Read T430s BIOS chip

[HeylelTeomim]

I am in the process of changing the bios on a T430s but seem to be stuck. My end goal is to have the bios modified so I get rid of whitelist for wan. I'd like to replace the current bios chip with a W25Q128FVSSIG (SOIC8) but in order to do that I need a backup

The bios chip is a Macronix MX25L12835EZNI-10G (WSON8). Using FPT from DOS it came up as a Macornix MX25L12805D, which doesn't really make sense since that is a SOP16 package.

The chip has been removed as I could not make a SOIC8 clip fit on the chip. With it removed, I am also not bothered by voltage sag so that should be good.

I am however facing a problem when trying to read it using a CH341 USB unit (black edition) to make a backup for modifying. I have tried ASProgrammer and CH341 programmer. 

I put the chip in the test clip with pin 1 at the red wire. When I hook it up to the CH341 unit, the USB "unplugs" itself and the software loses connection. Also, the ON light goes dimmer. When I unhook the test clip, the CH341 comes to life again and software can see the unit again. I also have the green PCB but getting the little 6x8 WSON package aligned is really tricky so I opted for the clip.

If I orient the chip in other ways, it is not identified.

I have checked that both ASProgrammer and CH341 Programmer both should "know" the chip as it can be manually selected.

So I am quite lost right now about what to do. Have considered the following:

1. chip was damaged during removal (although done by a professional with the right kit - not me :-) )
2. my ch341 unit is faulty
3. the testclip or pogo boards are faulty
4. the wiring using clip is wrong and the green PCB should be used as the pin routes on WSON8 are not the same as for a SOIC8. However, looking at coreboot t430s wiki, this did not seem to be the case (Preparation section, https://www.coreboot.org/Board:lenovo/t430s). (I will receive a better test clip (Pomona 5250) which allows me to customize the pin routing between clip and CH341 unit if 4. is the culprit.)
5. bite the bullet and have the bios chip soldered onto the green PCB that came with the CH341 unit.

Really hoping for some help here - so many thanks in advance!

[HeylelTeomim]

I think I solved it myself - had a little heureka moment. It suddenly hit me that maybe what was:

When the chip is connected correctly, it starts to draw current from the CH341 and this overpowers the USB port it is in because it is a low power port only suited for mice and keyboards.

So I moved the CH341 to another port, and lo and behold - suddenly it did not unplug and I could actually read the chip :-)

Hope this helps someone else :-)

[Lost_N_BIOS]

*Edit - I didn't see your second reply above, had this tab open to reply since your first post. I'll leave it all here in case it helps someone with something later

You can solder chip onto the black one too, on back side
Here's the datasheet for MX25L12835E - https://datasheet.octopart.com/MX25L1283...519999.pdf

Pinout looks same as SOIC8 to me, so I don't know why it's seeming to short out on you. Does the chip get very hot when that happens?

On CH341A general software, on operate menu, operate option, 25/26 chip tabs, choose "Main Memory Only"
You may need to try several versions, MX25L12835 compatibility looks to be added only after 1.27, I suggest trying 1.30 or 1.34. Here's a package with many versions
http://s000.tinyupload.com/index.php?fil...5007472602

You may also need to use ASProgrammer 1.40 and choose remove protection, then use it or the CH341A software above
Locking bits explained (OTP Mode with CH341A programmer, which you don't need to se usually or write to ect, that's why I said to set "Main Memory Only")
http://www.macronix.com/Lists/Applicatio...uction.pdf

Or here, you may need to use 1.26 version of CH341A software, this version not included in main package above. Also, try 1.31Free (1.4 actual) that is included in the above package
http://s000.tinyupload.com/index.php?fil...7897522814

Maybe order some W25Q128 (or 64 if BIOS will fit) SOIC8 instead, if you can't get it sorted out

[HeylelTeomim]

*Edit - I didn't see your second reply above, had this tab open to reply since your first post.  I'll leave it all here in case it helps someone with something later

You can solder chip onto the black one too, on back side
Here's the datasheet for MX25L12835E - https://datasheet.octopart.com/MX25L1283...519999.pdf

Pinout looks same as SOIC8 to me, so I don't know why it's seeming to short out on you.  Does the chip get very hot when that happens?

On CH341A general software, on operate menu, operate option, 25/26 chip tabs, choose "Main Memory Only"
You may need to try several versions, MX25L12835 compatibility looks to be added only after 1.27, I suggest trying 1.30 or 1.34.  Here's a package with many versions
http://s000.tinyupload.com/index.php?fil...5007472602

You may also need to use ASProgrammer 1.40 and choose remove protection, then use it or the CH341A software above
Locking bits explained (OTP Mode with CH341A programmer, which you don't need to se usually or write to ect, that's why I said to set "Main Memory Only")
http://www.macronix.com/Lists/Applicatio...uction.pdf

Or here, you may need to use 1.26 version of CH341A software, this version not included in main package above.  Also, try 1.31Free (1.4 actual) that is included in the above package
http://s000.tinyupload.com/index.php?fil...7897522814

Maybe order some W25Q128 (or 64 if BIOS will fit) SOIC8 instead, if you can't get it sorted out

Thank you for the very comprehensive answer! I hope that someone benefits from the thread too!

One note I might add for would-be T430s bios modders who come across the same Macronix chip (MX25L12835E) is that underneath, the 6x8mm WSON-8 package was actually grounded. This was not clear to me from the datasheet I saw and the reading up on WSON-8 packages (but then again, I'm no electronics guy). This meant that when unsoldering it, it actually required a lot of underheating to make it let go. It was not just a matter of the 8 pads on the WSON-8)

Thanks again for replying!

[Lost_N_BIOS]

You're welcome, and thank you for dropping that tip on the WSON package too.

[jcholsap]

You're welcome, and thank you for dropping that tip on the WSON package too.

Be advised that the MX25L12835(E) internally pulls #7 HOLD high. I replaced mine with a Winbond SOP8 and had to bridge pins #7 and #8 VCC. Also there's a MX25L12835(F) in a SOP8 package with faster reads and writes. And again I believe #7 has to bridged high.


https://www.xref-pro.com/cross-reference...5EZNI-10G/

[Lost_N_BIOS]

Thanks!