HTC DROID DNA gets unofficial bootloader unlock! Verizon continued following its trend as it locked down the DROID DNA just as the phone hit the shelves, pulling the plug on the official bootloader unlock method from the HTC Dev website. Those who didn’t get a chance to unlock and root their DROID DNA before this should know that thanks to the efforts of recognized developer Justin Case (and a working exploit by Sean Beaupre), Verizon has been outmaneuvered. Users can now unlock the bootloader and proceed with gaining root access on the device. The method involves software mod to change the carrier information, so that the device can be unlocked from HTC Dev. More on it after the jump!
The hack will basically make your device appear unbranded to the HTC Dev site, bypassing the restriction imposed by Verizon.
This method is not recommended if you have no experience with ADB. One wrong move, and you could brick your device. Now that you have been warned, let’s move on to what is a rather complex and lengthy procedure.
Disclaimer: Please follow this guide at your own risk. AddictiveTips will not be liable if your device gets damaged or bricked during the process.
- ADB with fastboot installed on your system. You should see our guide on what is ADB and how to install it.
- Android (USB) debugging enabled in Settings > Developer options.
- At least 1GB free space on the phone.
- At least 50% battery level.
- backup.ab | Mirror
- DNA_TeamAndIRC.zip | Mirror
- To begin, download the ‘backup.ab’ and ‘DNA_TeamAndIRC.zip’ files from the links above.
- Extract the zip package and make sure all the files are in the same folder . Also, make sure to read the README.txt file, to better prepare yourself for anything that may surprise you.
- Connect the device to the computer and run command prompt / terminal, navigating to the folder containing the files.
- Enter the following command to install the CIDGen.apk file on the phone:
adb install CIDGen.apk
- Now run the app on your phone, and follow the directions the app gives you.
- Again, enter the following command to verify that the CIDBLOCK.img file exists on your phone:
adb shell ls -l /sdcard/CIDBLOCK.img
If the file (.img) does not exist, do not proceed with the next step. You need to re-run the CIDGen app again and confirm again via Step 6. If the file is there, proceed to step 7.
- In adb, enter the following commands:
adb push runme.sh /data/local/tmp/ adb shell chmod 755 /data/local/tmp/runme.sh adb shell /data/local/tmp/runme.sh
If you see errors such as ‘no such file’ or ‘link failed’, let it be. This process will loop forever and is meant to be this way, so don’t start sweating, yet.
- Now open up a second command prompt / terminal window and enter the following command to restore the modified backup to your phone. (Watch your phone and grant it permission to restore the backup when it asks to):
adb restore backup.ab
- Once the restore is complete, you need to close the first command prompt / terminal window that’s running the runme.sh script.
- Note: If you do NOT proceed properly in the following commands or reboot/power off your device in the process, you WILL brick your device. If you still want to continue entirely at your own risk, enter the following commands in the second command prompt / terminal window:
adb shell rm /data/data/com.htc.usage/files/exploit/* adb shell mv /data/DxDrm /data/DxDrm_org adb shell mkdir /data/DxDrm adb shell ln -s /dev/block/mmcblk0p5 /data/DxDrm/DxSecureDB adb reboot adb wait-for-device adb shell /data/local/tmp/runme.sh
- You should now be running the same script you closed in the first command prompt / terminal window, and will see the same errors as discussed above. Now, open another terminal window to enter the following command to restore the modified backup once again. (Again, watch your phone and grant it permission to restore when it asks for it):
adb restore backup.ab
- Once the restore is complete, close the first command prompt / terminal window.
- Enter the following commands in the second terminal window:
adb shell mv /data/DxDrm /data/DxDrm_trash adb shell dd if=/sdcard/CIDBLOCK.img of=/dev/block/mmcblk0p5 adb reboot
Phew! You’re done. The phone should boot up normally, and can now be unlocked via HTC Dev. On the website, simply select “All other supported models” in the phone type. Once you’re done unlocking the bootloader, see our guide on rooting and installing CWM recovery on HTC DROID DNA.
For updates and further queries related to this procedure, head over to the original unlock guide at Android Police linked below.
[via Android Police]