[FAQ] How to S-OFF @ hboot 2.49.000

Status
Not open for further replies.
Search This thread

ody.zady

Member
Aug 11, 2014
40
9
hboot 2.49

I also can't S-OFF under Hboot 2.49 many times by firewater or rumrunner.
but after I install the Lunar Max Kernel, I could S-OFF easily and very quickly by firewater.
 

mrkrowely

Member
Apr 17, 2014
48
3
i keep getting stuck on a bootloop when i flash your boot.img. and i'm flashing via fastboot using YOUR adb folder. Help?


I'm running sprint t6whl with hboot 2.49, twrp, superuser update 1.99, and vipermax 2.0.0,

i even restored to my backup of stock rom from just have getting bootloader unlocked and twrp flashed, and still stuck on bootloop.

---------- Post added at 05:01 PM ---------- Previous post was at 04:56 PM ----------

Another question. If I'm s-on how do you flash a different recovery as stated in Op ?



choose the recovery you want and download the img. for instance i like twrp, http://xdaforums.com/showthread.php?t=2498746
place that img in your adb folder
go into fastboot usb, and under your adb command prompt type this without the quotation marks "fastboot flash recovery "name of the img file".img" then reboot and you should have your new recovery there, make sure you pick the compatible recovery to your device though.
 

thayl0

Senior Member
May 26, 2013
990
151
i keep getting stuck on a bootloop when i flash your boot.img. and i'm flashing via fastboot using YOUR adb folder. Help?


I'm running sprint t6whl with hboot 2.49, twrp, superuser update 1.99, and vipermax 2.0.0,

i even restored to my backup of stock rom from just have getting bootloader unlocked and twrp flashed, and still stuck on bootloop.

---------- Post added at 05:01 PM ---------- Previous post was at 04:56 PM ----------





choose the recovery you want and download the img. for instance i like twrp, http://xdaforums.com/showthread.php?t=2498746
place that img in your adb folder
go into fastboot usb, and under your adb command prompt type this without the quotation marks "fastboot flash recovery "name of the img file".img" then reboot and you should have your new recovery there, make sure you pick the compatible recovery to your device though.


All you got to do is unlock bootloader run firewater. Profit.
 

mrkrowely

Member
Apr 17, 2014
48
3
All you got to do is unlock bootloader run firewater. Profit.

i'm having trouble getting s-off, and bootloader is unlocked via htc dev.

rumrunner after bottle 9 says to get the latest version.

Firewater just exits after first bottle chugging.

(bootloader) version: 0.5
(bootloader) version-bootloader: 2.49.0000
(bootloader) version-baseband: 1.48.50.0109
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main:
(bootloader) version-misc: PVT SHIP S-ON
(bootloader) serialno:
(bootloader) imei:
(bootloader) meid: 99000428536259
(bootloader) product: t6whl
(bootloader) platform: HBOOT-8064
(bootloader) modelid: 0P3P70000
(bootloader) cidnum: SPCS_001
(bootloader) battery-status: good
(bootloader) battery-voltage: 4324mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-ae8bbb39
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
 

thayl0

Senior Member
May 26, 2013
990
151
i'm having trouble getting s-off, and bootloader is unlocked via htc dev.

rumrunner after bottle 9 says to get the latest version.

Firewater just exits after first bottle chugging.

(bootloader) version: 0.5
(bootloader) version-bootloader: 2.49.0000
(bootloader) version-baseband: 1.48.50.0109
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main:
(bootloader) version-misc: PVT SHIP S-ON
(bootloader) serialno:
(bootloader) imei:
(bootloader) meid: 99000428536259
(bootloader) product: t6whl
(bootloader) platform: HBOOT-8064
(bootloader) modelid: 0P3P70000
(bootloader) cidnum: SPCS_001
(bootloader) battery-status: good
(bootloader) battery-voltage: 4324mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-ae8bbb39
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0

Can you get my a screenshot of your cmd prompt when you run firewater.
 

roman26

Senior Member
Jan 25, 2008
54
14
belfast
i'm having trouble as well getting s-off, bootloader is unlocked via htc dev, cutom recovery flashed

Firewater just exits after first bottle chugging. Struggling 6th day already with that s-off, on firewater irc channel, not much help

Sprint HTC One MAx

C:\Fastboot>fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 2.49.0000
(bootloader) version-baseband: 1.48.50.0425
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 3.02.651.5
(bootloader) version-misc: PVT SHIP S-ON
(bootloader) serialno: FA3BRSC00481
(bootloader) imei: 990004285207019
(bootloader) meid: 99000428520701
(bootloader) product: t6whl
(bootloader) platform: HBOOT-8064
(bootloader) modelid: 0P3P70000
(bootloader) cidnum: SPCS_001
(bootloader) battery-status: good
(bootloader) battery-voltage: 4288mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-1f512bb6
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
all: Done!
finished. total time: 0.045s

Please help guys
 

thayl0

Senior Member
May 26, 2013
990
151
i'm having trouble as well getting s-off, bootloader is unlocked via htc dev, cutom recovery flashed

Firewater just exits after first bottle chugging. Struggling 6th day already with that s-off, on firewater irc channel, not much help

Sprint HTC One MAx

C:\Fastboot>fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 2.49.0000
(bootloader) version-baseband: 1.48.50.0425
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 3.02.651.5
(bootloader) version-misc: PVT SHIP S-ON
(bootloader) serialno: FA3BRSC00481
(bootloader) imei: 990004285207019
(bootloader) meid: 99000428520701
(bootloader) product: t6whl
(bootloader) platform: HBOOT-8064
(bootloader) modelid: 0P3P70000
(bootloader) cidnum: SPCS_001
(bootloader) battery-status: good
(bootloader) battery-voltage: 4288mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-1f512bb6
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
all: Done!
finished. total time: 0.045s

Please help guys

What commands do you use to push Firewater
 

roman26

Senior Member
Jan 25, 2008
54
14
belfast
What commands do you use to push Firewater

Thanks for your reply mate.

Iam using 2.7.1.0 recovery, Sprint_Stock_3.02.651.5_Odex rom, tried different kernels but no luck, when installed on the first boot will get just random colors on the screen.

I use standard commands from firewater site:

adb reboot <–important!!!!
adb wait-for-device push firewater /data/local/tmp
adb shell
su
chmod 755 /data/local/tmp/firewater
/data/local/tmp/firewater
 

thayl0

Senior Member
May 26, 2013
990
151
Thanks for your reply mate.

Iam using 2.7.1.0 recovery, Sprint_Stock_3.02.651.5_Odex rom, tried different kernels but no luck, when installed on the first boot will get just random colors on the screen.

I use standard commands from firewater site:

adb reboot <–important!!!!
adb wait-for-device push firewater /data/local/tmp
adb shell
su
chmod 755 /data/local/tmp/firewater
/data/local/tmp/firewater

I sent you a private message.
 

scotty1223

Inactive Recognized Contributor
Jan 3, 2011
2,813
3,056
I've located a sprint max for cheap. Is firewater still working on the latest sprint firmware?

Sent from my HTC PG09410 using XDA Free mobile app
 

cellington77

Senior Member
Sep 4, 2009
86
6
Renton, Wa
Me too. I just got a great deal on the Sprint One Max. Just trying to find the best way to SIM unlock it. It's on 4.4.2.
So many different guides. I already unlocked the bootloader.
 

dottat

Retired Forum Moderator
  • Like
Reactions: scotty1223

scotty1223

Inactive Recognized Contributor
Jan 3, 2011
2,813
3,056
long time no see.... HTC dev unlock it. Flash back to an older stock rom (firmware version is no factor here).. run firewater.

Just did this for a user on latest firmware the other night so i can confirm it works. Glad to see we might share a phone again.

Use this rom to do it...

http://www.androidfilehost.com/?fid=23311191640114411

awsome sauce! id much prefer an international version,but unfortunately they dont go for cheap. thanks a bunch for the info,ill try and pick it up in the next couple days :cool:
 

dottat

Retired Forum Moderator
awsome sauce! id much prefer an international version,but unfortunately they dont go for cheap. thanks a bunch for the info,ill try and pick it up in the next couple days :cool:

Np.. .i just posted a current rooted RUU for the sprint max too... so after you s-off if you want stock you can start out clean/current/rooted too
 
  • Like
Reactions: scotty1223
Status
Not open for further replies.

Top Liked Posts

  • There are no posts matching your filters.
  • 12
    I was fighting a long time for this but finaly I got it working. Here is the how to and the requried files within the download.

    !!! ATTENTION !!!

    If you are needed to use ADB or FASTBOOT you

    (!!!) MUST (!!!)

    use my files within the Package - ADB Folder


    1. I was using a fresh installed Windows 7 x64

    2. Download my S-OFF Package here: http://ul.to/gqwmbc08

    3. Install all required Windows drivers and also the USB drivers. If you are using USB 3.0 you will find inside the S-OFF Package the latest USB 3.0 driver.
    4. Unlock via HTC the device

    5. Use the STOCK (!) HTC 1.19.401.2 ROM ODEX

    6. Install the SuperUser v. 1.99 Edition(http://download.chainfire.eu/420/SuperSU/UPDATE-SuperSU-v1.99.zip)

    7. Install the HTC driver pack from the S-OFF Package

    8. Reboot your device several times that Windows will install all the required drivers for your MAX device.


    Now, let's do S-OFF even if you are with hboot 2.49.000

    1. Flash the recovery from my package (recovery-clockwork-touch-6.0.4.8-t6.img)

    2. Flash the boot image from my package.
    ATTENTION!! Within this boot image almost every security is disabled. Just only for S-OFF your device!!

    3. Factory reset the device

    4. Do the default setup with select nothing. Only connect to WIFI and that's it.

    5. Don't use YOUR ADB and FASTBOOT. YOU MUST USE MY ADB & FASTBOOT FOLDER

    6. Download firewater temproot (!) and run it
    YES - I know you are allready rooted but you need to run it.

    7. For some reasons I'm 100% sure that you will get successfully root with temproot :laugh:

    8. REBOOT

    9. Wait until the device is back

    10. Now run firewater S-OFF with default instructions.

    adb reboot
    adb wait-for-device push firewater /data/local/tmp
    adb shell
    chmod 755 /data/local/tmp/firewater
    /data/local/tmp/firewater
    Within 10 sec. you should now see this:

    j5kl4rrwim1h.png


    Let me know if you got it!!! Enjoy your device and may the S-OFF with you...
    4
    It will not work. firewater server has been turned off. this thread really need to be closed out.
    I'm inclined to agree. Because Firewater has been shut down server-side, this guide will no longer work. Thus, this thread is not really needed as it is outdated. So, to discourage people from trying it (assuming they read through the thread) and to avert future arguments, I'm closing the thread.

    To @MrT69, you should consider editing the first post to reflect that Firewater doesn't work at this time. Also, please PM me if you feel it should stay open.

    The new method that works is called Sunshine (from the same developers). While one may disagree as to whether they should charge money, they do have expenses - test phones (many bricked figuring things out), hosting, etc - that need to be met. Also, they should be rewarded for their expertise as evidenced by the fact that no one has figured out s-off and undercut their price point. If you don't like being charged, then figure it out yourself and give it away for free.

    In the meantime, we NEVER allow members to disrespect developers, especially using foul language to do so. If you feel it is acceptable to do so, please reread the rules more carefully.

    Feel free to PM me with any questions, concerns, or accolades,
    coal686
    2
    I think you shuld make new thread with the instructions you write to me

    And I want your permission to use your instructions in arabic website called (ce4arab)

    I locked the bootloader and removed tamperd flag manually using adb commands I didn't know about that zip file
    I will include it in my thread if you allow me to

    Thanks again
    Will Make new thread next week and for sure you can use these instructions as u need [emoji2]
    2
    I'm happy that it worked for you [emoji2]

    It was really making me crazy because I have 4 device and s-offed all of them in 1 minute except the device of my friend

    So it's really obvious now that the newset firmware stops firewater from working even with old Rom and any one should first downgrade

    So hope the op add my comment to the first post because it will help those stuck with the newset firmware

    Also @AOWS
    U can use the zip in the link below to remove tampered and lock and unlock your device without need to pc or any thing
    Just flash it in twrp recovery and choose to lock or unlock or remove tampered
    https://docs.google.com/file/d/0B1kAXZSHj6XySUxDR2hNTHYzUHc/edit?usp=docslist_api

    I think you shuld make new thread with the instructions you write to me

    And I want your permission to use your instructions in arabic website called (ce4arab)

    I locked the bootloader and removed tamperd flag manually using adb commands I didn't know about that zip file
    I will include it in my thread if you allow me to

    Thanks again
    2
    Ok thanks ,very appreciated.
    It would be fine ,let me know when u find encrypted file for me.

    Sent from my AUXUS CoreX8 3G using Tapatalk 2

    uploading it now to you
    hope it works as i don't have sprint device

    ---------- Post added at 11:19 AM ---------- Previous post was at 11:04 AM ----------

    Follow these steps for sprint .. added sprint firmware

    For sprint only

    Now follow these steps carefully :
    1. we need to downgrade the rom to 2.09.651.1 ... I think u can use any stock backup and restore it and make sure it will boot because u need to flash the boot.img manually
    Or flash latest viper Rom which I prefer ( use viper rom for sprint )
    Also don't forget to flash the super su zip to make sure it's rooted ( I know that viper is rooted but please follow instructions and flash super su zip from recovery ) and test if your device have super su installed and working or not

    2. We need to downgrade the firmware also to 2.09.651.1 because it's the culprit which stops firewater from working :
    Yes you will downgrade the firmware with s-on device
    To do this follow these steps
    A. you will need to download this firmware ( sprint only )
    https://drive.google.com/file/d/0B1kAXZSHj6XyaHFwSTVzc0l2RjQ/view?usp=sharing
    B. copy it to your adb folder
    C. You need to lock your device to be able to flash this and make sure you have your unlock code.bin which you got previously to be able to unlock again faster if Firewater failed to achieve s-off with locked boot loader

    So now u should open cmd and write this to lock your device :

    fastboot oem lock

    C.Now we Will flash the firmware posted above :
    Make sure that you have the firmware in the adb folder and follow these commands and please copy and paste them :

    fastboot oem rebootRUU

    Then

    fastboot flash zip firmware_2.09.651.1.zip

    Then use the same command above again to make sure it's flashed properly

    Then :

    fastboot reboot-bootloader

    Now you will be in bootloader and you will see that mainversion is now : 2.09.651.1 [emoji2]

    D. Now you have also stock recovery flashed so open your device and do hard reset from backup and restore in settings

    E. Open your device and activate debugging then follow the firewater steps

    F. Firewater may be won't s-off from the first time and go through all of biottles so in the first run only, try to open the screen in the 7th bottle then your phone will freeze so do a hardreboot by power and volume up then follow firewater steps again without interruption

    F. If this succeded tell me .. if not reunlock your device with your unlock code and do the firewtater step again