[Desire HD General] jmb2024:
That worked. I was able to verify in HBOOT that it was unlocked. I then ran option h and followed the instructions there to run option 1 afterward. The phone now boots to the white HTC splash, but it fades and there's nothing after that. I checked HBOOT again, and it shows relocked. fastboot shows that version_baseband and version_main have changed. Any suggestions from here? I've thought about trying the 2.47.502.7 RUU, but figured I'd ask for advice before poking around on my own.

HBOOT:

*** RELOCKED ***
ACE PVT SHIP S-ON RL
MICROP-0438
RADIO-26.03.02.26_M
eMMC-boot
Feb 20 2012, 16:03:18

fastboot getvar all:

version: 0.5
version-bootloader: 2.00.0030
version-baseband: 26.03.02.26_M
version-cpld: None
version-microp: 0438
version-main: 1.32.405.6
product: ace
platform: HBOOT-7230
modelid: PD9812000
cidnum: CWS__001
battery-status: good
battery-voltage: 3967mV
partition-layout: Generic
security: on
build-mode: SHIP
boot-mode: FASTBOOT
commitno-bootloader: 62d2f26e
hbootpreupdate: 11
gencheckpt: 0
region-id: 0

last AAHK2 run:

Ace Advanced Hack Kit 2

___________________________
MAIN MENU | |
1 - Hack Ace <----------------------------+ * S-OFF |
| * SIM Unlock |
h - Prepare HTCdev unlocked device | * SuperCID |
| * Root |
| * Touch Recovery |
| |
**********************************************************************
t - Toggle Flash Method - current method is fastbootRUU
**********************************************************************

q - Quit

[Select and press Enter]1
Android version is exploitable.
rm failed for /sdcard/PD98IMG.zip, No such file or directory
154 KB/s (19240 bytes in 0.122s)
1900 KB/s (4564992 bytes in 2.346s)
1641 KB/s (4458496 bytes in 2.652s)
2214 KB/s (557962 bytes in 0.246s)
531 KB/s (9796 bytes in 0.018s)
2431 KB/s (572752 bytes in 0.230s)
1958 KB/s (134401 bytes in 0.067s)
909 KB/s (13968 bytes in 0.015s)
ro.build.version.release=2.3.3
Setting up for Gingerbread restore...
1921 KB/s (2801664 bytes in 1.424s)
1644 KB/s (2830336 bytes in 1.681s)
1778 KB/s (285981 bytes in 0.157s)
1801 KB/s (285981 bytes in 0.155s)
1 file(s) copied.
Linux version 2.6.35.10-gd2564fb (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )
#1 PREEMPT Thu Jun 9 14:20:29 CST 2011
Kernel version is Gingerbread... Using fre3vo to temproot...
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 802160640
smem_len: 3145728
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 0
bits_per_pixel: 32
activate: 16
height: 106
width: 62
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Buffer offset: 00000000
Buffer size: 8192
Scanning region faa90000...
Scanning region fab80000...
Scanning region fac70000...
Scanning region fad60000...
Scanning region fae50000...
Scanning region faf40000...
Scanning region fb030000...
Scanning region fb120000...
Scanning region fb210000...
Scanning region fb300000...
Potential exploit area found at address fb312c00:1400.
Exploiting device...
* server not running *
/dev/block/vold/179:65 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,
uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharse
t=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
Creating goldcard...
HTC android goldcard tool Copyright (C) 2011, Wayne D. Hoxsie Jr.
Original code by B. Kerler. Special thanks to ATTN1 and the XDA team.
Donations can be made to the Electronic Frontier Foundation:
// removed
or to B. Kerler:
// removed
0+1 records in
0+1 records out
384 bytes transferred in 0.003 secs (128000 bytes/sec)
Setting mainver lower to allow downgrade...
--set_version set. VERSION will be changed to: 1.31.405.6
Misc partition is "/dev/block/mmcblk0p17"
Patching and backing up misc partition...
Starting flash process...
erasing 'cache'...
OKAY [ 1.032s]
finished. total time: 1.033s
Sending update...
This takes time. Please be patient!
sending 'zip' (18223 KB)...
OKAY [ 3.088s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
(bootloader) signature checking...
(bootloader) zip header checking...
(bootloader) zip info parsing...
(bootloader) checking model ID...
(bootloader) checking custom ID...
(bootloader) checking main version...
(bootloader) start image[boot] unzipping & flushing...
(bootloader) [RUU]UZ,boot,0
(bootloader) [RUU]UZ,boot,31
(bootloader) [RUU]UZ,boot,68
(bootloader) [RUU]UZ,boot,99
(bootloader) [RUU]UZ,boot,100
(bootloader) [RUU]WP,boot,0
(bootloader) [RUU]WP,boot,100
(bootloader) start image[recovery] unzipping & flushing...
(bootloader) [RUU]UZ,recovery,0
(bootloader) [RUU]UZ,recovery,20
(bootloader) [RUU]UZ,recovery,44
(bootloader) [RUU]UZ,recovery,66
(bootloader) [RUU]UZ,recovery,89
(bootloader) [RUU]UZ,recovery,100
(bootloader) [RUU]WP,recovery,0
(bootloader) [RUU]WP,recovery,100
(bootloader) start image[radio] unzipping & flushing...
(bootloader) [RUU]UZ,radio,0
(bootloader) [RUU]UZ,radio,8
(bootloader) [RUU]UZ,radio,13
(bootloader) [RUU]UZ,radio,20
(bootloader) [RUU]UZ,radio,25
(bootloader) [RUU]UZ,radio,33
(bootloader) [RUU]UZ,radio,41
(bootloader) [RUU]UZ,radio,49
(bootloader) [RUU]UZ,radio,57
(bootloader) [RUU]UZ,radio,62
(bootloader) [RUU]UZ,radio,70
(bootloader) [RUU]UZ,radio,79
(bootloader) [RUU]UZ,radio,86
(bootloader) [RUU]UZ,radio,94
(bootloader) [RUU]UZ,radio,99
(bootloader) [RUU]UZ,radio,100
(bootloader) [RUU]WP,radio,0
(bootloader) [RUU]WP,radio,6
(bootloader) [RUU]WP,radio,14
(bootloader) [RUU]WP,radio,19
(bootloader) [RUU]WP,radio,27
(bootloader) [RUU]WP,radio,36
(bootloader) [RUU]WP,radio,44
(bootloader) [RUU]WP,radio,51
(bootloader) [RUU]WP,radio,59
(bootloader) [RUU]WP,radio,68
(bootloader) [RUU]WP,radio,76
(bootloader) [RUU]WP,radio,85
(bootloader) [RUU]WP,radio,95
(bootloader) [RUU]WP,radio,100
OKAY [ 85.094s]
finished. total time: 88.186s
rebooting...

finished. total time: 0.181s
Radio downgrade complete. Starting unlock process...
Linux version 2.6.32.21-gf3f553d (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )
#1 PREEMPT Thu Oct 28 13:24:11 CST 2010
Final rooting, setting super-cid and installing recovery now...
This takes time. Please be patient!
--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-gf3f553d
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Searching for mmc_blk_issue_rq symbol...
- Address: c02a9e00, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02a9000
Kernel memory mapped to 0x40000000
Searching for brq filter...
- Address: 0xc02a9e00 + 0x34c
- 0x2a000012 -> 0xea000012
Patching and backing up partition 7...
Error opening copy file.
Error opening copy file.
^^^^^^^^^^^^^^^^^^^^^^^^
I- NORMAL ERROR HERE -I
error: device not found
* server not running *
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
Usage: mount [-r] [-w] [-o options] [-t type] device directory
Usage: mount [-r] [-w] [-o options] [-t type] device directory
--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-gf3f553d
New .modinfo section size: 204
Attempting to power cycle eMMC... Failed.
Module failed to load: Operation not permitted
Can't open device: "/dev/block/mmcblk0"
Error in reading mbr!
failed with error: -1
Can't open device: "/dev/block/mmcblk0"
Error in reading mbr!
failed with error: -1
cp: permission denied
rm failed for /system/bin/su, Read-only file system
rm failed for /system/xbin/su, Read-only file system
rm failed for /system/bin/.ext/.su, No such file or directory
rm failed for /system/app/Superuser.apk, Read-only file system
rm failed for /system/app/Superuser.odex, Read-only file system
rm failed for /system/app/SuperUser.apk, Read-only file system
rm failed for /system/app/SuperUser.odex, Read-only file system
rm failed for /system/app/superuser.apk, Read-only file system
rm failed for /system/app/superuser.odex, Read-only file system
rm failed for /system/app/Supersu.apk, Read-only file system
rm failed for /system/app/Supersu.odex, Read-only file system
rm failed for /system/app/SuperSU.apk, Read-only file system
rm failed for /system/app/SuperSU.odex, Read-only file system
rm failed for /system/app/supersu.apk, Read-only file system
rm failed for /system/app/supersu.odex, Read-only file system
rm failed for /data/dalvik-cache/*com.noshufou.android.su*, No such file or dire
ctory
rm failed for /data/dalvik-cache/*Superuser.apk*, No such file or directory
rm failed for /data/dalvik-cache/*SuperUser.apk*, No such file or directory
rm failed for /data/dalvik-cache/*superuser.apk*, No such file or directory
rm failed for /data/dalvik-cache/*eu.chainfire.supersu*, No such file or directo
ry
rm failed for /data/dalvik-cache/*Supersu.apk*, No such file or directory
rm failed for /data/dalvik-cache/*SuperSU.apk*, No such file or directory
rm failed for /data/dalvik-cache/*supersu.apk*, No such file or directory
push: tools/afr/system/app/Superuser.apk -> /system/app/Superuser.apk
failed to copy 'tools/afr/system/app/Superuser.apk' to '/system/app/Superuser.ap
k': Read-only file system
Unable to chmod /system/bin/.ext: No such file or directory
Unable to chmod /system/bin/.ext/.su: No such file or directory
Unable to chmod /system/xbin/su: No such file or directory
Unable to chmod /system/app/Superuser.apk: No such file or directory
wpa_supplicant
surfaceflinger

**********************************************
* Installed ROOT and custom touch recovery! *
* Security flag and and Simlock are removed! *
**********************************************

Installing updated radio and custom ENG HBOOT...
* server not running *
Starting flash process...
erasing 'cache'...
OKAY [ 1.267s]
finished. total time: 1.269s
Sending update...
This takes time. Please be patient!
sending 'zip' (11429 KB)...
OKAY [ 1.919s]
writing 'zip'...
(bootloader) signature checking...
FAILED (remote: 12 signature verify fail)
finished. total time: 3.466s
rebooting...

finished. total time: 0.183s

************ Process complete **************
Press any key to continue . . .