Which IM Client on Android is best?

With so many different messengers to choose from, it can be tough to find the best one for you and … more

Android Factory Reset Security Flaw and More – XDA TV

Nvidia is releasing a 500Gb SHIELD TV Pro! That and much more news is … more

Android M Code Name: Macadamia Nut Cookie

While the official name for the latest iteration of Android has yet to be revealed, the code … more

XDA Recap: This Week In Android (May 17 – 23)

Another week, another recap. The Sunday tradition marches on this week with a fresh … more
Thread Closed Subscribe to Thread Email Thread

The Samsung Anyway Jig

1st May 2012, 01:49 PM |#1  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,985
The Samsung Anyway Jig

Summary: Some information and pictures of the mysterious Samsung Anyway Jig
Skill Level: Medium

Do NOT post questions/requests on how to obtain one, they
will not be answered.
(Because I have no idea, since its
Samsung proprietary test equipment!)

Do NOT post links to commercial jigs, unless you also post
the internal schematics, in such a way that it can be easily
constructed at home.

If you already have a working home-made multifunction jig
that you would like to share, please remember:
- a picture of the device
- a picture of the schematics
- a detailed parts list
- the phone/models it applies to
- any other relevant features to make it work


As custom ROM flashing become more and more popular, the XDA-forums are
continuously bombarded with questions and answers on how to debrick their
devices, often using (what used to be) professional hardware analysis and
debugging equipment, like vendor provided JTAG, JIG and software flashing
tools. These tools used to be only available to certified technical repair and
support centers, closely connected with the various phone vendors. However,
this scenario is rapidly changing as more people are getting higher technical
skills, while using these devices and tools on their phones.

One particular such device, provided by Samsung, has been used for years to
program, customize, repair, debug and unbrick essentially all available
Samsung phones. This blue box is called the "Samsung Anyway Jig", and somehow
Samsung has managed to hide it from public scrutiny and analysis, which have
elevated this device to an almost mythical status. At least for the common
person wishing to repair or modify his phone. Probably because Samsung have
realized that there is a great profit to be made, by having their customer
sending their phones in for repair, rather than letting them in on the simple
secret on how to do this kind of repairs themselves. This behavior have also
been a great joy for the few professional service centers that actually have
access to this device (or similar devices) or who were able to figure out how
it works, making it into a million dollar industry, and obviously without
sharing their knowledge to the public.

Thanks to great community oriented websites and forums like XDA and others,
the public awareness have increased to such a level, that today anyone (with
minimal soldering skills) can build a multifunction and debricking JIG. And
because of the increasingly better standardization among mobile phone
manufacturers, very few modifications are needed for this device to be working
with essentially any modern mobile-phone on the market.

This thread is an attempt to better understand the Samsung Anyway Jig, such
that one can build his/her own Jig, with the information contained herein,
together with many other publicly available documents. It shall be noted that
I do not have access to this device, and I have neither factual data, nor
info, on how this thing actually works. But I do have a very good idea!

Close inspection, of the only 3 (!) images found, as obtained by Google Image
Search (which I am growing increasingly unhappy with), provide a good start
for what is going on in that device.

The Anyway Versions

The Anyway Jig come in slightly different versions. And since I only have access
to 4 pictures, I cannot tell what other versions are available. However, I
noticed the following:

Version         PartNumber      Variation/Note
S100                            Doesn't have "EMP" Solution
S101            GH99-36900A     Has "EMP" solution. Is used with GT-S7230 (Bada OS)
S102            GH99-36900B     1.2A High-Current version for Tabs & Tablets

So let me first reproduce the text as seen on the photo of this box:


                                |                Function
No      Solution                | Mode          OFF             ON
1       Agere TC                | Boot          Low             High
2       Hp, Vision, Infineon    | SDS           O               X
3       NXP Sysol               | USB           O               X
4       NXP Swift Broadcom      | DBG           X               O
5       UMTS (Qualcomm)         | M-USB         Use             Not Use
6       EMP                     | ID type       UART            USB
7       -                       | ID-BOOT       Boot-On         Boot-Off
8       -                       | -             -               -
9       -                       | SDS TRX       -               Loop
10      -                       | DBG TRX       -               Loop
                                |       O = Connect, X = Disconnect
"The Solution"

The first thing to notice, is that the "Solution" column is completely
independent of the "Function" column. The "Solution" column seem to refer to
the manufacturer of the modem hardware used in the device, usually the
cellular/baseband processor (CP/BP) used by your phone or the modem chip in
routers etc. You can find out what you have by using the methods I have
outlined in the thread: "Phone/Modem Hardware Cross Reference List".

Once you know what you have, you use the 10-pole (BCD?) rotary micro-switch,
as shown in the picture below, to set it to the number corresponding to your
phone modem. (The settings in that picture, corresponds to a Samsung Wave
[GT-S7230] which has a Broadcom BP and thus the rotary-switch is set to #4.)
But according to this document, for attaching a [GT-I9000], you need to set
it to #2 (for Infineon).

It is unclear at this point whether or not this setting is actually changed
much when using various modern phones. It is more likely that this is used for
backward compatibility to older phones that use older connectors, and that new
phones all use the same setting since most of them, now use micro-USB
connectors. Otherwise it simply wouldn't make sense to use a
micro-rotary-switch, especially considering the vast number of modems chips
available today, while the uUSB standard connectors doesn't allow other

"The Function"

As you have already noticed, next to the rotary switch, there is a 10-pole DIL
switch, that is used to set the Jigs "Function", or behavior. The table above
show the various functional options available, that you can use for the JIG.
Although it is unclear what all these functions actually does, without access
to a box or manual, we are free to make some educated guesses.

Here we make the following (rather wild) guesses as what the various modes does:
DILpos  Mode            Typical What            Description-Guess
1       Boot            0       Low             ??      
2       SDS             1       X               ??      
3       USB             0       O               ?Enable/disable USB pass trough:                [target]--->[JIG]--->[PC]               
4       DBG             0       X               ?Enable/disable debug by "port":                        
5       M-USB           0       Use             ?Enable/disable modem USB connection
6       ID type         1       USB             ?"Interface Dongle" output-side selection (wheter to use the USB or UART to connect to PC)
7       ID-BOOT         0       Boot-on         ?Determines if the device should bootup/start when connected to the JIG.
8       -               -       -               -
9       SDS TRX         0       -               ?Enable/disable Loopback on this interface
10      DBG TRX         0       -               ?Enable/disable Loopback on this interface
where (0==OFF, 1=ON) of the 10-pol DIL switch, 
while "O" is connect and "X" disconnect.
If you have any knowledge of what these does, please let us know. For example,
I like to know what the "SDS" refers to and what it is/was used for?

Then What?

So how interesting is this, for our modern Android based and micro-USB
connected phones, on a scale from 1-10? Probably not much more than 3.
Because most of the device magic happens inside the phone, determined by
various internal multiplexers (MUX), resistance/capacitance detectors, the
Power Management IC (PMIC) and related device drivers.

The most important thing to understand, is that today there are very specific
standards regarding what functionality is offered and expected, given certain
conditions on the micro-USB signals. For example, shorting the D+ and D- USB
signals, tells your phone to start charging, using the VBUS and GND lines.
While a resitive short between the micro-USB lines ID_CON (pin 4) and GND
(pin-5), allows and selects a wide range of functionality from remote control,
debug mode, download mode, audio/video transfer and everything else you may
want to do. These are some of the things we would like to focus on here.

So what is more interesting, is how we can build a JIG that is much more
modern and useful than this old dinosaur, that can provide us with a fully
controlled set of the functions mentioned above. So if you still dream about
getting one, forget it and build your own! Below I will link to a list of DIY
multifunction JIGs. That means I only list serious JIGs that contain a little
more functionality, than just a resistor. Post if you have something worth

Useful Resources

*Fun with resistors (home/car dock mode + more)
Lets Save Some Bricks
*The Captivate Development Platform mod AKA UnBrickable Mod
Set up a Captivate for Samsung Bootloader Development
The Vibrant Development Platform AKA UnBrickable Mod
USB Jig FAQ (Frequently Asked Questions) [4/4/2012] ICS bootloader added
Galaxy S UART JIG & Debugging Connector

Complete USB2.0 Specifications (>13 MB, 30 files, main: 650 pages)
USB Battery Charging Specifications 1.2 (71 pages)
FSA9280A Datasheet (Used in SGS1)
FSA9285 censored Datasheet ()
FSA9485 censored Datasheet ()
FSA3200 Datasheet (Used in SGS2)
* Strongly recommended reading

Let me know of any dead links.

Here is an internal photo of the original Anyway S100.

Keywords: jig, samsung, anyway, resistors, multiplex

UPDATE: 2012-10-24
Anyway Software, Drivers and Manuals for:
  • Anyway D100 (8 port factory jig)
  • Anyway S100 (1 port factory jig)
Can be found for download in Post#67 ...

Attached Thumbnails
Click image for larger version

Name:	Samsung_Anyway_Jig_S102_1.jpg
Views:	49852
Size:	49.3 KB
ID:	1034565   Click image for larger version

Name:	Samsung_Anyway_S101_Jig_dip_small.png
Views:	49439
Size:	49.0 KB
ID:	1034566   Click image for larger version

Name:	IMGP1033_514.jpg
Views:	46684
Size:	77.1 KB
ID:	1204605  
Last edited by E:V:A; 24th October 2012 at 11:42 AM.
The Following 30 Users Say Thank You to E:V:A For This Useful Post: [ View ]
1st May 2012, 01:50 PM |#2  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,985
Building your own multifunction JIG

The first thing you need to know, when building your own jig, is how various
resistor values determine the behavior of your phone. Below is a list of
resistor values used in the FSA9280A multiplexer chip. These values have been
become a bit of a standard for new Samsung phones and are thus likely to
remain true also for new models and many other devices running AOS. In
post #3 we use these values to build our Resistor Banks.

FSA9280A/88A Resistor Value Functionality

ID_CON Accessory Detection Table (ID_CON resistance to GND):
ADC-reg         Min     Typ     Max     Attn    Accessory Detected
00000           GND     GND     GND     !       Host Mode / OTG (On-The-Go)
00001           1.9K    2K      2.1K            Audio Send/End Button

00010           2.47K   2.604K  2.73K           Audio Remote S1 Button
00011           3.05K   3.208K  3.37K           Audio Remote S2 Button
00100           3.81K   4.014K  4.21K           Audio Remote S3 Button
00101           4.58K   4.82K   5.06K           Audio Remote S4 Button
00110           5.73K   6.03K   6.33K           Audio Remote S5 Button
00111           7.63K   8.03K   8.43K           Audio Remote S6 Button
01000           9.53K   10.03K  10.53K          Audio Remote S7 Button
01001           11.43K  12.03K  12.63K          Audio Remote S8 Button
01010           13.74K  14.46K  15.18K          Audio Remote S9 Button
01011           16.4K   17.26K  18.12K          Audio Remote S10 Button
01100           19.48K  20.5K   21.53K          Audio Remote S11 Button
01101           22.87K  24.07K  25.27K          Audio Remote S12 Button

01110           27.27K  28.7K   30.14K          Reserved Accessory #1
01111           32.3K   34K     35.7K           Reserved Accessory #2
10000           38.19K  40.2K   42.21K          Reserved Accessory #3
10001           47.41K  49.9K   52.4 K          Reserved Accessory #4
10010           61.66K  64.9K   68.15K          Reserved Accessory #5

10011           76.1K   80.7K   84.1K   !       Audio Device Type-2
10100           96.9K   102K    107.1K  !       Phone Powered Device
10101           115K    121K    127K            TTY Converter
10110           143K    150K    157K            UART Cable 
10111           190K    200K    210K            Type-1 Car Kit Charger*
11000           242K    255K    268K            Factory Mode Boot OFF-USB
11001           292K    301K    316K            Factory Mode Boot ON-USB
11010           347K    365K    383K    !       Audio/Video MHL Cable**
11011           420K    442K    464K            Type-2 Car Kit Charger*
11100           507K    523K    549K            Factory Mode Boot OFF-UART
11101           588K    619K    650K            Factory Mode Boot ON-UART
11110           750K    1000/2K 1050K           Audio Device Type-1 with Remote

11111           -       Open    -               Slave Mode / Charger Mode***
*  USB Car Kit specification: ANSI/CEA-936-A.
** USB MHL (Mobile High definition Link)
!  Attention, when these values are used, all pin functions 
   changes. Having the wrong device connected in this mode, may 
   short and brick interior phone chips.
There is a good reason why some resistor values are marked as "DO NOT USE", in
the original FSA9280A datasheet. That reason is because these values trigger a
signal path switch (by cascading multiplexers), in such a way that the
original 2-5 USB (cable) signals no longer exists as such. If this occurs,
when you have another type of device connected, than what was intended for
that function, you risk short-circuiting and bricking the relevant internal
chip that is driving that function. The best example is the MHL function. When
MHL is activated, all mUSB pins become part of MHL signal lines. If during you
happen to have a dedicated charger connected instead of a dedicated
mUSB-to-HDMI cable, you will for sure burn out your MHL Transmitter chip (or
possibly any other chip using those signals in that path). Why? Because a
dedicated charger has D+ and D- pins shorted, while its trying to provide +5V
(@1.2A) on pin-1. This at the same time the MHL chip is trying to provide
various output signals on all 5 pins!

Factory Mode Auto-Configuration Table
(1% Resistors on ID_CON Pin):
Configuration           Boot    VBUS    DP_CON  DM_CON  ID_CON  BOOT    JIG
FactoryMode 0 (UART)    On      Open    RxD     TxD     619K    HIGH    LOW     --> Triggers "Dock Mode" (Google Car Home)
FactoryMode 0 (UART)    Off     Open    RxD     TxD     523K    LOW     LOW     --> 
FactoryMode 1 (USB)     On      Closed  DP_Host DM_Host 301K    HIGH    LOW     --> Triggers "Download Mode" (aka "Debrick/Recovery JIG")
FactoryMode 1 (USB)     Off     Closed  DP_Host DM_Host 255K    LOW     LOW     --> 
In addition to the above resistor values based on just that one chip, and mainly used by Samsung, there is an international standard specification for Battery Charging. In these spec's there are three additional values to consider.

Battery Charging 1.1 Specifications
(May need to be verified...)
DCP: USB Dedicated Charger Port         RID_A = 124K
CDP: USB Charging Downstream Port       RID_B = 68K
SDP: USB Standard Downstream Port       RID_C = 36.5K
where RID = "Resistor Identification"
List of DIY multifunction JIGs

UberPinguin's Multi-R Jig
Another nice I9100 UART JIG (chinese)
DHylands SGS2 Serial Adapter and Console

Recommended UART Cables

FTDI's "Chipi-X" USB-to-RS232 Cable

Good to Know

Android D2XX FTDI Driver
"Build your own Music dock" [Samsung]
Last edited by E:V:A; 3rd May 2012 at 05:26 PM.
The Following 11 Users Say Thank You to E:V:A For This Useful Post: [ View ]
1st May 2012, 01:50 PM |#3  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,985
The Dancing MyWay Jig

< here be dragons 2 >
Last edited by E:V:A; 29th October 2012 at 09:40 AM.
The Following 3 Users Say Thank You to E:V:A For This Useful Post: [ View ]
2nd May 2012, 11:48 PM |#4  
chrisrotolo's Avatar
Senior Member
Flag Hartford, Connecticut
Thanks Meter: 454
Donate to Me
Dude! excellent find. Holy Hack!

you may have seen this thread..

that Duc guy may have some info.

someone also links to a user manual where you can see more of that puppy in action..

enjoy. ciao.
Last edited by chrisrotolo; 3rd May 2012 at 05:24 PM.
3rd May 2012, 05:33 PM |#5  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,985
^^ Yeah, thanks, but most of those links are dead and the "manual" is just an old standard flashing/service manual. In fact I got the above pictures from some other service manuals. Finally, I don't like having to register to a website, just so that I can see some images.
The Following User Says Thank You to E:V:A For This Useful Post: [ View ]
29th June 2012, 08:05 AM |#6  
ParanoidDK's Avatar
Senior Member
Flag Sveg, Sweden
Thanks Meter: 22
I do have a AnyWay S100 jig here that i got when samsung support left the place i work. I think i can get a hold of all the cables that they had for it. If i remember correct there was never a micro usb cable tho. But if you want i cna open that puppy up and provide pictures of the inside of the jig. also it could be nice if i could find a way to make a micro usb cable for it...
The Following 3 Users Say Thank You to ParanoidDK For This Useful Post: [ View ]
29th June 2012, 12:22 PM |#7  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,985
Originally Posted by ParanoidDK

But if you want i cna open that puppy up and provide pictures of the inside of the jig.

Yes! We'd love to see what's inside! Chips, and wiring etc!

Do you happen to have any windows software drivers for the device? (Why? Because of this.)

Making a micro USB hack would be easy...if you have the right tools or a micro-USB breakout PCB. Just remember that most micro-USB to USB cables do not have the USB_ID line in the cable, but is immediately shorted inside micro-connector. You could get a micro-to-mini-USB cable, that should also include the USB_ID (aka ID_CON) line, but these are hard to find as they are not conforming to common USB cable standards.
Last edited by E:V:A; 29th June 2012 at 12:49 PM.
29th June 2012, 12:49 PM |#8  
ParanoidDK's Avatar
Senior Member
Flag Sveg, Sweden
Thanks Meter: 22
Well the usb cable should be the least thing... And if i make one i might just as well make one from start with a micro usb plug, cable and the printer plug in the other end... I think i might be able to use the cable for one of the older samsung phones i have for the box as start point...

i have a print i need to make and then i will open up the box and start to take some pics with my SGS3 just so you can get a preview of the inside... :P
The Following 2 Users Say Thank You to ParanoidDK For This Useful Post: [ View ]
1st July 2012, 04:53 PM |#9  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,985
An anonymous and friendly contributor have come forward with a little bit more information, although not very useful.

1) The S102 model is modified to allow a higher current as used in Tablets.
2) The manual "Function" settings can now be made in software, and is no longer used. (Well then, how is it set in software?)
3) The "Solution" for Galaxy models should be set to "NXP Swift". (But this contradicts the Service Manual for the GT-I9100 and others! But is probably explained by the different BP's used in those devices.)

We need internal pictures! (or the schematics)
2nd July 2012, 07:30 AM |#10  
ParanoidDK's Avatar
Senior Member
Flag Sveg, Sweden
Thanks Meter: 22
Here is some pictures of the internals from the S100 i have here. Proberly not the best ones but the best i can take with my cam... If i have to take better ones i will have to get my friend involved with his DSLR.

I had to upload them to my server as they was to large to upload to xda...

Internals Pictures of the AnyWay S100 Jig

I am going to see if i can find the last cables and the psu for the jig today in the bin... As it is now without the PSU windows dont even see the device...
Last edited by ParanoidDK; 2nd July 2012 at 07:58 AM. Reason: Added more info
The Following 3 Users Say Thank You to ParanoidDK For This Useful Post: [ View ]
Thread Closed Subscribe to Thread

godlike properties
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Top Threads in Hardware Hacking General by ThreadRank