search

nervous-inhuman / tplink-tapo-c200-re

Reverse Engineering the TP-Link Tapo C200 camera
96 stars 12 forks source link

RTS3903N reset pin #3

Open hinxx opened 3 years ago

hinxx commented 3 years ago

Do you guys know which pin on the RTS3903N IC is the main reset pin? I'm trying to dump the SPI flash and the RTS3903N keep interfering with the SPI bus to the on board W25Q128 flash. The plan is to keep the RTS3903N in reset while providing the external power to the flash and reading out its contents.

DrmnSamoLiu commented 2 years ago

You don't need to dump the flash with hardware, you can do it from console: https://drmnsamoliu.github.io/flashdump.html

hinxx commented 2 years ago

I got no console on rx/tx marked pins. They seem to be wited to some motor driving signals.

DrmnSamoLiu commented 2 years ago

I think you are probing the wrong stuff, UART is on the circle pads with exact order of the label. My page have an image highlighting it :) https://drmnsamoliu.github.io/console.html

hinxx commented 2 years ago

I did not mention that I have a camera from another vendor that happens to use RTS3903 SoC. Sorry for not mentioning this earlier.