search

pvvx / ATC_MiThermometer

Custom firmware for the Xiaomi Thermometers and Telink Flasher
https://github.com/pvvx/pvvx.github.io/tree/master/ATC_MiThermometer
Other
2.99k stars 208 forks source link

CGD1 #536

Open redblue-pkt opened 2 months ago

redblue-pkt commented 2 months ago

I’m currently working on a project that requires extracting or dumping OTA (Over-the-Air) firmware from a device CGD1. I've reviewed some documentation and attempted various methods, but I’m still facing challenges with the process. Could someone please provide detailed instructions or recommend tools and techniques for dumping OTA firmware?

pvvx commented 2 months ago

It is possible to read the firmware using a programmer. OTA function does not support reading program dump.

For example, CGD1 thermometers have different chipsets: TLSR825x or nRF52xxx

For TLSR825x: With OTA you can download a new program that will not erase the previous code. Using this new program, read the old OTA program. Then restore the pointer to the start of the old OTA version. https://github.com/pvvx/TLSR825x_OTA_Flash_Hacker

What chipset does CGD1 have?