To Explore
From Cricut Hacking Wiki
Commands that need more research.
See Also Explored
- Mat Bounds Request (0x11):
- Do the dimensions returned change based on the current position of the cutter head?
- Do the dimensions returned change based on the Mat that is currently loaded?
- What are the dimensions for other Mat sizes (6"x12", 12"x12", 12"x24", 8.5"x12" (Cricut Mini))
- Cricut Expression with a 12"x12" mat returns (316, 50, 4962, 4696) equal to (4646 x 4646)
- Cricut Mini uses an 8.5"x12" mat and returns (0, 0, 3286, 4848) as its mat bounds.
- Other known commands:
- Brute Force the parameters to see if they have different results, or behaviors.
- Also check if alternate Size bytes change the results.
- Every command is preceded with a byte representing how many
bytes the Cricut can expect. Maybe Single byte Commands can be preceded
with a 0x01 and the command byte.
- At least on the Cricut Mini, using a length of 0x01 and just the command does indeed work. Can't say about other models.
- Every command is preceded with a byte representing how many
bytes the Cricut can expect. Maybe Single byte Commands can be preceded
with a 0x01 and the command byte.
These Commands probably exist but their parameters and other information are unknown.
- Firmware Upgrade (This command would be a bad one to discover while brute forcing the command set. AKA trying every possible command combination to determine how the machine behaves or physically responds.)
- Detect status of Speed, Pressure and Size Dials.
- Keyboard detect Key press and set on back light.
I believe that "George Basic Shapes" cartridge is used for testing the machine functionality, possibly in the factory before shipping and definitely after refurbishing. This makes me believe that are some test functions that are accessible through either unique key combinations with the cartridge in place or over USB, without the "fake" cartridge in place. Command 0x81 makes me think maybe with the "fake" in place they execute a command over USB to put it through it's paces.
Hardware Questions to research
See Also Explored
- The internal Atmel Processor supports a boot loader. By writing new firmware at the end of the boot loader, is it possible to revert back to official firmware?
