https://www.eevblog.com/forum/thermal-imaging/uti260b-uti690b-firmware-backup-script/msg4964089/#msg4964089 Hi i make a simple script to backup some firmware files of your device... 1) Copy these 2 folders to the SD card: Upgrade FWBackup 2) Insert SD card into thermal camera. 3) Power ON the thermal camera. 4) After initializing is complete and the progress bar is no longer displayed, press right arrow > for 3 seconds, then press left arrow <. 5) When the Upgrade menu appears, select APP, then press SET and wait until a message appears that says "upgrade complete." 4) Power off the thermal camera, remove the SD card, ZIP the files, then upload to the cloud and provide a download link here if you want with the firmware version you have and the device 690b or 260b. Thanks for the precision. For this to work, you must not be in image mode... You have to press and hold the right arrow for 3 seconds then while holding down the right arrow press the left arrow. cp /root/UTi260B_Thermal /media/mmcblk0p1/FWBackup/UTi260B_Thermal cp /usr/lib/* /media/mmcblk0p1/FWBackup/usr/lib/ cp /root/tau* /media/mmcblk0p1/FWBackup/ cp /etc/rc.d/apps.sh /media/mmcblk0p1/FWBackup/etc/rc.d/apps.sh cp /media/mmcblk1p1/zImage /media/mmcblk0p1/FWBackup/zImage cp /media/mmcblk1p1/logo-7.bmp /media/mmcblk0p1/FWBackup/logo-7.bmp https://mega.nz/file/e5AjGADI#fWHWZyzGZ2q5ojQD2_0jGow8vBDH8VzG51JnjDMnQlg https://www.eevblog.com/forum/thermal-imaging/uni-t-uti260b/175/ Hi all, If any one is willing to play with that camera, I advice to take a firmware backup first. There is a LVTTL header on the board that can be easily used with CH340 adapter. https://www.youtube.com/embed/1yYN5GsLT3w (heat the screen borders with a hairdryer to remove it easily) DISCLAIMER: I am not responsible for any bricked device following these instructions. Typical pinout for C200 - using almost same HW platform: PIN1 - +3.3V (do not connect) PIN2 - GND PIN3 - TX (connect to RX on adapter) PIN4 - RX (connect to TX on adapter) Serial is 115200/8/1/n. Always identify ground and +3.3V with a multimeter first. Boot sequence can be interrupted - from U-Boot, you can take a backup (done in chuncks of 256MB due to limited RAM - to save time you could do larger like 384MB as long as you do not override U-Boot relloc address/screen framebuffer but calculation is much easier with 256MB). Considering 0x80000000 is the RAM start address (confirm that using bdinfo command), follow the steps: PREREQ 1 - Insert a >=4GB SD Card PREREQ 2 - mmc list--> you should see the SD Card and the Internal MMC 1 - mmc dev Y (where Y is the INTERNAL MMC) 2 - mmc read 0x80000000 0x0 0x80000 3 - mmc dev X (where X is the EXTERNAL SD) 4 - mmc write 0x80000000 0x0 0x80000 5 - mmc dev Y (where Y is the INTERNAL MMC) 6 - mmc read 0x80000000 0x80000 0x80000 7 - mmc dev X (where X is the EXTERNAL SD) 8 - mmc write 0x80000000 0x80000 0x80000 9 - mmc dev Y (where Y is the INTERNAL MMC) 10 - mmc read 0x80000000 0x100000 0x80000 11 - mmc dev X (where X is the EXTERNAL SD) 12 - mmc write 0x80000000 0x100000 0x80000 ... (etc second parameter changes to 0x180000, 0x200000, 0x280000 ... until it complains there is nothing to read) After it complains, for the last one you have to adjust the read size - if it says it could only read 0x60000 blocks, change the third value to 0x60000. For a 4GB internal MMC, it will typically stop at 0x700000 + 0x6000. I really advise to ALWAYS run the "mmcinfo" command before issuing any "mmc write" command to ensure the external SD is selected. If you do any mistake, you will erase the device flash and no recovery will be easily possible (even less if memory is BGA). Then, you have a full copy of the MMC on your SD. To store that into a file using Linux, run "dd if=/dev/yourSDcard of=Camera.img bs=512 count=[last address + size, converted to DEC, for example 7733248 in the previous example]". Note that there are a FAT and EXT3 partition on the device - if you use Windows (or OSX) to backup the SD, the automount will create a System Volume Information (or a .DS_Store file) on the card, so it wont be an exact copy, which is why I advise to use Linux (or use the read-only switch in your SD card adapter). If you do not understand the previous commands, you will most likely brick your device - so please refrain yourself ======================================================================= DISCLAIMER - I am not responsible if your device get bricked. I minimized the changes performed on the system but we still need one file to trigger the update. I use uti160e which seems to be a test trigger, not used in any commercial device. Hello, I highly simplified the firmware backup process presented previously. I hope it will help people to provide a copy of their current firmware. The U-Boot way of taking a backup does not alter any data on the camera so it is preferred, but having a "one-click" backup method, which do NOT require to teardown the device can be useful too :). This method replace the file used for USB Disk mode to provide root access to the camera. It activates a serial console through USB, along with mass storage (you need to have an SD in your device !). It will make possible the activation of UVC for any camera, even if not supported by default - but I need to collect firmware for that first. 1-Format SD Card using MBR FAT32 (important - do not use GPT) 2-Create a folder called "Upgrade" at the root of the card 2-Create a folder called "Backup" at the root of the card 3-Copy the 2 files provided in the Upgrade folder 4-Initiate the upgrade procedure by pushing the right button for ~1s, releasing it and at the same time quickly pressing the left button 5-Select "APP" 6-Reboot If you have an SD Card in your camera, it will be recognised as a CDC ACM device (acting as Mass Storage and Serial Port at the same time) when USB Disk mode is selected. Typical serial port is /dev/ttyACM0 (Linux) or /dev/usbmodemXXXX (OSX). Parameters are 115200/8-N-1. 2 Users are available: Root access : root/password Normal user access : ftpadmin/ftpadmin To take a quick backup of your system, create a folder called Backup at the root of the SD Card, reboot and switch from USB Camera mode to USB Disk. It takes ~30s max (there is no visual feedback except for a "Done" line written on the serial console). To take a full backup of your system, create a folder called FullBackup at the root of the SD Card, reboot and switch from USB Camera mode to USB Disk. Wait for ~15 min without performing any action (there is no visual feedback except for a "Done" line written on the serial console). Backup is 3.7GB but <100MB compressed. If for any reason the root password is not "password", create a folder called "ForceRoot" to force the password to be changed. As an example, I attach C200 firmware 1.1.1.0 (which has UVC working on Linux/OSX but not with default Windows drivers):