advane team need help. - GSM-Forum

rixtor · 08-11-2014, 02:47

I have S100
problem ; start up logo and off/ if i press volume down and power on entry QPST download .

flash in jtag error
Default language ID 0x0409
JTAG Interface Connected, S/N 0xD54360C3
Resetting and Exploring JTAG chain...1 Device(s)
Device #1 ID 0x007730E1 IR4
Loading AFP (Please Wait)...OK
AFP revision 4, compiled 11/26/2013 11:00:00 AM
================================================== ========
Phone Type : Cherry Mobile Flare (S100)
CPU Type : Qualcomm MSM8225
Storage TYpe : eMMC 4GB
Boot Package : Full Factory Restore
Android Version: 4.1.2 (Jelly Bean)
Kernel Version : 3.4.0
Build Number : TBW592250_8572_V006045
================================================== ========
1. Make sure JTAG Connection is 100% OK
2. Always Disconnect the Phone BATTERY
3. Connect USB Cable to Phone
4. Connect RJ-45 JTAG Cable to ATF Box
5. Select the Correct Phone Type
6. Use RESET JTAG button to check the JTAG Connection
7. Click RESTORE BOOT button to Start Boot Repairs
8. Full Factory Restore takes 40 minutes to Finish
----------------------------------------------------------

Resetting and Exploring JTAG chain...1 Device(s)
Device #1 ID 0x007730E1 IR4
Restore Boot...
Waiting for Device Connection 20 second(s)...OK
Resetting and Exploring JTAG chain...OK
Halting Core...OK
Initializing Device...OK
Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Sending Flash Loader...OK (91892 Op/Sec)
Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71
Restore Boot...
Waiting for Device Connection 20 second(s)...OK
Resetting and Exploring JTAG chain...OK
Halting Core...OK
Initializing Device...OK
Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Sending Flash Loader...OK (91915 Op/Sec)
Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71
Restore Boot...
Waiting for Device Connection 20 second(s)...OK
Resetting and Exploring JTAG chain...OK
Halting Core...OK
Initializing Device...OK
Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Sending Flash Loader...OK (91918 Op/Sec)
Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71
Restore Boot...
Waiting for Device Connection 20 second(s)...OK
Resetting and Exploring JTAG chain...OK
Halting Core...OK
Initializing Device...OK
Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Sending Flash Loader...OK (91955 Op/Sec)
Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71
Restore Boot...
Waiting for Device Connection 20 second(s)...OK
Resetting and Exploring JTAG chain...OK
Halting Core...OK
Initializing Device...OK
Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Sending Flash Loader...OK (91904 Op/Sec)
Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71
Saving "..\Logs\Screenshots\2014-08-11_09-57-47.jpg"...OK

EMMC detect
why flash write error help pls .

Advance-Box · 08-11-2014, 04:01

@rixtor

Code 0x71 means eMMC write speed is very slow.

Are you using latest atfj.exe ?

atfj.exe

B.R.

rixtor · 08-11-2014, 04:17

Quote:

Originally Posted by Advance-Box

@rixtor

Code 0x71 means eMMC write speed is very slow.

Are you using latest atfj.exe ?

atfj.exe

B.R.

yup atfj version v1.0.10 and version v1.0.7 same error

what should i do?

Advance-Box · 08-11-2014, 04:49

@rixtor

Possible write protection bit is set on this eMMC.

Use this:
LUMIA_WIN7_CUSTOM_READ_WRITE.afp

Check if you can READ from the eMMC first 128MB

Save that File, then do a FULL EMMC ERASE.

Both procedures can be done by that AFP I linked for WP7.

B.R.

rixtor · 08-11-2014, 05:36

Quote:

Originally Posted by Advance-Box

@rixtor

Possible write protection bit is set on this eMMC.

Use this:
LUMIA_WIN7_CUSTOM_READ_WRITE.afp

Check if you can READ from the eMMC first 128MB

Save that File, then do a FULL EMMC ERASE.

Both procedures can be done by that AFP I linked for WP7.
I cant understand pls elaborate more.
B.R.

How to use this?
LUMIA_WIN7_CUSTOM_READ_WRITE.afp

I cant understand pls elaborate more.
Both procedures can be done by that AFP I linked for WP7.

Advance-Box · 08-11-2014, 05:55

@rixtor

Just connect your phone same procedure as the other AFP file.

Click CUSTOM R/W Button, it will pop-up some window where you can select Read, Write or Erase.

Select "Read" then set read size to 128MB or 512MB (Better if 512MB).

Let it Read the first 512MB of your phone, so that IMEI etc will be saved.

At the same time, it will check if eMMC is "readable" state.

After you make 512MB backup, perform a FULL eMMC Erase. This will reset eMMC Write Protect Bits (if set) to 0 (back to write enabled).

After eMMC is erased, you can again try to repair it with Flare S100 AFP file.

rixtor · 08-11-2014, 07:49

Quote:

Originally Posted by Advance-Box

@rixtor

Just connect your phone same procedure as the other AFP file.

Click CUSTOM R/W Button, it will pop-up some window where you can select Read, Write or Erase.

Select "Read" then set read size to 128MB or 512MB (Better if 512MB).

Let it Read the first 512MB of your phone, so that IMEI etc will be saved.

At the same time, it will check if eMMC is "readable" state.

After you make 512MB backup, perform a FULL eMMC Erase. This will reset eMMC Write Protect Bits (if set) to 0 (back to write enabled).

After eMMC is erased, you can again try to repair it with Flare S100 AFP file.

I already read 512mb save ok.

Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Sending Flash Loader...OK (91894 Op/Sec)
Reading "USER" area, flash #1, p#0, 0x0000000000, 0x0020000000...
Saving "..\Logs\Screenshots\2014-08-11_14-35-10.jpg"...OKOK
Completed in 0h 22m 8s. Code Download Speed 394 KiB/sec.
Dump File Saved to: C:\AdvanceBox Turbo Flasher\Dumps\MY_DUMP_2014-08-11_14-21-40.bin
Waiting for Device Connection 20 second(s)...OK

but error in full erase ..

Resetting and Exploring JTAG chain...1 Device(s)
Device #1 ID 0x007730E1 IR4
Waiting for Device Connection 20 second(s)...OK
Resetting and Exploring JTAG chain...OK
Halting Core...OK
Initializing Device...OK
Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Sending Flash Loader...OK (91999 Op/Sec)
Erasing "USER" area, flash #1, p#0, 0x0000000000, 0x00E7000000...Flash Erase Error at 0x00000000, DCC Read Error, Timeout During Operation!

Advance-Box · 08-11-2014, 07:55

@rixtor

Hi,
This eMMC is in fact "Write Protected"

Give me some time to check how I can remove write protection in another way.

B.R.

rixtor · 08-11-2014, 08:14

thanks and we hope ,you can find another way to solved this problem as soon as possible.

Advance-Box · 08-11-2014, 09:14

Quote:

Originally Posted by rixtor

thanks and we hope ,you can find another way to solved this problem as soon as possible.

I will PM you link for eMMC Erase before 5pm.

B.R.

Advance-Box · 08-11-2014, 09:23

Quote:

Originally Posted by rixtor

thanks and we hope ,you can find another way to solved this problem as soon as possible.

Check PM.

Then report Back if something still wrong.

rixtor · 08-11-2014, 10:28

Quote:

Originally Posted by Advance-Box

Check PM.

Then report Back if something still wrong.

nothing change sir,

================================================== ========
CPU Type : Qualcomm MSM8225Q
Storage TYpe : eMMC
Boot Package : FACTORY ERASE EMMC
================================================== ========
Resetting and Exploring JTAG chain...1 Device(s)
Device #1 ID 0x000000E1 IR4
Waiting for Device Connection 20 second(s)...OK
Resetting and Exploring JTAG chain...OK
Halting Core...OK
Initializing Device...OK
Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB
Partition Config: Boot from USER, Boot ACK OFF (0x38)
Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00)
Testing Device Memory...OK
Factory Erasing...OK

factory erasing ok but same error in flashing.

Advance-Box · 08-11-2014, 10:37

@rixtor

How many seconds did factory erasing take?

rixtor · 08-11-2014, 10:47

Quote:

Originally Posted by Advance-Box

@rixtor

How many seconds did factory erasing take?

3 or 5 second only ..
and no process bar indicator

Advance-Box · 08-11-2014, 10:47

@rixtor

I think your eMMC is set to PERMANENT Write Protect. I don't know how did that happen, but S100 eMMC is known to have all kinds of firmware problem inside.

I can provide a new exe which will read CSD and save EXT_CSD when you detect the eMMC. (maybe after 24 hours)

If in fact the PERMANENT Write Protect is set, then this phone will not work anymore unless you change eMMC Chip.

B.R.

08-11-2014, 02:47	#1 (permalink)
rixtor Insane Poster Join Date: Jul 2007 Location: manila philippines Posts: 87 Member: 553341 Status: Offline Thanks Meter: 24	advane team need help. I have S100 problem ; start up logo and off/ if i press volume down and power on entry QPST download . flash in jtag error Default language ID 0x0409 JTAG Interface Connected, S/N 0xD54360C3 Resetting and Exploring JTAG chain...1 Device(s) Device #1 ID 0x007730E1 IR4 Loading AFP (Please Wait)...OK AFP revision 4, compiled 11/26/2013 11:00:00 AM ================================================== ======== Phone Type : Cherry Mobile Flare (S100) CPU Type : Qualcomm MSM8225 Storage TYpe : eMMC 4GB Boot Package : Full Factory Restore Android Version: 4.1.2 (Jelly Bean) Kernel Version : 3.4.0 Build Number : TBW592250_8572_V006045 ================================================== ======== 1. Make sure JTAG Connection is 100% OK 2. Always Disconnect the Phone BATTERY 3. Connect USB Cable to Phone 4. Connect RJ-45 JTAG Cable to ATF Box 5. Select the Correct Phone Type 6. Use RESET JTAG button to check the JTAG Connection 7. Click RESTORE BOOT button to Start Boot Repairs 8. Full Factory Restore takes 40 minutes to Finish ---------------------------------------------------------- Resetting and Exploring JTAG chain...1 Device(s) Device #1 ID 0x007730E1 IR4 Restore Boot... Waiting for Device Connection 20 second(s)...OK Resetting and Exploring JTAG chain...OK Halting Core...OK Initializing Device...OK Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB Partition Config: Boot from USER, Boot ACK OFF (0x38) Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00) Testing Device Memory...OK Sending Flash Loader...OK (91892 Op/Sec) Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71 Restore Boot... Waiting for Device Connection 20 second(s)...OK Resetting and Exploring JTAG chain...OK Halting Core...OK Initializing Device...OK Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB Partition Config: Boot from USER, Boot ACK OFF (0x38) Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00) Testing Device Memory...OK Sending Flash Loader...OK (91915 Op/Sec) Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71 Restore Boot... Waiting for Device Connection 20 second(s)...OK Resetting and Exploring JTAG chain...OK Halting Core...OK Initializing Device...OK Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB Partition Config: Boot from USER, Boot ACK OFF (0x38) Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00) Testing Device Memory...OK Sending Flash Loader...OK (91918 Op/Sec) Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71 Restore Boot... Waiting for Device Connection 20 second(s)...OK Resetting and Exploring JTAG chain...OK Halting Core...OK Initializing Device...OK Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB Partition Config: Boot from USER, Boot ACK OFF (0x38) Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00) Testing Device Memory...OK Sending Flash Loader...OK (91955 Op/Sec) Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71 Restore Boot... Waiting for Device Connection 20 second(s)...OK Resetting and Exploring JTAG chain...OK Halting Core...OK Initializing Device...OK Detecting EMMC #1 ID...Hynix XINYH, 3.61 GiB Partition Config: Boot from USER, Boot ACK OFF (0x38) Boot Bus Config: x1 SDR, Bus Reset to x1 (0x00) Testing Device Memory...OK Sending Flash Loader...OK (91904 Op/Sec) Restoring Partition #1...Flash Write Error at 0x00000000, Loader Error, Code 0x71 Saving "..\Logs\Screenshots\2014-08-11_09-57-47.jpg"...OK EMMC detect why flash write error help pls .

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

08-11-2014, 04:01	#2 (permalink)
Advance-Box No Life Poster Join Date: Dec 2007 Posts: 7,598 Member: 651945 Status: Offline Thanks Meter: 20,118	@rixtor Code 0x71 means eMMC write speed is very slow. Are you using latest atfj.exe ? atfj.exe B.R.

08-11-2014, 04:49	#4 (permalink)
Advance-Box No Life Poster Join Date: Dec 2007 Posts: 7,598 Member: 651945 Status: Offline Thanks Meter: 20,118	@rixtor Possible write protection bit is set on this eMMC. Use this: LUMIA_WIN7_CUSTOM_READ_WRITE.afp Check if you can READ from the eMMC first 128MB Save that File, then do a FULL EMMC ERASE. Both procedures can be done by that AFP I linked for WP7. B.R.

08-11-2014, 05:55	#6 (permalink)
Advance-Box No Life Poster Join Date: Dec 2007 Posts: 7,598 Member: 651945 Status: Offline Thanks Meter: 20,118	@rixtor Just connect your phone same procedure as the other AFP file. Click CUSTOM R/W Button, it will pop-up some window where you can select Read, Write or Erase. Select "Read" then set read size to 128MB or 512MB (Better if 512MB). Let it Read the first 512MB of your phone, so that IMEI etc will be saved. At the same time, it will check if eMMC is "readable" state. After you make 512MB backup, perform a FULL eMMC Erase. This will reset eMMC Write Protect Bits (if set) to 0 (back to write enabled). After eMMC is erased, you can again try to repair it with Flare S100 AFP file.

08-11-2014, 07:55	#8 (permalink)
Advance-Box No Life Poster Join Date: Dec 2007 Posts: 7,598 Member: 651945 Status: Offline Thanks Meter: 20,118	@rixtor Hi, This eMMC is in fact "Write Protected" Give me some time to check how I can remove write protection in another way. B.R.

08-11-2014, 08:14	#9 (permalink)
rixtor Insane Poster Join Date: Jul 2007 Location: manila philippines Posts: 87 Member: 553341 Status: Offline Thanks Meter: 24	thanks and we hope ,you can find another way to solved this problem as soon as possible.

08-11-2014, 10:37	#13 (permalink)
Advance-Box No Life Poster Join Date: Dec 2007 Posts: 7,598 Member: 651945 Status: Offline Thanks Meter: 20,118	@rixtor How many seconds did factory erasing take?

08-11-2014, 10:47	#15 (permalink)
Advance-Box No Life Poster Join Date: Dec 2007 Posts: 7,598 Member: 651945 Status: Offline Thanks Meter: 20,118	@rixtor I think your eMMC is set to PERMANENT Write Protect. I don't know how did that happen, but S100 eMMC is known to have all kinds of firmware problem inside. I can provide a new exe which will read CSD and save EXT_CSD when you detect the eMMC. (maybe after 24 hours) If in fact the PERMANENT Write Protect is set, then this phone will not work anymore unless you change eMMC Chip. B.R.