# ILME-FX30: mapping service commands and firmware settings

> ILME-FX30 Service Mode Research maps USB service-session commands and settings on FX30 firmware 6.00. It documents Senser and Jiritsu exchanges, backup structures and static analysis of appFw.so, with scripts for probing the camera. The author reports enabling a hidden continuous-shooting mode through paired settings writes and a cold start.

- Type: Case study
- Targets: Firmware · Protocol
- Category: Independent reconstruction cases
- Relationship: Independent reconstruction project
- Sources reviewed: 2026-11-07
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/t2r05/fx30-senser-map>
- Primary source: <https://github.com/t2r05/fx30-senser-map/blob/0d55e2758d48b5d19b5950182ac4700007f55bff/README.md>
- Catalog page: <https://awesomerea.org/resources/ilme-fx30-service-mode-case/>
- Record JSON: <https://awesomerea.org/resources/ilme-fx30-service-mode-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/ilme-fx30-service-mode-case/index.md)

## Requirements & limits

- **Prerequisites:** The device experiments use an ILME-FX30 running firmware 6.00, Windows 11, Zadig and libusbK, Python 3.11 and pyusb 1.3.1.
- **Limits:** The documented settings-write method applies to firmware 6.00; the author reports that firmware 6.01 rejects modified settings data.
- **License:** Documents are licensed CC BY-NC-SA 4.0; tools are licensed MIT.

## Primary sources

1. <https://github.com/t2r05/fx30-senser-map/blob/0d55e2758d48b5d19b5950182ac4700007f55bff/README.md>
2. <https://github.com/t2r05/fx30-senser-map/blob/0d55e2758d48b5d19b5950182ac4700007f55bff/docs/05-firmware-analysis.md>
3. <https://github.com/t2r05/fx30-senser-map/blob/0d55e2758d48b5d19b5950182ac4700007f55bff/LICENSE>

## More in Firmware and hardware

- [redmi-perf: reconstructing Redmi laptop performance-mode control](https://awesomerea.org/resources/redmi-perf-case/index.md) · Case study
- [ZTE U60 Pro Toolkit: investigating and extending router controls](https://awesomerea.org/resources/zte-u60-pro-toolkit-case/index.md) · Case study
- [Game Boy DMG-CPU Schematics: reconstructing the DMG-CPU B chip](https://awesomerea.org/resources/dmg-schematics-case/index.md) · Case study
- [open-cleverpad: reconstructing the MIDIPLUS SmartPAD hardware](https://awesomerea.org/resources/open-cleverpad-case/index.md) · Case study
- [osdbits: reconstructing the PlayStation 2 OSDSYS opening](https://awesomerea.org/resources/osdbits-case/index.md) · Case study
- [FPGABoy: Game Boy hardware implementation on FPGA](https://awesomerea.org/resources/fpgaboy-game-boy-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.