RIFF JTAG UPDATES HERE!

[You must be registered and logged in to see this link.]


Please start JTAG Manager and click “Check for Updates” button. You’ll be notified about new DLL, download it and restart the software.

“LG_GT540.dll” contains pinout, instructions and required repair files for LG GT540 Optimus Unbrick – Repair Dead Boot.


[You must be registered and logged in to see this link.]

RIFF Box firmware v1.17 and RIFF Box JTAG Manager v1.23 required !

[You must be registered and logged in to see this link.]

RIFF JTAG – CDMA Huawei C2906 Boot repair supported

RIFF JTAG – HTC HD7 Unbrick, Unlock, IMEI Repair and CID Update supported

RIFF JTAG – Atmel AT91SAM9263-EK NAND Interface supported

RIFF JTAG – HTC P3400 (HTC Gene 100) Unbrick – Boot repair supported

RIFF JTAG – HTC P3300 (HTC Artemis 100) Unbrick – Boot Repair Supported

RIFF JTAG – QUALCOM NAND ESM7XXX Generic DLL released


04.03.2011 QUALCOM NAND ESM7XXX Generic DLL released

Resurrector ESM7XXX L41 D04 contains only DCC Loader, thus it is to be used only for operations on DCC Read/Write page in the JTAG Manager.

Embedded DCC Loader is designed to work inside of MCU’s internal RAM memory, thus it is not sensitive to external SDRAM configuration or availability or its physical state.

Initial H/W init sequence will setup MCU’s PLL0 with these parameters:

* L/M/N = 0×41/0×00/0×01;
* Global Clock Divisor = DIV4

If you don’t know what the L, M, N or Global Clock Divisor parameters are, then just keep in mind:

* Highest L values and lowest Global Clock Divisor values will make maximum clocking frequency supplied to the MCU’s core and thus DCC Read/Write speed will be maximum fast;

* Too high frequency supplied to the MCU’s core may result in core overheating or instable operation;

RIFF JTAG – Samsung G800 Unbrick, dead boot repair supported


04.03.2011   Samsung G800 Unbrick, dead boot repair supported
Please start JTAG Manager and click “Check for Updates” button. You’ll be notified about new DLL, download it and restart the software.
“Samsung_G800.dll” contains pinout, instructions and required repair files for Samsung G800 Unbrick, dead boot repair.
[You must be registered and logged in to see this link.]

RIFF JTAG – ZTE MF180S Broadband modem Unbrick/Repair


Please start JTAG Manager and click “Check for Updates” button. You’ll be notified about new DLL, download it and restart the software.
“ZTE_MF180S.dll” contains pinout, instructions and required repair files for ZTE MF180S Broadband modem Unbrick/Repair boot.
[You must be registered and logged in to see this link.]

RIFF JTAG – HTC Tattoo A3232 (HTC Click 1100) Unlock, Unbrick, IMEI repair, CID Update

10.03.2011 HTC Tattoo A3232 (HTC Click 1100) Unlock, Unbrick, IMEI repair, CID Update supported


Resurrecting HTC Click is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is inside.
There are two different hardware versions exist – one based on the MSM7225 chipset (CLIC10000) and other – on the ESM7225 chipset (CLIC11000). In resurrector settings you can select a desired version.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 0.52.0001 SPL version.
As well, you can change CID – for this make sure ‘Repair Custom ID’ field is checked in the Resurrection Guide dialog.
To resurrect HTC Click:

• Solder JTAG cable to HTC Click JTAG pads;


• Make sure HTC Click is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To Unlock HTC Click :

• Solder JTAG cable to HTC Click JTAG pads;


• Make sure HTC Click is selected in the list of models;


• Click Resurrect button;


• Select “Unlock Settings” TAB


• Select Unlock method


• Click “Unlock”

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – Samsung SGH-i607 BlackJack PDA Unbrick, Dead Boot repair supported


Resurrecting Samsung i607 PDA part is easy. Phone requires battery presence in order to establish JTAG connection. If you additionally connect charger the phone will be auto powered on and there will be no need to press Power on key.
In case you experience connection problems, de-power phone completely, disconnect charger (if it was used), then insert battery, click Resurrection button in the JTAG Manger and immediately (within 0…1 seconds) press Power On key.
To unbrick Samsung i607 PDA part:

• Solder JTAG cable to Samsung i607 PDA JTAG pads;


• Make sure Samsung i607 PDA is selected in the list of models;


• If only battery is connected – press Power On key shortly;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

CDMA Samsung SPH-D700 Galaxy S Epic 4G Unbrick, Dead Boot repair supported


14.03.2011 CDMA Samsung SPH-D700 Galaxy S Epic 4G Unbrick, Dead Boot repair supported
Samsung SPH-D700 is based on the S5PC110 Processor (ARM core is Cortex-A8). Depending on firmware state resurrection can be a bit confusing: for successful connection you will require charged battery. Please note – no matter whether you have USB cable or not – it must not be connected to phone. This is important.
Resurrector will reflash IBL, PBL, SPL and PARAM areas. Additionally you can select KERNEL and RECOVERY partitions to be reflashed too. Though them are required only for recovery mode and not needed for following USB firmware update by Odin software. So if you don’t need recovery mode don’t select these 2 partitions – otherwise you will just waste time waiting for them to be reflashed.
If after resurrection the download mode still cannot be initiated (LCD remains blank) do repeat resurrection with ‘Clone Gremlin zone’ option checked.
To resurrect Samsung SPH-D700:

• Solder JTAG cable to Samsung SPH-D700 JTAG pads;


• Make sure USB cable or charger is not connected;


• Make sure Samsung SPH-D700 is selected in the list of models;


• Make sure a fixed TCK frequency is selected;


• Insert battery;


• Click Resurrect button;


• Press Power On key; when you will see “Establish communication with the phone…” message – press Power On ey again (and hold it pressed for 1-2 seconds);


• Wait till software signals a successful operation completion;


• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.
To enter download or recovery mode:

• Disconnect PC cable;


• Insert battery;


• Hold ’1′ key on the keypad and press Power-On to enter download mode;


• Hold both ‘Volume Down’ and ‘Camera’ keys and press Power-On to enter recovery mode.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – Toshiba Portege G900 Unbrick, Dead Boot repair supported


14.03.2011 Toshiba Portege G900 Unbrick, Dead Boot repair supported
Resurrection of Toshiba Portégé G900 PDA part is not hard. Battery is required for successful HALT operation. If USB Data Cable is connected phone is auto powered on when battery is inserted.
If during connect operation (“Establish communication with the phone…”) after 2-3 passes there is still no success (progress bar keeps running from 0 to 100% and so on) then remove battery and insert it again. If USB cable is not connected then press and hold Power On key.
Current resurrector re-flashes only the EBOOT and secondary EBOOT area, and will not re-write IPL area (though write of this area is supported too).
Please note: DiskOnChip G4 memory has security features, due to which there is a risk of permanently blocking the access to the flash memory while re-flashing the IPL areas. Current resurrector will not touch the IPL zone, but it is possible you’re already holding such killed device in hands. If it is so you will see this error:
****************************************************************
Detected a Not Initialized FLASH1 Chip ID: 0×0400/0xFBFF
ERROR: Selected FLASH Chip was not initialized by the DCC Loader
****************************************************************
This can happen due to unknown protection keys used or due to permanently blocked MDOC chip. If latter is true we advise you to solder a new flash memory chip or throw this phone away to the trash bin.
To resurrect Toshiba G900 PDA part:

• Solder JTAG wires to the Toshiba G900 PDA pads;


• Connect USB cable to phone and PC;


• Make sure Toshiba G900 PDA is selected in the list of models;


• Insert battery and click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter USB download mode:

• Disconnect PC cable;


• Insert battery;


• Hold ‘Left soft’ key (which is exactly above the Dial key) and press ‘Power ON’ button. In few seconds you should see red download screen.

To enter SD-card download mode:

• Disconnect PC cable;


• Insert battery;


• Hold ‘D’ key and press ‘Power ON’ button.

Additional info:

• Phone has DiskOnChip G4 memory type, which has security features. It has two password protected partitions (Password1 = 12345678, Password2 = 00000000);


• IPL re-flash is not performed in this resurrector on purpose. While re-flashing the IPL area there is a risk of permanently blocking the memory chip.


• Any write access (Erase or Write) on MDOC NAND memory range 0×00000000 to 0x0017FFFF is rejected by the DCC Loader. For full image writing convenience access to that range will not rise any error, data will just be ignored and reported as if it was written successfully, thus you still can write full image files using ‘Auto FullFlash Size’ checked.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – Huawei E153U Broadband modem unbrick – dead boot repair supported


17.03.2011  Huawei E153U Broadband modem unbrick – dead boot repair supported
Resurrecting Huawei E153U is simple. Just make sure you solder all JTAG signals and insert modem into a USB port for it to get powered.
If modem is not detected by RIFFBOX JTAG, disconnect JTAG connector, re-insert modem into USB and then connect back the JTAG connector.
There are secured (QCSBL is signed) and non-secured (QCSBL is not signed) modem revisions exist. Resurrector will automatically detect board revision and will select proper data to be flashed.
No matter what h/w revision is you can select which partitions are to be flashed during resurrection process.
To resurrect Huawei E153U:

• Solder JTAG cable to Huawei E153U JTAG pads;


• Insert Huawei E153U modem into any USB port for power;


• Make sure Huawei E153U is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• De-solder JTAG wires;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – RoverPC EVO V7 Unbrick – Dead boot repair supported


21.03.2011  RoverPC EVO V7 Unbrick – Dead boot repair supported
RoverPC Evo V7 resurrection is simple. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
To resurrect RoverPC Evo V7:

• Solder JTAG cable to RoverPC Evo V7 JTAG pads;


• Connect USB cable to phone and PC;


• Make sure RoverPC Evo V7 is selected in the list of models;


• Make sure a fixed TCK frequency is selected;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original firmware downloader software to restore it to the working state.
To enter download mode:

• Disconnect PC cable;


• Insert battery;


• Hold both ‘Volume Down’ and ‘Camera’ keys and press Power-On.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG - Samsung GT-B7330 Omnia PRO Boot Repair Supported


22.03.2011 Samsung GT-B7330 Omnia PRO Boot Repair Supported

Please start JTAG Manager and click “Check for Updates” button. You’ll be notified about new DLL, download it and restart the software.
“Samsung_B7330.dll” contains pinout, instructions and required repair files for Samsung GT-B7330 OmniaPRO Unbrick – Boot Repair.

RIFF JTAG – HTC Ozone XV6175 (HTC Chief) Unbrick, Boot Repair, Unlock, IMEI Repair, CID Update supported


HTC Ozone XV6175 (HTC Chief) Unbrick, Boot Repair, Unlock, IMEI Repair, CID Update supported


Resurrecting HTC Chief is easy:
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 0.44.0000 SPL version.
Additionally, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘CEDA10000′.
As well, you can change CID – for this make sure ‘Repair Custom ID’ field is checked in the Resurrection Guide dialog.
To resurrect HTC Chief:

• Solder JTAG cable to HTC Chief JTAG pads;


• Make sure HTC Chief is selected in the list of models;


• Insert battery and connect USB Cable;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – HTC Advantage X7510 (HTC Athena) Unbrick – Boot Repair supported


04.04.2011  HTC Advantage X7510 (HTC Athena) Unbrick – Boot Repair supported
Resurrection of HTC Athena is easy. Most convenient is to have USB cable connected and battery inserted.
If during connection progress bar in JTAG Manager keeps running from 0 to 100% press with stylus the reset button on the phone (reset button is near to the JTAG pads).
Resurrector will reflash IPL and SPL areas. You can select SPL version to be flashed in the settings window which popups before resurrection. IPL which is flashed: “ATHENA IPL DVT 2.02 H3” version.
Current resurrector works only with HTC Athena hardware revisions which have DiskOnChip H3 memory chip installed. If you have hardware revision with DiskOnChip G4 memory chip used then select different resurrector.
To resurrect HTC Athena with DiskOnChip H3:

• Solder JTAG cable to HTC Athena JTAG pads;


• Insert battery and connect USB cable to phone and PC;


• Make sure HTC Athena is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;


• Insert battery;


• Hold ‘Camera’ key and press ‘Power ON’ key or use stylus to press ‘Reset’ button. In few seconds you should see TriColor picture.

Additional info:

• DiskOnChip H3′s full NAND memory chip is divided into partitions by the internal memory controller. Thus DCC Loader creates virtual FLASH chip for each partition – you can read/write these partitions by selecting proper ROM index (“Access ROMi Address Space”) on the JTAG Manager’s DCC Read/Write page;


• DiskOnChip H3 has no spare zones, thus only Main field must be used during write operations. ECC Enable checkbox has no meaning here.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG - CDMA Day ! QSC1100, Micromax C111, Huawei C2830 supported

06.04.2011 CDMA QUALCOMM QSC1100 Generic DLL released


Resurrector QSC1100 X14 contains only DCC Loader, thus it is to be used only for operations on DCC Read/Write page in the JTAG Manager.
Embedded DCC Loader is designed to work inside of MCU’s internal RAM memory, thus it is not sensitive to external SDRAM configuration or availability or its physical state.


Initial H/W init sequence will setup MCU’s PLL with these parameters:

• Clock Multiplier = 0×14

Since few different versions of QSC1100 resurrector may exist (with different multiplier values) you may select the one which suits best to your device

06.04.2011 CDMA Micromax C111 Boot repair supported


Resurrecting Micromax C111 is simple. Board is auto powered on when battery is inserted and USB cable is connected.
There are 2 different hardware revisions of this phone – one is based on Qualcomm QSC1100 MCU and other – is Qualcomm QSC6010 MCU. Current resurrector shall be selected if you have QSC1100 revision.
Resurrector re-flashes only firmware zone of the phone (0×000000 to 0x6FFFFF).
To resurrect Micromax C111:

• Solder JTAG cable to Micromax C111 JTAG pads;


• Connect ignition cable for auto power on or use battery;


• Make sure Micromax C111 is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• De-solder JTAG wires;

06.04.2011 CDMA Huawei C2830 Boot repair supported


Resurrecting Huawei C2830 is simple. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board. Since the JTAG test points are placed under keyboard sticker we recommend using USB data cable to supply power to the device.
Resurrector re-flashes only firmware zone of the phone (0×000000 to 0x5FFFFF).
Please note: if you do not have JIG (that is you solder wires instead) then black graphite covering has to be carefully scratched off in order to access copper surface of the pads.


To resurrect Huawei C2830:

• Solder JTAG cable to Huawei C2830 JTAG pads;


• Insert USB Data cable into board and PC;


• Make sure Huawei C2830 is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• De-solder JTAG wires;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.


[You must be registered and logged in to see this link.]

RIFF JTAG – CDMA Samsung B159 Boot repair supported


06.04.2011   CDMA Samsung B159 Boot repair supported
Resurrecting Samsung B159 is simple. Board is auto powered on when battery is inserted and USB cable is connected.
Resurrector re-flashes only firmware zone of the phone (0×000000 to 0x57FFFF).
To resurrect Samsung B159:

• Solder JTAG cable to Samsung B159 JTAG pads;


• Connect ignition cable for auto power on or use battery;


• Make sure Samsung B159 is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• De-solder JTAG wires;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – Samsung S7230E Wave 723 Unbrick – Boot Repair supported


08.04.2011 Samsung S7230E Wave 723 Unbrick – Boot Repair supported
Resurrecting Samsung S7230E is easy. To power the phone connect USB cable and insert battery. In case phone is not detected de-power phone completely, then wait few seconds, insert USB cable and then insert battery.
To resurrect Samsung S7230E:

• Solder JTAG cable to Samsung S7230E JTAG pads;


• Connect USB cable to phone and PC;


• Insert battery;


• Make sure Samsung S7230E is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state. We used MultiLoader 5.64 version.
To enter download mode:

• Disconnect PC cable;


• Insert battery;


• Hold both ‘Volume Down’ (on the left side of phone) and ‘Lock’ (right side bottom part) keys and press Power-On.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – HTC 7 Mozart Unbrick, Unlock, IMEI Repair, CID Repair, ModelID Repair supported


09.04.2011    HTC 7 Mozart Unbrick, Unlock, IMEI Repair, CID Repair, ModelID Repair supported
Resurrecting HTC Mozart is easy. Phone is auto powered on with USB Data Cable connected to the PC while battery is connected.
In case you have no USB cable near, make sure battery is charged enough and hold Power On button during initiation of JTAG connection.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 0.60.1000 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PD6710000′.
To resurrect HTC Mozart:

• Solder JTAG cable to HTC Mozart JTAG pads;


• Insert USB Data cable into board and PC;


• Make sure HTC Mozart is selected in the list of models;


• If you use battery, press Power On key;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;


• Insert battery;


• Hold ‘Volume Down’ key and press ‘Power ON’ button.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG – CDMA HTC Droid Eris, Unbrick, Boot Repair, ModelID repair supported

12.04.2011   CDMA HTC Droid Eris, Unbrick, Boot Repair, ModelID repair supported
Resurrecting HTC Droid Eris is easy. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence is not required; connection can be established with detached board.
Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PB0010000′.
To resurrect HTC Droid Eris:

• Solder JTAG cable to HTC Droid Eris JTAG pads;


• Insert USB Data cable into board and PC;


• Make sure HTC Droid Eris is selected in the list of models;


• If you use battery, press Power On key;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
To enter download mode:

• Disconnect PC cable;


• Insert battery;


• Hold ‘Volume down’ key and press ‘Power ON’ button to enter HBoot menu;


• Hold ‘Volume up’ key and press ‘Power ON’ button to enter Recovery mode;

Manual Activation of the phone (in case you see Activation screen and phone is unable to make call to retrieve settings automatically):

• Press Emergency Call;


• Dial ##778 and press Call key;


• Tap “Edit Mode”;


• Enter password “000000”;


• Tap NAM Settings;


• Enter your 10 digit phone number and tap OK;


• Tap NAM1 and enter your 7 digit cell phone number without area code;


• Tap NAM2 and enter your 3 digit area code;


• Tap Back;


• Tap SID/NID Settings and change the left box to 40 and leave right box as it is and then tap OK;


• Tap Menu;


• Tap Commit Mod: after this phone will restart in 10 seconds and will bypass the main activation screen.

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]

RIFF JTAG - CDMA Samsung SCH-S109 (MSM6000) Repair supported and more !


20.04.2011  CDMA Samsung SCH-S109 (MSM6000) Repair supported
Resurrecting Samsung S109 is simple. Phone is auto powered on with charger connected; battery presence is not required.
Resurrector re-flashes only firmware zone of the phone (0×000000 to 0x3FFFFF).
To resurrect Samsung S109:

• Solder JTAG cable to Samsung S109 JTAG pads;


• Connect ignition cable for auto power on or use battery;


• Make sure Samsung S109 is selected in the list of models;


• Click Resurrect button;


• Wait till software signals a successful operation completion;


• De-solder JTAG wires;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.
[You must be registered and logged in to see this link.]