I managed to 'reset' my CVS camera serial number ( sticker says version 410 ). The status screen used to say:
CMP TYPEID 27
REALM ID 20
After some playing around ( shorting out a connectors, removing the battery) the ID and REALM ID has changed to:
REALM ID 00
I finally gave up trying to make a simple connector ( plexyglass and solid wire ) and soldered on a USB cable. It turned out to be a lot faster to tack on a few wires than try to get the cable stuck in the right way.
I have been playing around with the usppoker v0.3 using the supplied bulkout.bin file I am able to tease out up to 3,100,000 bytes (0x60D42F00) without getting any IO errors. So the maximum that one can read may be different between firmware versions.
I tried looking for the thumbnails in the angerRcvd.txt but when I dump 60k starting at the previously suggested offsets ( 0x2000 ) into a older version of tft2tga all I get out is a bunch of colorful static.
Using the hex editor 'tiny hexer' file comparison utility I was able to locate a few potential image locations. However I had no luck finding the 009C header that was present in some of the other files.
I was supprised of the differences between the dump files after a camera reboot, the images are still present, but some of the other data is changes slightly, while other sections are dramatically different. Unfortunately I havent seen any consistent offsets yet.
I took a few pictures of a color table that I projected up on a screen. They didn't look very good on the cameras LCD screen as the flash really is strong, and suprisingly hot. Lots of energy in a small place, I feel sorry for anyone who got zapped by the capacitor behind that. I plan on trying to take some solid color shots later, maybe looking INTO the projector instead of at the screen.
I am going to look around for a fast server somewhere to store the dumps. Is there anything that anyone is interested in seeing out of a CVS camera?