I have bought a couple Shelly EM Gen4 and since I noticed they are not supported by esphome, I thought I could try to use one for experiments.
The new generation uses an esp32-c6 (risc-v, QNF40) chip, and has support for Thread.
I have a dump of the 16MB flash if anyone wants it, I tried loading it with ghidra before realizing I had no idea how to use it or read risc-v, so I switched to my old voltmeter instead.
This gen uses the same ADE7953 for the clamps and AIP8563 for RTC, both on the same I2C bus.
I managed to trace the connector pinout, the button, the ADE7953 up to the esp32 chip.
I could not find the pin used for the relay switch and I am unsure on the NTC (is it the small one near the esp32 chip?)
...Then one of my voltmeter cables broke, so I am kinda stuck for now, so I thought I might as well just post here what I found for now.
There are 6 pins on the vertical board that I could not trace:
- GPIO2(8)
- GPIO3(9)
- GPIO10(16)
- GPIO12(18)
- MTDI(11)
- XTALK32K_P(6)
Hopefully it helps someone else.
I honestly don't have much time so I don't know when (or if) I will work on this again, but if anyone has suggestions on how to proceed, or esphome configurations to use for debugging, I will gladly accept any help.
Photos will follow (I'm a new user, I have limits)


