[HBOOT] Hex Edited Stock 1.44.000 hboot (1.29.651.10)

Search This thread

AssassinsLament

Inactive Recognized Developer
Jun 8, 2007
939
628
Twin Cities
Here is a hex edited version of the stock 1.44.000 hboot (1.29.651.10).

It is basically for people who want their hboot to appear stock.

What was edited:

1) "TAMPERED" was removed.
2) "UNLOCKED" is masked as "LOCKED"
3) "S-OFF" is masked as "S-ON"
4) Red development text (on boot up) was removed.

Flash it in bootloader (fastboot)! Flash at own risk! (you need S-OFF obviously)

How to flash:

Code:
fastboot oem rebootRUU
fastboot flash zip hboot_hexed.zip
fastboot reboot-bootloader

Enjoy!

MD5: 436aaad9df326ea7680d184988fd6f91 hboot_hexed.zip
MD5: 24917745f52b366124a3ebcd03b7c166 hboot_hexed_redonly.zip
 

Attachments

  • hboot_hexed.zip
    485.9 KB · Views: 2,977
  • hboot_hexed_redonly.zip
    485.9 KB · Views: 1,188
  • hboot_stock.zip
    486 KB · Views: 2,427
Last edited:

il Duce

Inactive Recognized Developer / Retired Forum Mod
Feb 25, 2009
16,727
16,454
Twin Cities, MN
killer!

anyone know the correct command for a splash?

I tried

fastboot flash splash1 splash.img

it say writing splash1

then "remote: not allowed"

happened with stock and this hboot
 

AssassinsLament

Inactive Recognized Developer
Jun 8, 2007
939
628
Twin Cities
killer!

anyone know the correct command for a splash?

I tried

fastboot flash splash1 splash.img

it say writing splash1

then "remote: not allowed"

happened with stock and this hboot

Since this is a stock hboot, I'm sure flashing the splash1 command isn't supported.
Try flashing an engineering hboot first, then flash the splash, then flash back this stock hboot if you wish.
 
  • Like
Reactions: volk9029 and Riff76

im0rtalz

Senior Member
Mar 22, 2010
972
566
Boston
I've been looking for eng, can't find one, you have one?

this is link for eng hboot that was posted in the sim unlock thread in the international htc one forum, the instructions have been taken down since op is looking for a way to simplify it

https://www.dropbox.com/s/3x3wwga0qy3bwky/enghboot.nb0

original instructions that was posted before removal

Code:
Originally Posted by st_7  
Yep! It's live now, here are the instructions


S-OFF is MANDATORY. if you aint got it, git it!
adb & fastboot knowledge and setup is Mandatory


WARNING - This is a simple procedure but can and will brick a device if the steps are not followed or if you explore deeper than you should during the Unlock. I am not responsible for any damage and HIGHLY suggest following all the steps through until the end.

1. download the hboot we will be using TEMPORARILY. put the downloaded file in your adb/fastboot folder
https://www.dropbox.com/s/3x3wwga0qy3bwky/enghboot.nb0

2. Make a backup of your current hboot and move it into your adb/fastboot folder

C:\android>adb shell
C:\android>su
C:\android>dd if=/dev/block/mmcblk0p12 of=/sdcard/myhboot.img
exit
exit
C:\android>adb pull /sdcard/myhboot.img

3. Now we are going to prepare to flash the new hboot that we need to clear the simlock from device.

C:\android>adb reboot bootloader

C:\android>fastboot oem rebootRUU

*wait for the reboot into the black htc screen*

C:\android>fastboot flash hboot enghboot.nb0

C:\android>fastboot reboot-bootloader

Ok, you should notice the difference right away between the old hboot and new hboot. This is a engineering hboot and is extremely dangerous if you tinker around in it. I HIGHLY reccomend following thru with the sim unlock and following the last step to restore your non eng-hboot. eng hboot is NOT necessary to have on a s-off device.

so now we are going to make sure what type of sim lock you have on your device.

C:\android>fastboot oem readsimlocktype

you will get a readout similar to this -

(bootloader) size: simlock = 4256, password = 96, unlock_record = 256
(bootloader) simlock type: 0
OKAY [ 0.018s]
finished. total time: 0.019s

The part we are looking for is in line 2 "(bootloader) simlock type: 0"

simlock type here is "0"

HERE IS THE MUSTARD

C:\android>fastboot oem clearsimlockcode 0 *REPLACE "0" WITH YOUR SIMLOCK TYPE*

Readout -

(bootloader) write_simlock(1368): C9F35678, 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) write_simlock(1382): 6E7432F0, 4E07AFC7
(bootloader) [SECURITY] [PGFS] partition_update_pgfs: pg1fs_simlock
OKAY [ 0.043s]
finished. total time: 0.044s

YOU ARE SIM UNLOCKED. PLEASE FINISH THE LAST STEP TO RESTORE YOUR ORIGINAL HBOOT

C:\android>fastboot flash hboot myhboot.img

C:\android>fastboot reboot-bootloader

And just for hay of it, if you do not have superCID and would like it -

C:\android>fastboot oem writecid 11111111

C:\android>fastboot reboot
 

david279

Senior Member
Sep 4, 2007
5,680
1,888
New Orleans
The original sim unlock method doesnt work, me and others tried it thats why he took it down. This part may be key


"Originally Posted by 18th.abn View Post
im really sorry guys, i rushed putting thread together. what needs to happen is you have to write your own simlock code to the device and then unlock it. once its done it looks like this

C:\android>fastboot oem enablesimlock 0 0 11111111
...
(bootloader) write_simlock_password(299): 0, 0, 0, 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) write_simlock_password(319): EB, 95, 41, 94
(bootloader) [SECURITY] [PGFS] partition_update_pgfs: pg1fs_simlock
(bootloader) write_simlock(1368): C9F35678, 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) write_simlock(1382): 6E7432F0, 4E07AFC7
(bootloader) [SECURITY] [PGFS] partition_update_pgfs: pg1fs_simlock
OKAY [ 0.075s]
finished. total time: 0.076s

thats the actual sim unlock. im redoing the instructions in the op

the first "0" after enablesimlock is "0" to unlock or "1" to lock. the second "0" is the simlock type. the 11111111 is the simlock code once it was changed from its original "6E7432F0" to "11111111"

will be updating op"

See that bunch of ones(11111111) that supposed to be where the sim unlock code goes also you need to know your sim unlock number. Now you just have to find a sim unlock code...8 digit number
 
  • Like
Reactions: Riff76

Top Liked Posts

  • There are no posts matching your filters.
  • 57
    Here is a hex edited version of the stock 1.44.000 hboot (1.29.651.10).

    It is basically for people who want their hboot to appear stock.

    What was edited:

    1) "TAMPERED" was removed.
    2) "UNLOCKED" is masked as "LOCKED"
    3) "S-OFF" is masked as "S-ON"
    4) Red development text (on boot up) was removed.

    Flash it in bootloader (fastboot)! Flash at own risk! (you need S-OFF obviously)

    How to flash:

    Code:
    fastboot oem rebootRUU
    fastboot flash zip hboot_hexed.zip
    fastboot reboot-bootloader

    Enjoy!

    MD5: 436aaad9df326ea7680d184988fd6f91 hboot_hexed.zip
    MD5: 24917745f52b366124a3ebcd03b7c166 hboot_hexed_redonly.zip
    3
    killer!

    anyone know the correct command for a splash?

    I tried

    fastboot flash splash1 splash.img

    it say writing splash1

    then "remote: not allowed"

    happened with stock and this hboot

    I just confirmed it, stock hboot doesn't support flashing of splash1. Engineering hboot does though!
    3
    http://xdaforums.com/showthread.php?t=405118

    1.2 is the most updated one I think, which can be found on pof's blog linked in thread above.

    I was able to convert an image and flash it last night, but... and a big but it is...

    The splash image showed up but was tinted yellowish, different from what it was supposed to be. My main purpose was just to see if splash could be flashed and it was, so I didn't pursue it any further.

    Ok, quoting myself because I figured out why the splash image I made was tinted yellow. I used Adobe Photoshop and I guess it doesn't save BMP images in the right format even though I set it to 24bit. Using Microsoft Paint, and saving to 24bit, and converting the bmp to nb with nbimg 1.2.1 works fine!
    3
    I've been looking for eng, can't find one, you have one?

    Sorry, I don't. I used fnoji111's HBOOT-8064 (supposedly supports M7_WLS (sprint's)) briefly, although it seemed to have worked fine, I didn't know if it was a good idea or not, so I flashed back to hexed stock.
    3
    Ok, quoting myself because I figured out why the splash image I made was tinted yellow. I used Adobe Photoshop and I guess it doesn't save BMP images in the right format even though I set it to 24bit. Using Microsoft Paint, and saving to 24bit, and converting the bmp to nb with nbimg 1.2.1 works fine!

    Quoting myself again...

    So I've been testing and I've come to the conclusion that nbimg 1.2.1 is bugged, well at least at our resolution.
    I keep getting weird tinted splash images, even using MS Paint.

    Then I found this thread:

    http://xdaforums.com/showthread.php?t=2156614

    It uses a different tool, and works perfectly!

    Below is a quick sample splash I just made if you feel like testing!

    manofsteel.img is the splash, stocksplash.img is the original splash.

    You must have an eng hboot to flash!

    Code:
    fastboot flash splash1 manofsteel.img