Skip to content

Commit 3ac3f65

Browse files
committed
Markdown beautification
1 parent e0485b1 commit 3ac3f65

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed

README.md

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,6 @@ This Chip features 512Megabits (64 Megabytes) of Flash capacity.
1515
- /ping-response
1616
- 'guid':'%s','statistics':{'batt':%d,'mac':'%s','swv':'%s','dist':%d}
1717
- /bike-message
18-
-
1918
- fmn key
2019
- all Firmwares
2120
- Mainware (STM32F413VGT6 LQFP100)
@@ -26,7 +25,7 @@ This Chip features 512Megabits (64 Megabytes) of Flash capacity.
2625
- Logs
2726
- Shell (UART) for the Module, BLE,
2827

29-
28+
```
3029
m2m.vanmoof.com
3130
ALARM_BMS_REMOVED
3231
SET_SHIPPING
@@ -96,17 +95,21 @@ WST_DISCHARGE_MODE
9695
WST_CHARGE_MODE
9796
WST_BYPASS_MODE
9897
WST_NONE
98+
```
9999

100100
### How to get started?
101101

102102
You need the backside of the PCB from the Module to dump the SPI Flash
103103

104+
Tools needed: Torx Screw set. I used my iFixit Kit.
105+
104106
1. unlock bike and remove Module from the Frame
105107
2. if you do not unlock the bike, the Alarm stays on and will annoy you. I used duct tape to cover the speaker if i forgot it.
106-
2. open Module and unscrew all internal screws of the PCB to remove the PCB.
108+
2. open Module and unscrew all internal screws of the PCB to remove the PCB. Make sure you unplug the Matrix LCD Cable carefully! You can replace the cable if you break it.
107109
3. On the backside of the PCB is the Macronix 16 Pin SPI Flash Chip near the port for the back light.
108110
4. Dump that Flash with an 16 Pin! SPI Flash Chip clamp and a Pi
109-
5. I used an Raspberry Pi Zero v1.1. There you have to enable the SPI Interface with raspi-config
111+
4.1 I used an Raspberry Pi Zero v1.1. There you have to enable the SPI Interface with raspi-config
112+
5. If you screw it back to getter make sure to use Screw glue like Loctite. The (in)rush current from/to the battery and the ac voltage to the Motor is high especially if the battery has low charge thus low voltage. If a screw gets lose while you ride you create little sparks.
110113

111114
```console
112115
# sudo flashrom -p linux_spi:dev=/dev/spidev0.0 -r rom.rom
@@ -145,6 +148,7 @@ PBNjh0V46Eev8CcfS4LPJg
145148
The Module is looking for a SIM Card with a specific ICCID (Integrated Circuit Card Identifier).
146149

147150
The Prefix of that is
151+
```console
148152
89 31 44 0400
149153
MM CC II N{12} C
150154

@@ -153,11 +157,13 @@ CC = 31 (Netherlands, The)
153157
II = 4X Vodafone
154158
N{12} = Account ID
155159
C = Checksum
156-
160+
```
157161

158162
### Firmware
159163
We are looking for
164+
```
160165
50 41 43 4B BC 16 09 00 40 01 00 00 4F 41 44 20 (PACK¼ �@��OAD)
166+
```
161167

162168
rom.rom
163169

@@ -169,7 +175,7 @@ shifterware.bin
169175
batteryware.bin
170176

171177

172-
178+
```
173179
0x0002000 ?
174180
0x005A000 BLE Secrets (60)
175181
0x005af80 M-ID/M-KEY (60)
@@ -234,7 +240,7 @@ READ AND DECODE LOGS
234240
1723060261 Modem ready
235241
1723060261 GSM_CMD_IDLE
236242
1723060280
237-
243+
```
238244

239245
### Important caveats.
240246

0 commit comments

Comments
 (0)