CHDK firmware hack discussion (16)

Finally I was able to light my camera leds.

Using G7 blinker posted yesterday I tried to cycle through memory locations using the following modified main.c

1. define DEL 1260

long* led;

void on(void){
led=0x46;
}

void off(void){
led=0x44;
}

void delay(int i){
while(--i) {
asm("nop\n");
asm("nop\n");
}
}

void send_byte(char b){
char i;
off();
delay(DEL);
for (i=0;i
if (b&1) on(); else off();
b> > =1;
delay(DEL);
}
on();
delay(DEL*3);
}

void send_string(char* s){
while( s) send_byte( s++);
}

int i;
char p;

int main(){
long ciclo;
for (ciclo=0xC0220060; ciclo
{
led=(long*)ciclo;
p=(char*)0xFF800000; 0xFFA00000 for secons part
on();
for (i=0;i
send_byte('b');
send_byte('e');
send_byte('g');
send_byte('i');
send_byte('n');
for(i=0;i
send_byte('e');
send_byte('n');
send_byte('d');
send_byte('.');
off();
}
return 0;
}

After a few seconds (20-30) every led of my camera lits in turn even AF_LED.

Now narrowing the cycling interval I think will be easy to obtain the exact memory location of mapped i/o port.

This weekend i will attempt to dump the firmware using original Grand blinker or G7 blinker with the right led memory loction.

EDIT: After 40-60 Sec