Showing posts sorted by relevance for query programmer. Sort by date Show all posts
Showing posts sorted by relevance for query programmer. Sort by date Show all posts

Feb 3, 2013

MTX USB SPI NAND Flasher Programmer


Matrix 360 NAND Programmer MTX USB SPI Flasher V1.0 For XBOX360 Game Module


Specification:
  • Matrix NAND Programmer MTX SPI Flasher V1.0 For XBOX360
  • Cost effective NAND reader / programmer to complete the GliGli Hack.
  • It features a PIC18F2455 microcontroller for stable and quick reading/writing of all NAND models available on the different XBOX360 models.
  • The Matrix NAND programmer is also fully compatible with NANDPRO 2.0e and several other third party programming tools.
Features:
  • Fast USB SPI 360 NAND programmer.
  • Fully compatible with all XBOX360 NAND models.
  • Fully compatible with NandPro2.0e Software and other third party software.
  • Easily reprogrammable with via USB connector.
  • Quick reading and writing times.
  • Microchip based for enhanced stability

Dec 13, 2012

Step by Step How to Used SPI Program Flasher

This tutorial for Wimax BM622i modem you need a know how in hex and electronics, you need also a hot air tools. Change MAC using LPT Flasher and dump files and SPI Program, There are humor that Bm622i is similar to xbox 360.

1. Be sure na connected yung programmer sa voltage source 9-12VDC at least 500mA.

2. Connect your LPT/PRINTER cable sa socket ng programmer. DO NO USED USB-LPT CONVERTER! It will NOT work!

3. Run the software and SELECT your LPT Port.


4. After selecting the port kung saan nakakabit yung programmer, TEST HARDWARE nyo po. Dapat DETECTED yung programmer nyo.


5. Once na detected na yung programmer, CALIBRATE nyo na.


6. Now we are ready for programming...


Sundan nyo na lang po sumusunod na images panu mag program at mag save ng DUMPS.




USED HEX WORK STATION TO EDIT DUMP FILE FIND YOUR MAC THEN EDIT





After Verify Device you done..


How To Put MAC? On your HEX Editor Find a MAC with COLON :


ang orig na mac ay 40:4d:8e:6c:1b:da

kahit 40:4d:8e lang i type mo sa search ok na

ang na search naman natin ay 40:4d:8e:6c:1b:d9 ( minus 1 kasi )

pwede mo na i edit o palitan ang mac.....

kung ang working na mac na ilalagay mo ay

40:4d:8e:6c:1c:88

ang ilagay mo ay

40:4d:8e:6c:1c:87

sa mga nalilito mag minus lalo na sa letters ito ang guide
  • for wan mac, don ka sa offset 0008000C or 0007FFFF at yung text ang e-edit muh, minus 1 ka sa last digit ng mac..
  • for lan mac, don ka sa offset ec0066 at yung hex ang e-edit muh, plus 1 ka sa last digit..



O ayan MALIWANAG PA sa sikat ng araw {makers}

MISLEADING
search mo ay NAI... yan yung may @globelines.com.ph.... hindi yan ang mac address

may colon dapat ang mac address na dapat mong i edit

Download Program: SPI FLASH Programmer
Download Hex Editot HEX Workstation
Download RBT USB TV-DVD_EEPROM_

Apr 13, 2013

Another simple programming FPGAs

In the last article I wrote , and that is the JTAG TAP controller. This knowledge will help us make a simple programmer for FPGA company Altera.

I want to make a very simple programmer that will work through the serial port. The serial port is good in that it is very common, easy to program and, in addition, there are low-cost devices USB-to-COM. The hope is that my programmer will work through this adapter. On the computer I'm going to run my special program that controls the programmer. We will write to her (in the sense I have already written and tell you how it works).

So, in the JTAG connector has 4 significant signal to us: TDI, TMS, TCK and TDO.
The first three signals are inputs to the programmable FPGA, so we have a computer to manage them. Each control signal to be random, any of them, we can at any time set or reset. We have several serial signals suitable for this purpose:
  • RTS - it will match the JTAG signal TDI
  • DTR - it will match the signal TMS
  • TX - would correspond to a signal TCK
In addition, the output signal has a JTAG TDO, the state of which we need to be able to read from the computer. We shall use for this purpose the CTS serial port.

With signals understood, but there is one problem. We need to do a level converter serial signals. Of course you can use a specialized chip level converters, of which there are a great many. For example, there is such a chip icon HIN202 (625.08 KB)

We are (as always) go our own way. We make the programmer's on the following scheme:


A few resistors, zener diodes, LEDs for debugging and .. that's it - simple as that.

Here are photos of our programming, top view:


View from below:


I will write a program in C language environment in Microsoft Visual Studio v10.

My program will consist of at least two logical parts. The first part - is the serial port control signals, which means it control signals JTAG. The second part of the program - it's reading *. SVF file, its interpretation and consistent performance. In the last article I wrote that the SVF file describes the sequence of commands for the TAP controller's programmable chip. Wednesday Altera Quartus II can generate SVF files to compile the project.

To control the serial port I use API functions OS Windows:
  1. CreateFile (..) - is used to open the serial port
  2. EscapeCommFunction (..) - the parameters SETRTS or CLRRTS to set or reset signal TDI
  3. EscapeCommFunction (..) - the parameters SETDTR or CLRDTR to set or reset signal TMS
  4. EscapeCommFunction (..) - the parameters SETBREAK or CLRBREAK to set or reset signal TCK
  5. GetCommModemStatus (..) - to read the state of the CTS line and thus learn the value of TDO signal from the JTAG interface
The program identifies two very important functions:
int sir (int nclk, int val);
int sdr (int nclk, int val);

The first function sir (..) writes to the command register TAP controller programmable chip val is a long nclk bit. The second function sdr (..) writes to the data register TAP controller programmable chip val is a long nclk bit.

Functions look about the same and do about the same thing. Using the TCK and TMS signals they carry TAP controller state record in the relevant register IR or DR according to the state diagram (TAP state-machine) described in the previous article. TDI signal is used for serial transmission of data on the register TAP, and the TDO signal is used to read response data from the controller.

Now for the interpreter SVF file.
So, you've done a project for the FPGA, compiled it using Quartus and got SVF file to program the chip.

SVF - a text file. Our program will read it line by line and interpret the command in this line and execute it. I do not know all the details of the standard SVF files, but what I see in the file generated kvartusom - this is a very simple file. One line - one team. There are no conditional or unconditional jumps or subroutines. Thus, reading and execution of SVF file line by line - it is a convenient solution for us.

Actually you need to implement only a few basic commands: RUNTEST, SIR, SDR. As you guessed team SIR - write down the number in the instruction register and the TAP SDR - write down the number in the data register. RUNTEST - a pause when the controller is in the state IDLE. I will say honestly that I pause in the program does not withstand strict. We've already gotten a very slow rate due to the recording software implementation protocol. So pauses according to SVF hope is not necessary.

Well, here's the program is written and compiled using Visual Studio.
You can download its source code and binary file on our website: Programming via the serial port (51.89 KB)

The program console, takes 2 parameters on the command line: the name of the serial port and the file name SVF. For example, like this:

c: \ MarsBlaster.exe COM4 my_proj.svf

Connect fee rover to our programmer, connect it to the computer has power.


It looks like it works!

To watch the video of this project from here

PS: fly in the ointment.
Via an adapter USB-to-COM works, but very slowly. Programming the Mars Exploration Rover (including verification after burning) takes about 5 minutes. The reason is that the control signal goes via USB and read the response signal TDO takes a very long time (2-3 milliseconds). Get rid of this so simply will not work. Need to do more complex programming, with more complex logic of that exchange would lead not one bit, but at least bytes, then you can do so much more quickly.

Well, a look at the programming scheme is "feedback" from the 6th to the 3rd leg connector COM port. This is the same need - just to work through the adapter USB-to-COM. This feedback allows you to accurately tell whether the data came on the status of TDO or not. I set the TCK and read through the feedback it well - he came or not. If you come, then came to him and TDO. A bit surprising happened, but it works. - source

Apr 12, 2013

AVR JTAG Debugger/Programmer

AVR JTAG : Credit to IsoJtagIsp for schematic and bootloader. I've been modified a schematic from IsoJtagIsp by remove USB interface from schematic because I'd like to use AVR JTAG with USB2RS232 and serial port.


Download bootloader onto ATMEGA16, If you don't have a AVR programmer I recommended a simple programmer from Ponyprog, because Ponyprog need a few component for build a AVR programmer. If you already have a AVR programmer you can use it to download bootloader. If you're using Ponyprog the fuses should look like this.
  • IsoJtagISP_1.5_3.6864MHz.hex
  • IsoJtagISP_1.5_7.3728MHz.hex
  • IsoJtagISP_1.5_8.0MHz.hex
  • IsoJtagISP_source.rar

Once the bootloader is programmed, the next step is upgrade JTAGICE firmware onto ATMEGA16 by using AVR Studio.

1.] Set jumper to JTAG mode and powered to the board, then the Power LED should come on and Act LED should be blink.

2.] Open AVR studio select Tools menu and select AVR Prog, AVR Prog connected with AVR JTAG look like this.
    AVR JTAG firmware upgrade.


    3.] Click on Browse button and choose AVR JTAGICE firmware for upgrade like C:\MCU\Atmel\AVR Tools\JTAGICE\Upgrade.ebn

    4.] Click Program button and wait until upgrading complete.

    5.] Reset board by press reset button and wait until Act LED stop blink.

    5.] Return to AVR studio, select Tools menu->Program AVR->Connect, if firmware upgrade complete you can see JTAG ICE dialog look like this.



    6.] Testing AVR JTAG with ATMEGA32, Pin connection between AVR JTAG and MEGA32 such as
    7.] TCK_SCK -> TCK
    8.] TDO_MISO -> TDO
    9.] TMS_RST -> TMS
    10.]TDI_MOSI -> TDI

    This is a simple source code for testing JTAG, If you don't have compiler you can download WinAVR from winavr.sourceforge.net it's free compiler. After WinAVR installed, create new project in AVR studio by select Project menu->New project, then you can see Create new project dialog, select AVR GCC in Project type, fill project name you want to create into Project name box, fill main into initial file box, final click finish button and put this code into main.c.
    /***********************************************************************
    *
    * File : main.c
    * Desc : Blink LED on PB0
    * Compiler : AVR GCC
    * Author : Jirawat Kongkaen
    * Website : .
    *
    ***********************************************************************/

    #include

    void delay(unsigned int delay);

    int main(void)
    {
    DDRB = 0xFF; // Port B as out put

    for(;;)
    {
    PORTB |= _BV(PB0);
    //delay(50000);
    PORTB &= ~(_BV(PB0));
    //delay(50000);
    }

    return 0;
    }

    void delay(unsigned int delay)
    {
    while(delay) delay--;
    }
    Before start debugging you have to compile main.c first by select Build->Build or press F7 on keyboard, now let start debugging by select Debug menu->Start Debugging of click Start Debugging button, look like this.


    Connection between AVR JTAG and ATMEGA32 is connected (see below figure), Now let's start debugging by click Step into button or press F11, LED at PB0 will come On/Off.


    Testing had finished and you can use AVR JTAG for debug/program AVR microcontroller. I will explain about how to AVR JTAG working, if you set JP1 to JTAG mode and power on the board, AVR JTAG wait for firmware upgrade until Act LED come off, You can upgrade firmware at this sequence. After Act LED com off AVR JTAG ready to use. If you set JP1 to ISP mode you should be able to program:

    Bread board with AVR JTAG and ATMEGA32

    Mar 22, 2013

    How-To Install BlackcatUSB Programmer Windows7

    How to: Install BlackcatUSB Programmer on Windows7, drivers and properly use the device.


    Below is a list of steps which will allow you to better use your USB jtag programmer.

    By reading each step, you will learn how to use your USB jtag programmer safely and more efficiently. The USB Jtag programmer is one of the most powerful jtag programmers to date. This is the only USB jtag on the market that will exceed read & write speeds of excess 200KB/sec. With this kind of speed, you can program any unit within seconds!

    Download USB JTAG Software: WinUSB 32bit Driver.(1.52 MB) here

    Download 64bit Drivers: WinUSB 64bit Driver. (2.00 MB) here

    Download Blackcat USB Software for XP/Vista/Win7 32/64 bit: here (RC12)

    For Windows7 32/64bit OS you must have to install .Net Framework 4 ( web install or standalone ) you can download it from here.

    Click on the link above to browse to the USB jtag drivers folder. Drag the files onto your desktop and
    run the setup file. If this fails to install the drivers, simply right click the 'ezusbw2k' file and click install.

    If this still doesn't work, then you should browse to your control panel. Inside your control panel you will see a systems icon, click on it. From there, you will click on the Hardware tab as illustrated below.

    Once you're in device manager, browse to Universal Serial Bus controller. Connect your USB JTAG and you should see an item appear from the tree within the Universal Serial Bus Controller drop down. Once you see the item added, simply highlight it by clicking once and right clicking it and going to properties. If you have successfully installed the device you should see something similar to the illustration below.

    If the device is coming up with a yellow circle, windows is indicating it could not be recognized, right click it, go to properties, then click on the driver tab. Once inside the driver tab click on update driver. Now choose to manually search for your driver, click next, then click "install from a list or specified location". Now browse to either your installation cd to the "USB JTAG Drivers" Folder, or wherever you have copied the folder over to. Install the driver and unplug and replug the USB JTAG device. If it still doesn't recognize, simply remove it from the device manager list and start over.

    To set the proper device on the USB JTAG software is easy. Simply browse to Tools and then Config
    and set the interface to the target of choice and hit OK.

    IMPORTANT:

    It's always important to connect your USB JTAG properly to the target device of your choice. But when we do this, We don't always understand how crucial it is to follow a set of steps when connecting the device.

    When connecting the device, you must always have the USB jtag itself powered off, which means you must have the USB jtag cable running from your computer DISCONNECTED while connecting it to your header interface. After its connected, then and only then you may pluggin the power USB cord to the USB jtag device. Once the JTAG device is powered on and fully plugged in, then you may proceed to power on the main target device, whether it be a modified modem or a DCT receiver.

    When Disconnecting the USB JTAG, you do the same as the above, except in reverse order. First you will disconnect the power from the target device whether it be a DCT receiver or router or a modem. Once powered down, then you may proceed to disconnect the USB cord from the USB jtag itself, then and only then you may remove the JTAG interface from the socket/header connector.

    Following the steps above will result in a long and healthy life for not only your USB JTAG, but any hardware you may choose to flash with it.

    Oct 6, 2013

    Huawei BM622m Best NAND Flasher Programmer

    As we all know the new BM622m is the replacement of the legacy Huawei Echolife BM622 and BM622i 4G WiMAX wireless broadband modem router. This new device have more advantages than those two old model wireless residential gateway. Taking a look on the hardware of the BM622m it is equip with a NAND flash memory HYNIX HY27US08561A  using TSOP48 package unlike BM622 built with NOR flash memory such as Spansion S29GL064 or STMicro M29W640 likewise same 48pins. 


    The hardest part of BM622m is the reverse engineering, if you wanted to dump the flash memory into a raw file of this CPE its not as easy as that of BM622 and BM622i unit were MiniPro TL866CS programmer won't support for dumping it.


    One of the best NAND programmer I have found on the net is the Flash Doctor, in contrast to MiniPro TL866CS  programmer that support more than 11 thousand of Chips except for NAND flash memory.


    Flash Doctor supports all NAND-based flash storage devices (SD, SM, MMC, XD, USB Pendrive, MemoryStick, CompactFlash etc.), with damaged controller or any other front ends (PCB, etc.) since Flash Data Recovery Doctor needs to work on the flash memory only when users carry out Flash Data Recovery.

    Hopefully this article will help my avid reader and commenter who has been longing for their BM622m to dump the firmware to be able for them to downgrade their WiMAX CPE.

    Oct 5, 2013

    USB Port 24CXX 25XX EEPROM BIOS Programmer TTL For XP WIN7 MX25L12805 W25Q128


    These two (2) USB port 24CXX and 25XX Eeprom BIOS Programmer is identical in nature because they used the same Chips based on CH341 series but not on its physical appearance. These two flasher/programmer support the same type of Chips/IC likewise it provides pin header to be used as TLL and UART fro debricking residential gateway such as modems, routers and wireless access point (WAP). Support list of Chips/IC with different vendors/manufacturer this link.


    These flasher/programmer also support MS Windows OS such as XP, Vista and 7. You can download the respective driver here, software SPI Tools here and for the tools here. This product can be found on eBay in case you wanted to see for additional details.

    Dec 15, 2013

    FPGA-development card includes RAM, programmer

    Claiming all the features necessary for developing reprogrammable-microcontroller applications, Domain Technologies recently announced a development card for Actel ProASIC3 FPGAs. Measuring only 2.4×1 in., the standard A3P-MRAM (magnetoresistive-random-access-memory)-1000 development card comes with an Actel A3P1000, 512 kbytes of 35-nsec nonvolatile MRAM, and an onboard device programmer. The high-speed MRAM device stores both programs and data, eliminating the need for flash-programming algorithms and boosting performance.


    You perform all FPGA-device programming and software debugging of implemented microcontroller designs through the A3P-MRAM's built-in USB interface. The onboard device programmer is compatible with the STAPL (Standard Test and Programming Language) files generated by Actel’s Libero integrated development environment. You use the same onboard device programmer and mini-B USB interface for accessing the A3P-MRAM's onboard JTAG emulator and debugger.


    The A3P-MRAM-1000 sells for $750 and is available from stock. For smaller development applications Domain Technologies offers a lower cost version with an installed Actel A3P250. The A3P-MRAM-250 costs $640. The company ships each unit with stand-alone FPGA-device programming software and a mini-B USB cable.

    More infoe @ A3P-MRAM

    Oct 31, 2017

    For TP Routing: Modify firmware size, unlock U-boot partitions, add Fullflash partitions

    TP-Link TL-WR703N factory default has only 4MB of flash and 32MB RAM, if you want to play with the OP is simply powerless, so I changed the 8M Flash and 64M RAM.

    First, modify the firmware size

    OpenWrt in the compile time will be based on each model profile to generate the firmware, if the generated firmware integrated too much software and more than 4MB it will be error, you will find that the firmware can not be generated.

    Specific symptoms See my last Post start compiling and compiling openwrt.

    Compilation passed, but did not find the firmware in ./openwrt/bin/ , turned up the compile output prompt, and found a similar

    1. [mktplinkfw] kernel length aligned to 914864
    2. [mktplinkfw] *** error: images are too big
    3. make[3]: [install] Error 255 (ignored)
    Here's how to modify the default firmware size of the TP series router


    Actually very simple, find the target/linux/ar71xx/image/Makefile, search for the model you want to modify, such as 703N, find the relevant 703N parameters

    Then change the tplink-4mlzma to tplink-8mlzma on the line, and then

    1. define Device/tl-wr703n-v1
    2. $(Device/tplink-8mlzma)
    3. BOARDNAME := TL-WR703N
    4. DEVICE_PROFILE := TLWR703
    5. TPLINK_HWID := 0x07030101
    6. CONSOLE := ttyATH0,115200
    7. endef

    After you save the exit, you can compile the 8M firmware for tl-wr703n.

    Note: Some outdated tutorials on the web say that you also need to modify tools/firmware-utils/src/mktplinkfw.c after I test, the latest source code inside this file is not about 703N and other router parameters, you do not need to modify.


    II. Unlocking u-boot Partitions

    The horse has the hoof, the person has the slip, does not have to die u-boot how dares the confidence to play the OP? Here we will talk about U-boot, U-boot is the embedded Linux system boot, equivalent to the computer BIOS. The traditional u-boot is only responsible for booting the firmware, once the firmware does not start, then the entire router is brick, there is a TTL is also easy, no one can only on the programmer. But there is not dead u-boot, in fact, with the Web Brush Machine interface U-boot, MA Ma no longer have to worry about my machine into bricks, completely without the demolition machine can save bricks. Want to know their own Google, recommended Enshan hackpascal breed, and brush into U-boot tutorial , I do not discuss how to use u-boot, mainly brush into the u-boot will encounter

    1. could not open mtd device u-boot ,can't open device for writing

    This is because OpenWrt is locked by default, unless it is unlocked when the firmware is compiled. U-boot

    Locate /target/linux/ar71xx/files/drivers/mtd/tplinkpart.c, search for U-boot, find

    1. parts[0].name = "u-boot";
    2. parts[0].offset = 0;
    3. parts[0].size = offset;
    4. parts[0].mask_flags = MTD_WRITEABLE;
    Then remove parts[0].mask_flags = MTD_WRITEABLE; This line will be recompiled.

    WARM hint: TP series Brush finished breed must change the MAC address for a valid value, otherwise wireless will hang!

    III. Add Fullflash partitions

    Now the bricks can be saved, but save back the data are all gone, but also start the configuration, want to think all big ah, the good habit of nurturance is to fall roar! Add Fulllash partitions so that you can back up the entire programmer firmware with the DD command, and there is no such thing as an art loss.
    Same as /target/linux/ar71xx/files/drivers/mtd/tplinkpart.c to add the following code

    1. parts[5].name = "fullflash";
    2. parts[5].offset = 0;
    3. parts[5].size = master->size;

    As shown in the figure


    After recompiling and brushing, you can see the Fullflash partition.

    View partitions with cat /proc/mtd

    Effect as shown


    You can then simply back up the programmer firmware through the dd if=/dev/mtd6 of=/tmp/fullflash.bin !

    5aimiku

    May 23, 2020

    AR9341 Router TTL Line Brush Machine

    Recently, I have a batch of OEM PoE routers that do not have a USB interface. It is just used to study the TTL flash machine.

    Then connect the USB to TTL. Note here that some boards will be incompatible with garbled characters. You can try to change the baud rate. If not, just change a USB to TTL board.

    The computer uses SecureCRT, serial port connection, there is no character on the connection, then power on the router, the screen starts to display UBOOT, press any key to interrupt, some press TPL interrupt or ctrl + c interrupt, I first flash breed

    These software will be provided below to download, understand the command of FLASH before brushing

    2MB FLASH


    Flash programmer firmware: tftp 0x80000000 full.bin
    erase 0x9f000000 + 0x200000
    cp.b 0x80000000 0x9f000000 0x200000 flash
    uboot:
    tftp 0x80000000 uboot.bin
    erase 0x9f000000 + 0x20000
    cp.b 0x80000000 0x9f000000 0x20000 flash
    fw:
    tftp
    0x80x9fwfc.
    cp.b 0x80000000 0x9f020000 0x1c0000
    brush art:
    tftp 0x80000000 art.bin
    erase 0x9f1f0000 + 0x10000
    cp.b 0x80000000 0x9f1f0000 0x10000


    4MB FLASH

    Flash programmer firmware: tftp 0x80000000 full.bin

    erase 0x9f000000 + 0x400000

    cp.b 0x80000000 0x9f000000 0x400000 flash

    uboot:

    tftp 0x80000000 uboot.bin

    erase 0x9f000000 + 0x20000

    cp.b 0x80000000 0x9f000000 0x20000 flash

    fw: tftp 0x80x9 fw0f0f3

    cp.b 0x80000000 0x9f020000 0x3c0000

    brush art:

    tftp 0x80000000 art.bin

    erase 0x9f3f0000 + 0x10000

    cp.b 0x80000000 0x9f3f0000 0x10000


    8MB FLASH

    Flash programmer firmware: tftp 0x80000000 full.bin
    erase 0x9f000000 + 0x800000
    cp.b 0x80000000 0x9f000000 0x800000 flash
    uboot:
    tftp 0x80000000 uboot.bin
    erase 0x9f000000 + 0x20000
    cp.b 0x80000000 0x9f000000 0x20000 flash
    fw:
    tftp
    0x80x9 fw.f02
    cp.b 0x80000000 0x9f020000 0x7c0000
    brush art:
    tftp 0x80000000 art.bin
    erase 0x9f7f0000 + 0x10000
    cp.b 0x80000000 0x9f7f0000 0x10000


    16M FLASH: flash address from 0x000000 ~ 0x0FFFFFF
    ttl access flash address from 0x9F000000 ~ 0x9F0FFFFFF


    The network cable is connected to the router lan port, the computer configuration is set to 192.168.0.2, the mask is 255.255.255.0, and the gateway is 192.168.0.1

    Open tftp in my software package, select the network card connected to the router's network cable, it will normally display the IP 192.168.0.2, click "Show Dir" contains a firmware of breed-ar9341.bin, first flash him, execute the following command

    setenv ipaddr 192.168.0.1

    setenv serverip 192.168.0.2

    tftp 0x80000000 breed-ar9341.bin

    When done appears, it means that the brushing is successful, and then execute

    erase 0x9f000000 + 0x20000

    cp.b 0x80000000 0x9f000000 0x20000

    When done appears, flashing in is successful. Unplug the router and plug it in again. SecureCRT displays the Breed boot and press any key terminal. At the same time, you can see that the default lan port address is 192.168.1.1

    Connect the computer browser to 192.168.1.1, then you can directly use the Breed Web


    Enter 192.168.0.1 in the address bar of the browser and select the firmware upgrade. Here you should save the original firmware under backup. You can configure openwrt after the flashing is completed.

    Software download address:

    https://pan.baidu.com/s/1Z7PkN8ROxpDITdRZHgw3nQ

    Extraction code: be5m

    Jun 1, 2013

    Huawei Echolife BM622 repair blank WAN easily

    This article is supposed and not only intended to jEnNrhANz comment on my previous post Huawei BM622 Blank WAN Solved! but also to other netizen who is facing similar problem on having hard time solving the blank WAN issue likewise for the "tulala" this will help their life more easier.

    Snapshot taken by Canon Rebel T3 using macro lens
    The screenshot above as many of you are familiar with the board of Huawei Echolife BM622 this is the so-called WAN_IC, most the version of Huawei BM622 4G WiMAX broadband modem wireless router it uses ST Micro M25P32 (25P32V6G) 32Mbit, Low Voltage, Serial Flash Memory. Another version of this device gateway is using different chips but there is an alternative substitute/reference for Serial Flash Memory to those who are techie.

    To make life more easier on DIY repairing the BM622 "blank WAN" likewise the "tulala" issue there is no need for "Baklas Kabit" meaning no need for you to removed the WAN_IC and put it back again after re/flashing. Without taking off the chip is best to re/flash the WAN_IC to avoid damaging by using a "hot air".

    Here's few things I need:


    Take note for the soldering lid used here I have chosen the tiniest 0.3mm diameter because the thick one will not do the work well, you can find on the cellphone technician shop ask only for 1meter is enough.


    Tiny copper wire this will be used for jumpering the ST Micro M25P32 Serial Flash Memory or the WAN_IC, its 0.10mm diameter just like the strand of your hair. This is also a cellphone technician best friend you can ask for 1meter is enough.


    An alternative where you can get a tiny copper is from your busted cheap fluorescent lamp. When using a soldering iron a pointed tip is best to not mess with lid since M25P32 surrounded by tiny capacitor and resistor it might be damaged or may short circuited with other parts.




    The simplest programming/flashing the M25P32 Serial Flash Memory is to used the IC socket with tiny copper wires atleast two IC socket will do and a candle glue you can get this from eGizmo if you are in Manila or Alexan.



    My USB MiniPro TL866CS Universal Programmer I bought it from eBay, it can programmed of thousand of chips, read, write and re-flashed different types of eeprom, flash memory, etc.



    The BlackcatUSB can also read, write and re-flashed but only limited chips unlike the TL866 can do thousands. The good thing about this programmer device is that you can use it as JTAGging also bought from eBay.


    This is not the least option or alternative for repairing the Huawei Echolife BM622 4G WiMAX broadband wireless modem router blank WAN likewise for "tulala". The cheapest for about less than 50pesos or FREE hardware for flashing the M25P32 is the LPT a homemade flasher. It is slower when programming if compared to the above two USB programmer/flasher


    AEOLUS rework station is just an option if you prepare the "baklas kabit", removing and putting it back from the board of the Echolife BM622 the ST Micro M25P32 Serial Flash Memory is really so tricky because you might burned it by using the "hot air" improperly.