Author Topic: Canon EOS 4000D / 3000D / Rebel T100  (Read 546 times)

a1ex

  • Administrator
  • Hero Member
  • *****
  • Posts: 11968
  • 5D Mark Free
Canon EOS 4000D / 3000D / Rebel T100
« on: January 26, 2019, 11:37:54 PM »
Just received a firmware dump from this model.

ROM dumper (requires an SD card formatted as FAT32):
4000D

Code: [Select]
  Magic Lantern Rescue
 ----------------------------
 - Model ID: 0x422 4000D
 - Camera model: Canon EOS 4000D / Rebel T100
 - Firmware version: 1.0.0 / 1.9.2 1B(13)
 - IMG naming: 100CANON/IMG_0213.JPG
 - Boot flags: FIR=0 BOOT=0 RAM=-1 UPD=-1
 - ROMBASEADDR: 0xFF0C0000
 - card_bootflags 106744
 - boot_read/write_sector 106f38 107030
 - 101DE4 Card init => 2
 - Dumping ROM0... 100%
 - MD5: (yours will be different)
 - Dumping ROM1... 100%
 - MD5: (yours will be different)
 - No serial flash.
 - Saving RESCUE.LOG ...

To emulate (Canon GUI working out of the box):
- pretend it's a 1300D
- apply the following ROM patch:
Code: [Select]
dd if=ROM1.BIN of=BOOT.BIN bs=64k skip=1 count=1
dd if=BOOT.BIN of=ROM1.BIN bs=64k seek=511
- throw away ROM0 (it's not connected)
- change flash model ID to 0x003825C2 (1300D has 0x003925C2)
- CURRENT_TASK 0x2F53C
- 0xFE1171B4 DebugMsg
- 0x3888 task_create



TODO:
- commit the emulation sources (my job)
- start porting ML (your job; follow the 1300D thread)

Have fun!

Walter Schulz

  • Hero Member
  • *****
  • Posts: 6487
Re: Canon EOS 4000D / 3000D / Rebel T100
« Reply #1 on: January 26, 2019, 11:46:57 PM »
Wait a moment! They called it Rebel T100? Really?
The pre-Arnold edition?

SCNR!
Photogs and videographers: Assist in proof reading upcoming in-camera help!. Your input is wanted and needed!

critix

  • Freshman
  • **
  • Posts: 89
Re: Canon EOS 4000D / 3000D / Rebel T100
« Reply #2 on: January 29, 2019, 07:11:54 AM »
You can give me the files ROM0 and ROM1?
Thanks
Canon 1300D, 500D, EOS M, EOS M2

byteturtle

  • New to the forum
  • *
  • Posts: 1
  • EOS 4000D
Re: Canon EOS 4000D / 3000D / Rebel T100
« Reply #3 on: January 29, 2019, 10:05:30 AM »
I sent it to you in PM.

best regards,
byteturtle

critix

  • Freshman
  • **
  • Posts: 89
Re: Canon EOS 4000D / 3000D / Rebel T100
« Reply #4 on: January 29, 2019, 10:27:41 AM »
Thank you.
Is there a 4000D branch?
Now I'm working on the values in the stubs.S file
Canon 1300D, 500D, EOS M, EOS M2

dfort

  • Developer
  • Hero Member
  • *****
  • Posts: 3433
Re: Canon EOS 4000D / 3000D / Rebel T100
« Reply #5 on: January 29, 2019, 04:34:25 PM »
Got it working in QEMU following a1ex's instructions:



A few notes:
  • Couldn't just add a 4000D directory because it is not supported yet
  • I put the dumps in the 1300D directory and edited debugmsg.gdb
  • "change flash model ID to 0x003825C2 (1300D has 0x003925C2)" that's in qemu-eos/qemu-2.5.0/hw/eos/eos.c
  • ROM0.BIN is still needed with this hack

Saw the tweet on this:



Quote
Porting Magic Lantern is expected to be very easy...

ROFLMAO!
5D3.* 7D.206 700D.115 EOSM.203 EOSM2.103

critix

  • Freshman
  • **
  • Posts: 89
Re: Canon EOS 4000D / 3000D / Rebel T100
« Reply #6 on: January 29, 2019, 06:50:23 PM »
Quote
Couldn't just add a 4000D directory because it is not supported yet
It's work... I add a 4000D directory and run it... it's work
A step forward: D
Canon 1300D, 500D, EOS M, EOS M2