Powershot A430[]


CHDK for the A430 with firmware revision 1.00b is available in a Beta version from the Download page

Firmware info[]


The trick with the ver.req file works on the A430 as well, with the following result:

Canon PowerShot A430
P-ID:30F8  PAL

Firmware Ver GM1.00B
Dec  6 2005   09:17:55

Pressing SET+DISP buttons again results in:

Canon PowerShot A430
P-ID:30F8  PAL

Adj Ver.005.001
2007.08.31 18:54:46

Further SET+DISP pressing does not change anything if the file was ver.req. However, if the file is called vers.req, a third screen is shown:

Canon PowerShot A430
P-ID:30F8  PAL

Adj Ver.005.001
Total Shoot  :6707
Open Shutter :0
Close Shutter:0

Normally it should show "No Error". It looks like my camera got a ZoomLensError on August 31, 2007. On that date the lens was hit hard, but the camera is still okay.

The number P-ID:XXXX is a hexadecimal code for the platform version id.

Platform codes for other models can be looked up under P-ID.

For Developers[]

Following the example of the A530 page, everything that might be useful for a port of CHDK to A430 should be posted here.

Memory map[]

Following information is probably generic to other models (A5xx, A6xx, A7xx series)

Firmware flash[]

0xff800000: firmware flash data (probably)
0xffc00000: mirror copy of firmware flash? (to be determined)

LED addresses[]

0xc0220080: 0x46 enables orange focus assist LED, 0x44 disables it
0xc0220084: 0x46 enables blue print LED, 0x44 disables it

Blinker Firmware[]

The blinker method was used to dump the firmware.

Blinker Firmware compilation[]

A blinker firmware was compiled using yagarto. In the XXXX.c file, the firmware ID must be replaced by the one given obtained via ver.req (XXX). If cygwin is installed on your computer, in make.bat, replace

zero | dd bs=1k count=100 >> main

by the following two lines:

c:\cygwin\bin\dd.exe bs=1k count=100 if=/dev/zero

c:\cygwin\bin\cat.exe >> main

Phototransistor active circuit[]

The PC's microphone input has a 2.34V rail available on one of the channels, so I tried a few powered circuit (both photodiode and phototransistor). They give a much larger signal, but the shape of the signal still differs from the ones given as example.

The test circuit uses a small piece of breadboard. Bottom side has two rows of 3 tulip sockets. This is where I plug-in my phototransistors and filter cap. Top side has three rows of 3 tulip sockets. The one away from the cable, I plug my 1k trim in. The other two are used for bridging the circuit with the computer. These can be removed and replaced by filtering caps if needed.

Active circuit
Circuit under

Test circuit - under

Circuit top

Test circuit - top side

Circuit small

Test circuit and audio cable

Phototransistor Active circuit

Phototransistor, active circuit

Phototransistor under

Phototransistor active test circuit (bottom)

Phototransistor top

Phototransistor active test circuit (top)

The trimmer (blue on the photo above) has one of its legs bent so that it doesn't make contact. The two legs making contact with the circuit are the one under the screw and the middle one. The red component is a 1μF ceramic cap used to filter the output (see screenshots below).

Firmware recording using audacity[]

Audacity phototrans YY66W blue

Audacity - YY66W phototransistor - Blue LED

Audacity phototrans YY66W blue filtered

YY66W - Blue LED - Filtered

I am now trying for the blue LED with slower transfer speed. I used my amplified circuit and tried both the S1226-8BQ photodiode, YY66W (IR) and SFH300-3 phototransistors. Surprisingly enough, the IR phototransistor is the one that gives the largest signal (see screenshots). With a lower transfer speed, I now get the waveform I was expecting.

The effect of the 1μF cap is shown in screenshot 2 (screenshot 1 is without). The signal amplitude is more constant and will (probably) result in fewer decoding errors.

All in all, it now looks like I should be able to get a firmware dump.

Firmware dumps[]

Audacity photodiode passive

Audacity - Hamamatsu S1226-8BQ Photodiode passive circuit

It seems that the fastest speed (AF assist LED) is not an option for dumping the firmware. At that speed, the waveform is distorted and may not be decoded (see screenshot). Instead, the blue LED at the back of the camera was used to output the firmware, and an active circuit based around the YY66W phototransistor was used to read the firmware out.


Download location for firmware dumps:
P&S firmware dumps mirror


  • 22-Aug-2010: A430 1.00B beta port is in the CHDK trunk now.
The latest CHDK beta version for the A430 1.00B is available from here: forum link
  • 21-Jun-2009: Porting the A430 with fw 1.00b has started: Forum link (by shentey)