[Script] AAHK2 - Root, Debrand, SIM Unlock, S-OFF, SuperCID & Custom Recovery

Search This thread
By:
Advanced…
P

Phiber2000

Senior Member
May 23, 2010
243
129
strwdle said:
...No image or wrong image!
Loading...PD98IMG.zip...
Click to expand...
Click to collapse
The hboot doesn't recognize the files on your sd card.
In most cases, it's just the wrong file system of the sd card. Mount it, format it with FAT32 (4KB sector size), safe remove, unmount. Then try again.
Everything else is already checked by the script.

Phiber
 
  • Like
Reactions: marknoll
S

strwdle

Member
Jun 27, 2015
5
0
Phiber2000 said:
The hboot doesn't recognize the files on your sd card.
In most cases, it's just the wrong file system of the sd card. Mount it, format it with FAT32 (4KB sector size), safe remove, unmount. Then try again.
Everything else is already checked by the script.

Phiber
Click to expand...
Click to collapse

Exactly, so the previous reply to my problem is not really any use? AAHK2 checks the file before writing it onto the SD Card...so it's something to do with the SD Card not the file. I have already tried formating it once..but how doe I specify 4kb sector size? (Windows)
 
P

Phiber2000

Senior Member
May 23, 2010
243
129
strwdle said:
...AAHK2 checks the file before writing it onto the SD Card...so it's something to do with the SD Card not the file....
Click to expand...
Click to collapse
Exactly! The md5 checksum is verified before writing it to the sd card.

strwdle said:
...I have already tried formating it once..but how doe I specify 4kb sector size? (Windows)
Click to expand...
Click to collapse
After mounting the sd card or connecting the card reader, choose "Format..." in the context menu of the drive. There you can choose capacity, file system and allocation unit size. The allocation unit size has to be set to 4kb or, if not available, to the lowest available value.
Previously this had always fixed this specific issue.

Phiber
 
  • Like
Reactions: marknoll
S

strwdle

Member
Jun 27, 2015
5
0
Phiber2000 said:
Exactly! The md5 checksum is verified before writing it to the sd card.


After mounting the sd card or connecting the card reader, choose "Format..." in the context menu of the drive. There you can choose capacity, file system and allocation unit size. The allocation unit size has to be set to 4kb or, if not available, to the lowest available value.
Previously this had always fixed this specific issue.

Phiber
Click to expand...
Click to collapse


EDIT and UPDATE: I found some software to format with 4kb allocation size and it still has the same errors! I've even tried a different SD Card. Argh!
 
Last edited:
P

Phiber2000

Senior Member
May 23, 2010
243
129
That's the right next step. If that fails, we'll need a remote date. :)
I'm curious about it.

Phiber
 
S

strwdle

Member
Jun 27, 2015
5
0
Thank You!

Can I just say a massive thanks to Phiber for talking me through my problematic AAKK2 issue. I've been online for years and never had such friendly help. A true human being! :D
 
S

sarvath

New member
Aug 14, 2015
4
1
help please, got stuck on script

Hi
Could you please help me with my DHD. I did read all the instructions 2x plus the whole thread...
I am a complete novice at this and it is all very confusing. I tried searching various methods but most are old threads with broken links etc so I thought I would give this a try as it seems to be still working.
My phone has never been tampered with before. I have the drivers installed, all the settings as required etc.
I would like to get a custom ROM with 4.0+ and get all the things unlocked.
Here is what happened:
I managed to get the script running and did the downgrade.
Now that I want to do the s-off etc etc the script stops at one stage and does nothing. I had nokia branded card yesterday so I thought that could be the reason. I went ahead and bought Sandisk card (and got it formatted to the smallest cluster size available) but the problem is the same.
Here is the log:
Ace Advanced Hack Kit 2

___________________________
MAIN MENU | |
1 - Hack Ace <----------------------------+ * S-OFF |
| * SIM Unlock |
h - Prepare HTCdev unlocked device | * SuperCID |
| * Root |
| * Touch Recovery |
| |
**********************************************************************
t - Toggle Flash Method - current method is fastbootRUU
**********************************************************************

q - Quit

[Select and press Enter]1
Android version is exploitable.
rm failed for /sdcard/PD98IMG.zip, No such file or directory
goldcard
goldcard.img
* server not running *
1707 KB/s (19240 bytes in 0.011s)
1771 KB/s (4564992 bytes in 2.516s)
1787 KB/s (4458496 bytes in 2.436s)
2063 KB/s (557962 bytes in 0.264s)
1366 KB/s (9796 bytes in 0.007s)
1908 KB/s (572752 bytes in 0.293s)
2624 KB/s (134401 bytes in 0.050s)
1136 KB/s (13968 bytes in 0.012s)
ro.build.version.release=2.3.3
Setting up for Gingerbread restore...
2595 KB/s (2801664 bytes in 1.054s)
1748 KB/s (2830336 bytes in 1.581s)
2131 KB/s (285981 bytes in 0.131s)
2164 KB/s (285981 bytes in 0.129s)
Liczba skopiowanych plików: 1.
Linux version 2.6.35.10-gd2564fb (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )
#1 PREEMPT Thu Jun 9 14:20:29 CST 2011
Kernel version is Gingerbread... Using fre3vo to temproot...
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 802160640
smem_len: 3145728
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 800
bits_per_pixel: 32
activate: 16
height: 106
width: 62
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Buffer offset: 00000000
Buffer size: 8192
Scanning region faa90000...
Scanning region fab80000...
Scanning region fac70000...
Scanning region fad60000...
Scanning region fae50000...
Scanning region faf40000...
Scanning region fb030000...
Scanning region fb120000...
Scanning region fb210000...
Scanning region fb300000...
Scanning region fb3f0000...
Scanning region fb4e0000...
Scanning region fb5d0000...
Scanning region fb6c0000...
Scanning region fb7b0000...
Scanning region fb8a0000...
Scanning region fb990000...
Scanning region fba80000...
Scanning region fbb70000...
Potential exploit area found at address fbb80e00:200.
Exploiting device...
/dev/block/vold/179:65 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,
uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharse
t=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
Creating goldcard...
HTC android goldcard tool Copyright (C) 2011, Wayne D. Hoxsie Jr.
Original code by B. Kerler. Special thanks to ATTN1 and the XDA team.
Donations can be made to the Electronic Frontier Foundation:

or to B. Kerler:

0+1 records in
0+1 records out
384 bytes transferred in 0.001 secs (384000 bytes/sec)
Setting mainver lower to allow downgrade...
--set_version set. VERSION will be changed to: 1.31.405.6
Misc partition is "/dev/block/mmcblk0p17"
Patching and backing up misc partition...
Starting flash process...
erasing 'cache'...
OKAY [ 0.182s]
finished. total time: 0.184s
Sending update...
This takes time. Please be patient!
sending 'zip' (18223 KB)...



and here is the info

(bootloader) version: 0.5
(bootloader) version-bootloader: 0.85.0024
(bootloader) version-baseband: 26.09.04.11_M2
(bootloader) version-cpld: None
(bootloader) version-microp: 0438
(bootloader) version-main: 1.31.405.6
(bootloader) product: ace
(bootloader) platform: HBOOT-7230
(bootloader) modelid: PD9810000
(bootloader) cidnum: ORANG001
(bootloader) battery-status: good
(bootloader) battery-voltage: 4201mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: RUU
(bootloader) commitno-bootloader: a3d4fa0f
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
(bootloader) region-id: 0
all: Done!
finished. total time: 0.026s
Click to expand...
Click to collapse

I must say I also had problems with donwgrading as few times it stopped on "checking PD98IMG.zip no image found" at some point I had a warning about bad card or whatever where the phone asked me if I want to format it - that did the trick and the downgrade went through ok.
I also have a problem with running fastbook getvar all - where most of the time it says waiting on device and honestly I don't know even when did I manage to get the details - must have been during one of the restarts or whatever.

can you please help? what should I do next to get this going or what other methods could I use?
many many thanks!
 
P

Phiber2000

Senior Member
May 23, 2010
243
129
There is definitely something wrong with your connection.
Just try another cable and don't touch the device while processing!
 
S

sarvath

New member
Aug 14, 2015
4
1
works, many thanks!

thanks for a quick reply!
I tried on my laptop, where I installed drivers from xda and although there were some errors it went through and I managed to get the modified htc image as well so yay thanks very much for the script and support as well. I think the problem was with the drivers on my PC, now I re-installed them and it also works.
final question.
I downloaded a custom rom that I want to use, how do it flash it? I know, lame question but I am still a little lost.
do I use hboot for this or do I install some apk from the market?
thanks!!!
 
P

Phiber2000

Senior Member
May 23, 2010
243
129
sarvath said:
...I downloaded a custom rom that I want to use, how do it flash it? I know, lame question but I am still a little lost.
do I use hboot for this or do I install some apk from the market?...
Click to expand...
Click to collapse
The AAHK2 flashed TWRP as custom recovery for you. You use that to flash custom ROMs and Gapps if needed.
Wipe system and data partition first, then install the custom ROM.

Phiber
 
S

sarvath

New member
Aug 14, 2015
4
1
:(

many thanks Phiber!
I got myself into a pickle... I flashed a ROM (one of xda forum ones but not the newest tho)
didn't like it so I thought of going back a step to the one from you
so I put the img on sd card and tried to access the hboot but when pressing the vol and power instead of the usual menu the phone vibrated couple of times, black screen with nothing on and started flashing orange led... not good...
I tried running your script again to get back to start but it stopped at unlocking and now the phone gets stuck on green logo on white and does not boot at all. still cannot get to the hboot... aaaaa.... I promise I'll get a stock rom and stop tampering with it cause obviously I don't know enough and shouldn't be touching this anymore.... could you please help me to get it to work again?
thanks and sorry for the hassle... eh...
 
P

Phiber2000

Senior Member
May 23, 2010
243
129
Then you probably didn't use the recovery for flashing. That's bad - never do that!
Write a PM to me with your time zone and when you have time for recover.
 
  • Like
Reactions: sarvath
S

sarvath

New member
Aug 14, 2015
4
1
thank you!

"another happy customer" :)
Thank you again Phiber for your assistance with getting my silly mistakes sorted! Phone works again and I learnt a lesson :)
For anyone interested in doing this...
I must say I spent a lot of time reading about unlocking this bloody phone few years back (gave up) and again few days ago and this is the best method I found, still not foolproof (me as and example above haha...) but Phiber helped a lot so I cannot recommend this and him enough, just stick to the instructions ;)
All the best!
 
  • Like
Reactions: Phiber2000
Nasrudin78

Nasrudin78

Member
Oct 18, 2012
37
3
Hi all,
I have hboot 0.85.0024 with this specs:
c:\adb>fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 0.85.0024
(bootloader) version-baseband: 26.09.04.11_M2
(bootloader) version-cpld: None
(bootloader) version-microp: 0438
(bootloader) version-main: 2.50.161.3
(bootloader) serialno: HTxxxxxxxxxx
(bootloader) imei: xxxxxxxxxxxxxxx
(bootloader) product: ace
(bootloader) platform: HBOOT-7230
(bootloader) modelid: PD9810000
(bootloader) cidnum: VODAP304
(bootloader) battery-status: good
(bootloader) battery-voltage: 4201mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: a3d4fa0f
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
(bootloader) region-id: 0
all: Done!
finished. total time: 0.096s
Click to expand...
Click to collapse

When I use this tool with option "1" all seems correct, installed custom recovery, superSu, but still S-on!!
Then I applied these steps manually to get S-off :

adb push gfree /tmp/
adb shell chmod 775 /tmp/gfree
adb shell /tmp/gfree -f
Click to expand...
Click to collapse

without any success (error message with eMMC error). So, whats happenning here?
My bootloader seems to be LOCKED (no message in hboot screen) and S-on. hboot version untouched (0.85.0024)
Thx in advance!
Quote:
 
Last edited:
P

Phiber2000

Senior Member
May 23, 2010
243
129
Choose option 'h' first, then retry.
When it'll be unsuccessful again, post the script output of option '1'.
 
Nasrudin78

Nasrudin78

Member
Oct 18, 2012
37
3
Ok, but first of all I shoud revert all changes. isn't it?
I mean, I flashed stock rom PD98IMG-GB4.zip (branded with Vodafone ES, currently is unbranded but still CID=VODAP304) and then invoked option "1" from aahk2. This turned out into stock ROM+custom recovery+root but with s-on.
So, Can I choose "h" with this configuration? or flashing again PD-GB4.zip (clean stock rom) and apply "h"?
Also, I remember that option "h" told me download PD-GB2.zip which is WWE (unbranded), will not create conflict with VODAP304? (Note: I have a goldcard)
Thx, I will post outputs.
 
P

Phiber2000

Senior Member
May 23, 2010
243
129
Nasrudin78 said:
Ok, but first of all I shoud revert all changes. isn't it?.
Click to expand...
Click to collapse
You don't have to do that.
Nasrudin78 said:
I mean, I flashed stock rom PD98IMG-GB4.zip (branded with Vodafone ES, currently is unbranded but still CID=VODAP304) and then invoked option "1" from aahk2. This turned out into stock ROM+custom recovery+root but with s-on.
Click to expand...
Click to collapse
When this step would have been successful, there is no custom recovery or root. That's because you should try option 'h' first. Just to make sure, that there's no htc unlock.
Nasrudin78 said:
So, Can I choose "h" with this configuration? or flashing again PD-GB4.zip (clean stock rom) and apply "h"?
Also, I remember that option "h" told me download PD-GB2.zip which is WWE (unbranded), will not create conflict with VODAP304? (Note: I have a goldcard)
Thx, I will post outputs.
Click to expand...
Click to collapse
You're right, that tries to flash the unbranded GB2 and does a relock. Conflicts can't happen, because the flash procedures always overwrite all main partitions.

If you have further problems, it may be useful to get live contact (IRC or remote session). Just send me a PM with your time zone and a meeting date proposal.

Phiber
 
  • Like
Reactions: Nasrudin78
Nasrudin78

Nasrudin78

Member
Oct 18, 2012
37
3
Just out of curiosity, what are the main differences btw PD98IMG-GB4.zip and GB2 ? What hboot version install each zip? Maybe my error was to choose option "1" instead of "h". But, as I told u:

I flashed GB4.zip (with goldcard installed) via fastboot oem rebootRUU and once installed I applied option "1" in aahk2...
So, you are telling me, that if I flash GB2.zip instead GB4 , the result will be the expected one? xddd . Ok, I'll try it and If I'm not succeed I'll send a PM.
Thx a lot...
 
Last edited:
You must log in or register to reply here.

Similar threads

A
Full HTC Desire HD (sense 3.0/android 2.3.5) guide to root, S-OFF/Sim Unlock
Replies
156
Views
267K
H
heopi
Drakknar
[RADIO][LATEST: 26.16.04.09] The HTC Desire HD Radio Thread
Replies
2K
Views
1M
rjand
rjand
glevitan
[How to] ROOT without the Hack Kit
Replies
178
Views
110K
chrisb906
chrisb906
Bumble-Bee
Summary of Desire HD ship/realease dates
Replies
2K
Views
278K
M
mean-machine
miHah
  • Locked
[Official] HTC Desire HD is getting and Android 4.0 (Ice Cream Sandwich) update!!
Replies
530
Views
268K
zelendel
zelendel

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 54
    3498BoyZ
    3498BoyZ
    ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

    cooltext1119380987ptyls.png

    For HTCDEV unlocked devices :
    Phiber2000 said:
    Unlocked devices via HTCdev need to be prepared via Option 'h' in main menu.
    This will do the downgrade too.
    Click to expand...
    Click to collapse
    As you know, the AAHK has expired and is no longer being developed by the author and there is no official support more!
    For this reason, there is now Phiber's 2000 AAHK2, which has already grown according to your wishes and will continue to grow.
    The original script was adapted, bugs were fixed, and unnecessary things were removed and slightly the HBOOT was modified.This should also work with Unlocked DHDs by HTCDEV.
    Code: 
    #include
/*
* Your warranty is now void.
*
* I am not responsible for bricked devices, dead SD cards
* YOU are choosing to make these modifications, and if  you point the finger at me for messing up your device, I will laugh at you.
*/
    Click to expand...
    Click to collapse
    ​
    ​
    ​
    ​

    The Requirements:
    -PC with Windows XP, Windows 7 or (Windows 8)
    -Charged battery at least 75%
    -Original HTC USB Cable
    -Make sure that the USB cable and the USB port of your phone and PC are in order (loose contact)
    -Use USB2.0 port on the back of a PC ( Don't use an USB 3.0 port or USB Hub )
    -If you use a laptop please charge the battery and use the Charger.
    - original ROM
    Original boot image ( this is not the HBOOT)
    original Recovery
    Formatted SD card (AFAT32 4KB sector size)from one of the following brands:
    Samsung
    SanDisk
    Patriot Memory
    ADATA

    CAUTION: If you use an incompatible SD card, the HBOOT will not working. Android also now no longer boots. This fix is expensive and risky!
    Among others the following brands lead to a soft-brick: Agfa, Hama, Trascend, No Name

    -Enable USB-DEBUGGING : Settings » Applications » Development » USB debugging
    -Connection Type "Charge Only": Settings » Connect to PC » Default connection type » Charge only
    -HBoot-Status: *** LOCKED *** or *** LOCKED (OOW) *** or *** RELOCKED *** , or without lock status displayed
    When the mode of the bootloader is "ENG S-OFF", the LOCK status does NOT play a role!    ​




    Instructions:
    Install HTC Drivers v4.0.1.001
    Extrackt AAHK2
    Start The script with Administrator Rights (aahk2.cmd)
    In the main menu "1" and confirm.
    Follow the instructions on the PC strictly.
    If a downgrade was necessary, the procedure must be repeated. (If you dont know you have to downgrade or not, use the script it will tell you if you need it or not)
    Flash the current, (modified by Phiber2000) HTC image to prevent later problems with GPS/WiFi and sound (see FAQ).
    Optional: Finally, copy a Custom ROM on the SD card and flash in recovery.
    ​
    Downloads:

    HTC Driver v4.0.1.001(only if you had'nt installed already driver)
    AAHK2 v2.15 - Mirror
    HTC WWE 3.12.405.1 with ROOT - GPS FIX(Radio: 12.65.60.29/26.14.04.28 M) (HBoot-Image) - Mirror
    Required RUU images are requested by the script: (In original Thread are more mirrors)
    PD98IMG DOWNLOAD LINKS


    FAQ:
    How do I get into the HBOOT loader and which version do I have?
    -Disable Fast boot: Settings »Power» Fast boot
    -Switch off you phone
    -Hold "Volume Down" and "Power" button
    -Once the HBOOT loader appears, release the keys
    -In the upper part of green written is now available the relevant information:
    -0(evtl. rosarote Zeile)Lock-Status
    1 ACE PVT...HBoot-Loader Modus & Security Flag
    2 HBoot-...HBoot-Loader Version
    3 MICROP-...not relevant
    4 TOUCH PANEL-...not relevant
    5 RADIO-...RADIO-Image Version
    6 ...not relevant

    How do I get to FASTBOOT mode?
    -Start HBOOT loader (see above)
    - Navigate with the volume keys to "FASTBOOT"
    -Confirm by pressing the Power button


    Which CID I have ?
    -Start FASTBOOT mode (see above)
    -On the PC, open existing Android SDK in CMD
    -Type "fastboot getvar all"
    -In the line "INFOcidnum ..." is now your current CID. (8 digits)
    CAUTION: Apps like CID GETTER don't work properly. Because the App asks the Build.Prop and everybody could change the build.prop.

    How do I install after successfully rooting the latest ROM from HTC(modified by Phiber)? (This also fixes problems with GPS/Wifi/Soumd on custom ROMs!)
    -Unzip the "RUU_Ace_Sense30_S_HTC_WWE_3.12.405.1_Radio_12.65.6 0.29_26.14.04.28_M_release_225512_rooted.zip"
    -Copy the "PD98IMG.zip" as a single file on the SD card
    -Start HBOOT loader and wait few seconds
    -Confirm query with "Volume Up"
    -After successfully flashing confirm the query with "Power"
    -Remove the SD card
    -Let android boot
    -Insert SD card
    -Delete the "PD98IMG.zip" from the SD card

    Credits:

    Hyuh
    attn1
    shad0wf0x
    Anthony1s
    Revskills
    Genepoole
    Phiber2000



    Donation:    PAYPAL LINK
    If you want to help Phiber2000 to continue his work please donate to him ! The support takes also much time on Android-Hilfe.de
    View
    9
    3498BoyZ
    3498BoyZ
    What to do next?
    Read some FAQs and sticky Threads
    Update the Recovery
    Make a Nandroid/Backup
    Install a Custom Rom {DHD Development List: ROMs, Kernels, and More}
    View
    3
    P
    Phiber2000
    There's an option for preparing HTCdev unlocked devices in main menu.

    Phiber
    View
    3
    P
    Phiber2000
    See #105. After that you're debrandet too.

    Phiber
    View
    3
    MikeChannon
    MikeChannon
    I was asked to test the free download links on this.

    I was begining to think it was true that there are actually no Free download slots. I tried many times over several minutes and every time it said no free download slots. BUT after some minutes of clicking the "return to download link" it did actually give me free slots for all the downloads.

    Not ideal, but it does seem possible to get a free download.

    Mike
    View

New posts