-
Amazon Dash UART output
02/26/2016 at 00:41 • 0 commentsHere's the serial UART output of an Amazon Dash.
Oft DVT_1.0-Oft v0.9.119 Oft SW build on Oft Rev05 HW platform, custom version Mar 9 2015 19:50:48 Registration failure=0 RegGetFailure = 0 DumpRTCRegs: S=01000000 W=00000000 A=00000000 P=00000000 F=00000000 D=02000000 C=00000101 T=00000000 kVersion: 90011920 PWR flags: SB=0 LPWR=0 WWDG=0 IWDG=0 SFT=0 POR=1 PIN=1 BOR=1 Getting time in RTC_Init: GetRTCDateTime: 2088656913 Thu Feb 1 00:00:17 1900 MAC addr:tag = 0xbb len = 0x08 val = f0 27 2d 9b fb da Serial:tag = 0xcc len = 0x12 val = 47 30 33 30 47 30 30 35 35 34 34 32 33 35 37 35 Key:tag = 0xaa len = 0x16 val = 4a 47 4d 49 53 4e 46 5a 32 4b 47 4e 59 51 50 53 32 46 33 31 post gBATTERYPercentage = (0%) [223] VBAT = 0.223V (0%) BOOT BATTERY CHECK : 0% Low battery! 0% < 25% DEAD BATTERY: 0% < 5% Shutting down power shutdown called Failed transactions = 0 iTOC_Pending_Rd = 0, iTOC_Next_Wr = 0Failed transactions = 0 Turning off power via latch switch SEC_RetrToken returns bHaveRegToken 0 iTOC_Pending_Rd = 32768, iTOC_Next_Wr = 32768Failed transactions = 0 SyncTOC: rd 0x8000; wr 0x8000; tid 0x0; eod 0x0 while loop in TRANS_ThreaTimbeginbegin while true loop gUpTimeLimit 32000 **Device not registered shutdown called Failed transactions = 0 iTOC_Pending_Rd = 32768, iTOC_Next_Wr = 32768Failed transactions = 0 Turning off power via latch switch
-
Amazon Dash donor 2
02/26/2016 at 00:36 • 0 commentsWith the pads gone on the first donor due rookie maneuvers, we've moved onto the second donor. A Glad button.
Before:
After:
Moved down to 30AWG, used solder flux, and a brand new tip on the iron. The donor is on the operating table connected to a 3.3V eBay regulator, Adafruit 3.3V FTDI UART, and an eBay ST-Link V2.
The ST-Link V2 supplies power as well, but this is good enough for some poking around.
-
Amazon Dash
02/25/2016 at 01:37 • 1 commentNothing to see here. An Amazon Dash splayed out in the spirit of dekuNukem's git repository.
I'm mildly interested in hooking this up to my ST-Link V2, because "hacking" it with a Node.js or python script running on a Raspberry Pi is kind of played out... and cheating.
After this picture was taken, the 26AWG wiring ripped the SWCLK pad clean off. A bit of Googling shows that a AXE610124 fits the connector header to the right of the pads. I found continuity between SWDIO and one of the pins, so maybe it'll work. I've ordered a few from Digi-Key and we'll see what happens...
-
WiFiMCU bootloader
02/23/2016 at 22:34 • 0 commentsWiFiMCU bootloader displays a helpful memory map.
-
JTAG/SWD EMW3165 pinout
02/23/2016 at 15:01 • 0 commentsJTAG/SWD pin mapping for ST-Link V2 to EMW3165.
ST-LINK V2 EMW3165/WiFiMCU SWDIO D6 GND GND SWCLK D5 5.0V VIN -
EMW3165/WiFiMCU
02/23/2016 at 14:48 • 0 commentseBay Mini ST-Link v2 knockoff and an EMW3165/WiFiMCU. The adventure begins by trying to back-up the WiFiMCU's firmware with texane's st-link utility. Curiously, the flash dump is short and sequential flash dumps don't have matching output. 60-64 bytes is zeroed out randomly throughout the dumps.
OpenOCD with gdb remote appear to dump just fine. Several pull requests later, and upgrading the ST-Link firmware to V2J24S4 resolves most of the problems. I can get mostly consistent output from the ST-Link when dumping the flash from 0x8000000 to 0x8080000 with only 2 corruptions out of 7500.