yashsingh1/xdaforums huggingface dataset:
[HTC EVO 3D] s_superman:
WORKING !!!!!!!!

Downgraded from 1.49.0012

now I have the Revolutionary HBOOT with S-OFF

Thank you very much really a Million thanks for your great effort

and to moderators :

why the hell isnt this stickied or pinned or whatever

this is very EPIC :D

---------- Post added at 04:25 PM ---------- Previous post was at 04:23 PM ----------

the main advantage is that you can now use revolutionary.io method to achieve S-OFF and use custom kernels and unleash the full potential of your dual core phone :D
[HTC EVO 3D] shiznt:
I guess the biggest thing for the people with the branded handsets is to remove the carrier splash screen at boot up and replace it what ever you want.

Also you can flash different radio images with S-Off
[HTC EVO 3D] merps:
TELSt001 (1.49.0012)

OK - a little bit of playing and I found TELST001 in both mmcblk0p4 & mmcblk0p5 (i stopped dd and checking @ mmcblk0p10) as well as the version change in mmcblk0p31.

Also confirmed that it is writing back to /dev (temporarily?) but upon reboot reverts to the original partition information (burnt rom).

I can see all 31 partitions loaded via logcat but how to access the version that will allow cid change.

Is there any other partitions that this information could be stored?
[HTC EVO 3D] Flashmaniac:
the smart_io.crd prbolem is due to S-ON. If you had a superCID you could change the CID but without, you cannot.

Edit:

Follow the tutorial until you have to change your cid.

Don't change it, create a goldcard.

After you have created the goldcard,simply flash the wwe europe ruu from here

This will flash the right hboot and it will ignore that you don't have a: the correct hboot version b: the correct cid

tested and its working. I did it with a friend of mine, he had hboot xxx18 ´:)
[HTC EVO 3D] Awesome2bblue:
AUS TEL 1.49.0012 not working =S... update fail
[HTC EVO 3D] alliance_22:
Just attempted this, when flashing, i encountered an Error [155]: UNKNOWN ERROR.

I have the gold card created and inserted.

Thanks for the info but, i might try a few other things tonight.

I take it that no one here has Optus australia that came with hboot 1.49.0018 who've been successful in unlocking S-OFF.

BTW, how often does the revolution.io page get updated?

Cheers

Alliance
[HTC EVO 3D] ancola66:
You must understand the Unlock Bootloader and Unlock SIM is two completely different.

You want to downgrade the Bootloader is must EU Ship Rom flash (Integrated Global Radio) >>> this is not possible because of your Radio locked by the network you are using ( Included with your contract with the network )
[HTC EVO 3D] Picard75:
I seem to have the same problem:

C:\android-sdk-v15>adb shell dd if=/dev/block/mmcblk0p31 of=/mnt/sdcard/mmcblk0p

31.img

adb server is out of date. killing...

* daemon started successfully *

/dev/block/mmcblk0p31: cannot open for read: Permission denied

C:\android-sdk-v15>adb shell

adb server is out of date. killing...

* daemon started successfully *

$

I thought I had rooted successfully, but I guess not. I am also able to grant applications root access via superuser.

I initially tried su-2.3.6.3-efgh-signed.zip and after a couple of the times, the zip install from recovery worked. Tried kamma-root_cwm.zip and same result.

Managed to unlock successfully via htcdev.com

Any help would be appreciated.

--

ROM: Stock HTC Taiwan 1.23.709.5

HBOOT: 1.49.0012

Edit:

Problem solved. I have successfully S-OFF'ed with revolutionary. Now for a custom rom...
[HTC EVO 3D] Flashmaniac:
what is your carrier branding? find a ruu with that branding but with hboot 007 and it will work :)
[HTC EVO 3D] gjiebax:
Can my hboot 1.49.0011 be downgraded??already unlock my boot..
[HTC EVO 3D] Awesome2bblue:
Ok im not on a contract, i got it out right. Iv unlocked the bootloader via HTC. Tho im gussing the radio is au n not Eu. Hhhhm if only we Aussie had a URR. Cheers for the help.
[HTC EVO 3D] ancola66:
OK! So you have to find a stock rom support for your area with the old version (with Hboot 0007 or 0008). Then, instead of HTC__001 CID change, you must to change the CID in accordance and Build Number with the stock rom you up to downgrade the Bootloader. Those are my thoughts, you can see and try. Wish you success :)
[HTC EVO 3D] pehkblui:
should be ok. I was on 1.49.0011 and had no issue by following the OP's instruction.

---------- Post added at 08:52 PM ---------- Previous post was at 08:46 PM ----------

That's not true. I had S-ON but I was happily using Leedroid's Kernel with OC & dual core. ;P

The extra thing I could do now with S-OFF is I can have my favourite customised splash screen -- with the droid pxxing on a...e :D
[HTC EVO 3D] merps:
cheers ancola66, it appears the Australian locked phones (CID = TESLT001, OPTUS001 or VODA0001) on hboot 1.49.0011/12/18 - cannot be downgraded using this method, the goldcard method or revolution method (due to hboot).

At this stage it appears the CID is store in mmcblk0p4/p5 - with regards to unlocking the radio, would you know how this would be possible?

peace.. :)
[HTC EVO 3D] jcrob:
All working, thanks guys!! :D

Had a few troubles but just kept trying and it worked!

Hboot: 1.49.0011 >>> 1.49.0007

CID: HTC__044 >>> HTC__001 (via changing mmcblk0p4/p5 with XVI32)
[HTC EVO 3D] xecuter:
thanks man. followed your oem lock step and it was finally able to update! :D
[HTC EVO 3D] ancola66:
Apologize to you, I do not know by a method sim unlock hack. As I understand you can buy Sim unlock code ( in Vietnam I still find they often do so )
[HTC EVO 3D] sayed.saar10:
c:\adb>adb shell dd if=/dev/block/mmcblk0p1 of=/mnt/sdcard/mmcblk0p1.img

dd: can't open '/dev/block/mmcblk0p1': Permission denied

any help please
[HTC EVO 3D] ancola66:
This error usually occurs with Hboot 0011. It is the fault may not be ROOT ( although you had ROOT ):(

To fix this, You need to flash a rom has root with EU data base. For example : LeeDroid 2.0, Mdj Virtuous Shoter, Shoter Beet 1.7 or KingCobra3D 1.7
[HTC EVO 3D] cmloo:
Hboot xxxx.11 -> xxx.7 ...SUCCESS!!!

Yes this method works with Goldcard.

---------- Post added at 03:14 AM ---------- Previous post was at 03:08 AM ----------

I had to have both combination to get it working on Hboot XXX.11

1. Terminal emulation and have to SU

2. PC Terminal had to adb shell, then SU
[HTC EVO 3D] Picard75:
I had the same problem and managed to get past that stage successfully.

It has to do with having root for that command.

Type:

c:\adb>adb shell

If it returns $ like mine did, you do not have root. If it returns #, you have root.

All I did was:

c:\adb>adb shell

$ su

Grant permissions in superuser on phone, I was prompted on the phone. Got:

#

From there just type:

# dd if=/dev/block/mmcblk0p1 of=/mnt/sdcard/mmcblk0p1.img

Etc...
[HTC EVO 3D] sayed.saar10:
I flash KingCobra3D 1.7 and try again.

But same ERROR

c:\adb>adb shell dd if=/dev/block/mmcblk0p31 of=/mnt/sdcard/mmcblk0p31.img

dd: can't open '/dev/block/mmcblk0p31': Permission denied

Any other solutions ?

---------- Post added at 11:54 PM ---------- Previous post was at 11:10 PM ----------

This one work .. Thanks
[HTC EVO 3D] :
I know you all are in your own world over here on the GSM side, but does anyone know if this can be done similarly on the CDMA side?

~Jasecloud4
[HTC EVO 3D] sayed.saar10:
and when I try to flash PG86IMG.zip

I check my CID

Any ideas ?
[HTC EVO 3D] Picard75:
Did you try to change the CID while the phone was Relocked? If so, I think you have to unlock it, change CID then lock it.

Maybe try and unlock again and change the CID back to original then repeat the steps and see how you go.
[HTC EVO 3D] ilovemeow:
i got the same with you, but mine still appear voda_021
[HTC EVO 3D] cmloo:
I got a question. After getting Revolutionay S-OFF , can I flash any ver of the Stock Shipped ROM now without any issues to worry about incompatible CID and Bootloader?

Answer to my own Question:

Need to fastboot oem writecid 11111111 first before flashing the RUU of your choice

However once you do that, your Bootloader and reverts back to the RUU's original Bootloader with the RELOCKED status. The only thing that remains is S-OFF

From there, you need to redo the Unlockbootloader from HTC and reflash CWM Recovery.

Final results

UNLOKCED (not REVOLUTIONARY)

S-OFF

HBoot 1.49.0011

CID 11111111
[HTC EVO 3D] Picard75:
Unlock Token Check Failed

For those with an Optus HBOOT 1.49.0018 based EVO 3D, did you have any problems unlocking the phone via HTCDEV.COM?
[HTC EVO 3D] Flashmaniac:
at sayed.sar just flash a ruu now with hboot xxxxx7 ;)
[HTC EVO 3D] sayed.saar10:
I run ruu.exe ?? or flash PG86IMG.zip ??

I try to flash PG86IMG.zip.

The result is CID incorrect
[HTC EVO 3D] madshabz:
Hi guys I did everything exactly and for some reason I get the Model ID Incorrect error
[HTC EVO 3D] gjiebax:
Inquiry

I have hboot 1.49.0011 with s-on but i had already unlocked my bootloader via htcdev.com (htc method). And also..i think my CID is refering to hardware version 0011.. Am i correct?
[HTC EVO 3D] sayed.saar10:
No .. The CID is different

you can check your CID by this method

while u in fastboot write (fastboot getvar cid)

Example

c:\adb>fastboot getvar cid

cid: HTC__001

finished. total time: 0.002s
[HTC EVO 3D] madshabz:
can anyone help? please
[HTC EVO 3D] Picard75:
In fastboot mode, please type: fastboot getvar all

Post the output here.
[HTC EVO 3D] pehkblui:
Your change of CID step probably failed. You can do: "fastboot getvar cid" after you have attempted the CID change. It will show you the cid.

In any case for me, each time I changed the CID, if it was successful the phone would always reboot itself back into fastboot. If I didn't see that, then the change would have been unsuccessful. Sometimes another attempt would do; sometimes I had to reboot it into fastboot again.
[HTC EVO 3D] madshabz:
Thanks mate will try when i get home and post the results
[HTC EVO 3D] cdcapistran:
Hello there.

I've been trying this for a couple of days with no succes, I always get stucked changing my CID:

Also tried this on a PC wit no success, don't know why. I've done everything step by step. Phone:

Can anybody give this noob some help? :p

Thanks in advance. :)
[HTC EVO 3D] pehkblui:
I always get these INFO when I change my CID.

INFO[FAT_ERROR] fat_open_file: can not find SMART_IO.CRD

INFO[JAVACARD_ERR] SMART_IO.CRD cann't find

Do a fastboot getvar cid to check you cid if it has changed into HTC__001. I vaguely recall I would see this OKAY when I managed to change the CID. I stand corrected though.

<EDIT>: normally after trying to change my CID, my phone will reboot itself into fastboot if the change is successful. I just tried changing mine to 11111111, and I got the OKAY message (minus the INFO since mine is already S-OFF). But the cid still showed HTC__001 until I manually did a fastboot.
[HTC EVO 3D] cdcapistran:
Done that, still geting this:
[HTC EVO 3D] pehkblui:
It looks like your phone is telco locked? If so, I understand you will need to unlock that first.
[HTC EVO 3D] cdcapistran:
That sounds hard, is there a way to do it? I really need to use this phone.

Thanks.
[HTC EVO 3D] pehkblui:
My phones are never sim locked. So I have never had the need to do this. As far as I know you can buy unlock code. But I don't know how well that would work.
[HTC EVO 3D] madshabz:
there you mate

c:\adb>fastboot getvar all

INFOversion: 0.5

INFOversion-bootloader: 1.49.0012

INFOversion-baseband: N/A

INFOversion-cpld: None

INFOversion-microp: None

INFOversion-main: 1.20.720.1

INFOserialno: HT18YV300394

INFOimei: 357197040232954

INFOproduct: shooter_u

INFOplatform: HBOOT-8260

INFOmodelid: PG8631000

INFOcidnum: TELST001

INFObattery-status: good

INFObattery-voltage: 5768mV

INFOpartition-layout: Generic

INFOsecurity: on

INFObuild-mode: SHIP

INFOboot-mode: FASTBOOT

INFOcommitno-bootloader: bc3aefb3

INFOhbootpreupdate: 11

INFOgencheckpt: 0

all: Done!

finished. total time: 0.489s

c:\adb>
[HTC EVO 3D] cdcapistran:
In fact, I'm doing this to SIMunlock this phone, I'm trying to get S-OFF, this is a step to follow (downgrading the HBOOT).

I've tried a lot of things, but nothing seems to work.

Think I'm stuck here... :(
[HTC EVO 3D] Picard75:
2 things I noticed as above.

1) My modelid is PG8630000. Maybe the rom you are trying to flash is checking the modelid too.

2) Your CID needs to be HTC__001 before you attempt to flash the rom.

What step/stage are you at?
[HTC EVO 3D] madshabz:
I have tried to change the cid many time but it just does not work i have tried every single method post on xda to change the cid it still just does not work i dont know where to go from here
[HTC EVO 3D] Picard75:
Yeah, it seems those with Carrier branded EVO 3Ds in Australia have difficulty changing the CID. I have an Optus version as well but have not been able to unlock it with HTC's method yet.

What do you get when you try the command: fastboot oem writecid HTC__001?

I am assuming your bootloader is still unlocked.
[HTC EVO 3D] feifan:
My device has same problem.

I already change the cid to 001, but due to the mid is PG8631000 so we cannot flash the eu rom that has PG8630000 mid.

So maybe 2 methods to resolve it:

1. find the rom with mid PG8631000 and 1.49.0007 hboot....I cannot found it so far.

2. Change the mid to PG8630000....it seems impossible with S-ON.

Any idea?
[HTC EVO 3D] pehkblui:
This method is to s-off the device which requires I believe your phone not to be simlocked. It's a different issue.
[HTC EVO 3D] cdcapistran:
I'm following the method described here:

http://xdaforums.com/showthread.php?t=1272082

If so, I'm stuck in a loop!
[HTC EVO 3D] pehkblui:
Yes I have seen that post before. Unfortunately I think you are right here. That unlocking scheme requires S-OFF which they could easily achieve if their phones were on 1.49.0007 or 1.49.0008; whereas this ungrade exervise requires a sim unlocked phone.

These 2 methods are mutually exclusive in a sense.
[HTC EVO 3D] duytung27:
very thanks. i followed your tutorial and it's done....to 007 from 011....thank you very much (sorry for my english)
[HTC EVO 3D] monx®:
Another device with hboot .0012 succesfully S-OFF'ed.

▶ χdα-ρяємιυм
[HTC EVO 3D] madshabz:
Please note i am not a developer of any kind.

I was just thinking........ Would it be possible to downgrade the HBOOT if we somehow replaced the hboot file in our Carrier branded PG86IMG.zip and then flash it with a gold card?
[HTC EVO 3D] Metronom76:
Nothing will come ...:cool:
[HTC EVO 3D] jolly.jumper.:
s-on, locked and no system :/

Hey Folks,

i tried to get down from 18 to 7 with the instructions, step by step.

After changing cid (what doesn't work but i haven't realized) i locked unfortunately locked my bootloader.

Now my phone is unrooted, s-on and i can't flash new roms and with the ruu.exe i get an error. Also it doesn't boot and with the bootloader i can't wipe it.

So, what should i do?

Cheers

PS: i know that i have to improve my english :/
[HTC EVO 3D] pehkblui:
Once you relock your phone, you will need to go back to htcdev to get a new unlock token to unlock your phone again, especially if you have changed something in the system.

You may have to do more to get your phone to boot properly. I don't know what you have done but you may have to look for a RUU meant for your phone to get back the correct boot. At least that's what happened to me the last time I couldn't get the s-off correctly.
[HTC EVO 3D] shoodown:
Got successfull downgrade from 18 to 7. Thank you :)

Hint: if u flashed custom recovery when having S-ON don't forget to revert it to stock recovery image via fastboot usb.
[HTC EVO 3D] jolly.jumper.:
@pehkblui: Thanks a lot! It works. :)
[HTC EVO 3D] digitaljeff:
Would someone be able to link to the stock Rogers ruu as the link from filefactory in the op and stock ruu thread is now dead. Need to do this as I'm sending phone in for replacement due to touch screen issues. Thanks.
[HTC EVO 3D] hellboy13:
shoodown: I have an HTC method unlocked, S-on rooted Evo 3d with custom recovery (the CWM based revolutionary recovery). I cant seem to find the stock recovery Image anywhere.

Also when I try to run the command

adb shell dd if=/dev/block/mmcblk0p31 of=/mnt/sdcard/mmcblk0p31.img

the cmd window says device not connected. If I enable usb debugging and run the above command then it says access denied.

Need help on this as I seem to be the only one who is trying to downgrade from 1.49.0009 where the device is rooted & with custom recovery installed.

Any help would be highly appreciated!! :)
[HTC EVO 3D] pehkblui:
For some reason, some "root" method doesn't give you full root permission.

If you do "adb shell" on your command window, what do you see the prompt to be ? # or $?

If $, then do type "su". You should see # as the prompt now.

Then without quitting your adb shell, type

dd if=/dev/block/mmcblk0p31 of=/mnt/sdcard/mmcblk0p31.img

This should work.
[HTC EVO 3D] teemui:
can someone explain why need to downgrade hboot? Im on 1.49.0011 with revolutionary CMW S-OFF. is this something i need to do, sorry if being noob.
[HTC EVO 3D] rafy619:
hello im new to this but ive been trying to downgrade hboot 1.49.0013 on my evo 3d using the method listed on here but i downloaded all the files like it says to do i got the unlock bootloader done but when i type the command (adb shell dd if=.......etc)

all i get is this command is not recognized as internal or external bla bla bla. oh ones i got an error that says device not found. so wha should i do please help if you can thanks so much.
[HTC EVO 3D] steveathome:
The hboot 1.49.0013 is Vodafone and won't work currently. I have the same. Save yourself the grief and stay s-on rooted. If someone was successful I would like to hear. :)
[HTC EVO 3D] gav83collins:
Ok had it for about an hour now, antutu scored 6449 with set CPU on max / performance, flashed fine, without the need to re wipe cache/s once flashed, Il comment later on battery performance
[HTC EVO 3D] realmadrid_cf:
Unlock bootloader via htcdev.com, install Recovery mod, Root-->Flash Custom ROM (Leedroid) and try again downgrade Hboot.

Goodluck!
[HTC EVO 3D] hellboy13:
pehkblui : Didn't have on time yesterday, did it today. Got it to work am now S-off.

And I restored all my previous instals & data using a CWM backup I had made before the S-off.

Thanks for the TIP about SU

All is working great !! thanks :)
[HTC EVO 3D] st3v3:
Urgh spent hours on this last night on my dumb Optus phone which wont let me downgrade or change the CID, has anyone with a Optus phone been able to get S-Off?
[HTC EVO 3D] jampola:
haha, so yeah, this was the only way I could flash the zip. Don't know why but thanks!
[HTC EVO 3D] alliance_22:
I have Optus, and nope, can't get S-OFF on mine... been trying to work this out for over a month.

I've given up for now... just Root and S-ON
[HTC EVO 3D] st3v3:
lol think we need to start a club for it, im sure someone will work it out eventually just means no wifi on the fine LeeDroid rom
[HTC EVO 3D] steveathome:
Good effort none the less trying. I gave up much quicker. If nothing else I have learnt a bit about ADB and commands. :)
[Captivate General] Guster730:
Just wanted to make sure, I've never done this before. I used an app off the market (SGS unlock or something) to unlock my captivate. I stuck an old Tmobile SIM in I had and it didn't give any sort of error, and under APN's it said tmobile, so does that mean it worked fine? Just wanna make sure because I'm gonna sell the phone eventually.
[Captivate General] modest_mandroid:
Why not just test it by making a call?
[Captivate General] Jim Mitchell:
In a related question...

I have an AT&T Froyo 2.1 stock captivate that I rooted and flashed to:

SAMSUNG-SGH-I897

2.3.5

I897UCKK4

2.6.35.7-I897UCKJ3-CL614489

GINGERBREAD.UCKK4

I want to unlock it, but all my sim cards are AT&T.

Is there any way to tell if the phone is actually unlocked without another sim to test it with?
[Captivate General] modest_mandroid:
Dial *#7465625#, you should get a window that tells you if the network lock is on.
[Captivate General] Pirateghost:
if it was not unlocked, you wouldnt even be able to boot up to a screen to see the APNs, you would be stopped by a screen asking for your SIM Unlock code

if you get signal, data/edge, anything, with a different SIM then its unlocked
[Captivate General] Jim Mitchell:
THANKS!

I got:

Network Lock

[OFF]

Network Subset Lock

[OFF]

SP Lock

[OFF]

CP Lock

[OFF]

:p
[Captivate General] dappy15:
This doesn't work on CM7.1 does it?
[Captivate General] Baby Liz Sandra:
DLoad SGS Unlock PRO (Needs Root) from Market. Works fine!!!;)
[Samsung Epic 4G Touch] jemdude77:
Ok so I got a new epic touch. 2nd day I had it I rooted it. Fine... everything seemd to be ok, however I kept getting Loss of signal circle with cross through it and would have to keep removing the battery and restarting my phone to get a signal again. It would work for an hour or so but kept getting worse. So since this is the first time I rooted a phone I didnt know what to do... I thought maybe I should go back to stock, well fine... I thought if I do a factory reset it will go back to stock. Obviously I am an idiot and didnt know that I would have to remove the root. However, I set it to do a factory reset not backing up my data, and it seemed to be stuck so I took it to a sprint store and they did a factory reset. After that they asked me if the phone was rooted and I told them yes, and they said they cant do anything with the phone until I remove the root. Anyways, I still have superuser on my phone but since the factory reset I dont see the clockworkmod on the phone. When I go into that boot screen it doesnt show I have clockworkmod. How do I get clockworkmod back on the phone. I upgraded the modem from EG30 to EG31 and so far havent had LOS yet but we will see by the end of today, if I have to reset this phone from LOS again I am gonna go nuts. So I dont have any theme on the phone, Initially I had an Iphone theme and loved it but I thought that was the cause of LOS . Obviously the reset removed it... quite frankly I hate the sprint screens, I hate bloatware, and I like to have control of my phone, is there a way I can have my company name appear on the screen when it first boots up and no sprint B.S.? :eek:
[Samsung Epic 4G Touch] chunology:
Odin is your friend.
[Samsung Epic 4G Touch] jemdude77:
What do u mean?
[Samsung Epic 4G Touch] SocialReject:
You confused me.

You headed in a totally different direction than expected. Is this a question asking how to remove root or how to remove the Sprint splash screen?

By the way, a factory reset doesn't remove root.

Sent from the future.
[Samsung Epic 4G Touch] SocialReject:
One more thing...

You should've updated your modem to EK02 rather than EG31. You can't update to EK02 if you're not on the EG30 modem.

Sent from the future.
[Samsung Epic 4G Touch] jemdude77:
modem

what does the EK02 have thats different from the EK31?

also how can I install clockworkmod?

and finally how do I find out if Carrier IQ is running on my phone?
[Samsung Epic 4G Touch] SocialReject:
EK02 modem fixes Loss of Signal issues (or at least for me.)

Follow these steps to upgrade your system to 2.3.6 + Root + Clockwork.

http://xdaforums.com/showthread.php?t=1368180

I think there is a carrier IQ application in the market that answers your last question.

You could always flash an EK02 ROM from the Dev section if you want to completely remove it.

Sent from the future.
[Samsung Epic 4G Touch] jemdude77:
link doesnt work

the link doesnt work for me... ???
[Samsung Epic 4G Touch] SocialReject:
Works fine for me.

Just go to the development section and look up EK02 stock deodexed with CWM. It's posted by crawrj

Sent from the future.
[Folio 100 General] ozieee:
Sory for my english :)

When ı start my tap in recovery mod for update or factory data reset

say "booting recovery kernel image" and go black screen

but power led is on

ı can't update or reset

What can ı do ???
[Folio 100 General] Jon2555:
Try to reflash recovery with fastboot.
[Folio 100 General] ozieee:
Do you know how to ?

Is there anyone who can help me in this regard ?