Advice/guidance with TS-673A reversing

[r-pufky]

Heya guedou,

A few folks are working through the notes to modify / update this repo with support for the TS-673A. Our initial efforts are very promising (have some reporting working), and were wondering if you'd be able to come in and offer some advice on where to go next.

It seems there are a few changes with the EC wherein the addresses in panq 'seem' to work; but reversing the current binaries/libraries produce different addresses.

If you are willing to hop in and provide some advice, let me know and can get you into the current discussions.

[guedou]

Hello !

I am always happy to read that this little project is used and appreciated!

What is the EC model on the TS-673A? Did you manage to reproduce https://github.com/guedou/TS-453Be/blob/master/doc/fan_control.md and https://github.com/guedou/TS-453Be/blob/master/doc/reversing.md ?

If you are lucky the specific addresses can be easily identified using QBDI as explained in https://github.com/guedou/TS-453Be/blob/master/doc/reversing.md#tracing-with-qbdi

I guess that it will be interesting to move panq into its own repository to make it support more devices, such as TS-877 and TS-673A.

[r-pufky]

We have a log of our current discussions / findings in discord -- Here's an invite link to join the discussion: https://discord.gg/CEavVJbV (expires in 7 days).

I believe we're currently working on split time zones, so the discussion tends to happen when there's short overlaps between us.

As for your questions:

What is the EC model on the TS-673A? Did you manage to reproduce https://github.com/guedou/TS-453Be/blob/master/doc/fan_control.md and https://github.com/guedou/TS-453Be/blob/master/doc/reversing.md ?

We've reproduced some of that (have matched results with the contents of your repository, and some success with the new EC). The new EC seems to have two addressing bits (using x05,x06) instead of a single one.

If you are lucky the specific addresses can be easily identified using QBDI as explained in https://github.com/guedou/TS-453Be/blob/master/doc/reversing.md#tracing-with-qbdi

I don't believe we've gotten to QBDI yet; but we haven't had much movement today other than exploratory findings.

[guedou]

The next step is to identify a QNAP binary that makes the fan move, them boot the NAS on a standard Ubuntu and try to cool and use the QNAP binary.