Differences

This shows you the differences between two versions of the page.

--- disassembled_devices:parkwaechter [2025/07/05 03:37] – admin
+++ disassembled_devices:parkwaechter [2025/07/24 17:33] (current) – [Next Steps] admin
@@ Line 5: / Line 5: @@
 ~~
-⚠️UNDER CONSTRUCTION!⚠️
+====== Parkwächter V1 disassembly and investigation ======
-====== Parkwächter disassembly and investigation ======
 In Germany it is allowed to use electronic parking discs if it has an E24 number. \\
-As the plastic casing has melted in summer (they use thermoplastics, d'oh!), I did not even have to open it, it literally opened itself. I assumed there would be an ASIC inside, but be astonished and read on! \\
+As the plastic casing of Parkwächter V1 (Art.-Nr.: AD286) has melted in summer (they use thermoplastics, d'oh!), I did not even have to open it, it literally opened itself. I assumed there would be an ASIC inside, but be astonished and read on! \\
-Althogh it is a parking disc for the German market, I still like to do my write-ups in english. Use [[https://translate.google.com/translate?hl=en&sl=auto&tl=de&u=https://super-se.de/dokuwiki/disassembled_devices:parkwaechter|Google Translate]] if you want.
+Althogh it is a parking disc for the German market, I still like to do my write-ups in english. Use [[https://translate.google.com/translate?hl=en&sl=auto&tl=de&u=https://super-se.de/dokuwiki/disassembled_devices:parkwaechter|Google Translate]] if you want. \\
+Edit: The seller (and at the same time the manufacturer) has sent me a new upper case in the original box. \\
@@ Line 17: / Line 16: @@
 ⚠⚠️WARNING: messing with certified electronics is prohibited! Do not alter hard- or software - it is illegal. Just don't do it. \\
-This is for educational purposes only! \\
+This look inside for educational purposes only! \\
+␆❗ If you like car stuff, also see [[disassembled_devices:adac_drivedot|disassembly of ADAC DriveDot]] and [[projects:rlink2#gadgets_you_can_get_for_your_car|Gadgets you can get for your car]]. \\
 ===== Pictures =====
+{{gallery>:disassembly:parkwaechter}}
 ===== Hardware =====
@@ Line 30: / Line 29: @@
 Surprisingly there is also a pin header socket with silkscreen labeling (nice!). \\
-What's ugly is the soldering tin junk splattered on the PCB next to the front LCD joints. \\
+What's ugly is the soldering tin junk splattered on the PCB next to the front LCD joints. Also there is flux all over. \\
 It is really ignorant to use thermoplastics for the case which sits right behind the windshield frizzling in the sun. The four magnets are there to hold a blue plastic plate which is stuck to the windshield - you cannot see it in the pictures as it is still inside the car. \\
-==== Pinout ====
+==== Pinout Header ====
-The silkscreen labels of pin header read: \\
+The silkscreen labels of JTAG-header read: \\
-<insert table>\\
-=== MSP430 Pinout ===
-The GPIO-Pins of MSP430 are the following: \\
-<insert table>\\
-LCD front and back pinout \\
-#TODO. Pinout part is still missing. \\
-===== Lauchpad programmer =====
-We want to connect a debugger to connect to the pin header of MSP430. I used a Lauchpad programmer dev-board collecting dust. \\
-<insert picture> \\
-==== Output ====
-When connecting, we get the following initial output: \\
+^Pin# ^ Name   ^ description^ ^Pin# ^ Name   ^ description^
-<hidden Show ouput>
+|4| TEST | Enter programming mode with RST \\ / SBWTCK in Spy-Bi-Wire (SBW) mode | |8| GND | Ground |
-<code>
+|3| TDI | Test Data In (4-wire JTAG) |  |7| TDO | Test Data Out (4-wire JTAG)  |
-output
+|2| TCK | Test Clock (4-wire JTAG) | |6| TMS | Test Mode Select (4-wire JTAG) |
-</code>
+|1| 3V | VCC voltage | |5|RST | Reset (active-low) / SBWTDIO (data line) in SBW mode |
-</hidden>
-==== Dumping ====
+===== Next Steps =====
-The lock bits are set to:\\
-<code>
-output
-</code>
-Glitching?\\
+Due to lack of time, I had to stop here. Next steps could be: \\
-Dump\\
-==== Accelerometer ====
+- Connect Lauchpad programmer to header \\
-The Accelerometer comes in IC package -16. \\
+- Dumping Firmware: check lock-bits -> Glitching? -> Dump! \\
+- send I2C "WHO_AM_I" request to accelerometer (LGA-16 package IC) \\
-<insert picture>
+- Create GPIO-Pinout of MSP430 \\
-Its markings are:\\
++ LCD front and back pinout \\
-<insert marking text> \\
-When sending I2C "WHO_AM_I" request, we get: \\
-<code>
-ID
-</code>