Tuesday, March 1, 2011

Unbricking Gome/Fake FlyTouch Android tablet

See this post too: http://write-code.blogspot.com/2012/08/parallel-port-spi-flash-programmer-and-unbrick-wm8650.html
This blog post about total bricked Fake Flytouch - bootloader failed to start. If the devices turned on, the Blue LED will lit but the screen will remain black.
If you flash the wrong firmware, it might not fully bricked. Try to flash with new firmware, see comment post for the download link.

I bricked Gome/Fake? FlyTouch when upgrade its firmware by accidentally removing microSD card when upgrading w-load/u-boot in process. I don't know the exact name as the device itself doesn't have anything written on it except MID written on box.
It looks exactly like in this post: http://www.androidtablets.net/forum/gome-flytouch/1411-help-detecting-model-device-2-6-29-00236-g4f8dbbb-dirty.html#post8372

Reading through this thread, i found an interesting post about using LPT or Parallel port to reflash the bootloader IC using SPIPGM by Martin Rehak/RayeR. The SPIPGM can be found here: http://rayer.ic.cz/programm/programm.htm#SPIPGM

So, I begin disassemble FlyTouch by following this youtube video:

Then, I take out the cpu daughter board and begin identifying the chip needed to desolder. The chips have marking F40-100GCP (You can see the picture below). I just use a soldering iron and a solder suction as I don't have anything like hot-air station/solder wick. Before desolder, I use some kind of heatsink to protect the IC from being damaged by excessive solder heat.

The result

As you can see, I damaged the PCB! PCB traces peeled off. So if you want to desolder, make sure not to apply too much heat on the PCB.

Then, I start wiring the IC to the LPT according to the circuit diagram posted on RayeR's website: http://rayer.ic.cz/elektro/spipgm/spipgm.gif

Then, launch spipgmw.exe /i to identify the chip but it wont recognize and show parity Error. I recheck the connection, change the resistor and capacitor... then tried again... still no. After few days struggle with this, I found out bad connection between the chips and wire. So I changed by soldering the chips and use alligator clips instead.

The chips identified as EON EN25F40!, Then I tried to dump the SPI Flash by using this command
spipgmw.exe /d dump.bin

Dump successful!

Finally, it's time to reflash the chip. So, I made out my own binary file by combining w-load and u-boot and flash it into the chip (I cannot remember where I put the file, but you can get from here, not made by me). Before flash, it is important to erase it first.
spipgmw.exe /e
spipgmw.exe /p 4mb.bin

Then, I solder it back with new hope, Insert SD Card with new firmware and android boot!

Helpful link:
http://img840.imageshack.us/i/spipgmv2.gif/ - Circuit diagram
http://www.slatedroid.com/index.php?showtopic=5668 - De-Brick discussion
http://rayer.ic.cz/elektro/spipgm.htm - Post about spipgm
http://rayer.ic.cz/programm/programm.htm#SPIPGM - spipgm download
http://retired.beyondlogic.org/wp/4Mb_spi_flash.zip - Rom (Link updated on 19 May 2012)


  1. Hi, which Android ROM have you used here?

  2. Hi Rory, I used HcH's ROM which you can get here: http://techknow.freeforums.org/roms-f51.html


  3. Hello i did everything as you stated here, and i have same problems with the pins, seems no connection with the chip and wire..

    Unidentified but if i use spipgm.exe only it seems to respond!! dump flash rom success!!

    And it also responds positive to spipgm /e to erase the flash rom.

    Even when i type the /p command it starts working and reports the advance and sector writen (100%).

    Is this possible, my chip is okay this way?

    BTW chip is same as yours just spipgmw /i does not work, and it seems to work with spipgm.exe

    Let me know so i can put my chip back and try to boot with sd card

  4. Try to dump the rom back, if you find your dumped rom same as the rom you programmed, then its fine to put it back to its place.

  5. Hi i have similar android tablet like flytouch and i bricked it so can i send spi flash to you and you try to reprogram?

  6. que tal a todos, yo lo solucione de otra forma meti una rom que me me hizo NAND FLASH, y terminar el flash la pagas inmediatamente, cargas en la sd alguna rom que si te haya funcionada en mi caso la 1.9.88 y wuala, me funciono, dure cerca de 3 meses con la tablet brikeada, cualquier cosa mi correo semofo@htmail.com

  7. hello any one can send me any spi flash (epproom) to indonesia ????

  8. Hi, Seloka.

    Do you want the new chip? - Which I don't have

    or the ROM file?

    The ROM can be constructed by concatenate the two files w-load first then u-boot.


  9. C:\Documents and Settings\dimyati\My Documents\Downloads\spipgm\SPIPGM>spipgmw.e
    xe /i

    SPI FlashROM Programmer 1.9c (C) 2008-2011 by Martin Rehak; rayer@seznam.cz
    Compiled by GCC 4.4.0 at 23:20:41, Mar 22 2011
    (Win9x/NT/2K/XP compatability)

    SPI connected to LPT port at I/O base address: 378h, SCK pulse width: t+0us
    FlashROM JEDEC ID, type: FFFFFFh - parity error!
    Unknown manufacturer
    Status = FFh (SRP, RES, TB , BP2, BP1, BP0, WEL, BSY)
    1 1 1 1 1 1 1 1
    Status register is protected, you will need to set WP# high
    ... please help me for solutions

  10. Make sure the connection is good, the wire is good.

    It must be properly connected without any noise or loosen wire contact. Try change the resistor/capacitor too...

  11. hello i have 1 pc 128MB 2GB 300MHz Yoshima M70003 MID 7 “, it was Brick.
    spi flash chip 25Q80SCP my, can I use to load uboot-wm8505.bin 512KB.
    I know the chip is 8Mbit 25Q80SCP.
    if one bin file for this chip for my share.
    Thank you!

  12. Hi linhcentrio,

    I'm not sure but you can always try it out if its not troubling you.

    If desoldering the chip was too difficult, then I recommend to find original firmware files for that tablet and find the bin file inside that package.

    For my tablet Gome Flytouch, the ROM update comes with both w-load.bin and u-boot.bin and both of this files needs to be flashed on the flash chip altogether. So I concatenated both files first before flashing.

    To concat the files, on windows you can open command prompt and type this command:
    copy /b w-load.bin+u-boot.bin flash.bin
    The new file flash.bin will be generated.

  13. Hi. I got a big trouble with my EPAD since when i start up my tablet it starts showing animation WMT 2.1.2_105, after, a shining text "loading"... but when it start in graphic mode i can see the desk but blured. There is a message who indicates: power off, shuting down.

    I checked the power button but it appears like ok. Any idea? it will be great. I come from other forums and Mr Google without a good thing to do. Excuse me for my english, it is not my native language. Thanks.

  14. Linhcentrio did you solve your problem? i have the same problem with my wm8505 7' netbook, i d like to know how to put uboot and wload back, and what software and connection to use.

    thanks for any help.

  15. I still stop at the connector. although I did like the circuit diagram but the software still does not recognize the chip.


  16. linhcentrio, makes this batch file and save it as read.bat on the same folder where spi program is
    --- SNIP ---
    @echo off
    spipgmw /i 0 512 /d=0
    sort readme.txt > nul
    sort readme.txt > nul
    sort readme.txt > nul
    sort readme.txt > nul
    sort readme.txt > nul
    sort readme.txt > nul
    sort readme.txt > nul
    goto loop
    --- SNIP ---
    readme.txt is spi readme file for delay.

    Then open this batch file, double click and it will try to read from the ic infinitely. This will helps you "debug". Try to check the connection/wire/component until you have some reading. Fix the problem first.

    In my case the wire connection is loose and when I touch it, I have the reading but when I leave untouched, SPI program still can read but for another minute. So I have to solder it.

    After that, close batch file and then flash it.

  17. This is a new link for spipgm, http://rayer.g6.cz/programm/programe.htm#SPIPGM

  18. thank very much i will try it. have a good day!

  19. Hi. Could you add some photos how to connect ic to lpt? Link is broken. I really need to make my flytouch work. Please.

  20. The diagram can be found here: http://rayer.g6.cz/elektro/spipgm.htm

  21. Thank you. I examined that, but i'm new at it and i dont unterstand these diagrams. Can I connect ic to parallel wire directly? Sorry for my english.

    1. @Kristijonas Aviženis

      see this post: http://write-code.blogspot.com/2012/08/parallel-port-spi-flash-programmer-and-unbrick-wm8650.html

  22. My pad is superpad 3 and i cannot identify which chip should i reflash. there are few chips like in picture in this post. Can help?

  23. I conceive feeling to have the accumulation that you are card.
    one click root software

  24. Can you show me on this site:
    what kind of resistors do I need?

  25. sveikas,Kristijonai .....ar pajungus prie LPT porto pagal visa ta schema programa turi pati ,,pamatyti,, cipa,......man niekaip nepavyksta,......esu zalias.Arturas

  26. I Love Kindle fire hd which is one of the best tablet in the world today, and this is the best seller tablet on Amazon.com due to its cheap price. So there is no doubt that this is the most powerful tablet at its price. Another reason why kindle fire hd is very success on the market is Amazon often offer a lot of kindle fire hd deals that help consumer buy this tablet even cheaper.

  27. Teeth Night Guard is offering personalized fitting and high quality customized dental guards.