![[ZIGBEE] 20A Zigbee socket with energy metering (Tuya TS011F_plug_3)](https://obrazki.elektroda.pl/1000454900_1749493372_thumb.jpg)
Here's another BK7252U cam but this time its beating heart is the 48 pin BK7252UQN48. The usual claims of HD 1080P, night vision, Xiaomi, are seen on the Ali page from which it was bought
My journey for this travels the same path as with these other two BK7252U devices, so I'll skip the waffle and go straight to posting some pics, logs and firmware backup,
https://www.elektroda.com/rtvforum/topic4123266.html
https://www.elektroda.com/rtvforum/topic4073760.html
A9_B
V2.7_240426
XCCD0060-A11
cn1084274271nkea
Item: Xlaomi A11 Wireless Camera Mini Wifi Monitoring 1080p HD Video
Security Camera Rechargeable Battery Motion Detection Camera New
Manufacturer: Shenzhen Zhiyu Network Technology Co., Ltd
No. 66 Chuangye Road, Pirgshan District, Shenzhen City, Guangdong Province, 19355
983149
Boot log from TX pad @115200
Using TDI, TDO, TMS, TCK and CEN pads with CH341 SPI flash backup with Neoprogrammer after getting into SPI mode using Python program.
2mb flash. The same XTX Technology XT25F16B flash seen before. ID 0B4015.
Camera identified as a GalaxyCore GC0312.
2mb UART backup taken with Easy Flasher in BK7231T mode compares as identical to the SPI backup according to HxD.
SREG2 and SREG3 checkboxes required unticking in AsProgrammer before flash could be erased/written
OpenBK7252_QIO__7231u_t_c1b0ac146bf0.bin flashed from 0x0 with Neo boots and OTA works
With original bootloader and OpenBK7252 flashed to 0x11000 with Easy Flasher, rbl files written to 0x132000 are ignored on reboot (no OTA) I guess meaning that SPI flash will be needed for OTA ever to happen or OpenBK7252 will need variations to cater for different download partition start addresses depending on the device. Assuming OpenBK7252 gets developed. I'll post more about the factory partition layout later.
Factory firmware does not broadcast a wifi AP but instead is discovered by bluetooth using the Naxclow V720 app - https://www.naxclow.com/
OpenBK running with this in startup to calm it down because it starts all drivers at the moment.
SPI flash backup https://github.com/openshwprojects/FlashDumps...mits/ba0ea148cc91ec717279692d1398568e67f14c80
My journey for this travels the same path as with these other two BK7252U devices, so I'll skip the waffle and go straight to posting some pics, logs and firmware backup,
https://www.elektroda.com/rtvforum/topic4123266.html
https://www.elektroda.com/rtvforum/topic4073760.html
A9_B
V2.7_240426
XCCD0060-A11
cn1084274271nkea
Item: Xlaomi A11 Wireless Camera Mini Wifi Monitoring 1080p HD Video
Security Camera Rechargeable Battery Motion Detection Camera New
Manufacturer: Shenzhen Zhiyu Network Technology Co., Ltd
No. 66 Chuangye Road, Pirgshan District, Shenzhen City, Guangdong Province, 19355
983149
Boot log from TX pad @115200
Code: Text
Log in, to see the code
Using TDI, TDO, TMS, TCK and CEN pads with CH341 SPI flash backup with Neoprogrammer after getting into SPI mode using Python program.
2mb flash. The same XTX Technology XT25F16B flash seen before. ID 0B4015.
Camera identified as a GalaxyCore GC0312.
2mb UART backup taken with Easy Flasher in BK7231T mode compares as identical to the SPI backup according to HxD.
SREG2 and SREG3 checkboxes required unticking in AsProgrammer before flash could be erased/written
OpenBK7252_QIO__7231u_t_c1b0ac146bf0.bin flashed from 0x0 with Neo boots and OTA works
Code: Text
Log in, to see the code
With original bootloader and OpenBK7252 flashed to 0x11000 with Easy Flasher, rbl files written to 0x132000 are ignored on reboot (no OTA) I guess meaning that SPI flash will be needed for OTA ever to happen or OpenBK7252 will need variations to cater for different download partition start addresses depending on the device. Assuming OpenBK7252 gets developed. I'll post more about the factory partition layout later.
Factory firmware does not broadcast a wifi AP but instead is discovered by bluetooth using the Naxclow V720 app - https://www.naxclow.com/
OpenBK running with this in startup to calm it down because it starts all drivers at the moment.
Code: Text
Log in, to see the code
SPI flash backup https://github.com/openshwprojects/FlashDumps...mits/ba0ea148cc91ec717279692d1398568e67f14c80
