yashsingh1/xdaforums huggingface dataset:
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
As my understanding, the first step should be loading the HEX file (which I think we found) and the MBN file (which I think we still miss). After that the phone will become SD device. The 2nd step is to load partition table and SBL1/2/3, TZ, RPM, etc.

Anyway, I will check those files to see if you can load. Thanks.
[Desire HD Q&A, Help & Troubleshooting] tjnapster555:
my DHD problem is exactly as yoyrs

i install a app in stock ROM didn't root my device and it was installing then did installing for long

then i pulled the battery then on it show htc logo then off then never on

its not charging but when connect to PC show as QHSUSB_DLOAD) :(
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
You are welcome brother. We still working on a fix. You are welcome to help.

---------- Post added at 09:01 PM ---------- Previous post was at 08:49 PM ----------

I taught we the SD device part done, reason is because when i open software programmer (QPST),and select Multi-Image Tab, i select Sec Boot 2.0, and select advanced,it shows the files needed to get the device into hboot or bootloader mode. You can check it out if am wrong.

So as i was saying, when i click start after selecting Multi-Image tab and Sec Boot2.0, it loads the HEX file and then gets stuck at partition.

But after adding the partition file i uploaded, it now gets stuck on the file next to partition advance.

Maybe the SBL1/2/3,tz,RPM is for the samsung devices as i saw those files in the brixfix files.

Fromthe advanced option in Multi-Image tab, we need partition,fsbl,amss,osbl(which i think is the bootloader{or hboot}).

Or i could be wrong.
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
Welcome on board [MENTION=5704878]tjnapster555[/MENTION]. If you have Linux experience, can you try to run the Perl script as post #19 and check if you get same result. http://xdaforums.com/showpost.php?p=49675637&postcount=19

FYI: as [MENTION=4864296]darkspr1te[/MENTION] post here (http://xdaforums.com/showpost.php?p=33082185&postcount=29), the HEX and first step MBN files should be loaded by EMMCSWDOWNLOAD. However, I keep getting 'cookie error' with that (screen attached).

When I try the 'multi-image' tab as you did, I got error too.

I agree with you regarding that DHD has different partitions than samsung, and the osbl should be the bootloader/hboot, but I still don't think we have move the phone to SD mode. If the DHD is in SD mode, after you plugin the cable, the pc should have some new drives (like you plugin a usb drive or sd to the memory slot).
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
For the multi-image tab, select multi-sec.2.0, that's why you keep getting that error.

So try that and see.
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
I can't find the 'multi-sec 2.0'. I have QPST v2.7 b378.

Also if you have access to a working DHD (I think we need it as rooted), we need backup the whole internal memory as #2 of this post, then we may can get the partition table from the backup file.

http://xdaforums.com/showthread.php?t=1188510
[Desire HD Q&A, Help & Troubleshooting] tjnapster555:
sorry never use linux
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
If you have access to a Riffbox and want unbrick your phone now then you can use that to fix the phone. If you can wait then just subscribe to this thread and stay tuned. Hopefully we can find our way soon ;)
[Desire HD Q&A, Help & Troubleshooting] tjnapster555:
i will wait for you guys and hoping someone will unbrirk his device :)
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Its there check the image below.

And i was thinking of backing up another DHD so that we can get all the files for unbricking the device.

But i dont have another DHD. So then, how about we put up a thread in the DHD forum giving the guidelines on how to backup the DHD for unbricking purpose.

What do you think?

Also do you have any idea on how to backup the DHDs mbn files?
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
Thanks to be patient ;)

Agree. We should discover lots of info from the working DHD.

As my understanding, to get a full emmc backup, the phone has to be rooted, and has a SD inserted with at lease 2G free space (since DHD has 1.5G internal flash), asthis post (by TrevE) , user can use command 'dd if=/dev/block/mmcblk0 of=/sdcard/mmcblk0.img' to copy whole internal emmc to a file on microSD. I think the command can either run from a terminal app on the phone or use 'adb shell ..' command from a PC when phone has usb development on. Please note the generated file should not be posted publicly since the backup file has the phone's IMEI number and other phone data.

This post(by E:V:A) shows how to get the partition info from a working phone. I also find a tools folder which has the fdisk/gdisk/ect apps from the zip of Brixfix V2 (by darkspr1te) but don't know if them work on DHD or not.

However I don't think either of above method will provide us with MBN file directly, even we may can build MBN from the whole emmc backup.

Also I still don't think we have put the phone to SD mode for loading partition table and other xbl partitions. As the 2nd picture from this post, we need the right MBN file (which is a mini file system to run the phone as SD).

FYI: with QPST software download app - multi-image tab, if I only select partition.mbn and uncheck all others, I got 'Could not Communicate in Diagnostic Mode' error.
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Wow!!! We have to ask [MENTION=4864296]darkspr1te[/MENTION] how he got/made his mbn files. Also, If we get a volunteer to backup his device, it would be saved into a .img file. Then the person could delete his/her personal info from the backup by opening it with a .img software like Power Iso or something.

I dont know why you get that error but with mine, it flashes the partition file and gets stuck since i dont have the next file. But when i leave all the mbn files selected, it flashes the partition file then stops the flash due to the next file being incorrect.

Anyway did you try removing the battery and re-inserting it?

Maybe you flashed a HEX file and its kind of blocking the communication.

---------- Post added at 07:33 PM ---------- Previous post was at 06:34 PM ----------

I just found these. It appears to be able to do a full emmc backup.

This(Documentation on the software) and That(download link to the file)
[Desire HD Q&A, Help & Troubleshooting] tjnapster555:
i see some unbrick videos of DHD they remove battery and sim card when unbricking the device
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Is it the video where they remove battery, dismantle the phone and remove the board to connect to the pc?

Can you send the link to the video??
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
I also found these,and this
[Desire HD Q&A, Help & Troubleshooting] tjnapster555:
i was talking about the htc unbricking project in which he use htc sensation for unbrick and he remove battery and sim card
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Ooooh okay.

That process doesnt work with the DHD.

This afternoon i dissembled my DHD in order to see if a wire trick could get it into SD mode, but it didnt work.

---------- Post added at 08:40 PM ---------- Previous post was at 08:11 PM ----------

Guys! We really have to put up a thread on how to backup the DHD's EMMC.

Thats the only way we can get all the files to flash with QPST.

If someone volunteers to do a backup, its going to look like this.

And we would have all the files.
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Good News!!!

I have found a DHD user. And i am going try to persuade him into letting me root it for him.

Then i can do the backup.

Now would be the best time get a process to do a full mmc backup, also people are saying the format that the backup is saved with(which is .img)

Cannot be opened with any of the .img opening programs.

Can we change the backups file extension into a .zip,tar etc??
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
The backup file which is generated by 'dd' command is a raw copy of the emmc, regardless what file extension you name, it is not either in disk image format nor in zip/tar format, it is just data block by block (or sector by sector). It should have partition table and other partitions all line up one by one. You have to open it with a HEX editor, then search '55AA' as partition marker, and also search the IMEI number (assuming it is not encoded or encrypted) and mask it. After we identify the partitions info, then we can split the file to multiple files, still raw data but they are one file per partition. After that we still need find a way to pack the file to MBN file so QPST can use (if we use the multi-image tab). Again if we can find an existing MBN which can put the phone to sd mode, then we don't need to build MBN files since we can just write the raw data partition files to the emmc (as it is in sd mode).
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Okay.

But cant we back the emmc....partition by partition? So that each partition is outlined?

Dont know if you get what i am trying to say

Also, i have searched for other mbn files to get the DHD into SDMODE, but no progress.
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
To get backup partition by partition, we need to know the partition table first, then calculate out the offset (start block) and count (size of partition) parameters for dd command. dd whole emmc is the easiest way and will not miss anything. We can always cut out a portion of the whole thing by hex editor (select a chunk and save as new file).

Anyway, I am reading this page by [MENTION=4864296]darkspr1te[/MENTION] (http://xdaforums.com/showthread.php?t=1914359&page=2), the post #13, 15, 16 have lots of info for both getting partition info and backup. Post #18 has details on how to calculate offset and size based on partition table.
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
[/COLOR]

okay.

I just PMed [MENTION=2709464]dexter93[/MENTION]. In one of thier threads, it seemed as if they were able to achieve backing up partition by partition.

Also i just found these sites, guess one of them contains something which looks like the partition table and other stuff for the DHD.

http://tjworld.net/wiki/Android/HTC/Vision/HbootAnalysis#rtaskC-TalkingtotheRadio

http://tjworld.net/wiki/Android/HTC/Vision/BootProcess
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
http://xdaforums.com/wiki/HTC_Vision

section '6. Backup and cleanup' mentions the gfree can backup part7backup-.bin, etc. Don't know if gfree is open source.
[Desire HD Q&A, Help & Troubleshooting] tjnapster555:
how about we goto DHD android development and ask for dev to give emmc backup ?
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
It is good idea but when I open that forum and then check the top post ' [MANDATORY] RULES FOR DEVELOPMENT ', it mentions that 'THIS FORUM IS ONLY FOR RELEASING AND DEVELOPING ROMS AND KERNELS.'

Looks ' Desire HD Q&A, Help & Troubleshooting ' (http://xdaforums.com/forumdisplay.php?f=885 ) is the best forum to do that. I will open a new thread later.
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Okay, how about we check the Inspire 4g forum as the Inspire 4G and DHD have the mbn files. The only changes are the drivers.

Also i am working on getting the working DHD guy to bring it for rooting.
[Desire HD Q&A, Help & Troubleshooting] Gussta:
What happened with your phone when you press power button?
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
Nothing happen:( and the charging led is never on.
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
Nothing...No Charge lights,vibrations, nothing.

The only thing that shows that the phone is alive is that it shows as QHSUSB_DLOAD when connected to the PC.
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
I opened a new thread to ask backup, feel free to comment there and request other info. Thanks.

http://xdaforums.com/showthread.php?p=50631137

Also opened a new thread in http://xdaforums.com/general/help forum to find protocol doc:

http://xdaforums.com/showthread.php?p=50632205
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
Yes please, it has the same chip so the MBN should be work for both.

Great, thanks.
[Desire HD Q&A, Help & Troubleshooting] Gussta:
Try reading this thread. It is short.

http://xdaforums.com/showthread.php?t=2331454

It look like some of the phone just don't do proper shut down or something like that.

In the other scenario, what i'm thinking, if you read documentation about emmc what is in your phone, here is the link:

http://omapworld.com/iNAND_e_MMC_4_41_IF_data_sheet_v1_0[1].pdf

You can see on page 7 chapter 1.6. about defect and error managment that emmc fix bad sector (if it any) by himself, but for this he have to get Vcc and Vccq voltages for same time to do so.

How ever forceing it with power button or with in case of first link (thread) with alarm (how force and try switch on mobile phone until it power on) to force nand with constant voltages to fix himself my do the trick.

I had a problem with HTC desire HD of my friend sou I read a lot about it. His phone had a litle difrent problem but in the other hand really familyar with yours if we talking to emmc. His phone didn't want to remember anything because controler for vccq 3,3v in nand was burned. This 3.3v is for tuneling. Something like in picture: http://en.wikipedia.org/wiki/File:Flash-Programming.svg but with 3.3v instead with 12v.

Guys I have to go sleep because it is now 00:04h my local time and I work in the morning. I will stay tuned to help you as much as I can.
[Desire HD Q&A, Help & Troubleshooting] darkspr1te:
Hi All,

I've gone throught the thread last night (in between the hours of 1am and 2) , I got the jist of the thread but I have some questions.

1. One user said he got the device into the SD-CARD more, which means the device accepted the the hex which is a small loader file and then was able to write the sd-card mini arm application, is this correct?

2. you have access to a device that has root and is working ?

3. you know what type of partition your using (MBR/EBR aka dos or GPT )

4. you know for sure the cpu type (s)

5. have a large drop box to upload the files for reversing so we can figure out with parition/file is sbl1/2/3/rpm/tz etc

6.google+ account to chat in for live reversing of the files plus remote ssh acccess to a pc with device connected.

Not all of these are required but it will make it go quicker if we have as many as we can.

darkspr1te
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
1. I downloaded two hex files.( first one was nammed emmcbld.hex and 7x30prg.hex). When i flash 7x30prg.hex through QPST, the device shows up as a motorola fastboot device and requests for adb drivers but this resets to QHSUSB_DLOAD when i do a battery pull or try to flash a file using fastboot.

The next hex file(emmcbld.hex) turns the device into an unknown mass storage device in device manager, in linux, it fails to enumerate the device as the kernel log show. It keeps on giving errors.

But with this same emmcbld.hex file, QPST is able to flash partition.mbn and other files. So i am thinking its partially compactible with the DHD.

So for your answer, after the emmcbld.hex has been flashed, it fails to flash any of the msm7x30.mbn files. In linux its gives an error saying "partition not found after opening multi" something like that.

2. I dont own the working device. It belongs to a friend and trying as much to get it for the backup.

3. I have no idea about those partitions you named.(maybe if you could elabrate more on them)

4. The device runs on an MSM7x30 Qualcomm CPU

5. Personally i dont have a dropbox(i hate that file sharing site....always 404 error), but i do have 4shared,MEGA,Google Drive if thats okay.

6. Yes i do have a plus account..what do you expect,its a must for android users.:p

Thanks for dropping by.
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
I found this and it seems like a program for generating .hex files.

Here is the link.

http://picprojects.org.uk/projects/mplab/mplabhowto.htm
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
Thanks to reply at 4 in the morning:) Do you mean that in the case of emmc controler is burned, the phone may also go to the QHSUSB_DLOAD mode? If yes then it is hardware issue, and loading anything or jtag can't fix it, right. Thanks.
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
Hi darkspr1te, I think we make a big progress as getting you the QHSUSB_DLOAD exporter involved:) Thank you to spend time on this thread!

I did read your brixfix thread (v1 mostly since it has your working history) and after we got some HEX and MBN files (thinks mickeyasamoah found them), mickeyasamoah and I tried them with both QPST and qdload.pl. With QPST, I got mostly same rsult as mickeyasamoah replys above (I didn't get partition.mbn loaded successfully as him). With my modifed qdload.pl, I confirmed the HEX/BIN file works since after that the phone reboots and reply to some streaming download message. However, I can't go ahead to loading MBN file. You can see the result from post #44 (http://xdaforums.com/showpost.php?p=50274440&postcount=44 ). Personally I don't think we get into the SD mode yet.

FYI as mickeyasamoah and tjnapster555 suggested, we open a new thread in Desire HD forum to ask partition info and emmc backup (http://xdaforums.com/showthread.php?p=50631137), also another post to ask for streaming download protocol doc (http://xdaforums.com/showthread.php?p=50632205). No input so far yet.

BTW, DHD has Qualcomm 8255 chip. When connect to QPST, QPST use 7x30xxx.hex as default file, and some posts mention 7x30 is the code name of 8255 chip.

Also FYI: Fuese replied my PM mentioned he thought our DHD is emmc issue, riffbox should be able to fix it without jtag. So riffbox must have the HEX/MBN/PartitionTable/partitions for DHD.

Thanks for your help!
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
As my understanding this is to generate HEX from code binary, but normally no one can have Qualcomm's binary. Also I think the HEX files your found works somehow, we just can't move forward from there, either the motorola/fastboot mode (after loading MPRG7x30.hex), or streaming dl mode (after loading ARMPRG.HEX/EMMCBLD.HEX). Anyway, this is a good reference so let us keep it for now. Thanks.
[Desire HD Q&A, Help & Troubleshooting] darkspr1te:
I checked DMSS manual you provided on that thread, thats the limited instruction set, also thats a very old document and as E:V:A pointed out to me once, often the qualcomm docs are far behind the actual reality , please find attached a revised copy of the same document, if you compare section 3.3 between the two you will see what i mean.
[Desire HD Q&A, Help & Troubleshooting] darkspr1te:
plus some more reading :)
[Desire HD Q&A, Help & Troubleshooting] darkspr1te:
[MENTION=5407209]fairsimple[/MENTION] , a hex file is just a format of file like a word doc , but you can also have a docx and .wri files, it contains the same data but different format , in our case we take a compiled binary(.bin file from the compiled code) and convert it to the .hex format for upload(text version of the bin file, see hexdump linux tool). the .hex format is used in anything from a arduino/atmega chip to a PIC micro (as per your link)

For completeness i have included the 7x30 compiled for me by a 'ahem' qualcomm coder , worth a try.

I will try and get the .mbn file too.

if we have a device that is in sdcard mode i would like to analyze it via a ssh session, if my theory is right then the bootloaders are still on the emmc, in my case the first 100mb was left free for this same reason, on two other msm devices (churt burst and a chineese clone s4) i found the first 100mb was free also, this allowed me to copy the entire emmc, remove the 100mb and i am left with the entire boot table, from here i just compared each parition (manually using a hex editor, no auto tools for this) to a backup copy from another device, this also allowed me to find the damaged bootloader and write a specific brickfix for the devices.
[Desire HD Q&A, Help & Troubleshooting] darkspr1te:
A couple more gems from the net,

QFIT (flash image creation tool)
[Desire HD Q&A, Help & Troubleshooting] mickeyasamoah:
I have being running the FixDHD.pl in linux.

The Error it gives is:

And i am thinking the mbn file we are using lacks a file called partition.xml used in creating the mbn files. As it stated Here, the 6TH topic.
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
Thank you for all the docs, looks I have enough to read over this weekend. :)

I quick checked the streaming dload doc, and find the magic/hello, securitymode and openMulti commands which I used not to understand in qdload.pl. However looks we need to send PartitionTable command (0x19) before openMulti(0x1b), and this matched the error message we got before (as post #44 http://xdaforums.com/showpost.php?p=50274440&postcount=44 )

The m7x30-emmcbld.hex you attached is same as the ARMPRG.HEX which we used in post #44

(thanks mickeyasamoah who attached it in the zip in post #39 http://xdaforums.com/showpost.php?p=50232279&postcount=39)

I will read the protocol doc first, then to add the partitiontable command and try to use the partition.mbn from mickeyasamoah.
[Desire HD Q&A, Help & Troubleshooting] fairsimple:
So we got same output. As I mention above, I will edit fixdhd.pl and try the partition.mbn you found before (in post #48 http://xdaforums.com/showpost.php?p=50347790&postcount=48).

Yes I think that xml is one important input to build MBN. However, darkspr1te is super good on partition table and MBN so he can help us after getting some input from working DHD phones.
[Desire HD Q&A, Help & Troubleshooting] darkspr1te:
I think ive posted wrong hex file, i will hunt down the other, i've archived a lot of stuff and still not setup my file server. i somewhere have a hex file given to me for this device (7x30 not specifically the DHD)

darkspr1te

---------- Post added at 07:25 AM ---------- Previous post was at 07:09 AM ----------

was hunting around and found this, worth a read and it includes info on creating certain MBN files

http://94it.net/a/jingxuanboke/2013/1206/203631_19.html
[Desire HD Q&A, Help & Troubleshooting] Jengo:
(New) member in the club

Hi guys,

I also have a DHD in QHSUSB_DLOAD mode.

Here’s my story:

• I had a running “taktiK 4.4.2” for some weeks, before that a “JellyTime“ for many months without any problems. (4ext Recovery, latest)

• One day I had many frozen black screens where I had to pull the battery. Each time after that it was working again (for some time).

• So I decided to wipe cache and dalvik cache in recovery.

• After that the ROM wasn’t booting, stuck at the ROM boot screen.

• So I tried to dirty flash the ROM again, which gave me an error during flashing.

• Then I wanted to do a clean install, so I tried to format all partitions, which also gave me an error.

• After a reboot 4ext Recovery wasn't able to locate/mount the system partition.

• After next reboot into recovery everything seemed to be working again, so I formated everything and flashed the ROM, which worked without any error.

• Reboot -> frozen black screen -> pulled the battery

• DHD was dead.

Now, I could have bricked it or it is a faulty eMMC.

Then I read this thread in an early stage and started hoping. But I also found a local shop who does RIFFBOX JTAG repairs for 20 €. So I asked for the USB debrick method and obviously he didn’t know about that because he told me it wasn’t possible. So we agreed that I disassemble the phone (I find electronics quite interesting) and bring in the mainboard for JTAG flashing. After disassembling I googled for the JTAG pin descriptions and found out that it is possible via pure USB with the RIFFBOX. So I got back to this thread.

I can still ask in the shop, but I think it is more fun to do it by yourself. So if I can be of any help, I’d love to do so.

btw: I did already the “./qd.pl --check” one month ago and got exact your same results.