Unknown Allwinner cam - changing picture modes somehow possible?

[foobar]

Hi,

I recently bought an 25€ Action Cam. It seems to work nicely, but I miss the feature where it takes continously photos every 1 or 3 seconds.
There is a timer function which takes pictures in 3 s but just one.

The camera is labeled as Fontastic AC4K, Fontastic seems to be a brand of D-Parts[1]
So I played a bit with the buttons a figured out there is a bootloader. When in bootloader mode
it says it is this USB device

vendorId 1f3a, idProduct=efe8

which seems to indicate an Allwinner device in FEL[0] mode.

In the normal operation menu it says:

Model: ActionCam
Version: 20180322V3.3
Rev. 20180322
Manufacturer: Fontastic

When I connect it to my computer in charging mode it is an Android device

1f3a:1002 Onda (unverified)

╰─$ adb devices -l                                                  
List of devices attached
20080411               device usb:4-1.4 product:vanci1gddrimx179_sdv model:SoftwinerEvb device:vanci1gddrimx179-sdv transp
ort_id:1

Using

adb shell

gives root access:

root@camdroid:/ # ll
lrwxrwxrwx root root 1970-01-01 00:00 d -> /sys/kernel/debug
drwxrwx--x compass compass 2018-01-01 00:00 data
-rw-r--r-- root root 116 1970-01-01 00:00 default.prop
drwxr-xr-x root root 1970-01-01 00:00 dev
lrwxrwxrwx root root 1970-01-01 00:00 etc -> /system/etc
-rwxr-x--- root root 113608 1970-01-01 00:00 init
-rwxr-x--- root root 2487 1970-01-01 00:00 init.goldfish.rc
-rwxr-x--- root root 4362 1970-01-01 00:00 init.rc
-rwxr-x--- root root 2444 1970-01-01 00:00 init.sun8i.rc
-rwxr-x--- root root 2224 1970-01-01 00:00 init.sun8i.usb.rc
drwxrwxr-x root root 1970-01-01 00:00 mnt
dr-xr-xr-x root root 1970-01-01 00:00 proc
drwx------ root root 2018-01-26 01:04 root
drwxr-x--- root root 1970-01-01 00:00 sbin
dr-xr-xr-x root root 1970-01-01 00:00 sys
drwxrwxr-x dhcp dhcp 2018-04-04 01:23 system
-rw-r--r-- root root 272 1970-01-01 00:00 ueventd.goldfish.rc
-rw-r--r-- root root 4087 1970-01-01 00:00 ueventd.rc
-rw-r--r-- root root 1104 1970-01-01 00:00 ueventd.sun8i.rc
lrwxrwxrwx root root 1970-01-01 00:00 vendor -> /system/vendor

Can somebody point me in the right direction where to look to change the software to take continously photos?
Or is there some firmware which does that and runs on this cam?

Thanks a lot.

[0]: http://linux-sunxi.org/FEL
[1]: https://www.d-parts.de/en/

[petesimon]

nice info!
FIRST, make a backup copy of your firmware, and share it here. follow this tutorial video https://youtu.be/QrhPxpFFMrc?t=1

the original firmware in a camera tells us what other firmware might be compatible...

after that, we can try to find a firmware that fits your cam.

[foobar]

Thanks petesimon.

I uploaded the backup.zip and script.bin to the dropbox folder.

As I did not have no dd on my cam I had to cheat with using busybox (https://busybox.net/downloads/binari...busybox-armv6l) and tweak a little bit the OS X script.

[petesimon]

i like your adb command "adb devices -l" and thanks for the files. here is your FW https://www.dropbox.com/s/2cmzapnr7h...ackup.zip?dl=0

and your 'script.bin' https://www.dropbox.com/s/0oik0brm4e...cript.bin?dl=0

FW info:

Product:  
   vanci1gddrimx179-sdv
Manufacturer:  
   lzm
Short id:  
   zhongxing
OEM id:  
   zhongxing
Camera type:  
   lp6182
FW orig. date:  
   20180404
FW mod. date:  
   20170720
Camera name:  
   ActionCam
Version:  
   20180322V3.3
LCD model:  
   ili9225b
LCD resolution:  
   220x176  
LCD count:  
   2
Sensor model:  
   imx179
Wifi:
   xradio
Logo:
   fantastic ( with a mountain biker picture )
FULL_IMG.FEX size:
   8126464

.
SCRIPT.BIN info (as script.fex text):

[product]
version = "100"
machine = "vanci1gddrimx179-sdv"

[platform]
eraseflag = 0
debug_mode = 0

[target]
boot_clock = 1008
storage_type = -1

[boot_spi_board0]
boot_spi_speed_hz = 0x2625a00
speed_mod = 0

[power_sply]
dcdc2_vol = 1220
dcdc3_vol = 3300
aldo2_vol = 2500
aldo3_vol = 3000
ldo1_vol = 3300
ldo2_vol = 3000
ldo4_vol = 0

[card_boot]
logical_start = 40960
sprite_gpio0 = port:PE24<1><default><default><0>

[gpio_flashing]
used = 1
flashing_delay = 50
flashing_times = 3
flashing_gpio0 = port:PE24<1><default><default><1>

[card0_boot_para]
card_ctrl = 0
card_high_speed = 1
card_line = 4
sdc_d1 = port:PF0<2><1><default><default>
sdc_d0 = port:PF1<2><1><default><default>
sdc_clk = port:PF2<2><1><default><default>
sdc_cmd = port:PF3<2><1><default><default>
sdc_d3 = port:PF4<2><1><default><default>
sdc_d2 = port:PF5<2><1><default><default>

[card2_boot_para]
card_ctrl = 2
card_high_speed = 1
card_line = 8
sdc_cmd = port:PC1<2><1><default><default>
sdc_clk = port:PC0<2><1><default><default>
sdc_d0 = port:PC3<2><1><default><default>
sdc_d1 = port:PC4<2><1><default><default>
sdc_d2 = port:PC5<2><1><default><default>
sdc_d3 = port:PC6<2><1><default><default>
sdc_d4 = port:PC7<2><1><default><default>
sdc_d5 = port:PC8<2><1><default><default>
sdc_d6 = port:PC9<2><1><default><default>
sdc_d7 = port:PC10<2><1><default><default>
sdc_2xmode = 1
sdc_ddrmode = 1

[twi_para]
twi_port = 0
twi_scl = port:PB7<2><default><default><default>
twi_sda = port:PB6<2><default><default><default>

[uart_para]
uart_debug_port = 1
uart_debug_tx = port:PG6<2><1><default><default>
uart_debug_rx = port:PG7<2><1><default><default>

[jtag_para]
jtag_enable = 0
jtag_ck = port:PB11<2><default><default><default>
jtag_do = port:PB12<2><default><default><default>
jtag_di = port:PB13<2><default><default><default>

[clock]
pll3 = 297
pll4 = 300
pll6 = 600
pll8 = 360
pll9 = 480
pll10 = 297
pll_ve = 480
pll_isp = 480

[pm_para]
standby_mode = 1

[dram_para]
dram_clk = 648
dram_type = 3
dram_zq = 14779
dram_odt_en = 1
dram_para1 = 0x10e20000
dram_para2 = 0
dram_mr0 = 6208
dram_mr1 = 4
dram_mr2 = 24
dram_mr3 = 4
dram_tpr0 = 0x832087
dram_tpr1 = 0x1c24085
dram_tpr2 = 0x2a01d
dram_tpr3 = 0
dram_tpr4 = 0
dram_tpr5 = 0
dram_tpr6 = 0
dram_tpr7 = 0
dram_tpr8 = 0
dram_tpr9 = 0
dram_tpr10 = 3
dram_tpr11 = 0x240000
dram_tpr12 = 120
dram_tpr13 = 0x1000000

[pm_para]
standby_mode = 0

[wakeup_src_para]
cpu_en = 0
cpu_freq = 48
pll_ratio = 273
dram_selfresh_en = 1
dram_freq = 36
wakeup_src_wl = port:PL7<4><default><default><0>
wakeup_src_bt = port:PL9<4><default><default><0>
bb_wake_ap = port:PL2<4><default><default><0>

[twi0]
twi_used = 1
twi_scl = port:PB6<2><default><default><default>
twi_sda = port:PB7<2><default><default><default>

[twi1]
twi_used = 1
twi_scl = port:PB8<2><default><default><default>
twi_sda = port:PB9<2><default><default><default>

[uart0]
uart_used = 0
uart_port = 0
uart_type = 2
uart_tx = port:PF2<3><1><default><default>
uart_rx = port:PF4<3><1><default><default>

[uart1]
uart_used = 1
uart_type = 2
uart_port = 0
uart_tx = port:PG6<2><1><default><default>
uart_rx = port:PG7<2><1><default><default>

[uart2]
uart_used = 0
uart_type = 2
uart_port = 2
uart_tx = port:PB0<2><1><default><default>
uart_rx = port:PB1<2><1><default><default>

[spi0]
spi_used = 1
spi_cs_bitmap = 1
spi_mosi = port:PC3<3><default><default><default>
spi_miso = port:PC0<3><default><default><default>
spi_sclk = port:PC1<3><default><default><default>
spi_cs0 = port:PC2<3><1><default><default>

[spi_devices]
spi_dev_num = 1

[spi_board0]
modalias = "at25df641"
max_speed_hz = 0x2faf080
bus_num = 0
chip_select = 0
mode = 0
sflash_size = 8

[ctp_para]
ctp_used = 0
ctp_name = "gt911_m785q6"
ctp_twi_id = 1
ctp_twi_addr = 0x5d
ctp_screen_max_x = 800
ctp_screen_max_y = 480
ctp_revert_x_flag = 0
ctp_revert_y_flag = 0
ctp_exchange_x_y_flag = 1
ctp_int_port = 
ctp_wakeup = 

[ctp_list_para]
ctp_det_used = 0
gt911_ts = 1
ft5x_ts = 1
gt82x = 1
gslX680 = 1
gt9xx_ts = 1
gt811 = 1
zet622x = 1
aw5306_ts = 1

[tkey_para]
tkey_used = 0
tkey_twi_id = 
tkey_twi_addr = 
tkey_int = 

[motor_para]
motor_used = 0
motor_shake = port:P?3<1><default><default><1>

[cooler_table]
cooler_count = 4
cooler0 = "1340000 4 4294967295 0"
cooler1 = "1200000 4 4294967295 0"
cooler2 = "1008000 4 4294967295 0"
cooler3 = "648000 4 4294967295 0"

[disp_init]
disp_init_enable = 1
disp_mode = 0
screen0_output_type = 1
screen0_output_mode = 4
screen1_output_type = 1
screen1_output_mode = 4
fb0_format = 0
fb0_pixel_sequence = 0
fb0_scaler_mode_enable = 0
fb0_width = 220
fb0_height = 176
fb1_format = 0
fb1_pixel_sequence = 0
fb1_scaler_mode_enable = 0
fb1_width = 0
fb1_height = 0
lcd0_backlight = 200
lcd1_backlight = 50
lcd0_bright = 50
lcd0_contrast = 50
lcd0_saturation = 57
lcd0_hue = 50
lcd1_bright = 50
lcd1_contrast = 50
lcd1_saturation = 57
lcd1_hue = 50

[rotate_sw]
used = 1
degree0 = 1

[lcd0_para]
lcd_used = 1
lcd_driver_name = "ili9225b"
lcd_if = 1
lcd_x = 176
lcd_y = 220
lcd_width = 108
lcd_height = 64
lcd_dclk_freq = 15
lcd_pwm_used = 1
lcd_pwm_ch = 0
lcd_pwm_freq = 50000
lcd_pwm_pol = 1
lcd_pwm_max_limit = 255
lcd_hbp = 20
lcd_ht = 380
lcd_hspw = 4
lcd_vbp = 10
lcd_vt = 240
lcd_vspw = 4
lcd_frm = 1
lcd_hv_clk_phase = 0
lcd_hv_sync_polarity = 0
lcd_gamma_en = 0
lcd_bright_curve_en = 1
lcd_cmap_en = 0
lcd_cpu_mode = 1
lcd_cpu_te = 1
lcd_cpu_if = 14
lcd_hv_if = 0
lcd_hv_srgb_seq = 0
lcd_rb_swap = 0
lcdgamma4iep = 22
lcd_bl_en = port:PB13<1><0><2><1>
lcd_power = port:PB10<1><0><2><0>
 = 
lcd_gpio_0 = port:PB11<1><0><2><1>
lcd_gpio_1 = port:PB12<1><0><2><0>
lcdd3 = port:PD1<2><0><2><default>
lcdd4 = port:PD2<2><0><2><default>
lcdd5 = port:PD3<2><0><2><default>
lcdd6 = port:PD4<2><0><2><default>
lcdd7 = port:PD5<2><0><2><default>
lcdd10 = port:PD6<2><0><2><default>
lcdd11 = port:PD7<2><0><2><default>
lcdd12 = port:PD8<2><0><2><default>
lcdclk = port:PD18<2><0><3><default>
lcdde = port:PD19<2><0><3><default>
lcdhsync = port:PD20<2><0><3><default>
lcdvsync = port:PD21<2><0><3><default>

[hdmi_ep952_para]
hdmi_used = 1
gpio_0 = port:PG9<1><0><default><0>
gpio_1 = port:PG13<0><2><2><default>
hdmi_twi_used = 1
hdmi_twi_id = 1
hdmi_twi_addr = 0x29
hdmi_d2 = port:PD0<2><0><2><default>
hdmi_d3 = port:PD1<2><0><2><default>
hdmi_d4 = port:PD2<2><0><2><default>
hdmi_d5 = port:PD3<2><0><2><default>
hdmi_d6 = port:PD4<2><0><2><default>
hdmi_d7 = port:PD5<2><0><2><default>
hdmi_d10 = port:PD6<2><0><2><default>
hdmi_d11 = port:PD7<2><0><2><default>
hdmi_d12 = port:PD8<2><0><2><default>
hdmi_d13 = port:PD9<2><0><2><default>
hdmi_d14 = port:PD10<2><0><2><default>
hdmi_d15 = port:PD11<2><0><2><default>
hdmi_d18 = port:PD12<2><0><2><default>
hdmi_d19 = port:PD13<2><0><2><default>
hdmi_d20 = port:PD14<2><0><2><default>
hdmi_d21 = port:PD15<2><0><2><default>
hdmi_d22 = port:PD16<2><0><2><default>
hdmi_d23 = port:PD17<2><0><2><default>
hdmi_d24 = port:PD18<2><0><3><default>
hdmi_d25 = port:PD19<2><0><3><default>
hdmi_d26 = port:PD20<2><0><3><default>
hdmi_d27 = port:PD21<2><0><3><default>
hdmi_power = "axp20_ldo4"

[hdmi_it66121_para]
hdmi_used = 1
gpio_0 = port:PG9<1><0><default><0>
gpio_1 = 
hdmi_twi_used = 1
hdmi_twi_id = 1
hdmi_twi_addr = 0x4d
hdmi_d2 = port:PD0<2><0><2><default>
hdmi_d3 = port:PD1<2><0><2><default>
hdmi_d4 = port:PD2<2><0><2><default>
hdmi_d5 = port:PD3<2><0><2><default>
hdmi_d6 = port:PD4<2><0><2><default>
hdmi_d7 = port:PD5<2><0><2><default>
hdmi_d10 = port:PD6<2><0><2><default>
hdmi_d11 = port:PD7<2><0><2><default>
hdmi_d12 = port:PD8<2><0><2><default>
hdmi_d13 = port:PD9<2><0><2><default>
hdmi_d14 = port:PD10<2><0><2><default>
hdmi_d15 = port:PD11<2><0><2><default>
hdmi_d18 = port:PD12<2><0><2><default>
hdmi_d19 = port:PD13<2><0><2><default>
hdmi_d20 = port:PD14<2><0><2><default>
hdmi_d21 = port:PD15<2><0><2><default>
hdmi_d22 = port:PD16<2><0><2><default>
hdmi_d23 = port:PD17<2><0><2><default>
hdmi_d24 = port:PD18<2><0><3><default>
hdmi_d25 = port:PD19<2><0><3><default>
hdmi_d26 = port:PD20<2><0><3><default>
hdmi_d27 = port:PD21<2><0><3><default>
hdmi_power = "axp20_ldo4"

[pwm0_para]
pwm_used = 1

[csi0]
vip_used = 1
vip_mode = 0
vip_dev_qty = 1
vip_define_sensor_list = 0
vip_csi_mck = port:PE20<3><default><default><default>
vip_csi_sck = port:PE21<2><default><default><default>
vip_csi_sda = port:PE22<2><default><default><default>
vip_dev0_mname = "imx179"
vip_dev0_pos = "rear"
vip_dev0_lane = 1
vip_dev0_twi_id = 0
vip_dev0_twi_addr = 0x20
vip_dev0_isp_used = 1
vip_dev0_fmt = 1
vip_dev0_stby_mode = 0
vip_dev0_vflip = 0
vip_dev0_hflip = 0
vip_dev0_iovdd = "vcc-pe"
vip_dev0_iovdd_vol = 0x1b7740
vip_dev0_avdd = "vcc-pe"
vip_dev0_avdd_vol = 0x2932e0
vip_dev0_dvdd = ""
vip_dev0_dvdd_vol = 0x124f80
vip_dev0_afvdd = ""
vip_dev0_afvdd_vol = 0x2ab980
vip_dev0_power_en = port:PE1<1><default><default><default>
vip_dev0_reset = port:PE18<1><default><default><default>
vip_dev0_pwdn = port:PE19<1><default><default><default>
vip_dev0_flash_en = 
vip_dev0_flash_mode = 
vip_dev0_af_pwdn = 
vip_dev0_act_used = 0
vip_dev0_act_name = "dw9714_act"
vip_dev0_act_slave = 24
vip_dev1_mname = ""
vip_dev1_pos = "front"
vip_dev1_lane = 1
vip_dev1_twi_id = 0
vip_dev1_twi_addr = 
vip_dev1_isp_used = 0
vip_dev1_fmt = 1
vip_dev1_stby_mode = 0
vip_dev1_vflip = 0
vip_dev1_hflip = 0
vip_dev1_iovdd = ""
vip_dev1_iovdd_vol = 0x2ab980
vip_dev1_avdd = ""
vip_dev1_avdd_vol = 0x2ab980
vip_dev1_dvdd = ""
vip_dev1_dvdd_vol = 0x16e360
vip_dev1_afvdd = ""
vip_dev1_afvdd_vol = 0x2ab980
vip_dev1_power_en = 
vip_dev1_reset = 
vip_dev1_pwdn = 
vip_dev1_flash_en = 
vip_dev1_flash_mode = 
vip_dev1_af_pwdn = 

[csi1]
vip_used = 0
vip_mode = 0
vip_dev_qty = 1
vip_define_sensor_list = 0
vip_csi_pck = port:PE0<2><default><default><default>
vip_csi_mck = port:PE1<2><default><default><default>
vip_csi_hsync = port:PE2<2><default><default><default>
vip_csi_vsync = port:PE3<2><default><default><default>
vip_csi_d0 = port:PE4<2><default><default><default>
vip_csi_d1 = port:PE5<2><default><default><default>
vip_csi_d2 = port:PE6<2><default><default><default>
vip_csi_d3 = port:PE7<2><default><default><default>
vip_csi_d4 = port:PE8<2><default><default><default>
vip_csi_d5 = port:PE9<2><default><default><default>
vip_csi_d6 = port:PE10<2><default><default><default>
vip_csi_d7 = port:PE11<2><default><default><default>
vip_csi_d8 = port:PE12<2><default><default><default>
vip_csi_d9 = port:PE13<2><default><default><default>
vip_csi_d10 = port:PE14<2><default><default><default>
vip_csi_d11 = port:PE15<2><default><default><default>
vip_csi_sck = port:PE21<2><default><default><default>
vip_csi_sda = port:PE22<2><default><default><default>
vip_dev0_mname = "ov5640"
vip_dev0_pos = "front"
vip_dev0_twi_id = 4
vip_dev0_twi_addr = 0x78
vip_dev0_isp_used = 0
vip_dev0_fmt = 0
vip_dev0_stby_mode = 0
vip_dev0_vflip = 0
vip_dev0_hflip = 0
vip_dev0_iovdd = ""
vip_dev0_iovdd_vol = 0x2ab980
vip_dev0_avdd = ""
vip_dev0_avdd_vol = 0x2ab980
vip_dev0_dvdd = ""
vip_dev0_dvdd_vol = 0x16e360
vip_dev0_afvdd = ""
vip_dev0_afvdd_vol = 0x2ab980
vip_dev0_power_en = 
vip_dev0_reset = port:PE23<1><default><default><default>
vip_dev0_pwdn = port:PE24<1><default><default><default>
vip_dev0_flash_en = 
vip_dev0_flash_mode = 
vip_dev0_af_pwdn = 
vip_dev0_act_used = 0
vip_dev0_act_name = "ad5820_act"
vip_dev0_act_slave = 24
vip_dev1_mname = "gc2035"
vip_dev1_pos = "front"
vip_dev1_lane = 1
vip_dev1_twi_id = 4
vip_dev1_twi_addr = 0x78
vip_dev1_isp_used = 0
vip_dev1_fmt = 1
vip_dev1_stby_mode = 0
vip_dev1_vflip = 0
vip_dev1_hflip = 0
vip_dev1_iovdd = ""
vip_dev1_iovdd_vol = 0x2ab980
vip_dev1_avdd = ""
vip_dev1_avdd_vol = 0x2ab980
vip_dev1_dvdd = ""
vip_dev1_dvdd_vol = 0x16e360
vip_dev1_afvdd = ""
vip_dev1_afvdd_vol = 0x2ab980
vip_dev1_power_en = 
vip_dev1_reset = 
vip_dev1_pwdn = 
vip_dev1_flash_en = 
vip_dev1_flash_mode = 
vip_dev1_af_pwdn = 

[mmc0_para]
sdc_used = 1
sdc_detmode = 1
sdc_buswidth = 4
sdc_d1 = port:PF0<2><1><2><default>
sdc_d0 = port:PF1<2><1><2><default>
sdc_clk = port:PF2<2><1><2><default>
sdc_cmd = port:PF3<2><1><2><default>
sdc_d3 = port:PF4<2><1><2><default>

[petesimon]

Please upload your tweak'd macOS X script to the dropbox folder or to my pcloud folder https://goo.gl/yU7HLA

[foobar]

> Please upload your tweak'd macOS X script to the dropbox folder or to my pcloud folder https://goo.gl/yU7HLA
Will do, but have bricked my camera and need to bring it back to live. So it takes some time.

[foobar]

btw. how to read the script.bin file? is there a tool for that?

[petesimon]

get and unpack this zip file. https://www.dropbox.com/s/vf22hrxggl...ll_fw.zip?dl=0
put your script.bin and full_img.fex into the same folder where the scripts are.
read the "readme-small_fw.txt" file inside the zip archive

run these scripts in the order shown:
unfex.bat
scriptbin_read.bat
convertscriptbin.bat -- you will need Java installed
squashfs_unmake.bat
fwinfo.bat
getfwinfo.bat

and open "script.fex" file in a text editor.

your camera "product" vanci1gddr is unique as far as I know. you can look for other firmware in the big big thread on page 1 in post #8, and look in pages 38 in reverse order (38, 37, 36, etc) for other firmware. Be sure to match sensor, LCD, and full_img.fex file size 8126464 bytes.

watch this tutorial video from TIME 13:50 https://youtu.be/QrTxFjIiHvc?t=831

[tvszer]

These firmware sizes /8 1.. ... byte/ squashfs_unmake.bat are not packaged, "Can't find a SQUASHFS superblock on c:\unfex-scripts......\UNFEX\2-system.img" error messages are sent.
It would be nice to have solution for 32bit Xp

[petesimon]

what is the size of your full_img.fex firmware file?

give me more details about the problem.... give me screenshots and more error messages

are you using NTFS file system on your computer hard drive?

[tvszer]

The size of the full_img.fex 8159232 byte.
I use NTFS file system.
It's about this firmware. I can't unpack 2-system.img.
https://drive.google.com/file/d/1jfI...kFEK0h7nT/view

[tvszer]

I'll let you know from the beginning briefly that I was going. I bought a camera sold under the name "F60R", which does not have the inside, it is equipped with 1GB of DDR RAM, I think, only 8MB of firmware can be good for it. Unfortunately, the original firmware could not be saved, but a non-vertex was fired, so it became a brick. This firmware is almost good for just GC9305 LCD, mine is ST7789V. I switched the driver in script.bin, now there is a picture on the LCD but inversed. That's why I think 2-system.img should be modified, but I do not know. I do not even know what to change. Also, it does not work with a remote control, and I also want to improve the audio quality of recording because I need great sound quality. I would be very happy if you could help them. Thanks!