Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

Hello,

this product is the S06 Version of the IR Blaster. For the S06Pro Version I found this Teardown article:

https://www.elektroda.com/rtvforum/viewtopic.php?p=20238985#20238985

Which is similar, has the same package and case but a different pcb and another Chip. I didnt found this product on the official list so I took it on me to make a little post for someone who had the same questions like me.





This IR one uses the CB3S chip. Here is the PCB



And here is the official Tuya Module Datasheet:

I used the BK7231Flasher Tool to Flash the Chip with the OpenBK7231N Firmware. The Tool is very useful and even downloads the right file for you. Because this IR Blaster uses the CB3S Chip, you have to select BK7231N Type. After downloading the firmware I connected the Chip to my USB to TTL bridge. You can use any bridge (The Github guide of the tool was a good tutorial). It should have VCC on 3.3V. I soldered the wires onto the PCB on the right places, no need to go straight onto the chip.

VCC-> 3.3V
GND -> GND
RX -> TX1
TX -> RX1
(See colored Points in picture)



After starting the flash process I disconnected the VCC wire from the TTL Bridge and reconnected it, instead of shorting ground with the CEN pin. After Flashing it, it opened the Access Point and I could configure it on the webpage.

The Pin Configuration is this (This took the longest time to find out, by using the multimeter and Trial and Error):

IRRecv | P7 (PWM1)
IRSend | P26 (PWM5)
LED | P8 (PWM2)
Btn | P6 (PWM0)

I bought this as a zigbee version to connect with home assistant, but got delivered this wifi version. If you happen to have the same problem, you can use this transmitter with mqtt and home assistant. If you have questions about it feel free to ask.