Skip to content
nebulous edited this page Nov 4, 2019 · 8 revisions

SOC used is a SuperH (SH2A) architecture either 7267 or 7269 running at 144 or 266Mhz http://www.renesas.com/products/mpumcu/superh/sh7260

WiFi module is a MICROCHIP - MRF24WB0MA (datasheet)

The back side of the board contains a 16Mbyte FLASH in a TSOP package. (datasheet)

SYSTXCCITC01-B CPU is upgraded from the SH7267 to an SH7269. Comm chip is replaced with a WiLink 8 CC1835. The equivalent Bryant part number is SYSTXBBECC01-B.

SYSTXCCITC01 firmware 131493-12 can be downloaded from here: http://cacbdpapps.net/marketing/eula/Infinity_Touch_V12_h-eula.html The latest "A" version, 131493-14.01, along with the latest B version 131626-01.30 are here: http://cacbdpapps.net/marketing/eula/Infinity_Touch_V1401-0130_h-eula.html

The firmware files are Intel hex encoded. But none of the ihex to bin file converters worked on them, despite being perfectly valid ihex files, so @Zhentar wrote one to address endianness issues: https://github.com/Zhentar/ihex_to_bin/ (batteries not included - uses hardcoded file paths 😅)

131493-12 has a ~1.3MB code section, so it's definitely not running anything easy to work with like a linux kernel; I haven't come across any strings identifying a standard OS yet (the MRF24WB0MA on the other hand may be running MQX RTOS).

U10 on the back (screen side) of the board appears to be a MAX3443 surrounded by the expected resistor bridges and capacitors for that circuit block.

It appears to handle encryption on board and have a SPI bus interface, so as a last resort sniffing the SPI traffic could work. Fortunately that hasn't proved necessary.

It has a 14 pin H-UDI debug connector as well as at least one debug (ttl?) serial port broken out.

The serial port appears to be unconnected. Power cycled with logic probes attached to soldered headers shows that the RX pin goes lower after boot, but the TX pin appears to be NC.

All control apps seem to be based on Adobe AIR. What OS does it use? Can it be rooted? Can the USB port be used for anything other than loading background images? Any ideas or knowledge welcome.