I'm using a BQ27742-G1. We are trying to figure out the programming script protocol using the golden image DFFS that we generated in BQ Studio. The safety subclass on our device was setup to have the following data starting at offset 0:
(10 8B 01 10 4F 09 C4 01 0A 8C 00 3C 02 26 00 01 F4 02 8A 01 02 58)
The DFFS golden file was generated and I was able to find the section for programming the safety subclass ID, however it contained more bytes. Here is a partial portion of the DFFS file:
W: 16 00 0A 12 00 00 00 00 00 00
W: 16 08 10 8B 01 10 4F 09 C4 01
W: 16 10 0A 8C 00 3C 02 26 00 01
W: 16 18 F4 02 8A 01 02 58 10 B3
W: 16 20 10 CC 10 E5
W: 16 64 4F 07
X: 2
C: 16 66 00
Why is the first byte in each row 0x16? The internal address of the device is 0xAA/0xAB for write/read. I couldn't find any reference to this in the datasheet. I assume it is the internal address of the data flash? Not really sure, but I would like to understand.
The second byte in each row appears to be an offset.
The next set of bytes are (0A 12 00 00 00 00 00 00), where did these come from? In the script every section increments the second byte by on (0A 13, 0A 14, etc). Again, what are these bytes?
The next set of bytes are the safety subclass ID bytes (10 8B 01 10 4F 09 C4 01 0A 8C 00 3C 02 26 00 01 F4 02 8A 01 02 58). We know these bytes.
The second to last set of bytes is also unknown. (10 B3 10 CC 10 E5)
And lastly these are also unknown.
W: 16 64 4F 07
X: 2
C: 16 66 00
We use a lot of these devices on our products but no one really knows what is going on in the programming file. Any assistance would be appreciated.
- Brett