@reyalp:
I'am quite naive... I thought ROM-Startaddress+ROM-Size = ROM-End
0xFF810000 + 0x003FFFFF = 0xFFC0FFFF and this address is less then 0xFFFF0004
Thank you.
I am going to dump my firmware and will see... :-)
EDIT: 23.05.2011 22:58
Nice Script :-)
1.00F -> FI2IV: ROM:FFC042E4 , Offset: 0x3F42E4
1.02B -> FI2KEY: ROM:FFFF35A0 , Offset: 0x7E35A0
1.02B -> FI2IV: ROM:FFC0436C , Offset: 0x3F436C
1.02C -> FI2KEY: ROM:FFFF35A0 , Offset: 0x7E35A0
1.02D -> FI2IV: ROM:FFC0452C , Offset: 0x3F452C
KEYSYS=d4
EDIT: 25.05.2011 00:47
I have tried the following steps... without success.
I think i need some more help, because the SX20 doesn't load manualy...
What have i done until now:
- got full sx20 1.02b firmware dump.
- found out addresses for FI2KEY and FI2IV (see ahead)
- got Keys from addresses and write them in section d4 of platform/fi2.inc
ifeq ($(KEYSYS), d4)
FI2KEY= 0B45...EDE7
FI2IV = F7C1...8398
endif
- built with CHDK-Shell 3.24, CHDK-DE 672, OPT_FI2=true (and other options), gcc4.51
- copied diskboot.bin into "pack.bat" folder
- changed first address in HDR-section of my.map to 31E4 (got from func/set - display info)
- started pack.bat with g10 for digic4
- A "ps.fi2"-File was generated with following output:
fi2encdec.exe -e -sys g10 my.map ps.fi2
fi2encdec v1.0 - FI2 file processing utility.
THIS SOFTWARE IS PROVIDED AS-IS WITHOUT WARRANTY OF ANY KIND. THE AUTHOR
OF THIS SOFTWARE ASSUMES _NO_ RESPONSIBILITY FOR ANY CONSEQUENCES
RESULTING FROM THE USE, MODIFICATION, OR REDISTRIBUTION OF THIS SOFTWARE
MAP HDR: 0x000031E4 0x02230000 0x01000000 0x00000000 0x00000001
Processing diskboot.bin (0x00000000)
Saving ps.fi2
Verifying results
HDR 0x000031E4 0x02230000 0x01000000 0x00000000 0x00000001, 1 data blocks
-> : part 1 [addr 0x00000000 size 218112 -> 273929 ]
ps.fi2 data checksum OK
Done
- copied ps.fi2 and diskboot.bin to SD-Card
- started sx20 in play mode and found in the menu the topic "Firm Update"
- pressed ok to following answer: "Update firmware version? 1.0.2.0 -> 1.0.0.0"
-> Display got black, "On/Off"-Power lamp was still on
-> Kamera needed batteries out/in.