[G1 Android Development] Monrad:
Hi guys, I'm trying to de-brick a Tmobile G1. Don't know what happened to it.

Actual status:

-If I power on the phone it goes to recovery mode.

-I can enter blue light mode.

-I cannot enter bootloader.

-I cannot enter fastboot mode.

-I cannot flash anything from SD (verification failed error).

I have a JTAG attached to the phone. It seems to work fine. I flashed 3.22 radio but I can't enter fastboot mode, it just sits there in the G1 screen when powering the phone.

Some logs from serial cable:

If I turn on the phone normally:

boot reason: PM_KPD_PWR_KEY_ON_RT_ST

(PowerOn Status,Boot Reason)=(1,1)
NAND_FLASH_READ_ID : SAMSUNG_256MB_FLASH_128MB_SDRAM

ARM9_BOOT_MODE3, Boot Android and mARM stay in OEMSBL
Clearing RAM...
Load Recoveryimg header, addr=0x502C0000 taget=0xA8100000
Load Bootimg header OK
Load Kernel, addr=0x502C0800 taget=0x80008000 Size=0x001A3568
Load kernel OK
bad block num=0
Load ramdisk, addr=0x50464000 target=0x81000000 Size=0x00065A41
Load ramdisk OK
SPL2 doesn't exist
Load OK.
SetupTAG addr=0x80000100 cmdline add=0xA8100040
TAG:Ramdisk OK
Get CID OK
androidboot.serialno=HT847LC09210
boot reason=0x0
commandline from head: no_console_suspend=1 console=null
command line length =317
active commandline: board_trout.disable_uart3=0 board_trout.usb_h2w_sw=0 board_trout.disable_sdcard=0 board_trout.smisize=64 androidboot.baseband=3.22.26.17 androidboot.bootloader=0.95.0000 androidboot.carrier=TMUS board_trout.keycaps=qwerty androidboot.mode=recovery androidboot.serialno=HT847LC09210 no_console_suspend=1 console=null

PARTITIOM_NUM_MAX =6 Valid partition num=6
read_page - error bad status: 0xC00030
read_page - error bad status: 0xC01030
read_page - error bad status: 0xC02030
read_page - error bad status: 0xC03030
Read block ERROR on page ID jump to linux kernel

I already did the tutorial on the wiki and wasn't able to get into fastboot mode. Any ideas?

Thanks :)

These are JTAG and PUTTY logs:

Open On-Chip Debugger 0.4.0 (2010-02-22-19:05)
Licensed under GNU GPL v2
For bug reports, read
http://openocd.berlios.de/doc/doxygen/bugs.html
trst_and_srst srst_pulls_trst srst_gates_jtag trst_push_pull srst_open_drain
dcc downloads are enabled
fast memory access is enabled
Info : clock speed 6000 kHz
Info : JTAG tap: arm9.cpu tap/device found: 0xa01700e1 (mfg: 0x070, part: 0x0170
, ver: 0xa)
Info : Embedded ICE version 6
Info : arm9: hardware has 2 breakpoint/watchpoint units
Info : accepting 'telnet' connection from 0
target state: halted
target halted in ARM state due to debug-request, current mode: Supervisor
cpsr: 0x000000d3 pc: 0x0090d84c
MMU: disabled, D-Cache: disabled, I-Cache: disabled
Error: No working memory available. Specify -work-area-phys to target.
Info : no working area available, falling back to memory writes
22020096 bytes written at address 0x103b5300
downloaded 22020096 bytes in 466.006683s (46.145 kb/s)
shutdown command invoked

> halt
target state: halted
target halted in ARM state due to debug-request, current mode: Supervisor
cpsr: 0xa00000d3 pc: 0x00907f78
MMU: disabled, D-Cache: disabled, I-Cache: disabled
> mww 0x0090379C 0xea000013
> mww 0x9029d8 0x0
> load_image /tmp/hboot.img 0x0
No working memory available. Specify -work-area-phys to target.
no working area available, falling back to memory writes
524288 bytes written at address 0x00000000
downloaded 524288 bytes in 8.406088s (60.908 kb/s)
> mww 0x00000c0c 0x98000C4C
> mww 0x00000c08 0x98000C4C
> mww 0x00000c04 0x98000C4C
> mww 0x00000c00 0x98000C4C
> resume
> shutdown

boot reason: PM_KPD_PWR_KEY_ON_RT_ST

(PowerOn Status,Boot Reason)=(1,1)
NAND_FLASH_READ_ID : SAMSUNG_256MB_FLASH_128MB_SDRAM

ARM9_BOOT_MODE1
FA0F129C
Format EFS...
EFS Block: 234-277
Erase Block: 234
Erase Block: 235
Erase Block: 236
Erase Block: 237
Erase Block: 238
Erase Block: 239
Erase Block: 240
Erase Block: 241
Erase Block: 242
Erase Block: 243
Erase Block: 244
Erase Block: 245
Erase Block: 246
Erase Block: 247
Erase Block: 248
Erase Block: 249
Erase Block: 250
Erase Block: 251
Erase Block: 252
Erase Block: 253
Erase Block: 254
Erase Block: 255
Erase Block: 256
Erase Block: 257
Erase Block: 258
Erase Block: 259
Erase Block: 260
Erase Block: 261
Erase Block: 262
Erase Block: 263
Erase Block: 264
Erase Block: 265
Erase Block: 266
Erase Block: 267
Erase Block: 268
Erase Block: 269
Erase Block: 270
Erase Block: 271
Erase Block: 272
Erase Block: 273
Erase Block: 274
Erase Block: 275
Erase Block: 276
Erase Block: 277
Done

HTCST ÚÈÒHTCE

OEMSBL VERSION: 3.22.26.17
OEMSBL Build Date: Jan 17 2010 12:08:33
PLATFORM: DREAM
PID: 31
PLATFORM ID: 0

Boot CE manually...
Done.
Y2±
Í¡8 bit
-msm_nand_probe
[MDDI] Bitmap_Width = 480
[MDDI] Bitmap_Height = 640
[MDDI] RGB_Capability = 0x8888
[MDDI] Mfr_Name = 0xD263
[MDDI] Product_Code = 0x0
Board_PID : 0x1F
Wlan data header ++++++++++++++++++++
Signature : 0xEE1251
UpdateStatus : 0x2
UpdateCount : 0x1A288
BodyLength : 0x2F0
BodyCRC : 0x9A83620E
aDieId(0) : 0x980D8090
aDieId(1) : 0xCD39284
aDieId(2) : 0x20000000
aDieId(3) : 0x5C58
countryID : 0x10
Wlan data header --------------------------
chipset_bootmode reset_reason:0
ARM11 Boot Mode: 11
Platform: HBOOT-7201A