yashsingh1/xdaforums huggingface dataset:
[HTC Sensation XL] fardjad:
Runnymede S-OFF

Since we didn't have S-OFF on Runnymede, I decided to work on it, and here is the result:

It's basically a patched bootloader that pretends S-OFF (not to be confused with Radio S-OFF.)

The following commands have been tested and working correctly:

erase (system, recovery, boot)

flash (zip, system, recovery, boot, hboot, radio)

boot

It also by passes the CID check (See the next post for a workaround.)

and here is the flash "zip", "hboot", and "recovery" demo:

[youtube]PH_EUXva3ew[/youtube]

It's still under development; since many people asked me to release it, I decided to release a public beta:

Download (Windows Only) (link removed, see below)

Open the attached file and follow the instructions.

You'll need to install a stock RUU (or if not available, you can flash this stock recovery posted by fshami on an unlocked device) and install HTC Sync Drivers.

Note that this is not guaranteed to work and I won't take any responsibilities if something bad happened to your device.

My farewells

I had lots of fun modifying Runnymede HBOOT and it was a great experience. I want to say thanks to all of the testers for their feedback and also for being nice and patient (maybe I should have released this after my exams, so I'd have enough time to work on it), and I'm sorry for the problems you may have faced because of the incompleteness of my work.

Recently unlimited.io guys (known for Juopunutbear S-OFF) provided their patched HBOOTs. Apparently these are available for GB and ICS, by-pass CID check and have optional update protection:

See this post.
[HTC Sensation XL] fardjad:
How to install RUUs with different CIDs

You won't get Radio S-OFF with flashing this HBOOT. Having this said, even if you enable writeCID function in HBOOT you can't change the CID.

I thought people prefer to install one of the custom ROMs floating around in Development Section and flashing the Radio separately rather than upgrading to ICS using RUUs... well I thought wrong :)

And for those having problems with CID, here is a workaround:

First thing you need to do is to extract the rom.zip file from the RUU. I believe Shen posted a video on XDA-TV showing this, here is a quick how-to however:

Open the RUU.

After the Welcome screen has shown up, open %temp% in explorer (ie. Meta/Win-Key + R, type %temp% and press enter)

Sort items by Date modified and open the most recent modified folder having a name like {3F99782F-1E57-40F2-9F33-D48C3DC171C5}

Search for rom.zip and move/copy it to somewhere else.

Close the RUU.

Now download SigTool (link removed, see the first post) and place it beside the rom.zip file. Open Command-Prompt, navigate to the relevant directory and execute the following:

SigTool rip rom.zip

the expected output is:

Creating backup...
Ripping signature...
Done.

Extract the signature-ripped rom.zip file.

Open android-info.txt in a *nix end of line aware text editor (ex. Notepad++). You should see something like the following:

modelid: PI3920000
cidnum: HTC__001
cidnum: HTC__E11
cidnum: HTC__203
cidnum: HTC__102
cidnum: HTC__405
cidnum: HTC__Y13
cidnum: HTC__A07
cidnum: HTC__304
cidnum: HTC__032
cidnum: HTC__J15
cidnum: HTC__016
mainver: 1.05.111.8
hbootpreupdate:12

Add your phone CID

If you don't know your CID you can get it this way:

While your phone is in bootloader mode and connected in FASTBOOT-USB mode, execute this:

fastboot getvar cid

it should output something like cid: T-MOB101

then add a new line (cidnum: <YOURCIDNUM>) below the modelid in android-info.txt so it looks like:

modelid: PI3920000cidnum: T-MOB101...

Save changes and close the editor.

This is very important:

In extracted contents you should see a file with hboot name prefix, exclude/take it away and repack other files. I assume you'll choose rom-new.zip for the archive name.

Now you should null sign (that's how I like to call it) the file:

SigTool nullsign rom-new.zip

and flash the null-signed rom zip file:

fastboot flash zip rom-new.zip

when finished, flash the 1.28 hboot you moved away before:

fastboot flash hboot hboot_*.nb0

Reboot your device.

I know this is not the easiest guide ever but I really don't have enough time to create a one-click tool for this. Needless to say that this is not guaranteed to work and I won't take any responsibilities if you bricked your phone.

Take care :)
[HTC Sensation XL] fshami:
Good work mate, waiting for more features ;)
[HTC Sensation XL] alfchin:
seems not work on my phone.

adb.exe always crash.

ps:my XL is unlocked and with CWM recovery inside.HBOOT ver is 1.28

=========================================

I solved that problem after reinstall my windows.

now it works!!!

thank you for your amazing job!!!

RUU still informs me that ERR131 CID Error...
[HTC Sensation XL] fardjad:
adb.exe crash is irrelevant to the tool it self. Turn off your virus protection and try running the file as administrator.
[HTC Sensation XL] anonymous_1997:
Is a stock ruu absolutely required because I have a vodafone Australia phone and there is no ruu available at the moment!
[HTC Sensation XL] fardjad:
No, Actually you only need a stock recovery.
[HTC Sensation XL] alfchin:
when I using RUU to flash my phone,it still show err131:CID incorrect

any other way to flash?
[HTC Sensation XL] fardjad:
Actually I've flashed Europe RUU in an Asia Shipped phone without any problem.

You can try extracting the rom.zip file from RUU and flash zip or extract it and flash it's parts separately.
[HTC Sensation XL] anonymous_1997:
So what I'm seeing from this boot loader is that you can flash any ruu on any device ??
[HTC Sensation XL] anonymous_1997:
Right that might make thing s easier :)
[HTC Sensation XL] fshami:
Incase one wants to go back to the stock HBOOT, it can be flashed via PDIMG file rite?
[HTC Sensation XL] fardjad:
I'm not sure about PGIMG*.zip but "fastboot flash hboot path/to/stockHboot" works.
[HTC Sensation XL] fshami:
Took me 2 attempts but it worked :)

And finally i flashed my custom Splash Screen :D
[HTC Sensation XL] alfchin:
PI39IMG.zip with gold card works
[HTC Sensation XL] fshami:
Stock recovery

Hi OP,

may be you can include attached zip in your first thread..

its a zip file containing stock recovery & a bat file to flash it instead of running the commsnds manually..

just extract the zip file & connect ur phone as Charge only with USB Debugging enabled

run 'recovery_flasher.bat' from the extracted folder & after the reboot, users can proceed with your file..
[HTC Sensation XL] hitchmontana:
it worked :)

So which radio,ruu or hboot does we have to boot? or an other costum rom?

I have hboot 1.25.0004, Radio 3822.10.10.12_M
[HTC Sensation XL] fshami:
First thing you can try is my Splash Screen collection :D
[HTC Sensation XL] nader1450:
hboot 1.25.0003

flash stock ruu and run fardjadb

after finished all ... automatically go to bootloader

but do nothing and s-on

any idea
[HTC Sensation XL] Sensation_NZ:
If you need the VodaHutch AU RUU here is a link http://www.filefactory.com/file/1qh...31U_3831_15_00_20_M_release_252796_signed_exe
[HTC Sensation XL] pashaa:
i want to use sig tool for other devices,

is this work for other device to sign orginal Rom.zip File?(for change *.img file)

at last i need complied file.please send link.

BR
[HTC Sensation XL] hamdir:
So using unlimited IOs hboots, i can flash any RUU i want?
[HTC Sensation XL] hamdir:
Thought these should be posted in this thread

Runnymede enhanced S-OFF HBOOTs by unlimited.io (Overwrite protection and SuperCID)

checksum: 7cb684788887d8a8963ad2ceaf849144

Runnymede ICS CW Recovery by unlimited.io (mount storage fixed)

checksum: 9f630b7ccebbff4983318bc03caf2a71
[HTC Sensation XL] nader1450:
Thanks a lot for S-OFF

This hboot is full S-OFF?!

after flash this hboot, and recovery, can flash any ruu?!

Best Regards

---------- Post added at 07:41 PM ---------- Previous post was at 06:49 PM ----------

flash hboot_7230ddr2_Runnymede_6.28.6667.nb0 and flash your recovery.img

mount storage in recovery is ok, but mount disk drive in android, is wrong.

only mount system partition, and didn't mount sd memory !!!

any idea ?!
[HTC Sensation XL] flawlessx92:
I really2 need the sigtool..i cant use adb command since i cannot boot my phone..please can anyone upload it to a new link
[HTC Sensation XL] nashshafrulrezza:
it your vold.fstab value. just change it, you'll be fine.
[HTC Sensation XL] nader1450:
Thanks, nashshafrulrezza

plz help about cid ...

can not change cid !!!

Best Regards
[HTC Sensation XL] nashshafrulrezza:
why you want to change it? the hboot from unlimited.io already bypass cid check.
[HTC Sensation XL] nader1450:
hi nashshafrulrezza

can not flash any different ruu on hboot_7230ddr2_Runnymede_6.28.6667.nb0

plz tell me best method step by step

Best Regards
[HTC Sensation XL] drcrazy91:
hello,

I'm stuck here.

I'm already unlocked bootloader and rooted with cwm.

stock factory hboot 1.28.0006. ICS 4.0.3 official update.

I'm trying to S-off for the first time.

In accordance with http://unlimited.io/runnymede/,

I typed adb push hboot_7230ddr2_Runnymede_6.28.6666.nb0 /data/local/tmp

but got error " device not found".

Am I missing something? please help me.

I put these protected hboot (hboot_7230ddr2_Runnymede_6.28.6666.nb0) in C:/android

and i typed in cmd ..

cd c:\android

C:\android > adb reboot bootloader ( it goes to Fastboot USB mode and already flashed recovery.img)

then

adb push hboot_7230ddr2_Runnymede_6.28.6666.nb0 /data/local/tmp

but I got error...

please help me out here.
[HTC Sensation XL] Dunnymede:
It seems that you have to complete the process having your rom fully loaded and not in bootloader. It sorts out. :)
[HTC Sensation XL] rdewa:
i tried it on my XL but it still S-ON ...

HBOOT 1.28.0004 :rolleyes:
[HTC Sensation XL] fshami:
http://xdaforums.com/showpost.php?p=26360169&postcount=60
[HTC Sensation XL] abusseemkh:
Hey dude in what language did you write you code... I keep getting errors when i try to compile it.. i really need need this tool to rip the signature.. i tried unlimited.io modified hboots and it bypassed signature for the first time but stopped while updating radio image.. thnx in advance...:)
[HTC Sensation XL] fshami:
hm... was just playing around with the device..

flashed stock hboot (unlocked)

flashed stock rom (un-rooted) via recovery

booted into recovery & did adb shell & it gave me # prompt... any idea why?? as the rom is not rooted

next i tried to flash fardjadb's hboot via fastboot & it failed..

then i came back to recovery & did this:

adb push fardjadb_runnymede.nb0 /tmp

adb shell dd if=/tmp/fardjadb_runnymede.nb0 of=/dev/block/mmcblk0p18

adb reboot bootloader

and guess what.. fardjabd's hboot was flashed.. did the same procedure from scratch for unlimited.io hboot's & worked the same way..

actually the question is that installation of fardjabd's hboot required stock recovery & it did some rooting with tacoroot..

unlimited.io guys say that if you dont have fardjabd's hboot installed then u need to temp root & then flash their hboot..

BUT for me with an un-rooted ROM, stock unlocked HBOOT & a custom recovery.. the procedure worked..

anyone who can explain this..? :confused:.. as it will be helpful for the script i m making
[HTC Sensation XL] ReyTech:
@fshami

tks for the info! both the files mentioned on the link you provided dont work! pls provide me the files with a vlid link!

WBR

ReyTech.
[HTC Sensation XL] AndroHero:
Recovery has R/W permission to root partitions by default, thats the exploit rootupdate.zip's use to root devices, and as fardjab discovered, the hboot partition is not protected by the nand security so, in theory it must be possible to push the hboot from recovery on a non rooted device.
[HTC Sensation XL] oMaRcO:
hi all,

i'm new in this section, and i will like to root or (s-off) my stock htc sensation xl GB.i dont know where to begin , so pleas can someone guid me where to begin...

i attach it my phone info bootloader
[HTC Sensation XL] Lexmazter:
Hi, you can use the XL Multi Tool Flasher, link provided in my signature :)

Also, rooting is not the same thing as s-off, hope you don't confuse things, and you can root without being S-OFF but you need to be rooted in order to S-OFF.

Hope this helps :)
[HTC Sensation XL] jamaljmys:
thank you all for the efforts.

i got my SXL two days ago from other country, its different region and now i need only to flash my region stock ICS RUU rom on my device. iam not looking for root or S-off or unlock the boot-loader or custom recovery, only i need to change the ROM came on device to my region ROM.

the original ROM is GB .

may someone help me to get my goal direct please

thanks for all
[HTC Sensation XL] tasz:
New link

https://www.box.com/s/77d2187400b5cece5daa
[HTC Sensation XL] jamaljmys:
my device is bootloader unlocked, rooted, S-Off and still gett 155 error whin trying to flash RUU rom for different region.

any idea please?
[HTC Sensation XL] abusseemkh:
thr is no way u can flash a Rom from another region without flashing a custom boot and recovery

---------- Post added at 09:01 PM ---------- Previous post was at 08:58 PM ----------

thr is no way u can flash a Rom from another region without flashing a custom boot and recovery
[HTC Sensation XL] jamaljmys:
yes i have custom recovery but boot?
[HTC Sensation XL] abusseemkh:
you are going thru the same thing i went thru .. i got my SXL which was from the Korean region but i wanted a full arabic support i went thru hell but i managed to change the region in the end.. First u need ADB tools which is a kit tht's gonna help u flash ur roms, recoveries.. etc among other things and u need to download the rom of the specific region u want ... tell me wht u've got so tht i can tell u wht to do.
[HTC Sensation XL] fshami:
If u only need to flash the rom then u can check stock flashable zips here

http://xdaforums.com/showthread.php?p=29203205
[HTC Sensation XL] jamaljmys:
yes boss i have this case exactly.

iam good in adb and i have all tools needed, jut go ahead and tell me the procedures.

thanks in advance
[HTC Sensation XL] abusseemkh:
great just gimme some time to give u all u need in a single post
[HTC Sensation XL] abusseemkh:
Here is what you need

First sorry about being late coz i needed some time to recover all necessary info to get what u need.. if u r running GB(Gingerbread) then go ahead and download the Runnymede S-OFF protected HBOOT (GB) from this link http://unlimited.io/runnymede.htm .. if u r running ICS thsn download Runnymede S-OFF protected HBOOT (ICS) from the same link ... then u can flash any RUU u want whatsoever .. All needed steps are written in details in Unlimited.IO website ..

P.S. If u r running ICS i'd highly suggest u download Runnymede ICS Recovery from the same link ... Please tell me about any promblems u might encounter I'll be glad to help .. this method is 100 % guaranteed coz im already running a stock RUU which is different from the shipped RUU I had first. :D
[HTC Sensation XL] Lexmazter:
You can also use the tool provided in my signature (XL Multi Tool) to flash S-OFF and recoveries needed. Just saying :)
[HTC Sensation XL] sohail667:
i trying to s-off via cmd

fastboot flash hboot hboot_7230ddr2_Runnymede_6.28.6667.nb0

got error remote signature varify fail

plz help

i am using insanly cool v3 ics

phone is rooted

hboot 1.28.006
[HTC Sensation XL] abusseemkh:
I think u can't flash hboot like this go to unlimited.io website and follow the instructions there
[HTC Sensation XL] sohail667:
Runnymede S-OFF HBOOTS currently support the following Android devices:

HTC Sensation XL (Runnymede)

Instructions:

To load the first of these HBOOTS on your phone if you are on a HTC factory HBOOT you must be rooted, either by using a temporary root such as zergRush, tacoroot or sparkyroot or by performing the bootloader unlock and flashing superuser. Installation is then performed using the following procedure:

adb push hboot_7230ddr2_Runnymede_6.25.4444.nb0 /data/local/tmp

adb shell

$ su

# dd if=/data/local/tmp/hboot_7230ddr2_Runnymede_6.25.4444.nb0 of=/dev/block/mmcblk0p18

# exit

$ exit

adb reboot-bootloader

If any of the HBOOTS from this page or the HBOOT from jardjadb's original thread have been previously flashed then it is not necessary to follow the above procedure, instead the new HBOOT can be flashed directly using fastboot using the follow command:

fastboot flash hboot hboot_name.nb0

for example:

fastboot flash hboot hboot_7230ddr2_Runnymede_6.25.4444.nb0

i cant understand the procedure plz explain from where i give these commands ??????

on phone or on pc cmd

plz solve my prob.??????/
[HTC Sensation XL] abusseemkh:
on pc cmd buddy but make sure u hv adb tools installed firsr

---------- Post added at 05:25 PM ---------- Previous post was at 05:17 PM ----------

if youbr running GB(Gingerbread) then move GB protected hboot to adb folder and follow the instructions .. if u r running ICS then move ICS protected hboot and flash it as instructed... last thing is pay attention to the name of the hboot u r flashing and change accordingly
[HTC Sensation XL] zeyadhan:
need help

when flash the null-signed rom zip file code fastboot flash zip rom-new.zip when finshed is say failed remote not allowed help me to fix this problem

my device unlocked runnymede pvt ship s-on hboot1.25.0004 radio 3831.15.00.20-m :(:(:( :(
[HTC Sensation XL] abusseemkh:
check previous posts on this thread.. null-signed rom is no use.. use unlimited.io method.
[HTC Sensation XL] rlamba:
Recovery not working

I have s-off phone with hboot 6.28.6667 unprotected ICS (from unlimited.io). Iam using ICS recovery from the same unlimited.io

My problem is when ever i try to install from a zip file on sdcard it fails. I have also tried CWM recovery (5.8.3.1) and this also fails.

Any help is greatly appreciated.
[HTC Sensation XL] rlamba:
You are genius

I have done s-off using unprotected hboot for ICS from unlimited.io site. My recovery is not working, can't install from zip file on sdcard.

I have user recovery from unlimted.io site and also CMW Recovery (Touch one). I got some pointers from your guide. Thank you very much.
[HTC Sensation XL] abusseemkh:
if you want the rom to be working flasha a "PROTECTED" hboot from unlimited.io then download a RUU.exe over the net no matter what region u choose; search for XSL RUUs .. they are hosted on formatfactory.com.. Or try the zip thing it may work just make sure if u r running GB (Gingerbread) flash GB PROTECTED Hboot . if u r running ICS flash ICS PROTECTED Hboot.. hope this helps
[HTC Sensation XL] rlamba:
I have tried with protected and also unprotected hboot for ICS from unlimited.io sit. I also used ICS recovery from the same site and also tried CWM touch recovery. I still can't install zip files from sdcard. It gives error (Status 0). This S-OFF business is a waling nightmare.
[HTC Sensation XL] abusseemkh:
yeah
[HTC Sensation XL] Lexmazter:
I am S-OFF since day 1 i bought this phone, had no problems with it, and also, because many threads out there are old and things can be difficult to get by, i made a tool that i can see nobody tries to use it, the tool can be found in my signature.

It S-OFF's your phone, installs the right recovery, you can even upgrade or downgrade the baseband/radio if you are s-off, so i really don't know from where everybody get this huge amount of problems with S-OFF, as it was meant to be the best way to go in order to have a seamless experience with custom ROM development/testing.

Don't know if this helps or not, but this is what i think right now :)
[HTC Sensation XL] rlamba:
I have tried your multi tool. Not good enough for my problem. S-OFF is real pain in backside with unlimited.io hboot.Flash their hboot and find a recovery which works with their protected/unprotected ics hboot.
[HTC Sensation XL] Lexmazter:
Well, if you really want to have everything fully working, the best way to go is to flash an Upnprotected S-OFF, flash a RUU and unlock/S-OFF again, in order to have everything working, install a ICS RUU and so on. This should work!
[HTC Sensation XL] rlamba:
Thank you for your help. I had tried this before and it did not work,

Used Unprotected S-OFF for ICS from unlimited.io

Flashed ICS Hboot 1.28 (this was extracted from rom.zip from ICS RUU

This just made S-Off back to S-On

I will try the steps you have suggested and let you know.
[HTC Sensation XL] drupad2drupad:
When I try the adb,

It gives me error saying can't find su.

I am rooted, unlocked bootloader with CMW recovery 5.5.0.4!

---------- Post added at 11:22 PM ---------- Previous post was at 10:51 PM ----------

Ok so I can reach up to SU now but when I do the # dd ...... command, it can't find it. No directory error?!

What am I doing wrong here? Anyone?
[HTC Sensation XL] abusseemkh:
try flashing fardjadb hboot so that u can excute that command u r talking about
[HTC Sensation XL] Lexmazter:
To avoid any problems of S-OFF-ing, use the tool proided by me, this is the last time i say this!

Also, you need to be fully booted not from recovery, not from fastoot, booted and rooted, hit the tool and press S-OFF and wait for the magic!

[Why does people kill their heads when i killed mine to make a tool to get things done?]
[HTC Sensation XL] rlamba:
Your links do not work.
[HTC Sensation XL] Lexmazter:
This thread is old, do not try to install Fardjab's hboot as it's old, not fully S-OFF and the fully working is from unlimited.io.
[HTC Sensation XL] nsnobel2:
Sir you link file is not working pls share another link. thanks
[HTC Sensation XL] claudenegm:
http://unlimited.io/runnymede.htm
[HTC Sensation XL] nsnobel2:
Thanks for sharing,

Which one I have to download , my phone details are as follow

Android version

4.0.3

Baseband version

20.5101.30.0822U_3822.10.10.12_M

Build number

3 Musketeers Total sensless

Hboot deatils is as follow

UNLOCKED

RUNNYMEDE PVT SHIP S-ON

HBOOT 1.25-0004

RADIO-3822.10.10.12_M

eMMC-boot

My problem is that my phone always asked for pin code when its restart although there is no pin code on sim. I try different sims but same.
[HTC Sensation XL] abusseemkh:
all you have to do is flash protected JB(JellyBean) hboot and you r gud to go
[HTC Sensation XL] nsnobel2:
There is no Protected JB hboot. there are hboot for GB and ICS. Sorry me newbie and afraid to brick this phone so I am taking so much care.

thanks

---------- Post added at 02:39 PM ---------- Previous post was at 02:33 PM ----------

Sir, you mean GB protected hboot?
[HTC Sensation XL] abusseemkh:
http://unlimited.io/runnymede.htm go here.. look under "downloads" heading in the upper right corner .. u'll find four hboots , choose protected ICS NOT JB.. sorry my mistake

---------- Post added at 04:45 PM ---------- Previous post was at 04:42 PM ----------

By the way thr isnt anything called "bricking a phone" unless you hit it with a hammer.
[HTC Sensation XL] nsnobel2:
sir I am thankful for you support.

I flash 1st step succesfully. I write hboot in normal phone ON with adb command "adb push hboot_7230ddr2_Runnymede_6.25.4444.nb0 /data/local/tmp"

but when i do 2nd step adb shell in fastboot mode result in "error: device not found"

:( any idea?
[HTC Sensation XL] abusseemkh:
cd u plz tell wht r the tools u r using e.g. adb tools etc

---------- Post added at 05:38 PM ---------- Previous post was at 05:35 PM ----------

i think u shd flash by accessing fastboot not with the phone in normal homescreen on.. if u dont know how its by pressing power + volume down simultaneously.
[HTC Sensation XL] nsnobel2:
I am using SDK tools. Path is

C:\Android\Android-sdk\Platform-tools\adb
[HTC Sensation XL] abusseemkh:
ok .. download hboot flash it but from the recovery screen not normal homescreen and tell me wht happens

---------- Post added at 08:23 PM ---------- Previous post was at 08:20 PM ----------

P.S. make sure u flash the unlimited.io recovery first from the same webpage.. gud luck :)
[HTC Sensation XL] nsnobel2:
its now working with adb shell command but when I enter $ SU it says /sbin/sh: $: not found

When I enter $SU ($ and SU without space)it says

#SU

~ #

I am sorry I am new to adb commands so that facing such problem. Please can you help me to come on my pc with Teamviewer and solve problem

thanks