yashsingh1/xdaforums huggingface dataset:
[HTC EVO 3D] TrevE:
the diag drivers are in post1, they should be for both htc modem and htc diag port.
[HTC EVO 3D] psyko_chewbacca:
Well I tried it but it won't find anything. I've looked into the inf file to validate the VID and PID of the drivers against those of my phone and they both match (VID 0BB4 and PID 0C88) but the difference is that after those 2 values there is a MI_02 in the inf file as opposed to the phone ID which is MI_03...

I tried editing the inf file to change the MI_02 value to MI_03, it install fine but in QPST config or in any other tools (like CDMA workshop or DFS tools) no phone can be found.
[HTC EVO 3D] nick cannon:
there is a special way to install drivers if your using a 64bit os i too still get no phone in qpst
[HTC EVO 3D] TrevE:
there should be two ports that get turned on, both you need to manually point to the same driver and tell windows its correct. one port will be HTC modem, this is AT command interperter. another port is HTC DIAG, thats the com port you need to configure and use in QPST/QXDM
[HTC EVO 3D] nick cannon:
i got the port to read in qpst but it shows up as no phone
[HTC EVO 3D] AdamOutler:
hey, I don't care to read the entire thread because I don't own one of these devices. We are doing something very similar to the Samsung Captivate. If you can dd a copy of the partition from the phone, then you can use root to dd it back onto the phone.

The System partition is known as "FactoryFS" on our devices. You should probly know that. This partition can be copied off the device and mounted as an EXT2 or EXT4 partition. By doing this, you can modify it and create the first EVO3D custom ROM.

in the phone settings (special key combo in dialer) you may have an option to change the "radio shell" from MODEM to the UART device. Uart will enable alot more possibilities.

From what I'm seeing here, this has been done on Samsung devices, however Samsung has a few levels of security to prevent this... On Samsung devices, you have to have a special resistor inserted into the microUSB port while booting the phone, then you can receive RX and TX over the D+ and D- lines. Samsung locks out the shell... however we can get into it by entering the SBL prompt from UART and changing some global variables.

This may be something that helps you out. If you'd like some more information, see the topic "Let's Save Some Bricks".
[HTC EVO 3D] ckoadiyn:
Anything new going on with this?
[HTC EVO 3D] TrevE:
i bought a revskills license and am waiting to hear back from the revskills guys on how we can get OEMSBL and other things dumped still....
[HTC EVO 3D] AyoJake:
sorry if this has been posted but what would this do for us?
[HTC EVO 3D] TrevE:
download mode will be a permanent brick fix and future downgrade method. You can write OEMSBL among other things. i actually got a PM from someone today who bricked by reformatting mmcblk0 instead of 1 for a2sd and went to downloadmode. if we had this it would have saved him from returning it.
[HTC EVO 3D] ckoadiyn:
Nice mind sharing the cost? sure community will donate if need be...lol
[HTC EVO 3D] TrevE:
http://psas.revskills.de/?q=payment

i bought revskills STD (30 eur). i know viperbjk jumped in here and said hed connect to a phone in download mode and get us support, i have a valid license now, just waiting to try to get some of his time....

id love to have this finally as a guide and not a WIP. im sure itll come in handy more and more going fooward with bricks, downgrading and more
[HTC EVO 3D] xHausx:
Has anyone been able to find anymore documentation on this? I've been trying to find out exactly what triggers DL mode but haven't had much luck so far. I also looked through the kernel source to see if there was a way to trigger it, and the other modes, over usb like the hummingbird processors (long shot I know) but didn't see anything.
[HTC EVO 3D] TrevE:
my guess is resistance between the two pins. they look liek the MODE pins. i actually found once i trigger download mode by hitting those two pins i can take the wires off and it stays there, so im defiantly thinking resistance on turn on triggers the port to open through the mircro usb port.
[HTC EVO 3D] xHausx:
Do you know about how much is needed? I wonder if it can be set to different modes by adjusting the resistance
[HTC EVO 3D] Amanchik:
Hmmm today same thing happened to me. I was reading tutorials on how manually reformat my sdcard on windows xp machine. So this is what happens by copy-pasting and trying to get A2SD. Should I just return my device?
[HTC EVO 3D] TrevE:
thats what i was thinking man. most qualcom chips have 3 modes from what i was reading, weve only found 2 so far. I tried to find resistance of my board but i suck with a meter, maybe someone else can help.

yeah for now your screwed. we really need to get revskills to get us help dumping.
[HTC EVO 3D] sgt. slaughter:
Maybe Popular Nobody could shed some light privately or in here on the modes with the chips? Dunno if he works for Qualcomm or not but he had a pre production evo3d and has that giant qualcomm in his sig, on top of being very knowledgable about some inner workings at sprints network.

worth a shot asking him if you havent i guess.
[HTC EVO 3D] AdamOutler:
I thought you hackers might appreciate this... http://xdaforums.com/showthread.php?p=16403783#post16403783 We activated a special download mode for the Captivate which we are still working on firmware. It requires a hardware modification which is specific to our processor, but after that the phone is a development platform. Might be worth looking at the datasheet for your device processor.
[HTC EVO 3D] xHausx:
Great job on the write up, very interesting thread there. I'm curious how you were able to find what to mod in order to make it act like that though?
[HTC EVO 3D] AdamOutler:
It was a long process...

Using the UART from the Application Processor revealed "OM=0x9" as the boot mode..

Read about OM in the datasheet and found out that it can trigger different IROM boot modes and the OM values are controlled by OM Registers.

Read up on the OM registers and found out that they are hardware controlled by 6 pins called xOM0, xOM1........xOM5.

Did some more reading and found out that we are running a stock configuration of 001001 and if we change that to 101001 then it would activate download mode.

Asked for a "Busted Phone" on the forums for research to help out the community. Someone sent in a junk phone...

Used a heat gun to remove the ball soldered processor from the board

Used the datasheets to map out the OM registers to the processor and mirrored that to the phone then began tracing lines on the busted phone..

btw.. this is from a snapdragon processor, not a hummingbird.
[HTC EVO 3D] Ostthug2k:
when i select MFR Kernel i connect it to my pc and get DIAG mode and a HTC modem in my device manager. Even though Diag mode is enabled and i see the com port on my device manager i cant seem to read the phone with Rev SKills or CDMA workshop. do i need different DIAg drivers?
[HTC EVO 3D] cutthroatamft:
:(

I may be a complete tard for even trying but I got VERY impatient and attempted to use a hacked off usb to trigger the Download mode....Result = Brick..

:(

On a side not I now have access to Download mode.
[HTC EVO 3D] psyko_chewbacca:
What do you mean by hacked off usb? I would like to work on enabling download mode but I don't want to get the same result as you...
[HTC EVO 3D] cutthroatamft:
I cut the end connector off of a usb that went to an ipod. I basically stuck them in the holes to see if the voltage might trigger the download mode.

I was able to restore my phone however. After days of being non-responsive, I plugged it to my computer with the sd card out. it went into Download mode after about 5 minutes. I installed the drivers and loaded Qpst (software download) hit reboot phone on one of the tabs and it went into recovery. The screen was still black but it listed recovery as the mode in ADB. I then sent 'adb reboot-bootloader' and I got hboot back. From there I ruu'd re-rooted and pushed CM recovery. Back to about 75% now because I still have random reboots.

To all those impatient like me....wait to get a ttl module, it's the only thing we know works as of now.
[HTC EVO 3D] psyko_chewbacca:
Yeah well maybe it's the +5V signal sent that the phone did not like...

TrevE, your USB-TTL module has a jumper to select 5V or 3.3V RS-232 levels, is the jumper on 3.3 or 5? When the module is plugged into a usb port, the RXD line should be 1 in standby (+5V or +3.3V depending on your setting).

Could you take a multimeter in DC voltage measurement and probe de RXD line? This could tell what voltage is safe for use with the EVO 3D. My guess is that 3.3V is used here.

EDIT: Please probe de RXD line when it is floating, ie not connected to anything.

EDIT2: I did notice that there is no jumper on the voltage selection pins... What's the default voltage level then?
[HTC EVO 3D] TrevE:
sorry guys been a bit preoccupied. i suck with electronics, i cant tell you_how_ it works but it does. i got my multimeter and board here, whatcha need me to do/
[HTC EVO 3D] xHausx:
Can you check the resistance between the two wires you are using to put it in to download mode? I would try it one way and then switch the wires around and check it the other way in case there are any diodes in there. I don't remember which exact ones you were using but you may wasn't to check to see if there is any voltage being supplied to it first.

Edit: after taking another look at your picture I would try measuring the volts DC with the negative lead on ground and the + on rxd. If that doesn't show up as anything try measuring the resistance with the + probe on the grd and the - on the rxd and vice versa.
[HTC EVO 3D] TrevE:
i suck with a meter so i think im doing this right, but it just reads 1

http://i.imgur.com/z3NST.jpg

I found all i need to do is touch the wires to those pins and then i can take it off, leaving them connected isnt nesicary, so its gotta be some kinda resistance right?

*Edit* actually flipping them around did it. the lights came on the board just like when i hit download mode

pic :

http://i.imgur.com/14AH5.jpg
[HTC EVO 3D] xHausx:
What was your meter set on there? It's just out of view of the camera
[HTC EVO 3D] TrevE:
it read -9.04 at 20k ohms
[HTC EVO 3D] xHausx:
K, you're around 11 kOhm then. Does it stay the same if you switch the wires around?
[HTC EVO 3D] TrevE:
if i switch the wires around nothing happens, only when i have the wires like in pic2 does it work. im guessing you could just get a resistor hook it up get download mode,i proably just got lucky having right resistance..
[HTC EVO 3D] xHausx:
http://xdaforums.com/showthread.php?t=1206216

Nioce, we've been slacking off too much here since we got s-off lol
[HTC EVO 3D] xHausx:
I picked up a 10k resistor but it doesn't do anything. Were you ever able to measure the resistance there with the polarity flipped?
[HTC EVO 3D] TrevE:
http://i.imgur.com/14AH5.jpg

http://i.imgur.com/z3NST.jpg

dont you mean like i did back here? with it flipped it just says 1 nothing comes up.

guess we have been slacking too :p just read that other guys post lol
[HTC EVO 3D] nunyabiziz:
Shouldn't ground be connected to get the correct reading on either leg?
[HTC EVO 3D] TrevE:
i have no clue how to use a meter right :p just tell me what to plug in where and ill do it.
[HTC EVO 3D] nunyabiziz:
black on ground of board/pc and red on one lead, test. Again on other lead.
[HTC EVO 3D] TrevE:
the bottom pin on board ive been hookig up is labled GND. its the only marked gnd point on the board.

http://i.imgur.com/eYvgq.jpg
[HTC EVO 3D] nunyabiziz:
yes that looks like a standard usb pin layout. So ground should be ground.
[HTC EVO 3D] TrevE:
i guess thats what im confused. those are already the pins im using for download mode and what i was probing if you look at the pics above?
[HTC EVO 3D] nunyabiziz:
Sorry i reread your first posting again and it clearly stated that you are only using ground and rx. Its sounds like ground is triggering download mode.
[HTC EVO 3D] nunyabiziz:
Have you tried, once in download mode switching ground to tx? I cant see how the host is sending data to the phone.
[HTC EVO 3D] TrevE:
It opens up the port on the mini usb plugged into the PC. I found once download mode is hit i can take those wires off and it stays in download mode. It must just be the right resistance on turn on or something triggers it.
[HTC EVO 3D] xHausx:
It can change depending on how you've got the meter connected to it. If you test it with the black wire on the gnd and the red on the rx you will probably get a different reading than if you had the black on rx and the red on the gnd.
[HTC EVO 3D] TrevE:
totallly get that, but i still go back to - http://xdaforums.com/showpost.php?p=16745727&postcount=332
[HTC EVO 3D] cutthroatamft:
Hey guys can you check the Voltage on your battery? My battery doesn't seem to provide the correct voltage any longer and if yours is providing anything consistently around 3.79v - 3.80v I think the pin holes are directly linked to the battery....which makes me think HTC may have been truthful in the email response from earlier....

I have a battery in route from HTC so I will know by Monday if my battery is indeed toast or the phone is fried.
[HTC EVO 3D] xHausx:
Gotcha, I misread your post earlier. Looking at your settings that should be about 200 Ohm then, I also got a potentiometer that can go up to 10k so I'll see if I can dial it in to once I get home.
[HTC EVO 3D] silvaadams13:
the drivers listed don't seem to work for MFG KERNEL. Once I connect it and try to update the device with the drivers in post 1 it gets nothing
[HTC EVO 3D] -Mr. X-:
judging by his meter its 9.04K you will need to use.

not sure where you got 200 ohm from
[HTC EVO 3D] -Mr. X-:
I did a bit more tinkering and was chatting with trevE and we have deduced that the resistance is neglectable. what he is doing is sending 3.6v to the mode pin which tells the device to boot into factory mode. the normal voltage is 1.8v which is normal mode and test mode we have not found yet.

i am also trying these methogs on my desire. as it has the same holes but the voltages are different when i probe them. basically it's like setting a logic flag of download mode on or off on is 3.6v+/- and less than appears to be regular boot.
[HTC EVO 3D] xHausx:
I'm going by the other picture there and what his multimeter is set to, it's showing a value of One while set to 200 Ohm. I'm used to having a meter that scales automatically though so I guess I could be reading it wrong though

isn't 3.3V what signals the USB port that something is plugged in? Maybe try hooking it up to the TX pin instead of the RX one to see if it shows up as something different.
[HTC EVO 3D] xHausx:
@TrevE heard any good news back from rev skills yet?
[HTC EVO 3D] TrevE:
no i havent :((((

i bought a revskills license, sent viperbjk a PM but dont want to seem needy.
[HTC EVO 3D] xHausx:
so no luck so far with 19kOhm or 200Ohm and +3.3V trips my power supply w/o changing anything on the phone. I did notice the phone is unable to run and constantly reboots when the outside hole is connected to an earth ground though.

My guess is it's something the TTY modules doing that's causing it go into download mode. Both pads are at 1.3V and even though connecting the outside one to earth ground resets the phone grounding it out on the phone's ground doesn't do anything. Since hooking up the 3.3V line from a spare power supply of mine shuts down the PSU it probably means it's not such a good idea to try that. Although I still may try sharing the ground with my phone or PC (since it's plugged in via USB) and then hooking up the 3.3V line
[HTC EVO 3D] xHausx:
Finally got it, turns out all you need to do is ground the pin farthest from the camera to metal on the sd card slot. Now to figure out what's next...
[HTC EVO 3D] CrippleB:
Now that I have the eng hboot how do I go to another hboot? Just a little scary that the eng can cause bricks if things aren't done correctly.
[HTC EVO 3D] xHausx:
You can flash it the same way you do any other PG86IMG. As long as you're careful with the fastboot oem commands you should be alright with it though.
[HTC EVO 3D] TrevE:
nasty man :) sorrry been sidetracked with other stuff, just saw your PM though.

Now we need to get revskills time. I have a license, we just need viperbjk's time.
[HTC EVO 3D] viperbjk:
Guys,

sorry for leaving you alone for the last few days, but I was heavily reversing

some ti bootloaders and had some issues with denial of service attacks on my hp. I'm now back to the qc, ready for making the memory partition dump working.

Trev, gonna talk to you soon.
[HTC EVO 3D] TrevE:
freeking awesome man, cant wait to begin. I hitcha up, whenever you got time my phone is yours

real exciting stuff guys :)
[HTC EVO 3D] Matt1408:
So I have a bricked HTC Sensation. It won't boot to recovery and I'm only able to get it in download mode. I'm able to detect the device in QPST but I have no idea what I'm doing.

You mentioned how it might be possible to fix bricked phones using Revskills, hows that going?
[HTC EVO 3D] TrevE:
viperbjk from like 2 posts above is the revskills guy, he hit me up on gtalk so its in motion :)
[HTC EVO 3D] sst123:
How are you doing with revskills?
[HTC EVO 3D] powduh09:
Anything new happening on this wip? I hava an evo 3d that was bought from a 3rd party vendor who updated me to 1.50 hboot before shipping, so a downgrade method would be awesome...
[HTC EVO 3D] ckoadiyn:
Nothing going on with this anymore?
[HTC EVO 3D] clip3009:
unbrick possible?
[HTC EVO 3D] armagadon:
help plz

y htc sensation does not turn on at all,only a dim light on the screen,nothing else,i cant access the boot loader also,so icant turn the phone also in the safe mode,my phone is rooted because i wanted insall arabic support for my phone,so im using a custom full rom based on 2.3.5 android,and i used a custom kernel too,i used the same rom and the same kernel on my brother sensation and it work great,i dont have this problem suddenly but after more than one month from the time that i installed the rom,i think it is a boot problem,if u help me to push a new boot and kernel to the phone(the phone does not turn on,but the computer reconize it like:Qualcomm HS-USB QDLader 9008)i used the odin software used for samsung phone it dosesnt work

thank you a lot!

chadi_aziz@hotmail.com
[HTC EVO 3D] AlexFlexy:
There are no news from revskills?
[HTC EVO 3D] Picard75:
Has there been any work done on the GSM side for this?

I now have a bricked GSM version and have installed the drivers for QHSUSB_DLOAD.

Would love to know if there are known methods to recover/reflash the phone.
[HTC EVO 3D] daktah:
i have a totally jacked evo due to the cwm sd format bug and a jtag board on the way

the thing is i have no idea how to use it but im willing to be a test subject to fix this thing

right now im deployed to afghanistan so itll take a little while to get here but when it does im looking forward to testing and fixing this thing

edit: finally got my jtag! waiting for how to use it though
[HTC EVO 3D] clip3009:
Send it to htc
[HTC EVO 3D] NYCguy2020:
Jacked up my Sensation after a firmware update.Any hope for a fix or it's basically off to HTC warrant department??!
[HTC EVO 3D] kthejoker20:
usbjtag is your friend.
[HTC EVO 3D] crashkid:
Bricked Sensation XE after S-ON

Hello guys,

i'm in really big trouble with my new sensation xe.

As mentioned in the title i have bricked it after trying to re s-on my phone, the troubles started with the fact that i did not reflashed with a new stock rom but i hard-resetted the old one (that was still stock). I had successfully reset the CID to HTC__203 (this is the non branded sensation xe europe version right?) and then after a restart in fastboot i did "fastboot oem writesecureflag 3", command that went wrong becouse after a restart my sensation is completely bricked, whatever button i press the display remains black and even if i connect the battery charger the charge status led remains off.

Here are the last commands before the brick:

The phone then was recognized as QHSUSB_DLOAD and after installing QHSUSB_Drivers_(x64) i see it as Qualcomm HS-USB QLDoader 9008 (COM6).

Now i read in various threads that in this state the phone can be managed by using QPST, so i installed it, the phone gets recognized as Q/QCP-XXX (Download) but i have no idea on how to proceed.
[HTC EVO 3D] pirlano:
any news? i'm getting the same error :(
[HTC EVO 3D] xHausx:
You must have an unmodified stock bootloader in place before setting the secure flag. If you have an eng one or once that's been modified so that the signature is invalid it will refuse to use it and effectively brick the phone. Hopefully we'll be able to do something with download mode soon but for the moment I'm not aware of any way to recover from it.
[HTC EVO 3D] RussianBear:
hey, all! thanks for a great thread. has any progress been made?

would htc sensation's download mode be similar to access?

trying to make some advancement with the bricked "qhusb_dload" mode phones.

http://xdaforums.com/showthread.php?t=1468791 (last few pages)
[HTC EVO 3D] RussianBear:
hey, guys! (again) we're trying the grounding trick to put the sensation into download mode. grounding one of the pins just restarts the phone without going into the dl mode. is there anything else that needs to be done? does the phone have to have a root + stock rom or aftermarket?
[HTC EVO 3D] misiolin:
Guys, do you think that I can repair problem with my screen in Download Mode?

Here's the photo:

And here full description of my prolem: http://xdaforums.com/showthread.php?t=1515945
[HTC EVO 3D] RussianBear:
your lcd is probably a goner. the digitizer might still respond (you hear stuff and feel the touch), but the lcd itself is dead. a cable might've gotten loose as well. you'll need to disassemble it anyway, so check that first.
[HTC EVO 3D] neo4uo:
I bricked my Evo 3d in s-off I believe. I now have the phone in download mode according to QPST, am I able to flash an Hboot from QPST or am I speaking redundantly. I have went over this forum, but it is above me...lol. I am just trying to avoid sending my phone off and got the time to tink with it. If I am way off base I am sorry to bug you guys/gals great minds at work.
[HTC EVO 3D] neo4uo:
Another thought I had is if someone can make a backup of there phone image thru qpst in the hex or hxb file format, I could try flashing my phone with that since the phone is in download mode communicating with qpst I dont know if that has been tried or someone would be willing to get a backup of their phone with qpst and send it to me.
[HTC EVO 3D] TrevE:
i beefed up goldcard instructions in post1. i tried making the card and it made it ok, but i didnt try downgrading or anything. now goldcards tend to work in a buncha devices so we could get lucky or it could do nothing. basically i want to try everything to see what limits we can push with stock stuff. This kinda informatiion were looking for will def help even for future use they patch newer ruus against exploits or something.
[HTC EVO 3D] damageless:
Best thing to do right now is to figure out the limits of our phone. What works and what doesn't. TrevE has already done most of the research and put it available but what we need is people willing to try stuff out. Read everything and try to understand where the progress has been made and then try some things out yourself and post. Right now we're hoping for a radio dump from the eng build so we can flash that along with hboot and see if it bricks. Otherwise like TrevE said we can try zeroing everything out of radio and everything else besides hboot, flash eng hboot and see if we can get S-Off and then rebuilding everything. Right now those seem like the best bets.

Edit: TrevE, when did you get more posts than me dangit
[HTC EVO 3D] lawnguy:
As soon as I get outta the shower I will do the 1.13-1.11 for you. Gimme 20 minutes.
[HTC EVO 3D] damageless:
If someone can get us an eng radio that would be super helpful :D

It's semi-possible we could flash the radio from that and not brick with the eng hboot but nobody has tried yet that I know of.