yashsingh1/xdaforums huggingface dataset:
[Sprint HTC EVO 4G LTE] Anthonicia:
Props for trying and succeeding. Really see no reason it wouldn't work on 1.19. Sincerely doubt HTC foresaw someone bricking their phone intentionally to downgrade the hboot from 1.15 to 1.19.

Of course it can be prevented. If they wanted to they could encrypt the RUU so all installs needed a dynamic key. That would be a pain the ass for them and everyone else though.
[Sprint HTC EVO 4G LTE] sslbaron:
Sure do! ;)
[Sprint HTC EVO 4G LTE] kjcmusic17:
I think someone owes Mac that bounty that other thread! ;) Can't wait for this to be in a kit, I'm too much of a noob to attempt this.
[Sprint HTC EVO 4G LTE] celticking:
And I was considering doing the ruu for new radios.

Sent from my EVO
[Sprint HTC EVO 4G LTE] il Duce:
Moving this to development!
[Sprint HTC EVO 4G LTE] jkrlvgn:
Gonna try this tomorrow. If it works, or if a ton of others show it works, my part of the bounty goes to you. Pm me where to PayPal you, and I'll get you right after.

Also, even though it was an accident, f'ing brilliant! Thanks for sharing the info, and you deserve all of the bounty for this.
[Sprint HTC EVO 4G LTE] mrrogers1:
Man, I don't know if it's an awesome thing your girl is into this stuff OR a bad thing as she's skilled and brave enough to brick not one, but 2 (current) devices. :D

THIS!!! Thanks Mac!
[Sprint HTC EVO 4G LTE] rootlinux:
Awesome find.

This will make many people happy.
[Sprint HTC EVO 4G LTE] om4:
That's my fault for teaching her about android and now I'm out of $200 lol
[Sprint HTC EVO 4G LTE] xlxcrossing:
Just a reminder for OP....flashed phones will not work with this method as the bricking process erases the modified data profile and restores the original. If you have a flashed phone and don't want to reflash it do not use this method.
[Sprint HTC EVO 4G LTE] ASAPSEVEN:
Finally some good news, and hope for 1.15 S-OFF reading this just made my Friday! :D
[Sprint HTC EVO 4G LTE] xHausx:
I don't know, I kinda like letting the idea of people learning how to unlock phones manually. It not only helps people learn what they're doing but obfuscation, from what I've seen, is almost completely ineffective at preventing the exploits from being patched.

It sounds like the process still could be refined somewhat though. Have there been a lot of people successful with it so far?
[Sprint HTC EVO 4G LTE] eXplicit815:
This is a BIG step in the right direction. Unfortunately, I don't have a Linux box, and there is way too much margin for error with me using a VM to do this. I'll look forward to a bootable Linux method, or Windows method. Great work for sure!
[Sprint HTC EVO 4G LTE] sullivan7221:
+10 to allll that!
[Sprint HTC EVO 4G LTE] Captain_Throwback:
Define "flashed phones"? Every phone is "flashed" with something, so I guess I just need clarification.

*sigh*

I really don't want to go back to stock just to brick my device and try this method out. Especially since I'm already S-OFF. I'll be willing to try it on someone else's device, though . . . ;).

I guess I needed emmc_recover when I bricked my previous device(s) - or is that what the LP unbricker uses?. I guess the new version is what's allowing us this access while the HBOOT partition is writable?
[Sprint HTC EVO 4G LTE] il Duce:
UNTIL FURTHER NOTICE, I'M WARNING EVERYONE THAT IS *ALREADY S-OFF* TO

NOT

TRY THIS METHOD!!! - RELEVANT DETAILS BELOW

this method to achieve s-off is VERY similar to the method unknownforce used on the evo3D:

-original discovery thread > http://xdaforums.com/showthread.php?t=1547695

- updated thread with tools > http://xdaforums.com/showthread.php?t=1653777

Here's another toolkit for the same method from the evo3D:

http://xdaforums.com/showthread.php?t=1563342

Anywho, this method worked for the shooter for s-on folks, possibly some of the info contained above can help refine THIS method for the LTE, maybe even some creation for tools. I have told closeone (he made that last link tool) and maybe he'll decide to look into it for the LTE, maybe not.
[Sprint HTC EVO 4G LTE] yarrimapirate:
No. Native Linux is required. Cygwin cannot handle modprobes.

Yes. In addition, TWRP allows us to read and write blocks that can't be accessed on some phones after the ROM itself has booted.
[Sprint HTC EVO 4G LTE] dangle79:
are you implying there may be a method that doesn't require being unlocked and having TWRP at some point or was that just how you worded it?
[Sprint HTC EVO 4G LTE] eXplicit815:
So, there's probably not going to be any other way around this going forward?
[Sprint HTC EVO 4G LTE] KEYofR:
Well someone could try the 10 second power button. "supposed" to equal battery pull. The timer that watches and counts the seconds could be implemented in hardware outside of the running softwares control, and if so, it should work. Just need to time things carefully so that the 10 seconds runs out at the right time.

I'm not trying it on mine until the optimus or note2 comes out ;)
[Sprint HTC EVO 4G LTE] yarrimapirate:
Unless there's a secret way to gain write access to partition 4 on a stock, non-rooted ROM, probably not. In my experience, temp root won't allow partition 4 writes.

If anyone has a different way, I'm all ears.
[Sprint HTC EVO 4G LTE] eXplicit815:
I see what you're saying. I'm just trying to get the gears rolling to see if there are any ideas with getting it done another way. I don't mind doing the HTCdev unlock method, it's just that I've never wanted to report that. I know it only reports to HTC, and Sprint really can't do anything about it (unless they want to be an ass about it). I just know that the EVO 3D had a method for downgrade, but it required a battery pull, and if I knew what I was doing, I would research that avenue as well. Either way, we still have this method.
[Sprint HTC EVO 4G LTE] Captain_Throwback:
There's really no need to worry about HTCDev. Repost:
[Sprint HTC EVO 4G LTE] eXplicit815:
I guess that makes me feel a little better. I've been holding out for an S-OFF method for 1.15, and haven't taken any updates. I've been biting my nails waiting for something because there are things I want from Jelly Bean (obviously I want ALL of Jelly Bean), but this method has been the only way to do it. If S-OFF will make it to where it's reversible, then I'm game. I don't even need a custom ROM. I'll run stock, but I want GOOGLE NOW! LOL
[Sprint HTC EVO 4G LTE] namlas:
Does anyone have a rough estimate on how long it takes to write the 1.12 hboot? My write has been sitting at 'Waiting mode-switch' for a few minutes, now.
[Sprint HTC EVO 4G LTE] Tilde88:
my phone apparently died (battery) DURING the hboot flash... i thought i was SoL... All of a sudden one of the chunks said "failed", and brought me back into the terminal... i then realized that even though it WAS plugged in via USB, that all my power cycles drained the battery. it may sound irrelevant to you, but maybe the flash just froze, and you have to stop it (in which by dong so you corrupt your bootloader, but hey, who needs BL when you have QC DL mode :P ). after my initial flash 'Failed" i went and plugged it into the charger for like 30 mins, and emmc_recover did its thing after modprobe reset.

take this how you want it, i don't presonally recommend cancelling your bootloader flash, but if its stuck... well, its a call you gotta make
[Sprint HTC EVO 4G LTE] namlas:
Hrm. Guess I'll try that. I can see the process constantly scanning the device node via strace but the flash isn't moving. Think I have a usb plug around here somewhere....
[Sprint HTC EVO 4G LTE] sparytrainor:
Ok, yes, I get that.. Been stated many times.. I just don't understand the massive difference. I have tried every komodo kernel aside from the newest that only work on cm10.. I've tried several options on zarbos kernel as well... Guess I'm just screwed!! Thanks for pointing out my idiocity...
[Sprint HTC EVO 4G LTE] dozybolox13:
If anyone is worried about unlocking the phone and having to send it in for repair, I just sent my phone in and am waiting for it to be shipped back and haven't heard anything from HTC even though I used HTCdev unlock and my bootloader said "RELOCKED". I sent my phone directly to HTC as my local Sprint store didn't have the part it needed to fix it.
[Sprint HTC EVO 4G LTE] evoforevo:
so if I have windows 7 what is the easiest way to downgrade hboot. should I just wait for the live CD.
[Sprint HTC EVO 4G LTE] benny3:
Another success story....w00t!! now i need to feed the Panda. Awsome work you guys
[Sprint HTC EVO 4G LTE] ProcessorHog:
Thank you Captain, I stand corrected.

I guess it's the stock (carrier) update that locks it back, not the hboot itself. I should have remembered it because I wrote the secure flag back on using the s-on tool before I sent my phone out for warranty repair.
[Sprint HTC EVO 4G LTE] EVOMIKE025:
Thank you

---------- Post added at 07:58 PM ---------- Previous post was at 07:57 PM ----------

And thank you as well. I was wondering about that as well, to keep them all in one location or in one of the other extracted file's folders. Good advice, thanks

---------- Post added at 08:02 PM ---------- Previous post was at 07:58 PM ----------

Does it really matter when you do this because at some point you're going to want s-off since you are willing to risk this to downgrade correct? I believe and someone can correct me if I'm wrong, but I believe there is a way that you can get the tampered red text off as well as show s-on even though you are still s-off.
[Sprint HTC EVO 4G LTE] sullivan7221:
So, go ahead and laugh the rookie right outta here... I'm trying to keep up here....

I've read many referring to methods equivalent to battery pulls and its sounds as though the gerenal consensus is a battery pull would be better if possible???

With that said, a battery pull on this device is quite simple compared to the software trickery you guys are pulling off here. It's 11 screws to access it. 4 under the bottom cover, 5 at the top, and 2 to release the kickstand then the whole motherboard and screen push out as one unit. After that, remove one sticker and lift straight up to remove the battery. Simple.

If I made a video tutorial and a write up... Would it make the process a little easier for anyone?? I know the teardown like the back of hand, I've done it dozens of times! I know there is some floating around but the ones I've seen... Well frankly, they suck.

Thus is all I really have to offer to this progress... Let me know if it'd help??
[Sprint HTC EVO 4G LTE] EVOMIKE025:
I think the whole power down topic that is coming up is just to state that twrp allows to write blocks in partition that can't be wrote on when device is powered up.. so pulling the battery out would be irrelevant and unnecessary for what they are talking about doing or and when.
[Sprint HTC EVO 4G LTE] yarrimapirate:
You're spot on.

Reading and writing partition blocks are fully automated at this point. No need to disassemble the phone to achieve the same effect.

The suggestion was welcome though. There's always many directions to attack a problem.
[Sprint HTC EVO 4G LTE] Ladicx:
Hey guys, been closely following this thread since it was started. Awesome stuff.

I'm definitely going to give this some more time to dev before I attempt but in the meantime its safe to say that relocking, ruu, and all steps nessary to get lastest firmware won't hurt me with the hboot 1.19 when I want to attempt this?

Ive held out so long on hboot1.15 but if soff is still possible on 1.19 I might as well enjoy new firmware, radio, ect while I'm waiting on this to dev more yea?

Sent from my EVO using Xparent Blue Tapatalk 2
[Sprint HTC EVO 4G LTE] yarrimapirate:
I SPECIFICALLY relocked and RUU'd to 2.13/1.9 to make sure this would work....it does 100%.
[Sprint HTC EVO 4G LTE] louched1:
Yup, totally works on 1.19. I just wouldn't go updating past that if another update were released as there's a possibility that HTC will try to block this method in a future update.
[Sprint HTC EVO 4G LTE] sullivan7221:
I try! Thanks
[Sprint HTC EVO 4G LTE] doitda:
You Devs that collaborated on this are really ingenius.

Thanks a lot guys!

Add another one S-Off'd now.

Used linuxpendrive.com utility with Ubuntu 12.04.1 to make a livecd on a bootable memory stick and used my Laptop for the host.

Now my refurb is S-Off.
[Sprint HTC EVO 4G LTE] namlas:
FInally got my hboot successfully downgraded. For some reason, the device reset command sent by emmc_recover bin wouldn't remove the device nodes so the process kept waiting on 'mode switch'; I suspect this might've been due to udev in some way.

I got around this by running emmc_recover in one terminal, and then running rm -f /dev/sdc* && sleep 10 && ./emmc_recover_new -r in another terminal after every write done by emmc_recover to the phone.

This might help someone.. but I don't recommend this approach unless you know what you're doing.
[Sprint HTC EVO 4G LTE] :
With some help from yarimapirate, I can happily report than I am s-off. Huge thanks to everyone involved.
[Sprint HTC EVO 4G LTE] KEYofR:
I think the battery pull talk is to think of a way to cause the necessary partition to be corrupted _without_ needing twrp, which requires htc dev unlock and root.

Theoretically at least you should be able to do it by doing a totally official update, and pulling the battery at just the right time when the official updater is writing that partition.

Then you're soft-bricked and can qualcom download your new part4 of your choice without ever having done htc dev unlock.
[Sprint HTC EVO 4G LTE] EVOMIKE025:
Ahh I see what youre saying, but really what's the easier method you know? I would say it would be to already be unlocked and have a recovery flashed, would you agree?
[Sprint HTC EVO 4G LTE] :
Maybe, but you would have to hope you don't miss the proper partition on the battery pull and perma-brick it!
[Sprint HTC EVO 4G LTE] yarrimapirate:
Just for clarity, P4 is not the file we're looking to modify. P12 is where HBOOT is. We corrupt P4 in order to force QDL mode. P4 is exactly 1K in size and I imagine it would be extremely difficult to time your battery pull for that.

Would another partition serve to force QDL? Possibly. But what's the point? Once the phone is S-OFF you can remove Unlocked/Relocked/Tampered. There's a quoted post a couple pages back that very succinctly explains why registering for HTCDev unlock really doesn't matter.
[Sprint HTC EVO 4G LTE] InTheRough:
Wait for it.
[Sprint HTC EVO 4G LTE] ahecht:
It would be very easy for HTC to deny repairs for phones that are S-OFF (or have an engineering hboot) and have their serial number on the HTCDev naughty list. There are ways to tell beyond looking at the hboot screen. Can you relock and return to stock if your usb port craps out? How about the microSD reader?
[Sprint HTC EVO 4G LTE] yarrimapirate:
I suggest you stick to stock Sprint RUUs if you're that paranoid. That's the only surefire way to make sure there's zero chance of a warranty denial.
[Sprint HTC EVO 4G LTE] mlass:
I'm just wondering, has anyone ever been denied? Why would one send a phone in for repair to HTC?
[Sprint HTC EVO 4G LTE] corcgaigh:
As pirate said everybody worried about their HTC warranty should just stay stock. It shouldn't even be getting discussed.

Risk = reward
[Sprint HTC EVO 4G LTE] sketoe:
Longest wait of my life! (for the safer process to be complete) =]
[Sprint HTC EVO 4G LTE] sullivan7221:
+100
[Sprint HTC EVO 4G LTE] kf2m:
Not for a hardware problem. They would have to prove that whatever you did caused a HW failure. Case in point my phone is unlocked (HTCDev), and the microphone took a dive. I relocked, and RUU'ed back to stock. Guess what? Tomorrow I'll have a replacement. On the other hand if you flashed an OC'ed kernel then ran it at max, and China Syndromed your CPU you are effectively SOL.

The Magnuson-Moss Warranty Act of 1975 is your friend (thank your local gearhead).
[Sprint HTC EVO 4G LTE] il Duce:
Just to be clear, it's not going to be safer at all, it's going to be easier.
[Sprint HTC EVO 4G LTE] eXplicit815:
I think he meant "safer" from himself. LOL
[Sprint HTC EVO 4G LTE] scottspa74:
Nice. :thumbup: I saw your previous post and thought, 'sh1t, PSP gonna be going on his 5th Evo? :banghead: lol

hurled from my AOKP'd Evo LTE. Enjoy.
[Sprint HTC EVO 4G LTE] KEYofR:
Before you can ever arrive at some desirable result that actually is practical, someone somewhere has to fist try to figure things out when they are not only not practical or easy, but pure theoretical guesswork that may or may not even be possible ever.

Those someones are called developers. And this web site is a somewhere called xda-developers.
[Sprint HTC EVO 4G LTE] eXplicit815:
Pretty much... LOL. I don't trust any other sites, or their developers...
[Sprint HTC EVO 4G LTE] KEYofR:
That doesn't fairly address the real concern. I for instance can simply afford a new phone and have a mindset that has no problem with the risk.

Yet I still always strive to develop hairy risky hacks into things my friends who can not afford a new $600 phone can reasonably safely enjoy, because being in a club that's so exclusive that I'm the only one in it is no fun.

And, even if I can do the hairy risky 37 step thing, I still strive to automate it into something I can re-use for both safety and convenience.

I think it's perfectly reasonable to keep trying to think of ways to s-off without having to alert either htc or sprint that we did so. Even though we have an s-off method that is admittedly "probably no problem for most people most of the time". Saying don't s-off if you can't handle that risk isn't really fair.

What we have right now is a perfectly good starting point. What's so wrong with striving to make it even better?
[Sprint HTC EVO 4G LTE] Riff76:
You should refer your friends to a off contract nexus on a gsm carrier if they want full control over their phone without any risk, purchased directly from Google.

Your logic is flawed though. They are not entitled to s-off. They knowingly bought a locked down phone, they received what they paid for, no surprises.

Other devs are trying their best to make the process better, there will always be a risk involved
[Sprint HTC EVO 4G LTE] popper668:
Thanks Mac my part on the donation for serves's rendered has been sent..
[Sprint HTC EVO 4G LTE] corcgaigh:
I didn't know the donation link was up until I saw this, maybe because I almost exclusively use the app

My end of the bounty contract has also been honored as of now

Thanks man
[Sprint HTC EVO 4G LTE] yarrimapirate:
Nothing at all.

http://xdaforums.com/showthread.php?t=1940512
[Sprint HTC EVO 4G LTE] kmagn13:
Worked, but had to do the re adding part 4 a few times...may have been my linux distro... Hboot 1.19
[Sprint HTC EVO 4G LTE] NYCtoCOE:
finally got it all i did was folow instructions to the teeth and profit thans alot the only part i got stuck on was for some reason android sd tools dont work on 64 bit ubuntu so i had to download the 32 bit lib which was bretty easy two comand in termina and i got it goin now i need to grow some balls to s off
[Sprint HTC EVO 4G LTE] benny3:
I just s-off,ed with THIS rom and on the 1.05 baseband on WIN 7 without a hitch
[Sprint HTC EVO 4G LTE] NYCtoCOE:
quick question i down graded and got hboot 1.12 so do i now try to run the ruu or flash a 1.13 base rom
[Sprint HTC EVO 4G LTE] Mac_Gyver:
WIN7?? Like a VM on Win7 that is Linux or did you recompile eMMC recover for cygwin? :)
[Sprint HTC EVO 4G LTE] Mac_Gyver:
It's up to you. Some on the forum went to their roms, others did not even reinstall what they had :)

I, personally, for the sake of fluidity did RUU to an early ROM that the LazyPanda devs require to use LP. So it depends how comfortable you feel not running stock rom for LP.

Once you got S-OFF don't forget to update your hboot to the newer one from LazyPanda devs. It's by using the sdcard PJ75IMG.zip method. Otherwise, you won't be able to flash anything in fastboot.
[Sprint HTC EVO 4G LTE] benny3:
I downgraded the hboot on a physical linux box but i ran LazyPanda on my Win 7 laptop

---------- Post added at 11:58 PM ---------- Previous post was at 11:56 PM ----------

All i did was flashed the stock rooted 1.13 rom from OMJ that linked in my prior post
[Sprint HTC EVO 4G LTE] NYCtoCOE:
thanks alot forgot that last step but yea i just got s-off with out a hitch thanks for your hard work man feels good to be finally s off lol i just want to thank all thier devs for all their hard work on this
[Sprint HTC EVO 4G LTE] die4ucharper:
Step 18

I am at step 18 where I'm restoring the original block 4. I keep getting "Please Connect Device". I have held the power button for more than 30 seconds for at least 5 times.....and I keep getting this message when trying to restore block 4. Am I doing something wrong? Any ideas of how i should proceed?
[Sprint HTC EVO 4G LTE] KEYofR:
What you just said here has nothing to do with anything I said. I never said anything remotely like "entitled" and the point of aiming for an ideal solution has nothing to do with anyone feeling entitled to anything. And the fact that someone bought a locked phone in no slightest way invalidates the goal of unlocking it, or the goal of trying to find the best possible method of doing that unlocking. Stick to the facts please.
[Sprint HTC EVO 4G LTE] yarrimapirate:
Unplug your phone from the USB. Plug it back in.

Now restart from step 16.
[Sprint HTC EVO 4G LTE] die4ucharper:
Did that.....it still is telling me to Please Connect device. Have I bricked it for sure? I even went to a windows computer to verify it's still in download mode.....and it is....
[Sprint HTC EVO 4G LTE] closeone:
I should post an update for those waiting on the Live CD (then I'm sleeping).

It is being worked on. It will be released as soon possible. That's not an empty promise. It will. yarr and I (mostly him :eek:) have been, and are working on keeping the process as safe and painless as possible. That means, no accidental wiping out of your partition 4, complete recovery if something does go wrong (we're working on computers; they're great, but they aren't error-free... nor are we). I think that the extra time to go over the underlying code and procedures will be well worth the wait. Already, we've moved away from a two-step process (brick, unbrick), to a single "about-the-closest-we'll-get-to-one-click" process. That alone has helped.

I am working on improving the "user-friendliness" (anything that you will see, interact with, etc.) of the CD. It's basically a process of making things pretty, understandable, and functional.

I'm really hoping to have something prepped and ready to go soon (I don't know when).

Thanks for your patience everyone,

~co~

BTW: yarr has been awesome here. His code is amazing (I can't/won't/don't take credit for it). A lot of it will be used in the live CD.
[Sprint HTC EVO 4G LTE] yarrimapirate:
Restart Linux. Back up your working dir for the downgrade if you're running a live cd.

Seems obvious I know but I fixed a hang like yours by doing it once.

---------- Post added at 12:58 AM ---------- Previous post was at 12:49 AM ----------

Closeone is selling himself short. I owe him credit for a number of code submissions and general awesome ideas.
[Sprint HTC EVO 4G LTE] die4ucharper:
Thanks yarr....I'll give it a shot....I appreciate it! You're awesome =)

---------- Post added at 03:11 AM ---------- Previous post was at 03:01 AM ----------

Ok....You'll have to give me your paypal addy so I can give you some simoleons for helping me.....so I restarted Linux.....and when I do step 16....it just hangs as if it isn't doing anything.......I even ran the sudo modprobe qcserial to reset it, but it hangs there too.
[Sprint HTC EVO 4G LTE] yarrimapirate:
While it's sitting there at "Waiting device /dev/sdXXX..."

1. Open a second terminal window.

2. cd to your working directory

3. sudo ./emmc_recover -r

That should get things restarted.

<---- Paypal.
[Sprint HTC EVO 4G LTE] die4ucharper:
It says "Cannot reset device" =-(
[Sprint HTC EVO 4G LTE] yarrimapirate:
dmesg | grep "qcserial"

What's the last line of the output say?
[Sprint HTC EVO 4G LTE] die4ucharper:
Here's the last part of it:

9184.794632 qcserial 2-1.3:1.0 device disconnected

9683.428706 usbcore: deregistering interface driver qcserial