View Full Version : JTAG Flashing and Repairing
Hello everybody!!!
I repaire and flash mobile phones trough JTAG port. In some modeles, for example Samsung X720, X520, X430 there are TDO, TDI, TMS, TRST, TCK and TMODE pins set. I connecting to JTAG, put TMODE pin down and everythig woking correct. In Kyocera SE47 TMODE pin absent, but everything work right. In such models such Samsung V500 or E250 TMODE absent too, but when I connect to mobile JTAG don't work, as if I couldn't turned on TestMode (Setted by TMODE).
Please, help me how connect to Samsung E250 (for example) using JTAG if there is no TMODE pin :confused:
what qualcomm chip the E250 use?
what jtag device you have?
what qualcomm chip the E250 use?
what jtag device you have?
E250 uses MSM5500 chip others phones use MSM5100 and MSM5000
For flash programming I'am using OCDemon Flash Programmer (Macraigor) and Wiggler cable
The MSM5500 chip have tmode pin, it's located at pin b17.
Good Luck...
The MSM5500 chip have tmode pin, it's located at pin b17.
Good Luck...
Thanks Zaihtam !!!
But I haven't MSM5500 datasheet therefore I don't know where is located pin b17. Pleeassse, show me on picture which attached to post
the dot sign on the IC indicates the pin A1
the number is horizontal and the alphbetic is vertical.
so to find the pin b17 in your attached pic will be:
start counting from lower right (where the dot) = A1
count 17 to left. it will be the pin A17, then move upwards 1 count will be the pin B17. that's it.
Good Luck...
the dot sign on the IC indicates the pin A1
the number is horizontal and the alphbetic is vertical.
so to find the pin b17 in your attached pic will be:
start counting from lower right (where the dot) = A1
count 17 to left. it will be the pin A17, then move upwards 1 count will be the pin B17. that's it.
Good Luck...
:)
I humbly thank you for help.
JTAG IS WORKING!!!
need simple jtag scematict
e250 jtag Flash Programmer ?
What about sw ? There are many programms work with Wiggler cable, for example OCD FlashProgrammer link: www.macraigor.com
What touchs upon e250 flash programmer - OCD FlashProgrammer
I want ask every-body, may be some-body know JTAG test point for SKY7200 ?
have msm5500.OCD and kbb05a500m flash.ini ?
Hello!
Could you help me with answer.
Where is TMODE (DBGEN) signal in motorola odm family (c155/c115)
for cpu Callypso - d751749 or Panasonic GD60 phone - cpu hercrom400?
I need to know how to enable their ICE logic.
Thanks in advance!
I need msm5500.OCD and kbb05a500m flash.ini two file.who can send to me
my mail: nbzhuhui@163.com
xoen thanks!
I need msm5500.OCD and kbb05a500m flash.ini two file.who can send to me
my mail: nbzhuhui@163.com
xoen thanks!
MSM5500 processor based on ARM7TMDI core, thus msm5500 equvalent - is ARM7TMDI
What touchs upon kbb05a500m flash - all datasheets for samsung products placed on their firm site www.samsung.com (see MCP). After carefull learning of flash documentation you'll can make yours flash.ini
Hello dear friends please let me know how I can revive a dead slider se47 phone with JTAG method. Thanks.
Hello dear friends please let me know how I can revive a dead slider se47 phone with JTAG method. Thanks.
I worked with SE47.
For the begining you must find flash docs (STMicroelectronics M32W655D), MSM5100 - ARM7TDMI, then create emergency loader to unlock flash memory write/erase protection and inicialize second flash chip and SRAM. But after that there are some flash sectors which are not rewritable, therefore reviveing of SE47 - it's impossible, though may be I tryed to revive bad phone copy....
as to last time which I had sent you an eamil to you about help me make file flash.ini.I don't know how can solve it .please help me and make it then can send it to my email.I will appreciate it.I look forward your early reply.
my eamil address:nbzhuhui@163.com
Dear Xoen I only want to flash the phone just when it can power on, because I think that in this condition can be recovered by the tool se47.exe in emergency mode, please let me know what you obtain when experiment ?
Thanks.
Al.
Dear Xoen I only want to flash the phone just when it can power on, because I think that in this condition can be recovered by the tool se47.exe in emergency mode, please let me know what you obtain when experiment ?
Thanks.
Al.
I don't know what is the se47.exe. But you must try to repair you SE47.
As Karl Marks said: Practice - is truth condition.
xoen thank you very much!
E250 uses MSM5500 chip others phones use MSM5100 and MSM5000
For flash programming I'am using OCDemon Flash Programmer (Macraigor) and Wiggler cable
Sorry about my bad english..........
Do you have MSM5100/MSM5105/MSM5000 or other MSM complete datasheet/document/link , i need Register Address for Remapping memory or initialize hardware , because if we programe blank/new Flash IC without bootcode , we can't acces RAM :confused: :mad: .
Thanks
To find complete datasheet for MSM CPU is impossible :) Anyway in QXDM exist list of MSM 5100 and MSM5000 registers with masks.
Regards,Vygis
Thanks to Vygism
MSM5105 = MSM5100 ?:)
To find complete datasheet for MSM CPU is impossible :) Anyway in QXDM exist list of MSM 5100 and MSM5000 registers with masks.
Regards,Vygis
BTW , where/how i can find register for other MSM like MSM5105 in QXDM ? , sorry i'm newbie with QXDM....:)
Thanks
gsmsikar
10-19-2006, 11:59
has anyone tested LG CDMA phones flashing with JTAG ?
the pinouts are given in the phone ...
Hi pls any more know one jtag software can support MSM6250 ????
maxindia
12-13-2007, 13:52
Can you explain for MSM5000, pin no. TRST,TDI,TMS,TCK,TDO, and Tmode?
for Jtag connection
Can anybody explain for MSM7500, pin no. TRST,TDI,TMS,TCK,TDO, and Tmode? for Jtag connection