[Q] Unbrick Telus Desire HD (QHSUSB_DLOAD after flash boot.img to S-ON DHD)

83 posts
Thanks Meter: 38
By fairsimple, Member on 8th January 2014, 06:03 PM
Post Reply Email Thread
22nd February 2016, 07:04 PM |#201  
Thanks Meter: 3
Hi, I just run --check on my bricked Senstation XE and parsed the output according to DMSS protocol documentation

Requesting SoftwareVersion...
SENDING: 7e 0c 14 3a 7e // Software Version Request
RECEIVED: 0d 0f 50 42 4c 5f 44 6c 6f 61 64 56 45 52 31 2e 30 37 41
Version: PBL_DloadVER1.0
Requesting Params...
SENDING: 7e 07 c7 84 7e // Parameter Request
RECEIVED: 08 06 01 01 00 90 00 00 14 70
Params: 06 01 01 00 90 00 00
// Byte1: 06 - Protocol version (implemented in phone)
// Byte2: 01 - Minimum protocol version (non-secure implementation)
// Byte3,4: 0100 - Maximum write data length supported (256B)
// Byte5: 90 - Phone hardware model number
// Byte6: 00 - Flash device size code (invalid/unrecognized/unsupported)
// Byte7: 00 - Flash device type code (currently not supported)
SENDING: 7e 0b 00 00 00 00 00 00 00 00 2a 18 7e // Unlock (64b sec. code)
RECEIVED: 03 00 06 9e 4c
Invalid Response: 03 00 06 // NAK (Unknown/invalid command)
Dumping chunk...
SENDING: 7e 09 2a 00 00 00 00 80 2f e5 7e // Memory Dump (optional)
RECEIVED: 03 00 06 9e 4c
Response: 03 00 06 // NAK (Unknown/invalid command)
Requesting Reboot...
SENDING: 7e 0a 22 5f 7e // HW Reset
requestReboot send ok
RECEIVED: 02 6a d3
Param: 02 // ACK

I can see that Unlock command is not supported, don't worry about it, flash device and size codes are probably zero becasue it was designed for old NAND flash chips and became obsolete for eMMC (there maybe different command for this in newer protocol version) so nothing to do with eMMC health and last the dump command seems to me have invalid parameter size - it should be 24b address and 16b size but the script sends 6B. As phone responded NAK with code 0006 it seems rather this command is probably obsolete too and replaced by some 32b variant. Anybody have newer DMSS spec than 2011? Also I'm looking for what is the right MPRG????.hex file for Qualcomm MSM8260.

EDIT: Dammit, the eMMC died again during CM reflash, I send this HTC to hell. I give up the repair as probably every Sensation will die soon on eMMC bug...
5th July 2017, 03:33 AM |#202  
Junior Member
Thanks Meter: 1
Thank you for 7x30_msimage.mbn & EMMCBLD.HEX.
Originally Posted by mickeyasamoah

I was beginning to think you have had your DHD fixed by RiffBox or JTAG thats why you werent commenting.
Any way, i have uploaded the files.

MPRG7x30.hex and ARMPRG.HEX are the working files
The rest arent working.

Thank you for 7x30_msimage.mbn & EMMCBLD.HEX. I use it for SKY A810S. Thanks again!
The Following User Says Thank You to Hap1981 For This Useful Post: [ View ] Gift Hap1981 Ad-Free
7th May 2019, 01:59 PM |#203  
Thanks Meter: 3
Wow its like gag me if i wete to find something to do other than forget the date and hone in on a sick one...
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes