logo elektroda
logo elektroda
X
logo elektroda

[Solved] AliExpress XH-WB3S V2.0 Firmware Backup CRC Mismatch on BK7231T/N Chip

taggbricka 276 2
ADVERTISEMENT
  • #1 21408309
    taggbricka
    Level 7  
    I have bought from AliExpress a few modules marked XH-WB3S V2.0 they are said to contain a BK7231T
    Set up is a 3.3V 1A powersuppy and a USB to TTL dongle that has worked with openbeken before.

    Tried to do a firmware backup but it failed at first CRC check.
    So I tried a custom read at 0x11000 length 0x1000 first as BK7231T then as BK7231N
    Not sure what to do about it.

    This is the result:

    Starting read!
    Read parms: start 0x11000 (sector 17), len 0x1000 (69632 sectors)
    Now is: den 24 januari 2025 20:17:07.
    Flasher mode: BK7231T
    Going to open port: COM8.
    Serial port open!
    Getting bus... (now, please do reboot by CEN or by power off/on)
    Getting bus success!
    Going to set baud rate setting (115200)!
    Going to start reading at offset 0x11000...
    Reading 0x11000... Ok!
    Basic read operation finished, but now it's time to verify...
    Starting CRC check for 1 sectors, starting at offset 0x11000
    CRC mismatch!
    Send by BK 0x832DDE7C, our CRC 0xFE5BBB37
    Maybe you have wrong chip type set?
    Did you set BK7231T but have in reality BK7231N or BK7231M?
    There was no result to save.

    >>>>>>>>>> Here i set type to BK7231N

    Backup name is set to aa.
    Starting read!
    Read parms: start 0x11000 (sector 17), len 0x1000 (69632 sectors)
    Now is: den 24 januari 2025 20:18:11.
    Flasher mode: BK7231N
    Going to open port: COM8.
    Serial port open!
    Getting bus... (now, please do reboot by CEN or by power off/on)
    Getting bus success!
    Going to set baud rate setting (115200)!
    Will try to read device flash MID (for unprotect N):
    Flash MID loaded: 152085
    Will now search for Flash def in out database...
    Flash def found! For: 152085
    Flash information: mid: 152085, icName: P25Q16HBK, manufacturer: Puya, szMem: 1000000, szSR: 2, cwUnp: 0, cwEnp: 7, cwMsk: 407C, sb: 2, lb: 5, cwdRd: 05-35-FF-FF, cwdWr: 01-31-FF-FF
    Entering SetProtectState(True)...
    sr: 0
    sr: 0
    final sr: 0
    msk: 407c
    cw: 0, sb: 2, lb: 5
    bfd: 0
    SetProtectState(True) success!
    Going to read encryption key...
    Encryption key read done!
    Encryption key: 84de6a00 84de6a00 84de6a00 84de6a00
    ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^
    WARNING! Non-standard encryption key!
    If it's all zero, it may also mean that read is disabled.
    Please report to forum https://www.elektroda.com/rtvforum/forum51.html
    Or just try using BK7231M mode
    ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^
    There was no result to save.
  • ADVERTISEMENT
ADVERTISEMENT