Automated STM32-based trigger for Pixar’s jailbreak method

This modification is for educational and research purposes only.
Applying this mod will void your warranty and may damage your device if done incorrectly.
The author is not responsible for any damage, legal issues, or unintended consequences.
Proceed at your own risk.

This project integrates a tiny STM32C011F6U6 microcontroller inside the Hikvision DS-2TP31B-3XF handheld thermal camera to automatically trigger Pixar’s jailbreak sequence to load a different configuration into the camera and use the expanded thermal range. See pixar's post for details on the procedure: https://www.eevblog.com/forum/thermal-imaging/hikvision-ds-2tp31-series-thermal-camera-teardown-307840/msg5567443/#msg5567443 The MCU listens for the camera’s trigger button during the first second after startup. If the button held during the first second of boot, it sends the required UART commands to perform the jailbreak, then goes into deep sleep. This makes the jailbreak process quick, repeatable, and self-contained—no need for an external USB-to-UART adapter after installation.

See images for wiring. The project file was created with STM32Cube IDE for a STM32C011F6U6 MCU. But it should work with almost any STM32 MCU

See pictures of the installed device under /images