Hi people.
I have new bricked Huawei Honor 4c with HiSilicon Kirin 620 octacore (Hi6620) Hardly bricked.
I`ve unlocked bootloader and custom recovery used to flash it with my own update.zip from other phone (with LTE support). At the end of flashing - it turned off and bricked.
BUT! After connecting to PC via USB it flashes GREEN and RED leds a few times and after windows determines it as a device with USB\VID_12D1&PID_3609&REV_0000 and named as 䕇䕎䥎 ㌲㔴㜶㤸 .
It is Huawei`s VID. And after a lot of search I found a driver for it - and device became HUAWEI USB-COM 1.0. But nothing else.
No flash utility, nothing. HiSilicon-IDT for K3 processor doesn`t work.
After another searches I found very similar device - it`s named HiKey board. Based on Hisilicon Kirin processor too https://www.96boards.org/.
This board is base around the HiSilicon Kirin 6220 eight-core ARM Cortex-A53 64-bit SoC running at 1.2GHz and delivering over 10,000 Dhrystone VAX MIPS total performance. The SoC also delivers high performance 3D graphics support with its ARM Mali 450-MP4 GPU.
1GB 800MHz LPDDR3 DRAM, 4GB eMMC Flash Storage and the standard 96Boards microSD v3.0 socket provide high performance. Flexible storage options and connectivity are available through 802.11a/b/g/n WiFi, Bluetooth 4.0 LE, three high speed USB 2.0 ports (1 OTG), an HDMI 1.3 1080p video output with audio, and Maker, DSI display and CSI camera interfaces. The board is the standard 96Boards credit-card form factor powered by an 8-18V DC 2A power supply.
Click to expand...
Click to collapse
As we can see - it is very close to ours phone.
It is fully documented and has a lot of spec about proc and other.
And in it`s manual written about recovery procedure after damage of ROM - when device is powered on - it is in "download mode" for 90 seconds - abslolutly like mine phone - after 90 second it turns off from windows.
In short - it is ability to write 2 fastboot images (fastboot1.img and fastboot2.img) in RAM, launch them and using fastboot command flash images to eMMC. They use SERIAL COM PORT to manipulate with device.
It uses utility called "hisi-idt.py" - it is a python script for Linux based machines.
I`ve Installed Linux Mint and try it.
And I`ve some result - first image is going fine and I receive "Done"
But second image is always "Failed". And fastboot command "fastboot devices" do not list any devices.
Viewing binaries from my ROM (Fastboot.img and Fastboot1.img) in HEX - I can see load addresses to ROM are the same as in python script. It is 0xf9800800 and 0x0700000 for both images.
But.... have no success. It looks like I`m close to the goal.
Any ideas?
Noone intersted in?
I`ve found UART Rx Tx points on the motherboard and now I can get some debug info.
I see I can load images into RAM but...
Code:
debug EMMC boot: print init OK
debug EMMC boot: send RST_N .
debug EMMC boot: start eMMC boot......
OnChipRom: fastboot1 Verif sucess !
[BDID]boardid: 745 <7.4.5>
battery ocv is 4141 mv
�����������������������������������������������������壂�{��?O
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f��B�rreset device done.
start enum.
enum done intr
Enum is starting.
usb reset intr
enum done intr
NULL package
NULL package
USB ENUM OK.
init ser device done....
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
uFileAddress=ss=f9800800
start armboot download mode
[BDID]boardid: 745 <7.4.5>
battery 펟v���W�����ʝcn�g������
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f���gc姾����fB�ʔ
thats all for a while
i have same problem pleas tell me if you fix it
michfood said:
Noone intersted in?
I`ve found UART Rx Tx points on the motherboard and now I can get some debug info.
I see I can load images into RAM but...
Code:
debug EMMC boot: print init OK
debug EMMC boot: send RST_N .
debug EMMC boot: start eMMC boot......
OnChipRom: fastboot1 Verif sucess !
[BDID]boardid: 745 <7.4.5>
battery ocv is 4141 mv
�����������������������������������������������������壂�{��?O
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f��B�rreset device done.
start enum.
enum done intr
Enum is starting.
usb reset intr
enum done intr
NULL package
NULL package
USB ENUM OK.
init ser device done....
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
uFileAddress=ss=f9800800
start armboot download mode
[BDID]boardid: 745 <7.4.5>
battery 펟v���W�����ʝcn�g������
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f���gc姾����fB�ʔ
thats all for a while
Click to expand...
Click to collapse
Hello, can you uload somewere the python file to have a look at it? Also the log you have provided to us it's the whole log?
no the log is not full.
it changes UART speed while booting.
script:
Code:
#!/usr/bin/python
#-*- coding: utf-8 -*-
import os
import os.path
import serial, time
import array
import sys, getopt
class bootdownload(object):
'''
Hisilicon boot downloader
>>> downloader = bootdownload()
>>> downloader.download(filename)
'''
# crctab calculated by Mark G. Mendel, Network Systems Corporation
crctable = [
0x0000, 0x1021, 0x2042, 0x3063, 0x4084, 0x50a5, 0x60c6, 0x70e7,
0x8108, 0x9129, 0xa14a, 0xb16b, 0xc18c, 0xd1ad, 0xe1ce, 0xf1ef,
0x1231, 0x0210, 0x3273, 0x2252, 0x52b5, 0x4294, 0x72f7, 0x62d6,
0x9339, 0x8318, 0xb37b, 0xa35a, 0xd3bd, 0xc39c, 0xf3ff, 0xe3de,
0x2462, 0x3443, 0x0420, 0x1401, 0x64e6, 0x74c7, 0x44a4, 0x5485,
0xa56a, 0xb54b, 0x8528, 0x9509, 0xe5ee, 0xf5cf, 0xc5ac, 0xd58d,
0x3653, 0x2672, 0x1611, 0x0630, 0x76d7, 0x66f6, 0x5695, 0x46b4,
0xb75b, 0xa77a, 0x9719, 0x8738, 0xf7df, 0xe7fe, 0xd79d, 0xc7bc,
0x48c4, 0x58e5, 0x6886, 0x78a7, 0x0840, 0x1861, 0x2802, 0x3823,
0xc9cc, 0xd9ed, 0xe98e, 0xf9af, 0x8948, 0x9969, 0xa90a, 0xb92b,
0x5af5, 0x4ad4, 0x7ab7, 0x6a96, 0x1a71, 0x0a50, 0x3a33, 0x2a12,
0xdbfd, 0xcbdc, 0xfbbf, 0xeb9e, 0x9b79, 0x8b58, 0xbb3b, 0xab1a,
0x6ca6, 0x7c87, 0x4ce4, 0x5cc5, 0x2c22, 0x3c03, 0x0c60, 0x1c41,
0xedae, 0xfd8f, 0xcdec, 0xddcd, 0xad2a, 0xbd0b, 0x8d68, 0x9d49,
0x7e97, 0x6eb6, 0x5ed5, 0x4ef4, 0x3e13, 0x2e32, 0x1e51, 0x0e70,
0xff9f, 0xefbe, 0xdfdd, 0xcffc, 0xbf1b, 0xaf3a, 0x9f59, 0x8f78,
0x9188, 0x81a9, 0xb1ca, 0xa1eb, 0xd10c, 0xc12d, 0xf14e, 0xe16f,
0x1080, 0x00a1, 0x30c2, 0x20e3, 0x5004, 0x4025, 0x7046, 0x6067,
0x83b9, 0x9398, 0xa3fb, 0xb3da, 0xc33d, 0xd31c, 0xe37f, 0xf35e,
0x02b1, 0x1290, 0x22f3, 0x32d2, 0x4235, 0x5214, 0x6277, 0x7256,
0xb5ea, 0xa5cb, 0x95a8, 0x8589, 0xf56e, 0xe54f, 0xd52c, 0xc50d,
0x34e2, 0x24c3, 0x14a0, 0x0481, 0x7466, 0x6447, 0x5424, 0x4405,
0xa7db, 0xb7fa, 0x8799, 0x97b8, 0xe75f, 0xf77e, 0xc71d, 0xd73c,
0x26d3, 0x36f2, 0x0691, 0x16b0, 0x6657, 0x7676, 0x4615, 0x5634,
0xd94c, 0xc96d, 0xf90e, 0xe92f, 0x99c8, 0x89e9, 0xb98a, 0xa9ab,
0x5844, 0x4865, 0x7806, 0x6827, 0x18c0, 0x08e1, 0x3882, 0x28a3,
0xcb7d, 0xdb5c, 0xeb3f, 0xfb1e, 0x8bf9, 0x9bd8, 0xabbb, 0xbb9a,
0x4a75, 0x5a54, 0x6a37, 0x7a16, 0x0af1, 0x1ad0, 0x2ab3, 0x3a92,
0xfd2e, 0xed0f, 0xdd6c, 0xcd4d, 0xbdaa, 0xad8b, 0x9de8, 0x8dc9,
0x7c26, 0x6c07, 0x5c64, 0x4c45, 0x3ca2, 0x2c83, 0x1ce0, 0x0cc1,
0xef1f, 0xff3e, 0xcf5d, 0xdf7c, 0xaf9b, 0xbfba, 0x8fd9, 0x9ff8,
0x6e17, 0x7e36, 0x4e55, 0x5e74, 0x2e93, 0x3eb2, 0x0ed1, 0x1ef0,
]
startframe = {
'hi3716cv200':[0xFE,0x00,0xFF,0x01,0x00,0x00,0x00,0x04,0x00,0x00,0x02,0x01]
}
headframe = {
'hi3716cv200':[0xFE,0x00,0xFF,0x01,0x00,0x00,0x00,0x04,0x00,0x00,0x02,0x01]
}
bootheadaddress = {
'hi3716cv200':0xF9800800
}
bootdownloadaddress = {
'hi3716cv200':0x07000000
}
BOOT_HEAD_LEN = 0x4F00
MAX_DATA_LEN = 0x400
def __init__(self,chiptype,serialport):
try:
self.s = serial.Serial(port=serialport, baudrate=115200, timeout=1)
except serial.serialutil.SerialException:
#no serial connection
self.s = None
print "\nFailed to open serial!", serialport
sys.exit(2)
self.chip = chiptype
def __del__(self):
if self.s != None:
self.s.close()
def calc_crc(self, data, crc=0):
for char in data:
crc = ((crc << 8) | ord(char)) ^ self.crctable[(crc >> 8) & 0xff]
for i in range(0,2):
crc = ((crc << 8) | 0) ^ self.crctable[(crc >> 8) & 0xff]
return crc & 0xffff
def getsize(self, filename):
st = os.stat(filename)
return st.st_size
def sendframe(self, data, loop):
for i in range(1, loop):
self.s.flushOutput()
self.s.write(data)
self.s.flushInput()
try:
ack = self.s.read()
if len(ack) == 1:
if ack == chr(0xaa):
return None
except:
return None
print 'failed'
def sendstartframe(self):
self.s.setTimeout(0.01)
data = array.array('B', self.startframe[self.chip]).tostring()
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,10000)
def sendheadframe(self,length,address):
self.s.setTimeout(0.03)
self.headframe[self.chip][4] = (length>>24)&0xff
self.headframe[self.chip][5] = (length>>16)&0xff
self.headframe[self.chip][6] = (length>>8)&0xff
self.headframe[self.chip][7] = (length)&0xff
self.headframe[self.chip][8] = (address>>24)&0xff
self.headframe[self.chip][9] = (address>>16)&0xff
self.headframe[self.chip][10] = (address>>8)&0xff
self.headframe[self.chip][11] = (address)&0xff
data = array.array('B', self.headframe[self.chip]).tostring()
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,16)
def senddataframe(self,seq,data):
self.s.setTimeout(0.15)
head = chr(0xDA)
head += chr(seq&0xFF)
head += chr((~seq)&0xFF)
data = head + data
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,32)
def sendtailframe(self,seq):
data = chr(0xED)
data += chr(seq&0xFF)
data += chr((~seq)&0xFF)
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,16)
def senddata(self, data, address):
length=len(data)
self.sendheadframe(length,address)
seq=1
while length > self.MAX_DATA_LEN:
self.senddataframe(seq,data[(seq-1)*self.MAX_DATA_LEN:seq*self.MAX_DATA_LEN])
seq = seq+1
length = length-self.MAX_DATA_LEN
self.senddataframe(seq,data[(seq-1)*self.MAX_DATA_LEN:])
self.sendtailframe(seq+1)
def download(self, filename1, filename2):
f=open(filename1,"rb")
data = f.read()
f.close()
print 'Sending', filename1, '...'
self.senddata(data,self.bootheadaddress[self.chip])
print 'Done\n'
if filename2:
f=open(filename2,"rb")
data = f.read()
f.close()
print 'Sending', filename2, '...'
self.senddata(data,self.bootdownloadaddress[self.chip])
print 'Done\n'
def burnboot(chiptype, serialport, filename1, filename2=''):
downloader = bootdownload(chiptype, serialport)
downloader.download(filename1, filename2)
def startterm(serialport=0):
try:
miniterm = Miniterm(
serialport,
115200,
'N',
rtscts=False,
xonxoff=False,
echo=False,
convert_outgoing=2,
repr_mode=0,
)
except serial.SerialException, e:
sys.stderr.write("could not open port %r: %s\n" % (port, e))
sys.exit(1)
miniterm.start()
miniterm.join(True)
miniterm.join()
def main(argv):
'''
img2 = 'fastboot2.img'
'''
img1 = 'fastboot1.img'
img2 = ''
dev = '/dev/serial/by-id/usb-䕇䕎䥎_㌲㔴㜶㤸-if00-port0'
try:
opts, args = getopt.getopt(argv,"hd:",["img1=","img2="])
except getopt.GetoptError:
print 'hisi-idt.py -d device --img1 <fastboot1> --img2 <fastboot2>'
sys.exit(2)
for opt, arg in opts:
if opt == '-h':
print 'hisi-idt.py -d device --img1 <fastboot1> --img2 <fastboot2>'
sys.exit()
elif opt in ("-d"):
dev = arg
elif opt in ("--img1"):
img1 = arg
elif opt in ("--img2"):
img2 = arg
print '+----------------------+'
print ' Serial: ', dev
print ' Image1: ', img1
print ' Image2: ', img2
print '+----------------------+\n'
if not os.path.isfile(img1):
print "Image don't exists:", img1
sys.exit(1)
if (img2):
if not os.path.isfile(img2):
print "Image don't exists:", img2
sys.exit(1)
burnboot('hi3716cv200', dev, img1, img2)
if __name__ == "__main__":
main(sys.argv[1:])
logs:
Code:
��������������������������������������������������������������������������������������������������������������������������0
===>vbus_is_high!
fastboot1 charger_type:CHARGER_TYPE_PC
get_hw_config_int,hw_afreq:1200000.
get_efuse_value,efuse ATE_flag temp:0x0af00000.
ATE PASS,ate flag value:0x00000001.
get_efuse_value,efuse acpu_freq change level:0x8e186100.
get_efuse_value,efuse afreq change level val:0x00000000.
get_efuse_value,efuse acpu_freq level:0x8e186100.
get_efuse_value,efuse acpu freq sys level:0x00000000.
###INFO###,soc_freq = hw_afreq, efuse_afreq:1200000,hw_afreq:1200000.
efuse ACPU 1.4G HPM:0.
efuse ACPU 1.2G HPM:0.
efuse ACPU 960M HPM:0.
fastboot: acpu_dvfs_init successful!
begin get voltage by hpm...
prof[729000]: hpm_dly_exp = 0x00000cb0, hpm_dly_exit = 0x00000cf6!
prof[960000]: hpm_dly_exp = 0x00000cb6, hpm_dly_exit = 0x00000cfc!
prof[1200000]: hpm_dly_exp = 0x00000e94, hpm_dly_exit = 0x00000eda!
acpu support freq num:5
volt:0x0000004a 0x0000004a 0x0000004a 0x0000004a 0x00000057
acpu_get_dvfs_volt,g_afreq_max_pro is :5��acpu max freq:1200000.
#### success !!!!! set_acpu_freq: acpu support freq num is 5 and start is 4 .
get_ddr_type 1; (lpddr2: 0; lpddr3: 1)
pass the func addr: [0xfff81b10]: 0xf980d044ddr_init(): get_ddr_type: 1
ddr freq: 800000
in lpddr3_init: mode: 0; freq_config: 800
switch ddr voltage: 1.25V -> 1.2V
lpddr3_init 150
lpddr3_150_rank0_init_pass
lpddr3_150_rank1_init_pass
lpddr3_init 266
lpddr3_266_rank0_init_pass
lpddr3_266_rank1_init_pass
lpddr3_init 400
lpddr3_400_rank0_init_pass
lpddr3_400_rank1_init_pass
switch ddr voltage: 1.2V -> 1.25V
lpddr3_init 533
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_533_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_533_rank1_init_pass
lpddr3_init 800
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_800_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_800_rank1_init_pass
ERROR: tmp_freq: 0
tmp_freq: 400000
MR8 value=:0x0000005b
MR5 value=:0x00000001
Samsung DDR
MR6 value=:0x00000004
MR5 value=:0x00000000
[MR7,MR6,MR5]=:0x00000401
ddr init pll1 0x00007800!ddrc_qos_init done
bootloader_logger got buffer at 0x07300000, size 0x00040000
bootloader_logger: no valid data in buffer , (sig = 0x43474244)
[emmc_set_card_ready]emmc id:0xb64432c9 0x520644c1 0x474e4433 0x15010038
[emmc_set_card_ready]manufid: 0x00000015
DDR mode emmc
--error: gps/ldo16
[SEC]check_oem_hw: carrier_id = 0x00000000
DX_BIV_SwImageVerification image id is 0x00000011, return is 0xf1000002 !
execute_load_fastboot2: In secure mode and fastboot2 verify failed!
Load fastboot2 failed!
hw_error_print : led = 12. func = 0. err = 0.
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
enter fatal_exception!
Unrecovery Error, go to onchiprom usbloader!
USB Soft Disconnect
��������������������������������������������������������������������������������������������������������������������������0
===>vbus_is_high!
fastboot1 charger_type:CHARGER_TYPE_PC
get_hw_config_int,hw_afreq:1200000.
get_efuse_value,efuse ATE_flag temp:0x0af00000.
ATE PASS,ate flag value:0x00000001.
get_efuse_value,efuse acpu_freq change level:0x8e186100.
get_efuse_value,efuse afreq change level val:0x00000000.
get_efuse_value,efuse acpu_freq level:0x8e186100.
get_efuse_value,efuse acpu freq sys level:0x00000000.
###INFO###,soc_freq = hw_afreq, efuse_afreq:1200000,hw_afreq:1200000.
efuse ACPU 1.4G HPM:0.
efuse ACPU 1.2G HPM:0.
efuse ACPU 960M HPM:0.
fastboot: acpu_dvfs_init successful!
begin get voltage by hpm...
prof[729000]: hpm_dly_exp = 0x00000caf, hpm_dly_exit = 0x00000cf5!
prof[960000]: hpm_dly_exp = 0x00000cb5, hpm_dly_exit = 0x00000cfb!
prof[1200000]: hpm_dly_exp = 0x00000e90, hpm_dly_exit = 0x00000ed6!
acpu support freq num:5
volt:0x0000004a 0x0000004a 0x0000004a 0x0000004a 0x00000057
acpu_get_dvfs_volt,g_afreq_max_pro is :5��acpu max freq:1200000.
#### success !!!!! set_acpu_freq: acpu support freq num is 5 and start is 4 .
get_ddr_type 1; (lpddr2: 0; lpddr3: 1)
pass the func addr: [0xfff81b10]: 0xf980d044ddr_init(): get_ddr_type: 1
ddr freq: 800000
in lpddr3_init: mode: 0; freq_config: 800
switch ddr voltage: 1.25V -> 1.2V
lpddr3_init 150
lpddr3_150_rank0_init_pass
lpddr3_150_rank1_init_pass
lpddr3_init 266
lpddr3_266_rank0_init_pass
lpddr3_266_rank1_init_pass
lpddr3_init 400
lpddr3_400_rank0_init_pass
lpddr3_400_rank1_init_pass
switch ddr voltage: 1.2V -> 1.25V
lpddr3_init 533
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_533_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_533_rank1_init_pass
lpddr3_init 800
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_800_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_800_rank1_init_pass
ERROR: tmp_freq: 0
tmp_freq: 400000
MR8 value=:0x0000005b
MR5 value=:0x00000001
Samsung DDR
MR6 value=:0x00000004
MR5 value=:0x00000000
[MR7,MR6,MR5]=:0x00000401
ddr init pll1 0x00007800!ddrc_qos_init done
bootloader_logger got buffer at 0x07300000, size 0x00040000
bootloader_logger: no valid data in buffer , (sig = 0x43474244)
[emmc_set_card_ready]emmc id:0xb64432c9 0x520644c1 0x474e4433 0x15010038
[emmc_set_card_ready]manufid: 0x00000015
DDR mode emmc
--error: gps/ldo16
[SEC]check_oem_hw: carrier_id = 0x00000000
DX_BIV_SwImageVerification image id is 0x00000011, return is 0xf1000002 !
execute_load_fastboot2: In secure mode and fastboot2 verify failed!
Load fastboot2 failed!
hw_error_print : led = 12. func = 0. err = 0.
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
enter fatal_exception!
Unrecovery Error, go to onchiprom usbloader!
USB Soft Disconnect
��������������������������������������������������������������������������������������������������������������������������́v
nUpdate debug uart baudRate to :921600
===>vbus_is_high!
fastboot1 download_mode:1
fastboot1 charger_type:CHARGER_TYPE_PC
get_hw_config_int,hw_afreq:1200000.
get_efuse_value,efuse ATE_flag temp:0x0af00000.
ATE PASS,ate flag value:0x00000001.
get_efuse_value,efuse acpu_freq change level:0x8e186100.
get_efuse_value,efuse afreq change level val:0x00000000.
get_efuse_value,efuse acpu_freq level:0x8e186100.
get_efuse_value,efuse acpu freq sys level:0x00000000.
###INFO###,soc_freq = hw_afreq, efuse_afreq:1200000,hw_afreq:1200000.
efuse ACPU 1.4G HPM:0.
efuse ACPU 1.2G HPM:0.
efuse ACPU 960M HPM:0.
fastboot: acpu_dvfs_init successful!
begin get voltage by hpm...
prof[729000]: hpm_dly_exp = 0x00000cad, hpm_dly_exit = 0x00000cf3!
prof[960000]: hpm_dly_exp = 0x00000cad, hpm_dly_exit = 0x00000cf3!
prof[1200000]: hpm_dly_exp = 0x00000e88, hpm_dly_exit = 0x00000ece!
acpu support freq num:5
volt:0x0000004a 0x0000004a 0x0000004a 0x0000004a 0x00000057
acpu_get_dvfs_volt,g_afreq_max_pro is :5��acpu max freq:1200000.
#### success !!!!! set_acpu_freq: acpu support freq num is 5 and start is 4 .
get_ddr_type 1; (lpddr2: 0; lpddr3: 1)
pass the func addr: [0xfff81b10]: 0xf980d044ddr_init(): get_ddr_type: 1
ddr freq: 800000
in lpddr3_init: mode: 0; freq_config: 800
switch ddr voltage: 1.25V -> 1.2V
lpddr3_init 150
lpddr3_150_rank0_init_pass
lpddr3_150_rank1_init_pass
lpddr3_init 266
lpddr3_266_rank0_init_pass
lpddr3_266_rank1_init_pass
lpddr3_init 400
lpddr3_400_rank0_init_pass
lpddr3_400_rank1_init_pass
switch ddr voltage: 1.2V -> 1.25V
lpddr3_init 533
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_533_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_533_rank1_init_pass
lpddr3_init 800
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_800_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_800_rank1_init_pass
ERROR: tmp_freq: 0
tmp_freq: 400000
MR8 value=:0x0000005b
MR5 value=:0x00000001
Samsung DDR
MR6 value=:0x00000004
MR5 value=:0x00000000
[MR7,MR6,MR5]=:0x00000401
ddr init pll1 0x00007800!ddrc_qos_init done
bootloader_logger got buffer at 0x07300000, size 0x00040000
bootloader_logger: found existing buffer, size 1044, addr 24
USB_DOWNLOAD_MODE
timestamp: 0xfff2c982
return from fastboot1!
uFileAddress=ss=07000000
uFileAddress=ss=07000000
uFileAddress=ss=07000000
image verify failed!
@michfood hmm okay i had a look. As i can understand your phone doesn't accept the second fastboot.img. I don't think that the problem is the crctable. Maybe you have a wrong fastboot.img?? Try to get a new dump from an another phone.
If your image it's an original dump then there is no reason why it fails to pass the check. The reason why i think the crc signature it's correct it is because you are able to download both images(i saw more details in 96boards forum).
the second image do not start.
after loading first - it says:
"timestamp: 0xfff2c982
return from fastboot1!
uFileAddress=ss=07000000
image verify failed!"
so it is returned from fastboot1 to onchip loader and tries to load second image - but fails.
have no possibility to look normal boot as all phones are under guaranty - nobody want to solder uart pins
Actually i didn't said to you to look at a normal boot uart log. In a normal boot you'll just see the kernel booting. Maybe you second fastboot.img is faulty...
the second boot is correct - from the update.app, as the first one
there is a thought that message "image verify failed" is an onchip loader message after fastboot2 loads, runs, made some checks of other partitions (broken) (with no UART messages) and exits with some error code.
here we can see difference between boot from eMMC (left) and boot from RAM (right)
http://clip2net.com/s/3mFVeRi
No, i think fastboot2 doesn't boot at all. Look at ths:
Code:
execute_load_fastboot2: In secure mode and fastboot2 verify failed!
If you try to load only one fastboot.img? what happens?
you just look at log booting from emmc. while booting from ram - no such message.
and once more - after loading first fastboot to RAM it exits with message "return from fastboot1" and tries to load second file to RAM. read carefully
I've got a honor 4x which uses the same chipset. Mine is also bricked but loads into Fastboot&rescue mode, which does not allow me to update the fastboot image due to a signature verify problem (BL31 image). This is related to ARM Trusted Firmware. Also, it does not load a new update.app from the SDCARD - Simply hangs on the logo screen. Therefore, I need to force it to flash a new fastboot.img. I read the HiKey user guide, and noticed there's a J15 SEL jumper, where, when closed, will attempt to program the flash from USB OTG source. Before a pull my phone apart, I would like to know whether anybody has tried flashing a new fastboot.img via USB OTG via closing the J15 SEL jumper and whether it worked. Or if there's any other way to boot my own fastboot.img
some info. i`m looking for motherboard on ali.. have no success
Same problem
michfood said:
Hi people.
I have new bricked Huawei Honor 4c with HiSilicon Kirin 620 octacore (Hi6620) Hardly bricked.
I`ve unlocked bootloader and custom recovery used to flash it with my own update.zip from other phone (with LTE support). At the end of flashing - it turned off and bricked.
BUT! After connecting to PC via USB it flashes GREEN and RED leds a few times and after windows determines it as a device with USB\VID_12D1&PID_3609&REV_0000 and named as 䕇䕎䥎 ㌲㔴㜶㤸 .
It is Huawei`s VID. And after a lot of search I found a driver for it - and device became HUAWEI USB-COM 1.0. But nothing else.
No flash utility, nothing. HiSilicon-IDT for K3 processor doesn`t work.
After another searches I found very similar device - it`s named HiKey board. Based on Hisilicon Kirin processor too https://www.96boards.org/.
As we can see - it is very close to ours phone.
It is fully documented and has a lot of spec about proc and other.
And in it`s manual written about recovery procedure after damage of ROM - when device is powered on - it is in "download mode" for 90 seconds - abslolutly like mine phone - after 90 second it turns off from windows.
In short - it is ability to write 2 fastboot images (fastboot1.img and fastboot2.img) in RAM, launch them and using fastboot command flash images to eMMC. They use SERIAL COM PORT to manipulate with device.
It uses utility called "hisi-idt.py" - it is a python script for Linux based machines.
I`ve Installed Linux Mint and try it.
And I`ve some result - first image is going fine and I receive "Done"
But second image is always "Failed". And fastboot command "fastboot devices" do not list any devices.
Viewing binaries from my ROM (Fastboot.img and Fastboot1.img) in HEX - I can see load addresses to ROM are the same as in python script. It is 0xf9800800 and 0x0700000 for both images.
But.... have no success. It looks like I`m close to the goal.
Any ideas?
Click to expand...
Click to collapse
Hi,
I'm stucked in the same hard brick. Could you provide a download link for the driver you found?
Are there news about progresses with this issue?
Thank you very much, I'll try to help if you want
In China,Hisilicon Kirin 620 is hi6210,not 6620.You can get the source code of HUAWEI Honor 4C from:http://emuirom123.dbankcloud.com/Cherrymini_kernel_[Android 5.1 EMUI3.1].tar.gz?rid=1520
It is for the China Mobile version(CHM-TL00H) with Kirin 620.
Chinese version Kirin 620 runs 8×A53 1.2GHz cores and ARM Mali-450 MP4 Gpu.The baseband of hisilicon kirin 620 is Balong V8R1SFT.
Sorry for my bad English.
来自搭载Android 2.3 GingerBread的华为Y220-T10
JackLenz said:
Hi,
I'm stucked in the same hard brick. Could you provide a download link for the driver you found?
Are there news about progresses with this issue?
Thank you very much, I'll try to help if you want
Click to expand...
Click to collapse
still nothing
zhaozihanzzh said:
In China,Hisilicon Kirin 620 is hi6210,not 6620.You can get the source code of HUAWEI Honor 4C from:http://emuirom123.dbankcloud.com/Cherrymini_kernel_[Android 5.1 EMUI3.1].tar.gz?rid=1520
It is for the China Mobile version(CHM-TL00H) with Kirin 620.
Chinese version Kirin 620 runs 8×A53 1.2GHz cores and ARM Mali-450 MP4 Gpu.The baseband of hisilicon kirin 620 is Balong V8R1SFT.
Sorry for my bad English.
来自搭载Android 2.3 GingerBread的华为Y220-T10
Click to expand...
Click to collapse
thanks for info - but how it helps?
michfood said:
still nothing
Click to expand...
Click to collapse
And what about the driver link?
I found some source code on github, maybe it could be useful
https://github.com/muhammadfahadbaig/android_vendor_huawei_hi6210sft
Handling Cmd: reboot-bootloader
Rebooting the device into bootloader mode
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERDOWN
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERDOWN
Start EBS [279413]
App Log Flush : 0 ms
ScmArmV8ExitBootServicesHandler, Status = 0x0.
Exit EBS [279586] UEFI End
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.MXF.1.0-00773-LAHAINA-1
S - IMAGE_VARIANT_STRING=SocCedrosLAA
S - OEM_IMAGE_VERSION_STRING=c5-xm-ota-bd006.bj
S - Boot Interface: UFS
S - Secure Boot: On
S - Boot Config @ 0x00786070 = 0x00000041
S - JTAG ID @ 0x00786130 = 0x001590e1
S - OEM ID @ 0x00786138 = 0x00720000
S - Serial Number @ 0x00786134 = 0xcc773c71
S - Feature Config Row 0 @ 0x00784148 = 0x0000000000000000
S - Feature Config Row 1 @ 0x00784150 = 0x0000000000000000
S - Core 0 Frequency, 1516 MHz
S - PBL Patch Ver: 2
D - 8926 - pbl_apps_init_timestamp
D - 37267 - bootable_media_detect_timestamp
D - 955 - bl_elf_metadata_loading_timestamp
D - 7991 - bl_hash_seg_auth_timestamp
D - 7166 - bl_elf_loadable_segment_loading_timestamp
D - 4660 - bl_elf_segs_hash_verify_timestamp
D - 16951 - bl_sec_hash_seg_auth_timestamp
D - 802 - bl_sec_segs_hash_verify_timestamp
D - 23 - pbl_populate_shared_data_and_exit_timestamp
S - 84741 - PBL, End
B - 92811 - SBL1, Start
B - 211426 - SBL1 BUILD @ 13:55:24 on Apr 12 2022
B - 215482 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
D - 224632 - sbl1_hw_init
B - 315766 - UFS INQUIRY ID: SKhynix H9HQ15AECMBDAR A043
B - 317932 - UFS Boot LUN: 1
D - 109800 - boot_media_init
D - 0 - smss_load_cancel
B - 337726 - SMSS - Image Load, Start
D - 3050 - SMSS - Image Loaded, Delta - (0 Bytes)
D - 4484 - Auth Metadata
D - 5582 - sbl1_xblconfig_init
B - 352488 - XBL Config - Image Load, Start
D - 0 - shrm_load_cancel
B - 360205 - SHRM - Image Load, Start
D - 4087 - Auth Metadata
D - 1189 - Segments hash check
D - 12383 - SHRM - Image Loaded, Delta - (39616 Bytes)
D - 30 - boot_default_cdt_init
B - 381402 - Using default CDT
D - 3477 - boot_cdt_init
B - 387960 - CDT - Image Load, Start
B - 390766 - CDT Version:3,Platform ID:34,Major ID:1,Minor ID:0,Subtype:0
D - 16561 - sbl1_hw_platform_pre_ddr
D - 0 - devcfg init
B - 416904 - PM: pm_device_pre_init 0xf0a0: 0x0
B - 416935 - PMIC A:2.0 B:2.2 C:2.2 D:2.0 F:2.1
B - 423370 - PM: Reset by PSHOLD
B - 426207 - PM: Reset Type: Hard Reset
B - 429531 - PM: PON by SYSOK
B - 678076 - PM: SET_VAL:Skip
B - 678381 - PM: pm_device_post_init 0xf0a0: 0x0
B - 681156 - PM: 0xf0ed: 0x3
B - 685884 - PM: 0xf241: 0x0
B - 688842 - PM: 0xf23f: 0x0
B - 691770 - PM: 0xf067: 0xa
B - 694729 - PM: 0xf0f2: 0xf
B - 697687 - PM: 0xf047: 0xc5
B - 700646 - PM: 0xf060: 0x66
B - 703696 - PM: 0xE44C: 0x42
B - 706746 - PM: 0xE44D: 0xe
B - 709765 - PM: 0xE453: 0xa6
B - 712724 - PM: 0xE432: 0x40
B - 715835 - PM: PSI: b0x04_v0x12
B - 722118 - PM: Device Init # SPMI Transn: 15042
D - 314851 - pm_device_init, Delta
B - 727028 - pm_driver_init, Start
B - 739106 - PM: Driver Init # SPMI Transn: 558
D - 8632 - pm_driver_init, Delta
B - 743803 - PM: CHG Type in CHG init : 0
B - 747616 - PM: 0x2706: 0xa
B - 751367 - PM: 0x2707: 0xa
B - 754326 - PM: 0x2708: 0xa
B - 757284 - PM: 0x2709: 0xa
B - 761219 - PM: Battery ID: 101246Ohm
B - 763323 - PM: VBAT: 4273mV IBAT: 103mA
B - 767075 - PM: CHG Init # SPMI Transn: 15660
B - 771131 - vsense_init, Start
D - 0 - vsense_init, Delta
D - 380762 - sbl1_hw_pre_ddr_init
D - 0 - boot_dload_handle_forced_dload_timeout
D - 2958 - sbl1_load_ddr_training_data
B - 796538 - Pre_DDR_clock_init, Start
D - 92 - Pre_DDR_clock_init, Delta
D - 12871 - sbl1_ddr_set_params
B - 808219 - sbl1_ddr_init, Start
B - 811635 - LP4 DDR detected
D - 14609 - sbl1_ddr_init, Delta
B - 826184 - DSF version = 262.0.18
B - 829569 - Manufacturer ID = 6, Device Type = 7
B - 833138 - Rank 0 size = 2048 MB, Rank 1 size = 4096 MB
D - 29860 - sbl1_ddr_init
D - 0 - boot_pre_ddi_entry
B - 846253 - do_ddr_training, Start
D - 214 - sbl1_load_gsort_data
B - 892430 - DDR: Start of DDR Training Restore
B - 896029 - Current DDR Freq = 1555 MHz
B - 897096 - Max enabled DDR Freq = 2092 MHz
B - 901092 - DDR: End of DDR Training Restore
D - 56028 - do_ddr_training, Delta
D - 63836 - sbl1_do_ddr_training
D - 153 - sbl1_load_gsort_data
B - 916921 - magic str match
B - 920307 - magic_str: gsort, test_trigger_bitmap: 0
B - 923265 - gsort_versionffset:8.val:0x1
B - 928450 - trigger bit map is null
D - 19215 - sbl1_do_ddr_gsort
D - 518 - boot_ddi_entry
B - 939522 - Pimem init cmd, entry
D - 9150 - Pimem init cmd, exit
B - 951874 - External heap init, Start
B - 954955 - External heap init, End
B - 961756 - log rotate_flag=0
D - 22936 - sbl1_post_ddr_init
D - 30 - sbl1_hw_init_secondary
B - 970113 - ADC done - mv: 127941, percent: 4471
B - 973651 - ADC done - mv: 1629368, percent: 56949
B - 977220 - chiptype: 450, projectid adc within range 3800 to 5125, hwid adc within range 55047 to 58857
B - 987925 - ProjectType:6 ProductName:renoir HwLevel:MP HwCountry:GL HwId:0x190000
D - 28914 - sbl1_hw_get_mihwinfo
B - 999881 - DDR - Image Load, Start
B - 1003389 - usb: UFS Serial - 263ba23e
B - 1007079 - usb: chgr - SDP_CHARGER
B - 1011410 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
D - 17233 - boot_fedl_check
B - 1020804 - APDP - Image Load, Start
D - 3203 - APDP - Image Loaded, Delta - (64 Bytes)
D - 0 - boot_dload_dump_security_regions
D - 0 - ramdump_load_cancel
B - 1037244 - RamDump - Image Load, Start
D - 3324 - RamDump - Image Loaded, Delta - (0 Bytes)
D - 0 - boot_update_abnormal_reset_status
D - 0 - boot_cache_set_memory_barrier
D - 0 - boot_smem_debug_init
D - 427 - boot_smem_init
D - 31 - boot_smem_alloc_for_minidump
D - 92 - boot_smem_store_pon_status
D - 30 - sbl1_hw_platform_smem
D - 0 - sbl1_hw_store_mihwinfo_smem
D - 31 - boot_smem_store_ddr_status
D - 61 - boot_ddr_share_data_to_aop
D - 366 - boot_clock_init_rpm
D - 0 - boot_vsense_copy_to_smem
D - 0 - boot_populate_ram_partition_table
D - 0 - boot_populate_ddr_details_shared_table
D - 0 - sbl1_tlmm_init
D - 0 - sbl1_efs_handle_cookies
B - 1107943 - OEM_MISC - Image Load, Start
D - 3782 - OEM_MISC - Image Loaded, Delta - (64 Bytes)
B - 1115812 - QTI_MISC - Image Load, Start
D - 5520 - QTI_MISC - Image Loaded, Delta - (0 Bytes)
B - 1130513 - PM: PM Total Mem Allocated: 2684
D - 5429 - sbl1_pm_aop_pre_init_wrapper
B - 1135545 - AOP - Image Load, Start
D - 4392 - Auth Metadata
D - 1555 - Segments hash check
D - 13725 - AOP - Image Loaded, Delta - (202056 Bytes)
B - 1152595 - QSEE Dev Config - Image Load, Start
D - 4087 - Auth Metadata
D - 458 - Segments hash check
D - 13054 - QSEE Dev Config - Image Loaded, Delta - (40464 Bytes)
B - 1174646 - QSEE - Image Load, Start
D - 20832 - Auth Metadata
D - 20740 - Segments hash check
D - 83753 - QSEE - Image Loaded, Delta - (3588097 Bytes)
B - 1261937 - set bob err_flag[0] = 0x0
B - 1267336 - set bob err_flag[1] = 0x0
B - 1271179 - set bob err_flag[2] = 0x0
B - 1275022 - set bob err_flag[3] = 0x0
D - 17141 - sbl1_hw_play_vibr
B - 1282708 - SEC - Image Load, Start
D - 4118 - Auth Metadata
D - 213 - Segments hash check
D - 10522 - SEC - Image Loaded, Delta - (7252 Bytes)
B - 1296555 - CPUCPFW - Image Load, Start
D - 20404 - Auth Metadata
D - 15006 - Segments hash check
D - 46726 - CPUCPFW - Image Loaded, Delta - (111592 Bytes)
B - 1352309 - QHEE - Image Load, Start
D - 4209 - Auth Metadata
D - 8723 - Segments hash check
D - 16500 - QHEE - Image Loaded, Delta - (1949313 Bytes)
B - 1372134 - APPSBL - Image Load, Start
D - 4148 - Auth Metadata
D - 10126 - Segments hash check
D - 22905 - APPSBL - Image Loaded, Delta - (2379776 Bytes)
D - 0 - sbl1_save_appsbl_index
B - 1404311 - SBL1, End
D - 1314916 - SBL1, Delta
S - Flash Throughput, 211951 KB/s (8478072 Bytes, 40474 us)
S - DDR Frequency, 1555 MHz
B - 1418494 - restore bob err_flag[4] = 0x0
B - 1420964 - restore bob err_flag[5] = 0x0
B - 1425173 - restore bob err_flag[6] = 0x0
B - 1429382 - restore bob err_flag[7] = 0x0
UEFI Start [ 1613]
- 0x09FC01000 [ 1615] Sec.efi
ASLR : ON
DEP : ON (RTB)
Timer Delta : +2 mS
RAM Entry 0 : Base 0x0080000000 Size 0x003A800000
RAM Entry 1 : Base 0x0100000000 Size 0x0100000000
RAM Entry 2 : Base 0x00C0000000 Size 0x0040000000
Total Available RAM : 6056 MB (0x017A800000)
Total Installed RAM : 6144 MB (0x0180000000)
Init 1 aux cores of 7
Init CPU core 1
> Scheduler up on Core 1
UEFI Ver : 6.0.220412.BOOT.MXF.1.0-00773-LAHAINA-1
Build Info : 64b Apr 12 2022 13:55:59
Boot Device : UFS
PROD Mode : TRUE
Retail : TRUE
PM0: 47, PM1: 48, PM2: 49, PM3: 50, PM5: 52,
Module cannot re-initialize DAL module environment
UFS INQUIRY ID: SKhynix H9HQ15AECMBDAR A043
UFS Boot LUN: 1
HW Wdog Setting from PCD : Disabled
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_INIT
Setvariable Logo Image returned Success
LogoCompressedBlockNum:116 LogoCompressedBytesNum:472176
DecompressBufferSize:31104218 ScratchSize:131072
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELDTINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPLATFORMINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERUP
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELCONFIG
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_RESETPANEL
Offset cmd: 0x39 0x06
MIDynamic DSI readback = 00 readSize = 2, uRetryCount = 1
MIDynamic-Detected: readSize: 2, readback: 0x0000
Detected panel id: 0x00
DisplayDxe: K9 42 02 0b amoled dsc cmd
DisplayDxe: Resolution 1080x2400 (1 intf)
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPLATFORMINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERUP
smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=3, size=32, flags=0x40000000.smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=13, size=32, flags=0x40000000.ChargerLib:: ChargerLibTarget_HWInit Charger PlatHWConfig = 1, (overrided by CFG item)
ChargerLib:: ChargerLibTarget_HWInit PlatformType = 34: ChargerHW = 1, GaugeHW = 1
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101203
QcomChargerDxe:: ChargerPlatform_Init Enabled WDOG.
QcomChargerDxe:: ChargerPlatform_Init Successfully Success
do_authentication
entery AuthenticateDS28E16
entery DS28E16_get_page_status_retry
entery DS28E16_Read_RomID_retry
Ready to write 0x33 to maxim IC!
RomID = 9F,D3,31,11,15,F0,04,CA
crc_low_first = CA
entery DS28E16_cmd_computeS_Secret_retry
computeS_Secret:
computeS_Secret:
entery DS28E16_cmd_computeReadPageAuthentication_retry
Seeds:
host data
battery verify ok: 1
Battery verified result:1
Ready to write 0x33 to maxim IC!
RomID = 9F,D3,31,11,15,F0,04,CA
crc_low_first = CA
Battery verified chip ok result:1
Battery verified value:0x30
read once_run_flag=0
read load_adsp_value=0x0
read load_adsp_value=0x30
QcomChagerDxe: Set boot service variable <BattVerifiedResult> = androidboot.batt_verified_result=11
QcomChargerDxe:: ChargerPlatform_Init battery verified Successfully = Success
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigInit: Failed to attach USB Arid 0x0 HAL IOMMU domain Result = (0x14)
UsbConfigInit: Failed to attach USB Arid 0x1 HAL IOMMU domain Result = (0x14)
UsbConfigPortsQueryConnectionChange: usbport->connectstate: ATT
ButtonsDxeTest: Keypress SDAM data payload 0
ISENSE TOTAL TIME 1ms
smem_get_addr: SMEM get addr failed! smem_type=628MinidumpTADxe: Minidump TA loading not enabled.
Disp init wait [ 2598]
DisplayDxe: pFrameBufferBase = 0xE1000000
DisplayDxe: uFrameBufferSize = 10368000
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SETGPIOSTATE
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SETGPIOSTATE
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_RESETPANEL
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SETBACKLIGHT
Read Dsi White Color Coordinate Register: 01 F3 02 09 09 03 01 05
Read White Color Coordinate: 01 F3 02 09 09 03 01 05
DispalyDxe: Set boot service variable <DisplayOledPanelWp> = androidboot.oled_wp=01f3020909030105
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPLATFORMINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
Display_Utils_RenderSplashScreen USE IMAGEFV
Display_Utils_RenderSplashScreen: hw_country GL, uLogoIndex = 4
DeCompressLogoData: Setvariable Logo Image returned Success
DeCompressLogoData: Setvariable Logo Image returned LG!!9
DeCompressLogoData: LogoCompressedBlockNum:57 LogoCompressedBytesNum:231346
DeCompressLogoData: DecompressBufferSize:77760558 ScratchSize:131072
LoadBitmapImageFromLogoData USE IMAGEFV
DisplayUtils: enter render.
DisplayUtils: Display_Utils_RenderBGRTImage end Status:0
-----------------------------
Platform Init [ 3006] BDS
INFO: UEFI NV tables are enabled as VOLATILE!
UEFI Ver : 6.0.220412.BOOT.MXF.1.0-00773-LAHAINA-1
Platform : IDP
Subtype : 0
Boot Device : UFS
Chip Name : SM_CEDROS
Chip Ver : 1.0
Chip Serial Number : 0xCC773C71
-----------------------------
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101203
ChargerLib:: ChargerLib_GetBatteryID BATT_ID_2 = 101203
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101228
ChargerLib:: ChargerLib_GetBatteryID BATT_ID_2 = 101228
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101203
TNT BatteryVoltage::= 4282
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101252
TNT BatteryVoltage::= 4282
ChargerLib:: ChargerLib_GetErrors pChargingError = 0
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101252
ChargerLib:: ChargerLib_GetBatteryID BATT_ID_2 = 101252
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101277
TNT BatteryVoltage::= 4282
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired VBatt = 4282 V, gThresholdVbatt = 3600 V
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired Chg Fw Load not required boot to HLOS
read once_run_flag=1
read load_adsp_value=0x30
read load_adsp_value=0x30
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired boot to hlos, set load_adsp_value=0
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101302
TNT BatteryVoltage::= 4282
UEFI Total : 1430 ms
POST Time [ 3044] OS Loader
Loader Build Info: Apr 12 2022 14:33:58
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
VB: RWDeviceState: Succeed using rpmb!
ProjectType:0x6 hw_id:0x190000 hw_level:MP
Total DDR Size: 0x000000017A800000
Partition not found : oem_misc1
Get Partition info for oem_misc1 failed
PON Reason is 1 cold_boot:1
ProjectType:0x6 hw_id:0x190000 hw_level:MP
Total DDR Size: 0x000000017A800000
getting IsColdBoot reset status: 1, key: 0
MpDevice!!
KeyPress:0, BootReason:2
Fastboot=1, Recovery:1
Launching fastboot
Fastboot Build Info: Apr 12 2022 14:33:27
usb_shared_hs_phy_init: hs phy cfg size: 12
usb_shared_ss_phy_init: ss phy cfg size: 143
ssusb_phy_init_success_lane_B: 1
SSUsb1InitCommon: End of SSusb1initcommon coreType 5
Fastboot: Initializing...
Token Length: 128
Fastboot: Processing commands
LoadBitmapImageFromLogoData USE IMAGEFV
Picture 1 Successfully load
DisplayUtils: enter render.
DisplayUtils: Display_Utils_RenderBGRTImage end Status:0
Picture 1 Successfully render
display picture 1 [ 3360]
Dev_Common_Speed: Dev Bus Speed: High, state 2