S602 - new firmware?

marius100281 · Feb 24, 2003

I meant to pull the flash out of the camera and back it up, we could then compare against the file we've downloaded to make sure it's the right stuff.

Have you tried anything with the code yet?

jkirk@oz said:
To download - Just create this path on a SM card and put the S3
file in it -
A:\IMFIDX10\MV320RSC.S3
Remove CF card and power on - Thats all. Since we HAVE the original
code, we probably WON'T need to read the Firmware.

--
-marius
Visit the S602Z FAQ: http://www.marius.org/fuji602faq.php
Fuji Forum Mugshot at http://www.fujimugs.com/

jkirk@oz · Feb 24, 2003

Unnamed33 said:
mips wrote:
"If there was a way to test it safely!"
It would help if we knew how to recover from a corrupt upgrade &
how to backup the current firmware.

To be ULTRASAFE, we need open the DC to access the RISC. Hopefully the JTAG pins are easily accessible (MOST likely as they'd needed to load the FIRST Firmware in somehow). I have most of All Flash development programmers incl JTAG, so that part is easy.
Hard part: Dis-assembling the code.

Unnamed33 said:
Anybody have any friends working at a Fuji service centre ? ;-)
Cheers
mips

jkirk@oz · Feb 24, 2003

marius100281 said:
marius wrote:
I meant to pull the flash out of the camera and back it up, we
could then compare against the file we've downloaded to make sure
it's the right stuff.

After examining the file, I am 99% certain that they have NO routine to dump the code. There'd be no need to do it. There WILL be an engineers JTAG port though in hardware for serious corruption. IT is DEFINITELY the original code.

marius100281 said:
Have you tried anything with the code yet?

Naaa, Just foolin' with menu's and possibly NOP'd that damn ReSET counter. The witch is DEAD !!

Without "inside" help this'll take a while (unless I get a hold of a pSOS development system)
JKirk

marius100281 · Feb 24, 2003

I've just started digging through the hex dump of the BIN file.

Whereabouts did you locate the reset counter?

jkirk@oz said:
jkirk@oz said:

Have you tried anything with the code yet?

Click to expand...

Naaa, Just foolin' with menu's and possibly NOP'd that damn ReSET
counter. The witch is DEAD !!
Without "inside" help this'll take a while (unless I get a hold of
a pSOS development system)
JKirk

--
-marius
Visit the S602Z FAQ: http://www.marius.org/fuji602faq.php
Fuji Forum Mugshot at http://www.fujimugs.com/

marius100281 · Feb 24, 2003

Also, let me know if you want me to setup a mailing list for these activities, so we can get it off the message boards and report back periodically.

-marius

jkirk@oz said:
jkirk@oz said:

marius wrote:
I meant to pull the flash out of the camera and back it up, we
could then compare against the file we've downloaded to make sure
it's the right stuff.

Click to expand...

After examining the file, I am 99% certain that they have NO
routine to dump the code. There'd be no need to do it. There WILL
be an engineers JTAG port though in hardware for serious
corruption. IT is DEFINITELY the original code.

jkirk@oz said:

Have you tried anything with the code yet?

Click to expand...

Naaa, Just foolin' with menu's and possibly NOP'd that damn ReSET
counter. The witch is DEAD !!
Without "inside" help this'll take a while (unless I get a hold of
a pSOS development system)
JKirk

--
-marius
Visit the S602Z FAQ: http://www.marius.org/fuji602faq.php
Fuji Forum Mugshot at http://www.fujimugs.com/

jkirk@oz · Feb 24, 2003

I've run the BIN through 3 pass dis-assembly. I have pages of temp assigned mnemonics, sub-routines, tables etc I don't even know the exact version of the RISC, I'd have to open her up. The counter that I beleive is the culprit is just in a sea of code. There is no way of understanding anything at this point, this will be a LONG process. My guess is based on 30+years of writing / dis-assembling source code. Unless I have anything "concrete" to report, or someone gets "inside help"

, we will only be able to do cosmetic changes for now anyway. Even then, without the JTAG connection sorted out, you'd have to be game

Current work load precludes me from spending a lot of time on it for now. I'm sure many ppl will still LOVE to play and see it as a challenge. I'm getting too old for that these days

I hope what I've provided so far will "kick start" interest and curiousity.
JKirk

marius100281 said:
marius wrote:
I've just started digging through the hex dump of the BIN file.
Whereabouts did you locate the reset counter?

jkirk@oz · Feb 24, 2003

Lets let the people decide.

Anyone interested in a "group" persuing this ? IF SO, vote here. If there isn't much interest, then it'll just end up being some bored techo's fooling around in their spare time

JKirk

marius100281 said:
marius wrote:
Also, let me know if you want me to setup a mailing list for these
activities, so we can get it off the message boards and report back
periodically.
-marius

mb34928 · Feb 24, 2003

Count me in

--
Shawn
http://www.pbase.com/mb34928
FAQ
http://www.marius.org/fuji602faq.php

DomT · Feb 24, 2003

jkirk@oz said:
jkirk@oz wrote:
Lets let the people decide.
Anyone interested in a "group" persuing this ? IF SO, vote here. If
there isn't much interest, then it'll just end up being some bored
techo's fooling around in their spare time
JKirk

jkirk@oz said:

marius wrote:
Also, let me know if you want me to setup a mailing list for these
activities, so we can get it off the message boards and report back
periodically.
-marius

Click to expand...

Put me on the mailing list please - [email protected]
--
Visit the S602Z FAQ: http://www.marius.org/fuji602faq.php
NZKiwi, S602Z, Raynox DCR-1850 tele, Sunpak 383, ExpoDisc

SuperScott · Feb 24, 2003

I for one am extremely interested in seeing how this develops. Unfortunately, I think that I will not be of any assistance in the "leg work," just in the end use...

If you keep this thread in the forum then it might get buried; however, there is always the chance that an interested person might find it and be able to contribute in a beneficial way.

Scott
--
Capture the beauty of the world one frame at a time.

Neoender · Feb 24, 2003

very interested

but i dont have the technical know how to help... if someone wants to point me to some books tho, im a quick study

jkirk@oz said:
jkirk@oz said:

marius wrote:
Also, let me know if you want me to setup a mailing list for these
activities, so we can get it off the message boards and report back
periodically.
-marius

Click to expand...

Unnamed33 · Feb 24, 2003

Count me in. I'm very rusty on the coding front but I like a challenge.

I'm gonna try my hand at some social engineering today and see what gives....

Cheers
mips

jkirk@oz said:
jkirk@oz said:

marius wrote:
Also, let me know if you want me to setup a mailing list for these
activities, so we can get it off the message boards and report back
periodically.
-marius

Click to expand...

marius100281 · Feb 24, 2003

Rather than make public the address of the mailing list, please email me ([email protected]) if you'd like to be added to the list.

mips said:
I'm gonna try my hand at some social engineering today and see what
gives....

Cheers
mips

jkirk@oz said:

Unnamed33 said:

marius wrote:
Also, let me know if you want me to setup a mailing list for these
activities, so we can get it off the message boards and report back
periodically.
-marius

Click to expand...

Click to expand...

--
-marius
Visit the S602Z FAQ: http://www.marius.org/fuji602faq.php
Fuji Forum Mugshot at http://www.fujimugs.com/

PrzemKo · Feb 25, 2003

Sure - I'd love to see how it goes. Not sure about my ability to contribute though - I'm familiar with couple of cpus, but this one most likely would require me to learn about architecture, it's assembly, guess the variant, etc...

[email protected]

jkirk@oz said:
jkirk@oz said:

Also, let me know if you want me to setup a mailing list for these
activities, so we can get it off the message boards and report back
periodically.

Click to expand...

DINH Viet Huy · Feb 25, 2003

Count me in

--
DVHH

_dt_ · Feb 25, 2003

Count me in, please. I'm very interested in this issue.

dt

jkirk@oz · Feb 25, 2003

After spending a bit of time on this, I don't like our chances without "outside" help. The pSOS development system is several thousand $$, crutial due to 1.5 million bytes of code to dis-assemble "correctly" (I have no clue if my listing is even close, its just MOTO generic). IF I could justify it in any of my projects, I would've bought it BUT I have no other use for it (I write my own kernels).

Has anyone opened up the S602 yet? IF I work out the JTAG port, I can at least do cosmetic changes now and test "more adventurous" edits without fear of complete corruption. Then I could just provide the S3 File for downloading via the SM card.

Well, at least we know the S602 IS very easily updatable. Hopefully someone else out there has better development tools?
Until then it's back to -

jkirk@oz said:
" it'll just end up being some bored techo's fooling around in their spare time "

Sorry for getting your hopes up :-(
JKirk

Lothman · Feb 25, 2003

[U] dt said:
Count me in, please. I'm very interested in this issue.

dt

me too
Regards Lothman[/U]

jkirk@oz · Feb 25, 2003

Don't you hate getting old

I knew I'd been through this before -
http://forums.dpreview.com/forums/read.asp?forum=1024&message=2625162

It seems Milolta D7 has virtually an identical setup w/pSOS. I had a quick look back then and a few ppl even had an attempt to patch Minolta code, I guess they failed. Some interesting info here too -
http://photopc.sourceforge.net/

I do intend to keep checking "my" industry sources for ideas. I'll post back here if i come up with anything.
JKirk

MrMagoo · Feb 25, 2003

While I only have experience with 8 bit microcontrollers, mostly Intel and Atmel Risk based, I never the less had a look at the binary file with U-Edit.

While all the normal viewscreen ASCII text can be found, the text for the 'Setup screen' is missing. this could be explained by it just beeing a graphical image and the program just keeps track of the up,down and sideways keys.

What got me wondering, is the area around 16680 H it looks like a complete build in debug monitor to display memory, register and hit counts after a crash or simmilar. Perhaps someone more expert, could tell if it is normal to include this in a products final version. Also I would think that the final version would be optimized for both Speed an memory usage.

There are many large areas with just zero in them. I can't loose the feeling that this is just a version used in the debugging of the software. Also would Fuji not have included a short copyrite notice including the year. Also none of this actually proves that the 602 can be flashed. If Fuji policy does not include upgrades, then it makes no sense to use EEprom they would use a mask programmed Rom.
MrMagoo

jkirk@oz said:
jkirk@oz said:

" it'll just end up being some bored techo's fooling around in their spare time "

Click to expand...

Sorry for getting your hopes up :-(
JKirk

S602 - new firmware?

Leading Member

Veteran Member

Veteran Member

Leading Member

Leading Member

Veteran Member

Veteran Member

Forum Enthusiast

Senior Member

Well-known member

Well-known member

Forum Enthusiast

Leading Member

Member

Active member

Member

Veteran Member

Senior Member

Veteran Member

Forum Enthusiast

Similar threads

Keyboard shortcuts