yashsingh1/xdaforums huggingface dataset:
[Sprint HTC EVO 4G LTE] il Duce:
26 is /devlog according to twrp recovery log.

Awesome username btw.
[Sprint HTC EVO 4G LTE] yarrimapirate:
Thanks and thanks. :D

I went straight to block 4 this time and as expected, as soon as it flashed the phone became responsive again (charging light came on). After that, I disconnected the USB cable and hard reset the phone with the power button. I was greeted with a welcome HTC screen.

I'm happy to confirm that I've successfully downgraded from HBoot 1.19 to 1.12! :good:

Before I S-OFF I'm going to restore my old block 26 and repeat the process by JUST corrupting block 4 to see if that works.
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Hey yarrimapirate,

Awesome to see you try this. AND you're 1.19! I wanna see you succeed in this, so keep us posted on what you did and what happens.

I want to make sure that I fully know what you did.

1. Did you have a SuperCID before you started?

2. Did you have a fake low main version in the misc partition?

3. When you used the unlock, and judging by your use of diff in linux you're comfortable with *NIX, did you have root on your phone or did you do dd as an unprivileged user?

4. This is where I want to be sure I know what you did, how did you compare the partitions after you flashed them.

- So you first backed up all of the partitions to be overwritten by the One X ones. Then you dd them out of emmc and diff them? Or did you reboot and have the QC DL mode and you used the emmc_recover_new to read the partitions?

- If you used emmc_recover_new to read what was preserved in the partitions in question in QC DM mode, did you specify the -c flag and input a chunk size in order to make sure that you got the whole partition out and not just the first x bytes? I imagine that you did you the chunk, otherwise all of your output partitions larger than x would end after like 20 kilobytes... can't remember where the 8 second window lives you.

- In case you or anyone else is unsure what this emmc_recover_NEW tool is, as opposed to the emmc_recover, it's a binary that I compiled from the source that Fuses posted. The emmc_recover that I saw floating did not yet have the -c support. However, the source code on the Fuses git repo has that.

Hat off to you for trying this! I actually think you are the first and only one so far, after myself :silly:
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Yeah, I think that it can be a lot worse :) MSM8960 has a lot of security features. Reading the ENG threads you can really see how much thought there is behind this gen of the processors.
[Sprint HTC EVO 4G LTE] yarrimapirate:
I was lazy so I didn't really prep the phone much.

I had recently used the most recent RUU (really needed the radio upgrade) and has reunlocked and flashed Fresh 5.3.1.

I did to the SuperCID mod, as I was thinking I might try/need to use an older RUU. So far I have not.

I did not modify /misc.

I had root on the phone when I originally ran unlock.sh. I had trouble with SU not working in ADB shell while the phone was fully booted. So I rebooted into recovery mode and entered shell from there. From there I was able to get SU working by prefixing it with a full path (/system/xbin/su).

I modified the unlock.sh script to add the full SU path. I have not tried to dd any of the blocks without elevated status. I will though.

The block files I used for comparison were gathered by phase 1 of unlock.sh (via dd) and placed in ./mypartitions Once I realized I needed to "rebrick" my phone, I moved them to ./bakpartitions in case I really screwed something up. On the second go around, I ran unlock.sh and it made another backup of my current blocks. Since I had only restored block 4 before doing this, the second backup gave me a snapshot of what was actually modified. Using diff to compare the directories showed only block 26 was different between the two. I used the ./spoofpartitions as a control, and diff reported differences between it and the other two directories on all block files except for block 13.

Clear as mud? :D

I did use your emmc_recovery_new binary.

I'm going to relock my phone and RUU the latest update again, then manually corrupt block 4 and see if I can repeat the process without root. The sticky point will be if SU works in recovery mode on the stock ROM.
[Sprint HTC EVO 4G LTE] Mac_Gyver:
You've pretty much got it ;) Since Fuses has the source code posted for emmc_recover, yeah, I bet the LP unbricker uses that. The newer versions also seems to have the 'chunk size' flag available to split up the upload/download.
[Sprint HTC EVO 4G LTE] Mac_Gyver:
L00L :p
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Oh yeah, it would be good to just do temp. I understand that people don't want to submit their real into to HTC ;)
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Awesome! Congrats!! And thanks for trying this. :)

You've juest freed up my Sunday form re-bricking.
[Sprint HTC EVO 4G LTE] mrrogers1:
Hats off, again, you Mac_Gyver and Yarrimapirate for taking the bull by the mfn horns and getting this. Quite amazing what you have found and I applaud you for sharing with the community.

I've been s-off since day one if the LP but this is going to be sooooo great (for a ton of people) "when" a noob friendly method hits the streets.

Great work and thank you.
[Sprint HTC EVO 4G LTE] pspunderground:
Can it be? Looks like I'll be bricking my phone later today.
[Sprint HTC EVO 4G LTE] cherylbaker:
I know.. now that a second person has done it I am getting excited.. could this actually happen.. I know little to nothing about UNIX (although my husband does) so I hope they get that live CD thing.. s long long time ago I had installed red hat but that was another lifetime ;)
[Sprint HTC EVO 4G LTE] CwbAnDroidCwB:
That's good times right there lol :)
[Sprint HTC EVO 4G LTE] pspunderground:
Haha, this seems doable in an afternoon. I've used some of the tools mentioned, so I am all for bricking this phone for some 1.12 goodness.

Mac_Gyver and yarrimapirate, thank you. From all of us.
[Sprint HTC EVO 4G LTE] KEYofR:
Holy s*** awesome!
[Sprint HTC EVO 4G LTE] phreezex:
I did my EVO 3d back when , I'm willing to try this later tonight or tomorrow @ my linux box... Looks like some people owe these guys that bounty!

Awesome find

Sent from my iPhone 7 which looks the same as my iPhone 4 in my iGay case
[Sprint HTC EVO 4G LTE] Siya Nová:
Even though im 1.12 s-off already (i got stuck with hboot 1.50 on the 3D so I can relate) I would like to say F*** you HTC and your locked bootladers! :DOn behalf of all the 1.15-1.19 hboot ppl. We should all send them emails with included screenshots to show them how the great devs at xda have trumped their wittle security once again. I'm glad you guys figured it out and were kind enough to share. At the end of the day these devices are our property and we should be able to do what we please with them. Maybe someday HTC will get tired of paying ppl to add security features that our community will exploit anyway:rolleyes::p
[Sprint HTC EVO 4G LTE] scottspa74:
Damn, it ALL sounds pretty "sticky" to me :eek:

You guys are amazing.

I'm already S-off, but thanks for being awesome.
[Sprint HTC EVO 4G LTE] pspunderground:
Is block 4 the only block needed to be corrupted on both 1.15 and 1.19? I could make a simple script if that's the case. Its nothing more than running commands, taking the output, and plugging it in into the next command.
[Sprint HTC EVO 4G LTE] yarrimapirate:
It appears to be, and I think scripting this wouldn't be too hard at all... but I did all this (and wrote this post) this morning before either coffee or food. So I'm done for at least an hour. :p
[Sprint HTC EVO 4G LTE] pspunderground:
Well, as soon as my Xubuntu download finishes, I'll try my best to script it and downgrade myself.
[Sprint HTC EVO 4G LTE] sparytrainor:
I desperately want to try this, but I desperately need to know. If something goes wrong, is there any saving it??
[Sprint HTC EVO 4G LTE] om4:
You should be fine as long as you make the backup, phone will stay in qualcomm download mode until it's restored
[Sprint HTC EVO 4G LTE] yarrimapirate:
I added a zip with everything you'll need (and nothing you won't) to the above post.

---------- Post added at 02:00 PM ---------- Previous post was at 01:55 PM ----------

It looks like the MEID of the phone is stored in block 4. I could upload a copy of my backup with my MEID removed, but people would need to add their own with a hex editor before using it.

---------- Post added at 02:08 PM ---------- Previous post was at 02:00 PM ----------

Qualcomm download mode seems to be very forgiving. I let block 26 upload overnight and forgot to turn off power management, so it died halfway through the transfer. The phone just needed to have its power button held for 30 seconds and it was ready to take another file.
[Sprint HTC EVO 4G LTE] closeone:
This is what happens when I sleep though a lot of the day. Oops.

Thanks to yarrimapirate for the confirmation of partitions that have to be "zapped," you can expect a release of the new HBOOT Downgrade Toolkit by the end of the day (or soon thereafter). ;)

~co~
[Sprint HTC EVO 4G LTE] om4:
That was my thinking, someone would have to try it and confirm though
[Sprint HTC EVO 4G LTE] louched1:
And if that doesn't work?

Additional Info:

I did get "The bricked device is on /dev/sda"

I swapped the c with the a but left in the 12.

I'm sitting at "Waiting for /dev/sda12"

Should I ctrl+c out and run "sudo ./emmc_recover_new -f ./hboot_1.12.0000_signedbyaa.nb0 -d /dev/sda -c 24576" instead?
[Sprint HTC EVO 4G LTE] yarrimapirate:
Open a second terminal window and try a "sudo modprobe -r qcserial." Try it while holding down the power button. I think mine was a little finicky when I was first doing it as well.

/dev/sda12 is correct...though /dev/sda itself is a little strange. Are you using a LiveCD?

Lol this 5 minute posting limit is killing me.
[Sprint HTC EVO 4G LTE] louched1:
Will do. I actually had Ubuntu just crash on me (first time that's happened). I'll jump back on the horse with this new trick!

---------- Post added at 05:14 PM ---------- Previous post was at 04:55 PM ----------

No LiveCD. I have a dual boot and I'm in Ubuntu 12.04.

The second terminal window trick doesn't seem to be fixing it either.

the /dev/sda thing is from running ./brickdetect.sh

The output is:

Searching for bricked device...

The bricked device is on

/dev/sda

Use the above node to blah blah blah
[Sprint HTC EVO 4G LTE] om4:
You may have to kill the terminal and try again. I have yet to try this so I'm not in any real position to give advice on it, just a thought
[Sprint HTC EVO 4G LTE] mlass:
power button did the trick for me, thanks
[Sprint HTC EVO 4G LTE] louched1:
Sure, rub it in. :P
[Sprint HTC EVO 4G LTE] om4:
I've got a huge bag of salt in the trunk :D
[Sprint HTC EVO 4G LTE] louched1:
lol

Nothing I'm doing is getting a response once it's "Waiting for device sda*...."

I foresee a trip to the Sprint store in my future.
[Sprint HTC EVO 4G LTE] e495957:
So after doing these steps do I have to ruu to 1.13 to run lazy panda or what?
[Sprint HTC EVO 4G LTE] 18th.abn:
Hey, what partition is hboot on the evo?? Is it p12?????
[Sprint HTC EVO 4G LTE] {ParanoiA}:
Been following the thread...great work guys. Already been s-off so no need to try this but I haven't seen this mentioned at all and was wondering....will the phone actually charge while in "bricked" mode? If not maybe a full battery warning should be mentioned somewhere.
[Sprint HTC EVO 4G LTE] louched1:
Sprint hopes to have a new phone for me on Tuesday. I can't remember the last time I was without a smartphone for more than a few hours. How am I going to poop without one?! Pray for me people!
[Sprint HTC EVO 4G LTE] om4:
They have this collection of pages bound together usually by staples and called magazines. They tend to come in issues numbered using a sort of catalog system. They are light and cover a range of topics from from health to fashion, technology, sports and a wide variety of other topics. They were used as reading material to pass the time. Might help pass the time while you wait for your phone ;)
[Sprint HTC EVO 4G LTE] closeone:
Thanks. Apps are closed for now. I will post again when I finish test two. Thanks for your interest.

Old post below.

Thanks,

~co~

__

Hi everyone. I've got a first build almost done. I however need some people to test.

Please read this!

This is NOT a good way of getting a copy of the HBOOT Downgrade Toolkit for this phone early! While unlikely, There is a chance that this will brick your device beyond recovery. Please know this! Assume the worst-case scenario.

If you would like to test, please PM me.

Your phone must be HTC Unlocked with HBOOT 1.15 or HBOOT 1.19. It must be already S-ON.

Please have a blank CD-R handy.

Please read, and put the following text in the body of the PM word-for-word (except for the places where I ask for info):

Sorry for the strictness of this, I just want to make sure that you know what you're getting yourself into.

I'm sorry, Please don't assume that you will get a response to your PM. Once I am no longer accepting testers, I will post a message here. If Mac_Gyver and yarrimapirate are interested in testing, please send me a message. ;)

Thanks,

~co~
[Sprint HTC EVO 4G LTE] lawnguy:
Guess what I'm doing as I read this?

Reading.....

Praying for you :D

---------- Post added at 07:55 PM ---------- Previous post was at 07:51 PM ----------

Ok, so how do we get this for windows?
[Sprint HTC EVO 4G LTE] Fuzzy Wuzzy:
You...you are awesome. Have a one-eyed smiley, on me. :cyclops:
[Sprint HTC EVO 4G LTE] om4:
I'd wait for the distro, when the shell script is more refined and the toolkit is ready it will be released as a discount image you burn to disk, then you just open the boot menu during pc start up and select to boot from cd/dvd rom. The live cd will unpack the Linux environment along with the toolkit and you follow the directions brick and downgrade directions
[Sprint HTC EVO 4G LTE] ScottHW:
My though is this: if it's so vitally important to pull a copy of the backed up block 4, why not move that step (9.) up to right after you created the backup file with dd up in step (6.) ?

Thanks for the stellar work. I still have HBOOT 1.12.0000, but have been struggling like mad to feed my pandas. Hope to get it sorted soon so that I can flash the updated PRI and finally get some LTEs up in mah Baltimore.
[Sprint HTC EVO 4G LTE] om4:
Because you need to exit the shell script first to avoid any possible complications
[Sprint HTC EVO 4G LTE] lawnguy:
So, boot the disc and its just commands in linux?
[Sprint HTC EVO 4G LTE] closeone:
Why.. why... Thank you very much. :cyclops:

Just as a note, you likely won't see this on Windows. Windows' USB stack... frankly... well.. sucks. Detection is way too slow for this to work in the time period we have, to flash the device before popping out of the mode that we use to flash (the newer emmc_recover might compensate for that, but I can't say... the flashing is still limited by how fast Windows can detect the device. I'd discourage the use of VMs as well.

(Please take that with a grain of salt.. there may be some inaccuracies in that statement)

~co~
[Sprint HTC EVO 4G LTE] om4:
It's a bit more complex but close one is writing a better shell script to try and automate as much as possible

---------- Post added at 08:16 PM ---------- Previous post was at 08:15 PM ----------

True, Linux has better access to hardware then windows, Unix in general has better hardware support. I hate windows' software stack
[Sprint HTC EVO 4G LTE] rootlinux:
It just seems logical that Linux works better on our phones because well, basically that is what is on our phones. :)

I think if more people tried Linux they would not want Windows anymore.

Unless you are a gamer.
[Sprint HTC EVO 4G LTE] om4:
No, even games run better in Linux, I use wine all the time and games run miles better in Linux. I used to think it was some sort of emulation trick with the dlls but valve ported l4d and on full settings got something like 45% boost in performance regardless of frame rate which now after some optimizations is also miles ahead of Windows now.
[Sprint HTC EVO 4G LTE] yarrimapirate:
/dev/sda SHOULD be your first hard drive on most modern systems.

Can you post the output from a

$ df -h

I really think you may be pointing at the wrong disk, even though brickdetect.sh is pointing you there.

I flashed Fresh 3.5.1 just to get root, then ran Lazy Panda. I couldn't get Panda to work with the stock 2.13 ROM with superSU loaded.

Yep. P12 houses HBoot, P4 is the key to forcing Qualcomm download.

I had a higher battery percentage when I came back out of brick than before I went in. I *think* it still charges.

I had luck with loading Fresh 3.5.1 and running Panda. After I got S-OFF I loaded CM10.

---------- Post added at 06:34 PM ---------- Previous post was at 06:30 PM ----------

At least in VMWare, assigning of a USB device to a guest adds a few more seconds onto the process. Windows is already slow enough, I think the entire 8 second window would be gobbled up trying to use a VM.

I'd love to take a look at your installer. :good:
[Sprint HTC EVO 4G LTE] cgrimm9:
I glad so glad there is people out there that Risk there phones day in and day out to give us options we should be able to do in the first place. I made a mistake when I first got my evo I accepted the ota update not knowing anything about this phone I should of known better.
[Sprint HTC EVO 4G LTE] closeone:
Certainly. ;) I'll send you a PM when I send it to everybody else.

--

On that note, I'm still looking for a few more testers. Make sure that you read my post here fully, for instructions.

Thanks,

~co~
[Sprint HTC EVO 4G LTE] louched1:
df -h gives the following:

Filesystem Size Used Avail Use% Mounted on
/dev/sda7 22G 6.6G 15G 32% /
udev 2.9G 4.0K 2.9G 1% /dev
tmpfs 1.2G 868K 1.2G 1% /run
none 5.0M 0 5.0M 0% /run/lock
none 2.9G 152K 2.9G 1% /run/shm
[Sprint HTC EVO 4G LTE] closeone:
Okay. I think I have enough people as testers now. Thanks!

I'll have the build up hopefully shortly.

Thanks,

~co~

Edit: I haven't yet responded to PMs (so you will get a PM with the ISO).
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Yeah, don't worry just yet about this. I think we may be able to get you back in business.

Do me a favor and grab your kernel messages. To get the freshest logs, unplug your phone and then plug it back in.

Then run:

sudo dmesg

Paste anything having to do with USB, Qualcomm, qcserial, sda (or sdb or sdc). If there is anything like your serial # or something sensitive, cut that out.
[Sprint HTC EVO 4G LTE] MeestaAytch:
Everyone please spread your thanks to this man, OP, and yammipirate... i forgot the name and I refuse to click back and find out I'm already posting... I'll just call you yammi :). And I'll go back and give you a thanks arrrrrr
[Sprint HTC EVO 4G LTE] louched1:
I think pirate was onto something with ./bricktest.sh giving the wrong disk. I tried sdc12, no dice. Then I tried sdb12 and it recognized the 30 second power button reset. I'm currently installing HBOOT 1.12 to something. Hopefully it's my phone! lol
[Sprint HTC EVO 4G LTE] flashinglights:
Successfully downgraded my 1.19 hboot down to 1.12 fairly easily thanks to you'll (mac and yarr), thanks for your work. :good:
[Sprint HTC EVO 4G LTE] e495957:
do you mean fresh 5.3.1 or did you find the old 3.5.1 somewhere? Thanks!
[Sprint HTC EVO 4G LTE] louched1:
IT'S ALIVE! (and with HBOOT 1.12) :D
[Sprint HTC EVO 4G LTE] om4:
Ahh! Kill it with fiyah!!
[Sprint HTC EVO 4G LTE] yarrimapirate:
Sweet. I'm glad you figured out where I was going with that.
[Sprint HTC EVO 4G LTE] romeoh:
First of all i want to thank Mac_Gyver, yarrimapirate, and Closeone for their great help and honestly you guys did a wonderful job. i just wanted to know is there any other simplest way to downgrade the hboot, i don't have an advanced knowledge in android developing but i wanted to know if it will be an automated way to downgrade the hboot in the near future or not. Again Thank you all for your work and i'm so happy that we finally can get s-off on our Evo lte now.
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Oh noez! What have I done!?!??!!??!?!?!?!
[Sprint HTC EVO 4G LTE] louched1:
Don't you worry about that. I totally did. I'm currently waiting for LazyPanda to reboot. It said it should take 30 seconds and I shouldn't touch my device. Screen is black and it's been 300 seconds.
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Closeone is working on a LiveCD that will make it darn easy. Just sit tight. :cowboy:
[Sprint HTC EVO 4G LTE] om4:
Ouch I hope I didn't jinx you
[Sprint HTC EVO 4G LTE] il Duce:
Wow looooooong time no see! PM me dude what you been up to? Seriously hit me up :)
[Sprint HTC EVO 4G LTE] rootlinux:
Very true.

Have not used Wine in a long time or even my PC much.

Crossover worked well also.

I also ran vmware within Linux to install Windows on Linux. :)

Now I have a dual boot setup with Windows 7 and Mandriva Power Pack.
[Sprint HTC EVO 4G LTE] Anthonicia:
Mine did the same. Just reboot it yourself. For some reason adb doesn't want to reboot it at the end. Keep it plugged in of course.
[Sprint HTC EVO 4G LTE] Mac_Gyver:
Ha, same thing happened to me. Go to unlimited.io and get the unbricker toolkit <http://unlimited.io/lteunbricker.htm>. This may happen from time to time and the guys over at LP took care of making a tool to fix it. You'll have to follow the instructions closely but it's not that hard. It will probably spring back to life on the first try.

But sounds like a reboot will do, <http://xdaforums.com/showpost.php?p=32773482&postcount=160>.

Now that I am thinking about this, perhaps another unlimited.io tool will work. They have the tool to exit out to the QC Download Mode <http://unlimited.io/qhsusbdload.htm>.
[Sprint HTC EVO 4G LTE] closeone:
Sorry I haven't pushed anything yet. I'm cleaning up a few small issues before I send this out. I'm really, really sorry for this.

~co~
[Sprint HTC EVO 4G LTE] louched1:
Yeah, running the unbricker now.

I was on the newest base with hboot 1.19 and have Viper4G 2.0.2 on my phone.

Should I run an RUU before running LazyPanda? I know the instructions say it only works on RUU 1.13 but that was also written before people were able to downgrade hboots. Anyone have any ideas? I don't know if my heart can take a third bricking in one night.
[Sprint HTC EVO 4G LTE] ssojyeti2:
I really don't understand why you're apologizing for doing everyone a huge favor???:p
[Sprint HTC EVO 4G LTE] om4:
Too polite, do I have to beat you with a stick to toughen you up, tell people its ready when it's ready and don't apologize lol
[Sprint HTC EVO 4G LTE] Riff76:
Get an old version of fresh rom and flash it. I'm on the my 2nd LTE cause the first time I did it I got bricked and error 16 after and sprint couldn't fix the error. No deductible insurance from best buy got me a new LTE. I was hesitant at first but followed directions with fresh rom and it worked without a hitch on the new phone
[Sprint HTC EVO 4G LTE] il Duce:
Can you keep track of these intermittent needs and solutions please? It's important when forcing a brick to have as much info as possible posted in the op or second post (which if you don't have I can get). That way if someone does run into an issue, they can find the info on the first page, rather than freaking out and taking their recoverable brick to sprint. Thanks again!

EDIT : YOU HAVE POST 2 NOW ;)
[Sprint HTC EVO 4G LTE] closeone:
That's just the way I am, I guess.

Um... please don't. /sad puppy

But, on a positive note, I've sent out the Alpha to testers. :)

~co~
[Sprint HTC EVO 4G LTE] pspunderground:
Do you have a GTalk to update you on the process?
[Sprint HTC EVO 4G LTE] closeone:
Sent PM with info. ;)
[Sprint HTC EVO 4G LTE] lawnguy:
Just sent you an invite on gtalk

its my name MT
[Sprint HTC EVO 4G LTE] louched1:
Has anyone been able to get S-OFF after downgrading to HBOOT 1.12? What ROM were you on when you did it?
[Sprint HTC EVO 4G LTE] yarrimapirate:
I flashed Fresh 5.3.1. Panda didn't like stock 2.13 with SU.
[Sprint HTC EVO 4G LTE] flashinglights:
I ran lazypanda with viper 2.0.2 installed after downgrading. It worked just fine.
[Sprint HTC EVO 4G LTE] Virus:
excellent work guys !!!