yashsingh1/xdaforums huggingface dataset:
[Desire HD Android Development] descenpet:
i mean boot your phone normally.. connect USB with debugging on. and in cmd window, cd to where your adb is and type adb shell /sdcard/PD98IMG.zip. you should get a string of numbers and letter in next line.. it should be C3D244A9F056E48EE3851A14FF52204C if you get something else, your download is corrupted.
[Desire HD Android Development] shendoz:
I see...

I'm ok right now, maybe is because stock 1.32 PD98IMG.zip ROM that i download from other forum is not compatible with it, so after i re-download this from the address stated by this post, it works, finally it can update ^^

thanks for help ya~

so, if now i wanna install custom rom, need to root or S-off? i'm still a newbie, could u teach me? thanks~
[Desire HD Android Development] descenpet:
you will need s-off to flash roms.. follow this guide http://xdaforums.com/showthread.php?t=857537
[Desire HD Android Development] shendoz:
so which mean now i can change back the sd card i wanna use?

everything related to root, s-off, install custom rom, can do it at the sd card i wanna use in future? am i right?
[Desire HD Android Development] descenpet:
you were using a spare card for goldcard and PD98IMG.zips? actually everything can be done on a single card that you normally use..
[Desire HD Android Development] shendoz:
yup, i'm using the spare card for goldcard, so now i can use back the card that i often using to do the s-off or root?

if i wanna use a custom rom which can save battery life, what custom rom u will recommend to me? and where can i download it? really thank you so much, u helped me a lot ^^
[Desire HD Android Development] kiwiandy:
I get "permission denied" when I enter this command?

# macmini:Downgrade ad6699$ ./adb shell /sdcard/PD98IMG.zip

/sdcard/PD98IMG.zip: permission denied
[Desire HD Android Development] CuBz90:
I will add the MD5 sums to the OP later today
[Desire HD Android Development] bengylow:
hero000,

yes i;ve made the gold card to clear the CID error, that enable me to update to 2.37.762.2. unfortunately, i could not temproot this root before downagrade to 1.32 to get permanenant root.

Please help.
[Desire HD Android Development] CuBz90:
md5sums have been added to the op :)
[Desire HD Android Development] bengylow:
Dear Cubz90,

I was stuck at steps9:

adb push misc_version /data/local/tmp

adb push GingerBreak /data/local/tmp

adb shell chmod 777 /data/local/tmp/misc_version

adb shell chmod 777 /data/local/tmp/GingerBreak

adb shell

-> i received a "$"

./data/local/tmp/GingerBreak

after some execution, it keep giving

[-] sendmsg<> failed?

[-] sendmsg<> failed?

[-] sendmsg<> failed?

[-] sendmsg<> failed?

What is wrong with it ?
[Desire HD Android Development] donow1204:
Downgraded

after 10 hours, got it right.:rolleyes: flashed Android Revolution HD5.22 now.

thank you.:D
[Desire HD Android Development] kiwiandy:
5 gold cards dont work?

I am getting so frustrated with this.

I have made 5 different Gold cards with various different capacities, and manufacturers.

I have done full 32bit format on each.

I have carefully copied the CID from the information provided bt CID helper (even tried using MMC1 as well as MMC2 .. my Phone is running Softbank v2.37.762.2)

I checked the MD5 checksum on the PD98IMG.zip file..

I can step thru all the Commands with no errors... everytime...

unti it tries to reboot.. and every time... "INCORRECT CID"

I even looked here to try and obtain my reverse CID info.. in case there is a problem with Goldcard helper app// but there is no refernce to mmc2 ??

.. i tried to enter cat /sys/class/mmc_host/mmc2/mmc2:*/cid.. but I get a No Such file or directory response.

when I enter cat /sys/class/mmc_host/mmc0/mmc0:*/cid I get a result that is simalair to but not identical to the reversed result I get from Gold card helper for mmc0..

I have done a factory reset on the phone... I have tried everything to make this work...:mad::confused::eek:

###########

AHAHH!!.. Eureka moment..

The sd card that you are using for the goldcard has to be in the phone when you are using GC helper to obtain the Reverse CID from MMC2. I didnt realise this and was running GC helper with another SD card in the phone while I was editing my GC SD card on my PC....hence my CID was always incorrect!...

At least I have learnt a lot about the whole process.. I mus have formatted and mde about 20-30 different attempts at making a gold card!
[Desire HD Android Development] bengylow:
Hey Donow1204,

What have you done to make it success? As you can see in my quote, i was still stuck in steps 9. What was your discovery ? what was your original ROM number before getting into this procedure?

Appreciate your sharing.....

Thank you.

DHD Stucked with 2.37.762.2 NOW
[Desire HD Android Development] CuBz90:
Read throughout the whole post and you should see solutions that have been posted by others

Sent from my Desire HD loaded with LeeDroid + Sence 3.0 using the XDA Premium App
[Desire HD Android Development] bengylow:
Dear all,

I made a factory reset from the bootloader and it works. Then I use the ruu 2.36 to update the rom to 2.36.405.8 , and still can not root or s-off. ....
[Desire HD Android Development] bengylow:
Work after factory reset.
[Desire HD Android Development] JSLEnterprises:
If AND ONLY IF you have successfully been able to downgrade, simply use my method. it works for all 2.36 and lower (confirmed)

http://driphter.com/index.php?topic=3867.0

Im also working on a way to allow downgrading from 2.4X and 2.5X.
[Desire HD Android Development] SQ3.0dotJP:
Gag, I'm frustrated as well. I anyone working on a 1click root for us:'(.
[Desire HD Android Development] sbsshadow:
Hi , I also get this when checking the .zip

C:\downgrade>adb shell /sdcard/pd98img.zip

adb server is out of date. killing...

* daemon started successfully *

/sdcard/pd98img.zip: permission denied

Any ideas ?

Thanks

Stephen
[Desire HD Android Development] sbsshadow:
you are a genius !!!!!

Working !!!!

Thank you !!!
[Desire HD Android Development] g3ismeee:
reload the entire sdk...that's my idea...
[Desire HD Android Development] Manibuche:
Can i downgrade from 2.50.405.2

Hi to all... :D

I would like to downgrade from:

Ver. Android 2.3.3

Ver Sense 2.1

build 2.50.405.2 CL87995 release-keys

software 2.50.405.2

CAN I DO IT? :confused:

PS: I only make the updates that send me from htc! nothing else!
[Desire HD Android Development] Juca:
Could help me???

On Step 9....

I got the message...

...

...

...

[*] vold: 2491 idx: -0001951

[*] vold: 2491 idx: -0001950

[*] vold: 2491 idx: -0001949

[*] vold: 2491 idx: -0001948

[*] vold: 2491 idx: -0001947

[*] vold: 2491 idx: -0001946

[*] vold: 2491 idx: -0001945

[*] vold: 2491 idx: -0001944

[*] vold: 2491 idx: -0001943

[*] vold: 2491 idx: -0001942

[-] Bad luck. Fixed vold?

$

I may continuous to step 10??? Or make all it again???

thanks
[Desire HD Android Development] danny6514:
that's all it takes to lock down your phone. Unless you are already s-off, you have no way of downgrading/ rooting right now
[Desire HD Android Development] Manibuche:
so....I have to wait? Or my phone is looked forever? And If I have to wait, how long time did you think! thanks

ps:I would like to have sense 3!!!
[Desire HD Android Development] CuBz90:
Yes you have to wait for a new method, so many people are working on it so hopefully it won't be long to wait

Sent from my Desire HD loaded with LeeDroid + Sence 3.0 using the XDA Premium App
[Desire HD Android Development] Manibuche:
I love xda....from here to eternity!
[Desire HD Android Development] gingy_uk:
major problem!!!

hi

I had downgraded and rooted and was fine. until I face returning my phone. I am gettin it exchanged for new galaxy s2.

problem is was advised by a developer if only radio s off (not eng s off) and flashed stock ruu would remove clockworkmod unroot and be restored for warranty. but its still radio s off. I could downgrade again obviously to fix this but I need to know this:

I can't find tmo UK build less than 1.75. if I downgraded to a unbranded 1.32 then temp root to s on, if I then used the ruu HTC app on my computer would it flash the stock 1.75 therefore restoring it to former glory?? proper urgent getting galaxy s2 tomorrow!!!

have rooted other phones and restored to original state but never been this complicated

many thanks in advance
[Desire HD Android Development] m11c3:
this method work for build number : 2.37.707.3 CL56018 release-keys ?
[Desire HD Android Development] JSLEnterprises:
@gingy_uk

Just install the 1.75 RUU, do a manual check-in and then update (if there's an update available, there should be a gingerbread upday available since they rolled it out at the beginning of june)

More people that work in frandchised mobile outlets dont know much about things like the bootloader... you'll be fine.
[Desire HD Android Development] Azure100:
Man after i installed the first ROm.. Now when i am trying to update to the second one 1.32 it says Main Version Is Older !! Update Failed!

What to do ? :(

EDIT: Oops Sorry, Didnt read the line properly i wasnt supposed to go to bootloader again till i run the commands in cmd :P Its 2 am and i have been trying it for some time. Tired now lol. Got past it. Lets hope its worth it :)
[Desire HD Android Development] Volsfan:
The hotfile link for the second rom is broken. gives that message about the file being removed. Can someone redo that? I have hotfile premium. Thanks
[Desire HD Android Development] adrianyujs:
you still can use other link, its multiupload... I know you have premium account, but now you have no choice..
[Desire HD Android Development] coolexe:
Hi,

Guys does this method works with my mobile...

India Branded

Device Model: Desire HD

Bootloader Version: 0.85.0024 SHIP HBOOT

Radio Version: 26.09.04.11_M2

ROM Version: 2.37.720.3

Android Version: 2.3.3

CID: HTC__038

Never Mind its working...thx bro.
[Desire HD Android Development] Volsfan:
Well, the hotfile link and the Uploading to links both are expired. I download the file 2 times from depositfiles and both archives are corrupted. Give different md5 sums as well.

Have tried numerous times from the other options as well and having no succces. It has been almost 24 hours since my original post and i have still not been successful at downloading one damn file!! Frustrated to no end!
[Desire HD Android Development] CuBz90:
Unconfirmed Method to downgrade from devices up to 2.50 added to OP :)

Thanks to aswethinkweiz from Android Forums for this guide
[Desire HD Android Development] samuel2706:
Nice thread man!

+1
[Desire HD Android Development] CuBz90:
Thanks.

Gna clean it all up later tonight, make it fool proof

Sent from my Desire HD loaded with HoneyUnity HD using the XDA Premium App
[Desire HD Android Development] Gene Poole:
Any idea if the source code for this fre3vo is available anywhere? I'd like to take a look at it. Searches find a million hits but none of them with source.
[Desire HD Android Development] Volupia:
Great! i've test on a DHD 2.50 S-ON and : Downgrade successful !!!

Very good work :)

Method tried:

i've reboot device because no more message...

Message with "potential exploit"

This (useless for my device apparently):
[Desire HD Android Development] Manibuche:
INFO

HI....This method works with:

Number Build : 2.50.405.2 CL87995 release-keys

Vers. Android : 2.3.3

And if it works...there is a method to go back for warranty?

thanks:D
[Desire HD Android Development] bigchrizzieboy:
hanging for 20 minutes

Hi,

I'm following the instructionc, my CMD seems to hang (already 20 minutes and counting...) Any idea? Already started over (emptied my SD card again and copied the ZIP file again)

p.s. I'm also on the latest 2.50.405.2

My computer is Windows 7 Enterprise (32 bit) and CMD is running as administator

THX

UPDATE;
[Desire HD Android Development] JSLEnterprises:
Its actually based on gingerbreak, but what it allows you to do is scan for the exploit, since it was moved, hence why gingerbreak no longer works, since it doesnt look in different places.
[Desire HD Android Development] JSLEnterprises:
Reboot your device and run these commands.

adb push fre3vo /data/local/tmp

adb push misc_version /data/local/tmp

adb shell chmod 777 /data/local/tmp/fre3vo

adb shell chmod 777 /data/local/tmp/misc_version

adb shell /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF

if scanning those offsets doesnt work, then 20000000 to 2FFFFFFF
[Desire HD Android Development] bigchrizzieboy:
it's going well

Looking good...

Don't want to SPAM the thread, hopefully the screenshots help other users:)

After running:

"apb shell" i'm getting the #

I guess it's rooted! Working great on my fully updated stock Desire HD (2.50.405.2)!
[Desire HD Android Development] evanbigfan:
edit : i done it,u have to reboot ur device then instering the code while its booting(wirte it before and press enter when rebooting,do it more than once till scanning appear)

OMG i done it ,finally,custom rom here i come,super thanks for every one :) :)
[Desire HD Android Development] bigchrizzieboy:
almost there budy!

Yeah, probaly the same (latest stock updated rom)

How to root:

-----------

Press CTRL+C

Reboot your device (let it really start up)

run:

Not really clear in the first post but this works for me, I maked the same mistake as you (see my screenshots and posts up here):D
[Desire HD Android Development] coolcube:
oh ****! it works on 2.50!!!!! yehaaaaaa root root root root:D:D:D:D:D:D:D:D:D:D
[Desire HD Android Development] JSLEnterprises:
now run

adb shell /data/local/tmp/misc_version -s 1.32.405.6

and reboot to bootloader to loadup the super exploitable image, so you can root, s-off, and eng s-off the device.

then update to 2.36.405.8 and run gingerbreak, and reboot. you're updated and rooted.
[Desire HD Android Development] Volupia:
Work with all ROM 2.xx ? or just 2.37+ ?
[Desire HD Android Development] JSLEnterprises:
I would say any gingerbread version, as fre3vo is gingerbreak but without static search locations, instead it searches everything.

so i would say 2.XX
[Desire HD Android Development] Volupia:
Ok thanks, i will try with 2.36 if works
[Desire HD Android Development] bigchrizzieboy:
Alright, runned:

adb shell /data/local/tmp/misc_version -s 1.32.405.6

Done so far:

Rebooted with VOLUME DOWN key pressed, asked me to update: answered YES.

Now it's updating everything...

downloading the 2.36.405.8 rom from: http://www.iloveabath.co.uk/index.php?dir=RUUs/ (see this post: http://xdaforums.com/showthread.php?t=1067953)

Wil flash the 2.36.405.8 ROM and then will run the Gingerbreak APK

http://xdaforums.com/showthread.php?t=1044765

That's it I guess ?
[Desire HD Android Development] JSLEnterprises:
PLEASE POST THE HEX OFFSET THE EXPLOIT WAS FOUND AT ON YOUR DEVICE

ALONG WITH VERSION # OF THE SOFTWARE

(it will allow us to narrow down the searches for fre3vo to find the exploit thus making the process faster and with a command script make it a one click solution)
[Desire HD Android Development] JSLEnterprises:
it does. found in the FFF... series offsets, slightly different location within it though.
[Desire HD Android Development] Michel-NL:
Downgrade went ok I guess.. now trying to root and then flash a Sense 3.0 rom ±'
[Desire HD Android Development] cash27:
doesnt seem to work on 2.43.661

after running adb shell /data/local/tmp/fre3vo

It sems to start

fr3vo by #teamwin

Please wait...

blinking cursor

after 5-10 min i ctrl-c to stop the job, restarted the phone, waited 5 min to finish booting, tried again, same result
[Desire HD Android Development] Michel-NL:
Do it like this: http://xdaforums.com/showpost.php?p=15983487&postcount=277
[Desire HD Android Development] JSLEnterprises:
@cash, since you're a telus user, im pretty sure you're running 2.43.661.1

just do the first set of addresses (F0000000 to FFFFFFFF)
[Desire HD Android Development] CuBz90:
@JSLEnterprises

Thanks for helping everyone, I really don't have time to answer them all, too busy planning a ROM :)

I'll throw (Click) a few Thanks your way lol
[Desire HD Android Development] cash27:
This seems to work:

http://xdaforums.com/showpost.php?p=15983487&postcount=277

Will keep going and provide updates as i go along.

THX XDA! and you too JSLEnterprises

Model ID incorrect.... I think i may have seen something regarding that though

Edit:

Confirmed working on Telus 2.43.661

I did create a new goldcard as my previous error was due to that

Thanks again to all who helped
[Desire HD Android Development] CuBz90:
Page not found
[Desire HD Android Development] JSLEnterprises:
lol, im updating the htc ace toolkit from my driphter.com thread, and editing that method as well.

then I'll finally be able to start updating my Er3BuS sense 3 rom... its so out of date its not even funny. lol
[Desire HD Android Development] cash27:
edited my post with proper url

http://xdaforums.com/showpost.php?p=15983487&postcount=277
[Desire HD Android Development] JSLEnterprises:
@cash, Model ID incorrect is probably because the goldcard wasnt done correctly or you forgot to do the

adb shell /data/local/tmp/misc_version -s 1.32.405.6

command to finish it up :P
[Desire HD Android Development] CuBz90:
I've just spent a couple of hours editing the OP lol

Everytime I think of simpler ways, I edit it lol
[Desire HD Android Development] frank21cn:
Finally!

Will it work on my WWE 2.50?

I will try it tonight!
[Desire HD Android Development] JSLEnterprises:
yes, it is confirmed working on two different 2.50 builds. (also 2.42 builds and the Telus 2.43.661.1 build)
[Desire HD Android Development] rohithksaj:
am testing it on my 2.42...but i need help........

Whats CMD........sorry....I dont know that.................:confused:

and after this command

adb shell /data/local/tmp/fre3vo –debug*

I couldnt understand what to do next........................

sorry.......
[Desire HD Android Development] descenpet:
you are NOT supposed to type

adb shell /data/local/tmp/fre3vo –debug*

you are supposed to type one of these lines(try 1 by 1 until it works for u)

adb shell /data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF

adb shell /data/local/tmp/fre3vo -debug -start 20000000 -end 2FFFFFFF

adb shell /data/local/tmp/fre3vo -debug -start 30000000 -end 3FFFFFFF

adb shell /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF

adb shell /data/local/tmp/fre3vo -debug -start E0000000 -end EFFFFFFF
[Desire HD Android Development] Volupia:
Just Trying

adb shell /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF

Normally it's ok with this command...
[Desire HD Android Development] JSLEnterprises:
I've updated my toolkit for the use of this method to downgrade, making it simpler for everyone.

The Toolkit and 1.32 Image are hosted by us too, so no need to be bombarded by ad's or wait to download from those hosting sites.

http://driphter.com/index.php?topic=3867.0
[Desire HD Android Development] CuBz90:
I am trying my best to make the guide easier to follow. If you have any problems, there are alot of people who can help :)
[Desire HD Android Development] descenpet:
adb shell /data/local/tmp/fre3vo –debug*

this was confusing some ppl, i was going to suggest it then you already changed it.. but now..

adb shell /data/local/tmp/fre3vo –debug /data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF
[Desire HD Android Development] CuBz90:
Ye, I realised that some people would get confused
[Desire HD Android Development] bairouty:
Yesssssssssssssssssss,,, finally my desire hd 2.42.415.1 has been downgraded

thank u guys,,, :D:D:D:D
[Desire HD Android Development] rohithksaj:
adb shell /data/local/tmp/fre3vo

after this command.....it shows please wait........

is there any problem.....i hav been waiting for long ................
[Desire HD Android Development] JSLEnterprises:
go back one page, the answer was already given to you.
[Desire HD Android Development] rohithksaj:
I JUST CANT UNDERSTAND..........i was following the guide

adb push fre3vo /data/local/tmp

adb push misc_version /data/local/tmp

adb shell chmod 777 /data/local/tmp/fre3vo

adb shell chmod 777 /data/local/tmp/misc_version

adb shell /data/local/tmp/fre3vo********* this is the step made me to wait

adb shell /data/local/tmp/misc_version
[Desire HD Android Development] Dashaiva:
Approx how long does it take for each of the blind scans? I'm using the Ace toolkit and it's been sitting here:

613 KB/s (9796 bytes in 0.015s)

15 KB/s (15837 bytes in 1.000s)

fre3vo by #teamwin

Please wait...

Attempting to modify ro.secure property..

fb_fix_screeninfo:

id: msmfb

smem_start: 802160640

smem_len: 3145728

type: 0

type_aux: 0

visual: 2

xpanstep: 0

ypanstep: 1

line_length: 1920

mmio_start: 0

accel: 0

fb_var_screeninfo:

xres: 480

yres: 800

xres_virtual: 480

yres_virtual: 1600

xoffset: 0

yoffset: 0

bits_per_pixel: 32

activate: 16

height: 106

width: 62

rotate: 0

grayscale: 0

nonstd: 0

accel_flags: 0

pixclock: 0

left_margin: 0

right_margin: 0

upper_margin: 0

lower_margin: 0

hsync_len: 0

vsync_len: 0

sync: 0

vmode: 0

Buffer offset: 00000000

Buffer size: 8192

For over 5 minutes....
[Desire HD Android Development] descenpet:
what exactly did you type for that step?
[Desire HD Android Development] rohithksaj:
yah.... i got it...............

little tensed.....

i didnt type any.......i just pressed enter b4 reading next................

thanks for ur helping mind
[Desire HD Android Development] JSLEnterprises:
lol, patience young grasshopper, read all, dont skim through :P
[Desire HD Android Development] JSLEnterprises:
Reboot your device, let it load up,

make sure debugging is enabled

and start from scratch

adb push fre3vo /data/local/tmp

adb push misc_version /data/local/tmp

adb shell chmod 777 /data/local/tmp/fre3vo

adb shell chmod 777 /data/local/tmp/misc_version

adb shell /data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF

After the exploit is found, it may kill the adb process

disconnect your device, and plug it back in.

then continue...

adb shell /data/local/tmp/misc_version -s 1.32.405.6

adb reboot bootloader

note: I changed the hex address start since all but Volupia's device have found the exploit at either FBB6D400:C00, FBB6B000:1a00, or FBB80000:1000

The more addresses posted of a successful exploit can further decrease the target range thus speeding up the process.
[Desire HD Android Development] Dashaiva:
Fantastic, I did all of that line by line and it worked right away. Many thanks!
[Desire HD Android Development] JSLEnterprises:
dont forget to click thanks :P
[Desire HD Android Development] rohithksaj:
it keeps showing invalid argument.......any problems ???????

it didnt even start the scan....or even reboot the fone...............:confused:

adb push fre3vo /data/local/tmp

adb push misc_version /data/local/tmp

adb shell chmod 777 /data/local/tmp/fre3vo

adb shell chmod 777 /data/local/tmp/misc_version

adb shell /data/local/tmp/fre3vo*******

i am struck with this step................

i just used 5 given lines after this command.....but keeps showing invalid argument...........
[Desire HD Android Development] JSLEnterprises:
Boot into bootloader, and do a factory reset (back up your data first).

Once your phone has loaded up skip through setup and enable usb debugging.

then follow this: http://driphter.com/index.php?topic=3867.0
[Desire HD Android Development] rohithksaj:
will the factory reset delete all my apps+data ???????
[Desire HD Android Development] JSLEnterprises:
yep. you can store your contacts on your sd by exporting them.

your apps will be restored when you log back into google after installing a rom (after the root process, installing rom manager, and installing cwm recovery)
[Desire HD Android Development] rohithksaj:
what about apps in fone memory ????

is factory reset is unavoidable ???????

i didnt see any instructions to do factory reset in ur thread ..........