[falconeye]

can communicate with a camera body to which the interchangeable lens is detachably attached to exchange data of the

Ok, fair enough.

But my comment was referring to the string:

===LENS CPU F/W UPDATE===

So, there is a lens cpu with a firmware which can be updated via the body. Something I wouldn't have expected.

As esp., it may imply that your lens may see a permanent change after having been mount to another body ...

[tr13]

As esp., it may imply that your lens may see a permanent change after having been mount to another body ...

I believe that this is debug mode strings.
May be used by service center to update faulty firmware.
And why they need CPU instead of serial flash :-)

[ytterbium]

Maybe its just a part of a firmware responsible for lens interraction an simply has an odd name.

[tr13]

Someone looked at CPU FIRMWARE in disassembler (second small file part at 0x800000)?
For me it look like garbage, but decryption is clearly ok (on K10D the same).
In Hex editor code pattern also seems different then normal FR code (it is easy to spot fixed lenght RISC code like ARM/FR).
May be we have simple encryption on top of other encryption :-)
Or I just don't understand something.

[ytterbium]

Btw, how many people are actually participating. It seems that tr13 is doing enormous work all alone.
As much as i'd like to help i barely have time to keep track on what tr13 is doing and i'm able to write only very simple assembly code, not even talking about serious, qualitative disassembly.
I guess it is much simpler to write something from scratch. Only this is true when you have full hardware documentation and good, fully featured integrated development environment.
Is there any other help you could find useful to ease your efforts and free more time for disassembly and analysis work where you seem to be very knowledgable?

[froeschle]

So, there is a lens cpu with a firmware which can be updated via the body. Something I wouldn't have expected.

As esp., it may imply that your lens may see a permanent change after having been mount to another body ...

Maybe its just a part of a firmware responsible for lens interraction an simply has an odd name.

Examples of firmware updates of / for lenses:
Four Thirds | Joint update service
Is there a secret Nikon L firmware? | Nikon Rumors
Sigma confirm issue with Nikon D200: Digital Photography Review

[tr13]

If anyone want to check first disassembly results

First Enabling debug mode.
Make file named 'MODSET.xxx' in flash card root. Note! xxx is different for each model.
in file write exactly 'DEBUG_MODE EN', use notepad or other simple text editor.

xxx = 421 for K10D with 1.30 firmware,
for GX20 v1.01 = 454
K20D v1.03 = 442

Turn camera off and then on.

I don't guarantee that this will work. But easy to check.

Also could write 'RELEASE_AGING' to reset shuter counter :-) Ouch it is better to remove this later :-)

Could also try '"OPEN_DEBUG_MENU', 'SW_DEBUG_MENU EN' :-)

If in original it don't work use
'[DEBUG_MODE EN]' format of commands
and leave flash door open then turning camera back on.

---

Last edited by tr13; 08-06-2009 at 07:04 AM.

[tr13]

How to turn build in script interpreter

1) You need to enable script mode (same as previous post, but use SCRIPT_EN_MODE EN) or use debug menu.

2) Make 'AUTORUN.xxx' file (xxx same as in MODSET file) with script inside,
available keywords :
END, EXIT, PAUSE, WAIT,
GOTO, IFGOTO, ALLCLR, CLS,
PRINT, LANGUAGE, COLOR, $ % ( for values )
GOSUB, IFGOSUB , RETURN, IF, ELSE, WHILE,
INTERVAL, CYCLE, FILEOUT, FSEARCH, TIMERON, TIMEROFF.

Looks like quite full functional BASIC :-)
You could try "hello world" first.
I don't have time to test all this, so volunteers are welcome.

[Miserere]

[Bulb ReadOut DownGain Index]
[ISO1600 ReadOut DownGain Index]

What the heck do they special with ISO1600?

Because the function is near the bulb mode it may have something to do with the bulb mode having an upper iso limit of 1600. I believe the function reads the iso and prevents it from going over 1600 in bulb mode.

On the K-7 (and K20D?) ISO can be set no higher than 1600 when shooting in Bulb mode.

[ytterbium]

Where to find xxx for k200d?
I saw something like that file in k10d service manual, but dosnt seems to be in k200d's.

[Miserere]

tr13, I wish I could help! While I have knowledge of programming, it is with high level languages. Sadly, I don't have to time to dedicate to a project such as this, even though it would be extremely useful to owners of K10Ds.

A list of functions that could be added to a K10D that quickly come to mind:

• Intervalometer
• AF adjustment for 4 lenses (I was told by a Pentax tech that 4 was all there was memory for, but if data could be stored on SD card then the number would be near infinite)
• Higher ISO settings
• Hyperfocal AF mode
• Disable automatic shutoff of IR remote after 5 minutes
• Add 'A' functionality when using K and M lenses by allowing input of max and min apertures and change aperture lever motion so movement is proportional to aperture diameter instead of area (this might be tricky, but sooooo useful)
• Allow for SDM to be turned on/off
• On K20D and K-7, make it possible to turn noise reduction off for long exposures

I'm sure others can come up with more stuff that could be done

[tr13]

Where to find xxx for k200d?
I saw something like that file in k10d service manual, but dosnt seems to be in k200d's.

It is too different camera and don't have any firmware available.

[kytutr]

I am quite unsure about REALOS/FR thing. As they could use simple proprietary embedded OS. Nikon D300 is based on similar chip and uses REALOS, but it have copyright string at least.
P.S. And this is just file names, not related to OS.

Thank you, tr13 for correcting me. Is it possible that there is some FAT filesystem is embedded in the firmware file to be used by simple proprietary embedded OS? I'm guessing that from these strings like C:\Main.jpg.

I was looking for FAT16 or FAT32 filesystem's headers (according to How FAT Works: Local File Systems), but I found none.

[tr13]

A list of functions that could be added to a K10D that quickly come to mind:

• Intervalometer
• AF adjustment for 4 lenses (I was told by a Pentax tech that 4 was all there was memory for, but if data could be stored on SD card then the number would be near infinite)
• Higher ISO settings
• Hyperfocal AF mode
• Disable automatic shutoff of IR remote after 5 minutes
• Add 'A' functionality when using K and M lenses by allowing input of max and min apertures and change aperture lever motion so movement is proportional to aperture diameter instead of area (this might be tricky, but sooooo useful)

In fact I am agains to put wagon before horse.
From your list I am interested only in last point.
I also won't be doing anything for K10D specially (like adjustment).
But if we could fine the guy to look at lens firmwares, I am sure it could be your solution.
If anyone want to do it - you are welcome.

[tr13]

I was looking for FAT16 or FAT32 filesystem's headers (according to How FAT Works: Local File Systems), but I found none.

Before looking af headers look at Endianness - Wikipedia, the free encyclopedia