[beholder3]

I am very sick but at some point I can actually attempt to edit using either a k-3 or k-1. I normally do my conversions with a k100d or k100d super. After editing I can verify the changes if it works. But that may be weeks... If my wife's experience repeats itself.

My best wishes to you to get well soon!

Health is so much more important than gadgets.

[RayeR]

As you can see even in the K-1 there is an option "LENS ROM EDIT R/W" directly in the camera
This allows directly changing the bytes. I have not actually executed it personally, but I can say that clicking it does show the underlying edit interface (asking about address and data and if you want to read or write) on the K-1, so I do assume this still works there.

I already wrote a few posts above that I tried it (of course) on K-3 akd K-30 and it doesn't work. I can change address but it reads all bytes as zeros and if I edit something it's not saved. So there was some change in firmware that debug menu doesn't reflect. Of course the FW must be able to read EEPROM data from lenses but it's done differently in newer FW and debug menu code was not updated to match.

[UncleVanya]

I already wrote a few posts above that I tried it (of course) on K-3 akd K-30 and it doesn't work. I can change address but it reads all bytes as zeros and if I edit something it's not saved. So there was some change in firmware that debug menu doesn't reflect. Of course the FW must be able to read EEPROM data from lenses but it's done differently in newer FW and debug menu code was not updated to match.

I also missed that you had tried directly editing vs downloading the file to SD.

[RayeR]

The same for [lens - body communication test] menu item. It just hangs the camera with black screen. So the routines that communicate with lens (including EEPROM R/W) was changed some way. Only chance would be to search and compare old FW that has this function working with newer FW that doesn't work. Good candidate would be K10D where one can compare FW 1.31 with some older version. But it may not be easy to reimplement it to work again.

[RayeR]

I disassembled my DA 17-70mm f/4 AL [IF] SDM lens that have damaged SDM also to check if there is an EEPROM chip. I carefully looked at all chips but there is not common serial EEPROM. There is TI MSP430F1232 16-bit MCU with embedded 8,25 kB flashROM. So it may hold lens data inside. So it would not be such easy to read/write it as serial EEPROM.

Here is photo of the PCB
http://rayer.g6.cz/hardware/pentax.k30/da1770c.jpg

I'd also ask for help technical skilled users who own the same lens DA 17-70mm f/4 AL [IF] SDM to help me identify the value of blown resistor
(pointed by arrow) on bottom side of PCB.
http://rayer.g6.cz/hardware/pentax.k30/da1770d.jpg
It's not hard to disassemble (~10min) and there are step by step instructions

The chip list (most of them are tiny SMD parts with a short code hard to be identified. The big NEC chip seems to be something custom, google's silent):
top side:
TI M430F1232 17TG4 (TSSOP28, 16-bit MCU 8kB+256B FlashROM, 256B RAM, 10-bit ADC)
MF1 405 (micro SOT23-5)

bottom side:
B1AV (SOT23-5, near motor pins)
2* fairchild BHAA WZ08 (micro TSSOP8)
fairchild PB0AA LCX74 (DQFN14, 7474 dual D-type positive edge-triggered flip-flop 3,3V)
Z86F (micro SOT23-5)
Z16B (micro SOT23-5)
5W55 (micro TSSOP8)
5W56 (micro TSSOP8)
T6E5 (SOT23-5)
162Y (SOT23-5)

lens body FPC:
NEC LIC092 118M1 (TQFP48)
58C 171 (TSSOP8)

[beholder3]

I disassembled my DA 17-70mm f/4 AL [IF] SDM lens that have damaged SDM also to check if there is an EEPROM chip. I carefully looked at all chips but there is not common serial EEPROM. There is TI MSP430F1232 16-bit MCU with embedded 8,25 kB flashROM. So it may hold lens data inside. So it would not be such easy to read/write it as serial EEPROM.

Some people have downloaded the lens rom settings from that lens. Maybe you take a look at those files.

[KoolKool]

so firmware hacking still a fantasy?

[UncleVanya]

so firmware hacking still a fantasy?

Can you be more specific? There's a k-50 image setup to deploy onto k-30...

[RayeR]

Some people have downloaded the lens rom settings from that lens. Maybe you take a look at those files.

Hi, please do you have a link for lens EE dumps?

[KoolKool]

Can you be more specific? There's a k-50 image setup to deploy onto k-30...

well...that just a trick,can't be called hacking

i still desire for some specific hacking like

- unlock real SR for video mode, and increase bit rate as well
- for my k70 - unlock PDAF on live view shooting mode (because it's only available on video mode)

[beholder3]

Hi, please do you have a link for lens EE dumps?

The first link in this thread: Datenbank für Lensroms / eeprom / Lenseep ? Pentaxians shows a link to a dropbox.

[RayeR]

Thank you for the link, I had to register.

[ZombieArmy]

i still desire for some specific hacking like

- unlock real SR for video mode, and increase bit rate as well
- for my k70 - unlock PDAF on live view shooting mode (because it's only available on video mode)

These are the main things I'd loooove to see. I really wish I was skilled enough to get involved.

[tempelorg]

For K-1 to enter Debug Mode ...

1. File 00077970.562 should contain [OPEN_DEBUG_MENU] and LF char.
2. File DEVELOP.MOD must be exact 10 bytes long and its content should be entered in file hexeditor:
   EITHER hex bytes: 07 01 2C 1F 10 03 1E 16 05 2D enables Development Menu 1-6
   OR hex bytes: 07 1A 02 0A 19 18 1B 1C 05 11 enables Development Menu 1-7

Then turn off camera, plugin this SD card. Leave card door open. Hold "menu" button and turn camera on.

Tried that on my K-1 II - with door open and holding the Menu button: When then turning it on, the display remains black, same as if I had no files on the SD card. Tried both hex sequences. (And yes, I know how to use a hex editor, I wrote more than one myself )

I guess the file names (and/or hex codes) have changed for the K-1 II again. Anyone know them?

[bootcoder]

I guess the file names (and/or hex codes) have changed for the K-1 II again.

What means "again"? Names are sure unique for each model, but stay same for each firmware of this model. This post was only for K-1 and you have different camera model.

Anyone know them?

Yes.