yashsingh1/xdaforums huggingface dataset:
[Touch GSM ROM Development] bombom81:
Hi Stu,

I think I know my mistake.

After I read again the tutorial from Russian website, it said that the SPL loaded into RAM, so actually when come to step 10, (RUN FROM ADDRESS 10000000), The bootloader actually RUN, and the power source of the board can not be disconnected for any reasons! Once it disconnect, the Board will run the bad SPL again as it is off again :(

Today I almost made it! Almost as close as one nail :)

What I did today :

1. Yesterday I used the power from charger to power up the board. It is success until step 10 (where the "RUN FROM 10000000" being executed)

2. This morning I realized when I watch the left status bar of NO ICE Debugger, it is actually running (the seconds moves to count the running time of the board)

3. When I unlpuged the charger from the USB Port, release the crocodile jacks from battery charger connector and replace with the battery ASAP, suddenly it stop counting. Means that it is dead.

4. Since the SPL ran into RAM, we can not lose the power from the board.

5. Now this is the interesting part :

a. Instead using USB Charger, I used battery to power the board. So I made another + and - crocodile jack, put the crocodile jack on the battery, and the other end of the jack to the battery connector on the board and to the JTAG Circuit (it is a parallel connection, can you imagine it?)

b. Plug a USB Cable from USB Port on the board to Computer's USB Port. Active Sync 4.5 properly installed in my computer.

c. HJTAG detected successfully.

d. No Ice Debugger detected successfully.

e. I loaded the SPL from Amman (the link you gave me yesterday).

f. When step 10 finished (Run From 10000000), well....the computer detected there's new USB hardware plug in to the computer, and the Active Sync did his job to gave the connection my board to computer. IT IS CONNECTED !!!

g. I ran the SHIPPED RUU for my device.

h. Working well...until when it started to upload ROM Image, suddenly it said "The ROM can not be installed to this device".

i. I Suspected because I'm not using the original SPL.

j. Until now...I can not repeat this "success action". Somehow, the circuit with battery does not work anymore. But if I plug the desktop charger, it works !!!

Really s**ks ! This is the dilemma, if we plug the usb charger, how can we upload the ROM into board while we must replace the USB Charger with USB Cable?

I have tried using USB Cable as power source but the HJTAG does not work.

I tried to put on my LCD so I can use the GOLD CARD method , but it can not as the LCD will press the JTAG Circuit on the board and short each other connection......

Wow...so close :) I guess now I can feel how the Thomas Alfa Edison's feeling when he tried to light up a lamp with 1000 experiment..LOL

Anyway...these two days I've made all my friends in my department jealous as I'm busy with my board and give my daily job to them...hahahaha
[Touch GSM ROM Development] captainstu72:
If your happy to do it, you can connect the LCD and not attach it to the mainboard, so it does not touch the cables, and you can see what is going on, and therefore does not short the circuit You could probabaly connect the battery just to the device if you mount the mainboard to the back, and put the battery and back cover on, saves the croc clips and it is less to disconnect.

Try a custom rom, Onxy 4.9 for example, this would hopefully work, Shipped rom would likely complain about the SPL.

The circuit is likely not working as the battery could be drained - wouldn't surprise me.

It could be possible (albeit a little risky?) to convert a mains charger to plug to the + and - on the device to give external power permanently. You could charge battery for an hour or so and try again.

It's brilliant to see you have made so much progress, I'm jealous!

Let me know if any of these help, it would be really cool if you can get your device working.

Stu (should probabaly get one with some work today!)
[Touch GSM ROM Development] bombom81:
Hi Stu.

I am done for this week :)

this messy circuit make me crazy by doing a recursion about connected and not, connected and not.

I think I'll make a permanent circuit for this Wriggler JTAG, like the one with PCB. So I can avoid the connection thing.

At least by the end of this week, we got good conclusion :

1. The Wriggler JTAG is working.

2. The No ICE Debugger is working, at least, for once, the computer detected mine in its Activesync.

3. We're seriously need original SPL, because to revive this dead Touch, we need to load the Shipped ROM, not the cooked ones. If I am right, the cooked ones do not include the radio, IPL, SPL, etc.

Thanks for your suggestion, I've never thought that putting back the back cover make it easier to work with battery.You're so right ! :)

Have a great weekend ! :)
[Touch GSM ROM Development] captainstu72:
On point 3... That is a good point, we need an RUU which has an IPL and SPL insertion to run when in the temporary bootloader. I'll see if I can find one - that may well be what the HSPL does? Someone Correct me please If I am wrong, and point me in the right direction. Anyone's input in this is very much welcome!

You have a great weekend too, I'll see what I can come up with!

(I'm going to be using Stripboard for my circuit this weekend as long as my new batch of resistors has come!!)

Stu
[Touch GSM ROM Development] captainstu72:
http://wiki.xda-developers.com/index.php?pagename=Available IPLs & SPLs

What IPL/SPL do you need for you're phone Bom? I don't know for mine so will be using the USPL ones and hoping that they work!
[Touch GSM ROM Development] bombom81:
Wow Stu, nice link !!! Next question will be, Do I need to load the SPL only via No Ice Debugger, or IPL too? On Russian website, they only mention the SPL. I'll try SPL first :)

This is my device info, a moment before I upgraded to Cooked Rom :

HTC Touch device information - by dsixda

Touch version : Elf

Device ID : ELF010000

CID : DOPOD001

IPL : 1.11.0002

SPL : 1.11.0000

ROM Version : 1.11.707.1B

ExtROM Version : 1.11.707.101

Operator Version: None

AKU Version : 0.2.3

Page Pool : 8 MB

RAM Size : 64 MB

ROM Size : 128 MB

Model No. : ELF0300

Part Number : 99HDM034-00

MCC+MNC : Not found

I'll plan to Load Cooked Rom, guess yesterday was not my lucky because, in my case, before my device died, I used the Old SPL but in unlock mode to load the cooked rom. Yesterday when I finally connected to my device (detected via USB), guess my mistake was I loaded the shipped ROM, so it was failed.

Next, If I'm lucky and I can connect to my device, I'll try to load the Cooked Rom instead.
[Touch GSM ROM Development] bombom81:
STU....I MADE IT !!!!

MY TOUCH LIVE AGAIN !!!!

Tomorrow or at least monday, I'll post the experience :p

I have something important to do with my family tonight and tomorrow.

BTW...I am using the Amman's SPL you gave me, and the SHIPPED ROM, the way I repaired exactly the same with previous experience, only this time I'm using a permanent PCB to make JTAG Circuit !

Thanks for your inspiration, STU !

Without your thread, this thing will never get work !

Thanks Again,

Best Regards,

Bom81
[Touch GSM ROM Development] captainstu72:
Bom, Thats brilliant news :) Well done, I'm really glad that you have managed to fix your elf, its really good to see!

I look forward to your post, in the mean time, its time for me to Solder!

Have a good time with your family Bom :)

And no thanks needed, I hoped to return something to XDA for all the help I have found here, and its nice to be a part of it all.

Stu
[Touch GSM ROM Development] bombom81:
Stu, try to make a Wiggler JTAG circuit for your previous board. Don't estimate first that the board is broken. If I do not forget, you made a simple JTAG Circuit with five resistors only, while the Wiggler seems a good circuit to our processor. Make a permanent one with PCB, hope the board is Ok :)

I'll try to post mine tomorrow! (I'm now on the street :D, on my way to my home now)

Thanks
[Touch GSM ROM Development] captainstu72:
I'm working on doing one that is buffered, should hopefully solve it too. I have it half done, just very manic this weekend and have just got back from football (soccer) so will be soldering away again tonight!

Stu
[Touch GSM ROM Development] bombom81:
Hi Stu, I've compiled the PDF Document and please check if there's something wrong in it.

BTW, How's you're going? On Which step are you right now?
[Touch GSM ROM Development] captainstu72:
Just downloading your guide now but won't be able to see until i get home. I'm still making my pcb wriggler, not had as much time this weekend, and will be somewhat slow today as i have dislocated my shoulder this morning! I hope to get all my soldering done today, its just taking so long as i can only do it when i have my little girl asleep otherwise she'd want to "help” when thats done i can test it when ever i am at home.

Thanks for making your guide bom!

How's your phone holding up? Running as if nothing happened?

Stu
[Touch GSM ROM Development] bombom81:
Yes.running normally.

I've even upgraded it to ONYX 4.9 Ultimate this morning using Aman's IPL 2.27.0002 and SPL 2.28.0000.

Still same at condition before, there's a thin horizontal line below the Start icon (this line come from the taskbar's rectangle which hold the Start Icon) which shown every display. Not very clear, but if you see it through, you'll able to see it. Even in camera view, there's this line, but when I took a picture with the camera, and open the result file, this line does not exist, means that it is just shown on LCD, not in the system.

Actually this is an old habbit of my phone. this is the cause I downgraded my touch before from Onyx to its dumping ROM (because I think the Onyx 4.8 does not suite with my device so the thin line came up on screen) and make the device dead.

But this time I'll let this happen and hopefully, that does not break my LCD. BTW, I've posted this strange thing on ONYX Thread. I'll post the picture once I got my digital camera so you will be able to see it.

Regards,

Bom81
[Touch GSM ROM Development] captainstu72:
I'm glad your phone is working as normal :)

I have now remade my wriggler, now just need to wire it to my device and test it. Hopefully will be tonight if i am not asleep.

When done i'll post some pics of my setup and the outcome.

Stu
[Touch GSM ROM Development] bombom81:
Great Stu ! I'll look forward your test result :) Hopefully you can save your elf too !
[Touch GSM ROM Development] captainstu72:
I think I'm about to kill something!

I can't get it to connect, I have completely rebuilt the circuit, the connections are all fine, it all goes through, but I have nothing! it doesn't want to detect the target!

The LPT port is setup correctly, and is working okay, but it just won't connect!

Did you have to hold power and camera or anything bom? There is no mention in guide. I have tried with and without, and nothing!

Thanks for your help,

Stu
[Touch GSM ROM Development] captainstu72:
Attached are some images if my setup in use.

I'm going to try another unbuffered circuit to see how that goes, and my spare test should hopefully be here tomorrow to see if it is my device or not.

Stu
[Touch GSM ROM Development] bombom81:
Hi Stu,

Sorry to answer lately!

You don't have to push any buttons on touch's board when you're trying to connect with HJTAG.

As long as the JTAG Circuit get the power source (could be from USB Charger of Battery) and the board also get the power source, you will be connected with your board through HJTAG. As long as the HJTAG Software shows the code of processor as the picture in PDF tutorial, it is connected.

Have you checked your JTAG Circuit? because last time, I made a mistake by connected wrongly between IC's pins and JTAG Cables to board.

regards,

bom81
[Touch GSM ROM Development] captainstu72:
I had checked, but I will be doing looking again tonight. I'll be looking at your pics again to compare the circuit to see where mine differs, and to see if I have indeed wired it up wrong, which is a possibility to be honest!

(Time to buy some more stripboard!)

Stu
[Touch GSM ROM Development] bombom81:
Actually if you're looking mine, I'm worry that your head will get spinning around..hehehe...it is too complicated to see :)

Just trace as the wiring diagram of the wiggler JTAG Stu. Hope you'll be success tonight !
[Touch GSM ROM Development] captainstu72:
I'm going to try swapping the IC chip for another tonight as well as I wonder if the one I am using now is faulty or something - luckily I have 2!

And yeah, your pics are a little crazy, but I think I can make it all out which is lucky!

I'm not sure what you can make out from my pics - they're a bit shiny due to the flash on the metal though.

I'll try fixing my circuit tonight, with any luck I can get it working, if my second test device comes, I'll also test on there which should hopefully tell me if it is the board or not - I'm hoping thats not the case though!

Cheers for your input Bom :)

Stu
[Touch GSM ROM Development] bombom81:
Yours is fine, I can see it clearly. I see that your LPT PORT is an extension port from your computer's motherboard. Could this be a problem? My comp's motherboard has a LPT Port directly to it. IMHO, Sometime, a program like HJTAG that using first level of computer's language (assembly or something like that -- I guess) does not work with any extension ports.

I almost suggested to you yesterday to try your JTAG Circuit with your ELF which is working (not a broken one) just to test that the LPT Port is OK and the JTAG circuit you made is OK !!!! But that, would be a crazy suggestion :)

BTW...actually you don't need to solder the cable to + & - port of your touch's board Stu. Just tight it, and put your battery on it, that will press the cable to the + & - port of the battery. Do you use the charger to power up your board? If so, then I would suggest you to replace it with battery and plug the USB Cable to USB Port of your computer. Because once the bootloader is run into Touch's RAM, we'll never get a chance to replace the USB charger with USB cable as it is will shut down the board and we will lost the bootloader that run in RAM and we'll miss a chance to get it connected with computer. (I remember your idea to put on the back cover to board so I can put the battery easily...brilliant idea !!! :) )

Keep trying Stu !!! I'll look forward your good result !!!

Best Regards,

Bom81

PS : It's GMT +7 here! Yesterday I've fall sleep when you posted your result, when I just wanted to answer your posts, the jobs in office got a little messy and needed to take care of them ! LOL...:)
[Touch GSM ROM Development] captainstu72:
Yup, it is a PCI LPT port expansion. I was wondering this too late last night, I am tempted to now go an buy a ExpressCard slot to put into my laptop, as people have had success with that. I won't be doing this until maybe the weekend, as I have now got a third touch (well it is in the post office for me to collect, but I'll be getting that today when I go to vote :P) If the JTAG works on that, with my current setup, I'd suspect that the other board is dead.

When I do a test for the JTAG port though in HJTAG, it does pick the LPT port up and say that it is working correctly - I did have to manually configure it, as LPT 1 and 2 were not getting picked up, that is due to the IO address of my LPT PCI card.

I'm not using the charger to power it up, that was my USB cable plugged into it, at that point I was willing to try anything. I had tried just powering from the battery, but I had no joy with that, got annoyed, and soldered the cables to the + / - pins to see if that worked :P The power is being pulled via the board, I haven't yet tried it with the battery in as well as the cables.

I am also wondering if it is the type of connection I have going into teh LPT port, I am using an LPT PCB Socket, apposed to one from an actual LPT cable - whilst I don't think this make a difference, as it all connects fine, I am going to try again tonight with my last remaining connector from the LPT cable to see if that makes any difference.

I'm going to try a few more things tonight, to see how it goes, and probabaly will end up making a new board from scratch again on the weekend if all else fails.

Thanks for your help Bom,

Stu
[Touch GSM ROM Development] bombom81:
LOL...No Stu, it is me who Thanks for your help!!! ;)

Without your thread and all the informations you gathered (of which, even me could not find before), this JTAG to HTC Touch is only like "told story from past centuries before"! LOL :D

(BTW, yes I read from www.forexfactory.com that UK has Parliamentary Election today! Have a good Vote Stu!)

I'm very sorry to hear that you're facing problem with your board. I wish I'm in England and could lend my computer and my JTAG Circuit to U. Maybe you have friends there who have computer with LPT Port which is connected to motherboard directly? I'm really curious why the HJTAG won't detect it. Have you make sure that when you test the + and - pin of your board and + and - pin of your JTAG circuit with multitester / avometer, it shows volt number around 3.5 V until 4.2V? From my experience before, when I tested the voltage of those pins, and the multitester / avometer shows number around 1v until 2v, HJTAG will fail to detect the processor. Try to read the voltage on board Stu before connecting it to computer.

If not, I kind of start to think that it is very possible that you tried on the broken board. Because I'm sure that if we can find a board that died because ROM Upgrade Issue, this method will work and the HJTAG will recognize the OMAP Processor easily. How about the second board you get? Did the seller say that the Touch was died because upgrading issue?

BTW, keep trying Stu, because it is amazing to feel that hours of reading, learning, soldering, and trying finally paid off !

:D Just to keep up your try Stu, this is the "Frankenstein" who had been wake up by your informations :

Have you know that I've edited my PDF to smaller size with minor changes? I forgot to mention about USB Cable and last setting picture on "No Ice". But I guess you'll know these things although I forgot to mention in PDF as we've ever discussed it before.

Hope you get success with your second Board, Stu !

Best Regards,

Bom81
[Touch GSM ROM Development] captainstu72:
Quick update!

okay, I haven't actually done much, I have battery power though when using JTAG and it detects (my bad).

I don't have time to do anymore right now, but I will hopefully later/tomorrow. Its good that it is working, so far anyways!

Thanks for the help bom!

Edit:

Maybe not, it is not picking it up right,

ARM926EJ-S

0x8000000F

And that would be why no ice doesn't work. I'm going to check I have all pins right, but it is good that it recognises the processor now!

Stu
[Touch GSM ROM Development] bombom81:
Stu...when you find no Ice does not work..try re-detect target in HJTAG. Is the connection still there?

Sometime No Ice does not work as the HJTAG connection is die.

If HJTAG can detect your processor, No Ice should work by loading the HJTAG.dll file. I forgot to see the processor code. Try to see my previous archive, not the last pdf and compare there.

I'll be waiting your result. Thanks
[Touch GSM ROM Development] captainstu72:
I did try re detecting, each time it was fine in HJTAG, but NoIce complained. I will be looking at this again tonight to see what I can do to try and fix this. It is good that I have made some progress though. I have tried to use the RDI Interface, but to no avail with NoIce using the HTAG dll.

From your pics, HJTAG picks up the ARM926EJ-S correctly as 0x0692602F.

Even with that added into the device list, it does not pick it up.

I am going to try some settings on the LPT port itself as well to see what I can do from there, it may be that it still needs some configuration or something.

I'll let you know how it goes.

Stu
[Touch GSM ROM Development] captainstu72:
Okay, So today I have tried some more.

It has now picked my device up as:

The processor ID still doesn't match what I expected, however, I am getting closer to it at least!

However, I still get an error message in NoIce:

I have tried doing a hard/soft reset as you would on the phone, however, I am not getting any Joy. This is making me wonder even more if it is because of this phone is so dead.

I haven't yet opened the second device I have for JTAG, this is going to be my next step. I also have another JTAG wriggler I can use now, so I am going to give that a go too.

Did you get any of these error messages at all Bom?

I'm going to post this in general to see if I can get help there, too.

Stu
[Touch GSM ROM Development] bombom81:
Hi Stu,

Have you ever considered, what is the meaning of the HEX Symbol below the Processor type in HJTAG Visual Screen?

What I mean is that, does your processor must have the same hex symbol with mine? If so, then there's a possibility that your processor is broken. But if it is not, chances is there were different processors that were shipped to Europe and Asia Pasific. May be because I live in Asia Pasific area, so I got the processor with the Hex Symbol I got, while you live in Europe, so you got different processor with mine, but still, those come from the same type : ARM926EJ-S. Hopefully, this difference in Hex Symbol will not matter to us.

The above is the first analysis. Second one is, the processor could be broken. So it can not view the correct HEX Symbol, the NoIceArm even could make it enter debugging state. I am now still trying to find what is the meaning of this Hex Symbol. Is that OK to be different on it with the same processor type?

About the error message on NoIceARM, No Stu, I never get this error message. May be because my hardware is fine, As soon as I get the connection to my processor using HJTAG, and enter the parameter I need to enter to NoIceArm's Target Communication menu, I entered debug state. It's a kind of weird to get such error message like you did.

It really make me curious. Try on your second device Stu. Or, try with the Wiggler Jtag that you bought, may be it'll give you different result.

I'll keep following your progress ! :)

Regards,

Bom

PS:

On Target Communication menu in NoIceArm, make sure the following parameter is correct :

1. Interface : RDI Interface

2. RDI DLL : The location of "H-JTAG.dll" file in your computer

3. Target Chip Environment : Generic little-endian ARM

4. CPU frequency (MHZ) : 200 --> instead of 400 that shown in picture, because I guess 200 is the correct one for our processor. The last one I used is this 200 when I upload my ROM image to my Touch. Your error message also showed the error in TCK Speed. May be, reduce it from 400 to 200 will make different result !

Hope you'll get success with this debugging issue on NoIceArm !!! ;)
[Touch GSM ROM Development] bombom81:
Stu, how are you going? were you successfull to JTAG the other ELF?
[Touch GSM ROM Development] captainstu72:
Hey Bom,

I haven't had a chance, I was planning on doing it all yesterday - but instead I ended up fixing my kitchen sink!

If I have time tonight I will give it ago, I will also have some time tomorrow night to get it going as well, but I'm not sure how long for!

I did try a little on monday, but I still can't get it to enter debug state - but that is why I want to test my second spare elf!

Stu
[Touch GSM ROM Development] bombom81:
Ok Stu..take your time. I thought You decided to not to try again. Sorry to think of that :D

I'll keep watching this thread to see your progress :)
[Touch GSM ROM Development] captainstu72:
Nope, I have not given up yet, I am hopefull that I can get this done. :)