Forum FAQForum FAQ SearchSearch MemberlistMemberlist   UsergroupsUsergroups RegisterRegister ProfileProfile Log in to check your private messagesLog in to check your private messages Wim's BIOS RSS FeedRSS Log inLog in

W29C020 - software bootblock unlock

 
Post new topic   Reply to topic    Wim's BIOS Forum Index -> In-depth High-tech BIOS section

Recommended by Wim's BIOS...

BIOS Agent scan: Upgrade your BIOS! Driver Agent scan: Instant Access to 116,215 Device Drivers Updates!

View previous topic :: View next topic  
Author Message
Rainbow
The UniFlasher


Joined: 20 Mar 2002
Posts: 3122
Location: Slovakia

PostPosted: Sun Apr 18, 2004 5:54 pm     Post subject: W29C020 - software bootblock unlock Reply with quote

I've bought DTK PRM-0080I E1 (rev. B) board - very cheap because previous owner did not know if the board works or not. It works. There's Winbond W29C020 chip installed.
I tried to flash the BIOS using UniFlash - but it failed on the first 8KB and last 8KB - obviously because both top and bottom boot block protection was enabled. But I was able to flash the BIOS OK using the old AMIFLASH that I have on my webpage - so it's now proven that it can be done. After flashing, it even left the bottom bootblock area unprotected Smile So it must disable the protection (both top and bottom) somehow, then flash and finally enable the top block protection. Now only find a way how to reverse it...
_________________
Patched and tested BIOSes are at http://wims.rainbow-software.org
UniFlash - Flash anything anywhere http://www.uniflash.org
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Rainbow
The UniFlasher


Joined: 20 Mar 2002
Posts: 3122
Location: Slovakia

PostPosted: Sun Apr 18, 2004 7:31 pm     Post subject: Reply with quote

GOT IT
Finally, after that long time... Very Happy
Hacked out of awdflash v7.52 that was bundled with one of DTK BIOSes for this board.
Code:
[05555],0AA
[02AAA],055
[05555],080
[05555],0AA
[02AAA],055
[05555],040
[02AAA],0AA

The first 6 commands are for entering the lockout mode. The documented writes after this are:
[00000],0 - enable bottom block lockout
[3FFFF],0FF - enable top block lockout
And the undocumented one:
[02AAA],0AA - disable both top&bottom block lockout
_________________
Patched and tested BIOSes are at http://wims.rainbow-software.org
UniFlash - Flash anything anywhere http://www.uniflash.org
Back to top
View user's profile Send private message Send e-mail Visit poster's website
NickS
BIOS Bodhisattva


Joined: 03 May 2002
Posts: 3143
Location: Thames Valley, UK

PostPosted: Mon Apr 19, 2004 12:16 pm     Post subject: Reply with quote

Sorry, Rainbow - I don't understand the syntax you are using here. What is meant by (e.g.)
[05555],080 ?
Using debug, can I create a pair of little .com files to unlock and lock ?
_________________
Tested patched BIOSes. Untested patched BIOSes .
Emails *will* be ignored unless the subject line starts "Wim's BIOS forum"
Back to top
View user's profile Send private message Send e-mail
Rainbow
The UniFlasher


Joined: 20 Mar 2002
Posts: 3122
Location: Slovakia

PostPosted: Mon Apr 19, 2004 5:12 pm     Post subject: Reply with quote

"[05555],0AA" means that you write data 0AAh to address 5555h in the flash ROM. If you read a datasheet for some flash ROM, it will become clear.
I'm now thinking about how to include this in UniFlash...
_________________
Patched and tested BIOSes are at http://wims.rainbow-software.org
UniFlash - Flash anything anywhere http://www.uniflash.org
Back to top
View user's profile Send private message Send e-mail Visit poster's website
NickS
BIOS Bodhisattva


Joined: 03 May 2002
Posts: 3143
Location: Thames Valley, UK

PostPosted: Tue Apr 20, 2004 6:43 pm     Post subject: Reply with quote

Fine, thanks. Smile
_________________
Tested patched BIOSes. Untested patched BIOSes .
Emails *will* be ignored unless the subject line starts "Wim's BIOS forum"
Back to top
View user's profile Send private message Send e-mail
Rainbow
The UniFlasher


Joined: 20 Mar 2002
Posts: 3122
Location: Slovakia

PostPosted: Tue Apr 20, 2004 8:07 pm     Post subject: Reply with quote

Any ideas about how this should be implemented in UniFlash?
I'm thinking about adding new menu that will include bootblock lock/unlock and maybe some (destructive) tests - write all zeros, all ones...
It's a lot of work to do so I'll release v1.35 before.
_________________
Patched and tested BIOSes are at http://wims.rainbow-software.org
UniFlash - Flash anything anywhere http://www.uniflash.org
Back to top
View user's profile Send private message Send e-mail Visit poster's website
wsw243
New visitors - please read the rules.


Joined: 05 Dec 2003
Posts: 9

PostPosted: Tue Apr 20, 2004 8:47 pm     Post subject: Reply with quote

Rainbow wrote:
"[05555],0AA" means that you write data 0AAh to address 5555h in the flash ROM. If you read a datasheet for some flash ROM, it will become clear.
I'm now thinking about how to include this in UniFlash...


Where can I get datasheet of flash roms?

Regards,

Vicky
Back to top
View user's profile Send private message
Rainbow
The UniFlasher


Joined: 20 Mar 2002
Posts: 3122
Location: Slovakia

PostPosted: Tue Apr 20, 2004 9:19 pm     Post subject: Reply with quote

For example:
http://www.winbond-usa.com/products/winbond_products/view.phtml?name=MP
_________________
Patched and tested BIOSes are at http://wims.rainbow-software.org
UniFlash - Flash anything anywhere http://www.uniflash.org
Back to top
View user's profile Send private message Send e-mail Visit poster's website
edwin
The Hardware Archivist


Joined: 20 Mar 2002
Posts: 4331
Location: Netherlands

PostPosted: Wed Apr 21, 2004 8:53 pm     Post subject: Reply with quote

Rainbow wrote:
Any ideas about how this should be implemented in UniFlash?
I'm thinking about adding new menu that will include bootblock lock/unlock and maybe some (destructive) tests - write all zeros, all ones...
It's a lot of work to do so I'll release v1.35 before.


yep. "for uniflash gurus only"
_________________
edwin/evasive

Do not assume anything

System error, strike any user to continue...
Back to top
View user's profile Send private message Send e-mail Visit poster's website
xam
New visitors - please read the rules.


Joined: 30 Dec 2004
Posts: 1

PostPosted: Thu Dec 30, 2004 5:00 pm     Post subject: Reply with quote

Thanks Rainbow for the disable lockout mode code!
Today i have add the code in the ct flasher (original flasher ftp://ftp.heise.de/pub/ct/projekte/ctflash.zip ). I put the code before the erase-code for the W29C020C and it works.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Wim's BIOS Forum Index -> In-depth High-tech BIOS section All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group