HTI HT-H8 has a HT-301 inside

[JimKnopf]

I didn't found something useful about this topic. So i will post it here.

Recently i bought a HTI HT-H8 and was a bit disappointed about the minimum focus distance. I opend the HT-H8, which was a bit tricky because i couldn't find a teardown video or images.

Inside is something like an Android board i guess and to my surprise a camera modul that looks exactly like a HT-301. I found an image in the HT-301 thread https://www.eevblog.com/forum/thermal-imaging/hti-ht-301-384-x-288/100/ from @RBsonic and it looks exactly like my one.

There seems to be an UART connector. I will see what options are there. Maybe a console.

[JimKnopf]

Some more images.

[JimKnopf]

It is a UART port. As you can see in the image, 8,7µs (8,68µs but rounded in this view), thats 115200 baud. Bootlog is attached. 

[JimKnopf]

I adjusted the HT-301 focus ring to min. position (thread out to maximum) and can now go as near as 6 cm to my target board. I use it for fault finding on boards. Thats much better than the previous (original) 24 cm. 

[JimKnopf]

Today arrived a Infiray P2 Pro with makro lens. Here's a comparison of both devices after adjusting the HTI HT-H8 to 8 cm focus distance. The P2 Pro has 4 cm focus distance with the makro lense (is it a lense?). The P2 images are screenshots i captured in TC View, running in a VM. Autofocus seems not working in this Windows Software. The HTI images are straight from the camera.

[JimKnopf]

Maybe the images are not that sharp. Here is a chip list from mainboard:

Allwinner     A33                           CPU, ARMv7
X-Powers     AXP221                     PMIC
Microchip     M2S025-FCSG325      FPGA
SKHynix      H5TQ4G83CFR           4Gb / 512 MB DDR3 SDRAM
Samsung     KLMAG1JETD-B041    8GB eMMC
Genesis       GL850G                    USB Controller
Realtek        RTL8188ETV             Wifi SoC

I attach the printenv and the command list from sunxi u-boot shell.

First time i have to deal with sunxi u-boot. Command list is very limited.
I installed the sunxi-tools to use their FEL mode. I have to dig into the sunxi tools to read the firmware/emmc.

[JimKnopf]

I'm stuck at crosscompiling sunxi u-boot.

There is a interesting ht-a8 binary file located in the root dir.
In the boot directory are some interesting files:
magic.bin
test_config.bin
test_config.fex

Unfortunally there is no ssh and no nc installed. But since the device has wifi and a webserver, i have copied the files in the webserver folder and grabbed the files using wget.

From what i can see, the ht-a8 file show me interesting data.
The files are crosscompiled with linaro toolchain:
gcc-linaro-arm-linux-gnueabi-2012.03-20120326_linux_Seek.

The device seems to have no SPI flash memory. Maybe the ht-a8 is already the firmware file?

@DavidAlfa @tv84 @pcprogrammer I could use a little support from experienced sunxi-fel mode fighters.

Should i try the linaro toolchain compile u-boot?

I attach the files. Like always, remove the .txt from the files, replace the last underscore with a dot.

[ArsenioDev]

What program are you using there? it seems vaguely familiar

[JimKnopf]

@ArsenioDev I opened the files in Malcat (usually i use ImHex).

[JimKnopf]

I attach a complete file list (ls -laR). I found some interesting files in /dragonboard/bin.
There is a file called core. After executing, the display moved in something like a testmode.

Seems there is no way to boot into FEL mode from command line when the device booted regular. Only from u-boot i can run efex to let the device start in FEL mode. I tested all possible key combinations. No FEL mode by keyboard. But interestingly, when pressing a key, you see the executed commands in the shell.