[TOOL][SCRIPT][05 Sep 2012]S-off for HBOOT 1.16 and above[v3.4.1]

Search This thread

Nonverbose

Senior Member
Sep 18, 2011
1,644
992
Adelaide
Detailed in this post is a way to downgrade your Incredible S Hboot version 1.16 and above to version 1.13 so it can be s-offed using revolutionary. This is made possible with the TacoRoot exploit, an unsecured kernel, misc_version_universal and an automated goldcard algorithm.

Please note that phones with the latest ICS hboot (2.02 currently) will have to be bootloader UNLOCKED from htcdev.com. If your hboot 2.02 phone does not have an unlocked bootloader, do NOT run this script.

(Insert usual disclaimer: not responsible for your bricked phone blah blah etc).

Beware also that you will lose everything on the phone so back it all up if necessary.

Always make sure the script has completed without error before continuing with the RUU downgrade.



Requires:

MicroSD card (2GB,4GB or 8GB recommended).
Windows PC.
HTC Sync (Installed then uninstalled for ADB drivers).
View attachment IncS_MVDTKv3.4.1.zip [highlight]Link to post, not attachment. No mirrors please.[/highlight]

RUU used for downgrade, model number PG3213000(Typical IncS)
Dropbox Mirror

Alternate RUU for Canadian Bell or South American IncS users, model number PG3212000
Dropbox Mirror


Procedure:

Extract all the files from the downgrade toolkit to your PC and run runme.cmd, following the instructions on screen. The only inputs you should be required to make are:

1. Answering y or n at the prompts
2. Rebooting your phone out of recovery (also when/if prompted)

You may receive this error during the script operation "rm failed for /data/data/recovery/log, No such file or directory" This error can be disregarded.

Then run the RUU Downgrade (takes a while, around 10 mins so be patient).

When its finished running, you can verify if you have 1.13.0000 hboot by entering hboot (power on phone + vol down).

Then you can run revolutionary to get your s-off!

Video Guide kindly provided by locn:

Use on stock ICS device

Part 1. This video goes through the process of down grading HBOOT to 1.13.0000 so that we can then use revolutionary method to gain S-OFF.
http://youtu.be/PbwE6pXOdco

Part 2. This video covers how to get S-OFF on the HTC IncS using revolutionary method.
http://youtu.be/alSEpJMJrjo


Support: (Before asking for help make sure you read and follow the instructions in both the procedure and the script)

While every possible precaution has been taken to ensure the script works on all versions of our phone under all windows environments, there is a possibility that you may get stuck on a step and require assistance. To make this process go as quickly as possible for both parties, please include the following information when requesting help:

A full output of the script, either by screenshot or copy/paste
The operating system specifics: hboot version, stock or custom(provide name) recovery or Rom and if the phone is rooted
(optional)An output of the command "fastboot getvar all" deleting imei and serial no.

Changelog:
v3.4.1 Corrected syntax causing errors for rooted users
v3.4 Added option for users on stock ICS hboot (2.02)
v3.3 Fixed main version downgrade and goldcard creation issues for some users & other minor fixes
v3.2 Repackaged and re-encoded in windows environment for compatibility issues
v3.1 Fixed issue with gold card creation on non-rooted phones
v3.0 Changed temp root method to TacoRoot changed misc_version to misc_version_universal & other minor fixes
v2.1 Changed downgrade version to help prevent user error & other minor fixes
v2.0 Added goldcard script and relock bootloader for users unlocked via htcdev
v1.1 Added option in batch file for rooted and non-rooted users
v1.0 original upload

Credits:
tpbklake: For his unsecured kernel
jcase: Author of TacoRoot
hyuh: For misc_version_universal
viperbjk from RevSkills: For the goldcard algorithm.
GenePoole: For the android goldcard binary.
Revolutionary Team: For s-off Hboot.

And to everyone who contributed. If I have missed anyone that would like to be credited on this guide, pm me and I will be happy to oblige.
 
Last edited:

tyongchi

Member
Apr 28, 2011
47
12
Can this method of downgrading to HBoot 1.13 be used after unlocking the HBoot 1.16 via HTC method?
 

Nonverbose

Senior Member
Sep 18, 2011
1,644
992
Adelaide
There should be no problems using this downgrade with unlocked boot. Be aware though that when downgraded, the 1.13 may be locked... until you use revolutionary of course :)
 

arhidi

Member
Jul 10, 2009
35
11
Melbourne
Cant seem to get it working

Hey guys, I gave this a try last night with no success.

I have 2 IncS, 1 came with HBOOT 1.13, and the other 1.16. I have made a gold card in the past for my first IncS so that I could get temp root access and upgrade using an RUU without issues, but this time i ran into a few problems.

The second IncS has been unlocked via HTC dev, is rooted and has ARHD 1.19 on it (HBOOT 1.16)

Followed the guide exactly as described, but when I got to the point of running the IncS downgrader, there were a couple of errors (sorry, forgot to note them down), but by the time the process got to the end, it reported that is completed successfully?
When I ran the RUU, it said i was upgrading from 2.30.405.1 to 2.30.405.1? I was expecting to see from version 1? I got an error pretty soon saying I need to use the correct RUU to upgrade, and couldn't get any further.

So then I ran the downgrader again, but half way it got stuck in a boot loop. I left it alone, and 5 mins later, the batch file completed (without errors), but remained in the boot loop. I waited another 10, but it never left the boot loop, so I continued with the RUU upgrade. This time it told me i was upgrading from version 1 to 2.30.405.1, it got a little further (deleting user data, then sending....), but stopped again.

Removed battery, rebooted into fastboot mode. Ran the downgrader again, and it completed successfully without any issues! Ran the RUU, this time it got a little further again, it told me it was deleting user data, then sending.......
Eventually it threw another error, and remained on the black screen with the HTC logo (no progress bar, and nothing in the corners either)
I removed the battery and booted into bootloader. It went into what looks like the usual bootloader screen, only the following message was displayed:
ruu error
Security Check Failed!

At this point i thought I would have to restore the nandroid backup i made before beginning this process, but when i put the original micro SD card in and booted normally, the rom was exactly as i left it!

I did this on Windows 7, with all drivers installed (I use this notebook for android app development, so I know the SDK and drivers are complete, and my first IncS is used for debugging apps), and I used a very old 256Mb micro SD card to create the gold card.

I know it's a lot to ask, but any help would be appreciated.
 

Nonverbose

Senior Member
Sep 18, 2011
1,644
992
Adelaide
Thanks for the feedback arhidi, sorry to hear that you're having problems.

Removed battery, rebooted into fastboot mode. Ran the downgrader again, and it completed successfully without any issues! Ran the RUU, this time it got a little further again, it told me it was deleting user data, then sending.......
Eventually it threw another error, and remained on the black screen with the HTC logo (no progress bar, and nothing in the corners either)
I removed the battery and booted into bootloader. It went into what looks like the usual bootloader screen, only the following message was displayed:
ruu error
Security Check Failed!

At this point i thought I would have to restore the nandroid backup i made before beginning this process, but when i put the original micro SD card in and booted normally, the rom was exactly as i left it!

Security check failed points to a problem with the goldcard try creating it again using the steps in the guide.

Try turning fast boot mode off if you haven't already (Settings » Power » Fastboot)

Please run the downgrader while the phone is booted normally (charge mode) as the temproot could be negated between leaving fastboot and booting the rom.

I'm assuming you are using a stock rom, the RUU should be reporting that you are "upgrading" from a higher version to a lower version.

One last thing, the phone should not be rebooting through the main version downgrading process (runme.bat) if it does please run it again before continuing to the RUU downgrade step.

If you receive errors in the main version downgrade, please note them and report back.

Good luck :)

Edit: sorry didn't see you're rooted and running custom rom
An alternative to running the runme.bat you can just copy the misc_version to your ADB folder and enter the following commands:

Code:
adb push misc_version /data/local/tmp
adb shell
chmod 777 /data/local/tmp/misc_version
/data/local/tmp/misc_version -s 1.00.000.0
exit

Then run the RUU
 
Last edited:

arhidi

Member
Jul 10, 2009
35
11
Melbourne
Security check failed points to a problem with the goldcard try creating it again using the steps in the guide.

I have a spare 2Gb micro SD, I'll try creating a gold card with that instead.

Edit: sorry didn't see you're rooted and running custom rom
An alternative to running the runme.bat you can just copy the misc_version to your ADB folder and enter the following commands:

Code:
adb push misc_version /data/local/tmp
adb shell
chmod 777 /data/local/tmp/misc_version
/data/local/tmp/misc_version -s 1.00.000.0
exit

Then run the RUU

I'll try that instead, was going to look at those scripts but then ran out of time.

Thanks again.
 

Nonverbose

Senior Member
Sep 18, 2011
1,644
992
Adelaide
No problem, let me know how it goes. The guide was actually written for stock ROM but it should be able to work with custom.
 

arhidi

Member
Jul 10, 2009
35
11
Melbourne
ERROR [155]: UNKNOWN ERROR

The ROM Update Utility cannot update your Android phone.
Please get the correct ROM Update Utility and try again
 

st.matt

Senior Member
Nov 30, 2011
72
213
If you're getting error 155 and your gold card definitely works then try going into fastboot before starting the RUU downgrade.
 
  • Like
Reactions: Nonverbose

mjckt

Senior Member
Jun 25, 2007
80
4
Santiago
tried with 2 different sd cards and cannot finish the process with the RUU

ERROR [155]

followed all the instructions and recomendations without success

i unlocked the bootloader previously, maybe is related
 

Top Liked Posts

  • There are no posts matching your filters.
  • 103
    Detailed in this post is a way to downgrade your Incredible S Hboot version 1.16 and above to version 1.13 so it can be s-offed using revolutionary. This is made possible with the TacoRoot exploit, an unsecured kernel, misc_version_universal and an automated goldcard algorithm.

    Please note that phones with the latest ICS hboot (2.02 currently) will have to be bootloader UNLOCKED from htcdev.com. If your hboot 2.02 phone does not have an unlocked bootloader, do NOT run this script.

    (Insert usual disclaimer: not responsible for your bricked phone blah blah etc).

    Beware also that you will lose everything on the phone so back it all up if necessary.

    Always make sure the script has completed without error before continuing with the RUU downgrade.



    Requires:

    MicroSD card (2GB,4GB or 8GB recommended).
    Windows PC.
    HTC Sync (Installed then uninstalled for ADB drivers).
    View attachment IncS_MVDTKv3.4.1.zip [highlight]Link to post, not attachment. No mirrors please.[/highlight]

    RUU used for downgrade, model number PG3213000(Typical IncS)
    Dropbox Mirror

    Alternate RUU for Canadian Bell or South American IncS users, model number PG3212000
    Dropbox Mirror


    Procedure:

    Extract all the files from the downgrade toolkit to your PC and run runme.cmd, following the instructions on screen. The only inputs you should be required to make are:

    1. Answering y or n at the prompts
    2. Rebooting your phone out of recovery (also when/if prompted)

    You may receive this error during the script operation "rm failed for /data/data/recovery/log, No such file or directory" This error can be disregarded.

    Then run the RUU Downgrade (takes a while, around 10 mins so be patient).

    When its finished running, you can verify if you have 1.13.0000 hboot by entering hboot (power on phone + vol down).

    Then you can run revolutionary to get your s-off!

    Video Guide kindly provided by locn:

    Use on stock ICS device

    Part 1. This video goes through the process of down grading HBOOT to 1.13.0000 so that we can then use revolutionary method to gain S-OFF.
    http://youtu.be/PbwE6pXOdco

    Part 2. This video covers how to get S-OFF on the HTC IncS using revolutionary method.
    http://youtu.be/alSEpJMJrjo


    Support: (Before asking for help make sure you read and follow the instructions in both the procedure and the script)

    While every possible precaution has been taken to ensure the script works on all versions of our phone under all windows environments, there is a possibility that you may get stuck on a step and require assistance. To make this process go as quickly as possible for both parties, please include the following information when requesting help:

    A full output of the script, either by screenshot or copy/paste
    The operating system specifics: hboot version, stock or custom(provide name) recovery or Rom and if the phone is rooted
    (optional)An output of the command "fastboot getvar all" deleting imei and serial no.

    Changelog:
    v3.4.1 Corrected syntax causing errors for rooted users
    v3.4 Added option for users on stock ICS hboot (2.02)
    v3.3 Fixed main version downgrade and goldcard creation issues for some users & other minor fixes
    v3.2 Repackaged and re-encoded in windows environment for compatibility issues
    v3.1 Fixed issue with gold card creation on non-rooted phones
    v3.0 Changed temp root method to TacoRoot changed misc_version to misc_version_universal & other minor fixes
    v2.1 Changed downgrade version to help prevent user error & other minor fixes
    v2.0 Added goldcard script and relock bootloader for users unlocked via htcdev
    v1.1 Added option in batch file for rooted and non-rooted users
    v1.0 original upload

    Credits:
    tpbklake: For his unsecured kernel
    jcase: Author of TacoRoot
    hyuh: For misc_version_universal
    viperbjk from RevSkills: For the goldcard algorithm.
    GenePoole: For the android goldcard binary.
    Revolutionary Team: For s-off Hboot.

    And to everyone who contributed. If I have missed anyone that would like to be credited on this guide, pm me and I will be happy to oblige.
    4
    Great Script! Made some Videos for it!

    Hi Nonverbose

    Thanks for making it so easy for us! Finally got around to doing this and it worked flawlessly for me!

    I made videos of the process which i followed here and thought it might be able to help someone out.

    Part 1. This video goes through the process of down grading HBOOT to 1.13.0000 so that we can then use revolutionary method to gain S-OFF.
    http://youtu.be/PbwE6pXOdco

    Part 2. This video covers how to get S-OFF on the HTC IncS using revolutionary method.
    http://youtu.be/alSEpJMJrjo

    Hope it helps!

    Cheers
    3
    Just to confirm, the gold card is required.

    So happy to finally have s-off. Very annoying not being able to use OTA updates.
    3
    @pressytcn very pretty and extremely large photo of your phone in stock recovery waiting for you to press volume up + volume down + power button, just like it says in the screenshot of the script you provided. Learn to read.

    sorry my mistake
    i learned it now and tried flashing as you said
    the result is
    E: Signature verification failed
    installation aborted

    If you were doing what I said, there would be no signature check to fail. I asked you to flash a custom rom and rerun the script, providing a screenshot of the result. Fail.

    If your phone is operational, don't bother trying to follow this guide. Its out of your depth unfortunately. If your phone cannot boot a rom, I will help you get it working again.

    Worked flawlessly.. no interruptions... no issues!
    Thanks mate... :)

    It is encouraging to see there's users in the xda community that can still follow a reasonably simple set of instructions. Thanks for the feedback :)
    3
    Hey, why don't you try giving an answer instead of being smartass ? I CAN'T FIND any info about my specifications.Info on this forum is really messy.I found info about hboot 2.02, i found hboot 2.00 s-on locked but not mine.I don't want make my phone bricked.If you want to help, help or just suht up, ok.I don't really care you are writing a script.I think xda have to cleaned from behaving like you.Like adolescent...

    I have been supporting this method for almost 1 year but still I need to read this crap. The title says this method is for hboot 1.16 and above. You're on v2.00 obviously that is above 1.16, not only that, you are coming here asking if flashing a recovery image will give you s-off? If you don't want your phone bricked, how about you research what the hell you're doing. If that's too difficult then you should not be modifying your phone. Simple as that.