RIFF Box – JTAG Revolution

14.03.2012   RIFF JTAG – HTC Sensation  (HTC Pyramid)  Unbrick, ModelID, CID, IMEI repair Supported

Repairing bricked HTC Sensation is easy with the RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.

Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 1.18.0000. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG5813000’.
There is option to reflash BOOT and RECOVERY zones.

To resurrect HTC Sensation:

•  Solder JTAG cable to HTC Sensation JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Sensation is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

.

Share!

Tweet

Follow

12.03.2012   RIFF JTAG – LG P350 Pecan / Optimus Me Unbrick – Boot Repair supported

Resurrecting LG P350 is very hard because it requires non-beginner soldering skills (since JTAG pads on board are very small and are close to each other).
Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.

To resurrect LG P350:

•  Solder JTAG cable to LG P350 JTAG pads;
•  Insert USB Data cable into board and PC;
•  Make sure LG P350 is selected in the list of models;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods. We used KDZ_FW_UPD update software (with settings Type = 3GQCP, PhoneMode = EMERGENCY) to flash the *.KDZ firmware into phone.

To enter emergency mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume down’ key and press ‘Power ON’ button. In few seconds you should see emergency mode screen saying “DOWNLOAD MODE”.

.

Share!

Tweet

Follow

HTC Droid Incredible 2 ADR6350 Boot repair, Unlock, CID, ModelID, IMEI Update

Resurrecting HTC Incredible 2 (Droid Incredible 2 ADR6350VW) is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Incredible 2 boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM8655 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 6.13.1002. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG3210***’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.
To resurrect HTC Incredible 2:

•  Solder JTAG cable to HTC Incredible 2 JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Incredible 2 is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

HTC Panache/Glacier/My Touch 4G Unbrick, IMEI, CID, ModelID, Unlock supported

Resurrecting HTC Glacier is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Glacier boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM7230 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write SPL version 0.86.0000. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD1510000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Glacier:

•  Solder JTAG cable to HTC Glacier JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Glacier is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

  _
  

Share!

Tweet

Follow

HTC Inspire 4G A9192 (HTC Stallion) Unbrick, Boot, IMEI, CID, ModelID, Unlock supported

Resurrecting HTC Inspire is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Inspire boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 0.85.0024. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD9812000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Inspire:

•  Solder JTAG cable to HTC Inspire JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Inspire is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

10.01.2012   Samsung GT-i8150 Galaxy W (Samsung Ancora) Unbrick – Boot repair supported

Resurrecting Samsung I8150 is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Please note, MSM8255T is dual core chipset – it has ARM11 and Qualcomm Scorpion cores. During power on sequence only ARM11 core is visible on the JTAG chain. If boots are not completely damaged and it comes up to initializing of the Scorpion core then Scorpion core appears on the JTAG chain too. This will shift ARM11 from TAP0 into TAP1 position on the chain, while current resurrector has the ARM11 core hardcoded at TAP0 position. Thus make sure to establish JTAG connection in the time range while Scorpion core is not visible yet.
To resurrect Samsung I8150:

•  Solder JTAG cable to Samsung I8150 JTAG pads;
•  Make sure Samsung I8150 is selected in the list of models;
•  Insert battery and connect USB Data cable;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

10.01.2012     Samsung SGH-T759 Exhibit 4G Unbrick – Boot Repair supported

Samsung T759 is based on the S5PCxxx Processor (ARM core is Cortex-A8).
Note, one simple way to connect over JTAG – connect USB cable to PC and insert battery. In this case phone is automatically powered on. But note, in some cases it is possible that you will have to hold Power On key during initial connection.
In case after resurrection (after you have tried with both boot versions) the download mode is not initiated (LCD remains blank) do repeat resurrection with ‘Clone Gremlin zone’ option checked.

To resurrect Samsung T759:

•  Solder JTAG cable to Samsung T759 JTAG pads;
•  Connect USB cable to phone and PC;
•  Attach battery connector;
•  Make sure Samsung T759 is selected in the list of models;
•  Make sure a fixed TCK frequency is selected;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press Power-On.

_

Share!

Tweet

Follow

30.12.2011    HTC Incredible S Unbrick, Unlock, CID, IMEI repair supported

Resurrecting HTC Incredible S is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Incredible S boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM7230 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write PDA’s SPL version 1.13.0000. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG3213000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Incredible S:

•  Solder JTAG cable to HTC Incredible S JTAG pads;
•  Insert batter and connect USB Data cable;
•  Make sure HTC Incredible S is selected in the list of models;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

_

Share!

Tweet

Follow

26.10.2011  Samsung Galaxy S Plus (i9001) Unbrick, boot repair supported

Resurrecting Samsung I9001 is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Please note, MSM8255T is dual core chipset – it has ARM11 and Qualcomm Scorpion cores. During power on sequence only ARM11 core is visible on the JTAG chain. If boots are not completely damaged and it comes up to initializing of the Scorpion core then Scorpion core appears on the JTAG chain too. This will shift ARM11 from TAP0 into TAP1 position on the chain, while current resurrector has the ARM11 core hardcoded at TAP0 position. Thus make sure to establish JTAG connection in the time range while Scorpion core is not visible yet.

To resurrect Samsung I9001:

•  Solder JTAG cable to Samsung I9001 JTAG pads;
•  Make sure Samsung I9001 is selected in the list of models;
•  Insert battery and connect USB Data cable;
•  If you use only battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

Share!

Tweet

Follow

24.10.2011   HTC Supersonic (EVO 4G) Unbrick, Unlock, IMEI, CID, ModelID repair supported

Resurrecting HTC Supersonic (EVO 4G) is easy. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
In case you have no USB cable near, make sure battery is charged enough and hold Power On button during initiation of JTAG connection.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 2.16.0001 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PC3610000’.
Additionally, you can check ‘Repair RECOVERY zones’ to reflash android BOOT and RECOVERY code. If selected, then ClockworkMod Recovery v5.0.2.2 will be flashed. Using this recovery you will be able to install zip files from the SD Card, for example you will be able to acquire ROOT rights by installing su-2.3.6.3-efgh-signed.zip file.

To resurrect HTC Supersonic:

•  Solder JTAG cable to HTC Supersonic JTAG pads;
•  Insert USB Data cable into board and PC;
•  Make sure HTC Supersonic is selected in the list of models;
•  If you use battery, press Power On key;
•  Click Resurrect button;
•  Wait till software signals a successful operation completion;
•  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

To enter download mode:

•  Disconnect PC cable;
•  Insert battery;
•  Hold ‘Volume Down’ key and press ‘Power ON’ button.

Share!

Tweet

Follow