Shelly EM Gen4 pinout

I have bought a couple Shelly EM Gen4 and since I noticed they are not supported by esphome, I thought I could try to use one for experiments.

The new generation uses an esp32-c6 (risc-v, QNF40) chip, and has support for Thread.

I have a dump of the 16MB flash if anyone wants it, I tried loading it with ghidra before realizing I had no idea how to use it or read risc-v, so I switched to my old voltmeter instead.

This gen uses the same ADE7953 for the clamps and AIP8563 for RTC, both on the same I2C bus.

I managed to trace the connector pinout, the button, the ADE7953 up to the esp32 chip.
I could not find the pin used for the relay switch and I am unsure on the NTC (is it the small one near the esp32 chip?)

...Then one of my voltmeter cables broke, so I am kinda stuck for now, so I thought I might as well just post here what I found for now.

There are 6 pins on the vertical board that I could not trace:

  • GPIO2(8)
  • GPIO3(9)
  • GPIO10(16)
  • GPIO12(18)
  • MTDI(11)
  • XTALK32K_P(6)

Hopefully it helps someone else.
I honestly don't have much time so I don't know when (or if) I will work on this again, but if anyone has suggestions on how to proceed, or esphome configurations to use for debugging, I will gladly accept any help.

Photos will follow (I'm a new user, I have limits)

....And done. that's what I have for now

  • MTDI(10) is the ADE7953 RESET
  • GPIO12(18) should be the LED (near the GPIO11(17) external connector)
  • The relay switch should be XTALK32K_N(7)
  • GPIO3(9) is... resistance to ground? kinda difficult to get at

Thanks for the clear, detailed and well commented photos.