How to Dump Firmware ? - page 7 - Firmware Dumping - CHDK Forum  

How to Dump Firmware ?

  • 78 Replies
  • 134993 Views
Re: How to Dump Firmware ?
« Reply #60 on: 26 / March / 2010, 12:47:40 »
Advertisements
Thx - I will try this and keep you upto date with any success.

@ERR99 - Well the code does find the function (2nd 0xFFxxxxxx) after bootdisk\0 but still it just hangs on the wr().     
« Last Edit: 26 / March / 2010, 21:42:48 by HarpoMa »
Canon Models - SD300, SD780, & SX210

*

Offline ERR99

  • ****
  • 339
Re: How to Dump Firmware ?
« Reply #61 on: 27 / March / 2010, 05:19:19 »
That the wr() function hangs was also the case on the G11. Thats the reason why i played arround with changing the number of function paramaters for wr(), because the disassembly of the wr() looks like that there a some parameters added. I dont know the wr() function of the SD780, but maybe you could also try to add additional (1..4) parameter(s) and test if this makes any difference.

Re: How to Dump Firmware ?
« Reply #62 on: 03 / October / 2010, 14:20:28 »
Have somebody done some progress of Firmware dumping for Ixus 1000 HS ?

I have such a Cam and i like to use CHDK

maybe i can help in some way, but before i read how to dump firmware and try myself, i better ask if somebody have try something.

Or should maybe a Ixus 1000 Porting thread open ?
Ixus 1000 HS

*

Offline whim

  • ******
  • 2041
  • A495/590/620/630 ixus70/115/220/230/300/870 S95
Re: How to Dump Firmware ?
« Reply #63 on: 03 / October / 2010, 14:37:08 »
@Bernd R

Since ixus 300 HS is the same generation as ixus 1000 HS, the same dumper might work.
You can find the dumper link in the ixus 300 HS porting thread

HTH,

wim


Re: How to Dump Firmware ?
« Reply #64 on: 04 / October / 2010, 14:01:35 »
>Since ixus 300 HS is the same generation as ixus 1000 HS, the same dumper might work.
>You can find the dumper link in the ixus 300 HS porting thread

You mean the universal dumper code listet here should work too ?

http://chdk.wikia.com/wiki/Canon_Basic/Scripts/Dumper

ok, i try that out in next few days.I buy a small sd card before for test, and let you know. 
Ixus 1000 HS

Re: How to Dump Firmware ?
« Reply #65 on: 05 / October / 2010, 13:08:02 »
I try now with a 4gb SDhc Card.but as soon i write the SCRIPT Text in sector 0 offset 0x1f0 the card cant read on windows or Canon Camera(camera show card error ,message).only a low level format let get work the card again, but then the SCRIPT is clear at offset 0x1f0

the steps i do are this and i use the windows hxd hex editor to write the SCRIPT Text in Sector 0 Offset 0x1f0.i use save in hxd and the text is store to card

diffrent to hxd screenshot on wiki my card contain on all other addresses 0.

also when i format this card with IX1000 all contain 0.

whats wrong, please help
Ixus 1000 HS

*

Offline whim

  • ******
  • 2041
  • A495/590/620/630 ixus70/115/220/230/300/870 S95
Re: How to Dump Firmware ?
« Reply #66 on: 05 / October / 2010, 14:14:20 »
Check this link:

http://chdk.setepontos.com/index.php/topic,5716.msg55620.html#msg55620

it seems the new SDM installer can prepare appropiate cards for CBasic scripting.
you might want to give that a shot

HTH,

wim

Re: How to Dump Firmware ?
« Reply #67 on: 06 / October / 2010, 14:41:08 »
i get it working now, maybe somebody can update the wiki.

The Sdminste.exe work partly to create a proper flash card.

the files extend.m and script.req contain 0 size.
I copy the files by hand and notice only the original simple dumper work ok .the other quit the camera.( i create too a folder a and test again)

with simple dumper a file  Primary.bin is create with size 8.323.068.it stand in root dir.where should i send this ?.
Maybe somebody have time to build a test Version, or can tell a link to how port or test for Ixus 300/1000

thats the script i use from the wiki but there was no output on LCD.only after 2-3 sec the old func/set menu appear

-----

dim f,a,startadr=0,romsize
 
private sub Initialize()
   UI.CreatePublic()
   a=LCDMsg_Create()
   LCDMsg_SetStr(a,"Running")
   System.Create()
 
   if memcmp(0xFFC00004,"gaonisoy",8) = 0 then
      startadr = 0xFFC00000
      LCDMsg_SetStr(a,"FFC00000")
   else
      if memcmp(0xFF810004,"gaonisoy",8) = 0 then
         startadr = 0xFF810000
         LCDMsg_SetStr(a,"FF810000")
      else
         LCDMsg_SetStr(a,"start not found!")
         Wait(1000)
      end if
   end if
 
   if startadr <> 0 then
      romsize = 0xFFFFFFFC - startadr
      f=Fopen_Fut("A/PRIMARY.BIN","w")
      Fwrite_Fut(startadr,romsize,1,f)
      Fclose_Fut(f)
      LCDMsg_SetStr(a,"done")
   end if
end sub
« Last Edit: 06 / October / 2010, 14:43:01 by Bernd R »
Ixus 1000 HS


*

Offline reyalp

  • ******
  • 13457
Re: How to Dump Firmware ?
« Reply #68 on: 06 / October / 2010, 22:32:38 »
I copy the files by hand and notice only the original simple dumper work ok .the other quit the camera.( i create too a folder a and test again)
Yes it uses some functions not present on the newest cameras. I need to fix it, but that's why I left the older simple one.
Quote
with simple dumper a file  Primary.bin is create with size 8.323.068.it stand in root dir.where should i send this ?.
Upload it to a file sharing site, like http://drop.io or http://www.zshare.net/
Don't forget what the H stands for.

Re: How to Dump Firmware ?
« Reply #69 on: 12 / December / 2010, 12:31:55 »
Here i have upload a archive that contain needed files and program to get the Firmware.
Hope that help smik67

Edit: 15.12.2010 new archive that work with universal dumper on my IX 1000 HS too

http://www.zshare.net/download/839474715ff4c35f/

for experts please read too, maybe i forget something.

1. start sdminste.exe (you must be Admin)

make sure you use a Card with not more as 4 GB.
select your SD Card letter, if the correct one is not detect.

If your Card is not format click format.

2. click button "make bootable Disk".
3. click button "Set Script Flag"
4. click button "SD Boot Sector Write"

5. Copy the files script.req and extend.m(in the archive) to your bootable sd Card.
6. now insert the SD Card in Camera and
   when you start your camera in play mode, and press func/set Button of Camera,
   the Firmware should be store on SD Card
 
« Last Edit: 15 / December / 2010, 08:39:22 by Bernd R »
Ixus 1000 HS

 

Related Topics