Firmware, in greyscale.

These were generated with:

   $ rawtopgm 512 2686 input.data > output.pgm
   $ pnmtopng output.pgm output.png

LinusNielsenFeltzing: I can't see how a decrypted H120 firmware can be used as a comparison. It doesn't even have the same CPU.

GeoffOakham: True, however there will be some similar data. For example, ifp's firmware will contaim something similar to ihp's language list:

  0016f610  00 00 00 00 00 41 66 72  69 6b 61 61 6e 73 00 00  |.....Afrikaans..|
  0016f620  00 00 00 00 00 00 00 00  00 02 41 6c 62 61 6e 69  |..........Albani|
  0016f630  61 00 00 00 00 00 00 00  00 00 00 00 00 00 03 42  |a..............B|
  0016f640  61 73 71 75 65 00 00 00  00 00 00 00 00 00 00 00  |asque...........|
  0016f650  00 00 00 02 42 79 65 6c  6f 72 75 73 73 69 61 6e  |....Byelorussian|
  0016f660  00 00 00 00 00 00 00 00  06 42 75 6c 67 61 72 69  |.........Bulgari|
  0016f670  61 6e 00 00 00 00 00 00  00 00 00 00 00 06 43 61  |an............Ca|
  0016f680  74 61 6c 61 6e 00 00 00  00 00 00 00 00 00 00 00  |talan...........|
  0016f690  00 00 02 43 68 69 6e 65  73 65 28 53 69 6d 70 6c  |...Chinese(Simpl|
  0016f6a0  65 29 00 00 00 00 00 07  43 68 69 6e 65 73 65 28  |e)......Chinese(|
  0016f6b0  54 72 61 64 69 74 69 6f  6e 29 00 00 08 43 72 6f  |Tradition)...Cro|
  0016f6c0  61 74 69 61 00 00 00 00  00 00 00 00 00 00 00 00  |atia............|
  0016f6d0  00 03 43 7a 65 63 68 00  00 00 00 00 00 00 00 00  |..Czech.........|
  0016f6e0  00 00 00 00 00 00 03 44  61 6e 69 73 68 00 00 00  |.......Danish...|
  0016f6f0  00 00 00 00 00 00 00 00  00 00 00 02 44 75 74 63  |............Dutc|
  0016f700  68 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |h...............|
  0016f710  02 45 6e 67 6c 69 73 68  00 00 00 00 00 00 00 00  |.English........|
  0016f720  00 00 00 00 00 02 45 73  74 6f 6e 69 61 6e 00 00  |......Estonian..|
  0016f730  00 00 00 00 00 00 00 00  00 00 04 46 61 65 72 6f  |...........Faero|
  0016f740  65 73 65 00 00 00 00 00  00 00 00 00 00 00 00 03  |ese.............|
  0016f750  46 69 6e 6e 69 73 68 00  00 00 00 00 00 00 00 00  |Finnish.........|
  0016f760  00 00 00 00 02 46 72 65  6e 63 68 00 00 00 00 00  |.....French.....|
  0016f770  00 00 00 00 00 00 00 00  00 02 47 65 72 6d 61 6e  |..........German|
  0016f780  00 00 00 00 00 00 00 00  00 00 00 00 00 00 02 48  |...............H|
  0016f790  75 6e 67 61 72 69 61 6e  00 00 00 00 00 00 00 00  |ungarian........|

Which was probably compiled from this C code:

  struct language {
      char name[20];
      unsigned char flag; //codepage?
  }
  struct language languages[] = {
      {"Afrikaans", 2},
      {"Albania", 3},
      {"Basque", 2},
      {"Byelorussian", 6},
      {"Bulgarian", 6},
      {"Catalan", 2},
      //etc
  }

Also, if you look closely in ihp's firmware, you can see bitmaps of fonts.

ifp5xx-1.16	ihp120-1.16

I	Attachment	Action	Size	Date	Who	Comment
png	ifp-5xx-1.16_uncksm.png	manage	1204.6 K	15 Mar 2005 - 00:11	GeoffOakham	5xx-1.16, xored and unchecksumed
png	ifp-5xx-1.16_unkeyed.png	manage	1233.0 K	09 Mar 2005 - 01:50	GeoffOakham	ifp-5xx-1.16 firmware xored with "key"
png	ihp_120_1.16_plain.png	manage	1054.1 K	15 Mar 2005 - 00:44	GeoffOakham	ihp120-1.16 decrypted firmware
png	ihp_120_1.16_plainbak.png	manage	662.3 K	09 Mar 2005 - 01:52	GeoffOakham	ihp120-1.16 decrypted firmware