Mercury

mercury is known under the name "Ticwatch 2 international", "Ticwatch 2i" or "Ticwatch 2 i18n" and uses the MediaTek MT2601 SoC.

Ticwatch 2 internals

Partitions

GUID Partition Table (EFI)
Offset Sector: 0
Units are in 512-byte sectors

      Slot      Start        End          Length       Description
000:  Meta      0000000000   0000000000   0000000001   Safety Table
001:  -------   0000000000   0000001023   0000001024   Unallocated
002:  Meta      0000000001   0000000001   0000000001   GPT Header
003:  Meta      0000000002   0000000006   0000000005   Partition Table
004:  000       0000001024   0000007167   0000006144   proinfo
005:  001       0000007168   0000017407   0000010240   nvram
006:  002       0000017408   0000037887   0000020480   protect1
007:  003       0000037888   0000058367   0000020480   protect2
008:  004       0000058368   0000058623   0000000256   seccfg
009:  005       0000058624   0000059391   0000000768   lk
010:  006       0000059392   0000073727   0000014336   boot
011:  007       0000073728   0000088063   0000014336   recovery
012:  008       0000088064   0000088575   0000000512   secro
013:  009       0000088576   0000089599   0000001024   para
014:  010       0000089600   0000095743   0000006144   logo
015:  011       0000095744   0000161279   0000065536   nvdata
016:  012       0000161280   0000196607   0000035328   expdb
017:  013       0000196608   0001835007   0001638400   system
018:  014       0001835008   0002457599   0000622592   cache
019:  015       0002457600   0005029887   0002572288   userdata
020:  016       0005029888   0007590911   0002561024   intsd
021:  017       0007590912   0007633919   0000043008   flashinfo

boot.img configuration

bootsize = 0x700000
pagesize = 0x800
kerneladdr = 0x10008000
ramdiskaddr = 0x11000000
secondaddr = 0x10f00000
tagsaddr = 0x10000100
name = 1516354717
cmdline =

Stock Firmware Linux Version

cat /proc/version                                         
Linux version 3.10.72+ (jenkins@mobvoi-indiana) (gcc version 4.8 (GCC) ) #1 SMP PREEMPT Fri Jan 19 17:19:11 CST 2018

Relevant build.prop fields

[ro.btstack]: [blueangel]
[ro.build.characteristics]: [watch]
[ro.build.date.utc]: [1516353162]
[ro.build.date]: [Fri Jan 19 17:12:42 CST 2018]
[ro.build.description]: [mercury_i18n-user 5.1 LMY47I 1516353091 release-keys]
[ro.build.display.id]: [LMY47I]
[ro.build.fingerprint]: [TIC/mercury_i18n/mercury:5.1/LMY47I/1516353091:user/release-keys]
[ro.build.flavor]: [mercury_i18n-user]
[ro.build.host]: [mobvoi-indiana]
[ro.build.id]: [LMY47I]
[ro.build.product]: [mercury]
[ro.build.tags]: [release-keys]
[ro.build.type]: [user]
[ro.build.user]: [jenkins]
[ro.mediatek.platform]: [MT2601]
[ro.mediatek.project.path]: [device/mobvoi/mercury_i18n]
[ro.mediatek.version.branch]: [L1.MP9]
[ro.mediatek.version.release]: [ALPS.L1.MP9.V3.8_MOBVOI2601.WP.L]
[ro.product.brand]: [TIC]
[ro.product.cpu.abi2]: [armeabi]
[ro.product.cpu.abi]: [armeabi-v7a]
[ro.product.cpu.abilist32]: [armeabi-v7a,armeabi]
[ro.product.cpu.abilist64]: []
[ro.product.cpu.abilist]: [armeabi-v7a,armeabi]
[ro.product.device]: [mercury]
[ro.product.locale.language]: [en]
[ro.product.locale.region]: [US]
[ro.product.manufacturer]: [Mobvoi Inc.]
[ro.product.model]: [Ticwatch2-i18n]
[ro.product.name]: [mercury_i18n]
[mediatek.wlan.chip]: [MT6630]

Misc Hardware Info

The metal part of the watch where “Model: WE12016” is engraved is a sticker with a metal look and can be removed. Once the sticker is removed, the watch exposes 6 pads, with 5 of them connected internally. The current working theory is that the pads are USB.

Ticwatch 2 with model number sticker removed, exposing pads