Everything on the HTC 8XT Obtained in 3 days...

Search This thread

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
Okay, I picked one of these meh HTC 8XT units up from Sprint. I've done some coverage for this at the general Diagnostic dial codes page, but I've handed them money, to try some stuff once I get it developer unlocked... have to return it before Wednesday at 6PM EST (18:00 -500Z) to waive the $35 restocking fee. After that I still have 14 days from Monday when this post originally was made, but I'll probably need donations to keep it a bit longer. I'm hoping some of this will apply to the HTC 8X and 8S, but there aren't any guarantees.

I first tested these dial codes without any updates, so this may change very soon.
It seems there are THREE apps that have been mapped to the dialer menu: CSDiag, DiagnosticTool_Sprint, and HFA

##DIAG# launches HTC Function Test (CSDiag 1.01.01g)
##PST# launches Service Tools (DiagnosticTool_Sprint)
##DATA# launches Service Tools as well...
##786# does too....
##522# launches then crashes....
##72786# launches Service tools.
##6343# launches DiagnosticTool (the same page that gets launched from the DiagnosticTool tile)
##33284# launches EmbeddedTool (Diag and FieldTrial)
##611 launches, but prompts a search for an app in the store, but no results. When no is pressed, it just shows a sample page.
##737425# launches the DiagnosticTool again...
##43424# the same happens as above...
##873283# launches the prl (what Sprint calls Network Profile) update procedure. (app is called HFA)
##MFG# launches EmbeddedTool (DiagnosticTool_Sprint)
Both apps are installed to the app list.

I'll just start with some pictures to start....
EDIT: All of the accessible diagnostic pages were saved in a zip, due to the vast number of screenshots.
wp_ss_20131104_0029.pngwp_ss_20131104_0030.pngwp_ss_20131104_0031.pngwp_ss_20131104_0001.png

wp_ss_20131104_0033.pngwp_ss_20131104_0034.pngwp_ss_20131104_0035.pngwp_ss_20131104_0032.png
Any hints on what to do next?

I've got some drivers to list too.

Normal (MTP Mode)
USB\VID_0BB4&PID_F0CA&REV_0100&MI_00 - Windows Phone
USB\VID_0BB4&PID_F0CA&REV_0100&MI_01 - HTCPO881

##MFG# -> Diag -> DM Mode
USB\VID_0BB4&PID_0BFF&REV_0100&MI_00
USB\VID_0BB4&PID_0BFF&REV_0100&MI_01
USB\VID_0BB4&PID_0BFF&REV_0100&MI_02
USB\VID_0BB4&PID_0BFF&REV_0100&MI_03
(All DM Mode Drivers are unrecognized, but they will take the generic WinUSB driver when manually "updating" the drivers)

Disassembly video!

CODENAME:
HTC Tiara
 
Last edited:

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
Power+VolDown+CameraFull=flashing mode
USB\VID_0BB4&PID_00CE&REV_0000
Windows 8 just installed Windows Mobile Device Manager and the HTC USB SYNC mode driver!

Power+VolUP apparently is Qualcomm MSM mode.
USB\VID_045E&PID_062A&REV_0000
No driver is getting installed.

Photos are on the way...once I can strip the EXIF data off if it.
 
Last edited:

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
List of apps that shipped with this phone.

HTC Converter
HTC Flashlight
HTC
HTC Burst
HTC Camera
Make More Space
Photo Enhancer

Check out "DiagnosticTool_Sprint" for Windows Phone http://www.windowsphone.com/s?appid=e69a2877-59b8-43ed-898d-554fbc4b8b2b
Check out "activate your device" for Windows Phone http://www.windowsphone.com/s?appid=c7095f7f-263f-408c-afab-eccdb03ef4c6
Check out "attentive phone" for Windows Phone http://www.windowsphone.com/s?appid=59fba4ce-c8d6-df11-a844-00237de2db9e
Check out "Beats Audio" for Windows Phone http://www.windowsphone.com/s?appid=54b4b23e-c2cd-4433-9c34-17a4105d1679
Check out "hearing aids" for Windows Phone http://www.windowsphone.com/s?appid=39a21410-f59b-43b0-826e-356c211d4fa8
Check out "HTC Fetch" for Windows Phone http://www.windowsphone.com/s?appid=d762309e-ef1e-4967-9025-86bed588fa16
Check out "privacy alert" for Windows Phone http://www.windowsphone.com/s?appid=276bcc31-4365-45cf-ba0d-6199d288a688
Check out "Sprint Music Plus" for Windows Phone http://www.windowsphone.com/s?appid=8b30dccf-6fd1-482f-ae0a-b76b98978095
Check out "Sprint TV and Movies" for Windows Phone http://www.windowsphone.com/s?appid=ce3b4564-8555-e011-854c-00237de2db9e
Check out "Visual Voicemail" for Windows Phone http://www.windowsphone.com/s?appid=ee89621f-ffc6-4701-9bce-c0ffa0661861
Check out "Scout" for Windows Phone http://www.windowsphone.com/s?appid=d9deb87b-7c01-469c-abeb-416614fb6742

List of apps that have updates, but need to be manually triggered:
Sprint TV+Movies
DiagnosticTool_Sprint
HTC Fetch
Sprint Music Plus
Visual Voicemail
activate your device
 
Last edited:

GoodDayToDie

Inactive Recognized Developer
Jan 20, 2011
6,066
2,933
Seattle
We will probably need the XAPs. Can you install the standard-capabilities version of the webserver and go check the Windows folder and its subfolders for .XAP files? If you can't find any, we will probably need a ROM dump (do we have one already?)
 

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
We will probably need the XAPs. Can you install the standard-capabilities version of the webserver and go check the Windows folder and its subfolders for .XAP files? If you can't find any, we will probably need a ROM dump (do we have one already?)
That's probably going to be the first thing I'll try. It'd be convenient if someone could reversion your webserver to generate a txt file that is similar to 'more' output or something similar to that; show all the files that are available from the directory that also shows the sub directories simultaneously, e.g. File tree. My command/dos skills are a tad rusty, so I'm not sure if I'm thinking if its either more or dir.
 

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
Hello there sneaky little files...


Code:
        <Setting Name="841.05.06_0_PartnerImmediateDialStrings" Value="##634#;##778#;##786#;##3424#;##3282#;##522#;##72786#;##6343#;##33284#;##611#;##737425#;##43424#;##873283#" />
        <Setting Name="841.05.07_0_PartnerNonImmediateDialStrings" Value="##634;##778;##786;##3424;##3282;##522;##72786;##6343;##33284;##611;##737425;##43424;##873283" />
        <Setting Name="841.05.08_0_PartnerAppProvisioningFilePath" Value="C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml" />
 

Attachments

  • Config_REGoperatorpkg.xml.txt
    25.7 KB · Views: 47
  • REGoperatorpkg.pkg.xml.txt
    12.9 KB · Views: 32
  • UpdateHistory.xml.txt
    182.8 KB · Views: 23
  • DeviceLayout.xml.txt
    10.9 KB · Views: 46
Last edited:

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
We will probably need the XAPs. Can you install the standard-capabilities version of the webserver and go check the Windows folder and its subfolders for .XAP files? If you can't find any, we will probably need a ROM dump (do we have one already?)

That's a no for both. I couldn't find any xaps anywhere, and couldn't find anything worth looking at in the 2 hours I had spent looking.
 
  • Like
Reactions: ngame

ngame

Senior Member
Mar 13, 2012
1,126
554
Mashad
That's a no for both. I couldn't find any xaps anywhere, and couldn't find anything worth looking at in the 2 hours I had spent looking.

Hello there sneaky little files...


Code:
        <Setting Name="841.05.06_0_PartnerImmediateDialStrings" Value="##634#;##778#;##786#;##3424#;##3282#;##522#;##72786#;##6343#;##33284#;##611#;##737425#;##43424#;##873283#" />
        <Setting Name="841.05.07_0_PartnerNonImmediateDialStrings" Value="##634;##778;##786;##3424;##3282;##522;##72786;##6343;##33284;##611;##737425;##43424;##873283" />
        <Setting Name="841.05.08_0_PartnerAppProvisioningFilePath" Value="C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml" />

if you want I can upload HTC 8x xaps.
I download them from a thread in xda but I don't remember where was it !
if You want please reply to this post to upload them for you ;)
 

-W_O_L_F-

Senior Member
Jul 10, 2010
1,030
941
Moscow
Hello there sneaky little files...


Code:
        <Setting Name="841.05.06_0_PartnerImmediateDialStrings" Value="##634#;##778#;##786#;##3424#;##3282#;##522#;##72786#;##6343#;##33284#;##611#;##737425#;##43424#;##873283#" />
        <Setting Name="841.05.07_0_PartnerNonImmediateDialStrings" Value="##634;##778;##786;##3424;##3282;##522;##72786;##6343;##33284;##611;##737425;##43424;##873283" />
        <Setting Name="841.05.08_0_PartnerAppProvisioningFilePath" Value="C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml" />
Code:
C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml
Download this file. It contains path to XAP.
 

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
Code:
C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml
Download this file. It contains path to XAP.
Unfortunately, I don't think I can access that with the Webserver. The second biggest challenge with this is that it doesn't have a rom for it yet..... But I have some app-ids that make it a little more helpful. I've got a complete list to post soon, which will be forwarded to whomever made the SysApp Updater.
 
  • Like
Reactions: ngame

ngame

Senior Member
Mar 13, 2012
1,126
554
Mashad
Unfortunately, I don't think I can access that with the Webserver. The second biggest challenge with this is that it doesn't have a rom for it yet..... But I have some app-ids that make it a little more helpful. I've got a complete list to post soon, which will be forwarded to whomever made the SysApp Updater.

I updated my post and put Part 6 and 7 .
excuse me for my low speed net.
for Bold part of quote. do you mean you can't find official htc rom ?
check this two links :
http://www.fshare.vn/file/JBGVWXGXU4/
http://www.fshare.vn/file/TEWJCLCVT8/
I think these links are for HTC 8x but I think there's no difference between wp8 nbh files.
I will search for 8XT and 8S Roms for you and I will provide links even I find any link . ;)
 

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
Pretty much... There hasn't been a HTC WP8 rom that's been leaked for US models. I know in the HTC 8X forum there are two roms available, but they both were European roms that were leaked. I have no clue about the HTC 8S, but bing doesn't come up with any results on the 8XT.
EDIT: looks like the ones that @ngame had linked to are asian and european roms
I'm sure HTC still uses the same format nbh that they have been using with their other WP8 devices.
 
Last edited:
  • Like
Reactions: ngame

ngame

Senior Member
Mar 13, 2012
1,126
554
Mashad
Pretty much... There hasn't been a HTC WP8 rom that's been leaked for US models. I know in the HTC 8X forum there are two roms available, but they both were European roms that were leaked. I have no clue about the HTC 8S, but bing doesn't come up with any results on the 8XT.
EDIT: looks like the ones that @ngame had linked to are asian and european roms
I'm sure HTC still uses the same format nbh that they have been using with their other WP8 devices.

@thals1992
I think the best work is download this leaked nbh and try to extract it.
maybe we can get more files . I'm not sure these xaps are full package of them or not .
These files are provided from a topic who said can unlock the htc 8x bootloader and get a Super CID and he take some screenshots that shows he can directly access to system files ! maybe he didn't find all xaps but if we can extract one rom we can access to all files and maybe can find a solution to cook unofficial roms at least like Samsung Ativ S (that it only Interop Unlock your phone)

Regards .
 

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
Updating OP with disassembly video!
EDIT: added the alternative name to the OP as well.

Insert any four letter curse word here.....
I have to go to work tonght, so I'll only have ~ 6 hours to work on it tommorrow, and that's if I don't have any time to mess with it tonight after work.

I'm hoping someone will see this and possibly donate a bit of money for this.
 
Last edited:
  • Like
Reactions: ngame
H

Habib.Mouissat

Guest
I have already decompiled the dlls from the 8x XAPs...most of them have the capabilities we need...and there are some interesting XAML pages in there...but I couldn't test it because I don't have a HTC


Sent from my RM-821_eu_euro2_248 using Tapatalk
 

compu829

Senior Member
Nov 5, 2006
352
305
I have a TMO branded 8x. (currently in for service). The only files I ever could get to load via dial codes is CSDDiag. I do have a dump of the xaps from an engineering 8x I found on the DFT forums. It is most definitely the old version of it. I tried every single AppID I could find in there, but nothing exciting launched...only CSDDiag and the standard pre-installed xaps worked.

I have been waiting patiently for someone to see if they can download a copy of CSDDiag onto their ativ S via the Microsoft store Proxy trick (Unlike the Samsung xap, the HTC one is listed as published, and you can click the "install" link if you go directly to it in the Windows store).

I will try and install the sprint tool into my 8x and see if it lets me do anything special. (when I get it back).
 

cro.dev

Senior Member
Sep 22, 2012
106
7
I have already decompiled the dlls from the 8x XAPs...most of them have the capabilities we need...and there are some interesting XAML pages in there...but I couldn't test it because I don't have a HTC


Sent from my RM-821_eu_euro2_248 using Tapatalk

I can test on my 8S everything just say.

I have a TMO branded 8x. (currently in for service). The only files I ever could get to load via dial codes is CSDDiag. I do have a dump of the xaps from an engineering 8x I found on the DFT forums. It is most definitely the old version of it. I tried every single AppID I could find in there, but nothing exciting launched...only CSDDiag and the standard pre-installed xaps worked.

I have been waiting patiently for someone to see if they can download a copy of CSDDiag onto their ativ S via the Microsoft store Proxy trick (Unlike the Samsung xap, the HTC one is listed as published, and you can click the "install" link if you go directly to it in the Windows store).

I will try and install the sprint tool into my 8x and see if it lets me do anything special. (when I get it back).
I tried all codes on my 8S and only show CSDDiag like you said. I already installed sprint tool on my 8S by windows phone store and only got window with MEID(hex), MEID(dex), imei, sim id and version. Nothing special.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    I totally forgot that I had seen a boot loader background image for Boost Mobile in the System32 folder, but I had forgot to download it off of it. That would have been their first Windows Phone for them.


    Sent from my RM-860 using Tapatalk
    The unencrypted xap was uploaded to http://xdaforums.com/showthread.php?t=2527281. I finally had some time to play with it last night. The good news is that I was able to "toast" myself some pages on the GSM-based HTC 8x. I was able to launch the USB page and enable DIAG mode! I was also able to figure out what RMNet mode does. This is the most interesting thing to me because it can be used for USB tethering as well as what is used on Android devices to connect to ADB. (Android Debug Tools).

    Also what is interesting is the enum for these modes. They are writing NVram variables. The Enum for it is as follows:

    USB_DRIVER_MICROSOFT_DEFAULT,
    USB_DRIVER_QC_COMPOSITE,
    USB_DRIVER_MASS_STORAGE,
    USB_DRIVER_MS_COMPOSITE,
    USB_DRIVER_ROUTER_SERIAL,
    USB_DRIVER_LOG_VIEWER,
    USB_DRIVER_RMNET,

    The switches only use USB_DRIVER_RMNET and USB_DRIVER_QC_COMPOSITE. When you disable either mode, the toggles set it back to USB_DRIVER_MS_COMPOSITE.

    The lowest level of this app can actually read and writhe NVRAM values.
    3
    did that quite a few times on my device. The first combo is for using HTC's ROM Update Utility (RUU) to flash new ROMS. the 2nd combo puts the phone into Qualcomm Download mode. This is a last-ditch disaster-recovery flash method that lets you interact directly with the emmc. If something happens that messes secure booting, you will get kicked into that state.

    you did just give me an idea though....all those key combos are doing is telling the phone how to start up i.e. what efi application to load. I wonder if we rip apart the efi apps stored in the EFIESP partition, if there is some kind of "super-secret key combo" that will toss the device into mass storage mode? All windows phones come with the "resetphone.efi" app, for example. There is also a "sigcheck.efi" file that we might be able to patch.
    1
    We will probably need the XAPs. Can you install the standard-capabilities version of the webserver and go check the Windows folder and its subfolders for .XAP files? If you can't find any, we will probably need a ROM dump (do we have one already?)

    That's a no for both. I couldn't find any xaps anywhere, and couldn't find anything worth looking at in the 2 hours I had spent looking.
    1
    moved to post 3
    1
    Sure, go ahead and attach them to your post. I just sat back down to work on it again.