[GUIDE] Juopunutbear S-OFF (HBOOT 1.27.0000 with 3.32 ICS Firmware)

[auggie2k]

Official Thread - http://forum.xda-developers.com/showthread.php?t=1611981 | Original Author - http://unlimited.io/juopunutbear.htm

Was advised by another member that a handy guide would be useful for other members, I am going to base this on what I did in my own experience

*** NOTE: There have been many updates with this method and all other troubleshooting steps can be found on the website - http://unlimited.io/jbtroubleshooting.htm ***

Juopunutbear Requirments:

* Be unlocked using the HTCdev bootloader unlock - http://htcdev.com/bootloader
* Be rooted (have superuser and/or an unsecured boot image installed)
* Have a spare microSD card, or to have backed up all contents of your SDcard, the card will be wiped
* Have fastboot and adb drivers installed and working (windows)
* Have usb debugging enabled
* Have a legth of insulated wire of sufficient length to join the contact points for your device (paperclip)

NOTE: This is based on an ICS Upgraded Sensation 4.0.3 with HBOOT 1.27.0000 and Firmware 3.32.

Make sure you have at least 50% battery life for this and some free time. I also recommend a paperclip extended out with some insulation tape over the whole thing except for the tips (leave about 1CM free each end) for the wire trick.

1 - Backup and Format your SD Card

Easiest thing to do as this is essential for the program to work and you wouldn't want to risk your content.

2 - Restore to Stock 3.32 Rooted ROM

I did this because I was getting an error message only 1 other user reported and I believe it was because I was using a custom ROM (LeeDroid) with a kernel based on 3.32 from a different ROM. I kept getting an Segmentation error:

======== ControlBear version 0.2 for JuopunutBear S-OFF ==========
Old beer detected...... Please wait......
Starting up......
Waiting device
Segmentation fault
Quit....
Press ENTER to exit.....

It is not 100% necessary to wipe and start fresh but I expect most other users to be changing ROM's after gaining S-OFF (because you can change your CID). As I said at the start, it's based on my own experience and I always prefer to start fresh with a new ROM unless upgrading. Just flash this in Recovery as you would any normal ROM. I also suggest downloading and running SuperWipe before hand.

Here's the download - http://files.virtuousrom.com/pyramid/misc/rmk-pyramid-stock_ics_3.32.401.3-v1.zip

ALTERNATIVELY - Root your current ROM (again) with the following flashable ZIP - http://downloads.androidsu.com/superuser/Superuser-3.0.7-efghi-signed.zip

3 - Flash boot.img from Stock 3.32 Rooted ROM in Fastboot

As you know, if you flash a ROM with a HTC Unlocked bootloader, it has to be based on the 3.32 firmware and some ROM's you flash won't boot because of this so extract it from the above ZIP and flash it in fastboot (ROM should still boot but pays to be safe).

adb reboot-bootloader
fastboot flash boot /path/to/boot.img
fastboot reboot

4 - Download Juopunutbear S-OFF

Here's the download - MOD-Edit: Link removed

5 - Connect phone over USB with debugging enabled

Should be on by default but if not, go to Settings > Develop Option > USB Debugging

6 - Run Juopunutbear S-OFF

Let this run through it's normal procedure, you will see some prompts on your phones screen about X application being granted superuser permissions, this is normal. After about 15-30 seconds your phone will reboot and boot to the Juopunutbear screen (I believe it's a recovery like loader). DO NOT UNPLUG YOUR USB CABLE!

7 - Use Wire-Trick to obtain S-OFF

This is the fun part, make's it really seem like hacking When requested by the application, use the suggested paperclip to join the SD Card casing to the connector as in the image:

Great guide here by XDA member @seb_labine - http://forum.xda-developers.com/showthread.php?t=2133633

This initial confusion myself was that you had to hold it for an awfully accurate 1.75 seconds but that was my mistake. Here's how I got it to work.

NOTE: The below will repeatedly show on screen until you make contact, then it will say Waiting Device (as it reboots).

Do not remove sdcard from phone
Do wire-trick now!! Look instructions at web

Do not remove sdcard from phone
Do wire-trick now!! Look instructions at web

Do not remove sdcard from phone
Do wire-trick now!! Look instructions at web
Waiting device....

Create contact for 0.5 Seconds > Release for 1.75 Seconds > Create contact for 0.5 Seconds > Release connection completely.

If done incorrectly (as in the timing is wrong) you will get this message.

Do not remove sdcard from phone
Do wire-trick now!! Look instructions at web
Waiting device....
Found device... Please wait...
Getting into bar.....
Raising Glass
SUCCESS - Taking a sip.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Buddies and Beer
Checking alcohol level......
Let's take one more......
S-OFF Failed
Errorcode: 66732337
ErrorMsg: Still sober
Quit....
Press ENTER to exit.....

If so, please close Juopunutbear and reopen it and it will start again.

And a great video guide by kgs1992:

Once it's done successfully, you will see this message...

======== ControlBear version 0.2 for JuopunutBear S-OFF ==========
Starting up......
Making room for beer......
Loading sixpacks on sdcard......
Loaded......
Do not remove sdcard from phone
Do wire-trick now!! Look instructions at web

Waiting device....
Rebooting device
Please wait....
Found device... Please wait...
Getting into bar.....
Raising Glass
SUCCESS - Taking a sip.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Buddies and Beer
Checking alcohol level......
Seems to be just right.....
Let's take one more......
Aaaah, nice sunny day!!
Rebooting.......
Waiting device....
Found device... Please wait...
Rebooting bootloader.......
Waiting device....
Fastboot detected
JuopunutBear S-OFF success
Do you want to install JuopunutBear modified hboot? (y/n)
Installing JuopunutBear hboot.....
Waiting.....
Flashing.......
Rebooting......
JuopunutBear hboot installed
Press ENTER to exit.....

Now, that's it and you are done. It will reboot into Bootloader and you will see this:

NOTE: It will say ***LOCKED*** at the top of Bootloader, this is fine because it's S-OFF what's important. The Locked / Unlocked status is for the HTC Dev method.

Congratulations! Now that your in Bootloader with S-OFF, how about a nice new Recovery and change of CID?

Normal - http://download2.clockworkmod.com/recoveries/recovery-clockwork-5.0.2.0-pyramid.img
Touch - http://download.clockworkmod.com/recoveries/recovery-clockwork-touch-5.8.0.9-pyramid.img

fastboot flash recovery /path/to/recovery.img

And for the CID (so you can flash any ROM or RUU for latest radios and debranding)?

fastboot oem writecid 11111111 (to change CID)
fastboot reboot-bootloader (bootloader will reboot)
fastboot getvar cid (it will confirm your CID as 11111111
fastboot reboot (to reboot back in your current ROM)

Thanks for stopping by and cheers!

 

[undercover]

Brilliant guide, well done.

Sent from my HTC Sensation Z710e using xda premium

 

[ganeshp]

great guide

great guide...ill use this as refernce for SOFF on 1.27 HBOOT

 

[BrokenSpring]

OOOOOO, interesting.

Might just have to give this a try on my lunch.

 

[kidgenie]

Locked and S-off

Yo, i got my HTC sensation S-off with Juopunutbear after 5 tries,SUP!

 

[KarlMarX]

Great guide!

But I tried 20 times now, but still got the timing wrong I guess... At first wire contact, the phone reboots immediately, but the movie and guide says that you have to make contact twice...
Any extra suggestions?

 

[auggie2k]

Great guide!

But I tried 20 times now, but still got the timing wrong I guess... At first wire contact, the phone reboots immediately, but the movie and guide says that you have to make contact twice...
Any extra suggestions?

Thank you It's just a matter of getting it bang on right. I suggest holding the first contact in place (not the SD Casing) and tap briefly on the SD Casing, release for nearly 2 seconds and a tap briefly once again and let go.

If "Waiting device...." doesn't appear and it's still refreshing telling you to do the Wire-Trick, repeat and repeat and repeat until it does. Have a look at the video as well for a good example of it, make sure you don't make contact with your chosen conductor either.

 

[stewie01]

Very good guide!!!
I have tried 6 times ... worked

 

[KarlMarX]

After 20 more times, still no luck.

I got this after the wire trick:

Do not remove sdcard from phone
Do wire-trick now!! Look instructions at web
Waiting device....
Fastboot detected
Rebooting device
Please wait....
Found device... Please wait...
Getting into bar.....
Raising Glass
SUCCESS - Taking a sip.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Buddies and Beer
Checking alcohol level......
Let's take one more......
S-OFF Failed
Errorcode: 66732337
ErrorMsg: Still sober
Quit....
Press ENTER to exit.....

That "Fastboot detected" and "rebooting device" I don't see in the guide above... Also the phone vibrates like a real new boot up...

 

[auggie2k]

After 20 more times, still no luck.

I got this after the wire trick:

Do not remove sdcard from phone
Do wire-trick now!! Look instructions at web
Waiting device....
Fastboot detected
Rebooting device
Please wait....
Found device... Please wait...
Getting into bar.....
Raising Glass
SUCCESS - Taking a sip.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Beer is tasty.
SUCCESS - Buddies and Beer
Checking alcohol level......
Let's take one more......
S-OFF Failed
Errorcode: 66732337
ErrorMsg: Still sober
Quit....
Press ENTER to exit.....

That "rebooting device" I don't see in the guide above... Also the phone vibrates like a real new boot up...

I've corrected that for you.

Your almost there, now it's just a matter of getting the timing right with the Wire-Trick. Keep at it, I assure you it will work.

BTW, can I ask what you are using to make contact? Are you making quick contact and releasing for about 1.75 seconds and quick contact again? I find it to be better to be on the early side of 1.75 seconds rather than later (in my testing).

 

[KarlMarX]

I used several things, like paperclips, wire from a little old computer fan, but the best thing so far seems to be insulated wire used to wrap cables what comes with new electric stuff... And then take some platic of both ends...

I've tried 100 times now.
The fact that I am this far means that there are now problems withs roms and roots etc, am I correct? (I used ARHD, not the stock rom)

 

[auggie2k]

I used several things, like paperclips, wire from a little old computer fan, but the best thing so far seems to be insulated wire used to wrap cables what comes with new electric stuff... And then take some platic of both ends...

I've tried 100 times now.
The fact that I am this far means that there are now problems withs roms and roots etc, am I correct? (I used ARHD, not the stock rom)

If you have got to the point of the Wire-Trick, ROM's and Roots are irrelevant because you are well past that. It's just timing. I've done a little GIF for the best timing of the contact. Hope this helps you

 

[htcmartin]

HI.
IF I have stock ICS, Stock HBOOT, i dont have root, s-off..
this metode do root and s-off? then i use custom rom?

 

[auggie2k]

HI.
IF I have stock ICS, Stock HBOOT, i dont have root, s-off..
this metode do root and s-off? then i use custom rom?

This guide is only for users who are stuck on S-ON HBOOT 1.27.0000 with 3.32 Firmware.

If you have a lower version of HBOOT, please use Revolutionary to get S-OFF.

http://revolutionary.io/

Afterwards, you will be able to flash a custom recovery and then all the ROMs you like.

 

[theq86]

HI.
IF I have stock ICS, Stock HBOOT, i dont have root, s-off..
this metode do root and s-off? then i use custom rom?

First you have to unlock your bootloader via htcdev.com.
then you have to root your sensation

and then you can do this exploit.

 

[htcmartin]

I have hboot 1.27 and 3.32 firmware, and I have use htc methode..

Ok then this is only s-off manual. If I have done thist, then i use Custom ROM?

EDIT: sorry for my english

 

[auggie2k]

I have hboot 1.27 and 3.32 firmware, and I have use htc methode..

Ok then this is only s-off manual. If I have done thist, then i use Custom ROM?

EDIT: sorry for my english

With the HTC Dev method, you could already change your Recovery and use a custom ROM but you were stuck with the 3.32 Base Firmware meaning you couldn't overclock or make lots of other great changes we take for advantage. With S-OFF, you have full control of the NAND partition and can make all the changes you wish so go crazy

 

[Leonardo Monteiro]

What am I doing wrong?

I dont know what to do. I need help. I read all post, but I dont understand what is missing.

I have HTCdev;
I did "fastboot flash recovery recovery-clockwork-touch-5.8.0.9-pyramid.img";
I used "su-2.3.6.3-efgh-signed.zip";




======== ControlBear version 0.2 for JuopunutBear S-OFF ==========
Starting up......
Backing up......
Permission denied
Transferring backups....
Backup FAILED!!
Exiting!!
Press ENTER to exit.....

 

[RevTheory]

its crap...

ive tried so many times and nothing works. i guess ill stay s-on

 

[lrm537]

its crap...

ive tried so many times and nothing works. i guess ill stay s-on

Maybe you're getting the timing wrong. If your timing is anything like your attitude then your screwed.