RIFF JTAG -Unbrick Samsung Galaxy S3, HTC 8x, HTC 8s World First ! ! !

[legija]

07.10.2011 Samsung i997 infuse 4g Unbrick, Boot repair supported


Samsung I997 is based on the S5PCxxx Processor (ARM core is Cortex-A8).
Note, one simple way to connect over JTAG – connect USB cable to PC and insert battery. In this case phone is automatically powered on. But note, in very rare cases it is possible that you will have to hold Power On key during initial connection.
In case after resurrection (after you have tried with both boot versions) the download mode is not initiated (LCD remains blank) do repeat resurrection with ‘Clone Gremlin zone’ option checked.
To resurrect Samsung I997:

• Solder JTAG cable to Samsung I997 JTAG pads;
• Connect microUSB cable to phone and PC;
• Insert battery;
• Make sure Samsung I997 is selected in the list of models;
• Make sure a fixed TCK frequency is selected;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold both ‘Volume Down’ and ‘Home’ keys and press Power-On.

[legija]

07.10.2011 Samsung Galaxy II, OMAP4430 version supported (Samsung i9100G, Samsung i9108)


Samsung I9108 is based on the OMAP4430 Processor (Cortex-A9 Dual-Core). JTAG pads are very small; professional experience in soldering is required to connect wires to the JTAG interface. There is a big variety of versions of Galaxy II devices: GT-I9100, GT-I9100G, GT-I9100L, GT-I9100M, GT-I9100T, GT-I9101, GT-I9103, GT-I9108, GT-I9188, and maybe more. Some of them are based on different hardware platform – the Samsung S5PV310 (Cortex-A9 Dual-Core). Thus make sure first which exact hardware version you have on hands.
Note, one simple way to connect over JTAG – connect USB cable to PC and insert battery. In this case phone is automatically powered on.
Current DLL is still a beta one. It will work only with phones which have killed X-Loader.


To resurrect Samsung I9108:

• Solder JTAG cable to Samsung I9108 JTAG pads;
• Connect USB cable to phone and PC;
• Insert battery;
• Make sure Samsung I9108 is selected in the list of models;
• Make sure a fixed TCK frequency is selected;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold both ‘Volume Down’ and ‘Home’ keys and press Power-On.

[legija]

12.10.2011 HTC Desire Z (HTC Vision) Unbrick, Unlock, IMEI&CID repair supported


Resurrecting HTC Desire Z is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Some (or all) revisions of HTC Desire Z boards have JTAG interface disabled (that is enable MARM JTAG Fuse is ****n in the MSM7230 chip). In this case the JTAG may be enabled only by firmware itself. This is done by the FSBL loader, so writing to FSBL area is artificially disabled in the DCC Loader code. DCC Loader will discard all flashing attempts into FSBL zone and will respond with success code as if flashing succeeded. In this way FSBL zone is protected while user still can flash full image files seamlessly.
Resurrector will reflash radio’s boot zone (except FSBL area) and will re-write one of selected PDA’s SPL versions (0.76.2000 or 0.85.0005). Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PC1010000’.
There is option to reflash BOOT and RECOVERY zones.
Please note, if your phone has the FSBL loader damaged and MCU has JTAG FUSE ****n then there is no way to resurrect your phone via JTAG interface.
To resurrect HTC Desire Z:

• Solder JTAG cable to HTC Desire Z JTAG pads;
• Insert batter and connect USB Data cable;
• Make sure HTC Desire Z is selected in the list of models;
• If you use only battery, press Power On key;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold ‘Volume Down’ key and press ‘Power ON’ button.

[legija]

Samsung_S5660.dll
-------------------------------------
- ID 0x203C00E1 is added to allowed list


Samsung_S5830.dll
-------------------------------------
- ID 0x503C10E1 is added to allowed list

[M0YAL]

19.10.2011 RIFF JTAG – Samsung Z500 supported !


Resurrection of Samsung Z500 requires battery or external power supply (we didn’t test whether phone is powered on using only a USB cable). You can use RIFF BOX’s 4.2V output for power (requires 1.16 firmware version or later and the 4.2V Output feature enabled in the JTAG Manager).
To resurrect Samsung Z500:

• Solder JTAG cable to Samsung Z500 JTAG pads;
• Insert battery (or connect external power supply to the battery pads);
• Make sure Samsung Z500 is selected in the list of models;
• Click Resurrect button;
• Press Power-On key shortly;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold ‘9’ key and press ‘Power ON’ button. In few seconds you should see light-blue screen.

[legija]

19.10.2011 RIFF JTAG – Samsung Z500 supported !


Resurrection of Samsung Z500 requires battery or external power supply (we didn’t test whether phone is powered on using only a USB cable). You can use RIFF BOX’s 4.2V output for power (requires 1.16 firmware version or later and the 4.2V Output feature enabled in the JTAG Manager).
To resurrect Samsung Z500:

• Solder JTAG cable to Samsung Z500 JTAG pads;
• Insert battery (or connect external power supply to the battery pads);
• Make sure Samsung Z500 is selected in the list of models;
• Click Resurrect button;
• Press Power-On key shortly;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold ‘9’ key and press ‘Power ON’ button. In few seconds you should see light-blue screen.

[legija]

24.10.2011 Samsung Corby II – S3850 supported
Samsung S3850 resurrection is simple. Battery is not required. To power the board it’s most convenient to use an USB Data Cable.
In orger to contact to JTAG pads you may need to carefully scratch off paint covering (mask layer) above them.
To resurrect Samsung S3850 do this:

• Solder JTAG cable to Samsung S3850 JTAG pads;
• Insert battery and connect USB cable to phone and PC;
• Make sure Samsung S3850 is selected in the list of models
• Click Resurrect button;
• Wait few seconds until software signals a successful operation completion;
• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold both ‘Volume Up’ and ‘Call’ keys and press Power-On.

[legija]

24.10.2011 HTC Supersonic (EVO 4G) Unbrick, Unlock, IMEI, CID, ModelID repair supported


Resurrecting HTC Supersonic (EVO 4G) is easy. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
In case you have no USB cable near, make sure battery is charged enough and hold Power On button during initiation of JTAG connection.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 2.16.0001 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PC3610000’.

Additionally, you can check ‘Repair RECOVERY zones’ to reflash android BOOT and RECOVERY code. If selected, then ClockworkMod Recovery v5.0.2.2 will be flashed. Using this recovery you will be able to install zip files from the SD Card, for example you will be able to acquireROOT rights by installing su-2.3.6.3-efgh-signed.zip file.
To resurrect HTC Supersonic:

• Solder JTAG cable to HTC Supersonic JTAG pads;
• Insert USB Data cable into board and PC;
• Make sure HTC Supersonic is selected in the list of models;
• If you use battery, press Power On key;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold ‘Volume Down’ key and press ‘Power ON’ button.

[legija]

HTC_DesireHD.dll
-------------------------------------
- ID 0x27B360E1 is added to allowed list

[legija]

24.10.2011 HTC Desire CDMA Supported
Resurrecting HTC Desire CDMA is easy. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
In case you have no USB cable near, make sure battery is charged enough and hold Power On button during initiation of JTAG connection.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 1.60.0000 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PP9940000’.
Additionally, you can check ‘Repair RECOVERY zones’ to reflash android BOOT and RECOVERY code.
To resurrect HTC Desire CDMA:

• Solder JTAG cable to HTC Desire CDMA JTAG pads;
• Insert USB Data cable into board and PC;
• Make sure HTC Desire CDMA is selected in the list of models;
• If you use battery, press Power On key;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold ‘Back’ key and press ‘Power ON’ button.

[legija]

24.10.2011 LG SH860 Supported

Resurrecting LG SH860 is easy. To establish connector battery must be connected and Power On key to be pressed.
To resurrect LG SH860:

• Solder JTAG cable to LG SH860 JTAG pads;
• Insert battery;
• Make sure LG SH860 is selected in the list of models;
• Click Resurrect button;
• Press ‘Power ON’ key;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter emergency mode:

• Disconnect PC cable;
• Insert battery;
• Hold ‘5’ key and press ‘Power ON’ button. In few seconds you should see emergency mode screen.

[legija]

26.10.2011 Samsung Galaxy S Plus (i9001) Unbrick, boot repair supported
Resurrecting Samsung I9001 is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
Please note, MSM8255T is dual core chipset – it has ARM11 and Qualcomm Scorpion cores. During power on sequence only ARM11 core is visible on the JTAG chain. If boots are not completely damaged and it comes up to initializing of the Scorpion core then Scorpion core appears on the JTAG chain too. This will shift ARM11 from TAP0 into TAP1 position on the chain, while current resurrector has the ARM11 core hardcoded at TAP0 position. Thus make sure to establish JTAG connection in the time range while Scorpion core is not visible yet.
To resurrect Samsung I9001:

• Solder JTAG cable to Samsung I9001 JTAG pads;
• Make sure Samsung I9001 is selected in the list of models;
• Insert battery and connect USB Data cable;
• If you use only battery, press Power On key;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold ‘Volume Down’ key and press ‘Power ON’ button.

[legija]

28.10.2011 CDMA ZTE R518 supported
Resurrecting ZTE R518 is easy. Battery is not required. To power the board it’s most convenient to use an USB Data Cable
To resurrect ZTE R518:

• Solder JTAG cable to ZTE R518 JTAG pads;
• Make sure ZTE R518 is selected in the list of models;
• Connect USB Data Cable;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect power supply, de-solder JTAG wires;

[legija]

28.10.2011 Samsung M820 Galaxy Prevail Unbrick, Boot repair supported


Samsung M820 resurrection is simple. Phone is auto powered when USB Data Cable is inserted while battery is inside. If you don’t use USB cable, make sure to hold Power On button during JTAG connection establishing phase.
To resurrect Samsung M820 do this:

• Solder JTAG cable to Samsung M820 JTAG pads;
• Insert battery and connect USB cable to phone and PC;
• Make sure Samsung M820 is selected in the list of models;
• Click Resurrect button;
• Wait few seconds until software signals a successful operation completion;
• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold both ‘Volume Down’ and ‘Camera’ keys and press Power-On to enter Download Mode;

[legija]

28.10.2011 Samsung i9003 Galaxy SL Unbrick, Boot repair supported


Samsung I9003 is based on the OMAP3630 (ARM core is Cortex-A8).
Note, one simple way to connect over JTAG – connect USB cable to PC and insert battery. In this case phone is automatically powered on. But note, in very rare cases it is possible that you will have to hold Power On key during initial connection.
In case after resurrection (after you have tried with both boot versions) the download mode is not initiated (LCD remains blank) do repeat resurrection with ‘Clone Gremlin zone’ option checked.
Please note, in most cases you will be required to insert Samsung I9003 RIFF™ MagicCard into phone’s SD slot before starting resurrection. In case you don’t have such card yet, you can create it on the “Samsung I9003 RIFF™ MagicCard” page of the resurrector settings dialog.
Due to OMAP3630’s some peculiar TrustZone security features current resurrector may fail to boot: if this happens, use Samsung I9003 IRAM resurrector – which works much slower but boots without problems.
To resurrect Samsung I9003:

• Solder JTAG cable to Samsung I9003 JTAG pads;
• Insert Samsung I9003 RIFF™ MagicCard into phone’s SD slot;
• Connect USB cable to phone and PC;
• Insert battery;
• Make sure Samsung I9003 is selected in the list of models;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.
To enter download mode:

• Disconnect PC cable;
• Insert battery;
• Hold both ‘Volume Down’ and ‘Home’ keys and press Power-On.