RIFF Box – JTAG Revolution

14.02.2012     HTC ThunderBolt 4G ADR6400 (HTC Mecha) Unbrick – Boot repair supported

Resurrecting HTC Thunderbolt CP (Modem Part) part is easy.
Phone is auto powered on with USB Data Cable connected to the PC while battery is inside; sometimes during connection pressing Power On key may be required.
Please note, CP Part’s power is controlled by the AP Part, thus you may experience constant connection loses after definite ammounts of time (1-2-5-x seconds). If this keeps interferring the resurrection process, solder additionall JTAG interface cable to the AP pads, select AP resurrector DLL, go to the JTAG Read/Write page and halt AP core, then switch back to the CP JTAG interface.

To resurrect HTC Thunderbolt CP (Modem Part) Part:

•  Solder JTAG cable to HTC Thunderbolt CP JTAG pads;
•  Insert USB Data cable into board and PC;
•  Make sure HTC Thunderbolt CP is selected in the list of models;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

Resurrecting HTC Thunderbolt AP (PDA Part) is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 1.04.0000 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG0510000’.
There is option to reflash BOOT and RECOVERY zones.

_

HTC Droid Incredible 2 ADR6350 Boot repair, Unlock, CID, ModelID, IMEI Update

Resurrecting HTC Incredible 2 (Droid Incredible 2 ADR6350VW) is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Incredible 2 boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM8655 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 6.13.1002. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG3210***’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.
To resurrect HTC Incredible 2:

•  Solder JTAG cable to HTC Incredible 2 JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Incredible 2 is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

HTC Panache/Glacier/My Touch 4G Unbrick, IMEI, CID, ModelID, Unlock supported

Resurrecting HTC Glacier is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Glacier boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM7230 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write SPL version 0.86.0000. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD1510000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Glacier:

•  Solder JTAG cable to HTC Glacier JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Glacier is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

  _
  

HTC Inspire 4G A9192 (HTC Stallion) Unbrick, Boot, IMEI, CID, ModelID, Unlock supported

Resurrecting HTC Inspire is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Inspire boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 0.85.0024. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD9812000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Inspire:

•  Solder JTAG cable to HTC Inspire JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Inspire is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

10.01.2012   Samsung GT-i8150 Galaxy W (Samsung Ancora) Unbrick – Boot repair supported

Resurrecting Samsung I8150 is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Please note, MSM8255T is dual core chipset – it has ARM11 and Qualcomm Scorpion cores. During power on sequence only ARM11 core is visible on the JTAG chain. If boots are not completely damaged and it comes up to initializing of the Scorpion core then Scorpion core appears on the JTAG chain too. This will shift ARM11 from TAP0 into TAP1 position on the chain, while current resurrector has the ARM11 core hardcoded at TAP0 position. Thus make sure to establish JTAG connection in the time range while Scorpion core is not visible yet.
To resurrect Samsung I8150:

•  Solder JTAG cable to Samsung I8150 JTAG pads;
•  Make sure Samsung I8150 is selected in the list of models;
•  Insert battery and connect USB Data cable;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

30.12.2011    HTC Incredible S Unbrick, Unlock, CID, IMEI repair supported

Resurrecting HTC Incredible S is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Incredible S boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM7230 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 1.13.0000. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG3213000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Incredible S:

•  Solder JTAG cable to HTC Incredible S JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Incredible S is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

19.12.2011  Lenovo LePhone 3G W100 Unbrick – Boot repair supported

Resurrecting Lenovo LePhone 3GW100 is easy. To establish JTAG connection make sure battery is charged enough and hold Power On button during initiation of JTAG connection.
To resurrect Lenovo LePhone 3GW100:

•  Solder JTAG cable to Lenovo LePhone 3GW100 JTAG pads;
•  Insert battery;
•  Make sure Lenovo LePhone 3GW100 is selected in the list of models;
•  Press and hold Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

19.11.2011  LG P999 G2X (LG Star) Modem unbrick/repair supported

Resurrecting LG P999 Modem part is very hard because it requires non-beginner soldering skills (since JTAG pads on board are very small and are close to each other).
Phone is auto powered on with USB Data Cable connected to the PC while battery is inside; sometimes during connection pressing Power On key may be required.

To resurrect LG P999 Modem Part:

•  Solder JTAG cable to LG P999 Modem JTAG pads;
•  Insert USB Data cable into board and PC;
•  Make sure LG P999 Modem is selected in the list of models;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

28.10.2011   CDMA ZTE R518 supported

Resurrecting ZTE R518 is easy. Battery is not required. To power the board it’s most convenient to use an USB Data Cable

To resurrect ZTE R518:

•  Solder JTAG cable to ZTE R518 JTAG pads;
•  Make sure ZTE R518 is selected in the list of models;
•  Connect USB Data Cable;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

26.10.2011  Samsung Galaxy S Plus (i9001) Unbrick, boot repair supported

Resurrecting Samsung I9001 is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Please note, MSM8255T is dual core chipset – it has ARM11 and Qualcomm Scorpion cores. During power on sequence only ARM11 core is visible on the JTAG chain. If boots are not completely damaged and it comes up to initializing of the Scorpion core then Scorpion core appears on the JTAG chain too. This will shift ARM11 from TAP0 into TAP1 position on the chain, while current resurrector has the ARM11 core hardcoded at TAP0 position. Thus make sure to establish JTAG connection in the time range while Scorpion core is not visible yet.

To resurrect Samsung I9001:

•  Solder JTAG cable to Samsung I9001 JTAG pads;
•  Make sure Samsung I9001 is selected in the list of models;
•  Insert battery and connect USB Data cable;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.