My phone is S-Off but Relocked, I've googled and found there are commands that reset the security flags but not sure if they are exactly the same on the M8 as other devices, need help.
is this the correct command or is the seek number different?
echo -ne "HTCU" | dd of=/dev/block/mmcblk0p3 bs=1 seek=33796
Related
S-Off + Perm root is required to use this tools!
there are 3 batch files inside:
_Radio.bat
_Recovery.bat
_EngBootloader.bat
how to use:
_EngBootloader - run and follow instructions
_Radio.bat - download radio image, rename it to radio.img and put it into the directory, run _Radio.bat
_Recovery.bat - download recovery image, rename it to recovery.img and put it into directory, run _Recovery.bat
don't know if all of you think that those tools are useful, but for some people it may be useful cause they aren't familar with cmd & adb
code for the batch files are included in the 2nd post, executables (no drivers) for adb and fastboot are included in the attachment
_EngBootloader.bat
Code:
@echo off
cls
adb devices
echo If your device is not listed exit this program now, enable usb debugging and try again.
pause
cls
adb push hboot.img /data/local/tmp
adb shell chmod 777 /data/local/tmp/hboot.img
echo Please accept superuser request on your phone
adb shell su
pause
adb shell dd if=/dev/block/mmcblk0p18 of=/sdcard/backup.img
adb shell dd if=/data/local/tmp/hboot.img of=/dev/block/mmcblk0p18
echo Bootloader should be flashed to your device now, backup from old bootloader is saved at /sdcard/backup.img
pause
adb reboot bootloader
_Radio.bat
Code:
@echo off
cls
adb devices
echo If your device is not listed exit this program now, enable usb debugging and try again.
pause
cls
echo Please accept superuser request on your phone
adb shell su
pause
echo Phone should reboot now to bootloader, please wait for it to boot
adb reboot bootloader
pause
echo Wait for flash to finish
fastboot flash radio radio.img
pause
fastboot reboot
_Recovery.bat
Code:
@echo off
cls
adb devices
echo If your device is not listed exit this program now, enable usb debugging and try again.
pause
cls
echo Please accept superuser request on your phone
adb shell su
pause
echo Phone should reboot now to bootloader, please wait for it to boot
adb reboot bootloader
pause
echo Wait for flash to finish
fastboot flash recovery recovery.img
pause
fastboot reboot
is this method for s off DS without xtc clip?
jalal.arkat said:
is this method for s off DS without xtc clip?
Click to expand...
Click to collapse
No, unfortunately these are a group off tools that can only be used once you are S-OFF.
So S-ON need not apply
@Blezz : thanks these will be useful
i don't know if they will be useful, they are still simply work.. it's more for... lazy people
Hello
How sending AT commands to my Desire S ?
I want to send command [email protected]=7,1
Don't know for sure about DesireS, but it might be:
echo -e '[email protected]=7,1\r' > /dev/smd0
Via XDA App
Ok, but where to send this command?
In:
adb shell
echo -e '[email protected]=7,1\r' > /dev/smd0
or:
adb shell
su
echo -e '[email protected]=7,1\r' > /dev/smd0
?
here is something interesting:
http://tjworld.net/wiki/Android/HTC/Vision/RadioATCommands
http://tjworld.net/wiki/Android/HTC/Vision/HbootAnalysis
I guess that you want to back your S-ON after XTC. I want to do XTC S-OFF too because i need, i think the same problem as you (i read about it) so can you let me know or here if it works please?
EDIT: Here is something too
http://atcommander.com/ but its really difficult to understand it i think
Hello! I need some answer from the experienced ones.
I would be very happy , to s-off my HoS device.
This is my hboot:
*** TEMPERED ***
*** UNLOCKED ***
VLE PVT SHIP S-ON RL
HBOOT-2.15.0000
RADIO-1.11.50.05.28
OpenDSP-v31.1.0.45.0815
eMM-boot
Dec 14 2012,17:10:57:-1
My cid is Tim--401 so not Moonshine s-off compatibile.
My problem is that I'm s-on,and it's seems that I can't do the supercid what is the first step for Facepalm process.
I red a lot about this topic, everything what I have found.
It appears that I got the hboot 2.15 version with Jb ota Update ,whereby the phone became write protected (the mmcblk0p4 file ),so the cid overwriting cant be done.
I tried it on ViperOneS 1.2.1 - 2.2.0,on Tricktroid 7-9.1 and on Jb Stock also.The drivers ,sdk ,the termal emulaton on phone ,hex editing works well.Already tried with adb commands on pc and on phone (with emulator).
Is it any solution instead of Facepalm and Moonshine methods or the only solution is riff/jtag?
Here is what worked for me to get supercid 22222222 then facepalm to S-Off. Easy as Pie! But that was for me, hboot 2.15. I take no responsibility! Lol
LibertyMonger said:
Here is what worked for me to get supercid 22222222 then facepalm to S-Off. Easy as Pie! But that was for me, hboot 2.15. I take no responsibility! Lol
Click to expand...
Click to collapse
how you did that?
Have you done the supercid process with hex editing http://forum.xda-developers.com/showthread.php?p=26516911#post26516911
and than pust the command or just connected the phone then adb shell and su + echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20 the command?
I tried the last option and I got this :
C:\adb\sdk\platform-tools>adb shell
[email protected]/# su
su
[email protected]/# echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
8+0 records in
8+0 records out
8 bytes transferred in 0.001 secs (8000 bytes/sec)
[email protected]/# exit
exit
[email protected]/# exit
exit
C:\adb\sdk\platform-tools>fastboot getvar cid
< waiting for device >
my mate 7 tl10 partions gone after bad flashing
wee need partions from another tl10 via adb backup with dd command : details of command here:
adb shell
su
dd if=/dev/block/mmcblk0 of=/sdcard/Dump_1GB.bin bs=1024 count=1024000
dd if=/dev/block/mmcblk0 of=/sdcard/Dump_512mb.bin bs=1024 count=524288
dd if=/dev/block/mmcblk0 of=/sdcard/Dump_2GB.bin bs=1024 count=2048000
and another command if give u any results send me dd backups:
adb shell
su
dd if=/dev/block/mmcblk0boot0 of=/sdcard/Boot0.bin bs=1024 count=4096
dd if=/dev/block/mmcblk0boot1 of=/sdcard/Boot1.bin bs=1024 count=4096
at the final procedures use this commands:
adb shell
su
cat /proc/partitions
Do I have to wait two years for the system to be read and write?
Android must got rooted in order to mount it as RW.
jwoegerbauer said:
Android must got rooted in order to mount it as RW.
Click to expand...
Click to collapse
But I did the root and the impossible, to no avail
Ayoub$# said:
But I did the root and the impossible, to no avail
Click to expand...
Click to collapse
What does this ADB command sequence return?
Code:
adb devices
adb shell '[ ! -z "$(/system/bin/ps -A | grep -v grep | grep -c daemonsu)" ] && echo "is rooted" || echo "is not rooted"'
jwoegerbauer said:
What does this ADB command sequence return?
Code:
adb devices
adb shell '[ ! -z "$(/system/bin/ps -A | grep -v grep | grep -c daemonsu)" ] && echo "is rooted" || echo "is not rooted"'
Click to expand...
Click to collapse
Please can you show me the detailed method via ADB