[Desire HD General] computervip:
Ace Advanced Hack Kit 2

___________________________

MAIN MENU | |

1 - Hack Ace <----------------------------+ * S-OFF |

| * SIM Unlock |

h - Prepare HTCdev unlocked device | * SuperCID |

| * Root |

| * Touch Recovery |

| |

**********************************************************************

t - Toggle Flash Method - current method is fastbootRUU

**********************************************************************

q - Quit

[Select and press Enter]1

Android version is exploitable.

rm failed for /sdcard/PD98IMG.zip, No such file or directory

goldcard

goldcard.img

1707 KB/s (19240 bytes in 0.011s)

2617 KB/s (4564992 bytes in 1.703s)

2565 KB/s (4458496 bytes in 1.697s)

2697 KB/s (557962 bytes in 0.202s)

1594 KB/s (9796 bytes in 0.006s)

2650 KB/s (572752 bytes in 0.211s)

2678 KB/s (134401 bytes in 0.049s)

1705 KB/s (13968 bytes in 0.008s)

ro.build.version.release=2.3.3

Setting up for Gingerbread restore...

2571 KB/s (2801664 bytes in 1.064s)

2720 KB/s (2830336 bytes in 1.016s)

2685 KB/s (285981 bytes in 0.104s)

2659 KB/s (285981 bytes in 0.105s)

1 file(s) copied.

Linux version 2.6.35.10-gd2564fb (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )

#1 PREEMPT Thu Jun 9 14:20:29 CST 2011

Kernel version is Gingerbread... Using fre3vo to temproot...

fre3vo by #teamwin

Please wait...

Attempting to modify ro.secure property...

fb_fix_screeninfo:

id: msmfb

smem_start: 802160640

smem_len: 3145728

type: 0

type_aux: 0

visual: 2

xpanstep: 0

ypanstep: 1

line_length: 1920

mmio_start: 0

accel: 0

fb_var_screeninfo:

xres: 480

yres: 800

xres_virtual: 480

yres_virtual: 1600

xoffset: 0

yoffset: 800

bits_per_pixel: 32

activate: 16

height: 106

width: 62

rotate: 0

grayscale: 0

nonstd: 0

accel_flags: 0

pixclock: 0

left_margin: 0

right_margin: 0

upper_margin: 0

lower_margin: 0

hsync_len: 0

vsync_len: 0

sync: 0

vmode: 0

Buffer offset: 00000000

Buffer size: 8192

Scanning region faa90000...

Scanning region fab80000...

Scanning region fac70000...

Scanning region fad60000...

Scanning region fae50000...

Scanning region faf40000...

Scanning region fb030000...

Scanning region fb120000...

Scanning region fb210000...

Scanning region fb300000...

Scanning region fb3f0000...

Scanning region fb4e0000...

Scanning region fb5d0000...

Scanning region fb6c0000...

Scanning region fb7b0000...

Scanning region fb8a0000...

Scanning region fb990000...

Scanning region fba80000...

Scanning region fbb70000...

Potential exploit area found at address fbb9d000:0.

Exploiting device...

/dev/block/vold/179:65 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,

uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharse

t=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0

tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0

Creating goldcard...

HTC android goldcard tool Copyright (C) 2011, Wayne D. Hoxsie Jr.

Original code by B. Kerler. Special thanks to ATTN1 and the XDA team.

Donations can be made to the Electronic Frontier Foundation:

http://www.eff.org/

or to B. Kerler:

http://psas.revskills.de/

0+1 records in

0+1 records out

384 bytes transferred in 0.001 secs (384000 bytes/sec)

Setting mainver lower to allow downgrade...

--set_version set. VERSION will be changed to: 1.31.405.6

Misc partition is "/dev/block/mmcblk0p17"

Patching and backing up misc partition...

Starting flash process...

erasing 'cache'...

OKAY [ 0.115s]

finished. total time: 0.117s

Sending update...

This takes time. Please be patient!

sending 'zip' (18223 KB)...

OKAY [ 2.993s]

writing 'zip'...

(bootloader) adopting the signature contained in this image...

(bootloader) signature checking...

(bootloader) zip header checking...

(bootloader) zip info parsing...

(bootloader) checking model ID...

(bootloader) checking custom ID...

(bootloader) checking main version...

(bootloader) start image[boot] unzipping & flushing...

(bootloader) [RUU]UZ,boot,0

(bootloader) [RUU]UZ,boot,31

(bootloader) [RUU]UZ,boot,68

(bootloader) [RUU]UZ,boot,99

(bootloader) [RUU]UZ,boot,100

(bootloader) [RUU]WP,boot,0

(bootloader) [RUU]WP,boot,100

(bootloader) start image[recovery] unzipping & flushing...

(bootloader) [RUU]UZ,recovery,0

(bootloader) [RUU]UZ,recovery,20

(bootloader) [RUU]UZ,recovery,44

(bootloader) [RUU]UZ,recovery,66

(bootloader) [RUU]UZ,recovery,89

(bootloader) [RUU]UZ,recovery,100

(bootloader) [RUU]WP,recovery,0

(bootloader) [RUU]WP,recovery,100

(bootloader) start image[radio] unzipping & flushing...

(bootloader) [RUU]UZ,radio,0

(bootloader) [RUU]UZ,radio,8

(bootloader) [RUU]UZ,radio,13

(bootloader) [RUU]UZ,radio,20

(bootloader) [RUU]UZ,radio,25

(bootloader) [RUU]UZ,radio,33

(bootloader) [RUU]UZ,radio,41

(bootloader) [RUU]UZ,radio,49

(bootloader) [RUU]UZ,radio,57

(bootloader) [RUU]UZ,radio,62

(bootloader) [RUU]UZ,radio,70

(bootloader) [RUU]UZ,radio,79

(bootloader) [RUU]UZ,radio,86

(bootloader) [RUU]UZ,radio,94

(bootloader) [RUU]UZ,radio,99

(bootloader) [RUU]UZ,radio,100

(bootloader) [RUU]WP,radio,0

(bootloader) [RUU]WP,radio,6

(bootloader) [RUU]WP,radio,14

(bootloader) [RUU]WP,radio,19

(bootloader) [RUU]WP,radio,27

(bootloader) [RUU]WP,radio,36

(bootloader) [RUU]WP,radio,44

(bootloader) [RUU]WP,radio,51

(bootloader) [RUU]WP,radio,59

(bootloader) [RUU]WP,radio,68

(bootloader) [RUU]WP,radio,76

(bootloader) [RUU]WP,radio,85

(bootloader) [RUU]WP,radio,95

(bootloader) [RUU]WP,radio,100

OKAY [ 97.512s]

finished. total time: 100.508s

rebooting...

finished. total time: 0.158s

Radio downgrade complete. Starting unlock process...

Linux version 2.6.32.21-gf3f553d (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )

#1 PREEMPT Thu Oct 28 13:24:11 CST 2010

Final rooting, setting super-cid and installing recovery now...

This takes time. Please be patient!

--secu_flag off set

--cid set. CID will be changed to: 11111111

--sim_unlock. SIMLOCK will be removed

Section header entry size: 40

Number of section headers: 44

Total section header table size: 1760

Section header file offset: 0x000138b4 (80052)

Section index for section name string table: 41

String table offset: 0x000136fb (79611)

Searching for .modinfo section...

- Section[16]: .modinfo

-- offset: 0x00000a14 (2580)

-- size: 0x000000cc (204)

Kernel release: 2.6.32.21-gf3f553d

New .modinfo section size: 204

Attempting to power cycle eMMC... OK.

Searching for mmc_blk_issue_rq symbol...

- Address: c02a9e00, type: t, name: mmc_blk_issue_rq, module: N/A

Kernel map base: 0xc02a9000

Kernel memory mapped to 0x40000000

Searching for brq filter...

- Address: 0xc02a9e00 + 0x34c

- 0x2a000012 -> 0xea000012

Patching and backing up partition 7...

Error opening copy file.

Error opening copy file.

^^^^^^^^^^^^^^^^^^^^^^^^

I- NORMAL ERROR HERE -I

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

--secu_flag off set

--cid set. CID will be changed to: 11111111

--sim_unlock. SIMLOCK will be removed

Section header entry size: 40

Number of section headers: 44

Total section header table size: 1760

Section header file offset: 0x000138b4 (80052)

Section index for section name string table: 41

String table offset: 0x000136fb (79611)

Searching for .modinfo section...

- Section[16]: .modinfo

-- offset: 0x00000a14 (2580)

-- size: 0x000000cc (204)

Kernel release: 2.6.32.21

New .modinfo section size: 196

Attempting to power cycle eMMC... OK.

Searching for mmc_blk_issue_rq symbol...

- Address: c02db21c, type: t, name: mmc_blk_issue_rq, module: N/A

Kernel map base: 0xc02db000

Kernel memory mapped to 0x40009000

Searching for brq filter...

- Address: 0xc02db21c + 0x34c

- 0x2a000012 -> 0xea000012

Patching and backing up partition 7...

patching secu_flag: 0

Done.

rm: can't remove '/system/bin/su': No such file or directory

rm: can't remove '/system/xbin/su': No such file or directory

rm: can't remove '/system/bin/.ext/.su': No such file or directory

rm: can't remove '/system/app/Superuser.apk': No such file or directory

rm: can't remove '/system/app/Superuser.odex': No such file or directory

rm: can't remove '/system/app/SuperUser.apk': No such file or directory

rm: can't remove '/system/app/SuperUser.odex': No such file or directory

rm: can't remove '/system/app/superuser.apk': No such file or directory

rm: can't remove '/system/app/superuser.odex': No such file or directory

rm: can't remove '/system/app/Supersu.apk': No such file or directory

rm: can't remove '/system/app/Supersu.odex': No such file or directory

rm: can't remove '/system/app/SuperSU.apk': No such file or directory

rm: can't remove '/system/app/SuperSU.odex': No such file or directory

rm: can't remove '/system/app/supersu.apk': No such file or directory

rm: can't remove '/system/app/supersu.odex': No such file or directory

rm: can't remove '/data/dalvik-cache/*com.noshufou.android.su*': No such file or

directory

rm: can't remove '/data/dalvik-cache/*Superuser.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*SuperUser.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*superuser.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*eu.chainfire.supersu*': No such file or di

rectory

rm: can't remove '/data/dalvik-cache/*Supersu.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*SuperSU.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*supersu.apk*': No such file or directory

push: tools/afr/system/app/Superuser.apk -> /system/app/Superuser.apk

push: tools/afr/system/bin/.ext/.su -> /system/bin/.ext/.su

push: tools/afr/system/xbin/su -> /system/xbin/su

3 files pushed. 0 files skipped.

2846 KB/s (1976425 bytes in 0.678s)

dnsmasq monkey surfaceflinger

iftop printenv wpa_supplicant

**********************************************

* Installed ROOT and custom touch recovery! *

* Security flag and and Simlock are removed! *

**********************************************

Installing updated radio and custom ENG HBOOT...

Starting flash process...

erasing 'cache'...

OKAY [ 0.118s]

finished. total time: 0.119s

Sending update...

This takes time. Please be patient!

sending 'zip' (11429 KB)...

OKAY [ 1.879s]

writing 'zip'...

(bootloader) zip header checking...

(bootloader) zip info parsing...

(bootloader) [RUU]WP,radio,14

(bootloader) [RUU]WP,radio,19

(bootloader) [RUU]WP,radio,27

(bootloader) [RUU]WP,radio,36

(bootloader) [RUU]WP,radio,44

(bootloader) [RUU]WP,radio,100

(bootloader) start image[rcdata] unzipping & flushing...

(bootloader) [RUU]UZ,rcdata,0

(bootloader) [RUU]WP,rcdata,0

(bootloader) [RUU]WP,rcdata,100

OKAY [ 37.528s]

finished. total time: 39.409s

rebooting...

finished. total time: 0.154s

************ Process complete **************

Press any key to continue . . .

^^ yeah yeah yeah^^