Identify Tuya Mini WiFi Relay Module with TR6260 Chip - Encountered by Anyone?

Question

Hi, so i bought a tuya mini wifi relay module. I was expecting another beken device but this is the chip that it came with. Anyone has encountered this? Googling the chip name leads to this doc

divadiow · Accepted Answer

I've received my HLK-M20 module but not worked out the UTP program yet. The HLK-M20 does broadcast an AP. I'm expecting it to be similar to their other shipped firmwares. AT command tests and such (detailed in HLK-M20 PDFs).

I attach the annoyingly difficult to obtain HLK-M20.7z mentioned here https://ask.hlktech.com/question/1039.html as well as the natively-English FCC PDF for the HLK-M20

Log in, to see the code

divadiow · Accepted Answer

I have good news. Flash can be read to file as follows:

GPIO14/TOUT2 needs to be grounded at power-on. Like LN882H this needs to be before power to USB-TTL. Just resetting the device (RST->GND) with GPIO14 grounded will bring it up in spi-flash boot mode, that being standard boot, NOT uart boot mode:

If you're watching TX then the correct procedure will give this output:

then configure the UTP program as follows, using the boot_nocrc.bin from the 烧录工具.zip file posted above. The flash is 1mb so length is 0x100000

PC Local Filepath is just where you want to save the file

And so attached is the HLK-M20 factory firmware backup. It took 2-3 mins so could well be transferring at the 57600 baud used to capture log out.

On the HLK-M20 module GPIO14/TOUT pad is the location of EN on ESP-12F, so if using an ESP universal adaptor it's just a case of grounding EN header.

The LSC6260 module is a little different (pic only added to show TOUT2 location difference - ignore the grounding of RST depicted)

I've not moved onto flashing yet. We could do with a backup or two from some Tuya devices.

divadiow · Accepted Answer

And to flash firmware:

If flashing a backup taken from 0x0 then up to 0x4000 needs to be removed from the file using a hex editor. File 1 needs to be the boot_nocrc.bin file starting from 0x0 then the rest of the trimmed flash from 0x4000

If you flash the whole factory backup file from 0x4000 then it doesn't detect the partition table where it's supposed to start - 0x6000

and the programmer complains with [INFO]Please add partition:

and the failed boot log out:

Log in, to see the code

and finally, a blank English translation of the Downloader tab

p.kaczmarek2 · Answer

It seems that TR6260 was mentioned at least once here: It's swappable to ESP, but I will have to look for SDK in order to support it and furthermore I would need to get at least one piece somehow.

ferbulous · Answer

Thanks, I intend to do that soon since i have a few esp02s

p.kaczmarek2 · Answer

I've got a device with TR6260, but I am unable to find a suitable flasher/SDK for it yet. Boot log: Code: text Expand Select all Copy to clipboard       рШ°АЖЖЮ`ЖfАцЮ■Ю~fЮцЮШрШ``°fЮцЖxрЮАц°Ю рцЮ■~ ШЮцЮxfЖ[00:00:00.681][01-01 18:12:15 TUYA Err][light_main.c:47] led_init LED_DRIVER_PWM_CW product_type: 0x5507  [00:00:00.690][01-01 18:12:15 TUYA Err][cmd_rgb.c:70] ++++++++++++++++++++++++  +++++++++++++++++++++++++  [00:00:00.702][01-01 18:12:15 TUYA Err][tuya_main.c:219] sdk info:  IOT DEFS COMPLETED.  [00:00:03.349]vif[1],event[1]  [00:00:03.352]vif[1],event[27]  [00:00:03.354]vif[1],event[15]  [00:00:12.018][01-01 18:12:25 TUYA Err]  ******** boot count set: 0 ********  [00:03:01.534][01-01 18:15:16 TUYA Err][wifi_cfg.c:31] ****** wifi_cfg_timeout_cb, boot_cnt: 0 ******  [00:03:01.542]sniffer stop, crcerr_close  [00:03:01.546][01-01 18:15:16 TUYA Err][cmd_status.c:184] app_status_clear, reason: 1  [00:05:05.501]wait channel time. [1|4194303]   There are some interesting results when searching for ty_iot_wf_rtos_sdk, but nothing solid yet

p.kaczmarek2 · Answer

It seems that this dev board:


HLK-M20 Serial Port 2.4G WiFi Wireless Module IOT Serial to WiFi Transparent Transmission Low Power SDK M20 Development Board Ki

is using TRS:

TRS6260S1

ferbulous · Answer

That’s quite interesting although I haven’t seen much of tuya device running on this chip

p.kaczmarek2 · Answer

Still no possible flasher tool in the sight. My board had Boot and RX and TX, and in general, datasheet looks kinda like ESP8266 (options to boot from SD, UART, SPI...?), but I haven't managed to get any more progress yet.

karwo · Answer

The mentioned TR6260S1 chip is found in the "ELM 327 WiFi diagnostic interface"

In addition to the aforementioned TR6260, there are MC4063A and LM393 in the interface.
This is how it came into my hands by chance - maybe such information will be useful to someone.

morgan_flint · Answer

Hello! A device based on TR6260 fell into my hands (a friend gave it to me to see if I could repair it) and I found this new (for me ) chip in it. I started searching to see if it was compatible with open beken, but I see that, unfortunately, that's not still the case and it seems it won't be in the near future. Just out of curiosity, I searched ty_iot_wf_rtos_sdk and found this other more recent thread here in elektroda (ty_iot_wf_rtos_sdk appeared in the code embedded in the first post), but the device on that thread is based on a different chip (RTL8710) that, according to your post in that thread, has a greater possibility of being opened, as you've already done some work on it. So, my question is: Does the coincidence of having ty_iot_wf_rtos_sdk in their boot logs mean that these two chips (TR6260 and RTL8710) have something in common? If that was the case, maybe the possible future opening of RTL8710 could also benefit TR6260... Thank you in advance!

p.kaczmarek2 · Answer

No, it's a different chip. See: We need to find an UART way to flash it.

morgan_flint · Answer

Ok, thanks! Hope the method for flashing is found soon; as somebody said elsewhere, these Chinese manufacturers change chips faster than other people do with girlfriends!

divadiow · Answer

HLK-M20 datasheets in Chinese provided by Hi-Link Tech. Google Translate English also.

divadiow · Answer

Christmas has come early! TR6260 SDK and flash tool UTP attached. This is from Skylab who are behind the LSC6260 module.

p.kaczmarek2 · Answer

Nice, what is the difference between DownLoader and Flash Upload? Can it both read and write?

divadiow · Answer

potentially. the file path field is a save path, so it looks to be.
I don't yet have any TR6260 devices to test. ELM327 and HLK-M20 in post

the readme file is useless

Added after 57 [seconds]:

do you still have the Transa Semi LED controller to test with?

divadiow · Answer

Maybe @morgan_flint and @ferbulous have theirs

morgan_flint · Answer

>>21292707 I still have it, I could give it a try.

divadiow · Answer

>>20812359 boo. my ELM327 came with an SV6060P

p.kaczmarek2 · Answer

That sounds like a totally new chip, can you open separate topic and we will look for SDK? I should still have TR6260 somewhere...

ferbulous · Answer

I still have it, already desoldered

divadiow · Answer

>>21290330 >>21290330 toolchain

micbanand · Answer

so I just wire up. my TR6260S1 with 3v3, gnd, rx, tx.
and GPIO14 to ground (instead of missing gpio0 pin) when inserting my programmer
Like I did with the replacement ESP-02S module?
if I will try to make a dump in the weekend

divadiow · Answer

That certainly sounds correct, yes. (common grounds and short cables of course )

jekader · Answer

Thanks @divadiow for gathering this valuable info! The SDK was the missing piece for this platform, worth sharing it on GitHub at some point.

The toolchain seems to be a standard one from Andes - multiple versions are available here https://github.com/andestech/Andes-Development-Kit/releases
The sources are available here: https://github.com/andestech/nds-gnu-toolchain

Didn't manage to find much application-level source code, just some demos for a third-party SDK:
https://github.com/Akeeta/Akeeta-SDK-TR6260/tree/master/akeeta_tr6260/test_example

divadiow · Answer

Sure. Cool What does that mean for ever making a working OpenTR6260 I wonder Added after 1 [hours] 25 [minutes]: ah. I knew I'd seen the partition table laid out nicely somewhere. Here's it a bit tidier Added after 2 [minutes]:

jekader · Answer

Tested the SDK and it does work (does produce a binary at least).

Steps are:
1) download toolchain, extract it and add the bin subdirectory to PATH
To verify, this command should display the compiler version: nds32le-elf-cpp --version
I used this official release but the one attached to this thread should work as well. On Windows, cygwin might be needed too.
2) Install GNU make depending on the OS used
3) Download the SDK and extract it, then go to the scripts directory and run make st_tr6260s1_diff
4) grab the binaries from the out/tr6260s1/standalone folder of the SDK, xip.bin seems to be the one

The application itself built by the makefile is in ref_design/standalone/standalone.c of the SDK - hope this helps bootstrap further porting progress.

Identify Tuya Mini WiFi Relay Module with TR6260 Chip - Encountered by Anyone?

Post #1

Post #2

Post #3

Post #4

Post #5

Post #6

Post #7

Post #8

Post #9

Post #10

Post #11

Post #12

Post #13

Post #14

Post #15

Post #16

Post #17

Post #18

Post #19

Post #20

Post #21

Post #22

Post #23

Post #24

Post #25

Post #26

Post #27

Post #28

Post #29

Post #30

Topic summary