Beruflich Dokumente
Kultur Dokumente
Prepared by Date
Reviewed by Date
Approved by Date
Change History
Contents
1 Product Introduction .................................................................................................................... 5
1.1 Appearance ....................................................................................................................................................... 5
1.2 Specifications ................................................................................................................................................... 5
1 Product Introduction
1.1 Appearance
Figure 1-1 G526
1.2 Specifications
Item Description
Dimensions (H x W x D) 9.9 mm x 134.5 mm x 67.5 mm (0.39 in. x 5.30 in. x 2.66 in.)
Frequency band G526-L11:
● WCDMA 2100 MHz: 1920–1980 MHz (UL), 2110–2170 MHz (DL)
● WCDMA 900 MHz: 880–915 MHz (UL), 925–960 MHz (DL)
● GSM 850 MHz: 824–849 MHz (UL), 869–894 MHz (DL)
● GSM 900 MHz: 880–915 MHz (UL), 925–960 MHz (DL)
● GSM 1800 MHz: 1710–1785 MHz (UL), 1805–1880 MHz (DL)
● GSM 1900 MHz: 1850–1910 MHz (UL), 1930–1990 MHz (DL)
● LTE B3: 1710–1785 MHz (UL), 1805–1880 MHz(DL)
● LTE B7: 2500–2570 MHz (UL), 2620–2690 MHz(DL)
● LTE B20: 832–862 MHz (UL), 791–821 MHz(DL)
G526-L22:
● WCDMA 2100 MHz: 1920–1980 MHz (UL), 2110–2170 MHz (DL)
● WCDMA 900 MHz: 880–915 MHz (UL), 925–960 MHz (DL)
Item Description
● WCDMA 850 MHz: 824–849 MHz (UL), 869–894 MHz (DL)
● GSM 850 MHz: 824–849 MHz (UL), 869–894 MHz (DL)
● GSM 900 MHz: 880–915 MHz (UL), 925–960 MHz (DL)
● GSM 1800 MHz: 1710–1785 MHz (UL), 1805–1880 MHz (DL)
● GSM 1900 MHz: 1850–1910 MHz (UL), 1930–1990 MHz (DL)
● LTE B3: 1710–1785 MHz (UL), 1805–1880 MHz(DL)
● LTE B7: 2500–2570 MHz (UL), 2620–2690 MHz(DL)
G526-L33:
● WCDMA 2100 MHz: 1920–1980 MHz (UL), 2110–2170 MHz (DL)
● WCDMA 1900 MHz: 1850–1910 MHz (UL), 1930–1990 MHz (DL)
● WCDMA 850 MHz: 824–849 MHz (UL), 869–894 MHz (DL)
● WCDMA AWS: 1710–1755 MHz(UL), 2110–2155 MHz(DL)
● GSM 850 MHz: 824–849 MHz (UL), 869–894 MHz (DL)
● GSM 1800 MHz: 1710–1785 MHz (UL), 1805–1880 MHz (DL)
● GSM 1900 MHz: 1850–1910 MHz (UL), 1930–1990 MHz (DL)
● LTE B4: 1710–1755 MHz (UL), 2110–2155 MHz(DL)
● LTE B7: 2500–2570 MHz (UL), 2620–2690MHz(DL)
Item Description
power
2.2 Precautions
Only qualified technicians are allowed to perform repair and calibration.
Perform all operations in electrostatic discharge (ESD) rooms and wear ESD wrist straps throughout
the operations.
Ensure that all components, screws and insulators are properly installed after repair and calibration,
and that all cables and wires are installed and connected correctly.
Ensure that the soldering is lead-free and compliant with eco-friendly requirements.
Electrostatic discharge (ESD) is a major cause for damage to sensitive electronic components.
Every service center must attach great importance to ESD protection and meet ESD protection
requirements specified in this document.
U2202 compass IC
J2402 TP connector May cause compass
May cause TP failure failure
U1401 eMMC
U6502 RF switch
May cause failure of loading
May cause RF failure
or startup
U5601 RF signal
U1701 audio processing processing IC
chip May cause RF failure
May cause audio failure
4 Software Upgrade
4.1 Upgrade Preparations
Category Item Description
Step 6 Repeat Step 1 through Step 5 to install the vendor upgrade package.
If the phone cannot be powered on, use either of the following methods to forcibly upgrade the phone:
Install the battery on the phone (if the phone screen flashes, remove the battery from the phone and
re-install it 5 minutes later). Press and hold the volume up and volume down keys and press the power
key. Then the phone automatically starts the forcible upgrade. The upgrade procedure is the similar to
that performed through the engineering menu.
Remove the battery from the phone. Press and hold the volume up and volume down keys and connect
the charger to the phone. Then the phone automatically starts the forcible upgrade.
This method is recommended.
If the forcible upgrade fails, try another microSD card for the forcible upgrade.
----End
5 Maintenance Tools
Table 5-1 Maintenance tools
Name: constant-temperature heat gun
Usage: to heat components
Name: toolkit
Usage: to assemble and disassemble terminal products
6 Disassembly Procedure
Table 6-1 Disassembly Procedure
1. Ensure that the ESD wrist strap is properly 2. Remove the battery cover.
grounded.
3. Remove the screws from the rear housing. 4. Separate the snap joints from the rear housing.
11. Remove the ambient light FPC. 12. Remove the antenna board.
13. Remove the side key FPC. 14. The disassembly is complete.
7 Assembly Procedure
Table 7-1 Assembly Procedure
1. Ensure that the ESD wrist strap is properly 2. Prepare all components.
grounded.
7. Install the rear camera and FPC that connects the 8. Fit the PCBA into the front housing.
PCBA and antenna board.
8 Working Principles
8.1 Structure
The G526 is a bar-type mobile phone that consists of the PCBs, battery, and structural parts.
The PCBs include the PCBA (M), proximity light or FPC (R), antenna board (S), side key FPC (P), and
connection FPC (F).
Structural parts include the LCD module, touch panel (TP), 5 MP rear camera module, 0.3 MP front camera
module, housings, and antennas.
the MSM8930 is a baseband processor chip that processes input and output signals such as video, audio, or
radio frequency (RF) signals. Baseband interfaces include the interfaces for the keypad, LCD, microSD
card, Bluetooth, camera, and microphone. PM8038 provides the analog multi-way switch, real-time clock
(RTC) circuit, temperature compensated crystal oscillator (TCXO), motor drive circuit, and programmable
current source. WTR1605 is an RF signal processor that implements conversion of uplink and downlink RF
signals. The PCBA can be divided into four logical subsystems, that is, the base band, RF, power supply,
and user interface subsystems.
8.4 Baseband
8.4.1 Power-on and Power-off Sequence
Figure 8-2 shows the power-on and power-off sequence of the PM8038.
The platform implements interrupt when the KYPD_PWR_N signal is pulled low. The PM8038 powers on
the device based on the sequence shown in Figure 8-2. During the power-off process, power off the
PS_HOLD signal first.
LPDDR2 connects to the MSM8930 though the EBI, a 32-bit data bus. The MSM8930 uses an EBI and
supports up to 400 MHz clock rate and up to 1 GB memory space.
Three types of PoP LPDDR2 are recommended by Qualcomm and controlled by the MSM8930 through
EBI1 chip selects, as shown in Figure 8-4. Three types of configurations are supported by EBI1:
2 x 256 MB
1 x 512 MB
1 x 512 MB + 1 x 256 MB
The MSM8930 supports eMMC, microSD cards, and a clock rate of up to 104 MHz (SDR) and 52 MHz
(DDR). eMMC flash memory connects to the MSM8930 through SDC1 interface. The microSD card
connects to the MSM8930 through SDC3. The G526 supports a microSD card of up to 32 GB.
In G526, the backlight driving circuit is built in the PM8038 and powered by VPH_PWR. PWM_OUT is
the backlight control signal that is output from the LCD module using content adaptive backlight control
(CABC). Figure 8-8 shows the backlight driving circuit.
The 0.3 MP front camera uses the same I2C bus as the rear camera. MIPI is also used for data transmission.
Table 8-4 describes the interfaces of the front camera.
The G526's camera LED flash driver, LM3462, delivers up to 1.5 A. The driver's output current is
controlled by the I2C bus, and its turn on is controlled by FLASH_EN GPIO2 (MSM8930). When it is
turned on, GPIO2 (MSM8930) is set to 1.
Power Supply
The VREG_L1_1P3 is the working power supply for the WCN3660 chip. Tables xx lists the network
names and work directions of power supplies.
Communication Module
The WCN3660 chip communicates with the main chip through three types of buses: SSBI, IQ, and SD. The
SSBI and IQ high-speed signal cables use Qualcomm bus protocols.
SDC3_CLK is the clock signal. SDC3_CMD is the command signal. SDC3_DATA0, SDC3_DATA1,
SDC3_DATA2, and SDC3_DATA3 are four data routes. SD_DETCT detects the insertion and removal of a
microSD card. A 1 M pull-up resistor is added outside SD_DETCT. When a microSD card is inserted,
SD_DETCT is pulled low, by which the MSM8930 detects the insertion of the microSD card.
Classification
Audio interfaces in the G526 are classified into four types:
Speaker
The speaker that plays polyphonic ringtones when there is an incoming call and has an output power
of up to 500 mW. The speaker has good frequency response so that it can play 20 Hz to 20 kHz
ringtones and mono-audio MP3 files.
Receiver
Receives voice during calls.
Microphone
Built in the G526.
Headset
The headset transmits sounds or MP3 audio, provides a microphone used for audio input, and supports
single-ended stereo.
Description
The functions of the MSM8930's audio interfaces are implemented by the WCD9304 codec chip.
Audio data is transmitted between the WCD9304 and the MSM8930 through dedicated SLIMbus interfaces.
Inter-IC Sound (I2S) interfaces are not supported. The codec chip includes four analog input interfaces, five
analog output interfaces, four analog-to-digital converters (ADCs), five digital-to-analog converters
(DACs), and four digital microphone input interfaces (two pairs of signals, each pair containing a DATA
and a CLK). The WCD9304 supports MBHC, which can detect whether headsets are inserted or removed
and whether the headset provides a microphone, and detection of up to eight buttons is supported.
Speaker
The speaker uses the class D audio amplifier built in the PM8038. In the circuit shown in Figure 8-18,
differential mono audio inputs are used. The speaker outputs mono audio. The WCD9304 drives the
speaker using LINE_OUT1 to output signals to the PM8038.
Figure 8-18shows the speaker circuit of the WCD9304.
Receiver
WCD9304 supports an external receiver (8 ohms to 32 ohms) and provides a built-in class G power
amplifier with an output power of up to 125mW. In the circuit shown in Figure 8-19, EAR_M and EAR_P
connect to the corresponding pins on the WCD9304.
Microphone
In the G526, two surface-mounted electret condenser microphones (ECMs) are used for noise reduction.
The primary microphone on board K is at the bottom of the G526 and used for receiving the desired sounds.
The second microphone on board M is at the upper part of the G526 and used for receiving ambient noise
to reduce noise and echoes. Both microphones use the MIC_BIAS2 output from the codec as the bias
voltage.
Figure 8-20 shows the primary microphone circuit, where MIC1_P and MIC1_N respectively connect to
the MIC1_P and MIC1_N pins on the WCD9310.
Charging
The PM8038 supports charging using a USB charger or wall charger. Table 8-7 lists the pins related to
these two charging methods.
The wall charger also charges the G526 through a USB port, so whichever charging method is used, the
electric current flows to the PM8038 through USB_IN for the PM8038 to detect the current, and then flows
from USB_OUT to DC_IN for voltage detection.
Power input circuit
RC network: Both the wall charger and USB charger circuits have RC networks that use 1.0 μF and 4.7 μF
capacitors respectively. RC networks are used for filtering frequencies, stabilizing the input voltage, and
ensuring electromagnetic compatibility. In the RC networks, resistors pull down voltage to ground when no
wall charger or USB charger is inserted, and the charger connection status is quickly detected.
Current detection: In the PM8038, current is detected only when the G526 is charged through a USB
charger.
Battery control MOS transistor: The MOS transistor is a p-channel p-channel MOSFET. It is controlled by
BAT_FET_N on the PM8038. When the MOSFET is turned on, VPH_CHG charges the primary battery
and supplies power for the G526's operating.
The G526 provides a built-in overvoltage protection circuit that detects the input voltage. When the voltage
is lower than the threshold (from 5.5 V to 7.5 V with a step of 0.5 V and a default value of 6.5 V), the
MOSFET is turned on and USB_OUT obtains the charging voltage. When the obtained voltage is higher
than the threshold, overvoltage protection is implemented and the MOSFET is turned off to block the
charging voltage.
The PM8038 can charge the Li-ion battery in four modes: trickle charging, constant current charging,
constant voltage charging, and pulse charging. The MSM8930 detects the battery voltage, external voltage,
and current through the analog multiplexer of the PM8038.
The charging state machine starts when the G526 is powered on. When VDD is detected, the state machine
reacts to some circumstances. For example, the charger is inserted, or the battery requires trickle charging.
When the G526 is powered on, the state machine starts and reads the initial state. Then the hardware
determines whether automatic trickle charging is required. Trickle charging restricts the charging current to
avoid VDD drop. When the system is started, software determines whether trickle charging is required.
When trickle charging raises the battery voltage to a threshold, current charging is implemented to
accelerate charging. This charging mode is called fast charging. When the voltage of the Li-ion battery
reaches the predefined value through constant current charging, software continues the battery charging
using constant voltage charging or pulse charging. Figure 8-27 shows the charging process.
When the system is started, trickle charging is under the software's control and stops when the voltage
reaches a specified threshold (3.0 V for a Li-ion battery). Software detects the battery voltage through
HKADC and determines when to stop trickle charging. Software can also control the trickle charging
current by setting the current to between 50 mA and 300 mA with a specified interval.
2. Constant current charging
To implement constant current charging, the MOSFET must work in the linear zone and the primary battery
must be connected to VDD. In the closed loop based on battery current detection, the MOSFET is used to
adjust the overall current. IMAXSEL.MSM controls the constant current charging until the battery voltage
reaches the specified value. Figure 8-29 shows the constant current charging method.
During constant current charging, when VBAT is close to Vset, the charging current decreases and ends,
and then constant voltage charging starts. Figure 8-30 shows the battery voltage and current waveforms
during constant current charging.
Figure 8-30 Battery voltage and current waveforms during constant current charging
Figure 8-31 Battery voltage and current waveforms during constant voltage charging
When the G526 is powered off, some clock circuits and RTC circuits need to keep running. If the main
battery is in the G526, it supplies power to these circuits. If the main battery is not available, the coin
battery or standby capacitor is required. The standby capacitor cannot provide sufficient power for the RTC
and other circuits, but it can be used for sudden momentary power loss (SMPL). Capacitors of different
capacitance may sustain power supply for different lengths of time. For example, 22 μF can sustain power
supply for over 10 seconds.
When the G526 is being charged, the charging settings of the standby power supply are valid all the time
and are not reset when SMPL occurs. When the main battery is in the G526, the charging process goes on
even if the G526 is powered off.
Figure 8-32 Charging circuit of the main battery and standby battery
Accelerometer
There are three suppliers (ADI, ST, and Freescale) for the accelerometers. The measurement range of ADI's
ADXL346 is ±2 g/±4 g/±8 g/±16 g with the highest precision of 1/256 g. The measurement range of ST's
LIS3DH is ±2 g/±4 g/±8 g/±16 g with the highest precision of 1 mg. The measurement range of Freescale's
MMA8452Q is ±2 g/±4 g/±8 g with the highest precision of 1/1024 g. The three components are all tri-axis
accelerometers with ultra-low voltage, high precision, and high resolution. They have built-in ADCs and
directly output digital signals. ADXL346 and LIS3DH are compatible with I2C and SPI communication
interfaces. MMA8452Q supports only I2C interfaces.
To make the three components pin-to-pin compatible, the following circuit designs are adopted:
Use I2C interfaces that are supported by the three components. Connect pin 8 to IO power supply and
enable LIS3DH's I2C function. Pin 4 is I2C4_CLK_SENS, and pin 6 is I2C4_DATA_SENS. Connect
Pin 7 SA0 to ground and set the lowest position of the components' I2C address to 0.
Connect Pin 2 to a 0.1 μF capacitor in series to ground per MMA8452Q's requirements.
Connect Pin 10 to ground per LIS3DH's requirements and connect Pin 5, Pin 12, and Pin 16 to ground.
Connect Pin 15 to VDD per ADXL346's requirements.
Figure 8-36 shows the accelerometer circuit.
CS: used to select the SPI or I2C bus. In the sensor, CS is set high and I2C is selected.
SA0: used to select the I2C address. In the sensor, SA0 is 0, so the I2C addresses shown in Table 8-10 are
used.
Compass
AK8963C is a highly-integrated mini tri-axis electronic compass that detects terrestrial magnetism in three
dimensions. It supports communication between I2C interfaces and SPI and has a measurement range of
±1200μT and sensitivity of 0.3 μT.
Interface signals
PROXIMITY_INT: Interrupt output that connects directly to the MSM8930 and provides interrupt signals
of proximity and ambient light. An interrupt occurs when the proximity or ambient light value input to the
ADC exceeds or is lower than the specified value.
I2C4_DATA_SENS and I2C4_CLK_SENS: I2C interfaces used to configure the register and send to the
processor the sensor's data, including the values of ambient light (when the sensor is exposed or shielded)
and the proximity sensor.
LDR is connected to LEDK and the LED driver built in the sensor is adopted.
The I2C address is 0x72/0x73.
Peak response Range: 0-100 lux This parameter is not listed in TBD
wavelength Resolution: 10 lux the manual.
resolution
Peak response Range: 100-1000 lux This parameter is not listed in
wavelength Resolution: 64 lux the manual.
resolution
Accuracy: ±25%
Peak response Range: 1000-4000 lux This parameter is not listed in
wavelength Resolution: 128 lux the manual.
resolution
Accuracy: ±25%
Sampling rate ≥ 4 Hz ALS ADC Integration Time: Yes
2.72-696 ms
The VIB_DRV_N signal is connected to the corresponding pin on the PM8038 to drive the vibration motor.
Power supply detection: The analog interfaces of the PM8038's power supply receives the detected signals
such as VBAT, VCOIN, VCHG, USB_IN, and DC_IN. The signals are then processed by the analog
multiplexer and sent to HKADC to be converted into digital signals.
Battery temperature detection: Connect the built-in negative temperature coefficient (NTC) thermistor to a
resistor in series and then to VREF_THERM. The voltage across the NTC thermistor is processed by the
analog multiplexer and sent to the HKADC to be converted into digital signals.
PA temperature detection: An NTC thermistor is placed beside the PA to measure the PA's temperature.
PA_THERM output from the thermistor is connected to the PM8038's analog multiplexer and sent to the
HKADC to be converted into digital signals. During the PCB design, place the thermistor as close to the PA
as possible.
Crystal oscillator temperature detection: A 19.2 MHz crystal oscillator with a built-in NTC thermistor is
used by connecting the TH-IN pin to the XO_THERM pin on the PM8038. The signals are processed by
the PM8038's built-in analog multiplexer and then sent to the HKADC to be converted into digital signals.
Reference source
All voltage regulators and other circuits in the PM8038 share a voltage reference. Special requirements for
the circuit are:
− The REF_GND pin is the ground of the voltage reference
− The REF_BYP pin is connected to a 0.1 μF bypass capacitor to ground and functions in
conjunction with internal resistors as a low-pass filter.
− The filtered voltage signals are provided to the MPP pin as analog output.
Figure 8-43 shows the voltage reference circuit.
The PM8038 has six step-down switching power supplies. Two of them are fast switching power supplies
with the output current up to 2000 mA, and the other four are high frequency switching power supplies
with output current up to 1500 mA. The following methods are recommended:
S1: supplies power (1500 mA) to the core of the MSM8930.
S5: supplies power (2000 mA) to the krait#1 of the MSM8930.
S6: supplies power (2000 mA) to the krait#2 of the MSM8930.
L16/L19: supplies power (1200 mA) to the QDSP.
The buck converter provides two control modes: low power but time consuming PFM mode, and normal
PWM mode. To achieve the highest efficiency, the buck converter automatically switches between PFM
mode and PWM mode. You can also manually select a mode.
Both fast switching and high frequency power supplies use constant-frequency current-mode control
architecture with the switch built in the power supplies.
LDO
An LDO regulator consists of four function modules: the reference voltage, controlled element, feedback
path, and difference amplifier. The four modules form a closed-loop control system to regulate the output
voltage to be close to the reference voltage instead of regulating the output current. The inputs of the
difference amplifier are the reference voltage and the voltage output from the feedback path proportionally.
Any difference of the inputs will cause the difference voltage generated by the amplifier. The closed loop
system changes the controlled element and thus changes the output voltage to decrease the difference to
zero. The accuracy of the output voltage does not vary with the current. Figure 8-46 shows the LDO's
function modules.
Reference voltage: The PM8038 uses the bandgap reference circuit to generate the reference voltage,
whose accuracy and stability directly affects the output voltage. The circuit can use any reference voltage
because the closed loop system includes the feedback of proportional signals.
Controlled element: The PM8038 uses a p-channel MOSFET as the controlled element to implement two
functions:
The gate-source voltage drop varies with the amplifier.
Large currents flow between the drain and source but the drain-source voltage drop is hardly affected.
When the circuit is switched on or off, the current that flows through the controlled element changes
significantly, which enables the phone to work in different modes (such as sleep, Rx, and Rx/Tx).
The PM8038's LDO regulators are classified into five types:
− Regulators for 1200 mA output: L1, L16, L19, L20, L24, and L27
− Regulators for 600 mA output: L5, L6, L7, L10, and L11
− Regulators for 300 mA output: L8, L9, and L12
− Regulators for 150 mA output: L2, L15, L17, L21, and L26
− Regulators for 50 mA output: L3, L4, L18, L22, and L23
NCP
The PM8038 contains an NCP switching power supply to generate a negative 1.8 V voltage for the stereo
headset.
Voltage switch
The PM8038 contains two 100 mA low voltage switches (LVSs): LVS1 and LVS2.
Some internal modules of the PM8038 use the outputs from special voltage regulators, which is performed
within the PM8038. These modules can work properly only when the regulators work properly and output
default voltages. Table 8-16 shows the connection relationship between internal modules and voltage
regulators.
Table 8-16 Connection relationship between internal modules and voltage regulators
The power-on sequence starts when the power key is pressed and the KPDPWR_N signal of the PM8038 is
pulled down. To ensure a successful power-on process, this signal must be kept at low level before the
PS_HOLD signal is pulled up.
After the KPDPWR_N signal has been pulled down for a short time span (treg1), voltage regulators are
enabled in the sequence from Group 7 to Group 0 (the interval for enabling the power supplies in the same
power group is four sleep clock cycles). When each voltage regulator is enabled, the detection circuit
checks whether the voltage regulator is correctly powered on. Therefore, after a voltage regulator is enabled,
each power group enables the next voltage regulator with a short delay (treg). This rule applies until all
power supplies that are supposed to be on by default are powered on.
The PON_RESET_N signal is pulled up after a short delay (treset1). This delay aims to ensure that the
MSM8930 has enough time to complete the power-on process.
In the initial stage of the power-on sequence, the PS_HOLD signal can be in any status but it must be
pulled up before the tpshold timer is overflowed. When this condition is met, a successful power-on process
is complete.
If the PS_HOLD signal remains at low level after the tpshold timer is overflowed, the power-on process
fails, and the power-off process starts immediately. The PS_HOLD signal is always at high level while a
mobile phone is being powered on.
The power-off process starts when the power key is pressed and the KPDPWR_N signal of the PM8038 has
been pulled down for a specified period. This period must be long enough so the MSM8930 can determine
that the power key is not pressed accidentally. After this period, the MSM8930 pulls down the PS_HOLD
signal and requests the PM8038 to initiate the power-off process.
After a short time span (treset0), voltage regulators are enabled in the sequence from Group 0 to Group 7,
which is the reverse order for enabling voltage regulators during the power-on process.
Power-on Process
When the PS_HOLD signal remains at low level, the PM8038 is off, and the power-on circuit is detecting
the following events that can trigger the power-on sequence:
The power key is pressed, and the KPDPWR_N signal is pulled down.
Cable Poweron pins are pulled down.
External power supplies are plugged in (the VCHG pin voltage exceeds the related threshold).
A real-time clock alarm is generated.
SMPL occurs.
Any of the preceding events can generate power-on signals, and a related interrupt signal is sent to the
triggering source of the MSM8930 power-on process. No matter what the triggering source is, the PM8038
performs the following power-on process:
Step 1 Any of the five triggering events occurs or they occur in sequence. The PM8038 determines
power supplies. If the VCHG pin voltage exceeds the related threshold, the charger is used as
power supplies. If the VCHG pin voltage does not exceed the related threshold, the PM8038
pulls up the BAT_FET_N signal, uses the main battery as power supplies, and prohibits
charging.
Step 2 The PM8038 enables the internal time slot reference.
Step 3 The PM8038 monitors the VDD voltage. If the VDD voltage exceeds the low voltage lock
threshold, the power-on initialization process continues.
Step 4 The PM8038 pulls down the PON_RESET_N signal even though this signal is not generated
because the MSMP has not been enabled. This mechanism ensures that the PON_RESET_N
signal can be in correct state during the MSM8930 power-on process.
Step 5 The PM8038 restores the SBI register settings to default values. If the VCOIN voltage is
lower than the related threshold, the PM8038 also restores the SBI bit powered by the standby
battery and the RTCRST interrupt.
Step 6 (Optional) The PM8038 sets the SMPL interrupt status bit and restores the SMPL timer if the
SMPL function is enabled and the SMPL restart signal is valid. This aims to prepare for the
next SMPL event.
Step 7 After the treg1 delay, the PM8038 enables voltage regulators in the following sequence: S2 >
L24 > S1 > S4 > L11 > L20 > L26 > L4 > L22 > L6 > L3 > L5.
Step 8 The PM8038 pulls up the PON_RESET_N signal a short delay (treset1) after all voltage
regulators that are supposed to be on by default have been powered on.
Step 9 The PS_HOLD timer starts counting and monitors the PS_HOLD signal from the MSM8930
in real time.
----End
A successful power-on process requires that the PS_HOLD signal changes from low to high before the
PS_HOLD timer completes counting. If the PS_HOLD signal has not been pulled up when the PS_HOLD
timer is overflowed, the PM8038 enters the off state again, and the power-on process returns to step 1. If
any of the five triggering events still occurs, for example, the KPD_PWR_N signal remains at low level,
the power-on process starts again. If the PS_HOLD signal becomes high before the PS_HOLD timer is
overflowed, the PM8038 enters the power-on state (sleeping or working) and sends the related interrupt
signal to the MSM8930 to determine the triggering source.
The power-on process fails if either of the following events occurs:
The triggering signal disappears. In this case, the power-on process stops and returns to step 1.
The VDD voltage decreases to the UVLO threshold before the PS_HOLD signal is pulled up. In this
case, the PM8038 terminates the power-on process and retries it twice. If all these three power-on
attempts fail, the PM8038 is reset and waits for the next triggering event.
If the PS_HOLD signal is pulled up before the VDD voltage decreases to the UVLO threshold, the restart circuit does
not work, and this event is processed in the same way as an SMPL event.
When the MSM8930 is powered on, the PM8038 remains on until the PS_HOLD signal is pulled down, a
UVLO event occurs, or an overheating shutdown event occurs. In any of these three cases, the PM8038
performs the power-off process.
Power-off Process
When the PS_HOLD signal of the MSM8930 remains at high level, the PM8038 is on and detecting any of
the following events that may trigger the power-off process:
The power key is pressed, and the MSM8930 pulls down the PS_HOLD signal.
The VDD voltage detected at the ISNS_M pin is lower than the UVLO threshold.
The temperature of the PM8038 exceeds the overheating threshold.
The PM8038's KPDPWR_N pin (can be pulled up inside the PM8038) connects to the power key on the
mobile phone. In general, the power-off sequence is triggered if the power key is pressed when the
MSM8930 is on. The MSM8930 monitors the power key using the interrupt logic. When the KPD_PWR_N
interrupt signal is generated, the MSM8930 starts the power-off process:
Step 1 A user presses and holds the power key for a period of time. The power-off menu is then
displayed.
Step 2 The MSM8930 writes the information that must be saved into the FLASH when the user
chooses the power-off option.
Step 3 The MSM8930 disables the SMPL function to prevent itself from being powered on again.
Step 4 The MSM8930 pulls down the PS_HOLD signal.
Step 5 The PM8038 pulls down the PON_RESET_N signal, resets the MSM8930 and peripherals,
and shuts down the TXCO manager.
Step 6 After the treset0 interval, the MSM8930 determines the next action depending on the
following:
If the temperature of the PM8038 exceeds the overheating threshold, the MSM8930 pulls down the
PON_RESET_N signal immediately and shuts down all PM8038 circuits to prevent the PM8038 from
being damaged.
If the VDD voltage is lower than the UVLO threshold, the MSM8930 pulls down the PON_RESET_N
signal immediately and shuts down all PM8038 circuits to prevent the main battery from being
damaged.
If neither of the preceding events occurs and the watchdog restart bit is set, the MSM8930 sets the
interrupt status bit of the watchdog. Then, the MSM8930 restarts, its watchdog timer resets, and the
PM8038 restarts without being completely powered off.
If none of the preceding events occurs and the SMPL function is enabled, an SMPL process is
triggered.
If none of the preceding events occurs, the normal power-off process continues.
Step 7 The MSM8930 shuts down the remaining power managers in turn. Only the main battery or
the VPH_PWR provided by external power supplies is used to supply power.
----End
8.4.19 RTC
The RTC function is implemented by a 32-bit real-time counter and one 32-bit alarm, both configurable in
one-second increments. The primary input to the RTC circuit is the selected sleep clock source (32.768 kHz
crystal, calibrated low-frequency oscillator, or divided-down 19.2 MHz XO). Even when the phone is off,
the selected oscillator and RTC continue to run off the main battery.
NOTE
The RTC function can be disabled using a one-time programmable (OTP) bit to save current while the PM8038 is in its
off state. If the main battery is present and an SMPL event occurs, RTC contents are corrupted. As power is restored, the
RTC pauses and skips a few seconds. The phone must reacquire system time from the network to resume the usual RTC
accuracy. Similarly, if the main battery is not present and the voltage at VCOIN drops too low, RTC contents are again
corrupted. In either case, the RTC reset interrupt is generated. A different interrupt is generated if the oscillator stops,
also causing RTC errors.
The SMPL recovery function enables the PM8038 to restart after a momentary power-off.
The SMPL recovery can be enabled using software. After you enable the SMPL recovery, if the VDD
voltage recovers to the normal value (higher than 2.7 V) within the preset timeout duration (0.5s to 2.0s),
the following recovery process will be initiated:
Driven by the UVLO event, the PON_RST_N voltage is pulled down, and the PM8038 is powered off.
The keep-alive capacitor or standby battery connected to the VCOIN pin starts to power the SMPL
circuit.
If the VDD voltage resumes within the preset timeout duration, the PM8038 powers on again without
requiring software intervention. Meantime, the PM8038 sends interrupt signals to the MSM8930 to
inform that a sudden momentary power loss has happened, the RTC is affected due to the abnormal
voltage, and the current power-on process is abnormal.
If the VDD voltage fails to resume within the preset timeout duration, the phone powers off. Only a
normal power-on process can bring the phone back on.
To use the SMPL recovery function, enable it using software and ensure that the phone has a keep-alive
capacitor or standby battery.
Figure 8-51 shows the VCOIN circuit of the G526. The 44 uF capacitor ensures that the RTC is maintained
when you replace the phone's main battery.
8.5 RF Subsystem
The RF subsystem consists of the transceiver, frequency source, antennas, GPS module, and
Bluetooth+Wi-Fi module. This section provides the details of each module.
Reception
The WTR1605L provides seven reception channels, including three low-frequency channels, three
intermediate-frequency channels, and one high-frequency channels. In addition, the WTR1605L has four
WCDMA diversity reception channels, among which two channels are used to receive low-frequency
diversity signals and the other two channels are used to receive intermediate-frequency and high-frequency
diversity signals. The WTR1605L has one GPS (A-GPS also supported) signal reception channel used to
transmit I/Q signals to the baseband. GSM and WCDMA modules share two channels to output I/Q signals
to the baseband.
Transmission
The WTR1605L's transmission circuit supports WCDMA, GSM, CDMA, and LTE systems.
The WCDMA system supports B1, B2, B3, B4, B5, B8, B9, and B19 frequency bands.
The GSM system supports GSM, EGSM, PCS, and DCS frequency bands.
The CDMA system supports the BC0, BC1, BC6, and BC15 frequency bands.
The LTE system supports B1, B2, B3, B4, B5, B8, B9, B19, and B41 (not supported currently in the
product design) frequency bands.
Transmit Channels
The G526 uses the following three PAs:
MMMBPA used for GSM850, GSM900, GSM1800, GSM1900, WCDMA B1, WCDMA B2,
WCDMA B4, WCDMA B5, WCDMA B8, LTE B3, and LTE B4
PA used for LTE B7
PA used for LTE B20
Figure 8-53 shows the block diagram of the MMMBPA.
Figure 8-54 shows the transmit channel for the LTE B7.
Figure 8-55 shows the transmit channel for the LTE B20.
The preceding transmit channels, PA enabling signals and gain switching signals are provided by the
MSM8930.
The diversity frequency bands of the G526 are the W2100, LTE B3, LTE B4, LTE B7, and LTE B20. The
LTE B20 band uses an independent antenna, while the LTE B1, LTE B3, LTE B4, and LTE B7 share the
same reception antenna.
Figure 8-58 shows the signal reception for the WCDMA B2 band.
Figure 8-59 shows the signal reception for the WCDMA B4 band.
Figure 8-60 shows the signal reception for the WCDMA B5 band.
Figure 8-61 shows the signal reception for the WCDMA B8 band.
The LTE B7 and LTE B4 bands share the same reception port. Figure 8-63 shows the LTE B7 reception
channel and the compatibility design.
The first local oscillator in the WTR1605L is used in all GSM and WCDMA transmit channels, the second
one is used in all GSM and WCDMA reception channels, and the third one is used in all GPS reception
channels.
In this design, the Bluetooth and Wi-Fi functions share one antenna. The timeshare design in this solution
realizes the multiplexing of Wi-Fi and Bluetooth functions without any SP3T RF switches. Figure 8-67
shows the circuit.
The MSM8930 provides a PCM interface that interconnects to the Bluetooth module's PCM signals. Figure
8-68 shows signal definitions.
The following signals are used to connect the WCN3660 chip and MSM8930:
BT_WAKES_MSM: This is the Bluetooth module's wake-up output signal, which connects to the
Bluetooth module's HOST_WAKE pin to wake up the MSM8930 from sleep mode.
MSM_WAKES_BT: This connects to the Bluetooth module's BT_WAKE pin to allow the MSM8930
to wake up the Bluetooth module from sleep mode.
UART interface
Before troubleshooting, ensure that software on the phone has been restored to default settings and is working properly.
No current when powered on: Connect the phone to a DC power supply. When you press the power
button, the current displayed on the DC power supply is between 0 mA and 5 mA.
Small current when powered on: Connect the phone to a DC power supply. When you press the power
button, the current displayed on the DC power supply is between 5 mA and 10 mA.
Large current when powered on: Connect the phone to a DC power supply. When you press the power
button, the current displayed on the DC power supply is above 300 mA.
9.1.1 No Current
No current
Y
Is the keypad copper Clean the keypad
foil oxidized?
Such issue is often due to a short circuit of the primary power supply. Especially check the VBUS and VSYS power
supplies to see whether a short circuit occurs.
Y
Check the U501 to see if a short Locate the cause
circuit occurs in other outputs
If the Vph-pwr voltage is normal but the U201 output is abnormal, it is probably because of a short circuit in other
outputs of the U201, which causes failure of the PMU power supply output. In such cases, check if a short circuit occurs
in any of U201's outputs.
N
Check whether Pin 1
Check the U201
of the J1501 is short to
ground
Y
N Resolder or replace
Check to see if the voltage of the
the U201
U201 is normal
Y
Check the U201
The WCDMA2100
reception channel is faulty
End
Use the multimeter or oscilloscope to test whether the switch control signals of the U3201 are normal. Table 9-1 shows
the truth table of the control signals.
The troubleshooting procedure for other frequency bands is similar. When issues occur in the LTE_B7 or
LTE_B4, check the compatible DP4T.
N
Check whether Pin 1 and Pin 2 Check the J3201
of the J3201 works properly
N
Check whether Pin 7 and Pin 12
Check the U3301
of the U3301 have an insertion
loss of 2.5db or less
Y
N
Y
N
Check whether
Y the IQ input of
Check the U5601
the U5601 and power supply
voltage are normal
End
N
Does the charger work Replace the
properly? charger
Y
Y
Check to see if the Repair the soldering
J1501 has pseudo of the J1501
soldering
N
Check to see if there is a voltage
Replace the Q301
across the VPH_PWR
N
Check to see if the battery Repair the J1501
connector contacts properly with
the battery
N
Check the U201
Y
If the problem solved after End
the software is reloaded?
N
Y
Check to see if the J2101 is Repair the soldering
poorly soldered of the J2101 or
replace the J2101
N
Y
If the problem solved End
after the camera is
replaced
Y
Is the problem solved
after you use a normal End
USB cable
Y
Check to see if the 5-pin mini
USB port is poorly soldered Repair the soldering
N
Check to see if the
End
receiver volume settings
are normal
Y
Y
Does the phone mistakenly
Replace the headset
judge that a headset is plugged
connector
in?
N
Y
Is the problem solved
after the receiver is End
replaced?
Replace the
U1701
No sound is transmitted
after a call is set up
Y
Is the problem solved End
after you reload the
software
N
N
Check to see if the MICBIAS Check the U201
voltage is 1.8 V
Y
Y
Is the problem solved
after you replace the End
microphone
Replace the
U1701
Vibration fails
Y
Is the problem solved
End
after you reload the
software
N
Y
Is the problem solved after you End
replace the motor
N
Replace the main FPC
N
Are the ringtone volume End
settings correct?
Y
Y
Is the problem solved after End
you reload the software?
N
Y
Is the problem solved after you End
replace the speaker?
Replace the
U1701
Y
Is the problem solved after End
you reload the software?
N
Check the T2001, T2003, Replace the
and T2004 to see if their U201
impedences to ground are 0
ohms
Y
N
Is the dome keypad in good Clean the keypad
contact with the FPC?
Y
Y
Is the problem solved
End
after you replace the
FPC?
Reload the
software
N
Are the volume settings End
correct?
Y
Y
Is the problem solved after you End
replace the headset?
N
N
Is the headset icon Replace the
displayed? headset connector
Replace the
U1701
Y
Is the problem solved after 结束
you replace the microSD?
N
Y
Is the microSD card holder
Replace the microSD
lifted?
card holder
N
Y
Does pseudo soldering Repair the soldering
occurs on the Z2302?
N
Check to see if the GPS
antenna is in good contact Replace the antenna or
with the corresponding contact spings
contact springs
Y Y
10 Functions
10.1 Buttons and Keys
Power button
Volume up button
Volume down button
Back
Home
Menu
2 Key test Key test Press the keys and buttons one by one. The test succeeds if the
buttons on the screen changes their colors correspondingly.
Press the volume down button to proceed to the next test.
3 LCD test ● White The test succeeds if the following conditions are met:
screen ● The LCD displays a white screen when you press the volume
● Blank down button.
screen ● The LCD displays a black screen when you press the volume
● Color screen down button again.
● The LCD displays a red, green, and blue screen when you
press the volume down button for a third time.
4 LCD LCD The test succeeds if the LCD backlight constantly goes on and
backlight backlight test off. Press the volume down button to proceed to the next test.
test
5 Keypad LED Keypad LED The test succeeds if the keypad LED constantly goes on and off.
test test Press the volume down to proceed to the next test.
6 Touchscreen Touchscreen Touch the touchscreen along its four edges. The test succeeds if
test all the four edges become red.
Press the volume down button to proceed to the next test.
7 Proximity Proximity Place the shielding card 4 mm away from the proximity sensor
test sensor test hole on top of the touch panel. The test succeeds if the icon
turns from a head image to a phone image.
8 Ambient Ambient light Check whether data is displayed for the ambient light. Access
light test sensor test the ambient light test screen, orient the phone toward the light,
and place your hand in front of the ambient light sensor. The
phone software automatically detects the light changes and
determines whether the test succeeds. If the test succeeds, the
screen for the next test is displayed without any success
indication. If the test fails several times, press the menu key to
confirm the failure.
9 Motor test Motor test The test succeeds if the motor keeps vibrating.
Press the volume down button to proceed to the next test.
10 Speaker test Speaker test The test succeeds if the left and right speakers produce music in
turn.
Press the volume down button to proceed to the next test.
11 Receiver test Receiver test The receiver plays an audio in loop mode. Press the volume
down button to proceed to the next test.
12 Microphone Microphone Press Record, say a word, and press Play. The microphone is
loopback test test working properly if you can hear what you said from the
receiver. Plug in the headset, press Record, say a word, and
press Play. The headset microphone works properly if you can
hear the word you said from the earphone.
If both microphones work properly, the test succeeds.
Press the volume down button to proceed to the next test.
13 FM test FM Search for an FM station. The test succeeds if the FM station is
heard from the earphone.
Press the volume down button to proceed to the next test.
14 Headset Headset cable The test succeeds if the In icon is green when the headset is
cable test plugged in, and the Out icon turns green when the headset is
removed.
Press the volume down button to proceed to the next test.
15 CMMB test CMMB The test succeeds if signals are detected. Press the volume down
button to proceed to the next test.
16 5 MP 5MP camera The test succeeds if all the following conditions are met:
camera test The preview is displayed.
When you press the volume up button, a photo is taken and the
flash light flashes once. When you press the power button, the
auto focus function works properly.
Press the volume down button to proceed to the next test.
17 0.3 MP 0.3 MP The test succeeds if the preview is displayed. Press the volume
camera test camera down button to proceed to the next test.
19 Gravity Acceleration Move the phone in three-dimensional space. The test succeeds
sensing test of gravity if the angles between the phone and the three coordinate planes
are all 45 degrees.
20 Wi-Fi test Wi-Fi The test succeeds if Wi-Fi signal reception is normal.
Note:
Use a device as the Wi-Fi hotspot to assist this test.
21 SIM card SIM card The test succeeds if the SIM card is detected and functions
test properly. Press the volume down button to proceed to the next
step.
Attachment:
G526 PCBA
reference designators.pdf