Flir E4 Thermal imaging camera teardown

[Loafdude]

Excuse me, I am not the user known as Aurora. It's pretty clear to everyone else on this thread (including Aurora) that we are not the same person, so please don't make such accusations. And for the record, I have not made "multiple accounts" on here. Ever.

I have contributed heavily since the inception of the thread, posting logs, confirming hacks, and sharing internal photos of a TI I have available.

I did elect to "self nuke" my own account, for personal reasons and also to determine how long evacuating a forum would take. Not because of any NDA etc.

##EDIT
Apologies you are correct!
Sorry everyone!

[mrflibble]

FWIW: StevenWhitney != Aurora. Just saying.

Edit: too slow. I see you already sorted things out.

[mrflibble]

The simultaneity of the two posts is uncanny. hmmm

Perhaps StevenWhitney, mrflibble, and Aurora are all the same person?
Maybe mikeselectricstuff is in on it too?

 

I'm out. It's been great, everybody.

Bwahaah, I was just thinking the very same thing. XD Me backing you up, and you finding my username amusing and awesome and such.  Maybe you are a figment of my sleep deprived imagination? 

[Loafdude]

I really do apologize 
Your 172 other posts were deleted and the selfnuke thing didnt twig my brain

again sorry. and sorry to see you go!

[EEVblog]

Admins should restore the threads deleted posts IMO. Let him stand by what he said

That is:
a) Not possible. SMF does not keep deleted posts. Once you delete them, they are gone. Technically I could get them from the site daily backup and hack the database and exact and it would take hours or days to do. In the next 5 days they will be gone completely.

b) Not what I want. I have deliberately left the option to delete your own posts turned on since the introduction of this forum. Because I think that if you really want to delete your own posts, you should be able to.

Everyone here has the right to delete their own posts, and criticising someone for exercising their right to do so is poor form.

[BravoV]

Another great moment of reverse engineering event documented live in this forum, thanks Mike. 

Meanwhile, and again, when everytimes I watched great forum thread such like this one, just worry it might be locked or gone because of cease & desist .. love letter Dave received from lawyer. 

Time to save or update an OFFLINE version of this thread. 

What? You mean you didn't mirror this thread and the entire Flir firmware exe/zip/iso/pdf collection? 

That post meant for provoking a further mass generation of the off-line mirrors, silly. 

    

[ixfd64]

Admins should restore the threads deleted posts IMO. Let him stand by what he said

That is:
a) Not possible. SMF does not keep deleted posts. Once you delete them, they are gone. Technically I could get them from the site daily backup and hack the database and exact and it would take hours or days to do. In the next 5 days they will be gone completely.

b) Not what I want. I have deliberately left the option to delete your own posts turned on since the introduction of this forum. Because I think that if you really want to delete your own posts, you should be able to.

Everyone here has the right to delete their own posts, and criticising someone for exercising their right to do so is poor form.

Sorry for going off-topic, but I think there should be some sort of indicator that a post has been deleted. Something like "This post has been deleted by (the user|a moderator)" would do.

[mrflibble]

What? You mean you didn't mirror this thread and the entire Flir firmware exe/zip/iso/pdf collection? 

That post meant for provoking a further mass generation of the off-line mirrors, silly. 

...

    

RAWRRRRRR!!! You just had to remind me.

I have it to page 65 or so before the big delete. After that I got sloppy and/or too preoccupied with mucking about with my E4.

[Loafdude]

Admins should restore the threads deleted posts IMO. Let him stand by what he said

That is:
a) Not possible. SMF does not keep deleted posts. Once you delete them, they are gone. Technically I could get them from the site daily backup and hack the database and exact and it would take hours or days to do. In the next 5 days they will be gone completely.

b) Not what I want. I have deliberately left the option to delete your own posts turned on since the introduction of this forum. Because I think that if you really want to delete your own posts, you should be able to.

Everyone here has the right to delete their own posts, and criticising someone for exercising their right to do so is poor form.

Fair enough. I disagree that being able to delete posts is a good idea but its not my forum 
Considering that this is one of the finest forums on the 'net I have to sit back and consider that I'm likely wrong as well.
Thank you for spending your time running this forum. I personally appreciate it.

[BravoV]

Please consider the self post deletion feature only available through request by mod/admin, cause this loophole can be used as an escape goat or worst running out from responsibilities from the damaged made by the poster him/her self.

Hence, this is also the reason why I love to quote using the complete headers with dated and link from the original post.   ...hint...hint..

My 2 carbon resistors worth.

[Loafdude]

Please consider the self post deletion feature only available through request by mod/admin, cause this loophole can be used as an escape goat or worst running out from responsibilities from the damaged made by the poster him/her self.

Hence, this is also the reason why I love to quote using the complete headers with dated and link from the original post.   ...hint...hint..

My 2 carbon resistors worth.

the delete button is in the upper right hand corner of your post

[tnt]

If you're so eager, I posted a possible 30 Hz hack some pages ago that nobody tried on real hw yet :p

Could you summarize it for me please?  I did check your older posts, but no things clicked in terms of a workable idea. So I am probably missing something. Besides sleep. 

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323991/#msg323991

##EDIT added quote

...

in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"

Yup preciely. Note that it's for the binary in 1.18.7.  If you have a newer version you can send me the binary and I can find the new patch location.

[Taucher]

This was a milestone:

Post 1000
That is all.

now « Reply #925 on: 08 November 2013, 22:18:00 »

Whoever decides to remove postings, I'm perfectly fine with that - it's their right - but
please stop whining like we're in kindergarden - please behave like an adult - enjoy the
hacks and try to contribute something positive!

[ViciousPest]

Just some notes regarding "Exportable framerates" (taken from simlar specsheet):
7.5 Hz (NTSC 30/60Hz) = factor 60Hz div 8
8.3 Hz (PAL 25/50Hz) = factor 50Hz div 6

EDIT: Measured update rate@display: 9 Hz

... and my E4 has just arrived!

Code: [Select]

.version.swcombination.fullver text "os16.0.10_appkit1.0.13_prodkit1.0.0.7"
.version.swcombination.ver text "1.18.7"
@64bit drivers: they auto-add windows-firewall-rules to allow inbound connections to flir processes

Update: mod successful
@Comparison.png: images blown out of scale by my software

Doing some perusing and stumbled on this...How did you test the frame rate? (Is there some way to get notified when edits occur or when thread gets updated?)

EDIT:
Coincidentally last person to post is who I quoted lol 

[Taucher]

in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"

Hm, I don't see (yet) how you got to that loc - but I can take a guess where you started looking
The function cascade starting at sub_111ED4 would be my best guess as it branches to a debugprint at loc_11227C:

Code: [Select]

LDR     R0, =aIs30hzallowedA ; "is30HzAllowed - ArtNo:%s Rev:%d Allowed"...
MOV     R3, R4
BL      NKDbgPrintfW
... that beeing just a debug YES/NO output function

Attachment: just for educational purposes

[Taucher]

Doing some perusing and stumbled on this...How did you test the frame rate? (Is there some way to get notified when edits occur or when thread gets updated?)

High-framerate recording (200fps) of the screen while moving the camera in front of a high contrast object, then computing timestamp-differences between changing frames for some 2 seconds of video - lastly applying median on table and a crosscheck on whole time vs. framecount

[Pinkus]

are the hot/cold spot measurements now quicker with 30Hz? I noticed that they are pretty slow in regular mode and also the reaction of the camera inside the menus (e.g. Color selection) is pretty slow.

[Taucher]

are the hot/cold spot measurements now quicker with 30Hz? I noticed that they are pretty slow in regular mode and also the reaction of the camera inside the menus (e.g. Color selection) is pretty slow.

First: Nothing changed to 30Hz yet
Second: The measurement interval can be customized and is deliberately set to 3Hz by default

Code: [Select]

# speed frequency of measuring temperatures (0.1 ... 100) in Hz
rset .image.measure.frequency 9
rset .image.measure.realFrequency 9
Plase note: Hz range just denomintates the technically possible value-range (maybe %?), not necessarily something sane

[EEVblog]

Fair enough. I disagree that being able to delete posts is a good idea but its not my forum 

It's not my forum either really, it's our forum.
I will go with majority. Feel free to set up a poll, and if a big majority want to remove the ability to delete your own posts, then I'll disable it.
Note: I don't think this forum has a timed edit feature, i.e. the ability to edit your posts for a set time, then you can't any more.
That means that the edit feature remains on, and instead of deleting, people can just edit their post to remove all info anyway.

[tnt]

in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"

Hm, I don't see (yet) how you got to that loc - but I can take a guess where you started looking
The function cascade starting at sub_111ED4 would be my best guess as it branches to a debugprint at loc_11227C:

Code: [Select]

LDR     R0, =aIs30hzallowedA ; "is30HzAllowed - ArtNo:%s Rev:%d Allowed"...
MOV     R3, R4
BL      NKDbgPrintfW
... that beeing just a debug YES/NO output function

If you look closer you will see that this function returns a value 1/0 depending on the printed value.

Then go look where that function is called and you will notice that depending on that value, it will write either 9 or 30 to a variable, which is then used to trigger a write to a FPGA register.

The patch just makes the function return a constant rather that the real result.

Cheers,

    Sylvain

[London Lad]

My E4 arrived (from PASS in the UK) a few mins ago.

I wont have a chance to check the firmware ver till later today but will post as soon as I do.

[mikeselectricstuff]

Aurora apparently had issues with his employer. This is not an uncommon issue...
None of Aurora's posts had any directly useful hack info so nothing significant has been lost.   
I think it is essential that people can edit and delete posts. I frequently edit my posts to correct errors & typos.
For long threads like this which may be skimmed by people looking for info, it is essential  that stuff can be edited to eliminate information that was speculative at the time and subsequently found to be incorrect or potentially harmful.
If people know they can't delete stuff they may be discouraged to post in the first place.
Can we get back on topic now please
 

[JockeT]

I received my E4 last Friday however only got around to installing the hack just now (firmware 1.18.7). I stopped work and did the hack after reading that someone tried to install Flir Tools and that they implied that it had been updated to prevent hacking! Obviously they were mistaken as I had no issues with Flir Tools or doing the hack.

That was me. I was missing an obvious step in the instructions (including camera.cmd in the zip)

What an improvement in performance! I wasn’t expecting the improvement to be so significant. I’ll definitely be trying Taucher’s menu hacks next. Thanks again to Mike and all the others who made this hack possible. 

Oh, and on a slightly off topic rant... Does anyone else find it annoying how people delete and/or heavily edit their posts after posting?

My apologies, but i felt that my post didn't contribute anything, and i was pretty quick about deleting it, and there had been no replies to the thread.
It seems it has been overshadowed by Auroras stunt now though..

[mikeselectricstuff]

Doing some perusing and stumbled on this...How did you test the frame rate?

One way to measure would be to view a vane on a variable speed motor and see at what RPM you get a stroboscopic "freeze"
Or maybe even a sig-gen driving a thin wire or small resistor to create a fluctuating heat source
 

[_Sin]

The difference between 9fps and 30fps should be easily visible. Some people have issues telling the difference between 30fps and 60fps, but once you start dropping below 15fps it ought to be pretty obvious.