350D

From CHDK Wiki

Great news!

Some guy called maiohwmai on chdk forum managed to enable ISO H/3200

link to forum thread: [[1]]

From lazy ones - from the thread:

1. First You need to make camera read bootable CF card. For that you need a CF card reader and look in the mentioned earlier thread

download this from forum [[2]]

2. Extract BOOTFLAG.BIN and BOOTFLAG.FIR and proceed to upgrade firmware in camera. Wait few minutes and turn camera off and on simply by pulling battery out.

3. Format CF card and make it bootable (the easiest way is to use Card Tricks software)

4. Get this: [[3]]

5. Extract AUTOEXEC.BIN to fresly created bootable card and put it in camera.

6. From now if You put bootable card camera will blink with blue led(DP button) when booting.

To turn on ISO 3200 just enter any menu and press DP/Print button. You will hear "beep" sound if sound is turned on (just like one from AF) and iso will change to "100"

And You know what?

It works on my camera!

---

Just found firmware update for this camera: http://web.canon.jp/imaging/eosdigital2/e3kr2_firmware-e.html

It claims to be V1.0.3 for a Digital Rebel XT (350d) Which is exactly what version my 350d has on it.

Perhaps a port for this camera? I can't get IDA to work, must you have the full (pay) version, or will the free one work, the free version i have does not support ARM processors, otherwise I'd get to work...

[edit] Info from the forum:

http://chdk.setepontos.com/index.php/topic,3863.msg36254.html :

Hi

Any peoples working on EOS 350d ?

I just tried to compile the ledscan downloaded from here http://chdk.setepontos.com/index.php/topic,1586.0.html

and run it on my 350d,

it works!!

address of CF card access LED(red) = 0xC02200A0

---

I just want to repeat some "known" facts:
- there are no problems with decryption of official FW so you actually do not need to make dump to analyse FW.
- no one with programming skills have done anything usefull for quite long time for this type of camera.- this camera is outdated by now and maybe it explains why there are no more attempts to hack it.

---

I use the entry.s and scanled.c only with the below commands,

arm-elf-gcc -fno-builtin -O2 -Ilib -nostdinc -c entry.s
arm-elf-gcc -fno-builtin -O1 -Ilib -c scanled.c
arm-elf-gcc -fno-builtin -O2 -Ilib -nostdlib -Wl,-N,-Ttext,1900 -o scanled.exec entry.o scanled.o -lgcc
arm-elf-objcopy -O binary scanled.exec scanled.bin
decrypt20d.exe scanled.bin scanled.fir