Imagotag 2.6/2.2 BWR GL120 hacking

Chips used

CC2510 - MCU + radio - 8051
NT3H2111 - NFC
GDEW026Z39 - 2.6" EPD display
or GDEW0213Z16 - 2.13" EPD display
both displays use IL0373 driver
TPS61071 - boost converter - used (only?) for white LED
W25X10CL - Winbond 1Mbits NOR SPI flash

CC2510 connections

Port 0

P0:0 - EPD power enable (active low via a P channel fet)
P0:1 - EPD CS (SPI interface chip select)
P0:2 - debug port
P0:3 - EPD SDI (SPI interface serial data in)
P0:4 - SDA to NFC chip
P0:5 - EPD CLK (SPI interface clock)
P0:6 - SCL to NFC chip
P0:7 - not connected

Port 1

P1:0 - NFC VCC (seems to power NFC chip and SPI flash)
P1:1 - NFC FD (field detection)
P1:2 - EPD DC (data/command select for display)
P1:3 - EPD BUSY (detect if display busy)
P1:4 - SPI flash CS
P1:5 - SPI flash CLK
P1:6 - SPI flahs MOSI
P1:7 - SPI flahs MISO

Port 2

P2:0 - EPD Reset (display reset)
P2:1 - debug data and white LED
P2:2 - debug clock and LED boost chip enable (TPS61071)