King Electric Atmoz Wifi (Archive) V3.1-OTA TH1250WF Line Volt Thermostat Tear Down And Quick Review.. 
(Update 2025 These Thermostats No Longer Work with the Smart/Remote Features)
Let Me Save you Some Reading Time.. This Thermostat Currently is a Big Waste of Time and Money.
If You Want to Use The App and Smart Home Features There May Be a Undisclosed Privacy Risk!
So Far this Device as a manual thermostat is good. but as for the Android App Atmoz and Atmoz 2 is a major failure..
It looks to be a server issue with King Electric’s Smart Home Data Partner Ayla Networks More on that Down Further!!!
Read More If You Wish..
Powered Up.. Has A Nice Display..
As it Was Out of the Box.. 
To Open it it is just one screw you have to open it to be able to mount it on the wall. Yes there is a Non Attached Cover that goes between boards. Removed for Photo. PCB Marked TH1250PWF-V1-1807
Back Side Of Power Relay Board Held In with 2 Small Screws. Again Mixed House Brand Capacitors.. I Did Not Bother Removing the Front PCB Yet. I Will Later and Get the Display Info. The Switching Relay is a 24V 16A SCHRACK – TE CONNECTIVITY RT314024 So it may last a while.. I would really like to see a 20A Here though.. 
Wi-Fi Card is an AMPAK WSDB750GN WiFi-MCU Module FCC Data & User Manual Local Archive
10/29/2025 From the FCC Internal Photos it appears to be a 25L1608E under the shielding I will do a backup attempt of the wifi module would like to do it externally but may have to remove the shielding to do so. (10/30/2025 This is a Custom Module 2 Castellated boards soldered together)
April 15 2026 Now that the weather is getting warmer I can risk one of these Thermostats, I Removed the RF Shielding This has a Broadcom BCM43362KUBG, STM32F411CE6 Both Wafer-Level Chip Scale Package (WLCSP) and a Serial Eeprom a 26Q16 not a 25l160E on the FCC Site. Ill Start with 
MCU is a Renesas Technology Corp RL78/L13 R5F10WMCA (Data Sheet) Used for Display. 
Schematic of The R5F10WMCA Chip It Shows Controlling Display and Thermal Couplers and Front Panel Buttons.
LCD Pin Out.
11/30/2024, It Looks like My Segger Flasher 5 Pro Supports this MCU But with Renasas its probably locked with a code or security bit. When i get a chance I will attempt a backup. 
Pin out Form Data Sheet Looks Like Pins 9 is TOOL0 and Pin 10 is Reset CON2 is where they to Tool0 Pin 3 / Reset Pin 4
Looking at the Segger Flasher Pro Configuration for the Device I do not see any type of flash ID just a General Security Bit, SO If the Security is not active we should be able to get a read in system. 
Decoding The MCU Info.
R = Renesas
5 = MCU
F = Flash
10W = RL78/L13 Group
M = 80-pin
C = 32KB Rom
A = Consumer applications, operating ambient temperature -40°C to 85°C
Figured they Would Have Used A Code
G, L = Industrial applications, operating ambient temperature -40°C to 105°C
Or Even Better
K, M = Industrial applications, operating ambient temperature -40°C to 125°C
Y = Industrial applications, operating ambient temperature -40°C to +150°C
Jumper Locations And Some Other Connectors! CON2 Is MCU Programming Header 
CON2 Pinouts (Pin 1 has the box around it.)
1 VDD
2 GND
3 TOOL0
4 RESET
Update 10/29/2025 a little bit more reverse engineering time! Ticking away the hours.
I Did some more studding on this device since it is now a necessity to repair it now that king electric manufacturing broke it.
Info from probing around.
Con3 (Appears to be Serial UART) I may have to hook it up to see if I can get a terminal. but the signals appear to be serial.
1 VDD 3.3V
2 RDX?
3 TXD?
4 GND
Con4 (Appears Wifi Programming Header or Another UART / Debug?) No it was another MCU possibly the STM32F411CE6
1 VDD
2 SWDIO?
3 CLK ?
4 RST ?
5 GND
Schematic Clip of the Wifi Module My pin outs are confirmed. 
10/30/2025 Something did not look right.. So I took the board out to see the reverse side and investigate a little bit further as I could not trace out the pins to the wifi module or mcu.
when i Pulled the board found another MCU hidden under the display… 
STM32F030C8T6 that Explains the Signals above on connector 4 Ill trace it out. This is probably where all the cheesiness spyware is!! The FCC info did not show this to have an MCU. This must be some soft of custom board. with the wifi module on the top. 
I will give it a look with the Xeltek ISO1 o the Segegr Flasher Pro attempt a backup but it’s prob locked! 
04/15/2026 Weather is getting warmer. I have retaken a X-ray of the PCB after removing the RF Shield and Removing the Serial Eeprom, 40KV was not powerful enough to push thru the RF Shielding. 
Sept 2025, The weather is getting cooler and its time to tun the heat on and no Wifi Control!
I had some extra time so I wired this unit up to attempt a backup with the Segger Flasher Pro / Portable Plus.
I went cave man as I did not have any 2.00mm strip headers handy. 
Looks like I should’ve read a little deeper into the R5F10WMCA datasheet. Turns out the RL78 Series chips can’t just be read with a regular in-system flash programmer Just Erase, Program, & Verify. The RL78 Series need an E2 emulator/debugger and a bunch of extra setup. Plus, debugging has to be enabled and the debug monitor installed which probably isn’t the case here.
There are some reverse-engineering tricks out there, but they can be risky and even destructive to the device. I checked the device lists for my Xeltek, BPM Microsystems, and Data I/O programmers, but no luck none of them support an off-board parallel read. So doing something like I was able to do with the Hakko FM-203 firmware recovery is off the table. That said I still have another backup target, the Wi-Fi card! I believe it uses a 25L1608E serial EEPROM from the FCC Data I looked at with the shield removed. I’ll have to take a closer look and see if there’s an external way to back it up since the shielding is soldered on. not sure how much further I want to go.
04/15/2026 Now that the weather is getting warmer I can risk one of these Thermostats, I Removed the RF Shielding and Removed the Serial Eeprom 25Q16 that contains the firmware.
The Serial Eprom 25Q16 is Prepared for Backup.
Back up with the Xeltek Superpro 6100N Read and Verify Success… 
Confirm some Data… You can see Ayla Networks this lead me to this Github for Ayla API Unofficial
You Can Also See King I this is KING I ELECTRONICS CO. LTD in Taiwan.. 
Exposing more Fraud from King Electrical Manufacturing Company they print on their box Made By King Electrical Mfg Co. that is not True! Having custom firmware and a box is not the same thing as Manufacturing The Device. 
KING I ELECTRONICS CO. LTD in Taiwan KingI Catalog Pages Kinda Definitive proof. I wonder who makes the Hoot? 
STM32F411CE6 I think this chip may hold some firmware also I will attempt to read it with an ST Link or the Flasher Pro May be able to do this backup via Uart Also but i am not that skilled in Uart. 
For what they are charging for these I would think that would go with Name Brand Capacitors but Nope!! Cheap House / Generic Brands! Yes Brands Multiple. 
The App’s are Broken!! The apps will Install and Allow you to Sign Up and you will get an e-mail. But the E-mail is Not Complete!! The Link is there but hidden Missing image or Text.. So the link is Hidden below the Activation / Verification Code See 2nd Image. 
When you Click empty space to trigger the link they sent from your device on the E-mail The Link Launches the App and Will not take Password says it is wrong. 
This is the Link.. IN the Browser..
“https://app-launcher.aylanetworks.com/launch?custom_url=kingI-th1250wf://user_sign_up_token?token=%5B%5Buser_confirmation_token%5D%5D”
The web browser that open gives a 500 Error…
“{“error”:{“code”:”500″,”message”:”500 – Internal server error. The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, admin@aylanetworks.com, and inform them of the time the error occurred. More information about this error may be available in the server error log.”}}”
Atmoz 1 app Will let you log in with a Gmail account But the Atmoz 2 app will Not it gives an Error, And the Face Book Connect Is Broken on both.
The to Enable the Alexa Skill it requires you to link your account Ayla Networks. “Not King Electronics” Via Ayla Networks (Sign in Link) !! King Electric and Ayla if you cannot complete the Sign Up process for an account you cannot link your account to the Atmoz Alexa Skill..
Ayla Networks Phone # Just Goes o Voice Mail..
King Electronics Also Just Goes to Voice Mail..
Facebook Both No Answer..
NO TECH SUPPORT Evening or Weekends = Bad!! I can get a 6.00 China Smart Wifi switch and if there is an issue a Facebook or twitter Response is min’s away..
I was able to get in but it took a little work figuring out and editing their link from a closer inspection of the HTML Above e-mail on a PC.. (%5B%5B) was replaced with (avhx4FFu) your code will be different..
“https://app-launcher.aylanetworks.com/launch?custom_url=kingI-th1250wf://user_sign_up_token?token=avhx4FFu”
You have to do this for both apps.. I am not sure why? it makes it way to complex..
I hope the above and the following helps people having issues.. A Person should not have to spend an entire Saturday messing with something trying to figure out why Aylan Networks and King Electric have these errors!
Update: 9:08 PM I am Still Trying to Link the Alexa Skill But Now Account is Locked.. I Guess To many Log In Attempts LOL… 
Ok, I have Insomnia!
It 10:45 PM I have Connected to Atmoz (1) App, I was able to validate and Log In by making my own link from the e-mails.
I was able to Enable the Alexa Skill and Connect to the Ayla Networks.
I was able to Get Alexa to Discover the Device! Alexa
Another Issue. The Reset Button on the Side Would NOT Reset the Wifi to Default.
I had to turn off The 1st Router I connected to under my Gmail Login, Reset the Device, Connect Wifi Direct to The Atmoz, and Connect Phone to another Internet Enabled router to be able to login and have the Atmoz app discover the device. Then plug the Main Router Back in, and Set it Up!!
This software is buggy as hell.. Way over complicated!! I hope I do not have to go thru this much hassle to reset the wifi again if I change a SSID or Want to Connect to another network.
After this experience there is No way would I would pay the price because of the poor build quality, poor software, complex setup, and!!
The Other Big Thing!!
That King Electric is outsourcing the Data Custodian of these Devices to Ayla Networks which is worrisome has me wondering if Ayla Networks can be trusted with the meta data collect from the app.. Here is their (Privacy Policy) Do a google search ayla data collection and sales.
I had to learn this without any upfront disclosure on the King Website, Catalog Page, Printing on the Box, or on the google play app page. All the photo’s say Atmoz by King.. it should be disclose upfront that Ayla Networks handles the data not King. What is funny in their November 7th What’s New “Fix Password Error Message For Registration”.. Nope King You Did Not Fix It!!
As of Now With The King Line Volt Wifi Thermostat Do Not Walk But Run Away or Just Buy the K702E-2 SIMPLSTAT or One of the other Wifi Choices. For Line Volt Thermostats
Update: 09/2021
This thermostat has major bugs #1 is it will loose it s settings and the heater will come on unexpectedly, Will not hold set temp if using the panel controls but will if using the app. Still searching for an affordable alternative.
Update 11/30/2024
King Is killing These Off!
Atmoz-EOL-Customer-Letter-2024
Update 09/11/2025
Progress With King Electric.. the Right to Repair Schematics, and Firmware. I spoke with a Brad Wilson VP of the company. We discussed the right to repair and a possible solution to the Atmoz thermostats wifi connectivity being broken by King Electric, we discussed we discussed replacements I expressed how he should replace them for everyone not just me, making the source code available so we the community can make our own home assistant control to restore its functionality at our own expense or king having their vendor do he said it was not given to them as an option but he would check. He insisted and said would send me replacement hoot’s. So, There may be hope for the Atmoz owners.
09/17/2025 Brad Wilson sent some illegible UL paperwork thinking it would be OK for the documents part.. They are not legible a total slap in the face!
Pages from ATMOZ UL Report 160726126GZU_CDR_V4 .2-1
October 13th 2025 Wife complained it was cold so I turned the breakers for the heating system on within about an Hour I received an e-mail form Alya Systems that the account has been deleted. I have not received a reply or the replacement brad said he would send. 
October 15th 2025 Wife has a hard time seeing and using these thermostats in manual mode So, I made sure king was aware and that we needed to get this resolved! 
All I received the crickets so I pushed a little harder we needed to get this resolved or I was going to escalate this to small claims court.
The reply was Basically he said I was threatening and cyber bulling and just flat out rude and disrespectful. He Never did send the replacement units as he insisted he would back in September.
He again I feel Mocks My Wife Disability!
This is the message that sealed the seal for the escalation was the 2nd time he made comments like this.
10-31-2025 the Discussions Stalled and This Situation has Escalated into a Law Suit. I don’t like it when people break my stuff.
The law suit was filed 9:02 AM 10-31-2025 Case # 25S00586
Receipt
I filed at 09:02 11/31/2025 At 09:50AM After Suit Was Filed King Electrical Manufacturing sent the Schematics bit No Firmware or Source as Discussed and No Replacement thermostats as he Insisted on sending on Sept 11-2025 Conversation. (Schematics Have Been Filed With the Court As Evidence After Trial Will be Available on Public Record)
Media Coverage.
I will still attempt to try and negotiate a resolution that benefits EVERYONE who owns these ATMOZ Thermostats it’s not about the money, it’s about the principle of ownership. I don’t think they will negotiate in good faith so this will most likely go to trial. The 1st court date is December 8th 2025 that’s the order to go to mediation. I will stream it all or post on my youtube channel.
I have pulled 3 of the Six Thermostats Temporarily for comparison. I will also be attempting to repair these units already have a lot Hours in to reverse engineering. 
I have been poking around to try and figure out if there is a way for me to log in or get root/shell access to the device and regain control of it. 
This is going to require me to remove the shielding on the wifi module and backup the firmware on the chip and use a tool like binwalk etc.
King Electrical Manufacturing Company @kingelectricheat Has Officially Been Served on 11/14/2025 Additional Service was Done Via Certified Mail with a Return Receipt delivered 11/13 
Brad referred me to someone named Jeffry in HR then ignored me LOL.
The man Jeffry has ignored my attempts to work out an amicable solution, I e-mailed notice and copy of the suit and additionally faxed copy of just the complaint on November 4th so he had time to review. He must have thought I was joking from his reply! On 11-17-2025 that is 13 Days!! He must have thought I was joking? Only responds after official service? 
I was going to have the King County Sheriff serve this and FOIA the body cam for content but they no longer serve small claims 🙁 I was hoping to get a process server or someone in Seattle with a body cam to do the service but could not find anyone brave enough to do it.
Jeffry thinks it matters to provide him quantity, date, vendor and price.. at this point in time it is irrelevant brad the owner Knows my initial proposal and how many Tstat I have.
I will be filing another Small Claims Complaint on King Electrical Mfg for the businesses office thermostat as my attempts to resolve that separate matter have been also been rudely dismissed. I have attempted many times and just rude customer service agents and tech support.
I have been contacted by a few attorneys considering taking this as an ADA Case if it needs to go that far. (Lets Hope it Don’t)
December 8th 2025 Small Claims Suit Hearing.
King Electrical Manufacturing and I have a Scheduled for Mediation Session on Jan 30th 2026, I am sure we may have a subpoena hearing or two between now and then.
December 12th 2025
I attempted to negotiate with king electrical manufacturing in good faith.. Jeffry seemed to want not to discuss the details with brad who was well aware of the Discussions on Sep 11 2025, So I sent them a proposed settlement offer via e-mail. 
I was not asking much for myself most the settlement was to be able to help others maybe some donation to some charities including one that helps the visually impaired children get assistive devices.
Proposed Settlement King Electrical MFG
December 17th 2025
Scheduled Mediation Has been Cancelled and Return to Court For Non Jury Trial Has Been Received by the Courts. 
December 19th Jeffry Sent a Reply to my proposed settlement he also acknowledged the new hearing date. 
King Electrical Mfg Co Proposed Settlement Response 12-19-2025 Reply
You Will see that I was not asking much for myself… But they Crossed nearly everything out Including the Apology to the wife and Donations to the Charities… 
Did he really think that this would be acceptable? This is a matter of public interest i have not agreed to any confidentiality. Did he think crossing out every thing but replacements thermostats and court costs? Was going to gut it?
December 23rd I Have Presented all my Evidence to King Electrical Manufacturing Company and Submitted it to the Court Per the Court Rules. All Evidence Submitted Is Now a Matter of Public Record. At the time of Filing my evidence King Electrical Manufacturing Company has not presented me with any Exhibits.
I have spent weeks trying to reach someone at Alya networks they are for sure still in business and on Dec 29th 2025 I was able to make contact with a salesman. I inquired how much it would cost for their development kit to maybe reactivate these thru them.
Here is the Audio Recording of Brad Wilson and Myself. Some Key Time Stamps.
- [0:02:12] “we can offer a replacement.”
- [0:02:28]-[0:02:30] “we can provide some new thermostats.”
[0:04:45] “How many, how many of the Atmos thermostats were sold, and are you willing to do that for everybody that has these installed in their homes?” - [0:05:20] “I’m willing to replace those for you.”
[0:07:38] “Yeah but what are you going to do this for everybody that owns these,” - [0:11:37] “I can provide a solution to replace all those thermostats, all six of them.”
- [0:11:48] “okay, but I’m, I’m still requesting the schematics for ever for everything”
- [0:23:33] “see about sending you six replacements.”|
- [0:23:47] “Yeah, that’s fine.” (in response to the offer to send six replacements)
- [0:11:53] States he can forward the request to suppliers, who can provide schematics/firmware.
- [0:12:02] Notes he has to do it via email, as his contacts are unavailable at that time.
- [0:26:44] Offers to work with his team to try to obtain the source code once Steven emails him.
Watch It… Transcript With Transcript
12/30/2025 King Electric Presented Their Evidence Here it is…
The trial Was Jan 7th 2026 and is Over Judge will make her decision in the next 7 days and send it via mail.
I will get the video of the trial from the court and post when available.
Brad Wilson Did not show up they Sent Jeffry Borgida From (Sales/HR)
Update March 18th 2026 The Judge Dismissed this Case, I have Filed an Appeal to the Superior Court I believe I made my case and the judge did not conciser all the facts and relevant laws. I should be able to get another chance to present my case DE NOVO with a superior court judge. Awaiting Court Date for new rial.
Fees $320.00 + Appellant Bond 
Update 03/27/2026 Process Service Complete.
I have a federal option also if the DE NOVO appeal fails.. that will cost 405.00 to file + service fees. The wife thinking of ADA claim also.
Update 04/15 2026 I Noticed a 2nd Version TH-1250-WF-V2-1622 Don’t Recall the order of install. This V2 Has a MSP430F4152 ATSAMD21E16A the silver device is a Infineon Murata Type 1AD-AYLA module.
X-ray of King Electrical Manufacturing Atmoz TH-1250-WF-V2-1622 
My Segger Flasher Pro Supports Both The programmable Devices for In System Programming, As Well as the Xeltek Programmers for off board programming.
Closeup X-ray of this PCB. 
LBWA1CS1AD Infineon Murata Type 1AD-AYLA This is the device that will most likley hold the firmware in is flash I will need to research it will most likely have a SPI breakout to the 16Mbit flash or to the mcu for updates. 
Block Diagram LBWA1CS1AD the LBWB1ZZ1AD-ATEMP-AYLA Development Kit documentation may be useful. From some quick reading it may be possible to back up this device with the flasher pro using Segger J flash and a generic Cortex-M3 profile and a memory-mapped SPI flash address Flash Base Address: 0x00000000
Flash Size: 0x00200000 (16Mbit = 2MB)
Sector Size: 0x00001000 (4KB typical)
WICED Studio and a Jlink Ill have to think on it a little.
From Public Records..
King Electric MFG Co. Owner…
BRADLEY JOHN WILSON
aka: BRADLEY J WILSON, BRAD JOHN WILSON, BRAD N WILSON
Male | Age 67 | Born Mar 1958
2ND AVE SW, BURIEN, WA 98166
(425) 876-4220
Other Businesses.
B-RAD INNOVATIONS LLC : ADMINISTRATIVELY DISSOLVED
Last Updated on April 22, 2026 by Steven Rhine