RIFF JTAG – MARVELL PXA3XX NAND Generic DLL Released

Posted on by

21.03.2011 MARVELL PXA3XX NAND Generic DLL Released

 

  • Resurrector PXA3XX contains only NAND DCC Loader, thus it is to be used only for operations on DCC Read/Write page in the JTAG Manager.

Embedded DCC Loader is designed to work inside of MCU’s internal RAM memory, thus it is not sensitive to external SDRAM configuration or availability or its physical state.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RoverPC EVO V7 Unbrick – Dead boot repair supported

Posted on by

21.03.2011  RoverPC EVO V7 Unbrick – Dead boot repair supported

RoverPC Evo V7 resurrection is simple. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.

To resurrect RoverPC Evo V7:

  • Solder JTAG cable to RoverPC Evo V7 JTAG pads;
  • Connect USB cable to phone and PC;
  • Make sure RoverPC Evo V7 is selected in the list of models;
  • Make sure a fixed TCK frequency is selected;
  • Click Resurrect button;
  • Wait till software signals a successful operation completion;
  • Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original firmware downloader software to restore it to the working state.

To enter download mode:

  • Disconnect PC cable;
  • Insert battery;
  • Hold both ‘Volume Down’ and ‘Camera’ keys and press Power-On.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RIFF Box firmware v1.21 released

Posted on by

21.03.2011  RIFF Box firmware v1.21 released

Whats new:

  • Added RX-polling feature (debugger-to-target) for PXA3XX DCC transfers.

RIFF BOX firmware is able now to wait (if resurrector DLL will request so) for PXA3XX target to be ready to accept
next packet over DCC: this feature slows down a little the JTAG-to-Target DCC
transfers but guaranties no packets loss for slow clocked targets;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – Huawei E153U Broadband modem unbrick – dead boot repair supported

Posted on by

17.03.2011  Huawei E153U Broadband modem unbrick – dead boot repair supported

Resurrecting Huawei E153U is simple. Just make sure you solder all JTAG signals and insert modem into a USB port for it to get powered.
If modem is not detected by RIFFBOX JTAG, disconnect JTAG connector, re-insert modem into USB and then connect back the JTAG connector.
There are secured (QCSBL is signed) and non-secured (QCSBL is not signed) modem revisions exist. Resurrector will automatically detect board revision and will select proper data to be flashed.
No matter what h/w revision is you can select which partitions are to be flashed during resurrection process.

To resurrect Huawei E153U:

  • Solder JTAG cable to Huawei E153U JTAG pads;
  • Insert Huawei E153U modem into any USB port for power;
  • Make sure Huawei E153U is selected in the list of models;
  • Click Resurrect button;
  • Wait till software signals a successful operation completion;
  • De-solder JTAG wires;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – Toshiba Portege G900 Unbrick, Dead Boot repair supported

Posted on by

14.03.2011 Toshiba Portege G900 Unbrick, Dead Boot repair supported

Resurrection of Toshiba Portégé G900 PDA part is not hard. Battery is required for successful HALT operation. If USB Data Cable is connected phone is auto powered on when battery is inserted.
If during connect operation (“Establish communication with the phone…”) after 2-3 passes there is still no success (progress bar keeps running from 0 to 100% and so on) then remove battery and insert it again. If USB cable is not connected then press and hold Power On key.
Current resurrector re-flashes only the EBOOT and secondary EBOOT area, and will not re-write IPL area (though write of this area is supported too).
Please note: DiskOnChip G4 memory has security features, due to which there is a risk of permanently blocking the access to the flash memory while re-flashing the IPL areas. Current resurrector will not touch the IPL zone, but it is possible you’re already holding such killed device in hands. If it is so you will see this error:
****************************************************************
Detected a Not Initialized FLASH1 Chip ID: 0x0400/0xFBFF
ERROR: Selected FLASH Chip was not initialized by the DCC Loader
****************************************************************

This can happen due to unknown protection keys used or due to permanently blocked MDOC chip. If latter is true we advise you to solder a new flash memory chip or throw this phone away to the trash bin.

To resurrect Toshiba G900 PDA part:

  • Solder JTAG wires to the Toshiba G900 PDA pads;
  • Connect USB cable to phone and PC;
  • Make sure Toshiba G900 PDA is selected in the list of models;
  • Insert battery and click Resurrect button;
  • Wait till software signals a successful operation completion;
  • Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

To enter USB download mode:

  • Disconnect PC cable;
  • Insert battery;
  • Hold ‘Left soft’ key (which is exactly above the Dial key) and press ‘Power ON’ button. In few seconds you should see red download screen.

To enter SD-card download mode:

  • Disconnect PC cable;
  • Insert battery;
  • Hold ‘D’ key and press ‘Power ON’ button.

Additional info:

  • Phone has DiskOnChip G4 memory type, which has security features. It has two password protected partitions (Password1 = 12345678, Password2 = 00000000);
  • IPL re-flash is not performed in this resurrector on purpose. While re-flashing the IPL area there is a risk of permanently blocking the memory chip.
  • Any write access (Erase or Write) on MDOC NAND memory range 0x00000000 to 0x0017FFFF is rejected by the DCC Loader. For full image writing convenience access to that range will not rise any error, data will just be ignored and reported as if it was written successfully, thus you still can write full image files using ‘Auto FullFlash Size’ checked.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RIFF JTAG Manager v1.28, RIFF Box firmware v1.20 released

Posted on by

14.03.2011  RIFF JTAG Manager v1.28, RIFF Box firmware v1.20 released

Whats new :

Firmware 1.20

  • Optimised connection to the PXA270 core
  • Added DCC TX channel (host-to-debugger) cleanup (flushing) feature (happens now during DCC Read with 0 timeout parameter) for Cortex-A8
  • Optimized Cortex-A8 connection establishment after coming out of reset (after NRST signal assertion)
  • Added emergency script processing for Cortex-A8 core (h/w script which is executed immediately after core was halted)

JTAG Manager 1.28

  • Added RAM selft-test right before uploading DCC loader.
  • Added functionality to handle complex memory devices (like MDOC H3) with lengths not necessary to be alighned to MBs;
  • Added DCC TX channel flushing command before starting DCC Loader – thus it is guaranteed that next first DCC read will get DCC Loader’s packet and not some residual trash data.
  • Added 1GB and 2GB OneNAND chips to the size autodetection list.
  • Added progress indication during saving files which were read on the DCC Read/Write page

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – CDMA Samsung SPH-D700 Galaxy S Epic 4G Unbrick, Dead Boot repair supported

Posted on by

14.03.2011 CDMA Samsung SPH-D700 Galaxy S Epic 4G Unbrick, Dead Boot repair supported

Samsung SPH-D700 is based on the S5PC110 Processor (ARM core is Cortex-A8). Depending on firmware state resurrection can be a bit confusing: for successful connection you will require charged battery. Please note – no matter whether you have USB cable or not – it must not be connected to phone. This is important.
Resurrector will reflash IBL, PBL, SPL and PARAM areas. Additionally you can select KERNEL and RECOVERY partitions to be reflashed too. Though them are required only for recovery mode and not needed for following USB firmware update by Odin software. So if you don’t need recovery mode don’t select these 2 partitions – otherwise you will just waste time waiting for them to be reflashed.
If after resurrection the download mode still cannot be initiated (LCD remains blank) do repeat resurrection with ‘Clone Gremlin zone’ option checked.

To resurrect Samsung SPH-D700:

  • Solder JTAG cable to Samsung SPH-D700 JTAG pads;
  • Make sure USB cable or charger is not connected;
  • Make sure Samsung SPH-D700 is selected in the list of models;
  • Make sure a fixed TCK frequency is selected;
  • Insert battery;
  • Click Resurrect button;
  • Press Power On key; when you will see “Establish communication with the phone…” message – press Power On ey again (and hold it pressed for 1-2 seconds);
  • Wait till software signals a successful operation completion;
  • Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.

To enter download or recovery mode:

  • Disconnect PC cable;
  • Insert battery;
  • Hold ‘1’ key on the keypad and press Power-On to enter download mode;
  • Hold both ‘Volume Down’ and ‘Camera’ keys and press Power-On to enter recovery mode.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – Samsung SGH-i607 BlackJack PDA Unbrick, Dead Boot repair supported

Posted on by

12.03.2011  Samsung SGH-i607 BlackJack PDA Unbrick, Dead Boot repair supported

Resurrecting Samsung i607 PDA part is easy. Phone requires battery presence in order to establish JTAG connection. If you additionally connect charger the phone will be auto powered on and there will be no need to press Power on key.
In case you experience connection problems, de-power phone completely, disconnect charger (if it was used), then insert battery, click Resurrection button in the JTAG Manger and immediately (within 0…1 seconds) press Power On key.

To unbrick Samsung i607 PDA part:

  • Solder JTAG cable to Samsung i607 PDA JTAG pads;
  • Make sure Samsung i607 PDA is selected in the list of models;
  • If only battery is connected – press Power On key shortly;
  • Click Resurrect button;
  • Wait till software signals a successful operation completion;
  • Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – CDMA Huawei C5005 Unbrick – Repair supported

Posted on by

11.03.2011  CDMA Huawei C5005 Unbrick – Repair supported

Resurrecting Huawei C5005 is simple. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
Resurrector re-flashes only firmware zone of the phone (0x000000 to 0xBFFFFF).

To resurrect Huawei C5005:

  • Solder JTAG cable to Huawei C5005 JTAG pads;
  • Insert USB Data cable into board and PC;
  • Make sure Huawei C5005 is selected in the list of models;
  • Click Resurrect button;
  • Wait till software signals a successful operation completion;
  • De-solder JTAG wires;

 

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – HTC Tattoo A3232 (HTC Click 1100) Unlock, Unbrick, IMEI repair, CID Update

Posted on by

10.03.2011 HTC Tattoo A3232 (HTC Click 1100) Unlock, Unbrick, IMEI repair, CID Update supported

Resurrecting HTC Click is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is inside.
There are two different hardware versions exist – one based on the MSM7225 chipset (CLIC10000) and other – on the ESM7225 chipset (CLIC11000). In resurrector settings you can select a desired version.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 0.52.0001 SPL version.
As well, you can change CID – for this make sure ‘Repair Custom ID’ field is checked in the Resurrection Guide dialog.

To resurrect HTC Click:

  • Solder JTAG cable to HTC Click JTAG pads;
  • Make sure HTC Click is selected in the list of models;
  • Click Resurrect button;
  • Wait till software signals a successful operation completion;
  • Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

To Unlock HTC Click :

  • Solder JTAG cable to HTC Click JTAG pads;
  • Make sure HTC Click is selected in the list of models;
  • Click Resurrect button;
  • Select “Unlock Settings” TAB
  • Select Unlock method
  • Click “Unlock”

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.