CP2112 and DJI Battery Killer Rewrite BQ8030 ROM" Laptop battery data retrieval - BMS HACK
ฝัง
- เผยแพร่เมื่อ 30 ก.ย. 2024
- Copyright Disclaimer:
The content presented in this video may include information, diagrams, or methods obtained from publicly available sources, forums, or platforms in the field of electronics. While efforts have been made to ensure compliance with copyright and fair use, if any copyright owner believes that their work has been used without proper permission, please contact us, and we will address the matter promptly.
Educational Purpose Statement:
This video is intended for educational purposes, providing insights into electronic components, circuits, or related topics. The goal is to share knowledge, assist learners, and contribute to the understanding of electronics. Any demonstrations or discussions are conducted with the utmost respect for ethical and lawful practices. If you have any questions or concerns, feel free to reach out. _____________________________________________________________________
Your support means the world to me! If you appreciate the content I create and would like to contribute to the growth of my channel, you can show your support through donations.
❤️GPAY : asudhakaran715@okaxis
paypal.me/iamaksv
_____________________________________________________________________
Links
Cp2112 USBHOST : www.silabs.com...
DJIBATTERYKILLER: drive.google.c...
DJI killer Telegram Channel ( Not mine ) : t.me/+goUDc8gY...
HEX EDITOR : mh-nexus.de/en...
HEX CALCULATOR : www.calculator...
HEX CONVERTER : www.rapidtable...
:yt:Hack with FX2LP board
:yt:Part 1 : • Laptop battery data re...
:yt:Part 2 : • Laptop battery data re...
:yt:Part 3 : • Laptop battery data re...
"Game-Changing Discovery: Read and Write BQ8030 ROM using CP2112 and DJI Battery Killer!"
"Hey there, I'm thrilled to share an incredible breakthrough in battery hacking that I recently discovered. In this video, I reveal a groundbreaking method I found to read and write the BQ8030 ROM using the CP2112 USB-to-i2c bridge device, together with my innovative creation, the DJI Battery Killer.
Join me on this exhilarating journey as I unlock new frontiers in battery management. With the power of the CP2112 USB-to-i2c bridge and my very own DJI Battery Killer, I've cracked the code, gaining unprecedented access to the BQ8030 ROM.
In this tutorial, I'll guide you through the step-by-step process of this game-changing discovery. We'll explore the necessary hardware and software setup, witnessing how the CP2112 USB-to-i2c bridge establishes a secure connection between the DJI Battery Killer and the BQ8030. Together, we'll witness the magic as we read the existing ROM data and write new data back into the BQ8030, taking control of its firmware like never before.
The CP2112 USB-to-i2c bridge is an incredible device that provides seamless communication between USB and SPI devices, offering versatility and efficiency. Combined with the DJI Battery Killer, my groundbreaking creation, we're able to unlock new possibilities for customizing battery management parameters, optimizing performance, and reshaping the future of battery technology.
Whether you're an intrepid electronics enthusiast, a passionate hardware hacker, or an industry professional seeking to push the boundaries, this video is a must-watch. Join me as we celebrate this game-changing discovery and embrace the limitless potential it holds.
Make sure to subscribe to my channel, as I'll be sharing more exciting advancements in battery hacking, insights on the CP2112 USB-to-i2c bridge, and future innovations with the DJI Battery Killer. Together, let's revolutionize battery technology as we dive into the world of reading and writing the BQ8030 ROM using CP2112 and the DJI Battery Killer!" - วิทยาศาสตร์และเทคโนโลยี
I really appreciate your dedication!!
Thank you brother ❤️ , Iam not worried about views am always worried about my quality of content. One like and one comment means a lot to me ❤️❤️❤️
@@AnandakrishnaSudhakaran i am sure that you aren't worried about views. ❤️❤️
Hi thank you for your method can i that process for bq20695 chip ?
verify chip parameters of bq20695, mostly everything looks same, but authentication will be different. so do it careful, it can damage your chip
great vid! how do you think possibility of hacking for BQ devices other than bq8030?
There is no hacking, am just doing everything from internet, if its safe way i will create video. I tried many chips. But keys are different. And no idea how to get them. Still searching.. thank you for your comment
@@AnandakrishnaSudhakaranthanks reply. keep your great work.
how to know which Chip is installed in battery without open battery case
Sadly you can't. Opening it is a must. 🙄😶
Could you please share bq8030 datasheet?
Good morning my friend you could make a video for this 2F8K3 battery for dell Alienware 17r1 for the battery model if the machine can activate it and pass the driver on
the cip I would greatly appreciate it to make a video for that battery and Show us the connection to the terminals thanks very much with appreciation ...!!???
I dont have that battery, let me check on google, I will make you a video for you, Thanks for your support,
Hello. what values should be entered to unlock the bq40z696a chip in lenovo batteries?
It uses sha 1 authentication method, codes will not work. And I have this chip. But default codes not work.
Default codes are
0414 3276
1234 5678
0000 0000
FFFF FFFF
lot of other keys are also available. If I got anything I will let you know
@@AnandakrishnaSudhakaran thank you. what do the values 71.73.70 mean? where can i find out what numbers should i enter?
Nice vid where do you get the wires from?
Its a normal jumper wires used for arduino board, and those golden pins from old laptop motherboard. Just soldered.
Thanks for your comment
@@AnandakrishnaSudhakaran okay thanks
Please make your videos in Hindi language.
well done bro well done please do make a video on r2j240 chip with this cp2112
I have 51f51, but I don't know the unlock key, I tried many ways to read the rom. I even tried with the boot pin and reset pin. I am waiting for more batteries to test. Cant release a video without knowing. Thanks for your support bro ❤️❤️
Very interesting but this version of DJIBatteryKiller is not available via the link provided. Can you provide another link from another server or source please.
thanks for the comment , here is the link drive.google.com/file/d/13xGIZVaDspGy3EgNBYlFE6cRadzuvqKg/view?usp=sharing
Great fast response but it still wont run on my win10 machines here in the uk. I tried as administrator but still no good. The downloads are fine so no problem there and this is a newer version which suggests this is the one I need but it wont run i just get an error message. It is very frustrating.@@AnandakrishnaSudhakaran
I should add that the download includes the old version which runs perfectly.
Oh and I copied all the .dll files across to the new version folder as these are required I believe.
@@johnbaxter1730 is it working? I think it's the latest version.
can you give me link for r2j240 flasher file and also a2168 and for SH chines chip?
Sure, check this thread, you can find 3 softwares for cp2112. Please test it yourself and make a video.
github.com/lmdpua
I dont have a2168, also r2j240 flasher is not available
thank you very much with appreciation
Hello. I have similar Lenovo battery with 2+5 pin socket (PN:42T4619 nominal: 10,8V 7.8AH 86WH seems to be older type than yours) . Question is if it is possible to detect the chip type without opening the battery case. Other question: For resetting You used also the Arduino Uno in other video, which method is more effective? At 1:32 it is seen with DJIkiller the cp2112 can handle only 3 chips. Thanks for your video .
Cp2112 can handle chips based on the software. Dji support only 3 chips but Be2Works softwarw support many chip on their paid version. Dji can effective on any kind of chip. Arduino is simple, if we have the correct software we can do anything with that. Answer to your question, still only one software can identify chip without opening is TestBattery v5.50 from UBRT REGEDIT GROUP. But you need ev2300 or lpt to i2c for this software . If your mother oard support LPT port you can design lpt to i2c easily i can give you the circuit diagaram. Last day i tried to read one battery from lenovo as bq8030, but not worked. Then i tried woth testbattery and detected as 51f51. Strange for me. So I opend and checked. It was 51f51. So for identity chip for free , use testbattery 5.5
Do you have ev2300 or ev2400, then bqstudio is available for free. Please tell me about your hardware side
Hello. I don't have any special hardware, I only think of replacing the cells inside the battery ( more environment friendly solution, as compared to thrashing the entire used battery). I searched the solution and found that the cheapest way would be using cp2112 or Arduino (like you did), perhaps RasberryPI. (EV2300 is a big investment and is not worth buying). But I had to realize that these DIY solutions are limited because there are lot of type of BMS chips most of them do not have any datasheet published. So i have to open the housing of the battery, and if I have luck there will be known BQxxx series chip. I incline rather to purchase an Arduino, because it can be used for other purposes as well, however using Arduino for BMS restore is not so effective compared to cp2112. Thanks for your reply.@@AnandakrishnaSudhakaran
send 0x0517 to 0x70 :gave the error could not write word ? what to do ?
After sending 0214, what is the value from 0x73? Did you subtract that hex from 10000?
Does this works also on Ronin M batteries ??
DEPENDS ON THE CHIP, SECURITY WILL BE DEIFFERENT,
Can you reset bq40320 with PF bit with cp2112
50% chance only, you can connect and communicate with the chip with cp2112. Or any other smbus support board. If the chip is using default Unseal and Full access key you can do the unsealing process. If it unsealing worked then you can clear any pf flags by using pf clearing commands given in technical reference of bq40320. This dji battery killer is designed for dji battery. But we can do anything with another chip if we have some knowledge about the procedure of battery unlock.
So if you have cp2112 you can try, or if you have arduino, there are free softwares and codes avilable and you can try yourself.
@Anandakrishna Sudhakaran Thank you very much for sharing your knowledge. I have to reset to default settings 3s2p Lenovo battery FRU 42T4861. Can you share Be2works demo file? Can you also help me/leave some advice for reseting the battery. There are bq8030A and bq29330 inside. BTW CP2112 is not USB-to-SPI (as you decribe in decription) but USB-to-I2C chip. Regards
Oh thanks for correcting me, i will correct it.
Do it carefully
Do not touch the positive line of the battery or pcb with sda and scl pin. Bq8030 is easy to crack. Check your fuse also. If you plan to replace cells, change with same cell model. And am noob at this, so i cannot tell you any advice. Just do it on your style. Always follow safety procedures. Multiple check sda and scl not touch to positive. Also check the voltage on sda and scl before connecting to cp2112. Cp2112 can work upto 5.6volt range.
Also share image or video if you plan to record it so i can share it on my youtube.
@@AnandakrishnaSudhakaranThankyou My battery worked fine (70% of new one),. I recognized one pair of cells had a little bit lower voltage. I swaped the with another one that was much worse (should have been a new ones). After one cycle the capacity written in Bq was decreased from 45Wh to 5Wh (full capacity). I changed again those two cells (pararell connected) into true new one , oryginal 2500mAh as oryginal but not Sanyo (as was) but Samsung 25R. Now the battery is correct charged to 4,20V per cell (balanced, every cell same voltage), but the supply is cut when the voltage fall to 3,85V (not 3,3). After reaching 5%, during discharging, the rest lasts very long time (shows 1 minute (7%) left, and it lasts 60 minutes (YT) to shut down). I try full cycles: charge to 100% and discharde to shooting down and then the rest in bios. Do you thing the Bq chip is recalculating capacity and could increased it to real value or never increases and could only decrease - one way? // SCL and SDA lines are ussualy pulled up with 4K-10K restistor, and it works shorcuting the line to GND. So connecting directly to VCC could demage the chip indeed. Regards!
@@roolon6604 do a calibration cycle again, one full charge, full discharge , again full charge, based on the battery performance bq will adjust the settings and it will give correct readings. What is the design voltage of the battery? Let me calculate it for you.
@@AnandakrishnaSudhakaran Next cycle (after long (1h) 1% to turn off discharging starts from 11.5V and first 1% is lasting long now. Parameters read from Lenovo X220 Power manager/battery. Condition: Fair (yelow) before was GOOD(geen), Designed capacity: 62.16Wh, designed voltage 11.10V, cycle count 328, full charge capacity 3.53Wh (yes, no decimal point mistake). Original cells SANYO UR18650ZT 2700mA, 2 of them (the lowest votlage) I replaced with new oryginal Samsung INR18650-25R 2500mAh.// Btw I wondering that most of people replacing the same pair of cells - with NTC resistor on them. Connected (+) to the highest voltage of set (last one) counting from global GND.
@@AnandakrishnaSudhakaran I did 4 times full cycles and also did battery maitenance (button in Lenovo power manager). Full charge to 12.90V, discharge and charge again with recalibration. But it works probbablly only one way - decreasing full charge capacity and balancing cells. After that I have no changes noticed.
Hi how can I get more info about laptop battery repair and can I get this device and software from you
Please tell me about your laptop. Software is free. Am not the developer. And cp2112 is a debug hardware. What is your purpose?
My main porpose is to no how to use the software to b repairing batteries
Very happy with your video. You make the right content. Good luck in your work and promotion of the channel on TH-cam
Thank you for your support ❤️❤️
I really appreciate your works sir, and how about dji battery reset cycle?
which battery, give me full details
@@AnandakrishnaSudhakaran and can i join to your telegram group?
@@wishtone885 dji battery killer group is not mine, but you can contact me through telegram
@@AnandakrishnaSudhakaran what is your link in telegram? Thanyou :)
@@wishtone885 my id ialwaysthere4u
Good job, Anand. Keep it up. I will try to follow your tutorials to reset my Dell laptop battery. And thanks for sharing your software.
Software is not mine, all credits to a man I don't know. Thanks for your support. Before connecting make sure the positive line is not in touch with data or clock line. Careful. Any doubt feel free to ask
@@AnandakrishnaSudhakaran Can you share this software via Google drive without any login password? First question, in your opinion which method is easy, using fx2 board or cp2112 board? Actually I have both boards but I burnt cp2112 ic by applying 12 volts to it then I replaced the ic but I am not sure that it is working good or not. Second question, can I contact you by email if need any help in this subject? Thanks.
@@owaisnajam5304 you can contact me through insta or telegram or mail, did you open your battery back? Which ic is there?
I can share the link personally to you , no prblm
@@AnandakrishnaSudhakaran I didn't open yet. I will drop a message here when I will do.
will it works with TB50 batteries too?
I cant tell you now, but i will try to get the details. Do you know which chip is used in that battery?
@@AnandakrishnaSudhakaran it's wrote FR5870
@@airfilm_it ok any other chips, FR5870 is MSP430FR5870. You can get the datasheet here www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=www.ti.com/lit/gpn/MSP430FR5870&ved=2ahUKEwii7sDK0NWCAxV8zjgGHYV8BLIQFnoECA8QAQ&usg=AOvVaw22V7gdMpVTn_8F4pvQMmnf
@@airfilm_it any other chips?? Which connected to the all cells,
According to this method, the (Full Charge Capacity) battery value has been modified, but the remaining capacity battery capacity cannot be recognized. It is still 0,
You need to calibrate the battery
@@AnandakrishnaSudhakaran How do you do that ? 🤔
djibatterykiller software link is not working
My porpose is to no how to use it to unlock laptop battery s
Please, if you can make a video on how to reset M37512
am sorry i dont have that chip. If i get anything i will reply you. thank you
Try using the karosium guide , there are precompiled files for windows but you need fx2lp board for the connection. If you need the link i can provide
@@AnandakrishnaSudhakaran It'd be very appreciated, thanks
@@antaninianta try this method, read full carefully
www.karosium.com/2016/08/adding-m37512-with-panasonicibm-firmware.html?m=1
@@AnandakrishnaSudhakaran I just bought the fx2lp board, need to wait until it arrives. I'm using Linux and already built the smbusb software. I need to understand how to use the board, how to connect it to the bms connector of the battery ( I think). I will watch your videos about BQ8030 where you use this board and hope to learn and somehow adapt it to my case (btw, it's a Thinkpad T61 battery, with Panasonic cells, hence the microcontroller firmware is M37512 FC200). Then I will need to actually interact with the microcontroller to read/write/reset data on it (its eeprom?) and replace the blown fuse (but the cells are good now, there was just one at 2.2v that I revived slow charging it with bench power supply). It will be very challenging since I'm a total noob in this. Thanks for now.
Thanks bro can i use ch340 ? And what shoul i select 3.3 or 5 volts ?
Ch340 can't connect. do you have any arduino board?
@@AnandakrishnaSudhakaran yes i have uno and nano
@@saifi1223 ok what you want actually?
@@AnandakrishnaSudhakarani want to reset bms i have changed batteries and its not working
@@saifi1223 which board? Do you hav instagram or telegram?
Bhai hindi kujh poch skta hn?
Work in BQ40z50?
If the unseal and full access key is default , yes you can reset the bq40z50
@@AnandakrishnaSudhakaran bro how to know which chip my laptop battery have without opening the battery physically.
@@MAnees-jk5yg well its possible. One of the register value is chip model. I will check and reply you. Actually am not that good at this. But i will try. Can you share the battery model number and company?
@@AnandakrishnaSudhakaran Bro its HP Elitebook 840 G1 laptop battery having model number CM03XL. I don't know which chip insides the battery. how to know the chip. I want to order CP2112 I2C module to reset this battery.
@@MAnees-jk5yg without knowing the chip its impossible to do. And if its is modern chip, it will be difficult to unseal and reset. Because of the keys. Resetting battery will not work longer. If you want more time, change batteries. That is what actually reset means