Repository files navigation

Quecoo STM32 V3.1S T12-958

KSGER STM32 OLED V2.01

This is firmware for T12 soldering stations with the MM32SPIN27 Arm processor. These are user notes. For developers' notes, seeREADME_DEVELOPER.

The soldering station has four states: running, boost, standby and sleeping.

When running, the top line of the display shows power supply voltage, setpoint temperature, and cold junction (ambient) temperature.The middle of the display shows soldering iron tip temperature.The bottom of the display shows a bar graph of applied heating power.

The soldering station has a rotary encoder with pushbutton.Turning the knob changes setpoint temperature in steps (default: steps of 5°C). For fine adjustments in steps of 1°C first turn the knob, then push while turning. The setpoint is displayed in inverted color.

When running, a short click of the knob will switch to boost mode. In boost mode, setpoint temperature is increased for a short time. (default: increase of 50°C for 5 minutes)

If the soldering station is inactive, after some time the soldering station goes in standby. (default: 20 minutes of inactivity, standby temperature 200°C).

If the soldering station is inactive even longer, the soldering station goes into sleep mode. (default: 30 minutes of inactivity, heating switched off).

If no T12 tip is detected, a T12 soldering tip is shown.

A short click will switch the soldering station from running ⇨ boost ⇨ standby ⇨ sleep ⇨ running.

A long press - a second or more - will switch to the menu. The menu allows changing and saving default values.

Here is avideo of the soldering station powering up.

When changed, the temperature setpoint is saved automatically within 30 seconds. When the soldering station is switched on, the temperature goes back to what it was before the station was switched off.

Other settings have to be saved manually. Go to the "Settings" menu, and choose "Store". Settings are saved in flash, and overwritten when you install new firmware.

The soldering iron tip contains a thermocouple. The thermocouple gives the temperature difference between soldering iron tip and soldering iron handle. To know the temperature of the soldering iron tip, one has to add the temperature of the soldering iron handle (the cold junction temperature) and the temperature given by the thermocouple.

To measure the temperature in the soldering iron handle, three sensors are available: CPU, NTC, and DS18B20.

The microcontroller has an internal temperature sensor. As the microcontroller heats up during operation, the internal temperature of the microcontroller may be different from the temperature of the cold junction.

A separate document,README_NTC, handles configuring the NTC temperature sensor.

Instead of manually calibrating an analogue temperature sensor it is much more convenient to use factory-calibrated digital sensors.

The DS18B20 is a digital one-wire temperature sensor.One-wire refers to the possibility of powering the sensor, and reading the temperature using only one wire.

For best results, put a DS18B20 in the soldering iron handle. This requires opening the soldering iron handle, removing the NTC and installing a DS18B20 temperature sensor.

Inside the soldering iron handle, replace the NTC with a DS18B20. Connect DS18B20 VCC and GND to ground (green wire), connect DS18B20 DIO to the white wire (NTC). Colors may differ.

DS18B20 in soldering iron handle. The DS18B20 has a TO-92 package, like a leaded small-signal transistor.schematic of the handle with and without mod.

To avoid short-circuits, cover everything in Kapton tape. Make sure blank metal does not touch other blank metal. Make sure vibration sensor leads do not make contact with temperature sensor leads.

The DS18B20 data line needs a pull-up resistor.On the PCB, connect the T12 connector pin "J" to pin "F" (pin PB7, UART RX) with a pull-up resistor to 3.3V. Suitable resistor values are 1K - 3.3K. (picture: 2K)

In settings, choose SENSOR ONEWIRE.

When one buys a DS18B20, it is not always clear whether the chip is original or generic. To determine the manufacturer, use the "Check ONEWIRE" menu, and look up the sensor family inthis table. Output for the"Made in Asia" DS18B20 I am using:

[1]-Family C SENSYLINK CT1820B[2] BACK

Compared to a Maxim DS18B20, the CT1820B uses less power (30µA, as long as one does not write to EEPROM), and is faster (30ms). Whatever brand you choose, the DS18B20 has to be able to work in parasitic mode.

If you do not wish to modify the soldering iron handle, you can simply connect a DS18B20 to the pcb pin header. The pin header has ground and 3.3V for the pull-up resistor.

DS18B20 is the default temperature sensor, it's what I use. This can be changed in the menu.

E.g. for DS18B20, in the menu:

• press button more than 1 second to enter menu
• Cold End ⇨ Sensor ⇨ ONEWIRE
• Save and Recall ⇨ Save

To download firmware, connect a debugger probe to the SWD connector:

Both commercial and open source debuggers can be used to download firmware to MM32SPIN27.

The Segger JLink debugger does not support MM32SPIN27 directly, but configuring as a MM32L072XX works.

JLinkGDBServer -device MM32L072XX -if SWD -speed 1000

Some useful commands are in the doc/scripts directory.

Upon delivery, the flash of the processor is read-protected.When using JLink, the first time firmware is downloaded, typemon flash erase to unlock the device.

 $ arm-none-eabi-gdb(gdb) tar ext :2331Remote debugging using :2331warning: No executable has been specified and target does not supportdetermining executable automatically.  Try using the "file" command.0xfffffffe in ?? ()(gdb) mon resetResetting target(gdb) mon halt(gdb) mon flash eraseFlash erase: O.K.(gdb) file ~/Arduino/t12-958/build/SeekFree.mm32.MM32SPIN27/t12-958.ino.elfReading symbols from ~/Arduino/t12-958/build/SeekFree.mm32.MM32SPIN27/t12-958.ino.elf...(No debugging symbols found in ~/Arduino/t12-958/build/SeekFree.mm32.MM32SPIN27/t12-958.ino.elf)(gdb) loLoading section .isr_vector, size 0xc0 lma 0x8000000Loading section .text, size 0xb8a0 lma 0x80000c0Loading section .rodata, size 0x31e8 lma 0x800bc00Loading section .ARM, size 0x8 lma 0x800ede8Loading section .init_array, size 0x34 lma 0x800edf0Loading section .fini_array, size 0xc lma 0x800ee24Loading section .data, size 0xd28 lma 0x800ee30Start address 0x0800888c, load size 63672Transfer rate: 10363 KB/sec, 7074 bytes/write.(gdb) mon resetResetting target(gdb) cContinuing.^CProgram received signal SIGTRAP, Trace/breakpoint trap.0x08003952 in Scheduler::execute() ()(gdb) qRemote connection closed $

In the above, at the message "continuing", there is a short beep and the display lights up.

The open source Black Magic Probe supports MM32. To download:

 $ /opt/xpack-arm-none-eabi-gcc-10.3.1-2.3/bin/arm-none-eabi-gdb -q(gdb) tar ext /dev/ttyBmpGdbRemote debugging using /dev/ttyBmpGdb(gdb) mon verBlack Magic Probe (BlackPill-F411CE) 08583c1-dirty, Hardware Version 0Copyright (C) 2022 Black Magic Debug ProjectLicense GPLv3+: GNU GPL version 3 or later<http://gnu.org/licenses/gpl.html>(gdb) mon swdAvailable Targets:No. Att Driver 1      MM32SPIN27 M0(gdb) at 1Attaching to Remote targetwarning: No executable has been specified and target does not supportdetermining executable automatically.  Try using the"file" command.0x0800a5f8in?? ()(gdb) file~/Arduino/t12-958/build/SeekFree.mm32.MM32SPIN27/t12-958.ino.elfA program is being debugged already.Are you sure you want to change the file? (y or n) yReading symbols from~/Arduino/t12-958/build/SeekFree.mm32.MM32SPIN27/t12-958.ino.elf...(gdb) loLoading section .isr_vector, size 0xc0 lma 0x8000000Loading section .text, size 0xdb4c lma 0x80000c0Loading section .rodata, size 0x34f8 lma 0x800e000Loading section .ARM, size 0x8 lma 0x80114f8Loading section .init_array, size 0x38 lma 0x8011500Loading section .fini_array, size 0x10 lma 0x8011538Loading section .data, size 0xde4 lma 0x8011548Start address 0x0800a660, load size 73528Transfer rate: 26 KB/sec, 919 bytes/write.(gdb) compare-sectionsSection .isr_vector, range 0x8000000 -- 0x80000c0: matched.Section .text, range 0x80000c0 -- 0x800dc0c: matched.Section .rodata, range 0x800e000 -- 0x80114f8: matched.Section .ARM, range 0x80114f8 -- 0x8011500: matched.Section .init_array, range 0x8011500 -- 0x8011538: matched.Section .fini_array, range 0x8011538 -- 0x8011548: matched.Section .data, range 0x8011548 -- 0x801232c: matched.(gdb) rThe program being debugged has been started already.Start it from the beginning? (y or n) y

A note of caution here. I've successfully used Black Magic Probe on a MM32SPIN27 that already had the write protection removed.What has not been tested is whether Black Magic Probe is able to remove the write protection itself (modifying the option bits withmon option).

Carefully consider risks and consequences of modifying a solder iron. One faulty connection, one wrong line of code and the soldering iron glows red hot. Do not leave a soldering iron unattended.

Copyright (c) 2022 Koen De Vleeschauwer

Permission is hereby granted, free of charge, to any person obtaining a copyof this software and associated documentation files (the "Software"), to dealin the Software without restriction, including without limitation the rightsto use, copy, modify, merge, publish, distribute, sublicense, and/or sellcopies of the Software, and to permit persons to whom the Software isfurnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in allcopies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS ORIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THEAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHERLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THESOFTWARE.

This builds upon the work ofJose Barros,DeividAlfa,Dreamcat4 and many others.

not truncated