Ok...
There's one thing I don't understand about the signature finder tool.
Every time I attempt to compile it gives me the following message:
gensig.o -> gensig.exe
-> signatures_dryos.h
CAUTION! 'signatures_dryos.h' is not updated due to 'sig_ref_dryos_1.bin` is emp
ty!
I've read the wiki and what I think it says is that I have to copy the firmware of the A580 camera in the tools folder and rename it to sig_ref_dryos_1.bin so that the program can look for signatures in it. Am i supposed to copy there the original A720 firmware?
As far as I understand, this shouldn't stop me from at least trying to boot the camera..
I've verified the loader code and the code in the a580 firmware is identical to the a720 firmware (if anyone is interested the copy and restart code is located at 0xFFC196D4 in my 101b firmware).
However, if I compile and copy it on the card and try to run it, nothing happens, the camera remains powered off. This makes me believe that either addresses for the leds are wrong or maybe the encoding is not done right?
How do you the determine the LED addresses?
I've found this function in the firmware, is this the right one?
ROM:FFCC5A6C sub_FFCC5A6C ; CODE XREF: taskcreate_LEDCon+54p
ROM:FFCC5A6C LDR R2, =0xC02200CC
ROM:FFCC5A70 MOV R1, #0
ROM:FFCC5A74 STRB R1, [R0]
ROM:FFCC5A78 STR R2, [R0,#4]
ROM:FFCC5A7C SUB R2, R2, #4
ROM:FFCC5A80 STRB R1, [R0,#0x40]
ROM:FFCC5A84 STR R2, [R0,#0x44]
ROM:FFCC5A88 LDR R2, =0xC02200D0
ROM:FFCC5A8C STRB R1, [R0,#0x80]
ROM:FFCC5A90 STR R2, [R0,#0x84]
ROM:FFCC5A94 STRB R1, [R0,#0x200]
ROM:FFCC5A98 SUB R1, R2, #0xC
ROM:FFCC5A9C STR R1, [R0,#0x204]
ROM:FFCC5AA0 MOV R1, #1
ROM:FFCC5AA4 SUB R2, R2, #0x10
ROM:FFCC5AA8 STRB R1, [R0,#0x240]
ROM:FFCC5AAC STR R2, [R0,#0x244]
ROM:FFCC5AB0 STRB R1, [R0,#0x280]
ROM:FFCC5AB4 STRB R1, [R0,#0x2C0]
ROM:FFCC5AB8 B sub_FFDAF0CC
From this code, my guess is that C02200D0 is one of the leds, but the loader uses C02200C4, where is this address deducted from?
