HUAWEI G740 Maintenance Manual
HUAWEI G740 Maintenance Manual
Issue 1.0
Date 2013-10-18
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.
Notice
The purchased products, services and features are stipulated by the contract made between Huawei and
the customer. All or part of the products, services and features described in this document may not be
within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees or
representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.
Website: http://www.huawei.com
Email: [email protected]
Author
Prepared by Zhou Dezhi (ID: Date 2013-09-12
00211076)
Reviewed by Date
Approved by Date
Contents
1 Product Overview
1.1 Appearance
Figure 1-1 G740
Item Description
Item Description
Antenna Built-in antenna
Camera 8 MP rear camera, 1 MP front camera
Sensors Accelerator, proximity sensor, light sensor
Bluetooth Bluetooth V2.1+EDR
Wi-Fi 802.11b/g/n, supporting Wi-Fi router
GPS GPSone
Power supply 100–240 V, 50/60 Hz, 1 A
Temperature Operating temperature: 0°C to +40°C
Storage temperature: –40°C to + 70°C
Humidity Operating humidity: 5% to 95%
2.2 Precautions
Only qualified technicians are allowed to perform maintenance and calibration.
Perform all operations in electrostatic discharge (ESD) rooms and wear ESD wrist straps
throughout the operations.
Ensure that all the components, screws, and insulators are properly installed after
maintenance and calibration and that all cables and wires are installed and connected
correctly.
Ensure that the soldering is lead-free and compliant with eco-friendly requirements.
The components listed in Table 3-1 are structural parts of the phone, and cannot be used as reference
when requesting spare parts.
No. Description
1 TP/LCD assembly
2 Cover A
3 Proximity sensor sheath
4 Proximity sensor FPC
5 AUDIO rubber
6 Shielding cover
7 Shielding cover
8 Shielding cover
9 RCV
10 Mother board
11 Shielding cover
12 Rear camera
13 Volume key
14 Cover B
15 Battery
16 Battery cover
17 Front camera
18 Front camera holder
19 Side key FPC
20 Shielding cover
21 Main FPC
22 Power key
23 Speaker
24 Screw
U5601 RF chip
Fault symptom: U3301 RF PA
RF failure Fault symptom:
RF failure
J1501 battery
connector
Fault symptom:
Startup failure
MIC1801 secondary
microphone J2402 TPconnector
Fault symptom: Fault symptom:
handfree talk fault TP failure
J6810 Wi-Fi
antenna spring
J2101 rear camera Fault symptom:
holder Wi-Fi failure
Fault symptom:
Camera fault
J2301 SIM card holder
Fault symptom:
Failure to read the
SIM card
J2302 microSD
card slot
Fault symptom:
microSD card
detection failure
U2201 tilt sensor
Fault symptom:
Tilt sensor failure
J3302 RF connector
J6801 main Fault symptom:
antenna RF failure
Fault symptom:
Poor reception
4 Software Upgrade
4.1 Selecting the Operation Type and the BIN File to Load
After WH62406270ML01Ver1006 is run, the following dialog box is displayed.
In this dialog box, you can select whether to allow a second-time upgrade and select the BIN
(Firmware) file and the configuration file to be loaded.
1. Select the operation type.
Under Be cautious to select, select or deselect Allow upgrade for the Second time to
allow or prohibit a second phone board upgrade.
If the board software is burned and then mounted, do not select this option, and ensure that the board has
just loaded with the BOOT file with the JTAG tool and does not have APP.
In a normal upgrade after printing rear labels, select this option; otherwise, file loading will fail.
Selection or deselection of this option may affect the NV data status of the phone. Be cautious to
confirm the operation in the displayed dialog box.
2. Select the file to load.
Under Please Select File, the browse button is unavailable and the file path is cleared if
the check boxes are deselected.
3. Once selecting a check box, an Open dialog box is displayed, asking you to select a BIN
file. After you select a file, its path information will be displayed in the text box and the
browse button will be available. When the check box is selected and the browse button is
available, you can click the button to change the file path.
4. The default configuration file PhoneMultiUpgradeDefaultCfg.xml (Windows phones
and some other products possibly cannot use the default configuration file, and therefore
a customized configuration file needs to be provided) and the software executable file
WH62406270ML01VerXXXX are in the same directory level.
5. Select Next to navigate to the Home screen.
6. To cancel or exit the software, select Cancel.
The feature code is automatically generated by the software based on the configuration file, and is
intended only for check by R&D personnel.
During the software upgrade, do not close the application; otherwise the dialog box shown in
Figure 4-5 will be displayed.
Do not terminate the application forcibly during an upgrade through measures such as the
Windows Task Manager. Otherwise, the tested boards may get damaged.
Figure 4-6 Restoring NV after loading (not required for some products)
4.4 Procedure
Prepare the required environment and ensure that ports for all phones have been correctly
mapped in Device Manager. Then, click the Scan && Download button. If not all ports are
found after a click, perform several more clicks. During an upgrade, the upgrade progresses of
different phones may be different. When stable phone hot swapping is supported, especially if
several phones need to be hot swapped (unstable hot swapping may cause problems such as
computer down), first remove phones that have been upgraded successfully without affecting
phone being upgraded. This process releases ports for accessing new phones to be upgraded.
After the ports of the new phones are correctly mapped, click the Scan && Download button
again to upgrade the new phones, without affecting other phones being upgraded.
Under Be cautious to select, select or deselect Allow upgrade for the Second time to allow
or prohibit a second phone board upgrade. That is, once is selected, a phone to which phone
software has been downloaded can be upgraded for a second time.
If this downloading tool needs to be used for software loading for a phone that is loaded with a BOOT
file with a JTAG tool and with applications with a USB flash driver, do not select the Allow upgrade
for the Second time option. In addition, before using this tool, ensure that the board has just loaded with
the BOOT file with the JTAG tool and does not have APP; otherwise, downloading will fail and a
message Refuse Download In AMSS Fail will be displayed. If this operation is incorrectly selected in
this case, it may result in faulty phones in subsequent work stations.
In a normal upgrade after printing rear labels, select this option; otherwise, the software upgrade will fail
and a message Refuse Download In AMSS Fail is displayed. Before a software upgrade, the phone
software automatically backs up the NV data in the current phone. After the software upgrade, the phone
software will automatically restore the NV data from the backup data. After a later USG upgrade or SD
upgrade, the NV data will also be restored from the backup. The backup data is restored in the NV
backup area of the phone. Pay attention to the message in the dialog box that is displayed after you
selecting or deselecting this option, and be cautious to confirm your operation.
5 Maintenance Tools
Name: toolkit
Usage: assembles and disassembles terminals
6 Assembly Procedure
1. Ensure that the ESD wrist strap is properly 2. Remove the battery cover and remove the screws.
connected to the ground.
3. Remove cover B along the gap. 4. Remove the speaker from cover B.
5. Remove the volume keys and power key. 6. Remove the rear camera.
7. Disconnect the connector and remove the PCBA 8. Remove the headset rubber.
from cover A.
9. Remove the volume key FPC. 10. Remove the front camera and its support.
11. Remove the main FPC. 12. Remove the motor FPC.
13. Remove the earpiece. 14. Remove the proximity sensor FPC.
15. Remove the proximity sensor rubber. 16. Remove the TP/LCD from cover A.
7 Disassembly Procedure
1. Ensure that the ESD wrist strap is properly 2. Install the TP/LCD to cover A.
connected to the ground.
5. Assemble the proximity sensor FPC to cover A. 6. Assemble the earpiece to cover A.
7. Assemble the motor FPC to cover A. 8. Assemble the main FPC to cover A.
9. Assemble the front camera and its support to the 10. Assemble the volume key FPC to the PCBA.
PCBA.
11. Assemble the headset rubber to the PCBA. 12. Assemble the speaker to cover B.
13. Assemble the PCBA and cover A together. 14. Assemble the rear camera.
15. Assemble the volume key and power key. 16. Assemble cover B and secure the screws.
8 Working Principles
MSM8930 is the baseband signal processing chip that processes the input and output of
signals, such as image, video, audio, RF interfaces, and connectivity. The MSM8930 also
provides interfaces, including the keypad, LCD, microSD card, Bluetooth, camera, and
microphone. PM8038 provides the analog multi-way switch, real time clock (RTC) circuit,
temperature compensated crystal oscillator (TCXO), motor drive circuit, and programmable
current source. WTR1605L is an RF signal processor that implements conversion of uplink
and downlink RF signals. The PCB can be divided into four logical subsystems: the baseband,
RF transceiver, power management (PM) unit, and user interface.
The MSM8930's power-on process starts when the KYPD_PWR_N signal of the PM8038 is
pulled down, which triggers the power-on sequence of the PM, as shown in Figure 8-2.
PS_HOLD is first signal to be pulled down during the power-off process.
LPDDR2 is connected to the MSM through EBI with a 32-bit bus. The MSM8930 adopts the
EBI1 bus, which supports clock frequencies of up to 400 MHz and a memory space of up to 1
GB.
POP LPDDR2 is controlled by the chip select signals of EBI1. EBI has three configuration
schemes of POP LPDDR2, as shown in Figure 8-4.
The MSM8930 supports eMMC and microSD cards and supports clock frequencies of 104
MHz (SDR) and 52 MHz (DDR) at most. The eMMC chip is connected to the MSM through
the SDC1 interface, while the microSD card is connected to the MSM8930 through the SDC3
interface. The G740 supports a microSD card of 32 GB at most.
The G740's LCD uses the MIPI-DSI, requiring only two pairs of low voltage differential
signal lines and one pair of clock line. The LCD interface supports a refresh rate of 60 Hz.
With the frame synchronization function, the LCD uses MDP_VSYNC_P of GPIO_0 as the
data transmission synchronization signal to avoid LCD breakage. The LCD's backlight
controller is integrated in the PM3038. See Table 8-2 for the definitions of the LCD's key
signals.
The G740 adopts a backlight system integrated in the PM8038 and powered by VPH_PWR.
The output voltage of the backlight system is controlled by the input signal PWM_OUT of the
WLED_CABC pin. The PWM_OUT signal is output by the LCD module to automatically
control the backlight brightness. The circuit design is shown in Figure 8-8.
The 1 MP front camera shares the I2C bus with the 8 MP rear camera. Data is transmitted in
MIPI mode. See Table 8-4 for the interface definitions.
The G740's camera flash is driven by the LM3642TLX charger pump chip. The chip's
maximum output current is 1.5 A.
SDA/SCL: I2C data/clock signal line for configuring the register to control the flash LED
switch, flash driver current, flash duration, output voltage, chip mode, and more
Communication module
The WCN3660 communicates with the main chip using three buses: SSBI, IQ, and SD. The
SSBI and IQ high-speed buses are bus protocols defined by Qualcomm.
SDC3_CLK is the clock signal for the microSD card, SDC3_CMD is the command signal,
while SDC3_DATA[3–0] are four data lines. The insertion and removal of the microSD card
is detected by SD_DETECT, which has an external pull-up resistor of 1 mohm. After a
microSD card is inserted into the phone, SD_DETECT is pulled down, enabling the
MSM8930 to detect the card insertion.
The headset interfaces consist of the left and right audio channels, microphone, and ground. It
uses a line sequence of LRGM (American line sequence).
Because the headset jack is connected to the board, the TVS pipe is added to provide ESD and
surge protection.
Headset insertion and removal test
For the insertion and removal test of the headset, refer to the WCD9304 functional diagram.
For the structural diagram related to headset and headset key tests in the WCD9304, see
Figure 8-18.
Figure 8-18 Structural diagram related to headset and headset key tests in the WCD9304
The codec chip (instead of the I2S) and MSM8930 are used for audio data communications.
The codec chip includes four analog input interfaces, five analog output interfaces, four
analog to digital converters (ADCs), five digital to analog converters (DACs), and four digital
microphone input interfaces (two pairs of DATA/CLK). The codec chip supports the MBHC
function, which can be used for the headset insertion and removal test, identification of
whether a headset has a microphone, and test of eight keys at most.
Receiver
The WCD9304 supports connection to an 8–32 ohm receiver. It is built in with a Class G
amplifier and provides a maximum power of about 125 mW. The WCD9304 circuit is shown
in Figure 8-22. EAR_M and EAR_P are directly connected to the corresponding pins on the
WCD9304.
Microphone
The G740 adopts a dual microphone noise reduction scheme. The two silicon microphones
have the same specifications. The main microphone is on the U board and at the bottom of the
phone. It is used to collect audio input. The secondary microphone is on the M board and in
the middle upper area of the phone. It is used to collect environmental noise to reduce the
noise and eliminate echo. Both microphones use MIC_BIAS1 output by the codec as the bias
voltage.
Figure 8-23 shows the main microphone circuit. MIC1_P and MIC1_N are respectively
connected to the MIC1_P and MIC1_N pins of the WCD9310.
Charging
The PM8038 supports charging through USB and wall chargers. See Table 8-7 for pins related
to charging through USB and wall chargers.
Table 8-7 Pins related to charging through USB and wall chargers
Because the wall charger ultimately charges the G740 using its USB port, current enters the
PM through USB_IN, no matter you are using a wall charger or USB charger. The PM then
detects the current, and the current then flows from USB_OUT to DC_IN, where the voltage
is checked.
Power input circuit
RC network: Both USB and wall chargers have RC networks. Respectively choose
capacitors of 1.0 uF and 4.7 uF for filtering, stabilizing the voltage, and ensuring the
compatibility between electromagnetic fields. The resistor is mainly used to pull down
the voltages. When the phone is not connected to a wall charger or USB charger, the RC
network's voltage is pulled down to the ground. A quick check of connections can be
realized using resistors.
Current check: Conducted within the PM. Input current is checked only when the phone
is charging through a USB charger.
Battery controlling MOS: The p-channel MOSFET is used. This MOS is controlled by
BAT_FET_N of the PM8038. When the MOS is connected, VPH_CHG charges the
battery and supplies power to the phone.
Enabling and disabling battery charging and the four control loops
The PM8038 can implement charging protection using the closed-loop controls of USB
input current, charger input voltage, BUCK circuit output voltage, and battery charging
current. Figure 8-28 shows the four closed loops.
The PM8038 controls the charging current and voltage by selecting the loop with the
least duty ratio.
automatic trickle charging is required. This charging method restricts the charging current and
prevents the VDD from unexpected power-off. After the phone system starts up, the software
automatically determines whether to enable trickle charging mode. When the battery voltage
reaches a threshold, constant current charging is used to accelerate the charging speed, which
is also called fast charging mode. Once the Li-ion battery reaches a target voltage, the
software enables constant voltage mode or pulsed charging mode. Figure 8-30 shows the
charging process.
Trickle charging is controlled by the phone software. Generally speaking, when the
battery voltage reaches the threshold (3.0 V for Li-ion batteries), trickle charging ends.
The software monitors the battery voltage through the HKADC and controls when to end
the trickle charging. The software can also control the trickle charging current. The
charging current can range from 50 mA to 300 mA in certain increments.
Constant current charging
Constant current charging requires that the MOS is in linear areas and the main battery is
connected to the VDD. A closed-loop control is formed after the battery current is tested.
The current is adjusted to the preset value through the transistor. IMAXSEL.MSM
controls the constant current charging process until the battery voltage reaches the preset
value. Figure 8-31 shows the constant current charging process.
When VBAT is close to Vset, the charging current decreases. The constant current
charging then ends, and the constant voltage charging begins. Figure 8-32 shows the
waveforms of the voltage and current during constant current charging.
Figure 8-32 Waveforms of the voltage and current during constant current charging
The battery monitoring system (BMS) can be divided into four parts.
Battery temperature detection
VREF_BAT provides the reference voltage for external temperature detection and
battery identification. You can set the temperature threshold. Adjust the external resistors
to be connected according to the desired threshold.
ICC
The integrated control center (ICC) collects the original open-circuit voltage (OCV) and
coulometer circuit (CC) data. Based on the tested voltage and current, the battery
resistance can be calculated.
Battery MOSFET
Chip select (CS): used to select the communication method of the SPI or I2C. The CS is set at
a high level, and the I2C is selected.
SA0: used to select the I2C address. The SA0 value is 0, and the I2C addresses are shown in
Table 8-9.
Compass
The AK8962C is a highly integrated micro three-axis electronic compass. It can sense the
magnetic fields in three dimensions, and supports I2C and SPI communications. The
AK8962C has a measurement range of ±1200 uT and sensitivity of 0.3 uT.
The VIB_DRV_N signal is connected to the corresponding pin on the PM8038 to drive the
motor to vibrate.
Power supply voltage monitoring: Monitoring signals such as VBAT, VCOIN, VCHG,
USB_IN, and DC_IN are brought in through the analog interface of the PM 8038 power
supply, and then sent to HKADC through the internal analog multiplexer and converted
into digital signals.
Battery temperature monitoring: Resistors are installed in series on the NTC in the
battery and the resistors are connected to VREF_THERM. The voltage allocated to NTC
resistors passes through the analog multiplexer, and is then sent to HKADC and
converted into digital signals.
PA temperature monitoring: A temperature sensor (an NTC resistor) is placed near the PA
to measure the temperature of the PA. The output PA_THERM of the temperature sensor
is connected to the PM8038 analog multiplexer, and is then sent to HKADC and
converted into digital signals. When designing the PCB, this temperature sensor should
be placed as close to the PA as possible.
Crystal temperature monitoring: The 19.2 MHz crystal oscillator equipping with an NTC
resistor is used. The TH-IN pin is connected to the XO_THERM pin of the PM8038. The
crystal temperature information passes through the PM8038 analog multiplexer, and is
then sent to HKADC and converted into digital signals.
Table 8-15 shows the hardware reset signal information on the MSM8x30 platform.
The PON_RESET_N signal is the reset signal released by the PM8038 when it finishes
the power-on sequence. When the PM8038 powers on, the PON_RST_N pin is in a low
level. When the power supply and clock finish the power-on sequence as scheduled, the
PON_RST_N pin is pulled to a high voltage level after a certain period of time, making
the MSM8x30 main chip is initiated after it is released from the hardware reset state, as
shown in Figure 8-48.
There is a hardware reset input pin RESIN_N on the PM8038 chip. When the phone
breaks down or encounters other function faults, pull down the pin and keep it down for
a certain period of time by pressing the external reset switch can reset the PM8038.
Pay attention to the following items when using the reset signal:
The reset function can be enabled through the SBI control.
There is a pull-up resistor for the RESIN_N signal in the PM8038. Reset the phone by
pulling down the pin externally.
The PM8038 contains a programmable timer (32 ms–10.25s). If the RESIN_N is pulled
up before the timer overflows, the PMIC chip will not make any move, deeming it as
mis-touching of the reset key. If the RESIN_N is kept low until the timer overflows, the
PMIC chip will reset the board.
During the reset, the PMIC sends an interrupt signal to the MSM, and then the internal
reset timer (10 ms–2s, programmable) starts counting. The modem chip will turn off the
internal functional module in sequence after receiving the interrupt signal. If the modem
is turned off before the timer overflows, the PMIC chip starts implementing the
power-off sequence. When the timer overflows, the PMIC chip will implement the
power-off sequence regardless of whether the modem chip is turned off.
Once the PMIC chip finishes the power-off sequence, the "remain off or attempt
power-on" pit of the SBI control register will determine whether to restart the power-on
sequence or keep the power-off state.
In this design, the RESIN_N pin of the PM8038 is suspended in the air, and is not used.
The MSM8x30 chip contains a RESOUT_N pin. (This reset output signal is generated by
RESIN_N reset input and WDOG_RESET. The rising edge of the RESOUT_N defers several
uP clocks compared with that of the RESIN_N.)
Note that the WDOG_DISABLE status is read only once when the phone is powered on.
Later the pin will be used as the GPIO. Therefore, the WDOG_DISABLE pull-up power
supply is the VREG_L11_1P8_FET in Figure 8-52. The power supply will be suspended
when the MSM is turned on.
The watchdog reset is as follows:
1. When the watchdog timer overflows, the MSM drivers PS_HOLD to a low level.
2. When the PMIC detects that PS_HOLD is at a low level, it will drive the PON_RST_N
signal to a low level. The MSM and other peripheral chips will then be reset.
3. After a certain period of time, check various status of the phone to make sure that
watchdog timer overflowing and software reset are implemented.
4. During the software resetting procedure, the PMIC will not be powered off. Instead, it
resets all the SBI registers to their default values. 20 ms later, it drives the PON_RST_N
signal to a high level, releasing the MSM from the reset state
2. Reference source
All the voltage regulators and other circuits in the PM8038 share the same reference voltage
source. There are some special requirements in the circuit connection between the PM8038
and other circuits. The REF_GND pin is the ground for the reference power supply. The
REF_BYP pin connects a 0.1 uF bypass capacitor to the ground, realizing low-pass filtering
function together with the internal resistors. The filtered voltage can be provided to the MPP
pin, serving as the analog output.
Figure 8-54 shows the reference circuit.
modulation (PFM) mode. Note that when the load is extremely light, the pulse frequency may
be reduced to the audio frequency range, influencing the audio performance.
The PM8038 contains six Buck SMPS circuits, among which two are fast transient SMPS
circuits with the maximum output current of 2000 mA, and the other four are high-frequency
SMPS circuits with the maximum output current of 1500 mA. It is recommended to supply
power in the following way:
S1: Supply power to MSM's core (1500 mA).
S5: Supply power to MSM's krait #1 (2000 mA).
S6: Supply power to MSM's krait #2 (2000 mA).
L16/L19: Supply to the QDSP (1200 mA).
All the bucks have two control modes: PFM (with low power consumption) and PWM (the
normal mode). To realize the greatest efficiency, bucks automatically choose between the
working modes. You can also use software to select working mode.
The two types of SMPSs adopt a constant frequency mode control structure and use build-in
switch tube.
4. LDO
The low drop-out (LDO) regulator consists of the following four functional modules: the
reference voltage, control components, feedback path, and error amplifier. The four functional
modules form a closed-loop control system to reduce the gap between the output voltage and
the reference voltage. The system will not adjust the current output. The input of the error
amplifier includes reference voltage and the proportional output of the output voltage
generated from the feedback path. Any difference between the two inputs will be amplified by
the error amplifier. The closed-loop system changes the control component, which changes
the output voltage, with the ultimate purpose of reducing the difference to zero. The accuracy
of output voltage does not vary with the change of the current. Figure 8-57 is the LDC
functional block diagram.
Reference voltage: The PM8038 generates reference voltage using the trimmed bandgap. Its
accuracy and stability directly influence the output voltage. The closed-loop system offers
percentage feedback; therefore, the reference voltage is optional.
Control component: The PM8038 uses the PMOS tube as the control component, which has
two main functions. First, generate different voltage drops between the gate and source based
on different output of the amplifier. Second, a wide-range of current passes through the drain
without influencing the drain voltage drop. When you turn on or off the circuit, the current
passing through the control component changes greatly, satisfying the different working mode
of the phone, including sleep, Rx, and Rx/Tx mode.
Feedback path and error amplifier: The PM8038 uses op amplifier circuit to realize the
function of feedback path and error amplifier. The output voltage Vout provides feedback
input through the resistor network. To begin with, , and according
to the features of operation amplifier, V (+) = V (-) while V (+) = Vin, therefore V (-) = Vin.
Consequently, the output voltage is , and the feedback control function
is realized.
The PM8038 LDO can be classified into five categories based on the output current. The first
category covers L1, L16, L19, L20, L24, and L27, whose output current is 1200 mA. The
second category covers L5, L6, L7, L10, and L11, whose output current is 600 mA. The third
category includes L8, L9, and L12, whose output current is 300 mA. The fourth category
includes L2, L15, L17, L21, and L26, whose output current is 150 mA. The last category
covers L3, L4, L18, L22, and L23, whose output current is 50 mA.
5. NCP
The PM8038 contains an NCP SMPS, which serves to generate a –1.8 V power supply,
supplying power to stereo headset. The NCP is not used in the G740 phone.
6. Voltage switch
The PM8038 contains two low-voltage switches: LVS 1 and LVS 2, which can supply a
current of 100 mA.
The power-on sequence starts when you press the power switch and the KPDPWR_N signal
of the PM8038 is pulled down. To ensure a successful power-on process, this signal must be
kept at a low level before the PS_HOLD signal is pulled up.
After KPDPWR_N is pulled down for a certain period of time (treg1), the voltage regulators
are turned on in sequence from Group 7 to Group 0. The power supplies in the same group are
turned on with a time lag of four sleep clock cycles. After all the voltage regulators are
enabled, the detection circuit will check whether the power-on process is accomplished. A
short delay (treg) can be found in the power-on process of different groups before all the
power supplies that are on by default are powered on.
The PON_RESET_N signal is pulled up after a short delay (treset1). This delay aims to
ensure that the MSM has enough time to complete the power-on process.
In the initial stage of the power-on sequence, the PS_HOLD signal can be in any state, but it
must be pulled up before the tpshold timer overflows. Till then, a successful power-on process
is complete.
If the PS_HOLD signal remains at low level after the tpshold timer overflows, the power-on
process fails and the power-off process starts immediately. The PS_HOLD signal is always at
a high level when a phone is being powered on.
The power-off process starts when the power key is pressed and the KPDPWR_N signal of
the PM is pulled down for a specified period of time. This time range must be long enough to
ensure that the phone does not deem it as a mis-touching move. After this period of time, the
MSM pulls down the PS_HOLD signal and requests the PM8038 to initiate the power-off
process.
After a short time span (treset0), voltage regulators are enabled in sequence from Group 0 to
Group 7, which is the reverse order for enabling voltage regulators during the power-on
process.
Power-on Process
When the PS_HOLD signal remains at a low level, the PM8038 is off, and the power-on
circuit is detecting the following events that can trigger the power-on sequence:
The power key is pressed, and the KPDPWR_N signal is pulled down.
Cable Poweron pins are pulled down.
External power supplies are plugged in (the VCHG pin voltage exceeds the related
threshold).
A real-time clock alarm is triggered.
SMPL occurs.
Any of the preceding events can generate power-on signals, and a related interrupt signal is
sent to the triggering source of the MSM8930 power-on process. No matter what the
triggering source is, the PM8038 performs the power-on process as follows:
1. Any of the five triggering events occurs or they occur in sequence.
2. The PM8038 determines and selects power supplies. If the VCHG pin voltage exceeds
the threshold, the charger is used as power supplies. If the VCHG pin voltage is lower
than the threshold, the PM8038 pulls up the BAT_FET_N signal, uses the main battery
as power supplies, and prohibits charging.
3. The internal bandgap voltage reference is enabled.
4. The VDD voltage is monitored. When the voltage exceeds the under voltage lock out
(UVLO) threshold, the power-on process continues.
5. The PM8038 pulls down the PON_RESET_N signal even though this signal has not
been generated because the MSMP is not enabled. This mechanism ensures that the
PON_RESET_N signal can be in proper state during the MSM power-on process.
6. The PM8308 restores the SBI register to its default settings. If the VCOIN voltage is
lower than the related threshold, the PM8308 also restores the SBI bit powered by the
backup battery and the RTCRST interrupt.
7. The PM8308 sets the SMPL interrupt state and restores the SMPL timer if the SMPL
function is enabled and the SMPL restart signal is valid. This move aims to prepare for
the next SMPL event.
8. After the treg1 delay, the PM8308 enables voltage regulators in the following sequence:
S2 > L24 > S1 > S4 > L11 > L20 > L26 > L4 > L22 > L6 > L3 > L5.
9. The PM8308 pulls up the PON_RESET_N signal a short time delay (treset1) after all
voltage regulators that are on by default have been powered on.
10. The PS_HOLD times starts counting and monitors the PS_HOLD signal sent by the
MSM in real time. A successful power-on process requires that the PS_HOLD signal
changes from low to high before the PS_HOLD timer completes counting. If the
PS_HOLD signal has not been pulled up when the PS_HOLD timer overflows, the
PM8308 goes back to the off state and the power-on process returns to step 1. If any of
the five triggering event still occurs, for example the KPD_PWR_N signal remains at
low level, the power-on process starts again. If the PS_HOLD signal becomes high
before the PS_HOLD timer overflows, the PM8038 enters the power-on state (sleeping
or working) and sends the related interrupt signal to the MSM to determine the triggering
source.
The power-on process fails if any of the following events occurs:
The triggering signal disappears. In this case, the power-on process stops and returns to
step 1.
The VDD voltage decreases and reaches the UVLO threshold before the PS_HOLD
signal is pulled up. In this case, the PM8308 terminates the power-on process and retries
it twice. If all these three power-on attempts fail, the PM8308 is reset and waits for the
next triggering event.
If the PS_HOLD signal is pulled up before the VDD voltage decreases to the UVLO threshold, the
restart circuit does not work and this event is processed in the same way as an SMPL event.
When the MSM is powered on, the PM8308 remains on until the PS_HOLD signal is pulled
down, a UVLO event occurs, or an overheating shutdown event occurs. In any of these three
cases, the PM8308 performs the power-off process.
Power-off Process
When the PS_HOLD signal of the MSM remains at high level, the PM8308 is on and will
detect any of the following events that trigger the power-off process:
The power key is pressed, and the MSM pulls down the PS_HOLD signal.
The VDD voltage detected at the ISNS_M pin is lower than the UVLO threshold.
The temperature of the PM8038 exceeds the overheating threshold.
In general, the power-off sequence is triggered when the power key is pressed and the
MSM8930 is on. The KPDPWR_N pin (can be pulled up inside the PM8038) of the PM8038
connects to the power key on the phone. The MSM8930 monitors the power key using the
interrupt logic. When the KPD_PWR_N interrupt event occurs, the MSM starts the power-off
process:
1. The power key is pressed and held for a period, and the power-off menu is displayed.
2. The MSM writes the information that must be saved into the flash memory when the
user chooses the power-off option.
3. The MSM disables the SMPL function to prevent itself from being powered on again.
4. The MSM pulls down the PS_HOLD signal.
5. The PM8038 pulls down the PON_RESET_N signal, resets the MSM and other
peripherals, and shuts down the TXCO manager.
6. After the treset0 interval, the MSM determines the next action depending on the
following conditions:
7. If the temperature of the PM8038 exceeds the overheating threshold, the MSM pulls
down the PON_RESET_N signal immediately and shuts down all PM8038 circuits to
prevent the PM8038 from being damaged.
8. If the VDD voltage is lower than the UVLO threshold, the MSM pulls down the
PON_RESET_N signal immediately and shuts down all PM8038 circuits to prevent the
main battery from being damaged.
9. If either of the preceding events does not occur and the watchdog restart bit is set, the
MSM sets the interrupt status bit of the watchdog. Then, the MSM8930 restarts, its
watchdog timer resets, and the PM8038 restarts without being powered off.
10. If any of the preceding events does not occur and the SMPL function is enabled, the
SMPL process is triggered.
11. If none of the preceding events occurs, the normal power-off process continues.
12. The MSM8930 shuts down the remaining power managers in turn. Only the battery or
the VPH_PWR provided by external power supply is used to supply power.
The two frequency dividers are put into use only when the 32K crystal oscillator and RC
crystal are unavailable. The 19.2 M frequency division produced by the crystal oscillator and
RC oscillator generates the low-precision 32K clock, which can be used as a sleep clock only.
Only the two oscillators can generate the RTC and SMPL recovery clocks.
The sudden momentary power loss (SMPL) recovery function enables the PM8038 to restart
after a momentary power-off.
The SMPL recovery can be enabled using software. After you enable the SMPL recovery, if
the VDD voltage recovers to the normal value (higher than 2.7 V) within the preset timeout
duration (0.5s to 2.0s), the following recovery process will be initiated:
Driven by the UVLO event, the PON_RST_N voltage is pulled down, and the PM8038
is powered off.
The backup capacitor or button battery connected to the VCOIN pin starts to power the
SMPL circuit.
If the VDD voltage recovers within the programmed interval, the PM8038 powers on
again without requiring any software intervention. In the meantime, the PMIC sends
interrupt signals to the MSM to inform that: a sudden momentary power loss has
happened
the RTC is affected by the abnormal voltage
the current power-on process is abnormal.
If the VDD voltage fails to recover within the programmed interval, the phone powers
off. Only a normal power-on process can bring the phone back on.
To use the SMPL recovery function, enable it using software and ensure that the phone has a
keep-alive capacitor or backup battery.
Figure 8-64 shows the VCOIN circuit of the G740. The 44 uF capacitor ensures that the RTC
is maintained when you replace the phone's main battery.
8.5 RF subsystem
The RF subsystem consists of the transceiver, frequency source, antennas, GPS module, and
Bluetooth+Wi-Fi module. This section gives a detailed introduction to each module.
RF transmit circuit
The transmit circuit of the WTR1605L can be classified into four WCDMA/GSM systems.
Among them, WCDMA is classified into the B1, B2, B4, and B5 bands while GSM is
classified into four frequencies bands of GSM, EGSM, PCS, and DCS. The WCDMA B1, B2,
B4, and B5 bands and the four GSM frequency bands share the same multimode power
amplifier to transmit circuit, as shown in Figure 8-66.
The MSM8930 provides the control signals such as the enable model and frequency selection
of the multimode power amplifier. The GSM bands pass through the RF switch and then
transmitted from the main antenna.
However, the WCDWA transmission signals go through the duplexer and the RF switch, and
finally they are transmitted from the main antenna. The transmission channel of the WCDMA
B1 band is shown in Figure 8-67.
Figure 8-73 shows the signal reception for the WCDMA B2 band.
Figure 8-74 shows the signal reception for the WCDMA B4 band.
Figure 8-75 shows the signal reception for the WCDMA B5 band and GSM850 frequency
band.
Figure 8-75 Signal reception diagram for the WCDMA B5 band and GSM850 frequency band
Figure 8-76 Signal reception diagram for the GSM900 frequency band
Figure 8-77 shows the signal reception for the GSM1800 and GSM1900 frequency bands.
Figure 8-77 Signal reception diagram for the GSM1800 and GSM1900 frequency bands
The first local oscillation in the WTR1605L is used in all the transmission links of GSM and
WCDMA, the second one is used in all the reception links of GSM and WCDMA, and the
third one is used in all the reception links of GPS.
Figure 8-80 shows the WCDMA B1, B2, and B4 DRX band circuits.
Figure 8-80 WCDMA B1, B2, and B4 DRX band circuits diagram
The MSM8930 provides a PCM interface that interconnects to the Bluetooth module's PCM
signals. Table 8-20 shows signal definitions.
BT_WAKES_MSM: This is the Bluetooth module's wake-up output signal, which connects to
the Bluetooth unit's HOST_WAKE pin to wake up the MSM that is in sleeping mode.
MSM_WAKES_BT: This is connected to the Bluetooth unit's BT_WAKE pin to allow the
MSM to wake up the Bluetooth unit that is in sleeping mode.
Before you repair a G740, back up the user data and restore the phone to its factory settings.
This situation occurs when the main power circuit is short-circuited. Check whether VBUS and VSYS
circuits are short-circuited.
Weak current
Figure 9-2 Troubleshooting procedure for startup failures with weak current
Startup f ailure
Weak current
N
Does the U201
DC-DC voltage Check the
has partial output? U201
Y
Is other output of the U201 Check the short-
short-circuited? circuited position
Replace the
U201
If the VPH_PWR voltage is normal, but the U201 output is not, the other output of U201 is probably
short-circuited, which results in the power output exception of the PMU. Check every output of the
U201 to see whether they are short-circuited.
Excessive current
Excessive current is usually caused by short-circuited power supply circuits (DC power
supply) which may result in 500 mA or greater current. Mostly this fault occurs when VBAT
is short-circuited to ground.
Figure 9-3 Troubleshooting procedure for startup failures with excessive current
Startup f ailure
Excessive current
(greater than 500 mA)
Is pin 1 of the N
J1501short-
Check the U201
circuited to
ground?
N
Re-solder or
Is the U201's voltage normal?
replace the U201
W2100 reception
f ailure
End
Check the control signals of U3201 switch using a multimeter or oscilloscope. Table 9-1 is a truth table
for control signals.
For B2 reception failures, just replace the check procedure of the U4101 with that of the
U4102.
For B4 reception failures, just replace the check procedure of the U4101 with that of the
U3801.
For B5 reception failures, just replace the check procedure of the U4101 with that of the
U3802.
For GSM850, use the same handling method as that for the B5 reception failures.
For GSM900, only replace the check procedure of the U4101 with that of the Z3201.
For GSM1800/1900, only replace the check procedure of the U4101 with that of the Z32012.
W2100 transmission
f ailure
N
Are the J3201's
pin 1 and pin 2 Check the J3201
connected?
Y
N
Y
N
Are the U4001's IQ
Check the
signalY and the battery
U4001
voltage normal?
End
For B2 transmission failures, just replace the check procedure of the U4101 with that of the
U4102.
For B4 transmission failures, just replace the check procedure of the U4101 with that of the
U3801.
For B5 transmission failures, just replace the check procedure of the U4101 with that of the
U3802.
For GSM transmission failures, just skip the check procedure of the U3302.
N
Does the charger Replace the
f unction properly? charger
Y
Y
Is the J1501 Re-solder the
poorly soldered? J1501
N
Is there voltage at Replace the Q301
VPH_PWR?
N
Is the battery connector's Repair the
contact properly J1501
connected to the battery?
Y Replace the
Is the battery damaged?
battery
Camera f ailure
Y
Is the problem
solved af ter you re-
End
load the phone
sof tware?
N
Y
Is the J2101 poorly Re-solder or
soldered? replace the J2101
Is the problem Y
solved af ter you
End
replace the
camera?
N
Replace the Y
End
U2101
Replace the
U301
Y
Is the problem
solved af ter you
replace the USB End
cable?
N
Y
Is the 5-pin mini USB Re-solder the
port poorly soldered? USB port
Is the U board Y
Re-solder the U
BTB connector board BTB
poorly soldered? connector
Y
Is the main FPC Re-solder or
connected? replace the FPC
Y
Is the J2602 Re-solder or
poorly soldered? replace the FPC
N
Is the problem Y
solved after you End
re-load the phone
software?
N
Y
Is there voltage Replace the
at Vchg? U201
Replace the
U301
N
Is the receiver
End
volume properly set?
Y
Y
Is the insertion of the Replace the
headset misjudged? headset connector
Is the problem Y
solved af ter you
End
replace the
receiver?
N
Replace the
U1701
Y
Is the problem
solved af ter you re-
End
load the phone
sof tware?
N
N
Is the MICBIAS voltage Check the
1.8 V? U201
Y
Y
Is the problem
solved af ter you End
replace the
microphone?
N
Replace the
U1701
No vibration
Y
Is the problem
solved af ter you re-
load the phone End
sof tware?
N
Y
Is the problem solved
af ter you replace the End
motor?
Y
Is the VIB_DRV_N
Replace the
voltage equal to
FPC
the battery voltage?
Replace the
main FPC
No ringtone f or
incoming calls
N
Is the ringtone
volume properly set? End
Y
Y
Is the problem
solved af ter you re- End
load the phone
sof tware?
N
Y
Is the problem solved
af ter you replace the End
speaker?
N Re-f asten or
Is the FPC properly
replace the
f astened?
FPC
Replace the
U1701
Y
Is the problem solved
af ter you re-load the End
phone sof tware?
Is the resistance-to-
ground of the T2010, Y Replace the
T2011, and T2012 not 0 U201
ohm?
N
Replace the
U301
Key failure
N
Are the key dome Clean or
sheets in good replace the
contact? key dome
sheets
Y
Y
Is the problem
solved after you
replace the key End
FPC?
Re-load the
phone
software
N
Is the receiver
End
volume properly set?
Y
Y
Is the problem solved
af ter you replace the End
headset?
N
N
Is the headset Replace the
icon displayed headset
on the status bar? connector
Replace the
U1701
N
Y
Is the microSD card slot Replace the
tilted? microSD card slot
Is the GPS
N Replace the GPS
antenna in good
contact with the antenna or spring
spring?
Y
Re-solder or
Is the GPS channel
replace the faulty
poorly soldered?
component
Re-load the
phone software
10 Functional Tests
HU1Y340U081M.pdf