Post #2020823

Another month, another shitty behavior from Bambu Lab... and at this point they're just *asking* to get hacked (I guess they haven't heard of the "don't piss off the hackers" rule). Apparently they sent a DMCA to someone working on cloud integration in OrcaSlicer. Not something I would use, but it just... pisses me off (especially because I'm waiting for A1 to arrive myself). Started looking into it, based on pictures I see: Mainboard: - Spintrol SPC2168 (Dual-core Cortex-M4) - ESP32-S3 - GigaDevice 25Q128ESIG - 4x stepper motor controller under the heatsink? TH board: - Spintrol 50KB (Cortex-M4) - 2x ZHONGKEWEI AT8236 Looks to be similar to other models made by them, as documented under: https://github.com/opensourcemanufacturing/OpenBL/ While ARM MCUs have OTP, worst-case they can easily be replaced with STM32 equivalent thanks to LQFP packages. Firmware on bambu's website looks to be encrypted (lol, lmao), but dumping it from device in hand (when I'll receive my printer) should solve that problem. Those files also are self-describing if we look at the board and amount of flash space available: - AMS: Didn't look into it (and didn't buy one), but it's under 100KB so AMS likely also has a SPC1168APE MCU in it - AP-ES3: Juicy, easy target. It's 4.9MB in size, so it must live in the SPI flash and store firmware that ESP32-S3 is running. - AP-HMS: Based on image files in the folder and 700KB size, this is likely firmware that SPC2168 is running and controls the display in front of the device. - MC: Purely a speculation, maybe for the built-in camera? - N3F/N3S/N2S: No idea, possibly an NFC chip? - TH: 50KB, running on SPC1168APE Pinout can be beeped-out, all you need are GPIOs for motor controllers anyway. Display would be a bit trickier, but oscilloscope solves that problem just fine. Besides, the MCU doesn't have MIPI or anything of sort so it's likely just an SPI for display and I2C/SPI for touchscreen :akko_shrug: