Olympus FW analysis - General Discussion and Assistance - CHDK Forum  
« previous next »
Pages: [1] 2 3   Go Down

Olympus FW analysis

  • 26 Replies
  • 24746 Views
*

Offline mx3

  • ****
  • 372
Olympus FW analysis
« on: 12 / June / 2008, 03:01:16 »
Advertisements
new topic to host attached tool files to obtain and dissect Olympus FW


update:
fe-210
CPU: seems to be Lexra LX4180 - MIPS R3000-like CPU
OS: RTOS Green Hills
usefull link: Pure Digital / CVS Disposable Digital Camcorder

fw file contains 2 ELFs
« Last Edit: 12 / June / 2008, 03:13:51 by mx3 »
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
*

Offline mx3

  • ****
  • 372
Re: Olympus FW analysis
« Reply #1 on: 12 / June / 2008, 04:21:48 »

x450
fe100
fe110
fe115
fe150 broken link
fe160 broken link
fe170
fe210
fe220
fe270
fe290
fe310
fe320
fe330
fe340
fe350



hm...
first ELF is the same for fe210, fe220, fe270, fe290
is it standart flasher?

fe310's first ELF differs from fe210's one
size of elf is the same

fe310, fe330, fe350 - the same first ELF





« Last Edit: 15 / June / 2008, 10:39:05 by mx3 »
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
*

Offline kLOTTiS

  • *
  • 5
Re: Olympus FW analysis
« Reply #2 on: 12 / June / 2008, 04:32:54 »
ive had a look through the fe210 firmware and have even found some plain text in one of the files.
what would be the next step? are there any programs that can be used to decrypt them? id really like to start making a modified firmware but dont really know where to start.
also is there a way to reupload the firmware once its modded?
Logged
*

Offline mx3

  • ****
  • 372
Re: Olympus FW analysis
« Reply #3 on: 12 / June / 2008, 05:04:55 »
Quote from: kLOTTiS on 12 / June / 2008, 04:32:54
ive had a look through the fe210 firmware and have even found some plain text in one of the files.
there are tons of text

Quote from: kLOTTiS on 12 / June / 2008, 04:32:54
what would be the next step? are there any programs that can be used to decrypt them?
see to link in first post. there must be alot of information for starters

Quote from: kLOTTiS on 12 / June / 2008, 04:32:54
id really like to start making a modified firmware but dont really know where to start.
you need:
- dissasembler
- MIPS tool chain (ELF signature seems very promising)
- would be exelent to find somewhere RTOS sources in peering network
- alot of patience

Quote from: kLOTTiS on 12 / June / 2008, 04:32:54
also is there a way to reupload the firmware once its modded?
I see two ways.
1) I think camera should contain some menu once file is on card
2) it is possible to make fake web server on local machine. overriding IP address of theirs domain name will direct "Olympus Master" to local web server. then update will proceed as usual
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
*

Offline mx3

  • ****
  • 372
Re: Olympus FW analysis
« Reply #4 on: 12 / June / 2008, 05:07:57 »
also I suggest you to try reflash camera twice using "Olympus Master"
It will show whether it is hard to upload modified file with the same version
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
*

Offline mx3

  • ****
  • 372
Re: Olympus FW analysis
« Reply #5 on: 12 / June / 2008, 05:12:49 »
SP series: sp310, sp320, sp350
SP-500,  SP-510UZ, SP-550UZ, SP-560UZ, SP-570UZ

CPU: ARM

Flash base address: 0x40000000




FujiFilm cameras S700 (S5700),  S800(S5800), s8000fd have the same Firmware packing structure
and they are ARM powered

same for Nikon E8700, CP3200, CP3700, CP5900, CP7900, CP8400, CP8800
« Last Edit: 17 / June / 2008, 23:29:13 by mx3 »
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
*

Offline mx3

  • ****
  • 372
Re: Olympus FW analysis
« Reply #6 on: 12 / June / 2008, 05:44:44 »
Quote from: kLOTTiS on 12 / June / 2008, 04:32:54
what would be the next step?
- guess memory addresss space configuration (ELFs disassembling)
- find out whether it is possible to run code without firmware modification (ELFs disassembling)
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
*

Offline mx3

  • ****
  • 372
Re: Olympus FW analysis
« Reply #7 on: 12 / June / 2008, 05:53:44 »
what is TruePic processor?
are there 2 processors in Olympus cameras?
LX4180 - slave to truepic? or truepic is derivative from LX4180?

anybody seen pictures of disassembled Olympus camera with chips visible?
« Last Edit: 12 / June / 2008, 05:55:17 by mx3 »
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
*

Offline kLOTTiS

  • *
  • 5
Re: Olympus FW analysis
« Reply #8 on: 12 / June / 2008, 06:59:31 »
ive started to try dissasemble it with IDA but am still learning the program

ive put the bin file on the memory card in many locations but no new menus have appeared, and there is no way that i see to update again. i think maybe i might have to somehow change the version of the firmware and then update it with a fake http connection
Logged
*

Offline mx3

  • ****
  • 372
Re: Olympus FW analysis
« Reply #9 on: 12 / June / 2008, 07:03:28 »
Quote from: kLOTTiS on 12 / June / 2008, 06:59:31
ive started to try dissasemble it with IDA but am still learning the program

ive put the bin file on the memory card in many locations but no new menus have appeared, and there is no way that i see to update again. i think maybe i might have to somehow change the version of the firmware and then update it with a fake http connection


I don't think "MAster"place file into camera with the same name it got while downloading it
Logged
skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler
Pages: [1] 2 3   Go Up
« previous next »
 

Related Topics
SimplePortal 2.3.6 © 2008-2014, SimplePortal