Hacking investigations continue. I hope the updates are enjoyed, as using this to document my steps.
I got the serial port and shell up and running, and there are a lot of really useful commands. The hacking docs
@Mac84 provided is spot on.
I want to determine how much of the sensor was being used. The x and y offsets within the reframing show a range of ±24 to the image center, but the amount of coverage doesn't match the 8mm lens theory. So using the shell I run a bunch of memory dumps like this:
>mem dump 0x80000000 0x01000000 BIN1A.BIN
>mem dump 0x80000000 0x01000000 BIN1B.BIN
>mem dump 0x80000000 0x01000000 BIN1C.BIN
I had ChatGPT create a memory comparison script, so I could compare memory changes when toggle the offset within the UI. It took a while, but found in memory where the image offsets are stored. X-offset is at 0x80e09eb4 in my unit, Y-offset is at 0x80e09eb8. These are artificially limited in the UI to make it seem the lens is not too wide. The offset values limited to ±24, I can be pushed to ±73 (at maximum zoom-out, UI limited.) At -70 I can capture a frame like this.
>mem w 0x80e09eb4 0xffffffba
View attachment 19739
This is not particularly useful, but it shows how wide the lens is. Pretty cool if you want to convert this into a 16mm scanner. As a Super8 sprocket is 0.91mm wide, I calculated the horizontal field of view of the current lens. This is about 5mm left of the frame and about the same to the right. So the HFOV is 5+8+5 = 18mm. As the target distance is 32mm, this doubly confirms an 8mm lens. I've tried a 12mm and 16mm lens without luck getting them focus, but I believe I can work that out.
Next is to remove the UI zoom limit.