Hi all !
I'm writing here because i'm facing a problem with a "SAMSUNG Galaxy 3" // aka // "Samsung GT-I5800" ...
Someone gave it to me because it seems to have bricked the phone during a flash process.
I really don't know if it is electricaly dead or just if the BOOT part of the flash is corrupted.
What i tried :
{VOLUME DOWN} + {HOME} + {POWER}
{VOLUME UP} + {HOME} + {POWER}
301kOhms resistor trick on pins 4/5
I'm now wondering if the phone is dead or not ...
As the phone is quite new (!!!) i would have liked to test some things, like JTAG on the port reserved to it on the motherboard.
What i don't want is buying some kind of external JTAG devices like ORT or RIFF.
By the way, i have skills in programming ; electronics ; computers.
I have an arduino that could be used for interfacing the JTAG port to the PC serial port.
I'm not very sure about the JTAG pinout on the motherboard.
I found some informations at RIFF website about the JTAG PINOUT :
If someone can tell me how to use this JTAG port to inject the bootloader inside the flash, it would be very cool.
Thanks !
simkard said:
Hi all !
I'm writing here because i'm facing a problem with a "SAMSUNG Galaxy 3" // aka // "Samsung GT-I5800" ...
Someone gave it to me because it seems to have bricked the phone during a flash process.
I really don't know if it is electricaly dead or just if the BOOT part of the flash is corrupted.
What i tried :
{VOLUME DOWN} + {HOME} + {POWER}
{VOLUME UP} + {HOME} + {POWER}
301kOhms resistor trick on pins 4/5
I'm now wondering if the phone is dead or not ...
As the phone is quite new (!!!) i would have liked to test some things, like JTAG on the port reserved to it on the motherboard.
What i don't want is buying some kind of external JTAG devices like ORT or RIFF.
By the way, i have skills in programming ; electronics ; computers.
I have an arduino that could be used for interfacing the JTAG port to the PC serial port.
I'm not very sure about the JTAG pinout on the motherboard.
I found some informations at RIFF website about the JTAG PINOUT :
If someone can tell me how to use this JTAG port to inject the bootloader inside the flash, it would be very cool.
Thanks !
Click to expand...
Click to collapse
stop all those experiments. You will destroy your phone. Go to a Samsung Service Centre. It could help.
I can destroy the phone because i don't care about it, and, moreover, no one will cry if it burns/explodes/anything else.
I can do wathever i want on it.
By the way, by saying "whatever" i mean getting it back on its feet.
So i want to do it by myself.
I'm sure this is not much hard way to do it as there is already a JTAG port which can permits to talk directly with the CPU.
I found something from QUALCOMM : QPST (Qualcomm Product Support Tools) which is compatible QSC6270 CPU (inside the GT-I5800).
With that it is possible to flash firmware/bootloader etc directly inside the device !
simkard said:
I can destroy the phone because i don't care about it, and, moreover, no one will cry if it burns/explodes/anything else.
I can do wathever i want on it.
By the way, by saying "whatever" i mean getting it back on its feet.
So i want to do it by myself.
I'm sure this is not much hard way to do it as there is already a JTAG port which can permits to talk directly with the CPU.
I found something from QUALCOMM : QPST (Qualcomm Product Support Tools) which is compatible QSC6270 CPU (inside the GT-I5800).
With that it is possible to flash firmware/bootloader etc directly inside the device !
Click to expand...
Click to collapse
The phone is certainly dead. Bootloaders gone.
You have to buy a riffbox to do this as the bootloader repair files is contained by it. And I don t think you can get those anywhere else. Buy a Riffbox. Read the manual by which you can find out the pinout using voltage readings. You ll also get support on there wesite with the pinout. Once you get the pinout major problem is done.
Cool stuff this you are doing.
android.aimad said:
stop all those experiments. You will destroy your phone. Go to a Samsung Service Centre. It could help.
Click to expand...
Click to collapse
pls do not listen to the above post....
ur looking for somthing like this project -
http://forum.xda-developers.com/showthread.php?t=1000175
basicaly this is possible and can bring a brick of any form back to life...
i think u can achieve this! i also see some pins at the back of the phone
under the battery.....
i strongly advise you to read the FULL thread and search some more!!
if u achieve this we may even get an ubrickable mode!
u may need solderinng skills...
i dont know much but i will try to help!
dhirend_6d said:
The phone is certainly dead. Bootloaders gone.
You have to buy a riffbox to do this as the bootloader repair files is contained by it. And I don t think you can get those anywhere else. Buy a Riffbox. Read the manual by which you can find out the pinout using voltage readings. You ll also get support on there wesite with the pinout. Once you get the pinout major problem is done.
Cool stuff this you are doing.
Click to expand...
Click to collapse
In fact, i don't even know how to use JTAG port neither how to talk with the CPU by this port.
But, some people can manage to do it, i will ... !
I just need some people to help me with this, and after i will be able to release a software that can run on an arduino (for compliance with a lot of phone models) and, firstly, a flash program under windows that will use the COM port of the arduino to talk to the JTAG connected device.
simkard said:
and after i will be able to release a software that can run on an arduino (for compliance with a lot of phone models) and, firstly, a flash program under windows that will use the COM port of the arduino to talk to the JTAG connected device.
Click to expand...
Click to collapse
That will be awesome. For a start, you need to find out the voltages required so that you can access the ROM(PROM) of the bootloader to rebuild it. Will also need the varous voltages for the various pin outs. And I have absolutely no idea about that. Maybe someone with previous expierence and can help you. I doubt there are any in our G3 forum though. :/:/
dhirend_6d said:
That will be awesome. For a start, you need to find out the voltages required so that you can access the ROM(PROM) of the bootloader to rebuild it. Will also need the varous voltages for the various pin outs. And I have absolutely no idea about that. Maybe someone with previous expierence and can help you. I doubt there are any in our G3 forum though. :/:/
Click to expand...
Click to collapse
Ok, i know that the voltages seems to be based on +2.8V but someone managed to get it working fine on +3.3V (Arduino is able to deliver +3.3V, by the way, we can use a small component that allows conversion from one side +5V to another +3.3V (plugged by Vcc on the +3.3V of the arduino).
I must give it a try.
But, right now, i'm absolutely lost on JTAG way to talk on the lines.
Moreover, i just don't even know what can i do to flash something inside the CPU/FLASH (like bootloader only which will permit the phone to boots and enter download mode).
In fact, what i'm willing to do is :
Build a Serial RS232 (PC side) to JTAG (PHONE side) interface that permits to onl flash the BOOTLOADER part of the FLASH of the DEAD PHONE.
Perhaps it could be used directly on ODIN but i doubt that the flash software would talk the same way to the CPU/FLASH on a standard USB FLASH that it would talk directly connected thru the JTAG port on the PHONE MOTHERBOARD.
AdamOutler and his frnd did something similar like this for hummingbird devices
We talked and he said if he can get a diagram of g3 with the processor area enlarged would heli him determine - or you can just look it yourself - look at the pics he posted and compare
And yes they made a program to talk to the device and allow access to download mode - even on a fully bricked device - just needs a small mod - i hope you can do it - search for his thread for more info
The program is called Hummingbird Intercept BootLoader
I think it should work on our phones coz currently it works on s3c devices (samsung proccys only) so it must work with small mods on s5p
Good luck!
simkard said:
I can destroy the phone because i don't care about it, and, moreover, no one will cry if it burns/explodes/anything else.
I can do wathever i want on it.
By the way, by saying "whatever" i mean getting it back on its feet.
So i want to do it by myself.
I'm sure this is not much hard way to do it as there is already a JTAG port which can permits to talk directly with the CPU.
I found something from QUALCOMM : QPST (Qualcomm Product Support Tools) which is compatible QSC6270 CPU (inside the GT-I5800).
With that it is possible to flash firmware/bootloader etc directly inside the device !
Click to expand...
Click to collapse
ok if this is the case then I take my post back. I thought the one who gave you that wants it to be revived at any cost. If you can experiment anything with that then what you are doing is awesome. If you are able to inject a Bootloader you can make it to boot also.
But its risky, Still if you take chance you could bring up something new. By the way how this happend? Was the phone disconnected in download mode?
simkard said:
I can destroy the phone because i don't care about it, and, moreover, no one will cry if it burns/explodes/anything else.
I can do wathever i want on it.
By the way, by saying "whatever" i mean getting it back on its feet.
So i want to do it by myself.
I'm sure this is not much hard way to do it as there is already a JTAG port which can permits to talk directly with the CPU.
I found something from QUALCOMM : QPST (Qualcomm Product Support Tools) which is compatible QSC6270 CPU (inside the GT-I5800).
With that it is possible to flash firmware/bootloader etc directly inside the device !
Click to expand...
Click to collapse
good work but the qsc6270 is actualy only the call proccessor of the phone...
the cpu of the phone is s5p6442 which is a slight variation of s5p6440 which are
both made in-house by samsung....
---------- Post added at 12:25 PM ---------- Previous post was at 12:23 PM ----------
pls rename this thread and request to move it to the dev section!
this project belongs there!
android.aimad said:
ok if this is the case then I take my post back. I thought the one who gave you that wants it to be revived at any cost. If you can experiment anything with that then what you are doing is awesome. If you are able to inject a Bootloader you can make it to boot also.
But its risky, Still if you take chance you could bring up something new. By the way how this happend? Was the phone disconnected in download mode?
Click to expand...
Click to collapse
In fact, i don't know at all what happened to the phone.
I think it must have been injected by some kind of corrupted image.
As i don't know what happened directly to the phone, i know the guy who did the trick.
... And i know that he's a really mess up for electronics ... so i think he must has been using ODIN but he had used wrong files conducting the phone to be unbootable, and moreover : BOOTLOADER FAILED !!!
Everytime i flash a phone, the only thing i let on its place is the bootloader because if something happens during flash process : PROBLEM
And even if during flash process there is no problem, who knows if the bootloader injected is good ? perhaps it could be a dictionary page ?
I'm actually waiting for a part to come in my postbox.
This part is this thing : http://www.ort-jtag.com/shop.php?ID=32
With this, i will be able to connect myself (or anything other part of my body ) to the JTAG connector of the phone without destructing it by soldering like an old'parkinson guy !
But, i'm running into some kind of complexity with the flashing process because it seems that "AdamOutler and his friends" already worked on a similar case (different phone model // different CPU) and encountered an encryption problem.
I need the datasheet (detailed version) of the SAMSUNG Galaxy 3/Apollo CPU's for knowing if i'm running into some kind of problems ...
I hope that for uploading a bootloader there is no RSA keys needed.
If it is the case, then, i must say right now : it's dead.
Breaking RSA encryption is not the good way.
There are other ways (like bypassing code-signature) but i have to tell you guys that i'm not really expert in these techniques !
Will be back in a few days when i will receive the JTAG connector in my postbox...
---------- Post added at 09:27 AM ---------- Previous post was at 09:26 AM ----------
unreal3000 said:
good work but the qsc6270 is actualy only the call proccessor of the phone...
the cpu of the phone is s5p6442 which is a slight variation of s5p6440 which are
both made in-house by samsung....
---------- Post added at 12:25 PM ---------- Previous post was at 12:23 PM ----------
pls rename this thread and request to move it to the dev section!
this project belongs there!
Click to expand...
Click to collapse
Yes sorry, i made a mistake, what i really meant was the CPU.
So i must not had told you QSC6270 but instead : the famous S5P6442
simkard said:
In fact, i don't know at all what happened to the phone.
I think it must have been injected by some kind of corrupted image.
As i don't know what happened directly to the phone, i know the guy who did the trick.
... And i know that he's a really mess up for electronics ... so i think he must has been using ODIN but he had used wrong files conducting the phone to be unbootable, and moreover : BOOTLOADER FAILED !!!
Everytime i flash a phone, the only thing i let on its place is the bootloader because if something happens during flash process : PROBLEM
And even if during flash process there is no problem, who knows if the bootloader injected is good ? perhaps it could be a dictionary page ?
I'm actually waiting for a part to come in my postbox.
This part is this thing : http://www.ort-jtag.com/shop.php?ID=32
With this, i will be able to connect myself (or anything other part of my body ) to the JTAG connector of the phone without destructing it by soldering like an old'parkinson guy !
But, i'm running into some kind of complexity with the flashing process because it seems that "AdamOutler and his friends" already worked on a similar case (different phone model // different CPU) and encountered an encryption problem.
I need the datasheet (detailed version) of the SAMSUNG Galaxy 3/Apollo CPU's for knowing if i'm running into some kind of problems ...
I hope that for uploading a bootloader there is no RSA keys needed.
If it is the case, then, i must say right now : it's dead.
Breaking RSA encryption is not the good way.
There are other ways (like bypassing code-signature) but i have to tell you guys that i'm not really expert in these techniques !
Will be back in a few days when i will receive the JTAG connector in my postbox...
---------- Post added at 09:27 AM ---------- Previous post was at 09:26 AM ----------
Yes sorry, i made a mistake, what i really meant was the CPU.
So i must not had told you QSC6270 but instead : the famous S5P6442
Click to expand...
Click to collapse
this is what the cpu is based on -
http://www.samsung.com/global/busin...Info.do?fmly_id=835&partnum=S5P6440&xFmly_id=
they are both the mostly the same........
u can get the datasheet and user guide but u first have to request for it....
and if they say yes they u can get it...
simkard said:
I need the datasheet (detailed version) of the SAMSUNG Galaxy 3/Apollo CPU's for knowing if i'm running into some kind of problems ...
Click to expand...
Click to collapse
Many of us want datasheets of s5p6442.
You could have a look to s3c6410's Application Notes, the two chips seems to be "similar".
http://www.multiupload.com/SO87X4GKI7
marcellusbe said:
Many of us want datasheets of s5p6442.
You could have a look to s3c6410's Application Notes, the two chips seems to be "similar".
http://www.multiupload.com/SO87X4GKI7
Click to expand...
Click to collapse
seems there is a jtag debug port......
maybe we can find a similar one on ours?
Tried this?
http://forum.xda-developers.com/showthread.php?t=1119769
We all were wondering if it would work.. So.. Try and mention here quick.. We are waiting to be proud owners...
Alex664 said:
Tried this?
http://forum.xda-developers.com/showthread.php?t=1119769
We all were wondering if it would work.. So.. Try and mention here quick.. We are waiting to be proud owners...
Click to expand...
Click to collapse
Errr ... is it a just a bad joke or are you serious ?
pls people! that is only for softbrick!
btw any progress?
simkard said:
Errr ... is it a just a bad joke or are you serious ?
Click to expand...
Click to collapse
Uhh.. I'll take the answer as a NO...
Alex664 said:
Uhh.. I'll take the answer as a NO...
Click to expand...
Click to collapse
Sorry for my strict answer, but, i'm not part of people that asks dumb questions without searching first on forums/google.
So yes i tried it.
... And, as i'm really paranoid, i tried it another time this morning
But ... no luck, i've got a big black brick like new ... but "hard-bricked".
So i will try to make my way to the JTAG connector and deal with it.
The JTAG connector is coming by post right now.
What i have to prepare by the way should be the code for my arduino to be some kind of an "interface" between a serial port available on my PC and the JTAG connector of the CPU of the SAMSUNG Galaxy 3 (Apollo).
Scheme should be :
[PC]:USB.port <-> RS232:[ARDUINO]:JTAG.protocol <-> [SAMSUNG GALAXY 3]:CPU.jtag
What i don't know right know is : what the hell the communication looks like on the JTAG pins ?
What i understood right now is that there is 7 pins :
XjTRSTn - INPUT - TAP Controller Reset
XjTMS - INPUT - TAP Controller Mode Select
XjTCK - INPUT - TAP Controller Clock
XjRTCK - OUTPUT - TAP Controller Returned Clock
XjTDI - INPUT - TAP Controller Data Input
XjTDO - OUTPUT - TAP Controller Data Output
XjDBGSEL - INPUT - JTAG selection. 1: Peripherals JTAG, 0: ARM1176JZF-S Core JTAG
All of these works based on "IO Power" of VDDSYS.
Voltage must be : -0.5v < VDDSYS < 4.6v
The voltage which has to be used must be +3.3v.
On my Arduino; i can use some little circuit to BUFFER and ADAPT serial communication voltage from +5v to +3.3v. This shouldn't be a problem to do it.
I need someone to help me with communicating on a JTAG port/interface.
It seems that JTAG connectors are differents from one ARM version to another.
Moreover, i couldn't find any information to know the bits order, the clock, the mode, the returning clock, etc ...
I tried to have a look at the Linksys WRT54G/GS on which there was a great JTAG community for bricked devices.
Problem is that this kind of JTAG port is not standard.
No luck on this device !
But i found some precious information inside this PDF : http://www.jtagtest.com/downloads/viatap.pdf on page 7/15.
It talks about JTAG Waveforms ... which is what i'm exactly looking for !
Knowing this i can do some code on my arduino which will be able to create the waveform, establish the HIGH and LOW states on different pins.
For now, as i said, i have a lot of projects to work on, and, i must wait for the JTAG connector to come inside my postbox !
See you guys
Related
In Upgrade Rom Closed The Rom Programer.
1.Not Charging By Charger
2.Not Connect For Upgrade
3.No PPC ON
4.Not Reset
hello amal
which rom where u upgrading , and is ur device G4 or G3
same problem
hello, my problem is the same. My device is a g4 and the rom i´m try up is the farias wm6.
So Can anyone explain me how i can do to fixed it?
thanks
amal u can join us in thread : (Dead wizard , never let's revive)
we are working on bricked wizards and reflashing by using JTAG method , we discovered the location of jtag pins under the cpu , but we need some body desolder the cpu from it's place to trace the pins to main board
that is all , so if u can do it u welcome
lmd0990 said:
amal u can join us in thread : (Dead wizard , never let's revive)
we are working on bricked wizards and reflashing by using JTAG method , we discovered the location of jtag pins under the cpu , but we need some body desolder the cpu from it's place to trace the pins to main board
that is all , so if u can do it u welcome
Click to expand...
Click to collapse
I have a dead G3 ( wet, no USB socket etc etc) board I am happy to donate to someone for tracing the test points - please PM me. I'm in the UK
M.S
THANKS
Mysterious Stranger said:
I have a dead G3 ( wet, no USB socket etc etc) board I am happy to donate to someone for tracing the test points - please PM me. I'm in the UK
M.S
Click to expand...
Click to collapse
Hi Mysterious Stranger
i am glad for ur fast response
that is great u have adead 1 (infact i not hope the ppc become dead)
but whatever is ur device , G4 or G3 , the important is the same CPU which is (TI OMAP 850)
so try desolder the cpu by urself (if u have the desoldering machine or equipments) or by repair stations near u
i am waiting news...............
lmd0990 said:
Hi Mysterious Stranger
i am glad for ur fast response
that is great u have adead 1 (infact i not hope the ppc become dead)
but whatever is ur device , G4 or G3 , the important is the same CPU which is (TI OMAP 850)
so try desolder the cpu by urself (if u have the desoldering machine or equipments) or by repair stations near u
i am waiting news...............
Click to expand...
Click to collapse
I have no desoldering equioment but I will send it to someone who has?
regards,
Mysterious Stranger said:
I have no desoldering equioment but I will send it to someone who has?
regards,
Click to expand...
Click to collapse
That is great
if u succes desoldering , the thing remain is tracing JTAG pins to main board , which was clear in my previous posts
iam waiting untill desolder it
JTAG 9100
I Have a JTAG Board With Buffer And I Can JTAG Flash Receiver
But I Can't JTAG Qtek 9100 If You Learn Pleas Help Me.
Hi amal
can explain what jtag tool exactly u have , u may take pictures of it & attach here
lmd0990 said:
That is great
if u succes desoldering , the thing remain is tracing JTAG pins to main board , which was clear in my previous posts
iam waiting untill desolder it
Click to expand...
Click to collapse
Sorry, to make clear, I DO NOT have deslodering equipment meaning I cannot do it but will send the board to someone who can!
No matter who desolder it , but the important is doing it
good luck.... I am waiting
lmd0990 said:
No matter who desolder it , but the important is doing it
good luck.... I am waiting
Click to expand...
Click to collapse
Until someone asks me to send the board to them to desolder, you may be waiting a long time!
Mysterious Stranger said:
Until someone asks me to send the board to them to desolder, you may be waiting a long time!
Click to expand...
Click to collapse
but why long time? Why u can't bring it soonly to a repair station or some place like it for desoldering?? They are present in ur region or city, i am right or not?
lmd0990 said:
but why long time? Why u can't bring it soonly to a repair station or some place like it for desoldering?? They are present in ur region or city, i am right or not?
Click to expand...
Click to collapse
Not that I know of,sorry. I can send to someone who does have one close.
J-TAG
lmd0990 said:
Hi amal
can explain what jtag tool exactly u have , u may take pictures of it & attach here
Click to expand...
Click to collapse
My Jtag Can Program IC FLASH Receiver And Ihave a Map For Receiver Flash
JTAG Conector But I Cant Program Flash Qtek 9100 Without Map JTAG Conector
Hi
I am sorry for my english but i will do my best to write well.
I have some problems with my G1 Trackball, i hope to find a solution, even if i am obligated to déactivate it, when i touch the trackball, the phone become crazy and starts a search with repeated letters and numbers like "2u542i33333333333" and continue to repeat the number 3, when it happens, i can't stop it or cancel, even all buttons become useless because the phone i think!, becomes busy. plz help me i love my G1 but cant use it well with this problem, somtimes i can't respond to a call because of this.
Thank you
Seeing as you just registered: are you even rooted? If you're not rooted just take it back and get a replacement.
Hi g13013!
I had the same issue on my device and was able to fix it.
It was caused by some damaged component on the mainboard.
Please follow this thread for details:
http://forum.xda-developers.com/showthread.php?t=616797
Regards,
scholbert
scholbert said:
Hi g13013!
I had the same issue on my device and was able to fix it.
It was caused by some damaged component on the mainboard.
Please follow this thread for details:
http://forum.xda-developers.com/showthread.php?t=616797
Regards,
scholbert
Click to expand...
Click to collapse
I read that, good job. However, if he's not going to root ever, he should try to replace it first. No need in messing up a warranty unless you're going to root. And taking it apart REALLY voids your warranty.
Hey r3s-rt!
r3s-rt said:
However, if he's not going to root ever, he should try to replace it first. No need in messing up a warranty unless you're going to root. And taking it apart REALLY voids your warranty.
Click to expand...
Click to collapse
Sure, i totally agree...
In fact, swapping some components on Dream's mainboard is for geeks only
If you got no clue about all that stuff, you may also brick the board forever.
Better claim warranty if there's one.
Regards,
scholbert
thank you all,
First of all i confirm that a bought it by internet and there is no waranty, so i will try the solution you gave me.
HI scholbert
(plz dont tell me that is a hardware related, or a least tell me that is easy to fix)
I saw your solution and , doesn't understand all things because a have no experience in electronics, because I leave in Algeria, we dont have an HTC after sales service, so i will ask you if the spare parts are difficult to find, is the solution difficult to do, and it will be great if you can send me the steps by image.
thank you, even if you can't help me
Bad news...
Hey g13013!
g13013 said:
(plz dont tell me that is a hardware related, or a least tell me that is easy to fix)
I saw your solution and , doesn't understand all things because a have no experience in electronics, because I leave in Algeria, we dont have an HTC after sales service, so i will ask you if the spare parts are difficult to find, is the solution difficult to do, and it will be great if you can send me the steps by image.
Click to expand...
Click to collapse
O.K. let me point it out like this...
1. I only can tell you what i examined on my device, but your device exactely got the same symptomes... in other words it's the same bad behaviour. Also the sequence of "bad" strings are the same.
It's about 99% that's this is hardware related.
2. If you're in luck there could be a short circuit at the component itself. This would mean you'll have to find the shorted pin.
There's some hope that the component itself is not damaged.
3. If it's necessary to swap the component, i must admit this is no easy task. To make it successful you'll definitely need some special equipment (e.g. hot air gun).
4. The component itself is not easy to find/buy at the market. I took another damaged mainboard and unsoldered the part.
So to sum up, without any knowledge about all that stuff and without good equipment, forget about it.
There's only one thing you could do (no soldering but technical skill is required though):
Follow the service manual (link is in the wiki), disassemble your phone with care and remove the trackball mechanic itself.
This will prevent the magnetic sensor of the trackball getting into activ state (which at least is the cause for the malfunction).
This won't fix the short circuit between the signals and of course you loose trackball function, but this makes your phone partly usable again.
Cheers,
scholbert
thank you a lot Mr, it was so clear, will informe you for the progress
g13013 said:
thank you a lot Mr, it was so clear, will informe you for the progress
Click to expand...
Click to collapse
You're welcome
Good luck with your device!
scholbert
I'm a pretty smart guy and I pick up on things quickly, but how people can take a consumer device (xbox, ps3, iphone, router, photoframe, digital camera, etc) and figure out wires and resistors that appear random in many cases to build a jtag connection and then magically dump the firmware and develop their own tweaks or custom firmware just escapes me. I've built jtag connections before, modified or replaced countless firmwares, but every time someone else already did the leg work and supplied a step by step with either pictures or a video. You have guys like geohot who hacked the iphone at like age 19 and then the ps3 shortly after.
I have an aluratek photo frame and I all I want it to do is automatically start the slideshow when the frame is turned on. Something seemingly so simple yet I wouldnt even know where to begin. I imagine it has a feature to upgrade the firmware either by usb or sd card. But I would first need a copy of the OWF and then I would have to know what to change to enable the feature. Maybe it has a jtag connection, but which wires go where I could only guess. I dont see how or where people learn this kind of stuff. It's definitely more then just a google search,
1: about jtag pin :
finding Jtag pin is easy check what cpu inside your hardware and serach shematique now 90% of cpu schema can get from china books, than you need just trace lines to get good soldering point
2: about hacking
after reading flash use any disassembler, ida is very good and with same skill you can reverse what you want
I think this is more dev and hacking than general q&a. Please correct me if that's wrong.
I'm looking for a way to access the primary storage from a different device, or access another device's primary storage from the base hardware. The equivalent of removing a hard drive and putting it in a different computer. As far as I know, bitlocker is not enabled on most platforms unless the policy was enforced with EAS or SCCM, so that shouldn't be an issue. But I only have an HTC 8x to play with right now, and they don't exactly come apart easy. I can't find much documentation for teardowns of any models at all, either.
I guess this all assumes there aren't jtag fuses in the SOC, but I can't find documentation of it. I thought I saw someone with a production device that had something about fuses in an image, but I can't find it.
Since I have an 8x as well, I was thinking the same thing...I was thinking about finding one with a smashed screen to take apart.
I did just get mine back from service, and they changed the back. Therefore, I think there must be a simple "trick" to break in lol
compu829 said:
Since I have an 8x as well, I was thinking the same thing...I was thinking about finding one with a smashed screen to take apart.
I did just get mine back from service, and they changed the back. Therefore, I think there must be a simple "trick" to break in lol
Click to expand...
Click to collapse
I'm almost completely certain that it has to do with attaching to a JTAG interface. That will let you access the eMMC controller directly. I just don't know the command set, and haven't touched jtag in forever.
Hello everyone,
I have a problem with my Samsung Galaxy S5 and I was hoping to find some help here.
When I got up this morning I unplugged my S5 from its charger. However, it was turned off which is usually not the case as I usually don't turn it off. After trying to switch it on for several times and failing with it, I asked Google for help.
What I found after some research was a hint that it might be a problem with either the battery, the charging cable or the mainboard that has been damaged/burned.
Long story short, after some testing (tried a new battery and charging cable) and going to two different repair shops, it turned out it probably is the mainboard. (I'm writing 'probably' because I don't trust those shops 100%. I left my phone at the second shop for about 2.5 hours though, for error diagnostics).
Nevertheless, what I want your help with are these three questions:
1. If there really is a problem with the mainboard, how can I find it all by myself? Is there a way to tell it apart? And is there a way of telling which (more or less) exact part/entity of the mainboard has been damaged?
2. Let's say the mainboard is damaged. Is it possible to fix it? And by fixing I don't mean to just replace the mainboard, but really fixing it. (Ofc I know it might depend on the part that has been damaged, this is why I asked Question #1).
3. Assuming there is no (feasible) way to repair that mainboard. How can I possibly save the data stored on the internal memory? Is there any Software available that can still read the storage? Or do I have to physically move the memory chip to a functioning mainboard, e.g. by soldering?
Any help is appreciated. Thank you in advance!
Eclipsian said:
Hello everyone, I have a problem with my Samsung Galaxy S5 and I was hoping to find some help here...
Click to expand...
Click to collapse
My personal opinion would be that one or both of the following may have happened.
1) Bad Charger - Chargers can go bad without any warning that resulted in your battery going dead.
2) Bad Battery - Also can just go bad suddenly or over time.
The motherboard of your device has a type of regulator that will only allow a certain amount of voltage/amperage to pass on to the battery. It's extremely rare for a proper charger to kill a motherboard (unless jumper cables were involved LOL!).
Your best bet is to replace both the battery and the charger but, this is only a suggestion/recommendation.
I wish you the best of luck!
~~~~~~~~~~~~~~~
I DO NOT PROVIDE SUPPORT VIA PM UNLESS ASKED/REQUESTED BY MYSELF.
PLEASE KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Ibuprophen said:
I wish you the best of luck!
Click to expand...
Click to collapse
Thank you very much. Unfortunately using a new battery and a new charger didn't solve the problem. And my charger is still in use for my backup phone, which is a Samsung Galaxy S2, and it's still working fine.
So it appears it really narrows down to some physical damage on the board.
After some more reading I found out that professional data recovery uses eMMC adapters for their SD card slot, as eMMC is downwards compatible to MMC. Unfortunately those adapters come at a cost of 85-230$, which of course is still cheaper than paying for professional data recovery, yet too expensive for having no actual clue how it even works. I still didn't figure out what the data will look like once I get access to the memory chip. Will I have to use an android emulator to get to the data? Will I have to use some special recovery tool to read the memory? Or is the eMMC already formatted in such a way that Windows can easily read it?
Anyway, what I'll try now is the cheapest method that came to my mind: mounting the eMMC on some sort of USB stick, that I found on aliexpress for 5$+shipping (it's called "USB3.0 eMMC 153 169 U disk PCB NS1081 main controller without flash memory for recycle emmc emcp chips").
I hope this will suffice to read the memory, somehow.
Any comments on this?
Eclipsian said:
Thank you very much. Unfortunately using a new battery and a new charger didn't solve the problem. And my charger is still in use for my backup phone, which is a Samsung Galaxy S2, and it's still working fine.
So it appears it really narrows down to some physical damage on the board...
Click to expand...
Click to collapse
Unfortunately Motherboards can go bad suddenly too but, there's a few options.
Option 1) You can try buying a USB JIG from eBay for $3-5, it's a tool designed to force your device into download mode. It isn't guaranteed to work but if it does you can flash the firmware. If it doesn't then you only lose $5.
Option 2) You can see if there's a friendly and helpful individual at an official service center for your device for a JTAG service. Though it isn't guaranteed to work but, some may do it for nothing while others can charge up to $50 +/-. The fees are all individually determined by them. Some have the JTAG service there while others require it to be shipped to another shop to repair them and then ship it back to you.
Option 3) You can always purchase another compatible motherboard and put the new one in your device. This is an option you can do yourself if you're careful.
These options/suggestions are the best that I can think of at this time and I hope one of those will work out for you.
Good Luck!
~~~~~~~~~~~~~~~
I DO NOT PROVIDE SUPPORT VIA PM UNLESS ASKED/REQUESTED BY MYSELF.
PLEASE KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE