Document Patoo Protocol

[blackspherefollower]

Normal mode

BLE Name (carrot): PTVEA2601 (suspect this might be version specific) BLE Name (devil): PBT821 BLE Name (vibrator): PCS321 BLE Name (bean sprout): PHT321

At a glance this device looks like the TI SimpleLink SensorTag dev board squashed into the shape of a vibrating carrot, a vibrating cup stroker or a insertable rotating thing.

Pressure sensor (Carrot/Devil)

Service UUID: F000AA40-0451-4000-B000-000000000000 Rx UUID (Reading): F000AA41-0451-4000-B000-000000000000 (Pascals) Tx UUID (Control): F000AA42-0451-4000-B000-000000000000 (1 on, 0 off) Tx UUID (Interval): F000AA43-0451-4000-B000-000000000000 (milliseconds)

See: https://dev.ti.com/tirex/explore/node?node=ANZYLrG0TcP.fGxu8E2fog__kmPly-e__LATEST

Thermometer sensor (Carrot)

Service UUID: Rx UUID (Reading): Tx UUID (Control): Tx UUID (Interval):

Accelerometer sensor (Carrot)

Service UUID: Rx UUID (Reading): Tx UUID (Control): Tx UUID (Interval):

Optical (proximity) sensor (Carrot)

Yes, really... it's on the tip of the carrot and why it lights up red Service UUID: Rx UUID (Reading): Tx UUID (Control): Tx UUID (Interval):

Control (All)

Service UUID: f000aa64-0451-4000-b000-000000000000 Tx UUID (Control Mode): f000aa65-0451-4000-b000-000000000000 BitMap:

• 0x04 for vibe
• 0x80 for suction (Devil only)

Tx UUID (Control Speed): f000aa68-0451-4000-b000-000000000000 Range 0-100 (0x00-0x64) writes must be followed by mode writes to cause updates on devil

Reset (Carrot)

Service UUID: Tx UUID (Reset): Sending 0x01 restarts the device into update mode DO NOT DO THIS, there's no way back

Update mode

In update mode, an incomplete version of the TI SimpleLink OAD firmware. Unfortunately it's missing the crucial command characteristic needed to reboot the device into normal mode.

BLE Name: PATOO UPDATE Service UUID: f000ffc0-0451-4000-b000-000000000000 Tx UUID (Img Identity): f000ffc1-0451-4000-b000-000000000000 Tx UUID (Img Block): f000ffc2-0451-4000-b000-000000000000 Tx UUID (Img Count): f000ffc3-0451-4000-b000-000000000000