[RECOVERY][INFO] 1.12.651.17 System dump, partitions, build.prop & more

Search This thread

Captain_Throwback

Recognized Developer
Just got mine and figured I'd upload this if anyone wants to take a look at it. I'm in the process of uploading the dump and will post interesting tidbits as I come across them.

I noticed that the Tethering UI is disabled by default, which I do not like at all.

I also see that all of the partitions are defined and labeled in proc/emmc, which is a pleasant change from my previous device.

build.prop contents:
Code:
ro.ril.oem.ecclist=911
ro.ril.hsdpa.category=14
ro.ril.hsupa.category=6
ro.ril.hsxpa=4
ro.ril.disable.fd.plmn.prefix=23402,23410,23411,23420
ro.ril.enable.sdr=0
ro.ril.set.mtusize=1422
ro.ril.disable.cpc=1
ro.product.locale.language=en
ro.product.locale.region=US
ro.com.google.clientidbase=android-htc
ro.com.google.clientidbase.yt=android-sprint-mvno-us
ro.com.google.clientidbase.am=android-sprint-mvno-us
ro.com.google.clientidbase.ms=android-sprint-mvno-us
ro.wifi.hotspotUI=0
ro.bt.tetheringUI=0
ro.usb.tetheringUI=0
ro.product.brand=htc
ro.product.model=831C
ro.cdma.home.operator.alpha=HTC
gsm.sim.operator.alpha=Chameleon
gsm.operator.alpha=Chameleon
ro.cdma.home.operator.numeric=000000
gsm.sim.operator.numeric=000000
gsm.operator.numeric=000000
gsm.sim.operator.iso-country=us
gsm.operator.iso-country=us
ro.net.apnwhitelist=admin
ro.htc.checkin.delay=0
ro.telephony.ipv6_capability=1
dev.defaultwallpaper=/system/customize/resource/wallpapers_00.jpg
# begin build properties
htc.build.stage=2
ro.aa.rid=205
ro.cwkey=SPCS_001
ro.aa.skulist=651
ro.aa.customizationid=695578
ro.aa.taskid=356100
ro.aa.romver=1.12.651.17
ro.aa.project=M8_WHL_K44_SENSE60_SPCS_SECURITY
ro.onecid=1
ro.aa.mainsku=651
ro.aa.modelid=0P6B70000
ro.prot=true
ro.aa.maincid=SPCS_001
ro.aa.report=com
ro.aa.cidlist=SPCS_001
# autogenerated by buildinfo.sh
ro.build.id=KOT49H
ro.build.display.id=KOT49H release-keys
ro.build.version.incremental=318427.17
ro.build.version.sdk=19
ro.build.version.codename=REL
ro.build.version.release=4.4.2
ro.build.date=四  2月 27 11:25:04 CST 2014
ro.build.date.utc=1393471504
ro.build.type=user
ro.build.user=buildteam
ro.build.host=abm010
ro.build.tags=release-keys
ro.product.brand=htc
ro.product.name=sprint_wwe
ro.product.device=htc_m8whl
ro.product.board=MSM8974
ro.product.cpu.abi=armeabi-v7a
ro.product.cpu.abi2=armeabi
ro.product.manufacturer=HTC
ro.product.locale.language=en
ro.product.locale.region=US
ro.wifi.channels=
ro.board.platform=msm8974
# ro.build.product is obsolete; use ro.product.device
ro.build.product=htc_m8whl
ro.build.description=1.12.651.17 CL318427 release-keys
# Do not try to parse ro.build.description or .fingerprint
ro.build.description=1.12.651.17 CL318427 release-keys
ro.build.changelist=318427
ro.build.fingerprint=htc/sprint_wwe/htc_m8whl:4.4.2/KOT49H/318427.17:user/release-keys
ro.build.characteristics=default
ro.build.project=M8_WHL_K44_SENSE60_SPCS_SECURITY:356100
ro.build.sku=Sprint WWE
ro.product.version=1.12.651.17
ro.build.languageremove=0
ro.build.sense.version=6.0
ro.build.version.htcsdk=HTCExt:HTCExtension_Sense60_442_1;SDK:6.17;hdkbase:19.1
ro.build.description=1.12.651.17 CL318427 release-keys
ro.build.fingerprint=htc/sprint_wwe/htc_m8whl:4.4.2/KOT49H/318427.17:user/release-keys
keyguard.no_require_sim=1
# end build properties
#
# from device/htc/htc_m8whl/system.prop
#
#
# system.prop for msm8974
#

rild.libpath=/vendor/lib/libril-qc-qmi-1.so
rild.libargs=-d /dev/smd0
persist.rild.nitz_plmn=
persist.rild.nitz_long_ons_0=
persist.rild.nitz_long_ons_1=
persist.rild.nitz_long_ons_2=
persist.rild.nitz_long_ons_3=
persist.rild.nitz_short_ons_0=
persist.rild.nitz_short_ons_1=
persist.rild.nitz_short_ons_2=
persist.rild.nitz_short_ons_3=
ril.subscription.types=NV,RUIM
DEVICE_PROVISIONED=1
# Default network type.
# 10 =>  LTE/CDMA/EvDo/GSM/WCDMA mode preferred.
ro.telephony.default_network=8

#
# system props for display
#
debug.sf.hw=1
debug.egl.hw=1
debug.composition.type=gpu
persist.hwc.mdpcomp.enable=true
ro.hwui.renderer.disable_opaque=true
ro.sf.lcd_density=480
debug.mdpcomp.logs=0

# Display Info
ro.product.display_resolution = 5 inch 1080p resolution

dalvik.vm.heapsize=512m
dalvik.vm.heapgrowthlimit=192m
dalvik.vm.heapstartsize=8m
dalvik.vm.heapmaxfree=8m
dalvik.vm.heapminfree=2m

dev.pm.dyn_samplingrate=1
persist.demo.hdmirotationlock=false


# +SSD_RIL
ro.baseband.arch=msm

# system property for RIL snapshot feature/timer
persist.radio.snapshot_enabled = 1
persist.radio.snapshot_timer = 22
# -SSD_RIL

ro.hdmi.enable=true
tunnel.decode=true
tunnel.audiovideo.decode=true
lpa.decode=true
lpa.use-stagefright=true
persist.speaker.prot.enable=false
qcom.hw.aac.encoder=true
use.voice.path.for.pcm.voip=true
#
# system props for the cne module
#
persist.cne.feature=1

#system props for the MM modules

media.stagefright.enable-player=true
media.stagefright.enable-http=true
media.stagefright.enable-aac=true
media.stagefright.enable-qcp=true
media.stagefright.enable-fma2dp=true
media.stagefright.enable-scan=true
mmp.enable.3g2=true
mm.enable.smoothstreaming=true
media.aac_51_output_enabled=true
#37491 is decimal sum of supported codecs in AAL
#codecs: AVI AC3 ASF AAC QCP DTS 3G2 MP2TS
mm.enable.qcom_parser=37491

# VIDC: debug_levels
# 1:ERROR 2:HIGH 4:LOW 0:NOLOGS 7:AllLOGS
vidc.debug.level=3
#
# system props for the data modules
#
ro.use_data_netmgrd=true
persist.data.netmgrd.qos.enable=true
ro.data.large_tcp_window_size=true

#system props for time-services
persist.timed.enable=true

# System props for audio
# System props for soundhound
persist.htc.audio.pcm.samplerate=48000
persist.htc.audio.pcm.channels=2

# System prop to select audio resampler quality
af.resampler.quality=4

# System props for global effect
htc.audio.global.state=0
htc.audio.global.profile=0
htc.audio.q6.topology=0
htc.audio.global.speaker=1

#
# system prop for opengles version
#
# 196608 is decimal for 0x30000 to report version 3
ro.opengles.version=196608

#
# system prop for Bluetooth Dialup Networking
#
ro.qualcomm.bluetooth.dun=false

# system prop for Bluetooth FTP profile
ro.qualcomm.bluetooth.ftp=true
#
# system property for Bluetooth Handsfree Profile Wide Band Speech
#
ro.qualcomm.bluetooth.hfp.wbs=false
#
#system prop for Bluetooth hci transport
ro.qualcomm.bt.hci_transport=smd
#
# system prop for requesting Master role in incoming Bluetooth connection.
#
ro.bluetooth.request.master=true
#
# system prop for Bluetooth Auto connect for remote initated connections
#
ro.bluetooth.remote.autoconnect=true
# system property for Bluetooth discoverability time out in seconds
# 0: Always discoverable
#debug.bt.discoverable_time=0

# system property for Bluetooth Hardware information
ro.product.bluetooth=4.0

# config fm rssi threshold
#service.qct.fm.rssi=116
#SSD_BT- bluetooth

# system property for qcom Bluetooth stack
ro.qc.bluetooth.stack=bluedroid

# system property for bdaddr
ro.bt.bdaddr_path = /sys/module/htc_bdaddress/parameters/bdaddress

# BLE TAG (HtcBluetoothLeProfiles)
ro.bt.ble_tag = 1
# System property for cabl
#ro.qualcomm.cabl=1

#Hardware info - Bluetooth
ro.bt.chipset = Qualcomm WCN3680
ro.bt.profiles = 12806403
ro.bt.stack.version = 2.0
ro.bt.stack = Bluedroid
ro.bt.version = 4.0
ro.product.bluetooth=4.0

#+ willy_fu 20130924, enable it for JB 4.3 projects 
# Property for TelephonyManager.getLteOnCdmaModeStatic API
# System props for telephony
# System prop to turn on CdmaLTEPhone always
#+ SSD_RIL: disable default value by MASD request
telephony.lteOnCdmaDevice=1
#- SSD_RIL: disable default value by MASD request
#- willy_fu 20130924

#Simulate sdcard on /data/media
#
persist.fuse_sdcard=true
# ro.storage_structure: define the storage structure of this project
# FUSE: 0x8, FAT: 0x4, SD: 0x2, INS: 0x1
# Example: If the project has FUSE with SD card, the value should be defined as 10 (dec)
ro.storage_structure = 10

# ro.storage_encryption_type: define the storage encryption type of this project
# not support encryption: 0x0 block level: 0x1 file level: 0x2
ro.storage_encryption_type = 2
#For usb storage
ro.usb_host = 1
#
#snapdragon value add features
#
ro.qc.sdk.audio.ssr=false
##fluencetype can be "fluence" or "fluencepro" or "none"
ro.qc.sdk.audio.fluencetype=none
ro.qc.sdk.sensors.gestures=true
ro.qc.sdk.gestures.camera=false
ro.qc.sdk.camera.facialproc=false
#property to enable user to access Google WFD settings.
persist.debug.wfd.enable=1
#property to choose between virtual/external wfd display
persist.sys.wfd.virtual=0

# Following property will be reference by Settings.
ro.product.main_camera = HTC UltraPixel Camera
ro.product.front_camera = 5M

# Support HW rest
ro.product.hwreset = 1
ro.product.hwreset.timer1 = 6
ro.product.hwreset.timer2 = 9

# M8 HW info
ro.product.ram = 2GB

# wifi
wifi.softap.interface=wlan0
wifi.softapconcurrent.interface=softap.0
wifi.miracastconcurrent.scan=WCN3680
init.svc.wpa_supplicant=
init.svc.dhcpcd_wlan0=
dhcp.wlan0.autoip=
dhcp.wlan0.dns1=
dhcp.wlan0.dns2=
dhcp.wlan0.dns3=
dhcp.wlan0.dns4=
dhcp.wlan0.gateway=
dhcp.wlan0.ipaddress=
dhcp.wlan0.leasetime=
dhcp.wlan0.mask=
dhcp.wlan0.ooxx=
dhcp.wlan0.pid=
dhcp.wlan0.reason=
dhcp.wlan0.result=
dhcp.wlan0.server=
net.wlan0.dns1=
net.wlan0.dns2=
wifi.wpa_supp_ready=
wlan.driver.status=
wifi.interface=wlan0
wifi.supplicant_scan_interval=15
persist.wifi.v6=true
persist.wifi.v6.rs.count=5
persist.wifi.v6.rs.timeout=5
ro.product.wifi = 802.11 a/b/g/n/ac
sys.stt.ssr.no_prompt=1
tunnel.audio.encode = true

# ro.storage_encryption_type: define the storage encryption type of this project
# not support encryption: 0x0 block level: 0x1 file level: 0x2
ro.storage_encryption_type = 2


#
# ADDITIONAL_BUILD_PROPERTIES
#
persist.preload.common=1
persist.zygote.preload_threads=3
persist.camera.antibanding=60
persist.camera.tuning_spec=htc
ro.com.android.dataroaming=false
persist.sys.logkit.ctrlcode=0
keyguard.no_require_sim=true
ro.config.ringtone=Ring_Synth_04.ogg
ro.config.notification_sound=pixiedust.ogg
ro.carrier=unknown
drm.service.enabled=true
ro.setupwizard.mode=OPTIONAL
ro.com.google.gmsversion=4.4.2_r1
ro.config.alarm_alert=Alarm_Classic.ogg
ro.vendor.extension_library=/vendor/lib/libqc-opt.so
persist.sys.dalvik.vm.lib=libdvm.so
net.bt.name=Android
dalvik.vm.stack-trace-file=/data/anr/traces.txt
ro.qc.sdk.izat.premium_enabled=0
ro.qc.sdk.izat.service_mask=0x0
persist.gps.qc_nlp_in_use=0
ro.gps.agps_provider=1

Output of proc/emmc:
Code:
dev:        size     erasesize name
mmcblk0p1: 00100000  00000200  "sbl1"
mmcblk0p2: 076f7c00  00000200  "pg1fs"
mmcblk0p3: 00004000  00000200  "board_info"
mmcblk0p4: 00800000  00000200  "reserve_1"
mmcblk0p5: 00040000  00000200  "mfg"
mmcblk0p6: 017afc00  00000200  "pg2fs"
mmcblk0p7: 00040000  00000200  "sbl1_update"
mmcblk0p8: 00040000  00000200  "rpm"
mmcblk0p9: 00200000  00000200  "tz"
mmcblk0p10: 00008000  00000200  "sdi"
mmcblk0p11: 00400000  00000200  "hboot"
mmcblk0p12: 00500000  00000200  "sp1"
mmcblk0p13: 00100000  00000200  "wifi"
mmcblk0p14: 00008000  00000200  "ddr"
mmcblk0p15: 00100000  00000200  "dsps"
mmcblk0p16: 03c00400  00000200  "adsp"
mmcblk0p17: 00500000  00000200  "wcnss"
mmcblk0p18: 00800000  00000200  "radio_config"
mmcblk0p19: 00180000  00000200  "fsg"
mmcblk0p20: 04b00400  00000200  "radio"
mmcblk0p21: 00400000  00000200  "tool_diag"
mmcblk0p22: 03200000  00000200  "custdata"
mmcblk0p23: 00effc00  00000200  "reserve_2"
mmcblk0p24: 00100000  00000200  "misc"
mmcblk0p25: 00180000  00000200  "modem_st1"
mmcblk0p26: 00180000  00000200  "modem_st2"
mmcblk0p27: 01400000  00000200  "fataldevlog"
mmcblk0p28: 00001000  00000200  "debug_config"
mmcblk0p29: 00040000  00000200  "pdata"
mmcblk0p30: 00004000  00000200  "control"
mmcblk0p31: 00140400  00000200  "local"
mmcblk0p32: 00010000  00000200  "extra"
mmcblk0p33: 00100000  00000200  "cdma_record"
mmcblk0p34: 00000400  00000200  "fsc"
mmcblk0p35: 00002000  00000200  "ssd"
mmcblk0p36: 00040000  00000200  "skylink"
mmcblk0p37: 01900000  00000200  "carrier"
mmcblk0p38: 00040000  00000200  "sensor_hub"
mmcblk0p39: 01e00000  00000200  "devlog"
mmcblk0p40: 00002800  00000200  "cir_img"
mmcblk0p41: 02de6000  00000200  "reserve"
mmcblk0p42: 01000000  00000200  "boot"
mmcblk0p43: 01800000  00000200  "recovery"
mmcblk0p44: 05800000  00000200  "reserve_3"
mmcblk0p45: a8000000  00000200  "system"
mmcblk0p46: 18000000  00000200  "cache"
mmcblk0p47: 58000000  00000200  "userdata"

Sprint_M8_1.12.651.17_system_dump.zip

boot.img (dumped from /dev/block/mmcblk0p42)

hboot.img (dumped from /dev/block/mmcblk0p11)

TWRP 2.7.0.5 (thanks to @jmz, @Flemmard, @Dees_Troy & @simonsickle)

Here's my quick and dirty guide to get root.

EDIT: Touch in recovery is now working so the above process is no longer necessary. The zips can now simply be flashed (you can get links the to SuperSU and Busybox by searching the forum or from the above, no longer needed guide)

How to bring back Mobile Sharing Settings after rooted

Unsecured boot.img with init.d support


There are quite a few compatible mods in the "regular" (International) One M8 section, so take a look over there if there's anything specific you're missing. It might already be made ;).
 

Attachments

  • hboot.img.zip
    474.3 KB · Views: 755
Last edited:

Captain_Throwback

Recognized Developer
Thanks to jmztaylor and Flemmard as they're the ones that got recovery (kind of) working. It at least boots and I can perform adb operations when connected to my Ubuntu machine.

Rumrunner appears to have failed on me, twice. I'll try one more time before calling it, but I did hear that beaups has an M8 and is working on S-OFF for it, so that's good news.
 

Captain_Throwback

Recognized Developer
UPDATE: I revised the TWRP link as I tried flashing the version I uploaded and it wouldn't actually allow me to boot into recovery. It would boot if you did a "fastboot boot recovery.img", but that was it. The version I posted now will flash and adb should work correctly in Linux (at least it works in my Ubuntu distro). Sorry for any inconvenience.
 
  • Like
Reactions: volk9029

Captain_Throwback

Recognized Developer
Alright I said I wasn't going to do a guide. I will however give you the steps I took to get root on my device. You should be able to get clarification on any steps by searching and learning from this site or "the Google."
  1. Unlocked device via HTCDev.
  2. Fastboot flashed TWRP Recovery.
  3. Downloaded SuperSU and flashable Busybox (1.21.1-linusyang WITH symlinks), copied to storage.
  4. Created openrecoveryscript to flash SuperSU and Busybox zips.
  5. adb pushed openrecoveryscript to device.
  6. adb rebooted recovery, watched as zips installed and device rebooted.
  7. ...
  8. Profit!
That's my quick and dirty procedure. Hopefully it helps a few more people get root, until we have a proper procedure/fully working recovery and/or (hopefully) S-OFF.

EDIT: I attached a sample of the openrecoveryscript I used. If you use an editor like Notepad++ in Windows or any Linux-based file editor, you can change the path to correspond to your file locations and just push this script (instead of starting from scratch).
 

Attachments

  • openrecoveryscript.txt
    86 bytes · Views: 131
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 42
    Just got mine and figured I'd upload this if anyone wants to take a look at it. I'm in the process of uploading the dump and will post interesting tidbits as I come across them.

    I noticed that the Tethering UI is disabled by default, which I do not like at all.

    I also see that all of the partitions are defined and labeled in proc/emmc, which is a pleasant change from my previous device.

    build.prop contents:
    Code:
    ro.ril.oem.ecclist=911
    ro.ril.hsdpa.category=14
    ro.ril.hsupa.category=6
    ro.ril.hsxpa=4
    ro.ril.disable.fd.plmn.prefix=23402,23410,23411,23420
    ro.ril.enable.sdr=0
    ro.ril.set.mtusize=1422
    ro.ril.disable.cpc=1
    ro.product.locale.language=en
    ro.product.locale.region=US
    ro.com.google.clientidbase=android-htc
    ro.com.google.clientidbase.yt=android-sprint-mvno-us
    ro.com.google.clientidbase.am=android-sprint-mvno-us
    ro.com.google.clientidbase.ms=android-sprint-mvno-us
    ro.wifi.hotspotUI=0
    ro.bt.tetheringUI=0
    ro.usb.tetheringUI=0
    ro.product.brand=htc
    ro.product.model=831C
    ro.cdma.home.operator.alpha=HTC
    gsm.sim.operator.alpha=Chameleon
    gsm.operator.alpha=Chameleon
    ro.cdma.home.operator.numeric=000000
    gsm.sim.operator.numeric=000000
    gsm.operator.numeric=000000
    gsm.sim.operator.iso-country=us
    gsm.operator.iso-country=us
    ro.net.apnwhitelist=admin
    ro.htc.checkin.delay=0
    ro.telephony.ipv6_capability=1
    dev.defaultwallpaper=/system/customize/resource/wallpapers_00.jpg
    # begin build properties
    htc.build.stage=2
    ro.aa.rid=205
    ro.cwkey=SPCS_001
    ro.aa.skulist=651
    ro.aa.customizationid=695578
    ro.aa.taskid=356100
    ro.aa.romver=1.12.651.17
    ro.aa.project=M8_WHL_K44_SENSE60_SPCS_SECURITY
    ro.onecid=1
    ro.aa.mainsku=651
    ro.aa.modelid=0P6B70000
    ro.prot=true
    ro.aa.maincid=SPCS_001
    ro.aa.report=com
    ro.aa.cidlist=SPCS_001
    # autogenerated by buildinfo.sh
    ro.build.id=KOT49H
    ro.build.display.id=KOT49H release-keys
    ro.build.version.incremental=318427.17
    ro.build.version.sdk=19
    ro.build.version.codename=REL
    ro.build.version.release=4.4.2
    ro.build.date=四  2月 27 11:25:04 CST 2014
    ro.build.date.utc=1393471504
    ro.build.type=user
    ro.build.user=buildteam
    ro.build.host=abm010
    ro.build.tags=release-keys
    ro.product.brand=htc
    ro.product.name=sprint_wwe
    ro.product.device=htc_m8whl
    ro.product.board=MSM8974
    ro.product.cpu.abi=armeabi-v7a
    ro.product.cpu.abi2=armeabi
    ro.product.manufacturer=HTC
    ro.product.locale.language=en
    ro.product.locale.region=US
    ro.wifi.channels=
    ro.board.platform=msm8974
    # ro.build.product is obsolete; use ro.product.device
    ro.build.product=htc_m8whl
    ro.build.description=1.12.651.17 CL318427 release-keys
    # Do not try to parse ro.build.description or .fingerprint
    ro.build.description=1.12.651.17 CL318427 release-keys
    ro.build.changelist=318427
    ro.build.fingerprint=htc/sprint_wwe/htc_m8whl:4.4.2/KOT49H/318427.17:user/release-keys
    ro.build.characteristics=default
    ro.build.project=M8_WHL_K44_SENSE60_SPCS_SECURITY:356100
    ro.build.sku=Sprint WWE
    ro.product.version=1.12.651.17
    ro.build.languageremove=0
    ro.build.sense.version=6.0
    ro.build.version.htcsdk=HTCExt:HTCExtension_Sense60_442_1;SDK:6.17;hdkbase:19.1
    ro.build.description=1.12.651.17 CL318427 release-keys
    ro.build.fingerprint=htc/sprint_wwe/htc_m8whl:4.4.2/KOT49H/318427.17:user/release-keys
    keyguard.no_require_sim=1
    # end build properties
    #
    # from device/htc/htc_m8whl/system.prop
    #
    #
    # system.prop for msm8974
    #
    
    rild.libpath=/vendor/lib/libril-qc-qmi-1.so
    rild.libargs=-d /dev/smd0
    persist.rild.nitz_plmn=
    persist.rild.nitz_long_ons_0=
    persist.rild.nitz_long_ons_1=
    persist.rild.nitz_long_ons_2=
    persist.rild.nitz_long_ons_3=
    persist.rild.nitz_short_ons_0=
    persist.rild.nitz_short_ons_1=
    persist.rild.nitz_short_ons_2=
    persist.rild.nitz_short_ons_3=
    ril.subscription.types=NV,RUIM
    DEVICE_PROVISIONED=1
    # Default network type.
    # 10 =>  LTE/CDMA/EvDo/GSM/WCDMA mode preferred.
    ro.telephony.default_network=8
    
    #
    # system props for display
    #
    debug.sf.hw=1
    debug.egl.hw=1
    debug.composition.type=gpu
    persist.hwc.mdpcomp.enable=true
    ro.hwui.renderer.disable_opaque=true
    ro.sf.lcd_density=480
    debug.mdpcomp.logs=0
    
    # Display Info
    ro.product.display_resolution = 5 inch 1080p resolution
    
    dalvik.vm.heapsize=512m
    dalvik.vm.heapgrowthlimit=192m
    dalvik.vm.heapstartsize=8m
    dalvik.vm.heapmaxfree=8m
    dalvik.vm.heapminfree=2m
    
    dev.pm.dyn_samplingrate=1
    persist.demo.hdmirotationlock=false
    
    
    # +SSD_RIL
    ro.baseband.arch=msm
    
    # system property for RIL snapshot feature/timer
    persist.radio.snapshot_enabled = 1
    persist.radio.snapshot_timer = 22
    # -SSD_RIL
    
    ro.hdmi.enable=true
    tunnel.decode=true
    tunnel.audiovideo.decode=true
    lpa.decode=true
    lpa.use-stagefright=true
    persist.speaker.prot.enable=false
    qcom.hw.aac.encoder=true
    use.voice.path.for.pcm.voip=true
    #
    # system props for the cne module
    #
    persist.cne.feature=1
    
    #system props for the MM modules
    
    media.stagefright.enable-player=true
    media.stagefright.enable-http=true
    media.stagefright.enable-aac=true
    media.stagefright.enable-qcp=true
    media.stagefright.enable-fma2dp=true
    media.stagefright.enable-scan=true
    mmp.enable.3g2=true
    mm.enable.smoothstreaming=true
    media.aac_51_output_enabled=true
    #37491 is decimal sum of supported codecs in AAL
    #codecs: AVI AC3 ASF AAC QCP DTS 3G2 MP2TS
    mm.enable.qcom_parser=37491
    
    # VIDC: debug_levels
    # 1:ERROR 2:HIGH 4:LOW 0:NOLOGS 7:AllLOGS
    vidc.debug.level=3
    #
    # system props for the data modules
    #
    ro.use_data_netmgrd=true
    persist.data.netmgrd.qos.enable=true
    ro.data.large_tcp_window_size=true
    
    #system props for time-services
    persist.timed.enable=true
    
    # System props for audio
    # System props for soundhound
    persist.htc.audio.pcm.samplerate=48000
    persist.htc.audio.pcm.channels=2
    
    # System prop to select audio resampler quality
    af.resampler.quality=4
    
    # System props for global effect
    htc.audio.global.state=0
    htc.audio.global.profile=0
    htc.audio.q6.topology=0
    htc.audio.global.speaker=1
    
    #
    # system prop for opengles version
    #
    # 196608 is decimal for 0x30000 to report version 3
    ro.opengles.version=196608
    
    #
    # system prop for Bluetooth Dialup Networking
    #
    ro.qualcomm.bluetooth.dun=false
    
    # system prop for Bluetooth FTP profile
    ro.qualcomm.bluetooth.ftp=true
    #
    # system property for Bluetooth Handsfree Profile Wide Band Speech
    #
    ro.qualcomm.bluetooth.hfp.wbs=false
    #
    #system prop for Bluetooth hci transport
    ro.qualcomm.bt.hci_transport=smd
    #
    # system prop for requesting Master role in incoming Bluetooth connection.
    #
    ro.bluetooth.request.master=true
    #
    # system prop for Bluetooth Auto connect for remote initated connections
    #
    ro.bluetooth.remote.autoconnect=true
    # system property for Bluetooth discoverability time out in seconds
    # 0: Always discoverable
    #debug.bt.discoverable_time=0
    
    # system property for Bluetooth Hardware information
    ro.product.bluetooth=4.0
    
    # config fm rssi threshold
    #service.qct.fm.rssi=116
    #SSD_BT- bluetooth
    
    # system property for qcom Bluetooth stack
    ro.qc.bluetooth.stack=bluedroid
    
    # system property for bdaddr
    ro.bt.bdaddr_path = /sys/module/htc_bdaddress/parameters/bdaddress
    
    # BLE TAG (HtcBluetoothLeProfiles)
    ro.bt.ble_tag = 1
    # System property for cabl
    #ro.qualcomm.cabl=1
    
    #Hardware info - Bluetooth
    ro.bt.chipset = Qualcomm WCN3680
    ro.bt.profiles = 12806403
    ro.bt.stack.version = 2.0
    ro.bt.stack = Bluedroid
    ro.bt.version = 4.0
    ro.product.bluetooth=4.0
    
    #+ willy_fu 20130924, enable it for JB 4.3 projects 
    # Property for TelephonyManager.getLteOnCdmaModeStatic API
    # System props for telephony
    # System prop to turn on CdmaLTEPhone always
    #+ SSD_RIL: disable default value by MASD request
    telephony.lteOnCdmaDevice=1
    #- SSD_RIL: disable default value by MASD request
    #- willy_fu 20130924
    
    #Simulate sdcard on /data/media
    #
    persist.fuse_sdcard=true
    # ro.storage_structure: define the storage structure of this project
    # FUSE: 0x8, FAT: 0x4, SD: 0x2, INS: 0x1
    # Example: If the project has FUSE with SD card, the value should be defined as 10 (dec)
    ro.storage_structure = 10
    
    # ro.storage_encryption_type: define the storage encryption type of this project
    # not support encryption: 0x0 block level: 0x1 file level: 0x2
    ro.storage_encryption_type = 2
    #For usb storage
    ro.usb_host = 1
    #
    #snapdragon value add features
    #
    ro.qc.sdk.audio.ssr=false
    ##fluencetype can be "fluence" or "fluencepro" or "none"
    ro.qc.sdk.audio.fluencetype=none
    ro.qc.sdk.sensors.gestures=true
    ro.qc.sdk.gestures.camera=false
    ro.qc.sdk.camera.facialproc=false
    #property to enable user to access Google WFD settings.
    persist.debug.wfd.enable=1
    #property to choose between virtual/external wfd display
    persist.sys.wfd.virtual=0
    
    # Following property will be reference by Settings.
    ro.product.main_camera = HTC UltraPixel Camera
    ro.product.front_camera = 5M
    
    # Support HW rest
    ro.product.hwreset = 1
    ro.product.hwreset.timer1 = 6
    ro.product.hwreset.timer2 = 9
    
    # M8 HW info
    ro.product.ram = 2GB
    
    # wifi
    wifi.softap.interface=wlan0
    wifi.softapconcurrent.interface=softap.0
    wifi.miracastconcurrent.scan=WCN3680
    init.svc.wpa_supplicant=
    init.svc.dhcpcd_wlan0=
    dhcp.wlan0.autoip=
    dhcp.wlan0.dns1=
    dhcp.wlan0.dns2=
    dhcp.wlan0.dns3=
    dhcp.wlan0.dns4=
    dhcp.wlan0.gateway=
    dhcp.wlan0.ipaddress=
    dhcp.wlan0.leasetime=
    dhcp.wlan0.mask=
    dhcp.wlan0.ooxx=
    dhcp.wlan0.pid=
    dhcp.wlan0.reason=
    dhcp.wlan0.result=
    dhcp.wlan0.server=
    net.wlan0.dns1=
    net.wlan0.dns2=
    wifi.wpa_supp_ready=
    wlan.driver.status=
    wifi.interface=wlan0
    wifi.supplicant_scan_interval=15
    persist.wifi.v6=true
    persist.wifi.v6.rs.count=5
    persist.wifi.v6.rs.timeout=5
    ro.product.wifi = 802.11 a/b/g/n/ac
    sys.stt.ssr.no_prompt=1
    tunnel.audio.encode = true
    
    # ro.storage_encryption_type: define the storage encryption type of this project
    # not support encryption: 0x0 block level: 0x1 file level: 0x2
    ro.storage_encryption_type = 2
    
    
    #
    # ADDITIONAL_BUILD_PROPERTIES
    #
    persist.preload.common=1
    persist.zygote.preload_threads=3
    persist.camera.antibanding=60
    persist.camera.tuning_spec=htc
    ro.com.android.dataroaming=false
    persist.sys.logkit.ctrlcode=0
    keyguard.no_require_sim=true
    ro.config.ringtone=Ring_Synth_04.ogg
    ro.config.notification_sound=pixiedust.ogg
    ro.carrier=unknown
    drm.service.enabled=true
    ro.setupwizard.mode=OPTIONAL
    ro.com.google.gmsversion=4.4.2_r1
    ro.config.alarm_alert=Alarm_Classic.ogg
    ro.vendor.extension_library=/vendor/lib/libqc-opt.so
    persist.sys.dalvik.vm.lib=libdvm.so
    net.bt.name=Android
    dalvik.vm.stack-trace-file=/data/anr/traces.txt
    ro.qc.sdk.izat.premium_enabled=0
    ro.qc.sdk.izat.service_mask=0x0
    persist.gps.qc_nlp_in_use=0
    ro.gps.agps_provider=1

    Output of proc/emmc:
    Code:
    dev:        size     erasesize name
    mmcblk0p1: 00100000  00000200  "sbl1"
    mmcblk0p2: 076f7c00  00000200  "pg1fs"
    mmcblk0p3: 00004000  00000200  "board_info"
    mmcblk0p4: 00800000  00000200  "reserve_1"
    mmcblk0p5: 00040000  00000200  "mfg"
    mmcblk0p6: 017afc00  00000200  "pg2fs"
    mmcblk0p7: 00040000  00000200  "sbl1_update"
    mmcblk0p8: 00040000  00000200  "rpm"
    mmcblk0p9: 00200000  00000200  "tz"
    mmcblk0p10: 00008000  00000200  "sdi"
    mmcblk0p11: 00400000  00000200  "hboot"
    mmcblk0p12: 00500000  00000200  "sp1"
    mmcblk0p13: 00100000  00000200  "wifi"
    mmcblk0p14: 00008000  00000200  "ddr"
    mmcblk0p15: 00100000  00000200  "dsps"
    mmcblk0p16: 03c00400  00000200  "adsp"
    mmcblk0p17: 00500000  00000200  "wcnss"
    mmcblk0p18: 00800000  00000200  "radio_config"
    mmcblk0p19: 00180000  00000200  "fsg"
    mmcblk0p20: 04b00400  00000200  "radio"
    mmcblk0p21: 00400000  00000200  "tool_diag"
    mmcblk0p22: 03200000  00000200  "custdata"
    mmcblk0p23: 00effc00  00000200  "reserve_2"
    mmcblk0p24: 00100000  00000200  "misc"
    mmcblk0p25: 00180000  00000200  "modem_st1"
    mmcblk0p26: 00180000  00000200  "modem_st2"
    mmcblk0p27: 01400000  00000200  "fataldevlog"
    mmcblk0p28: 00001000  00000200  "debug_config"
    mmcblk0p29: 00040000  00000200  "pdata"
    mmcblk0p30: 00004000  00000200  "control"
    mmcblk0p31: 00140400  00000200  "local"
    mmcblk0p32: 00010000  00000200  "extra"
    mmcblk0p33: 00100000  00000200  "cdma_record"
    mmcblk0p34: 00000400  00000200  "fsc"
    mmcblk0p35: 00002000  00000200  "ssd"
    mmcblk0p36: 00040000  00000200  "skylink"
    mmcblk0p37: 01900000  00000200  "carrier"
    mmcblk0p38: 00040000  00000200  "sensor_hub"
    mmcblk0p39: 01e00000  00000200  "devlog"
    mmcblk0p40: 00002800  00000200  "cir_img"
    mmcblk0p41: 02de6000  00000200  "reserve"
    mmcblk0p42: 01000000  00000200  "boot"
    mmcblk0p43: 01800000  00000200  "recovery"
    mmcblk0p44: 05800000  00000200  "reserve_3"
    mmcblk0p45: a8000000  00000200  "system"
    mmcblk0p46: 18000000  00000200  "cache"
    mmcblk0p47: 58000000  00000200  "userdata"

    Sprint_M8_1.12.651.17_system_dump.zip

    boot.img (dumped from /dev/block/mmcblk0p42)

    hboot.img (dumped from /dev/block/mmcblk0p11)

    TWRP 2.7.0.5 (thanks to @jmz, @Flemmard, @Dees_Troy & @simonsickle)

    Here's my quick and dirty guide to get root.

    EDIT: Touch in recovery is now working so the above process is no longer necessary. The zips can now simply be flashed (you can get links the to SuperSU and Busybox by searching the forum or from the above, no longer needed guide)

    How to bring back Mobile Sharing Settings after rooted

    Unsecured boot.img with init.d support


    There are quite a few compatible mods in the "regular" (International) One M8 section, so take a look over there if there's anything specific you're missing. It might already be made ;).
    13
    Alright I said I wasn't going to do a guide. I will however give you the steps I took to get root on my device. You should be able to get clarification on any steps by searching and learning from this site or "the Google."
    1. Unlocked device via HTCDev.
    2. Fastboot flashed TWRP Recovery.
    3. Downloaded SuperSU and flashable Busybox (1.21.1-linusyang WITH symlinks), copied to storage.
    4. Created openrecoveryscript to flash SuperSU and Busybox zips.
    5. adb pushed openrecoveryscript to device.
    6. adb rebooted recovery, watched as zips installed and device rebooted.
    7. ...
    8. Profit!
    That's my quick and dirty procedure. Hopefully it helps a few more people get root, until we have a proper procedure/fully working recovery and/or (hopefully) S-OFF.

    EDIT: I attached a sample of the openrecoveryscript I used. If you use an editor like Notepad++ in Windows or any Linux-based file editor, you can change the path to correspond to your file locations and just push this script (instead of starting from scratch).
    11
    Okay TWRP link in OP is updated.

    Dees_Troy said he's building another one with proper device name which should be done in 30 minutes or so, but that won't affect functionality at all.
    9
    No. I did search. Earlier in the thread you said we can replace files in recovery and they'll persist. But I asked if there was a KERNEL MODULE that disables write protection so /system changes can be made while fully booted and will persist. As best I can tell, there is not. Despite that, thanks for your work so far.
    See below.

    There is a Module in the the HTC One M8 forum, but it requires init.d support
    There is a guide linked in that thread for people without init.d support to get it working, I thought. At any rate, I guess I can upload the boot.img I'm using that has init.d support included so all can enjoy it ;). It will require you to have Busybox installed, which I believe everyone that's rooted from this thread should.

    EDIT: Zip file attached. It can be flashed via HBOOT (if you're unlocked, of course), fastboot flashed via RUU mode, or extracted from the zip and the image fastboot flashed that way. Boot image has been unsecured, init.d support has been added, and I added an additional symlink to external storage so that all apps will see it properly (if you use Titanium Backup, you'll see what I mean).
    8
    @Captain_Throwback do you know if the kernel changed in the update? If so, could you modify it to be unsecure and add in init.d support?
    I uploaded this just now. Head over to my firmware thread (linked through baseband/PRI in my XDA Sig) and you can grab it from there.

    I also uploaded my stock rooted here: http://themikmik.com/showthread.php?16276-SPRINT-ROM-M8WHL-Stock-Rooted-Base-1-54-651-8