Skip to content

Firmware m1700

mefistotelis edited this page Jul 30, 2021 · 8 revisions

Table of Contents

Target
Purpose
Versions
Structure
Boot process
OS and Libraries
Flashing
Interfaces

Target

The module programs unknown VPS camera micro-controller. Location of this chip:

Purpose

TODO

Versions

There are multiple versions, always unencrypted.

Marking Packages Timestamp Overview
01.01.0004 WM610_FC550_FW_V01.08.00.92 WM610_FW_V01.08.00.92 2016-03-24
01.01.0008 WM610_FC350Z_FW_V01.09.01.40 2016-11-09
01.01.0258 P3S_FW_V01.01.0008 P3S_FW_V01.01.0009 P3X_FW_V01.01.0006 P3X_FW_V01.01.0008 P3X_FW_V01.01.0009 P3X_FW_V01.01.1003 2015-04-30 ... 2015-05-12
01.01.0262 P3S_FW_V01.02.0007 P3S_FW_V01.02.0008 P3X_FW_V01.01.1007 P3X_FW_V01.02.0006 2015-06-12 ... 2015-07-10
01.01.0263 P3S_FW_V01.03.0020 P3S_FW_V01.04.0010 P3S_FW_V01.05.0030 P3S_FW_V01.06.0040 P3S_FW_V01.07.0060 P3S_FW_V01.08.0080 P3S_FW_V01.09.0060 P3S_FW_V01.10.0090 P3XW_FW_V01.01.0000 P3XW_FW_V01.02.0010 P3XW_FW_V01.03.0020 P3XW_FW_V01.04.0030 P3XW_FW_V01.04.0036 P3XW_FW_V01.05.0040 P3X_FW_V01.03.0020 P3X_FW_V01.04.0005 P3X_FW_V01.04.0010 P3X_FW_V01.05.0030 P3X_FW_V01.06.0040 P3X_FW_V01.07.0043_beta P3X_FW_V01.07.0060 P3X_FW_V01.08.0080 P3X_FW_V01.09.0060 P3X_FW_V01.10.0090 2015-07-24 ... 2016-11-07

Structure

TODO

Boot process

No analysis of the booting procedure were performed.

OS and Libraries

TODO

Flashing

Below are the known ways to re-flash the firmware. Some of the flashing methods may not be listed here.

By official package in camera

This method requires a working communication between the camera module and VPS. Ambarella FW within camera and VPS micro-controller bootloader must be in working order.

See Flashing firmware via SD-card by official package in camera for details.

By firmware module in camera

This method requires a working communication between the camera module and VPS. Ambarella FW within camera and VPS micro-controller bootloader must be in working order. The firmware module file needs to be unencrypted - flashing a dji-encrypted firmware this way will cause the updated device to crash during startup, and the only way to bring it back to life will be to hook to it directly and flash it using a hardware programmer stick.

See Flashing firmware via SD-card by firmware module in camera for details.

Interfaces

TODO

Clone this wiki locally