RIFF Box – JTAG Revolution

06.03.2012   RIFF JTAG – Samsung SGH-T499 Dart (Samsung Tass) Unbrick – Boot Repair supported

Repairing bricked Samsung T499 is easy with RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC while battery is inside. In case you use the battery only please note you will have to press Power On key once.

To resurrect Samsung T499:

•  Solder JTAG cable to Samsung T499 JTAG pads;
•  Make sure Samsung T499 is selected in the list of models;
•  Insert Battery into phone and connect USB cable (in case you not use USB cable, press once the Power ON key on the phone)
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold both ‘Volume Up’ and ‘Home’ keys and press ‘Power ON’ button. In few seconds phone enters download mode.

.

Share!

Tweet

Follow

29.02.2012    Samsung Wave 3 GT-S8600 Unbrick – Boot repair supported, World First !  !  !

Resurrecting Samsung S8600 is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Please note, MSM8255T is dual core chipset – it has ARM11 and Qualcomm Scorpion cores. During power on sequence only ARM11 core is visible on the JTAG chain. If boots are not completely damaged and it comes up to initializing of the Scorpion core then Scorpion core appears on the JTAG chain too. This will shift ARM11 from TAP0 into TAP1 position on the chain, while current resurrector has the ARM11 core hardcoded at TAP0 position. Thus make sure to establish JTAG connection in the time range while Scorpion core is not visible yet.

To resurrect Samsung S8600:

•  Solder JTAG cable to Samsung S8600 JTAG pads;
•  Make sure Samsung S8600 is selected in the list of models;
•  Insert battery and connect USB Data cable;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold both ‘Volume Down’ and ‘Menu’ keys and press ‘Power ON’ button.

.

Share!

Tweet

Follow

14.02.2012     HTC ThunderBolt 4G ADR6400 (HTC Mecha) Unbrick – Boot repair supported

Resurrecting HTC Thunderbolt CP (Modem Part) part is easy.
Phone is auto powered on with USB Data Cable connected to the PC while battery is inside; sometimes during connection pressing Power On key may be required.
Please note, CP Part’s power is controlled by the AP Part, thus you may experience constant connection loses after definite ammounts of time (1-2-5-x seconds). If this keeps interferring the resurrection process, solder additionall JTAG interface cable to the AP pads, select AP resurrector DLL, go to the JTAG Read/Write page and halt AP core, then switch back to the CP JTAG interface.

To resurrect HTC Thunderbolt CP (Modem Part) Part:

•  Solder JTAG cable to HTC Thunderbolt CP JTAG pads;
•  Insert USB Data cable into board and PC;
•  Make sure HTC Thunderbolt CP is selected in the list of models;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

Resurrecting HTC Thunderbolt AP (PDA Part) is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 1.04.0000 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG0510000’.
There is option to reflash BOOT and RECOVERY zones.

_

Share!

Tweet

Follow

HTC Droid Incredible 2 ADR6350 Boot repair, Unlock, CID, ModelID, IMEI Update

Resurrecting HTC Incredible 2 (Droid Incredible 2 ADR6350VW) is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Incredible 2 boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM8655 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 6.13.1002. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG3210***’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.
To resurrect HTC Incredible 2:

•  Solder JTAG cable to HTC Incredible 2 JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Incredible 2 is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

HTC Panache/Glacier/My Touch 4G Unbrick, IMEI, CID, ModelID, Unlock supported

Resurrecting HTC Glacier is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Glacier boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM7230 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write SPL version 0.86.0000. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD1510000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Glacier:

•  Solder JTAG cable to HTC Glacier JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Glacier is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

  _
  

Share!

Tweet

Follow

HTC Inspire 4G A9192 (HTC Stallion) Unbrick, Boot, IMEI, CID, ModelID, Unlock supported

Resurrecting HTC Inspire is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Inspire boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 0.85.0024. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD9812000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Inspire:

•  Solder JTAG cable to HTC Inspire JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Inspire is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

10.01.2012   Samsung GT-i8150 Galaxy W (Samsung Ancora) Unbrick – Boot repair supported

Resurrecting Samsung I8150 is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Please note, MSM8255T is dual core chipset – it has ARM11 and Qualcomm Scorpion cores. During power on sequence only ARM11 core is visible on the JTAG chain. If boots are not completely damaged and it comes up to initializing of the Scorpion core then Scorpion core appears on the JTAG chain too. This will shift ARM11 from TAP0 into TAP1 position on the chain, while current resurrector has the ARM11 core hardcoded at TAP0 position. Thus make sure to establish JTAG connection in the time range while Scorpion core is not visible yet.
To resurrect Samsung I8150:

•  Solder JTAG cable to Samsung I8150 JTAG pads;
•  Make sure Samsung I8150 is selected in the list of models;
•  Insert battery and connect USB Data cable;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

31.12.2011   A new Year gift ! Samsung GT-i9103 Galaxy Z / Galaxy R (TEGRA2)  Boot repair / Unbrick

Resurrecting Samsung I9103 is easy.
Phone is auto powered on with USB Data Cable connected to the PC while battery is inside; sometimes pressing Power On key during connection may be required. External power supply can be used too.
During some definite startup time (1…3 seconds) TEGRA2 chipsets are not detected via JTAG interface (this could be due to FUSE-d security): that is, on contrary to other devices, which being fused are detected via JTAG but non-haltable, TEGRA2 chipsets give ‘Nothing Detected’ response (though TCK-RTCK pair keeps functioning ok).
Please note: If during resurrection of dead unit the JTAG connection cannot be established (nothing is detected) then re-try with the NRST wire disconnected.

To resurrect Samsung I9103:

•  Solder JTAG cable to Samsung I9103 JTAG pads;
•  Insert USB Data cable into board and PC;
•  Make sure Samsung I9103 is selected in the list of models;
•  Click Resurrect button;
•  If nothing is detected then try with NRST wire disconnected;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
_

Share!

Tweet

Follow

30.12.2011    HTC Incredible S Unbrick, Unlock, CID, IMEI repair supported

Resurrecting HTC Incredible S is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Incredible S boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM7230 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 1.13.0000. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG3213000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Incredible S:

•  Solder JTAG cable to HTC Incredible S JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Incredible S is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

19.11.2011  LG P999 G2X (LG Star) Modem unbrick/repair supported

Resurrecting LG P999 Modem part is very hard because it requires non-beginner soldering skills (since JTAG pads on board are very small and are close to each other).
Phone is auto powered on with USB Data Cable connected to the PC while battery is inside; sometimes during connection pressing Power On key may be required.

To resurrect LG P999 Modem Part:

•  Solder JTAG cable to LG P999 Modem JTAG pads;
•  Insert USB Data cable into board and PC;
•  Make sure LG P999 Modem is selected in the list of models;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

Share!

Tweet

Follow