yashsingh1/xdaforums huggingface dataset:
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Gazoo22:
Great news then, someone detected the cpu, I will not have time till I get home tonight to work on the jtag, I will have to add some wires as I have not used the trst and I will try to detect again.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ralphh:
new ease great news man... try detect the CPU without the ntrst to check if the problem is from ntrst or from gazoo's lpt

i think ntrst has no work to do without a buffered wiggler calbe...

kindly disconnect ntrst detect cpu and post back.

(if it doesn't work without ntrst sorry guys you'll have to use it)

it's close guys can u feel it? :P

Regards

best team in best forum :P
[8125, K-JAM, P4300, MDA Vario Software Upgrading] lmd0990:
bad news

:(

after i tried soldering wires to wizard , i broked the metal piece of 2 contacts on wizard , so now iam disappointed , my project of reviving ends here

but i will watch news on this great thread and share any usefall info.s

REGARDS

LMD
[8125, K-JAM, P4300, MDA Vario Software Upgrading] new.ease:
My notebook and wizard were stolen last night,:(

I detect the CPU with the ntrst.

I use the wires directly connected to the parallel port not using anything

and jtag seting like this

good luck!

sorry!My english is poor.I don't know if I express myself clearly.

I disconnect ntrst not detect cpu.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Gazoo22:
New.ease can I ask why you used pin 13 instead of the predefined pin 11.

Edit: Can you provide the schematic for the jtag you used
[8125, K-JAM, P4300, MDA Vario Software Upgrading] new.ease:
This convenient fixed
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ralphh:
ok gazoo try it please

this is new ease Jtag

2 - Ntrst

3 - TMS

4 - TCK

5 - TDI

13 - TD0

Sorry for you guys we needed you for the project and you gave too much for us...

Regards
[8125, K-JAM, P4300, MDA Vario Software Upgrading] new.ease:
Please do it step by step.

That connect to Wizard's CPU via jtag:

1. use H-JTAG with it's settings http://xdaforums.com/showpost.php?p=2262858&postcount=159

2.use the wires directly connected to the parallel port :2 - Ntrst;3 - TMS;4 - TCK;5 - TDI;13 - TD0;25-GND

3.seting JTAG.(#214)

4,insert the battery (I use the two wires connected)

5,Plug in MINIUSB

(not need press any button)

6.Start Detect your CPU.

Heinous thief, I have not completed before stealing my phone
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Gazoo22:
thank you new.ease, did you use the 100 ohm resistors on all the pins except for ground, so 5 resistors.

I am going to have to pick up some supplies today and try this tonight or tomorrow, as soon as I get a chance.

I will build the jtag as described above and try the steps as described including the parallel port change if I have too, new.ease, did you change the parallel port to epp?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Yudgin:
My Frends, right ID the OMAP processor is 0x0692602F.

Please adjust your TAP and IRLen configuration.

For recovery device use wiggler.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] arc:
For russian people description for flash DOC see on

http://pda2u.ru/forum/index.php?showtopic=301&st=100

The English translation will later.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ersandrej:
Big respect!!!
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Yudgin:
Thanks for russian GURU!

Big thanks for share your solution!

All info and help for recovery any device on the forum on www.pda2u.ru (mirror- www.pda-hack.net)! :)
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
anybody can translate the thing and make a head to toe tutorial?...anybody tested the procedure?....
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Yudgin:
We make detail manual on English in Monday. This procedure tested ersandrej, successfully. :)
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
yudgin did you use wiggler cable? can we use the cable new ease used?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Yudgin:
No, you can used wiggler cable. Recovery metod based on Remote Debug Interface, that request buffered cable as wiggler.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
what do you mean? can i use the cable new ease used?...can you give me the schematic of the cable used to recovery wizard?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Yudgin:
Dear xardas_90! To use our method of recovery Wizard, you have to make a wiggler cable. You can download the schematic from my post: http://pda2u.ru/forum/index.php?showtopic=295&st=0&p=4988&#entry4988

(Customizing_Hardware_JTAG_Cable.zip)
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
can't we just use the cable new ease made?...this cable is too complicated...
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Yudgin:
No, only Wiggler. Or J-link Segger cable, that cost near 400 USD...
[8125, K-JAM, P4300, MDA Vario Software Upgrading] shevagol:
I've used the cable of new-ease. I recognize the ARM processor bat when I use NOICE to load the spl.nb I had some errors of reading-writing in memory.

Do you think it's a problem with the cable.

I had linked directly to LPT without resistors or buffers.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Yudgin:
Manual for recovery Wizard on Russian here: http://pda2u.ru/forum/index.php?showtopic=348

English version is coming soon. You can use Google translation service so far.

WARNING !!! You have very big risk to damage the processor, connecting JTAG directly to LPT without use currentlimit resistors!!!!!!!!!
[8125, K-JAM, P4300, MDA Vario Software Upgrading] lmd0990:
hi all

could that be true in image , that these points are alternative for original jtag points ???
[8125, K-JAM, P4300, MDA Vario Software Upgrading] shoter_1989:
help

my Qtek 9100 wont turn on,please help
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ersandrej:
No!!;)

use this test point http://pda2u.ru/forum/index.php?act=attach&type=post&id=274
[8125, K-JAM, P4300, MDA Vario Software Upgrading] lmd0990:
but i had damaged 2 points metal piece , that i cannot use it for connecting

is there any other places for same points (tdi , tdo , tck , tms)
[8125, K-JAM, P4300, MDA Vario Software Upgrading] iraqi_freedom:
lmd0990 there are another points but i can't tell you exactly. you must trace them from procesor.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] lmd0990:
can any 1 trace that pinouts to processor ?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
No Success !

I've tested the russian method to recover my G3 K-Jam but ..... No results ! :mad:

There are two problems I think :

1. My LPT port settings are not correct

2. The CPU does not turn on while holding Camera + Power ( My total current does not change ! It's about 6mA ) I think the battery cover must be closed

I can't detect the ARM with russian cable and settings

Any Idea ?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
install giveIO driver and set your LPT port from BIOS as default (as it was originaly set when you bought it) charge the batery with 2 wires set to 3,7 v or connect the pins of the batery on the board direct to 2 cables that give 3,7 v....but what have you flashed on the G3 that died?...you can't revive G3 with this tutorial because the SPL is for a G4
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
LPT port is ok and works well on 0x378 ( H-JTAG says that )

The board is directly connected to an external power supplier (3.8 volts )

I have updated my G3 with the wrong IPL/SPL version last year and it died .

Now the problem is the detection of ARM with H-JTAG not G3 or G4 software !

Thanx
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
..

install giveIO driver properly...connect mini-usb charger while the detection process
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ersandrej:
Wizard no have battery cover :D
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ersandrej:
mini usb dont need
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
The problem found

I am using the simplified wiggler cable so there is a different Jtag settings in H-JTAG
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
G3 Bootloader

The remaining thing is the executable bootloader program for G3

Is there any one ?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
how could you kill a G3 device man?

what did you flash?i know you can't kill G3's...but maybe i'm wrong...
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
I didn't flash any thing !

the russian method is a way to access the RAM , in this method you can load a program into RAM and force the CPU to run it , so we must have an executable program for G3 to run from RAM and program the flash then

We need a bootloader program from an alive G3 to dump into a file and load it to a dead G3's RAM by NoICE
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
i know very well the russian method...i have tried it myself...but my question is how did your G3 die?what did you do to kill it?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
It's about 1 year ago , can't remember the details but I have exported the IPL/SPL from a ROM and forced G3 to overwrite a wrong SPL/IPL on it , my bad chance I wrote the G4 bootloader :mad:

Now my K-JAM is waiting for a bootloader to get alive again.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
you need the IPL or Spl from a G3?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
What we need ?

I think the SPL must be loaded to RAM
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
...

i am examining you to make sure you know all the steps so you don't kill it for good...and i have some back-ups here...from a G3...good luck
[8125, K-JAM, P4300, MDA Vario Software Upgrading] davidovsky:
Thank you for your help

I've loaded the SPL as a binary data to the RAM and it's running now by the CPU but there is nothing on the LCD (still blank and no action) , I know there is some thing wrong in my actions in NoICEARM or any where else:

1- Loading WST_20080624-1453_SPL.fls as a binary image from 10,000,000 address

2- Disassemble at 10,000,000

3- Holding the Camera Button and runing from address 10,000,000

Is there any thing missing or wrong ? What about the IPL ? I think my IPL is damaged too because I have not the white screen in start , is there any way to run a correct IPL ?

Is there any way to accessing and over writing the data on ROM ?

Are these files the executable bootloader codes ? The extensions are fls that means flash files !
[8125, K-JAM, P4300, MDA Vario Software Upgrading] xardas_90:
well *.fls is the extension from Wizard service tool backup....i think you need to convert it...i'm not sure how...but the main idea is...if you have a working bootloader you can flash anything (but you know that already) try shoking the battery maybe that jups start the device...give the battery a 9v shock for about 3 seconds and repeate it twice...then see if it turns on...it's hard to believe that you have bricked a G3....maybe it's another problem (i'm still skeptical)...you sould mail or PM Yudgin from here on the forum...he's Medush from pda2.ru...maybe he can help you
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Mysterious Stranger:
Asked HTC Europe for a quote to JTAG

I've got a bricked G3 wizard - cingular 8125 - and as I can't make head nor tail of the russian site that lists the JTAG pins I've booked it in with HTC Europe to ask for a quote to recover via JTAG. I'll let you know how much they quote me. I've even offered to strip down to the board to save on labour costs ;-)

M.S
[8125, K-JAM, P4300, MDA Vario Software Upgrading] lmd0990:
hello every one

what is going , do u get result on reviving a device yet

till now i did not do it with mine
[8125, K-JAM, P4300, MDA Vario Software Upgrading] BesTCooL:
for this cable H-jtag settings this right ?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] BesTCooL:
PLs help for example ı make xilinx (it work on wizard ?) cable so I need only 2 -3 4 13 pins but how enter settings in H-jtag how make H-jtag settings ı noob and ı dont know russian ...

how make this cable and how enter settings in Hjtag soft pls explain
[8125, K-JAM, P4300, MDA Vario Software Upgrading] centuryheli:
Hey All,

I have what appears to be a bricked Wizard, was trying to flash a ROM when somethign went wrong and now I cannot turn the thing on. No lights, no nothing so I think reading here the bootloader is corrupted and needs reflashing.

I've been reading through this post as it sounds like the soultion I need but as yet have not read about a success using a specific method and then a how-to almost of what us mere mortals would need to do to revive our bricks.

Has there been any news to speak of and/or has someone actually managed to atleast get the bootloader back on their Wizard so that we can use another trick to reflash the ROM?

Thanks.

Ian
[8125, K-JAM, P4300, MDA Vario Software Upgrading] centuryheli:
Hey All,

Ok, lead made as per New Ease's post and I appear to have found the chip, question is I am now at a lose as to what to do next. HELP ;-)

Ian
[8125, K-JAM, P4300, MDA Vario Software Upgrading] centuryheli:
Hey All,

Bit quiet on the help front :( where is eveyone?

Ok, quick update. Had another play (still am actually) and managed to get phone turned on and showing the 3 colour boot loader screen running V1.05 SPL I think.

Have just managed to reflash the Xda_MiniS_LaunchROM_v154102 rom but then still cant as yet get it to power on.

Reconnecting now via J-Tag to try again.

Any help will be appreciated guys.

Ian
[8125, K-JAM, P4300, MDA Vario Software Upgrading] fsl13:
ian dont get complicated. download kjam arabic rom from imate.com its a monster pack with ipl n spl than i think you should be able to upgrade wm6 tnt etc etc

if your ex brick is cid unlocked or else use hard spl than flash any rom of your choice but my idea is to load an unlocked carrier monster pack such as kjam as you proceed with the tri color bootloader

goodluck
[8125, K-JAM, P4300, MDA Vario Software Upgrading] night-mayor:
the problem with a brick is that nobody can live without a phone for long (not unless this was a spare phone) and thus in a matter of 2 days the brick owner manages either to fix it in a service center or buy another , so untill u report the mean , brickers will just come in here then shed a tear and just follow the 2 days routine.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] estebanf:
cry +1

have a G4 dead, no tri colors, absolutely nothing pwr+camera+rst and others key combinations 10.000 times

I get this stade after downgrade from , don't find the originals rom but don't work any other rom direct (VF-UK aku2, etc) and I force by SoftSPL www.x-drivers.ru_qtek_9100_ruu_prodigy_1060701_101_11310_qtek_wwe_ship

don't see it only for G3

wow now I know :eek:

I search for one solution, I read all this post and don't see a secure way

and English is not my native language

many people need a tutorial or resume for one working way here

I appreciate yours help

Best regards
[8125, K-JAM, P4300, MDA Vario Software Upgrading] hmotawea:
I have a dead Glofiish X500

Please help me with this:

I was flashing my glofiish x500 but Unfortunately while I was updating the power went off!!!!! Now my glofiish X500 turn to black screen and the power lamp lighting in orange colour, I tried to go the bootloader mode but the mobile does not respond still giving me the black screen with the power lamp lighting with orange colour, Please what do I do to make it work again?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] tharryone:
please man..

I brother!

Please, Can you send the noicearm for me? I have the same problem! but I'm stop becouse I don't have this soft..

I want try to survive my htc.. he's a wiza1900 or Qteck a1900 ( the mainboard is the same)

let´s work together!

my mail thiagolbb@yahoo.com.br

thanks!
[8125, K-JAM, P4300, MDA Vario Software Upgrading] swapniladsure:
wiza200 dead

hi friends

my wiza200 xda is totaly dead after writing ipl version 3.08

it not goes to bootloder also

not restart or soft reset

i press many keys to start in boot mode byt i fails

so is there any other way ??

any one have jtag pinout cable for o2 xda wiza200 handset

reply please please i am waiting for all reply
[8125, K-JAM, P4300, MDA Vario Software Upgrading] fachry:
anyone have solution for make JTAG for HTC wizard device??
[8125, K-JAM, P4300, MDA Vario Software Upgrading] supertiger:
Hi, I think the solution is already clear but only it was written in Russian. someone said he could do the translation but not up till now.

Please back for a couple pages, you will see the discussion on this problem.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ralphh:
wow

any news guys? did you manage to revive a device?

cheers!
[8125, K-JAM, P4300, MDA Vario Software Upgrading] dillchahtahay:
Compiled solution to unbrick your wizard via jtag

All U need

1 : Wiggler-cable( you can make it your self: circuit given in attachment settings.zip :wiggler_ARM)

2: GiveIO drivers for jtag cable.

3: H-JTAG V0.6.2(download from hjtag site)

4: noice_93_ARM(download from noicedebugger site)

5: sspl wizard(for G3 or G4 according to your device)

6: RUU utility to flash spl

Procedure

1: Conect the proper Jtag Pins from de wiggler to wizard board

2: Power Up the Wiggler and the Wizard Board via USB cable and proper connection of the battery.

3: Install and run GiveIO drivers.

4: Run H-jtag with the proper configuration.(given in attachment settings.zip :H_JTAG_Settings)

5: H-jtag will show your processor say ie;0x0692602F.

In the Target Manager add new ID code: 0x0692602F --- ARM926EJ-S

6: Run NoiceARM with proper settings.(given in attachment settings.zip :NoIce_0 and NoIce_1)(load the proper SPL(.nb file) according to your device ie;G3 or G4)

7: If all goes well the device should start in 3colour bootloader mode.

8: Reflash your SPL with a RUU utility.(use nk.nbf files Attached according to your device ie;G3 or G4)

9: After flashing SPL run a normal firmware to flash the desired rom.

Credit goes to all the participants of this forum Specialy Ralph Ghawi who started this project.I have just compiled all needed information.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] oix:
is this for xbox?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] PeterBiekens:
Care to mend my QTEK9100 G4 for me? Will pay you.

Shows bootloader screen, have the WST backed-up files from before I attempted to flash.

I just don't have time for messing with writing to SD cards or Jtag-wirings.

Happy just to restore the pda/phone to WM5 as the upgrades will not enable HCSD read/write which s what I'd wanted.

Peter
[8125, K-JAM, P4300, MDA Vario Software Upgrading] the-equinoxe:
Sure: to reflash the device when the bootloader is FUBAR so USB flashing doesn't work..

ALMOST anything:

When one would write to the secure ROM (I believe that is the part where among others the CID lock resides) you can only reflash that part when you have a dump of that device, because the info is device specific, so you can't write the dump of an other wizard to your phone.

Again:

I would happily try and find out the testpins for all of you, so you can start using JTAG to revive bricked units.

But I realy need a mainboard of a dead wizard in order to reverse engineer it.

As I have told in my last post:

I need to remove the chip (which is a Ball Grid Array (BGA) chip ) in order to find the testpoints corresponding to correct points on the chip (according to the datasheet), so that is why I need the mainboard from a dead wizard..

So if anybody is interested and has a dead mainboard lieing arround, feel free to contact me.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Johnnnnnnnnnny:
I think We can donate some menoey

I think We "peoples on that forum" can donate some menoey and then you can buy a death wizard and destroy him for a better thing

Who will donate with me?

EDIT: here in czech someone selling death wizard in conversion for 90 USD so. who is such interested like me?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Johnnnnnnnnnny:
so I will have a some death mainboard.. If I will post it to you. Will you find the way to unbrick all others death wizards?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] the-equinoxe:
If you send it to me I will try to find out those testpoints for you and all others.

As soon as you get it please PM me, I'll send you my address by PM.

Just to be clear:

- The method of finding the right testpoints is destructive and I have no way of putting the chip back on the motherboard, so the board is a total lost after I have done my work!

- That also means that I have no way for testing it!

- Off Course all findings will be posted here in this thread.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] ralphh:
well

who can donate a dead board to the-equinoxe ?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] mrbabcia:
I bricked my Wizard yesterday and I'm with you now :]

I'm afraid we'll never find those testpoints ;/
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Dikiz:
my wizard is in repair center...(bootloader destroyed maybe he can fix that)i think if they use jtag cable will be possible to see testpoints traces...and of course i will ask that guy for tespoints location(if he knows such information)...wish me luck :)
[8125, K-JAM, P4300, MDA Vario Software Upgrading] mrbabcia:
I wish you luck :]

I'm afraid that if there's no info on Wizard testpoints even on this great xda-developers forum, there must be really few people who know this. I think only HTC authorised repair centers know TPs' location... and not all of them. Only these authorised to do "board-level repair", so called by Wizard Service Manual ;/

But there must be a way to get TP's position, like the-equinoxe said. Is destroying of mainboard really necessary? ;/

Why won't HTC just give us information we need? ^^

btw. sorry for my english ;]
[8125, K-JAM, P4300, MDA Vario Software Upgrading] arc:
I think this never will publicly. Having Jtag - you may trace bootloader. Any protection HTC (SIM Lock , CID Lock) can be broken open.I think HTC understands this problem . Little know points jtag - must be a program capable to do flash. Aside from this you expect significant surprises - necessary to know (understand principle of the functioning(working) the processor ).Without service manuals processor (OMAP850 and DiskOnChip) you will not be able to avoid these surprises.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] mrbabcia:
"DiskOnChip G4 provides a full range of security and protection features including secure boot, one-time programming (OTP), ..."

one-time-programming?!

Wait... doesn't this mean we can't do anything with bad G4 bootloaders? I think no, as some people got their G4 Wizards working after changing IPL/SPL. (I changed mine to a veeeeeeery old G3 bootloader -_-)
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Johnnnnnnnnnny:
Sorry

The email waring for the post in that topic wan not sended to me. I will contact you via icq or via PM

Now, I am going to test Windows Vista RC1 :D
[8125, K-JAM, P4300, MDA Vario Software Upgrading] mrbabcia:
So you have a dead mainboard for the-equinoxe? :]
[8125, K-JAM, P4300, MDA Vario Software Upgrading] clemsyn:
Hi, check fone_fanatic. I think he's got a dead wizard mainboard
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Weekend:
I have G4 that downgraded to Xda_MiniS_LaunchROM_v154102.exe, after updating it booted and run programm installing. Than install compleate it go to reboot and don't boot up. Now this device dead. Reset, hard reset and other don't get any result. Device not booted. I think, that boot rom from G3 dont work on G4:-(