1. Time for some upgrades in server hardware and software to enhance security and take AK to the next level. Please contribute what you can to sales@audiokarma.org at PayPal.com - Thanks from the AK Team
    Dismiss Notice

Firmware writer utility for Denon AVR-2113CI

Discussion in 'Solid State' started by nabeelsayegh, Mar 4, 2017.

  1. dt2017

    dt2017 New Member

    Messages:
    12
    Hi Jont,

    If you have SBL or FW for DM860, no need DFW for firmware programming. you need Xmodem to load firmware via this debug connector instead. DFW would not work without working DM860. Follow post item number 30 should work for you
     

     

    Please register to disable this ad.

  2. jont

    jont New Member

    Messages:
    8
    Ok, wired up a RS232-TTL level shifter to DM860 debug port. No response. See no signaling from the DM860 with an oscilloscope. I think either the DM860 local firmware is scrambled, or there's a faulty solder connection in the DM860's circuit. If it's the firmware, can the DWF program through the external RS232 port (which goes to the main cpu chip) be used to reprogram the DM860 eeprom? If it's hardware, then I get to try to reflow the solder connections under the BGA chip. Oh boy!
     
  3. dt2017

    dt2017 New Member

    Messages:
    12
    Hi Jont,

    I my case DFW program not possible until DM860 up and running. DFW will fail halfway updating.
     
  4. jont

    jont New Member

    Messages:
    8
    I bought some low viscosity, no-clean flux and tried the heat-gun reflow of the DM860 chip. Not sure if that was the problem after all. Power is good to that chip, but still no Ethernet port activity. I think my last shot is to try the DFW based firmware update through the RS232 rear port. I have searched and searched and can't find the DFW program anywhere on the internet. Would anyone happen to have it? Many thanks.
     
  5. awillia6

    awillia6 Super Member

    Messages:
    1,210
    Would that be the RS232 interface program that runs on a PC and talks to an AVR-2809? As I DIMLY recall, I used it years ago to update the firmware on the unit (as well as to save backup files of settings after running Audyssey). If that's what you're looking for, I think I may have the zip file kicking around on a file server somewhere. Let me know.
     
  6. jont

    jont New Member

    Messages:
    8
    The program name starts "DFW".... I have the firmware update files, but not the program that loads them. Thanks.
     

     

    Please register to disable this ad.

  7. Thomas S

    Thomas S New Member

    Messages:
    7
    For the programming of the DM860 you don't need DFW. You can use ExtraPutty. If you start this, you choose "Serial", in the field "Serial Line" you write the port (for example "COM2") and in the field "Speed" you write "115200". Optional you can save it and then you must click on "Open". If you switch the power on, you should see the boot message. If it necessary, you can interrupt it by pressing Ctrl and "A". In the menu you find the option "Files Transfer". I hope that you are successfuly.
     
  8. jont

    jont New Member

    Messages:
    8
    I may be confused. There are two serial connections into the main board. One is the RS232 connector on the back and the other is a TTL logic level set of solder pads near the DM860 chip. The RS232 connection goes to the main cpu rather than the DM860. The main cpu and the :DM860 each have their own set of RAM and Flash memory. I'm trying to program through the RS232 port. Will ExtraPutty work through that or do I need the DFW program? Thanks.
     
  9. dt2017

    dt2017 New Member

    Messages:
    12
    What Thomas means is solder pads near the DM860
     
  10. jont

    jont New Member

    Messages:
    8
    There is no response from the DM860 serial port (the solder pads) even after a couple tries of reflowing the part. I hope its firmware is just corrupt. I think the only option I have left is to try to program firmware through the RS232 connector on the back. Do I need the DVF software (tjat I don't have) to do this?
     
  11. dt2017

    dt2017 New Member

    Messages:
    12
    Hi Jont,

    It should give you some messages even flash corrupted. Did you connect serial port correctly? TX-->RX and RX-->TX between RS232 and you Serial port
     

     

    Please register to disable this ad.

  12. Denanz

    Denanz New Member

    Messages:
    4
    Ola folks,

    I have Denon 2313ci which stopped connecting to network after it was sitting unpowered for about a month.
    Here are the symptoms: the receiver turns on normally, then starts acquiring network over DHCP. Gets an address and becomes pingable for 1..7 seconds and then dies/reboots. In about 24..50 seconds it becomes pingable again for 1..7 seconds and loop repeats.
    If I connect TV, it shows "Network" page with Pandora, etc. and once it is shown, the screen turns all-green and then black for these 24..50 seconds.
    On FL display it shows "Connecting/Assigning/Please wait".

    I tried to update the firmware over USB but USB stick is not read at all and there is no +5V on it when Ethernet is not connected to it.
    Once I connect Etherhet, the receiver can read the USB stick but the update process is not starting or is failing at "check file validity" because of these DM860 reboots.

    So I connected via RS232-TTL to DM860 debug ports and here is debug output:

    FLB running @ 24000000Hz; Flash Drivers: [NAND]
    Manufacturer : Hynix
    Device : NAND 128MB 3,3V 8-bit
    Reserved : 0x00
    Page Size : 2048 Bytes 1
    Block Size : 128 Kilobytes
    Spare Bytes : 64 Bytes

    Starting Bootloader Level 1
    Starting Application


    Copyright 2000-2005 by BridgeCo AG, Duebendorf, Switzerland

    Type Start End Size
    Heap cached 0x60a0212c 0x63d80000 0x0337ded4/53993172
    Heap non-cached 0x73d80000 0x74000000 0x00280000/2621440
    UMR0 cached 0x00405b88 0x0040fa00 0x00009e78/40568
    UMR0 non-cached 0x00500000 0x0050fa00 0x0000fa00/64000

    Stacks Start End Size
    timer 0x00405788 0x00405b88 0x400/1024
    supervisor 0x00405204 0x00405604 0x400/1024
    user 0x00405604 0x00405784 0x180/384
    irq 0x004050a4 0x00405204 0x160/352
    fiq 0x609375a0 0x609375c0 0x20/32
    undef 0x60937520 0x609375a0 0x80/128

    module: SuluGPIO... [ ok ]
    module: SuluUART0... [ ok ]
    module: SuluUART1... [ ok ]
    module: SuluSPI0... [ ok ]
    module: SuluNFH... [ ok ]
    module: SysDevSCIEmu... [ ok ]
    module: FlashDrivers... [NAND]
    Manufacturer : Hynix
    Device : NAND 128MB 3,3V 8-bit
    Reserved : 0x00
    Page Size : 2048 Bytes 1
    Block Size : 128 Kilobytes
    Spare Bytes : 64 Bytes
    Fast timings : prescaler 0
    [RAM FLASH] [ ok ]
    module: cneModule... CnE configuration missmatches hardware configuration!
    CnE from FlashFound a 128kyte blocked flash
    Persistent Parameter at 0x20000, size: 0x20000
    page addr=0x20000, fixpage result=6
    page addr=0x80000, fixpage result=6
    [ ok ]
    module: cnePersistentModule... CnE configuration missmatches hardware configuration!
    CnE from Flashpage addr=0x20000, fixpage result=6
    [ ok ]
    module: cneRestoreModule... [ ok ]
    <... list of modules here - all OK...>
    module: MacTrafficGenerator... [ ok ]
    module: webserverModule... page addr=0x20000, fixpage result=6
    page addr=0x80000, fixpage result=6
    Web Pages Loaded Succesfully
    sdsShell ready for commands. Try "help" for help.
    sds://> [ ok ]
    module: CardeaService...
    ModelCode First [000100590100][12]
    iretryflag [0]

    ModelCode OK [000100590100]
    CardeaServiceImpl::getKeys - WARNING: The size of the decrypted Cne-Key cannot be divided by four
    PLEASE FIX THE PERL SCRIPT THAT GENERATES THE CNE KEYS!!
    CardeaServiceImpl::getKeys - WARNIN [ ok ]
    module: CardeaDiscovery... [ ok ]
    module: ZappaContentBrowser... [ ok ]
    module: USBAdaptionLayer... [ ok ]
    module: RDMFileSystemTest... [ ok ]
    module: FATFileSystem... [ ok ]
    module: PicturePlayerModule... G: The size of the decrypted Cne-Key cannot be divided by four
    PLEASE FIX THE PERL SCRIPT THAT GENERATES THE CNE KEYS!!
    IN [ ok ]
    module: MemoryBlobService... [ ok ]
    <... more OK modules...>
    module: DRC_CommandModule... [ ok ]
    module: AVRPlayerService... RTPSideEffectHandler::initialize() - done
    page addr=0x20000, fixpage result=6
    page addr=0x80000, fixpage result=6

    Warning RemoteNetCfg.cpp(999) - RemoteRegSelectedWirelessProfile::RemoteRegSelectedWirelessProfile - Unable to get WlConnectionService!!!
    NewSelectedWirelessProfile::NewSelectedWirelessProfile ERROR: WPA Passphrase length must be >8 and <64! len=6, passphrase=shared [ ok ]
    module: LanguageTranslationModule... [ ok ]
    module: BCOAirTunesService... [ ok ]
    module: WaveRadio2AppControl...
    ----------------------------- [ ok ]
    module: ParascreenService...
    Initializing Wr2_AppControl

    page addr=0x20000, fixpage result=6
    page addr=0x80000, fixpage result=6
    [ ok ]
    module: LocalUi2... Wr2_AppControl::setWirelessPowerMode(): could not retrieve WlControlService
    DHCP client: got address 10.0.0.14 mask 255.255.255.0
    change net state to EIPCFG_DHCP_FINISHED, IP address: 10.0.0.254
    +++++++++++ IExternalEventDispatcher::setAsExternalEventDispatcher +++++++++++++
    Player/iPodPlayer(iPodPlayer.cpp[63]):TRACE ERROR:Could not retreive IPodControlService
    UIHomeModeHandler::UIHomeModeHandler() Successfuly added the handler
    WHACore: networkStateChanged: 1
    WHA/Core(WHACore.cpp[438]):doSetNetworkUp(1), state=0
    [ ok ]
    module: SPIRemoteControl... ================ WaaRemoteCtrl::initialize() ===============
    ================ WaaRemoteCtrl::in [ ok ]
    module: SpiNtpModule... [ ok ]
    module: CardeaSecurityLevelModule... [ ok ]
    module: SendAmxMessageModule... [ ok ]
    module: SpiAppCtrlModule... [ ok ]
    module: SpiPresetsModule... itialize() END =============== [ ok ]
    module: ParaventViewRenderer...
    ===================
    ParaventViewRendererModuleInit()
    ===================
    Service IPandoraService not found !!!
    ModelTree::lookupString: asset "message [ ok ]
    module: DrcHostTunnelingModule... [ ok ]
    module: UPnPDevice... /alarmTime" doesn't exist or isn't an static-typed string
    -----------cUUID2 [0005cd2a4433] cMAC[5f9ec1b3-ff59-19bb-8530-0005cd2a4433]

    !!! WHA DEVICE START INIT !!!

    NEW_DEVICE_NAME: DENON
    [ ok ]
    module: DenonInternetUpdateControlRegistersService... [ ok ]
    module: PicturePlayerRemoteRegistersService... [ ok ]
    module: SpdifChannelStatusModule... [ ok ]
    module: UartSwitchingModule... [ ok ]
    module: UPnPServerRescanModule... [ ok ]
    module: USBPlayDirectModule... [ ok ]
    module: SSLService... findFontID for rom:///ui-denon/Fonts/DMPNOW-GB-83pv-RKSJ-H-conv.ttf idx 0...not found
    No ID for font at rom:///ui-denon/Fonts/DMPNOW-GB-83pv-RKSJ-H-conv.ttf found, created a new one at 617f7898
    findFontID for rom:///ui-denon/Fonts/DMPNOW-GB-83pv-RKSJ-H-conv.ttf idx 0...found ID at 617f7898
    unknown file type for couldn't open file ""
    [ ok ]
    module: SslClinetModule... [ ok ]
    <...more OK modules...>
    module: SiriusService...
    : Adding the services

    m_cpRDMFSService Handler is added successssfully
    [ ok ]
    module: SiriusContentBrowserService... [ ok ]
    module: PandoraService... [ ok ]
    module: PandoraContentBrowserService... [ ok ]
    module: NapsterApiWrapperService... [ ok ]
    module: NapsterService... [ ok ]
    module: NapsterContentBrowserService... [ ok ]
    module: IPodControlService... doubly-defined variable footer38-1
    doubly-defined variable footer38-2
    face request for font at rom:///ui-denon/Fonts/DMPNOW-GB-83pv-RKSJ-H-conv.ttf index 0, loading...
    hook dispatch for 'hook-browse-scroll'
    IPODAUTH getDeviceID
    [ ok ]
    module: IpodCBService... [ ok ]
    <... more OK modules...>
    module: SpotifyCBService... [ ok ]
    module: Playstats... E ERROR:Flickr CB addServiceInterface() for this returned: 1
    TrackDataRetriever::TrackDataRetriever
    Lastfm/Service(LastfmImpl.cpp[35]):addServiceInterface() for this returned: 1
    Lastfm/Service(LastfmImpl.cpp[38]):addServiceInterface() for tuner returned: 1
    Lastfm/Service(LastfmImpl.cpp[62]):Networkstate changed
    Spotify initializing!
    [ ok ]
    module: DeviceDiscoveryModule... [ ok ]
    <...more OK modules...>
    module: DelayedExeListModule... artupService()
    SIRIUSClient_DebugModule(SiriusStreamProcess.cpp[116]):FATAL TRACE ERROR:Siri [ ok ]
    module: CrestronServer... usStreamProcessor - Could NOT retreive the RhapsodyDirectService!!!
    UIMgr/WelcomeModeHandler(UIWelcomeModeHandler.cpp[109]):FATAL TRACE ERROR:UIWelcomeModeHandler::DelayedExeObserver() Cannot retreive the IRhapsodyDirectExtCBService Service!!!
    Service IRhapsodyDirectExtCBService not found !!!
    UIMgr/PlayModeHandler(UIPlayModeHandler.cpp[407]):FATAL TRACE ERROR:UIPlayModeHandler::DelayedExeObserver() Cannot retreive the IRhapsodyDirectExtCBService Service!!!
    DigitalFunctorTimerThread Thread started!
    DigitalFunctorTimerThread Thread st [ ok ]
    module: Crestron... [ ok ]
    System initialisation done.
    arted!
    WHA/Core(WHACore.cpp[200]):doSetEnabled(0), state=0
    BCOApple Module Available
    page addr=0x20000, fixpage result=6
    USB device VID=0x1b8f PID=0x0326 (devClass = 00, ifClass = 08, address = 1) found.
    WHA/Core(WHACore.cpp[479]):doSetRemoteEnabled(0), remoteState=0
    FirmwareUrl
    WHA/Core(WHACore.cpp[86]):WHA info:
    USBAdaptionLayer::addIntoNotMTPDevicesList() Got 1b8f0326;
    friendlyName: DENONisListedAsNotMTPDevice
    modelName: state: 0, 0 partyId: playState: 0 remoteState: 0 powerStatus: masterVolumeLevel:source: zone: 0 error: 0,0
    WHA/Core(WHACore.cpp[86]):WHA info:
    friendlyName: DENON modelName: *AVR-2313 state: 0, 0 partyId: playState: 0 remoteState: 0 powerStatus: masterVolumeLevel:?Mass Storage Device (Addr=1) added
    Trace VolumeOpen(): Unknown volume recognized as FAT32


    VolLab NO NAME

    stack overflow exception in thread <CDSRepository> at address 0x0040431c CPU mode Supervisor (0x13) SP(0x61110700)

    registers:
    r0 : 0x61110308
    r1 : 0x00003232
    <...>
    r10: 0x61110650
    r11: 0x00000000

    stack backtrace :
    thread "CDSRepository"
    sp at 0x61110700 in [ 0x61110650 : 0x6111126b ]
    pc at 0x0040431c
    backtrace:
    sp 0x61110708 : fn 0x61110308
    sp 0x6111070c : fn 0x60a0216c
    <...skipped..>
    sp 0x6111124c : fn 0x00404c44
    sp 0x61111250 : fn 0x604bcf?
    FLB running @ 24000000Hz; Flash Drivers: [NAND]
    Manufacturer : Hynix
    Device : NAND 128MB 3,3V 8-bit
    Reserved : 0x00
    Page Size : 2048 Bytes 1
    Block Size : 128 Kilobytes
    Spare Bytes : 64 Bytes

    Starting Bootloader Level 1
    Starting Application

    ... and loop repeats.
    So the issue is that some application gets stack overflow error and thus DM860 reboots and brings not only network but USB controller down as well. So I can't update the firmware neither from network nor from the USB.

    Both boot loader Level 1 and Level 2 menus are accessible to me. When I go to Level 2 menu, the device becomes pingable constantly and doesn't reboot (because the application CDSRepository doesn't fail and no backtraces). So I think that the hardware is OK.

    I have downloaded the latest firmware for 2313ci: SB_AVR-2313E2_000100590200-0011.zip (Feb 2018)
    Then I prepared files according to post #30 in case I need to reflash all completely.
    staff 5128 Feb 14 16:47 enc_update.xml
    staff 2064392 Feb 14 16:45 firmdata00-MAIN.bin
    staff 270344 Feb 14 16:47 firmdata02-APLD.bin
    staff 1736712 Feb 14 16:45 firmdata03-DSP.bin
    staff 8388616 Feb 14 16:47 firmdata04-GUI.bin
    staff 1609736 Feb 14 16:47 firmdata05-DM860SBL.bin
    staff 13444104 Feb 14 16:49 firmdata06-DM860IMG.bin

    Should I first try to reset CnE config to default settings from Bootloader 2 menu (item #7) or should I erase the flash and upload SBL/IMG files?
    Any other ideas?
    I'd like to use built-in method for software update/repair but I need to make USB work. Otherwise I'll need to startXmodem the software.

    Heating up DM860 and flash chips with a rework station at ~200C didn't change anything.

    Thank you.
     
    awillia6 likes this.
  13. awillia6

    awillia6 Super Member

    Messages:
    1,210
    Thanks for the detailed posting. Sorry I don't know enough to help, but please keep posting your progress with this unit; it's fascinating.
     
  14. Denanz

    Denanz New Member

    Messages:
    4
    Update:
    I uploaded the bootloader2 and rebooted with the new bootloader2. Then I started uploading IMG file but it was not accepted no matter what: DM860 kept spitting up error 735 in the end of 30-minute upload. So I thought flash is corrupted and erased flash thinking that bad blocks will be identified and mapped for avoidance.
    The flash didn't fully erase - this process stopped at about ~60 blocks if I start erasing right after the reboot. A bad block has been identified: #513.

    Bootloader Level 1 Menu (Mar 11 2009, 16:07:41):
    ================================================

    1) Download Bootloader Level 2
    2) Show Meta Info
    3) Reset
    4) Start Bootloader Level 2
    5) Start Application
    6) Erase Flash


    Do you really want to erase the Flash? y

    Erasing Flash ...erasing block 1 of 1023
    .erasing block 2 of 1023
    .erasing block 3 of 1023
    <..>
    .erasing block 62 of 1023
    .
    FLB running @ 24000000Hz; Flash Drivers: [NAND]
    Manufacturer : Hynix
    Device : NAND 128MB 3,3V 8-bit
    Reserved : 0x00
    Page Size : 2048 Bytes 1
    Block Size : 128 Kilobytes
    Spare Bytes : 64 Bytes
    Bad Block found: Block 513

    Now I'm stuck with the flash which is not properly erased. After investigation it turned out that the main CPU, R5F56108VNFP is sending a reset signal to DM860, and also sends signals to turn off Net +1.2v and +3.3v power lanes to DM860 (pins 34/35 - E RESET / E POWER). This happens in cycle: because the CPU doesn't have "I'm OK" feedback from DM860 for 60 seconds, CPU reboots DM860. I'm stuck in this loop and can't complete flash erasing.

    So the only option left is to try and upload the boot loader again - but this process is also broken now:

    Bootloader Level 1 Menu (Mar 11 2009, 16:07:41):
    ================================================

    1) Download Bootloader Level 2
    2) Show Meta Info
    3) Reset
    4) Start Bootloader Level 2
    5) Start Application
    6) Erase Flash

    Start download with Xmodem ...
    CCCC
    Starting xmodem transfer. Press Ctrl+C to cancel.
    Transferring firmdata05-DM860SBL.bin...
    0% 2 KB 2 KB/sec 00:13:05 ETA 0 Errors

    It stops at 2kb and doesn't move further. Apparently because flash is not properly erased and filesystem is not created on it.

    Any ideas on how how to stop main CPU from rebooting DM60 so I could finish flash erasing and upload bootloader2 again?
     
    awillia6 likes this.
  15. Denanz

    Denanz New Member

    Messages:
    4
    Can anybody send me DFW firmware writer for AVR-2313ci receiver?

    Thanks
     
    Last edited: Jul 3, 2018
  16. dimanag

    dimanag Active Member

    Messages:
    141
    Location:
    Greece
    Check your email!!
     

     

    Please register to disable this ad.

  17. Denanz

    Denanz New Member

    Messages:
    4
    I fixed my 2313ci in the end - big thanks to Dimitrios for software!

    In order to stop DM860 from rebooting during the upload, I had to apply external +3.3v to E RESET and E POWER pins of main CPU R5F56108VNFP so it wouldn't reboot DM860. I used a needle which I inserted between pins 34 and 35 of the main CPU. These pins are hard to reach so I removed the small top triangle-shaped daughterboard which connects the mainboard with RS232 daughterboard to get access to pins 34/35 of the main CPU.
    When upload of bootloader2 started it stumbled at 15 bytes again but in about 10 seconds it went further and upload of whole bootloader2 was completed with no errors.
    After that I booted into botldr2 and uploaded binary IMG file and started the receiver. MAC address was 00:00:00:00:00:00 because I erased the flash so I booted the receiver into btldr2 again to set the MAC to original value - it is in the menu, # 8).
    After all this the USB became working and I ran a regular USB update to update the receiver to the latest version.

    Once the newest software was uploaded I connected the network and I saw the same error as I had before: error in "CDSRepository" thread and rebooting DM860.
    It turned out that my NAS was upgraded while the receiver was turned off for a month. And since the NAS was configured to support UPnP, after the upgrade it didn't answer on regular HTTP port 80, but rather redirected media players to port TCP 443 for HTTPs. NAS sent its HTTPs certificate in the initial TLS packet which caused AVR reboot and error in CDSRespoitory thread. I came to this when I connected the receiver to a router without internet connection but with DHCP on and the receiver was doing OK with the network - no reboots, all stable. Once internet was connected (e.g. NAS became accessible), it immediately threw an error and rebooted. Since I couldn't change neither NAS nor receiver code, I just turned off UPnP on my NAS - it didn't affect anything in my network. Once I turned off UPnP on the NAS, the receiver stopped rebooting and I can listen to my NAS media and Pandora again - no DM860 reboots and issue is fixed.

    If I could figure out this issue with UPnP right away I'd never get into this flashing etc.etc. A good learning experience though.
     
    awillia6 likes this.
  18. awillia6

    awillia6 Super Member

    Messages:
    1,210
    Congrats! Really impressed how you hung in there against a great deal of adversity and endless dead ends. Well done!
     
  19. dimanag

    dimanag Active Member

    Messages:
    141
    Location:
    Greece
    Well done!!!
     
  20. David2018

    David2018 New Member

    Messages:
    1
    Can anybody send me DFW firmware writer for AVR-1913 receiver?

    Thanks
     

Share This Page