* 4005 .not in jpeg. (not before 5d (350d) and after 1000d (50d)) L size (intel) L type ? 0x1000 0000 (description and sizes below checked with 400d, 5d, 1d m2n, 30d) then (offset 8), 3 sections of the form: - long for the section length (12, excluding this long) - short with 0x21, 0x22, then 0x23 (type of section?) - short with 1 - long with 0x81 then (offset 0x2c) 3 sections of the form (filled with 30d, empty (only 0x81 value after 0x41-0w43) with the 5d, 1d m2n): - long for the size (0x1a10, including this long) - long (or short + 00 00 after?) with 0x41, 0x42 and then 0x43 (name/type of section?) - section. content seems different for each model, but identical for the 3 sections... then one section (offset 0x4e5c) - long for the size (0x16d4 including this long), but must be x5 - short with 0x81 - 00 00 00 00 01 00 (400d and 30d) or 01 00 00 00 01 00 (1d m2n and 5d) - dc f4 c5 e9 d0 ... same for all models ? (400d, 30d, 5d) at offset 0xc080 - long with 8 (size including this long) - short with 0x86 (type/name) - short with 0 (30d, 400d) or 1 (5d) or 0x2000 0000 (40d raw ans sraw, 1d m3, 1ds m3) or 0x2000 0001 (450d, 1000d) values and sizes verified all models in the previous line, otherwise noted. offset 0x130 (look like section at 0x4e5c of type 0x1000 0000) dc f4 e5 e9 f0.... (40d, 450d, 1ds m3) dc f4 e5 e9 d0... (1d m3) dc f4 e5 e9 f7... (1000d) then, offset 0x2134 (450d, 1000d), offset 0x2130 (40d, 1d m3, 1ds m3) 5 sections of the form: - long with size (including this long) 0x5d8 for 450d+1000d, 0x468 for 40d+1dm3+1ds_m3 - long with short 0x81, ..., 0x85 - 00 00 00 00 01 00 (1st & 4th sections), 00 00 01 00 01 00 (2nd, 3rd & 5th sections) then, last section - long with size of the section (8, including this long) - long with 0x86 (or short + 00 00) or 0x2000 0003 (50d) offset 0x130 dc f4 e5 e9 f0 .... (50d) offset 0x21e8 5 sections of the form: - long with size (including this long) 0x5d8 for 50d - long with short 0x81, ..., 0x85 - 00 00 01 00 01 00 (all 5 sections) section "0x86" - long with size of the section (8, including this long) - long with 0x86 (or short + 00 00) offset 0x3f28 (only 50d) section starting with d7 03 02 00 ... offset 0x4040 end of file