Any hope for a ENG HBOOT?

Search This thread

isdnmatt

Senior Member
Jan 30, 2007
341
59
Do we have any hope of finding an ENG HBOOT? I would really like to change my modelid back to stock.
 

andybones

Retired Forum Moderator / Inactive RD
May 18, 2010
15,092
15,480
Google Pixel 5
I checked the HBOOT and it's listed as PN0731000, not as PN073**** as listed in bootloader.

PN073**** = SuperMID

those who are S-OFF threw sonic have it, with the only way to get it back to stock is with ENG hboot, or maybe you can flash the RUU go back to S-ON then use rumrunner if you REALLY wanted it back to stock.

 

isdnmatt

Senior Member
Jan 30, 2007
341
59
PN073**** = SuperMID

those who are S-OFF threw sonic have it, with the only way to get it back to stock is with ENG hboot, or maybe you can flash the RUU go back to S-ON then use rumrunner if you REALLY wanted it back to stock.


Yes, I know the significance of this MID. I doubt that the RUU will overwrite the modelid. I believe ENG HBOOT is the only way.
 

isdnmatt

Senior Member
Jan 30, 2007
341
59

No, but setting it back to S-ON, *may* change it.

When S-OFF'd by Sonic's method, the JavaCard cleared the block (I believe it's referred to as the s26 block) which contains things like the S flag, MID, and CID. Turning S-ON will change the flag, but will not write the MID because it can be one of several MIDs (since the ONE is on several carriers).
 

scotty1223

Inactive Recognized Contributor
Jan 3, 2011
2,813
3,056
Yes, I know the significance of this MID. I doubt that the RUU will overwrite the modelid. I believe ENG HBOOT is the only way.
it prolly can be hex edited. we just need to find the block hboot is reporting from. ive been meaning to look into this for you guys,lol.. just have been busy lately.



No, but setting it back to S-ON, *may* change it.
nope... cid and mid will remain unchanged when you s on.

as far as the eng hboot,i *think* you can use the one from the dna forum,that the other one folks have used. it works on the sprint variant,and since sonic has flashed the gsm 1.44 hboot i would venture to guess it would work here too. despite that, id not really recomend trying it. it wont boot the phone due to the partition differences,and it is a freakish experience,as sometimes you dont see a bootloader,just a grey screen.

if you hang in there well look for the mid block.

if someone has one thats going back anyway,you can try it. youll need to:
-make up your own zip file to install the eng hboot
-fastboot oem writemid xxxxx
-immediately reinstall your old hboot,so have a copy of that ready and in your fastboot directory ;)
 

isdnmatt

Senior Member
Jan 30, 2007
341
59
it prolly can be hex edited. we just need to find the block hboot is reporting from. ive been meaning to look into this for you guys,lol.. just have been busy lately.



nope... cid and mid will remain unchanged when you s on.

as far as the eng hboot,i *think* you can use the one from the dna forum,that the other one folks have used. it works on the sprint variant,and since sonic has flashed the gsm 1.44 hboot i would venture to guess it would work here too. despite that, id not really recomend trying it. it wont boot the phone due to the partition differences,and it is a freakish experience,as sometimes you dont see a bootloader,just a grey screen.

if you hang in there well look for the mid block.

if someone has one thats going back anyway,you can try it. youll need to:
-make up your own zip file to install the eng hboot
-fastboot oem writemid xxxxx
-immediately reinstall your old hboot,so have a copy of that ready and in your fastboot directory ;)

Really? People are flashing the DNA HBOOT? Might be an easy way out.

Just to confirm, those who are stock or S-OFF'd with rum show MID: PN07100?

EDIT: I see now. Can flash anything in the 8064 group of HBOOTs.
 
Last edited:

scotty1223

Inactive Recognized Contributor
Jan 3, 2011
2,813
3,056
Really? People are flashing the DNA HBOOT? Might be an easy way out.

Just to confirm, those who are stock or S-OFF'd with rum show MID: PN07100?

EDIT: I see now. Can flash anything in the 8064 group of HBOOTs.

someone with a stock mid should show PN731000.

can one of ya whose s-offed by sonic dump mmcblk0p6,please?

i havent been back to the otehr thread yet,but ill download and check your other 2 hboots when i get a minute. i just got home for the evening :)
 
  • Like
Reactions: isdnmatt

kdj67f

Senior Member
Jan 23, 2008
665
72
Maple Valley
I could get a dump uploaded tonight if you guys want. I'm java card s-offed by Sonic and running the stock Rom still. Let me know and I'll see what I can do after supper!

Sent from my HTC6500LVW using XDA Premium 4 mobile app
 

scotty1223

Inactive Recognized Contributor
Jan 3, 2011
2,813
3,056
That's cool,take your time. Im bout out for the evening,so I won't look At it till tomoro. :)

Sent from my HTC One using Tapatalk
 
  • Like
Reactions: kdj67f

scotty1223

Inactive Recognized Contributor
Jan 3, 2011
2,813
3,056
dammit! out of thanks on the PC :mad:

thanks to the dumps from kdj67f and davehasninjas ive located the mid in p6.i think the next step is to falsh the eng hboot on my one,change the mid,and then verify what i think will change. at that point,its just a simply hex edit or adb command to change back :)
 

scotty1223

Inactive Recognized Contributor
Jan 3, 2011
2,813
3,056
dammit! out of thanks on the PC :mad:

thanks to the dumps from kdj67f and davehasninjas ive located the mid in p6.i think the next step is to falsh the eng hboot on my one,change the mid,and then verify what i think will change. at that point,its just a simply hex edit or adb command to change back :)

i have now installed the eng hboot,made a copy of the oem commands,and changed the mid. the good news is that i observed the change i thot would occur. the bad news is that i thot i had bricked my phone for a few minutes :eek:

upon re-installing my stock hboot,the phone just looped on the splash screen. i installed the eng hboot again,changed the mid back to to mobile,still bootloop. luckily an ruu fixed it. *sigh of relief*

not sure what happend. still shaking from the ordeal and 5am comes early,so i think im calling it quits for tonite :p. ill try to hex edit the mid tomorrow or sat,and see if hboot observes the change,and if i still get a bootloop. despite the scare,weve made some progress :)

edit:
almost forgot... if youre wondering the difference between an eng and ship hboot,here you go:

ship:
Code:
C:\Users\Scott>fastboot oem ?
                              ... INFOcommand list
INFOdmesg
INFOlast_dmesg
INFOclearaspflag
INFOrefurbish
INFOget_identifier_token
INFOcheckKeycardID
INFOget_tamper_flag
INFOcheckSbl1
INFOcheckHWSecurity
INFOenter
INFOkeytest
INFOheap
INFOboot
INFOreset
INFOpowerdown
INFOrebootRUU
INFOheap_test
INFOerase_phone_storage
INFOerase_nfc_record
INFOgotohboot
INFOresetgift
INFOats
INFOrtask
INFOtask
INFOenableqxdm
INFOgencheckpt
INFOreadmeid
INFOreadpid
INFOwritepid
INFOreadcid
INFOwritecid
INFOreadimei
INFOwriteimei
INFOreadsecureflag
INFOwritesecureflag
INFOddr2gbh
INFOramdump2gbh
INFOddr2gstatus
INFOget_temp
INFOwritemeid
INFOlock
INFOreadusername
INFOwriteusername
INFOresethtcdebugflag
INFOload_emmc
INFOcheck_emmc_mid
INFOread_mmc
INFOload_modem_emmc
INFOget_wp_info_emmc
INFOsend_wp_info_emmc
INFOget_ext_csd_emmc
INFOget_sector_info_emmc
OKAY [  0.081s]
finished. total time: 0.081s

C:\Users\Scott>
eng(engineering):
Code:
(bootloader) command list
(bootloader) mb
(bootloader) mh
(bootloader) mw
(bootloader) ew
(bootloader) eh
(bootloader) eb
(bootloader) mmu
(bootloader) ram_test
(bootloader) jump
(bootloader) test
(bootloader) sdtest
(bootloader) eraseconfig
(bootloader) writeconfig
(bootloader) readconfig
(bootloader) writesku
(bootloader) readsku
(bootloader) rflash
(bootloader) tflash
(bootloader) block_test
(bootloader) partition_test
(bootloader) rbchk
(bootloader) erasesd
(bootloader) btrouter
(bootloader) onesegrouter
(bootloader) tdmbrouter
(bootloader) nfcrouter
(bootloader) nfcreader
(bootloader) nfccard
(bootloader) nfcversion
(bootloader) nfcmodel
(bootloader) nfcdl
(bootloader) nfctransaction
(bootloader) felicahelp
(bootloader) felicaponhigh
(bootloader) felicaponlow
(bootloader) felicacenhigh
(bootloader) felicacenlow
(bootloader) felicarouter
(bootloader) felicachipidm
(bootloader) felicareader
(bootloader) felicacard
(bootloader) felicaversion
(bootloader) felicasetreg
(bootloader) felicasetparam
(bootloader) felicasetedcreg
(bootloader) felicagetreg
(bootloader) felicagetparam
(bootloader) felicachkpin
(bootloader) cir_fwup
(bootloader) snfchselhigh
(bootloader) snfchsellow
(bootloader) snfcversion
(bootloader) snfccard
(bootloader) snfcreader
(bootloader) snfcsetparam
(bootloader) snfchwreset
(bootloader) tick
(bootloader) heaptable
(bootloader) sysinfo
(bootloader) emapi
(bootloader) emapiTest
(bootloader) emapiCountryID
(bootloader) emapiWlanMac
(bootloader) emapiSetDefCal
(bootloader) emapiReadCal
(bootloader) lr
(bootloader) imgcrc
(bootloader) resetautoimage
(bootloader) resetpreferdiag
(bootloader) resetRUUflag
(bootloader) writeserialno
(bootloader) readserialno
(bootloader) battcheck
(bootloader) battinfo
(bootloader) enter
(bootloader) gotofastboot
(bootloader) writemid
(bootloader) usbtestmode
(bootloader) eraseWifiFlash
(bootloader) erase
(bootloader) readmbserialno
(bootloader) listpartition
(bootloader) erasebcid
(bootloader) writebcid
(bootloader) readbcid
(bootloader) eraseColorID
(bootloader) writeColorID
(bootloader) readColorID
(bootloader) fmrouter
(bootloader) fmtx
(bootloader) resetuP
(bootloader) bdaddress
(bootloader) readbdaddr
(bootloader) wMfgTp
(bootloader) rMfgTp
(bootloader) emptypagecheck
(bootloader) saveprt2sd
(bootloader) savemem2sd
(bootloader) savefb2sd
(bootloader) emapiInit
(bootloader) emapiChannel
(bootloader) emapiBand
(bootloader) emapiRate
(bootloader) emapiRateset
(bootloader) emapiCountry
(bootloader) emapiTXpwr1
(bootloader) emapiPkteng_start
(bootloader) emapiPkteng_stop
(bootloader) emapiOut
(bootloader) emapiFqacurcy
(bootloader) emapiCrsuprs
(bootloader) emapiUp
(bootloader) emapiDown
(bootloader) emapiMpc
(bootloader) emapiCounters
(bootloader) emapiVersion
(bootloader) emapiEtheraddr
(bootloader) emapinRate
(bootloader) emapiPhy_forcecal
(bootloader) emapi2gRate
(bootloader) emapi5gRate
(bootloader) emapiMimo_bw_cap
(bootloader) emapiMimo_txbw
(bootloader) emapiChanspec
(bootloader) emapiRevinfo
(bootloader) emapiSetIrqPin
(bootloader) usblog
(bootloader) bkflash2emmc
(bootloader) fl
(bootloader) loaddiag
(bootloader) lnb
(bootloader) init_a1026_fw
(bootloader) checkKeyCard
(bootloader) loopback
(bootloader) spitest
(bootloader) i2ctest
(bootloader) pmic8921_led_test
(bootloader) pmic8921_haptic_test
(bootloader) gpiow
(bootloader) gpior
(bootloader) clock
(bootloader) i2cr
(bootloader) i2cw
(bootloader) i2ctest
(bootloader) ulpi
(bootloader) changeCid
(bootloader) powertest
(bootloader) read_l2_acc_fuse
(bootloader) ltetest
(bootloader) sdio_loopback
(bootloader) sdio_setsize
(bootloader) sdio_readblk
(bootloader) sdio_writeblk
(bootloader) sdio_readblk
(bootloader) sdio_dumpreg
(bootloader) get_mdm9k_serial
(bootloader) clear_mdm9k_serial
(bootloader) set_mdm9k_serial
(bootloader) update_prkey
(bootloader) update_wvkey
(bootloader) set_deviceid
(bootloader) update_dpkey
(bootloader) emmc_boot
(bootloader) 8x60i2cr
(bootloader) 8x60i2crNoAddr
(bootloader) 8x60i2cwNoAddr
(bootloader) 8x60i2cw
(bootloader) poweron
(bootloader) poweroff
(bootloader) setvol
(bootloader) spi
(bootloader) fat
(bootloader) pmgpiow
(bootloader) pmgpior
(bootloader) 8821vregon
(bootloader) 8821vregoff
(bootloader) 8821vregw
(bootloader) 8821vregr
(bootloader) 8821vregmodew
(bootloader) 8821vregmoder
(bootloader) 8821vregdump
(bootloader) 8821w
(bootloader) 8821r
(bootloader) 8921vregon
(bootloader) 8921vcinoff
(bootloader) 8921vregoff
(bootloader) 8921vregw
(bootloader) 8921vregr
(bootloader) getvol
(bootloader) gpiodump
(bootloader) 8921gpiodump
(bootloader) 8921mppdump
(bootloader) 8921vregmodew
(bootloader) 8921vregmoder
(bootloader) 8921vregdump
(bootloader) 8921w
(bootloader) 8921r
(bootloader) mipi_test
(bootloader) chargeron
(bootloader) chargeroff
(bootloader) adc
(bootloader) readsimlocktype
(bootloader) enablesimlock
(bootloader) addsimlockcode
(bootloader) clearsimlockcode
(bootloader) listsimlockcode
(bootloader) clearunlockrecord
(bootloader) lite_heap_test
(bootloader) vibrate_test
(bootloader) getrtc
(bootloader) setrtc
(bootloader) getrtcalarm
(bootloader) setrtcalarm
(bootloader) pgfs
(bootloader) bumpclk
(bootloader) acpuclk_get
(bootloader) acpuclk_set
(bootloader) rpmclk_set
(bootloader) rpmclk_get
(bootloader) oschalt
(bootloader) tz_req
(bootloader) blow_efuse
(bootloader) blow_qfuse_cfg
(bootloader) dump_tzlog
(bootloader) readjtagdisableflag
(bootloader) writejtagdisableflag
(bootloader) update_emmc_partition
(bootloader) test_emmc
(bootloader) sector_erase_emmc
(bootloader) fat_format_emmc
(bootloader) init_emmc
(bootloader) reinit_emmc
(bootloader) write_mmc
(bootloader) read_sandisk_fw
(bootloader) read_boardinfo
(bootloader) write_prot_test
(bootloader) set_enh_area_emmc
(bootloader) dmesg
(bootloader) last_dmesg
(bootloader) refurbish
(bootloader) get_identifier_token
(bootloader) checkKeycardID
(bootloader) get_tamper_flag
(bootloader) checkSbl1
(bootloader) checkHWSecurity
(bootloader) enter
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) erase_phone_storage
(bootloader) erase_nfc_record
(bootloader) gotohboot
(bootloader) resetgift
(bootloader) ats
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloader) readmeid
(bootloader) readpid
(bootloader) writepid
(bootloader) readcid
(bootloader) writecid
(bootloader) readimei
(bootloader) writeimei
(bootloader) readsecureflag
(bootloader) writesecureflag
(bootloader) ddr2gbh
(bootloader) ramdump2gbh
(bootloader) ddr2gstatus
(bootloader) get_temp
(bootloader) writemeid
(bootloader) lock
(bootloader) write_secsetting
(bootloader) read_secsetting
(bootloader) readusername
(bootloader) writeusername
(bootloader) resethtcdebugflag
(bootloader) load_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) load_modem_emmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [  0.386s]
finished. total time: 0.388s

c:\miniadb_m7>

lots of extra commands :)
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    dammit! out of thanks on the PC :mad:

    thanks to the dumps from kdj67f and davehasninjas ive located the mid in p6.i think the next step is to falsh the eng hboot on my one,change the mid,and then verify what i think will change. at that point,its just a simply hex edit or adb command to change back :)

    i have now installed the eng hboot,made a copy of the oem commands,and changed the mid. the good news is that i observed the change i thot would occur. the bad news is that i thot i had bricked my phone for a few minutes :eek:

    upon re-installing my stock hboot,the phone just looped on the splash screen. i installed the eng hboot again,changed the mid back to to mobile,still bootloop. luckily an ruu fixed it. *sigh of relief*

    not sure what happend. still shaking from the ordeal and 5am comes early,so i think im calling it quits for tonite :p. ill try to hex edit the mid tomorrow or sat,and see if hboot observes the change,and if i still get a bootloop. despite the scare,weve made some progress :)

    edit:
    almost forgot... if youre wondering the difference between an eng and ship hboot,here you go:

    ship:
    Code:
    C:\Users\Scott>fastboot oem ?
                                  ... INFOcommand list
    INFOdmesg
    INFOlast_dmesg
    INFOclearaspflag
    INFOrefurbish
    INFOget_identifier_token
    INFOcheckKeycardID
    INFOget_tamper_flag
    INFOcheckSbl1
    INFOcheckHWSecurity
    INFOenter
    INFOkeytest
    INFOheap
    INFOboot
    INFOreset
    INFOpowerdown
    INFOrebootRUU
    INFOheap_test
    INFOerase_phone_storage
    INFOerase_nfc_record
    INFOgotohboot
    INFOresetgift
    INFOats
    INFOrtask
    INFOtask
    INFOenableqxdm
    INFOgencheckpt
    INFOreadmeid
    INFOreadpid
    INFOwritepid
    INFOreadcid
    INFOwritecid
    INFOreadimei
    INFOwriteimei
    INFOreadsecureflag
    INFOwritesecureflag
    INFOddr2gbh
    INFOramdump2gbh
    INFOddr2gstatus
    INFOget_temp
    INFOwritemeid
    INFOlock
    INFOreadusername
    INFOwriteusername
    INFOresethtcdebugflag
    INFOload_emmc
    INFOcheck_emmc_mid
    INFOread_mmc
    INFOload_modem_emmc
    INFOget_wp_info_emmc
    INFOsend_wp_info_emmc
    INFOget_ext_csd_emmc
    INFOget_sector_info_emmc
    OKAY [  0.081s]
    finished. total time: 0.081s
    
    C:\Users\Scott>
    eng(engineering):
    Code:
    (bootloader) command list
    (bootloader) mb
    (bootloader) mh
    (bootloader) mw
    (bootloader) ew
    (bootloader) eh
    (bootloader) eb
    (bootloader) mmu
    (bootloader) ram_test
    (bootloader) jump
    (bootloader) test
    (bootloader) sdtest
    (bootloader) eraseconfig
    (bootloader) writeconfig
    (bootloader) readconfig
    (bootloader) writesku
    (bootloader) readsku
    (bootloader) rflash
    (bootloader) tflash
    (bootloader) block_test
    (bootloader) partition_test
    (bootloader) rbchk
    (bootloader) erasesd
    (bootloader) btrouter
    (bootloader) onesegrouter
    (bootloader) tdmbrouter
    (bootloader) nfcrouter
    (bootloader) nfcreader
    (bootloader) nfccard
    (bootloader) nfcversion
    (bootloader) nfcmodel
    (bootloader) nfcdl
    (bootloader) nfctransaction
    (bootloader) felicahelp
    (bootloader) felicaponhigh
    (bootloader) felicaponlow
    (bootloader) felicacenhigh
    (bootloader) felicacenlow
    (bootloader) felicarouter
    (bootloader) felicachipidm
    (bootloader) felicareader
    (bootloader) felicacard
    (bootloader) felicaversion
    (bootloader) felicasetreg
    (bootloader) felicasetparam
    (bootloader) felicasetedcreg
    (bootloader) felicagetreg
    (bootloader) felicagetparam
    (bootloader) felicachkpin
    (bootloader) cir_fwup
    (bootloader) snfchselhigh
    (bootloader) snfchsellow
    (bootloader) snfcversion
    (bootloader) snfccard
    (bootloader) snfcreader
    (bootloader) snfcsetparam
    (bootloader) snfchwreset
    (bootloader) tick
    (bootloader) heaptable
    (bootloader) sysinfo
    (bootloader) emapi
    (bootloader) emapiTest
    (bootloader) emapiCountryID
    (bootloader) emapiWlanMac
    (bootloader) emapiSetDefCal
    (bootloader) emapiReadCal
    (bootloader) lr
    (bootloader) imgcrc
    (bootloader) resetautoimage
    (bootloader) resetpreferdiag
    (bootloader) resetRUUflag
    (bootloader) writeserialno
    (bootloader) readserialno
    (bootloader) battcheck
    (bootloader) battinfo
    (bootloader) enter
    (bootloader) gotofastboot
    (bootloader) writemid
    (bootloader) usbtestmode
    (bootloader) eraseWifiFlash
    (bootloader) erase
    (bootloader) readmbserialno
    (bootloader) listpartition
    (bootloader) erasebcid
    (bootloader) writebcid
    (bootloader) readbcid
    (bootloader) eraseColorID
    (bootloader) writeColorID
    (bootloader) readColorID
    (bootloader) fmrouter
    (bootloader) fmtx
    (bootloader) resetuP
    (bootloader) bdaddress
    (bootloader) readbdaddr
    (bootloader) wMfgTp
    (bootloader) rMfgTp
    (bootloader) emptypagecheck
    (bootloader) saveprt2sd
    (bootloader) savemem2sd
    (bootloader) savefb2sd
    (bootloader) emapiInit
    (bootloader) emapiChannel
    (bootloader) emapiBand
    (bootloader) emapiRate
    (bootloader) emapiRateset
    (bootloader) emapiCountry
    (bootloader) emapiTXpwr1
    (bootloader) emapiPkteng_start
    (bootloader) emapiPkteng_stop
    (bootloader) emapiOut
    (bootloader) emapiFqacurcy
    (bootloader) emapiCrsuprs
    (bootloader) emapiUp
    (bootloader) emapiDown
    (bootloader) emapiMpc
    (bootloader) emapiCounters
    (bootloader) emapiVersion
    (bootloader) emapiEtheraddr
    (bootloader) emapinRate
    (bootloader) emapiPhy_forcecal
    (bootloader) emapi2gRate
    (bootloader) emapi5gRate
    (bootloader) emapiMimo_bw_cap
    (bootloader) emapiMimo_txbw
    (bootloader) emapiChanspec
    (bootloader) emapiRevinfo
    (bootloader) emapiSetIrqPin
    (bootloader) usblog
    (bootloader) bkflash2emmc
    (bootloader) fl
    (bootloader) loaddiag
    (bootloader) lnb
    (bootloader) init_a1026_fw
    (bootloader) checkKeyCard
    (bootloader) loopback
    (bootloader) spitest
    (bootloader) i2ctest
    (bootloader) pmic8921_led_test
    (bootloader) pmic8921_haptic_test
    (bootloader) gpiow
    (bootloader) gpior
    (bootloader) clock
    (bootloader) i2cr
    (bootloader) i2cw
    (bootloader) i2ctest
    (bootloader) ulpi
    (bootloader) changeCid
    (bootloader) powertest
    (bootloader) read_l2_acc_fuse
    (bootloader) ltetest
    (bootloader) sdio_loopback
    (bootloader) sdio_setsize
    (bootloader) sdio_readblk
    (bootloader) sdio_writeblk
    (bootloader) sdio_readblk
    (bootloader) sdio_dumpreg
    (bootloader) get_mdm9k_serial
    (bootloader) clear_mdm9k_serial
    (bootloader) set_mdm9k_serial
    (bootloader) update_prkey
    (bootloader) update_wvkey
    (bootloader) set_deviceid
    (bootloader) update_dpkey
    (bootloader) emmc_boot
    (bootloader) 8x60i2cr
    (bootloader) 8x60i2crNoAddr
    (bootloader) 8x60i2cwNoAddr
    (bootloader) 8x60i2cw
    (bootloader) poweron
    (bootloader) poweroff
    (bootloader) setvol
    (bootloader) spi
    (bootloader) fat
    (bootloader) pmgpiow
    (bootloader) pmgpior
    (bootloader) 8821vregon
    (bootloader) 8821vregoff
    (bootloader) 8821vregw
    (bootloader) 8821vregr
    (bootloader) 8821vregmodew
    (bootloader) 8821vregmoder
    (bootloader) 8821vregdump
    (bootloader) 8821w
    (bootloader) 8821r
    (bootloader) 8921vregon
    (bootloader) 8921vcinoff
    (bootloader) 8921vregoff
    (bootloader) 8921vregw
    (bootloader) 8921vregr
    (bootloader) getvol
    (bootloader) gpiodump
    (bootloader) 8921gpiodump
    (bootloader) 8921mppdump
    (bootloader) 8921vregmodew
    (bootloader) 8921vregmoder
    (bootloader) 8921vregdump
    (bootloader) 8921w
    (bootloader) 8921r
    (bootloader) mipi_test
    (bootloader) chargeron
    (bootloader) chargeroff
    (bootloader) adc
    (bootloader) readsimlocktype
    (bootloader) enablesimlock
    (bootloader) addsimlockcode
    (bootloader) clearsimlockcode
    (bootloader) listsimlockcode
    (bootloader) clearunlockrecord
    (bootloader) lite_heap_test
    (bootloader) vibrate_test
    (bootloader) getrtc
    (bootloader) setrtc
    (bootloader) getrtcalarm
    (bootloader) setrtcalarm
    (bootloader) pgfs
    (bootloader) bumpclk
    (bootloader) acpuclk_get
    (bootloader) acpuclk_set
    (bootloader) rpmclk_set
    (bootloader) rpmclk_get
    (bootloader) oschalt
    (bootloader) tz_req
    (bootloader) blow_efuse
    (bootloader) blow_qfuse_cfg
    (bootloader) dump_tzlog
    (bootloader) readjtagdisableflag
    (bootloader) writejtagdisableflag
    (bootloader) update_emmc_partition
    (bootloader) test_emmc
    (bootloader) sector_erase_emmc
    (bootloader) fat_format_emmc
    (bootloader) init_emmc
    (bootloader) reinit_emmc
    (bootloader) write_mmc
    (bootloader) read_sandisk_fw
    (bootloader) read_boardinfo
    (bootloader) write_prot_test
    (bootloader) set_enh_area_emmc
    (bootloader) dmesg
    (bootloader) last_dmesg
    (bootloader) refurbish
    (bootloader) get_identifier_token
    (bootloader) checkKeycardID
    (bootloader) get_tamper_flag
    (bootloader) checkSbl1
    (bootloader) checkHWSecurity
    (bootloader) enter
    (bootloader) keytest
    (bootloader) heap
    (bootloader) boot
    (bootloader) reset
    (bootloader) powerdown
    (bootloader) rebootRUU
    (bootloader) heap_test
    (bootloader) erase_phone_storage
    (bootloader) erase_nfc_record
    (bootloader) gotohboot
    (bootloader) resetgift
    (bootloader) ats
    (bootloader) rtask
    (bootloader) task
    (bootloader) enableqxdm
    (bootloader) gencheckpt
    (bootloader) readmeid
    (bootloader) readpid
    (bootloader) writepid
    (bootloader) readcid
    (bootloader) writecid
    (bootloader) readimei
    (bootloader) writeimei
    (bootloader) readsecureflag
    (bootloader) writesecureflag
    (bootloader) ddr2gbh
    (bootloader) ramdump2gbh
    (bootloader) ddr2gstatus
    (bootloader) get_temp
    (bootloader) writemeid
    (bootloader) lock
    (bootloader) write_secsetting
    (bootloader) read_secsetting
    (bootloader) readusername
    (bootloader) writeusername
    (bootloader) resethtcdebugflag
    (bootloader) load_emmc
    (bootloader) check_emmc_mid
    (bootloader) read_mmc
    (bootloader) load_modem_emmc
    (bootloader) get_wp_info_emmc
    (bootloader) send_wp_info_emmc
    (bootloader) get_ext_csd_emmc
    (bootloader) get_sector_info_emmc
    OKAY [  0.386s]
    finished. total time: 0.388s
    
    c:\miniadb_m7>

    lots of extra commands :)
    4
    WAIT? So you flashed ENG? I know you don't have a VZW ONE, but why you gotta get me excited? How did you flash the RUU while in bootloop?

    it was a bit tense for a couple minutes... holding power did not initinate a hard reset,but power/vol down did get me back to hboot. also when you "reboot-bootloader" it just shuts off,no power light,no nothing. looks alot like a processor "do not boot" mode. it was a horrible,terrible experience and id really recomend not messing with it. :eek:

    i belive the splash loop was somehow caused by the eng hboot. the mid change guide ends with running your ruu of choice,so i might have predicted this loop if id researched it further. changing via the adb command or hex edit did not casue any bootloops.

    i just wish id had the forsight to have made a more current backup :eek:

    the hex edit test was successful,as was the echo command. ive changed my mid to vzw,to international,back to t mobile.

    if anyone comfortable with adb,who is java card s offed with the funky mid would like to test:

    adb shell

    Code:
    [B]echo -ne '\x50\x00\x4e\x00\x30\x00\x37\x00\x33\x00\x31\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p6 bs=1 seek=16384[/B]
    (the above is one big long command. make sure you copy it all,and dont get extra spaces when you paste it.)

    exit

    adb reboot bootloader

    fastboot getvar mid (or getvar all)

    please do not type the command. copy/paste.

    ive tried it on my phone,but observe the usual disclaimers: if it kills your phone its not my fault.


    change to vzw
    Code:
    c:\miniadb_m7>[COLOR="red"]adb shell[/COLOR]
    root@m7:/ # [COLOR="Red"]echo -ne '\x50\x00\x4e\x00\x30\x00\x37\x00\x33\x00\x31\x00\x30\x00\x
    30\x00\x30' | dd of=/dev/block/mmcblk0p6 bs=1 seek=16384[/COLOR]
    00\x30' | dd of=/dev/block/mmcblk0p6 bs=1 seek=16384                          <
    17+0 records in
    17+0 records out
    17 bytes transferred in 0.009 secs (1888 bytes/sec)
    root@m7:/ # [COLOR="red"]exit[/COLOR]
    exit
    
    c:\miniadb_m7>[COLOR="red"]adb reboot bootloader[/COLOR]
    
    c:\miniadb_m7>[COLOR="red"]fastboot getvar all[/COLOR]
    (bootloader) version: 0.5
    (bootloader) version-bootloader: 1.44.0000
    (bootloader) version-baseband: 4A.17.3250.20
    (bootloader) version-cpld: None
    (bootloader) version-microp: None
    (bootloader) version-main: 1.27.531.8
    (bootloader) version-misc: PVT SHIP S-OFF
    (bootloader) serialno: HTxxxxxxxxxx
    (bootloader) imei: xxxxxxxxxxxxxxx
    (bootloader) meid: 00000000000000
    (bootloader) product: m7_ul
    (bootloader) platform: HBOOT-8064
    (bootloader) modelid: PN0731000  [COLOR="Blue"]<-looky[/COLOR]
    (bootloader) cidnum: 11111111
    (bootloader) battery-status: good
    (bootloader) battery-voltage: 4175mV
    (bootloader) partition-layout: Generic
    (bootloader) security: off
    (bootloader) build-mode: SHIP
    (bootloader) boot-mode: FASTBOOT
    (bootloader) commitno-bootloader: dirty-f188f379dbbfee373cd551f7bc62b8435
    getvar:all FAILED (unknown status code)
    finished. total time: 0.092s
    
    c:\miniadb_m7>[COLOR="Red"]fastboot reboot[/COLOR]
    rebooting...
    (bootloader) hbootpreupdate: 11
    
    finished. total time: 7.288s

    changing back to t mobile :)

    Code:
    c:\miniadb_m7>[COLOR="red"]adb shell[/COLOR]
    root@m7:/ # [COLOR="red"]echo -ne '\x50\x00\x4e\x00\x30\x00\x37\x00\x31\x00\x33\x00\x30\x00\x
    30\x00\x30' | dd of=/dev/block/mmcblk0p6 bs=1 seek=16384[/COLOR]
    00\x30' | dd of=/dev/block/mmcblk0p6 bs=1 seek=16384                          <
    17+0 records in
    17+0 records out
    17 bytes transferred in 0.009 secs (1888 bytes/sec)
    root@m7:/ # [COLOR="red"]exit[/COLOR]
    exit
    
    c:\miniadb_m7>[COLOR="red"]adb reboot bootloader[/COLOR]
    
    c:\miniadb_m7>[COLOR="red"]fastboot getvar mid[/COLOR]
    mid: PN0713000  [COLOR="Blue"]<- t mobile[/COLOR]
    finished. total time: 0.004s
    
    c:\miniadb_m7>[COLOR="red"]fastboot reboot[/COLOR]
    rebooting...
    
    finished. total time: 0.055s
    2
    Yes, I know the significance of this MID. I doubt that the RUU will overwrite the modelid. I believe ENG HBOOT is the only way.
    it prolly can be hex edited. we just need to find the block hboot is reporting from. ive been meaning to look into this for you guys,lol.. just have been busy lately.



    No, but setting it back to S-ON, *may* change it.
    nope... cid and mid will remain unchanged when you s on.

    as far as the eng hboot,i *think* you can use the one from the dna forum,that the other one folks have used. it works on the sprint variant,and since sonic has flashed the gsm 1.44 hboot i would venture to guess it would work here too. despite that, id not really recomend trying it. it wont boot the phone due to the partition differences,and it is a freakish experience,as sometimes you dont see a bootloader,just a grey screen.

    if you hang in there well look for the mid block.

    if someone has one thats going back anyway,you can try it. youll need to:
    -make up your own zip file to install the eng hboot
    -fastboot oem writemid xxxxx
    -immediately reinstall your old hboot,so have a copy of that ready and in your fastboot directory ;)
    2
    I could get a dump uploaded tonight if you guys want. I'm java card s-offed by Sonic and running the stock Rom still. Let me know and I'll see what I can do after supper!

    Sent from my HTC6500LVW using XDA Premium 4 mobile app
    2
    someone with a stock mid should show PN731000.

    can one of ya whose s-offed by sonic dump mmcblk0p6,please?

    i havent been back to the otehr thread yet,but ill download and check your other 2 hboots when i get a minute. i just got home for the evening :)

    Hey no rush, all of this is really just a luxury at this point. Thanks for taking the time.