Please HELP!
Where is JTAG Wizard testpoints.
Thanks in advanece
Kiss my ass! (its a joke ... i am happy in the moment ... have a very interesting hit about JTAG and G3 and G4 Chips)
http://www.m-systems.com/NR/rdonlyr...MigrationGuideDOC_G4_1Gb_to_H3_1Gb_Rev0.2.pdf
Desolder the DOC from a damage device ... try to found the right pins!
If some on give me a Wizard PBC i can try to found the right Pins! Prophet too!
There is way to revive damaged device whitout desolder flash chip...
Just use TDO,TDI...ETC. testpoins and little software for programig device usig Jtag module.
TO ALL!
Give me more information where is right testpoint in wizard PCB.
Thanks in advance!
Without Board ... or ... Service Manuel ... you can find the right Pins.
Hello to all
I've read the pdf about DOC chip mSystems and i found that there are 4 pin signals for jtag interface:
TDI - Test Data In (pin P1 on DOC chip)
TDO - Test Data Out (pin M1 on DOC chip)
TMS - Test Mode Select (pin L1 on DOC chip)
TCK - Test Clock (pin N1 on DOC chip)
This pins come from the CPU to the DOC chip. We have to find a way to find the proper traces to the TEST POINTS. Maybe with a broken Wizard.
Check out the pdf.
http://www.m-systems.com/NR/rdonlyr...MigrationGuideDOC_G4_1Gb_to_H3_1Gb_Rev0.2.pdf
there are also another 4 signals for complete the interface (i think for the OMAP850 cpu).
TRST - Test Reset
GND - Ground
VCC - Power
Let's think together..maybe we find a sollution to save us all (PS i have a G3 Wizard, this make me feel little lucky)
Good luck.
The JTAG "Interface" itself is pretty easy to build...it is about a few resistors a LPT connector (like those found to printer cables) and...probably the hard to find is software.
for references:
http://wiki.xda-developers.com/index.php?pagename=Universal_JTAG/
http://openwince.sourceforge.net/jtag/iPAQ-3600/
http://www.handhelds.org/projects/h3800.html/
http://www.zingo.org/handheld/
http://www.gert-menke.de/jtag-howto/
http://jtag-arm9.sourceforge.net/hardware.html/
http://www.mnementh.co.uk/eseries/debricking.html/
can you explain more about this i need the ****ing points for my dead g4 wizard
bubu782001 said:
I've read the pdf about DOC chip mSystems and i found that there are 4 pin signals for jtag interface:
there are also another 4 signals for complete the interface (i think for the OMAP850 cpu).
The JTAG "Interface" itself is pretty easy to build...it is about a few resistors a LPT connector (like those found to printer cables) and...probably the hard to find is software.
Click to expand...
Click to collapse
We know that ... BUT ... without disassembly a board ... you doesnt know the right points! This are FPGA ICs. No PINs like normal ICs. I have repair Mini Disk and CD Players for a long time ago. But i doesnt get a not broken board for less bugs.
ICs Manuel are easy to found with google :->
well my friend do you tellme how can i turn on again my fuking wizard or i buy a motherboard i cant send you my mother board
jup i know -___- i lock every 1 week on ebay to found some cheap damage units but more then 80€ i doesnt pay!
well can you explain me how i made the correction for my wizard over my board coz i need repair my phone and no money enought to but another one or a mother board
londere said:
well can you explain me how i made the correction for my wizard over my board coz i need repair my phone and no money enought to but another one or a mother board
Click to expand...
Click to collapse
ok ... you are funny!
how to develop JTAG ...
desolder your g4 doc ... look how point is the right ... public this points and hop some guy are crazy enough to disassembly his working wizard g4 and read over jtag the doc ... he send his rom image to you and you rewrite it after you solder the doc on his right place ... main problem are the soldering mashine ... the last FPGA solder mashine i have see and work with it has cost 10000€ ... :->
if you havent this mashine ... or you doesnt know any guys in a board level repair center ... forget it! desolder the doc is easy"
So If I Dont Have The Machine I Cant Do Any Thing??
so is it ... to solder it on the right place without burning the ic to death is very .... VVEEERRRRRYYYY ... extreamly high end ****ing NASA tech :-D
mmmm damm i will buy a mb if i can do it do you buy a mother board for wizard??
first i buy a prophet ... then its possible i do the same for wizard or any other qtek.
do you do the work??? or what explain more
i want try :-> i will test a bigger doc ic with more store for creapy experiments like speed up?? more store?? i dont know ... i only wnat try!
possible its not enough to flash only the doc ... sometimes infos like ipl is stored in a other component??
mmmm well i tink about it i need a refrub or a old or a wizard
bubu782001 said:
I've read the pdf about DOC chip mSystems and i found that there are 4 pin signals for jtag interface:
TDI - Test Data In (pin P1 on DOC chip)
TDO - Test Data Out (pin M1 on DOC chip)
TMS - Test Mode Select (pin L1 on DOC chip)
TCK - Test Clock (pin N1 on DOC chip)
This pins come from the CPU to the DOC chip. We have to find a way to find the proper traces to the TEST POINTS. Maybe with a broken Wizard.
Click to expand...
Click to collapse
This wrong points - on DOC no JTAG point -on processor only.
You do not understand about jtag.
http://forum.xda-developers.com/showthread.php?t=306274&page=3
Jtag points
You're right. I'm affraid that these Jtag points from DOC chip are NOT common with JTAG test points in CPU.
Question, a datasheet for OMAP850 ? something?? for developers?
Related
im a student from asia.i have dopod 838 pro,i bought it as second hand unit,initially it was great but after one month,give error report when i try to use camera;it is unableto start camera,unable to initialize camera,i did everything i can do,i flashed it using several roms,now i have wm6.5 rom.then i desided to open the phone for check hardware issues,i see near the back camera and flasher port there is oxidised area i tried to clean them with usint contact cleaner,then very small piece of mainboard circuit detached,i think probably it is resister or transister,i was hopeless ,i know i cant repair it.if any one have solution pls help me,i cant make video calls also,r there any trick can i make video call using front camera,if not where can i take mother board,what abt prices,if anyone like to sell or donate there spare mother board or can give advice please,let me my no is +94715319206,[email protected] tx lot pls save me, my phones all other functions work well.
Hi All
We have re-lived a totally dead qtek 9100 via J-tag following the pda.ru turotal, however the configuration of H-JTAG (from PDA.RU) have a some errors.
I glad to recover my QTEK
The Procedure that i have follow is:
1. Make a Wiggler Jtag interface with this circuit that have a 1 dollar less cost to made.
2. Conect the proper Jtag Pins from de wiggler to the Qtek board
3. Power Up the Wiggler and the Qtek Board via USB Charger and proper connection of the battery.
3. Run H-jtag with the proper configuration
4. Run No-ICE acording to the PDA.RU tutorial
5. Reflash the IPL/SPl with a RUU
However i have troubles to upload the screenshots of my configuration, if anyone has interested, mi msn is [email protected]
Thats All, enjoy your QTEK
Configuration Screenshots For recover Wizard
At this point i attach the proper files to recover the wizard
Another Screen Shots
I upload directly the screenshots and ths sspl imageflie
Upload Another PICS
Ths Wiggler, and NOICE
Will try ASAP on my second deadwiz
GOD BLESS YOU
G4 rom
Please i need to know where to get the rom used for this solution. I was able to use jtag to boot to bootloader mode ..now i think i need a good rom to flash it with
justx24
Please, could you just show me what a Jtag wiggler for Qtek 9100 looks like?
I've seen many models on eBay, but I just can't figure out which one to buy...
For my solution, I make a Wiggler accordingto the scheme (see my attachements), I have electronic knowledge, and I make my own circuit. In your case I can't help you to chose a commercial circuit, because i don't have tested none.
Best regards
Hey!
My Wiz iss bricked, too, so I'm searching for a solution to recover it again.
Can somebody tell me, if it's possible to use this Wiggler to connect via J-Tag? I mean, of course I'd have to connect the pins to the Wizard with this one. But that would be it, right? Otherwise i'd try to build my own one.
Btw, are there adapters which work via USB? I don't have a parallel-port on my pc....
Thanks for help
Matzinger
I did a quick look on the datasheet you mentioned and cant find the pinout of the LPT side (Needed to connect to H-JTAG).
On the manual of the H-JTAG (http://www.hjtag.com/download/USER MANUAL (EN).pdf) are the compatible devices listed. The JTAG interface is a standard interface, I think all of them must work. If you can get the wires successfully on the wizard i'm shure you can make the circuit mentioned as attachment or on the manual (page 27).
btw. songokumanjimaru thanks for the tutorial, my wizard lives again. I was to lazy to go to a shop for the HC74244 and connected the wires with only some resistors, but its not recommended if you don't know what your doing. The LPT-port is very sensitive.
Hey,
sorry for answer so late.
Well, I made my own wiggler, even with the 74hc244, but j-tag won't connect to the Wiz. It always says that it cant find a device and i should connect it. I really don't know where i made a mistake...man...
Maybe i should try your version with only the resistors and no 74hc244....How does that work exactly? just switch 100 Ohm resistors between the LTP and the Wiz?
btw. how do i know that the wiz is on?
Greets
Matzinger
Hey,
ok, update:
now i get a connection to jtag, but it always says that it is an unknown target. and he shows me always different types of adresses. sonetimes it still tells me that it doesn't find a target anyway.
I've no idea....
Greets
Matzinger
Hi,
As you can see below in this datasheet the 74HC244 has 8 inputs and 8 output:
http://www.datasheetcatalog.com/datasheets_pdf/7/4/H/C/74HC244.shtml
ex:
This is another schema for Satellite STB :
http://xsat.rtfm.be/hard/jtag/jmixte.gif
You can compare both of them.
Hardware :
http://worldsat.rtfm.be/contenus.php?id=285
IMPORTANT : Some JTAG sofwares don't drive the JTAG interface to
the same pinout !It means that the pin A1 A2 A3 ...are driven by the software
and must fit the TDI, TDO ,RST ... signals.
Also Check the power supply : 3.3V.
the right software with the right hardware is required to flash the Qtek.
http://www.hjtag.com/
Bye.
Fanch56
Thanks for help.
I'm sure, i connected the pins right.
My problem could be that the Wiz doesn't turn on, when pressing the Power and Camera Button. I measured the current between the wiz and the battery and there is no change when holding the buttons. its around 0.01mA all the time. onyl when i press the small soft-reset button with a pen it goes down to zero. When I disengage it, it goes up to 0.01mA again.
So i think that's my problem and now the wiggler itself.
But how to turn the Wiz on???
Greets
Matzinger
Hi ,
Is the power supply on the 74HC244 correct ?
check the Vcc+Gnd pin with a digital voltmeter.
Are the grounds pin connected together ?
Which software do you use to drive the JTAG hardware ?
thanks
Fanch.
Hi again !
I'm sorry to tell you that my jtag chipset is a:
74HCT244 and not a 74HC244
the difference between HC and HCT is important.
HC is faster than HCT but
HCT = compatibility reason between signals for nmos & cmos or TTL and cmos
the threshold for 74HCTxxx is at 1.4v
power supply must be 5v.
the threshold for 74HCxxx is 2.5v
power supply must be 5v
It COULD be the reason of your problem.
If so buy a 74HCT244.
This small detail could be important , I met this kind of problem
on a frequency generator I build one year ago.I just replaced the 74HC by
a 74HCT and everything was ok.
Good luck.
Fanch
hi
i get a connection to jtag, but it always says that its unable to find target and show 0x00000000 and when i change the pin it show 0xffffffff
rascalmike said:
hi
i get a connection to jtag, but it always says that its unable to find target and show 0x00000000 and when i change the pin it show 0xffffffff
Click to expand...
Click to collapse
0x00000000 means you only read zeros (data line to GND) and 0xffffffff means ones (data line to Vcc). So I don´t think you have any JTAG readout. One of the problems I met, was the low battery of the wizzard, I charged it manual.
songokumanjimaru said:
3. Power Up the Wiggler and the Qtek Board via USB Charger and proper connection of the battery.
Click to expand...
Click to collapse
What exactly voltage you used to power wiggler 3.3 or 5 volts?
Hey.. I have some problems with flashing a ROM containing SPL.. Could anyone help me? I flashed all kinds of SPL's found on This forum, even on Google, but non of them seems to be working.. After flashing, I can't turn on my device, it only powers on with with JTag.. Any ideas? Thanx
Hello,
I'm new here and I wanna get my 8GB SDHC card working in my SDA II.
I already tired several ROMs and several SDHC drivers for the Hurricane, f. e. hxxp://forum.xda-developers.com/showthread.php?t=351586 or hxxp://forum.xda-developers.com/showthread.php?t=344338 , but at anyway none did work after all
So I have a SDA II with inside a microSD 8GB Kensington with miniSD Adapter and atm hxxp://forum.xda-developers.com/showthread.php?t=475286 that ROM (WM 6.1) patched with some SDHC drivers but my SDHC card is not recognised by the phone...
Anyone got an idea?
Thanks in advance
Keyno(t)
Ouw and btw: is there any ROM for this phone with WM5 or WM6.5 in English? I only found the 6.5 Chinese version... or how to change it to English?
I doubt you will find anything for SDHC on this device. Only for Tornado - after a long wait - someone found out that OMAP850 drivers for the Startrk could also be used for the Tornado.
I don't know how the Startrk drivers were created, but for sure there are HTC devices using OMAP 850 which have SDHC support on WM6. So it was sure that the Tornado can support it as well from HW point of view.
If you do not want to create a low level driver for OMAP 750 yourself, you could invest in finding a device with OMAP 750 (like the Hurricane uses) that has WM6 and SDHC support. It is however not likely you find one :-(
If you like your Hurricane - don't worry. You can replace the PBA inside the Hurricane with a Tornado PBA without any other change to the device. They are 1:1 compatible (mechanically: identical size in any regard and electrically: LCD, keyboard, Camera).
So if you find a broken Tornado (no matter how worn or cracked) where the PBA is still alive - get it and give it a new live in your housing of the Hurricane.
Hey tobbbie!
Thanks very much for your reply! Und ach ja, ich bin auch Deutscher :-D
Hmm soooo, it would be very hard to find/create a driver for the Hurricane, right? But why are there topics with drivers made for the hurricane?
And otherwhise I'd have to open the phone and change the PBA with a Tornado one, right? But can I take that PBA out so easily? I won't have to solder or anything like that?
Again, thanks for your help!
Keyno(t)
There are no Hurricane specific driver threads. It is a re-use of generic WM 6 variant drivers on top of the low-level drivers.
And yes - if you manage to open the case (be careful when opening not to rip away the flex cables for camera and keyboard) then there is no soldering required.
Look up the service manuals for either Tornado or Hurricane (even Typhoon will do) to get an idea which screws to remove and how to remove the antenna cover. Challenge is to swap the LCD if you need to - some delicate handling of the flex connector as well there.
No impossible mission, but you need some mechanical skills and a rainy day without time pressure if you do it the first time.
Depending on your budget the cheapest solution may be to wait for a good opportunity on ebay to buy a used Tornado - they get sold for 20+ euros. If you do not need WLAN, then go for the SPV C600 (France) or the O2 XDA phone - but these are rare species these times.
Hmm at anyway I don't find anything in ebay I could need...
So you also said it could be possible to write my own driver? Is that true? And you know any How-To's that could help me a bit by this?
And really thank you for your help!
Keyno(t)
Finding this on ebay will require a few weeks - so be patient and keep on looking. How much would you want to spend for a Tornado (XDA phone - no WIFI, or the 8310 with Wifi)?
Regarding the drivers: Seems like you did not get the irony in my comments Writing low level drivers is something very special. It is virtually impossible to write a driver on your own - so forget this option!
Ouw okay, and yes I didn't exactly understand it
So I have only one choice
I think it shouldn't be more than 20€, max. 30€.
And could I really have also WiFi in my Hurricane, or why you ask all the time about WiFi?
I don't really need it, but if the price just change about 5-10€ I'd rather buy one with WiFi
And again: thank you very much for your help!
Greetings
Keyno(t)
Did you get it? If you replace the PBA - then you may still have the case of a Hurricane (despite in the US or China the same case carries a Tornado) - but the device is a Tornado then - bye bye Hurricane.
The Tornado was built in two flavours with and without Wifi - more common in Germany was "without" as the O2 XDA phone has no WLAN. The other device is the Qtek 8310 (also in silver as Vodafone VDA 2) which has WLAN. It will only rarely happen that broken devices are sold (people just put them in the waste or return them to the shop for recycling) - but keep on watching.
If you get a fully working Tornado I would not bother to replace the PBA but use it as it is - unless you disassemble it for fun and learning.
Okay thank you very much for all your help!
Now I got it
Greetings
Keyno(t)
...just to close the query: It IS (!) possible to have SDHC in the Hurricane working. read about it in my related kitchen thread (post 4) http://forum.xda-developers.com/showthread.php?t=1553132
Kitchen is not updated yet - but who cares anyway...
Does anyone could guide me into how could I access HD2's QSD8050 chipset. Is it possible with tools provided by qualcomm
developer.brewmp.com/tools/sdk (sorry but I cant post links)?
Or is the hardware modified too much...
I know it is broad subject but if someone could just guide my to some forums/articles/howtos?
I was going to buy some Atmel AVR microcontroller but why bother when I have something much more "interesting"
would a jtag box be what you are after?
Looks OK, do not have time at the moment to investigate... do I need extra hardware for that?
well the box itself, and then a jig to hold your mainboard. the boxes are around 100 dollars +, whilst the jig is about 10/15 dollars.
It requires dissasembling the phone...
samsamuel said:
It requires dissasembling the phone...
Click to expand...
Click to collapse
Ohhh... I was hoping it will be somehow possible through USB itself (say when I'm in a boot loader after Task29 - so I can then upload my "HEX").
Anyway... thanks for your help!
Hi guys, check that dongle happy bootloader swap prepare yourself ATF ,THAT DONGLE http://www.fonefunshop.co.uk/cable_...Test_Point_Cable_Set_For_ATF_(Pre-Order).html and get yourself sum custom rom
cdbase said:
Hi guys, check that dongle happy bootloader swap prepare yourself ATF ,THAT DONGLE http://www.fonefunshop.co.uk/cable_...Test_Point_Cable_Set_For_ATF_(Pre-Order).html and get yourself sum custom rom
Click to expand...
Click to collapse
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
lordmaxey said:
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
Click to expand...
Click to collapse
you can buy it online from gsmsp.com
Great Job From GPGIndustries. ..................
Br
HASSANJINJA
UGANDA
Am i understood wright ? This device can unlock all those models and then we can flash with every custom rom , and to install any app ?
Stefan Caromov said:
Am i understood wright ? This device can unlock all those models and then we can flash with every custom rom , and to install any app ?
Click to expand...
Click to collapse
Hi there,
you need atf box for unlocking your device and for replacing dload with qualcomm bootloader.
But you needed to solder a modified rj-45 cable to your device's mainboard, which is very difficult.
With the cable mentioned in this thread, you don't have do the soldering, as this cable can "connect" to the parts you usually have to solder the wires
So, you still need ATF Box + This cable. The good thing: you only have to disassemble your phone and connect it
No more soldering!
Btw, i ordered the cable yesterday, and inform you when tested
Stefan Caromov said:
Am i understood wright ? This device can unlock all those models and then we can flash with every custom rom , and to install any app ?
Click to expand...
Click to collapse
yes ,if you have ATF BOX , you have to point ur finger on motherboard exactly where your testpoints are to get a proper connection
it works just fine then i just swaped my osbl to qualcom yesterday
Lordmaxey -NICE ROM (FUNKY) ,I've found couple bugs but overall it's just great , video usb out should fit it needs at all
now I'm going to try cook my own )
Unfortunately it doesn't have pins for VCC and VCCQ, and so can't be used for the card reader hack, only with ATF. However, the CLK-to-GND trick should still work with them.
cdbase said:
yes ,if you have ATF BOX , you have to point ur finger on motherboard exactly where your testpoints are to get a proper connection
it works just fine then i just swaped my osbl to qualcom yesterday
Lordmaxey -NICE ROM (FUNKY) ,I've found couple bugs but overall it's just great , video usb out should fit it needs at all
now I'm going to try cook my own )
Click to expand...
Click to collapse
Thanks
Could you please post the bugs you've found in my rom thread? Would be great, as i can only fix them, when i know them
.NetRolller 3D said:
Unfortunately it doesn't have pins for VCC and VCCQ, and so can't be used for the card reader hack, only with ATF. However, the CLK-to-GND trick should still work with them.
Click to expand...
Click to collapse
Net,
Why dont you open your own thread to explain your hacks?
Im very intrested in your concept-to-proof methods.
best,
pedro
It's being discussed in the "dev-only" thread.
If you do not have the ATF BOX you can not use an emulator? On Symbian (5230, 5800, etc.) I used JAF JAF PKEY emulator with GM .. You can not do such a thing? Sorry if I said bull****!
The ATF Box is not just a hardware dongle - it's an FPGA device that is used for reading/writing the eMMC chip. Also, it doesn't simply implement the MMC protocol as a card reader would - it actually tampers with the MMC command/data messages sent by the phone's CPU, while the PCB is powered on. (This is why it doesn't need access to the VCC and VCCQ pins.)
Unless you have a matching FPGA that you can program with the ATF logic, you cannot use the Lumia TP functions of the ATF software without a genuine box.
Cyclone Box is slightly easier to emulate, as it uses an AVR microcontroller, rather than an FPGA, so it may be possible to program an Arduino for the job - however, the Cyclone software still has major problems with its eMMC implementation (specifically, it tries to use SPI mode, instead of 1-bit MMC, but SPI is only supported on removable MMC cards, not eMMC). Also, Cyclone Box requires VCC and VCCQ access, since its eMMC mode is simply an SD/MMC card reader implemented in MCU - in fact, it can connect to normal SD/MMC cards as well as eMMC chips.
Sorry, wrong thread.
lordmaxey said:
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
Click to expand...
Click to collapse
same for me i couldn't set a proper connection for 3h a phone even with a microscope
you can also try polish reseller multi-com
lordmaxey said:
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
Click to expand...
Click to collapse
fonefunshop is reliable, and fast. Had this delivered at my door after 3 days.
I can only recommend buying from them.
thx for your replies.
Already have the cables. Fonefunshop was very fast delivery.
For those who used the jig, do you guys still needed to remove the shield?
Yes you need to remove Shield but it's not need to remove by any iron. i can be done by simply tweezer
Br
Faisal_Computer
Interesting when someone else adds support for these cables. (To a cheap box (Best infinity / MXbox / Fenix Key etc etc).
ATF is not really worth it if you are not in the gsm business.
(Maybe I will buy an ATF when my dev unlock runs out if I have to I don't like paying money to phone shops unless they actually do something that is a reasonably skilled job - problem I have is none of them are willing to do any of them near me (And there is tons of them eyesores on the high street).