Go Back   Android Forums > Android Phones > HTC One S > One S - All Things Root

test: Reply
 
LinkBack Thread Tools
Old February 21st, 2013, 11:46 AM   #1 (permalink)
Daleks Über Alles
Thread Author (OP)
 
agentc13's Avatar
 
Join Date: Aug 2011
Location: Skaro
Posts: 7,905
 
Device(s): Samsung Galaxy Note 3
Carrier: AT&T

Thanks: 4,173
Thanked 5,458 Times in 2,814 Posts
Default [GUIDE] Facepalm S-Off for HTC One S

This is a step-by-step guide to Facepalm S-Off for your HTC One S.

First and foremost I got the information for all of this from this thread on xda. All credit goes to those folks (see specifics below), they put in a lot of time and hard work to get this to happen.

Credits and terms:
Exploit by beaups, full guide on xda, testing, and concept by jcase and beaups. Thanks to dsb9938 and dr_drache for support and testing. Thanks also to all of the regulars at teamandirc.

If you found this useful, donating to the folks who made it possible is a very good idea. The links are as follows:
beaups - m7forsoff@gmail.com - Donate
jcase - jcase@cunninglogic.com - Donate
dsb9938 - cubedrom@hotmail.com -Donate
dr_drache - biomatrix@gmail.com - Donate

You can also come by their irc channel for support or just to say thanks: #FacePalm http://chat.andirc.net:8080/?channels=facepalm

DISCLAIMER:






You will need to have a working adb and fastboot environment for this, if you don't please see this post to set that up. This method will work on any operating system that supports adb and fastboot.

Lastly, the work herein should not be stolen, repackaged, one clicked, bat’d, etc. soffbin3 is not GPL and may not be reused, integrated into other work, reposted, or redistributed without our permission. It was used here with permission from beaups.

For this to work, you must be rooted and have SuperCID. If you try this process without superCID, it will not work, and you may have issues! If you do not already have root or SuperCID please see the following posts for instructions: How to Unlock the Bootloader, install recovery, and Root your HTC One S and [GUIDE] SuperCID.

Once you have confirmed you have SuperCID, then it is time to get started with S-Off. Please read through this first so you understand it all before jumping in! Note: In the process/screenshots I used the working directory is C:\sdk-tools, if yours is different you will need to adjust accordingly.

S-Off for your HTC One S:
1.) Download the patcher and unzip it in your working directory:
Dev-Host - soffbin3.zip Mirror Goo.im - soffbin3.zip

2.) Find model id (open a terminal window or command prompt and leave open for further commands):
[HIGH]adb shell getprop ro.aa.modelid[/HIGH]



3.) Download zip that matches your model id and move it in your working directory (do not unzip it!): OneS PJ4010000-OneS.zip Dev-Host - PJ4010000-OneS.zip Mirror Goo.im Downloads - PJ4010000-OneS.zip

4.) Enter the following:
[HIGH]adb reboot bootloader[/HIGH]
(wait for bootloader)



5.) Enter the following:
[HIGH]fastboot oem rebootRUU[/HIGH]
(wait for black HTC Screen)



6.) Enter the following:
[HIGH]fastboot flash zip PJ4010000-OneS.zip[/HIGH]
After a while, You should see the following error “FAILED (remote: 92 supercid! please flush image again immediately)”



7.) Immediately issue the following command:
[HIGH]fastboot oem boot[/HIGH]
You may see some errors, just wait for the device to boot into Android (only now, you should be booted into Android with no eMMC write protection of any kind active).



8.) Issue the following 3 commands to update the security partition with S-off flags (one command at a time!):

[HIGH]adb push soffbin3 /data/local/tmp/
adb shell chmod 744 /data/local/tmp/soffbin3
adb shell su -c "/data/local/tmp/soffbin3"[/HIGH]
(wait for a few seconds)

9.) Enter the following:
[HIGH]adb reboot bootloader[/HIGH]



10.) You should now have S-Off!!!

11.) ENJOY!!

Thanks again to everyone who developed this method! All credit goes to those folks (see specifics below), they put in a lot of time and hard work to get this to happen.

Credits and terms:
Exploit by beaups, full guide on xda, testing, and concept by jcase and beaups. Thanks to dsb9938 and dr_drache for support and testing. Thanks also to all of the regulars at teamandirc.

You can also come by their irc channel for support or just to say thanks: #FacePalm http://chat.andirc.net:8080/?channels=facepalm

Advertisements
agentc13 is offline  
Last edited by agentc13; February 21st, 2013 at 01:59 PM.
Reply With Quote
The Following 2 Users Say Thank You to agentc13 For This Useful Post:
cheekychops67 (January 1st, 2014), scotty85 (February 22nd, 2013)
sponsored links
Old February 21st, 2013, 09:09 PM   #2 (permalink)
Senior Member
 
razvan06's Avatar
 
Join Date: Jun 2010
Location: Bucharest
Gender: Male
Posts: 680
 
Device(s): Nexus One; Nexus S; Galaxy S II; HTC One X[T3]; HTC One S[S4]; HTC ONE; LG G2
Carrier: Cosmote

Thanks: 11
Thanked 86 Times in 79 Posts
Send a message via Yahoo to razvan06
Default

I actually did this this morning, i even posted it...
It worked for me without some steps. I think the .zip that they are telling you to install upgrades you to the last ver of bootloader and this is why it failed for me, but managed to get supercid after changing it to "HTC__001" and "the almighty" s-off !

So .... after doing s-off i'm not really that excited about it bc i do not experiment any more, but still it's a good thing !



P.S. : I can guarantee that the steps posted here will NOT brick your phone IF you pay ATTENTION to what they tell you !
__________________
Was this reply helpful ?
Don't forget the "Thanks" button !
razvan06 is offline  
Reply With Quote
The Following User Says Thank You to razvan06 For This Useful Post:
agentc13 (February 22nd, 2013)
Old February 21st, 2013, 10:59 PM   #3 (permalink)
Daleks Über Alles
Thread Author (OP)
 
agentc13's Avatar
 
Join Date: Aug 2011
Location: Skaro
Posts: 7,905
 
Device(s): Samsung Galaxy Note 3
Carrier: AT&T

Thanks: 4,173
Thanked 5,458 Times in 2,814 Posts
Default

It doesn't change your bootloader.

I was on 1.09 (and still am) for the whole process.
agentc13 is offline  
Reply With Quote
The Following User Says Thank You to agentc13 For This Useful Post:
scotty85 (February 22nd, 2013)
Old February 21st, 2013, 11:59 PM   #4 (permalink)
Senior Member
 
razvan06's Avatar
 
Join Date: Jun 2010
Location: Bucharest
Gender: Male
Posts: 680
 
Device(s): Nexus One; Nexus S; Galaxy S II; HTC One X[T3]; HTC One S[S4]; HTC ONE; LG G2
Carrier: Cosmote

Thanks: 11
Thanked 86 Times in 79 Posts
Send a message via Yahoo to razvan06
Default

It was just a guess since the firmware that i tried to install failed... Who knows what went wrong..
razvan06 is offline  
Reply With Quote
Old February 22nd, 2013, 05:58 AM   #5 (permalink)
AF Addict
 
scotty85's Avatar
 
Join Date: Jul 2010
Posts: 11,014
 
Device(s):
Carrier: Not Provided

Thanks: 7,893
Thanked 7,226 Times in 4,484 Posts
Default

Quote:
Originally Posted by agentc13 View Post
It doesn't change your bootloader.

I was on 1.09 (and still am) for the whole process.
i actually had the same thing happen

PJ41010000 is the firmware portion of the european JB OTA. im not sure what what all factors are in order for this fluke to occur. it could be having disabled write protect from a previous failed attempt. during one of the attempts, PJ41010000 installed instead of failing with a 92 or 99 error,and while i watched in horror,i saw hboot 2.15 and the JB baseband being installed in the cmd window.

it will only install hboot and radio,then fail with a "flush again" error message,wich i would not recomend doing. your current rom should still boot with hboot 2.15,it may not if you install the rest of the package as it contains a new boot image and recovery,among other things.

if this accidentally happens to you dont stress too much about it,just keep working at s off,as achieving it is the only way to get away from hboot 2.15 and have RUUs you can run in the event of small disasters.

just a couple tips:
-be on viperrom 2.0 when you try this. alot of failures and fustrations(myself included) were finally overcome by simply flashing this rom.
-if you get the 99 error instead of 92,try relocking,then reunlocking the bootloader. if it wont relock,power down,unplug,boot to hboot,select fastboot,replug. should work that time

thanks ac13 for the great screenshots
__________________
The Delivery Guy
If someone has helped you,please click the THANKS button on that post.
Please post questions so others can benefit from the answers.
donate to my device fund
scotty85 is online now  
Reply With Quote
The Following User Says Thank You to scotty85 For This Useful Post:
agentc13 (February 22nd, 2013)
Old February 22nd, 2013, 10:08 PM   #6 (permalink)
Senior Member
 
razvan06's Avatar
 
Join Date: Jun 2010
Location: Bucharest
Gender: Male
Posts: 680
 
Device(s): Nexus One; Nexus S; Galaxy S II; HTC One X[T3]; HTC One S[S4]; HTC ONE; LG G2
Carrier: Cosmote

Thanks: 11
Thanked 86 Times in 79 Posts
Send a message via Yahoo to razvan06
Default

I forgot to mention that i was on 2.15 before i did the "update" again, did not know exactly if i SHOULD or not.. so i did it ...once ...it failed after installing 2 parts and never tried again.
After that i figured that S-OFF will fail... but it did not ! ..i'm just happy
razvan06 is offline  
Reply With Quote
Old March 30th, 2013, 08:56 AM   #7 (permalink)
Member
 
Join Date: Mar 2012
Posts: 107
 
Device(s): HTC One-s (*3) HTC One
Carrier: T-Mobile

Thanks: 40
Thanked 21 Times in 20 Posts
Default

guide says to download proper zip for phone but PJ4011000-OneS.zip is not one of the choices, found it at XDA Dev-Host - PJ4011000-OneS.zip - The Ultimate Free File Hosting / File Sharing Service
Altaone is offline  
Reply With Quote
Old March 30th, 2013, 09:00 AM   #8 (permalink)
AF Addict
 
scotty85's Avatar
 
Join Date: Jul 2010
Posts: 11,014
 
Device(s):
Carrier: Not Provided

Thanks: 7,893
Thanked 7,226 Times in 4,484 Posts
Default Re: [GUIDE] Facepalm S-Off for HTC One S

That is the 1 you need. The first post use to also contain zip files for the other phones.
scotty85 is online now  
Reply With Quote
Old May 29th, 2013, 07:12 AM   #9 (permalink)
Junior Member
 
Join Date: Apr 2013
Posts: 32
 
Device(s):
Carrier: Not Provided

Thanks: 15
Thanked 2 Times in 2 Posts
Default

I post my experience.

This is my initial situation:

[HIGH]C:\HTC\Data>fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 2.15.0000
(bootloader) version-baseband: 1.11.50.05.28
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 3.16.161.9
(bootloader) version-misc: PVT SHIP S-ON
(bootloader) serialno: xxxxxxxxxxxxxxxxxxxxx
(bootloader) imei: xxxxxxxxxxxxxxxxxxxxxx
(bootloader) product: vle
(bootloader) platform: HBOOT-8960
(bootloader) modelid: PJ4010000
(bootloader) cidnum: VODAP102
(bootloader) battery-status: good
(bootloader) battery-voltage: 3769mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-64bedd38
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0[/HIGH]

So I was just in jellybean ROM.

I did SuperCID and S-OFF and all is ok.

I returned to my CID VODAP102 and flashed thiis OTA: OTA_Ville_U_JB_45_S_Vodafone_UK_3.16.161.10-3.16.161.9_release_314595ks2c3r4s9728x22k

Now I'm in this situation:

[HIGH]C:\adb>fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 2.15.0000
(bootloader) version-baseband: 1.15.50.05.29
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 3.16.161.10
(bootloader) version-misc: PVT SHIP S-OFF
(bootloader) serialno: xxxxxxxxxxxxx
(bootloader) imei: xxxxxxxxxxxxxxx
(bootloader) product: vle
(bootloader) platform: HBOOT-8960
(bootloader) modelid: PJ4010000
(bootloader) cidnum: VODAP102
(bootloader) battery-status: good
(bootloader) battery-voltage: 3862mV
(bootloader) partition-layout: Generic
(bootloader) security: off
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-64bedd38
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
all: Done![/HIGH]

S-OFF is still present.
Writecid is still possible.
cicciocant is offline  
Last edited by cicciocant; May 29th, 2013 at 07:19 AM.
Reply With Quote
Old January 1st, 2014, 11:30 AM   #10 (permalink)
New Member
 
Join Date: Jan 2014
Posts: 1
 
Device(s):
Carrier: Not Provided

Thanks: 1
Thanked 1 Time in 1 Post
Default Got S-OFF eventually!

I was having difficulty with the last adb shell command for a while, the su command was not found, so I tried updating my path to /system/bin:/system/xbin. This made the command execute but the S-OFF was still unsuccessful.

The final trick that made it work was executing the "su -c /data/local/tmp/soffbin3" command in a terminal window on the device itself.
cheekychops67 is offline  
Reply With Quote
The Following User Says Thank You to cheekychops67 For This Useful Post:
scotty85 (January 1st, 2014)
sponsored links
Old June 25th, 2014, 03:37 PM   #11 (permalink)
New Member
 
Join Date: Jun 2014
Posts: 8
 
Device(s):
Carrier: Not Provided

Thanks: 0
Thanked 2 Times in 2 Posts
Default HTC OneS PJ4020000

Hello friends,
does any one knows where to find S-off file for PJ4020000 model ?

Thank you in advance !
mojito_kalogria is offline  
Reply With Quote
Old June 26th, 2014, 05:34 PM   #12 (permalink)
AF Addict
 
scotty85's Avatar
 
Join Date: Jul 2010
Posts: 11,014
 
Device(s):
Carrier: Not Provided

Thanks: 7,893
Thanked 7,226 Times in 4,484 Posts
Default

Quote:
Originally Posted by mojito_kalogria View Post
Hello friends,
does any one knows where to find S-off file for PJ4020000 model ?

Thank you in advance !
wich file? soff.bin will be the same,and the other file just needs to be a signed file from htc. easiest place to find one would be firmware.zip from an OTAPkg.

have you successfully superCIDed? lots of phones are now write protected,so that that part no longer works.

if youve unlocked,added a recovery and superuser,you can also try rumrunner or firewater(you may also need to install a custom rom with an insecure kernel)

http://rumrunner.us/

firewater s-off
scotty85 is online now  
Reply With Quote
Old June 27th, 2014, 01:58 AM   #13 (permalink)
New Member
 
Join Date: Jun 2014
Posts: 8
 
Device(s):
Carrier: Not Provided

Thanks: 0
Thanked 2 Times in 2 Posts
Default

Thanks for reply scotty.
I'm pretty new with all this, so I'm still learning a lot of stuff.

One I can say surely, I didn't superCIDed my One S, and I suppose it need to be done before S-off process, am I right ?

Phone is unlocked, rooted.
mojito_kalogria is offline  
Reply With Quote
Old June 27th, 2014, 06:33 AM   #14 (permalink)
AF Addict
 
scotty85's Avatar
 
Join Date: Jul 2010
Posts: 11,014
 
Device(s):
Carrier: Not Provided

Thanks: 7,893
Thanked 7,226 Times in 4,484 Posts
Default

Quote:
Originally Posted by mojito_kalogria View Post
Thanks for reply scotty.
I'm pretty new with all this, so I'm still learning a lot of stuff.

One I can say surely, I didn't superCIDed my One S, and I suppose it need to be done before S-off process, am I right ?

Phone is unlocked, rooted.
supercid is neccessary for facepalm. it is NOT neccesary for the other 2 i linked
scotty85 is online now  
Reply With Quote
Old July 2nd, 2014, 02:18 AM   #15 (permalink)
New Member
 
Join Date: Jun 2014
Posts: 8
 
Device(s):
Carrier: Not Provided

Thanks: 0
Thanked 2 Times in 2 Posts
Default

Ok, but as far as I can see, I need to have my phone "live" with Android, and in my case - not possible
mojito_kalogria is offline  
Reply With Quote
Old July 2nd, 2014, 04:28 AM   #16 (permalink)
AF Addict
 
scotty85's Avatar
 
Join Date: Jul 2010
Posts: 11,014
 
Device(s):
Carrier: Not Provided

Thanks: 7,893
Thanked 7,226 Times in 4,484 Posts
Default

Quote:
Originally Posted by mojito_kalogria View Post
Ok, but as far as I can see, I need to have my phone "live" with Android, and in my case - not possible
What do you mean live? Your phones are not on an active network? Or the phone is not booting?

If the former,that does not matter,you can use WiFi for a data connection. If the latter,yes you will need the phone to boot.
scotty85 is online now  
Reply With Quote
Old July 2nd, 2014, 07:45 AM   #17 (permalink)
New Member
 
Join Date: Jun 2014
Posts: 8
 
Device(s):
Carrier: Not Provided

Thanks: 0
Thanked 2 Times in 2 Posts
Default

Unfortunately second one, phone is not booting.
mojito_kalogria is offline  
Reply With Quote
The Following User Says Thank You to mojito_kalogria For This Useful Post:
scotty85 (July 4th, 2014)
Reply


Go Back   Android Forums > Android Phones > HTC One S > One S - All Things Root
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 06:41 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.