Device https://openbekeniot.github.io/webapp/devices/Tuya_TOMZ_TOB9_63M.html
With itchiptool:
Backup name has not been set, so output file will only contain flash type/date.
Starting read backup and flash new!
Now is: mercoledì 17 dicembre 2025 10:11:06.
Flasher mode: BK7231N
Going to open port: COM6.
Serial port open!
Getting bus... (now, please do reboot by CEN or by power off/on)
Getting bus success!
Going to set baud rate setting (2000000)!
Chip ID: 0x7238
Will try to read device flash MID (for unprotect N):
Flash MID loaded: 152085
Will now search for Flash def in out database...
Flash def found! For: 152085
Flash information: mid: 152085, icName: P25Q16HBK, manufacturer: Puya, szMem: 200000, szSR: 2, cwUnp: 0, cwEnp: 7, cwMsk: 407C, sb: 2, lb: 5, cwdRd: 05-35-FF-FF, cwdWr: 01-31-FF-FF
Flash size is 2MB
Entering SetProtectState(True)...
sr: 7c
sr: 7c
final sr: 7c
msk: 407c
cw: 0, sb: 2, lb: 5
bfd: 0
sr: 0
sr: 0
final sr: 0
msk: 407c
cw: 0, sb: 2, lb: 5
bfd: 0
SetProtectState(True) success!
Going to read encryption key...
Encryption key read done!
Encryption key: 1ee26e11 1ee26e11 1ee26e11 1ee26e11
^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^
WARNING! Non-standard encryption key!
If it's all zero, it may also mean that read is disabled.
Please report to forum https://www.elektroda.com/rtvforum/forum51.html
Or just try using BK7231M mode
^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^
Going to start reading at offset 0x00...
Reading 0x00... failed with serial.BytesToRead 0 (expected 4111)
The beginning of buffer in UART contains data.
With itchiptool:
Unknown bootloader CRC - 0xF42F8C32 - please report this on GitHub issues!
