GH1 firmware research volunteers required

Looked at 3D shooting ideas (as many guys asked me in private or mail).

Best thing is to use this - http://cgi.ebay.com/Infrared-Remote-Control-Panasonic-GF1-GH1-G1-L1-DMW-RS1-/220568185653 with two recievers.
Plus patch firmware to guide remote shutter activation to video button routine.
It is not easy, but at least it not so complicated like USB synchrostart.

P.S. Much cheaper http://cgi.ebay.com/Remote-Control-...=Camera_Camcorder_Remotes&hash=item1c11b13630 can be also used, but we need to find cable converter to two similar plugs.
 
Try to improve this tool
http://www.hex-rays.com/idapro/freefiles/wingraph32_src.zip

We need:
1. Ability to change maximum depth from root node (using input field in toolbar).
2. Realtime filtration (you type part of function name and it hides all functions that do not contain this part).
3. If you click on a node program must switch back to Ida Pro (without closing) and go to function name mentioned in this node.
4. Make it run faster and produce better looking graphs (may be use colors for different subrgaphs).

You can also use any of open source graph visualization packages to improve visuals.

I'll look into it. Wow it uses Borland C++ Builder. Haven't used that in years...
 
Looked at 3D shooting ideas (as many guys asked me in private or mail).

Best thing is to use this - http://cgi.ebay.com/Infrared-Remote-Control-Panasonic-GF1-GH1-G1-L1-DMW-RS1-/220568185653 with two recievers.
Plus patch firmware to guide remote shutter activation to video button routine.

Much cheaper http://cgi.ebay.com/Remote-Control-...=Camera_Camcorder_Remotes&hash=item1c11b13630 can be also used, but we need to find cable converter to two similar plugs.


Plus patch firmware to guide remote shutter activation to video button routine.

No patch is needed, as the shutter button will activate the video when the mode dial is set to video.

The wired remote approach may not work as the buttons on the remote change the resistance of the circuit by manipulating (shorting) a set of serially connected resistors.
See here.
http://www.instructables.com/id/Panasonic-G1-GH1-Remote-Shutter-Release/

Good luck.
 
Last edited:
I look at information output routine about shutter count, power count, etc (I do not remember if anyone here knows how to get to this using buttons as I don't know).
And interesting thing is that shutter counter increase part is never reached.
Looks funny.
Is it possible to know shutter actuations on GH1?
 
Last edited:
I'll transfer main text here:

1. Switch off camera
2. Switch to Single Shot Mode
3. Press "Film Mode" and "Display" together, hold these
4. Switch on camera, release the buttons after a short while.
5. Press "Menu/Set" and "left arrow" together, hold them, ignore the display
6. In addition(!) press 2 times "Film Mode"
Now you should see the history of problems with date and a code, up to 16
items.
7. Press "Menu/Set" and "left arrow" together once again and hold them
8. another additional press on "Film Mode" and you see a screen with 3
counters:
No.:
PWRCNT: counts the "switch on's"
SHTCNT: counts use of the shutter
STBCNT: counts the number of times the built-in flash has been fired.
Do No's. 7 and 8 again and it will bring you back to normal operation.


I need you to test all three counters and check if they actually increase using v1.22 firmware. As I see unconditional branch before shutter counter increase (on TZ5 routine is different, but increment is working ok).
 
Wish I could, stuck on 1.21 due to battery issue. Can someone else test this?

By 1.22 I assume you mean official firmware - I can't imagine Panasonic would have broken the shutter count. If they had, they would have fixed this long ago...
 
Tester, I have 1.22 and just verified that all 3 numbers do increment. Note that the instructions are slightly off, here's the way it works for me:

1. Switch off camera
2. Switch to Single Shot Mode
3. Press and hold "Film Mode" and "Display"
4. Switch on camera, release the buttons after about 2 seconds
5. Press "Menu/Set" and "left arrow" together, hold them, ignore the display
6. In addition(!) press 2 times "Film Mode"

Some weird counter scrolls through real fast and drops you into the counters
PWRCNT: counts the "switch on's"
SHTCNT: counts use of the shutter
STBCNT: counts the number of times the built-in flash has been fired.

Note that I found a couple extra things:

In the "CAMERA INFO." screen you also get the exact firmware version. Mine shows:
"VER 1.22:0000"

Also, if you press display here, I get a "CAMERA INFO.2" screen showing:
"2009. 1.31 12:000000000
2010. 3.20 7:070000000
2000. 0. 0 12.000000000
ClockSet Cnt: 2
UnderCut Cnt 1
RTC Read Err: 0"

To get back to regular camera mode:
1. Press and hold "Menu/Set" and "left arrow" together.
2. Press on "Film Mode"

Update: I also noticed that in step 6, if you only press "Film Mode" once, you can stop at the preliminary scrolling screen and interact with it using the arrow buttons. This screen shows what appears to be 16 lines of characters, each line contains 2 groups of 8 characters. Most of the lines are just all zeroes, but one of mine shows "066A0000 00000000"
 
Last edited:
OK. Figured it out. Missed one offset table used by switch statement.
All is ok.
Main idea is to find shutter key press.
Today we only know some shutter actual action routines.
GH1 have no key testing inside firmware.
So if anyone manages to find us service software (it have such testing) it'll help us very much. Such things are available at any service center.
 
Last edited:
Thanks, I'll make new patch to test if counter is actually changed.

bra instead of jmp? any difference there or are they both unconditional jumps?

EDIT: Oh nvm. bra is a relative jump from PC. not familiar with this instruction set...

YEAH it will never get to the shutter increase code!
 
Last edited:
It could be fun to experiment with shutter routines. But too risky.
Ideally we need this service software to check all buttons routines.
 
Last edited:
Tester, I have found 2 additional screens that are similar to the screen in 264, but the background is all black. Plus, they show not just lines numbered 0 to 16, but keep counting in what appears to be 2 byte lines. Both of these screens look the same, but start at different places...I suppose they could be different places in the same binary as well, I have no idea. Here are shots of where each one starts:

http://dl.dropbox.com/u/2713632/IMG_0268.jpg
http://dl.dropbox.com/u/2713632/IMG_0269.jpg

To get to these screens, I follow to step 6 and press "Film Mode" once to get to the screen in IMG_0264.jpg. Once there, each press of "Display" cycles to IMG_0268.jpg, then to IMG_0269.jpg, and then back to the screen in IMG_0264.jpg

Any ideas on what this may be?
 
Tester, I have found 2 additional screens that are similar to the screen in 264, but the background is all black. Plus, they show not just lines numbered 0 to 16, but keep counting in what appears to be 2 byte lines. Both of these screens look the same, but start at different places...I suppose they could be different places in the same binary as well, I have no idea. Here are shots of where each one starts:

http://dl.dropbox.com/u/2713632/IMG_0268.jpg
http://dl.dropbox.com/u/2713632/IMG_0269.jpg

To get to these screens, I follow to step 6 and press "Film Mode" once to get to the screen in IMG_0264.jpg. Once there, each press of "Display" cycles to IMG_0268.jpg, then to IMG_0269.jpg, and then back to the screen in IMG_0264.jpg

Any ideas on what this may be?


These are diagnostic error messages.
They are described in the service manual chapter 6.1 pages 31-32.
I think one of the early pages on this thread has a link to it.

Edit: I checked the manual and they don't seem to conform to the error layout specified in the manual.
If the first two digits signify a year, then the messages are about year 2012, which don't make sense.
A puzzle at this time.
 
Last edited:
whomever set up the wiki site, should have members who've tested the patch PM him and he keeps the wiki site updated. nobody is taking the initiative to monitor the page. i would, or maybe i will if time permits. will post paypal balance today.

Yes we should work all together to update the wiki.
I invite you all to gather information on http://gh1.wikidot.com
Time....
 
I have a Japanese model of GH1 (Cheaper and I love the color Red), will the hack firmware work? If so, I'm planning to donate $$. Oh, how difficult to convert from Japanese menu to English?


There is region code that controls the language set in the menus.
The Japanese region limits it to Japanese only. The firmware has all languages all the time. The patch will need to ignore the region code compare or substitute another region instead of the Japanese one.
Definitely doable.



PTool 3.12 released

Native patch now in officialy added (same as in late v3.11)
Japan->English interface patch added (must be popular for many people) - it DO NOT change your region or any other settings, only interface.

tester13, your work is amazing!!!!!

I have a few questions about the Japan->English interface patch. I used your tool to change the original GH1 firmware, choosing JUST the Japan->English interface patch. I notice that there are only two lines that have changes (I compared the two files, original and patch)

When your tool changes the firmware, does it:

1. Look for the line number & just change the string there, or does it search for the string and change it?

2. If it just looks for the line number, and Panasonic change the line numbers in the next firmware release, does that mean that the tool may not work on the new release firmware?

3. The last line only seems to be different right at the end. Is this just a checksum change?

4. When you say that "it DO NOT change your region or any other settings, only interface", what is it that you change? Do you toggle a flag, or change the interface itself, or is it something else?



I don't have a GH1 (yet!!), but I have a G1 that I bought in Japan, as I am currently living in Japan.

I'm interested in changing the Japan->English language on the G1, and I'm trying to understand how I can change that , based on the knowledge you have with the GH1.
If your tool changes the firmware by searching for the string and changing only the Japan->English interface, is it possible the tool may work on the G1 firmware? Or is this too great a risk anyway??

Thanks for your help!!!

Keep up the great work!
 
Back
Top