Difference between revisions of "Instant Omni Pro 18 Toaster Oven and Air Fryer"

From RECESSIM, A Reverse Engineering Community
Jump to navigation Jump to search
m (Gallery Dump)
m (gallery re-order)
Line 23: Line 23:
 
Instant Omni Pro Left Side Uncovered.jpg
 
Instant Omni Pro Left Side Uncovered.jpg
 
Instant Omni Pro Left Side Uncovered .jpg  
 
Instant Omni Pro Left Side Uncovered .jpg  
 
 
Instant Omni Pro Locking Spade Connector Back.jpg
 
Instant Omni Pro Locking Spade Connector Back.jpg
 
Instant Omni Pro Locking Spade Connector Front.jpg
 
Instant Omni Pro Locking Spade Connector Front.jpg
 +
 
Instant Omni Pro EK-180X10C-US-P PCB Top.jpg
 
Instant Omni Pro EK-180X10C-US-P PCB Top.jpg
 +
Instant Omni Pro EK-180X10C-US-P PCB Relay Board Data Connection.jpg
 
Instant Omni Pro EK-180X10C-US-P PCB Bottom.jpg
 
Instant Omni Pro EK-180X10C-US-P PCB Bottom.jpg
 +
Instant Omni Pro SH79F1612AM Relay Board MCU.jpg
  
 
+
Instant Omni Pro EK-180X10A-PRO PCB.jpg
 +
Instant Omni Pro EK-180X10A-PRO BF7615BM44-LJTX WTC5 MCU.jpg
 
Instant Omni Pro EK-180X10A-PRO MBI5124 U5 16 Channel Constant Current IC.jpg
 
Instant Omni Pro EK-180X10A-PRO MBI5124 U5 16 Channel Constant Current IC.jpg
 
Instant Omni Pro EK-180X10A-PRO Flat Flex Connector.jpg
 
Instant Omni Pro EK-180X10A-PRO Flat Flex Connector.jpg
  
 +
Instant Omni Pro Tek Oscilloscope Message 10ms.jpg
 +
Hacker Dojo - Tektronix TDS1001B Oscilloscope USB Verify.jpg
 +
Instant Omni Pro TX Tek 50ms.jpg
 +
Instant Omni Pro TX Tek 10ms Single Message.jpg
 +
Instant Omni Pro TX Tek 1ms - 11110 - 5 Bits 8ms Measurement.jpg
 +
Instant Omni Pro TX Tek 250us - 890us Single High Square Wave Measurement.jpg
 +
Instant Omni Pro TX-RX Tek 10ms.jpg
  
Instant Omni Pro EK-180X10A-PRO BF7615BM44-LJTX WTC5 MCU.jpg
+
Instant Omni Pro Improvised Double FTDI Serial-USB Sniffer.jpg
 +
Instant Omni Pro Improvised Double FTDI Serial-USB Sniffer Connected.jpg
 
Instant Omni Pro Improvised Double FTDI Serial-USB Sniffer Dump.jpg
 
Instant Omni Pro Improvised Double FTDI Serial-USB Sniffer Dump.jpg
Instant Omni Pro Improvised Double FTDI Serial-USB Sniffer Connected.jpg
 
Instant Omni Pro Improvised Double FTDI Serial-USB Sniffer.jpg
 
 
Instant Omni Pro EK-180X10C-US-P PCB Relay Board Data Connection.jpg
 
Instant Omni Pro SH79F1612AM Relay Board MCU.jpg
 
  
 +
Hacker Dojo - Logic 8 saleae Analyzer.jpg
 +
Instant Omni Pro EK-180X10A-PRO PCB TX-RX-GND Logic Analyzer Connected.jpg
 
Instant Omni Pro EK-180X10A-PRO PCB VCC-GND-TX-RX Tap Close.jpg
 
Instant Omni Pro EK-180X10A-PRO PCB VCC-GND-TX-RX Tap Close.jpg
Instant Omni Pro EK-180X10A-PRO PCB TX-RX-GND Logic Analyzer Connected.jpg
+
Instant Omni Pro EK-180X10A-PRO On On Off Off 4 Aligned Capture Samples.png
  
  
Instant Omni Pro Tek Oscilloscope Message 10ms.jpg
+
Instant Omni Pro Micropython Code Messages.png
Hacker Dojo - Tektronix TDS1001B Oscilloscope USB Verify.jpg
+
Whirylbird ESP-32-S3-WROOM-2 32R8V - 0 RST GND TX RX VCC Header.jpg
 +
Instant Omni Pro Tap VCC-GND-TX-RX Wiring.jpg
 +
Instant Omni Pro Tap Wiring Close.jpg
  
 +
Instant Omni Pro Test Setup Level Shifter Testing.jpg
 +
Instant Omni Pro ESP32 Tx Yellow Toaster Tx Purple.jpg
 +
Instant Omni Pro SIGNLENT 500us ESP32 Tx 3v3.jpg
 +
Instant Omni Pro SIGNLENT 500us ESP32 Tx 5v Level Shift.jpg
  
Instant Omni Pro Tap Wiring Close.jpg
 
Instant Omni Pro Tap VCC-GND-TX-RX Wiring.jpg
 
  
 +
Instant Omni Pro Back To School FARS.jpg
 +
Instant Omni Pro ESP-32-S3 Breadboard Level Shifter.jpg
  
Instant Omni Pro EK-180X10A-PRO On On Off Off 4 Aligned Capture Samples.png
+
</gallery>
Hacker Dojo - Logic 8 saleae Analyzer.jpg
 
Instant Omni Pro TX Tek 1ms - 11110 - 5 Bits 8ms Measurement.jpg
 
Instant Omni Pro TX Tek 250us - 890us Single High Square Wave Measurement.jpg
 
Instant Omni Pro TX Tek 10ms Single Message.jpg
 
Instant Omni Pro TX Tek 50ms.jpg
 
Instant Omni Pro TX-RX Tek 10ms.jpg
 
  
Whirylbird ESP-32-S3-WROOM-2 32R8V - 0 RST GND TX RX VCC Header.jpg
 
  
 +
=== MCU BF7515BM44 ===
  
Instant Omni Pro ESP-32-S3 Breadboard Level Shifter.jpg
+
BF7515BM44-LJTX SPEC V1.5
Instant Omni Pro Test Setup Level Shifter Testing.jpg
 
Instant Omni Pro SIGNLENT 500us ESP32 Tx 5v Level Shift.jpg
 
Instant Omni Pro SIGNLENT 500us ESP32 Tx 3v3.jpg
 
Instant Omni Pro ESP32 Tx Yellow Toaster Tx Purple.jpg
 
Instant Omni Pro Micropython Code Messages.png
 
 
 
  
 +
Home appliance 8-bit general-purpose MCU
  
Instant Omni Pro Back To School FARS.jpg
+
BF7515BM44-LJTX MCU General Description
</gallery>
+
Features
 +
 Core: 1T 8051 ○ Operating frequency: 12M, 8M, 4M, 1M,  Operating Voltage: 2.5V~5.5V
 +
○ Clock error: ±1% @25℃, 5V  Operating Temperature: -40℃~+105℃
 +
○ Enhanced industrial grade, in line with JESD
 +
±3% @-40℃ ~ +105℃, 5V
 +
 Memory (FLASH) ○ CODE: 63K Bytes  12-bit High-speed ADC
 +
○ DATA: 1K Bytes +2*512 Bytes ○ Up to 42 analog input channels
 +
○ SRAM: 256 Bytes(data)+4K Bytes(xdata) ○ Built-in reference voltage 4V
 +
○ Support 2K/4K/8K BOOT function area  Interrupt
 +
 Clock Source, Reset ○ Two-level interrupt priority capablity
 +
○ Internal low-speed clock LIRC: 32kHz ○ ADC, LCD, LED, INT0/1/2/3, LVDT ,
 +
industrial grade reliability certification standards
 +
Clock error: ±15%@25℃, 5V
 +
Timer0/1/2/3, UART0/1/2, IIC, WDT, SPI
 +
±35%@ -40℃ ~ +105℃, 5V
 +
interrupt
 +
○ Internal high-speed RC oscillator: 1MHz  Timer
 +
○ External crystal oscillator: 32768Hz ○ 16-bit Timer0/1/3, 32-bit Timer2
 +
○ 8 resets, brown-out voltage (Bor): 1.9V ○ Timer2 clock source: internal low-speed clock
 +
○ Low voltage detection: 2.7V/3.0V/3.8V  IO ○ Watchdog timer, overflow time 18ms to 2.304s
 +
○ Built-in pull-up resistor 30k  LED Driver
 +
○ High current sink port (PB0~PB7) ○ Support 7*8, 6*7, 5*6, 4*5 dot matrix driver
 +
○ Support IO function remapping ○ Support up to 8 COM x 8 SEG matrix driver
 +
○ IO ports support external interrupt function,  LCD Driver
 +
INT0~3 (rising-edge, falling-edge, double-edge), ○ Support 4*16, 8*16, 4*20, 5*19, 6*18
 +
INT4(rising-edge, falling-edge)  Low power management
 +
 Communication Module ○ Idle mode 0 and Idle mode 1
 +
○ 3*UART communication, support IO mapping ○ Idle mode 1, power consumption 26uA@5V
 +
○ 1*IIC, support 100/400kHz, support IO mapping  With JTAG debugging emulation interface
 +
○ 1*SPI, support up to 2MHz  Package
 +
 16-bit PWM ○ PWM0/1 both support 3-channel output, share ○ LQFP44
 +
LIRC 32kHz or XTAL 32768Hz
 +
period and duty cycle
 +
○ PWM2 support 1 channel output
 +
○ PWM3 support 1 channel output
 +
Datasheet

Revision as of 05:22, 2 October 2024

Recovered as part of unrelated e-waste pickup of Coffee Brew bits.

This particular device is some version of functional, with some dim display segments and plausibly faulty touch regions. Display/buttons communicate with the main power and relay board using something like serial communications around 1200bps. Reverse engineering the communication protocol to implement an alternative control interface. So far blinky and "singing" CW has been achieved using oscilloscope and logic analyzer dumps and then re-creating the signals using an ESP32-S3 running Micropython.

Note: RXD replaces TX, TXD replaces RX, reciprocal of Front Panel connection. 5 volt and Ground White/Yellow, data Black/Red (WTF).


MCU BF7515BM44

BF7515BM44-LJTX SPEC V1.5

Home appliance 8-bit general-purpose MCU

BF7515BM44-LJTX MCU General Description

Features  Core: 1T 8051 ○ Operating frequency: 12M, 8M, 4M, 1M,  Operating Voltage: 2.5V~5.5V ○ Clock error: ±1% @25℃, 5V  Operating Temperature: -40℃~+105℃ ○ Enhanced industrial grade, in line with JESD ±3% @-40℃ ~ +105℃, 5V  Memory (FLASH) ○ CODE: 63K Bytes  12-bit High-speed ADC ○ DATA: 1K Bytes +2*512 Bytes ○ Up to 42 analog input channels ○ SRAM: 256 Bytes(data)+4K Bytes(xdata) ○ Built-in reference voltage 4V ○ Support 2K/4K/8K BOOT function area  Interrupt  Clock Source, Reset ○ Two-level interrupt priority capablity ○ Internal low-speed clock LIRC: 32kHz ○ ADC, LCD, LED, INT0/1/2/3, LVDT , industrial grade reliability certification standards Clock error: ±15%@25℃, 5V Timer0/1/2/3, UART0/1/2, IIC, WDT, SPI ±35%@ -40℃ ~ +105℃, 5V interrupt ○ Internal high-speed RC oscillator: 1MHz  Timer ○ External crystal oscillator: 32768Hz ○ 16-bit Timer0/1/3, 32-bit Timer2 ○ 8 resets, brown-out voltage (Bor): 1.9V ○ Timer2 clock source: internal low-speed clock ○ Low voltage detection: 2.7V/3.0V/3.8V  IO ○ Watchdog timer, overflow time 18ms to 2.304s ○ Built-in pull-up resistor 30k  LED Driver ○ High current sink port (PB0~PB7) ○ Support 7*8, 6*7, 5*6, 4*5 dot matrix driver ○ Support IO function remapping ○ Support up to 8 COM x 8 SEG matrix driver ○ IO ports support external interrupt function,  LCD Driver INT0~3 (rising-edge, falling-edge, double-edge), ○ Support 4*16, 8*16, 4*20, 5*19, 6*18 INT4(rising-edge, falling-edge)  Low power management  Communication Module ○ Idle mode 0 and Idle mode 1 ○ 3*UART communication, support IO mapping ○ Idle mode 1, power consumption 26uA@5V ○ 1*IIC, support 100/400kHz, support IO mapping  With JTAG debugging emulation interface ○ 1*SPI, support up to 2MHz  Package  16-bit PWM ○ PWM0/1 both support 3-channel output, share ○ LQFP44 LIRC 32kHz or XTAL 32768Hz period and duty cycle ○ PWM2 support 1 channel output ○ PWM3 support 1 channel output Datasheet