Main.SonyNEX History

Hide minor edits - Show changes to output - Cancel

August 15, 2012, at 05:32 AM by 188.18.25.15 -
Added lines 6-9:
[[http://www.nex-hack.info | NEX and Alpha hack project site]]

----
Changed lines 138-142 from:
to:
----

[[http://www.nex-hack.info | NEX and Alpha hack project site]]

-----
Added lines 104-112:

----

!! JTAG

Attach:vg10_jtag.jpg

Attach:nex_jtag.jpg
Changed line 18 from:
''Samsung K4X56323PL-8GC6 chip - mobile DDR RAM''
to:
''Samsung K4X56323PL-8GC6 chip - mobile DDR RAM.''
Changed line 21 from:
''Sony CDX9974GG chip - DFF''
to:
''Sony CDX9974GG chip - DFE.''
Changed line 24 from:
''Sony CDX4113GG chip - DFF''
to:
''Sony CDX4113GG chip - Audio/Video codec.''
Added lines 41-42:
VG10 also have NN12926A-BB audio/video processor.
Changed line 44 from:
They need Main CPU (Toshiba), DFF, Image processor (by Sony) and Image encoder (also by Sony). \\
to:
They need Main CPU (Toshiba), DFE, Image processor (by Sony) and Image encoder (also by Sony). \\
Changed line 24 from:
''Sony CDX9974GG chip - DFF''
to:
''Sony CDX4113GG chip - DFF''
Changed line 27 from:
''Sony CDX9974GG chip - DFF''
to:
''SEC K5W1G2GACM-BL60 chip - MLC chip, contains flash and RAM, image processor must be below this chip.''
Changed lines 30-33 from:
''SEC K5W1G2GACM-BL60 chip - MLC chip, contains flash and image processor.''
to:
'''Note:''' VG10 contains another chip - ORX1G2G-06A. \\
Most probably VG10 has newer MLC with image
processor added to same package.

''Fujitsu MB44CO17B chip - DC/DC converter
.''
Added line 36:
''Toshiba TMP19A44FDAXBG chip - Main CPU.''
Changed lines 39-40 from:
to:
Also not shown on photos is ADV7521NKBCBZRL-80 HDMI transmitter.
Changed line 42 from:
They need Main CPU (Toshiba), Image processor (by Sony) and Image encoder (also by Sony). \\
to:
They need Main CPU (Toshiba), DFF, Image processor (by Sony) and Image encoder (also by Sony). \\
Changed line 45 from:
GH2 have only main LSI, MCP on top and few drivers. Funny.
to:
GH2 has only main LSI, MCP on top and few drivers. Funny.
Changed lines 16-17 from:
!!!! Lets go chip by chip
to:
!!!! Lets look chip by chip

''Samsung K4X56323PL-8GC6 chip - mobile DDR RAM''
Attach:nex8.jpg

''Sony CDX9974GG chip - DFF''
Added line 24:
''Sony CDX9974GG chip - DFF''
Added line 27:
''Sony CDX9974GG chip - DFF''
Added line 30:
''SEC K5W1G2GACM-BL60 chip - MLC chip, contains flash and image processor.''
Deleted lines 34-37:
Samsung starting with K4X is mobile DDR RAM and other is MLC.

''Small addtion:'' SEC K5W1G2GACM-BL60 chip may be more interesting then we though. \\
According to VG1- servoce documentation
Changed lines 18-26 from:
to:
Attach:nex3.jpg

Attach:nex4.jpg

Attach:nex5.jpg

Attach:nex6.jpg

Attach:nex7.jpg
Changed lines 14-23 from:
Samsung starting with K4X is mobile DDR RAM and other is flash.
to:
----

!!!! Lets go chip by chip



Samsung starting with K4X
is mobile DDR RAM and other is MLC.

''Small addtion:'' SEC K5W1G2GACM-BL60 chip may be more interesting then we though. \\
According to VG1- servoce documentation
Changed lines 76-77 from:
We are searching for someone with flash reader able to read this Samsung BGA (so, you must be able to desolder this also).
to:
If you know programmer model that supports SEC K5W1G2GACM-BL60, contact me.
Added lines 15-20:

You can see how dated is NEX/VG10 design (same design used in SLT, Alphas, similar - in D7000 and K5). \\
They need Main CPU (Toshiba), Image processor (by Sony) and Image encoder (also by Sony). \\
Plus separate DDR and flash. Plus some chips for driving VF. Plus HDMI transmitter.\\

GH2 have only main LSI, MCP on top and few drivers. Funny.
Added lines 72-82:

----

!!! Linux kernel sources

Sony cameras run on Linux (Toshiba main CPU is for this).

Link to Sony NEX Lunix kernel sources and utilities sources: \\
http://www.sony.net/Products/Linux/DI/NEX-5.html

If someone will be able to compile and check them it'll be good.
Changed lines 60-63 from:
''Here is small visual differential analysys of NEX5 and NEX3 firmware files:''

to:
''Here is visual differential analysys of NEX5 and NEX3 firmware files:''

Attach:nex_diff.jpg

''Note.'' Differential analysys tool will be released later, see [[Special tools]].
Added lines 57-63:

!!!! Differential analysys

''Here is small visual differential analysys of NEX5 and NEX3 firmware files:''

Changed lines 42-44 from:
|| dword || data_size ||
to:
|| border=1
|| '''Type''' || '''Field''' ||
|| dword || data_size ||
Added lines 4-5:
----
Changed lines 16-17 from:
to:
----
Changed lines 24-25 from:
to:
----
Changed lines 56-57 from:
to:
----
Added lines 62-65:

----

!!! Possible improvements
Changed line 30 from:
Largest one is formware data file: '''FirmwareData_user_20.10.03.2010062822_205_02_loade r.dat''' \\
to:
Largest one is formware data file: ''FirmwareData_user_20.10.03.2010062822_205_02_loade r.dat'' \\
Changed lines 38-40 from:
!! dword !! data_size !!
!! dword !! token !!
!!
bytes !! data !!
to:
|| dword || data_size ||
|| dword || token ||
||
bytes || data ||
Changed lines 15-18 from:
!!!

Service
manual for VG10 (it shares many parts with NEX)
to:
!!! Service manual for VG10

Sony VG10 video camera shares many parts with
NEX compacts.
Added lines 20-51:


!!! Firmware

NEX-5 firmware upgrade is out at

http://support.sony-europe.com/dime/downloads/downloads.aspx?site=odw_ru_RU&f=FW_NEX5_V02&m=NEX-5


If you unpack contents of this exe file, you'll find many files. \\
Largest one is formware data file: '''FirmwareData_user_20.10.03.2010062822_205_02_loade r.dat''' \\
File looks encrypted.\\

''Header format info:''
'''0x89 0x55 0x46 0x55 0x0D 0x0A 0x1A 0x0A''' - start signature

Next all data is organized as follows

!! dword !! data_size !!
!! dword !! token !!
!! bytes !! data !!

Known tokens are : '''DATV, PROV, UDID, FDAT, DEND'''

''SPUFirmwareUpdater.exe'' is updater software - it deals with camera.

Checks crc of different firmware parts (reads by 0x2000 parts and calculates CRC32) and sends firmware by small sections.
If we'll be lucky, it'll decrypt packets before sending to camera.
NEX3 and NEX5 images have many matched parts at the start.

''Edit:'' Looking at upodate in more details tells that it do not perdorm firmware decryption.
Added lines 15-29:
!!!

Service manual for VG10 (it shares many parts with NEX)

http://elektrotanya.com/?q=showresult&megnev=sony&megnev2=nex-vg10&kategoria=&kat2=all

!!! Dumping

We are searching for someone with flash reader able to read this Samsung BGA (so, you must be able to desolder this also).


Cameras already maintain Full HD HDMI output during recording.
Opening up regional change (making 25fps capable).
And all modes for NEX5 and NEX3 (720p and 1080 respectively can be very useful).
Upping bitrate even to 25-28Mbps is very good option too (as Sony AVCHD encoder is very good).
Added lines 8-12:
Attach:nex1.jpg

Attach:nex2.jpg

Samsung starting with K4X is mobile DDR RAM and other is flash.
Added lines 1-11:
!! Information about Sony NEX, VG10, Alpha 560, Alpha 580


!!! Hardware architecture

''Photos''




>> Discuss hacks at Personal-View.com


Page last modified on August 15, 2012, at 05:32 AM