Forgot Password
Pentax Camera Forums Home
 

Reply
Show Printable Version Search this Thread
08-14-2009, 01:09 AM   #286
New Member




Join Date: Aug 2009
Location: Sofia
Posts: 22
QuoteOriginally posted by Class A Quote
Which manual are you using?
The Instruction Manual. Chapter 5.1 Pipeline Operation.

08-14-2009, 02:05 AM   #287
Veteran Member




Join Date: Jul 2009
Location: Russia
Posts: 343
Original Poster
Ouch.
Discussion is now on another level :-) Looks like some kind of reversing forums :-)
I am learning IDC and looking at plugins, just because prefer to make tools first.

Guys, could you look at IDA2SIG and check if FLIRT will work for transferring name information from one firmware to another?

I also noticed one thing working with auto-comment problem for our module - we could make much improved auto-comments, as IDA supports passing command parameters to comments.
We can make some pseudo C comments. Contact me if you are insterested in this task.
IF you are interested in second (by zezo) version with working auto-comments you can also contact me.

Another good suggestion for reversers.
Use Softune comiler to make simple programs and look at them in IDA to understand how this compiler works.

Last edited by tr13; 08-14-2009 at 02:24 AM.
08-14-2009, 06:19 AM   #288
Veteran Member
rparmar's Avatar

Join Date: Jan 2008
Photos: Gallery
Posts: 8,783
QuoteOriginally posted by tr13 Quote
Discussion is now on another level :-) Looks like some kind of reversing forums :-)
You're telling me! And all I wanna know is... which should I get, the DA70 or FA77?
08-14-2009, 12:41 PM   #289
Veteran Member




Join Date: Jul 2009
Location: Russia
Posts: 343
Original Poster
Important addition

I have more reasons to belive that used OS is indeed REALOS.
Due to heavy Int 0x40 usage in many functions and this is common to REALOS
Look at documents:
int 0x40 realos - Google Search

08-14-2009, 01:00 PM   #290
New Member




Join Date: Aug 2009
Location: Sofia
Posts: 22
QuoteOriginally posted by tr13 Quote
Important addition

I have more reasons to belive that used OS is indeed REALOS.
Due to heavy Int 0x40 usage in many functions and this is common to REALOS
Look at documents:
int 0x40 realos - Google Search
That was stated clearly in the K100D firmware but the string was removed in later models:

strings FWDC156B.BIN | grep -i fuji
6Softune REALOS/FR is Realtime OS for FR Family, based on micro-ITRON COPYRIGHT(C) FUJITSU LIMITED 1994-1999

BTW at first glance it seems that GX 20 v1.03 uses a lot more int 0x40 calls than 1.01 but that may be only subjective impression.
08-14-2009, 11:15 PM   #291
Veteran Member
Zebooka's Avatar

Join Date: May 2008
Location: Russia, Siberia, Novosibirsk
Posts: 323
Guys, lots of thanks for K10D 1.30 debug enabling with MODSET.TXT

IT WORKS!
08-15-2009, 12:48 AM   #292
Veteran Member




Join Date: Jul 2009
Location: Russia
Posts: 343
Original Poster
Info update

Latest Softune (much newer then that we had previously)
www.pentax-hack.info/firmware/fujitsu/softune2.zip
CPU definitions file have some info about MB91680 interrupts.

REALOS related stuff :-)
www.pentax-hack.info/firmware/fujitsu/kernel.zip
www.pentax-hack.info/firmware/fujitsu/tools.zip

Last file have tools and good manuals on RealOS functions.
First one have libraries on sources of kernel functions (works with Softune).

If anyone have good Japanese knowledge, contact me, please.
As I hope to get MB91680 manuals :-)

Last edited by tr13; 08-15-2009 at 01:08 AM.
08-15-2009, 04:56 AM   #293
Site Supporter




Join Date: Jan 2008
Location: NC
Posts: 787
anyone got this to work on the k2000/km? i tried it and it doesn't work on the k2000

08-15-2009, 06:09 AM   #294
Veteran Member




Join Date: Jul 2009
Location: Russia
Posts: 343
Original Poster
Here is solution just posted by readers on my blog:

QuoteQuote:
By times and times trying, I succeed open debug menu on K-m. The process like follow:

-----------------------------------------------
1. Create a file name MODSET.464 in root directory on SD card, and the content in file are two lines:
[DEBUG_MODE EN]
[OPEN_DEBUG_MENU]

2. Turn off the K-m. Insert the SD card into the camera. Then Press "Delete Key" (the key below to "mneu" key) while turn on the camera.

3.You see! The debug menu is display on the screen of camera. So you can set every entries of the menu.
[DEBUG_MODE EN] is not required, as I understand as you can turn it on/off in debug menu.
08-15-2009, 09:51 AM   #295
Site Supporter




Join Date: Jan 2008
Location: NC
Posts: 787
k2000 debug

okay. i got my k2000 to display the debug menu.
after creating MODSET.xxx files from .001 to 999, but was only able to copy up to MODSET.509 on the root of the SD card.
i guess this is a limitation for the # of filenames on the root directory

i'm going to slowly remove files and see which one is the correct one for k2000
i wasn't able to get it to work with the MODSET.464

will report back in a little bit...

Last edited by opiedog; 08-15-2009 at 10:00 AM.
08-15-2009, 09:59 AM   #296
Site Supporter




Join Date: Jan 2008
Location: NC
Posts: 787
k2000 MODSET file extension is ...

.482

at least in my FW 1.1, that's what i used to get it to work.

the content of MODSET.482 is
[OPEN_DEBUG_MENU]

card door - closed
turn power on.
made no difference holding the delete button.

thanks!

edit:
you DO need to hold down the delete button the first time to enable it.

Last edited by opiedog; 08-15-2009 at 02:29 PM.
08-15-2009, 11:17 AM   #297
Veteran Member




Join Date: Jul 2009
Location: Russia
Posts: 343
Original Poster
QuoteOriginally posted by opiedog Quote

i'm going to slowly remove files and see which one is the correct one for k2000
i wasn't able to get it to work with the MODSET.464
MODSET.464 is only for K-m, not for K2000. So, it is all correct.
Thanks for useful info. I'll update site in next few days and make separate page with all known information.
08-15-2009, 12:06 PM   #298
New Member




Join Date: Aug 2009
Location: Sofia
Posts: 22
It seems that the file extension is stored in the firmware update file as 4-byte word at offset 0x10

The same (2-byte) value repeated twice is used as block terminator together with the A5 5A 5A A5 sequence - in the case of k2000 '01 e2 01 e2 a5 5a 5a a5' is found at:
Code:
000001f8 - end of header?
000ffff0
00fffff0 - end of DSP firmware
01000070 - end of CPU firmware header?
01037ff8
0103fbf0
08-15-2009, 12:25 PM   #299
Veteran Member




Join Date: Jul 2009
Location: Russia
Posts: 343
Original Poster
Yeah, I mailed to you some part of header references, but now look that don't mailed that it is at 0x10 :-)
I also noticed this eZZe stuff.


Anyone tried to change one byte (in debug commands, using HEX editor in first post), change version in header and flash firmware back (if you decrypted it, remember to encrypt back) ?
As I don't see any real code for checksum calculation yet.

Last edited by tr13; 08-15-2009 at 12:30 PM.
08-15-2009, 01:15 PM   #300
New Member




Join Date: Aug 2009
Location: Sofia
Posts: 22
QuoteOriginally posted by tr13 Quote
Yeah, I mailed to you some part of header references, but now look that don't mailed that it is at 0x10 :-)
I also noticed this eZZe stuff.
That one was pretty obvious - a lot of printf() type calls with things like "MODSET.%d" near the reference. But there are few more interesting header fields.

I still wonder what the best way to compare notes is. Email/forum/blog/wiki?
Reply

Bookmarks
  • Submit Thread to Facebook Facebook
  • Submit Thread to Twitter Twitter
  • Submit Thread to Digg Digg
Tags - Make this thread easier to find by adding keywords to it!
camera, check, dslr, firmware, fr, ida, information, k-x, pentax, photography, pm, post, progress, script, site, software, update, ver, version
Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads
Thread Thread Starter Forum Replies Last Post
DFS hack eccentricphotography Pentax DSLR Discussion 24 10-12-2010 11:08 AM
Yet another hack job -- OM to PK ?? RioRico Pentax SLR Lens Discussion 15 10-07-2010 07:49 AM
K20D Firmware Ver - Pentax Web Site Ver? ChipB Pentax DSLR Discussion 2 02-23-2010 04:14 PM
Teleconverter hack? Raptorman Pentax SLR Lens Discussion 4 01-20-2010 03:51 AM
News Site News and Site Suggestions hidden from guests Adam Site Suggestions and Help 0 11-30-2009 12:38 AM



All times are GMT -7. The time now is 12:46 AM. | See also: NikonForums.com, CanonForums.com part of our network of photo forums!
  • Red (Default)
  • Green
  • Gray
  • Dark
  • Dark Yellow
  • Dark Blue
  • Old Red
  • Old Green
  • Old Gray
  • Dial-Up Style
Hello! It's great to see you back on the forum! Have you considered joining the community?
register
Creating a FREE ACCOUNT takes under a minute, removes ads, and lets you post! [Dismiss]
Top