FLIR E4 Wifi Resolution and Menu Hack Thread

[KD0CAC John]

I wanted to downgrade for the reasons mentioned a little earlier --- 1.9 had all the improvements & was easier to mod ?
I do have the E4 WIFI 13.3.9

[charlyd]

i got a Flir E4. fw 1.21. (hw 1.1L) from what me was told it has the resolution and menu hack.  can this E4 be upgrade or do i brick the camera  with a fw update to 2.3.0. for example?

i don t have the original unhacked files  from a v1.21 Flir E4 can somebody post them here.

[Voodoobrew]

Just did my new FLIR 63906-0604 E4 with Firmware version: 3.16.0 (out of the box).

mostly trying to follow the instructions here https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg4044625/#msg4044625

I used the files from https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg4043233/#msg4043233

I had only one issue but I got it all working.
The common_dll.dll I could not delete or copy over. It took me the better part of 4 hours to find I could rename it to common_dll.dll.bak then upload the new common_dll.dll
Trying to delete the common_dll.dll file gave me these 2 errors
     File unavailable (e.g., file not found, no access).
     Exceeded storage allocation (for current directory or dataset).
The only reference I could find on those errors the guy got called a troll so... Not to helpful to me.
Now know that I need to rename instead of replace I do see thats its been posted before.

Everything else went pretty smooth.

FYI: While I can FTP right in on the Wi-Fi IP using -User: flir   -Password: 3vlig
   There was no access to the folder \FlashFS\ where the config.cfc is
   So you do still need to load Set_RNDIS_temporary.fif

I did get the Timeout waiting for camera response which probably meant I already completed that step so just move to next one. You know its good if you can see the \FlashFS\ folder

While I did just backup everything I could just in case I only went to 3 files, only 2 of which got replaced, the other was just to find the

Thanks everyone for putting this together.
I just figured I would make a post with keywords people might find if they have similar issues.

@Sebastian82 if you has said "22)   Now go to “_\FlashBFS\system” and rename the “common_dll.dll” and uplaod the one you need. I used the hacked “common_dll_3.16.zip” from the forum."
I would have had zero issues. To be fair I never saw the previous instructions that those were based off.

[Marekx89]

Hello, where i find last version of hack ? thanks

[KD0CAC John]

I am watching a few threads about this , but am a long way from being able to answer much on the subject .
But seems to me there is at least 2 different ways to go - and the choice on which path to take depends on which version of camera you have & what soft / firmware you have , at least as I understand what I have found .

[Marekx89]

actually i have 3.16 firmware with hack. Or is any manual how instal hack to camera ? step by step ?

[KCT_99]

look here

https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3928928/#msg3928928

[Marekx89]

look here

https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3928928/#msg3928928

thanks, but i cannot find last version of this hack.

[Bud]

actually i have 3.16 firmware with hack. Or is any manual how instal hack to camera ? step by step ?

You already have it applied. There is no anything else.

[c00kemon]

Recently purchased a new E4 WIFI. I express my deep gratitude and low bow to all participants who contributed to the possibility of hacking this device.
I did everything according to Bud's instructions, there were absolutely no difficulties.
I had an idea to check the camera spatial resolution after hacking with a real experiment. I found a copper stranded wire in vinyl insulation at home, the wire diameter is exactly 2mm.
I made a grill out of the wire with intervals of 2 mm, connected it to the power supply and applied a current of 6 amperes. Then I opened an online calculator for Flir cameras (https://flir.custhelp.com/app/utils/fl_fovCalc/pn/63903-0403/ret_url/%252Fapp%252Ffl_download_datasheets%252Fid%252F15) to calculate IFOV, calculated that in order to recognize a 2 * 2mm object, I need to move the camera to a distance of 775mm, also made several thermograms from a closer distance. Even though the noise generator was turned off, the coils of the test grill showed noise in the form of stray dots. Perhaps my experiment and test grill is not perfect, but I was satisfied.

[c00kemon]

Who has a package of files to activate the web service menu? Can you please send it to PM?

[Fraser]

It was removed from the cameras file structure in a way that could not be added and be functional. This was tried long ago and failed. Essential service mode sub routines are missing.

Fraser

[c00kemon]

Then I ask you to explain to me how the metadata of the camera is being changed now? Model and part number on latest firmware version 3.16.0?

[Bud]

@ c00kemon
What you can try to improve quality of pictures you take on the liberated camera is the following
:
after you boot the camera, toggle the cursor mode, e.g. turn the measurement cursor off and then back on. This will reduce  JPG compression (the "quality" will go from 80% to 100% in Flir terms).

There was no way to permanently change compression level, only temporarily until next reboot. The above method was a little hack.

You can compare jpg artefacts on a same object images before and after, you should see noticable improvement.

[Bud]

Then I ask you to explain to me how the metadata of the camera is being changed now? Model and part number on latest firmware version 3.16.0?

Likely by changing the respective data in EEPROM. The EEPROM password is in this thread.

[c00kemon]

@Bud
Thanks for this tip, i will try repeat my experiment with this "little hack"

[c00kemon]

I already found the password. But I don’t understand how to get into the EEPROM, I can’t access it via the web. Can I get detailed instructions?

[c00kemon]

@ c00kemon
What you can try to improve quality of pictures you take on the liberated camera is the following
:
after you boot the camera, toggle the cursor mode, e.g. turn the measurement cursor off and then back on. This will reduce  JPG compression (the "quality" will go from 80% to 100% in Flir terms).

There was no way to permanently change compression level, only temporarily until next reboot. The above method was a little hack.

You can compare jpg artefacts on a same object images before and after, you should see noticable improvement.

No noticeable difference in quality was noticed, perhaps when conducting the experiment for the first time, I accidentally turned off and on the cursor and there was already 100% jpeg quality.

[Fraser]

The EEPROM contains the camera model details. From memory it is accessed via the Service Menu. Unlocking of the EEPROM requires a password that is known. The information in the EEPROM may then be edited and the EEPROM locked. Direct editing of the EEPROM data using an EEPROM programmer may be possible but there was concern regarding the possibility of a checksum process that could cause issues if the official unlock and lock process was not used.

Fraser

[c00kemon]

I already understood about EEPROM from your first post. But I see that some people in the aftermarket in my country are changing the metadata on new cameras with latest FW, I just want to know how it's done in detail.

[Bud]

No noticeable difference in quality was noticed, perhaps when conducting the experiment for the first time, I accidentally turned off and on the cursor and there was already 100% jpeg quality.

Can you post your center cursor preset?

[Bud]

I already understood about EEPROM from your first post. But I see that some people in the aftermarket in my country are changing the metadata on new cameras with latest FW, I just want to know how it's done in detail.

We do not know, apparently it was someone's work outside of this thread.

[c00kemon]

The central crosshair preset, the distance 775mm.

[Bud]

I mean the preset file itself.

[c00kemon]

Now I understand what it's about.  I gave you a link to a backup of my camera, did you watch it?