Kenay's Sony as100v GPS

This is the case. I bought a Sony as100v motion camera to record my own life and be interested in video editing.

When the company arrived, he took a picture on his way home. He rushed home to connect to the computer and wanted to see GPS data. He found that Sony had a private variety. So he found related information on the Internet, I want to convert it into Google Earth's kml, Chinese search, and English search. I couldn't find it until three o'clock that day...

The next day, I woke up and looked at the text data carefully to find that Sony was using the GPS location record of the relative position (all staying up late). Starting from the moment the GPS was located, the record is the origin (0, 0), and the subsequent position is based on the offset of this point. Without the coordinates of the starting point, we do not know the exact coordinates. Of course, you can locate the initial coordinates by yourself to obtain coordinates with less errors, but isn't that uncomfortable.

According to the programmer's sixth sense, The as100v should have the engineering mode/debugging mode. On this premise, I thought of a tortuous solution. In this mode, the recorded GPS position must be absolute, because only in this way can the programmer know whether the recorded position is correct. Activate this mode by placing a special file in the memory card. However, only the firmware of the reverse as100v is known for the special files. You want to know how to enter the debugging mode. You need to obtain the firmware. Choose decompress the firmware from decompress the firmware to reverse program. Then, choose debug mode from debug mode to obtain the absolute GPS position.

The first step is to obtain the firmware. This is simple. The official version of firmware 2.0 is provided in March. Download this file. Is a self-decompressed file. After decompression, there will be a flash program and firmware. Start to think that the Flash program will first decompress \ decrypt the firmware and then write it into the machine. Instead of decompressing \ decrypt it to the file system, it will decompress \ decrypt it in the memory and then transmit it. However, I found that this was not the case with the Flash program. The Flash program only writes, reads data, and obtains machine information. It seems that the encrypted firmware is directly transmitted to the device.

You can only find a way to get the firmware format, and parse the firmware by yourself. The first thought was to hard it on your own. I used the editor to read the hex format and read the hex format for a long time, sony should not design a new firmware format for each firmware. Most of the camera-type firmware files should be in the same or similar format. According to this idea, I found the firmware files of other Sony video products. After decompression, I found that the firmware Flash program is the same, good. Let's take a look at Hex. There are some similar parts, which are amazing.

According to this situation, some predecessors have already studied the Sony firmware format. I searched for the Sony firmware extraction program based on this idea and found it. It is a program to decompress the NEX camera firmware. The firmware format of this camera is the same as that of as100v. Therefore, I tried it and the result is not correct. I found the source code of this tool. I used the source code for step-by-step debugging and tracked a branch. The author wrote a comment. This is the third-generation firmware encryption method, there is no decryption hope in the Update log. (Original article: Fixed crashes with 3. Generation-No decryption possible -)

This is the end of things. It took two days last weekend to get the absolute coordinates of GPS...

However, I am not worried about writing an email to Sony to explain the situation. I hope Sony can solve this problem... Otherwise... Sony, your sister !! Where are you !!!

 

 

Appendix: GPS file example

@ Sonygps/ver5.0/WGS-84/20140711133516.000/D/
@ Sonygpsoption/0/0/20140711133519.000/20140711133519.347/
# SGA, 133519.347, 0.0000, N, 0.0000, E, M, * 4D
# SMC, 133519.347, A, 0.0000, N, 0.0000, E, 1.69, 110714, A * 56
# SGA, 133520.340, 0.0012, S, 0.0013, W, M, * 4E
# SMC, 133520.340, A, 0.0012, S, 0.0013, W, 1.67, 110714, A * 5b
# SGA, 133521.337, 0.0026, S, 0.0032, W, M, * 4B
# SMC, 133521.337, A, 0.0026, S, 0.0032, W, 1.64, 110714, A * 5D
# SGA, 133522.326, 0.0041, S, 0.0081, W, M, * 41
# SMC, 133522.326, A, 0.0041, S, 0.0081, W, 1.63, 110714, A * 50
# SGA, 133523.321, 0.0026, S, 0.0086, W, M, * 41
# SMC, 133523.321, A, 0.0026, S, 0.0086, W, 1.57, 110714, A * 57
# SGA, 133524.324, 0.0024, S, 0.0069, W, M, * 40
# SMC, 133524.324, A, 0.0024, S, 0.0069, W, 1.42, 110714, A * 52
# SGA, 133525.326, 0.0020, S, 0.0060, W, M, * 4E
# SMC, 133525.326, A, 0.0020, S, 0.0060, W, 1.29, 110714, A * 51
# SGA, 133526.327, 0.0021, S, 0.0046, W, M, * 49
# SMC, 133526.327, A, 0.0021, S, 0.0046, W, 1.57, 110714, A * 5f
# SGA, 133527.329, 0.0021, S, 0.0026, W, M, * 40
# SMC, 133527.329, A, 0.0021, S, 0.0026, W, 1.74, 110714, A * 57