笔记本EC芯片MEC1633_MEC1632_MEC1609_MEC16系列飞线读写_解密

shirleyhuang

软件版本：161027及更新的版本
Software version：16107 or the later one
MEC1633使用RT-BGA169-02转接座离线读写视频教程：
The video tutorial about reading and writing MEC1633 with RT-BGA169-02 adapter:
https://v.qq.com/x/page/z07529l1uu7.html

根据主板图纸找出RST/TMS/TCK/TDI/TDO五个信号加一个GND，飞线到编程器上。部分主板上，EC JTAG接口的RST脚是空焊盘，需要补焊一个10K电阻。
Find out the five signals RST/TMS/TCK/TDI/TDO and the GND according to the mainboard schematic diagram, flying line to the programmer.  For some mainboards, the RST pin of EC JTAG interface is an empty solder, which need to weld a 10K resistor.

X1C JTAG






补充说明：不少用户咨询如何破解超级用户密码，此芯片是192KB的Flash加64KB的EEPROM(存放SVP超级用户密码和UUID)，通过JTAG接口，Flash可读可写，EEPROM可写不可读。选择“MEC1633_256K”读取后再写入，会把SVP超级用户密码和UUID所在的EEPROM区域（实际只有2KB）清空。然后使用以下工具重写SN/UUID就可以了。

Supplementary specification：A lot of users ask how to crack the super user password, this chip is 192KB Flash+2KB EEPROM (to store SVP super user password and UUID), through JTAG interface, Flash can be read and written, while the EEPROM can be written but can't be read. Select  "MEC1633_256k", read and then write, it will empty the EEPROM area(2KB) where the SVP super-user password and UUID are. And then you just need to use the tool to rewrite the SN/UUID

关于这个教程的原文和工具链接：http://www.ifix.net.cn/thread-56900-1-1.html
The link of the tool and the original article: http://www.ifix.net.cn/thread-56900-1-1.html

DongBeide

谢谢楼主的无私奉献，论坛有你更精彩

electronics

Thanx for the shared tutorial

siddhant

Giving error that pin 8 is not connected. If I connect it to VCC it gives over current protection message.