Remove All Ads from XDA

[ROOT][GUIDE] HBoot 2.02/2.10 SOFF - Goodbye Stranger - Upd. 02.25.11

1,307 posts
Thanks Meter: 209
By zikronix, Senior Member on 4th November 2010, 09:08 PM
Post Reply Email Thread

Your here cause something went wrong right? Ok thats fine. This list isnt extensive but its here to provide quick answers to some weird or common questions. New questions and problems are added to the bottom.

Q: Will this downgrade my hboot
A: No. I used to have an hboot downgrade but it was bricking peoples phones. However is you want to risk bricking your device, visit this thread here. I I advise against this. This bricked alot of phones which is why I pulled it.

Q: How do I install the Hboot Drivers
A: Check this here

Q: I get "error: more than one device and emulator"
A: kill the adb.exe tasks in task manager or reboot your computer

Q: Step #9 my phone does read the
A: If you renamed the zip file make sure it doesn't say in the name remember that xp and up on windows doesn't show the file ext by default so if you see chances are its named

Q: Why cant I use Clockwork Recovery
A: At the moment its not coded for the new partitions. Just read the first few pages of this thread or check this here

Q: What Hardware does this work for
A: All currently known hardware 0001-0004

Q: What Hboot's does this work for
A: It was built for 2.02 and 2.10 however it will work for all version its just there are easier ways for those

Q: I think I messed up can I just start over.
A: Yes. Its recommended if you want to start over run the official ruu.

Q: This is very complicated
A: It is...thats why there is instructions

Q: Will this erase my data
A: Yes but not from the SDCARD

Q: Can I deleted the files off my SDCARD when done
A: Yes, except for RSA_OEM.KEY and WIMAX.IMG

Q: I get permission denied or device offline when trying to step 10
A: Check here or here or here this might work for you

Q: I used clockwork it seems to work fine.
A: It might but considering the partition information is not correct. You may have just over wrote your wimax keys and broke 4G. Have fun with that like this poor guy here

Q: This uses unrevoked in one of its steps? Explain?
A: There have been some concerns that this uses unrevoked-forever in one of its steps. As far as we know that Unrevoked 3 (not to be conufused with unrevoked-forever) is causing some radio issues with hardware in general and new hardware. Unrevoked-forever does not appear to bork the radio like unrevoked 3 does. This is apparent by the many success stories. However Unrevoked3 could very well possibly destroy your radio/wimax/brick if used.

Q: I get device not found
A: Install the drivers for your phone, (Unrevoked, ADB)

Q: Camera doesnt work after doing this
A: Flash a new rom thats current. Like SteelRom, Fresh, Stock Rooted. The issue here is the Hardware is different. NO CUSTOM KERNELS

A2: Reports say they changed the camera provider/hardware. And the drivers are different! Using a rom based off the latest release and kernel should fix it As Discussed here and here and here

Q: When I go to recovery. I get a red triangle.
A: See Step 10

Q: This doesnt work!
A: Yes it does if you follow the directions, Unless some other bullshit decided to popup!

Q: CM6.x doesnt work
A: See Question 7....Nothing I can do about that if the kernel doesnt support your camera/device.

Q: My phone boot loops now...You broke my ****!
A: I didnt break your ****. You broke your own ****! Its not broken so chill out (well it might be but probably not). What rom did you flash? Did you flash a custom kernel? Did your rom come with a custom kernel? I bet your using a custom kernel. Try a rom like Steel Rom, Sprint Lovers

Q: How do I back up my RSA Keys
A: Check here for the latest up to date information. Or run this command from the shell


cat /dev/mtd/mtd0 > /sdcard/wimax.img

Q: My 4g Doesnt work
A: Was it broken prior to the s-off, what steps did you take. Are you running AOSP ROM or Another kernel?, Did you try a different rom? What version is your phone? Do you have SwitchPro Widget installed? (uninstall it), Did you try to run unrevoked3 prior to this? After flashing the radios and stock kernel based rom did you do a data and prl update? Does the mac behind your battery match whats in about phone (4g has to be on to see mac) Also try the tree.xml fix posted


adb shell
ls /data/misc/wimax/

look for a file with your macaddress ending in .tree.xml. you want to move that to another location so it gets regenerated. (the following command basically renames it.)

mv /data/misc/wimax/(Your-mac-address).tree.xml /data/misc/wimax/(Your-mac-address).tree.xml.old

4. Start 4G may not connect
5. Do a prl/profile update
6. Power off the phone and power it back on. Try it
7. PRL/Profile. Try it

Q: 4G is still broke.
A: Check your RSA keys


adb shell
cat /dev/mtd/mtd0 | grep RSA

returned output show appear as this:
# cat /dev/mtd/mtd0 | busybox grep RSA
cat mtd0 | busybox grep RSA
RSA requests
RSA replies

It should look just like the above
the important lines are BEGIN RSA PRIVATE KEY and END RSA PRIVATE KEY.
If you have those two lines, your keys are still likely to be intact.
If those two lines are missing, your keys are likely missing.

/dev/mtd/mtd0 is where the wimax image is stored.

Q: OK I think My Keys are tossed. We made a backup right? So how do I restore it?
A: This post or post should do it for you

Q: My Phone says its not rooted.
A: If you have s-off your rooted. Simple as that. Try a different rom if you want. The second file you flashed is Sprint Lovers and is a very nice rooted rom.

Q: When I try to get into Fastboot by pressing VOLUME UP and booting the phone, my phone instead buzzes three times and acts dead. What happened?
A: The S-OFF update also enables Qualcomm Diagnostics mode on your phone, which is entered by doing what you just did. You can exit this mode (and boot normally) by removing the battery and USB cable.

Q: Can you tell me what this does?
A: Read the guide? Basically your downgrading the phone, so you can flash unrevoked because htc "comically fixed" the phone. Then your re upgrading the phone back to shipping radios, system, pri, nv, kernel...all the while with keeping s-off

Q: How did you get to be so cool
A: If you have it, you don’t need it. If you need it, you don’t have it. If you have it, you need more of it. If you have more of it, you don’t need less of it. You need it to get it. And you certainly need it to get more of it. But if you already don’t have any of it to begin with, you can’t get any of it to get started. Which means you really have no idea how to get it in the first place, do you? You can share it, sure. You can even stockpile it if you like. But you can’t fake it. Wanting it, needing it, wishing for it. The point is, if you’ve never had any of it, ever, people just seem to know.

Q: Do you really own a vette?
A: Yes, and a backpack with jets!

Q: Whats with you and the dots ...
A: ...

Q: Your Kind of an Cocky Asshole
A: Yea...I Get that. Oh well. I cant fix stupid or ignorant.
The Following 18 Users Say Thank You to zikronix For This Useful Post: [ View ] Gift zikronix Ad-Free
4th November 2010, 09:08 PM |#2  
OP Senior Member
Thanks Meter: 209
Donate to Me
[ROOT][GUIDE] HBoot 2.02/2.10 SOFF - Goodbye Stranger - Upd. 02.25.11
I am sad to say the time has come to retire this post....Now before you get all panicky and ****, just sit your **** down, take your adderall and relax, damn antsy ass people. Anywho, with people our there like xHausx and others that have automated all of this there really isnt a need for me to keep this updated. I will keep the post here for archival purposes but, I will not be updating it, any further. I may pop into the thread here and there but probably not. I would like to thank all those that helped and supported me during this threads run. With out you we would still be stuck.

In the mean time if your looking to root your phone, check out xHausx's thread

And no I still dont recommend Clockwork or Unrevoked.

Till next time...Super Tramp - Goodbye Stranger

Archive of the guide as of 2/14/11


Presenting the ONE AND ONLY surefire root method that backs up your RSA KEYS prior to rooting !!!!

Also I am aware that unrevoked has out their new tool. However while I was sitting in IRC, I saw many that it wasnt working for. So Until there is a surefire, easy method, I will keep this thread updated.

Credit goes to:
amoamare (Initial method)
toast (fake recovery and script)
unrevoked (thanks for your app)
amon_ra (fixed custom recovery)
chris1683 (thanks for the rom) (sprintlovers)
ryanza (z4root)
illogos, epicroot, xHausx, TrevE, Chubbzlou (Testing)
BooDaddy (RSA Backup Info)

and who ever else I missed

Help me finance my Vette!

Disclaimer and well a little fun:
This has been tested on many phones and it worked fine...but if it breaks your **** dont come cry to me about knew the risks! No one here is responsible if you break, brick, set fire, punch, smash, stab, destroy, your self, computer or your phone. The only person responsible is you! Just because it worked for me and others does not mean it will for you. Anytime you flash something its a risk.

Ladies and gentlemen... I've traveled over half our forum to be here tonight. I couldn't get away sooner because I had a POST coming in and I had to see about it. That phone is now rooted at and running well. I have two others comming in and this method has rooted many on the board. So, ladies and gentlemen... if I say my guide works you will agree. You have a great chance here, but bear in mind, you can lose it all if you're not careful.
Out of all methods that beg for a chance to root your phone, maybe one in twenty will work; the rest will be trolls-that's posters trying to get between you and the guide-to get some of the root action that ought by rights come to you. Even if you find one that has a simpler guide, and means to root, he'll maybe know nothing about helping. This is... the way that this works. This method is reliable like no other in this field and that's because its been tested and tested time and time again. I assure you, whatever the others promise to do, when it comes to the showdown, they won't be there...

================================================== ====

This Method soley uses Amon_RA Recoveries....Period. A poor soul that lost his RSA keys (broken 4g forever) by recent clock work shenanaigans here

VX - Updated Amon Ra Recovery. Download Here:
MD5: 27eb4a36ba01078193975fc93723dd60

Lets Get Rooted!
================================================== ====


Extract only the main zip file to a folder of your choice. I recommend the root of C:\ into a folder of your choice or on the desktop. Make sure you have the drivers installed for your phone (recommended: SDK Drivers or unrevoked hboot drivers) and USB debugging is on. This was setup for people running windows, if you have access to it do it on a 32bit version. I can't stress this enough you must use the adb.exe included with the package This is command line based do NOT double click the exe. Assume nothing, and cut and paste or type the commands EXACTLY as listed, they are case sensitive and each line is a seperate command. Oh and Read the FAQ and Warnings for f-sakes

1) Connect your phone to the computer (Rear USB Port Perferred) make sure the computer detects the phone (DO NOT MOUNT USB) If it doesnt install the drivers. Now master Reset your Phone (Menu>settings>Sd & Phone Storage>Factory Data Reset). Your phone will reboot. While your phone is rebooting it ctrl+alt+delete on your computer and open up task manager and click the processes tab look for anything that says adb.exe click it and hit end process.

2) Your phone should be booted and in the rom. You can skip the setup. On your phone enable install applications from unknown sources.(menu>settings>applications>unknown sources) and turn on usb debugging.

3) Open a command prompt (do NOT click adb.exe) and change to where ever you extracted the files to.

4)Type the following (this must be excuted from the folder you extracted to)


adb push root/ /sdcard/
adb push root/mtd-eng.img /sdcard/
adb push pc36img/ /sdcard/
adb push pc36img/ /sdcard/
adb push root/flash_image /data/local/

5) Now were gonna install z4root. When its done look at your phone z4root should be running. Select temporary root... It will go thru the process will eventually come to a white screen *Wait* after a sec or so screen will come up saying temp root was a success. Ok so now type the following


adb -d install -r root/z4root.apk
adb shell am start -a android.intent.action.MAIN -n com.z4mod.z4root/com.z4mod.z4root.z4root

6) Your command should still be open and you should be in the directory where you extracted the files. Once you have typed "su" command below look at your phone and click allow for SuperUser...Ok so now type the following from the command prompt


adb shell

6A) REQUIRED RSA BACKUP This will back up your RSA keys just in case something goes wrong in that department. You should still be in your command window inside the shell with a #. (The following came from this thread)


mkdir -p /sdcard/nandroid/RSA-PR-BACKUP
cat /dev/mtd/mtd0 > /sdcard/nandroid/RSA-PR-BACKUP/wimax.img

This saves it in a file that can actually be restored. This next step is another type of backup just for good measure

busybox sed -n '/BEGIN CERTIFICATE/,$p' /dev/mtd/mtd0 > /sdcard/rsa_OEM.key

This will dump the RSA keys to a text file on your SD Card named rsa_OEM.key
Mine was about 4575 KB in size, but the size could vary. Go ahead and switch the phone's USB connection over to "Disk Drive" and then browse to your SD Card and verify that the file rsa_OEM.key is indeed on the card.

Proceed to Step 7

7) You Should still be at a "#". This means you have root if you see a "$" or some other error message. Reboot your phone, check your drivers, usb debugging and cable and start over. If you got a "#" You can Proceed. You should still be in the shell at a "#" If not start over...Otherwise


chmod 0755 /data/local/flash_image
./data/local/flash_image misc /sdcard/mtd-eng.img

8) Now we are going to reboot your phone into the boot loader to flash the first You should still be in the shell So Type:


reboot bootloader

9) Once your phone is in the boot loader highlight bootloader, and press the power button. It will load the PC36IMG File...When it ask you to flash press VOL-UP. You will notice that it says bootloader bypassed and maybe some other errors. Dont worry this is normal. Once the flash of the file is done it will ask to reboot, Select NO by Pressing VOL-DOWN. Now some people have gotten some errors here and there during the flashing just continue as normal.

10) You should still be in the boot loader at this point. Scroll down to recovery and press the power button. It Should take you to a red triangle. If not and you get stuck at a white htc screen pull the battery and then repower the phone with power + vol down and select recovery. When you see the red triangle. Type the following (IF YOU GET STUCK HERE CHECK THE FAQ):


adb push recovery /
adb shell busybox --install /sbin
adb shell nohup /sbin/recovery &

With any luck you should be at a recovery (green screen with text)

11) Select enable USB-MS. This will mount your sdcard. Look in the root of your sdcard and you should have two files. One named and one named Rename the file named to and then rename to when your done follow the instructions on your phone to disable usb (press power) then proceed to step 12

12) Now Select flash zip from the menu and choose Wait for it to complete. Select Reboot from the menu.

Now pay attention. It might kick you back into:

ROM: See 12B

12A) Ok so you got kicked to the boot loader. It should scan your card and find the chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 13

12B) Ok so the phone booted into a rom. Power the phone off. Then repower the phone on pressing power and vol-down at the same time. It should take you into the bootloader and scan your card and find the chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 13

12C) Ok so the phone is stuck at a white htc screen. Power the phone off by pulling the battery. Then repower the phone on pressing power and vol-down at the same time. It should take you into the bootloader and scan your card and find the chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 13

13) Ok your phone is rooted now, and you should be inside the rom. The rom you just flashed is Sprint Lovers rom with the modified recovery. Download a rom of your choice copy it to the root of your sd card and flash it. But type the following first


adb shell mv /sdcard/ /sdcard/
adb reboot recovery

14) You Should be in the recovery menu now (green text screen). Do a backup by navigating to backup/restore press power to select then do a Nand backup in the next menu. Once thats done, select return, then reboot or flash a rom of your choice. If you flashed a different custom rom than the one thats included in the package cool. If not no big deal eitherway. Do a PRL/Profile update while in the rom after the phone is done rebooting. Your Done.

15) Read the FAQ for questions

This is really only needed if you rooted with one of the previos guides version 6 or lower or if you installed a different recovery like I told you not to. It installs amon_ra 2.2.1

1) Download File and Rename to
copy to the root of your SDCard and power off phone

2) Power your phone back on into the boot loader by holding power and vol-down until your presented with a white screen. It will read the and as you if you want to flash. Say yes. Then it will ask if you want to reboot, VOL+UP for yes.

3) If your rom gets tossed in the process. Reboot your phone into bootloader select recovery, and reflash your rom....DONE

NOTE: This will erase all data on the phone. (Will not erase data on the SDCard)

1) If your on Hboot 2.10 Download the Here. If your on Hboot 2.02 Download the here then Unrevoked s-on here rename the pc36img file to copy that and the unrevoked s-on tool to the root of your sd

2) Power your off. Power the Phone back on into the boot loader by holding power and vol-down until your presented with a white screen.

3) It will scan for the Select no to flash. Select recovery from the menu. Once in recovery choose flash zip from the menu, and select unrevoked forever s-on.

4) When its done flashing select reboot from the menu.

5) From here either run the official ruu or boot back into the boot loader (see step 2). When it scans and ask you to flash the select yes then yes to reboot.

The Following 112 Users Say Thank You to zikronix For This Useful Post: [ View ] Gift zikronix Ad-Free
4th November 2010, 09:12 PM |#3  
abiezer's Avatar
Senior Member
Flag Miami
Thanks Meter: 54
What is the point of getting the new HBoot?
4th November 2010, 09:14 PM |#4  
Senior Member
Thanks Meter: 52
sorry, wrong question
4th November 2010, 09:15 PM |#5  
OP Senior Member
Thanks Meter: 209
Donate to Me
Originally Posted by abiezer

What is the point of getting the new HBoot?

there is no point in getting a new hboot....this tool is for those that have phones with the new hboot....that unrevoked wont work on.

this is not the new hboot
The Following User Says Thank You to zikronix For This Useful Post: [ View ] Gift zikronix Ad-Free
4th November 2010, 09:16 PM |#6  
abiezer's Avatar
Senior Member
Flag Miami
Thanks Meter: 54
Oh I see so this is basically for people who couldn't root to be able to root. Got it. Thanks.
4th November 2010, 09:45 PM |#7  
Thanks Meter: 0
Dumb question, sorry trying to keep up with this while at work. Once I do this, then I still need to run Unrevoked, correct?
4th November 2010, 09:58 PM |#8  
OP Senior Member
Thanks Meter: 209
Donate to Me
Originally Posted by shepkc

Dumb question, sorry trying to keep up with this while at work. Once I do this, then I still need to run Unrevoked, correct?

its included in the script it tells you how to do it.
4th November 2010, 10:15 PM |#9  
Senior Member
Thanks Meter: 120
update failed, said main version is older...
4th November 2010, 10:32 PM |#10  
OP Senior Member
Thanks Meter: 209
Donate to Me
its working for some but not others...i dont know why the main version is older thing...
5th November 2010, 12:33 AM |#11  
OP Senior Member
Thanks Meter: 209
Donate to Me
i think we have ironed out the mainversion deal...

looking into it now.
Post Reply Subscribe to Thread

back to the rooture, childish gambino, fly like kites

Guest Quick Reply (no urls or BBcode)
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes