Today @ma1co (https://github.com/ma1co/fwtool.py) released an update to his fwtool.py tool that allows you to extract gen4 firmwares. The tool only allows you to decrypt the firmware at the moment, but I am sure it will only be a matter of time till he updates it to encrypt as well.

The method below was discovered by @vitaliy_kiselev and can be found here: https://www.personal-view.com/faqs/sony-hack/languages

NOTE2: this method is not only untested, it will likely brick your camera. Proceed with caution.

Preparation (for macOS)

1. Download the full source fwtool.py from the link above
2. Download the actual firmware for your camera, in my case for the A7III it was (https://www.sony.co.uk/electronics/support/e-mount-body-ilce-7-series/ilce-7m3/downloads/00015677)
3. copy the .dat firmware file from the dmg to the fwtool root folder
4. sudo easy_install pip
5. sudo pip install pycrypto
6. sudo pip install pyyaml

note: if at any point you found any of these steps confusing or indirect, you should stop and not do this

Guide:

1. python fwtool.py unpack -f FirmwareData_ILCE7M3V210.dat -o out (this is on macOS Mojave, your OS might require something different)
2. cd out/firmware.tar_unpacked/0110_backup/SYSASTRA-DSLR/TI
3. Swap the files of your current language (I have J1, see below list section as a reference. note that there are now 2 ALLLANG files one with CX62200 and one with CX62201 choose the one that corresponds to your camera language) with the All Language file (just rename them)
4. cd out/firmware.tar_unpacked/0111_backup_sum
5. edit 'backup.sum' in your favorite text editor

6. Swap the checksums with what ever language you have with the CX62200_ALLLANG bin file checksum

   0,ae35017d,00113eba,000001a4,00000000,000003e8,root,root,-1,-1,SYSASTRA-DSLR/TI/CX62200_ALLLANG.bin, 0,782ddbc1,00113eba,000001a4,00000000,000003e8,root,root,-1,-1,SYSASTRA-DSLR/TI/CX62200_J1.bin,

   becomes

   0,782ddbc1,00113eba,000001a4,00000000,000003e8,root,root,-1,-1,SYSASTRA-DSLR/TI/CX62200_ALLLANG.bin, 0,ae35017d,00113eba,000001a4,00000000,000003e8,root,root,-1,-1,SYSASTRA-DSLR/TI/CX62200_J1.bin,

7. Wait till we have a way to encrypt it. I just cant thank ma1co enough for making this possible up to this level! you rock. I will update this guide with results once ma1co releases an update.

List:

• Region ALLLANG .. I mean you should know what this means otherwise you should not do this.
• Region J1(JPN) supports Japanese only
• Region U2, CA2, AU2 supports English, French, Chinese,
• Region CEE2 (CEE) supports English, French, German, Spanish, Italian, Portuguese, Dutch, Russia, Sweden, Danish. Norway, Finnish, Poland, Czech, Hungarian.
• Region CEE4 supports English, French, German, Spanish, Italian, Portuguese, Dutch, Russia, Sweden, Danish. Norway, Finnish, Poland, Czech, Hungarian.
• Region CEE5 supports English, French, German, Spanish, Italian, Portuguese, Dutch, Russia, Sweden, Danish. Norway, Finnish, Poland, Czech, Hungarian.
• Region CEH E32, HK1, JE3, TW6 supports English, Spanish, Portuguese, Chinese, Arabic, Thai, Korean, Persian.
• Region CN2 supports English, Spanish, Portuguese, Chinese, Arabic, Thai, Korean, Persian.
• Region KR2 supports English, Spanish, Portuguese, Chinese, Arabic, Thai, Korean, Persian.

How can I force my Panasonic camera body/lens to proceed with the update. The lens firmware I'm modding has the same version as the version already flashed to the lens so the camera just skips the update. I tried to find any reference in the lens firmware with regards to the version number but have been unsuccessful.

Any tips would be much appreciated!

Anyway, I found the amazing guide on this site (https://www.personal-view.com/faqs/sony-hack/languages) to help replace the camera language files. I was able to extract the firmware files (Funny enough Ive tried many versions of the fw-tool and none of them would extract the file, except the GUI one.) the extractor gave me the 4 files, one of which is the FDAT file the contains the actual firmware and as you can imagine the file is encrypted and thats where I am stuck now!

I realize it might be against the rules to ask for this, but any "tips" or direction on how to extract the fdat file would be highly appreciated? the guide says to google but I am afraid my google skills aren't as good as I thought they were. I apologize in advance if this is breaking any rules.

Finally, I managed to figure out all my code and make a hack with Panasonic-like recording indication based on firmware v0.93!

My first changelog:

• Added automatic non-switchable red Panasonic-like recording indication along the edges of the HDMI-output

All the source code of the added patches is here:

https://github.com/storyboardcreativity/Z-Camera-E2-Firmware-Hack

The instructions for self-assembly of the firmware are described by me in general form here:

https://github.com/storyboardcreativity/Z-Camera-E2-Reverse-Engineering

I draw your attention that this firmware is NOT OFFICIAL, and also remind you that you do any manipulations with the camera at your own peril and risk! From now on, I disclaim responsibility for possible problems with the camera if you decide to use the assembled firmware! Be extremely careful!

IMPORTANT! The hack is based on Z-CAM E2 firmware v0.93. Therefore, it will work ONLY in conditions where the official firmware v0.93 is running. For example, if you already have firmware v0.95 or higher on your camera, then installing firmware v0.93 (according to the assurances on the official Z-CAM website) is impossible! Consider this! The easiest way is to first roll v0.93 onto the camera, and then on top of it install my hack. So you can be sure that if the camera does not start after the first firmware installation process, this has nothing to do with the hack itself.

How to start using hack:

1. Your camera must be flashed to the official version 0.93.
2. Download the firmware file from the link.
3. Put the downloaded update.zip file in the root of your camera's disk.
4. Flash in the standard way as if it were an official firmware.

Custom firmware file link: https://drive.google.com/file/d/1GijjGMIjitrbCn3K4gdk3OxCYkQl__Sf

The .bin firmware you can download from Panasonic (https://av.jpn.support.panasonic.com/support/share2/eww/com/dsc/fts/zip/G9___V22.zip) has the "UPD " magic, followed by 8 bytes I couldn't associate, and then what seems like a product identifier "MC471" (MC = mirrorless camera?)

The interesting stuff starts at 0x2EC, where something which looks like a partition table starts. This section is 4884 bytes long (including some padding I believe) and contains 48 partitions which I managed to reverse engineer:

// 92 bytes - index entry of the partition listing struct partitionIndexEntry { char name[12]; // 12 bytes - name of the partition int offsetFile; // 4 bytes - offset in the firmware file int size; // 4 bytes - size of the partition int offsetMemory; // 4 bytes - offset in the memory on the camera int encryption; // 4 bytes - whether the partition is encrypted (0x3) or not (0x2) char checksum[32]; // 32 bytes - SHA-256 checksum of unencrypted partitions? char key[16]; // 16 bytes - encryption key?, if encryption == 0x3 char padding[16]; // 16 bytes - padding };

Reading that in in my custom C tool I've written for this logs out 48 partitions with their offset (in the firmware file, the real data starts at 0x1600) and size. I added automatic dd'ing so I now got 48 .bin files which are the extracted partitions out of the big firmware file. Adding all the sizes of the partitions together is also exactly the size of the original .bin minus the 0x1600/5120 bytes at the beginning which are the headers and partition table. You can download the extracted partition files here: https://drive.google.com/file/d/1P4681aZkRlCUuaiL10nH_En1g70iRLKS/view

Now, they obviously seem to be encrypted, and I haven't been able to figure out how. As you can see I was thinking whether the 16 byte long key in the partition index might be a key, because it's filled with zeros if encryption is 0x2.

This is my progress, I greatly appreciate any hints!

I failed the flash of my GH2, it shut down while updating.

As i don't have any µ 4/3 before, i discovered to late that 3rd party battery fail to warn when low on GH2.

There's something i can do to save this camera now or it's just good for trash ?

That's was few month ago now, i tried several battery but camera simply don't wake up.

I was hoping to record and stream at the same time, plus need to bypass the 30min recording limit. I am using my own GH5 and use the CIne-V colour profile and if possible recording at 422 All-I.

Would like some advice on: - Which hacked firmware to use? - Any experience with this setup? - What alternatives which I could potentially use with my M43 lenses under £400 / $500 secondhand?

I just got a used GF2 for some DIY projects and want try my luck in firmware manipulation. I want to start with some simple string changes or hiding GUI elements. Is this somehow possible with ptool and if not where whould I learn how to do this? The "Developer stuff" in the faq looks like a good start but I can't access any links in that section.

Best regards, Franz

When new gh2 firmware(1.2) came out, the old(1.1) one was removed. And I can't install a hack with the new one.

Can anyone please send me an old gh2's 1.1 firmware?

Thank you very much!

I am new here. I just bought an used GH2 in good condition. As the firmware on it is 1.0 (body) and I anyway wanted to try a hack, I just followed the instructions, downloaded latest firmware (1.2.) and the flowmotion hack. All in the same folder as PTool as well. Now PTool gives me the following message after selecting the Firmware GH2__V12file: "wrong file or trying to use already patched file".

No clue what is wrong and how to go ahead. Would be great to get some help here, thank you !

Best Lars

The statement begins at 3:30. He talks about the GH5s being created because they listened to consumers. Then at 3:45 he says that if required they would release a firmware update for the GH5.

What Realistic Features would you like added to the GH5 via firmware update?

Just got a used GH2 and I wonder which GH2 hack gives me just longer recording and my second wish: clean HDMI out (preferable without recording on SD card). Any recommendations? Which is nowadays the "best" hack I could use?

Kind regards

sws

There are simple features like intervalometer, jpg engine(iso noise) and so on that could be used in old a77 to.

Thank for your work so far with Sony firmware repacker tool. I can also offer some help if needed since i studied IT science and have some programming skills.

Greetings Domen

One issue I found in firmware version 1.0:

When you use "Utilize Custom Set" (e.g. C1) to recall a setting, then change some settings, then want to recall the stored C1 custom setting again, you'll find that using "Utilize Custom Set" has no effect. Only if you first choose a different setting (like C2) and then C1 again, the C1 setting are actually restored.

This is slightly annoying to me, as I make frequent use of custom sets, but also often divert from the stored settings and go back.

The fourth iteration of the E-M1 camera firmware (v4.0) introduces an extensive number of new or improved features that significantly broaden its imaging capabilities. For video recording, 24 and 25P frame rates have been added to the camera’s existing Full HD video recording capability. The video stabilisation algorithm has been completely revised to deliver a much higher level of dynamic image stability in handheld operations. Two powerful new focus stacking and focus bracketing modes assist to improve depth of field for close-up imaging. A new silent electronic shutter mode provides stealth shooting operation in delicate wildlife, concert and stage photography environments. Other new feature highlights include 4K time-lapsed video recording, and a simulated optical viewfinder mode that uses high-dynamic range technology for a traditional SLR viewfinder experience.

The E-M5 Mark II’s firmware v2.0 introduces a new flat picture mode that helps to facilitate higher quality video colour grading during post-production. Linear PCM sound synchronisation with the Olympus LS-100 professional digital audio recorder (via USB) is a new feature. On-board video sound recording quality has been further improved with a new digital noise filter.

In line with the camera firmware updates for both cameras, firmware for all Olympus M.Zuiko PRO and Premium series lenses will be updated at the same time.

Olympus’ Capture software, used to enable tethered imaging with both the E-M1 and E-M5 Mark II cameras, will also receive feature updates and performance enhancements in its new version, 1.1. An important highlight is faster data transfer speeds between camera and host computer in studio usage. For still life and product photography, a new keystone compensation feature enables digital perspective correction directly within the application. The popular quickset Super Control Panel interface from the camera’s on-board menu will also be available from within the Capture software interface to improve camera control and usability.

The availability of the new firmware for the E-M1 (v4.0), E-M5 Mark II (v2.0), PRO and Premium lenses, as well as software v1.1 update for Olympus Capture app will be in November 2015. Exact availability dates will be subsequently announced.

[big table of new features]

Updates Highlights

E-M1 firmware v4.0 · 24,25P video frame rates · Focus Stacking & Bracketing · Silent electronic shutter mode · 4K video time lapse · S-OVF (Simulated Optical Viewfinder)

E-M5 Mark II firmware v2.0 · Flat Picture Mode (for video) · Video noise filter · Focus Bracketing · Synchronised sound recording with Olympus LS-100

Olympus Capture v1.1 · Faster tethered data transfer speeds · Keystone compensation · Super Control Panel Interface

Lens firmware updates · For all M.Zuiko PRO & Premium lenses " From

http://t.co/rRkflcV2SO

I must have missed something when it came out, but Firmware version 1.11 is mentioned all over this site. can somebody link me the download?

thanks

1. [4K PHOTO] mode is added which records 4K video exclusively for capturing a frame to save as a photo. •Settings can be adjusted as below when entering this mode. Rec Format : MP4 Rec Quality : 4K/30p/100Mbps (System Frequency 59.94Hz) 4K/25p/100Mbps (System Frequency 50.00Hz) Luminance Level:0-255
   1. In addition to 16:9 aspect, 4:3/3:2/1:1 can be selected.
   2. Exif information is embedded to the captured image from the 4K video.
   3. Marking function is available enables marker setting on the designated point while recording video and users can jump to the markers when playing back the video to capture the frame they want.
   4. Loop Recording function is added, with which the camera keeps on recording video while deleting the old footage automatically.
2. 4K/23.98p/100Mbps mode is added in MP4 video recording.
3. The upper limit of the ISO sensitivity can be set in the menu of ISO sensitivity setting and emission amount of flash light can be adjusted in the menu of exposure compensation.
4. Focusing performance of 1-area AF in video recording is improved.
5. Tracking performance of tracking AF when used with the interchangeable lens H-FS14140 is improved.
6. Remote shooting via USB tethering is available by using PC software “USB Tether” supplied by Promote Systems.

https://eww.pavc.panasonic.co.jp/support/en/dsc/fts/win/GH4_V20_ENG.pdf