LMS-6 Radiosonde: Difference between revisions
Reverse engineer more firmware locations |
Upload audio samples |
||
| Line 29: | Line 29: | ||
[[File:Sonde_label.png|none|thumb|LMS6 Label possibly showing calibration factors.]] | [[File:Sonde_label.png|none|thumb|LMS6 Label possibly showing calibration factors.]] | ||
== Audio Samples == | |||
<br /> | <br /> | ||
{| class="wikitable" | |||
|+ | |||
!Frequency | |||
!Audio file | |||
|- | |||
|400 MHz | |||
|[[File:400MHz LMS-6 Sample.mp3|thumb]] | |||
|- | |||
|1680 MHz | |||
|[[File:1680MHz LMS-6 Sample.mp3|thumb]] | |||
|} | |||
==Disassembly== | ==Disassembly== | ||
| Line 736: | Line 746: | ||
Vector table and other interesting addresses: | Vector table and other interesting addresses: | ||
* 0xE003 - Serial number, at least 3 bytes. Ex: 0x7C6A34 is 8153652 big-endian. | *0xE003 - Serial number, at least 3 bytes. Ex: 0x7C6A34 is 8153652 big-endian. | ||
* 0xE100 to 0xE136 - something that changes between units. Maybe calibration factors? Checksums? | *0xE100 to 0xE136 - something that changes between units. Maybe calibration factors? Checksums? | ||
* 0xFF00 - software string. Ex: "May 17, 2017 - V1.45" | *0xFF00 - software string. Ex: "May 17, 2017 - V1.45" | ||
* 0xFFE4 - AVD vector | *0xFFE4 - AVD vector | ||
* 0xFFE6 - SCI / UART vector | *0xFFE6 - SCI / UART vector | ||
* 0xFFE8 - Timer B vector | *0xFFE8 - Timer B vector | ||
* 0xFFEA - Timer A vector | *0xFFEA - Timer A vector | ||
* 0xFFEC - SPI vector | *0xFFEC - SPI vector | ||
* 0xFFEE - vector unused on this chip | *0xFFEE - vector unused on this chip | ||
* 0xFFF0 - EI3 vector | *0xFFF0 - EI3 vector | ||
* 0xFFF2 - EI2 vector | *0xFFF2 - EI2 vector | ||
* 0xFFF4 - EI1 vector | *0xFFF4 - EI1 vector | ||
* 0xFFF6 - EI0 vector | *0xFFF6 - EI0 vector | ||
* 0xFFF8 - MCC/RTC vector | *0xFFF8 - MCC/RTC vector | ||
* 0xFFFA - vector unused on this chip | *0xFFFA - vector unused on this chip | ||
* 0xFFFC - Trap vector | *0xFFFC - Trap vector | ||
* 0xFFFE - Reset vector | *0xFFFE - Reset vector | ||
IDA Pro uses CPU type ST7->ST72324J6 during loading, and can load the Intel Hex file produced by the programmer directly for analysis. | IDA Pro uses CPU type ST7->ST72324J6 during loading, and can load the Intel Hex file produced by the programmer directly for analysis. | ||