Step 6
Please pay attention – this is very important. This step involves a small chance of bricking if you mess up.
To push the eng bootloader:
adb push hbooteng.nb0 /data/local/
adb shell
/data/local/busybox md5sum /data/local/hbooteng.nb0
If the output does not match “6991368ee2deaf182048a3ed9d3c0fcb” exactly, stop, delete it, and re-download it. Otherwise, continue.
Now we will write the new bootloader.
dd if=/data/local/hbooteng.nb0 of=/dev/block/mmcblk0p18
Confirm proper write:
/data/local/busybox md5sum /dev/block/mmcblk0p18
If the output does not match “6991368ee2deaf182048a3ed9d3c0fcb,” try again; if it still doesn’t work, seek help from chat.andirc.net in channel #thunderbolt.
DO NOT REBOOT.
Now, reboot your phone and put the custom RUU (PG05IMG.zip) on your SD card. Then flash it. This will upgrade you to release firmware with an S-OFF bootloader.
Next, run this command:
adb reboot bootloader
After it flashes, you will be running release firmware with S-OFF.
Yes was very attentive to this step, checking the checksum both times carefully. Both times they were dead on. I was a bit confused by the "DO NOT REPORT" -> "Now, reboot" conflict but I assumed that "DO NOT REBOOT" referred to if the checksums didn't match. So I rebooted, copied the 408MB custom RUU renamed to PG05IMG.zip to my sd card then did the adb reboot bootloader, etc.
My bootloader now says "MECHA XD ENG S-OFF" so I guess that part worked.