[Solved] [BL2028N and PAI-053] Dreo Pilot Max S DR-HTF004S High End Fan

Hello all,

Recently went through reversing a high end Dreo fan to cloudcut it and create an ESPHome device and posted the process on Github https://github.com/ouaibe/dreo-cloudcutter

Thanks to the hard work from this community, it wouldn't have been possible without all the specsheets and details posted here.

TL;DR;

- Uses BL2028N (0000... coeffs worked although the real ones are different, OTA Key/IV are still 0123456789ABCDEF).
- Talks UART with a 8051 MCU to control the fan (speed/oscillation/etc.).
- I was able to extract/re-flash the stock firmware using Bk7231 Flasher.
- Found a local webserver that allows OTA via a hidden webpage.
- Was not able to use OpenBeken because I needed to re-implement the UART protocol to control the fan (so had to use ESPHome instead), and a custom checksum algorithm.

That's some article! Good going. I'll re-read and try some bits myself on those Matter devices, see if there's another avenue to get Openbeken going on them.

Closing this, continue the discussion on Github https://github.com/ouaibe/dreo-cloudcutter/issues