Flir E4 Thermal imaging camera teardown

[krom]

Look at the messages posted around mid October for the V0.4 file, I think this is around page 375

Thanks!  found it, and it worked perfect on the first try.

[lofitohifi]

20% off at Zoro, voucher code: TOUCHDOWN

[janekivi]

I did menu for factory E4 2.3.0 and then I had many ideas for advanced update.
Now I have some amount of leftover stuff of "extras" for play. They aren't
very useful in everyday use for everyone. This stuff is for hackers and
that's not all- there is more to find (I hope).
But how I represent this?
I have lines you must add to menu, lines for conf and may be picture from
screen - what this is give to you. And everybody can find more and add their
stuff. I see a mess in my mind...

What I have here:
  Sketch in archive
  Table in archive
  Text in archive
  Voice in archive
  Report making (pdf) in archive
  Preview before save
  Prompt to add annotation after save:
    PROMPT_NONE
    PROMPT_NOTE
    PROMPT_TEXT
    PROMPT_VOICE
    PROMPT_SKETCH
    PROMPT_ALL
  Screening recording mode
  Advanced measurement tools checkbox in settings
  You can write custom preset in 3-spot file
  Super image resolution. In better cameras this is for:
    UltraMax Technology
    With a resolution of 320 x 240, the FLIR T460 includes 76,800 data points
    in each image. Making a very good image into a great image, the FLIR UltraMax
    feature effectively doubles the resolution to 640 x 480 and the total pixels
    to 307,200. UltraMax is a digital superresolution technology that uses the data
    from a quick burst of images to create a new image with more pixels, greater
    accuracy, and reduced image noise. Sixteen original images are captured in under
    half a second. These images are slightly misaligned due to natural human movement,
    giving extra data points to be used in the resulting UltraMax image. Image bursts
    are stored on the infrared camera, then downloaded and combined using the included
    FLIR Tools software for PC or Mac.
    (I'm sure we can't see this in EX)

There can't be done pip small and I do not see panorama in resource tree.
I'm sure, there is missing stuff for movie too. Some lines can camera add to
resource tree. My tree is twice of lenght compared to first look to camera.
What I like to find is "Hide Graphics" and "JPG compression quality" to settings
menu. And what is .caps.config.image.services.store.incompatible.level.
I see some diferences in camera, like less info in archive, but...
What is .image.services.store.format. How to use this, what mode or setting
select them.
["FFF" "FFF+PNG" "FFF+JLS" "FFF_no_pixels" "FFF_seq" "FFF_append" "FFF_visual"
"FFF_visual+PNG" "JPEG" "JPEG+PNG" "JPEG_no_IR" "JPEG_no_pixels" "JPEG_visual"
"JPEG_visual_small" "JPEG_fusion" "JPEG_fusion+PNG" "JPEG_fusion+JPG"
"JPEG_fusion_large" "IR+visual_combo" "fusion+visual_combo" "fusion+large_combo"
"PNG_no_IR" "PNG_visual" "AFF" "JPEG_panorama"]
And more... more... more...

[DaveWB]

Waiting on a few things for the video but man oh man is this 2.3 hack both awesome and "interesting"(messed up the camera just like janekivi first did when he first hacked his camera). After hours of messing around and having a spare camera to get a few files from all I can say is BACKUP BACKUP BACKUP BACKUP your camera.

[janekivi]

If you all READ my files, what the third line say:
--------------------------
          DISCLAIMER:
        YOU DO THIS AT YOUR OWN RISK. THERE IS RISK TO BRICK YOUR CAMERA.
>>   ALWAYS MAKE BACKUP COPIES BEFORE CHANGING OR REPLACING ORIGINAL FILES.
--------------------------
And all my stuff is made as it is, I done all things on purpose and if you rename files or edit something,
you are on your own. I use separate files to fool flir and do not touch original ones, they are dummies
for applaunch to check.

What secrets I have there... on first page of settings you see "Free enhanced menu".
If someone like to sell this to you - this is free, you don't need to pay him, I made it.
But more important is this - may be you don't like it here (I have second one too in there).
Then you look and see how this is done, you delete it and there is no this line in settings now.
But later in bed you start thinking - "what I can write there..." and now you start customize
menu files and I have more friends to hack this software.

And today I have even more stuff in my camera than when I wrote last message.
I had to borrow more icons from T4xx files...

-----------------
Maybe you are try there "menu advanced update" without  "menu" : )
This is complicated because you need menu before update
and this is made on purpose like that.

[813infiniti]

Anyone able to tell me what was in the following file?

/FlashFS/system/appcore.d/factory.d/rndis.rsc

I was trying to enable UVC mode and thought I was erasing the ZRNDIS.RSC file, my mistake.

If anyone could tell me what was inside that, i would like to recreate it and put it back as before, thanks!

[janekivi]

You need Set_RNDIS_permament.fif and you find this in e4hack3c.zip
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956
But after that I did this with telnet command:
   rset .system.usbmode RNDIS_UVC
and this is realtime (for me it is) and stay this way after reboot too.
In resource tree I see possible modes:
["RNDIS" "MSD" "UVC" "RNDIS_UVC" "RNDIS_MSD" "UVC_MSD" "RNDIS_UVC_MSD"]

[flirRMA]

hello ,
I tried to unlock the resolution, but after 3h of test I do not get out crc code  , test it on winxp and win7 crc01 ezcrc01 nothing works ( unable to open the file ) ,  who can do it for me ,  I provides him my conf.cfg i have a flir i3.

thx

[GARRETT64]

Here is image from Mike's tear-down video.
As you can see there is a aperture, it is smaller then the sensor, why?
This aperture could be a diaphragm to get higher F# for higher image quality?, just like most lenses for photo camera's.

I want to use my E4 (still original) for my astronomy hobby, to check unwanted heat sources on my telescope (some parts of the telescope are heated others cooled).
A hi-res E4 can be used as far-IR imager by removing the small lens (the telescope mirrors reflect heat very good).
If this will work well on celestial objects like the moon, planets, stars, I want (must) enlarge that aperture to get a fully illuminated sensor (less vignetting).

Garrett

[GARRETT64]

  I have seen all 441 pages in this topic and read all messages of the last 90 pages or so.
A lot pages or messages are removed, it looks like a lot of important info is not here because it was send by Private Message.
From no-where I must suddenly use Python, Putty, Telnet...

It looks like this topic is on his last leg?

Garrett

[freqjn]

@ GARRETT64

I have been following development for a while and read through too many of the pages. I never got to see what was posted before Freq_ge and Aurora deleted their posts and their deleted posts are not available in the wayback machine(somebody please correct me on this). Other than Freak_ge and Aurora's post deletions do you have a more specific example of a post deletion or modification?

From my brief searching the first mention of Python is by Nilock222 on page 18 of this thread as of the 441 pages that now exist. 

It would be really handy if someone could figure out the CRC algorithm on the files - I think this is the true key to opening many other goodies

Looks like it is just a standard 32 bit CRC like used in the ZIP format. Here's a short python script to calculate it for a file:

Code: [Select]

import sys
import zlib
with open(sys.argv[1], 'r') as fp:
    crc = zlib.crc32(fp.read()) & 0xffffffff
    print '0x%08x' % crc


Have you checked this with any of the files?

[janekivi]

Telnet, PuTTY I use 20 years but python is new animal. I have seen basic and pascal.
When I started with computers there wasn't browsers and all this talk were in news-
groups through telnet window only. But my powertool is notepad. Once I did whole online
document register for government with php and mysql while hearing about them first time.
Then I just started from clear screen and doing my typing and copying and pasting. I told,
I can do only simple things. I'm old-school guy. I have ax-type soldring iron, 200W.

But now I correcting my files. First release is original but somehow when I replaced right file,
first release got deleted. And now the counter is 0 again but in 2.3.0_menu_2014_EX_6_fix.zip
is now all CRC corrected and in menu file all palettes in right place. I got opportunity to test
this file in 1.22 to 2.3.0 updated E4. I made to him new conf and without dll patch finally
my menu is working, advanced too. More tests needed.

[dorcy]

just went through the directions to hack the resolution of th e4 2.3.  Can someone tell me which format to download Python. I assume its one of the winx86 formats but which one???
Thanks

[DaveWB]

just went through the directions to hack the resolution of th e4 2.3.  Can someone tell me which format to download Python. I assume its one of the winx86 formats but which one???
Thanks

It really doesnt matter as long as its 2.7 the zip just means you have to extract it, the .exe would be a bigger file but you wouldnt have to extract it.

[warcow]

I did the resolution hack for the 2.3.0 E4 when it was just released and now check the forums to see some progress with menu hacking. Is it easy to do the menu hack with the resolution hacked E4? I downloaded the 2.3.0+menu_2014.zip but it is not clear to me what I should do exactly.

So far still really happy with the resolution hack, we use the Flir often to measure our light fixtures, led chips and electronics.

[sofisticated]

Yes you can do menu hack smoothly on a reso-hacked e4. Janekivi published his menu hack separately in respect to tmbinc who has made reso-hack in first place. Great thanks to both for their shares.

[GARRETT64]

Hi
In the last few days I learned to make a FTP to a device with Filezilla and / or CMD and use CMD on files
I have back-up all files in my E4, CMD can read the E4 files, and Python is also recognized by Windows, so far so good.

In the step by step instruction (see image) I read;
"If all that works, type "quit" to exit and close ftp connection"
and a few lines further:
"it will read two files from your cam and stores them in a backup folder"
Question: how can Python read files from the camera if the ftp connection is closed?

And also:
" you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera"
"In case you get an error 500 at the upload, you have to upload the files manually by FTP"
thus in both cases I must manually upload the files?

Garrett

[GARRETT64]

Last night I made a image from the (clear) sky: Its cold out there!

Garrett

[SWAGGYD]

Welcome
Great job guys very, impressed . I plan to buy 2 FLIR E4 and do the upgrade. Where to get the best price in Europe FLIR E4?

greet

[gif999]

Hi,

I just seem to have bricked my E4 V2.3 the same way as fp . Was it ever unbricked? I don't see any encouraging news in the messages I read.

Hi guys,

bad news, I now have a very expensive paperweight: downgrading went fine (well, except for a couple of complains here and there but not of them looked that bad. didn't think to copy/paste the log before hitting "reboot"....) and then, upon reboot of the unit, I got a FAT partition mounted on my laptop with 2 files, ERROR.TXT which says "no error" (how ironic) and TYPEINFO.TXT which has

FLIR cam boot
MSDcmd 1.3
ASCO

and then 2 serial (including the one from the unit) and the ethernet MAC of the unit. The unit itself just displays the FLIR logo.

I suppose my best bet is to return it, unless somebody has any brilliant ideas ? (don't feel sorry. Gambling implies losses...)

So there *is* something lurking at the firmware level, I would say...

[sofisticated]

Did you try to re-install fw 2.3  .fif file over flirinstallnet.exe ?

[gif999]

As in "fp" case, the camera is not recognized by flirinstallnet. It just appears as a "ASCO" mounted disk.

[sofisticated]

Dear giff999

As I remember, janekivi has troubled as you said when he first start to work on this advanced menu hack.
See posts 5747-5748-5749 on page 384. He managed to install it by pushing all buttons at the same time on camera. You can try to do the same thing.

Hope that works.

[gif999]

Thanks for the suggestion but I got the black screen before and re-flashed the camera without problem. This is different (I  changed a few files in nk.bin and re-flashed. Everything loaded fine until reboot). I get the FLIR logo but the camera is in some kind of mode waiting to be "factory" loaded I guess. I have now opened the camera in order to connect to the serial port, I just need to get a connector now.

[Bud]

Last night I made a image from the (clear) sky: Its cold out there!

If it was an E4 how did you manage to get -40 if specification is -20 ?