This is an old revision of the document!
Panasonic KX-TG6861
hackvalue
con PP:
- DSPG chipset
pro PP:
- SPI flash should be read and writable easily
- cheap, 25€ at store, FP with PP
- ARM926
- JTAG pins exposed (and labelled)
pro FP:
- dialog SC14441
con FP:
FP: KX-TG6861GB
Pins
GND -5.5V
URX UTX
UART seems to be 1V8, 19200 baud, at boot prints
OK1
pressing ?<CR> responds with There is no help
every upper and lower case single char followed by <CR> prints command unknown
UART commands
might be incomplete/too long found by brute forcing three-char commands
ada adc adj ads akt ant aud bel bof bom bon btc bts btx buz cbc cgs cid cli cps crx cwc dbm dmv dto ecb ecc ecw epc epd epf epr eps epv epw esc fer fld fle flr fls gtl hok hrl hsl ide idf idg idr idw key lcd led lim lnv lpr mgr mgw mic mip mmn moc mss mtx ner new odb odh odl pal pan pap pdl per pew pid ply rcd rci rec red reg rfa rfb rfd rfq rfr rft rfw rgs rio rss rst rwd scr sdh sdl sfr sgr sgw slf smr sms srl stp tdt tpc trc tst vac vda vdd ver vfw vpd vpe vpi vpl vrd vrg vrm vse vwt wcr wgs wrt wwd
chipset
- IC501: dialog SC14441
- IC601: P25Q16L 1.8V single/dual/quad SPI flash 16MBit
- IC502: 25Q16JWSIM winbond 1.8V dual/quad SPI flash 16MBit
- IC902: PH408A 8bit GPIO expander I2C
strange, why two SPI flashes of same size from different vendors?
PP: KX-TGA685EX
- audio
- bottom mic THT
- speaker w/ soldered wires, blu top, red bot
- earpiece speaker: spring contact, falls apart/disconnected with case open
- RF
- under metal can, arrow towards bot
- DSP group
- DCX81ACPCFAE4FNC
- © (M) 2010 DSPG
- 88 pin
- PCB
- IC2 SOIC8
- winbond
- 25Q80EWSIG
- 8Mbit NOR flash, SPI (dual/quad) or QPI
- 1MByte
- 1.8V
- IC3 SOIC8
- ST 24C32FP
- 32Kbit I2C EEPROM
- 4kBytes
- labelled pads, left, under ant, from top to bottom
- GND_J
- TDO
- TDI
- TCK
- TMS
- CKM
- VDDC = 1.16V
- CP3V = 3.05V
- labelled pads, right
- 1.8V = 1.82V
- CP4V = 2.95V
- voltages
- JTAG
- VDDC = 1.16V
- CP3V = 3.05V
- IC2 flash
- 1.8V
- IC3 EEPROM
- 3.0V