The Samsung Anyway Jig

Status
Not open for further replies.

E:V:A

Inactive Recognized Developer
Dec 6, 2011
1,449
2,212
0
-∇ϕ
So thanks to a friendly anonymous source I have been fed some more info about
the Anyway box. I decided to wait posting it until it was more clear, but since
the interest in this is very limited, I'll juts post what I have so far.

1. The two UART ports are used differently, depending on the age/model of the
phone connected. This make sense as older feature phones probably use a
different voltage level than the newer smartphones (Android) which are using a
standardized uUSB connector.

The UART connectors was summarized as follows:
UART1: SDS, is the most commonly used these days.
UART2: DBG, basically old phone models.
Where DBG and SDS are set as shown in the Solution/Function Tables.


2. There's only one complete manual for the Anyway in the AnySVC server (the
official Samsung document server), which is for the Anyway S100. The manual for
the other models (S101, S102 etc), is the same. The difference is distributed as
a document, stating the changes to the original manual.

3. Because all new phones are using the uUSB connector/specifications, the
"Function" settings can be done in software. [This sound a bit suspicious to me
at the moment, but it may be related to the fact that newer Samsung models may
use a Serial over USB interface + drivers, as I have previously mentioned in #33, here
and here.]

We are possibly using this:



4. According to the S100 Anyway manual, the Solution settings and voltages are as follows:

Code:
[SIZE=2]---------------------------------------------------------------------------------
                                    |              Default Setting
                                    |--------------------------------------------
No      Solution                    | JIG_ON | UART | Boot |   USB   |   DBG
---------------------------------------------------------------------------------
1       Agere TC                    | 3.5V   | 3.0V |  0V  |  Open   | Connect
2       Hp, Vision, Infineon, EMP   | 3.5V   | 1.8V | Open | Connect |  Open
3       NXP Sysol                   |  0V    | 2.6V | Open |  Open   | Connect
4       NXP Swift Broadcom          |  0V    | 3.0V | Open | Connect |  Open
5       UMTS (Qualcomm)             | 3.5V   | 3.0V | Open | Connect |  Open
---------------------------------------------------------------------------------
[/SIZE]
This also explains why newer models use Solution "2" and UART-1. Because those chips use the 1.8 Volt levels.

Next, I will just quote another happy Anyway user...
The S100 use the "AnywaySetting" software to select the Port (UART1 ,2...) and
the Solution.

In the S101/102 we only need to manually select the solution, so the 'solution'
is the only thing we have to pay attention if using only one JIG to multiple
models of phones, and the UART is defined by what we are doing, if we need to
write IMEI then in the IMEI program we select the CON port that is connected to
UART1.

UART1 is SDS (Service (IMEI, Download, Phone Settings)).
UART2 is DBG (Debug).
But some old models use UART2 for IMEI, Download...

We use functions only when we do some things outside of the routine, for
example, in Galaxy if it does not start the download mode through the
combination Down+Home+Power (for various reasons, eg failure in the firmware) we
configure the JIG to "Solution 2, Function 2 and 6 (On)" this start the phone in
download mode.

The JIG is used for MANY things, if we configure it manually we have to
reconfigure it every time we do something different or use a different phone.
This is why we prefer to use the key combinations instead of use the "Function"
of the JIG, we just set each JIG to one solution and we plugged the phone to the
JIG/Solution we want...

In the example of download mode why we need to set the JIG to solution 2 and use function 2 and 6?

Solution 2 is to select the information that the JIG will send to the phone when turned ON.
Function 2 is to select the step/process we going to do.
Function 6 is to select the USB port instead of the UART, USB is faster.

As explained earlier the JIG is connected to a PSU to power the phone and the
PSU shows the current consumption, if we want to measure how much the phone is
consuming in sleepmode we put function 2 in ON and plug the phone, this starts
the phone on sleepmode and we can see on the PSU the consumption...

I used the same function to enter the download mode, but why now he went into
sleepmode? Because before I used the function 2 AND 6, using the "service
function" 2 and the usb function 6 the JIG understood that I wanted to connect
the phone to the pc and do the download of the firmware.

5. When connecting the GT-I9100 to the Anyway, it is apparently using the same Windows USB drivers as for the GT-I5500.
[Need confirmation.]
 
Last edited:

Entropy512

Senior Recognized Developer
Aug 31, 2007
14,095
25,085
0
Owego, NY
One thing that would be useful: If someone with one of these boxes, and the appropriate MicroUSB cable for a Galaxy S1 or S2 device, could measure the value of the resistance between the ID pin and ground for the various boot modes.

I suspect most of them will match to ones we know about already from the FSA9480 datasheet - but perhaps there are some "unknown" values we haven't seen before. Imagine if a certain ID value twiddled the xOM bootmode bits to the CPU...
 

MemoryController

Senior Member
Dec 21, 2011
1,024
219
0
Thessaloniki
One thing that would be useful: If someone with one of these boxes, and the appropriate MicroUSB cable for a Galaxy S1 or S2 device, could measure the value of the resistance between the ID pin and ground for the various boot modes.

I suspect most of them will match to ones we know about already from the FSA9480 datasheet - but perhaps there are some "unknown" values we haven't seen before. Imagine if a certain ID value twiddled the xOM bootmode bits to the CPU...
Unbrickable mod..... omg

Sent from my GT-I9100 using Tapatalk 2
 

sytruz

New member
Jul 26, 2012
2
11
0
Oradea
We happen to have at least 20 of these babies. We use them for putting the phones (mainly SIII) in download mode for custom T-Mobile. The new korean supervisors are so inexperienced, they don't know the Anyway's purpose, let alone it's exclusiveness. They make it's manual available to all employees; even the janitor can ask for it.
Besides this, there's also a Samsung oscilloscope-like computer with attached barcode readers which changes the phone's IMEI with a company exclusive program (heavily secured, password contains numbers aswell as symbols). That program has godlike properties; you can do EVERYTHING with it..even turn off internal GPS (which is used by the police when finding a stolen phone). We use it during lesser days to create new hybrid phones just for fun....like a Galaxy S plus with BADA or a Note with Windows mobile (extremely unstable and buggy)
 
Last edited by a moderator:

sytruz

New member
Jul 26, 2012
2
11
0
Oradea
By the way - we can easily install ICS 4 even on a Galaxy pocket. It barely runs, loads up in about 10 minutes, but it is possible. I don't think that is possible with third party tools.
There will be a flexible Samsung phone in 2013. IT WON'T BE the S4, but it will be in the Galaxy range. It will be about the size of the S3. It's flexible Super HD Amoled screen isn't really flexible. It's just an illusion, shall we say. The size of the Amoled diodes is microscopic; and they're placed on the motherboard (which will not be made out of silicate compounds) by nano-injectors the widht of a needle. To check if they're correctly placed, the photo-comparrison method is used.
Also, the transparent LCD screen is just a lateral holographic projection inside a very thin transparent plastic. It won't be used very soon on any model.
 

E:V:A

Inactive Recognized Developer
Dec 6, 2011
1,449
2,212
0
-∇ϕ
The last two pages are completely OFF TOPIC !!

Don't post here, unless you actually HAVE relevant Anyway information, files or documents.

THREAT ==> Or I'll have to use moderation to remove your posts or ultimately close the thread!
 
  • Like
Reactions: MemoryController

E:V:A

Inactive Recognized Developer
Dec 6, 2011
1,449
2,212
0
-∇ϕ
I was flattered to see that this thread was featured on the XDA "front" page 20 July. However, after reading peoples comments here, I think we need to restate, that we are not trying to make a replica of this box. The main reason is that it is completely unnecessary with all newer Android based smartphones from Samsung, using the μUSB connectors. To replicate the Anyway functionality in our case, only requires a minimum of electronics since most operations is done through software and our phones have most functionality already built-in. However, I reserve my right to be wrong, as it is possible that the Anyway contain built-in JTAG support using the SWD (software debug) protocols over USB...

Our greatest challenge is understanding how this software works, what protocols it is using and what data is sent to/from the phone during various Anyway operations.

I have a hand drawn schematic for a jig-box, that will be able to perform all operations that the Anyway can do and more (but limited to new Samsung models). If someone would care to convert this drawing to a real EAGLE schematic and possibly also a PCB design, I'd be thrilled! (Send me a PM). The design is really simple, modular and affordable. I'll provide the BOM (bill of materials) in post #3 when I get more feedback...

In addition I have found quite a bunch of (windows) drivers from a related pro-jig (the Z3X), using "SamsungTool" drivers... Interestingly it seem that Qualcomm based phones are using the FTDI drivers...

Here I wish someone with Samsung driver knowledge could fill in the blanks!
 
Last edited:

webzy

Member
Sep 23, 2011
9
0
0
34
bristol
maybe this is an image of insperation ??

i believe this could very be close to wot we want easy to build from scratch & modify to anyway jig specs or am i just being over creative lol??
 
Last edited:

E:V:A

Inactive Recognized Developer
Dec 6, 2011
1,449
2,212
0
-∇ϕ
^^ No such thing as over creative, but "easy to build from scratch" is a little exaggeration, as SMT are not for the faint harted! In addition this box seem way overkill, for what we need. Like I said, I have a good but hand-drawn schematic, but need someone to convert it into a serious schematic + PCB design files, that can be sent for cheap manufacturing... I'm still waiting for response.
 

MemoryController

Senior Member
Dec 21, 2011
1,024
219
0
Thessaloniki
^^ No such thing as over creative, but "easy to build from scratch" is a little exaggeration, as SMT are not for the faint harted! In addition this box seem way overkill, for what we need. Like I said, I have a good but hand-drawn schematic, but need someone to convert it into a serious schematic + PCB design files, that can be sent for cheap manufacturing... I'm still waiting for response.
So you got an insider? :) nice

Sent from my GT-I9100 running CM10
 

pulser_g2

Admin Emeritus / Senior Recognized Developer
Nov 27, 2009
19,538
11,594
113
^^ No such thing as over creative, but "easy to build from scratch" is a little exaggeration, as SMT are not for the faint harted! In addition this box seem way overkill, for what we need. Like I said, I have a good but hand-drawn schematic, but need someone to convert it into a serious schematic + PCB design files, that can be sent for cheap manufacturing... I'm still waiting for response.
I have designed a PCB with Eagle before...

I can't promise I'm an expert, but it passed all the tests on the software, I just didn't see it in use with my own eyes.
 

CR5N

Senior Member
Jul 15, 2010
584
114
43
I can produce a pukka schematic (cadence) if you have a proper parts list so i can assign pcb footprints to all the parts. The exported files will load into allegro or zuken pcb editors (and many others). I've done minimal hands on pcb design, i usually write a document explaining ground/power/signal track requirements and component placement where required for a design for the pcb layout (as was sub contracted). Happy to have a crack at it though.
 

pandaball

Inactive Recognized Developer
Oct 18, 2011
2,391
1,738
113
LG's jigs seem to have a lot of part numbers.

LG - JIG/MOLD JIG/MOLD (BJAY0023733)
LG - JIG/MOLD JIG/MOLD (BJAY0020060)
LG - JIG/MOLD JIG/MOLD (BJAY0023713)
LG - JIG/MOLD JIG/MOLD (BJAY0023930)
LG - JIG/MOLD JIG/MOLD (BJAY0015873)
LG - JIG/MOLD JIG/MOLD (BJAY0024023)
LG - JIG/MOLD JIG/MOLD (BJAY0024025)
LG - JIG/MOLD JIG/MOLD (BJAY0023711)
LG - JIG/MOLD JIG/MOLD (BJAY0023973)
LG - JIG/MOLD JIG/MOLD (BJAY0023732)
LG - JIG/MOLD JIG/MOLD (BJAY0017077)
LG - JIG/MOLD JIG/MOLD (BJAY0020013)
LG - JIG/MOLD JIG/MOLD (BJAY0024021)
LG - JIG/MOLD JIG/MOLD (BJAY0023706)
LG - JIG JIG (RAD32167835)
LG - PIF-100 PIF-100 56K+130K CABLE JIG/MOLD (BJAY0024011)
LG - PIF-100 PIF-100 910K CABLE JIG (BJAY0024049)

The last two should be the cables and their resistor values. However it seems to be for PIF100 which might be an older version of the PIF200. I pulled these details off http://www.onetelecom.eu/lg.php which has a handy list of LG parts and their part numbers.

EDIT: some files attached. One is a parts list which says if a part is in active use, inactive or discontinued (the jigs mostly start with part number BJAYxxxxxx), while the other is an instruction manual with more partslist, except it has pictures. The instruction manual (How to set up Cal DL 2012.07.27.xls) should be of particular interest. There are references to an RF-800A box there too (in data sheet), as well as a Nexus III box (in BRC sheet), not sure what that is.

PS. If the mods deem that this is off topic, feel free to remove.
 
Last edited:
  • Like
Reactions: E:V:A
Status
Not open for further replies.