yashsingh1/xdaforums huggingface dataset:
[HTC EVO 3D] J.eremy:
Nice thank you.

And if you could post more on what the dump is. Like hboot version and stuff like that it would be great

That's a nice chrome theme which one is it?

Pew Pew
[HTC EVO 3D] ktulu909:
Would be a shame to stop working on this considering it may be a way to fix bricked devices
[HTC EVO 3D] bmxrider4444:
Hopefully you guys have some more luck with things now that the source is out
[HTC EVO 3D] tehbeetus:
This is why I don't leave this thread. I don't have to. All the news is brought to me.

E3D: http://dl.dropbox.com/u/2606190/shooter-2.6.35-crc.tar.gz

Working on a mirror for the E3d since the site is so slow.
[HTC EVO 3D] TrevE:
just woke up, got flododed with pms to the rev io stuff, jeeze, one way or another im going to continue my work getting lower access to things

And i guess i have to watch my language or something?!?!? i got an infraction.. yeah seriously thanks xda your really all hurt over a few fbombs when im actually getting crap done? or was it the smoking a J comment, either way DEAL! ill say worse to my mother and were all adults i dont think people are running away becuase i said fu<k.
[HTC EVO 3D] franky_402:
Wow, thats a little ridiculous...keep up the great work. Ive been watching this thread since u posted it, amazing stuff going on here. Im not going to lie im a little excited to see whats posted later today but this could still be a great way to get full access over everything to aid in unbricking, or possibly even something more useful.

Sent from my supercharged 3v0
[HTC EVO 3D] CrippleB:
This link redirects you to HTC.
[HTC EVO 3D] tehbeetus:
thanks for informing me. I'm just re-upping the E3D source. The website is so slow.

E3D: http://dl.dropbox.com/u/2606190/shooter-2.6.35-crc.tar.gz
[HTC EVO 3D] pbedard:
Kernel source released today
[HTC EVO 3D] USSENTERNCC1701E:
Holy **** you goddamned retarded troll.
[HTC EVO 3D] TrevE:
hey watch your language the xda mod nazis might come out and give you an infraction.

haha *rollseys*

anyway im going to try flashing something today through download mode if i can figure out what kind of image it wants. working again on this stuff now
[HTC EVO 3D] USSENTERNCC1701E:
I thought was showing restraint, I didn't repost the bedarded meme :D

If you guys are still working this angle with those holes on the 7th I'll jump in with you, as is I don't want to tear my phone while I'm still in my 30 days. Would be awesome if this turns out to related to HTC's factory unbrick.
[HTC EVO 3D] TrevE:
haha :) someitmes a swear is the least of two evils. maybe they should realize after plugging wires that are thinner than a pencil lead into my phone all day a swear or two comes out.

I just want to make it known i thought being open and posting progress and crap was a good thing, now that would be impossible if you dont want to hear a fbomb or two after all the beers/whatever it takes for me to get intoo a state to deal with this crap.

and if none of this is appreciated by xda, ill leave. if my account ever misteriously goes inactive, i know i always have a home over at virusroms so ill just continue there... not ideal, but sorry if your gettiing work frrom me your going to get a swear or a drug reference or two. thats life. by the way i also speed on the highway. pot is decriminalized here so speeding is a way more hefty fine. you mad now xda?

</rant> sorry but that really pissed me off this am guys.

and yes, im working on download mode. i have hopes because its the only way that linux sees the device as just a generic qualcom modem fimware loader instead of anything HTC branded.
[HTC EVO 3D] wardfan220:
What nazis, this forum doesn't have a mod.
[HTC EVO 3D] TrevE:
aparently they only patrol people swearing or drug references. we have dealt with trolls that could have bricked peoples phones testing for me and everything but i get the warning for a fbomb. im not going to continue talking about this anymore, i have other things to do. i just wanted xda to know that they are really pissing off the people actually doing work
[HTC EVO 3D] Bentenrai:
lmfao. i just woke up. the hboot i uploaded was 1.40. im still half asleep i needa min to process this

It's not a theme, it's chromium, an open source chrome remix. also it's a full dump of every partition on 1.40 hboot after a factory reset. im having some site problems, brb. i neeeeeeed coffee..
[HTC EVO 3D] wardfan220:
Must have been reported because we haven't had a mod here since the first few days. That sucks, too bad this place is full of 10 year olds and not adults that can handle the real world language.
[HTC EVO 3D] Bentenrai:
and by every partition on hboot i mean every partition on the entire phone. im having some problems with my hosting service, ill be back after coffee and some kinda food to get back to work. All the good stuffs been happening while I've been at work but today I have the day off!! :D
[HTC EVO 3D] miniterror:
So nothing new will happen:p :sarcasm:
[HTC EVO 3D] CrippleB:
We do have a mod. I have seen Mr. Clown giving out warnings. Not sure if he is stericson's replacement but he is around.
[HTC EVO 3D] Azrael.arach:
Well treve you have my thanks for the work you are doing. Starting tonight I will have a second evo 3d for testing if you need.
[HTC EVO 3D] TrevE:
thanks for support guys, and sorry to derail with rants i just got alittle heated.

now has anyone used gang flash/software download/memroy debug in qpst/qxdm before. i think this is how to generate and send images from what im reading. What i also like is this seems to be BEFORE booatloader or anything. the screen wont even turn on when its in download mode. And its only detected as a qualcom device, no htc branding. i really think this has _something_ to do with initial programming and if it does, this could be a brick fix....
[HTC EVO 3D] Bentenrai:
Of course lol.
[HTC EVO 3D] kthejoker20:
Yes it is a brick fix. Very very slow, but it works.

It will take about 24hrs to send the download complete to the chip.
[HTC EVO 3D] Bentenrai:
Wow... Well I got 4 days with this evo so if someone gets a theory as to what to send to the chip or if someone packages something to flash my evo is screaming guinea pig. This is very exciting.
[HTC EVO 3D] TrevE:
i dont think it matters how long it takes to download, i want to try it. this is important if they fix future ruus against exploits, we brick, blabhalbh. i think its freekin awesome if we have a simple brick fix like this, and it seems more phones than just evo 3d can play

and why would it take so long? the serial -> ttl device actually isnt where the com port is being opened, its opening over the other usb plug it looks like. it looks like a "high speed download mode" so i would assume it wouldnt be that slow

i could really see htc putting bricks on an assembly line, reprogramming them and then going through QA checks. this would probably fix 90% of the crap they get in.

if this is the case why dont they sell customers these cables? we could all fix our own devices, HTC would make money and not have to deal with poeple modding bricks.
[HTC EVO 3D] Bentenrai:
Yeah I bet a lot of other phones can benefit. PS I'm gonna get started building this:

http://rdist.root.org/2008/10/29/diy-usb-to-ttl-serial-adapter/

Seems like something we all should have on deck
[HTC EVO 3D] TrevE:
i dont exactly know why the usb-> ttl works when attaching those pins and connecting another device to usb but it does. shorting out does not put it into download mode. someone else is sure going to have to figure out exactly how this works.

I know how to stick random wires into holes and see what happens, but i suck with electronics. i hope this is a lesson for everyone to just randomly stick wires into new toys next time you get them :D
[HTC EVO 3D] TrevE:
ive gotten alot of PM's asking exactly how this was made. maybe the other pics wernt descriptive enough. heres the best detail i can get into.

The device is wired to a geeetech.com usb-> ttl board, but it does not respond to commands to this com port. I also have a regular usb cable hooked up, and it seems this is where the com port gets opened.

The way its wired is theres a jumper between VDD/TXD on the board. I have the RXD wire going to the left port on the phone thats closets to the volume button. there is a ground wiring going to the right port thats closest to camera on phone. My boards red and green lights come on, but they are very dim when they are hooked up right.

pic is too big to have here. this is link to best shot i can get epxlaining - http://imgur.com/OisRF

you might be able to hack up a regular usb cable to do the same trick. I think its red/vdd white/rxd green/txd black/gnd. someone else will need to chime in here though

*edit* to keep everything in one post to find for post2, heres another picture of the other side of the device. YES there are 2 usbs plugged in, one is the USB->TTL the other is a normal microusb cord. i have no clue why you need both but its the only way i could get it working

http://imgur.com/Qit1e
[HTC EVO 3D] Bentenrai:
I'm going to get an old nokia phone cable from work in a few minutes, do some playing around. My FTP is messed up at my site so I'm upping my image to dropbox. Gonna have to wait til tomorrow to head to the city to replace my phone. But oh well, no big.
[HTC EVO 3D] Bentenrai:
Wait so no one's tried this yet? Like without even having the ttl adapter? I'll give it a shot

EDIT: gonna double check that wire scheme first
[HTC EVO 3D] TrevE:
yeah im not sure about txd/rxd. one is d+ d- i just cant remember whats what

edit - and i have no clue about electronics, and if this is safe or has any chacne of working without a ttl board. like i said i dont even understand myself why it works but it does.
[HTC EVO 3D] kthejoker20:
This is what I use.

May help you too.

http://www.electronickits.com/kit/complete/elec/ck1610.htm
[HTC EVO 3D] kthejoker20:
It could be.

But when I do this with bricked routers, it takes forever.
[HTC EVO 3D] Bentenrai:
Yeah I was looking at some tutorials for unbricking routers to see what kinda diy usb/ttls were getting used around the web. i'd really like to find just a schematic so i could build this from stuff at radio shack on discount.

EDIT: PS, 2 hrs left on dropbox upload
[HTC EVO 3D] xHausx:
Can you try leaving the VDD/TXD pins unjumpered and see if it still works?
[HTC EVO 3D] TrevE:
i just unplugged VDD/TXD while the com port was connected (yeahyeahyeah dont work on live circut blabhlabhalh) and its still there and responding. Once again goes back to wtf why cant we just short these?

also im looking for other modes. i know it looks like it has some factory test mode too, could this be some kinda resistance thing?
[HTC EVO 3D] xHausx:
If you can get it to work without shorting those two it may be easier on your USB port ;)

For some reason that setup there makes me cringe
[HTC EVO 3D] TrevE:
haha me too, me too. but whatever it works? this is why someone needs to figure out exactly _how_ this is working
[HTC EVO 3D] jason62082:
Does it still work if you unplug the USB->TTL board from your laptop (leaving the fly wires connected to your phone and the board).
[HTC EVO 3D] TrevE:
yes it does, well atleast i was already connected to the port, unplugged, and im stiill connecteed to port

i was just going to quote your post back here actually.

if these are the MODE pins, could there be 3 modes? normal, download, and factory teset?
[HTC EVO 3D] psyko_chewbacca:
I too have a similiar USB to RS232 TTL board based on the PL2303 (same USB <-> RS232 chip as the geeetech.com adapter). I want to know the exact procedure on how you triggered the download mode.

I'll tell you how I understand the way you made it work.

1- Phone off, battery pulled then put back in.

2- plug in the Rx line of the USB-TTL in the hole closest to the volume Up button

3- Plug in the GND of the adapter in the hole closest to the camera (the other free hole)

4- short Tx and VCC

5- Plug micro USB cable in phone

6- plug both USB leads (USB-TTL adapter and micro USB cable) in the computer

7- Power on the phone

8- Magic?

Is that the way you did it?

If I can get to this mode I'll try to dump the memory using QXDM.
[HTC EVO 3D] xHausx:
TrevE, I remember seeing that one of those pads was being driven at +1.8V. Have you tried hooking up the TXD to one pad, the RXD to the other and then the GND to a common ground somewhere like the USB port or battery?
[HTC EVO 3D] J.eremy:
Exactly!

It really wont tho, this method could be used to push a non broken bootloader/recovery to the device, which wouldnt take long and allow to bootloader to do the work of the rom. in theory...

we wouldnt be pushing the entire rom to the phone via serial lolz
[HTC EVO 3D] TrevE:
Thats probably safer than what i did, were just now figuring out exactly whats needed. I had phone booted in bootloader with cable in, jammed wires into the ports with the phone on until i got download mode, you know when i hit it because the board started flashing like crazy wiht a dim light and the screen actuaully shuts off and no hardware responds.

if you just short the pins accidently the phone reboots. this is why i dont think there shorted...
[HTC EVO 3D] TrevE:
no, after i hit download mode i havent tried anything else. i do see most qualicom chips supporting 3 modes tho, so maybe something like this is another way get that other mode

and yeah thats what i was thinking too, if we can program low level things like hboot we will be unstoppable
[HTC EVO 3D] Bentenrai:
http://xdaforums.com/showthread.php?p=16120700#post16120700

S-Off Beta, sure you guys saw this already.

EDIT: Apparently a troll post?

EDIT2: I'm gonna clock in and help out these guys at work theyre getting swamped plz someone look at adapter attached, srry was wrong pic edited now

Can someone tell me if this usb to serial is decent? work for our purposes? I'm at radio shack right now but I gotta hurry home to try this.
[HTC EVO 3D] TrevE:
uh wut? is this whole post a troll post? lol you attached a rickroll and a picture of a phone your going to use somehow for serial?
[HTC EVO 3D] xHausx:
You're looking for a USB to TTL module. You may be able to cut up the cable and connect it directly but if they have a module go for that instead
[HTC EVO 3D] Bentenrai:
PLEASE read my edit. I just hopped on the counter at work. I came to buy this adapter and as I was posting they made me clock in and help because there were about 20 ppl in the store. I sloppily finished the post, but edited shortly thereafter. Sorry for the confusion. Also I grabbed the wrong picture from my sd card. I fixed it. I may upload better pics in a second. Would anyone be able to help me teardown the cable if we dont have a usb to ttl module?

EDIT: My image of all partitions finally uploaded to dropbox. PM me if you want an invite to the folder. It's from HBOOT 1.40 and OTA 1.13.651.7

EDIT 2: I'm headed back home, no udb/ttl modules here. But PM me if you think you can help me tear down that cable.
[HTC EVO 3D] Bentenrai:
http://revolutionary.io/ has the root beta available for download or I'm the biggest retard ever.
[HTC EVO 3D] TrevE:
well now with soff i have _tried_ going to eng and bringing up serial but that doesnt even work. does anyone with linux have the balls to try that EU hboot and see if we have serial hboot access? it doesnt find it as hboot usb plug, maybe thats the problem?

also if we can get a backup to flash with download mode, this will mean nobody needs balls to flash anything around. we always ahave a safeguard. i will still be working on these methods even with official soff, i think it is still important and relevant

And does anyone know what mfg kernrel is in hboot eng? maybe we get some fun stuuff there? im going to keep post 1 updated with any cool low level modes we have and what we can do
[HTC EVO 3D] Bentenrai:
I'll also continue to help in whatever way I can. Please let me know if I can do anything. Do you by chance need the link to my dropbox of the backup I made? I can make another backup now that I have s-off.
[HTC EVO 3D] NORCALkID:
TrevE thanks for your dedication .. I know I had nothing to contribute but reading your work was amazing
[HTC EVO 3D] TrevE:
im doing dumps now of radio config and stuff. basically what im looking for now is a way to backup or download hboot through QPST/QXDM/whatever. I need to know what the image format is. Im not familiar enough with these tools to know how this works. once we can rewrite hboot we have a pretty damn good brick fix/future downgrade method.

i see how to choose partitions you want to write to, but i dont know what what kind of format. i have read that you can take a .bin image, convert to hex and upload it but im not sure.
[HTC EVO 3D] xHausx:
@TrevE try the eng hboot, that's going to be your best bet for getting access to everything. If we ever need a new solution for getting S-OFF it still won't help us with anything though
[HTC EVO 3D] Bentenrai:
After the hubub of root dies down a bit the big brains will be back here rather than off playing or troubleshooting for peeps. I'll be back in an hour or two.
[HTC EVO 3D] TrevE:
well if we can put the phone into download mode it will help. we can flash radio-config, enghboot, whatever.

http://pastebin.com/VEtcZgm3 theese are the new comands in eng fastboot.

uh does our device have efuses? this command is f**** scary

(bootloader) blow_efuse

post one is also getting updated with rtask values and all the other hboot stuff we can do in eng
[HTC EVO 3D] Bentenrai:
Self destruct switch! lol

But seriously, that couldn't be accessed remotely by sprint or htc could it?

Of course I'm purely speculating here.
[HTC EVO 3D] xHausx:
That one I don't know about, haven't been in a hurry to try it out. You should be able to use fastboot oem blow_efuse ? to get a list of parameters for it
[HTC EVO 3D] TrevE:
it could be called in an update.

im going through all the commands now and slowly updating post 1 too, so watch out there for more info :D
[HTC EVO 3D] TrevE:
C:\Roms\Evo3dStockRUU\Evo3D_Development_HBOOTA>fastboot oem blow_efuse ?

...

(bootloader) blow_efuse [addr] [val]

OKAY [ 0.008s]

finished. total time: 0.008s
[HTC EVO 3D] TrevE:
MFG kernel is verry fun. putting a whole new section up now :)
[HTC EVO 3D] Zarboz:
Are you using eng hboot
[HTC EVO 3D] TrevE:
yeah im trying to break into serial everywhere and other stuff :) updating post1 like crazy now
[HTC EVO 3D] Bentenrai:
http://dl.dropbox.com/u/36719158/mmcblk0.img

This is a COMPLETE dump of every partition on a freshly restored 1.13, SHIP 1.40.0000 HBOOT Evo 3D.

I know this isn't really what we need in this thread right now but I had to deliver from earlier post. I hit every speedbump possible on the way to upload this. But feel free to include it anywhere you need to, I'll keep it in my dropbox til I get my websites ftp going properly.

I MIGHT try to get dumps from every version of the hboot for our 3Ds and get them all hosted in one folder at the site. Let you know later how that's going.

EDIT: Probably gonna work on upping the individual partitions first
[HTC EVO 3D] sidepart:
Jesus TrevE, I come back a day later and this entire forum has been set ablaze with S-OFF and your identification of these pins. I pulled out my multimeter and everything. :D

Good job all, I think this has progressed beyond my skill at this point. Sorry I didn't get a chance to help, but it was fun.
[HTC EVO 3D] TrevE:
were not even close to being done yet :D just maybe a small pause while everyone gets s-off. im still going after permanent brick fixes and something else :D
[HTC EVO 3D] rtbluver:
I have eng s-off, i can try anything except the download mode...just throw it out
[HTC EVO 3D] TrevE:
is it possible to tell if our device has efuses? googling that command just comes back here so its a bit scary :|

theres also fastboot oem read_l2_acc_fuse which returns

...

(bootloader) L2_ACC_FUSE_0: 1

(bootloader) L2_ACC_FUSE_1: 0

OKAY [ 0.022s]

finished. total time: 0.023s
[HTC EVO 3D] p3tr0s:
Gee apparently someones not a supertroopers fan.
[HTC EVO 3D] TrevE:
:D quick update guys

finally got something to do a full memory dump. this does look like its painfully slow though, i just read through 1% in about 10 minutes. hoefully after i do this once we can fiigure out some offsets and just pull the fun stuff

look for more soon
[HTC EVO 3D] ktulu909:
Blaze on my friend, blaze on.
[HTC EVO 3D] TrevE:
i have contacted the big guns over at revskills psas.revskills.de to see if they can help getting memory dumped and flashed. The thing read almost all night but left me with no output file :confused::confused: i really dont know much about this so if anyone else knows something im missing please jump in here.

these guys seem pretty awesome so hopefully we get some response. ive seen desire Zs use this for brickfixes so hopefully were not that far off.

i also updated post 1 with all info on where im at with things, keep looking there
[HTC EVO 3D] Zarboz:
How do I get the mfg kernel working is that the manufacturer kernel?
[HTC EVO 3D] TrevE:
yeah it pretty mcuh turns everything on possible. it seems if you dont have it plugged into usb first itll reboot on you. also when you choose it the phone will apear to lock, but all the ports are accessible just fine with putty/mtty & qpst/qxdm
[HTC EVO 3D] Zarboz:
Mmmmm funn
[HTC EVO 3D] xHausx:
Right on man, a brick fix would def come in handy with this phone. Especially since HTC's security bs made it that much easier to brick the damn thing
[HTC EVO 3D] viperbjk:
First of all, some information :)

The MSM86xx and MDM9k have changed a lot in download mode. Actually the memory dump/partition function has changed, and thus, the QPSTs out there won't work at all. For example, there are now two memory dump functions. As I haven't got any MSM8xxx or MDM9k device yet, I'm ready to add support to revskills if anyone is kind enough to allow me to access a evo3d or sensation in download mode (via usb-to-lan).

Regarding the serial interfaces .... don't ever use a pl2303 interface, and I mean it. This chipsets is messing up data and stability. Use FTDI or Cypress chipsets instead.

If there is any way to nand dump evo3g or sensation ? Yes there is. Once I got the registers, I can build a nand dumper for a specific kernel version, that should be no problem, as long as the device is rooted (no need for s-off at all).

Greetings from the reversing cave,

ViperBJK
[HTC EVO 3D] xHausx:
What would be the best way to set everything up for that? I don't have a usb to ttl converter yet but should have one available in a few days.
[HTC EVO 3D] TrevE:
=-o this is awesome you guys really are amazing. im so stoked that we have some kinda perma brick fix and a future soff downgrade method if anything should happen to this. (look at the evo4g, its been months and they still cant get it) one email and now we have a crapload of information. i will do whatever we need to get this rolling, i can easily stick my device in download mode and let whoever play. ill also pony up for a revskills license seing ive opened it atleast 10000 times in the past feww days and am _very_ impressed.

Now as far as the serial interface, the com port actually doesnt even come throrugh the usb->serial adaptor. it comes through the other usb plug from the looks of things, i have a feeling my board just has the right resistance or something between the two MODE pins were to trigger this without shorting? i know nohthing about electronics i just decided to shove random wires into the phone and here we are :)
[HTC EVO 3D] OgremustCrush:
Just throwing this out there. I'm pretty sure there is a way to directly use the ftdi USB to ttl off the earlier arduino boards, so some of us out there already may have one.

http://hackaday.com/2010/10/09/using-an-arduino-or-seeeduino-for-its-ftdi-chip/
[HTC EVO 3D] psyko_chewbacca:
HTC modem drivers in MFG kernel

Anyone have the HTC modem drivers for Windows XP for when the MFG kernel is enabled? I tried all the HTC drivers packages I could think of (including those in the first post but it won't install anything...).

As soon as I enable the MFG kernel, I get a popup to install HTC modem drivers but none are suitable. TrevE, what drivers are you using?