Advertisement
Guest User

Thermopro TP920 Reverse Engineer

a guest
Jun 3rd, 2025
38
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.55 KB | None | 0 0
  1. ## Constants
  2.  
  3. [Service] 1086fff0-3343-4817-8bb2-b32206336ce8
  4. [Char] 1086fff1-3343-4817-8bb2-b32206336ce8 (Read,Write) | Used for: All 6 Setup steps & Temp Format
  5. [Char] 1086fff2-3343-4817-8bb2-b32206336ce8 (Read,Notif) | Used for: Get Temp
  6.  
  7. # Breakdown
  8.  
  9. 300f5c0 f 00 ffff 0233 ffff ffff ffff ffff d5 0140
  10.  
  11. 300f5c0 - Unique identifier for TP920 (i.e. 300f4d0 - TP25)
  12. f - Temp Mode (f or c)
  13. 00 - Denotes beginning of probe data
  14. ffff -
  15. ffff - TP920 - Probe 1
  16. ffff -
  17. ffff - TP920 - Probe 2
  18. ffff -
  19. ffff -
  20. d5 - Checksum? from 00 - end of probe data?
  21. 0140 - End of traffic flag? Universal between all thermopro thermometers
  22.  
  23.  
  24. ## Start Up Sequence
  25.  
  26. 010 98a7a13 b73ed68b67c2a0 * << Initiate Connection?
  27. 010 20a020f b73ed68b67c2a0 0020 b73ed68b67c2 * << Reply from sensor
  28.  
  29. 410041 * << ???
  30. 410334 11028b91 7d0000cf 190020480000200200 * << Reply from sensor
  31.  
  32. 28040a2d8c6e5d << ???
  33. 28040a2d8c6e5d 7d0000e2 190020480000200200 << Reply from sensor
  34.  
  35. 20010f30 ^ << Starting sensor in chosen temp format | Fahrenheit
  36. 20002030 0000917d0000f9 190020480000200200 ^ << Reply from sensor
  37.  
  38. 23060200 ffffffff27 * << ???
  39. 23020200 27ffffff27 0000 1a0020480000200200 * << Reply from sensor
  40.  
  41. 23060400 ffffffff29 * << ???
  42. 23020400 29ffffff29 0000 1a0020480000200200 * << Reply from sensor
  43.  
  44. * - Constant
  45. ^ - User Choice
  46.  
  47. ## Change temp format from app
  48.  
  49. 20010c2d << App to Sensor | Change to Celsius
  50. 2000202d 0000917d0000b4 190020480000200200 << Reply from Sensor
  51. 300f5c0 c 00 ffff ffff ffff ffff ffff ffff 9b 0140 << No Probe | New value in Celsius
  52.  
  53. 20010f30 << App to Sensor | Change to Fahrenheit
  54. 20002030 0000917d0000c8 190020480000200200 << Reply from Sensor
  55. 300f5c0 f 00 ffff ffff ffff ffff ffff ffff 9e 0140 << No Probe | New value in Fahrenheit
  56.  
  57. ## Temp reporting
  58.  
  59. 300f5c0 f 00 ffff ffff ffff ffff ffff ffff 9e 0140 << No Probe | Fahrenheit
  60. 300f5c0 c 00 ffff ffff ffff ffff ffff ffff 9b 0140 << No Probe | Celsius
  61.  
  62. 300f5c0 f 00 ffff 0233 ffff ffff ffff ffff d5 0140 << Probe #1 | Fahrenheit
  63. 300f5c0 f 00 ffff 0233 ffff ffff ffff ffff d5 0140
  64. 300f5c0 f 00 ffff 0233 ffff ffff ffff ffff d5 0140
  65. 300f5c0 f 00 ffff 0252 ffff ffff ffff ffff f4 0140
  66. 300f5c0 f 00 ffff 0271 ffff ffff ffff ffff 13 0140
  67. 300f5c0 f 00 ffff 0271 ffff ffff ffff ffff 13 0140
  68. 300f5c0 f 00 ffff 0282 ffff ffff ffff ffff 24 0140
  69. 300f5c0 f 00 ffff 0282 ffff ffff ffff ffff 24 0140
  70. 300f5c0 f 00 ffff 0297 ffff ffff ffff ffff 39 0140
  71. 300f5c0 f 00 ffff 0308 ffff ffff ffff ffff ab 0140
  72. 300f5c0 f 00 ffff 0308 ffff ffff ffff ffff ab 0140
  73. 300f5c0 f 00 ffff 0318 ffff ffff ffff ffff bb 0140
  74. 300f5c0 f 00 ffff 0318 ffff ffff ffff ffff bb 0140
  75. 300f5c0 f 00 ffff 0328 ffff ffff ffff ffff cb 0140
  76. 300f5c0 f 00 ffff 0328 ffff ffff ffff ffff cb 0140
  77. 300f5c0 f 00 ffff 0328 ffff ffff ffff ffff cb 0140
  78. 300f5c0 f 00 ffff 0328 ffff ffff ffff ffff cb 0140
  79. 300f5c0 f 00 ffff 0328 ffff ffff ffff ffff cb 0140
  80.  
  81. 300f5c0 f 00 ffff ffff ffff 0310 ffff ffff b3 0140 << Probe #2 | Fahrenheit
  82. 300f5c0 f 00 ffff ffff ffff 0310 ffff ffff b3 0140
  83. 300f5c0 f 00 ffff ffff ffff 0310 ffff ffff b3 0140
  84. 300f5c0 f 00 ffff ffff ffff 0310 ffff ffff b3 0140
  85. 300f5c0 f 00 ffff ffff ffff 0321 ffff ffff c4 0140
  86. 300f5c0 f 00 ffff ffff ffff 0321 ffff ffff c4 0140
  87. 300f5c0 f 00 ffff ffff ffff 0321 ffff ffff c4 0140
  88. 300f5c0 f 00 ffff ffff ffff 0332 ffff ffff d5 0140
  89. 300f5c0 f 00 ffff ffff ffff 0332 ffff ffff d5 0140
  90. 300f5c0 f 00 ffff ffff ffff 0332 ffff ffff d5 0140
  91. 300f5c0 f 00 ffff ffff ffff 0332 ffff ffff d5 0140
  92. 300f5c0 f 00 ffff ffff ffff 0336 ffff ffff d9 0140
  93. 300f5c0 f 00 ffff ffff ffff 0336 ffff ffff d9 0140
  94. 300f5c0 f 00 ffff ffff ffff 0336 ffff ffff d9 0140
  95. 300f5c0 f 00 ffff ffff ffff 0336 ffff ffff d9 0140
  96. 300f5c0 f 00 ffff ffff ffff 0340 ffff ffff e3 0140
  97. 300f5c0 f 00 ffff ffff ffff 0340 ffff ffff e3 0140
  98. 300f5c0 f 00 ffff ffff ffff 0340 ffff ffff e3 0140
  99. 300f5c0 f 00 ffff ffff ffff 0340 ffff ffff e3 0140
  100. 300f5c0 f 00 ffff ffff ffff 0342 ffff ffff e5 0140
  101. 300f5c0 f 00 ffff ffff ffff 0342 ffff ffff e5 0140
  102.  
  103. 300f5c0 c 00 ffff 0282 ffff ffff ffff ffff 21 0140 << Probe #1 | Celsius
  104. 300f5c0 c 00 ffff 0282 ffff ffff ffff ffff 21 0140
  105. 300f5c0 c 00 ffff 0282 ffff ffff ffff ffff 21 0140
  106. 300f5c0 c 00 ffff 0282 ffff ffff ffff ffff 21 0140
  107.  
  108. 300f5c0 c 00 ffff ffff ffff 0240 ffff ffff df 0140 << Probe #2 | Celsius
  109. 300f5c0 c 00 ffff ffff ffff 0240 ffff ffff df 0140
  110. 300f5c0 c 00 ffff ffff ffff 0240 ffff ffff df 0140
  111. 300f5c0 c 00 ffff ffff ffff 0253 ffff ffff f2 0140
  112. 300f5c0 c 00 ffff ffff ffff 0269 ffff ffff 08 0140
  113. 300f5c0 c 00 ffff ffff ffff 0280 ffff ffff 1f 0140
  114. 300f5c0 c 00 ffff ffff ffff 0280 ffff ffff 1f 0140
  115. 300f5c0 c 00 ffff ffff ffff 0291 ffff ffff 30 0140
  116. 300f5c0 c 00 ffff ffff ffff 0291 ffff ffff 30 0140
  117. 300f5c0 c 00 ffff ffff ffff 0291 ffff ffff 30 0140
  118. 300f5c0 c 00 ffff ffff ffff 0291 ffff ffff 30 0140
  119. 300f5c0 c 00 ffff ffff ffff 0300 ffff ffff a0 0140
  120. 300f5c0 c 00 ffff ffff ffff 0300 ffff ffff a0 0140
  121. 300f5c0 c 00 ffff ffff ffff 0305 ffff ffff a5 0140
  122. 300f5c0 c 00 ffff ffff ffff 0305 ffff ffff a5 0140
  123. 300f5c0 c 00 ffff ffff ffff 0305 ffff ffff a5 0140
  124.  
  125. ## Temp recordings
  126.  
  127. 0226 >> 73F >> 22.80C >> 022.6
  128. 0232 >> 74F >> 23.33C >> 023.2
  129. 0233 >> 74F >> 23.33C >> 023.3
  130. 0284 >> 83F >> 28.33C >> 028.4
  131. 0273 >> 81F >> 27.22C >> 027.3
  132.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement