7
edits
Changes
no edit summary
|}
=== Modbus Protocol Investigation ===
https://diysolarforum.com/threads/epever-tracer-modbus-digging-deeper.108305/
=== Decrypting Firmware Update (.prg) Files ===
Bytes 18 thru the end of the file can be decrypted with AES CBC IV=[all zeroes] keys below. Pad with pkcs7 16 byte block size.
'''Key for Larger 50A - 100A units'''
:: <code>54726163 72414e43 0cdd527b 05c16b01 ff17cd6f 8c1e3e09 cf1f0c78 87ef8aec</code>
'''Key for Smaller 10A - 40A units'''
:: <code>54726952 6f6e2eda 0cdd527b 05c16b01 ff17cd6f 8c1e3e09 cf1f0c78 87ef8aec</code>
https://gist.github.com/symbioquine/88e7148b4df143822f3b0d565619f80b
=== Dumping Firmware ===
Works with https://github.com/racerxdl/stm32f0-pico-dump (See SWD pins in top table)
=== Unlocking SWD ===
<code>
</code>
:: Power cycle & reconnect st-link
<code>
</code>
=== Dumping Running RAM ===
<code>
resume
</code>
=== Protocol Documentation PDFs ===
{| class="wikitable"
|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329342 1733_modbus_protocol.pdf]
|V1.1
|FENG
|2013-11-25
|234.2 KB
|86c05193b7f6e1945eb67616c6658366ef4033b110f506a33c1eeef03b0eafbf
|-
|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329340 EpeverBSeriesControllerProtocolV2.3.pdf]
|V2.3
|sunb
|2015-10-22
|374.8 KB
|a3fccf914928118def85223482e3091956d046810a01c20152006e6f68c61b70
|-
|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329339 MODBUS-Protocol-v25.pdf]
|V2.5
|sunb
|2018-09-27
|847.6 KB
|d0f9f08be06b5125134c3be24d9acc1430dcd4e9e82478df68d451489aaa77fb
|-
|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329341 A or BSeriesControllerProtocolv2.6.pdf]
|V2.6
|sunb
|2021-12-21
|711.9 KB
|3c2cf42f5f440d06db36280d41f0a8dd632da32396b820529db76eef53fd4351
|}