Reviving dead phones - GSM-Forum

Gozha · 10-06-2007, 16:42

Hello mates.. i started to use Unlocking Calypso +sb.. from 20 phones i have 14 done and 6 dead

Phones become dead.. after i desolder flash ic and ut it in V55 pcb.. flash ic is not detecting

Found Phone, Phone Info:

- Flash ID: 00 90 00 90
- Chip(0): Unknow

Read 0x04000000 - 0x05000000...Done!

but reading... dump is about 2mb wichn is too small for a working flash ic...

i put lash ic back to phone.. off course phone not power up..

MY IDEA:
i use for cid52 unlock emty flash ic.... i think in hcina possible to find emty flash ic... but they need to be programed.. i have universal programer so i not have ny problem with this... problem is next:

In sagem we have imei in cpu + flash.. i need dump editor to be able to change imei in dump to original one.. can somebody tell is it possible to make my idea or not?! if yes maybe support team can provide us this soft to edit dumps . to edit imei.. maybe i am wrong and we need to chnge not only imei?!?!?

Thank u for help.. hope i have a good answeer

) becuase really we need to repair our phones.. problem in my phones 1000%%% in flash ic.. pcb is good.. on flash programator when i make test shows bad flash oc.. i think to bug temperature i use.. but i can desolder on lower temperature..

Gozha · 10-06-2007, 17:30

PPL i found way to repaiere them

)) wait i test my solution on all dead phones ad give u info if it works!!!! but i think it will work!! after i make photos how to repair all our dead phones

)) hahah

) first phone is okey already

))

Gozha · 10-06-2007, 18:52

only 1 phone repaired.. but all phones face same problem... FLASH IC is damaged.. it can be repaired i think... look at pictures atached... this are ;legs without wich phone is can not survice.. all others are useless

also if any china resseler can find emty flash ic like this
S71GL256N then tell me pls.. or similar models.. i am interesting to buy some

DZStorm · 10-07-2007, 01:04

@Gogoshar

Seem's to be my400v , anyway for :

- Flash ID: 00 90 00 90
- Chip(0): Unknow

Read 0x04000000 - 0x05000000...Done!

it's not complete readed flash & reasons are :

-Not all chip needed pins are connected to board pins or programmer for connection .
-Damaged or missed pins from chip , that can't comunicate for full reading .

Empty flash ic can't help you to revive your phone , for same type there's 3 models with diffrent density "128,256 & 512Mb" , it will need a full ic backup since start & this is not avaible for now .

Gozha · 10-07-2007, 08:37

@DZstorm
man as i showed in picture... look
left up corner is working flash ic in universal programer ... all is okey like in the picture.. Green are working pins.. white wich are not neccessary.. blue GND i think
in left down corner we have damaged ic.. just desoldered and it become damaged.. i think this spansion ic are very sensitvie... i tryed low temperature ... high temperature.. midle.. when dessoldering i mean.. dead.. dead .. dead...
in right part i have schematic from datasheet of this flash ic ...

i know thet there are 3 types of this flash ic man.. but ussualy are used 256mb... i mean in x400v.....
i have many sagems here.. i can provide u dumps of the flash ic.. any format hex, bin... i do not know are this firmware crypted or not.. can u uncrypt them to edit or not... answer this question pls:

are u able to make soft to edit dumps for change imei to be like on cpu?! this is most importnat question i think...

i found supplier in china.. this ic can be buy easy for 2-3$... if u make such a soft to edit dumps... maybe u can make even a dump with opened logs.. os will me much more easy to unlock this phones...

like db2020 emty flash ic unlokcing.. we buy flash ic for sagems.. u give us good dump (without locks) and a soft to edit this dump.. editing the imei (or there is not only imei problem?!? explain me if u can because i do not have even idea about this)... we program on universal programer this emty flash ic... remove original ic from phone.. and put there emty flash ic... risk becomes very small.. we have to rehoot the ic only once!! i think it will be very good way to make unlocks!!!

i added u in icq and skype and msn.. when only contact me pls.. if u need.. i can read all flash ic types dumps.. and send u for work.. this is not a problem for me.... i have also now working phones... ic at them working and i can try what u tell me to do...

BR,
Gosha.

Gozha · 10-07-2007, 09:38

one more idea i have... i think CPU can be programed using universal programer.. if i unlock one phone.. and read dump from ic and from flash.. can i clone after this phones?

means... dead phone i take.. write cpu dump in it.. and write in emty flash good dump... imei will be same....
but if 3-10 phones in network will be with same imei.. what will happen? and is it possible to program cpu? does it have OTP?

Gozha · 10-07-2007, 09:45

as i understand more./.. CPU not have IMEI.. it have serial number stored in in.. and that serial number is stored in flash ic.. inn otp/.... mean my previous idea no real.. help usupport team.. give info.. any solution with emty flash ic?!

Gozha · 10-07-2007, 11:11

also i noticed today one think: 6 phones unlocked well: i used 390 -400 degrees hot air station when desoldering chip.. all worked well.. i think flash ic was damaging when i was pushing it out "cold"

Gozha · 10-07-2007, 11:30

also wanted to ask

this is when i read ic on v55 pcb
AMD S29GL256NH/L 256Mbit

this is flash ic number.. but on the proper flash ic is another serial part number.. why this is heppening?!

and one more thing: i never read succesefull this types of ic using selection like v55.. i always use like my400z... and always working... on v55 selection says no loader.. check tp

gsminfo · 10-14-2007, 08:51

@Gogoshar

Send me this flash file please to [email protected]

We need check

SMT

10-06-2007, 16:42	#1 (permalink)
Gozha Freak Poster Join Date: Apr 2005 Location: In love Age: 37 Posts: 432 Member: 135559 Status: Offline Thanks Meter: 3	Reviving dead phones Hello mates.. i started to use Unlocking Calypso +sb.. from 20 phones i have 14 done and 6 dead Phones become dead.. after i desolder flash ic and ut it in V55 pcb.. flash ic is not detecting Found Phone, Phone Info: - Flash ID: 00 90 00 90 - Chip(0): Unknow Read 0x04000000 - 0x05000000...Done! but reading... dump is about 2mb wichn is too small for a working flash ic... i put lash ic back to phone.. off course phone not power up.. MY IDEA: i use for cid52 unlock emty flash ic.... i think in hcina possible to find emty flash ic... but they need to be programed.. i have universal programer so i not have ny problem with this... problem is next: In sagem we have imei in cpu + flash.. i need dump editor to be able to change imei in dump to original one.. can somebody tell is it possible to make my idea or not?! if yes maybe support team can provide us this soft to edit dumps . to edit imei.. maybe i am wrong and we need to chnge not only imei?!?!? Thank u for help.. hope i have a good answeer ) becuase really we need to repair our phones.. problem in my phones 1000%%% in flash ic.. pcb is good.. on flash programator when i make test shows bad flash oc.. i think to bug temperature i use.. but i can desolder on lower temperature..

10-07-2007, 01:04	#4 (permalink)
DZStorm No Life Poster Join Date: Jul 2005 Location: TUNISIA Age: 44 Posts: 2,563 Member: 160204 Status: Offline Sonork: 100.113150 Thanks Meter: 2,843	@Gogoshar Seem's to be my400v , anyway for : - Flash ID: 00 90 00 90 - Chip(0): Unknow Read 0x04000000 - 0x05000000...Done! it's not complete readed flash & reasons are : -Not all chip needed pins are connected to board pins or programmer for connection . -Damaged or missed pins from chip , that can't comunicate for full reading . Empty flash ic can't help you to revive your phone , for same type there's 3 models with diffrent density "128,256 & 512Mb" , it will need a full ic backup since start & this is not avaible for now . Last edited by DZStorm; 10-07-2007 at 01:13.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Z3 Reviving dead phones & Repair PDS(Tutorial)	malek45	Motorola P2k	8	04-13-2011 08:20
noox box revive dead phone	juceca21	NoooX Box	1	09-30-2008 19:10
lg 8130r full flash needed to revive dead phone	jesto80	Sonics Box	9	08-11-2005 01:30
lg 8130r full flash needed to revive dead phone	jesto80	Blazer	0	08-07-2005 01:12
BE1 16c/d Flashing - reviving dead phone	shamir	Alcatel & TCL Old Models	20	12-16-2001 06:11

10-06-2007, 17:30	#2 (permalink)
Gozha Freak Poster Join Date: Apr 2005 Location: In love Age: 37 Posts: 432 Member: 135559 Status: Offline Thanks Meter: 3	PPL i found way to repaiere them )) wait i test my solution on all dead phones ad give u info if it works!!!! but i think it will work!! after i make photos how to repair all our dead phones )) hahah ) first phone is okey already ))

10-07-2007, 08:37	#5 (permalink)
Gozha Freak Poster Join Date: Apr 2005 Location: In love Age: 37 Posts: 432 Member: 135559 Status: Offline Thanks Meter: 3	@DZstorm man as i showed in picture... look left up corner is working flash ic in universal programer ... all is okey like in the picture.. Green are working pins.. white wich are not neccessary.. blue GND i think in left down corner we have damaged ic.. just desoldered and it become damaged.. i think this spansion ic are very sensitvie... i tryed low temperature ... high temperature.. midle.. when dessoldering i mean.. dead.. dead .. dead... in right part i have schematic from datasheet of this flash ic ... i know thet there are 3 types of this flash ic man.. but ussualy are used 256mb... i mean in x400v..... i have many sagems here.. i can provide u dumps of the flash ic.. any format hex, bin... i do not know are this firmware crypted or not.. can u uncrypt them to edit or not... answer this question pls: are u able to make soft to edit dumps for change imei to be like on cpu?! this is most importnat question i think... i found supplier in china.. this ic can be buy easy for 2-3$... if u make such a soft to edit dumps... maybe u can make even a dump with opened logs.. os will me much more easy to unlock this phones... like db2020 emty flash ic unlokcing.. we buy flash ic for sagems.. u give us good dump (without locks) and a soft to edit this dump.. editing the imei (or there is not only imei problem?!? explain me if u can because i do not have even idea about this)... we program on universal programer this emty flash ic... remove original ic from phone.. and put there emty flash ic... risk becomes very small.. we have to rehoot the ic only once!! i think it will be very good way to make unlocks!!! i added u in icq and skype and msn.. when only contact me pls.. if u need.. i can read all flash ic types dumps.. and send u for work.. this is not a problem for me.... i have also now working phones... ic at them working and i can try what u tell me to do... BR, Gosha.

10-07-2007, 09:38	#6 (permalink)
Gozha Freak Poster Join Date: Apr 2005 Location: In love Age: 37 Posts: 432 Member: 135559 Status: Offline Thanks Meter: 3	one more idea i have... i think CPU can be programed using universal programer.. if i unlock one phone.. and read dump from ic and from flash.. can i clone after this phones? means... dead phone i take.. write cpu dump in it.. and write in emty flash good dump... imei will be same.... but if 3-10 phones in network will be with same imei.. what will happen? and is it possible to program cpu? does it have OTP?

10-07-2007, 09:45	#7 (permalink)
Gozha Freak Poster Join Date: Apr 2005 Location: In love Age: 37 Posts: 432 Member: 135559 Status: Offline Thanks Meter: 3	as i understand more./.. CPU not have IMEI.. it have serial number stored in in.. and that serial number is stored in flash ic.. inn otp/.... mean my previous idea no real.. help usupport team.. give info.. any solution with emty flash ic?!

10-07-2007, 11:11	#8 (permalink)
Gozha Freak Poster Join Date: Apr 2005 Location: In love Age: 37 Posts: 432 Member: 135559 Status: Offline Thanks Meter: 3	also i noticed today one think: 6 phones unlocked well: i used 390 -400 degrees hot air station when desoldering chip.. all worked well.. i think flash ic was damaging when i was pushing it out "cold"

10-07-2007, 11:30	#9 (permalink)
Gozha Freak Poster Join Date: Apr 2005 Location: In love Age: 37 Posts: 432 Member: 135559 Status: Offline Thanks Meter: 3	also wanted to ask this is when i read ic on v55 pcb AMD S29GL256NH/L 256Mbit this is flash ic number.. but on the proper flash ic is another serial part number.. why this is heppening?! and one more thing: i never read succesefull this types of ic using selection like v55.. i always use like my400z... and always working... on v55 selection says no loader.. check tp

10-14-2007, 08:51	#10 (permalink)
gsminfo No Life Poster Join Date: Mar 2003 Location: Poland Age: 53 Posts: 5,680 Member: 23714 Status: Offline Thanks Meter: 18,769	@Gogoshar Send me this flash file please to [email protected] We need check SMT