Hello everybody, I'm now majorly pissed on some Chinese seller and I've decided to pay them a bit back
, so I can assist you in reversing the original firmware if you manage to get and/or building an open source replacement, in the process also publishing the schematics, if major brands are publishing the detailed schematics of extraordinary expensive instruments, this guys should be doing it as well.
I wanted such a cheap generator, but I wanted it to work reliably and probably I would have anyway reversed the communication protocol, but now I really want to do it.
While my device it's on its way, could somebody tell the exact version of the STM chip used, and if it already hooked a debugger to verify the actual protection level.
If it's level 1, then it's feasible to try to get the firmware image, if it's level 2, then the FP schematic has to be reversed and some new chip has to be soldered (if there isn't any way to fully erase it).
But in the end, most likely a lot of these damaged devices will appear on fleabay so it is worth having a firmware ready.
Please publish here or kindly PM me the draft schematics or any other information to get me started until my device arrives.
Cheers,
DC1MC
I'm guessing the waveforms are stored in the internal flash of the Micro. Most likely the same place that hold the data for the UI.
Btw. I doubt reprogramming the Micro is an option. The Presentation by the Fraunhofer Institute about the STM32F0 flash-security states that RPD-Level 2 disables the SWD-Functionality permanently. I haven't done any further research, but I'm guessing that disabling the SWD-Interface also disables any possibility to program the chip with an ST-LINK programmer.
If the chip is still programmable, I think the best way to get defective units working again, unless Feeltech is replacing whole front-panel assemblies, is to reverse engineer the system and reprogram the chip with free software.