使用俄罗斯开源软件让CH341编程器支持8脚SPI-NAND FLASH，提取HG2821T-U SDN版固件

焉知祸福

上海电信的SDN光猫之后改桥接很麻烦，看这个贴子里面 还没人成功 https://koolshare.cn/thread-142297-1-1.html

搜了下网上甚至还没人提取出来编程器固件，看到HG2821T-U分两种版本，想着要是能提取非SDN版固件刷入SDN版就好了
于是就拆开，看到有个8脚芯片，本来以为这个8脚芯片和其他路由器一样也是SPI-NOR FLASH，直接用CH341很容易读取的
没想到用了CH341原版软件和AsProgrammer软件都读取不了，试了Linux下flashrom也读取不了
最后在网上搜了下这个型号TC58CVG1S3H，才知道这个是SPI-NAND芯片和SPI-NOR读取的指令不一样。
然后就在网上搜用什么能读取这个芯片，发现很多都是价格不便宜的专业编程器，怪不得直到现在还没人提取出编程器固件。

直到在Github上发现前几天刚刚出现的一个俄罗斯的开源软件，支持用廉价编程器CH341读取SPI-NAND，https://github.com/McMCCRU/SNANDer ，这样才能读取备份出来。
用法是下载这个github的文件，插入CH341，运行Windows文件夹里的 zadig-2.3.exe ，选择 1a86:5512 安装驱动，然后通过powershell或cmd运行 SNANDer.exe

用SNANDer.exe -i 查看芯片信息，看到已经正确识别TC58CVG1S3H了，256MB相比SPI-NOR的8M 16M之类的大多了

1. PS C:\Users\mydesktop\Downloads\SNANDer-main\Windows> .\SNANDer.exe -i
   
2. 
   
3. SNANDer - Spi Nor/nAND programmER v.1.4 by McMCC <mcmcc@mail.ru>
   
4. 
   
5. Found programmer device: WinChipHead (WCH) - CH341A
   
6. Detaching kernel drivers is not supported. Further accesses may fail.
   
7. Device revision is 3.0.4
   
8. spi_nand_probe: mfr_id = 0x98, dev_id = 0xcb
   
9. Get Status Register 1: 0x38
   
10. Get Status Register 2: 0x16
    
11. Using Flash ECC.
    
12. Detected SPI NAND Flash: TOSHIBA TC58CVG1S3H, Flash Size: 256 MB

复制代码

然后我第一次用SNANDer.exe -r TC58CVG1S3H.bin想直接读取，但提示失败

1. PS C:\Users\mydesktop\Downloads\SNANDer-main\Windows> .\SNANDer.exe -r TC58CVG1S3H.bin
   
2. 
   
3. SNANDer - Spi Nor/nAND programmER v.1.4 by McMCC <mcmcc@mail.ru>
   
4. 
   
5. Found programmer device: WinChipHead (WCH) - CH341A
   
6. Detaching kernel drivers is not supported. Further accesses may fail.
   
7. Device revision is 3.0.4
   
8. spi_nand_probe: mfr_id = 0x98, dev_id = 0xcb
   
9. Get Status Register 1: 0x00
   
10. Get Status Register 2: 0x16
    
11. Using Flash ECC.
    
12. Detected SPI NAND Flash: TOSHIBA TC58CVG1S3H, Flash Size: 256 MB
    
13. READ:
    
14. Read addr = 0x0000000000000000, len = 0x0000000010000000
    
15. .........[spinand_ecc_fail_check] : ECC cannot recover detected !, page = 0xc0
    
16. spi_nand_read_page: Bad Block, ECC cannot recovery detecte, page = 0xc0
    
17. Status: BAD(-1)

复制代码

然后第二次尝试，用 SNANDer.exe -d -r TC58CVG1S3H.bin 命令，关闭ECC可以读取

1. PS C:\Users\mydesktop\Downloads\SNANDer-main\Windows> .\SNANDer.exe -d -r TC58CVG1S3H.bin
   
2. 
   
3. SNANDer - Spi Nor/nAND programmER v.1.4 by McMCC <mcmcc@mail.ru>
   
4. 
   
5. Found programmer device: WinChipHead (WCH) - CH341A
   
6. Detaching kernel drivers is not supported. Further accesses may fail.
   
7. Device revision is 3.0.4
   
8. spi_nand_probe: mfr_id = 0x98, dev_id = 0xcb
   
9. Get Status Register 1: 0x00
   
10. Get Status Register 2: 0x16
    
11. Disable Flash ECC.
    
12. Detected SPI NAND Flash: TOSHIBA TC58CVG1S3H, Flash Size: 256 MB
    
13. READ:
    
14. Read addr = 0x0000000000000000, len = 0x0000000010800000
    
15. .........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Status: OK

复制代码

最后又测试用 SNANDer.exe -I -r TC58CVG1S3H-I.bin 忽略ECC也可以读取
但这个文件和上面是有些区别的，下载后用beyond compare对比下就能知道

1. PS C:\Users\mydesktop\Downloads\SNANDer-main\Windows> .\SNANDer.exe -I -r TC58CVG1S3H-I.bin
   
2. 
   
3. SNANDer - Spi Nor/nAND programmER v.1.4 by McMCC <mcmcc@mail.ru>
   
4. 
   
5. Found programmer device: WinChipHead (WCH) - CH341A
   
6. Detaching kernel drivers is not supported. Further accesses may fail.
   
7. Device revision is 3.0.4
   
8. spi_nand_probe: mfr_id = 0x98, dev_id = 0xcb
   
9. Get Status Register 1: 0x00
   
10. Get Status Register 2: 0x16
    
11. Using Flash ECC.
    
12. Detected SPI NAND Flash: TOSHIBA TC58CVG1S3H, Flash Size: 256 MB
    
13. READ:
    
14. Read addr = 0x0000000000000000, len = 0x0000000010000000
    
15. .........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Status: OK

复制代码

最后付上我读取出来的文件 https://wws.lanzous.com/icgsJi9fv8b （其中有份非SDN版的是从 https://www.right.com.cn/forum/thread-2366056-1-1.html 下载的）试了下在linux下用binwalk可以解出文件
至于怎样切割合并固件分区，以便刷机切换桥接还没研究，希望大佬们研究下吧






这个转接座对于WSON封装的芯片引脚有点长，怕短路就垫了点纸焊的

agemoon

你这个发现非常的强大呀，让ch431焕发第二春了

paldier

很棒省的自己写了

怪蜀黍不属鼠

MARK了。写出来的大神很厉害。

zyguowei

果真强大，


只能读？


可以写吗？

焉知祸福

zyguowei 发表于 2020-11-10 20:54
果真强大，

应该可以，但还没实测写入

hackpascal

能读是没错。我自己也写过基于ft2232的spi-nand编程器。
但是要注意spi-nand跟普通的nand一样是有ecc校验的，而不同主控芯片（例如这个机器里的cpu）会使用不同的算法和ecc layout，因此从一个芯片上读出来的数据不一定能用在另一个芯片上。
再一点，你要是没有这个主控对应的ecc tool，那么你就不能通过编程器直接把新数据写入spi-nand，否则写进去了也会在读取时报错，甚至无法开机。
mtk的sdk里面是有ecc tool的，所以只要能搞到ecc tool，问题就不大，对于其他家方案来说，就不一定了。
只不过因为spi-nand一般自带on-die ecc，因此如果主控用的是on-die ecc，那么就没有任何问题。

99无敌

hackpascal 发表于 2020-11-10 20:59
能读是没错。我自己也写过基于ft2232的spi-nand编程器。
但是要注意spi-nand跟普通的nand一样是有ecc校验 ...

果然是高级老鸟，佩服，，，，

邪恶海盗

hackpascal 发表于 2020-11-10 20:59
能读是没错。我自己也写过基于ft2232的spi-nand编程器。
但是要注意spi-nand跟普通的nand一样是有ecc校验 ...

这么鸡儿麻烦???

焉知祸福

hackpascal 发表于 2020-11-10 20:59
能读是没错。我自己也写过基于ft2232的spi-nand编程器。
但是要注意spi-nand跟普通的nand一样是有ecc校验 ...

多谢分享经验，幸好还没往里写不然真可能无法开机了。
看有人说 http://blog.zhezhe168.com/archives/9632 这个HG2821T-U 的主控是MTK的MT7526，看来还有可能可以搞

hackpascal

焉知祸福 发表于 2020-11-11 00:22
多谢分享经验，幸好还没往里写不然真可能无法开机了。
看有人说 http://blog.zhezhe168.com/archives/96 ...

我说的MTK SDK是路由器soc的SDK，也就是mt76xx那种。
你这个看样子是econet的光猫芯片，sdk一般是找不到的，多半没戏

yahanan

hackpascal 发表于 2020-11-11 00:35
我说的MTK SDK是路由器soc的SDK，也就是mt76xx那种。
你这个看样子是econet的光猫芯片，sdk一般是找不到 ...

我看也挺难，相当属于半路失踪了

5566hyc

hackpascal 发表于 2020-11-10 20:59
能读是没错。我自己也写过基于ft2232的spi-nand编程器。
但是要注意spi-nand跟普通的nand一样是有ecc校验 ...

大神出现了，请小弟一拜

oja520

不知道对于并口FLASH来说，有没有这个神器？

modi5156

看标题我以为能让CH341A支持那种大片的NAND闪存颗粒了