• Visit https://www.embeddedcomputers.net/ for Hardware; Software and all other things related to FlashcatUSB

Support for Technicolour TG582n

pedro

Member
Hi everyone , i have here an old modem that i am trying to flash a new Firmware over SPI .

the chip is an Cfeon EN25Q128
But the identification i get from this chip its : RDID:0x1C3018 REMS:0x1C17
the total flash size is 16Mbytes
In the datasheet of the chip i can see this data :
Block 0 to 254 000000h-FEFFFFh 16320KB Lower 255/256

But i have no idea how to convert it in a multiple of megabyte for blackcat understands it .

I was looking at SPI mode configuration :
image.jpg


and what i think that one of my problems is , is that i am unable to write in chip size (blackcat) the proper information for the program to write the full firmware :
image.jpg


I am unable to try the automatic mode in SPI because blackcat is detecting an unknown chip :
image.jpg


But this chip is already in Blackcat detection :
image.jpg


A picture of the modem i am trying to flash a new firmware :
(the raspberry device is just providing an extra 3,3V to the chip in order for me to be able to read it without turning the modem on)
DSCF1813.jpg



Any help on this is very appreciated .
Thank you and sorry for the long thread , i wanted to post as much information as i could to be more easier to understand .
 
Last edited:
Try this and tell me if you get a detection ...
 

Attachments

  • FlashcatUSB.rar
    160 KB · Views: 16
Or try this new Beta
 

Attachments

  • FCUSB_350.RAR
    226.6 KB · Views: 19
Thank you so much D3m0n , 350 version did not work , but the 330 worked like a charm .
here are the screencaptures :

330 Version
330.jpg


350 Version
350.jpg


Thank again for your excellent work on this , very appreciated .
Is there a way to erase the firmware with this 330 version ?
 
Last edited:
Try this , i only have the source code up until version 340 , this has the erase function , try it out
 

Attachments

  • FlashcatUSB.rar
    386.5 KB · Views: 13
I have just a final question about flashing with blackcat , maybe you can explain it to me .
I was flashing a firmware with 8M of size , and blackcat only goes until 50% and says it is finished .
Is this a normal Procedure ?
Image5.jpg
 
before i get the proper blackcat software version for tis chip , i were playing with other versions that were not compatible with this memory , i was also playing with memory size in blackcat .
Resuming , i was unable to backup the whole flash from my router and to help even more , i erased the CFE(bootload) from the flash .
now i had to buy another model of this device for 12 euros just to copy the whole flash from the new router and test it on mine here .
CFE have important information about the hardware , like serial and mac address , anyone here try to change those values in CFE before in any other router ?
did it work also ?
 
I received my other tg582n router today , i copied the whole flash and writed that flash on my briked router and now it is working fine .
I was trying to change the serials number on the binary file extracted in order for public share , but it looks that changing the serial number it will not work , the binary files have an ssl certificated that if you change just one single number from the serial number then the bin file will not start up the modem again .
here it is :
thssl.jpg


So , even if i post here a changed binary file , it will not work on your bricked modem/router .
If i get time i will search more information about this specific certificate .
 
ok,but i need just the flash,even iff did n work
im decompile the flash and look inside,il fixed
 
Take it and i wish you all the luck (Note : I edited the serial number on firmware to 00000.
https://www.sendspace.com/file/1xtdqr

by the way , i want to make a script for CFE extraction and firmware extraction , but i need some help .
I was de-compiling the firmware in linux , and i was able to catch this data :

firmware_mod_kit_trunk_001.jpg


Let me know anybody here , how can i transfer this data to a script for future use in blackcat .
 
ok,but i need just the flash,even iff did n work
im decompile the flash and look inside,il fixed
It will not work , i already try that .
You will get the firmware compilated but it wont work because the firmware compiler will give you issues on the firmware header compilation
 
I am working away at the moment , but when i get home on the weekend , i will make a script for you
 
Please try this version. Its the most recent version of Build 350. It has EON EN25Q128 defined.
 

Attachments

  • FCUSB_350B.zip
    267.7 KB · Views: 12
Thank you Pantheon , but what i need right now is a script to extract the firmware or the CFE independently .
D3mon already helped me with the flash detection and cleaning .
 
Back
Top