imagotag-hack icon indicating copy to clipboard operation
imagotag-hack copied to clipboard

Imagotag 2.6/2.2 BWR GL120 hacking

Chips used

  • CC2510 - MCU + radio - 8051
  • NT3H2111 - NFC
  • GDEW026Z39 - 2.6" EPD display
  • or GDEW0213Z16 - 2.13" EPD display
  • both displays use IL0373 driver
  • TPS61071 - boost converter - used (only?) for white LED
  • W25X10CL - Winbond 1Mbits NOR SPI flash

CC2510 connections

Port 0

  • P0:0 - EPD power enable (active low via a P channel fet)
  • P0:1 - EPD CS (SPI interface chip select)
  • P0:2 - debug port
  • P0:3 - EPD SDI (SPI interface serial data in)
  • P0:4 - SDA to NFC chip
  • P0:5 - EPD CLK (SPI interface clock)
  • P0:6 - SCL to NFC chip
  • P0:7 - not connected

Port 1

  • P1:0 - NFC VCC (seems to power NFC chip and SPI flash)
  • P1:1 - NFC FD (field detection)
  • P1:2 - EPD DC (data/command select for display)
  • P1:3 - EPD BUSY (detect if display busy)
  • P1:4 - SPI flash CS
  • P1:5 - SPI flash CLK
  • P1:6 - SPI flahs MOSI
  • P1:7 - SPI flahs MISO

Port 2

  • P2:0 - EPD Reset (display reset)
  • P2:1 - debug data and white LED
  • P2:2 - debug clock and LED boost chip enable (TPS61071)