Teardown: Broadlink RM Mini 3

You might have read already, that I don’t like the Broadlink products as they do not offer any open APIs. But maybe, they are at least hackable?

Let’s check the RM Mini 3 Infrared sender/receiver.

Taking of the cap shows us the infrared LEDs and a single IR receiver:

rm3-1

This is what I would have expected. Are there any surprises on the main board?

rm3-2

Not really. The main processor is an Marvel 88MC200. This is a simple Cortex M3 based micro-controller that is clocked at 200 MHz. There is no need for a more powerful processor in this device. As it doesn’t have a WiFi controller integrated, there is a┬ásecond controller on the board: the 88W8801 is a Marvel WiFi chip.

While in theory it might be possible to upload a different software onto the system, it will be quite complicated. You don’t want to fiddle around multiple days to re-use a 20$ device? The easiest way to re-use it is removing the whole controller, replace it with an ESP8266 and put your own firmware onto it. However, for this you don’t need to buy this device first. You can just directly connect some IR LEDs to an ESP8266 chip. This will be cheaper than the RM Mini 3.

2 thoughts on “Teardown: Broadlink RM Mini 3”

  1. hey there, I’m trying to grab the ac remote codes.
    while doing Man In The Middle between the broadlink and the route i found out that when adding a Remote to the broadlink the device is sending a request to a remote server. and then gets a file from it. i believe the file contains the code for the AC.
    i was unable to open the file and read the content.

    to use ESP8266 to control the AC you need first to reverse engineer the transmission that being sent to the AC and the manipulate it.

    if i would be able to read the content of that file i could do some real nice stuff and save A LOT of time.

    do you have any idea how would this be possible?

    David.

    1. I don’t want to spend more time on Broadlink devices. They decided not to make these devices “open” or “hackable”.

Leave a Reply

Your email address will not be published. Required fields are marked *