logo elektroda
logo elektroda
X
logo elektroda

"Xiaomi" X6 "4K" Mini Spy Camera from Ali Express: Taixin TXW817-810 MCU, CK803

divadiow 1134 8
ADVERTISEMENT
  • #1 21546269
    divadiow
    Level 34  
    Here's some info about a "Xiaomi" X6 "1080P" ("4K" on Ali page) mini spy camera. Very familiar YsxLite manual/app setup - same as many A9 type cams.

    It was bought from Ali Express at https://www.aliexpress.com/item/1005008608595789.html
    Image of a Xiaomi X6 mini camera offer on AliExpress, with large 4K text and a small black cube camera next to a smartphone, on a white background.

    Like several of my A9s, this comes with the Taixin Semi (HugeIC) TXW817-810 MCU at its heart. The TXW817 line consists of these two variations

    ParameterTXW817-824TXW817-810
    Package TypeQFN48QFN48
    MasterCK803CK803
    Main frequency (MHz)240240
    Flash (KB)20481024
    RAM (Byte)272*1024 +4096*1024272*1024
    GPIO2931
    Operating voltage (V)3 ~ 3.63 ~ 3.6
    Operating temperature (°C)-40 ~ 85-40 ~ 85
    Advanced Timer2*16bit2*16bit
    General Timer9*32bit9*32bit
    WatchDog11
    PWM1414
    RTC11
    UART33
    SPI33
    IIC22
    ADC11
    DAC11
    Code encryption
    SDIO11
    USB11
    RMII11
    Operating frequency band(MHz)2.4G2.4G
    SDC11
    DVP11
    MJPEG2 enc + 1 dec2 enc + 1 dec
    IIS22
    PDM11
    M2MDMA22
    AES11
    CRC11
    TRNG11
    QSPI11
    Video Encoding
    LCD(RGB&MCU)11
    AudioADC11
    AudioDAC11


    Pinout diagram for the Taixin TXW817-8x0 QFN48 chip with labeled pins.

    Like the WinnerMicro W80x, these are based on the C-SKY architecture. CK803 in the case of the TXW817s

    Pics of packaging and device inside and out.

    HD WiFi mini camera set including packaging, user manual, the camera, mount, and USB cable on a light carpet. Packaging of a mini spy camera showing four example uses: house, shop, child, and sports. Packaging of a mini spy camera labeled HD WiFi Camera with a product and manufacturer information sticker. Photo of a mini spy camera HD WiFi 1080P package and YsxLite manual on a carpet.
    Small black cube-shaped spy camera on a round magnetic stand, placed on a light-colored carpet. Close-up of the bottom of a mini spy camera with a micro USB port labeled DC, a TF microSD slot, and a red LED indicator. Mini spy camera in a black cube shape with two buttons and an LED on top, mounted on a stand. Disassembled mini spy camera with visible electronics and casing on a light brown carpet. A disassembled mini sports camera without a case on a light beige carpet. Disassembled electronic device with a visible battery and circuit board on a carpet. Printed circuit board with microSD card slot, microphone, and lithium polymer battery. A printed circuit board with electronics, a battery, and a black plastic casing on a white background. Camera module on a green PCB with visible electronic components. PCB board with connected wires and visible micro USB port. Disassembled components of a small camera: PCB, lithium-polymer battery, and lens. Printed circuit board with electronic components and connected wires. Printed circuit board with electronic components and a connected lithium-polymer battery. A printed circuit board with a microSD card slot and a connected battery. A printed circuit board with electronic components, a memory card slot, and connected wires. Digital camera module on a white background.

    silkscreen marking:
    STD-X6-MAIN-V01
    20240328

    No markings on the battery but it's measuring at 3.86v
    A digital multimeter by Parkside showing a 3.86 V voltage reading on the display.

    These two unlabelled pads are RX/TX so from TX at 921600 baud the boot log can be captured
    PCB with a microSD card slot and labeled UART RX/TX connection points.
    Code: Text
    Log in, to see the code


    we can see the real resolution of the camera in the initialisation in log - VGA

    Code: Text
    Log in, to see the code


    The camera ribbon has printed on it DC-H8-7 04-6182V1 (I think) - not sure who this cam is by yet.
    Electronic camera module labeled DC-HB-7 on a blue background.

    Despite being C-SKY related I have not been able to establish any CK-Link type connections to it using the HDA and HCK pads. I do not know if the factory program these with those two or with with some USB type thing using HSDP and HSDM. This particular cam doesn't seem to expose RESET either, so I didn't expect CK-Link method to work.

    We see here in a previous post that a programming application is provided by Taixin but it looks intended for use with their TXLink programmer

    TXLink-Lite programmer by Taixin Semiconductor, with buttons and LED indicators

    I was hoping it's just a CK-Link rebrand device. Maybe it is and I haven't got the process right with CK-Link. I ordered one from Taobao so that should arrive in a couple of weeks.

    I'll add more to this thread in coming days/weeks.
  • ADVERTISEMENT
  • ADVERTISEMENT
  • #3 21548509
    divadiow
    Level 34  
    divadiow wrote:
    The camera ribbon has printed on it DC-H8-7 04-6182V1 (I think) - not sure who this cam is by yet.


    I plugged this cam into an XF16 to see which driver initialised re https://www.elektroda.com/rtvforum/topic4074636-180.html#21547719

    Code: Text
    Log in, to see the code


    maybe the "8" is a "0" H0704 = HI0704

    and it works in XF16
    Close-up of fingers holding a blue object in front of the camera lens with an app interface in the background.
  • #4 21548811
    p.kaczmarek2
    Moderator Smart Home
    So the camera from this device is compatible with XF16 cameras? That's a good to know information. Now we need to know the pinout of the camera
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #5 21548825
    divadiow
    Level 34  
    seems to be, and I'm guessing/hoping all the other cam modules I have are too - the connector *looks* the same across them all - the ribbon and print is different so I'm expecting a variety of cam models to be detected. I'll label and photo them all in the process when I get to it.

    We do need to know pin-out. 18 pins
    Close-up of a 18-pin electronic connector with gold-plated pins and a metal housing.
  • #8 21563291
    xury
    Automation specialist
    I have a TXW817-810 on the same chip
    Electronic module with TXW817-810 chip, microSD card slot, micro USB port, and battery. .
    Is it possible to drop alternative FW into it?
    I will probably have access to about a hundred of these camcorders
  • ADVERTISEMENT

Topic summary

The discussion centers on the "Xiaomi" X6 mini spy camera sold on AliExpress, advertised as "4K" but actually 1080P, which uses the Taixin Semi TXW817-810 MCU (CK803 core). This MCU variant features 1MB flash and 272KB RAM, operating at 240 MHz with multiple peripherals including UART, SPI, I2C, ADC, DAC, and timers. The camera module is identified as HI0704, confirmed by successful chip ID reading and initialization, and is compatible with the XF16 camera driver. The camera connector has 18 pins, with ongoing efforts to map the pinout and label additional pads. A 1MB flash backup of the device firmware has been extracted and shared. No alternative firmware is currently available, but cloud-free operation may be achieved using the cam-reverse project. SDKs for the MCU are accessible for custom firmware development. The device includes an LED ring around the lens. The TXW817 MCU line includes two variants: TXW817-824 (2MB flash) and TXW817-810 (1MB flash), both with CK803 cores and similar peripheral sets.
Summary generated by the language model.
ADVERTISEMENT