Author Topic: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax  (Read 28467 times)

0 Members and 2 Guests are viewing this topic.

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
UPDATE: The hack has been released! For more information, downloads, and full tutorial, go to https://spirit.re/projects/flir_hack.php
This hack works for all Ex, Exx, and Txxx cameras.

Video tutorial(referencing the page):






Original post:

I recently managed to acquire a used FLIR T440bx for a good price, but when it came to me I was slightly surprised.
FLIR advertise this model as having support for UltraMax - their proprietary super-resolution algorithm.

When I looked at the manual for enabling and using this feature, the steps detailed within it did not match my unit at all - the menus were missing, the structure was completely different.
Now, knowing that the camera is an early unit, from 2012(serial number 62100xxx, part number 62101-0701), I sort of expected having to update the firmware, and so I connected it to my PC, installed the drivers, and sure enough, when I checked in FLIR Tools+, it said that I needed a new firmware for the unit.
However, when I clicked update, not only did it not start a remote update process(which is expected with the Txxx series units), it gave me a prompt saying that my firmware version is 1.4.1(which doesn't exist!). I thought, alright, maybe it's just a bug.
But then when I tried to updating to the version it linked me to - 1.38.21, via the "eFLIRInstall.exe" and "E3Comb_v.1.38.23.fif" files placed on the SD card, the camera crashed halfway through the update with "E11 Bad Checksum on Transferred OS", and only managed to start(in the old firmware) after I pulled the battery out.

Before doing this, I did grab a full dump of the file system via RNDIS - looks like the firmware is one of the earliest versions, with the "conf.cfg" file in plain text(see below).

Code: [Select]
#
# appcore_config
#
# Generated at 2012-03-27 17:54:04
#
.caps entry
.caps.config entry
.caps.config.name text "app T440bx"
.caps.config.revision text "1.0"
.caps.config.direction entry
.caps.config.direction.sensorAccel entry
.caps.config.direction.sensorAccel.enabled bool true
.caps.config.direction.compass entry
.caps.config.direction.compass.enabled bool true
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.sensor entry
.caps.config.image.sensor.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.downsample bool false
.caps.config.image.settings.resIR int32 320
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 4
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool false
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool true
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool false
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.sysimg.gps entry
.caps.config.image.sysimg.gps.enabled bool false
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool false
.caps.config.image.targetNoise.targetNoiseMk int32 0
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
# ID 62100eev
# CRC01 33vb10ge

For once the noise generator is not enabled...

There doesn't appear to be much to hack in terms of features, but UltraMax is definitely interesting - 4x the effective resolution on >9Hz cameras, for free, based only in camera firmware.

Here is the official FLIR link for the 1.38.21 firmware:
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_t420-t440_pn62101_02_v1.38.23_update_pack.zip

Does anybody have any ideas on what is going on here?
« Last Edit: June 18, 2018, 06:29:38 am by Spirit532 »
 

Offline Chanc3

  • Frequent Contributor
  • **
  • Posts: 439
  • Country: gb
Alas the older models (pre 2014) don't have the actual physical hardware to support the UltraMax feature (nor MSX).

Not sure what is going on with your firmware however... That is a mystery!
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Alas the older models (pre 2014) don't have the actual physical hardware to support the UltraMax feature (nor MSX).

My T440bx supports all three - isotherms, picture in picture, and MSX, so I'm assuming UltraMax is possible too.
My model is also listed as supporting UltraMax - but this firmware version is a mystery.
« Last Edit: February 02, 2018, 10:51:57 pm by Spirit532 »
 

Offline Chanc3

  • Frequent Contributor
  • **
  • Posts: 439
  • Country: gb
Alas the older models (pre 2014) don't have the actual physical hardware to support the UltraMax feature (nor MSX).

My T440bx supports all three - isotherms, picture in picture, and MSX, so I'm assuming UltraMax is possible too.
My model is also listed as supported - but this firmware version is a mystery.
Interesting! It wasn't really until 2014 that MSX was released. Have you looked at the gui.cfg file?
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Have you looked at the gui.cfg file?

There is no such file in my dump.

However, there is .system/ui.d/config.d/conf.cfg, and that file contains an interesting line:
Code: [Select]
.caps.config.save.fastShoot bool false
Could this be the UltraMax feature?
 

Offline Chanc3

  • Frequent Contributor
  • **
  • Posts: 439
  • Country: gb
I've seen that on our T620, but alas it doesn't seem to do anything!
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
I've seen that on our T620, but alas it doesn't seem to do anything!

Can confirm, just checked. Neither "fastshoot" nor "panorama" do anything, they're the only two disabled options in ui/conf.cfg
The CRC01 process works, plain and simple. No need to touch the dlls.

Going to touch a few other files now, to see if something changes.
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
In situations like this I would normally contact FLIR support requesting clarification on the firmware version that I have, and can upgrade to. You may have a problem on this front due to your location however.

FLIR do not list their previous firmware versions so it does not mean much if you cannot find it mentioned anywhere.

It is definitely not a good idea to load an incorrect firmware version in the hope that it will work. That path can lead to much sorrow if the camera is not smart enough to abort the operation before it is completed. This is especially so with your camera having an 'unusual' firmware version that is not available as a download. You have tried the 'official' firmware version for your camera part number so it really is a case of stick with what you have, or contact FLIR for help getting the correct firmware. The downloaded firmware could even be corrupt on their servers.

You may also wish to investigate the cameras Service Menu for the option to enable the higher temperature range.

Fraser

« Last Edit: February 02, 2018, 11:38:28 pm by Fraser »
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
In situations like this I would normally contact FLIR support requesting clarification on the firmware version that I have, and can upgrade to. You may have a problem on this front due to your location however.
Already done. I doubt they'll help anyway, but I did open up a ticket and register my camera.

FLIR do not list their previous firmware versions so it does not mean much if you cannot find it mentioned anywhere.
There is a leaky XML file on their site(that opens automatically when you click "update") that lists all the versions if you look around. Mine is definitely not listed there >_>

You may also wish to investigate the cameras Service Menu for the option to enable the higher temperature range.
The "bx" has the range enabled and calibrated by default :)



As for the hack - this version of the firmware is completely insecure.
Short guide for software version 1.4.1 only(untested on others):

1) Back up the filesystem(configs especially) via RNDIS.
2) Edit the .cfg however you want, enabling all features still works. Be sure to increase the max counts too :)
3) Remove the line containing "# CRC01" from the file, so that the line containing "# ID" is followed by a newline.
4) Run "crc01.exe conf.cfg", copy the "# CRC01" line it gives you back into the file after "# ID". Make sure there's a newline after it.
5) Reupload the file back to the camera. Make sure to overwrite.
6) Power the camera off, then pull the battery out(important).
7) Put the battery back in, turn it on, enjoy the hack.



Now we need more insight into the firmware updates - this version barely has any hackable features(the most useful is a measurement circle, lol).
GPS is not available despite what the config says, or so it appears - I see no info related to it in the UI, but I'll dig further.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Another oddity.
The web service menu is there, but entirely protected by a password(not blank), and it is not "IRCAM", "3vlig", or "1235". These guesses were under the user "flir", which seems to be universal across their entire portfolio.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Here's an addition for the hack:
Since the preview JPEG quality is so low(usually 85%), I made a user preset to increase it to 100%


To do this I'm using an unlisted preset - "$preset_estimate_max_load", which is not present in the files.
Inside that I created a "user.rsc" with the following code:
Code: [Select]
#
# Generated at 2011-01-26 11:13:54
#
.image entry
.image.services entry
.image.services.store entry
.image.services.store.quality int32 100
# CRC01 12ad0621


Should be pretty self-explanatory.
Attached is a file for lazy hacking - just extract the contents of the folder into /system/ on your camera(it should ask to overwrite 1 file), cold reboot(by removing battery).

If done correctly, and your camera is set to English, you should see this in your preset menu:


It has to be run every time you change modes.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Alas the older models (pre 2014) don't have the actual physical hardware to support the UltraMax feature (nor MSX).

Just received a reply from FLIR - my T440bx is an older 62101-0701, which does not support UltraMax.
The 62103-xxxx and 62104-xxxx support UltraMax, and it's a five hundred dollar option to purchase.

They still have no idea on the software version though, waiting for more info.

I guess the original topic of this thread is going to change a little - DIY UltraMax!
I have an idea on to do this on any 30/60Hz capable camera, will update soon if it works out.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Update soon, as promised!  ;D

A custom hack menu is likely possible.(see edit)

Managed to build a full WinCE application including the full SDK. Lots of possibilities from here on out.
Still working out the application window focus kinks. Right now moving or interacting with the menu immediately brings it to the foreground where it's impossible to manipulate.



EDIT: A custom menu hack is possible, including keyboard hooks, windows, and UI elements.
I don't see a reason as to why this isn't reproducible on the Ex(!!!) and Exx series cameras as well.
More info as soon as I get it to be stable in the foreground.
« Last Edit: February 07, 2018, 05:19:26 am by Spirit532 »
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
Just to make sure I'm following, you're looking into a possible user "add-on" for the Ultramax feature that could work for both Ex and Exx series ? Meaning an E8+ could possibly feature the Ultramax 4x resolution upscaling in a near future ?
 

Online Bud

  • Super Contributor
  • ***
  • Posts: 6877
  • Country: ca
I remember seeing somewhere that superresolution end image is not produced on the camera, all the camera does is captures a stack of images, the combined image is then generated by Flir software outside of the camera. Can't remember where i saw it and for what camera model.
Facebook-free life and Rigol-free shack.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Just to make sure I'm following, you're looking into a possible user "add-on" for the Ultramax feature that could work for both Ex and Exx series ? Meaning an E8+ could possibly feature the Ultramax 4x resolution upscaling in a near future ?

Correct.
Also, as seen in the previous post, a huge variety of different hacks become possible once a stable, non-glitchy custom window is available(right now I'm battling with uicore.exe stealing app focus away).

I remember seeing somewhere that superresolution end image is not produced on the camera, all the camera does is captures a stack of images, the combined image is then generated by Flir software outside of the camera. Can't remember where i saw it and for what camera model.

Correct.
An UltraMax image is a standard FLIR radiometric image that has 16 lossless JPEGs(JPEG-LS) images embedded in it as a sequence, in addition to one standard 16-bit radiometric raw.
I've managed to separate them out, but I have not yet figured out a way to construct an UltraMax image due to the JPEG-LS filesize being non-constant(so a simple binary replacement won't work).
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
Back from my college days in graphic design, we had a third-party Photoshop plugin called Fractal made by OnOne. Fractal is an upsizing algorithm that creates new pixels to bridge the gaps and back in 2010 it was pretty amazing how good it worked, even with small resolution files. Good enough to the point where you could turn a web image into a printable one. I figured such algorithm was used for the Ultramax and other similar upscaling of thermal imager ? However you mention that in addition of upscaling a single jpeg, it overlays 16 other jpeg to fill in the radio metric data of the created pixels ?
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
UltraMax(and Testo's SuperResolution, same thing basically) rely on the tiny hand movements between frames to basically put the sensor pixels themselves "between" the gaps - effectively increasing the pixel density.
The idea is to not only get a higher resolution, "fake" upscaled image - but actual sub-pixel radiometric values.

It's a mix of supersampling and deconvolution, just lots math.
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
You said it could work on 30hz and above imagers, but what about the 9hz Ex series ? Perhaps the results would be less dense ?
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
The goal is the same - to capture 16 slightly different images.
I'm assuming you'll just have to have very steady hands for ~2 seconds :)
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
That works for me. I'm guessing it's not gonna be effective on moving objects and targets with temp variations above 9hz ?
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Definitely not. This is very much a "still image" thing, even on 30/60Hz devices.
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
I'd be interested in doing some amateur photography with my E8+, so 4x upscaling would serve the purpose nicely, despite the low end output of the Ex imager. Let me know if you need some funding in your research !
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
I might need help with testing on other hardware(namely the Ex and Ex0), but I am far from done right now.
I've got the keyboard hook working though, all of the controls register as separate buttons! :)
Still fighting the GUI.
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
I am not wizz enough in the coding department, however I can navigate my way trough file logs and html type of stuff, as well as poke around folders if I know I'm not gonna mess anything up on the camera itself. I think Bud with his E4+ wifi will be the man to do the Ex testing, but feel free to ask what you need and I'll do what I can to make it happen.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
I'll post an update here when I have something more interesting to show. I'm really going for a custom GUI called up by a key combination or double click - the rest is pretty simple.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
The Ex and Exx camera custom menu is a go!
Here is what I have accomplished at the time of writing this post:
  • Persistence - the hack can be loaded automatically at boot time(not done yet), and it retains all the internal information at runtime, regardless how many times you close the window.
  • UI elements - I have full control over the WinCE default UI, including messages and elements.
  • Global keyboard/input hook - I can trigger app functionality from anywhere within the system, on any physical button or specific action(long press, quick tap, etc).
  • A persistent configuration file - for storing custom settings and whatnot.
  • Write access to FLIR's internal registry(which is not related to WinCE) - for enabling/disabling camera functionality, and basically anything you can do with "rset", and then some(sequencing).
  • A persistent configuration file - for storing the menu's settings across reboots.
  • The ability to record a short(5-10s, due to RAM limits), completely raw, radiometric image sequence to the SD card or internal flash.

What I don't have at the moment:
  • Reading FLIR's internal registry - WinCE does not support pipes, and the only way to read the registry without reverse-engineering FLIR code is via "rls.exe", which outputs to either console or file(see next point).
  • File read functionality - this may be a "bad code" issue, but CreateFileW simply does not want to open any files anywhere on the system except the flash root. This isn't an awful issue, but it's something to keep in mind.
  • A way to convert the radiometric image sequence into an UltraMax-compatible image, either on-camera or off-camera. I don't think it makes sense to put all the code on-camera(though possible), but I will likely need help with actually creating UltraMax-compatible images. A temporary workaround is to manually do SuperResolution using something like ImageJ, ImageMagick, or Photoshop.

I have made a short video to demonstrate the hack functioning on the camera.
Please note that while I am launching this hack via telnet, the end result should be just a few file replacements(like with the regular E4 hack, but without CRCs), and a single telnet command to install the hack, making it persist across reboots without any user intervention.

In this particular case, the hack was configured to open the menu on a 2-second press of the joystick.



Let me know if there are any specific features you'd like to see implemented.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Another small update.

  • Added full keyboard support(for the Ex series), no touch interface required. The settings now stay on the camera as a plaintext ".ini" file.
  • Added persistency. App now loads at boot time, no user intervention required.

« Last Edit: February 09, 2018, 03:02:58 am by Spirit532 »
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
I've written a small key mapping app to determine the keyboard layout on FLIR Txxx/Ex/Exx series cameras. It should be compatible with any ARMV4I device running Windows CE 5.0 and higher, but I assume no responsibility for anything that might happen when you run it.

If you would like the hack application to run on your camera model, please use this tool on your camera and record which keycode the buttons represent.



A short guide on how to do this:
  • Upload keymapper.exe into the /system directory via FTP.
  • Connect to the camera via telnet, using the same IP address you use for FTP.
  • Run "keymapper" from the terminal window.
  • Press every button, write the corresponding vkCode down. Preferably, overlay it on a photo of your device for reference.
  • When done, restart the device, or kill the app from another terminal with "ps -k keymapper".

Download here:
https://spirit.re/projects/files/wince_key_mapper/keymapper.exe

More info here.
« Last Edit: February 10, 2018, 06:11:46 am by Spirit532 »
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #29 on: February 10, 2018, 06:17:52 am »
Cool work, I'm excited to see what comes next !
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #30 on: February 15, 2018, 08:34:19 pm »
I believe I have enough features implemented in this app to begin testing compatibility with other devices(Ex and Exx cameras).

If anyone is interested and has a device that they would like to test on, please reply in this thread and I'll PM you with further info.
For now the testing will be done in private, but I do plan on releasing this publicly, for free.



 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #31 on: February 15, 2018, 10:23:44 pm »
Interested with E4 wifi
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #32 on: February 16, 2018, 03:40:09 am »
PM sent! Still looking for more people though.

Also added another feature - an automatic focus stacker/racking tool that creates a 60-frame sequence as it pulls through the entire focus range of the camera(Txxx only, because this needs autofocus).


Now comes the hard part - creating something to read and export the ".seq" files created by the camera, do stacking(or superresolution), and then convert them into standard radiometric JPEGs or something like that.
 

Offline tomas123

  • Frequent Contributor
  • **
  • Posts: 832
  • Country: de
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #33 on: February 16, 2018, 10:39:22 am »
Now comes the hard part - creating something to read and export the ".seq" files created by the camera, do stacking(or superresolution), and then convert them into standard radiometric JPEGs or something like that.

I posted last 5 years something in this forum about .seq, stacking, ultramax and creating FLIR radiometric JPEGs from 16 bit tiff files.
I can help you, to find this bread crumbs ;-)
« Last Edit: February 16, 2018, 10:44:31 am by tomas123 »
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #34 on: February 16, 2018, 02:10:52 pm »
I've read your posts during the creation of this hack, they've been quite helpful. PM sent about the other stuff.
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #35 on: February 20, 2018, 02:27:52 am »
Here's the tree file from my E4 wifi with advanced package upgrade. I blacked out the serial number and SUID with XXX's.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #36 on: February 23, 2018, 08:18:49 pm »
Small update: The hack is now compatible with the Ex-series cameras, thanks to David C.

If anyone has an Exx-series camera and would like to help test the hack, please PM me with your Skype username or other preferred method of realtime contact.

I will be releasing the hack publicly and will start accepting feature requests once the Exx version is fully functional.
 

Offline David C

  • Contributor
  • Posts: 45
  • Country: ca
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #37 on: February 27, 2018, 02:54:15 am »
Spirit's work is wonderful, it would be great if someone with an Exx camera could join in. The hack really maximize the camera potential.
 

Offline Chanc3

  • Frequent Contributor
  • **
  • Posts: 439
  • Country: gb
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #38 on: February 27, 2018, 07:24:18 am »
I have an Exx, P6xx, A6xx and T6xx camera available, that I can try and see if u can get this on. Obviously, they are units in service currently, so would need to make sure a) free for testing b) I have permission to test on.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #39 on: February 27, 2018, 10:22:11 am »
Another E4 Wifi test successful, this time by the user "Myself"

I have an Exx, P6xx, A6xx and T6xx camera available, that I can try and see if u can get this on. Obviously, they are units in service currently, so would need to make sure a) free for testing b) I have permission to test on.

PM Sent!
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #40 on: February 28, 2018, 11:19:17 pm »
Another update.
The hack has been tested successfully to be fully compatible with FLIR T4xx, Ex Wifi, and Exx cameras, independent of firmware versions.

It will be released as soon as I have a full tutorial and user guide written up, to make sure it's simple to set up.
 
The following users thanked this post: Sparky, Zucca

Offline Sparky

  • Frequent Contributor
  • **
  • Posts: 449
  • Country: us
Hello Spirit532

Amazing accomplishment here and cool to see your in-progress videos!  I have just purchased Flir E4 WiFi and will get in a few days.  It looks like you already completed the testing to ensure compatibility with this camera, but if you need another test data point just PM me :)

I notice your work here supports many camera models, but I am wondering in-relation to Flir E4 WiFi, how does this approach compare to the alternative of Bud detailed here.  I guess I cannot run both...so I am curious of the differences.  Could you summarize?

In the meantime I will wait for my camera to arrive! :D
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
You can run both, I've ensured (almost) complete compatibility with Bud's hack. It's meant to go on top of Bud's hack on cameras where it exists(Ex and Exx), to extend functionality to that which cannot be done with static UI edits.
The hack is almost ready to run on all three series, I'm just a bit busy at the moment so I don't have time to write up a use/installation guide, without which the hack is somewhat pointless as it needs persistence(over reboots).
 
The following users thanked this post: Sparky

Offline Sparky

  • Frequent Contributor
  • **
  • Posts: 449
  • Country: us
You can run both, I've ensured (almost) complete compatibility with Bud's hack. It's meant to go on top of Bud's hack on cameras where it exists(Ex and Exx), to extend functionality to that which cannot be done with static UI edits.
The hack is almost ready to run on all three series, I'm just a bit busy at the moment so I don't have time to write up a use/installation guide, without which the hack is somewhat pointless as it needs persistence(over reboots).

Wow! I didn't expect that it was possible to run both!  Amazing that this is an "add on" pack to Bud's work!  Will be great to read a little summary of the additions added by your work.  Hopefully you can include in your write-up when you get a chance.

Cheers!
Sparky
 

Offline Zucca

  • Supporter
  • ****
  • Posts: 4298
  • Country: it
  • EE meid in Itali
Let me know if you need someone to test a E30 (now E60+)

SN 490214xx
PN 49001-1801
FW 2.23.14
Model E30_B 1.1

If don't need it, I will just sit back and wait for the official release.

Many thanks in advance for your hard work.

Can't know what you don't love. St. Augustine
Can't love what you don't know. Zucca
 

Offline Zucca

  • Supporter
  • ****
  • Posts: 4298
  • Country: it
  • EE meid in Itali
« Last Edit: April 06, 2018, 09:33:49 pm by zucca »
Can't know what you don't love. St. Augustine
Can't love what you don't know. Zucca
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
My app is ready to run, it's just difficult to set up and doesn't have many features(UltraMax is nowhere to be seen still, aside from 16-image capture).

As for VNC - yes, it's possible. You're going to get a happy WinCE image that is about as useful as you can expect a completely blank WinCE install without a desktop to be. With very angry authoritative graphics that will override your display even when you don't want them to.
You can run Doom on them as well, just drop in the additional graphics libraries. I got it to run, but couldn't get it to load the game WAD and couldn't be bothered to recompile the entirety of a Doom CE port to fix file system issues ;D
Most native WinCE games and apps will work on these cameras, you can definitely have a lot of fun doing some things.
 

Offline kaz911

  • Super Contributor
  • ***
  • Posts: 1052
  • Country: gb
Hi Spirit532,

I have a "virgin" E50bx Mk1 I can try it on. Any idea if you are close to being ready? :)

/k
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Hi Spirit532,

I have a "virgin" E50bx Mk1 I can try it on. Any idea if you are close to being ready? :)

/k

You'll want to hack it to E60bx+, my app doesn't do that. It only expands upon the existing hack functionality.
As for readiness, probably soon. Overloaded with work and real life right now.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Big update: The hack has been released! For more information, downloads, and full tutorial, go to https://spirit.re/projects/flir_hack.php

Video tutorial(referencing the page):


Yes, I know there's a typo in the video.
 

Offline Vipitis

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: de
  • aspiring thermal photography enthusiast
Great work. I hope the project continues. The best offer for a Txx series I ever found was a T420 for 5000€ + tax. And I can't justify. But I was wondering.
Could you mess with exposure time? That would make astronomy possible.
You wrote about using grid party rendering and superresolution. Would that be similar to the ThermalCamera+ app or something else?
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
No, these sensors don't have any low level control - all that is done in the FPGA.
I'm not sure what grid party rendering is, but superresolution is increasing the actual radiometric resolution by 4x(so 320x240 turns into 640x480) by means of supersampling and then deconvolution. I haven't implemented that yet, as I'm not that good with code.

As for the offer - this hack works on all Ex/Exx cameras as well, including the E4-8.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
Awesome job! Thanks for the effort. So the UltraMax (assuming this is what you're meaning when you say superresolution) is working or not working? I will try this out tomorrow on my E40.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
At the moment, the hack is only capable of outputting a burst of 16 images to the specified folder. There is no post-processing software that would allow you to create final superresolution images yet.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
Gotcha. I wonder if there's a way to see how the Tools+ software is doing it for the cameras that are capable and tricking it into working for the others.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
I explained that a bit in my article - take a closer look.
The images my hack takes are directly compatible with the UltraMax JPEGs (even)higher end cameras generate, but the formats are different.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
Got it. Looks promising, and there is a way to do super-resolution with Photoshop with those 16 images.

On another note, I just finished attempting to do the hack, and it isn't working for me on my "E60+ upgraded" E40. Holding the "Back/Menu"  button and pressing the down arrow and releasing results in...nothing at all. I was wondering about the applaunch.dat append though - should that be "# Start hack.launcher" like you have it in the sample? or "# Start Hack.exe" like would seem to be correct?
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
Hmm. Decided to try the other method with presets but there's a problem there as well. Your install instructions say for the second method to add the $preset_estimate_max_load folder into /FlashFS/system/profile.d folder. There isn't one on my cam. Presets aren't even normally there in my camera menu unless I enable them in the UI config file - and then the menu entry is just empty. I did try enabling the presets option in the config file and re-running the CRC01 for the correct CRC but the "Back/Menu" plus down arrow combo still does nothing. I am running the 2.23.14 firmware.
« Last Edit: June 19, 2018, 09:31:05 am by eKretz »
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Ah, that's right, my bad. It should be "hack", not launcher. Fixed. The "# Start hack." is a comment.
I've uploaded the fix to the site as well.

As for $preset_estimate_max_load - please read the instructions carefully, or watch the video again.
You have to replace an existing preset in the case that adding a preset doesn't work. Also, if your camera is CRC01, you should be able to use applaunch, since it isn't signed.

To check whether the hack is running, you can connect to the camera via telnet and run "ps". "hack.exe" should be in the process list.
« Last Edit: June 19, 2018, 09:41:59 am by Spirit532 »
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
In the case of $preset... you misunderstand - there IS no profile.d in my camera.

In the case of the "hack" vs. "launcher" issue - I just tried fixing that and although it changed things, still not working.  The camera went through normal boot-up except a black screen appeared rather than (or maybe right after) the normal blue one with Flir welcome to infrared blah blah. The progress bar did its thing and the normal infrared camera screen came up and is displaying image and temp etc. .However, the regular menu buttons aren't working at all. I can't bring up any menu. Also tried the "Back/Menu" plus down arrow and when I do that the screen just goes blank of all text and temp info. If I then hit the back button again, the spot, temp and temp scale come back but still can't open the menu. Only way out is a hard power down with 10 second power button press. Just reverted to original applaunch.dat and eveything is working fine again,but of course no hack.
« Last Edit: June 19, 2018, 10:11:58 am by eKretz »
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
In that case, try placing this launcher.exe next to hack.exe and replacing "hack" with "launcher" in applaunch.dat
https://i.spirit.re/cPvpz.zip
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
AARGH! Still not there, but closer. OK, now I'm getting the normal boot screen all the way through to the camera coming on. The menu buttons are now working correctly. I can now open the hack menu with the "Menu/Back" button + down arrow combo. I can scroll and select options with OK button. I can back out of the menu with the "Back/Menu" button. But, When I get back out of the menu with the Super-resolution function enabled, pushing the "Up" arrow does nothing. No activity light on the memory card and no images saved to the ImageSequences folder. I even tried holding the "Menu/Back" button and pressing the "Up" arrow, and that goes "Beep, Beep" but no memory card activity light and no images in the ImageSequences folder. I also noticed at least one of the options isn't there, like the "FLIR Logo" checkbox - not sure if that's intentional though.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
You have to hold the back button while activating the functions. Otherwise it interferes with other menus.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
Like I said, tried that too. Still no dice. All I get is a couple of beeps and no photos in the ImageSequences folder. And I double-checked that the slashes were the correct way and that the filename matches. Here's the contents of the hack.ini - is all of this correct? What's with the FLIR logo option missing in the hack menu? That only for certain models?

[hackOptions]
disable_nuc = false
record_sequence = false
flir_logo = true
max_jpeg_quality = true
record_stack = false
save_path = \StorageCard\DCIM\ImageSequences
programmable_msx = true
defaultZoomLevel = 1
[buttonDefinitions]
joybutton = 13
backbutton = 112
joyup = 38
joydown = 40
joyleft = 37
joyright = 39

Also, I noticed that sometimes when I go into the hack menu, it disappears except for the bottom white line with the URL. If I then push the up or down arrow keys, each option that is highlighted as I scroll through will come back and stay there, but the header never comes back.  The "Back/Menu" + Right/Left arrow combo does work for the zoom option, but MSX alignment just seems to zoom the visual/digital camera when in PIP mode (My cam is the older version without MSX except for in FLIR Tools).
« Last Edit: June 19, 2018, 11:22:44 am by eKretz »
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
That's odd - both "record_stack" and "record_sequence" are set to false, but beeps are happening. Are you sure it's enabled? Try turning off and on again, see if that outputs a .seq. You want to record a sequence(superrres).
The FLIR logo option should be there on all models - I'll check once I have a bit more time.
As for the menu disappearing - the visuals should disappear before the menu opens, because that causes interference. It should still function, just a rendering glitch.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
That's just the default .ini. Just wanted to make sure there were no errors there. The camera only beeps when the option for superresolution is toggled on - I tried it both ways. Getting beeps but no pictures with the option toggled on; no beeps and no pictures with the option toggled off. I have also tried power cycling multiple times with no result. One time the power button stopped working and had to do a hard power down, then everything was back to normal on restart. The option for the FLIR logo has never been in the menu on any of the varied attempts.
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
It could be that it isn't liking the path. Try putting it somewhere not on the SD card, but on camera flash.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
Good idea, will try that next. My battery is just about toast so I'll try changing the save directory to flash later after it recharges and report back.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
OK, nope that doesn't work. I tried adding the ImageSequences folder in a couple different places and no dice. Tried in flash and the new folder seems to get instantly erased on reboot - even tried several different folders. Tried changing the save directory to the default "Dir A" folder on the storage card, no deal there either. No matter which way I tried, always the same result - two beeps and no photo sequence saved. Not sure why the new folder isn't persistent in flash memory.
« Last Edit: June 19, 2018, 09:31:18 pm by eKretz »
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
There are file system protections, so it can be normal - however, photos not saving to the SD card is really odd, because in all of my tests they worked.
 

Offline eKretz

  • Frequent Contributor
  • **
  • Posts: 870
Out of curiosity, did you try all the versions of E40? From what I understand there were a few different hardware versions. Also, could firmware version make a difference?
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
No, I wasn't able to get every version of every camera :P
It's odd though. You should have write privileges. Try storing directly into DCIM, a folder that already exists. Also try with trailing backslash and without.
 

Offline Nicosrap

  • Newbie
  • Posts: 3
  • Country: cl
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #72 on: October 04, 2018, 07:31:47 pm »
http://subirimagen.me/uploads/20181004142641.25

Dear as I can update or install new firmware.
I'm from Chile, try to log in via FTP but the password goes wrong
 

Offline chili_red

  • Contributor
  • Posts: 38
  • Country: us
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #73 on: October 13, 2018, 03:20:49 pm »
I recently acquired a B300, 45306-1600X1, SW version 9.4.5, Camera revision 01.
Any possibility your hack will work in that?
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #74 on: October 22, 2018, 10:43:06 pm »
Any possibility your hack will work in that?

Nothing is stopping you from trying, it's non-destructive - but be aware that you need a reliable backup in case you get stuck on boot.
 

Offline renehdez

  • Newbie
  • Posts: 2
  • Country: mx
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #75 on: January 01, 2019, 07:45:46 pm »
Hi, I'm new to the forum, I want to ask for your advice on a Flir T630 camera, try to update it but in the process it will go off and I will not restart it, it will be on again and the screen will appear with the start process bar that looks like finish but there it stays, the camera does not show the menu of the camera. Do you know in some way to reprogram it to work again? I thank you in advance for your attention.
 

Online Bud

  • Super Contributor
  • ***
  • Posts: 6877
  • Country: ca
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #76 on: January 01, 2019, 07:53:07 pm »
Do not post same question in multiple threads, it is not welcomed in this forum.
Facebook-free life and Rigol-free shack.
 

Offline ir.ukrm

  • Contributor
  • Posts: 48
  • Country: ua
Is there any way in the firmware to make notes in Russian?
 

Offline f14

  • Regular Contributor
  • *
  • Posts: 55
  • Country: vn
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #78 on: October 23, 2020, 08:26:46 am »
I just bought T200 verycheap. but it release in 2008 . so nothing to do?  :-//
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #79 on: October 23, 2020, 08:27:53 am »
I just bought T200 verycheap. but it release in 2008 . so nothing to do?  :-//

It should still work on older CE systems.
 

Offline f14

  • Regular Contributor
  • *
  • Posts: 55
  • Country: vn
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #80 on: October 25, 2020, 01:14:18 pm »
just try but nothing happens. my T200 still working like before no dead  :-//
I did same step. and choice older CRC01
Quote
1-Download the package corresponding to your camera series - Ex, Exx, or Txxx.
2-Download the persistency package corresponding to your camera's firmware version - CRC01 or CRC32 respectively.
3-Connect to the camera via FTP.
4-Open hack.ini, and edit save_path to point towards the directory. Example: save_path = \StorageCard\DCIM\ImageSequences\
5-For older cameras, place hack.exe and hack.ini into /FlashFS/system. For newer cameras, place it into /FlashBFS/system.
6-Find the DCIM directory within the filesystem structure - on cameras with SD card support, it must be on the SD card, not on internal storage.
7-Create a folder called ImageSequences inside DCIM.
8-For older, CRC01 cameras with modifiable applaunch.dat:
There are two ways to establish persistency - first is automatic, by appending applaunch.dat with a line that starts the hack on boot. An example file is provided in the archive.

 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #81 on: October 25, 2020, 07:14:54 pm »
Can you start it manually, via telnet?
 

Offline f14

  • Regular Contributor
  • *
  • Posts: 55
  • Country: vn
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #82 on: October 26, 2020, 12:37:21 am »
Hi
I use FileZilla. simple delete stock file replace it by the file you shared. no any issue ,but no effect :-//
maybe first T series generation will use same part just lock by firmware like Ex seires?. so possible to get 320x240 ? thank you
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #83 on: October 26, 2020, 12:38:51 am »
The original T series was always 320x240 as far as I'm aware.
 
The following users thanked this post: f14

Offline f14

  • Regular Contributor
  • *
  • Posts: 55
  • Country: vn
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #84 on: October 26, 2020, 12:45:49 am »
I just check the conf.cpg file via notepad . try to find something about resolution like Ex series but see notthing :palm:.
I pretty sure all stock file are gone because I deleted it manually in filezilla.  if this failed my camera will not boot like a brick. but it boot normal with your file . very strange
 

Offline f14

  • Regular Contributor
  • *
  • Posts: 55
  • Country: vn
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #85 on: October 26, 2020, 07:20:12 am »
 tries to modify conf.cfg . by read thread E4 hack
first i replace donwsample true -> false.
next addmore two row IR height 240 and width 320
use the cmd crc01(provice in E4 thread) to generator the number # crc01 xxxxxx
both ways effect my cam . disamble all function  :palm: :-DD
// then I try use the conf.cfg from t440bx in first post . change to my serial ID and remove last row CRC01 xxxxx. with new number from CRC01 generator . set it to my T200. and seem it working. get more menu than stock but resolution still 200x150  :scared:

« Last Edit: October 26, 2020, 11:32:58 am by f14 »
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #86 on: October 26, 2020, 12:07:24 pm »
This reminds me of an early release of FLIR i5 that I owned. It did not have the same configuration files as the later “iX” series cameras and I could not change the resolution. I looked deeper into the cameras file system and found automated production configuration logs. The camera contained a list of settings that were used during its calibration at the end of production. Sadly I discovered that the camera resolution was configured in production, could not be changed, and was calibrated at that resolution. I could have carried out a full calibration routine after changes to the calibration configuration but I could not see how to enable the new resolution. It pre dated the iX and Ex series cameras but seemed more resistant to a resolution upgrade by the user ! FLIR obviously changed their camera calibration and configuration strategy to that which gave us the Ex upgrade :)

It would be worth looking for production logs in your cameras file system. They are plain text and may explain why your camera is behaving as it is.

I will see if I kept the i5 file backup as I sold that camera some time ago.

Fraser
« Last Edit: October 26, 2020, 12:17:05 pm by Fraser »
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 
The following users thanked this post: f14

Offline f14

  • Regular Contributor
  • *
  • Posts: 55
  • Country: vn
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #87 on: October 27, 2020, 07:51:38 am »
keep try to modify Gui.cfg
but i dont know what it means? need increase the number ?
Quote
.caps.config.save.maxCount int32 30
// i think problems from CRC01 generator . some number work some is not.
I check via flir tool it change to 320x240 but it really work ? please help me check the picture I attach below. thanks all you guys
« Last Edit: October 27, 2020, 08:04:37 am by f14 »
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
As good a place as any to ask I suppose... anyone has a good source for aftermarket T420 batteries and/or chargers? Or the connector reference for the charging connection? Is it possble to test/run it without battery?

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
New chargers are available for around 100 Euros. Sadly the connector is custom and all efforts to identify it suggested that it was a custom HRS part. I found an HRS connector that looked almost identical but was slightly smaller dimensions  :(

I have not seen 3rd party batteries for the FLIR T4xx series. Rebuilding the original may be an option. The battery contains a pair of 18650 cells plus management/charge PCB

I do have a spare FLIR Charger and associated desk battery charging dock that I might sell. Sadly no batteries though.

Fraser
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
I was afraid of that. As I don't have the battery I can't refurbish it. Ah, well, I suppose the machine is worth it. Or at least it would be if I knew it was in working order...

Re: charging dock/PSU (?): shoot me a PM?

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
The cameras will run off of the FLIR power supply unit as it is capable of providing the required current and is not a dedicated battery charger design.

Fraser
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
The cameras will run off of the FLIR power supply unit as it is capable of providing the required current and is not a dedicated battery charger design.

Fraser

I must be completely daft but I can't for the life of my find any port for a power supply on the thing, neither can I find any manual, image or video that shows it. This video comes closest:



It speaks about an AC adapter around 4:00 but as far as I can see only USB is attached? I'm lost...

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
You have jogged my memory..... the T4xx camera series incorporate the charge and power socket into the end of the battery ! Yep, you need to insert the battery and plug the power supply into the bottom of it  :palm: Not the smartest design choice I must say. It does enable battery charging outside the camera by direct connection to the battery though. So without a battery, I assume you cannot power the camera as you need the socket that the battery provides  :palm:

If you are looking at buying a used camera, do ask yourself (and the seller) where the accessories have gone. The camera should come with its power supply and battery as a minimum. If such are missing it is not uncommon fir the camera to be either a company asset recovery (bankruptcy) or goods taken without the owners consent  ;) Just be careful who you are dealing with.

Fraser
« Last Edit: April 24, 2021, 06:43:53 pm by Fraser »
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Power port visible in the attached picture at the bottom of the battery (uppermost in this image) A charging LED is located adjacent to the port.
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
You have jogged my memory..... the T4xx camera series incorporate the charge and power socket into the end of the battery ! Yep, you need to insert the battery and plug the power supply into the bottom of it  :palm: Not the smartest design choice I must say. It does enable battery charging outside the camera by direct connection to the battery though. So without a battery, I assume you cannot power the camera as you need the socket that the battery provides  :palm:


OK, that settles it then. Need to get a battery and a charger.

Quote
If you are looking at buying a used camera, do ask yourself (and the seller) where the accessories have gone. The camera should come with its power supply and battery as a minimum. If such are missing it is not uncommon fir the camera to be either a company asset recovery (bankruptcy) or goods taken without the owners consent  ;) Just be careful who you are dealing with.

Already have the camera, totally above board and I was aware it didn't have a battery. Sold *as is*.

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
I do have a spare FLIR Charger and associated desk battery charging dock that I might sell. Sadly no batteries though.

Fraser

Just wondering if you had any details on that (price?) Might well be interested...

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
I just need to lay my hands on the power supply unit .... it is in an anonymous white box that I have yet to find as it was just kept as a spare. I am open to offers on it and the associated desk charger. You can still buy this power supply & battery dock set from online suppliers so it may be worth looking at prices and availability in case there are any deals in your country ?

Fraser
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
Have been looking around for a bit. Charger and desktop cradle go for around 150€ or so. If you can beat that in a meaningfull way I'd be very happy to unburden you of a anonymous white box.

If not, I'm gonna cry a little in a corner before ordering them (:

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Hiya,

I will find the power supply and dock today and see if we can agree a deal  :)

Fraser
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
*polite cough*

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Hi Ice-Tea,

Sorry.... week from hell here :(

OK, I found the power supply and charging dock. Pictures to follow later as I am away from home today.

Looking back on my purchase records, it owes me 120 Euro’s but I will accept 80 Euro’s plus shipping.

The power supply and dock look to be brand new, unused.

Fraser
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
Lovely, provided shipping is reasonable this would be nice  :-+

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
First the good news... I had identified the storage box containing the PSU and a desk charging dock. Tonight I managed to reach it and remove the two little FLIR boxes. The PSU is the correct one with the special connector. Sadly the desk dock is not the one I was looking for :( I have an idea where the desk dock may be and will access that area of my garage at the weekend. The trouble with having too much kit is I can never find what I am looking for quickly :(

Pictures of the PSU attached. The four country specific connectors are present as can be seen.

Fraser
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline Ice-Tea

  • Super Contributor
  • ***
  • Posts: 3063
  • Country: be
    • Freelance Hardware Engineer
So, does it make sense for you to part with the PSU?

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #105 on: February 28, 2022, 06:45:53 pm »
Since I haven't done much with this, I figured I'd post the sources so someone can play with it.
GPL, because it's a hack  >:D
 
The following users thanked this post: zrq

Offline defplayr

  • Contributor
  • Posts: 16
  • Country: gb
Re: FLIR T440bx hacking - custom application for Ex/Exx/Txxx cameras, UltraMax
« Reply #106 on: January 29, 2023, 01:55:35 pm »
>Spirit252   >eKretz

Just to say thank you for this thread and your posts. I have a very early E40 MK1 that I couldn't get 'Presets' working on. From you talking about a  /FlashFS/system/profile.d folder, I realised that's where I needed to put my preset files. Created it and:
#version1 - Put the individual preset files in the folder, Wow! busy screen when it boots up and loads them all)
#version2 - Each preset its own named folder, eeverything is good. (see what I did there :D)
 

Offline radioorizont

  • Contributor
  • Posts: 42
  • Country: gb
Hi,
I must say great work there with this app.
I have hacked my Flir B335 (30Hz) to the B425 model with all mods working great, including panorama, fusion, delta, etc.. and added extended 0-300 and 300-1200 celsius temp range.
I am wondering if this custom app works for my type of camera?
I'm not sure if it's a big difference hardware wise between the BXXX and TXXX cameras, they look very similar
Thanks,
 

Offline Spirit532Topic starter

  • Frequent Contributor
  • **
  • Posts: 487
  • Country: by
    • My website
Attaching files here while my site is down for the moment
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf