Instant Omni Pro 18 Toaster Oven and Air Fryer

From RECESSIM, A Reverse Engineering Community
Revision as of 05:22, 2 October 2024 by -.-6eau (talk | contribs) (gallery re-order)
Jump to navigation Jump to search

Recovered as part of unrelated e-waste pickup of Coffee Brew bits.

This particular device is some version of functional, with some dim display segments and plausibly faulty touch regions. Display/buttons communicate with the main power and relay board using something like serial communications around 1200bps. Reverse engineering the communication protocol to implement an alternative control interface. So far blinky and "singing" CW has been achieved using oscilloscope and logic analyzer dumps and then re-creating the signals using an ESP32-S3 running Micropython.

Note: RXD replaces TX, TXD replaces RX, reciprocal of Front Panel connection. 5 volt and Ground White/Yellow, data Black/Red (WTF).


MCU BF7515BM44

BF7515BM44-LJTX SPEC V1.5

Home appliance 8-bit general-purpose MCU

BF7515BM44-LJTX MCU General Description

Features  Core: 1T 8051 ○ Operating frequency: 12M, 8M, 4M, 1M,  Operating Voltage: 2.5V~5.5V ○ Clock error: ±1% @25℃, 5V  Operating Temperature: -40℃~+105℃ ○ Enhanced industrial grade, in line with JESD ±3% @-40℃ ~ +105℃, 5V  Memory (FLASH) ○ CODE: 63K Bytes  12-bit High-speed ADC ○ DATA: 1K Bytes +2*512 Bytes ○ Up to 42 analog input channels ○ SRAM: 256 Bytes(data)+4K Bytes(xdata) ○ Built-in reference voltage 4V ○ Support 2K/4K/8K BOOT function area  Interrupt  Clock Source, Reset ○ Two-level interrupt priority capablity ○ Internal low-speed clock LIRC: 32kHz ○ ADC, LCD, LED, INT0/1/2/3, LVDT , industrial grade reliability certification standards Clock error: ±15%@25℃, 5V Timer0/1/2/3, UART0/1/2, IIC, WDT, SPI ±35%@ -40℃ ~ +105℃, 5V interrupt ○ Internal high-speed RC oscillator: 1MHz  Timer ○ External crystal oscillator: 32768Hz ○ 16-bit Timer0/1/3, 32-bit Timer2 ○ 8 resets, brown-out voltage (Bor): 1.9V ○ Timer2 clock source: internal low-speed clock ○ Low voltage detection: 2.7V/3.0V/3.8V  IO ○ Watchdog timer, overflow time 18ms to 2.304s ○ Built-in pull-up resistor 30k  LED Driver ○ High current sink port (PB0~PB7) ○ Support 7*8, 6*7, 5*6, 4*5 dot matrix driver ○ Support IO function remapping ○ Support up to 8 COM x 8 SEG matrix driver ○ IO ports support external interrupt function,  LCD Driver INT0~3 (rising-edge, falling-edge, double-edge), ○ Support 4*16, 8*16, 4*20, 5*19, 6*18 INT4(rising-edge, falling-edge)  Low power management  Communication Module ○ Idle mode 0 and Idle mode 1 ○ 3*UART communication, support IO mapping ○ Idle mode 1, power consumption 26uA@5V ○ 1*IIC, support 100/400kHz, support IO mapping  With JTAG debugging emulation interface ○ 1*SPI, support up to 2MHz  Package  16-bit PWM ○ PWM0/1 both support 3-channel output, share ○ LQFP44 LIRC 32kHz or XTAL 32768Hz period and duty cycle ○ PWM2 support 1 channel output ○ PWM3 support 1 channel output Datasheet