Resurrecting Pentax firmware hacking

mrNewt · 02-12-2014, 08:57 AM

Originally posted by Giklab

I can confirm this DOES NOT work on a K-5 II. However, it also doesn't brick your camera :P

You are brave

.

Shodan · 02-12-2014, 09:14 AM - **1 Like**

Quote:

But this menu doesn't seem to lead to many adjustment options for the AF, SR, video etc etc, just information and tests. There is probably a 'service and adjust' set of menus lurking somewhere else in the firmware.

[VLENS_CONTROL] should open the lens config menu.

Quote:

I can confirm this DOES NOT work on a K-5 II. However, it also doesn't brick your camera :P

Maybe because I posted the wrong filename

(updated now) or because the product id (77650) is different on your camera, the debug id (524) as well. You can find the product ID in some Pentax sales literature, you could then guess the last three digits.

Giklab · 02-12-2014, 09:28 AM

I'm guessing the ID is different, but I'll try again.
Edit: looking at IDs here http://www.pentax-hack.info/documents/debug.html

I think we could guesstimate the ID for the K-5 series.

aurele · 02-12-2014, 11:47 AM

Shodan, Whatever you find, not matter if you succeed or not, let me tell you : THANK YOU !
this is a great initiative :-D

If, in your work, by any luck, you find the way the body communicate with the lens, it would be awesome to share. We could create some custom mounts for old lenses. Maybe, a brother can help me with that part (coding a chip with FL for example, to adapt it on a Helios lens, etc...)

ruggiex · 02-12-2014, 05:21 PM - **1 Like**

Awesome, I was able to open debug menu on K5 (v1.14 firmware) using

00077430.505 and DEVELOP.MOD

K5 II and II/s model numbers should be 77680, 77681 respectively but I don't have the cameras to figure out the right numbers.

jup · 02-12-2014, 05:48 PM

Great work Shodan!

Originally posted by ruggiex

K5 II and II/s model numbers should be 77680, 77681 respectively but I don't have the cameras to figure out the right numbers.

K-3?

mrwood1602 · 02-12-2014, 08:50 PM - **1 Like**

Opened debug menu on my K5-II (firmware v1.06) using the files:

00077680.536 and DEVELOP.MOD

The file names for the K3 should be:

00077760.XXX and DEVELOP.MOD

I would guess that the XXX is between 540 and 550, but this is purely speculation. If you are interested in repeating with the K3 you can create several files all at once and as long as the correct filename is among the names you chose it will open the debug menu.

ruggiex · 02-12-2014, 09:23 PM

For K-3 it's

00077760.502 and DEVELOP.MOD

Last edited by ruggiex; 04-20-2014 at 09:07 AM. Reason: misspell

Giklab · 02-12-2014, 11:09 PM

This thread needs to be stickied ASAP. How do we request this?

mikemike · 02-12-2014, 11:32 PM

Awesome developments, shodan, this is a great first step.

jup · 02-13-2014, 12:04 AM

Originally posted by ruggiex

For K-3 it's

00077760.502 and DEVLOP.MOD

Very cool! So now we also have decrypted K-3 firmware. Now I'd just need a disassembler.

Shodan · 02-13-2014, 04:31 AM - **1 Like**

I was thinking. I think I know enough to start writing code for the K30. It wouldn't do anything special maybe write a temp file/show a new menu.

Anyone interested in testing it if I did it.

Alternatively anyone got a free K30 / wants to donate me one?

jup · 02-13-2014, 09:50 PM

Originally posted by Shodan

I was thinking. I think I know enough to start writing code for the K30. It wouldn't do anything special maybe write a temp file/show a new menu.

Anyone interested in testing it if I did it.

Alternatively anyone got a free K30 / wants to donate me one?

I still like my K-30 too much. But if nobody volunteers, you could ask on K-30 forums if someone maybe has K-30 with stuck shutter or other problem that wouldn't interfere with initial testing - worthless to them but not to you. Too bad these things last ages.

Alternatively, we could try to collect money to get you 2nd hand K-30. I'd totally pledge in some money, this is very worthy project.

jup · 02-13-2014, 10:07 PM

Originally posted by rawr

Well done. Very promising. I wonder what the 'Release Aging' does.
If the K-30 has so much lurking within it's debug menu, the K-3 probably has double that.

But this menu doesn't seem to lead to many adjustment options for the AF, SR, video etc etc, just information and tests. There is probably a 'service and adjust' set of menus lurking somewhere else in the firmware.

If you enable debug mode, you get debug menu in between normal menus, as always. That way you can at least adjust AF below what is allowed normally. This is from K-3, but you'll get the idea. And BTW, K-3 menu is almost 1:1 same. It's just missing BOOT BLOCK INFO, for whatever reason.

**mtux** · 02-14-2014, 02:02 AM

Wow! this is a great project.

02-12-2014, 05:21 PM - 1 Like	#35
ruggiex Veteran Member Join Date: Feb 2010 Location: East Bay Area Photos: Gallery Posts: 800	Awesome, I was able to open debug menu on K5 (v1.14 firmware) using 00077430.505 and DEVELOP.MOD K5 II and II/s model numbers should be 77680, 77681 respectively but I don't have the cameras to figure out the right numbers. Last edited by ruggiex; 02-12-2014 at 06:02 PM.

02-12-2014, 08:50 PM - 1 Like	#37
mrwood1602 New Member Join Date: Nov 2013 Location: Texas Posts: 9	Opened debug menu on my K5-II (firmware v1.06) using the files: 00077680.536 and DEVELOP.MOD The file names for the K3 should be: 00077760.XXX and DEVELOP.MOD I would guess that the XXX is between 540 and 550, but this is purely speculation. If you are interested in repeating with the K3 you can create several files all at once and as long as the correct filename is among the names you chose it will open the debug menu. Last edited by mrwood1602; 02-12-2014 at 08:59 PM. Reason: added information about K3 filename

02-13-2014, 04:31 AM - 1 Like	#42
Shodan Forum Member Join Date: Feb 2014 Posts: 92 Original Poster	I was thinking. I think I know enough to start writing code for the K30. It wouldn't do anything special maybe write a temp file/show a new menu. Anyone interested in testing it if I did it. Alternatively anyone got a free K30 / wants to donate me one? Last edited by Shodan; 02-13-2014 at 04:43 AM.

Thread Tools	Search this Thread
Show Printable Version E-mail to a Friend	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
NY area SDM Hacking	dappercorpmonkey	Troubleshooting and Beginner Help	11	07-26-2013 04:15 PM
Nature Resurrecting some old images - Angry Birds!	Julie	Post Your Photos!	4	03-07-2013 10:41 AM
k-5 firmware hacking anyone?	secateurs	Pentax K-5	33	10-05-2012 03:05 PM
Hacking lens' memory	plis	Visitors' Center	6	11-28-2011 10:58 PM
Resurrecting a MX and Super ME	LiMPiNg	Pentax Film SLR Discussion	4	09-27-2011 02:55 PM

02-12-2014, 08:57 AM	#31
mrNewt Veteran Member Join Date: Nov 2011 Location: ON, RH Posts: 2,170	Originally posted by Giklab I can confirm this DOES NOT work on a K-5 II. However, it also doesn't brick your camera :P You are brave .

02-12-2014, 09:14 AM - 1 Like	#32
Shodan Forum Member Join Date: Feb 2014 Posts: 92 Original Poster	Quote: But this menu doesn't seem to lead to many adjustment options for the AF, SR, video etc etc, just information and tests. There is probably a 'service and adjust' set of menus lurking somewhere else in the firmware. [VLENS_CONTROL] should open the lens config menu. Quote: I can confirm this DOES NOT work on a K-5 II. However, it also doesn't brick your camera :P Maybe because I posted the wrong filename (updated now) or because the product id (77650) is different on your camera, the debug id (524) as well. You can find the product ID in some Pentax sales literature, you could then guess the last three digits.

02-12-2014, 09:28 AM	#33
Giklab Veteran Member Join Date: Jan 2012 Location: Slovenia Photos: Gallery Posts: 2,184	I'm guessing the ID is different, but I'll try again. Edit: looking at IDs here http://www.pentax-hack.info/documents/debug.html I think we could guesstimate the ID for the K-5 series.

02-12-2014, 11:47 AM	#34
aurele Pentaxian Join Date: Jan 2011 Location: Paris, France Photos: Albums Posts: 3,172	Shodan, Whatever you find, not matter if you succeed or not, let me tell you : THANK YOU ! this is a great initiative :-D If, in your work, by any luck, you find the way the body communicate with the lens, it would be awesome to share. We could create some custom mounts for old lenses. Maybe, a brother can help me with that part (coding a chip with FL for example, to adapt it on a Helios lens, etc...)

02-12-2014, 05:48 PM	#36
jup Forum Member Join Date: Nov 2009 Location: San Jose, CA Posts: 99	Great work Shodan! Originally posted by ruggiex K5 II and II/s model numbers should be 77680, 77681 respectively but I don't have the cameras to figure out the right numbers. K-3?

02-12-2014, 09:23 PM	#38
ruggiex Veteran Member Join Date: Feb 2010 Location: East Bay Area Photos: Gallery Posts: 800	For K-3 it's 00077760.502 and DEVELOP.MOD Last edited by ruggiex; 04-20-2014 at 09:07 AM. Reason: misspell

02-12-2014, 11:09 PM	#39
Giklab Veteran Member Join Date: Jan 2012 Location: Slovenia Photos: Gallery Posts: 2,184	This thread needs to be stickied ASAP. How do we request this?

02-12-2014, 11:32 PM	#40
mikemike Inactive Account Join Date: Apr 2010 Location: New Orleans Photos: Gallery Posts: 3,053	Awesome developments, shodan, this is a great first step.

02-13-2014, 12:04 AM	#41
jup Forum Member Join Date: Nov 2009 Location: San Jose, CA Posts: 99	Originally posted by ruggiex For K-3 it's 00077760.502 and DEVLOP.MOD Very cool! So now we also have decrypted K-3 firmware. Now I'd just need a disassembler.

02-13-2014, 09:50 PM	#43
jup Forum Member Join Date: Nov 2009 Location: San Jose, CA Posts: 99	Originally posted by Shodan I was thinking. I think I know enough to start writing code for the K30. It wouldn't do anything special maybe write a temp file/show a new menu. Anyone interested in testing it if I did it. Alternatively anyone got a free K30 / wants to donate me one? I still like my K-30 too much. But if nobody volunteers, you could ask on K-30 forums if someone maybe has K-30 with stuck shutter or other problem that wouldn't interfere with initial testing - worthless to them but not to you. Too bad these things last ages. Alternatively, we could try to collect money to get you 2nd hand K-30. I'd totally pledge in some money, this is very worthy project.

02-14-2014, 02:02 AM	#45
mtux Site Supporter Join Date: Apr 2013 Location: the Netherlands Photos: Gallery \| Albums Posts: 2,428	Wow! this is a great project.