Differences

This shows you the differences between two versions of the page.

--- disassembled_devices:parkwaechter [2025/07/05 03:30] – admin
+++ disassembled_devices:parkwaechter [2025/07/24 17:33] (current) – [Next Steps] admin
@@ Line 5: / Line 5: @@
 ~~
-====== Parkwächter disassembly and investigation ======
+====== Parkwächter V1 disassembly and investigation ======
 In Germany it is allowed to use electronic parking discs if it has an E24 number. \\
-As the plastic casing has melted in summer (they use thermoplastics, d'oh!), I did not even have to open it, it literally opened itself. I assumed there would be an ASIC inside, but be astonished and read on! \\
+As the plastic casing of Parkwächter V1 (Art.-Nr.: AD286) has melted in summer (they use thermoplastics, d'oh!), I did not even have to open it, it literally opened itself. I assumed there would be an ASIC inside, but be astonished and read on! \\
-Althogh it is a parking disc for the German market, I still like to do my write-ups in english. Use [[https://translate.google.com/translate?hl=en&sl=auto&tl=de&u=https://super-se.de/dokuwiki/disassembled_devices:parkwaechter|Google Translate]] if you want.
+Althogh it is a parking disc for the German market, I still like to do my write-ups in english. Use [[https://translate.google.com/translate?hl=en&sl=auto&tl=de&u=https://super-se.de/dokuwiki/disassembled_devices:parkwaechter|Google Translate]] if you want. \\
+Edit: The seller (and at the same time the manufacturer) has sent me a new upper case in the original box. \\
 ===== Info =====
-Warning: messing with certified electronics is prohibited! Do not alter hard- or software - it is illegal. Just don't do it. \\
+⚠⚠️WARNING: messing with certified electronics is prohibited! Do not alter hard- or software - it is illegal. Just don't do it. \\
-This is for educational purposes only! \\
+This look inside for educational purposes only! \\
+␆❗ If you like car stuff, also see [[disassembled_devices:adac_drivedot|disassembly of ADAC DriveDot]] and [[projects:rlink2#gadgets_you_can_get_for_your_car|Gadgets you can get for your car]]. \\
 ===== Pictures =====
+{{gallery>:disassembly:parkwaechter}}
 ===== Hardware =====
@@ Line 28: / Line 29: @@
 Surprisingly there is also a pin header socket with silkscreen labeling (nice!). \\
-What's ugly is the soldering tin junk splattered on the PCB next to the front LCD joints. \\
+What's ugly is the soldering tin junk splattered on the PCB next to the front LCD joints. Also there is flux all over. \\
 It is really ignorant to use thermoplastics for the case which sits right behind the windshield frizzling in the sun. The four magnets are there to hold a blue plastic plate which is stuck to the windshield - you cannot see it in the pictures as it is still inside the car. \\
+==== Pinout Header ====
+The silkscreen labels of JTAG-header read: \\
-===== Lauchpad programmer =====
+^Pin# ^ Name   ^ description^ ^Pin# ^ Name   ^ description^
-We want to connect a debugger to connect to the pin header of MSP430. I used a Lauchpad programmer dev-board collecting dust. \\
+|4| TEST | Enter programming mode with RST \\ / SBWTCK in Spy-Bi-Wire (SBW) mode | |8| GND | Ground |
+|3| TDI | Test Data In (4-wire JTAG) |  |7| TDO | Test Data Out (4-wire JTAG)  |
-<insert picture> \\
+|2| TCK | Test Clock (4-wire JTAG) | |6| TMS | Test Mode Select (4-wire JTAG) |
+|1| 3V | VCC voltage | |5|RST | Reset (active-low) / SBWTDIO (data line) in SBW mode |
-==== Output ====
-When connecting, we get the following initial output: \\
-<hidden Show ouput>
-<code>
-output
-</code>
-</hidden> \\
-==== Dumping ====
+===== Next Steps =====
-The lock bits are set to:\\
-<code>
-output
-</code>
-Glitching?\\
+Due to lack of time, I had to stop here. Next steps could be: \\
-Dump\\
-==== Accelerometer ====
+- Connect Lauchpad programmer to header \\
-The Accelerometer comes in IC package -16. \\
+- Dumping Firmware: check lock-bits -> Glitching? -> Dump! \\
+- send I2C "WHO_AM_I" request to accelerometer (LGA-16 package IC) \\
-<insert picture>
+- Create GPIO-Pinout of MSP430 \\
-Its markings are:\\
++ LCD front and back pinout \\
-<insert marking text> \\
-When sending I2C "WHO_AM_I" request, we get: \\
-<code>
-ID
-</code>