diff --git a/Document0-Initial_Information_Gathering.md b/Document0-Initial_Information_Gathering.md
index 987c68b..b07560a 100644
--- a/Document0-Initial_Information_Gathering.md
+++ b/Document0-Initial_Information_Gathering.md
@@ -42,7 +42,7 @@ The packaging contains:
The lock is surrounded by a plastic packaging with molds for eah component. Within the box it is kept in place with some cardboard. The box itself is held shut by a small magnet.
-
+
## 1.2 || 2.2 Outer Inspection
@@ -50,11 +50,11 @@ The lock is surrounded by a plastic packaging with molds for eah component. With
The outer module is a touch sensor surrounded by a plastic shell with two screws and one cable inside.
-
+
During installation, the cable is supposed to connect to the motor module.
-
+
### Inner Module
@@ -62,7 +62,7 @@ The inner module includes the motor module, which is connected using cables to:
- the power supply
- the touch module
-
+
Unopened, it is surrounded by a metal shell which can easily be removed by pulling a plastic strap, as this is necessary during installation.
@@ -71,7 +71,7 @@ Unopened, it is surrounded by a metal shell which can easily be removed by pulli
The bridge is to be placed within 3 meters of the lock. It is used to connect the lock to the app.
It features a reset button.
-
+
## 1.3 && 1.4 Open Casing / HW Inspection
@@ -85,29 +85,29 @@ What you can spot immediately is:
- WiFi & Bluetooth/BLE capable
- [Datasheet](docs/esp32_datasheet.pdf)
-
+
Under the PCB is HW for the power supply.
-
+
### Outer Module
There are three screws on the back of the touch module, however, it's additonally glued together. It can't be opened without being (probably) permanently damaged.
-
+
### Inner Module
As I'm working with an already opened device, I'm not interiley sure hw many screws were intially needed to open the motor module, but I'm assuming it were four. After unscrewing these the plastic shell can be removed by gently wiggling it until it comes loose.
-
+
Once again you can immedatiely spot UART.
After unplugging all cables, the PCB can be leveraged out of the shell with a flat screwdriver, without causing any damage.
-
+
Here you can see:
- UART
@@ -118,9 +118,13 @@ Here you can see:
## 1.5 Software Components from Firmware Analysis
-## 1.6 Collect "fresh" Firmware Dump
+## 1.6 Collect "Fresh" Firmware Dump
+As the lock has been tampered with before, the FW dump is not entirely "fresh."
+### Bridge
+
+### Outer Module
## 1.7 && 2.3 Initial setup