Resources

The firmware can be downloaded at http://satinfo.narod.ru/en/download.html.

Here is a local copy of the firmware, because downloading from Wasia's site may be slow at times:
E3kr111M.zip MD5 Checksum of E3kr111.fir: 325e59620dc83e6dff8271df4f344e69
E3kr111B7.zip MD5 Checksum of E3kr111.fir: 1cbbf891f4f2632cda962168ca470b09
E3kr111B71.zip MD5 Checksum of E3kr111.fir: 6901fd5ba45756cd77c115ae688c9f9c (old)
E3kr111B71.zip MD5 Checksum of E3kr111.fir: 407b0808dc0d332c45e7da19ca188ff8 (new)

To check the MD5 file checksum using Windows, you can use Graphical MD5Sum
- Start MD5.exe, and select "Generate Checksums"
- Drag & Drop the file(s) on the form.
A local copy of MD5 Gui can be found here.

Or you can use MD5 Pack
- right click on file
- choose "Make MD5 signature"
A local copy of MD5 Pack can be found here.

Here is The Interactive Disassembler Free 4.1.
Here is an utility that takes the decrypted firmware and unpacks it including disk contents, written by "iiepwe".
Here is a page about firmware hacks from Wasia.

From press releases it looks like the 300D and 10D have a Toshiba TX19 RISC CPU.
The Alex Bershtein's firmware decrypter was used while working on this firmware.

Decrypter/Encrypter

Based on Alex Bershtein's firmware decrypter I wrote a Drag&Drop windows application for decrypting and encrypting .fir files in Cpp. You may compare the different versions and perhaps "help" to develop new features... ;-) The decryption makes strings visible when you open the generated .dec file in an hex-editor. You may find it interesting!
When you drop a .fir file on it it creates a decrypted .dec file. When you drop a decrypted .dec file on it creates an encrypted .enc file which is basically the original (if the .dec file wasn't edited) .fir file again! You just may want to rename the .enc file to a name with .fir extension. By the way, the encrypting and decrypting operations are the same. Just your original .fir file will not be overwriten, when recreating it.

C Source PhpWiki - Firmware Decrypter:
http://www.alexbernstein.com/wiki/FirmwareDecrypter

Drag&Drop Program:
http://www.jjmb.nl/shared/Decrypter.zip

Hope it's useful for somebody...

Interesting web-sites:

300D firmware hacking discussion board - read about the internals of the wasia hack!
www.300d.nl Forum - View topic - Upgrade (hack) Firmware
Canon EOS 300D Digital Rebel Tips and Tricks
DPreview
Welkom bij Motordigitaal
PhpWiki - Home Page - CanonDigitalRebelHacking
RebelWithAClue.net
Canon: Please improve 300D with firmware update
Yahoo! Groups canondigicamhacking

WARNING

WARNING:
This firmware doesn't come from Canon, nor is it supported by Canon. Installation of this firmware may void your warranty. Problems and/or damage of your camera resulting from the installation of this firmware is for your own risk!

Some friends of me and myself are using it without problems so far. But every time you do an upgrade, you'll take a little risk to render your camera "brain-dead", which means it will remain dead after switching on. In other words, it doens't reboot, or hangs during startup. You can't redo flashing, if you're unlucky, and have to sent your 300D for repair.

When you have to sent it for repair, you don't need to explain that you were performing a firmware upgrade on your 300D. Canon service don't need to know this. They only need to know the current behavior: the camera won't boot up. With this information alone Canon can still fix your camera with warranty. I don't expect them to read and compare byte for byte the flashed firmware, if at all possible with your brain-dead 300D.