Related
Greetings all,
Just off of the success of fixing the frustration of the broken audio adapter after upgrading to a new ROM problem, I think that a new and even more valeuable project is at hand: UnBricking these that are really bricked.
Ok, here is my thought and experience in as short a summery as I can give. Almost ALL consumber products these days evolved from general purpose processors with outboard EPROM or EEPROM, RAM, and peripheral components. As the devices develope, custom chipsets come into play to reduce size, component count, weight, power consumption, cost, etc, while upping the reliability, battery life, features, speed, and just the joy factor of these things. Look at them as they get better and better, just the transition from 6th gen 6700 to the 7th gen 6800 how much better it works. This goes for everything from the PDA/Smartphones, to the refrigerator, to satellite receivers, everything. A problem was that as more stuff gets crammed onto a smaller number of chips, they needed a way to initially configure these things so they would not come out as dumb boxes. Enter the JTAG interface. For those who do not know the acronym, look it up, but basically it is a standard interface and protocol to communicate with dedicated microprocessors and program them, without having to exactly speak the language of each model and brand. When you get a device off the production line at the end it goes to a workstation that has a JTAG interface jig and a PC configured to load the initial stuff, like the bootloader and basic stuff needed to make it what it is. I have been working with stuff for many years now and have JTAGGed satellite receivers, cell phones, air cards, cars, yes even cars use it, and a standard set of software talks to it all. The only difference is the connector or jig that is used and the BIN file you load. This is usually createable from the bootloader file that we usually load up to the USB port with the RUU, but without a bootloader in it already we can not do anything with it, so we need to JTAG like OLIPRO2.40 straight to the memory address range it needs to go to. JTAG software will, thru the interface, establish communication with, communicate, identify, and program the flash directly, heck you can put the entire ROM on it if you want. I do this all the time with other devices, so I know it is possible.
If you have a 6800 that is bricked thru software error and NOT broken by any crazy stuff done to it afterwards, then JTAGging WILL fix it. I propose to start the JTAG project for the 6800 series HTC devices, as I see an ever increasing number of these getting bricked it needs to be done. The ONLY way one should be touched inside is if it is known to be bricked by software error that you can not get back out of and thats all that is wrong with it, and very important that there is no possibility of returning it to your carrier under warranty for repair. HTC would do exactly what I propose and send it back fixed but probably charge a bunch. I have not killed mine, and do not intend to do so just for this project, but if anyone has one that is just a paperweight and meets the above criteria and has nothing to loose and plenty of time (cause my paying job takes priority) I would be happy to take this on and find, probe, and JTAG your device, fix it and provide before, during, and afterwards logging of what is done. I would then prepare a package of instructions and software on how everyone else can do it as well.
Anyone got a really dead one that they would care to try ???????
I hope I'm not on the list. I haven't seen JTAG since I went to the DD-WRT forums.
Sounds like a great project for those in need.
Mmm, JTAG... DD-WRT and old CNC machines..
I'm curious about this, how do you interface with the phone for JTAG? I just skimmed the article [dont have my glasses] but would love to know.
JTAG fixed my Hermes
JTAG does work - it brought my bricked hermes back to life!
morganlowe said:
Mmm, JTAG... DD-WRT and old CNC machines..
I'm curious about this, how do you interface with the phone for JTAG? I just skimmed the article [dont have my glasses] but would love to know.
Click to expand...
Click to collapse
You have to find the 4 or 5 connection points needed and determine memory layout. The problem with his idea here is the cpu in the 6800 is SPECIAL. No public datasheets, and it's proprietary as heck. Good luck finding the jtag points for the kaiser or 6800 or any msm7000 series device using the msm as the cpu.
Shadowmite said:
You have to find the 4 or 5 connection points needed and determine memory layout. The problem with his idea here is the cpu in the 6800 is SPECIAL. No public datasheets, and it's proprietary as heck. Good luck finding the jtag points for the kaiser or 6800 or any msm7000 series device using the msm as the cpu.
Click to expand...
Click to collapse
I was thinking the same thing, there's not much on this chip out there... I have JTAG stuff for old school EPROMs and such, even got a cable for Linksys routers... I would worry about digging into my phone though. I know with Sprint you can add insurance at anytime, but you must wait 30 days to make a first claim... I got some old Treo 600s for Sprint I could donate to someone needing a phone as a temp.
Shadowmite said:
You have to find the 4 or 5 connection points needed and determine memory layout. The problem with his idea here is the cpu in the 6800 is SPECIAL. No public datasheets, and it's proprietary as heck. Good luck finding the jtag points for the kaiser or 6800 or any msm7000 series device using the msm as the cpu.
Click to expand...
Click to collapse
And the great Shadowmite emerges from the......shadows?
Long time no see! (TC)
JTAG prober
Shadowmite said:
You have to find the 4 or 5 connection points needed and determine memory layout. The problem with his idea here is the cpu in the 6800 is SPECIAL. No public datasheets, and it's proprietary as heck. Good luck finding the jtag points for the kaiser or 6800 or any msm7000 series device using the msm as the cpu.
Click to expand...
Click to collapse
JTAG points are usually together in a pattern and not scattered, and JTAG prober software is wonderful for getting the pinout by analyzing the signals it sees, JKEYS is good as is QXDM (Qualcomm Extensible Diagnostic Monitor) is what I used for doing the same thing with a Sierra Wireless 580 card that uses the MSM5500. The card was corrupted during a flash update and I was able to JTAG and get it back and use it as a test card to this day. QXDM even can unlock the protected memory and change things you are not allowed to change (ESN), it is pretty much all powerfull as far as the Qualcomm chips go. By the way, before Nortel I worked for Qualcomm and still have access so I was reeeeeeeal happy to see HTC start useing this chipset ;-)
You go ahead and try then, let us know if you succeed.
Will do when,,,,,,
Shadowmite said:
You go ahead and try then, let us know if you succeed.
Click to expand...
Click to collapse
When a unit becomes available I will do it ;-)
bump.
Surely there must be one person out the the hundreds with "bricked" titans that would donate it to madman. I am sure he will give it back when he is finished with it.
madman34: I think you may have found a winner.
Thanks for the referal
hindjew1 said:
madman34: I think you may have found a winner.
Click to expand...
Click to collapse
Thanks, I went there and asked him to come here and have a look. I am thinking that he does have a possible candidate, but just for grins I just pulled my battery and plugged in my wall pack and right away get the red light, but with my laptop I do get his 'data device' and red light so I am open to the possibility that there might be a fusible link bad in his if it is not a software problem. Either way, if it is useless to him I will be happy to look at it.
man i bricked the ecu on my subaru once... i had to send it to the open source ecu tool dev to jtag it... good times
drag to kill your car
bmorrisj said:
man i bricked the ecu on my subaru once... i had to send it to the open source ecu tool dev to jtag it... good times
Click to expand...
Click to collapse
That would be a bummer as you could not drive to get the fix. I started by writing code for the TMS7000 processors in the old VC2, then my Acura in 1988, but then they stopped useing PROMS and went to JTAG, really got me going.
No takers so far, and mine still works
Well nobody has come forward with a victim,,,,,hmmmmm,,,,uuuuhhhhh,,,,,unit to try ;-) and mine works still so we wait.
madman34, one one unit we have so far that has died did not entirely die. It would appear if the spl gets wiped out on a msm7xxx series device using comm core as cpu it has a failsafe mode if the oemsbl/qcsbl are still present. The device goes into download mode on boot and sits there.
Since you stated you worked for qualcomm, can you shed any light on this and how we might possibly be able to write nand from download mode? Or get back to debug mode instead?
Shadowmite said:
madman34, one one unit we have so far that has died did not entirely die. It would appear if the spl gets wiped out on a msm7xxx series device using comm core as cpu it has a failsafe mode if the oemsbl/qcsbl are still present. The device goes into download mode on boot and sits there.
Since you stated you worked for qualcomm, can you shed any light on this and how we might possibly be able to write nand from download mode? Or get back to debug mode instead?
Click to expand...
Click to collapse
I worked for them before this series came out, but I will get up with some of my old friends there and see if I can get more info.
my mogul is stuck on the ***** ass sprint screen after a tried upgrade but im in Houston
Hi All
We have re-lived a totally dead qtek 9100 via J-tag following the pda.ru turotal, however the configuration of H-JTAG (from PDA.RU) have a some errors.
I glad to recover my QTEK
The Procedure that i have follow is:
1. Make a Wiggler Jtag interface with this circuit that have a 1 dollar less cost to made.
2. Conect the proper Jtag Pins from de wiggler to the Qtek board
3. Power Up the Wiggler and the Qtek Board via USB Charger and proper connection of the battery.
3. Run H-jtag with the proper configuration
4. Run No-ICE acording to the PDA.RU tutorial
5. Reflash the IPL/SPl with a RUU
However i have troubles to upload the screenshots of my configuration, if anyone has interested, mi msn is [email protected]
Thats All, enjoy your QTEK
Configuration Screenshots For recover Wizard
At this point i attach the proper files to recover the wizard
Another Screen Shots
I upload directly the screenshots and ths sspl imageflie
Upload Another PICS
Ths Wiggler, and NOICE
Will try ASAP on my second deadwiz
GOD BLESS YOU
G4 rom
Please i need to know where to get the rom used for this solution. I was able to use jtag to boot to bootloader mode ..now i think i need a good rom to flash it with
justx24
Please, could you just show me what a Jtag wiggler for Qtek 9100 looks like?
I've seen many models on eBay, but I just can't figure out which one to buy...
For my solution, I make a Wiggler accordingto the scheme (see my attachements), I have electronic knowledge, and I make my own circuit. In your case I can't help you to chose a commercial circuit, because i don't have tested none.
Best regards
Hey!
My Wiz iss bricked, too, so I'm searching for a solution to recover it again.
Can somebody tell me, if it's possible to use this Wiggler to connect via J-Tag? I mean, of course I'd have to connect the pins to the Wizard with this one. But that would be it, right? Otherwise i'd try to build my own one.
Btw, are there adapters which work via USB? I don't have a parallel-port on my pc....
Thanks for help
Matzinger
I did a quick look on the datasheet you mentioned and cant find the pinout of the LPT side (Needed to connect to H-JTAG).
On the manual of the H-JTAG (http://www.hjtag.com/download/USER MANUAL (EN).pdf) are the compatible devices listed. The JTAG interface is a standard interface, I think all of them must work. If you can get the wires successfully on the wizard i'm shure you can make the circuit mentioned as attachment or on the manual (page 27).
btw. songokumanjimaru thanks for the tutorial, my wizard lives again. I was to lazy to go to a shop for the HC74244 and connected the wires with only some resistors, but its not recommended if you don't know what your doing. The LPT-port is very sensitive.
Hey,
sorry for answer so late.
Well, I made my own wiggler, even with the 74hc244, but j-tag won't connect to the Wiz. It always says that it cant find a device and i should connect it. I really don't know where i made a mistake...man...
Maybe i should try your version with only the resistors and no 74hc244....How does that work exactly? just switch 100 Ohm resistors between the LTP and the Wiz?
btw. how do i know that the wiz is on?
Greets
Matzinger
Hey,
ok, update:
now i get a connection to jtag, but it always says that it is an unknown target. and he shows me always different types of adresses. sonetimes it still tells me that it doesn't find a target anyway.
I've no idea....
Greets
Matzinger
Hi,
As you can see below in this datasheet the 74HC244 has 8 inputs and 8 output:
http://www.datasheetcatalog.com/datasheets_pdf/7/4/H/C/74HC244.shtml
ex:
This is another schema for Satellite STB :
http://xsat.rtfm.be/hard/jtag/jmixte.gif
You can compare both of them.
Hardware :
http://worldsat.rtfm.be/contenus.php?id=285
IMPORTANT : Some JTAG sofwares don't drive the JTAG interface to
the same pinout !It means that the pin A1 A2 A3 ...are driven by the software
and must fit the TDI, TDO ,RST ... signals.
Also Check the power supply : 3.3V.
the right software with the right hardware is required to flash the Qtek.
http://www.hjtag.com/
Bye.
Fanch56
Thanks for help.
I'm sure, i connected the pins right.
My problem could be that the Wiz doesn't turn on, when pressing the Power and Camera Button. I measured the current between the wiz and the battery and there is no change when holding the buttons. its around 0.01mA all the time. onyl when i press the small soft-reset button with a pen it goes down to zero. When I disengage it, it goes up to 0.01mA again.
So i think that's my problem and now the wiggler itself.
But how to turn the Wiz on???
Greets
Matzinger
Hi ,
Is the power supply on the 74HC244 correct ?
check the Vcc+Gnd pin with a digital voltmeter.
Are the grounds pin connected together ?
Which software do you use to drive the JTAG hardware ?
thanks
Fanch.
Hi again !
I'm sorry to tell you that my jtag chipset is a:
74HCT244 and not a 74HC244
the difference between HC and HCT is important.
HC is faster than HCT but
HCT = compatibility reason between signals for nmos & cmos or TTL and cmos
the threshold for 74HCTxxx is at 1.4v
power supply must be 5v.
the threshold for 74HCxxx is 2.5v
power supply must be 5v
It COULD be the reason of your problem.
If so buy a 74HCT244.
This small detail could be important , I met this kind of problem
on a frequency generator I build one year ago.I just replaced the 74HC by
a 74HCT and everything was ok.
Good luck.
Fanch
hi
i get a connection to jtag, but it always says that its unable to find target and show 0x00000000 and when i change the pin it show 0xffffffff
rascalmike said:
hi
i get a connection to jtag, but it always says that its unable to find target and show 0x00000000 and when i change the pin it show 0xffffffff
Click to expand...
Click to collapse
0x00000000 means you only read zeros (data line to GND) and 0xffffffff means ones (data line to Vcc). So I don´t think you have any JTAG readout. One of the problems I met, was the low battery of the wizzard, I charged it manual.
songokumanjimaru said:
3. Power Up the Wiggler and the Qtek Board via USB Charger and proper connection of the battery.
Click to expand...
Click to collapse
What exactly voltage you used to power wiggler 3.3 or 5 volts?
Hey.. I have some problems with flashing a ROM containing SPL.. Could anyone help me? I flashed all kinds of SPL's found on This forum, even on Google, but non of them seems to be working.. After flashing, I can't turn on my device, it only powers on with with JTag.. Any ideas? Thanx
Does anyone know of any USB Jig for galaxy tab to unbrick it?
Galaxy77 said:
Does anyone know of any USB Jig for galaxy tab to unbrick it?
Click to expand...
Click to collapse
Same question from me. I have the USB jig for the SG2 and wonder if it works and will reset the binary counter on the tab?
I have the Samsung TAB USB-adapter but I need an additional male USB-female micosub adapter to try the USB jig out, and before I do try to find one I wonder if someone has tried it?
Galaxy77 said:
Does anyone know of any USB Jig for galaxy tab to unbrick it?
Click to expand...
Click to collapse
Hey man, it's sad what happened to your tab, but it's getting annoying to see you make so many different posts revolving aroung the very same issue...
Just my thoughts dude...just ask how much is worth to repair it! Maybe the price is ok!!
Peace
sent from my CM7 nokia 3210
nilste said:
Same question from me. I have the USB jig for the SG2 and wonder if it works and will reset the binary counter on the tab?
I have the Samsung TAB USB-adapter but I need an additional male USB-female micosub adapter to try the USB jig out, and before I do try to find one I wonder if someone has tried it?
Click to expand...
Click to collapse
No, I have not tried it, please let me know how it goes if you can do it, thanks
Panos_dm said:
Hey man, it's sad what happened to your tab, but it's getting annoying to see you make so many different posts revolving aroung the very same issue...
Just my thoughts dude...just ask how much is worth to repair it! Maybe the price is ok!!
Peace
sent from my CM7 nokia 3210
Click to expand...
Click to collapse
Hey, well I would LOVE to have someone else repair it for me but I can't, I called samsung they wont take it because the unit is from USA, i can't send it to USA because I am not a US resident, I can't send it to Service Absolute (even using my own money) becuase they don't repair non-canadian units... So what can I do?
Flip it on Craigslist?
EDIT, nevermind, I misunderstood the question.
Great Question
Galaxy77 said:
Hey, well I would LOVE to have someone else repair it for me but I can't, I called samsung they wont take it because the unit is from USA, i can't send it to USA because I am not a US resident, I can't send it to Service Absolute (even using my own money) becuase they don't repair non-canadian units... So what can I do?
Click to expand...
Click to collapse
I was reading this thread and I have been looking for the same answer for my Note 10.1 2014 edition. USB Jig without seeing the tech explanation and drawing upon my own technical experience clears some memory locations in flash binary that hold values for tracking flashing, maybe the boot loader and some other values. If I could see or find the tech manuals I might get a better understanding. However, this USB Jig is a technician tool of convenience and necessity to gain access and repair electronic equipment. Basically, it shuns or shorts across two pins in the USB with a load (resistors) so it isn't out of control short and manages the amount of juice or some electricity to clear those registers and reset the electronic device safely. The real technical question are all Samsung electronic circuits in phones and tablets access the same way, or is there a different pin configuration to be used, or a different sequence of steps to prep or follow up with, or almost finally can't work as the USB doesn't access the same parts of the electronic circuit. Lastly, if an experiment is done to just go ahead and use the USB Jig. Will it be a harmless attempt or will using the USB jig damage the circuits in the device? The last question is a show stopper, Dirty Harry type of question. Did you get an answer yet by experiment or by someone passing on the answer from their experience. Someone knows this answer and I am going to have it. This is how open source, crowd sourcing works.
BTW you question is valid one as now that Samsung Tablets are all on USB and people are going to continue to want to experiment with ROMS and modifications. So this answer will need to be answered in the near future. Samsung benefits from their products ability to be hacked and modified as this one of the consumer draws to buy. However, now Samsung is gaining more and more commercial success they may attempt to limit this activity. The downside for Samsung is that they end of having to respond to experiments gone bad, bad business for them. So hence their service attention to the flash binary "got ya trap and take a penalty, warranty voided", to limit those activities.
Later
Doc
I purchased an Enco B046 Android-powered head unit for my car, and there are some things I'd love to be able to fix, if I could somehow acquire root access. Most importantly, the GPS functionality. Here's what I know about it:
1. It's a Telechips TCC8925
2. It only has one USB port (Female-A), and it appears to be Host-only. Hooking up a Male-A to Male-A cable between it and a PC, the PC doesn't detect anything on the other end. Hooking up an OTG cable between it and another Android device, the Enco B046 tries to mount the other Android as mass storage..
3. It's running ICS (4.0.4)
4. There's no pinout on the board for another USB port, nor any other pins that are giving +5vdc
5. It does have an SD slot and a card in it. It mounts and works fine.
It's relatively similar in size and form to this:
http://www.slatedroid.com/topic/36988-cx-01-cortex-a5/
Since I can't connect to it via USB and control it with ADB, that eliminates all of the ways to root the device that I have come across.
The most important thing that I need to do is to update the framework.jar, as it suffers from an incorrect GetSpeed function that throws off pretty much every GPS application. It's calculating my land speed at 1.852% of the actual speed. I have fixed the error, and repackaged the framework.jar, but to updated it, alas, I need root access.
It's a shot in the dark, but without some sort of physical connectivity, I'm at a loss. Does anyone have any ideas how I might acquire root on this thing, via software only? Or other ideas as to how I might be able to connect to it?
Thanks!
After further examination, the board has one button on it. If I hold it down during bootup, it goes to a black screen, but a red LED light stays on solid on the board. Generally, that light flashes. I'm wondering if that button doesn't enable FWDN, or Fastboot mode. Maybe that's the ticket.
Hi my friend! Any news?
mpaulonic said:
Hi my friend! Any news?
Click to expand...
Click to collapse
No news yet. I do think I've figured out how to get into FWDN mode, so I should be able to take a complete backup of the NAND, etc. That doesn't do me a whole lot of good, though, since I don't think you can inject something into an FWDN image.
I suppose I could try to recompile it completely from source, but I'm not sure what all drivers are compiled into the current system, and have no experience doing anything of that nature with Android before.
I wish there were a magic "root" apk I could install, and be done with it!
derpderpy said:
No news yet. I do think I've figured out how to get into FWDN mode, so I should be able to take a complete backup of the NAND, etc. That doesn't do me a whole lot of good, though, since I don't think you can inject something into an FWDN image.
I suppose I could try to recompile it completely from source, but I'm not sure what all drivers are compiled into the current system, and have no experience doing anything of that nature with Android before.
I wish there were a magic "root" apk I could install, and be done with it!
Click to expand...
Click to collapse
As usual if we push hard enough and make enough noise on the forums we'll get there, if Charles has to refund every paypal customer because the GPS is crap....he'll find a way to get us root, it's as simple as that
Found this, I don't know if it can help but perhaps the guys who are playing with it can help you....
http://www.cnx-software.com/tag/telechips/
I think the button on the board may actually put it into FWDN mode, but the USB port configuration doesn't seem to allow the board to act in Device-Mode in any way. If you power it on while holding down the button, it seems to do something. The screen shows "NO SIGNAL" which is what would happen if it goes into FWDN mode. But, I can't get anything to communicate with it. It doesn't show up in device manager at all, on multiple PCs.
Looks like for now, our only hope is for someone to create an APK that somehow magically roots the thing. I'll go ahead and hold my breath.
Also Searching
I am also searching for an answer to this one as i have the same issue.
Got it! follow this link and use the package and instructions provided
http://goo.gl/uAJvg
Booyeah!
Yeah, but does it work on our 8925 ? It is said t work on earlier models but not on this one....
Did you test it ?
Thanks
jchuillier said:
Yeah, but does it work on our 8925 ? It is said t work on earlier models but not on this one....
Did you test it ?
Thanks
Click to expand...
Click to collapse
Sure did just rooted my car stereo... had to update the Superuser app and a few others...... next task is to figure out what tweaks to build.prop i need to get all apps in play store.... especially the google apps.
FYI - after applying the update the screen flickered on the boot up. I reset the device (power cycled via the reset button) and then powered it back on and all is good!
I may be able to post some screen shots in a little bit if you like.....
Car stereo..... as in Enco B046 ?
Screenshots.......Enjoy
jchuillier said:
Car stereo..... as in Enco B046 ?
Click to expand...
Click to collapse
This is the one I bought.....
http://goo.gl/fvfyq
attached is a picture of the Android Board inside the device.
WHOA!!! That bad boy is $800 now I only payed $378 shipped
For which car was it ? Because 800 is a bit expensive, we're at 450-500 for a BMW unit, look at www.szenco.com
Thanks a lot for the link anyway, I'll try that tonight....
---------- Post added at 05:04 PM ---------- Previous post was at 05:01 PM ----------
Well, because of you it can be rooted now so the price went up the ceiling
I bought it to use in a 2005 Ford F-150
If you can pay for the gas you can pay 800 for the stereo
jchuillier said:
If you can pay for the gas you can pay 800 for the stereo
Click to expand...
Click to collapse
I don't have to... I already have mine
swjpilot said:
Sure did just rooted my car stereo... had to update the Superuser app and a few others...... next task is to figure out what tweaks to build.prop i need to get all apps in play store.... especially the google apps.
FYI - after applying the update the screen flickered on the boot up. I reset the device (power cycled via the reset button) and then powered it back on and all is good!
I may be able to post some screen shots in a little bit if you like.....
Click to expand...
Click to collapse
This is awesome, thank you very much! Going to try it tonight.
Any luck with build.prop?
Have you guys experienced of the following problems(before rooting)?
-SD Card error message(not related to external microsd)
-Some apps installs but then give a "no sd card present" error
-Google Nav: works for a short while then all you get is "searching for GPS"
Hi guys, check that dongle happy bootloader swap prepare yourself ATF ,THAT DONGLE http://www.fonefunshop.co.uk/cable_...Test_Point_Cable_Set_For_ATF_(Pre-Order).html and get yourself sum custom rom
cdbase said:
Hi guys, check that dongle happy bootloader swap prepare yourself ATF ,THAT DONGLE http://www.fonefunshop.co.uk/cable_...Test_Point_Cable_Set_For_ATF_(Pre-Order).html and get yourself sum custom rom
Click to expand...
Click to collapse
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
lordmaxey said:
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
Click to expand...
Click to collapse
you can buy it online from gsmsp.com
Great Job From GPGIndustries. ..................
Br
HASSANJINJA
UGANDA
Am i understood wright ? This device can unlock all those models and then we can flash with every custom rom , and to install any app ?
Stefan Caromov said:
Am i understood wright ? This device can unlock all those models and then we can flash with every custom rom , and to install any app ?
Click to expand...
Click to collapse
Hi there,
you need atf box for unlocking your device and for replacing dload with qualcomm bootloader.
But you needed to solder a modified rj-45 cable to your device's mainboard, which is very difficult.
With the cable mentioned in this thread, you don't have do the soldering, as this cable can "connect" to the parts you usually have to solder the wires
So, you still need ATF Box + This cable. The good thing: you only have to disassemble your phone and connect it
No more soldering!
Btw, i ordered the cable yesterday, and inform you when tested
Stefan Caromov said:
Am i understood wright ? This device can unlock all those models and then we can flash with every custom rom , and to install any app ?
Click to expand...
Click to collapse
yes ,if you have ATF BOX , you have to point ur finger on motherboard exactly where your testpoints are to get a proper connection
it works just fine then i just swaped my osbl to qualcom yesterday
Lordmaxey -NICE ROM (FUNKY) ,I've found couple bugs but overall it's just great , video usb out should fit it needs at all
now I'm going to try cook my own )
Unfortunately it doesn't have pins for VCC and VCCQ, and so can't be used for the card reader hack, only with ATF. However, the CLK-to-GND trick should still work with them.
cdbase said:
yes ,if you have ATF BOX , you have to point ur finger on motherboard exactly where your testpoints are to get a proper connection
it works just fine then i just swaped my osbl to qualcom yesterday
Lordmaxey -NICE ROM (FUNKY) ,I've found couple bugs but overall it's just great , video usb out should fit it needs at all
now I'm going to try cook my own )
Click to expand...
Click to collapse
Thanks
Could you please post the bugs you've found in my rom thread? Would be great, as i can only fix them, when i know them
.NetRolller 3D said:
Unfortunately it doesn't have pins for VCC and VCCQ, and so can't be used for the card reader hack, only with ATF. However, the CLK-to-GND trick should still work with them.
Click to expand...
Click to collapse
Net,
Why dont you open your own thread to explain your hacks?
Im very intrested in your concept-to-proof methods.
best,
pedro
It's being discussed in the "dev-only" thread.
If you do not have the ATF BOX you can not use an emulator? On Symbian (5230, 5800, etc.) I used JAF JAF PKEY emulator with GM .. You can not do such a thing? Sorry if I said bull****!
The ATF Box is not just a hardware dongle - it's an FPGA device that is used for reading/writing the eMMC chip. Also, it doesn't simply implement the MMC protocol as a card reader would - it actually tampers with the MMC command/data messages sent by the phone's CPU, while the PCB is powered on. (This is why it doesn't need access to the VCC and VCCQ pins.)
Unless you have a matching FPGA that you can program with the ATF logic, you cannot use the Lumia TP functions of the ATF software without a genuine box.
Cyclone Box is slightly easier to emulate, as it uses an AVR microcontroller, rather than an FPGA, so it may be possible to program an Arduino for the job - however, the Cyclone software still has major problems with its eMMC implementation (specifically, it tries to use SPI mode, instead of 1-bit MMC, but SPI is only supported on removable MMC cards, not eMMC). Also, Cyclone Box requires VCC and VCCQ access, since its eMMC mode is simply an SD/MMC card reader implemented in MCU - in fact, it can connect to normal SD/MMC cards as well as eMMC chips.
Sorry, wrong thread.
lordmaxey said:
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
Click to expand...
Click to collapse
same for me i couldn't set a proper connection for 3h a phone even with a microscope
you can also try polish reseller multi-com
lordmaxey said:
WOW. I need this! Any german resellers?!? :laugh::good:
This damn soldering always took me hours!
Click to expand...
Click to collapse
fonefunshop is reliable, and fast. Had this delivered at my door after 3 days.
I can only recommend buying from them.
thx for your replies.
Already have the cables. Fonefunshop was very fast delivery.
For those who used the jig, do you guys still needed to remove the shield?
Yes you need to remove Shield but it's not need to remove by any iron. i can be done by simply tweezer
Br
Faisal_Computer
Interesting when someone else adds support for these cables. (To a cheap box (Best infinity / MXbox / Fenix Key etc etc).
ATF is not really worth it if you are not in the gsm business.
(Maybe I will buy an ATF when my dev unlock runs out if I have to I don't like paying money to phone shops unless they actually do something that is a reasonably skilled job - problem I have is none of them are willing to do any of them near me (And there is tons of them eyesores on the high street).