[HTC EVO 3D] digitaltoast:
Having spend a couple of days getting KitKat to work, as Mrs Toast was getting "OK Google" envy, I thought I'd persuade her to let me open her Otterbox and root her HTC EVO 3D which was identical to mine.

So, using the things I'd learnt before and written up here (https://gist.github.com/digitaltoast/11364569) I ran the HTCDEV unlock tool. That worked fine.

For S-OFF I ran the JuopunutBear controlbear, which also worked.

At this point, hboot is now called JuopunutBear 1.53.7777

Downgraded hboot to 1.49.007 to run revolutionary to flash recovery.

So far, so good. All as per my previous experience.

But the mistake I made this time was to downgrade radio to 11.77.3504.00P_11.25.3504.06_M from 11.77.3504.00U_11.25.3504.06_M via http://www.androidfilehost.com/?fid=23329332407576138.

I hadn't done this last time, but I was getting oddness with calls - had to turn on speaker and off again to hear a caller.

As that was the only part of the CM11 instructions I hadn't followed, this time I did it.

But after this point, something had locked the bootloader again.

The display now says:

*** LOCKED ***
SHOOTER_U PVT SHIP S-OFF RL
HBOOT-1.49-0007
RADIO-11.25.3504.06_M
OpenDSP-v02.6.0.2226.00.0202
eMMC-boot
Jul 12 2011,15:29:51

Incidentally - CID getter says CID is: HTC_001

Nothing will install now. Here are a few things I've tried - remember, everything from the cable to the laptop is identical to my last successful mission.

Tried TWRP:

jonski@jonski-K53E:~/Desktop/EVOupdate$ sudo fastboot flash recovery openrecovery-twrp-2.7.0.1-shooteru.img
sending 'recovery' (6590 KB)...
OKAY [ 1.317s]
writing 'recovery'...
FAILED (remote: not allowed)
finished. total time: 1.632s

I get "Model ID incorrect" when trying to install the TWRP PG86IMG.zip file from here http://techerrata.com/file/twrp2/shooteru/PG86IMG-twrphtcd-shooteru-2.0.0RC0.zip

Inside the zip file, the android_info file says:

modelid: PG8610000
cidnum: SPCS_001
mainver: 1.11.651.2
hbootpreupdate:12

(Hmmm, my CID is HTC_001 - is that related?).

I went back and tried running controlbear again, but it says "device s-off already".

I re-read http://unlimited.io/support.htm http://unlimited.io/jbtroubleshooting.htm

jonski@jonski-K53E:~/Desktop/EVOupdate/controlbear$ sudo fastboot flash boot boot_backup.img
sending 'boot' (16384 KB)...
OKAY [ 2.634s]
writing 'boot'...
FAILED (remote: not allowed)
finished. total time: 2.949s

jonski@jonski-K53E:~/Desktop/EVOupdate/controlbear$ sudo ./ControlBear -f
========= ControlBear 0.11 beta for JuopunutBear S-OFF ==========

Restoring from fastboot....
Step 1
Step 2
Ok
Waiting device
Found device...Pushing backup
Restoring backup
Failed to restore

And various other commands:

Starting up......
Testing ADB connection
Test 1: Rebooting into bootloader
Waiting fastboot (6/60)
Waiting.....
Test 2: Booting device into JuopunutBear boot-mode
Waiting ADB.... (60/60)
Test 2: Booting FAILED
Reboot device manually
Reboot command failed!!
Bootloader unlock failed?

I tried TacoRoot: https://github.com/CunningLogic/TacoRoot

The README is unclear, but says: "For this exploit to work, you must have booted recovery at least once after your last factory reset" - trouble is, I don't HAVE recovery.

Later on in the README there are some links:

"These misc_versions below are for EMMC devices only!!!!!"

There is no explanation at all about what they are.

There's something about it here http://www.androidpolice.com/2011/1...w-temporary-root-exploit-for-all-htc-devices/ but when that page says to download "this file" - well, it's a broken link.

So, I can't use HTCDEV to unlock, I can't get anything to install via PG86IMG.zip, Juopunutbear says it's already s-off.

jonski@jonski-K53E:~/Desktop/EVOupdate/controlbear$ sudo ./ControlBear
========= ControlBear 0.11 beta for JuopunutBear S-OFF ==========

Device S-OFF already

Also tried http://www.mediafire.com/download/hsdai3cydckp7ld/htcsupertoolv3.rar and even ignoring the zergrush virus warnings, when I run it it opens a dead-link http://barbey.me/ site and although it claims to have rooted it, it doesn't.

The dark blue on black writing makes it near-impossible to read, and error messages vanish immediately.

The rest of the functions are just errors like:

Unable to chmod /data/local/gfree: No such file or directory
/system/bin/sh: ./data/local/gfree: not found
Press any key to continue . . .

Any ideas gratefully received! incidentally, the phone DOES boot up and load Android OK. I just can't seem to install any sort of recovery.