AIFlasherRepair OS

Repair OS for Android & iPhone board-level technicians

The repair operating system for mobile technicians.

Start with the symptom. Follow guided measurements. Get the repair path — every step backed by bench evidence, never a guessed value.

  • 10symptom workflows
  • 38board-level guides & tools
  • 117iPhone panic references
  • 387indexed IC records
  • 15Academy lessons & guides

01 · Symptom first

What do you see on the bench?

Pick the symptom. AIFlasher lays out the measurement order, the fault domains to test and the exact guides for Android and iPhone.

Dead / No Power

Measurement order for no power-on, no charge response, no display. Each step must pass before the next one is meaningful.

  1. 01

    Intake & visual

    Liquid indicators, corrosion, previous rework, battery connector and missing components.

  2. 02

    DC PSU current

    Supply at the battery connector. Record standby current, response to the power key and the curve shape.

  3. 03

    Main rail

    VBAT and VPH_PWR / PP_VDD_MAIN voltage, then resistance or diode-to-ground against a known-good board.

  4. 04

    PMIC wake

    Always-on rails, power-key / PON line, 32.768 kHz clock and reset release.

  5. 05

    Boot state

    USB enumeration (9008, BROM, Preloader, DFU, Recovery) shows how far the SoC progressed.

  6. 06

    Isolate & confirm

    Inject only after rail identity and its operating voltage are known. Re-measure after the repair.

Fault domains to test

Listed in measurement order, not by probability.

  • Input / battery connector path
  • Main-rail short or heavy load
  • PMIC wake (PON, AON rails, clock, reset)
  • SoC / RAM early initialisation
  • Storage power or link

Charging / USB

Measurement order for not detected, not charging, slow or intermittent. Each step must pass before the next one is meaningful.

  1. 01

    Known-good accessories

    Known-good charger and cable. Inspect the port for lint, corrosion and bent pins.

  2. 02

    VBUS & detection

    A USB meter is valid here: confirm VBUS and whether the phone detects the charger.

  3. 03

    Detected vs charging

    Separate "not detected" from "detected, no charge" — they are different fault domains.

  4. 04

    Battery & communication

    Battery voltage, thermistor (NTC) and the battery data / fuel-gauge line.

  5. 05

    Charger IC & OVP path

    VBUS → OVP → charger IC → VSYS / VBAT handoff, measured point by point.

  6. 06

    Verify

    Timed charge with current and temperature recorded.

Fault domains to test

Listed in measurement order, not by probability.

  • Charger / cable / port
  • VBUS input & over-voltage protection
  • Charger IC & power-path handoff
  • Battery, NTC or fuel-gauge communication
  • USB data / CC detection (USB-C)
Start guided flow

Bootloop / Restart

Measurement order for logo loop, restarts after boot, timed restarts. Each step must pass before the next one is meaningful.

  1. 01

    Characterise the loop

    Logo loop, restart after reaching the system, or a timed restart (for example around 3 minutes on iPhone).

  2. 02

    Read the evidence

    iPhone panic-full log, or Android boot reason and last kernel log, before touching hardware.

  3. 03

    DC current shape

    Rebound pattern versus early stall separates late-boot faults from power-sequence faults.

  4. 04

    Peripheral isolation

    When a log names a sensor or bus, isolate that flex or peripheral first.

  5. 05

    Firmware & storage integrity

    AVB / vbmeta, slot state, restore or flash result.

  6. 06

    Verify

    Stable boot across repeated cycles with every original peripheral reconnected.

Fault domains to test

Listed in measurement order, not by probability.

  • Peripheral / sensor named in the log
  • Firmware, AVB or slot state
  • Storage integrity
  • Power instability under load
  • CPU / RAM interconnect (only after isolation)
Start guided flow

No Service / Baseband

Measurement order for no signal, imei blank, baseband unknown, sos. Each step must pass before the next one is meaningful.

  1. 01

    SIM & coverage

    Known-good active SIM, known coverage, airplane mode and network mode settings.

  2. 02

    IMEI & baseband

    Is the IMEI and baseband / modem firmware version present, blank or unknown?

  3. 03

    Modem startup evidence

    Logs, ServiceMode / engineering screens and modem firmware state.

  4. 04

    RF path

    Antenna contacts, coax, front-end module / PA, transceiver — band by band.

  5. 05

    Baseband power

    Modem PMIC rails and reference clock against the exact board reference.

  6. 06

    Verify

    Registration, calls and data on more than one band.

Fault domains to test

Listed in measurement order, not by probability.

  • SIM, carrier or region lock
  • Modem firmware / identity
  • RF front-end, PA or antenna path
  • Baseband PMIC, clock or modem processor
Start guided flow

Display / Touch

Measurement order for black screen, no backlight, lines, touch faults. Each step must pass before the next one is meaningful.

  1. 01

    Confirm the board boots

    Vibration, sound, USB enumeration or current progression before blaming the display path.

  2. 02

    Known-good panel

    A known-good panel separates the screen from the board in one step.

  3. 03

    Connector & FPC

    Damaged pins, torn or pinched flex, corrosion on the board connector.

  4. 04

    Display power & backlight

    Panel supplies, backlight boost / LED driver and enable lines.

  5. 05

    Touch path

    Touch controller supply, I²C / SPI activity and interrupt line.

  6. 06

    Verify

    Full-screen image, full brightness range and all-area touch.

Fault domains to test

Listed in measurement order, not by probability.

  • Panel or panel flex
  • Board connector
  • Backlight boost / LED driver
  • Display supplies & enable
  • Touch controller & bus
Start guided flow

Camera / Flash

Measurement order for black viewfinder, focus, flash or ois faults. Each step must pass before the next one is meaningful.

  1. 01

    Known-good module

    Swap a known-good module to separate the camera from the board.

  2. 02

    Connector & flex

    Inspect the board connector and flex for damage or corrosion.

  3. 03

    Camera supplies

    Analog, digital and I/O supplies, enable and reset lines.

  4. 04

    Control & data

    I²C control bus and MIPI CSI data lanes.

  5. 05

    Sub-systems

    Autofocus, OIS and flash circuits when only one function fails.

  6. 06

    Verify

    Every lens, focus, flash and video recording.

Fault domains to test

Listed in measurement order, not by probability.

  • Camera module
  • Connector / flex
  • Camera supplies & enable
  • I²C or MIPI path
  • Flash / OIS driver

Guides

Android

Android guide not yet published — use the steps on the left with the exact board reference.

iPhone

Audio / Mic / Speaker

Measurement order for no sound, mic dead, earpiece or loudspeaker faults. Each step must pass before the next one is meaningful.

  1. 01

    Identify the path

    Earpiece, loudspeaker, which microphone, or headset — they are different circuits.

  2. 02

    Known-good parts

    Known-good speaker or mic, and a clean mesh.

  3. 03

    Reproduce across modes

    Call, voice recorder, speakerphone and video — note which fail.

  4. 04

    Codec & amplifier

    Codec / amplifier supplies and I²C / I²S activity.

  5. 05

    Log correlation

    On iPhone, check whether a panic log names an audio bus or sensor.

  6. 06

    Verify

    Every path in every mode.

Fault domains to test

Listed in measurement order, not by probability.

  • Speaker / mic part or mesh
  • Flex or connector
  • Audio amplifier
  • Audio codec & bus

Guides

Android

Android guide not yet published — use the steps on the left with the exact board reference.

iPhone

Water / Liquid Damage

Measurement order for wet, corroded, dropped in water. Each step must pass before the next one is meaningful.

  1. 01

    Disconnect the battery

    Do not power the phone to "test" it while liquid may be present.

  2. 02

    Open & inspect

    Corrosion under shields, on connectors and around the PMIC and charging area.

  3. 03

    Clean & dry

    Isopropyl alcohol or ultrasonic cleaning within the board’s tolerance, then dry fully.

  4. 04

    Measure before power

    Main-rail and key-rail resistance / diode-to-ground against a known-good board.

  5. 05

    Current-limited first power

    DC PSU with a conservative current limit; watch the current shape.

  6. 06

    Follow the remaining symptom

    Route to the workflow for whatever fault remains after cleaning.

Fault domains to test

Listed in measurement order, not by probability.

  • Corroded connector or passive
  • Main-rail short from corrosion
  • Charging / USB input path
  • Any sub-system near the ingress point

Storage / UFS / eMMC / NAND

Measurement order for storage not found, 9008/dfu, isp and ic identity. Each step must pass before the next one is meaningful.

  1. 01

    Identify the part

    Read the top marking and decode capacity, eMMC / UFS and generation in the IC database.

  2. 02

    Boot / service state

    EDL, BROM, DFU or restore behaviour and how it changes with storage isolated.

  3. 03

    Storage power

    VCC / VCCQ (eMMC, UFS) or NAND rails on iPhone.

  4. 04

    Interface

    CMD / CLK / DAT (eMMC), M-PHY & reference clock (UFS), PCIe (iPhone NAND).

  5. 05

    ISP / read evidence

    Identity read, health report and partition table.

  6. 06

    Verify

    Full write / read and a firmware boot.

Fault domains to test

Listed in measurement order, not by probability.

  • Storage supply rails
  • Storage interface / reference clock
  • Storage IC itself
  • Firmware or partition table

Restore / Flash Errors

Measurement order for itunes errors, flash failures, avb, frp after flash. Each step must pass before the next one is meaningful.

  1. 01

    Record the exact error

    Restore error code or the flash tool log line — not a paraphrase.

  2. 02

    Match the firmware

    Exact model, region and build against the official firmware metadata.

  3. 03

    Locate the failing stage

    Where in the restore or flash sequence does it stop?

  4. 04

    Hardware cross-check

    Storage rails and interface; baseband for late restore errors.

  5. 05

    Partition & AVB evidence

    Slot state, vbmeta and dynamic partitions on Android.

  6. 06

    Verify

    Clean boot and integrity check after flashing.

Fault domains to test

Listed in measurement order, not by probability.

  • Wrong or mismatched firmware
  • Connection / host-side issue
  • Storage hardware
  • Baseband (late restore stage)
  • AVB / slot / partition state

02 · Guided measurement

Dead phone? Enter what the bench shows.

Enter each reading as you take it. AIFlasher interprets it and tells you which measurement to take next. A reading narrows the fault domain; it does not identify a component on its own.

01 How was the current measured?
02 Current after pressing power

Read the steady value 2–5 s after the power key. 30 mA = 0.030 A.

03 Main rails
04 USB state on the PC
WAITING FOR READING Enter the current after the power key. Empty fields stay unknown; nothing is assumed.

Rules: AIFlasher Android No Power analyzer · generic DC-PSU zones, not board-specific limits. Exact-model known-good data always overrides them.

04 · Repair cases

Repair cases, graded by their evidence.

Every case records the symptom, the measurement that changed and the proof after repair. A fix that "worked" is not enough on its own — the grade shows how strongly the cause was confirmed.

Verified on benchSource-reported · needs reviewConfirmed fault
ARC-0941 · NO POWER / DEADSource-reported

Redmi Note 10 Pro (Sweet)

Dead / ~0.080A EDL latch with missing UFS_VCC

Hypothesis tested
UFS supply short / PMIC rail collapse
Repair
Short isolation + decoupling capacitor replacement
Evidence 5/5
Open full case & measurements →
ARC-0812 · NETWORK / BASEBANDSource-reported

Samsung Galaxy S21 Ultra (Exynos)

Half Flight / grey airplane mode with ServiceMode MIPI failure

Hypothesis tested
RFFE1_DATA clamped by a downstream RF front-end device
Repair
Confirmed RF front-end branch repair
Evidence 5/5
Open full case & measurements →
ARC-0734 · CHARGING / USBSource-reported

Samsung Galaxy A52s 5G

Charging paused — battery temperature too low

Hypothesis tested
Open NTC sense path
Repair
Main-to-sub flex repair/replacement
Evidence 5/5
Open full case & measurements →
ARC-0629 · DISPLAY / BACKLIGHT / TOUCHSource-reported

Poco X3 Pro (Vayu)

Image visible under flashlight, VLED+ stuck near VBAT

Hypothesis tested
Backlight boost stage not switching
Repair
Backlight boost-component repair
Evidence 5/5
Open full case & measurements →
ARC-0518 · UFS / eMMC / BOOTSource-reported

OnePlus 9 Pro (Lemonadep)

First-logo reboot with 300–650mA rebound loop

Hypothesis tested
RAM/interconnect instability
Repair
CPU / RAM sandwich reball reported by source
Evidence 3/5
Open full case & measurements →

05 · Board repair

Platform centers

Brand-specific depth once you know the fault domain: rails, boot stages, signal names and service-mode paths.

06 · Evidence standard

Unknown is safer than guessed.

AIFlasher does not stop at "replace this IC". Every path records why the next test follows, and a value without a source stays marked unknown.

  1. 01

    Symptom

    Exact failure, reproduced

  2. 02

    Test point

    Where to measure

  3. 03

    Expected

    Known-good reference, with source

  4. 04

    Observed

    Your actual bench reading

  5. 05

    Interpretation

    Which fault domain it supports

  6. 06

    Next test

    The measurement that confirms it

07 · Knowledge base

Learn the method, not just the fix.

Free courses for technicians, students and institutes — bench safety, DC current diagnosis, UFS/eMMC ISP, panic logs and an 8-week lab curriculum.