znanev

Thanks for this info, will look into the links that you provided! Following are screenshots of all characteristics and their values of MHO-C401 sensor:    I couldn't find...

Yeah, being a new device, that was exactly my thought - that there won't be a new firmware on Xiaomi's servers. Anyway, here is a raw dump of two advertisements...

Thanks for trying that out, though! I'll wait for the firmware dump before trying to upload anything to my device. But my curiosity gets bigger with the hour, so I...

> @znanev here you are. > [b0e28c6e5932bba59fb19290e626b138_upd_miaomiaoce.sensor_ht.h1.bin.zip](https://github.com/atc1441/ATC_MiThermometer/files/5190336/b0e28c6e5932bba59fb19290e626b138_upd_miaomiaoce.sensor_ht.h1.bin.zip) Wow, thanks a ton, @vevsvevs ! @atc1441 Here's the back of the PCB:  I might try to flash it tomorrow with the...

Just chiming back in to report, that I could't wait till tomorrow.. so I went ahead and flashed the custom firmware (ATC_Thermometer.bin). As expected, everything BLE-wise was working fine -...

Whoa, impressive detective work, @atc1441 ! How did you get those display functions from the dump (i.e. what is the disassembler used) ? They look too pretty, with nice symbol...

@atc1441 You are waaay ahead of me! Tried the Telink-TC32 module for Ghidra, but didn't get any meaningful output, so I'm opting out from reverse engineering the original firmware :)...

Following some poking with the logic analyser during the weekend, here are the conclusions about the display in MHO-C401: 1. The display is the same as the one used in...

Nice disassembly of **send_spi_pre** ! Here I'm uploading the 3 partial display updates captures. Excel came quite handy for the initial analysis - at lest it's easy to see with...

Indeed this is the case, I confirmed it with the logic analyser, it's also visible in the Excel spreadsheet above - SPI is 9-bit ;) I couldn't identify the manufacturer...