do you have a 40D camera? Why not do a dump yourself (no offense meant)?

Update:

This will require finding the open(), write(), and close() functions in the actual firmware (as opposed to the flasher) and it will require that AUTOEXEC.BIN or similar will run on a bootable disk. Once those things have been done, I will put a priority on your request, and try to get you those dumps.

The lens I have is a 24-70L. That's the only lens I own.

« Last Edit: 11 / June / 2008, 10:00:05 by ASalina »

Logged

DataGhost

314
EOS 40D, S5IS

Re: 40D Disk Dumping. More Trials

« Reply #36 on: 11 / June / 2008, 09:10:07 »

Hm, it seems that the 40D uses the same 'AUTOEXEC.BIN' method as the 400D (and VxWorks).

FAT16:
0x2B EOS_DEVELOP
0x40 BOOTDISK

FAT32:
0x47 EOS_DEVELOP
0x5C BOOTDISK

the file AUTOEXEC.BIN should then be executed (if present) after it is loaded into 0x800000. After loading, the camera explicitly loads 0x800000 into PC, so no fancy header stuff etc. Maybe you can give that a try?

ASalina: loading the dump into 0xFF800000 (rather than 0xFF810000) also works

Logged

ASalina

Re: 40D Disk Dumping. More Trials

« Reply #37 on: 11 / June / 2008, 09:16:23 »

@DataGhost

Yes. Time for me to go back and re-read owerlord's posts. Maybe I can catch up to him a little. :-)

I forgot to mention:

I tried the AUTOEXEC.BIN with a bootable CF card before and noting happened.
I can try again. Just flashing the LEDs should be enough of a test for now.

« Last Edit: 11 / June / 2008, 09:27:51 by ASalina »

Logged

mx3

372

Re: 40D Disk Dumping. More Trials

« Reply #38 on: 11 / June / 2008, 10:12:06 »

by the way

what are you doing?
trying to make something working with current firmware.

suppose you have something working.
what will owners of cameras with 108 firmware do?

Logged

skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler

theDarkHorse

7

Re: 40D Disk Dumping. More Trials

« Reply #39 on: 11 / June / 2008, 10:15:51 »

I've got a 40D with firmware 1.0.8, just asking whether mx3's dumper will still work with that just by changing the path, considering [someone said before] the flasher was the same in 1.0.5 as 1.0.8.

Logged