[Danas_Anis]

not to mention that K30 just got merely hacked. I mean it is not at magic lantern level yet. I think people involved here only scratched a surface of a wide wide ocean of possibilities and made one of the hardest things ever, actually hacked in into Pentax firmware in some way, for years it looked almost impossible that anyone would hack it, So keeping fingers crossed for even more exciting developemnts on this hack, on the mean time none DSLR models might need a longer wait.

[anemone]

And there is small difference. If Pentax has 3 FW hackers, Canon has 30 as their user base is much bigger. And the need for custom firmware is much greater as normal user interface is only little bit better than Nikon's UI.

However Shodan's work is great start. Now it is possible to start dumping, testing, tweaking and hopefully documenting how the system works and how to make it better.

[Danas_Anis]

What Shodan did can make a huge difference in the turn of the history. So his work is extraordinary.

[palikrovol]

I have just discovered this thread.

The first thing that came to my mind with all this, is to use my old K10d to adjust focus in my lenses. I recently discovered how to enable and disable SDM in some lenses, so maybe it could be possible to adjust many other things in the lenses.

Keep up the good work and thanks everyone

Regards

---

Last edited by palikrovol; 12-06-2014 at 04:39 PM. Reason: Typo

[dasPaul]

What Shodan did can make a huge difference in the turn of the history. So his work is extraordinary.

I totally agree and I hope this will develop further. I will spend all my mental power to Shodan to keep up his excellent energetic research in the firmware hack

greets
Paul

[MooseV2]

As soon as we have the groundwork done it will snowball into an amazing project, but I can't help but feel impatient as the last git commit was over 4 months ago. I know Shodan does a lot of work and doesn't commit anything until he's ready, but I don't want to spend time working out something that he's already solved.

Is there anything I can do in the meantime?

[novsky]

So for the last few weeks I've been writing up what I'd like to think is the story so far for Pentax hacking. Hopefully someone will find this interesting.

Ugh, PDF was too big!
https://www.dropbox.com/s/ogez7sb4b0cw92g/hacking_pentax_k30.pdf

Many thx Shodan for this pdf and debug mode Hope many of us will participate to go to an easy and stable "green magic" for pentaxians....

[marabella]

Hello


firstly I want to thank all members and "debug-specialists" for their passionate work and the time they have spent.


I own a K-20D which I successfully debugged for AF correction.


Last month I have purchased a K-S1.......


And now I need help but here is what I have found out and what I have tried so far:


K-S1's model ID is 77850.


So I have created files from 00077850.400 to 00077850.900 and copied these to the SD-card's root.
[OPEN_DEBUG_MENU] with and without a CR
[OPEN_DEBUG_MENU] plus CR plus [DEBUG_MODE EN] with and without a CR
Second empty file DEVELOP.MOD
Card door open, card door open in combination with every single button, card door closed in combination with all buttons.


Nothing was successful.
What I've noticed: If the card door is closed the camera immediately displays the usual screen, whatever button is simultaniously pressed.


What do you think? Anything I did wrong or forgot?


Maybe Pentax has closed this backdoor in their newest model?


Is their any chance to come to a solution without a firmware file?
Until now there is no firmware available for download.


Thanks in advance and a happy new year









Last

[uttam.hathi]

no good

[anemone]

You are trying to build graphical application somehow. You should try to build blank project or console application.

Undefined reference to WinMain@16 - C++ Forum

google gives quite a lot information about undefined reference to winmain

[bootcoder]

What I've noticed: If the card door is closed the camera immediately displays the usual screen, whatever button is simultaniously pressed.

So exactly like on other models.

Maybe Pentax has closed this backdoor in their newest model?

Don't think so.

Is their any chance to come to a solution without a firmware file?

Test and try.

no good

Using mingw gcc 3.4.5 for windows:

Code:

gcc -std=c99 ptxfwtool.c -o ptxfwtool.exe

That's it.

[uttam.hathi]

So exactly like on other models.Don't think so.Test and try.Using mingw gcc 3.4.5 for windows:

Code:

gcc -std=c99 ptxfwtool.c -o ptxfwtool.exe

That's it.

what i meant was it did compile but it does not execute, frmcrypt the version presently available executes but output is irrelevant

---------- Post added 01-05-2015 at 07:18 AM ----------

So exactly like on other models.Don't think so.Test and try.Using mingw gcc 3.4.5 for windows:

Code:

gcc -std=c99 ptxfwtool.c -o ptxfwtool.exe

That's it.

#include <stdio.h>
#include <stdlib.h>

void decrypt(void *this, int mode, void *fileBufferPtr);

int main()
{

FILE *fp;
FILE *pFile;
int counter;
fp = fopen("in.bin", "rb");

if (fp == NULL) {
printf("I couldn't open results.dat for writing.\n");
exit(0);
}

fseek(fp, 0L, SEEK_END);
size_t sz = ftell(fp);
fseek(fp, 0L, SEEK_SET);

int* buffer = (int*) malloc(sz);

fread(buffer, sz, 1, fp);
fclose(fp);

for (counter = 0; counter < (sz / sizeof(int)); counter++)
{
// change the byte order
int num = *(buffer + counter);

int swapped = ((num>>24)&0xff) | // move byte 3 to byte 0
((num<<8)&0xff0000) | // move byte 1 to byte 2
((num>>8)&0xff00) | // move byte 2 to byte 1
((num<<24)&0xff000000); // byte 0 to byte 3

*(buffer + counter) = swapped;
}

decrypt(NULL, 0, buffer);
decrypt(NULL, 1, buffer);

// now change the endian-ness again
for (counter = 0; counter < (sz / sizeof(int)); counter++)
{
// change the byte order
int num = *(buffer + counter);

int swapped = ((num>>24)&0xff) | // move byte 3 to byte 0
((num<<8)&0xff0000) | // move byte 1 to byte 2
((num>>8)&0xff00) | // move byte 2 to byte 1
((num<<24)&0xff000000); // byte 0 to byte 3

*(buffer + counter) = swapped;
}

/* Write your buffer to disk. */
pFile = fopen("out.bin","wb");

if (pFile)
{
fwrite(buffer, sz, 1, pFile);
}
else
{
puts("Something wrong writing to File.");
}

fclose(pFile);

return 0;
}

lets see which compilier accepts this

---------- Post added 01-05-2015 at 07:20 AM ----------

int swapped = ((num>>24)&0xff) | // move byte 3 to byte 0
((num<<8)&0xff0000) | // move byte 1 to byte 2
((num>>8)&0xff00) | // move byte 2 to byte 1
((num<<24)&0xff000000); // byte 0 to byte 3

this is repeated for endian-ness
decrypt!!!
encrypt!!!

Read more at: https://www.pentaxforums.com/forums/6-pentax-dslr-discussion/250555-resurrect...#ixzz3NuKi2l4i

[bootcoder]

On Windows: download my version of mingw above, change in ptxfwtool.c line 127 "r" to "rb" and line 194 "w" to "wb", then compile ptxfwtool.c as I described and it works perfectly. On Linux: just compile. Sources

[uttam.hathi]

On Windows: download my version of mingw above, change in ptxfwtool.c line 127 "r" to "rb" and line 194 "w" to "wb", then compile ptxfwtool.c as I described and it works perfectly. On Linux: just compile. Sources

is it ptxfwtool or pfwtool !

[uttam.hathi]

no good, pls upload the exe version, did the suggested changes of r to rb and w to wb