GithubDisneyland Paris World of Frozen Runa toy teardown
CoB GeneralPlus microcontroller with touch sensing inputs, direct speaker drive.
nRF52832 BLE module, mechanical tilt switch.
External 25L3233 4MB serial flash containing a typical GP filesystem with 136 (68 for each language ?) audio files in unknown ADPCM format.
Location-based interactions are triggered on BLE advertisements with a specific frame format.
Interactions between toys are also triggered solely by BLE advertisements transmitted about once per second, there's no connections between toys.
The MAC address changes randomly every 30 seconds.
BLE capture of two toys interacting with each other.
No captures from park locations yet because I messed them up.
