IXUS210 (SD3500) porting thread - page 3 - DryOS Development - CHDK Forum
« previous next »
Pages: 1 2 [3]   Go Down

IXUS210 (SD3500) porting thread

  • 21 Replies
  • 16233 Views
*

Offline RegisteredUser

  • *
  • 9
Re: IXUS210 (SD3500) porting thread
« Reply #20 on: 08 / January / 2021, 18:16:36 »
Advertisements
Quote from: reyalp on 06 / January / 2021, 19:32:55
Your camera is the SD3500, which are you comparing it to?
Sorry, I meant the SD1300 (IXUS105).
Quote from: reyalp on 06 / January / 2021, 19:32:55
In the ghidra version tool?
Correct.  What I want to know is how to find what I need as opposed to manually looking through the tens of thousands of entries.
Quote from: reyalp on 06 / January / 2021, 19:32:55
Quote from: RegisteredUser on 06 / January / 2021, 16:34:39
How do you find the bootloader's address?
You mean the start of the main firmware that gets copied in boot.c? That will be ff810000 on your cam. You can recognize it on these cams by the string "gaonisoy" appearing immediately after the first jump instruction.
What is the end address and which function do I patch?  Is it sub_FFC00354 like it is for the IXUS310?
Logged
*

Offline reyalp

  • ******
  • 14128
Re: IXUS210 (SD3500) porting thread
« Reply #21 on: 08 / January / 2021, 23:20:37 »
Quote from: RegisteredUser on 08 / January / 2021, 18:16:36
Correct.  What I want to know is how to find what I need as opposed to manually looking through the tens of thousands of entries.
You can filter in the matches window, but it by definition only shows matches, so I'm not sure if that's what you want.

What I would do is use the code browser views (windows titled "Version Tracking (SOURCE TOOL)" and "DESTINATION TOOL"). So if you are trying to find, say focus_busy, in the ixus105 window press g to open the "go to" window and enter focus_busy. If there's a match, you'll see it in the matches window of that source tool, and double clicking there will sync the other code browser. If not, you can start exploring the references in the known firmware to find equivalents in the one you're trying to port.

Quote
What is the end address and which function do I patch?  Is it sub_FFC00354 like it is for the IXUS310?
Go to FF810000 for your camera, and follow the disassembly until you see the equivalent. The ixus105 starts at FFC00000 where your camera starts at FF810000, but the code should be very similar. Ixus 130 as another FF810000 cam, if you prefer to use that for comparison.
« Last Edit: 06 / February / 2021, 01:00:15 by reyalp »
Logged
Don't forget what the H stands for.
Pages: 1 2 [3]   Go Up
« previous next »
 

Related Topics


SimplePortal © 2008-2014, SimplePortal