The CMbH Sections are pretty short and simple, so I’ll just get to the layout. There are two interesting things to note in these very short sections. The section basically costains a String value and some other unknown, interesting value. Now sure what the number is, an offset, index, size, perhaps a literal value, but its interesting. I’ll be looking at this more closely.

For now, here is the layout of the section:

CMbH Section:
The following is given in order of occurance
Length    Description
0×04        Section Identifier (= CMbP)
0×04        Unknown (Section Version? =0×00 01 00 00 could be minor/major)
0×04        Unknown
0×04         Unknown
0×04        Section Length
Variable    Single String.

Now, The 1st unknown value is the interesting one. Here is a table  of the strings and the interesting unknowns for your reading pleasure:

Title                     Value
********************************
RES_HI                    0x04b8
ISO_400                   0x03b8
BASE                      0x6a60
ISO_800                   0x04fc
COLORSPACE_SRGB_ENHANCED  0x007c
COLORSPACE_SRGB           0x0064
RES_FULL                  0x00c4
SETUP                     0x04f0
SETUP                     0x015c
ISO_200                   0x03b8
EXP_DEFAULT               0x0068
COLORSPACE_ADOBERGB       0x006c
ISO_100                   0x03b8
RES_MED                   0x04b8
EXP_BULB                  0x00a8
RES_LOW                   0x04cc
ISO_1600                  0x0500
BASE                      0x45874
ISO_3200                  0x0500
LONG_EXP                  0x01dc

Why are there two bases? And why are they so large?

Categories: SD14 Firmware Hacking