• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root root,s-off,simunlock,superCID htc merge

@scotty85 thank you for getting back to me, i appreciate that! My stumbling block right now is that i have created my gold card and i have my minimal merge folder and adb working and i am following your how-to and i placed what i think is the correct file on my sd. i have zergerush pushed to data/local/ and it runs but fails with the output being 83 herlings and i can't seem to find the correct updated zergerush file that will work on 2.3.4 apparently and when i try the htc unlock from thier website it tells me i must upgrade my rom, and hboot more importantly. I've rooted a few phones but i must be doing this wrong. Fastboot and adb maybe i am not using correct files. I am using the us cellular version. I really need to unlock this phone. Here is my software info for android and hboot. Thanks for any help you can give :)
 

Attachments

  • IMG_20150307_191141.jpg
    IMG_20150307_191141.jpg
    486.8 KB · Views: 102
  • IMG_20150307_190853.jpg
    IMG_20150307_190853.jpg
    444.6 KB · Views: 116
I had the same thing. Try the fre3vo exploit if using a us cellular phone.
I edited a batch file to use fre3vo instead of zergrush. That was made to take some of the legwork out of the process. Links to some files are in my post 2 pages back, or in the quote.

I will be uploading an edited merge toolkit to include both the fre3vo and zergrush binaries, along with the edited batch file and original. All I did was use the fre3vo one for my usc merge. I claim no responsibility, blah,blah. As mentioned previously, fre3vo works for those with u.s. cellular

EDIT: Here are links to files, pulled off of my laptop from various places. I believe everything else was on my desktop beside the miniadb_Merge folder, so download the things as is with filesystem intact, please. MAKE A PROPER GOLDCARD for hboot to accept the downgrade. remember, the goldcard tool spits out reversed cid.
The working goldcard site is:
http://huygens.hoxnet.com/goldcard.html

---------------------------------------------------------------------------------------------
EVERYTHING YOU SHOULD NEED BESIDE THE FIRST POST'S INSTRUCTIONS (you should be able to pick up at step 6):

https://www.mediafire.com/folder/s5g2ww4b3cnl0/HTC_MERGE_ROOT

----------------------------------------------------------------------------------------------
OTHER INDIVIDUAL THINGS
exploitable verizon zip (I think it was the VZW leak 1.23.605.1 ruu.zip) it came with the original toolkit:
http://www.mediafire.com/download/b6ub4b2fbs1yvh4/PD42IMG.zip


miniadb_Merge (folder was in root of my c drive):
https://www.mediafire.com/folder/x7uxumu1gv9if/miniadb_Merge

One click downgrade.bat:
http://www.mediafire.com/view/lhw7u5dwugc78b2/OneClickRoot_Stock.bat

One click downgrade.bat edited with fre3vo exploit: http://www.mediafire.com/view/rs3flyrgt58d5w9/OneClickDowngradefre3vo.bat

feel free to download other separate things I know some of you only need a couple of things and not the whole zip, sorry for those who do want a zip, I know there is a lot to download. I claim no credit for any of the tools save for the little editing of the downgrade batch to use fre3vo instead of zergrush. Thanks scotty85.
@scotty85 thank you for getting back to me, i appreciate that! My stumbling block right now is that i have created my gold card and i have my minimal merge folder and adb working and i am following your how-to and i placed what i think is the correct file on my sd. i have zergerush pushed to data/local/ and it runs but fails with the output being 83 herlings and i can't seem to find the correct updated zergerush file that will work on 2.3.4 apparently and when i try the htc unlock from thier website it tells me i must upgrade my rom, and hboot more importantly. I've rooted a few phones but i must be doing this wrong. Fastboot and adb maybe i am not using correct files. I am using the us cellular version. I really need to unlock this phone. Here is my software info for android and hboot. Thanks for any help you can give :)
 
Ok, so i place that in the min merge folder with the rest of the adb and fastboot stuff. Should i put the rest of the files i need in there too? To push via adb if needed?
@scotty85 thank you for getting back to me, i appreciate that! My stumbling block right now is that i have created my gold card and i have my minimal merge folder and adb working and i am following your how-to and i placed what i think is the correct file on my sd. i have zergerush pushed to data/local/ and it runs but fails with the output being 83 herlings and i can't seem to find the correct updated zergerush file that will work on 2.3.4 apparently and when i try the htc unlock from thier website it tells me i must upgrade my rom, and hboot more importantly. I've rooted a few phones but i must be doing this wrong. Fastboot and adb maybe i am not using correct files. I am using the us cellular version. I really need to unlock this phone. Here is my software info for android and hboot. Thanks for any help you can give :)
 
Cool, ill give it a try in the morning. I'll post if i get stuck. Thanks again, I'm sure now it can be done :)
It definitely can be done. :) its been a while since I've messed with the merge,but you may be on a new enough firmware that freevo will not work either.

If it does not,don't get discouraged, you'll just need to unlock the boot loader and install recovery to get root. You have a compatible hboot,what error did you have specifically?

This may help you with the htcdev process: http://androidforums.com/index.php?threads/635459/
 
It definitely can be done. :) its been a while since I've messed with the merge,but you may be on a new enough firmware that freevo will not work either.

If it does not,don't get discouraged, you'll just need to unlock the boot loader and install recovery to get root. You have a compatible hboot,what error did you have specifically?

This may help you with the htcdev process: http://androidforums.com/index.php?threads/635459/
This is where I am starting from...The htc unlock program tells me I have to upgrade my ROM to unlock the phone. So I ran the USC RUU and this tells me I have to upgrade too. here is a screenshot of the error. The problem is, there is no software update option from within this version of android in the settings menu...It's really strange.
 

Attachments

  • Capture.PNG
    Capture.PNG
    82.2 KB · Views: 140
This is where I am starting from...The htc unlock program tells me I have to upgrade my ROM to unlock the phone. So I ran the USC RUU and this tells me I have to upgrade too. here is a screenshot of the error. The problem is, there is no software update option from within this version of android in the settings menu...It's really strange.
you can actually ignore the part of the program thats telling you that you need to run an ruu and update your bootloader. from the other screen shot a few posts up,you have a compatible hboot displaying the big pink locked at the top. if youre using the guide linked above,just click the spoiler under the unlock with htcdev directions and carry on :)
 
you can actually ignore the part of the program thats telling you that you need to run an ruu and update your bootloader. from the other screen shot a few posts up,you have a compatible hboot displaying the big pink locked at the top. if youre using the guide linked above,just click the spoiler under the unlock with htcdev directions and carry on :)
Do I run the adb commands at the same time as htcdev is running because I keep getting to this part but I never get a screen to put in the numbers in so htc can send me the bin file I need from the htcdev,it errors out and tells me to run the appropriate ruu upgrade and I only download .zips and I don't know how to flash them... Everytime I put the usc zip on the goldcard and rename it, hboot outputs it is the wrong image,checks it and shows the blue and yellow loading bar on the side and nothing happens...do I need to place the verizon one on there first? Do I place the correct files on my root sd or root on my c drive? Sorry I don't mean to take much of your time

*edit*
You pointed out I could skip a step on the htc website so I did and successfully unlocked the bootloader. I still need to s-off and root it. You have been a huge help thanks @scotty85 I'll buy you a pint soon sir
 
Last edited:
Do I run the adb commands at the same time as htcdev is running because I keep getting to this part but I never get a screen to put in the numbers in so htc can send me the bin file I need from the htcdev,it errors out and tells me to run the appropriate ruu upgrade and I only download .zips and I don't know how to flash them... Everytime I put the usc zip on the goldcard and rename it, hboot outputs it is the wrong image,checks it and shows the blue and yellow loading bar on the side and nothing happens...do I need to place the verizon one on there first? Do I place the correct files on my root sd or root on my c drive? Sorry I don't mean to take much of your time

*edit*
You pointed out I could skip a step on the htc website so I did and successfully unlocked the bootloader. I still need to s-off and root it. You have been a huge help thanks @scotty85 I'll buy you a pint soon sir
excellent! carry on with the installing a recovery,then use the recovery to install superuser(steps 2 and 3 on the other guide)

once you have superuser, come back to this guide and go to post #2. click the htcdev spoiler and follow those directions.

then go back to post#1 for step 6. sorry thats a bit confusing,but it will work,i promise. :)

once you install superuser,and do the alternate step 5 then the ruu should work,unless there is a prollem with your gold card.
 
excellent! carry on with the installing a recovery,then use the recovery to install superuser(steps 2 and 3 on the other guide)

once you have superuser, come back to this guide and go to post #2. click the htcdev spoiler and follow those directions.

then go back to post#1 for step 6. sorry thats a bit confusing,but it will work,i promise. :)

once you install superuser,and do the alternate step 5 then the ruu should work,unless there is a prollem with your gold card.
It's going good, I unlocked the bootloader and rooted and have twrp up and running now I am unsure which zip needs to be flashed first? Do I reformat the gold card each time I use it? flashing fails in hboot with any zip and throws a cid error and I have yet to flash anything but supersu in recovery, I flashed the other recovery first tho
 
It's going good, I unlocked the bootloader and rooted and have twrp up and running now I am unsure which zip needs to be flashed first? Do I reformat the gold card each time I use it? flashing fails in hboot with any zip and throws a cid error and I have yet to flash anything but supersu in recovery, I flashed the other recovery first tho
youre doing great! sounds like at this point your only hangup is an issue with your gold card. once you have it working correctly,you wont need to format it every time.

i assume that youve successfully flashed the modified main version(mmcblk0p17) and your phone is no longer giving you the main version error?

once you get the gold card issue licked and flash the older vzw firmware,youre good to go. the rest is pretty straighforward :)
 
youre doing great! sounds like at this point your only hangup is an issue with your gold card. once you have it working correctly,you wont need to format it every time.

i assume that youve successfully flashed the modified main version(mmcblk0p17) and your phone is no longer giving you the main version error?

once you get the gold card issue licked and flash the older vzw firmware,youre good to go. the rest is pretty straighforward :)
 
The phone itself runs well now that I am rooted,I installed pimp my rom and added busybox and added .init support for this stock GB I am using now and also turned cpu governor to performance so it runs much smoother now. Every time I go into TWRP to try and flash what I think is the correct file, TWRP fails and I have to use the unlock token again and when hboot scans the file it tells me it is the wrong image and does nothing but even after using the token and resetting the phone over and over supersu retains root every time so I know flashing that worked....but just now after going through this part:

adb push busybox /data/local

adb shell this should change your promt to a #

chmod 0755 /data/local/busybox

Next we backup our existing misc partition:
dd if=/dev/block/mmcblk0p17 of=/sdcard/misc-stock.img bs=4096
/data/local/busybox md5sum /sdcard/misc-stock.img
/data/local/busybox md5sum /dev/block/mmcblk0p17


Make sure the md5sum of the misc-stock.img matches the one from /dev/block/mmcblk0p17

exit to get back to miniadb_merge> prompt

reflash the misc image to allow donwgrading to older firmware:
adb push misc-downgrade.img /sdcard/
adb shell
dd if=/sdcard/misc-downgrade.img of=/dev/block/mmcblk0p17
sync


now you can flash the exploitable vzw firmware

exit to get back to the miniadb_merge> promt

adb reboot bootloader

Hboot checked and downgraded and is now attempting to install the vzw ruu but it is hanging at partition and has been there for at least 10 or more minutes, is this normal? Once this is done and I do the s-lock step and install my GB custom RUU do I unlock the bootloader directly after so I don't reformat the phone over and over? will I still have twrp after as well, that seems to stay persistant but locks the bootloader when I use it. Sorry for 20 questions, I'm just super happy to get help with this!! =)
 
The phone itself runs well now that I am rooted,I installed pimp my rom and added busybox and added .init support for this stock GB I am using now and also turned cpu governor to performance so it runs much smoother now. Every time I go into TWRP to try and flash what I think is the correct file, TWRP fails and I have to use the unlock token again and when hboot scans the file it tells me it is the wrong image and does nothing but even after using the token and resetting the phone over and over supersu retains root every time so I know flashing that worked....but just now after going through this part:

adb push busybox /data/local

adb shell this should change your promt to a #

chmod 0755 /data/local/busybox

Next we backup our existing misc partition:
dd if=/dev/block/mmcblk0p17 of=/sdcard/misc-stock.img bs=4096
/data/local/busybox md5sum /sdcard/misc-stock.img
/data/local/busybox md5sum /dev/block/mmcblk0p17


Make sure the md5sum of the misc-stock.img matches the one from /dev/block/mmcblk0p17

exit to get back to miniadb_merge> prompt

reflash the misc image to allow donwgrading to older firmware:
adb push misc-downgrade.img /sdcard/
adb shell
dd if=/sdcard/misc-downgrade.img of=/dev/block/mmcblk0p17
sync


now you can flash the exploitable vzw firmware

exit to get back to the miniadb_merge> promt

adb reboot bootloader

Hboot checked and downgraded and is now attempting to install the vzw ruu but it is hanging at partition and has been there for at least 10 or more minutes, is this normal? Once this is done and I do the s-lock step and install my GB custom RUU do I unlock the bootloader directly after so I don't reformat the phone over and over? will I still have twrp after as well, that seems to stay persistant but locks the bootloader when I use it. Sorry for 20 questions, I'm just super happy to get help with this!! =)
10 minutes is a pretty long time,what partition is it? hopefully its moved past that by now and youre on your way.

once this is done,you will do step 6,wich will make the phone s off and supercid.

once youve achieved s off and upgraded,you can re-unlock if you want to,or you can simply install files as PD42IMG.zip files in hboot. once s is off,you wont have any security checks for main version or even htc signiture. the custom upgrade ruu will have amon recovery included,so you will have to install twrp if you want that.

i seem to remember twrp causing that issue,it must be doing something to the misc partition,wich is where the flag that hboot checks to see if it should be locked or unlocked is housed. i would prolly just leave the bootloader locked at that point.
 
1425943675646-570509594.jpg
10 minutes is a pretty long time,what partition is it? hopefully its moved past that by now and youre on your way.

once this is done,you will do step 6,wich will make the phone s off and supercid.

once youve achieved s off and upgraded,you can re-unlock if you want to,or you can simply install files as PD42IMG.zip files in hboot. once s is off,you wont have any security checks for main version or even htc signiture. the custom upgrade ruu will have amon recovery included,so you will have to install twrp if you want that.

i seem to remember twrp causing that issue,it must be doing something to the misc partition,wich is where the flag that hboot checks to see if it should be locked or unlocked is housed. i would prolly just leave the bootloader locked at that point.
It is still hanging, it's been an hour now. What should i do? I don't want to brick it, i think i will go with the recovery you recommend :)
 
View attachment 83765
It is still hanging, it's been an hour now. What should i do? I don't want to brick it, i think i will go with the recovery you recommend :)
since the partition is not hboot or radio,id go ahead and pull the plug. plug it in and make sure its got a full charge,then do a factory reset from hboot. you can try and let the phone boot,if you want.not sure it will without the rest of the partitions being updated. it may boot,but have issues.

after the factory reset,try and run the ruu again. you are attempting to flash the vzw downgrade ruu,correct?
 
to answer your other question,yes you can flash the ruu from fastboot and your pc. youll do that like this:

if youre working with a booted,operational phone,you can flsh the file in the following manner:

-open a cmd window

-change to adb/fastboot directory
cd c:\foldername
(cd c:\mini-adb if youve used any of my guides :))

-place the zip file you want to flash into adb/fastboot directory

-enable usb debug,disable fastboot,plug in phone

-check for connectivity
adb devices (should return serial number)

-boot to fastboot
adb reboot bootloader

-check for connectivity again
fastboot devices

-flash the file
fastboot erase cache

fastboto oem rebootRUU (will put you in ruu mode,black screen silver htc letters)

fastboot flash zip zipfilename.zip (will send and flash the file. dont interupt it while the cmd window shows its writinging,and the green status bar is moving on the phone screen)

*sometimes a file will fail with a pre-update error. this is normal,just enter again:
fastboot flash zip zipfilename.zip
and this time it will finish

-when you get "finished" and "OK"
fastboot reboot-bootloader (takes you back to fastboot)

-reboot back to the OS
fastbooot reboot

you can use this if you dont have an operational phone as well. you just need to manually put the phone in fastboot(select from hboot menu) then skip the "adb" commands and start with fastboot devices
 
since the partition is not hboot or radio,id go ahead and pull the plug. plug it in and make sure its got a full charge,then do a factory reset from hboot. you can try and let the phone boot,if you want.not sure it will without the rest of the partitions being updated. it may boot,but have issues.

after the factory reset,try and run the ruu again. you are attempting to flash the vzw downgrade ruu,correct?

Yes, even though I pulled the plug and rebooted, I took my sd card out and factory reset in hboot, the verizon rom booted up and now I am going to run the s-off commands and flash the custom GB and unlock the bootloader at least for tonight =)
 
Back
Top Bottom