Tag Archives: Firmware

RIFF JTAG – CDMA Haier C3010, LG LSP450T Repair supported

Posted on by

22.04.2011  CDMA Haier C3010, LG LSP450T Repair supported

Resurrecting Haier C3010 is simple. Phone is auto powered on with USB Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
Current resurrector contains Firmware and EEPROM zones for memory chips with IDs 0x00EC/0x257E and 0x017E/0x2210. Proper data will be selected automatically depending on memory ID in your device.

To resurrect Haier C3010:

  • Solder JTAG cable to Haier C3010 JTAG pads;
  • Insert USB Data cable into board and PC;
  • Make sure Haier C3010 is selected in the list of models;
  • Click Resurrect button;
  • Choose which areas to flash;
  • Wait till software signals a successful operation completion;
  • De-solder JTAG wires;

Resurrecting LG LSP450T is simple. Phone is auto powered on with USB Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
Current resurrector contains Firmware and EEPROM zones for memory chip with ID 0x0020/0x8867

To resurrect LG LSP450T:

  • Solder JTAG cable to LG LSP450T JTAG pads;
  • Insert USB Data cable into board and PC;
  • Make sure LG LSP450T is selected in the list of models;
  • Click Resurrect button;
  • Choose which areas to flash;
  • Wait till software signals a successful operation completion;
  • De-solder JTAG wires;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – JTAG Manager v1.31, RIFF Box Firmware v1.23 released

Posted on by

20.04.2011 JTAG Manager v1.31, RIFF Box Firmware v1.23 released

Whats new :

JTAG Manager 1.31

  • “RUN/STOP” Loaders functionality is added (and alternative to the DCC Loaders)

This is required for some ARM7 cores when Debug Communication Channel (DCC) to/from core is not functional (like in MSM6000)

Firmware 1.23

  • Added 8/16/32-bit bus read/write access rotuines for ARM7 core
  • ARM7 debug is now available in ARM/Thumb modes (use the GDBServer for this);

 

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – JTAG Manager v1.29, RIFF Box Firmware v1.21 released

Posted on by

31.03.2011  JTAG Manager v1.29, RIFF Box Firmware v1.21 released

JTAG Manager 1.29
—————————

  • Fixed bug with plugins managing in case there is more than 1 plugin DLL available;
  • Currently selected plugin is remembered now and will stay on next startups;
  • Fixed Access Violation error during software startup in case there is none resurrector DLL present;
  • Added Reset Method selection feature for more precise reset operation when Custom Target Settings is active;
  • Updates manager & Updates tracking were completely reworked, and now are based not on the system time but on file’s hashing.
    Thus since now on the JTAG Manager’s installation folder can be copied/moved/re-installed (whatever else) without need to re-download full set of files again.
  • (SDK): more functions are now available (exported) for future Resurrector DLLs;
  • Many cosmetic changes;
  • FINALLY: “healed” the optimized DLL loading scheme:
    User shall see: “Found and Initialized: XXX New and YYY Old External Repair Pack(s)” where XXX must be always non-zero only on first startup after there were new DLLs downloaded from the support.
    On following JTAG Manager startups XXX shall be always equal to zero (!!!)
    For example, after downloading 3 more new DLLs while there were 100 Resurrector DLLs already installed, after JTAG Manager restarts user shall see:
    Found and Initialized: 3 New and 100 Old External Repair Pack(s)
    on next and all following restarts user shall see:
    Found and Initialized: 0 New and 103 Old External Repair Pack(s)
  • Re-worked balloon hints system – Own (not windows’) balloons are shown, so no matter now what are the windows’ tray icon settings are.
  • Added balloon hints for cases when target is not detected, error code 0x45, Device Id = 0x000000E1.
    Don’t forget that balloons hints can be switched on or off from the DCC Read/Write page – click “Notifications…” and select”For Advanced Users” page to see settings
  • – JTAG Manager now has new Icons 🙂
  • – Improved JTAG Manager restarting during updating itself

Firmware 1.21
—————————

  • Added RX-polling feature (debugger-to-target) for PXA3XX DCC transfers.

RIFF BOX firmware is able now to wait (if resurrector DLL will request so) for PXA3XX target to be ready to accept
next packet over DCC: this feature slows down a little the JTAG-to-Target DCC
transfers but guaranties no packets loss for slow clocked targets;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RoverPC EVO V7 Unbrick – Dead boot repair supported

Posted on by

21.03.2011  RoverPC EVO V7 Unbrick – Dead boot repair supported

RoverPC Evo V7 resurrection is simple. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.

To resurrect RoverPC Evo V7:

  • Solder JTAG cable to RoverPC Evo V7 JTAG pads;
  • Connect USB cable to phone and PC;
  • Make sure RoverPC Evo V7 is selected in the list of models;
  • Make sure a fixed TCK frequency is selected;
  • Click Resurrect button;
  • Wait till software signals a successful operation completion;
  • Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original firmware downloader software to restore it to the working state.

To enter download mode:

  • Disconnect PC cable;
  • Insert battery;
  • Hold both ‘Volume Down’ and ‘Camera’ keys and press Power-On.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RIFF Box firmware v1.21 released

Posted on by

21.03.2011  RIFF Box firmware v1.21 released

Whats new:

  • Added RX-polling feature (debugger-to-target) for PXA3XX DCC transfers.

RIFF BOX firmware is able now to wait (if resurrector DLL will request so) for PXA3XX target to be ready to accept
next packet over DCC: this feature slows down a little the JTAG-to-Target DCC
transfers but guaranties no packets loss for slow clocked targets;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RIFF JTAG Manager v1.28, RIFF Box firmware v1.20 released

Posted on by

14.03.2011  RIFF JTAG Manager v1.28, RIFF Box firmware v1.20 released

Whats new :

Firmware 1.20

  • Optimised connection to the PXA270 core
  • Added DCC TX channel (host-to-debugger) cleanup (flushing) feature (happens now during DCC Read with 0 timeout parameter) for Cortex-A8
  • Optimized Cortex-A8 connection establishment after coming out of reset (after NRST signal assertion)
  • Added emergency script processing for Cortex-A8 core (h/w script which is executed immediately after core was halted)

JTAG Manager 1.28

  • Added RAM selft-test right before uploading DCC loader.
  • Added functionality to handle complex memory devices (like MDOC H3) with lengths not necessary to be alighned to MBs;
  • Added DCC TX channel flushing command before starting DCC Loader – thus it is guaranteed that next first DCC read will get DCC Loader’s packet and not some residual trash data.
  • Added 1GB and 2GB OneNAND chips to the size autodetection list.
  • Added progress indication during saving files which were read on the DCC Read/Write page

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – ASUS P526 Unbrick, Dead Boot repair supported

Posted on by

10.03.2011   ASUS P526 Unbrick, Dead Boot repair supported

Resurrection of ASUS P526 is slightly complicated. JTAG pads are very small and sensitive thus extreme care must be taken when soldering wires to the board. Battery must be connected in order to establish JTAG connection.
Current resurrector re-flashes only the IPL area, and will not re-write MDOC XLOADER area (though write of this area is supported too).
Please note: DiskOnChip G4 memory has security features, due to which there is a risk of permanently blocking the access to the flash memory while re-flashing the XLOADER areas. Current resurrector will not touch the XLOADER zone, but it is possible you’re already holding such killed device in hands. If it is so you will see this error:
****************************************************************
Detected a Not Initialized FLASH1 Chip ID: 0x0400/0xFBFF
ERROR: Selected FLASH Chip was not initialized by the DCC Loader
****************************************************************

This can happen due to unknown protection keys used or due to permanently blocked MDOC chip. If latter is true we advise you to solder a new flash memory chip or throw this phone away to the trash bin.

To resurrect ASUS P526:

  • Solder JTAG cable to ASUS P526 JTAG pads;
  • Insert battery and connect USB cable to phone and PC;
  • Make sure ASUS P526 is selected in the list of models;
  • Click Resurrect button;
  • Wait till software signals a successful operation completion;
  • Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
If phone not enters download mode after resurrection then it means XLOADER was damaged too but memory chip is still usable. In this case repeat resurrection using RAM Downloader Mode and when USB connection is established reflash the phone with official firmware.

To enter download mode:

  • Disconnect PC cable;
  • Insert battery;
  • Move ‘Lock’ slider down, hold ‘OK’ key (on the left) and press ‘Power ON’ button. In few seconds you should see TriColor picture.

Additional info:

  • Phone has DiskOnChip G4 memory type, which has security features. It has two password protected partitions (Password1 = 12345678, Password2 = 00000000);
  • XLOADER re-flash is not performed in this resurrector on purpose. While re-flashing the XLOADER area there is a risk of permanently blocking the memory chip.
  • Any write access (Erase or Write) on MDOC NAND memory range 0x00000000 to 0x0017FFFF is rejected by the DCC Loader

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RIFF JTAG Manager v1.27, RIFF Box Firmware v1.19

Posted on by

10.03.2011   RIFF JTAG Manager v1.27, RIFF Box Firmware v1.19

Whats new :

RIFF JTAG Manager v1.27

  • Fixed access violation bug upon JTAG Manager startup if there is no RIFF Box detected and Cancel button is clicked.
  • (SDK): more functions are now available (exported) for future Resurrector DLLs;
  • Added flags for JTAG Manager to be able to retrieve memory chip size from the DCC Loader.
  • Fixed initialization bug for NOR-related DCC Loadererss
  • ScriptEngine: added options pocessing ‘/byte’, ‘/word’, ‘/long’ to data.save.binary instruction: thus it’s possible now to read memory through script  using desired bus access width (8-,16-, or 32-bit widths).  For example: “data.save.binary c:\myfile.bin 0x00..0x11FF /word” – will read 0x1200 bytes from memory into myfile.bin file starting from address 0x00 using 16-bit bus accesses.

Note: “Read Memory” button on the JTAG Read/Write page reads memory using 32-bit bus accesses only.

RIFF Box Firmware v1.19

  • Added more H/W script (*.has) instructions;
  • Added HTC security processing functions;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF JTAG – RIFF JTAG Manager v1.24, RIFF Box Firmware v1.18 released

Posted on by

10.02.2011 RIFF JTAG Manager v1.24, RIFF Box Firmware v1.18

Firmware 1.18
—————————
– PXA270 debug is now available in ARM/Thumb modes (use the GDBServer for this);

JTAG Manager 1.24
—————————
– In case when Resurrector has no DCC Loader the JTAG Manager will now report it correctly and will not allow DCC Read/Write features
– (SDK): more functions are now available (exported) for future Resurrector DLLs;
– Usefull Plugins Enabled
—————————

Qualcom FullFlash Image Processing Tool:

This plugin works with NAND image files which have generic Qualcomm layout

With help of this plugin you can do:
– Disassemble a full NAND image file previously obtained with JTAG Manager (DCC Read/Write Page);
– Inspect each partition contents (main zone and spare zone) simultaneously;
– Save separate partitions to HDD (only main zone, only spare zone, or both zones);
– Write a chosen partition directly into phone;
– Read a chosen partition directly from the phone and substitute old partition contents to new ones;

Please note, direct read/write operations from/to the phone will require proper resurrector to be set (Resurrector Settings: thus before clicking the Activate Plugin button make sure compatible model is selected as well as other settings like TCK/RTCK frequencies).

You can access it from “Usefull Plugins” TAB :

RIFF Box JTAG Manager v1.23, RIFF Box Firmware v1.17 released

Posted on by

07.02.2011 RIFF Box JTAG Manager v1.23, RIFF Box firmware v1.17

Firmware 1.17
—————————

* Optimized DCC transfers (debugger-to-target) for ARM9 cores (~64,3% speed increase)
* Added RX-polling feature (debugger-to-target) for ARM9 DCC transfers.

RIFF BOX firmware is able now to wait (if resurrector DLL will request so) for ARM9 target to be ready to accept next packet over DCC: this feature slows down a little the JTAG-to-ARM9 DCC transfers but guaranties no packets loss for slow clocked targets;

JTAG Manager 1.23
—————————

* Improved DCC flashing functionality (for DCC Loaders that work in targets with a small RAM capacity);
* Added 4 very low RTCK Sampling frequencies (20kHz, 40kHz, 60kHz and 80kHz) for some extreme cases
* Fixed another bug in the optimized DLL loading scheme;
* Increased ERASE waiting timeout (for slow NOR flash chips) so now erase operation for such chips will go successully and will not result in erase timeout
* Added “Usefull plugins” page;

“Usefull Plugins” will be new feature, we hope to release first one during this week. So stay tuned.

As usually, click the “Check for Updates” button to obtain latest files.