Just like the G2 (vision) we can now get radio s-off and superCID on our devices . there is also the chance of a sim unlock this way (i cant verify this working on the ace as mine is unlocked)
LOOK AT THE CID
#
INFOversion: 0.5
#
INFOversion-bootloader: 0.85.2007
#
INFOversion-baseband: 26.03.02.26_M
#
INFOversion-cpld: None
#
INFOversion-microp: 0438
#
INFOversion-main: 1.32.405.6
#
INFOserialno: HT0AXXXXXXXX
#
INFOimei: XXXXXXXXXXXX
#
INFOproduct: ace
#
INFOplatform: HBOOT-7230
#
INFOmodelid: PD9810000
#
INFOcidnum: 11111111
#
INFObattery-status: good
#
INFObattery-voltage: 3803mV
#
INFOpartition-layout: Generic
#
INFOsecurity: off
#
INFObuild-mode: ENG
#
INFOboot-mode: FASTBOOT
#
INFOcommitno-bootloader: 7eafc656
#
INFOhbootpreupdate: 11
#
INFOgencheckpt: 0
Click to expand...
Click to collapse
Although the steps are almost identical to the Visions method I would not recommend it yet. there are some simpler / safer tools on there way
[What Is Radio S-OFF ?]
Basically what we have at the moment is an ENG hboot that is ignoring the securflag value .... which means if you update an official RUU or just to a shipping hboot you will lose S-OFF. But with this you will always be s-off and therefore no matter what you wont have write protected eMMC even on a shipping hboot
[What Is SuperCID ?]
The CID (Carrier ID) is a string that the hboot looks at to see what RUU's you can flash i.e HTC__001 can flash WWE roms and VODA only Vodafone roms. With SuperCID (11111111) we can flash any rom from anyone
[Credits]
All the devs in #g2root that contributed I helped in no way to this hack it was all other devs im just relaying the info to the DesireHD users many many thanks .... although i was the first person to do the radio S-OFF on the DesireHD (ace)
[One More Warning]
Just to repeat i advise against trying to radio s-off with the g2 guide at this time as the method is messy and has a real chance of really messing things up .... if u try this now u are on your own ..... really
MODs ill replace this with a full guide when the method is safer
thanks apache the procedure is simliar to the "original" permroot/S-off process I see the only difference is probably the kernel, where I assume you used your own kernel mod/modified the vision CM kernel alongside a modified WPTHIS to match your kernel adaptation to make it work?!
As far as I understood it, this method patches radio to achieve S-OFF, SuperCID and unlock.
So, flashing a RUU or applying an OTA would revert this procedure?
Hi,
nevertheless could be the SuperCID independent from kernel,
as in older devices (HTC Hermes).
with friendly greet
starbase64
Closed for now so Dev can work his magic and we don't get 1000+ posts saying "thank you..this will be epic"
Apache...contact me when you are ready for me to re-open
Cheers,
M_T_M
Your friendly Mod
If I install the official Desire CDMA 2.2 update and I have S-OFF with Unrevoked Forever will I still be able to root my phone with the new update even if it includes HBOOT and Radio Updates?
It has the following files in the rom.zip from the RUU exe
Code:
userdata.img
system.img
splash1.nb0
recovery.img
radio.img
nv_USC_1.70_0825_PRL15075.img
hboot_8x50_1.06.0000.img
boot.img
android-info.txt
inside android-info.txt is this
Code:
modelid: PB9940000
cidnum: UTSI_001
mainver: 2.11.573.5
hbootpreupdate:13
DelCache: 1
the RUU is available here
member.america.htc.com/download/Web_materials/Manual/Desire_Froyo/Desire_froyo_2.11.573.exe
I believe if you flash over a new hboot image you will lose s-off but you should still be able to root it.
I may be way off though.
Dear ALL
Today I did Manage to re-lock the Chacha bootloader to win the waranty back here is what I did
1- My ChaCha is an Arabic version bought it from egypt it was coming with ROM (( RUU_Chacha_HTC_ARA_1.22.415.2_Radio_47.14.35.3030H_7.47.35.17_release_198595_signed.exe )) you can find it somewhere in ChaCha thread .
2- I did extract the above rom and i toke the file called rom.zip then i did extract it
3- i did flash boot.img , radio.img , recovery.img and system.img using fastboot.exe
CMD
fastboot.exe flash boot boot.img
then
fastboot.exe flash radio radio.img
then
fastboot.exe flash recovery recovery.img
then
fastboot.exe flash system system.img
then
Factory Rest
then
Restart
4- The ROM 1.22.415.2 installed on my Chacha and working super . I went to Settings > About Phone > Software Updates > Check now . the system asked me to download the new update then I did
5- For sure before i install the update I looked for the OTA update on my phone and i managed to find it on my SD under folder called download (( OTA_Chacha_HTC_ARA_1.57.415.3-1.22.415.2_release_228158ps5fo8iej85c5rzr.zip )) Here is a link of the OTA update
http://ifile.it/y5jwsx2/OTA_Chacha_HTC_ARA_1.57.415.3-1.22.415.2_release_228158ps5fo8iej85c5rzr.zip
6- I asked the Updater to install the OTA ROM
7- The rom installed i did uncheck fastboot from Settings > Power > Fastboot
8- I checked the Bootloader i found it as before i start to unlock it via HTCdev unlocker with the stock bootloader 1.07.0000 S-ON RL
Cheersssssssssssssssssssssss yahoooooooooooooooooooooo My waranty is back
I haven't checked on the Chacha, but on Motorola's there's a flash in fastboot that can tell you if warranty is void because of unlocking. Even relocking won't reset the flag.
adlx.xda lets look for it but i don`t think that HTC is that smart anyways if so no problem at less that it downgraded the Hboot from 1.10.0000 to 1.07.0000 and lock it
Sent from my HTC ChaCha A810e using XDA App
the variable I know from Motorola is: iswarrantyvoid
fastboot getvar iswarrantyvoid
Idk if it's valid for HTC though. Not tried yet.
adlx.xda said:
the variable I know from Motorola is: iswarrantyvoid
fastboot getvar iswarrantyvoid
Idk if it's valid for HTC though. Not tried yet.
Click to expand...
Click to collapse
I tried the above CMD but its not working
I did type
fastboot.exe getvar all
I got
INFOversion: 0.5
INFOversion-bootloader: 1.07.0000
INFOversion-baseband: 7.51.35.19
INFOversion-cpld: None
INFOversion-microp: 0557
INFOversion-main: 1.57.415.3
INFOserialno: "My Serial No"
INFOimei: "My IMEI"
INFOproduct: chacha
INFOplatform: HBOOT-7227
INFOmodelid: PH0611000
INFOcidnum: HTC__J15
INFObattery-status: good
INFObattery-voltage: 3738mV
INFOpartition-layout: HTC
INFOsecurity: on
INFObuild-mode: SHIP
INFOboot-mode: FASTBOOT
INFOcommitno-bootloader: dirty-8ecce785
INFOhbootpreupdate: 12
INFOgencheckpt: 0
all: Done!
finished. total time: 0.031s
Anthor CMD
c:\Andriod>fastboot oem boot
... INFOsetup_tag addr=0x60000100 cmdline add=0x9
07E42C
INFOTAG:Ramdisk OK
INFOTAG:smi ok, size = 0
INFOTAG:hwid 0x0
INFOTAG:skuid 0x29001
INFOTAG:hero panel = 0x0
INFOTAG:engineerid = 0x0
INFOMCP dual-die
INFOMCP dual-die
INFOTAG:mono-die = 0x0
INFOTAG:TP = 1
INFODevice CID is not super CID
INFOCID is HTC__J15
INFOsetting->cid::HTC__J15
INFOserial number: " MY SN"
INFOcommandline from head: no_console_suspend=1 console=null
INFOcommand line length =565
INFOactive commandline: board_chacha.disable_uart3=0 board_chach
INFOa.usb_h2w_sw=0 board_chacha.disable_sdcard=0 diag.enabled=0
INFOboard_chacha.debug_uart=0 smisize=0 userdata_sel=0 androidbo
INFOot.emmc=false androidboot.pagesize=4096 androidboot.baseban
INFOd=7.51.35.19 androidboot.cid=HTC__J15 androidboot.batt_power
INFOon=good_battery androidboot.carrier=HTC-GCC androidboot.mid=
INFOPH0611000 androidboot.keycaps=qwerty androidboot.qwerty_colo
INFOr=white androidboot.mode=normal androidboot.serialno=HT169V4
INFO03255 androidboot.bootloader=1.07.0000 zygote_oneshot=off km
INFOemleak=off no_console_suspend=1 console=null
INFOaARM_Partion[0].name=misc
INFOaARM_Partion[1].name=recovery
INFOaARM_Partion[2].name=boot
INFOaARM_Partion[3].name=system
INFOaARM_Partion[4].name=cache
INFOaARM_Partion[5].name=userdata
INFOaARM_Partion[6].name=devlog
INFOpartition number=7
INFOValid partition num=7
INFODelay 99978(us) for dpram command before goto AMSS...
FAILED (status read failed (Too many links))
finished. total time: 1.716s
is that usefull ?
I wouldn't count on this actually working tbh... I downgraded my bootloader to 1.04.0000, updated to 1.07.0000, then 1.10.0000 (the one from HTCDev) just to see what would happen, and upon applying 1.10.0000, it still showed as *** UNLOCKED ***. Doing a fastboot oem lock won't work either, your bootloader will say *** RELOCKED ***.
In short: the unlock flag is stored in a secret partition and is still visible no matter what bootloader is running
Dear qzfive..
I think you did S-Off to your device using XTC clip ? OR you did the downgrade using gold card ? Right
I S-OFF'd via the Clip a good month before HTC-Dev unlock, however that's not relevant in this situation. S-OFF and the HTC-Dev unlock definitely appear to be two seperate flags, since some people haven't used the Clip and have an HTC-Dev unlocked bootloader are S-ON.
I think that the HTC-Dev unlock/relock flag is on the same partition as the @secuflag, which controls S-ON and S-OFF. HTC would know how to read this partition and read the flags to determine if your warranty is void or not. Also, remember when you started the HTC-Dev unlock, and you had to get a unique ID key from your device? Chances are they also save that key onto their systems as one that's had its bootloader unlocked.
One additional note: doing radio flashes won't reset the flags either, as when I applied the different HBOOTS, radios were flashed along with them as part of an RUU or OTA.
Either way, after we've used the HTC-Dev unlock, we can say goodbye to our warranties
Dear I agree with you but if there is no secueflag says its locked or unlocked only and about the saving the code in thier system easy i can complain about maybe some hacker did stolen my SN. or somthing and he did register with it in thier system
any ways Warranty on or off i dont care because HTC service they are useless at the end
I am going to search how to read the SecureFlag from the partattion
Thank you any ways
You can reupload the file please?
I will upload it again tomorrow
Sent from my GT-N7000 using XDA App
how did u extract the ruu.exe file?, what program did u use?
I tried winrar and 7zip but nothing worked!
for extracting ruu file....
run the ruu.exe
wait till view read me and chacha image page come....
then..in computer..go to c>user>username>appdata>local>temp..
there you can folder with numbers..
select that folder and check,there will be a file named rom.zip..
extract that file..then flash the images..
sorry for bad english.....
could you re-upload please ?
Where can i get the boot.img , radio.img , recovery.img and system.img
Hello,
I'm on Avatar Rom now and I'm getting really sick of all the stuff that crashes and/or doesn't work at all. (Like recording video!)
But I'm not sure what my options are. I think I'm stuck on my HBOOT as well.
Some info about my phone, obviously a ONE X:
*** UNLOCKED ***
Endeavoru PVT SHIP S-ON RL
HBOOT-0.95.0000
CLPD-None
MICROP-none
RADIO-none
EMMC-bootmode: disabled
CPU-bootmode: disabled
HW Secure boot: enabled
MODEM PATH: OFF
May 8 2012, 21:32:10
Fastboot variables:
Version: 0.5a
Bootloader (HBOOT): 0.95.0000
Baseband version: None
CPLD Version: None
Microp version: None
Main version: 1.29.161.13
Serial nr: 353043052926402
Product: Endeavoru
Platform: PJ4610000
CIDNUM: None
Security: On
Build-mode: Ship
hbootpreupdate: 2
fastboot getvar version: 0.5a
fastboot oem readcid: VODAP102
So, is there any way I can update my HBOOT.
Are there any power-saving ROMS?
Thanks in advance!
TimVN
You're in the wrong forum, you need the international one x forum.
Sent from my One X using xda premium
Ok thanks, will post it there
[HELP] I can't install CyanogenMod
This is info about my device
HTC Sensation
Revolutionary
PYRAMID PVT SHIP S-OFF
HBOOT-1.27.1100
RADIO-10.14.9035.02_2
OpenADSP-v05.6.0.2226.00.0418
==============
Kernel version-main: 3.33.401.106
CID : 11111111
MID : PG5813001
=================
PREVIOUS ROM : Android Revolution HD Sensation 7.3
CURRENT ROM : ViperS 5.0.0 - Android Version 4.1.2 - Sense 5.0 - SDK API level 5.12
CURRENT KERNEL : 3.4.10 SebastianFM - 1.0.3 [email protected] #1 SMP PREEMP Overclocked_kernel_v1.5.2
Baseband Version : 10.58.9035.00U_10.15.9035.02_2
Build Number : 3.19.401.101 CL 157254 release-keys
RECOVERY : 4EXT recovery touch v.1.0.0.3 RC3
======================================
I tried this way http://www.youtube.com/watch?v=FcBSE2ORLq0
but this message came up
E:Error in /sdcard/ROMS/cm-11-20141113-Sultan-pyramid.zip
(Status 0)
Installation Aborted
======
plz Help me
kajaman7 said:
[HELP] I can't install CyanogenMod
This is info about my device
HTC Sensation
Revolutionary
PYRAMID PVT SHIP S-OFF
HBOOT-1.27.1100
RADIO-10.14.9035.02_2
OpenADSP-v05.6.0.2226.00.0418
==============
Kernel version-main: 3.33.401.106
CID : 11111111
MID : PG5813001
=================
PREVIOUS ROM : Android Revolution HD Sensation 7.3
CURRENT ROM : ViperS 5.0.0 - Android Version 4.1.2 - Sense 5.0 - SDK API level 5.12
CURRENT KERNEL : 3.4.10 SebastianFM - 1.0.3 [email protected] #1 SMP PREEMP Overclocked_kernel_v1.5.2
Baseband Version : 10.58.9035.00U_10.15.9035.02_2
Build Number : 3.19.401.101 CL 157254 release-keys
RECOVERY : 4EXT recovery touch v.1.0.0.3 RC3
======================================
I tried this way http://www.youtube.com/watch?v=FcBSE2ORLq0
but this message came up
E:Error in /sdcard/ROMS/cm-11-20141113-Sultan-pyramid.zip
(Status 0)
Installation Aborted
======
plz Help me
Click to expand...
Click to collapse
you need to update your recovery version
take here the latest version of 4ext
http://www.4shared.com/zip/WnSyLWMaba/4EXT_Recovery_Touch_v1006_RC3_.html
extract the recovery.img and flash it via fastboot command
rzr86 said:
you need to update your recovery version
take here the latest version of 4ext
http://www.4shared.com/zip/WnSyLWMaba/4EXT_Recovery_Touch_v1006_RC3_.html
extract the recovery.img and flash it via fastboot command
Click to expand...
Click to collapse
Thank you man it's working now :good: