Tag Archives: Resurrection

RIFF JTAG – HTC Radar (HTC Omega) Unbrick, Unlock, SuperCID and IMEI update via USB cable supported

Posted on by

12.06.2012   RIFF JTAG – HTC Radar (HTC Omega) Unbrick, Unlock, SuperCID and IMEI update via USB cable supported

Repairing bricked HTC Radar (PI06100) is easy with the RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected. Please note, battery presense is required.
Current resurrector works via USB interface thus no JTAG connection is required. You may need to install RIFF BOX DCC Loader USB Interface USB driver if you run this for the first time. Drivers are located in JTAG Manager directory (Drivers folder).
In order to connect, device must be detected by system as Qualcomm HS-USB QDLoader communication port. To force device into this mode (that is if your device is dead but there is still no USB activity when you connect it to PC with USB cable) use testpoint to disable the eMMC memory – for this shortcut specified point on the schematics to the GND during power-on stage.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PI0610000’.

To resurrect HTC Radar via USB Cable:

  •  If required, use testpoint to force HS-USB QDLoader mode: for this de-power board, shortcut specified point in the schematics to GND with the help of a needle, attach battery and then insert USB cable into PC, wait while phone enumerates as HS-USB QDLoader and then remove the needle;
  •  Make sure HTC Radar (PI06100) is selected in the list of models;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Depower the phone;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

.

RIFF JTAG – HTC One V T320e (HTC Primo) Unbrick, Unlock, SuperCID, IMEI Repair supported

Posted on by

31.05.2012  RIFF JTAG – HTC One V T320e (HTC Primo) Unbrick, Unlock, SuperCID, IMEI Repair supported

Repairing bricked HTC OneV (PK76100) is easy with the RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected. Please note, battery presense is required.
Current resurrector works via USB interface thus no JTAG connection is required. You may need to install RIFF BOX DCC Loader USB Interface USB driver if you run this for the first time. Drivers are located in JTAG Manager directory (Drivers folder).
In order to connect, device must be detected by system as Qualcomm HS-USB QDLoader communication port. To force device into this mode (that is if your device is dead but there is still no USB activity when you connect it to PC with USB cable) use testpoint to disable the eMMC memory – for this shortcut specified point on the schematics to the GND during power-on stage.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 1.16.0000 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PK7610000’.
There is option to reflash android BOOT and RECOVERY zones.

To resurrect HTC OneV via USB Cable:

  •  If required, use testpoint to force HS-USB QDLoader mode: for this de-power board, shortcut specified point in the schematics to GND with the help of a needle, attach battery and then insert USB cable into PC, wait while phone enumerates as HS-USB QDLoader and then remove the needle;
  •  Make sure HTC OneVC (PK76100) is selected in the list of models;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods. You can use CWM recovery to flash any ZIP file – for this during resurrection add BOOT & RECOVERY zones to be resurrected too.

To enter download mode:

  •  Disconnect PC cable;
  •  Insert battery;
  •  Hold ‘Volume Down’ key and press ‘Power ON’ button.

.

RIFF JTAG – HTC 7 Surround T8788 (HTC Mondrian) Unbrick, Unlock, SuperCID and IMEI repair supported

Posted on by

23.05.2012  RIFF JTAG – HTC 7 Surround T8788 (HTC Mondrian) Unbrick, Unlock, SuperCID and IMEI repair supported

Repairing bricked HTC Surround (PD26100) is easy with the RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
In case you have no USB cable near, make sure battery is charged enough and hold Power On button during initiation of JTAG connection.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 0.74.1000 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD26*****’.

To resurrect HTC Surround (PD26100):

  •  Solder JTAG cable to HTC Surround JTAG pads;
  •  Insert USB Data cable into board and PC;
  •  Make sure HTC Surround (PD26100) is selected in the list of models;
  •  If you use battery, press Power On key;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

To enter download mode:

  •  Disconnect PC cable;
  •  Insert battery;
  •  Hold ‘Volume Down’ key and press ‘Power ON’ button.

.

RIFF JTAG – HTC via USB more phones supported

Posted on by

 27.04.2012   RIFF JTAG – HTC via USB more phones supported

  • HTC Thunderbolt USB support added
  • HTC Sensation XL USB support added
  • HTC Inspire USB support added
  • HTC Incredible S USB support added
  • HTC Incredible 2 USB support added

These new updates will allow You to use USB cable to perform any operation on listed models. Remember that this work if Your phone is enumerated on USB port as QHUSB_Dload or Qualcomm HS-USB QDLoader device.
In case phone is not enumerated, You might need to use test point method first.

Please visit RIFF FAQ section to see how to install drivers, and how to find eMMC Vdd test points:

If You need to repair phone after replacing eMMC chip, these are the steps:
  • Launch eMMC MBR/EBR partitioning tool
  • Open desired partitioning file
  • Click “Load Image from file”
  • Click “Repartition eMMC”
  • Close the eMMC plugin
  • Click “Resurrection” and select all options to be repaired, including IMEI and CID
  • Click “Resurrect”

Please click “Check for updates” button to download and install new updates.

 

RIFF JTAG – HTC Flyer WiFi (PG41400) Unbrick, S-off, CID update supported

Posted on by

RIFF JTAG – HTC Flyer WiFi (PG41400) Unbrick, S-off, CID update supported

Repairing bricked HTC Flyer WiFi (PG41400) is easy with the RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected. Please note, battery presense is required.
Some (or all) revisions of HTC Flyer boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM8255 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the DBL loader, so writing to DBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into DBL zone and will respond with success code as if flashing succeeded. In this way DBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except DBL area) and will re-write PDA’s SPL to 1.11.0011 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG4140000’.
There is option to reflash android BOOT and RECOVERY zones. Recovery zone is flashed with ClockworkMod Recovery 4.0.1.4. In addition, you can set S-OFF (unlock HBOOT so you will be able to flash any ROM) by selecting S-OFF HBOOT version in the resurrector settings.
Sometimes (for example after rooting attempts) phone has a modified DBL loader (which may not accept official HTC boot files). To restore phone functionality you need to reflash DBL loader. There is option to reflash DBL code (DBL area will be temporary unlocked for reflashing). But please note, reflashing DBL area is very dangerous, since in case flashing stops in the middle, you will have briked phone with permanently disabled JTAG interface.
Please note, if your phone has the DBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Flyer WiFi:

  •  Solder JTAG cable to HTC Flyer JTAG pads;
  •  Insert battery and connect USB Data cable;
  •  Make sure HTC Flyer (PG41400) is selected in the list of models;
  •  If you use only battery, press Power On key;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;


 Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods. You can use CWM recovery to flash any ZIP file – for this during resurrection add BOOT & RECOVERY zones to be resurrected too.

To enter download mode:

  •  Disconnect PC cable;
  •  Insert battery;
  •  Hold ‘Volume Down’ key and press ‘Power ON’ button.

.

RIFF JTAG – HTC Flyer (PG41100) Unbrick, Unlock, IMEI, S-off, update supported

Posted on by

06.04.2012  RIFF JTAG – HTC Flyer (PG41100) Unbrick, Unlock, IMEI, S-off, update supported

Repairing bricked HTC Flyer (PG41100) is easy with the RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected. Please note, battery presense is required.
Some (or all) revisions of HTC Flyer boards have JTAG interface disabled (that is enable MARM JTAG Fuse is blown in the MSM8255 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the DBL loader, so writing to DBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into DBL zone and will respond with success code as if flashing succeeded. In this way DBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except DBL area) and will re-write PDA’s SPL to 1.11.0003 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PG4110000’.
There is option to reflash android BOOT and RECOVERY zones. Recovery zone is flashed with ClockworkMod Recovery 4.0.1.4. In addition, you can set S-OFF (unlock HBOOT so you will be able to flash any ROM) by clicking “Make S-OFF” checkbox in the resurrector settings.
Sometimes (for example after rooting attempts) phone has a modified DBL loader (which may not accept official HTC boot files). To restore phone functionality you need to reflash DBL loader. There is option to reflash DBL code (DBL area will be temporary unlocked for reflashing). But please note, reflashing DBL area is very dangerous, since in case flashing stops in the middle, you will have briked phone with permanently disabled JTAG interface.
Please note, if your phone has the DBL loader damaged and MCU has JTAG FUSE blown then there is no way to resurrect your phone via JTAG interface.

To resurrect HTC Flyer:

  •  Solder JTAG cable to HTC Flyer JTAG pads;
  •  Insert battery and connect USB Data cable;
  •  Make sure HTC Flyer is selected in the list of models;
  •  If you use only battery, press Power On key;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods. You can use CWM recovery to flash any ZIP file – for this during resurrection add BOOT & RECOVERY zones to be resurrected too.
.

RIFF JTAG – STB Orton 4100C Unbrick supported

Posted on by

06.04.2012    RIFF JTAG – STB Orton 4100C Unbrick supported

Repairing bricked Orton 4100C is easy with the RIFF Box. Receiver is based on the ALI M3329C processor. Receiver is powered on when power plug is attached. If connection process stops at “Establish communication with the phone…” just reset the receiver’s power.
Current resurrector contains Boot, Firmware and Data zones which in total is complete full connects for 2Mb SPI serial memory chip.
Please note, to enable JTAG you have to make sure the JP1 jumper on board is not shorted. Sometimes you may need to disconnect front LED panel interface cable from the board (13-pin connector). After resurrection do not forget to solder the resistor back or shortcut JP1 jumper.
To resurrect Orton 4100C:

  •  Solder JTAG cable to Orton 4100C JTAG pads;
  •  Make sure Orton 4100C is selected in the list of models;
  •  Connect power;
  •  Click Resurrect button;
  •  Choose which areas to flash;
  •  Wait till software signals a successful operation completion;
  •  De-solder JTAG wires;

Now receiver is in bootable condition, that is, even if it does not start up normally you can flash it via UART using known flashing methods. Or you can do resurrection checking full clone resurrect option – this will re-write all flash memory contents.
.

RIFF JTAG – STB EuroSky ES-4100 Unbrick supported

Posted on by

06.04.2012   RIFF JTAG – STB EuroSky ES-4100 Unbrick supported

Repairing bricked EuroSky ES-4100 is easy with the RIFF Box. Receiver is based on the ALI M3329C processor. Receiver is powered on when power plug is attached. If connection process stops at “Establish communication with the phone…” just reset the receiver’s power.
Current resurrector contains Boot, Firmware and Data zones which in total is complete full connects for 2Mb SPI serial memory chip.
Please note, to enable JTAG you have to make sure the JP1 jumper on board is not shorted, desolder resistor R65. Sometimes you may need to disconnect front LED panel interface cable from the board (13-pin connector). After resurrection do not forget either to solder the resistor back or shortcut JP1 jumper.

To resurrect EuroSky ES-4100:

  •  Solder JTAG cable to EuroSky ES-4100 JTAG pads;
  •  Make sure EuroSky ES-4100 is selected in the list of models;
  •  Connect power;
  •  Click Resurrect button;
  •  Choose which areas to flash;
  •  Wait till software signals a successful operation completion;
  •  De-solder JTAG wires;

Now STB is in bootable condition, that is, even if it does not start up normally you can flash it via UART using known flashing methods. Or you can do resurrection checking full clone resurrect option – this will re-write all flash memory contents.
.

RIFF JTAG – Lynksis Router LinkSys WRT54G unbrick supported

Posted on by

06.04.2012 RIFF JTAG – Lynksis Router LinkSys WRT54G unbrick supported
Repairing bricked LinkSys WRT54GL is easy with the RIFF Box. Router is powered on when power plug is attached. If connection process stops at “Establish communication with the phone…” just reset router’s power.
Current resurrector contains Boot, Configuration and Firmware zones for memory chip with ID 0x00C2/0x22A8

To resurrect LinkSys WRT54GL:

  •  Solder JTAG cable to LinkSys WRT54GL JTAG pads;
  •  Insert USB Data cable into board and PC;
  •  Make sure LinkSys WRT54GL is selected in the list of models;
  •  Click Resurrect button;
  •  Choose which areas to flash;
  •  Wait till software signals a successful operation completion;
  •  De-solder JTAG wires;

Now router is in bootable condition, that is, even if it does not start up normally you can flash it via UART using known flashing methods. Or you can do resurrection checking full clone resurrect option – this will re-write all flash memory contents.
.