Mirabella Genio Wi-Fi Door and Window Sensor - Teardown

wolfieeewolf 2751 1

TL;DR

Mirabella Genio Wi-Fi Door and Window Sensor teardown focuses on an XR809 - XR3-based sensor module.
Flashing uses phoenixMC.exe over UART with a SparkFun Serial Basic Breakout - CH340G and a seven-wire pinout including VCC, TXD0/RXD, RXD0/TXD, PB02/PB03, and EN to GND.
The sensor cost $27.00 at KMart, and flashing took over 30 minutes because the probes repeatedly needed realignment.
Reflashing with different versions of OpenBk let the device appear on the network, but the website still failed to respond.
Flashing is fragile because all connections must make solid contact, or the upgrade fails.

AI summary based on the discussion. May contain errors.

Report a violation of the law

Reply Cool? Ranking DIY | New topic

Notify about new articles

Listen:

Topic author Helpful post? (0)

XR3 flashing wiring and phoenixMC setup
Post #1 20527084 06 Apr 2023 05:58

Device Name: Mirabella Genio Wi-Fi Door and Window Sensor
Device Type: Door and Window Sensor
Device Chip: XR809 - XR3
Device Purchased: KMart - $27.00

Flashing of Main Chip

XR3 Module Datasheet

You will need to download phoenixMC.exe

Step 1 - Connect your hardware to your UART device.

I used a SparkFun Serial Basic Breakout - CH340G to flash this module.

VCC - Power
TXD0 - RXD
RXD0 - TXD
PB02 - GND
PB03 - GND
EN - GND
GND - GND

You will need to have all these connections for the module to flash. Take your time making sure they all have a good connection or flashing will fail.

I use an ECU programming frame to flash my modules. This is the one I use

You will have to buy an extra set of probes as it only comes with 4 and you need 7.

Step 2 - Using phoenixMC.exe

Introduction to PhoenixMC
PhoenixMC is a flashing tool designed for the XR871 chip in a Windows environment that includes flash debugging functionality.

The programming tool's main interface

1 - Serial Port Settings
A list box displays available serial ports. Select the serial ports that require firmware upgrade and click the refresh button if the serial port number changes. The upper drop-down box enables the selection of the serial port baud rate, and the chip only supports three baud rates: 9600, 115200, and 921600.

2 - Choose Firmware
Click the "Select Firmware" button, and a dialog box will appear to select the *.img file. The file path will be displayed in the edit box at the back, and the information of the image file will be displayed in the information box.

3 - General Settings
If there is a need to burn ETF firmware, select the "Burn ETF firmware" option, and a dialog box will appear for the user to select the required ETF firmware. Tick the "Verify after writing" option to read back the data for verification. If the communication protocol comes with verification, it is safe to uncheck this option. Checking "Update only modified files" will read the data of the block on the flash first, and if it is the same as the data to be programmed, the block will not be updated.

4 - Upgrade Firmware
Click the "Upgrade Firmware" button to perform the upgrade operation.

5 - Progress Bar and Status Prompt
The progress bar displays the current serial port programming progress. The status prompt bar indicates the current operation step. The progress bar displays green when the programming is successful, red when it fails, and blue when the programming is in progress.

6 - Stop
Click the "Stop" button to stop the current flash programming manually.

Using the program

1 - Check the serial port number and baud rate you need to program.

2 - Click "Select Firmware" to select the *.img file that needs to be upgraded, and view the file path and information displayed in the edit box and below the box, respectively.

3 - Select ETF firmware and verify the configuration, as required.

4 - Click "Upgrade Firmware" to perform the upgrade operation.

5 - Manually click to stop the operation, if necessary.

6 - The system will display "Update OK" or "error" to indicate the result of the upgrade.

Issues with flashing

Due to having so many pins to connect to you are bound to have issues. If it doesn't flash the first time check your connections and keep trying. It took me over 30 minutes to flash this device as I had to keep realigning the probes on the pins to make sure I had proper contact.

Configuration of Module

Unfortunately, I have not had success in configuring this module. I can get the device to show up on my network but when trying to connect to the website it fails to respond.

I have reflashed the device a few times with different versions of OpenBk but the results are all the same. I'm unsure what is happening and it could be something on the device is blocking the chip from loading or an error in the uploading of the firmware. Will keep tinkering and hopefully get a result. Will update this post if I have any success.

Cool? Ranking DIY

W pełni konfigurowalna automatyzacja domu - prezentacja Fox Wi-Fi Quad Input [sponsorowany]
About Author
wolfieeewolf wolfieeewolf

Level 11
Offline

Joined: 10 Feb 2023

Posts: 93

Help: 7

Posts rating: 20

Points: 164
wolfieeewolf wrote 93 posts with rating 20, helped 7 times. Been with us since 2023 year.
ADVERTISEMENT
#2 20528487 06 Apr 2023 22:39

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Posts: 14792

Help: 659

Rate: 12937
Helpful post? (0)

Post #2
20528487 06 Apr 2023 22:39

Thanks for detailed update. I have some XR3 modules, so i will look into that soon, but maybe first I will solder one XR3 into NodeMCU board to have easier workflow. Last time I checked XR3 was working great, but it didn't feature a power save feature, which might not be good for battery powered devices.

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
Create an account, log in here. You will receive points by participating in discussions.
Join this discussion.

Install Elektroda application

Didn't find an answer? Ask Artificial Intelligence (AI)

*I agree to send the question to OpenAI, Google LLC - owners of language models in order to prepare the best response. The companies may monitor and log information entered into the form.

*I agree to publicly display my question and answer. The question and answer will be publicly available to everyone. The process may take a few minutes. Upon completion, you will be redirected to the page with the answer.

Wait...(2min)

Reply Cool? Ranking DIY | New topic

Notify about new articles

Listen:

Report a violation of the law

Home page
/
Forum
/
Smart Home
/
Smart Home IoT
/
Smart Home Devices
/
Mirabella Genio Wi-Fi Door and Window Sensor - Teardown

FAQ

TL;DR: This FAQ explains the 7-wire XR809/XR3 flashing method; the key warning is "check your connections" because poor probe contact can waste 30 minutes. It helps Mirabella Genio sensor owners flash with phoenixMC.exe and diagnose OpenBK web-interface failures. [#20527084]

Why it matters: The Mirabella Genio door/window sensor can be reflashed over UART, but its small XR3 pads make reliable contact the main practical barrier.

Option	Specific value from the thread	Practical use
SparkFun Serial Basic Breakout CH340G	1 USB-to-UART adapter used	Connects TXD0, RXD0, VCC and GND for flashing
ECU programming frame	4 probes included, 7 needed	Holds pogo probes on small module pads
phoenixMC.exe	Supports 9600, 115200 and 921600 baud	Writes the selected *.img firmware
OpenBK firmware attempts	Several versions tried	Device joined Wi-Fi but web page did not respond

Key insight: Flashing depends more on stable physical contact than software choice. The thread reports repeated realignment of 7 probe connections before the XR3 module would flash.

Quick Facts

Device identified: Mirabella Genio Wi-Fi Door and Window Sensor, device type door/window sensor, chip XR809 - XR3. [#20527084]
Purchase source and price in the teardown: Kmart listing at $27.00 for the Mirabella Genio sensor. [#20527084]
Required flash connections: VCC, TXD0, RXD0, PB02, PB03, EN and GND, totaling 7 contact points. [#20527084]
PhoenixMC baud-rate options named in the thread: 9600, 115200 and 921600. [#20527084]
Reported flashing difficulty: more than 30 minutes spent realigning probes before a successful flash attempt. [#20527084]

How do I flash a Mirabella Genio Wi-Fi Door and Window Sensor with an XR809/XR3 chip using phoenixMC.exe?

Flash it by wiring the XR3 UART pads, selecting an *.img file, then running Upgrade Firmware.

Connect VCC, TXD0, RXD0, PB02, PB03, EN and GND.
In phoenixMC.exe, select the serial port and one supported baud rate.
Choose the firmware *.img file, then click Upgrade Firmware.

The tool reports “Update OK” or “error” after writing. [#20527084]

What pin connections are needed to put the XR3 module into flashing mode on the Mirabella Genio door/window sensor?

Use 7 connections: VCC to power, TXD0 to RXD, RXD0 to TXD, PB02 to GND, PB03 to GND, EN to GND and GND to GND. The teardown says all these connections are needed for flashing. Loose contact on any one pad can stop the flash process. [#20527084]

Why does flashing the Mirabella Genio XR3 door/window sensor fail even when phoenixMC.exe detects the serial port?

Flashing fails when one of the 7 probe contacts loses reliable electrical contact. The module needs several grounded pins plus UART and power. The author spent over 30 minutes realigning probes before flashing worked. This is the main failure case described, even before firmware configuration begins. [#20527084]

What is PhoenixMC, and why is it used for flashing XR809 or XR3-based Tuya devices?

PhoenixMC is a Windows flashing tool for XR-family chips that writes firmware and includes flash debugging functions. The thread describes it as designed for the XR871 chip, while using it for the XR809/XR3 module. It selects serial ports, baud rate, firmware image, verification options and the Upgrade Firmware action. [#20527084]

What is the XR3 module used in the Mirabella Genio Wi-Fi Door and Window Sensor?

The XR3 is the Wi-Fi module identified in the sensor teardown, with the device chip listed as XR809 - XR3. "XR3 module is a Tuya-linked Wi-Fi module that provides the sensor’s main wireless control function, using UART-accessible pads for firmware flashing in this teardown." [#20527084]

What is UART, and how is it used when flashing Wi-Fi smart sensors?

UART carries the serial connection between the USB adapter and the XR3 module during flashing. "UART is a serial communication interface that sends and receives data over TX and RX lines, allowing a computer adapter to transfer firmware commands to a smart sensor module." In this teardown, TXD0 connects to RXD and RXD0 connects to TXD. [#20527084]

What is a baud rate, and which baud rates does the XR809/XR3 chip support in PhoenixMC?

A baud rate sets the serial communication speed used during firmware transfer. "Baud rate is a serial-speed setting that defines how many signal changes per second a UART link uses, directly affecting firmware transfer compatibility and reliability." PhoenixMC lists 9600, 115200 and 921600 as the only supported chip baud rates. [#20527084]

How do I choose the correct firmware image file for an XR809/XR3 device in phoenixMC.exe?

Choose a firmware file with the *.img extension using the Select Firmware button. PhoenixMC then displays the file path and image information in its interface. The thread does not name a specific OpenBK build that fully worked on this sensor. It reports several OpenBK versions with the same web-interface failure. [#20527084]

Why might an OpenBK-flashed Mirabella Genio sensor appear on the Wi-Fi network but fail to load its web interface?

OpenBK may boot enough to join Wi-Fi while the web interface still fails to respond. The teardown reports this exact state after several reflashes. The author lists two possible causes: something on the device blocking chip loading, or an error during firmware upload. No confirmed fix appears in the thread. [#20527084]

What troubleshooting steps help when OpenBK does not respond after flashing an XR3-based Mirabella Genio sensor?

Reflash the XR3 and verify every physical connection before assuming the firmware is bad. The thread recommends checking probe alignment because flashing required many attempts. Try another OpenBK version only after confirming the 7 required connections. The reported failure remained after several reflashes, so record each image and result. [#20527084]

SparkFun Serial Basic Breakout CH340G vs other USB-to-UART adapters — which is better for flashing XR809/XR3 modules?

The SparkFun Serial Basic Breakout CH340G is the only USB-to-UART adapter confirmed in this teardown. The author used it to flash the XR3 module. The thread gives no measured comparison against other adapters. Choose any adapter only if it exposes compatible VCC, GND, TX and RX connections. [#20527084]

What is the purpose of grounding PB02, PB03, and EN when flashing the XR3 module?

Grounding PB02, PB03 and EN places the XR3 module into the required flashing condition described in the teardown. The wiring list grounds all three pins separately. Without those grounds, the author states the module will not flash. This makes them part of the boot or programming-mode setup. [#20527084]

How can an ECU programming frame or pogo-pin fixture make flashing small XR3 modules easier?

An ECU programming frame holds spring probes against small XR3 pads so hands-free flashing becomes easier. The frame in the thread came with 4 probes, but the XR3 wiring needed 7. The author had to buy an extra probe set. Even with the frame, probe realignment remained necessary. [#20527084]

What power-saving limitations should I expect when using OpenBK on battery-powered XR3 door and window sensors?

Expect battery-life concerns because XR3 OpenBK support lacked a power-save feature at the time of the reply. A developer noted XR3 had worked well before, but missing power save was not good for battery-powered devices. That limitation matters directly for door and window sensors. [#20528487]

Where can I buy the Mirabella Genio Wi-Fi Door and Window Sensor, and what hardware should I prepare before opening it?

The teardown lists the Mirabella Genio sensor as purchased from Kmart for $27.00. Prepare a USB-to-UART adapter, phoenixMC.exe, firmware *.img file and enough probes for 7 connections. The author used a SparkFun CH340G adapter and an ECU programming frame. The frame needed extra probes beyond its included 4. [#20527084]