Mod tool for Bluetooth Toys with Phy62xx / ST17H66B2

Either using usb or uart-to-usb converter (solder cables to TX + RX testpoints on pcb). In order to dump, shortly connect TM testpad with VCC and release immediately to enter test mode for dumping/flashing.

PHY6222/6252 SDK 3.11 TH04 Teardown PHY6222 Datasheet ST17H66B2 Datasheet

• 0x11000000 is the flash addr
• 0x4000 is the flash size (256K), use 0x8000 for 512K flash
• You may need to also set the specific uart baudrate (1000000 is common) using -b option
• You can get the rdwr_phy62x2 flashtool here

python rdwr_phy62x2.py -p /dev/ttyUSB0 -b 1000000 -r rc 0x11000000 0x40000 flash.bin

python parse_flash.py flash.bin

python rdwr_phy62x2.py -p /dev/ttyUSB0 -b 1000000 we 0 flash.bin.patched

[here] (https://github.com/MakersFunDuck/humidity-temperature-sensor-TH05F)