G1 Google Phone Hard Reset

If your T-Mobile G1 Google smartphone is not responding or is frozen, you may have to opt for a hard reset. Here’s how:

1. Turn the G1 off. If it’s frozen on, take the battery out and put it back in the unit.


2. Hold the Home and Power keys down at same time for about 25 seconds. You will see a yellow triangle screen with exclamation point in the

middle.


Now to wipe the device clean:


3. Press Alt+L.
4. Press Alt+W for a factory reset.
5. Press the Home and Back keys again for about 25 seconds.
The device should then reset again and the hard reset is complete.

Easy to read schematics all Electronics symbols

how to repair totally damaged s1 android phones, based on msm7227,qsd8250, using alternative security bypass using testpoint

okay, here is example how to resurrect totally dead x10 phone.
so, we have x10 phone with totally erased semcboot and trim area.
phone does not turn on, does not connect to pc anyhow.

lets resurrect it

run setool2, select x10 as model, select com port as interface
( one where GPG resurrection cables connected )

1.
on options set signed mode,altbypass mode, use testpoint (gnd type)

2.

connect GPG x10 resurrection craddle to phone, press RECOVERY
follow program instructions.

important notice:

for msm7227 phones, insert battery in phone after you attached testpoint.

btw, as phone has erased semcboot, you do not need apply testpoint that time.
however, that is very special case, so for simplicity lets apply testpoint all time.

here is operation output:

Code:


SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110010000010
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
ATTACH USB CABLE TO PHONE,THEN PRESS "READY"
 
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
RUNNING S1_LOADER VER "R4A024"
SWITCHING TO "USB" ...
PLEASE ATTACH TURNED OFF PHONE NOW
 
RUNNING S1_LOADER VER "R4A024"
LOADER AID: 0001
FLASH ID: "002C/00B3"
LOADER VERSION: "r4A024"
 
 
WRITING SEMCBOOT ...
Checking TA ...
MINOR ERROR [ MISC_CLASS: MISC_ERROR, TA_set_config_failed ]
Writing config ...
MINOR ERROR [ MISC_CLASS: MISC_ERROR, TA_invalid,_format_may_be_required ]
Formatting ...
Checking MISC TA ...
MINOR ERROR [ MISC_CLASS: MISC_ERROR, TA_invalid,_format_may_be_required ]
Writing config ...
MINOR ERROR [ MISC_CLASS: MISC_ERROR, TA_invalid,_format_may_be_required ]
Formatting ...
SUCCESS

now we recovered semcboot and prepared trim area for loading.
if phone only had erased semcboot, it will already work after that step.
but our phone TOTALLY damaged, so lets proceed with second step:

we need now load trim area.

options are same for step1 + "format gdfs when writing" checked,
select x10.zip in misc.edit and press "write gdfs".
( any trim area, read from corresponding model live phone will work )
follow program instructions.

here is operation output:


Code:

SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110010000110
Will write GDFS now.
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
ATTACH USB CABLE TO PHONE,THEN PRESS "READY"
 
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
RUNNING S1_LOADER VER "R4A024"
SWITCHING TO "USB" ...
PLEASE ATTACH TURNED OFF PHONE NOW
 
RUNNING S1_LOADER VER "R4A024"
LOADER AID: 0001
FLASH ID: "002C/00B3"
LOADER VERSION: "r4A024"
 
Can't get IMEI
will write 1010 units
done
will write 53 units
done
Phone detached
Elapsed: 23 secs.

finally, we need rebuild imei and security zone.
for that, check same options as for step1 + "do full unlock instead of usercode reset","allow to change imei when unlocking" checked,
press "unlock/repair", follow program instructions

here is operation output:


Code:


THAT ACTION IS ILLEGAL,IF YOU DOING IT
FOR ANY PURPOSE, OTHER THAN REPAIR PHONE
 
SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110010010010
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
ATTACH USB CABLE TO PHONE,THEN PRESS "READY"
 
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
RUNNING S1_LOADER VER "R4A024"
SWITCHING TO "USB" ...
PLEASE ATTACH TURNED OFF PHONE NOW
 
RUNNING S1_LOADER VER "R4A024"
LOADER AID: 0001
FLASH ID: "002C/00B3"
LOADER VERSION: "r4A024"
 
Can't get IMEI
REQUESTED : 359419030xxxxx
Checking for HWConfig ...
Waiting for calculation process ...
RESPONSE: "SUCCESS" [826]
Checking for signature ...
signature found, skipping calculation
WRITING SEMCBOOT ...
WRITING HWCONFIG ...
Unlock DONE
Elapsed: 20 secs.

from now on, phone is full repaired, testpoint cradle not needed.
reflash phone with any suitable firmware.

How to repair GDFS with SETool

So use this ways

- First choose phone's model in the SonyEricsson tab

- Go to Settings tab Tick in SIGNED MODE

- Back to SonyEricsson tab press Recovery button (Hold 2+5 and insert USB cable to phone)

  Now phone is in Recovery mode.

- Go to Empty Eill & Repair tab choose phone's model

- Add file (K530_gdfs_SSW.ssw) in the gdfs_in_ssw_format folder, Flash it

- Clear file and choose file again (DB2020EROM_CNV_RED52_BROWN_CID49_DB2020.ssw) in the eroms folder, Flash it

 Thank u Mr, Bovor

http://www.4khmer.com/index.php?topic=4037.0

HOW TO WORK WITH SEMC ODM PHONES

basics

semc odm phones divide on two big branch:

obsolete cheap phones,where each phone has own loader and approach
j110,j120,j210,j220,z300,k200,k220,etc

that phones not have anything common with semc structure.

and current generation, so-called S1 phones - they based on ti chipsets, st-ericsson (former philips) chipsets
j132,z320,t250,w302,f305,s312,w100,w150,etc.

that phones has good semc structure: color,cid (aid), signatures,etc
-------------------------------------------------------------------------------------------------
FLASHING OF SEMC S1-BASED ODM PHONES

1. select correct model
2. use com/ufs/usb as interface
3. check "signed mode"
3. add to firmware area needed firmware files
4. press flash

notes:
some old locosto s1 phones does not support usb as interface

if you want flash brown firmware or readout, step 3 will be:
3. check "signed mode","alternative security bypass"


about SEMC S1 ODM files structure:

1. neptune-based (w302,s302,f305) , ST-Ericsson-based (w100,w150)

firmware contain 3 required parts:

- main (ex: R1BA017_1207_9123_GENERIC_HS_YG_RED.software)
- fs (ex: R1BA017_1207_9132_FS_ADRIATIC_HS_YG_RED.software)
- customization (ex: R6A_F305_CDF_1215_9665__FS__Entel_PCS_CL.software)

you need flash all 3 files to get phone working with desired langugaes.

F305, S302, W302 SW flash should be done without memory card inserted.
If the memory card is inserted during flash the flash can fail.

If you encounter this problem,the phone does not startup correctly after flash, please wait 2-3 minutes
then reinsert the battery and start the phone again.
The phone should now start normally and the SW has been correctly updated.
Please note that the SW is flashed correctly and this will not cause any future startup problem.

2. locosto arima (t250,t280,k330,t303,r300)
contain 2 required parts

- main + language R5CA005_OLGA_ARIMA_AMERICA_2_CXC1251008_RED.softwa re
- customization R7A_CDA102866_307__FS__Movistar_Guatemala.software

3. locosto foxconn (z250,z320,r306,j132)

- main R1BA008_1212_9858_MC_JIALI_RED.software
- icons R1BA011_1211_6339_ICN_JIALI_RED.software
(that files reside in archives like MODELx_FWVER_common.rar)
- fs+language R1BA008_1211_6093_MALAYSIA_JIALI_RED.software
- custpack R9A_R306_CDA_1212_6282__FS__Customized_SG.software 

-------------------------------------------------------------------------------------------------

UNLOCKING OF SEMC S1-BASED ODM PHONES

server-based full signature method

1. select correct model
2. on settings, check "signed mode", "do full unlock instead of usercode reset"
3. back to odm tab
4. press unlock

that method can fix damaged security zone.
that method depends of external service, so it can be offline any time.

standalone patch method

1. select correct model
2. uncheck all settings
3. back to odm tab
4. press unlock

note, that such method will work only for old security locosto-based phones.
if you will get error while attempting to do that method - you have new security phone and should try other methods.

server-based patch method

1. select correct model
2. on settings, check "signed mode", "use alternative security bypass"
3. back to odm tab
4. press unlock

that method can not fix security zone.
that method is standalone in setool2 versions, greater than 1.0

user code reset

1. select correct model
2. on settings, check "signed mode"
3. back to odm tab
4. press unlock

note,that some old firmware not support usercode reset, so if standart code will not work after reset, reflash phone with latest firmware.  

-------------------------------------------------------------------------------------------------

FLASHING OF SEMC ODM PHONES

1. select correct model
2. use com/ufs as interface
3. add to firmware area needed firmware
4. press flash 

-------------------------------------------------------------------------------------------------

UNLOCKING OF SEMC ODM PHONES

broadcom based - z300,j210,j220

1. select model
2. select com/ufs as interface
3. uncheck all settings
4. press unlock
5. power on phone with unsupported sim card, press *<<*, enter readed codes.

if you have "not allowed" while entering codes, just reflash phone

calypso lite based - j110,j120,k200,k220

1. select model
2. select com/ufs as interface
3. uncheck all settings
4. press unlock

for k200,k220 that is full unlock and security zone will be automatically fixed.
for j110,j120 that is special firmware patch - after unlock, power on phone, press *<<* with unsupported card and enter any 8 digits as code for each lock.
phone will accept code and unlock will be permanent.

note, that j110,j120 phone with damaged security zone is not supported.  

-------------------------------------------------------------------------------------------------

How to enter network unlock code for w150 (Yendo) phone ?


ENTER #123456789# TO CHECK SOFTWARE AND CHECK LOCK STATUS
ENTER #987654321# AND SELECT RED AND PUT CODE

HOW TO WORK WITH SEMC PDA PHONES

FLASHING OF A1-BASED PDA PHONES

download needed firmware package.
add it to firmware area on PDA tab.
DO NOT UNZIP PACKAGE, JUST ADD IT AS IS.
on settings,check "signed mode"
press flash

note, if phone have BROWN domain, you must FIRST flash conversion packs:

for m600,w950,p990:
for brown cid 36: pda_ccpu_convert_red49_signed_brown36.zip
for brown cid 49: pda_ccpu_convert_red49_signed_brown49.zip
for w960,p1:
for brown cid 49: pda_ccpu_convert_red53_signed_brown49.zip
-------------------------------------------------------------------------------------------------
UNLOCKING OF A1-BASED PDA PHONES

if you want to UNLOCK NEW SECURITY phone -

check "use server" and enter your login/password.
please check FAQ article about credit consumptions for your phone.

press unlock button and insert cable to phone,while holding appropriate key on phone.
follow program directions.

if you want to UNLOCK OLD SECURITY phone -

UNCHECK "use server".
BE SURE you have latest REST files.

now, you need install drivers for flashing.
for that, poweron smartphone in fw update mode.

- for p990/m600 press and hold "@" on TURNED OFF phone, then attach dcu60.
- for w950 press and hold "C" on TURNED OFF phone, then attach dcu60.

windows will ask you for a drivers. drivers in %setool2 dist%\drivers\Smartphone_Drivers

now, when all preparations finished - press unlock button and insert cable to phone,while holding appropriate key on phone.
follow program directions. 
-------------------------------------------------------------------------------------------------
FLASHING OF S1-OPEN PDA PHONES (Satio,Vivaz,Vivaz pro)

download needed firmware package.
add it to firmware area on PDA tab.
DO NOT UNPACK .ZIP PACKAGE, JUST ADD IT AS IS.
on settings,check "signed mode"
press flash

connect turned off phone while holding "green" button.

FLASHING OF S1-ANDROID PDA PHONES (x10,x10 mini,x10 mini pro,etc)

download needed firmware package. ( two files,both REQUIRED. APP - os kernel, radio part, FSP - user and android os system data)
add it to firmware area on PDA tab.
UNPACK PACKAGE (unzip,unrar, DO NOT unpack *.file_set ), ADD *.file_set to firmware area
on settings,check "signed mode"
press flash

connect turned off phone while holding "BACK" button.
-------------------------------------------------------------------------------------------------
UNLOCKING OF S1-OPEN PDA PHONES

select USB as interface. that is REQUIRED.
select phone model
settings - check ONLY "signed mode (using server)", "do full unlock instead of usercode reset", fill your login details.

back to original tab, press unlock, "GREEN BUTTON"

if signature is calculated - you will receive 'SUCCESS' response, otherwise you will receive error code.
if calculation is success, then signature will be saved in backup\%imei% folder in your setool2 directory.
next, backup will be created so you will be able to restore phone if something will go wrong.
procedure will continue,phone will be switched off and unlocked.
remember, if something will go wrong - you have a backup of security units.
please check "credits consumption" FAQ post for info about number of credits.


UNLOCKING OF S1-ANDROID PDA PHONES

server based full official unlock method. Only available, when s1 signature server online

select USB as interface. that is REQUIRED.
select phone model
settings - check ONLY "signed mode (using server)", "do full unlock instead of usercode reset", fill your login details.

back to original tab, press unlock, hold "BACK BUTTON" and insert cable to powered off phone.

if signature is calculated - you will receive 'SUCCESS' response, otherwise you will receive error code.
if calculation is success, then signature will be saved in backup\%imei% folder in your setool2 directory
(following unlock attempts, if something had happen with phone - cable disconnect,etc - during unlock - will be free as long as signature remains there )

next, backup will be created so you will be able to restore phone if something will go wrong.
procedure will continue,phone will be switched off and unlocked.
remember, if something will go wrong - you have a backup of security units.
please check "credits consumption" FAQ post for info about number of credits.

server based full unlock method using alternative security bypass

please read that post


GESTURE LOCK/USER PASSWORD RESED FOR S1-ANDROID PDA PHONES

check signed mode only, press unlock.
hold "BACK BUTTON" and insert cable to powered off phone.

if phone has blocked attempts counter, then you need reflash phone after lock reset. 
-------------------------------------------------------------------------------------------------

GPGDragon Pinout For HWK Repair

Here is difference between top picture and below picture.

HWK Pinout Difference

 Top picture pinout.


1,2,3,5,17,21.