[BK7231N] How to flash Taxnele TVPS1-63LW - UART no response, 3.3V at 1.xV

Hello,
I'm interested in flashing Taxnele TVPS1-63LW Wi-Fi Multi-Function Protector. So far I was able to disassemble it and solder pins to the only possible (to me) interface. Then I tried to read logs or to backup the original firmware with BK7231Flasher, but no luck.
I tried TX/RX swapping, tracing pins from UART to the CBU was a bit strange - on the 3.3 V of the CBU I can measure only 1.x V (can't remember the exact measure).
I also tried to undock the display board from the one with the CBU on it, but there is no change.
I read that the MCU could take over the tx/rx communication, so that's why I can't communicate with the CBU.

Does anyone has some ideas?

UART is connected to MCU, so RX1/TX1 lines are in use:

You need to cut this connection first. You can either desolder CBU, or the MCU, or maybe those two resistors which luckily are there in place:

Remember to take 2 MB backup of flash before you burn new firmware.

I was able to desolder the R10, R13 and D1. Then successfully attached to TX1 and RX1, saved the original firmware and flashed the 'OpenBK7231N_QIO_1.18.298.bin'. Could you please tell me if it is normal to not see any logs afterwards? I tried with Putty on the TX1/RX2 and TX2/RX2.

TX2 shall output OpenBeken boot log, as long as you provide enough current for WiFi module to run. It's supposed to print every second. Are you getting OBK access point visible at least, or is it totally deaD?

I wasn't able to get any logs. The story is that when power up the communication port and TX/RX are soldered on the CBU, I was able to read/wrire firmware, but no AP or logs. At the same time I measure around 2 volts on the CBU Vcc pin. Then tried to power the CBU directly with 3.3v and then the AP was started, but when trying to get any logs, Putty shows some error.

Instead, I put all the hardware back together and turn it on. Now I will try to configure it further...

I'm progressing slowly...


There are a lot of settings which I want to control or at least to view/read-only. Any guidance on how can access/map settings data? I'm attaching the manual for reference.