yashsingh1/xdaforums huggingface dataset:
[HTC EVO 3D] TrevE:
posted from the shower, now thats dedication

and damage :D got 2 years on ya lol i usually am lurking but its time to bust outa the shadows again and get this crap going
[HTC EVO 3D] sgt. slaughter:
Nice lookin forward to you guys stuff again!

back on topic though, I might have an extra 3D willing to brick as its getting sent back for exchange anyway. might have free time tonight or tomorrow before I send it back if needed. ill just keep an eye out on the thread here
[HTC EVO 3D] Amanchik:
Hey I will try making goldcard tonite. I rather brick my device trying to contribute, then waiting for "gods" to release noob proof version of s-off.
[HTC EVO 3D] lawnguy:
goldcard helper

no results found on market? Gotta link or copy?

Nevermind i got it...lemme put this together then I will post....
[HTC EVO 3D] AyyRayy:
I made a gold card two weeks ago and I had no success
[HTC EVO 3D] lawnguy:
ok gold card is made is there a copy of 1.11 as an .img floating around for me?

DLing now, do i just put it on the same card and flash?
[HTC EVO 3D] TrevE:
ya just try to put stock signed image as PG86IMG.zip on root of a sdcard. see if it flashes or you get version failed.

if i get another confirmation on no go ill cross it offa main post
[HTC EVO 3D] Virus:
HOPE YOU GUYS ARE READY when s-0ff comes cause Synergy-Evo3d is gonna be HAWTTTT :)
[HTC EVO 3D] Virus:
and wtf is this TrevE you not in irc your actually posting on xda pfffff
[HTC EVO 3D] TrevE:
hell yeah lets derail this thread. haha ive learned more about how all this crap works in the past few days then i have in years tinkering with android. next dconfig will be nasty ;)

anyway back on topic im going to try throwing every type of image at this phone tonight. somethings gunna give
[HTC EVO 3D] lawnguy:
it didnt do anything that i can tell. Went to bootloader, it tried to read everything but never went to a load bar on the right?
[HTC EVO 3D] TrevE:
did you name the file PG86IMG.zip all caps on root of sdcard? it sounds like it didnt find the file on the sdcard
[HTC EVO 3D] TMartin:
Definitely ready for S-OFF.....but I've got my own work brewing!!
[HTC EVO 3D] Bentenrai:
Be out of work in just aunder an hour, will give it a shot if no one beats me
[HTC EVO 3D] lawnguy:
Hold on lemme look again...guess i gotta start over gotta format card....

Rebuilding card, have it in 5mins or less
[HTC EVO 3D] lawnguy:
its reading this time hold on...

FAILED. System older than current.
[HTC EVO 3D] RussianBear:
not gonna help. if you enjoy reading, see this thread: http://xdaforums.com/showthread.php?t=1522351
[HTC EVO 3D] E:V:A:
Did someone actually figure out what those "mystery ports" was connected to?

I mean, they should be connected to the processor, eMMC or PMIC or some specific (test) point on the Evo 3D schematics...
[HTC EVO 3D] guitardoc64:
I believe that one is used in the wire trick s-off.
[HTC EVO 3D] francois90:
need serious help

---------- Post added at 08:51 AM ---------- Previous post was at 08:50 AM ----------

[/COLOR]my device is sony xperia miro iwas installing new rom but i think i messed up the partitions my device is totally dead .. now when i connect it to pc my pc detects it as Qualcomm HS-USB QLDoader 9008 and the only program recognizes it is QPST (phone in download mode but the problem is that it requires files i can't find online

such as :

-flash programmer file name

-boot image

-load xml def

-load patch def

or simply a QCN Dump file instead of all this

any help would be appreciated ... thanks in advance
[HTC EVO 3D] Flashalot:
This thread is way to old also your phone is hard Bricked meaning there's no coming back you will have to get a new one or JTAG it
[HTC EVO 3D] francois90:
ok thanks man
[HTC EVO 3D] TrevE:
kk well if goldcard was made right that sucks. crossing off, thanks for trying.

im packaging a buncha stuff up now, i hope i wont be #2 into obrick club
[HTC EVO 3D] lawnguy:
what else can i ginea up, bricks no big deal....
[HTC EVO 3D] TrevE:
http://xdaforums.com/showpost.php?p=16050429&postcount=16

this is what im going after now, trying to get something to change out by swapping either part or all of innards of ruus around.

i might even try write zeroed out images for _everything_ except for hboot and see if i can rebuild from ground up. i would never want anyone else to try this though. like i said, something somewhere is going to give.
[HTC EVO 3D] lawnguy:
when i insert in hex editor, all that I insert is red then I hit save. when i unchecked read only i never got asked about size?
[HTC EVO 3D] Tiffany84:
What's going on V? Nice to see you around. Definitely ready for s-off and synergy. Miss running it on the 4G.
[HTC EVO 3D] lawnguy:
im mostly a lurker so some may have to be explained but lets get it on. i will hang in there if you want...just wanna help!!!
[HTC EVO 3D] lawnguy:
so just drop the 1.11 .img in the 1.13 PG86IMG and flash?
[HTC EVO 3D] Bentenrai:
On the way home now to start digging
[HTC EVO 3D] lyon21:
Have you tried talking to kholk from the atrix and g2x? He did a lot of work with signatures and encryptions on the atrix, which is locked down a lot more than this. Maybe he can be of some assistance.
[HTC EVO 3D] xHausx:
I don't have much time atm but just wanted to add a few things that may help. If someone is able to get an eng device an alternative way to dump a partition is with fastboot. Just use 'adb reboot bootloader' to get to it and then run 'fastboot oem saveprt2sd <partition> <filename> -a', the hboot for example would be 'fastboot oem saveprt2sd hboot hboota.bin -a'. I would do it with and without the -a flag just in case it is/isn't needed for that partition. Also, to get a list of the partitions with the eng hboot use 'fastboot oem listpartition'

In regards to downgrading, I believe a solution has already been found if it were needed; at the moment it really isn't of much use to us though.

One thing I've been looking at is trying to get fastboot to load an alternate radio img, there is a fastboot command that I think can be used to temporarily load a modified one and from there it may be able to clear the security flag.
[HTC EVO 3D] Bentenrai:
I'm gonna give that a shot and make a dump of ALL my partitions and host them via FTP for quick access for the devs here.

Meanwhile, looks like you guys have made some headway. I'm gonna do some reading on a few subjects regarding fastboot and also work on the dump of my device (I'm running 1.13.651.7, ENG).

If there's anything else I can do or packages I can try to flash, let me know. PM if necessary.
[HTC EVO 3D] TrevE:
what was the solution for downgrading? and fastboot wouldnt even take the same image for me, everything through signature fail.
[HTC EVO 3D] Bentenrai:
Weak.

(10char)
[HTC EVO 3D] xHausx:
Can you check to see what hboot version you have?

The firmware version is stored on the misc partition which I believe we have access to. The update will still need to be signed though.

The fastboot command in question is, if I remember correctly, fastboot oem load_emmc_modem or something like that
[HTC EVO 3D] Bentenrai:
Edit: shoar one sec. got some unexpected company so im half here

Edit 2: HBOOT-1.40.0000

...Great

Edit 3: Saying bye to company, bout to get to work. </distracted>
[HTC EVO 3D] xHausx:
You'll most likely need to use the dd method to dump the phone but you never know, it's worth a try.
[HTC EVO 3D] TrevE:
hey guys, right by our volume up buttno theres two exposed contacts with holes in the back cover so they can be accessed on the board. Im trying to rig a multimeter up, does anyone know what these are foor?

PLEASEPLEASEPLEASE

these are from someones evo 3d teardown, cant finid original source now
[HTC EVO 3D] guitardoc64:
Someone posted the schematics. I have a copy and ill look it over to see if I can find out what they are. I'm assuming some sort of test points for checking voltage, signal or data. I'm an electronics tech and work on all kinds of digital gear so I hope I can help figure it out.

Sent from my temp rooted Shooter!
[HTC EVO 3D] Zarboz:
http://db.tt/DFoKgNH

Link to the schematic
[HTC EVO 3D] TrevE:
if you look at the picture below, it looks like its on the back side of processor

http://tucci999.imgur.com/evo_3d_teardown

ok ive edited this like 100 times now. its next to the samsung chip, i cant figurere out whats on other side of board. someone else match these up my brain hurts

These might be the back and front side judging from pics
[HTC EVO 3D] Zarboz:
All the pieces are laid out in detail that is the engineer spec sheet
[HTC EVO 3D] nebenezer:
I think those contact points are right about here..
[HTC EVO 3D] guitardoc64:
Actually those are the solder points for what appears to be the vol up switch. It's a micro dpdt momentary switch right by your highlights.

Sent from my temp rooted Shooter!
[HTC EVO 3D] welrope:
The yellow paint marks the spot..(my best guess using the placement of the mounting holes)
[HTC EVO 3D] TrevE:
why would they expose two solder points for a board? those holes are delebertly there foro sometehing. What about jtag programming bricked units or things that have emmc lock, it sure would be easier to pogo pin in a device then to take apart the phnoe...

it looks further right than the first solder point at least

i sucuk with photoshop, this is the best i could get at
[HTC EVO 3D] xHausx:
Can you get a volt meter to it?
[HTC EVO 3D] TrevE:
im looking for my wire tips, everythings packed away and my tips are way to big for those holes
[HTC EVO 3D] guitardoc64:
Yeah, and the square right below the yellow paint is the switch.

Sent from my temp rooted Shooter!
[HTC EVO 3D] guitardoc64:
They are using a double-plated board. Those are probably connecting to the other side of the pc board.

Sent from my temp rooted Shooter!
[HTC EVO 3D] TrevE:
i get that, thats why it looks like they go through the other side where the processor is right next to. it looks like its over to the right more from the solder points if u look at pic2, one on the left side of that bar one on the right side.

and if it was just two grounding points, why would they take the effort to fab the case around those two ground points so there accessible from outside the phone?

Serial wire debug (2 pin jtag) is common on arm - http://www.arm.com/products/system-ip/debug-trace/coresight-soc-components/serial-wire-debug.php
[HTC EVO 3D] cj10488:
I just left my dmm over at my parents today so I am of no help tonight. If now has by tomorrow I will grab my dmm back and get to probing. Was rewiring an old VW so i left it there.

James
[HTC EVO 3D] Tiffany84:
I think u might be onto something TrevE. Either way, do u ever sleep? Your like a freaking machine. Gotta love it.
[HTC EVO 3D] guitardoc64:
I've labeled the switches in this pic along with indicating the "test points" which I still believe are thru passes for the double-plated board.
[HTC EVO 3D] TrevE:
i see that, but look at solder point #2, it ends at the bottom of the switch. now look at the the combined pic. "test point one" is to the right of the bottom of the button more, and other one is to on the other side of that bar, so its defiantly looks above the resistors to directly the left of the qualcom chip.

and Tiffany84 - no, i dont sleep much. insomnia is great i get so much done
[HTC EVO 3D] jason62082:
Are you trying to say these are vias, because this is a multi-layer board?

I would agree that they look like vias, but given that there are access holes the the back side of the phone, I'd have to say that they are there for test access of some kind. And even if they are vias, they could be masked to allow for test access. Vias are masked (metal exposed) all the time.

That being said, if they are some sort of two wire interface, then at least one should be pulled up to VCC or down to ground because it is an input. You might want to probe from each via to ground (if you can find ground).

EDIT: Could this be the MODE pins from the 8660? REFDES: LAT3 and LAT4 from the schematic??? They look like they have pull downs from the "PD" text on the schematic.
[HTC EVO 3D] Jaywan:
I agree. I haven't posted but I been closely watching this thread. He's been at it all day. Back on topic..
[HTC EVO 3D] TrevE:
well i dont have much electronics background becides modchips :cool: and basic soldering knowledge so this is way outa my realm. attached is my arsenal i have to play with right now, i really dont know how to probe those points without taking it apart...

if anyone can guide me through metering them with what i have (without taking phone apart) ill do whatever
[HTC EVO 3D] tehbeetus:
You have to disassemble the phone. :/
[HTC EVO 3D] TrevE:
we cant drop a wire into that from multiimeter tips or something? or can i get some pin headers to drop down in there and hook up to?
[HTC EVO 3D] tehbeetus:
no it'd be to tight and really hard to get a reading.
[HTC EVO 3D] johnsonjs:
MHL adapter

Just saw this on a deal site:

MHL Adapter (micro usb to hdmi) $10 +tax AC T-Mobile Store B&M

If it'll help. Sorry if OT. These adapters are pretty expensive as I understand it.
[HTC EVO 3D] TrevE:
too tight? i was able to drop a ghetto wire probe in there and hook up to a ground on the headphone jack. and i took a picture with the camera in the other hand :)

I dont know if this is even a valid test. probed right port at 200ohms with ghetto wire probe, grounded to headphone jack. putting probes together outside unit gave a ohm reading of 8, but i was able to get a stedy reading of 53.5 of the right port at 200ohms. see attached pics.

maybe someone can point me in the right direction to figure out exactly how to play too figure out what this damn thing is that knows more about electronics...
[HTC EVO 3D] tehbeetus:
Well you proved me wrong. Sorry about that it just seems to tight to not disassemble the phone imo.

Sent from my premium XDA app for my Shooter
[HTC EVO 3D] jason62082:
Does anyone know if other devices like the Sensation have these holes?

Sent from my PG86100
[HTC EVO 3D] B-dub25:
@TrevE if you have the phone open like that you can do a hotplug to get the emmc CMD to open up for you . Also I have about 300 AT commands with definitions I'll post up after work and school

There is ways to get the FD and SD to open in standard at shell .
[HTC EVO 3D] sidepart:
Really all you're measuring is the resistance from that pin to your ground reference. I'm not sure it's really telling you anything other than there is some kind of path between the pin and ground. There could be a million things in between.

Is there any conductance between the two pins? Drop the positive lead onto one pin, and negative onto the other and have your DMM set to generate a tone if there's conductance.

If it's a JTAG maybe someone can dig up what the resistance should be from the JTAG pins to ground? That way we can at least have some kind of ...verification?

EDIT: The language in your post is a little confusing. You measured the port at 200 ohms and received 53.5 ohms. The 200 Ohms is just a precision scale more or less. So if for instance you were expecting to see 1 MegaOhm...it'd be out of range, you'd want to scale it up. Based on your reading of 53.5 ohms, I'd say you're spot on with the 200 ohm setting. Maybe you understood that and I'm just...reading funny.
[HTC EVO 3D] guitardoc64:
Apparently so.
[HTC EVO 3D] TrevE:
guys i know **** about electronics :) i can read a manual, solder something up but as far as figuring it out on my own im ****ing lost. like i said this is way out of my league.

Im going to run to radio shack and get some supplies. maybe some pin headers or something so i can probe those ports easy. if anyone else wants to jump in here and help _PLEASE DO_ :)
[HTC EVO 3D] jason62082:
Very cool. Thanks!

Now, do older devices that don't have eMMC lack these pins? I'm just trying to find some correlation.
[HTC EVO 3D] sidepart:
You'd think I'd know **** about electronics since I went to college for it...but I have no idea where to begin here either so no worries. Maybe I just need something to go off of. If anyone is looking at a datasheet or a schematic with wide and bewildered eyes, shoot it to me in a PM and I'll take a look.

...If anyone knows of a component that they'd like a datasheet or schematic for...pass that along to me as well and I will try to find it.

I kind of want to get behind this if I can. Anyone know where I can start educating myself? I keep seeing things like eMMC floating around. Is the thought here that these pins are a JTAG for the ARM chip, or to this mystical thing called an eMMC? As you all may be able to tell, I know of these things in passing conversation, but I don't know a whole lot ABOUT them. I guess I just want to know enough so that I can do some googling to see what the goal is here that we're trying to achieve, and how it relates to these pins. Feel free to PM me this was well.
[HTC EVO 3D] TrevE:
http://db.tt/DFoKgNH

dont know if you saw that posted back a few pages, its the full schematics. I have found alot on SWD, i have _no_ clue if this could actually be it. if it is some type of jtag, look at what other phones have done its pretty much lower than the lowest of the low access aka unbrickable
[HTC EVO 3D] USSENTERNCC1701E:
The ThunderBolt has two small holes about that diameter and distance apart on the battery door that lead to a set of copper contacts inside the case. I don't know of anyone that tore the phone apart to discover where they lead. The closest anyone came to an explanation of the holes was NFC, which the TB does not support.
[HTC EVO 3D] TrevE:
The original evo 4g has only what looks like 2 antenna plugs, and there not accessible the same way. You would need to take the phone apart. The holes in 3d look deliberately there, maybe for things like if emmc locks and your phone is bricked.
[HTC EVO 3D] sidepart:
Cool. I'll take a look at this TrevE. Who knows if I'll be of any use but I have some time this weekend and I might as well try to occupy myself.
[HTC EVO 3D] Bentenrai:
Yo Trev, sorry I evaporated last night, but real life can cause quite a distraction. Anyway, I gotta work again today. All this hw stuff is a bit over my head, but as far as sw goes im gonna try to get that dump up before I go in to work. *sigh* the fight continues.
[HTC EVO 3D] creektrack:
@sidepart...eMMC is just the storage system for the phone, it stands for embedded multi-media card, and the JTAG theory is very possible...

Maybe this can help some out once you get better access to the points, it's software that allows you to actually use JTAG points...

http://www.jtag.com/en/Products/Development_tools?session=nl176ta7pv5norkt6qu7kra292
[HTC EVO 3D] TrevE:
cool, yeah this hw stuff is way over my head too which is why i want to play. i hate not being able to figure something out so hopefully someone can help or itll be an obsession for me until its done :p

and cool it will be interesting to play with, and if anyone else wants to try swap flashing different ruu parts around to see if it just wants a generic htc signed image, or all of radio/boot/hboot/recovery to see if they are crced to match up every flash or osmething while were playing with hardware maybe well get something to break through somewhere
[HTC EVO 3D] sidepart:
You know...just from a cursory glance at the schematics for the MSM8x60...there isn't anything connected to the JTAG ports on the processor. They're just floating. If they were connected to some kind of header on the board, there'd be an off page connector and another schematic drawing detailing that.

Now...I don't really know what they'd put on the schematic if they just had it connected to a via on the board. I guess technically they could still mark that as "floating" which is what they did. But...if it were me, I would have marked it with some kind of I/O symbol if I had done that. I guess I'd need to see the gerber for the circuit board to know if this is what those two pins were for.
[HTC EVO 3D] TrevE:
i saw that, i do believe for SWD they have to overlay wires connecting the existing 5 pin jtag port. SWD is designed to connect every chip in the device it sounds like:
[HTC EVO 3D] Bentenrai:
I'm giving this a shot with my 1.40 HBOOT, if it works I'll go ahead and host it, if not it'll have to wait til after work til I can try this 'dd' method. I'm not exactly sure what that is so I'll do some reading. Stay tuned for edit.

EDIT: Not sure if the problem is with ADB/Fastboot (using a ghetto and very unorganized install) or with the 1.40 hboot but Fastboot won't recognize the listpartition or the saveprt2sd commands. I'll reboot into linux and set up the sdk better later.

Or is it just my 1.40? Either way an SDK reinstall is called for.
[HTC EVO 3D] Zarboz:
Mytouch 4g has them

I Wil check my inspire as well
[HTC EVO 3D] CrippleB:
Would that be for a charging dock?
[HTC EVO 3D] sidepart:
I'll do some more research on SWD and how it's integrated into the MSM8X60. I don't know if I'll find anything useful but we'll see. I won't have time to get started on this for another 2-3 hours or so. Work has been pretty slow but I all of a sudden have a few customer meetings -grumble-.

My first thoughts here are that these diagrams aren't showing me SWD at all. If SWD is implemented by combining the clock + single bi-directional data pin, I figure we'd see a jumper on the JTAG. If SWD was some kind of external chip that JTAG, the clock and everything else connects to, then I'd expect to see some off-page connectors and an SWD device. Hopefully my research will clear this up my confusion, I really hope I find something as this is quite interesting.

The beauty of this is, if I'm looking at schematics and datasheets, I look like I'm doing my job. :D
[HTC EVO 3D] Bentenrai:
Mytouch 3g slide, no holes noticeable.

Edit: No eMMC on mt3gs
[HTC EVO 3D] Zarboz:
The pins exist on g2 inspire and mt4g my EVO 3d I haven't checked anything else yet
[HTC EVO 3D] Bentenrai:
Tmo Comet, no holes. Headed to work, just tryna help as best I can til later tonight
[HTC EVO 3D] B-dub25:
I wonder if it is our antenna it is labeled as skycross
[HTC EVO 3D] sidepart:
Can anyone see if the silk screening on the PCB has anything written on it... like AN26, AL25...something. Again, they might leave this off...but it'd be on the gerber.
[HTC EVO 3D] TrevE:
http://xdaforums.com/showpost.php?p=16060463&postcount=60

although a bit blury, i dont see them there, the source i got the pics from are here - http://tucci999.imgur.com/evo_3d_teardown. i also rotated them to match and attempted a seethrough overlay few posts later
[HTC EVO 3D] sidepart:
Thought that could be it. I wonder if it's marked on the otherside, but I think I saw another picture where someone showed a chip covering the area.

I read here: http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0413c/Chdcffej.html that there's a switching circuit so that one can switch between JTAG and SWD. Unfortunately I can't find this circuitry in our schematics. There are 40 pages though, so I haven't had a chance to fine tooth comb it. The lame part is that it doesn't HAVE to be there.
[HTC EVO 3D] TrevE:
http://xdaforums.com/showpost.php?p=16062251&postcount=65

that has my pics lined up. find it interesting from what i see only eMMC devices have reported having it...
[HTC EVO 3D] apatcas:
Just a noob question but what about Security tab in the QPST software... what's that all about?
[HTC EVO 3D] sidepart:
I'm hitting a little bit of a dead end here. I think there's a good possibility that the two pins could be involved with JTAG or SWD, but the schematics certainly don't seem to be helping me confirm it.

Can we do a test of some sort? Like...I have an Arduino board, maybe I could try to jab two leads in there and communicate with it serially? Of course I don't really know what I'd send and expect to receive (I can maybe see if there's a guide that involves this). In addition to that, I don't really know what signals we'd send to communicate with the bus to access the other components.
[HTC EVO 3D] TrevE:
wats this? i hooked up rxd and ground to those ports to my serial board and this beauty popped right up

qualicom high speed usb download? mmmm getting fun here...