LeoDJ / Storm2-RevEng

Reverse engineering of the Shargeek Storm2 powerbank
12 stars 2 forks source link

How to know the model of Naxim chip? #1

Open HEYJXC opened 3 months ago

HEYJXC commented 3 months ago

I have a second-generation power bank, and its main control chip has been replaced with Naxim NXMCB6 AOC 18220F 19181010C 2020 B (still a 64 pin chip, but packaged in lqfp64-7x7mm). My downloader can read and write to the 2020A chip (select stm32f103xB) normally, but when connecting to the 2020B chip, it will prompt that the chip model does not match. May I ask if there is any way to find the corresponding STM chip model for Naxim chips? Thank you very much!

LeoDJ commented 1 month ago

I have used the following tutorial to first find out the chip version: https://wrongbaud.github.io/posts/stm-xbox-jtag/#openocd
(Specifically the section with the mdw OpenOCD commands was interesting)

Sadly I don't have a (broken) Storm2 with 2020B, only a working one which I don't want to tear apart currently ^^"

But here are my raw notes on what I did to identify the 2020A chip, maybe it helps:

AP ID register 0x24770011

Type is MEM-AP AHB3

MEM-AP BASE 0xe00ff003

Valid ROM table present

Component base address 0xe00ff000 Peripheral ID 0x04000bb4c3 Designer is 0x4bb, ARM Ltd Part is 0x4c3, Cortex-M3 ROM (ROM Table) Component class is 0x1, ROM table MEMTYPE system memory present on bus

mdw 0x1FFFF7E8 3 0x1ffff7e8: 0107283e 4d35122a 004e4b31 => ID register of STM32F1 mdw 0x1ffff7e0 1 0x1ffff7e0: ffff0080 => 128K Flash size mdw 0xe0042000 1 0xe0042000: 20036410 => DBGMCU_IDCODE -> some STM32F1 clone (medium-density Rev 1-3/x/y)

=> STM32F103xB Rev1 has 64 pins => STM32F103RBT6

As you might've guessed, I currently don't have the time / energy to make more progress on this project. But maybe, I'll pick it up again in the future, who knows.