Renault / Dacia LAN5200WR1 Jtag

[jodge]

My customer played with it and he obviously totally killed.
Any info about the debricking? As far as i know the jtag port is open. Pinout dump..etc?
thx

[RadioChiP]

I try Jtag port programed AU13XX Ok but not work :( Maybe problem is Flash

[jodge]

He tried to downgrade it, as i know it's a simple nand.

do you have a pinout?

[neutec]

hola, podes subir imagenes del equipo cuando esta encendido, la pantalla que dice? imagenes de la pcb main...

[shooting]

hola, podes subir imagenes del equipo cuando esta encendido, la pantalla que dice? imagenes de la pcb main...

Use ENGLISH only here..

wbr

[neutec]

Hello, can you upload images of the computer when it is on, the screen that says? images of the pcb main ...

[jodge]

Hello, can you upload images of the computer when it is on, the screen that says? images of the pcb main ...

Only white screen. No text, no logo, nothing.
About the pcb picture...'ll get it tomorrow the radio bcose i just got the job right now

btw here is the pinout:

1,2,6,9 = GND
10 = TCK
11 = TMS
12 = TDO
13 = TDI
14 = TRST
16,17 = 3.3V

[RadioChiP]

You can find pinout via Service manual Search google Service manual

[attilaa0]

Maybe need this?I have also dump of MX29LV320TT
But maybe have problem of Sandisk memory.

[neutec]

here I send a flash bin MX29LV320, I hope it serves you, in any case, the emmc memory could be replaced by a card SD.

link

https://wetransfer.com/downloads/43d1ad558a91367865ae457680221d9d20180522201728/992f1f3f6cd72713b6269a160a9993c920180522201728/97411c?utm_campaign=WT_email_tracking&utm_content=general&utm_medium=download_button&utm_source=notify_recipient_email

[attilaa0]

Here another dump :https://files.fm/u/4f2htx7x#_

this is for LAN5200WR1

Question for user Neutec how to save file from emmc memory because is partition exFat and Fat16 and windows see only Fat32?
What program use to copy content of emmc card to sd card.I tried Usb image tool but this see only partition Fat32.
Thanks!

[neutec]

Hello, you can use the booticex86 application, select the partition, activate it and it will show active partition at that moment, so with all partitions, greetings.

https://wetransfer.com/downloads/07d12c45b31388ea671e27610b9249e920180523114741/7e8c37

[jodge]

i get the radio. Thx for the dumps

finally i understand this

there is two different storage in the radio:

-MX29LV320ET
-some kind emmc (doesn't matter the type)

the mx storing the basic opsystem like the PC bios
and the eemc stroing the maps..etc it's working like a hdd

If you stuck on the logo:
- Probably the emmc is dead. You can change to any type of emmc with the same package (BGA169). But before put in you have to create partitions, or you can change to a regular SD card BUT it's really slow stuff. Be careful with the removing bcose the eemc is glued to the pcb. (easy to losing some pins)
- Or maybe the rams are dead. It's made from really cheap low cost stuffs

Totally blank screen:

- Bad MX flash
- Bad update

you can fix the corrupt flash thru the jtag port or with a proper programmer (hot air, removing, tsop48 socket..etc)


In my case the owner didn't finish the update process and the MX is totally empty. Now my beeprog working on it :)

thx

[attilaa0]

Thanks!I wait for more details,after rewrite the Mx29lv.

[jodge]

with neutec dump not working at all. Probably bcose it's wr3 dump not wr1 (only 4 bytes diff)
with attilaa0 dump switched on but stuck on the dacia logo, after 3-4 sec on the screen appearing some withe dots blue shaking screen and dead. I think the emmc file system corrupted too.
i will working on the eemc soon
530664

[attilaa0]

Here another dump if you want try but first dump is from a working radio ver.2.0.9 and soft 4.0.2
https://files.fm/u/ap3e24hf#_

[jodge]

emmc connected succesfully, it seems all partitions are erased.
Here is the log later i will upload pinouts

[attilaa0]

Are you talking about this?And what program use to read emmc?Or maybe used some wires directly into a card adapter ,and then into a usb Card reader?Because in this way a read the partitions.But after that i don't know
how save .

[jodge]

A little explanation.

I didn't removed the emmc from the board i just connected to (in system) it with this pinout:

530840

and with my z3x easyJtag box emmc plugin, but you can do it with any kind of eemc box, like riff, moorc..chinese noname.. whatever. The pinout is always the same.
I just readed the whole Rom1 (thats the storage part. All other is empty like ROM2 boot, ROM3..etc)
And i mounted the 4gb raw image and i found a normal working file system with 4 drive..etc

you can check here:

530841

it seems the wince and the other stuffs are normal. I have to dig more :D

[jodge]

Are you talking about this?And what program use to read emmc?Or maybe used some wires directly into a card adapter ,and then into a usb Card reader?Because in this way a read the partitions.But after that i don't know
how save .

If you can connect thru the card reader the bast way if you mount the emmc under linux. You can do it whatever you want :D (dd is a good way for example)

[RadioChiP]

I repair my Radio it’s Working Ok!

[attilaa0]

Anybody have a good working image of EMMC ver 4.0.2 or 4.0.3 or 4.0.6?Please upload and send link here.Thanks!

[RadioChiP]

No,My radio problem is 29Lv320 Flash dump ,not try read emmc

[tehnosoftex]

Hi, can anyone repost the dump for 29lv320 for lan5200wr1. My radio boot up , ask for code freeze then restart. I think that 29lv320 is corrupt. I am trying to make it boot from usb with r1022 but it freeze after 30 seconds whatever i do.
Thanks

[attilaa0]

Hi! You have problem with emmc,not with flash.
https://files.fm/u/v57yjcb6
i uploaded the MX29LV320 flash file if still need.

[Meliposa]

https://www.drive2.com/b/466971660361139076
https://www.drive2.com/b/491509736236122587/
SOLUTION FOR NAVI 5210 LAN

[tehnosoftex]

Hi! You have problem with emmc,not with flash.
https://files.fm/u/v57yjcb6
i uploaded the MX29LV320 flash file if still need.
Hi it if was from emmc why didn't boot from usb after I use the r1022 trick?

[Meliposa]

see a video in youtube BYE BYE JTAG
ENJOY

[Meliposa]

Hi it if was from emmc why didn't boot from usb after I use the r1022 trick?
FOR BOOT FROM USB SEE A VIDEO
REGARDS FRIENDS