Decrypting the Vado Identity wired shower controller

Projects Discussion and Showcase Device Hacking
38

Ok, so with the new RS 485 module, I'm wired back in to try to work out the sequences again and here goes...

Any lines followed by "x n" means that the lines above (until the previos blank line) are repeated n times
"x ..." means the lines are repeated an unknown number of times or indefinitely

Just the mixer connected

00 00 00 00 00 00 00
x ...

Connect the controller
This just shows the handshake and then the mixer's start up sequence

00 00 00 00 00 00 00  00 00 00 00 00 02 00

00 00 00 00 00 00 41  33 F2 02 36 07 02 00
00 00 00 00 00 00 B3  33 F2 02 36 07 02 00
00 00 00 00 00 00 41  33 F2 02 36 07 02 00
00 00 00 00 00 00 B3  33 F2 02 36 07 02 00
00 00 00 00 00 00 41  33 F2 02 36 07 02 00
00 00 00 00 00 00 B3  33 F2 02 36 07 02 00

00 00 00 00 00 00 1D  33 F2 02 36 07 02 00
00 00 00 00 00 00 B3  33 F2 02 36 07 02 00
x 55

00 00 00 00 00 00 1D  33 F2 02 36 07 02 00
00 00 00 00 00 00 B1  33 F2 02 36 07 02 00
x ...

Turn shower on

00 00 00 00 00 00 B1
00 00 00 00 00 00 B1
00 00 00 00 00 00 B1
//MESS
00 00 00 00 00 00 B1  32 F2 01 36 07 02 00
00 00 00 00 00 00 1D  32 F2 01 36 07 02 00

00 00 00 00 00 00 1D  32 F2 01 36 07 02 00
x ...

Turn shower off

00 00 00 00 00 00 1D
00 00 00 00 00 00 1D
00 00 00 00 00 00 1D
//MESS
00 00 00 00 00 00 1D  33 F2 02 36 07 02 00

00 00 00 00 00 00 1D  33 F2 02 36 07 02 00
00 00 00 00 00 00 B1  33 F2 02 36 07 02 00
x ...

Turn shower on then
Change to outlet 2

00 00 00 00 00 00 1D
00 00 00 00 00 00 1D
00 00 00 00 00 00 1D
MESS
00 00 00 00 00 00 1D  31 F2 01 36 07 01 00
x ...

Turn shower off

00 00 00 00 00 00 1D
00 00 00 00 00 00 1D
00 00 00 00 00 00 1D
MESS
00 00 00 00 00 00 1D  32 F2 02 36 07 01 00

00 00 00 00 00 00 1D  32 F2 02 36 07 01 00
00 00 00 00 00 00 B3  32 F2 02 36 07 01 00
x...

00 00 00 00 00 00 1D  32 F2 02 36 07 01 00
00 00 00 00 00 00 B1  32 F2 02 36 07 01 00
x...

Turn shower on then
Increase flow

//Min flow
00 00 00 00 00 00 1D  32 F2 01 36 05 02 00

//Low flow
00 00 00 00 00 00 1D  32 F2 01 36 06 02 00

//Med flow
00 00 00 00 00 00 1D  32 F2 01 36 07 02 00

//High flow
00 00 00 00 00 00 1D  32 F2 01 36 08 02 00

//Max flow
00 00 00 00 00 00 1D  32 F2 01 36 09 02 00