The all-in-one Galaxy S2 Hack Pack

Search This thread

bhundven

Inactive Recognized Developer

machv5

Senior Member
Sep 4, 2012
145
21
Drunken Duncan
Are my ideas below likely to work in restoring my phone?

I've been compiling information for UnBrickable mod on the various versions of the Galaxy S2 device. This generation is by-far the most decentralized "model" I've ever heard of. Some of the devices contain Exynos processors, some Qualcomm and others have OMAP.

We've conducted research on this generation of device in the following threads:
AT&T GS2 UART/bootloader hacking: http://xdaforums.com/showthread.php?t=1313588
Epic 4G Touch information gathering: http://xdaforums.com/showthread.php?t=1262081
Galaxy Nexus UnBrickable Mod development: http://xdaforums.com/showthread.php?t=1310865

But you're here for the Galaxy S2 Hack Pack. This Hack Pack is designed to help out those looking for information on modifying and/or repairing their expensive devices. This package contains:

Please let me know if there's anything I should add to this pack.

I have a bricked (auto checked repartition during cwm reflash type brick) grrrSGH-I727R can only be seen via QPST in Download mode. I have been reading a heck of a lot about this device and have managed to accrue a vast amount of resources and information on this device.

I have had some success in using QPST files for a Galaxy note I7I7 (I will update with precice information once I can sort it all out, from downloaded drivers to specific information gathered, etc...). I Used QPST to load a hex file using eMMC Software Download App. This got the phones full SDCARD internal and user to show up on the computer. But QH USB modem 8000 (win native support) driver would not load, which stopped QPST in its tracks. Although I think that I am grateful for that not working as the next step would have been flashing my device with Galaxy Note firmware etc...

Next I used a Windows based partitioning tool to recover the lost partitions but the recovery did not stick. So I am using another tool to see if that works. I still cannot see the phone via ODIN or Heimdall etc... so no luck there with the "soft"unbrickables.

But if I could create a working set of files that are similar but device specific of cource and compete with hex files like I got for the galaxy Note plus the correct drivers. The phone would then as it was before the changing QPST put it through i.e., the added sight of the other USB devices in device manager. I don't see why this would not unbrick the phone.

But I have only ever been able to find firmware with hex files and other files for flashing low level once and that was for the Galaxy Note as mentioned. I have access to another unbricked totally stock Galaxy S2 which I can use to create these files. I need help so that I am not just guessing as to what I'm supposed to do based on other devices and praying I don't brick the other phone too. I am going to create a disk image of the device before the partitioning repair so that I can try to use Linux to recover the partitions some of which are ext3, then I won't have to risk another brick.

I know that the system is basically there as the information I get back lists all the mmcblk's almost exactly as the ODIN tar says it's mount points are for them and relatively the right amount of data is still there too.

Once the image has been created I am sure I can figure out a way to rebuild the partitions and files that are on them, At least I hope so before QPSTs hell freezes over. I'm not all that knowledgeable on data recovery with linux. I am still at a stage of commandline use where breaking the system beyond my ability to repair it other than a reinstall is a possibility.

I am learning all this by myself and via sites like yours and now a couple others based on the QPST knowledge I am getting. Anywho I'm rambling now. Please can someone get back to me with what I can try next or should be trying instead?
 
Last edited:

jugnopk

New member
Mar 19, 2014
2
0
samsung s2 gt-i9100 shw-m250s mainboard

i have board as above pic, where 2 parts are cracked in my board, if any one can reply with part number for cracked parts, i will be very thankfull to you
 

Attachments

  • 1.JPG
    1.JPG
    67 KB · Views: 1,272

geoffrey2012

Member
Aug 26, 2012
19
0
Q500

In the Samsung Service manual Q500 is shown as a three terminal device (a FET) but in my GT-I1900 the position of Q500 on the circuit board is taken by a different device. This is marked HLLA4XN and 93137 and has six pins. I have been unable to find any information about this device which I suspect performs the same function as the previous Q500 in enabling charging. I enclose a photo below. Does anyone have any information about this device?
 

Attachments

  • Q500.jpg
    Q500.jpg
    43.9 KB · Views: 926

camp0s

Senior Member
Jun 13, 2011
84
7
Old reply but..

The phone does almost always freezes really early in the boot process.
It is a confirmed hardware problem with it.
....

Have the very same problem since 2-3 days, any update/suggestion to deal with it? I'd like to replace the mainboard BUT it will change IMEI and I (potentially) don't know the status of the memory chip :(
 

camp0s

Senior Member
Jun 13, 2011
84
7
Inductors L500 to L507, is there a list with the nominal values? I cannot find specific info on those components.

Tnx!
 

Top Liked Posts

  • There are no posts matching your filters.
  • 42
    I've been compiling information for UnBrickable mod on the various versions of the Galaxy S2 device. This generation is by-far the most decentralized "model" I've ever heard of. Some of the devices contain Exynos processors, some Qualcomm and others have OMAP.

    We've conducted research on this generation of device in the following threads:
    AT&T GS2 UART/bootloader hacking: http://xdaforums.com/showthread.php?t=1313588
    Epic 4G Touch information gathering: http://xdaforums.com/showthread.php?t=1262081
    Galaxy Nexus UnBrickable Mod development: http://xdaforums.com/showthread.php?t=1310865

    But you're here for the Galaxy S2 Hack Pack. This Hack Pack is designed to help out those looking for information on modifying and/or repairing their expensive devices. This package contains:

    Reading Material
    GT-i9100 official service manual - service manual which applies to most GS2 devices
    Exynos 4120 public datasheet -datasheet explaining internal workings of the chip
    Origenboard documentation -Exynos based development board
    OMAP 4430 datasheets -datasheet explaining internal workings of the chip
    FSA9280A datasheet -USB Switch chip which responds to resistors and routes communications around the phone
    -(no information on qualcomm processors is available)-
    model speciffic
    AT&T SGS2 uart -UART output logs
    i9100 IROM -memory dumps
    i9100T bootrom -memory dumps
    Epic 4G Touch pictures-pictures of internals
    Galaxy Nexus specs -models of chips used in Galaxy Nexus
    Android Binaries
    bash - the best scriptable shell ever
    i2cdetect -i2c address detector
    i2cdump -i2c bus dumper
    i2cget -i2c information grabber
    i2cset -i2c information sender
    tcpdump - monitors network traffic
    viewmem - allows memory dumps
    apps
    smdk-tools - a set of linux development tools designed for direct communciation with the Exynos processor.

    Download The Galaxy S2 Hack Pack

    Please note, none of the contained information is my own original work. This has been compiled over the last month of researching this device. All information in this Hack Pack is available on the Internet from various sources.

    Credits:
    Samsung- i9100 service manuals and other tools.
    SuperCurio- Model Numbers of the chips in the device were discovered by SuperCurio from a Voodoo Report sent from a Hong Kong conference.

    Please let me know if there's anything I should add to this pack.
    4
    Reserved post for additional CPU&booting sequence info. (coming soon)
    4
    GT-I9100_HackPack_AddOn-1.2

    The GT-I9100 Hack Pack Add On -1.2

    UPDATED: 2012-05-23

    Change log:
    2012-05-23: Minor updates and added U504 datasheet.

    Download Here!
    (or here, compressed by 7-zip, 90 files, ~39 MB)

    This package contain Datasheets for more than 20 chips, including detailed pin-out and
    connections to those chips that do not have any publicly available datasheets.
    Included are also:

    • USB 2.0 specifications (~600 pages)
    • MHL Specifications and other documents
    • Battery Charging 1.1 specifications (models <= GT-I9100)
    • Battery Charging 1.2 specifications (models > GT-I9100)
    List of the included PDF data sheets:
    Code:
    [SIZE=2]GT-I9100_U104_RFMD_RF6590DS.pdf
    GT-I9100_U203_ONSemi_NLSX3012-D.pdf
    GT-I9100_U205_SiliconLabs_Si4708-09-C.pdf
    GT-I9100_U206_Micrel_MIC5365.pdf
    GT-I9100_U300_Toshiba_TC7SG32AFS.pdf
    GT-I9100_U400_Fairchild_FXLP34.pdf
    GT-I9100_U502_Fairchild_FSUSB42.pdf
    GT-I9100_U503_Maxim_MAX8627.pdf
    GT-I9100_U504_Maxim_MAX8922L.pdf
    GT-I9100_U600_Fairchild_FSA2259.pdf
    GT-I9100_U601_Audience_A1026_ProdBrief_091511.pdf
    GT-I9100_U603_Toshiba_TC75W56FK.pdf
    GT-I9100_U606_probably_STMicro_LIS3DH.pdf
    GT-I9100_U607_probably_STMicro_L3G4200D.pdf
    GT-I9100_U608_AKM_AK8975.pdf
    GT-I9100_U609-11_U703_11_20_Ricoh_RP103x.pdf
    GT-I9100_U704_Ricoh_RP150Kx.pdf
    GT-I9100_U706_Toshiba_TC75S56FE.pdf
    GT-I9100_U707_Ricoh_RP100x.pdf
    GT-I9100_U708_SiliconImage_SiI9244_brief.pdf
    GT-I9100_U709_Fairchild_FSA3200.pdf
    GT-I9100_U710_Micrel_MIC5335.pdf
    GT-I9100_U718_STMicro_STOD13A.pdf
    GT-I9100_Uxxx_Semtec_RClamp3654p.pdf
    [/SIZE]
    There are also other PDF files for reference and a number of of high-resolution photos of the PCB.

    The Samsung Part Number and Chip Info cross-reference list:
    Code:
    [SIZE=2]SecPartNo       Layout                          Component                                       Annotation
    ------------------------------------------------------------------------------------------------------------------
    2910-000125     F100                            <na>                                     ???    Murata          "5162 c045"     RF FEM "DUPLEXER-SAW" combination 
    4709-001987     MOD201                          W-LAN MODULE;Bluetooth Bluetooth 4.0 + H        Murata          KM1602021       Module encapsulation of Broadcom 4330 etc
    1201-003217     PAM100                          IC-POWER AMP;RF6260,21P,8.0x6.0x1.015T,P        RFMD            RF6260          RF Quad-band 3G4G Power Amp 3G/4G
    1201-003139     PAM200                          IC-GPS AMP;ALM-2712-SG1G,12P,3.0x2.5x1mm        Avago           ALM 2712        RF GPS front-end module (FEM)
    1205-004195     U100                            IC-TRANSCEIVER;PMB5712,FBGA,138P,5x5.3mm        Infineon        SMARTi-UE2      RF DSP/tranceiver
    2911-000166     U101                            DUPLEXER-ASM;2140MHz,1960MHz,2140MHz/0.9 ???                    "1EH 117 1.3"   Duplexer/Antenna Switch Module
    1203-006802     U103                            IC-DC/DC CONVERTER;RF6560,24P,2.53X1.72X        RFMD            RF6560          RF Power Management IC
    1203-006801     U104                            IC-DC/DC CONVERTER;RF6590,16P,1.730X1.70        RFMD            RF6590          RF Power Management IC
    1204-003171     U202                            IC-GPS RECEIVER;GSD4T-9600B-TR,WLCSP,42P        SiRF            GSD4T           GPS chip
    1003-002100     U203                            IC-LEVEL DRIVER;NLSX3012MUTAG,UDFN,8P,1.        ONSemi          NLSX3012        2x Level Translator
    1204-003176     U205                            IC-TUNER;SI4709-C-GMR,QFN,16P,2.5x2.5x0.        Silicon Labs    Si4709          FM receiver
    1203-005580     U206                            IC-POSI.FIXED REG.;MIC5365-1.8YMT,MLF,4P        Micrel          MIC5365         150mA LDO
    0801-003024     U300                            IC-CMOS LOGIC;7SG32,OR GATE,SON,5P,1.0x0        Toshiba         TC7SG32AFS?     2-Input OR Gate
    1203-006847    U303                          IC-MULTI    REG.;RP150K011B,PLP,8P,4x4x1.6m ???    Ricoh         RP150K011B    2x 300mA LDO Regulator
    0801-003031     U400                            IC-CMOS LOGIC;FXLP34,Translator,Micropak        Fairchild       FXLP34          1-bit Uni-Dir Translator
    1203-006851     U501                            IC-POWER SUPERVISOR;MAX8997EWW+T,WLP,169        Maxim           MAX8997EWW+T    PMIC
    1001-001481     U502                            IC-ANALOG SWITCH;FSUSB42UMX,USB SWITCH,U        Fairchild       FSUSB42UMX      2-port HS USB2 UART Switch
    1203-006794     U503                            IC-DC/DC CONVERTER,MAX8627ETD+T,TDFN,14P        Maxim           MAX8627ETD+T    OTG power-booster
    1203-006884     U504                            IC-POWER SUPERVISOR;SS6000GQW,WLP,10P,3x ???            
    1001-001635     U600                            IC-ANALOG SWITCH;FSA2259UMX,UMLP,10P,1.4        Fairchild       FSA2259UMX      
    1204-003167     U601                            IC-AUDIO PROCESSOR;A1026A0F,WLCSP,40P,2.        Audience        A1026A          NC/Voice Processor
    1205-004174     U602                            IC-CODEC;YMU823,WLCSP,67P,3.85x3.85mm,6.        Yamaha          YMU823          Audio Codec
    1202-001118     U603                            IC-VOLTAGE COMP.;75W56,SSOP,8P,1.6x1.6mm        Toshiba         TC75W56FK       Dual Comparator
    1209-002045     U606                            IC-SENSOR;K3DHTR,LGA,16P,3X3X1mm,-,3.6V,        STM             LIS3DH          3-axis Accelerometer 
    1209-001997     U607                            IC-SENSOR;K3GTR,LGA,16P,4x4x1.1 mm,3.6V,        STM             L3G4200D        3-axis Gyroscope
    1209-002041     U608                            IC-SENSOR;AK8975C,WL-CSP (BGA),14P,2.0*2        AKM             AK8975          Compass Sensor
    1203-004819     U609-611,703,711,720            IC-POSI.FIXED REG.;RP103K,PLP,4P,1x1mm,2        Ricoh           RP103x          150mA LDO Regulator
    1203-005574     U701                            IC-POSI.FIXED REG.;RP103K121D-TR,PLP1010        Ricoh           RP103x          150mA LDO Regulator
    1203-005044     U702                            IC-POSI.FIXED REG.;RP103K151D-TR,PLP1010        Ricoh           RP103x          150mA LDO Regulator
    1203-004339     U704                            IC-MULTI REG.;RP150K009A,PLP,8P,2x2mm,PL        Ricoh           RP150Kx         2x 300mA LDO Regulator
    1202-001068     U706                            IC-VOLTAGE COMP.;TC75S56FE,SON,5P,1.6x1.        Toshiba         TC75W56FE       Single Comparator
    1203-004802     U707                            IC-POSI.FIXED REG.;RP100,PLP,4P,1.6x1.2m        Ricoh           RP100x          200mA LDO Regulator
    1205-004233     U708                            IC-TRANSMITTER;SII9244BO,VFBGA,49P,3.5X3        Silicon Image   SiI9442         MHL Transmitter
    1001-001699     U709                            IC-ANALOG SWITCH,FSA3200UMX,UMLP,16P,1.8        Fairchild       FSA3200UMX      2-port HS-USB2 Switch with MHL
    1203-005244     U710                            IC-MULTI REG.;MIC5335-SGYMT,TMLF,6P,1.6x        Micrel          MIC5335-SGYMT   2x 300mA microCap ULDO
    1203-006651     U718                            IC-DC/DC CONVERTER;STOD13A,UDFN,12P,3x3m        STMicro         STOD13A         250mA DC-DC Converter (AMOLED)
    1205-004213     UCP300                          IC-MODEM;PMB9811-B,NSP,221P,7.5x7.5x1.0m        Infineon        PMB9811         X-GOLD626 Baseband Processor
    0908-002766     UCP400                          <na>                                            Samsung         S5PC210         Exynos 4210
    1108-000424     UME300                          IC-MCP;KMVYL000LM-B503,16GB+512Mb,MoviNA        Samsung         KMVYL000LM-B503 MoviNAND
    [/SIZE]
    (It was put together with help from the included data mining Perl script.)

    Finally there are a few chips that we would like to know much more about. They are:
    Code:
    [SIZE=2]UPC300  Intel/Infineon          PMB9811         Baseband Processor: XMM6260-X-GOLD626   
    U100    Intel/Infineon          PMB5712         RF-Transceiver: XMM6260-SMARTi-UE2 
    U101                                            Duplexer/Antenna Switch Module
    U103    RF Micro Devices        RF6560          RF Power Management IC
    U501    Maxim                   MAX8997         Power Management IC
    F100    Samsung:2910-000125 ?   ?               "DUPLEXER-SAW"                 [/SIZE]
    If you have any additional information about these, please let us know
    or send us a link to where they can be found. Any help would be very much
    appreciated! Here are some pictures that might help...


    2
    My phone has similar problem and I desolder C565 element anyone know what is this element and know his value? i think is capilator but what is value?
    It is a Ceramic Capacitor, 22000 nF:
    Code:
    2203-007781    C564,C565                    C-CER,CHIP;22000nF,20%,10V,X5R,TP,1608,0
    2
    ^^ I think you should try to get some log messages and post them somewhere with links, so that we can look at them, since there's no telling in whats wrong from here. The SGS2 is known to run hot, but not crash because of it, AFAIK. Unfortunately I don't remember which log messages are preserved after system crash or reboot. Perhaps "kmsg"? There are also other ways... Ahh, try to run adb logcat <other cmd switches> from external command and keep on saving log files and wait for it to die...

    I don't recommend you to try to do this, unless you consider yourself a "re-balling pro"! (If you don't know what that means, it means that you should forget about it!) But if you feel like going ahead with this, I suggest you to start a new thread about this, as this is quite off topic.