Related
Hello, does someone have the jtag pinout for the uni?
Or at least the circuit diagram...
I thought the whole point of jtag was that it was a standardised interface connector:
http://www.interfacebus.com/Design_Connector_JTAG_Bus.html
or am I misunderstanding your question?
Cheers,
yes, I know what is jtag but probably my question was misplaced.
what I would know is where are jtag testpoints on universal.
my phone is bricked and the only hope of resurrection is restore the bootloader through jtag
ah right, I'm with you now. have you checked out the universal reference manual? is it mentioned in there?
-edit- no just checked doesnt appear to have any mention or picture of one.
sadly true: the service manual doesn't mention it.
does someone has got schematics for the universal?
sigh! i'm going to believe that my uni will be forever a nice paperweight...
any news?
Hello, I'm still stuck with my uni bricked. Anyone have new suggestions or jtag pinout?
Thanks!
I payed about 50USD to have my bootloader chip replaced here in China.
cant find any other solution for the same brick here. I'v heard someone here fixed his dead bootloader by jtag DOC reflash.good luck.
Hi champro, then does you have got the bootloader chip replaced and not reflashed?
Does you could contact someone to get jtag pinout for the universal?
Thanks a lot.
Any success for bootloader solutions ? I also have a bricked universal.
Thanks
Still nothing...
Hi, I haven't debricked my uni yet. But in the meantime I'm looking for a dead mainboard (or a whole dead phone) in the way I'll could desolder the cpu to trace the jtag pins. When I'll have this pinout I'll count on the support of this forum to find a pal that will dump a working phone to restore mine.
roglio said:
Hi, I haven't debricked my uni yet. But in the meantime I'm looking for a dead mainboard (or a whole dead phone) in the way I'll could desolder the cpu to trace the jtag pins. When I'll have this pinout I'll count on the support of this forum to find a pal that will dump a working phone to restore mine.
Click to expand...
Click to collapse
we are allready doing this no need to break two phones
Great!!!!!!!!
Fantastic! May I participate? I'm a average experienced user with jtag interfaces and a dead M5000 to work on!
Please is a lot of time that I'm waiting for the jtag pinout!
ok Lt.Cmdr.Ivan is going to trace the JTAG points from under the CPU of his dead Universal, last I heard he was about to put it in a toaster to get it off
You say you have JTAG experiance? When we find the points could you work out the best/only method etc to fix a broken Universal
Yes, I've already debricked a toshiba e740 pda last year. A complete success!
The best way to desolder a bga is to use a heater gun like those used to remove paint from walls. It is very cheap 15~20$. If you aim to the motherboard with this gun, surface mounted components literally fly away or fall down if is it in vertical position.
I'll wait anxiously for news!!!
i suppose who can afford a digital multimeter, can afford a hot-air soldering station as well. (well under $100 now)
anyway, you can just use a 300W infrared bulb and several hours and the work is done as well.
just pick off the plastic items before applying this heat.
Hi, any news? The number of bricked universal is growing!!!
roglioWhat software you used and what adapter LPT (wigler )or another?
If you know the points jtag as you will write in DOC (DiskOnChip) SPL and IPL ?
Just fyi progress ont he JTAG project can be found here:
The Universal JTAG Project
We found them
i cant install install any radio rom, my phone says no gsm. i bought the phone on line, and i dont no what rom was it before, but it has no gsm. then i flashed many radio roms with universal ruu-cid bypassing, but cant install..does not move, stuck at 0% then updat error, i have a g3. and i already searched thru the forum. but those didnt help at all...some solutions i found:
- flash with sd storage, he just posted a pic and didnt explain anything and never reply
- check ur id or something and make sure u have the same id? flash it back to original rom- which i didnt no what rom was installed in this phone before...then he didnt explain..
so, im wondering can any1 plz explain step by step how to flash any raido rom, or i have the feeling that its broken anyways, but wanna fix it if i could. thx in advance to all yall nice ppll
Try installing a WM5 ROM and then reflashing the radio. Also check the version of the bootloader, as that may be causing problems as well. I just updated mine to 1.01. Have been looking for 1.2, but the file available ay the wiki section doesn't seem to work. By the way, do you just not get any network signal, or do you get some sort of messages to that effect???
Cheers!
what does the new bootloader do? should i update the bootloader firs and then try to flash the radio rom? or just flash it back to wm6 then update the bootloader? 1 more thing, will any wm5 work?
I've got the same problem too.. I think it's a defect on the motherboard. I am loosing the SIM card at random intervals, I can't get it to happen - it just happens...
I am buying a new M/B I think something went wrong with the GSM part of the UNI.
Ariel
I have the same problem with "invalid sim card" ... As I have friend who's GSM repair guy, I got my card reader replaced, and also tried flashing new radio ROM - still loosing it - occasionally it's "no service", and at other times "invalid SIM"
I'll see if my friend will be able to find some bad soldiering on the MB and maybe fix it (optimistic outlook
If anyone solves this notify me
I think it maybe some microswitch on the motherboard, I switched sims - it's something else wrong with the radio part of the jasjar
--summoner
I had similar problem and it was connected with the metal pin where the SIM card is inserted, since it was not pushed enough to get contact with the module. Try this maybe can help
I tried, bent them some and sprayed contact cleaner everywhere...
nothing
COnsidewring the increasing issues of NO GSM, and as such now we have memory upgradation being done, here is the way to tackle the issue.Pls note and understand carefully what u are doing and then proceed.It involves hrdware skills.
-Open the Universal as per the guide and locate the Qualcomm Chip and Radio section, which is near the antenna.
- Apply the flux on the Qualcomm Chip and hot blow it mildly and carefully.This will eliminate any kind of dry solder and enhance the contacts of the chip.
-Reassemble and Immedialtely flash the Radio ROM only.If u can flash, then when reboot, it will show Radio None, insttead of NO GSM, as in case of Blue Angel.Soft reset again and u are back to normal Radio Version.
I hope this helps.I have been able to recover several Unis with this technique.
So you are saying the radio chip needs to be resoldered because some connection is loose?
What do you think is the reason?
--Summoner
Sorted!
I did as hdubli suggested and it worked! my uni has worked for 18 hours straight now whereas before would lose the sim every 10 minutes or so. Quite scary - although I have a rework station, I have never used it on anything so valuable before!
Thanks for the advice,
John
Cool,
What do you mean rework station? How can I do it myself? can I order this FLUX online?
Can you supply photos or more detailed instructions?
--summoner
Summoner,
a rework station is a hot-air blower used for soldering the very small components found in mobiles and micro-electronics. It is possible to melt all the solder under all the pins of a chip at the same time and if you use a little flux to prevent it ixidising when it melts, you can get all of the joints to be perfectly made. A rework station will cost at least $100US and you do need some practice before you risk your uni, but if you know a local phone-repair shop, they will either have a rework station or know a "man who can". Hdubli suggested reworking the Qualcomm chip in the radio section - the picture in the wiki shows at least 3 Qualcomm chips, so I did them all!
If you're happy with the concept and fancy having a go yourself then google for a local distributor of "aoyue" - they are a Chinese manufacturer of rework kit, and any electronics dealer that sells soldering kit will sell you a "residue-free flux pen". I got mine from Maplin.co.uk here in UK for less than $10us.
hope that helps,
JT
Thanks for your reply... I'll see if to get a rework station, it looks interesting - I know how to solder and stuff. but never used a rework station.
Does anyone have online instructions/tips for using?
--Summoner
www.sparkfun.com has some great tutorials on hot-air soldering and reworking of surface mount components. If you do get a rework station, I recommend a lot of practice on some dead gadgets before you risk your uni!
Best of luck with it,
John
Any luck with this rework method?
I tried to rework but no luck.
no gsm with htc phones/hermes
Hey, just a shot. ATT won't help worth crap and their customer service blows. I found out that if you do a hard boot to flash rom you need to remove the sims card. I am not sure if that is the procurring cause of the no gsm issue, but I don't have a data package and they program that sim to block the gsm! Well, blocking the gsm during programming also blocks your device from setting the parameters correctly for acquiring the imei, radio, and protocol version. DUH ATT! They admitted that they dont service the devices to me on the phone. That's my 2 cents. If it works for others let everyone else know. Now, can someone explain to me how to upgrade to 6.5 and where to start for programing this thing to do great things! Thanks, Ryan
webberz said:
Hey, just a shot. ATT won't help worth crap and their customer service blows. I found out that if you do a hard boot to flash rom you need to remove the sims card. I am not sure if that is the procurring cause of the no gsm issue, but I don't have a data package and they program that sim to block the gsm! Well, blocking the gsm during programming also blocks your device from setting the parameters correctly for acquiring the imei, radio, and protocol version. DUH ATT! They admitted that they dont service the devices to me on the phone. That's my 2 cents. If it works for others let everyone else know. Now, can someone explain to me how to upgrade to 6.5 and where to start for programing this thing to do great things! Thanks, Ryan
Click to expand...
Click to collapse
Welcome to the forum
You are in the wrong section
Universal does not means all HTC devices, it refers to a specific model
Try to look into the proper section of your device
Good luck,
This is a question for those in the know when it comes to programming.Why isn't there a way to revive a bricked phone? Can't there be some method for a host computer to manually write the radio to the device? How does HTC fix a bricked phone for it to be a refurb?
I'm just very curious about this because I see a few people attempt to update the radio only to lose power and brick their EVO. I have no programming experience so don't know what goes on at the internal component level. Thanks in advance for your input.
It goes back to the old bootstrapping problem when computers were being developed. A computer (in this case, your cell phone) is pretty dumb at the hardware level. All it can do is run programs. That's ALL it can do. It can't even load a program, only run them. Thus the problem. It gets solved by injecting a "bootstrap" program at startup (from the phrase "pull yourself up by your bootstraps") which is a program that runs and gives access to all the I/O, and the computer can then load more programs.
When you update this bootstrapping program, it gets dicey, because if it isn't written right, or if there's a glitch during the update, this most basic of all functions gets corrupted. If the program that tells the phone how to load programs goes away, all the phone can do is... sit there. Like a brick.
Hope this helped!
That helped me, thanks.
Soylent Grin said:
It goes back to the old bootstrapping problem when computers were being developed. A computer (in this case, your cell phone) is pretty dumb at the hardware level. All it can do is run programs. That's ALL it can do. It can't even load a program, only run them. Thus the problem. It gets solved by injecting a "bootstrap" program at startup (from the phrase "pull yourself up by your bootstraps") which is a program that runs and gives access to all the I/O, and the computer can then load more programs.
When you update this bootstrapping program, it gets dicey, because if it isn't written right, or if there's a glitch during the update, this most basic of all functions gets corrupted. If the program that tells the phone how to load programs goes away, all the phone can do is... sit there. Like a brick.
Hope this helped!
Click to expand...
Click to collapse
Thanks for the info. That is interesting. So how does HTC initially put the bootstrap in and/or how do they handle a bricked phone?
Soylent Grin said:
It goes back to the old bootstrapping problem when computers were being developed. A computer (in this case, your cell phone) is pretty dumb at the hardware level. All it can do is run programs. That's ALL it can do. It can't even load a program, only run them. Thus the problem. It gets solved by injecting a "bootstrap" program at startup (from the phrase "pull yourself up by your bootstraps") which is a program that runs and gives access to all the I/O, and the computer can then load more programs.
When you update this bootstrapping program, it gets dicey, because if it isn't written right, or if there's a glitch during the update, this most basic of all functions gets corrupted. If the program that tells the phone how to load programs goes away, all the phone can do is... sit there. Like a brick.
Hope this helped!
Click to expand...
Click to collapse
Thanks good explanation appreciate that.
rafroehlich2 said:
Thanks for the info. That is interesting. So how does HTC initially put the bootstrap in and/or how do they handle a bricked phone?
Click to expand...
Click to collapse
There is probably a JTAG interface somewhere in there. In fact,that's how the original hack of the IPhone was done. (Better ways were since found) Most devices have a quasi standard interface for programming the flash and accessing and the hardware for diagnostics. For instance,linksys routers actually have a spot on the board to solder a header and you can make a cable that connects to the parralel port. Do a google search for "Hairy Dairy Maid Debrick" and you will find it. A similar thing is probobally possible with the Evo (Ive even seen them on Hard Drives and CD Rom drives) The problem is,its not entirely standardized,and it might not even be a connector or pads on the board. It might instead be a matter of knowing where you can connect the leads on the board to something that under the right circumstances BECOMES the JTAG connector. (For instance,a pin that controls something else might be a JTAG interface for the first few hundred milliseconds of start-up,or if a certain other pin of the chip is grounded when the power is applied. It might also be completely internal to the chip,and there be NO connectors on the board (it almost CERTAINLY has the capability,they need it during prototyping) and the chips might be programmed BEFORE they are soldered in. It might take replacing the rom chip to get it to go. There are lots of ifs
Chances are though,the factory has a special cable and a special software program that can reprogram the device. To replicate that might be relatively easy or could be next to impossible but requires a certain degree of knowledge about the hardware. What I suspect is,until someone who has the skills to make such a cable bricks their phone,they wont bother figuring out how to debrick one. In fact,when that person bricks their phone,they will probably take it back to sprint and say "I dont know what happens" In fact,even if its stuck looping in an obviously hacked boot loader he for some odd reason cant undo,hes probably going to send it back to sprint. I know someone who did exactly that to their brand new HP laptop. He found that 15kv from the flyback of an old B&W television applied to the memory slots took care of the looping and Best Buy gave him another one. As he put it "I dont know what happened,but it smells bad and wont boot up"
pflatlyne said:
There is probably a JTAG interface somewhere in there. In fact,that's how the original hack of the IPhone was done. (Better ways were since found) Most devices have a quasi standard interface for programming the flash and accessing and the hardware for diagnostics. For instance,linksys routers actually have a spot on the board to solder a header and you can make a cable that connects to the parralel port. Do a google search for "Hairy Dairy Maid Debrick" and you will find it. A similar thing is probobally possible with the Evo (Ive even seen them on Hard Drives and CD Rom drives) The problem is,its not entirely standardized,and it might not even be a connector or pads on the board. It might instead be a matter of knowing where you can connect the leads on the board to something that under the right circumstances BECOMES the JTAG connector. (For instance,a pin that controls something else might be a JTAG interface for the first few hundred milliseconds of start-up,or if a certain other pin of the chip is grounded when the power is applied. It might also be completely internal to the chip,and there be NO connectors on the board (it almost CERTAINLY has the capability,they need it during prototyping) and the chips might be programmed BEFORE they are soldered in. It might take replacing the rom chip to get it to go. There are lots of ifs
Chances are though,the factory has a special cable and a special software program that can reprogram the device. To replicate that might be relatively easy or could be next to impossible but requires a certain degree of knowledge about the hardware. What I suspect is,until someone who has the skills to make such a cable bricks their phone,they wont bother figuring out how to debrick one. In fact,when that person bricks their phone,they will probably take it back to sprint and say "I dont know what happens" In fact,even if its stuck looping in an obviously hacked boot loader he for some odd reason cant undo,hes probably going to send it back to sprint. I know someone who did exactly that to their brand new HP laptop. He found that 15kv from the flyback of an old B&W television applied to the memory slots took care of the looping and Best Buy gave him another one. As he put it "I dont know what happened,but it smells bad and wont boot up"
Click to expand...
Click to collapse
Wow. Thanks for the detailed answer. Too bad this isn't a standardized item. I hope eventually things progress enough where this isn't even a thought. Thanks again for the good response.
Sent from my PC36100
rafroehlich2 said:
Wow. Thanks for the detailed answer. Too bad this isn't a standardized item. I hope eventually things progress enough where this isn't even a thought. Thanks again for the good response.
Sent from my PC36100
Click to expand...
Click to collapse
Yea,it would be nice if it were. Its kinda sorta quasi standard,so it HAS been done in some cases where its necessary,but often there are easier ways around it. Personally, I have allways thought that its a pretty stupid thing to make a piece of equipment that can fail due to a bad flash. The people who designed many of the flash memory chips seemed to agree,and they added something called a "boot block" to many,but the way its implemented,when its implemented doesn't fully protect you from a bad flash. Its even worse now that everything is in ball grid array chips soldered down to the board.
please help.
Thanks:good:
JTAG dump??
I'm not sure what you are asking but JTAG is not a kind of "firmware" or "software" on your phone.
You may find a JTAG being visible either under the battery or near the SIM/SDCard holder, its a circuitary pin-layout hidden, one may have to dismantle the back cover, usually 6 gold pins in a cluster close together.
It is that, using a special hardware box that has a vast-array of cables with designated pins (depending on hardware manufacturer), along with specialized software which would be specifically made for that particular handset.
The micro-code instructions are emitted by the hardware box attached to the cable, clipped in position on top of the JTAG pin-outs, which sends a signal to some part of the chip to revive it, and then from there, a appropriate firmware can get flashed into place using this method.
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
niceppl said:
please help.
Thanks:good:
Click to expand...
Click to collapse
What? I really do not think you know what you are looking for.
I've seen some tutorials saying the G4 is easily repairable, but I have some specific questions about repairs. The WiFi module on my phone is completely dead, and I want to try to replace it somehow. This guide shows where the module is, and what kind it is. Has anyone attempted a similar repair? Is it even possible? Where did you get the spare parts? Should I just try to get a whole new logic panel from a different G4? Does anyone have tips?
I tried adding links to the guide and the specific chip, but the spam filter blocked me out.
broadcom com/products/wireless-connectivity/wireless-lan/bcm4339
ifixit com/Teardown/LG+G4+Teardown/42705
It's going to be very difficult to get a single broadcom chip. Most of the time they're only sold in big quantities exclusively to corporate bodies or educational institutes. But let's say you got one. I'd urge you to use a BGA station or have it replaced by someone who has experience in using such a device, OR, do it like this guy here. It may show an eMMC replacement but the procedure is exactly the same.
Getting a new mainboard is also not very easy. Not only is it very difficult to find one, most of the time, smartphone logic boards have to be rewritten with the correct IMEI/SN/ESN or whatever. If you're lucky, you'll find a seller that offers such a service for a small fee.
I don't recommend getting a used mainboard in any case unless the seller is a trusted dealer. In such a case, you have to take care of the IMEI and SN stickers on the back of the phone. Make sure you attach them on the corresponding devices.