[HTC One S] sdspieg:
I did NOT have a functioning ROM (although I could of course get into adb through bootloader/fastboot). And so I had to repair that first.

Here’s what I ended up doing - in case other people have similar issues.

I booted in bootloader

Copied a signed recovery file for Ville (a signed recovery file for Ville (https://www.dropbox.com/s/0wmp6tx7x7vjnzs/ville_recovery_signed.img) to my adb folder where I also have fastboot

Typed: “fastboot flash recovery ville_recovery_signed.img”

Then “fastboot oem lock”

That relocked my phone again. I was then able to repair my phone with the right RUU (in my case http://shipped-roms.com/download.ph...02.31_10.09a.50.04L_release_275655_signed.exe

I executed that file – took about 10 minutes

That took me back to the bootloader. When I rebooted my phone I, for the first time in a long time, had a functioning ROM again.

I could then unlock the bootloader again (the normal HTC procedure – although for some reason I HAD to reboot manually (ie NOT through adb) by holding the volume-down and power button for a while, then let go, and then holding them together again), flash a smarter recovery still through fastboot (twrp), reroot my phone (with the HTC One S One-in-All) And then I could now follow the instructions in post #1 of this thread without any further difficulty.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

D:\Android>fastboot oem get_identifier_token
...
(bootloader)
(bootloader) < Please cut following message >
(bootloader) <<<< Identifier Token Start >>>>
(bootloader) 8199DB5468B359CF3D011359D14FA27B
(bootloader) 4D164A599A5FF450384BDE8F39FA0D90
(bootloader) A4CB3B3B671D373943280D37A83F2B8F
(bootloader) 14796FE43208D4EA116FFEF3EA1353E9
(bootloader) E93A2D013567011EA5B0DADC59895428
(bootloader) 55A1BDDAE52169B3AB305113DBE4562E
(bootloader) C015B00C8D2CAD45DA6EDC4CF914EB52
(bootloader) F126A27BA78BF2FC6E5E53F2AFCDA36D
(bootloader) 7C173128877D59BD5AB06E3E6CE4E7B3
(bootloader) 2A9593FF1F7990C58D0A656CE547F1EE
(bootloader) F30690D952A932D27FFAF28DB8F14890
(bootloader) 945809EDB5E6948601DCC796C859EA72
(bootloader) 2F3A074472EE56DEC06FE42EDCAB2624
(bootloader) 433CB7544C39D631A0537939D6F383DE
(bootloader) D6D85E07994F330A269EEEB6E42AE965
(bootloader) 22E3A05005A139A63909D932F9BCBC5A
(bootloader) <<<<< Identifier Token End >>>>>
OKAY [ 0.068s]
finished. total time: 0.069s

D:\Android>fastboot flash unlocktoken Unlock_code.bin
sending 'unlocktoken' (0 KB)...
OKAY [ 0.145s]
writing 'unlocktoken'...
(bootloader) unlock token check successfully
OKAY [ 0.008s]
finished. total time: 0.155s

D:\Android>fastboot flash recovery openrecovery-twrp-2.4.4.0-ville.img
sending 'recovery' (8292 KB)...
OKAY [ 0.989s]
writing 'recovery'...
OKAY [ 1.965s]
finished. total time: 2.957s

D:\Android>fastboot oem rebootRUU
...
(bootloader) Start Verify: 3
OKAY [ 0.064s]
finished. total time: 0.065s

D:\Android>fastboot flash zip PJ4010000-OneS.zip
sending 'zip' (35551 KB)...
OKAY [ 2.466s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
FAILED (remote: 92 supercid! please flush image again immediately)
finished. total time: 2.568s

D:\Android>fastboot oem boot
< waiting for device >
...
(bootloader) Boot/Recovery signature checking...
(bootloader) Boot/Recovery signature checking...
(bootloader) setup_tag addr=0x80400100 cmdline add=0xC02F9E3C
(bootloader) TAG:Ramdisk OK
(bootloader) TAG:skuid 0x2ED00
(bootloader) TAG:hero panel = 0x2940043
(bootloader) TAG:engineerid = 0x0
(bootloader) TAG: PS ID = 0x0
(bootloader) TAG: Gyro ID = 0x0
(bootloader) Device CID is super CID
(bootloader) CID is super CID
(bootloader) Backup CID is empty
(bootloader) setting->cid::11111111
(bootloader) serial number: ***removed***
(bootloader) commandline from head: console=ttyHSL0,115200,n8
(bootloader) command line length =714
(bootloader) active commandline: poweron_status=1 reset_status=0 board_vi
(bootloader) lle.disable_uart3=0 diag.enabled=0 board_ville.debug_uart=0
(bootloader) userdata_sel=0 androidboot.emmc=true androidboot.pagesize=20
(bootloader) 48 skuid=0 ddt=20 ats=0 androidboot.lb=1 td.td=1 td.sf=1 td
(bootloader) .ofs=328 td.prd=1 td.dly=0 td.tmo=300 imc_online_log=0 andr
(bootloader) oidboot.efuse_info=FFSL androidboot.baseband=1.06es.50.02.31
(bootloader) androidboot.cid=11111111 androidboot.devicerev=3 androidboo
(bootloader) t.batt_poweron=good_battery androidboot.carrier=ALL androidb
(bootloader) oot.mid=PJ4010000 an
(bootloader) aARM_Partion[0].name=misc
(bootloader) aARM_Partion[1].name=recovery
(bootloader) aARM_Partion[2].name=boot
(bootloader) aARM_Partion[3].name=system
(bootloader) aARM_Partion[4].name=local
(bootloader) aARM_Partion[5].name=cache
(bootloader) aARM_Partion[6].name=userdata
(bootloader) aARM_Partion[7].name=devlog
(bootloader) aARM_Partion[8].name=pdata
(bootloader) aARM_Partion[9].name=fat
(bootloader) aARM_Partion[A].name=extra
(bootloader) aARM_Partion[B].name=radio
(bootloader) aARM_Partion[C].name=adsp
(bootloader) aARM_Partion[D].name=dsps
(bootloader) aARM_Partion[E].name=wcnss
(bootloader) aARM_Partion[F].name=radio_config
(bootloader) aARM_Partion[10].name=modem_st1
(bootloader) aARM_Partion[11].name=modem_st2
(bootloader) partition number=18
(bootloader) Valid partition num=18
(bootloader) TZ_HTC_SVC_SET_DDR_MPU ret = 0
(bootloader) smem 90005000 (phy 90005000): TZ_HTC_SVC_UPDATE_SMEM ret = 0
(bootloader) TZ_HTC_SVC_LOG_OPERATOR ret = 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) TZ_HTC_SVC_DISABLE ret = 474079232 (0x1C41E000)
(bootloader) jump_to_kernel: machine_id(3751), tags_addr(0x80400100), ker
(bootloader) nel_addr(0x80408000)
(bootloader) -------------------hboot boot time:8633 msec
FAILED (status read failed (Too many links))
finished. total time: 6.576s

D:\Android>
D:\Android>adb push soffbin3 /data/local/tmp/
140 KB/s (4751 bytes in 0.033s)
D:\Android>adb shell chmod 744 /data/local/tmp/soffbin3
D:\Android>adb shell su -c "/data/local/tmp/soffbin3"
D:\Android>adb reboot bootloader
D:\Android>

So now I finally have a functioning phone again that is unlocked, rooted and S-OFF'ed!