Can anyone help to understand S1 Service mode (not a fastboot) ?
For example, Sony device [ vid: 0FCE ; pid: ADDE ] also like [ SOMC Flash Device ]
Where I can get more information about this ? from what to start ? something about structure / commands etc. Would be great to see anything without sniffing and debugging usb traffic <_<
Can I, for example, push bootloader into RAM then access to its commands such as loading something into addrX then to start evaluation from that addrX and so on. How about without emmc (CPU + RAM only) ? How about u-boot? :)
I started from problem here (I also have trim-area (TA) backup, but...):
(phone is not mine)
Mainly I can't think of how I can inspect emmc on hardware problems without soldering at all :( because I have no Z3X or something else. So I can programming only via USB and some other related things if it's not so hard to prepare at home manually.
Anyway, would be great to solve or at least understand this problem in details.
So any suggestions for more understanding this bug or S1 Service are very welcomed!