Bricked diamond...

[CashMoney18]

Alright i have a telus HTC diamond (CDMA) and iv unlocked it with cmonex bootloader (The CDMA version on PPCGeeks). I dont know wut i touched but now my phone doesnt boot into windows, it just keeps resetting... When i type rtask c into MTTY (I can still get into the bootloader) it says

Calibration
No Card inserted
HTC_SMEM_CE_RADIO_DBG_FLAG: 300
Enter Radio Image

Iv tried flashing the sprint shipped rom with radio but that did not work...

does any1 have any idea of how to fix this?

[Shand359]

Alright i have a telus HTC diamond (CDMA) and iv unlocked it with cmonex bootloader (The CDMA version on PPCGeeks). I dont know wut i touched but now my phone doesnt boot into windows, it just keeps resetting... When i type rtask c into MTTY (I can still get into the bootloader) it says

Calibration
No Card inserted
HTC_SMEM_CE_RADIO_DBG_FLAG: 300
Enter Radio Image

Iv tried flashing the sprint shipped rom with radio but that did not work...

does any1 have any idea of how to fix this?

You MUST install HardSPL before doing anything else........also, try a hard reset......

[CashMoney18]

i do have a hardSPL... i have 0.43.CMONEX on the phone right now and i already tried hard reset many times but it does not work...

[Shand359]

i do have a hardSPL... i have 0.43.CMONEX on the phone right now and i already tried hard reset many times but it does not work...

try this one....

http://forum.xda-developers.com/attachment.php?attachmentid=37669&d=1177280888

good luck

[CashMoney18]

that will brick my phone 4ever... i have a CDMA Diamond... thats a GSM hardSPL not a CDMA hardSPL... i have the right hardSPL that is not the problem...

[Shand359]

that will brick my phone 4ever... i have a CDMA Diamond... thats a GSM hardSPL not a CDMA hardSPL... i have the right hardSPL that is not the problem...

Sorry about that. my mistake.........

[viperbjk]

When did that first occur ?
After flashing Hard SPL ?
Anything we need to know about that ?

Could be that NAND is broken. Do a check on bad blocks.

Cya,

Viper BJK

[CashMoney18]

No it was not flashing of the hardSPL... it must have happened when i was trying to figure out how to change the esn... only thing i cud think of that i did wrong was I did the QMAT security unlock with HTC on command which was in the QMAT manual... but i dont think that would brick it like this... would it? also how would i do a bad block check on a diamond... could u list the commands in order? i dont want to mess it up even more...

EDIT: Well apparently i do have bad blocks... what to do now? is that the reason why i cant boot into windows?

It also says my device name is a samsung... which i dont think is right...

Cmd>info 8

--- 2K bytes sector version ---

DEVICE NAME=samsung_k9k2g08
DEVICE ID=0xAA
DEVICE MAKER ID=0xEC
PAGE SIZE=0x800
TOTAL PAGE SIZE=0x840
BLOCK COUNT=0x800
BLOCK PAGE=0x40

Checking block information

BLOCK 523 (0x20B) is bad block
BLOCK 869 (0x365) is bad block
BLOCK 1696 (0x6A0) is bad block
Partition[0], type=0x20, start=0x2, total=0x63E
Partition[1], type=0x23, start=0x640, total=0x800
Partition[2], type=0x25, start=0xE40, total=0xE900
Partition[3], type=0x4, start=0xF740, total=0xC340

CE Total Length(with sector info) = 0x7C1BA00
CE CheckSum Length(without sector info) = 0x7BA0000

[CashMoney18]

bump... for viper 2 c :)

[viperbjk]

1. Ok ... what command did you use using QMAT ?
2. Did you change any bootmethod or anything else with for example debugtool ?

The bad blocks seem to be not the problem.

[CashMoney18]

the commands i used in QMAT were "rseed" and "rpass" "set 16 0"
i also followed these steps after the brick

1. Get mtty
2. Connect to USB, press enter
3. Type task 32, enter <--Donno what is it for
4. Type 28, enter <--format DOC
5. Flash CE Rom only
6. Hard Reset

but that did not work either...

Also could you give me some examples of commands on changing bootmethod as im not sure if i used any... and i did not touch any debug tools...

[cmonex]

the commands i used in QMAT were "rseed" and "rpass" "set 16 0"
i also followed these steps after the brick

1. Get mtty
2. Connect to USB, press enter
3. Type task 32, enter <--Donno what is it for
4. Type 28, enter <--format DOC
5. Flash CE Rom only
6. Hard Reset

but that did not work either...

Also could you give me some examples of commands on changing bootmethod as im not sure if i used any... and i did not touch any debug tools...


ok here's some tips/ideas:

try typing "boot" in mtty or qmat

if this doesn't get the OS booting then you can try "set 14 0"

if that's no good, then to read config flags you can use "readconfig" (as you have MFG spl), all values should come back as 0x0, if not, let us know.

for bootmodes you can check your current bootmode in oemsbl after rtask a. you can try setting it to 0 ("setboot 0" command after typing "rtask a") but i dont think that's the issue.
(note, all the other commands i listed are not for rtask, only setboot is.)

[CashMoney18]

alright i tried all the commands and heres the results

When i type just "boot" the device just keeps reseting

When i type "set 14 0" it comes back with a string of
HTCST ÚÈÒHTCE
and doesnt do anything

"readconfig" all the values are 0x0 like they should be i suppose

and when trying "setboot 0" it gives me an invalid cmd error while in rtask...

[viperbjk]

HTC_SMEM_CE_RADIO_DBG_FLAG: 300
doesn't seem to be 0x0. You are sure that all items in readconfig are 0x0 ?

Ok ... it seems that the bootmode is incorrectly set.

Try to "setboot 0" after "rtask a".
That will only work if your device is security unlocked :)

[CashMoney18]

Yes im sure that there all 0x0... unless im looking at the wrong thing but HTC_SMEM_CE_RADIO_DBG_FLAG is not in the readconfig...

Also it tells me that setboot 0 is an invalid command... and im pretty sure im security unlocked (SuperCID and the bootloader says security unlocked at the top)... only thing i can think of is maybe the 0.43.CMONEX bootloader does not have the setboot command...

Cmd>rtask a
Enter Radio Bootloader
POWER ON PMIC VREG_USB : SUCCESS!
ECHO ON MODE
setboot 0
Invalid cmd!...
readCID
@CID: 00000000

EDIT: Alright so i just found this new command "checkimage" and it came up with
Cmd>checkimage
SPL CRC checksum = 0x40142266 CE CRC checksum = bad=0x300
bad=0x45A
0xA069868D ExtROM CRC checksum = 0x0

which is where i believe the HTC_SMEM_CE_RADIO_DBG_FLAG: 300 is coming from... any ideas?

[viperbjk]

Ahh ok .... way better.

Yes, setboot is only available on MFG Bootloader.

As you can see, the CE OS CRC failed. So you need to flash CE OS again.
Be sure that you flash a valid ROM. Try an original one from HTC.
Maybe you've got a connection problem whilst uploading. Try to flash again using another PC :)

If that doesn't work out, it seems your nand flash is broken.

Cya,

Viper BJK

[CashMoney18]

alright so i flashed the original sprint shipped rom again buh that did not fix the checkimage error... so any more ideas on how i may fix this

NAND broken as in theres no way of fixing it :(?

Also i got a tip from someone aty ppcgeeks to flash the radio via rtask... would that make a diffrence as opposed to flashing normally through the bootloader and RUU?

[viperbjk]

Err flashing via rtask is possible ... but it's really user-un-friendly and more risky :)

I guess they thought about rwfactory command ...

I'll rethink the options in the next days and will come back to you.

Cya,

Viper BJK

[CashMoney18]

Alright so heres another update on my progress or not so progress... lol

I flashed the verizon CDMA radio that was just released (For the HTC TOUCHPRO but works on the diamond as well) and now instead of the phone resetting it just keeps vibrating right after the touch diamond text/Red info screen...

[viperbjk]

I really guess your NAND is broken .... :(

[CashMoney18]

broken as in theres no way of fixing it? completly bricked? :(

EDIT: Well PPCGeeks believes that my NV is corrupt... which sounds about right since i was playing with that...

sounds like your NV is corrupted :( that's a b*tch to fix. one thing you can try is a hard reset after flashing the vzw radio.

otherwise your going to have to Rtask to get the radio back. the bad thing is. if your dont have the MFG boot loader on the device i dont think you can flash the SPL from boot loader. SSPL must be loaded first

So any general how to's on how to do this? i do know that its risky buh its not like i can use the device as it is now... so might as well give it a shot...

[cmonex]

broken as in theres no way of fixing it? completly bricked? :(

EDIT: Well PPCGeeks believes that my NV is corrupt... which sounds about right since i was playing with that...



So any general how to's on how to do this? i do know that its risky buh its not like i can use the device as it is now... so might as well give it a shot...



hmm, really, what did you play with NV? if you can't access that via QPST anymore, then yes we can reflash NV partition using rwfactory, but we need a dump from another CDMA diamond .. I've been trying to get hold of no2chem on irc to get one :P


edit: that assumes that the cdma oemsbl does have rwfactory command. can you try issuing it without any parameters? it'll give an error but not "invalid command". at least you have MFG spl on it :)

[cmonex]

HTC_SMEM_CE_RADIO_DBG_FLAG: 300
doesn't seem to be 0x0. You are sure that all items in readconfig are 0x0 ?


isn't 0x300 just for USB disabling? CE should still boot fine if it is set (I tried that before), just won't see USB (of course I dont know CDMA devices)

[CashMoney18]

well i was playing around with changing the ESN to my Vogue ESN

I tried to change it via the files found in the NVM folder and copy the edited files back via EFS browser... but i guess thats exactly what ended up bricking it...

Alright hold on let me test the fwfactory command

And im also trying to get a hold of no2chem lmao seems like hes the guy that knows his way around the HTC's :D

[cmonex]

well i was playing around with changing the ESN to my Vogue ESN

I tried to change it via the files found in the NVM folder and copy the edited files back via EFS browser... but i guess thats exactly what ended up bricking it...

Alright hold on let me test the fwfactory command

And im also trying to get a hold of no2chem lmao seems like hes the guy that knows his way around the HTC's :D



not fwfactory. rwfactory.. though if you have the former you probably have the latter too.. I talk to no2chem quite often on irc, but I was offline for the last couple of days..

and yes he's great, we often work together on some projects :)

[CashMoney18]

well gud news 4 me i think.... i do have the rwfactory command
rwfactory
Wrong parameter!HTCSF kEØ(HTCEHTCSF kEØ(HTCE

now all i have to do is find out the parameters from hopefully no2chem and i should have my phone up and running right? :D

well not really running since i still need to figure out how to change my esn to my vogues but other then that im golden i think :D

[cmonex]

well gud news 4 me i think.... i do have the rwfactory command


now all i have to do is find out the parameters from hopefully no2chem and i should have my phone up and running right? :D

well not really running since i still need to figure out how to change my esn to my vogues but other then that im golden i think :D



we know the parameters - no2chem is only needed for the NV dump from his cdma diamond :)

[CashMoney18]

well i did backup the nvitems on my diamond before i messed with them... not sure if its the right file format or if theres more to the NV then just the items...

[no2chem]

we know the parameters - no2chem is only needed for the NV dump from his cdma diamond :)

well cmonex, lets get started on that!!!

[CashMoney18]

any updates on the dump? :)

[cmonex]

can you come on IRC maybe? no2chem is also hanging out there... if you are not sure what that is, then try this java irc link: java.freenode.net
change the channel to #xda-devs and the name to cashmoney18 or whatever you want then join :)

otherwise if you have an irc client, the destination is irc.freenode.net, #xda-devs

[CashMoney18]

Alright well i decided to give this diamond another try... (Still havent fixed it :() i still have the telus_nv_mfg files no2chem sent me awhile back and hoping to go on from there i guess... so anyone kno how to use them... specifically the parameters for the rwfactory command? the files are as follows

nv_mfg_telus01.nb 128KB
nv_mfg_telus1.NB 768KB
nv_mfg_telus02.nb 128KB