S-Off might be difficult - but maybe we can work around

S-Off might be difficult - but maybe we can work around - HTC One X

Hi,
nobody knows me, thats just fine . What I m currently doing is I m trying to find out if there´s a suitable software-way to work around that messy S-Off problem.
Whats the idea?:
The idea is quite simple, the current hboot 1.31 already supports all branded devices.
Seriously?
Yea, seriously.
If you unpack the current hboot and open it using a text-editor like Windows editor you´ll find the following lines
NORMAL RECOVERY_UPDATE_RADIO RECOVERY_UPDATE_HBOOT RECOVERY_UPDATE_ZIP RECOVERY_UPDATE_COMBO HTCBL BOOTPROFILING SDUPDATE RECOVERY_MANUAL POWERTEST RECOVERY_POWERTEST OFFMODE_CHARGING RECOVERY_OFFMODE_CHARGING MFGKERNEL MFGKERNEL_DEBUG MFGKERNEL_58 SECURITY_RESET REBOOT_BOOTLOADER POWER_DOWN HBOOT_USB FACTORYRESET SYSINFO IMGCRC NORMAL_DIAG RAMDUMP2EMMCDUM RAMDUMP2USB RAMDUMP2SD 9KRAMDUMP 9KRAMDUMP2SD MODEMPATHON MODEMPATHOFF LOGGERSETTING LOGGERON LOGGEROFF LOGGERTOINTERNAL LOGGERTOSD DIAG MODEM_CALIBRATION Dopod-China DOPOD701 Open-Channel HTCCN701 CT HTCCN702 CU HTCCN703 CMCC-TD HTCCN704 TMUS T-MOB010 TMD T-MOB101 TMA T-MOB102 TMNL T-MOB003 TMCZ T-MOB004 TMUK T-MOB005 TMHR T-MOB006 TMH T-MOB007 TMSK T-MOB008 Era T-MOB009 TMMK T-MOBL11 VODA-UK VODAP001 VODA-Germany VODAP102 VODA-Italy VODAP405 VODA-SFR VODAP203 VODA-Spain VODAP304 VODA-Netherland VODAPE17 VODA-Ireland VODAP019 VODA-Greece VODAP006 VODA-Portugal VODAPD18 VODA-Swisscom-WWE VODAP015 VODA-Swisscom-DE VODAP110 VODA-Swisscom-FR VODAP212 VODA-Swisscom-IT VODAP416 VODA-Australia VODAP021 VODA-New-Zealand VODAP022 VODA-Mobilkom VODAP120 VODA-Proximus VODAP024 VODA-TR VODAPM27 ORANGE-French ORANG202 ORANGE-UK ORANG001 ORANGE-ES ORANG309 ORANGE-BE ORANG012 ORANGE-PO ORANG008 ORANGE-CH-FRA ORANG203 ORANGE-CH-GER ORANG104 ORANGE-SK ORANG006 ORANGE-PL ORANGB10 ORANGE-AT ORANG113 GOOGLE GOOGL001 TELEF-Spain TELEF301 TELUS TELUS001 DCM DOCOM801 ATT CWS__001 Brightstar-SPA BSTAR301 Brightstar-PTB BSTAR502 VIRGIN-UK VIRGI001 O2-UK O2___001 HTC-Czech HTC__C24 HTC-Denmark HTC__F08 HTC-Norway HTC__H10 HTC-Sweden HTC__G09 HTC-Poland HTC__B25 HTC-Russia HTC__A07 HTC-Turkey HTC__M27 HTC-GCC HTC__J15 HTC-Australia HTC__023 HTC-Singapore HTC-FRA HTC__203 StarHub-Singapore VODA-Africa-South AirTel-India TIM-Italy TIM__401 H3G-Italy H3G__402 Optus-Australia OPTUS001 Hutch-Australia HUTCH001 SMC-Voda-HK SMCVD001 Chunghwa-Taiwan CHT__601 Rogers ROGER001 HTC-EastEurope HTC__032 HTC-GER HTC__102 HTC-ITA HTC__405 HTC-Dutch HTC__E11 HTC-Nor HTC__Y13 HTC-WWE HTC
You see - all there.
So, Vodafone and all the others can stopp telling is their branded devices are not yet supported - bull****.
So, I´m trying to find a way to edit files in a way that the installer believes the currently plugged device is supported - even in case its got a totally different CID.
Dunno if this will work in any possible way...but hey, at least a try.
Regards
*Edit: If anyone found an HOX RUU from Asia for JB - that would be quite helpful.

Of course it supports every single HTC One X, regardless of CID, but:
If you change any file the signature will be broken, will not work. If you look at the header of the zip file in a hex editor, there is a 256-byte long signature that no one knows how to decrypt.
(I'm talking about the firmware.zip)

tomascus said:
Of course it supports every single HTC One X, regardless of CID, but:
If you change any file the signature will be broken, will not work. If you look at the header of the zip file in a hex editor, there is a 256-byte long signature that no one knows how to decrypt.
(I'm talking about the firmware.zip)
Click to expand...
Click to collapse
Well...yea...so I tried to change some files in the temp folder of windows during the installation - and that worked. Dunno what I can make of that but I ll keep u updated. So much for now:
Current version: 2.xxx
Version to install: strange asian signes
Ok.
Finished - device not bricked.
I keep working
*Update: Hmpf...not working the way I hoped it would. I can install using the stock ruu with hboot 1.31....but its still not starting :/

I don't mean to be a downer, and good on you for giving it a go. But this has already been tried long ago.
Any modification you make will break the signature. The only way to get around it is to decrypt the signature so we can sign whatever zip files we want. Then we could flash an S-OFF HBOOT.

Illux said:
Well...yea...so I tried to change some files in the temp folder of windows during the installation - and that worked. Dunno what I can make of that but I ll keep u updated. So much for now:
Current version: 2.xxx
Version to install: strange asian signes
Ok.
Finished - device not bricked.
I keep working
*Update: Hmpf...not working the way I hoped it would. I can install using the stock ruu with hboot 1.31....but its still not starting :/
Click to expand...
Click to collapse
hello your hox has the cid VODAAP102???
you can make a small guide on how to do?

Sentinel196 said:
I don't mean to be a downer, and good on you for giving it a go. But this has already been tried long ago.
Any modification you make will break the signature. The only way to get around it is to decrypt the signature so we can sign whatever zip files we want. Then we could flash an S-OFF HBOOT.
Click to expand...
Click to collapse
Why is everyone so quick to shut down new attempts to achieve S-Off? The Church of Xmoo will only get you so far, especially when Xmoo doesn't even have a HOX any more.
Sent from my HTC One X using Tapatalk 2

Exactly 1 person attempting something is better than everyone just keeping quiet and whining about no S-Off.

New attempts with old techniques is not new attempts, it's confirming what we already know.
I'm not sure anybody would complain about new threads with new information or actual progress.

Exactly.
All I'm saying is that this idea has already been tried and verified as not working, and pointing this out so no-one wastes time trying something old when they could be trying something new.

Well he is trying .. Let him do it. No one can directly go to advance mathematics until he learns the basics.

Forget the zip file...
The 'new' bootloader is signed, and the 'existing bootloader' will verify the signature on the phone itself, before reflashing itself.
Sadly, and 'hack' on the PC side is wasted... a fully intact 'signed' package has to be sent to the phone/device.
The zip is irrelevant, it's opened by the RUU and the contents sent to the device in individual signed packages.
The procedure goes like this:
RUU / PC unpacks the zip.
The components of the zip are sent one by one to the phone ... i.e. Bootloader, Recovery, ROM etc.
Some of those components, particularly bootloader are signed, and the signature is checked on the phone.
You can change the files as much as you like on the PC... modifying the ROM image should still work (but of course, you'll create a corrupt ROM).
If you try to change the bootloader package (which is signed) then it will be rejected by the phone. A single byte change will result in an entirely new checksum / signature.
To generate the correct signature you need two things....
1) The algorithm for generating a new signature for the modified file
2) The 'key' which is used to encrypt the data (top secret!)
Statistically, it would take many years to 'brute force' guess the key, and you'd probably ruin your handset flashing it so many times too.
They key isn't likely to be leaked.
So, there's another way:
HTC allow some service centers to reflash the devices, but this requires special hardware and software that's not easy to replicate and hasn't been leaked yet. The presence of this hardware will 'permit' full reflashing of the device, and therefore S-OFF.

Have you guys see this?
--see below--

farhanito said:
Have you guys see this?
http://forum.xda-developers.com/showthread.php?p=5
Click to expand...
Click to collapse
broken link

Sentinel196 said:
broken link
Click to expand...
Click to collapse
arrgh, sorry.. darn tapatalk
http://forum.xda-developers.com/showpost.php?p=34888895&postcount=57
it's about Flash Image GUI by joeykrim

Based on my understanding, it simplifies the "fasboot flash recovery/boot" commands. Anything else I've missed?
Sent from my HTC Desire S using xda app-developers app

Skanob said:
Based on my understanding, it simplifies the "fasboot flash recovery/boot" commands. Anything else I've missed?
Sent from my HTC Desire S using xda app-developers app
Click to expand...
Click to collapse
It doesn't look like it's helping with the OP's objective....

Not s-off, i know...
But the possibility of flashing kernels without fastboot and plugging to a computer is nice enough i think..
Sent from my HTC One X using Tapatalk 2

I wish I knew how to link a post from another discussion area. There is a Russian dev in HTC DNA General who's posted subject S-Off Is Possible While its specific to the Snapdragon CPU and consensus is his claim is legit and to be made available soon, on pg 5, the dev mentions he's getting a HOX to try and get S-Off. Important point here is another dev taking an interest in a HOX. So someone here can kindly point out to him the challenges already attempted.
Sent from my Desire HD using xda app-developers app

Y2KoaS said:
I wish I knew how to link a post from another discussion area. There is a Russian dev in HTC DNA General who's posted subject S-Off Is Possible While its specific to the Snapdragon CPU and consensus is his claim is legit and to be made available soon, on pg 5, the dev mentions he's getting a HOX to try and get S-Off. Important point here is another dev taking an interest in a HOX. So someone here can kindly point out to him the challenges already attempted.
Sent from my Desire HD using xda app-developers app
Click to expand...
Click to collapse
Here you go. He says the method for achieving s-off on the DNA will work on a rate of 80% on the hox too. Sounds....strange. Anyways, heres the link to his post and thread.
http://forum.xda-developers.com/showthread.php?p=34960158
http://forum.xda-developers.com/showthread.php?t=2026033
-----------update-----------
Nevermind, he is talking about the At&t one x.
Sent from my HTC One X using xda premium

So close, but so far.
Sent from my HTC One X using Tapatalk 2

Related

RUU_Hero_HTC_WWE_2.73.405.38

New shipped ROM for Hero
http://rapidshare.com/files/290153350/RUU_Hero_HTC_WWE_2.73.405.38_WWE_release_signed_NoDriver.exe
Enjoy!

Football said:
New shipped ROM for Hero
http://rapidshare.com/files/290153350/RUU_Hero_HTC_WWE_2.73.405.38_WWE_release_signed_NoDriver.exe
Enjoy!
Click to expand...
Click to collapse
What's new?

Ehh, It´s the same build as before. HTC Hero_2.73.405.5 for what I understand the last nr .38 is just the mobile providers rom build version.

this seems to be an update for a limited number of carriers:
android-info.txt for this one:
ModelID: HERO10000
CIDNUM: HTC__001
CIDNUM: HTC__N34
CIDNUM: 11111111
MainVer: 2.73.405.38
the "official" htc update has this:
ModelID: HERO10000
CIDNUM: HTC__001
CIDNUM: HTC__032
CIDNUM: HTC__203
CIDNUM: HTC__102
CIDNUM: HTC__405
CIDNUM: HTC__E11
CIDNUM: HTC__Y13
CIDNUM: HTC__304
CIDNUM: HTC__506
CIDNUM: HTC__N34
CIDNUM: 11111111
MainVer: 2.73.405.5
So, from which provider did you get this ?

Has anyone tested RUU_Hero_HTC_WWE_2.73.405.38?
I can´t find any info at all about the realease.

Maybe this is Sprints' Update? Has anyone tried it?
Well someone in Androidcommunity posted the following :
Sprint Hero Firmware Update
I cannot give out versions or anything, but I can say the Sprint Hero had an update pushed out to it yesterday, the training handsets that is.
Lag is almost gone. Out of the box the Hero had almost no lag, but after installing a few apps is started lagging. This new update makes it zippy. I'm not sure if the phones will come preloaded or will require an update when purchased,, but its great.
So any of those reviews that complained about the lag can eat it. Some people will find any reason at all to complain anyway.
Click to expand...
Click to collapse

Her is the update.zip.
It is stock WWE version. Récent build.
Has new contact widget.
Rooted.

Rooted and unrooted update.zip versions posted in my update thread.
P

also uploaded here:
http://forum.xda-developers.com/showthread.php?t=559622

I find this version really fast

indeed it is quick, but i notice that it seems to have removed the option for 'current location' in weather and clock. or at least it seemed to do so on mine.
Have gone back to 405.5 for that reason. little thing i know, but i don;t really want the weather in london when the other ROM does it for me automatically and updates as i travel.

rhedgehog said:
indeed it is quick, but i notice that it seems to have removed the option for 'current location' in weather and clock. or at least it seemed to do so on mine.
Have gone back to 405.5 for that reason. little thing i know, but i don;t really want the weather in london when the other ROM does it for me automatically and updates as i travel.
Click to expand...
Click to collapse
I am running 2.73.405.38 and "current location" option is still there :-/

Is it possible to install this but then replace the new contacts widget with the older one? I kinda like the older one Please guide!!
One more thing... will installing it change the kernel in such a way that flashrec will no longer be supported?? There are some people on the forum with Asian builds who are already complainig about the flashrec not working at all on their phones. I can see that the kernel# after installing this 405.38 ROM is somewhat different from my current one i.e. 405.5
My kernel:
2.6.27-8dd6deee
[email protected] )
Kernel with this ROM:
2.6.27-0078c992
[email protected] #851

salmanbodla said:
Is it possible to install this but then replace the new contacts widget with the older one? I kinda like the older one Please guide!!
One more thing... will installing it change the kernel in such a way that flashrec will no longer be supported?? There are some people on the forum with Asian builds who are already complainig about the flashrec not working at all on their phones. I can see that the kernel# after installing this 405.38 ROM is somewhat different from my current one i.e. 405.5
My kernel:
2.6.27-8dd6deee
[email protected] )
Kernel with this ROM:
2.6.27-0078c992
[email protected] #851
Click to expand...
Click to collapse
flashrec doesnt work with this one, so if you can't use an official RUU from before the kernel patch to downgrade to, don't use this

Jesterz said:
flashrec doesnt work with this one, so if you can't use an official RUU from before the kernel patch to downgrade to, don't use this
Click to expand...
Click to collapse
Thanks for your reply Jesterz
I do have the UNLOCKED white UK hero and can install the WWE version ROMs via RUU like the latest official release 2.73.405.5. Does that mean it will be safe for me to try this ROM (405.38) and still be able to go back to 405.5 if desired, and regain the flashrec support.
BTW, if I flash this new ROM using update.zip method, will that also make flashrec and my RA-Hero recovery image non-functional? Please help on this.
Cheers!

salmanbodla said:
Thanks for your reply Jesterz
I do have the UNLOCKED white UK hero and can install the WWE version ROMs via RUU like the latest official release 2.73.405.5. Does that mean it will be safe for me to try this ROM (405.38) and still be able to go back to 405.5 if desired, and regain the flashrec support.
BTW, if I flash this new ROM using update.zip method, will that also make flashrec and my RA-Hero recovery image non-functional? Please help on this.
Click to expand...
Click to collapse
Havn't tested the 405.38 SPL myself. I don't see any reason to do so.... And yes it may block your device from rooting.
I would suggest you to use update.zip as it does exactly what you want the RUU to do: replace kernel and system.
You may then flash the 405.5 RUU when you wish.
Regards

gecka said:
Havn't tested the 405.38 SPL myself. I don't see any reason to do so.... And yes it may block your device from rooting.
I would suggest you to use update.zip as it does exactly what you want the RUU to do: replace kernel and system.
You may then flash the 405.5 RUU when you wish.
Regards
Click to expand...
Click to collapse
OK, thanks gecka
I suppose I am pretty safe since the 2.73.405.5 RUU works just fine for me... kind of a good fall-back if I am stuck with the newer kernel. Will give 405.38 a go soon.
You said it is really quick... what exactly are the major improvements? And how about the new radio? Any appreciable difference from the previous one?

salmanbodla said:
OK, thanks gecka
I suppose I am pretty safe since the 2.73.405.5 RUU works just fine for me... kind of a good fall-back if I am stuck with the newer kernel. Will give 405.38 a go soon.
You said it is really quick... what exactly are the major improvements? And how about the new radio? Any appreciable difference from the previous one?
Click to expand...
Click to collapse
I personally find it more responsive, about perfect.
Kernel is exactly the same (md5sum). Just do a nandroid backup and try it. A nandroid restore will restore it at its exact state.
About the radio, I have never been able to tell if one is better than another.

cTnko said:
I am running 2.73.405.38 and "current location" option is still there :-/
Click to expand...
Click to collapse
must just have been a screw up on mine then. Maybe i'll try it again later.

I can also confirm that the Current Location feature is still working fine ;-)
Definately more responsive than the 405.5 ROM, it's a pleasure to use!
rhedgehog said:
must just have been a screw up on mine then. Maybe i'll try it again later.
Click to expand...
Click to collapse

HTC CID Change - Is this interesting ?

Hi,
Since we added this feature to few latest HTC models repair DLL-s, which enables users to update or change CID to any desired value upon unbricking procedure, i have few lame questions :
Note that our main field before was in Motorola, so we still consider our self to be newbies in HTC field.
- Is there list of official CID numbers available ?
- Is there still some "super CID" as used to be with older HTC models ?
Though this includes opening, soldering and requires skilled and trained hands, I think some guys from this board would find this exciting.
Even more - long time I was thinking to open some thread on this board and ask if there is any of You guys willing to contribute, since we could give few boxes for free to people who could and can use it.
Thank You. (i hope i posted this in right section ? )

HTC__001 to HTC__044, HTC__Y13, HTC__N34, HTC__A07, HTC__E11, HTC__J15 etc i can compile a whole list of those if you can provide me with a nice lil box :O superCID is still 11111111 i think.. dont know if 8 of same digits work as well. ;x
still intrested? :O in my opinion its better to leave it open, manually put in 8 digits or characters for the CID lol. would LOVE to play with those roflmao

I just found this thread by googling for CID change, cause I'd like to know how to do that, you apparently claim to be able to, please enlighten me on how you do that and particularly which parts need soldering, exactly.

thanks for share

Read post #2 before posting!!
So Football and me are busy with trying to get S-OFF for this Badboy, but it seems to be a hard job. Please be patient!
Code:
/*
* Your warranty is now void.
*
* We are not responsible for bricked devices, dead SD cards,
* thermonuclear war, or you getting fired because the alarm app failed. Please
* do some research if you have any concerns about content included in this thread
* read before doing anything! YOU are choosing to make these modifications, and if
* you point the finger at me for messing up your device, We will laugh at you.
*
*/
13-04-2012 XDA.CN releases pictures showing someone succesfully has S-OFF'd his device. Tool is for sale here: http://item.taobao.com/item.htm?id=10824156715
17-04-2012 Thread made.
17-04-2012 We have found someone with a S-OFF device, and a newer HBOOT than the one from XDA.CN. Trying to get access to the HBOOT.
18-04-2012 OTA 1.28 brings HBOOT 0.94.
18-04-2012 New member with a S-OFF device is willing to help.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
19-04-2012 HBOOT 0.43 S-OFF rfs.img received and uploaded.
19-04-2012 RFS.img is not the correct file, searching continues...
19-04-2012 Radio located, click here
26-04-2012 HBOOT probably located here
15-05-2012 NVFlash app + APX Drivers added
12-06-2012 Tegra 3 Manual added, see here!
16-06-2012 HBOOT 1.11 from the test-keys uploaded here!
16-06-2012 Huge development, read more about it!
18-06-2012 Need to find a way to by-pass CID check.
19-06-2012 Football Partition list for One X with all addresses and lengths of partitions which can be found here.
27-06-2012 Huhge thread clean-up and update.
04-07-2012 Had the chance to play with a S-OFF device, read more about it here! ENG HBOOT which is used in test, is located here.
09-07-2012 Javacard with DIAG will work, but won't be a good solution cause no one got a legit Javacard and the DIAG files can't be leaked!
14-07-2012 Video added which shows the Javacard with DIAG method. Video can be found here.
14-07-2012 The ENG HBOOT 0.03 that Football uploaded lost it's sign. I re-uploaded it and re-checked the file and it should be good now. You can find the new .zip here.
HBOOT versions
Past: 0.03, 0.04, 0.32, 0.43, 0.94, 0.95, 0.96, 1.01
Current: 1.11
More to come, please stop PM'ing me!

FAQ.
What is S-OFF?
S-OFF stands for Security-OFF
S-OFF means that the NAND portion of the device is unlocked and can be written to. The default setting for HTC’s devices is S-ON, which means that neither can you access certain areas of the system nor can you guarantee a permanent root. Furthermore, signature check for firmware images is also ensured by the S-ON flag.
What has already been done?
-Tried flashing DIAG file, but with no success. File needs SuperCID.
-Tried flashing ENG HBOOT as zip file, but with no success. File needs SuperCID.
-Tried flashing modified DIAG file, but with no success. File needs SuperCID.
-Tried flashing modified HBOOT as zip file, but with no success. Signature check failed.
-Tried creating a Goldcard, but won't work. The Goldcare is for Qualcomm devices.
-Root while phone is LOCKED, won't work. Only will work on the Qualcomm One X and One XL.
-Ask the Chineese guy with the S-OFF tool. Won't share, cause he needs his money.
-Tried flashing files over recovery, but with no success.
-Tried flashing TETS and MFG ROMs, but with no success. Phone needs S-OFF because the ROMS are not sighned.
-Tried changing CID, but won't work. Only will work on the Qualcomm One X and One XL.
-Tried commands over ADB, but with no success.
-Tried XTC clip, won't work.
How Do I Know If My Device Is S-ON Or S-OFF?
That is easy to verify. Simply boot into HBOOT (bootloader) on your device, and the text on top will show the flag status as either S-OFF or S-ON. A full root generally means S-OFF.
S-OFF – What And Why?
HTC have installed a sort of security check whose level is determined by S-OFF/S-ON. Essentially, this security level is a flag stored on the device’s radio that checks signature images for any firmware before it is allowed to be written to system memory. This hinders using any custom ROMs, splash images, recovery etc., and also restricts access to the NAND flash memory. However, when security level is set to S-OFF, the signature check is bypassed, allowing a user to upload custom firmware images, unsigned boot, recovery, splash and HBOOT images, as well as official firmware that has been modified, this enabling maximum customization of your HTC Android device.
Furthermore, S-OFF also reduces restrictions on accessing the NAND flash memory on the device, allowing all partitions (including /system) to be mounted in write mode while the operating system is booted.
Where is it located?
Don't know yet, here are the partitions.
How can I flash through SD?
Tutorial added here!
What HBOOT status have we seen so far?
ENDEAVORU PVT SHIP S-ON RL
ENDEAVORU PVT SHIP S-OFF RL
ENDEAVORU PVT ENG S-OFF RL
ENDEAVORU XE ENG S-OFF RH
ENDEAVORU PVT MFG RH
ENDEAVORU XE SHIP S-OFF RH
ENDEAVORU UNKNOWN ENG S-OFF RH
Partition list for One X with all addresses and lengths of partitions
Football share the full list which can be found here.
How does HTC do it?
They do it with a smartcard/javacard/goldcard (What ever you want to call it) in combination with the DIAG file. Proof is in the attachment.

Something more:
/system/etc/Flash_Loader.conf
boot_port_name=/dev/ttyACMX0
fw_download_port_name=/dev/ttyACMX0
baudrate=921600
BootTimeOut=3000
CommTimeOut=1000
eep_normal_mode=m
file_name=/data/modem_work/QUO_6260.fls
#file_name=QUO_6260.fls
#file_name=XMM6260_SIC.fls
#log_fname=/dev/null
log_fname=/data/modem_work/Flash_Loader.log
also
\system\bin\poweron_modem_fls.sh
Line 55: /system/bin/InjectionTool -i ${backup_dir}/QUO_6260.fls.clean -o ${Injected_dir}/QUO_6260.fls -n ${work_dir} -s ${sec_dir}
Line 55: /system/bin/InjectionTool -i ${backup_dir}/QUO_6260.fls.clean -o ${Injected_dir}/QUO_6260.fls -n ${work_dir} -s ${sec_dir}
and
\system\bin\poweron_modem_hboot.sh
Line 50: /system/bin/InjectionTool -i ${backup_dir}/QUO_6260.fls.clean -o ${Injected_dir}/QUO_6260.fls -n ${work_dir} -s ${sec_dir}
Line 50: /system/bin/InjectionTool -i ${backup_dir}/QUO_6260.fls.clean -o ${Injected_dir}/QUO_6260.fls -n ${work_dir} -s ${sec_dir}
And from flash_loader.log
Start downloading item 'CODE:../HW/XMM6260_V2_USB-HSIC_FLASHLESS_EDE_1.0/MODEM_DEBUG/QUO_6260.fls'' from file '/data/modem_work/QUO_6260.fls

ah finally someone is looking into this
good luck for you two

great news and finally...looking forward to this and do not mind holding off a while longer

Hmz the radio version 1.1204.92 seems to be the missing link between the 1.26 and 1.28 (CN) ROM. So guess this HBOOT is from 1.27

Hmm would buying this tool be helpful to the development of this? Just not sure if this fake or not
Sent from my HTC One X using XDA

lckuok said:
Hmm would buying this tool be helpful to the development of this? Just not sure if this fake or not
Sent from my HTC One X using XDA
Click to expand...
Click to collapse
Was thinking about the same... but that page is all unreadable to me. Whats the price?

schriss said:
Was thinking about the same... but that page is all unreadable to me. Whats the price?
Click to expand...
Click to collapse
Its price is 200 yuan equivalent to 30 usd

I think they just help you s-off your device and charge 200
Sent from my HTC One X using xda premium

Don't think they can do it remotely, I'm just reading thr the xda cn forums and see if there will release any info there
Sent from my HTC One X using XDA

From what I gather from this, http://translate.googleusercontent....1.html&usg=ALkJrhirB5MK3WvhdLHS2DwwB0ljoOLOqQ, apprently someone has developed a file that enables unlocking of the phone, not S-OFF, but allows you to unlock without having to do it through the htcdev website, someone correct me if im wrong.... :/

Seems like that is just a guide on how to use HTC Dev

TwinCalibre said:
From what I gather from this, http://translate.googleusercontent....1.html&usg=ALkJrhirB5MK3WvhdLHS2DwwB0ljoOLOqQ, apprently someone has developed a file that enables unlocking of the phone, not S-OFF, but allows you to unlock without having to do it through the htcdev website, someone correct me if im wrong.... :/
Click to expand...
Click to collapse
On the screenshot you can see the device is also s-off.
So anyone want to buy the tool, be my guest.

Someone wrote a software (based on official dev software)that you can use just one click to unlock your device
Sent from my Transformer Prime TF201 using xda premium

TwinCalibre said:
From what I gather from this, http://translate.googleusercontent....1.html&usg=ALkJrhirB5MK3WvhdLHS2DwwB0ljoOLOqQ, apprently someone has developed a file that enables unlocking of the phone, not S-OFF, but allows you to unlock without having to do it through the htcdev website, someone correct me if im wrong.... :/
Click to expand...
Click to collapse
u are right, that is just a tool for others to easily use the HTCdev to unlock their bootloader
The one mentioning the s-off isn't on a sticky, and no details as of yet
Man its a pain reading thr their forums
Sent from my HTC One X using XDA

Can someone who understands Chinese not make an account on the forums so they can download the tool?
---------- Post added at 06:15 PM ---------- Previous post was at 06:10 PM ----------
lckuok said:
u are right, that is just a tool for others to easily use the HTCdev to unlock their bootloader
The one mentioning the s-off isn't on a sticky, and no details as of yet
Man its a pain reading thr their forums
Sent from my HTC One X using XDA
Click to expand...
Click to collapse
Yeah lol massive pain :/, hopefully somone else can shed some light on it lol

TwinCalibre said:
Can someone who understands Chinese not make an account on the forums so they can download the tool?
Click to expand...
Click to collapse
The tool is on taobao which is like eBay but its just for ppl in China which I hate so much cuz it doesn't support PayPal.
I'm trying my best to spot the tool once its on the forum, but if someone else is more fluent with simplified Chinese and actually uses the xda China forums I think its easier for them to understand what they are talking about.
They have ranking system on their forum so iunno if ranks are needed when something like that is released
I can try to contact the seller of that tool tomorrow and see how the trade works out
Sent from my HTC One X using XDA

lckuok said:
The tool is on taobao which is like eBay but its just for ppl in China which I hate so much cuz it doesn't support PayPal.
I'm trying my best to spot the tool once its on the forum, but if someone else is more fluent with simplified Chinese and actually uses the xda China forums I think its easier for them to understand what they are talking about.
They have ranking system on their forum so iunno if ranks are needed when something like that is released
I can try to contact the seller of that tool tomorrow and see how the trade works out
Sent from my HTC One X using XDA
Click to expand...
Click to collapse
I come from Taiwan. I think i can help to download that software
Sent from my Transformer Prime TF201 using xda premium

lckuok said:
The tool is on taobao which is like eBay but its just for ppl in China which I hate so much cuz it doesn't support PayPal.
I'm trying my best to spot the tool once its on the forum, but if someone else is more fluent with simplified Chinese and actually uses the xda China forums I think its easier for them to understand what they are talking about.
They have ranking system on their forum so iunno if ranks are needed when something like that is released
I can try to contact the seller of that tool tomorrow and see how the trade works out
Sent from my HTC One X using XDA
Click to expand...
Click to collapse
Ahhhh fair enough, it seems like someones taken the tool, then just trying to make some money out of it? Even though it looks like you may be able to get it of the forums for free? lol I dunno :/

Please... I need a OTA file for HTC One M9s / M9e - HIMAR UHL.

Does Anyone know where I can find an OTA file HTC M9e / M9s also called HIMAR UHL ??
IT's the Asian version from Taiwan.
Follows some device information:
(bootloader) kernel: lk
(bootloader) product: htc_himaruhl
(bootloader) version: 1.0
(bootloader) version-main: 1.10.709.2
(bootloader) boot-mode: download
(bootloader) version-bootloader: 1.01.0000
(bootloader) mid: 2PRG10000
(bootloader) cid: HTC__621
Please, I really need this.
thank you in advance.

There is a thread in the General section of the M9 forums titled HTC ONE M9 Stock File Collection (RUUs, Backups, etc.) - with linked Instructions. It has a collection of resources, particularly in post #6 of the thread.
My favorite resource in that thread is Flippy498's Google Sheet, which has a tab dedicated to RUUs & a tab dedicated to OTAs. In both, there is a section dedicated to HTC Asia (Taiwan). Check it out, see if it it has what you're looking for.

computerslayer said:
There is a thread in the General section of the M9 forums titled HTC ONE M9 Stock File Collection (RUUs, Backups, etc.) - with linked Instructions. It has a collection of resources, particularly in post #6 of the thread.
My favorite resource in that thread is Flippy498's Google Sheet, which has a tab dedicated to RUUs & a tab dedicated to OTAs. In both, there is a section dedicated to HTC Asia (Taiwan). Check it out, see if it it has what you're looking for.
Click to expand...
Click to collapse
thanks for replying, but unfortunately it does not have the OTA file I need, have only HTC ONE M9 files (Hima) not HTC ONE M9e / M9s (HimaR).
the HTC M9e uses a MediaTek processor and HTC M9 it's a Qualcomm version.
I've looked in many places already, I did not find the right OTA file anywhere... for the M9e / HTC ONE M9s version.
with the OS version 1.10.709.2.
but thanks again, I hope that someone has better luck than me to find.

edu22w said:
thanks for replying, but unfortunately it does not have the OTA file I need, have only HTC ONE M9 files (Hima) not HTC ONE M9e / M9s (HimaR).
the HTC M9e uses a MediaTek processor and HTC M9 it's a Qualcomm version.
I've looked in many places already, I did not find the right OTA file anywhere... for the M9e / HTC ONE M9s version.
with the OS version 1.10.709.2.
but thanks again, I hope that someone has better luck than me to find.
Click to expand...
Click to collapse
Well, here is what my Google-fu has come up with. No guarantees, but maybe this will help.
I found this site that directly mentions CID HTC__621. Doing a Google search for "2PRGIMG_HIMAR_UHL_L50_SENSE70_hTC_Asia_TW_1.10.709.2_Radio_1.1506V24P59.2508.1112_HT[W.T]_release_464157_signed_2_4.zip" didn't turn anything up, but doing a Google search for a shortened version of the file name turned up some downloads.
Here's the problem - this isn't an RUU and I have no way to help you verify if it's the right file or even what you needs. I found an RUU file, but it looks to be for the wrong CID, even the MID is correct. (notice that there is a password to extract the RUU from the zip - it's given in the thread linked)
It may be helpful to examine the files & filenames and use them to search XDA and Google to find the appropriate files. At the least, it's a starting point.
---------- Post added at 11:25 PM ---------- Previous post was at 11:12 PM ----------
So, it looks like there are some RUU files that match that filename, but you can't access the files without a membership - a paid membership. The lowest membership cost is $15 for 30 days, but I have no experience with this website and can't speak to its legitimacy.
---------- Post added at 11:31 PM ---------- Previous post was at 11:25 PM ----------
Sorry for the triple post here. But this may be (maybe) a compatible RUU for your phone - and no access fee. However, it looks like it is a lower bootloader version (1.03.709.13) - I don't know if you can use it. My understanding is that trying to install an RUU that is a lower version than your current version is a no-go.

I would question why you want the ota.. If you want to upgrade to marshmallow just root, s-off & flash an unsigned zip. Job done.
If it's to unbrick you can try a phone repair store or if your carrier has local stores you can try one. Sometimes they have a db of roms.
Sent from my HTC One M9 using Tapatalk

computerslayer said:
Well, here is what my Google-fu has come up with. No guarantees, but maybe this will help.
I found this site that directly mentions CID HTC__621. Doing a Google search for "2PRGIMG_HIMAR_UHL_L50_SENSE70_hTC_Asia_TW_1.10.709.2_Radio_1.1506V24P59.2508.1112_HT[W.T]_release_464157_signed_2_4.zip" didn't turn anything up, but doing a Google search for a shortened version of the file name turned up some downloads.
Here's the problem - this isn't an RUU and I have no way to help you verify if it's the right file or even what you needs. I found an RUU file, but it looks to be for the wrong CID, even the MID is correct. (notice that there is a password to extract the RUU from the zip - it's given in the thread linked)
It may be helpful to examine the files & filenames and use them to search XDA and Google to find the appropriate files. At the least, it's a starting point.
---------- Post added at 11:25 PM ---------- Previous post was at 11:12 PM ----------
So, it looks like there are some RUU files that match that filename, but you can't access the files without a membership - a paid membership. The lowest membership cost is $15 for 30 days, but I have no experience with this website and can't speak to its legitimacy.
---------- Post added at 11:31 PM ---------- Previous post was at 11:25 PM ----------
Sorry for the triple post here. But this may be (maybe) a compatible RUU for your phone - and no access fee. However, it looks like it is a lower bootloader version (1.03.709.13) - I don't know if you can use it. My understanding is that trying to install an RUU that is a lower version than your current version is a no-go.
Click to expand...
Click to collapse
Thank you for the information, I will try to use these files.
I have a question, I do not have much knowledge about it, but those files marked as signed, they are able to receive OTA updates?
very grateful for your help.

shivadow said:
I would question why you want the ota.. If you want to upgrade to marshmallow just root, s-off & flash an unsigned zip. Job done.
If it's to unbrick you can try a phone repair store or if your carrier has local stores you can try one. Sometimes they have a db of roms.
Sent from my HTC One M9 using Tapatalk
Click to expand...
Click to collapse
I need the OTA file, because this device belongs to a person who does not really understand how these things work and he eventually found some things on the internet and tried to put the device even without knowing very well what he was doing, now he can not get the OTA updates.

edu22w said:
Does Anyone know where I can find an OTA file HTC M9e / M9s also called HIMAR UHL ??
IT's the Asian version from Taiwan.
Follows some device information:
(bootloader) kernel: lk
(bootloader) product: htc_himaruhl
(bootloader) version: 1.0
(bootloader) version-main: 1.10.709.2
(bootloader) boot-mode: download
(bootloader) version-bootloader: 1.01.0000
(bootloader) mid: 2PRG10000
(bootloader) cid: HTC__621
Please, I really need this.
thank you in advance.
Click to expand...
Click to collapse
Did you find the rom for the M9e (HIMAR)? I tried all links provided in this forum and no way... Thanks! Hi, I am with my phone bricked and cannot boot. I made a mistake while wiping to factory, and wiped all the phone system.

ggleup said:
Did you find the rom for the M9e (HIMAR)? I tried all links provided in this forum and no way... Thanks! Hi, I am with my phone bricked and cannot boot. I made a mistake while wiping to factory, and wiped all the phone system.
Click to expand...
Click to collapse
You can use these files to unbrick your phone
https://www.androidfilehost.com/?fid=24459283995312105
https://www.androidfilehost.com/?fid=24459283995312106
https://www.androidfilehost.com/?fid=24421527759889622

Code:
(bootloader) kernel: lk
(bootloader) product: htc_himaruhl
(bootloader) version: 1.0
(bootloader) imei: 354073070255939
(bootloader) version-main: 1.10.709.2
(bootloader) boot-mode: RUU
(bootloader) version-bootloader: 1.01.0000
(bootloader) mid: 2PRG10000
(bootloader) cid: HTC__621
SAME CID MID need update zıp fıle

https://super-firmware.com/index.php?a=browse&b=category&id=4854
3$ 1 day 5gb limit
Tapatalk kullanarak iPhone aracılığıyla gönderildi

gencom said:
Code:
(bootloader) kernel: lk
(bootloader) product: htc_himaruhl
(bootloader) version: 1.0
(bootloader) imei: 354073070255939
(bootloader) version-main: 1.10.709.2
(bootloader) boot-mode: RUU
(bootloader) version-bootloader: 1.01.0000
(bootloader) mid: 2PRG10000
(bootloader) cid: HTC__621
SAME CID MID need update zıp fıle
Click to expand...
Click to collapse
Do you know where to get the rom stock of that?

Help! Haven't got the nougat update yet

I have a htc m9u cid is htc-621 (twm-tw). I saw many posts saying that htc m9 got nougat update on december 6. But today is december 21 & i still did'nt showing the ota update. The phone is completely stock and not even rooted. Please can anyone explain me why is the update not showing on my phone yet?
The current software number displaying in my m9 software information is 3.36.709.3

Janith96 said:
I have a htc m9u cid is htc-621 (twm-tw). I saw many posts saying that htc m9 got nougat update on december 6. But today is december 21 & i still did'nt showing the ota update. The phone is completely stock and not even rooted. Please can anyone explain me why is the update not showing on my phone yet?
The current software number displaying in my m9 software information is 3.36.709.3
Click to expand...
Click to collapse
The nougat update is only rolling out for us developer edition devices or those who have converted their M9 to developer edition firmware right now. It'll be out for everyone else soon

mrbtree98 said:
The nougat update is only rolling out for us developer edition devices or those who have converted their M9 to developer edition firmware right now. It'll be out for everyone else soon
Click to expand...
Click to collapse
Thank you

Janith96 said:
I have a htc m9u cid is htc-621 (twm-tw). I saw many posts saying that htc m9 got nougat update on december 6. But today is december 21 & i still did'nt showing the ota update. The phone is completely stock and not even rooted. Please can anyone explain me why is the update not showing on my phone yet?
The current software number displaying in my m9 software information is 3.36.709.3
Click to expand...
Click to collapse
I have Nougat for my Tmobile HTC One M9 Downloading now

TechBoy_CJ said:
I have Nougat for my Tmobile HTC One M9 Downloading now
Click to expand...
Click to collapse
USA or other? I switched to the developer SKU to get Nougat but I'm eager to have wifi calling again.

computerslayer said:
USA or other? I switched to the developer SKU to get Nougat but I'm eager to have wifi calling again.
Click to expand...
Click to collapse
USA and its the T-Mobile variant

TechBoy_CJ said:
USA and its the T-Mobile variant
Click to expand...
Click to collapse
That's a pleasant surprise! The official update page at their website hadn't been updated yet to show that it is released. Would you post your OS version?

Any news for the M9 at&t update?

computerslayer said:
That's a pleasant surprise! The official update page at their website hadn't been updated yet to show that it is released. Would you post your OS version?
Click to expand...
Click to collapse
Right here

TechBoy_CJ said:
Right here
Click to expand...
Click to collapse
Huh. I can't find that that SKU (4.27.531.6) for the M9 in the readme. Do you know your CID and MID?

computerslayer said:
Huh. I can't find that that SKU (4.27.531.6) for the M9 in the readme. Do you know your CID and MID?
Click to expand...
Click to collapse
Nahh I don't

TechBoy_CJ said:
Nahh I don't
Click to expand...
Click to collapse
Would you be willing to post the output from fastboot getvar all (remembering to remove your IMEI)? That would show your MID and CID.

computerslayer said:
Huh. I can't find that that SKU (4.27.531.6) for the M9 in the readme. Do you know your CID and MID?
Click to expand...
Click to collapse
That might be the case because no one contributed any files for this SKU, yet.
It's the T-Mobile US SKU. It looks like HTC didn't upload the new RUU, yet. I tried to download it by "updating" the download URL for the 3.x RUU with the new version but that didn't work. (This has been possible in the past when they forgot to update their download page.)
HTML:
http://dl3.htc.com/application/RUU_HIMA_UL_M60_SENSE70_TMUS_MR_TMOUS_3.39.531.41.exe/
http://dl3.htc.com/application/RUU_HIMA_UL_N70_SENSE80_TMUS_MR_TMOUS_4.27.531.6.exe/

Flippy498 said:
That might be the case because no one contributed any files for this SKU, yet.
It's the T-Mobile US SKU. It looks like HTC didn't upload the new RUU, yet. I tried to download it by "updating" the download URL for the 3.x RUU with the new version but that didn't work. (This has been possible in the past when they forgot to update their download page.)
HTML:
http://dl3.htc.com/application/RUU_HIMA_UL_M60_SENSE70_TMUS_MR_TMOUS_3.39.531.41.exe/
http://dl3.htc.com/application/RUU_HIMA_UL_N70_SENSE80_TMUS_MR_TMOUS_4.27.531.6.exe/
Click to expand...
Click to collapse
Do you know the CID & MID? I'll happily go contribute RUU files as I go through the downgrade and re-upgrade (I'm on 4.x).
---------- Post added at 12:24 PM ---------- Previous post was at 12:11 PM ----------
computerslayer said:
Do you know the CID & MID? I'll happily go contribute RUU files as I go through the downgrade and re-upgrade (I'm on 4.x).
Click to expand...
Click to collapse
Is T-MOB010 the right CID and 0PJA12000 the correct MID (From the SKU-, CID- and MID-List by Sneakyghost and Behold_this) for SKU 531? I'm presuming that even though I have the developer edition model of the M9 (MID 0PJA11000), the firmware/OS is compatible because they're both GSM models.

Yes, it should be compatible. I don't know the corresponding CID but you can extract the android-info.txt from the RUU with the decryption tool.
Sent from my HTC One M9 using XDA Labs

Flippy498 said:
Yes, it should be compatible. I don't know the corresponding CID but you can extract the android-info.txt from the RUU with the decryption tool.
Sent from my HTC One M9 using XDA Labs
Click to expand...
Click to collapse
Hmm. I followed the instructions linked from the readm, but the rom.zip file isn't recognized by 7-zip or Windows as an archive.
Ah. I found the Universal HTC RUU/ROM Decryption Tool. Maybe this could be linked in the readme?
---------- Post added at 01:58 PM ---------- Previous post was at 01:51 PM ----------
Flippy498 said:
That might be the case because no one contributed any files for this SKU, yet.
It's the T-Mobile US SKU. It looks like HTC didn't upload the new RUU, yet. I tried to download it by "updating" the download URL for the 3.x RUU with the new version but that didn't work. (This has been possible in the past when they forgot to update their download page.)
HTML:
http://dl3.htc.com/application/RUU_HIMA_UL_M60_SENSE70_TMUS_MR_TMOUS_3.39.531.41.exe/
http://dl3.htc.com/application/RUU_HIMA_UL_N70_SENSE80_TMUS_MR_TMOUS_4.27.531.6.exe/
Click to expand...
Click to collapse
I've got the 531 SKU RUU ready for upload (3.39.531.41), extracted from the RUU executable. I can confirm from the android-info file that the MID is indeed 0PJA12000 and the CID is T-MOB010
What's the best way to get the zip file where it needs to be?

computerslayer said:
Hmm. I followed the instructions linked from the readm, but the rom.zip file isn't recognized by 7-zip or Windows as an archive.
Ah. I found the Universal HTC RUU/ROM Decryption Tool. Maybe this could be linked in the readme?
Click to expand...
Click to collapse
Er, of course you can't open RUU.zip files like normal archives. They're encrypted and that's explained in the FAQ of the ReadMe thread. And I actually recommended using the decryption tool in the post you quoted. It's linked in the Further Reading/Useful Links section and in the FAQ section since several month...
computerslayer said:
I've got the 531 SKU RUU ready for upload (3.39.531.41), extracted from the RUU executable. I can confirm from the android-info file that the MID is indeed 0PJA12000 and the CID is T-MOB010
What's the best way to get the zip file where it needs to be?
Click to expand...
Click to collapse
If you don't have one already I'd recommend you to get an AFH account. It may take some days until the dev functions (which are needed if you want to upload files) get enabled but afterwards you'll have unlimited space.
Edit: I personally prefer uploading files via FTP. However, since FTP access needs to be requested seperately you might want to directly request it when you request the dev functions on AFH.

Flippy498 said:
Er, of course you can't open RUU.zip files like normal archives. They're encrypted and that's explained in the FAQ of the ReadMe thread. And I actually recommended using the decryption tool in the post you quoted. It's linked in the Further Reading/Useful Links section and in the FAQ section since several month...
If you don't have one already I'd recommend you to get an AFH account. It may take some days until the dev functions (which are needed if you want to upload files) get enabled but afterwards you'll have unlimited space.
Click to expand...
Click to collapse
Augh. Of course it's all in the readme.
So am I right in understanding that there is no free option for AFH? Bummer. I'll get around to that shortly.
I've got the link for the Nougat OTA for SKU 531 too. Looks like we're going to get a couple entries for 531!

computerslayer said:
Augh. Of course it's all in the readme.
So am I right in understanding that there is no free option for AFH? Bummer. I'll get around to that shortly.
I've got the link for the Nougat OTA for SKU 531 too. Looks like we're going to get a couple entries for 531!
Click to expand...
Click to collapse
AFH is for free. You don't need a premium account. I don't have one, either. There a 4 types of accounts on that site: user accounts (free), dev accounts (free), premium user accounts (paid) and premium dev accounts (paid).
Edit: I actually don't know why so many think you would need to pay for AFH...

Flippy498 said:
AFH is for free. You don't need a premium account. I don't have one, either. There a 4 types of accounts on that site: user accounts (free), dev accounts (free), premium user accounts (paid) and premium dev accounts (paid).
Edit: I actually don't know why so many think you would need to pay for AFH...
Click to expand...
Click to collapse
For me it was because at the landing page there wasn't immediate access to upload files but there was mention of membership plans. The jump I made was that uploading was enabled with a service plan.
....and then I read the 'about' link which has the one-line summary I quoted above. Not my best day for reading before posting.

Develop Bugs

welcome