au KDDI HTC J Butterfly [JAPAN] Unlock/Recovery/Root/AUrora v.1.0.2 ROM

Search This thread

SharpIS03

Senior Member
Dec 17, 2010
406
56
Koshigaya
beaups offered an easier way to change the CID, it's much easier than editing the block file in a hex editor, much less steps. My guide has been changed to reflect those changes.
 

SharpIS03

Senior Member
Dec 17, 2010
406
56
Koshigaya
my J butterfly loses signal after trying the rooting method above. anyone has the stock img of system and radio?

hope someone has pulled them using dd command when they got temproot; I forgot to do it

Sent from my HTC One X using xda app-developers app

I forgot to dd as well! Oh no...perhaps someone can still do it. Hopefully the RUU comes out soon.

You're not still having problems with the signal are you?
 

tiltyu

Senior Member
Nov 10, 2010
76
12
Tokyo
Seems to be a coincidence, it seems that the network went down at the same time. It's back up now though. Unlocked and ready to go!

thank god that it was indeed a some trouble on network system; it was down for almost six hours in Tokyo.

i am unlocking now :)
looking forward to the sources to be out lol

Sent from my HTL21 using xda app-developers app
 

fnoji111

Senior Member
Feb 4, 2008
101
130
Miyagi Prefecture,Sendai City,JP
hello.
SharpIS03 Nice job!!

I may want all of you to be careful about only one.


I used the following commands to return it to Stock.

echo -ne "KDDI_801" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20

Then, did not work hboot... ( not QHSUSB_DLOAD)

I tried [adb reboot bootloader] , but was no use...

I was able to repair it by the guarantee service of the carrier, but be careful for the time being. :(
 

SharpIS03

Senior Member
Dec 17, 2010
406
56
Koshigaya
hello.
SharpIS03 Nice job!!

I may want all of you to be careful about only one.


I used the following commands to return it to Stock.



Then, did not work hboot... ( not QHSUSB_DLOAD)

I tried [adb reboot bootloader] , but was no use...

I was able to repair it by the guarantee service of the carrier, but be careful for the time being. :(

Hello! I am sorry to hear that you had a problem! :( Did you copy and paste the command? I was told that it's ok to use this command to return to KDDI_801.

Thank you for the warning. Please be careful :)
 

katsuya82

Senior Member
Oct 13, 2008
154
14
Brisbane
Hi, I'm not a hacker so I'm not enitrely sure what I'm doing. I have Taiwanese HTC Butterfly X920d and I've tried you method of getting temp root and failed. After push in getroot and chmod then I run BreakSuidDiag.apk, the screen will jump out a very small windows about 1/8 size of the screen, and then just reboots itself after about 1 min, ofcouse, root is not achieved. now my question is Is it possible to use the same exploit on X920d?
 

SharpIS03

Senior Member
Dec 17, 2010
406
56
Koshigaya
Hi, I'm not a hacker so I'm not enitrely sure what I'm doing. I have Taiwanese HTC Butterfly X920d and I've tried you method of getting temp root and failed. After push in getroot and chmod then I run BreakSuidDiag.apk, the screen will jump out a very small windows about 1/8 size of the screen, and then just reboots itself after about 1 min, ofcouse, root is not achieved. now my question is Is it possible to use the same exploit on X920d?

This was only tested on the Japanese HTC J Butterfly. I am also not a developer by any means, just putting information together. Thank you for testing it, though. I'm not sure if the exploit will work for your phone since I'm not the person who found the exploit. Sorry, and good luck.
 

SharpIS03

Senior Member
Dec 17, 2010
406
56
Koshigaya
permroot and custom recovery

Thanks to drewx2, we now have a custom recovery! I've attached two images to this post, one shows the custom recovery on my phone. It says TWRP for Droid DNA, but hopefully we can get that changed.

The second image shows superuser working on my device.

Will update both of these procedures as soon as I can!
 

Attachments

  • IMG_0351.jpg
    IMG_0351.jpg
    260.3 KB · Views: 374
  • IMG_0352.jpg
    IMG_0352.jpg
    279 KB · Views: 358

jlevy73

Senior Member
Nov 8, 2009
9,470
1,302
Los Angeles
Thanks to drewx2, we now have a custom recovery! I've attached two images to this post, one shows the custom recovery on my phone. It says TWRP for Droid DNA, but hopefully we can get that changed.

The second image shows superuser working on my device.

Will update both of these procedures as soon as I can!

Very nice! I wonder if this recovery will also work with the Chinese version. Guess there is only one way to figure that out.
 

fnoji111

Senior Member
Feb 4, 2008
101
130
Miyagi Prefecture,Sendai City,JP
Thanks to drewx2, we now have a custom recovery! I've attached two images to this post, one shows the custom recovery on my phone. It says TWRP for Droid DNA, but hopefully we can get that changed.

The second image shows superuser working on my device.

Will update both of these procedures as soon as I can!

oh!
nice job drewx2!

but, Is the full back up possible?
backup error occurs in felica lock if do not measures.

felica = Japan only NFC (japanese name おサイフケータイ)



TwitterID : tako0910 (http://twitter.com/tako0910) port CWMrecovery↓

recovery10.img
http://www.mediafire.com/?bc87w72ep2pvn2e

It is not taken measures of backup error.

thanks
 

SharpIS03

Senior Member
Dec 17, 2010
406
56
Koshigaya
oh!
nice job drewx2!

but, Is the full back up possible?
backup error occurs in felica lock if do not measures.

felica = Japan only NFC (japanese name おサイフケータイ)

thanks

As far as I know, full back up is possible, and full restore from backup is possible. I have tested this. Also, osaifu-keitai seems to work just fine right now.
 

SharpIS03

Senior Member
Dec 17, 2010
406
56
Koshigaya
twrp and superuser procedures

Ok, I updated my post so that you can hopefully install TWRP (custom recovery) as well as Superuser (for root). Let me know if there are any problems and/or successes!
 

samusx

Senior Member
Feb 16, 2011
83
9
I followed the steps and got recovery installed. I flashed superuser. Is that the same as what you said here.

unlock => flash recovery => root => supercid

Is supercid super user?

When I installed lucky patcher a message pops up saying that I don:t have busybox installed. So I downloaded the app and tried to install it but I get an error saying that busybox installations was unsuccessful, try installing in another location. It is trying to install to /system.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 17
    This is for all users of the HTC J Butterfly (HTL21) that was released in Japan.

    For any of the below procedures, read the instructions several times before attempting. Also, please copy/paste any commands in the code boxes so you avoid making typing mistakes.

    You can find me on IRC, irc.andirc.net #HTCJButterfly - but it's not a dedicated channel and I'm usually only on in the evenings, JST.

    To do this, I assume you have the proper tools set up, are familiar with doing ADB commands, are aware that I (or the other posters) are NOT liable for any damage that you might do to your phone. Proceed at your own risk.

    Unlock: Yes (日本語で from fnoji111 / simplified English explanation from samusx)
    Here, we will get temproot, change the CID, then unlock the phone through the htcdev website.

    Preparation
    • goroh_kun's root tools
    • You are able to issue ADB/Fastboot commands to your phone
    • USB Debugging is ON (Settings -> Developer Options -> check USB Debugging)

    Further note, you may want to back up everything on your external SD card, or just use a spare external SD card to do this process.

    Temproot

    1. From goroh_kun's root tools, you'll find two files inside: diaggetroot.apk and getroot. Put these two files in a folder where you can run ADB commands.
    2. In a command prompt, run
      Code:
      adb install diaggetroot.apk
    3. Next, run
      Code:
      adb push getroot /data/local/tmp/getroot
      adb shell chmod 777 /data/local/tmp/getroot
    4. On your phone, run the diaggetroot application, the name might be BreakSuidDiag, wait for the Hello World! message to appear
    5. In the command prompt, run
      Code:
      adb shell
      /dev/sh
    You should now see # in the command prompt. If you don't, toggle the Wi-Fi ON/Off and try the /dev/sh command again. If you have #, great. Next!

    Modify CID
    (Thank you, beaups, for the easier method to change the CID!)
    1. You should have # in the command prompt
    2. run
      Code:
      echo -ne "11111111" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
    3. back into the command prompt, with #, run
      Code:
      reboot bootloader
    4. With your phone now in the bootloader, run
      Code:
      fastboot oem readcid
    The result should show 11111111!

    Unlock
    It's probably a good idea to backup any data because this will essentially factory reset your phone.
    1. If you have 11111111, go to htcdev.com
    2. Choose to unlock the bootloader, from the devices pull-down menu, select ALL OTHER SUPPORTED MODELS
    3. Follow all of the directions until you are unlocked
    4. Keep your unlock token somewhere safe!


    Custom Recovery and Root: YES
    Phone unlocked? Good. Thanks to drewx2, we now have a working custom recovery, and we can get root as well. We'll do this in one go. We will flash the custom recovery, change the theme so that the recovery fits on the screen, then flash SuperSU. Oh, let's flash Busybox as well.

    Preparation

    Flash TWRP and change the theme
    1. In the command prompt
      Code:
      adb reboot bootloader
    2. When the phone enters bootloader mode, in the command prompt
      Code:
      fastboot flash recovery twrp-htc-dlxj.img
    3. Check to make sure that the recovery works. If it does, great!
    4. Follow this guide to change the theme to fit the screen

    From here, you can flash a ROM through the custom recovery, like AUrora, and it will already be rooted with SuperSU included. If you don't want to install a custom ROM, you can follow the below instructions to get root/SuperSU on your stock system.

    Flash SuperSU and Busybox from TWRP (optional)
    1. Put the SU_Busybox_Package.zip file on your sdcard
    2. From TWRP, tap Install
    3. Find the file and select it
    4. Swipe the white arrow from left to right to install
    5. Tap Reboot System and check to see if SuperSU and Busybox work

    Problems/Issues
    au Market won't work if Superuser is installed. If you uninstall Superuser, au Market will work, then you can install Superuser again after you finish using au Market. Until this is resolved, this is the way to use both applications together. If you use SuperSU instead of Superuser, then au Market should work.


    Custom ROMs: Yes
    J Butterfly Stock Rooted ROM 1.15.970.1 (odex)
    J Butterfly Stock Rooted ROM 1.15.970.1 (deodex) - Camera will crash if you try and record a video, seeing what can be done to resolve this. Please use the odex'd rom instead if you need to video record.
    AUrora v1.0.2 - See Post #2

    S-OFF: YES
    Please go to http://unlimited.io/ - The DirtyRacun S-OFF method has been released for this phone. You can find this method under the S-OFF Exploits menu.
    (Please note that support for S-OFF will not be available on this thread, please ask the developers at the unlimited.io website if you have any troubles or issues with the S-OFF method)

    SIM Unlock: Yes
    There is a guide written by fnoji111. Because I have not tested this myself, I cannot provide any assistance if you find yourself in trouble. DO THIS PROCEDURE AT YOUR OWN RISK.



    Custom Kernels: N/A

    RUU: N/A

    Credits:
    goroh_kun, for his root tools
    fnoji111, for providing the unlock process
    samusx, writing up an explanation of the unlock process
    jcase, Dr_Drache, dsb, for their time and advice on random things
    beaups, his time, alternative methods, and simpler CID method
    drewx2, for providing a working custom recovery (TWRP)
    dsb, for helping me get my custom rom working
    lyapota for the camera mod
    nitsuj17, stat bar mods
    UKB (nitsuj17) and CODIS (chingy51o, newtoroot) ROM creators
    androidfilehost
    zeppelinrox, SuperCharger V6 tweaks
    8
    How to SIM Unlock

    Hello.
    I am the manager at HTCsoku where I wrote this guide for SIM unlock of the HTC J Butterfly
    http://htcsoku.info/htcsokudev/2012device/deluxe_j/simfree/



    DO THIS AT YOUR OWN RISK


    How to SIM Unlock

    What you need
    • S-OFF / UNLOCK HTC J butterfly
    • HTC J butterfly Custom Recovery
    • HTC Butterfy (X920d) Baseband FIle (radio.img)
    • HTC Butterfly (X920d) PortROM


    Baseband File (radio.img) Packing zip (RUU)
    http://www.mediafire.com/?atm5nw3giz3z8af

    New TW PortROM
    http://www.androidfilehost.com/?fid=9390288116658472241


    S-OFF is MANDATORY


    Next, flash in baseband file (radio.img) and TW PortROM
    1. Put phone in FASTBOOT mode
    2. Flash the X920d radio.img
      Code:
      fastboot oem rebootRUU
      fastboot flash zip X920dradio.zip
      fastboot reboot-bootloader
    3. Reboot into custom RECOVERY
    4. Install TW PortROM

    htl21portub1.jpg

    After reboot your phone, it becomes a SIM FREE (SIM card read is not stable.)

    Notice!

    1. If you do this, you must use a custom recovery for the X920d device.
    2. SIM card read is not stable.


    NOT WORKING

    • NFC
    • Felica
    • OneSeg (TV)
    • Irda (赤外線)
    • auLTE/au3G/auCall

    Enjoy!



    thanks edit SharpIS03!!



    ---2013/02/01
    add New TW PortROM
    Software Number update 1.04.709.5→1.14.709.1
    bugfix → Bluetooth working

    --2013/02/14
    bootloader replace was not mandatory.
    Therefore, I turned deleted the description.
    5
    AUrora v1.0.2

    AUrora ROM v1.0.2


    Features
    Based on stock DLXJ 1.15.970.1
    Android 4.1.1 / Sense 4+
    Aroma Installer
    SuperCharger V6 tweaks
    Deodex
    Debloat
    Rooted
    SuperSU
    Busybox
    Add 3rd Party Apps
    lyapota's camera (shhhhhh!)
    Status Bar mods (Clock/Battery)

    Download: AUrora v.1.0.2 (English) | AUrora v.1.0.2 (日本語)

    Installation
    Your device should be unlocked, rooted, with a custom recovery. (see post #1)
    1. Make sure you've made a nandroid backup!
    2. Put AUrora ROM on your internal SD card
    3. In recovery, in this case TWRP, Wipe cache, dalvik cache, factory reset, and system.
    4. Install AUrora ROM
    5. Reboot system
    Issues
    Although Busybox is installed, it may not work properly. In that case, you can flash this Busybox from recovery. No wipes needed.

    Changelog
    Code:
    v1.0.2
    *re-cooked ROM, au Market should work now
    *Updated some/system/apps, 2/4/2013
    *Updated some /data/apps, 2/4/2013
    *V6 SuperCharger [U9RC11] tweaks (100% SuperCharger, Die Hard Launcher, sdcard/3g, Kernel/VM, Zipalign apk/permissions fix on boot)
    *Removed a few more HTC/au apps, installable in Aroma
    *Added 5 DNA HEX wallpapers (Pink, BW, Blue, Yellow, Orange)
    *Created Purple and Red battery percentage mods
    *Removed centered clock mods
    *Modified Rosie, Landscape and 5x6/8x4 App drawer added (thanks nitsuj17 and dsb9938 for guidance)
    *Added 5 DNA wallpapers (Blue/Red Droid DNA Eye, Green/Purple/Red DNA HEX)
    *Changed default wallpaper
    
    v.1.0.1
    *Edited aroma-config and updater-script to fix the camera mod page not 
    showing up if Default is chosen in au installation screen in Aroma (thanks samusx)
    
    v1.0.0
    *Fixed Video recording (thanks lyapota)
    *Added UKB Status Bar Battery/Clock mods to Aroma (thanks nitsuj17!)
    *Added lyapota camera mod, choosable in aroma
    *Debloat and desense (au Apps/Widgets, HTC Apps/Widgets, Wallpapers, 
    Lockscreens, etc) with option to install in Aroma
    *Added a temporary splash screen
    *Added extra 3rd Party apps to install in aroma: Titanium Backup,
     ES File Browser, LINE
    *Added Aroma Installer


    Credits:
    goroh_kun, for his root tools
    fnoji111, for providing the unlock process, Japanese aroma installer
    samusx, writing up an explanation of the unlock process
    jcase, Dr_Drache, dsb, for their time and advice on random things
    beaups, his time, alternative methods, and simpler CID method
    drewx2, for providing a working custom recovery (TWRP)
    dsb, for helping me get my custom rom working
    lyapota for the camera mod
    nitsuj17, stat bar mods
    UKB (nitsuj17) and CODIS (chingy51o, newtoroot) ROM creators
    androidfilehost
    zeppelinrox, SuperCharger V6 tweaks
    3
    The prep for unlocking the phone is simple.
    First you need to have the Android SDK installed and ready to go. If you don't know how watch this video and follow the guide.
    http://www.youtube.com/watch?v=glGdw2HAumg
    This is where to get the android sdk and the written guide.
    http://droidmodderx.com/galaxynexus/how-to-set-up-the-sdk-for-galaxy-nexus

    Before you start in your Android phone settings click about then click the Phone identity tab. Make a note of your IMEI and MEID number.
    The get these two files and put them in the android-sdk-windows/platform-tools folder.
    diaggetroot.apk
    getroot

    These two files can be downloaded here.
    https://docs.google.com/file/d/0B8LDObFOpzZqQzducmxjRExXNnM/edit?pli=1

    You will a HEX file editor. Just google search for Free HEX editor and you will be able to find one.

    This guide was written for Windows users. Sorry I don't use MAC.

    STEP 1: Get administration privileges

    With the diaggetroot.apk and getroot files put in the android SDK platform-tools folder right click on an empty space in the browser window and open a command prompt window (cmd)

    Copy and paste this into the the cmd window and push 'enter'.
    adb install diaggetroot.apk

    It should push the file to the android system folder.
    Then copy and paste these lines and push 'enter' after each.
    adb push getroot /data/local/tmp/getroot
    adb shell chmod 777 /data/local/tmp/getroot

    Now on your android phone itself open your app drawer and open the app we just pushed to the system. It should be called BreakSuidiag or something like that. It will have a generic android icon.

    When you open it, you should see a white screen and it will say "hello world".

    Back on your PC in the same cmd window as before paste these lines and push 'enter' after each.
    adb shell
    /dev/sh

    You should now see the '#' mark in the cmd window. Thats good.
    (If it didn't work, turn your wifi on then off. Then try the two above lines again.)

    Now make sure you have an SD card in your J Butterfly. This process will erase your SD card so make sure you have your data backed up.
    In the same cmd window copy and paste this line.
    dd if=/dev/block/mmcblk0p5 of=/storage/ext_sd/mmcblk0p5ORIG

    You should see some writing that says the it made a file or something along those lines.
    This will copy a file to your SD card called mmcblk0p5ORIG.
    Now in your android options window unmount the SD card. Then remove the card and plug it into your PC and open the mmcblk0p5ORIG file with a HEX editor.

    You will see a bunch of numbers that look like this.
    deluxejunlock1.jpg


    Make sure the numbers underlined in orange(IMEI) and blue(MEID) match the numbers that you got from your Phone identity info.
    There won't be XXXXXXX in your version, those are added here to protect this users personal phone identity numbers. In your file please do not add X's. Leave the numbers as they are but just make sure they match the numbers you made a note of before.

    You only have to make a small edit to this file. The text that reads "KDDI_801" must be set to "11111111" That is 8, 1's that perfectly replace the "KDDI_801". When you are done it will look like this.
    deluxejunlock2.jpg


    Now save that edited file back to the SD card named 'mmcblk0p5MOD' and they you can eject your SD card from your PC and put it back in your J Butterfly.

    Now we will write this file to the phones data. Copy and paste these into the cmd window and push 'enter' after each.
    dd if=/storage/ext_sd/mmcblk0p5MOD of=/dev/block/mmcblk0p5
    reboot bootloader

    Your phone should reboot.

    After it does copy and paste this and push 'enter'.
    fastboot oem readcid

    You should see a screen that shows you "11111111" meaning that your new CID number is set.

    Now you can follow the HTC dev unlock steps from the link at the top of this post.
    Here is the like to the HTC dev unlock page.
    http://www.htcdev.com/bootloader/


    I hope everyone is able to follow my guide. Good luck.
    3
    Advanced Power Menu!

    I was about ready to give up on this. But finally, I got something working...think there are still some issues I need to resolve, but it basically works....all right, damn I need some sleep. :laugh:

    MAJOR props to Zarboz for all of his help on this one!