Database Users

CDMA hero unable to ROOT

Model HTC Hero
Firmware 1.5
Baseband 1.04.04.10.09
kernel version 2.6.27-6bc66721
HTC [email protected] #958
Software 1.62.556.1
HBOOT 1.46.0000(HERO200000)
I've done the goldcard and I think it works because I don't get the CID error.
When I try to flash RUU's I get
v1.29.651.1 140 bootloader error
v1.56.651.2 140 bootloader error
v1.76.405.5 110 file open error
I've tried various signed rom packages that I rename to hercimg.zip and it fails with Bootload IC fail. I'm unable to press anything when I am in the recovery ROM. I've tried to change the files in the ROM and then I get 132 signature error.
Basically I need help or at least a direction to go.
Can an RRU be built with my proper Hboot/Bootloader version?

Its gotta be user error.

Software 1.62.556.1
Whoa, wait what now?

If you have the Sprint Hero CDMA
http://forum.xda-developers.com/showthread.php?t=583291
If you have non sprint hero
http://forum.xda-developers.com/showthread.php?t=581869
You may have already tried these, but if you didnt there they are.

obannvi said:
Its gotta be user error.
Click to expand...
Click to collapse
No it doesn't

My carrier is Alaska Digitel, which is noted not to work because of the bootloader, which is why I'm on the hunt.

dangerous123 said:
My carrier is Alaska Digitel, which is noted not to work because of the bootloader, which is why I'm on the hunt.
Click to expand...
Click to collapse
Thats a bummer. If I were you I would talk to one of the guru's that rooted the hero.

dwertz said:
Thats a bummer. If I were you I would talk to one of the guru's that rooted the hero.
Click to expand...
Click to collapse
ok, now if I could only knew who they were...

dangerous123 said:
ok, now if I could only knew who they were...
Click to expand...
Click to collapse
Look at the non sprint rooting thread and see who posted it or where it is linked to.

[Guide] Downgrade all US Variants to s-off-able versions

DOES NOT WORK WITH INTERNATIONAL DEVICES THAT ARE ON HBOOT 1.54! DONT EVEN BOTHER TRYING. I WILL NOT SUPPORT YOU IF YOU'RE NOT SMART ENOUGH TO FOLLOW THIS GUIDE OR ARE USING AN INTERNATIONAL VERSION OF THE DEVICE
Hello, here is a very simple guide to be able to use revone or moonshine to s-off on the US variants of the HTC One
Make sure you have dev unlocked and you flashed a custom recovery (CWM or TWRP both work fine)
make sure you have also grabbed an appropriate RUU from androidfiles.org
AT&T - http://ruu.androidfiles.org/getdown....13_10.33.1150.01_release_318450_signed_2.exe
T-Mobile - Need RUU link - Working on getting it
Sprint - http://www.androidfilehost.com/?fid=22979706399752930 <-- Extract zip and run RUU.exe
After that, you need to make sure adb works (if you can't figure out how to do any of this, I will not help you. If you can't find out basic things about Android, then you shouldn't have s-off)
So, as we all know, HTC has made it so with newer bootloaders, you cannot downgrade to older firmwares. Well, this is true except when the software version changes but the hboot version doesn't. So all we need to do is this:
Boot into recovery
echo 1.00.000.0 | dd of=/dev/block/mmcblk0p19 bs=1 skip=160
adb reboot bootloader
start the RUU EXE, wait for progress bar to finish for extraction then it opens a new window with a checkbox, next, and cancel
after that, open windows explorer and goto %temp%
back out 1 directory then search for rom.zip
move that to desktop
then close the RUU
fastboot oem lock
fastboot oem rebootRUU
fastboot flash zip PATH\TO\DESKTOP\rom.zip
it'll flash hboot then tell you to flush
just re-run the flash zip command (just press up and enter then it should flash again)

Will this return the phone stock
Will this return the phone to stock and therefore allow moonshine to run correctly? Currently I am running cm10 and therefore cannot get moonshine or revone to work.

Indirect said:
echo 1.00.00.0 | dd of=/dev/block/mmcblk0p19 bs=1 skip=160
Click to expand...
Click to collapse
That's some scary **** right there. But awesome find if it works.
Is 0p19 the hboot partition or does it just contain the hboot version? Or is it some other version number we are changing with this?
Why wouldn't this work with the international version? Can't you just flash the WWE RUU instead?
Sent from my iPad using Tapatalk HD

ionstorm3 said:
Will this return the phone to stock and therefore allow moonshine to run correctly? Currently I am running cm10 and therefore cannot get moonshine or revone to work.
Click to expand...
Click to collapse
Yes.
io53 said:
That's some scary **** right there. But awesome find if it works.
Is 0p19 the hboot partition or does it just contain the hboot version? Or is it some other version number we are changing with this?
Why wouldn't this work with the international version? Can't you just flash the WWE RUU instead?
Sent from my iPad using Tapatalk HD
Click to expand...
Click to collapse
It is changing the main version and allows a downgrade but doesn't touch hboot pre-update version.
Sent from my hidden jewel

I don't think there is an ruu for tmobile lower than .11, would we be able to change CID in a similar way?
Sent from my HTC One using Tapatalk 4 Beta

io53 said:
Is 0p19 the hboot partition or does it just contain the hboot version? Or is it some other version number we are changing with this?
Why wouldn't this work with the international version? Can't you just flash the WWE RUU instead?
Click to expand...
Click to collapse
hboot is p12. p19 is a "misc" partition where mainver is stored (I think).
As the OP states, this doesn't work if your hboot is 1.54, for reasons that don't need to be repeated again here.

Can you just use the At&t RUU if you're on T-Mobile, then updat radio after soff? Or is that crazy?
Sent from my HTC One using xda app-developers app

You need supercid to run another variants ruu
Sent from my HTC One using Tapatalk 4

iElvis said:
hboot is p12. p19 is a "misc" partition where mainver is stored (I think).
As the OP states, this doesn't work if your hboot is 1.54, for reasons that don't need to be repeated again here.
Click to expand...
Click to collapse
OP says that it does not work on INTERNATIONAL devices on 1.54.
Sent from my HTC One using Tapatalk 4

io53 said:
OP says that it does not work on INTERNATIONAL devices on 1.54.
Click to expand...
Click to collapse
OP can clarify, but what I believe he means is the international carriers that have rolled out 4.2.2. If you took that OTA, you're stuck. No US carriers have rolled out 4.2.2, so no stock US devices have hboot 1.54, but there have been OTAs that blocked s-off.
But this method does not work on US devices that are rooted and upgraded to 1.54 either, because you cannot downgrade hboot without s-off.

iElvis said:
OP can clarify, but what I believe he means is the international carriers that have rolled out 4.2.2. If you took that OTA, you're stuck. No US carriers have rolled out 4.2.2, so no stock US devices have hboot 1.54, but there have been OTAs that blocked s-off.
But this method does not work on US devices that are rooted and upgraded to 1.54 either, because you cannot downgrade hboot without s-off.
Click to expand...
Click to collapse
How this works is that due to the fact that radio / sbl doesn't protect the misc partition which contains version number for the rom / firmware but doesn't contain the hboot number. If it did, this would allow a full downgrade from anything.

Indirect said:
How this works is that due to the fact that radio / sbl doesn't protect the misc partition which contains version number for the rom / firmware but doesn't contain the hboot number. If it did, this would allow a full downgrade from anything.
Click to expand...
Click to collapse
Nice find. But of course it will be patched shortly, I assume.

iElvis said:
Nice find. But of course it will be patched shortly, I assume.
Click to expand...
Click to collapse
Nope. Won't be patched. System needs to be able to write to it when it has a new rom

Indirect said:
Nope. Won't be patched. System needs to be able to write to it when it has a new rom
Click to expand...
Click to collapse
Aha, I didn't think of that. Of course, it's not a big vulnerability either, so HTC may not care anyway.

iElvis said:
Aha, I didn't think of that. Of course, it's not a big vulnerability either, so HTC may not care anyway.
Click to expand...
Click to collapse
Nope. Just makes s-off easier when they don't bump up hboot version number.

ROM.ZIP access
Is there any other way to get the ROM.zip for the AT&T variant? I cannot get it using the process listed.

Sorry for the noob question.
I have a Wind-Mobility HTC One (that shares the same MID as T-Mobile but has a different CID), will this RUU method work? It does have a 1.44 hboot version and not a 1.54 hboot.

Does this not include verizon?
Sent from my HTC6500LVW using XDA Premium HD app

RUU file faulty
Indirect said:
DOES NOT WORK WITH INTERNATIONAL DEVICES THAT ARE ON HBOOT 1.54! DONT EVEN BOTHER TRYING. I WILL NOT SUPPORT YOU IF YOU'RE NOT SMART ENOUGH TO FOLLOW THIS GUIDE OR ARE USING AN INTERNATIONAL VERSION OF THE DEVICE
Hello, here is a very simple guide to be able to use revone or moonshine to s-off on the US variants of the HTC One
Make sure you have dev unlocked and you flashed a custom recovery (CWM or TWRP both work fine)
make sure you have also grabbed an appropriate RUU from androidfiles.org
file=M7/RUU_M7_UL_JB_50_Cingular_US_1.26.502.12_Radio_4A.14.3250.13_10.33.1150.01_release_318450_signed_2.exe[/url]
start the RUU EXE, wait for progress bar to finish for extraction then it opens a new window with a checkbox, next, and cancel
after that, open windows explorer and goto %temp%
back out 1 directory then search for rom.zip
move that to desktop
Click to expand...
Click to collapse

wrarvoz said:
Does this not include verizon?
Sent from my HTC6500LVW using XDA Premium HD app
Click to expand...
Click to collapse
No, it does not. Verizon does not currently have an RUU to downgrade with nor a version number that works with any current exploit.

Almost Brick my phone when updating firmware. Close call !!!

Just got the M9 today.
Unlocked, rooted, Installed TWRP, S-Off.
Then I was trying to update to the latest 1.32.40.17 firmware, but I forgot to superCID (11111111).
My cid was HTC__059.
So, the phone stalled forever...had no choice but Vol Up + Power button. Then the phone was tuck at a weird screen with few options of reboot the phone, reboot to bootloader... But no matter what option to choose, the phone just did not reboot to that.
Vol up + Power...Vol down + Power....I dont remember what I pressed cuz I had to press those combo many times, but luckily got back to the download mode. & things went well.
So......SuperCID right after S-Off people.
What a close call :laugh:

This happened to me, but it happened for no reason. Screen said press this for reboot then just went back to the same screen. Had to hard reboot to fix

PEBKAC.
Sent from my HTC One M9 using Tapatalk

dsymbol said:
Just got the M9 today.
Unlocked, rooted, Installed TWRP, S-Off.
Then I was trying to update to the latest 1.32.40.17 firmware, but I forgot to superCID (11111111).
................
So......SuperCID right after S-Off people.
What a close call :laugh:
Click to expand...
Click to collapse
Good advice. Wish there were more threads like this, cos I am not new to flashing but new to htc..
i am unlocked and rooted, but still S-On. Contemplating to go S-off.
So, after S-off then SuperCid, does that mean we can flash "any" rom from any custom rom/any region? but if we are 1.32 we cannot flash 1.40 roms right? we must go back to stock to take the update? i think that is where a few (who are new to htc like me) are confused.

I believe that with S-on, u can flash custom rom that has matching base/firmware.
Put your phone in download mode, the OS tells you your firmware.
Look for roms that has matching base/ firmware.
You dont have to go back to stock. You can flash the latest OTA, it will update your phone to the latest firmware, then flash latest rom.
S-off & superCID let you flash any firmware, any radio, any rom from any region.
I do think $25 is worth the S-off for my case.
I flashed the latest firware, but didnt like it much because of some kernel bugs. So i went back to 1.32 for more stability.
simonbigwave said:
Good advice. Wish there were more threads like this, cos I am not new to flashing but new to htc..
i am unlocked and rooted, but still S-On. Contemplating to go S-off.
So, after S-off then SuperCid, does that mean we can flash "any" rom from any custom rom/any region? but if we are 1.32 we cannot flash 1.40 roms right? we must go back to stock to take the update? i think that is where a few (who are new to htc like me) are confused.
Click to expand...
Click to collapse

nevermind

hamdir said:
good info mate, so if i flash the firmware from 1.40 i can go back to 1.32 without S-OFF as long as my CID matches?
Click to expand...
Click to collapse
You cannot regress if not s off mate, until s off there's no going back no matter what cid

exocetdj said:
You cannot regress if not s off mate, until s off there's no going back no matter what cid
Click to expand...
Click to collapse
yea sorry i read it the other way, ooops
anyway can I s-off from the 1.40 base?

hamdir said:
yea sorry i read it the other way, ooops
anyway can I s-off from the 1.40 base?
Click to expand...
Click to collapse
Not sure mate, I take it u are on maximus?
Basics are u need to install sunshine app and run it. It will tell u whether it will work before asking for payment. It won't work on ahrd for whatever reason, if u are on maximus rooted and the sunshine app asks for payment then u are good to go

exocetdj said:
Not sure mate, I take it u are on maximus?
Basics are u need to install sunshine app and run it. It will tell u whether it will work before asking for payment. It won't work on ahrd for whatever reason, if u are on maximus rooted and the sunshine app asks for payment then u are good to go
Click to expand...
Click to collapse
also if i am s-on and i flash 1.40 firmware, i can always go up no?

hamdir said:
also if i am s-on and i flash 1.40 firmware, i can always go up no?
Click to expand...
Click to collapse
Correct mate

exocetdj said:
Correct mate
Click to expand...
Click to collapse
no problem then, my CID is europe anyway, i am flashing it without s-off (you guys know my opinion so far)

hamdir said:
no problem then, my CID is europe anyway, i am flashing it without s-off (you guys know my opinion so far)
Click to expand...
Click to collapse
Haha good to see you took the plunge, have fun and shout if u need any tips :good:

hamdir said:
no problem then, my CID is europe anyway, i am flashing it without s-off (you guys know my opinion so far)
Click to expand...
Click to collapse
you'll need s-off to flash the unsigned firmware

clsA said:
you'll need s-off to flash the unsigned firmware
Click to expand...
Click to collapse
who said have it unsigned
1.40.401.8 pure is now installed without s-off

hamdir said:
who said have it unsigned
1.40.401.8 pure is now installed without s-off
Click to expand...
Click to collapse
Nice !! ... any idea when the Developer OTA is coming ?

hamdir said:
also if i am s-on and i flash 1.40 firmware, i can always go up no?
Click to expand...
Click to collapse
As long as you're only flashing signed firmware for your model and carrier. Anything else will give an error with S-on.

hamdir said:
who said have it unsigned
1.40.401.8 pure is now installed without s-off
Click to expand...
Click to collapse
Can you share it? Signed firmware?
Wysłane z mojego HTC One M9 przy użyciu Tapatalka

hamdir said:
who said have it unsigned
1.40.401.8 pure is now installed without s-off
Click to expand...
Click to collapse
how do you get it ?
thanks.

Unlocked Factory Image for Carrier locked STV100-1

Hello all,
Attached are modified factory roms that will flash an at&t or t-mobile phone to an unlocked phone. This means no more bloatware and in my case much better handoff between the lte bands.
These images reuse the carrier bootloader (I'm working on it) but everything else from the radio to the rom is from the unlocked priv.
Version: AAJ919
AT&T -> unlocked hybrid: https://www.androidfilehost.com/?fid=673368273298947044
T-Mobile -> unlocked hybrid: https://www.androidfilehost.com/?fid=457095661767153589
Directions: Unzip files. Hold power and volume down until phone reboots to fastboot. Launch flashall.bat. Follow instructions. This WILL delete your data so have a backup or don't I'm your boss. Wait. Done.
As usual I am not responsible for you bricking your phone. That being said even if the wrong file is flashed the phone gets stuck at the fastboot screen where you can flash the right file.
-Happy Modding

Can you provide more detailed instructions please

Im serious thats all there is to it.
What parts are you having problems with?

Didn't work for me, unfortunately. Phone promptly asked for SIM Pin.

zerocover said:
Hello all,
Attached are modified factory roms that will flash an at&t or t-mobile phone to an unlocked phone. This means no more bloatware and in my case much better handoff between the lte bands.
These images reuse the carrier bootloader (I'm working on it) but everything else from the radio to the rom is from the unlocked priv.
Version: AAJ919
AT&T -> unlocked hybrid: https://www.androidfilehost.com/?fid=673368273298947044
T-Mobile -> unlocked hybrid: https://www.androidfilehost.com/?fid=457095661767153589
Directions: Unzip files. Hold power and volume down until phone reboots to fastboot. Launch flashall.bat. Follow instructions. This WILL delete your data so have a backup or don't I'm your boss. Wait. Done.
As usual I am not responsible for you bricking your phone. That being said even if the wrong file is flashed the phone gets stuck at the fastboot screen where you can flash the right file.
-Happy Modding
Click to expand...
Click to collapse
Just out of curiosity, will this be possible to do on a Verizon model? Obviously not flashing the ones above but making a VZ version?
Sent from my Nexus 6 using XDA-Developers Legacy app

illitero said:
Didn't work for me, unfortunately. Phone promptly asked for SIM Pin.
Click to expand...
Click to collapse
This does not unlock your phone, this is an unlocked rom with no carrier bloatware.
You must already have an unlocked phone. If your phone is paid off call your carrier and ask for the pin.

ozzmanj1 said:
Just out of curiosity, will this be possible to do on a Verizon model? Obviously not flashing the ones above but making a VZ version?
Sent from my Nexus 6 using XDA-Developers Legacy app
Click to expand...
Click to collapse
That one wont. This one might.
Disclaimer I dont have a vzw phone so can't test it, but pretty much I'm making the same modification I made to the others. It should work.
If you could give it a go and let me know.
If it doesn't work this file will get you back to where you should be

zerocover said:
That one wont. This one might.
Disclaimer I dont have a vzw phone so can't test it, but pretty much I'm making the same modification I made to the others. It should work.
If you could give it a go and let me know.
If it doesn't work this file will get you back to where you should be
Click to expand...
Click to collapse
I haven't bought a priv yet. But i came across a killer deal for a VZ model that's I'd be using on tmo. I'm going to be snagging it. But will test for sure and let you know. I am just trying to read up on the phone before ordering it on how to get rid of bloat and whatnot without root. Thank you very much for making the file.
Sent from my Nexus 6 using XDA-Developers Legacy app

zerocover said:
This does not unlock your phone, this is an unlocked rom with no carrier bloatware.
You must already have an unlocked phone. If your phone is paid off call your carrier and ask for the pin.
Click to expand...
Click to collapse
Haha, duh. I'm sorry. Very distracted, late night for me when I found this thread. plz4giv

zerocover said:
That one wont. This one might.
Disclaimer I dont have a vzw phone so can't test it, but pretty much I'm making the same modification I made to the others. It should work.
If you could give it a go and let me know.
If it doesn't work this file will get you back to where you should be
Click to expand...
Click to collapse
I tried it and it worked. However, once it boots it will install a software update which takes you back to the bloated VZW version. Perhaps there's a way to block that update?

dakota_96 said:
I tried it and it worked. However, once it boots it will install a software update which takes you back to the bloated VZW version. Perhaps there's a way to block that update?
Click to expand...
Click to collapse
Totally possible. If we had root just modify the host file and set the verizon server update ip to localhost. You should be able to install DNS66 and do something similar. This will take digging on your end to figure out what the update IP is though.

I have an ATT Priv, so if I flash this I'll get next time OTA from BlackBerry instead of ATT? Saw the one above with the Verizon update and went back to bloated version.

Reporting back in to verify that it worked flawlessly on both at&t and t-mobile variants I have. Now if only we could get root lol
Thank you so much for your effort

I have an ATT branded Priv which got unlocked from ATT directly and has successfully installed this ROM. It works perfectly without any ATT bloatwares, but this built is old and when I check for system update it shows my system is up to date. However the most recent built for unlocked factory image is AAL202 according to the blackberry official reload software website.
So does this ROM OTA updates via ATT server or directly from Blackberry server?

zerocover said:
Im serious thats all there is to it.
What parts are you having problems with?
Click to expand...
Click to collapse
dude what about the firmware version? and update status?

is there one available for the AAL230 update? and is the at&t version provided here applicable on my priv with AAL230 update installed?

zerocover said:
Hello all,
Attached are modified factory roms that will flash an at&t or t-mobile phone to an unlocked phone. This means no more bloatware and in my case much better handoff between the lte bands.
These images reuse the carrier bootloader (I'm working on it) but everything else from the radio to the rom is from the unlocked priv.
Version: AAJ919
AT&T -> unlocked hybrid: https://www.androidfilehost.com/?fid=673368273298947044
T-Mobile -> unlocked hybrid: https://www.androidfilehost.com/?fid=457095661767153589
Directions: Unzip files. Hold power and volume down until phone reboots to fastboot. Launch flashall.bat. Follow instructions. This WILL delete your data so have a backup or don't I'm your boss. Wait. Done.
As usual I am not responsible for you bricking your phone. That being said even if the wrong file is flashed the phone gets stuck at the fastboot screen where you can flash the right file.
-Happy Modding
Click to expand...
Click to collapse
Is this possible for the Verizon moto z play???

calistoz said:
is there one available for the AAL230 update? and is the at&t version provided here applicable on my priv with AAL230 update installed?
Click to expand...
Click to collapse
AT&T runs a newer version of android then the international. If you want stockish android with no carrier bloat go international.

jzamalot said:
Is this possible for the Verizon moto z play???
Click to expand...
Click to collapse
Send me a moto z play and we shall see. Otherwise sorry I can't test it.

With the very recent Verizon Priv update can the de-bloated image be updated?

Flashed Wrong Firmware

Hello friends of the XDA community. I have a Sprint unlocked variant. I'm on T-Mobile, but after September's update, I got sim invalid message. I thought this would be an easy fix to downgrade back to the previous stock Pie Firware. So I went to the Essential website and downloaded the wrong firmware and flashed it, it was open market but I have a Sprint device. Now the device just bootloops every time I try to flash the correct firmware. When I try to flash the correct firmware, it says wiping data and than it starts transfering data and a second after it reboots and bootloops. Am I doomed? Thanks guys.

Open market works fine on Sprint devices. What did you download? Did you unlock your bootloader? Unlock critical?

Thank you so much for you help. I finally got it back up and running.
ziddey said:
Open market works fine on Sprint devices. What did you download? Did you unlock your bootloader? Unlock critical?
Click to expand...
Click to collapse
Sent from my Pixel XL using Tapatalk

Maybe essential will release a fix in a few days for the relocked Sprint phones. Otherwise, if you wanted to unlock it yourself so you can run the latest update, see https://forum.xda-developers.com/showpost.php?p=77532356&postcount=20 since it sounds like you already have your bootloader unlocked.

Do you mean bootloader or sim in terms of unlocking? Bootloader is fine. I'm sim locked.
ziddey said:
Maybe essential will release a fix in a few days for the relocked Sprint phones. Otherwise, if you wanted to unlock it yourself so you can run the latest update, see https://forum.xda-developers.com/showpost.php?p=77532356&postcount=20 since it sounds like you already have your bootloader unlocked.
Click to expand...
Click to collapse
Sent from my Pixel XL using Tapatalk

With an unlocked bootloader, you can either root and flash sim-unlocked modemst images with dd, or downgrade the bootloader and use it to flash.

ziddey said:
With an unlocked bootloader, you can either root and flash sim-unlocked modemst images with dd, or downgrade the bootloader and use it to flash.
Click to expand...
Click to collapse
Is there a link for this method? Thanks!