Database Users

Unrooting the Transformer with the nvflash

Hi everyone!
I´m following this guide here: tabletroms.com/forums/transformer-rom-development/1071-asus-transformer-nvflash-stock-3-1-stock-3-2-recovery-roms-unbricking-tools.html
At the moment I am trying to bring my Transformer back to it´s original state. My specs are:
TF101, bought in Germany
Serial number B50[...]
Rooted and encrypted
So, when i try to use the method described in the thread i get the folowing output:
Code:
"nvflash.exe" --bct transformer.bct --setbct --co
nfigfile flash.cfg --create --bl bootloader.bin --odmdata 0x300d8011 --sbk 0x168
2CCD8 0x8A1A43EA 0xA532EEB6 0xECFE1D98 --go
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x037c61c4415f4557
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 2
device config fuse: 0
sdram config strap: 0
sending file: transformer.bct
- 4080/4080 bytes sent
transformer.bct sent successfully
odm data: 0x300d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
- 1361037/1361037 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: EBT
creating partition: SOS
creating partition: LNX
creating partition: BAK
creating partition: GP1
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: USP
creating partition: PER
creating partition: YTU
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. done!
Formatting partition 3 PT please wait.. done!
Formatting partition 4 EBT please wait.. done!
Formatting partition 5 SOS please wait.. done!
Formatting partition 6 LNX please wait.. done!
Formatting partition 7 BAK please wait.. done!
Formatting partition 8 GP1 please wait.. done!
Formatting partition 9 APP please wait.. done!
Formatting partition 10 CAC please wait.. done!
Formatting partition 11 MSC please wait.. done!
Formatting partition 12 USP please wait.. done!
Formatting partition 13 PER please wait.. done!
Formatting partition 14 YTU please wait.. done!
Formatting partition 15 UDA please wait.. done!
Formatting partition 16 GPT please wait.. done!
done!
sending file: bootloader.bin
- 1361037/1361037 bytes sent
bootloader.bin sent successfully
sending file: recovery.img
/ 3930112/3930112 bytes sent
recovery.img sent successfully
sending file: boot.img
\ 3518464/3518464 bytes sent
boot.img sent successfully
sending file: system.img
/ 19660800/536870912 bytes sentdata send failed NvError 0x120002
command failure: create failed (bad data)
The device-screen shows this:
Code:
Entering NvFlash recover ymode / Nv3p Server
!!!!! device update failed !!!!!
I am 100% sure that the image i download is not corrupted (md5 checked) and i also get this with all 3 version i already tried (3.2 Build of 8.6.5.13, 3.2 Build 8.6.5.9 and the earliest 3.1 build 8.4.4.5.
What am I doing wrong?
Thanks in advance!
[Edit] I didn´ t connect the device with a root-USB-Port but via a HUB. Did that, now it works.

[Q} Stuck in APX Mode

So yesterday I was playing Angry Birds space on my tablet running AOKP Milestone 6 with TWRP. The game started lagging like no other so I exited the game, Got to my home screen and it was locked up. Hit the reset button and it wasn't booting, stating that was loading the kernel, I loaded into TWRP, and it wasn't seeing anything on my SD Card so I decied to just do a rollback using Timmydeans root 3.2.1 downgrade, and whenever I run the EUU i just stops during it the restore
http://forum.xda-developers.com/showthread.php?t=1307539
I tried running this in the Image folder in the timmydean download
nvflash --bct flash.bct --setbct --odmdata 0x100c0105 --configfile flash.cfg --create --bl bootloader.bin --sbk 0xD19C1E00 0x68B3E601 0x87FA0203 0x45312103 --go
I get the following message
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x037c620442e124d7
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0x100c0105
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714385/714385 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. FAILED!
command failure: create failed (bad data)
bootloader status: specified partition is invalid or does not exist (code: 7) me
ssage: nverror:0x42008 (0x6042008) flags: 0
I also tried running the V8-UNL-ICS-HC-bootloader-MULTI-cwm with v8.bat and v8.bat
I need help on getting me back working.

Theres something bad with the partitions on your internal sd.
Download Bad Sector from my Dropbox: http://db.tt/won7nZlr
In apx mode run a501a.bat. when finished, reboot and go in recovery. Format system partition 3 times. Go back in apx mode. Run a501b.bat. when finished, you are on unlocked ics bootloader v8 and cwm 1.7.3. Boot in recovery and flash the ics rom you like.
Gesendet von meinem Iconia A501 mit Tapatalk 2

VelosCohagen said:
Theres something bad with the partitions on your internal sd.
Download Bad Sector from my Dropbox: http://db.tt/won7nZlr
In apx mode run a501a.bat. when finished, reboot and go in recovery. Format system partition 3 times. Go back in apx mode. Run a501b.bat. when finished, you are on unlocked ics bootloader v8 and cwm 1.7.3. Boot in recovery and flash the ics rom you like.
Gesendet von meinem Iconia A501 mit Tapatalk 2
Click to expand...
Click to collapse
Just ran the A501 A.bat and got the following
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x037c620442e124d7
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714409/714409 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: APP
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
failed executing command 12 NvError 0x120002
command failure: create failed (bad data)
bootloader status: fatal failure to read / write to mass storage (code: 9) messa
ge: nverror:0x8 (0x19000008) flags: 0
Still unable to get into recovery.

Sounds like a hardware issue with your internal sd. I think you'll have to send it to Acer for repair. But maybe, one of the many other guys here in the forum may be of help for you.

jazzyjames said:
Just ran the A501 A.bat and got the following
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x037c620442e124d7
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714409/714409 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: APP
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
failed executing command 12 NvError 0x120002
command failure: create failed (bad data)
bootloader status: fatal failure to read / write to mass storage (code: 9) messa
ge: nverror:0x8 (0x19000008) flags: 0
Still unable to get into recovery.
Click to expand...
Click to collapse
Try this one package(h?? p change to httр):
h??p://narod.ru/disk/53919831001.a235ea2225f319015f30c009629d2075/BabSector.rar.htm

Hello,
I have the same problem.
When I run A501A.bat, it creates some partitions and format 4 partitions. The blank screen of the tablet shows acer logo with Acer Apx Mode in white and after that nothing happens!
If I reboot the tablet, I can't go to recovery.
I don't know the tablet's story because I bought it broken. The tablet stucks in Apx mode.
(I am sorry for my bad english)
Sent from my Galaxy Nexus using xda app-developers app

EDIT: post deleted = sorry guys this was sposed to be a pm

Hello,
When I try A501A.bat that's what happens:
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x037c618743e02497
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714409/714409 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: APP
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. done!
Formatting partition 3 PT please wait.. done!
Formatting partition 8 APP please wait.. done!
Formatting partition 4 EBT please wait.. done!
failed executing command 14 NvError 0x30012
command failure: create failed (bad data)
Appuyez sur une touche pour continuer...
Can anybody help me please.... :crying:
Thanks.
(I am sorry for my bad english)

Same problem here!!!
Could someone please help?
Thanks a lot!
Code:
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714409/714409 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. FAILED!
command failure: create failed (bad data)
bootloader status: specified partition is invalid or does not exist (code: 7) me
ssage: nverror:0x42008 (0x6042008) flags: 0
sebone02 said:
Hello,
When I try A501A.bat that's what happens:
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x037c618743e02497
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714409/714409 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: APP
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. done!
Formatting partition 3 PT please wait.. done!
Formatting partition 8 APP please wait.. done!
Formatting partition 4 EBT please wait.. done!
failed executing command 14 NvError 0x30012
command failure: create failed (bad data)
Appuyez sur une touche pour continuer...
Can anybody help me please.... :crying:
Thanks.
(I am sorry for my bad english)
Click to expand...
Click to collapse

stragnagn said:
Same problem here!!!
Could someone please help?
Thanks a lot!
Code:
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714409/714409 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. FAILED!
command failure: create failed (bad data)
bootloader status: specified partition is invalid or does not exist (code: 7) me
ssage: nverror:0x42008 (0x6042008) flags: 0
Click to expand...
Click to collapse
this appears to be the same error code as the OP's...I pm'ed jazzy earlier this
week to ask him if he had fixed his tab...
his reply was No...he had to send it in for repair and get the motherboard replaced....
If timmydeansv4 does not work in this instance then you will need to contact acer!!!
also could u pls post yr error code in this post as well trying to get a thread with all the error codes posted, thanks and good luck
dibb

VelosCohagen said:
Theres something bad with the partitions on your internal sd.
Download Bad Sector from my Dropbox:
In apx mode run a501a.bat. when finished, reboot and go in recovery. Format system partition 3 times. Go back in apx mode. Run a501b.bat. when finished, you are on unlocked ics bootloader v8 and cwm 1.7.3. Boot in recovery and flash the ics rom you like.
Gesendet von meinem Iconia A501 mit Tapatalk 2
Click to expand...
Click to collapse
Files on the link removed. Can someone upload these files?

Iganja said:
Files on the link removed. Can someone upload these files?
Click to expand...
Click to collapse
https://mega.co.nz/#!q5U1nRYZ!IS4FMz0Mb7ewo-Vd-2u5KU_cRE7zreTR4KgU_q8HcC8
Sent from my SM-N910U using Tapatalk

dibb_nz said:
mega.co.nz/#!q5U1nRYZ!IS4FMz0Mb7ewo-Vd-2u5KU_cRE7zreTR4KgU_q8HcC8
Sent from my SM-N910U using Tapatalk
Click to expand...
Click to collapse
Thank U!
It is a pity that it did not help .
Still gives the following error :
Code:
failed executing command 12 NvError 0x120002
command failure: create failed (bad data)
bootloader status: fatal failure to read / write to mass storage (code: 9) messa
ge: nverror:0x8 (0x19000008) flags: 0

bad memory chip, new motherboard is only fix
Sent from my SM-N910U using Tapatalk

[Q] A500 unable to run ICS??

Hey guys and gals,
I have an Iconia a500 that has been rooted since I got it last December. It has run various 3.2 and 3.2.1 HC roms, then the ICS leaks, and most recently Skrillax's V* bootloader, with Civato's Re-Flexx roms. Just yesterday, I had a random reboot, and then another, but on the second one it wouldn't get past the "loading kernel image" screen. I've tried to EEU back to Vache's 3.0.1 then flash an official rom to get it back on to the official upgrade path, and have been successful, except when going to ICS. Once the official ICS install completes, it hangs on the Acer logo, requiring another EUU. I've also tried Blacktundr's APX tool at that point to go to V8+thor recovery, then flashing an ICS rom. same result.."loading kernel image".
The tablet is fine, as long as I stick with HC roms, and the HC bootloader. It will upgrade-path sucessfully thru 3.2.1, and even run Timmydean's rooted3.2.1, then an old HC rom of my choice. Just NO ICS .
Ideas? Maybe a partition error?

I believe there is a .zip or .rar file called Babsector with 2 .bat files in it that will help me if anyone has them?

ok so i found the babsector files, tried them.. Now i still cannot flash the bootloader with the APX tool.. tab runs fine with timmydean's rooted 3.2.1, but fails to OTA to ICS even. Ideas?

AtariDroid said:
ok so i found the babsector files, tried them.. Now i still cannot flash the bootloader with the APX tool.. tab runs fine with timmydean's rooted 3.2.1, but fails to OTA to ICS even. Ideas?
Click to expand...
Click to collapse
where does it fail on the bl flash, what error do u get?
failing to ota to ics from HC - go to thread how to revert to stock the easy way by jdgM3NT4L - there's a non-US update.zip i posted that worked for me. but until we figure out why u u can't flash the bl, you're stuck with stock.
Sent from my GT-I9300 using Tapatalk 2

Thanks for responding! it is good to hear from a voice of experience on the subject. I will copy/paste my results of various tries asap. I was able to flash the V8 bootloader a couple days ago. But since then i've tried a few methods to get to ics.. Including the Babsector .bats, maunually trying timmydean's and vache's EUUs, all fail at formatting BCT. The APX tools hang at uploading image(bootloader). I'm thinking i may have to do the Rawread technique to map out bad sectors, and place an FCK partition where they reside.... BUT i've not found exact instructions on how to get that to work yet. so for it seems to just hang, but iim sure i'm doing the rawread command wrong. win7x64 by the way.
I have of course uninstalled/ reinstalled and tried both driver versions out there also.
Any tips are greatly appreciated.

Here is a try with babsector's first .bat:
Generate your SBK with your CPUID from here :
http://vache-android.com/v1/index.php?site=sbk
Enter your SBK:0x94454C00 0x5FECC501 0x17A62103 0x7C302103
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x0388924842c045d7
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714385/714385 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: APP
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
failed executing command 12 NvError 0x120002
command failure: create failed (bad data)
bootloader status: fatal failure to read / write to mass storage (code: 9) messa
ge: nverror:0x8 (0x19000008) flags: 0

Next try.. same .bat:
Enter your SBK:0x94454C00 0x5FECC501 0x17A62103 0x7C302103
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x0388924842c045d7
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714385/714385 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: APP
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. FAILED!
command failure: create failed (bad data)
bootloader status: partition table is required for this command (code: 8) messag
e: nverror:0x5 (0x1000005) flags: 0

As i mentioned earlier, I'm guessing I have the failed EEMC memory problem. hoping to remap the partitions. Going to try to put an FCK first and see what happens.

After trying an FCK partition of 1000000 sectors in size..
Enter your SBK:0x94454C00 0x5FECC501 0x17A62103 0x7C302103
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x0388924842c045d7
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0xb00d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 714385/714385 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: FCK
creating partition: BCT
creating partition: PT
creating partition: APP
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 15 FCK please wait.. done!
Formatting partition 2 BCT please wait.. done!
Formatting partition 3 PT please wait.. done!
Formatting partition 8 APP please wait.. done!
Formatting partition 4 EBT please wait.. done!
Formatting partition 5 GP1 please wait.. done!
Formatting partition 6 SOS please wait.. done!
Formatting partition 7 LNX please wait.. done!
Formatting partition 9 CAC please wait.. done!
Formatting partition 10 MSC please wait.. done!
Formatting partition 11 FLX please wait.. done!
Formatting partition 12 AKB please wait.. done!
Formatting partition 13 UDA please wait.. done!
Formatting partition 14 GPT please wait.. done!
done!
sending file: bootloader_v8_green.bin
| 1191932/1191932 bytes sent
bootloader_v8_green.bin sent successfully
sending file: recovery.img
/ 5242880/5242880 bytes sent
recovery.img sent successfully
failed executing command 25 NvError 0x120002
command failure: sync failed (bad data)
bootloader status: Bct Write Failed (code: 22) message: nverror:0x8 (0x11000008)
flags: 0

Well.. this is definitely uncool.. I made a .bat that loads the bootloader from any upgrade package and runs the flash.cfg from it.. I've tried timmydean's V4, vache's 3.0.1, the babsector cfg's, and even the CES picasso version with it's huge bootloader. ALL are a no-go. My only chance seems to be to map out bad sectors with the Rawread command and try to put a dummy partition on top of them.. IF said partition doesn't fail on format.
Can someone explain the process on how to figure out what sectors are bad with the rawread comand?
I did get an error 12 a couple times before it even tried formatting on a few of my over 50 attempts.
Also.. if i am really screwed here.. anyone know of any broken a500's around that I may be able to buy a motherboard from?
Thanks everyone for your help so far. Without the countless threads I have gone through to learn what I have, I would still be sitting here scratching my head even more lol.

I'm not much help sorry, i guess you've read what there is regarding this.
there is a few posts from user 'yaworski' who managed to fix this in one of the old bootloader threads, thats all i can offer at this point. you might wanna pm him? or maybe blackthund3r or eppeP. wish u all the luck in getting fixed.
rgds dibb
Sent from my GT-I9300 using Tapatalk 2

Actually you have been a great help, as you have been a large part of many of the threads I have read on the subject
I see this post: http://forum.xda-developers.com/showpost.php?p=27456113&postcount=22... but I did not succeed in finding where they actually went through the process.
I've tried running the rawdeviceread command to find the bad sector/s, but I think i am loading the RAM bootloader(Timmydean's) wrong. I have been using the a501 A.bat to load the bootloader, then killing it where it waits for the bootloader to initilize. From there I open another command prompt window, but nvflash hangs at every command. I'm not very well versed in Nvflash, as I only know what I have seen here and at Tegraowners.
Can someone tell me how to load the bootloader without having it execute any commands? That way I can run the rawdeviceread command and maybe figure out how to go from there. I also need to know if there is a way to create a partition without formatting it(I think that is automatic?). That way I can create the dummy FCK partition over the bad sector/s and skip it so the others can create/format successfully.

Re: [INFO/DEV] A500 ICS Bootloader (plus unlocked patched version)
oops just annihilated my post...and links to couple early bootloader threads, useful info really bct error....
apxflash tool allows you to dump your bct so you can nvflash - as long as your tab enters download mode and the apx usb device is showing up, go ahead and flash it -
Theres lots of info in some of the older bootloader threads http://forum.xda-developers.com/showthread.php?t=1514951)??? well worth a read
sp3dev said:
I have uploaded the archive with nvflash and some instructions on using it with A500. This is only intended for hardcore geeks who know how ARM boots. Be careful - while you can't really brick tegra2 (since it has a minimal usb-capable bootloader in the OTP area), you can screw up things and it will be quite hard to force the tablet to boot in some cases due to stupid security checks.
You can use this to download any bootloader/recovery/linux you want. That will help us with porting uboot. Someone may even write an automated tool for reflashing bootloaders and unbricking tablets..
http://www.mediafire.com/?pp97x9aahs58hzp
Let me just copy-paste the README from the archive here.
1. First, generate your sbk with http://vache-android.com/v1/index.php?site=sbk
2. Then, get a hold of mmcblk0 start sectors (at least 4KB) and copy it to mmcblk0_start
3. run the ./rip_bct.sh script and supply it with your SBK to rip BCT (boot config table. contains ram timings among other things)
4. run ./download.sh to connect nvflash to iconia (do it in APX mode). Note that you also need to supply your SBK here, but not as a long single number, but as it is displayed on the website
5. You can now play with nvflash - for example, read partitions, partition table and write your own flash_ic.cfg with partition layout
6. If you flash linux/recovery, make sure to update the magic values (like itsmagic does).
To do it, first download the 12th partition (AKB)
then, in the akb.bin, at address 0x84, replace 4 16-byte entries with the same pattern
"00 FB 30 94 99 01 4F 97 2E 4C 2B A5 18 6B DD 06"
ok, you need to patch the file once and can use it in further flashing. Just upload it to the device (like sign.sh does)
POTENTIAL PITFALLS. Listen up, I ain't gonna help you if you eff up here.
1. You must use BCT from your device Otherwise, the bootloader will not boot.
You will still be able to use NVFLASH, but until you dump your own BCT and use it
with NVFLASH, the device will not be booting again
2. If you use the ./iconia_boot.bin that differs from the bootloader on your
device, the device will get stuck in the APX mode after a reboot. If you do it,
flash the new ./iconia_boot.bin to the device (to the partition 4).
.
Click to expand...
Click to collapse
Sent from my GT-I9300 using Tapatalk 2

Ok hoping to try again tonight. thanks for your help!

K1 always APX mode after low bat

My K1 is low on battery then suddenly it went to APX mode with the 2 LED lights ON. Plugging the charger to the tablet, the 2 LED lights stayed ON. After charging overnight I tried running NVFLASH and it stuck after "Formatting partition 9 CAC". I repeated doing NVFLASH once in a while and I get the same results.
The 2 LED lights stayed ON when the charger is plugged in. The LED lights went OFF when the charger is removed. I could go to APX mode using the volume up/down and power buttons.
Any help is greatly appreciated.
# ./flash-linux.sh
Flashing ICS Stock Rom for Lenovo Ideapad K1
build 120607
Nvflash v1.8.90246 started
Using blob v1.1.57813
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 4
chip sku: 0x8
chip uid: 0x043c7145408040d7
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0x300c0011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
\ 1393296/1393296 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: USP
creating partition: UDA
creating partition: TMP
creating partition: GPT
Formatting partition 2 BCT please wait.. done!
Formatting partition 3 PT please wait.. done!
Formatting partition 4 EBT please wait.. done!
Formatting partition 5 GP1 please wait.. done!
Formatting partition 6 SOS please wait.. done!
Formatting partition 7 LNX please wait.. done!
Formatting partition 8 APP please wait.. done!
Formatting partition 9 CAC please wait.. done!
---------------------------------------------------------------------
View attachment 1480453
View attachment 1480454

[Q] nvflash hangs formatting FCK partition

(I already tried a lot of searching, no success)
I am trying to recover an Acer Iconia A500, which seemed to have a bad sector in the first 4MB of flash. So after Babsector and manual rawwrite/rawread tests, I created a modified flash.cfg which inserted an FCK partition for the bad sectors between the BCT and PT partitions. However when I run nvflash --create, it hangs trying to format that FCK partition (which is just there to prevent use of the bad sectors).
Is there a workaround, e.g. some way of telling nvflash not to format the FCK partition while still creating the proper contents of the BCT and PT partitions (so I can move on to flashing the desired bootloader, kernel and recovery)?
Update: By simply trying again and again, it randomly succeeded (once) in getting past the FCK formatting. No change in config or command, just repeated tries (which cannot be good for the flash chip).
I am using the old nvflash.exe (dated 2011-11-23, size 152064, no --version option) with the following command line:
Code:
nvflash --bct flash.bct --setbct --configfile flash.cfg --create --odmdata 0x100c0105 --bl dlmodebl.bin --sbk 0xXXXXXXXX 0xXXXXXXXX 0xXXXXXXXX 0xXXXXXXXX
dlmodebl.bin (like nvflash.exe and flash.bct) is from timmydean's root-3.2.1-V4.7z
The output (from failed attampts) is this:
Code:
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0xXXXXXXXXXXXXXXXX
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0x100c0105
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: dlmodebl.bin
| 714385/714385 bytes sent
dlmodebl.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: FCK
creating partition: PT
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. done!
Formatting partition 15 FCK please wait.. done!
(and it just hangs after that). The one time I was successful, it swiftly did all the partitions then flashed the various .bin and .img files as specified in flash.cfg. Output was this:
Code:
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0xXXXXXXXXXXXXXXXX
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
sending file: flash.bct
- 4080/4080 bytes sent
flash.bct sent successfully
odm data: 0x100c0105
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: dlmodebl.bin
| 714385/714385 bytes sent
dlmodebl.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: FCK
creating partition: PT
creating partition: EBT
creating partition: GP1
creating partition: SOS
creating partition: LNX
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: FLX
creating partition: AKB
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. done!
Formatting partition 15 FCK please wait.. done!
Formatting partition 3 PT please wait.. done!
Formatting partition 4 EBT please wait.. done!
Formatting partition 5 GP1 please wait.. done!
Formatting partition 6 SOS please wait.. done!
Formatting partition 7 LNX please wait.. done!
Formatting partition 8 APP please wait.. done!
Formatting partition 9 CAC please wait.. done!
Formatting partition 10 MSC please wait.. done!
Formatting partition 11 FLX please wait.. done!
Formatting partition 12 AKB please wait.. done!
Formatting partition 13 UDA please wait.. done!
Formatting partition 14 GPT please wait.. done!
done!
sending file: bootloader.bin
| 1191932/1191932 bytes sent
bootloader.bin sent successfully
sending file: recoveryThor.img
\ 4810752/4810752 bytes sent
recoveryThor.img sent successfully
sending file: boot.img
- 3450880/3450880 bytes sent
boot.img sent successfully
sending file: system.img
/ 629145600/629145600 bytes sent
system.img sent successfully
sending file: flexrom.img
/ 104857600/104857600 bytes sent
flexrom.img sent successfully
sending file: checksum.img
/ 10485760/10485760 bytes sent
checksum.img sent successfully
failed executing command 25 NvError 0x120002
command failure: sync failed (bad data)
bootloader status: Bct Write Failed (code: 22) message: nverror:0x8 (0x11000008)
flags: 0
However, the result is still not bootable (to recovery, system.img doesn't match the other parts).
The modified flash.cfg differs from timmydean's only in a smaller BCT and the extra FCK partition at the beginning, here is the new beginning:
Code:
[device]
type=hsmmc
instance=3
[partition]
name=BCT
id=2
type=boot_config_table
allocation_policy=sequential
filesystem_type=basic
size=4096
file_system_attribute=0
partition_attribute=0
allocation_attribute=8
percent_reserved=0
[partition]
name=FCK
id=15
type=data
allocation_policy=sequential
filesystem_type=basic
size=3141632
file_system_attribute=0
partition_attribute=0
allocation_attribute=8
percent_reserved=0

Wow that's some nice investigative work there...
These things are way above my skill level, but I can offer some thoughts from being around the Acer forums here for a while now.
You are correct regarding the chip. It is faulty (or the solder is.) Which is why formatting 'worked' after multiple attempts.
It's still failing on the bct write error. What I can tell you is, each tabs bct is 'different'. For nvflash to operate correctly, you must use your tabs own bct. Once flashed successfully with skrilax_cz bootloader, it doesn't appear to matter which bct you use...
Blackthund3r's apxFlash tool has an option to dump (and save) your tabs bct, which can then be used to successfully nvflash.
If you could somehow retrieve the original bct you may be able to resolve the problem....in saying that though, you will still be left with a faulty emmc, so any success you have with the flash, at some point it will fail completely....attempts at Reflowing the solder has worked in some but not all cases, so that's at least worth a try.
I wish you all the best with your endeavours, the bct error has never been resolved and thei conclusion has always been "it's a faulty chip" not much comfort for those with the issue, especially being through no fault of their own....
One other thing, through many, many flashing attempts of my own, I did get this error once...thankfully between the auto tools and babsector/tdv4 etc, I managed to get it up and running again. I've never had any trouble with it over the 2-3 years since...there maybe a small sliver of hope for you there...
Good luck with it !!
dibb
Sent from my HTC_PN071 using Tapatalk

Unfortunately, Blackthunder's utility just kept getting in the way, as it kept assuming I was starting from a working tablet in ADB mode, not a broken tablet that could only be put in APX mode with the reset button. I managed to find an XDA thread with a tool to extract the CPUID from APX mode and another thread with a tool for creating the Iconia specific SBKv1 from the CPUID.
Blackthunder's tool seems to be mostly a wrapper around the base tools (adb.exe, fastboot.exe and nvflash.exe), and at least the nvflash from the timmyDean ROM bundle fails when asked to read back the old BCT, while the nvflash from the wheelie bundle simply doesn't accept an SBK argument. Anyway since I have by now repeated reformatted the flash, I doubt the old BCT is still there.
From what I have read however, the (unencrypted) BCT depends only on the following:
1. How the RAM and FLASH is wired to the Tegra chip in a specific tablet model (and which RAM and FLASH chip models they are, for instance do they run on 1.8V or 3V).
2. Parts of the partitioning.
3. Parts of the bootloader configuration (the --odmdata argument).
So using the BCT from timmyDean's bundle should be fine for the A500 it was written for.
Another thing is that during flashing, the BCT and other early boot parts need to be encrypted with the device specific SBK. For the A500 and A501 we know the SBK and can do so directly (via the --sbk option to the old nvflash.exe or the BlackThunder GUI), while for some later tablets we don't know the SBK but can use the the wheelie trick to make the tablet encrypt it for us (this is what the wheelie preparation procedure essentially does).
I still haven't found a detailed nvflash manual, the documentation for the RCM preboot protocol or the documentation for Tegra's AES engine.