[GUIDE] Downgrade firmware 2.1x to 1.5x (S-OFF)

eavandijk83

Senior Member
Nov 23, 2016
72
28
0
Almelo
So you want to use the latest custom ROM but you're on 2.1x firmware. That's not an big issue as long as you're S-OFF. If you're not S-OFF download, install and run Sunshine-3.5.8 (or higher when available). Follow instructions and pay the $25,= You'll be S-OFF within 5 minutes and it's really worth the money considering the functionality you get in return.

Now that you're S-OFF it's time to downgrade the firmware. In order to do so you need the right RUU which can be found in this threat. Download the RUU (zip) to your computer.
Within this RUU you'll find the firmware we need but it's encrypted. Now download the RUU_Decryption_Tool.zip and extract it to any folder of your likings. Let's call it c:\RDT\ e.g. The executable in this folder is a command, not a GUI. Copy the RUU to the same folder RDT and rename it to RUU.zip.
Open up a commandprompt (windows-key - cmd.exe) and head to the folder RDT. Now enter RUU_Decryption_Tool RUU.zip You'll be asked what to do in a menu. All you need is to extract the firmware, nothing else! The tool will decrypt the firmware and copy it to a subfolder. Move to the new folder "firmware" and compress all the files within this folder to a ZIP-file called firmware.zip It does not have to be signed since we're S-OFF.

We've got two important files now. The firmware.zip and the RUU file. To be able to use the RUU rename it to 2PQ9IMG.zip and copy it to the root of your SD-card. While we're copying anyway you might want to copy your custom ROM, GAPPS etc. to the SD-card as well!

Copy the firmware.zip to your adb fastboot folder

Boot your device into download mode. It will ask you if you want to install the RUU (2PQ9IMG.zip). Press volume down to pass. Open up a commandprompt and enter the following fastboot command: htc_fastboot flash zip firmware.zip First time will fail but no panic. Your device will reboot and repeat the command by itself. The firmware will be installed, this doesn't take long.

Once finished, reboot your device again into download mode and install the RUU (volume up). When it's done reboot your device and android will show up. Wait until setup screen so that all partitions will work and reboot again to download mode. Now flash the latest TWRP. Open a commandprompt and enter: htc_fastboot flash recovery twrp-3.1.1-0-hiae.img Reboot into recovery mode and do a data wipe. TWRP will ask you to comfirm this by typing "yes". Once done select advanced wipe and wipe the dalvik/cache and system partitions. After this it's business as usual. Flash your custom ROM, SuperSU, GApps etc. and reboot.

done. :good:

I hope this will help out some people. I've done this several times and it's pretty safe. Nevertheless, don't blame be for wrecking your device if something goes wrong!
 
Last edited:

Nuroxy

Senior Member
Aug 6, 2017
124
19
0
I tried this like 15 times. S-off. 2.18.617.30. Unlocked. Rooted.

c:\Sam>htc_fastboot flash zip firmware.zip
sending 'zip'... (133925 KB) OKAY
sending time = 6.731 secs
writing 'zip'... (bootloader) HOSD CL#861328
(bootloader) ERR [SD_UPDATE_ERR] update_fb_ZIP_buf: can not find ZIP hea
(bootloader) der
(bootloader) ERR [SD_UPDATE_ERR] sddownload failed: 22
(bootloader) ERR Update zip file failed.
(bootloader) ERR ZIP ERROR CODE, 22
(bootloader) [email protected]
FAIL22 RU_HEADER_ERROR
FAILED (remote: 22 RU_HEADER_ERROR )
Execution time is 9(s)
 

damncut

Senior Member
Nov 19, 2012
148
18
18
Wennappuwa
I tried this like 15 times. S-off. 2.18.617.30. Unlocked. Rooted.

c:\Sam>htc_fastboot flash zip firmware.zip
sending 'zip'... (133925 KB) OKAY
sending time = 6.731 secs
writing 'zip'... (bootloader) HOSD CL#861328
(bootloader) ERR [SD_UPDATE_ERR] update_fb_ZIP_buf: can not find ZIP hea
(bootloader) der
(bootloader) ERR [SD_UPDATE_ERR] sddownload failed: 22
(bootloader) ERR Update zip file failed.
(bootloader) ERR ZIP ERROR CODE, 22
(bootloader) [email protected]
FAIL22 RU_HEADER_ERROR
FAILED (remote: 22 RU_HEADER_ERROR )
Execution time is 9(s)
pls zip files into firmware.zip.not firmware folder to zip.:good::good:
 

HckruxRD

Member
Jul 18, 2018
5
0
0
You need s-off to disable signature verification on all partitions since your home-made firmware.zip will not be signed with HTC's key.
It's there a way to extract those HTC Keys and Sign the zip with them ? I mean to get the ''certificate.Perm and Key.pk8''.?
 

alray

Recognized Contributor
May 22, 2012
8,934
3,583
0
It's there a way to extract those HTC Keys and Sign the zip with them ? I mean to get the ''certificate.Perm and Key.pk8''.?
The only key that can be extracted from a signed RUU or a signed firmware is the public key present on every phone. The private key used by htc to sign their files is, afaik, impossible to know. I'm pretty sure devs wouldn't waste time on S-OFF if signing your own file was possible...
 
  • Like
Reactions: HckruxRD