Looking to dump SX30 IS firmware. Who can help?! - page 3 - Firmware Dumping - CHDK Forum
supplierdeeply
« previous next »
Pages: 1 2 [3] 4   Go Down

Looking to dump SX30 IS firmware. Who can help?!

  • 32 Replies
  • 20378 Views
*

Offline waterwingz

  • ******
  • 12138
    • Waterwingz
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #20 on: 23 / November / 2010, 19:12:35 »
Advertisements
Quote from: reyalp on 23 / November / 2010, 13:08:19
core/main.dump is disassembly of your CHDK code, so you can look up any CHDK RAM addresses you find in the registers or stack dump there.

Hmmm .. I don't see anything called main.dump in trunk964/core. Am I looking in the right place ?

[Edit : got it now - its deleted by the makefile unless you comment that part out]

Quote from: reyalp on 23 / November / 2010, 13:08:19
There are some functions that can't safely be replaced with a BX LR, for example anything that is expected to return a value ;)

That is true - but RefreshPhysicalScreen() takes no input parameters and returns void so I think that's okay ?
« Last Edit: 23 / November / 2010, 19:22:15 by waterwingz »
Logged
Ported :   A1200    SD940   G10    Powershot N    G16
*

Offline reyalp

  • ******
  • 14080
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #21 on: 23 / November / 2010, 23:21:05 »
Quote from: waterwingz on 23 / November / 2010, 19:12:35
Quote from: reyalp on 23 / November / 2010, 13:08:19
core/main.dump is disassembly of your CHDK code, so you can look up any CHDK RAM addresses you find in the registers or stack dump there.

Hmmm .. I don't see anything called main.dump in trunk964/core. Am I looking in the right place ?

[Edit : got it now - its deleted by the makefile unless you comment that part out]
It isn't that I know of. make fir leaves it behind.

Quote from: reyalp on 23 / November / 2010, 13:08:19
That is true - but RefreshPhysicalScreen() takes no input parameters and returns void so I think that's okay ?
Yes, that was in response to philmoz "Everything else in stubs_entry_2.s I pointed to a null subroutine (BX LR)."
Logged
Don't forget what the H stands for.
*

Offline philmoz

  • *****
  • 3450
    • Photos
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #22 on: 24 / November / 2010, 06:23:31 »
A bit more progress (and more questions)  :)

Now have the logo and debug_osd displaying (can't get the draw_restore to work yet).
Found the physw_status location and mapped out the keys.

Questions:
- can't seem to locate the RefreshPhysicalScreen, LockAndRefresh and UnlockAndRefresh routines in the firmware, any thoughts on how best to locate these?
- sx30 has a new button (Zoom Assist), is it worth adding a new key value for this?
- Zoom switch has 2 bits for each direction of the zoom (multiple zoom speeds), how should this be mapped? CHDK only appears to handle a single bit for each button (unless I'm missing something).

Regards,
Phil.
Logged
CHDK ports:
  sx30is (1.00c, 1.00h, 1.00l, 1.00n & 1.00p)
  g12 (1.00c, 1.00e, 1.00f & 1.00g)
  sx130is (1.01d & 1.01f)
  ixus310hs (1.00a & 1.01a)
  sx40hs (1.00d, 1.00g & 1.00i)
  g1x (1.00e, 1.00f & 1.00g)
  g5x (1.00c, 1.01a, 1.01b)
  g7x2 (1.01a, 1.01b, 1.10b)
*

Offline waterwingz

  • ******
  • 12138
    • Waterwingz
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #23 on: 24 / November / 2010, 11:57:17 »
Quote from: philmoz on 24 / November / 2010, 06:23:31
- can't seem to locate the RefreshPhysicalScreen, LockAndRefresh and UnlockAndRefresh routines in the firmware, any thoughts on how best to locate these?

Tried posting something about this a couple of days ago : http://chdk.setepontos.com/index.php?topic=5857.0

144 hits but no comments posted back - that's the way it goes.

Here's what I've found so far - there are two strings "ScreenLock" and "ScreenUnLock" just below what I'm guessing are the screenlock() and screenunlock() functions (at 0xFF9D1E44 and 0xFF9D1E84 for the SD940).   They are each referenced over 450 times in the firmware so I'm thinking that might be a good clue.  I'm working backwards to see how they are called rather than what they do - that may help.   I wonder if there is a RefreshPhysicalScreen() function at all - that may be an artifact from the VxWorks ports or something ?

Finally,  here's a thread I found that might help :

http://chdk.kernreaktor.org/mantis/view.php?id=260

Logged
Ported :   A1200    SD940   G10    Powershot N    G16
*

Offline reyalp

  • ******
  • 14080
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #24 on: 24 / November / 2010, 12:13:56 »
RefreshPhysicalScreen is an alias for ScreenUnLock on modern cameras. The name is a historical artifact.
Logged
Don't forget what the H stands for.
*

Offline waterwingz

  • ******
  • 12138
    • Waterwingz
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #25 on: 24 / November / 2010, 20:49:44 »
posted a temporary hack for RefreshPhysicalScreen() here :

http://chdk.setepontos.com/index.php?topic=5857.msg57329#msg57329
Logged
Ported :   A1200    SD940   G10    Powershot N    G16
*

Offline philmoz

  • *****
  • 3450
    • Photos
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #26 on: 25 / November / 2010, 16:13:15 »
Quote from: waterwingz on 24 / November / 2010, 20:49:44
posted a temporary hack for RefreshPhysicalScreen() here :

http://chdk.setepontos.com/index.php?topic=5857.msg57329#msg57329


Thanks again, that gets me over the screen redraw for now; but I'll need to come back and fix it properly.

The keyboard hook is now working, including unlocking the SD card. Once booted I can now take pictures and use the camera normally. For some reason the Print button isn't triggering CHDK yet - most of the problems so far have been to do with bad function mappings or addresses so I suspect this is more of the same.

Regards,
Phil.
Logged
CHDK ports:
  sx30is (1.00c, 1.00h, 1.00l, 1.00n & 1.00p)
  g12 (1.00c, 1.00e, 1.00f & 1.00g)
  sx130is (1.01d & 1.01f)
  ixus310hs (1.00a & 1.01a)
  sx40hs (1.00d, 1.00g & 1.00i)
  g1x (1.00e, 1.00f & 1.00g)
  g5x (1.00c, 1.01a, 1.01b)
  g7x2 (1.01a, 1.01b, 1.10b)
*

Offline waterwingz

  • ******
  • 12138
    • Waterwingz
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #27 on: 25 / November / 2010, 18:51:13 »
Quote from: philmoz on 25 / November / 2010, 16:13:15
most of the problems so far have been to do with bad function mappings or addresses so I suspect this is more of the same.

Found why the OSD was not displaying for me.   I need to find canon_mode_active and canon_menu_active in the firmware before the routine gui_draw_osd() will display OSD information  (or comment out the check for now  ;) )
Logged
Ported :   A1200    SD940   G10    Powershot N    G16
*

Offline philmoz

  • *****
  • 3450
    • Photos
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #28 on: 25 / November / 2010, 20:23:31 »
Quote from: waterwingz on 25 / November / 2010, 18:51:13
Quote from: philmoz on 25 / November / 2010, 16:13:15
most of the problems so far have been to do with bad function mappings or addresses so I suspect this is more of the same.

Found why the OSD was not displaying for me.   I need to find canon_mode_active and canon_menu_active in the firmware before the routine gui_draw_osd() will display OSD information  (or comment out the check for now  ;) )


Thanks, I've got canon_menu_active and canon_shoot_menu_active; but no canon_mode_active. Are those the ones you meant.

Regards,
Phi.
Logged
CHDK ports:
  sx30is (1.00c, 1.00h, 1.00l, 1.00n & 1.00p)
  g12 (1.00c, 1.00e, 1.00f & 1.00g)
  sx130is (1.01d & 1.01f)
  ixus310hs (1.00a & 1.01a)
  sx40hs (1.00d, 1.00g & 1.00i)
  g1x (1.00e, 1.00f & 1.00g)
  g5x (1.00c, 1.01a, 1.01b)
  g7x2 (1.01a, 1.01b, 1.10b)
*

Offline waterwingz

  • ******
  • 12138
    • Waterwingz
Re: Looking to dump SX30 IS firmware. Who can help?!
« Reply #29 on: 25 / November / 2010, 20:53:56 »
Quote from: philmoz on 25 / November / 2010, 20:23:31
Thanks, I've got canon_menu_active and canon_shoot_menu_active; but no canon_mode_active. Are those the ones you meant.

Yup- sorry, fat fingers.   How did you find canon_shoot_menu_active ?
Logged
Ported :   A1200    SD940   G10    Powershot N    G16
Pages: 1 2 [3] 4   Go Up
« previous next »
 

Related Topics