Hi people.
I realize that the usual response to threads like this is "read the forum" but I honestly have, I've tried several guides but I get no luck.
So if anyone would please help me out, it would be much appreciated and maybe helpful for others.
The way I've understood things is that I need to
1. Temproot
2. Downgrade using a goldcard.
Using this guide
HTML:
http://forum.xda-developers.com/showthread.php?t=1152233
I think I've managed to temp root;
1. Temproot:
C:\DHDDowngrade>root
C:\DHDDowngrade>adb push fre3vo /data/local/tmp
1195 KB/s (9796 bytes in 0.008s)
C:\DHDDowngrade>adb shell chmod 777 /data/local/tmp/fre3vo
C:\DHDDowngrade>adb shell /data/local/tmp/fre3vo -debug -start FBB00000 -end FFF
FFFFF
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 802160640
smem_len: 3145728
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 800
bits_per_pixel: 32
activate: 16
height: 106
width: 62
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Buffer offset: 00000000
Buffer size: 8192
Scanning region fbb00000...
Potential exploit area found at address fbb7f800:1800.
Exploiting device...
I do get kicked back to the command prompt, but if I type "adb shell" I do get the "#" that I'm supposed to be getting.
Right - so far so good, right?
2. Downgrade
As instructed in the guide, I run the commands as follows
C:\DHDDowngrade>adb push misc_version /data/local/tmp
1288 KB/s (15837 bytes in 0.012s)
C:\DHDDowngrade>adb shell chmod 777 /data/local/tmp/misc_version
C:\DHDDowngrade>adb shell /data/local/tmp/misc_version -s 1.31.405.3
--set_version set. VERSION will be changed to: 1.31.405.3
Patching and backing up partition 17...
Error opening input file.
C:\DHDDowngrade>adb reboot bootloader
There is an error here, but I haven't found anyone else having this problem, and don't even know if it really is a problem.
So I've ignored it, and continued on creating a coldcard.
I've tried using Goldcard manager from the market, I've tried retrieving the reverse CID manually. I've pasted the data from the generated image file onto the card and saved. A few times I've not been able to paste PD98IMG.zip on to the card afterwards, giving me the error that the card must be formatted to work, but lastly it would let me copy. If I try reading the card, I do get the error that the card has to be formatted. My HTC also tells me theres something wrong with the SD card. I've ignored this, and booted into the bootmanager. For a split second theres a green text saying something i along the lines of "PD98IMG image not found".
And so it ends, I can't get any further.
So the questions summarized are;
1.Is this the correct order?
2.Am I rooted, even if I have to type "adb shell" to get the "#"?
3.When dowgrading, is the "Error opening input file" fatal?
4.Is the card supposed to be unreadable after pasting the hex data onto it?
Sorry for the neverending post, but getting a custom rom onto my Desire HD has been very, very hard. Unsuccesful so far. Please help me out
Best regards from Norway.
Hi there noticed no one has replied I have plenty of time to help you out the best I can. I recently did this last week and had no problems. Im still learning myself so sorry if i am not the best of help.
wow long post
After skimming your post I did notice something. I pretty sure that you need to create a gold card first. If you still have problems creating a GoldCard get back to me but here is the link:
http://www.addictivetips.com/mobile/how-to-make-gold-card-for-htc-desire-hd/
I then followed this tutorial to downgrade:
http://forum.xda-developers.com/showthread.php?t=905003
and then use the s-off tool :
http://forum.xda-developers.com/showthread.php?t=857537
hope that helps, get back to me if you need help.
I used these two guides when rooting my DHD, I also had to use a goldcard but the link for that is in the downgrade page below.
1. Downgrade
http://forum.xda-developers.com/showthread.php?t=905003
2. Root + Radio installation + Rom installation
http://forum.xda-developers.com/showthread.php?p=11557769
As far as I know, the two links above are the correct order, as long as you get the # its safe to proceed and the card should be usable after you make it into a goldcard, at least I still use mine. Oh, and you shouldn't receive any errors throughout the process, it might not be fatal but why take a chance.
ace hack kit
use the ace hack kit to steps you can't get wrong
http://www.google.com/url?sa=t&sour...sg=AFQjCNFFmKIBniFFp-RmQV7lN2Ma-n9dzQ&cad=rja
TheJokah said:
use the ace hack kit to steps you can't get wrong
http://www.google.com/url?sa=t&sour...sg=AFQjCNFFmKIBniFFp-RmQV7lN2Ma-n9dzQ&cad=rja
Click to expand...
Click to collapse
Thanks to all of you for replying.
My head was spinning after going through different tutorials and problem solutions - and I had frankly given up the whole thing.
But TheJokaH's one-click method seemed intriguing so I decided to give this one.last.shot. And it worked!
I don't know why this isn't posted as the only sticky thread at the Q&A section - because is definitely the only way to get one started with custom roms.
Thanks again!
Related
Hallo guys
i followed this article
http://forum.xda-developers.com/showthread.php?t=905003
but i have problem see the picture
http://tinypic.com/view.php?pic=2drfbko&s=7
software number
1.83.415.4
sorry for my bad English
thanks for the help
Hala!
thats because its not 'adb push psneuter /date/local/tmp'
its adb push psneuter /data/local/tmp
not date -- its data
Lmao we've all made that mistake at least once
its a typo!!.. like me in the first time.
thanx guys for reply
i just laughed at myself
cant get the "#" in the result
i do as this
Section 2b [For Gingerbread ROMs, 2.x]
•Connect Desire HD to a computer. Charge only, USB Debugging enabled!
•Open up a cmd and go to Downgrade folder, execute commands:
Code:
adb push misc_version /data/local/tmp
adb push fre3vo /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell chmod 777 /data/local/tmp/misc_version
adb shell
./data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF
i am on HTC Desire Hd
androin 2,3,3
htc sense 2,1
kernel 2,6,35,10
versio 2,50,405,2
If you got "#" in the result, you have temporary root! Proceed with commands:
Code:
cd /data/local/tmp
./misc_version -s 1.31.405.6
but i dont Get the "#"
Yeah the only # i get in my results is "fre3vo by #teamwin following the results.. so i just try to type the 2nd to last command "cd /data/local/tmp i get "path not specified" ?
but the last thing the results say is "running exploit" then waiting for my next command???
I am also trying to downgrade. I get the same meesages as @mistage1990
C:\Documents and Settings\Administrator\Skrivebord\htc\Downgrade_v3\Downgrade>ad
b shell
$ ./data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF
./data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 802160640
smem_len: 3145728
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 0
bits_per_pixel: 32
activate: 16
height: 106
width: 62
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Buffer offset: 00000000
Buffer size: 8192
Scanning region fbb00000...
Potential exploit area found at address fbb7f800:1800.
Exploiting device...
C:\Documents and Settings\Administrator\Skrivebord\htcDowngrade_v3\Downgrade>cd
/data/local/tmp
system can not find path
What do i do next? i have tried to search, but i do not exatly what to search for
Same problem as above
Hey all,
I'm getting exactly the same error as ko1979 above. Does anyone know if there's a solution to this yet?
Hi, guys!
I've tried rooting my DesireZ using "Downgrading guide from gingerbread to froyo" (link was destroyed by forum rules)
It is really clear and easy to do guide. But I ran into a problem because I can't make a root backup after gaining Temporary root on HTC DESIRE Z (2.42.405.2). When fixsu.sh ends I am starting "Root check basic" app and it has show me the result is OK. Then I starts MyBackupPro. The first time it shows me new menu item with root operations, but after that it refusing do anything instead of message "There is no properly root access". Titanium Backup behaves in the same way: it properly starts, but does not work with system applications. The only step in the guide I have missed is "Changing version number", but I think the problem is not the case, is it true? Could you tell me please, what may be a reason?
I really fear to begin change the ROM before to have full backup...
Try a full power off. turn the phone off, pull the battery out for a minute, then turn it back on and retry the temp-root.
Sometimes the 'fastboot' feature of sense roms messes with the temp-root.
-Nipqer
Nipqer said:
Try a full power off. turn the phone off, pull the battery out for a minute, then turn it back on and retry the temp-root.
Sometimes the 'fastboot' feature of sense roms messes with the temp-root.
-Nipqer
Click to expand...
Click to collapse
unfortunately, did not help.
Here is log after I turned device:
C:\Documents and Settings\htc>adb devices
List of devices attached
HT0BHRT01025 device
C:\Documents and Settings\htc>adb shell
$ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 802160640
smem_len: 3145728
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 800
bits_per_pixel: 32
activate: 16
height: 80
width: 48
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Buffer offset: 00000000
Buffer size: 8192
Scanning region faa90000...
Scanning region fab80000...
Scanning region fac70000...
Scanning region fad60000...
Scanning region fae50000...
Scanning region faf40000...
Scanning region fb030000...
Scanning region fb120000...
Scanning region fb210000...
Scanning region fb300000...
Scanning region fb3f0000...
Scanning region fb4e0000...
Scanning region fb5d0000...
Scanning region fb6c0000...
Scanning region fb7b0000...
Scanning region fb8a0000...
Scanning region fb990000...
Scanning region fba80000...
Potential exploit area found at address fbb52000:1000.
Exploiting device...
C:\Documents and Settings\htc>adb shell
# cd /data/local/tmp
cd /data/local/tmp
# ./fixsu.sh
./fixsu.sh
# cat /system/etc/passwd
cat /system/etc/passwd
root::0:0:root:/data/local:/system/bin/sh !!ROOT is really getting!
# cat /system/etc/passwd
cat /system/etc/passwd
keychar xV4 9 0 0 0 # !!After MyBackup Pro start
#
I think the problem is the destruction of the memory area, where exploit works.
Maybe there are other ideas?
I'm trying to root my Bell HTC Desire Z and I'm getting stuck pretty early just trying to downgrade to Froyo.
No matter what guide I've followed this is far as I'll get typing in the terminal:
adb push fre3vo /data/local/tmp
adb push misc_version /data/local/tmp
adb shell
chmod 777 /data/local/tmp/fre3vo
I'll then get a response saying unable to chmod /data/local/tmp/fre3vo: no such file or directory.
I've placed the fre3vo file in the same folder as adb so I'm super confused.
Any help would be super appreciated!
edit you first post and change the title of the post... it will change the title of the thread's name too
Now, I'm making even less progress.
adb push fre3vo /data/local/tmp
turns back with:
cannot stat 'fre3vo': No such file or directory
That error means fre3vo is not in the directory cmd/terminal is pointed at.
You need to either use the 'cd' command (change dir) or, if you're on windows, you can hold shift and right click in the dir fre3vo is, and select 'open cmd here'
-Nipqer
Alright, so I'm having slightly more luck following this guide http://forum.xda-developers.com/showthread.php?t=1178912&highlight=root+bell+desire+z
I've got to the portion about "Changing Version Number to Allow Downgrade and Gaining SuperCID with a Goldcard" but when I type:
# cd /data/local/tmp
I get cd /data/local/tmp: not found
I thought I was making progress...
EDIT: Never mind - I just decided to re-type the command in and it worked...moving on to downgrading
Success! Rooted my phone and flashed CM 7.2. Big thanks to Nipqer on #G2Root!!!!
Mods this thread could probably be deleted.
I am stuck on the same spot the OP was. I have done as nipqer suggested and opened a cmd window directly in the platform-tools folder and now the response coming back is
Code:
C:\platform-tools>adb shell
$ chmod 777/data/local/tmp/fre3vo
chmod 777/data/local/tmp/fre3vo
Usage: chmod <MODE> <FILE>
$ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
/data/local/tmp/fre3vo: permission denied
suggestions ?
I have read a lot of threads and tutorials on this and honestly there's so many it has become confusing. Help a fella out! :good:
follow this guide first
http://wiki.cyanogenmod.com/wiki/TMobile_G2:_Firmware_Downgrade_(Gingerbread)
now go to this guide when complete
http://wiki.cyanogenmod.com/wiki/TMobile_G2:_Rooting
dont skip steps and if you need more help log onto freenode
You ran the chmod command wrong, didn't put a space between the 777 and the /data/local/tmp/fre3vo
-Nipqer
righto, thanks guys, will take a look at the threads you linked and try again. will post back one way or the other as soon as I have something.
ok I have run into a real problem. it looks as if I have semi bricked. I skipped nothing, followed the guide to a T.
Code:
NOTE: Take note of this number, we will need it later. For the remainder of this guide, we will refer to this number md5 #3.
If md5 #1 & md5 #3 match, then gfree 0.7 failed to powercycle the eMMC chip on the device. Either the software version is too high and the device was not downgraded per the previous section, or you did something wrong. Try again or join #G2Root on Freenode for further help..
If md5 #2 & md5 #3 match, then everything should be fine and you continue on.
Code:
md5 #1 - b532ca54a073f0c4043bd7be69ebce8d
md5#2 - 2ce1bdd5e4c1119ccfcecb938710d742
md5#3 - 2ce1bdd5e4c1119ccfcecb938710d742
as you can see they match so reboot command should have been fine but all O get now is hanging at the HTC screen, unless I reboot holding the volume down button then that takes me to hboot screen. What do I do?
UPDATE - As I worked out how to use clockwork I realized I had s-off so I downloaded CM7 and followed the instructions on wiping cache and what not then installed. All seems to be working now.
Thank you.
for future reference these is very common when switching hboots (part of the rooting process) you will not be able to boot into your previous rom as partition checks will have changed. when you have completed rooting you should either boot into fastboot or recovery to flash rom of choice
Sent from my HTC Vision using xda premium
i was able to download stock froyo from HTC but i don't know how to instal it in my 2.3.3 Gingerbread version.
also i don't understand this instructions attached to firmware
Please follow below command to download the official android toolchain: (arm-eabi-4.4.3)
git clone https://android.googlesource.com/platform/prebuilt
NOTE: the tool ¡¥git¡¦ will need to be installed first; for example, on Ubuntu, the installation command would be: apt-get install git
--Modify the .bashrc to add the toolchain path, like bellowing example:
PATH=/usr/local/share/toolchain-eabi-4.4.3/bin:$PATH
Are you rooted with s-off? If not you must do this first if you want to easily change between roms. actually to properly root and obtain true s-off one of the steps will be to downgrade to stock froyo, follow the xda or cyanogen wiki to get there
Sent from my HTC Vision using xda premium
demkantor said:
Are you rooted with s-off? If not you must do this first if you want to easily change between roms. actually to properly root and obtain true s-off one of the steps will be to downgrade to stock froyo, follow the xda or cyanogen wiki to get there
Sent from my HTC Vision using xda premium
Click to expand...
Click to collapse
i have tired to downgrade my htc vision but its not working please below is my cmd log
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Patrolscsn>adb devices
List of devices attached
SH0B1RT02382 device
C:\Documents and Settings\Patrolscsn>adb shell cat /dev/msm_rotator
/dev/msm_rotator: invalid length
C:\Documents and Settings\Patrolscsn>adb push fre3vo /data/local/tmp
cannot stat 'fre3vo': No such file or directory
C:\Documents and Settings\Patrolscsn>adb shell
$ chmod 777 /data/local/tmp/fre3vo
chmod 777 /data/local/tmp/fre3vo
Unable to chmod /data/local/tmp/fre3vo: No such file or directory
$ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
/data/local/tmp/fre3vo: not found
$ /data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF
/data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF
/data/local/tmp/fre3vo: not found
$
Either you forgot to extract the files or you didnt put them in the same folder as adb
Sent from my HTC Vision using xda premium
kenanibeze said:
C:\Documents and Settings\Patrolscsn>adb push fre3vo /data/local/tmp
cannot stat 'fre3vo': No such file or directory
$
Click to expand...
Click to collapse
This is your first error message. All following commands fail because of this. You cannot simply continue when one step is executed with error. You have to fix it and then continue.
The reason for the error message is simple. There is no such file as 'fre3vo' in the directory ‘C:\Documents and Settings\Patrolscsn’. Copy the file 'fre3vo' in this directory or change current directory to one where the file is located. If you don’t know how, then you should probably stop trying to root your device.
the fre3vo is in the directory!!!!!
shared_ptr said:
This is your first error message. All following commands fail because of this. You cannot simply continue when one step is executed with error. You have to fix it and then continue.
The reason for the error message is simple. There is no such file as 'fre3vo' in the directory ‘C:\Documents and Settings\Patrolscsn’. Copy the file 'fre3vo' in this directory or change current directory to one where the file is located. If you don’t know how, then you should probably stop trying to root your device.
Click to expand...
Click to collapse
i have the fre3vo in the directory and i downloaded it from the link provided by xda
kenanibeze said:
i have the fre3vo in the directory and i downloaded it from the link provided by xda
Click to expand...
Click to collapse
Yes, the file fre3vo is in the directory:
C:\platform-tools
But your current directory is (the directory where you execute the commands):
C:\Documents and Settings\Patrolscsn
Execute this command to change your current directory:
cd C:\platform-tools
Good luck, you'll definitely need it
Hold shift and right click in the folder where fre3vo and fastboot.exe etc, then choose open command here
Now start from the begining
Sent from my HTC Vision using xda premium
shared_ptr said:
Yes, the file fre3vo is in the directory:
C:\platform-tools
But your current directory is (the directory where you execute the commands):
C:\Documents and Settings\Patrolscsn
Execute this command to change your current directory:
cd C:\platform-tools
Good luck, you'll definitely need it
Click to expand...
Click to collapse
Thanks so much for the tip, finally after two weeks of searching how to get the magical // sign, I got it I’m ever grateful.:victory:
Please I want to upgrade my HTC sense, but I have no idea which custom sense is good for htc desire Z (I would have preferred sense 4.0 but sense 3.0 looks ok) which one should I go for?
Also which of the custom rom of ICS is best for desire z :highfive:
kenanibeze said:
Thanks so much for the tip, finally after two weeks of searching how to get the magical // sign, I got it I’m ever grateful.:victory:
Please I want to upgrade my HTC sense, but I have no idea which custom sense is good for htc desire Z (I would have preferred sense 4.0 but sense 3.0 looks ok) which one should I go for?
Also which of the custom rom of ICS is best for desire z :highfive:
Click to expand...
Click to collapse
You’re welcome.
I’m not a big fan of Sense, but I would go for Sense 4, since it is more "lightweight" (consumes less storage and CPU) than Sense 3.x. You also have to distinguish between Sense 4.0 and Sense 4.0A which is even more lightweight.
Remember that our device has no official support from HTC, so all ICS ROMs are not perfect. You will notice some glitch here and there, but everything is getting better and better. Some ROMs are pretty stable thought, for example Andromadus Mimicry (which is based on Cyanogenmod 9.1). If you can live without Sense I would recommend you this ROM.
Here are some links to ROMs:
Cyanogenmod 9.1 - Andromadus Mimicry
Sense 4.0A - Gen.Y VisionX
Sense 4.0 - Ice Cream SENSEwich
is my phone bricked?
shared_ptr said:
You’re welcome.
I’m not a big fan of Sense, but I would go for Sense 4, since it is more "lightweight" (consumes less storage and CPU) than Sense 3.x. You also have to distinguish between Sense 4.0 and Sense 4.0A which is even more lightweight.
Remember that our device has no official support from HTC, so all ICS ROMs are not perfect. You will notice some glitch here and there, but everything is getting better and better. Some ROMs are pretty stable thought, for example Andromadus Mimicry (which is based on Cyanogenmod 9.1). If you can live without Sense I would recommend you this ROM.
Here are some links to ROMs:
Cyanogenmod 9.1 - Andromadus Mimicry
Sense 4.0A - Gen.Y VisionX
Sense 4.0 - Ice Cream SENSEwich
Click to expand...
Click to collapse
hello please i need your help i think i have screwed up my htc, i was trying to run the permanent root by strawmental, after running the sequence the phone could not boot again, it stuck at the white background with htc logo.
How can i boot it back to life.
The S is off
h.boot now is 0.76.2000 (PC1011000)
MICROP 0425
CID 11111111
OS 1.34.405.5
this is d cmd log of the permanent root
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Patrolscsn>cd C:\platform-tools
C:\platform-tools>adb devices
List of devices attached
SH0B1RT02382 device
C:\platform-tools>adb push psneuter /data/local/tmp/
1453 KB/s (557962 bytes in 0.375s)
C:\platform-tools>adb push gfree /data/local/tmp/
1357 KB/s (716548 bytes in 0.515s)
C:\platform-tools>adb push busybox /data/local/tmp/
1468 KB/s (1926944 bytes in 1.281s)
C:\platform-tools>adb push hboot-eng.img /data/local/tmp/
1456 KB/s (1048576 bytes in 0.703s)
C:\platform-tools>adb push root_psn /data/local/tmp/
0 KB/s (564 bytes in 1.000s)
C:\platform-tools>adb push su /sdcard/
109 KB/s (26264 bytes in 0.234s)
C:\platform-tools>adb push Superuser.apk /sdcard/
1535 KB/s (196521 bytes in 0.125s)
C:\platform-tools>adb shell chmod 755 /data/local/tmp/*
C:\platform-tools>adb push recovery-clockwork-5.0.2.7-vision.img /data/local/tmp
/recovery.img
1479 KB/s (3739648 bytes in 2.468s)
C:\platform-tools>adb shell /data/local/tmp/psneuter
property service neutered.
killing adbd. (should restart in a second or two)
C:\platform-tools>adb shell
# cd /data/local/tmp
cd /data/local/tmp
# ./busybox md5sum /dev/block/mmcb1k0p18
./busybox md5sum /dev/block/mmcb1k0p18
md5sum: can't open '/dev/block/mmcb1k0p18': No such file or directory
# ./gfree -f -b hboot-eng.img -y recovery.img
./gfree -f -b hboot-eng.img -y recovery.img
--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
--hboot set. hboot image hboot-eng.img will be installed in partition 18
--recovery set. recovery image recovery.img will be installed in partition 21
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-gd2764ed
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Write protect was successfully disabled.
Searching for mmc_blk_issue_rq symbol...
- Address: c02a6a54, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02a6000
Kernel memory mapped to 0x40002000
Searching for brq filter...
- Address: 0xc02a6a54 + 0x34c
- 0x2a000012 -> 0xea000012
Backing up current partition 18 and installing specified hboot image...
Backing up partition /dev/block/mmcblk0p18 to /sdcard/part18backup-315983571.bin
...
Writing image hboot-eng.img to partition /dev/block/mmcblk0p18 ...
Backing up current partition 21 and installing specified recovery image...
Backing up partition /dev/block/mmcblk0p21 to /sdcard/part21backup-315983571.bin
...
Writing image recovery.img to partition /dev/block/mmcblk0p21 ...
Backing up current partition 7 and patching it...
Backing up partition /dev/block/mmcblk0p7 to /sdcard/part7backup-315983571.bin .
..
patching secu_flag: 0
Done.
# ./root_psn
./root_psn
# sync
sync
# cd /data/local/tmp
cd /data/local/tmp
# ./busybox md5sum hboot-eng.img
./busybox md5sum hboot-eng.img
7669ae12dc2faa10ae555a164980efd0 hboot-eng.img
# ./busybox md5sum /dev/block/mmcb1k0p18
./busybox md5sum /dev/block/mmcb1k0p18
md5sum: can't open '/dev/block/mmcb1k0p18': No such file or directory
#
Hi Everybody,
I know, that there are a lot of threats about this fact in the forum. But nothing will work for me, aspessially important links will not work anymore. Could anybody help me?
If I go to the bootloader (noise - and Power-On) there are the following informations written:
VISION PVT SHIP S-ON
HBOOT-0.85.0013
MICROP-0425
RADIO-26.10.04.03_MeMMC-boot
Apr 11 2ß11,23:36:27
HBOOT
OK, on my cell is working a Android 2.3.3, so I have to root my cell and downgrade.
I tryed to do this with the following threat: http://forum.xda-developers.com/showthread.php?t=905261
1. I Tryed to create a GOLDCARD. I read this threat, got the CID of my cell with the the code
Code:
adb shell cat /sys/class/mmc_host/mmc2/mmc2:*/cid
. Now I should type this CID in a webformular at this link to reverse it. This formular is still working, but there is also a Excel-Tool on this page for downloading, which should do the same. So my CID like "035344534d49202010000073b900d494" was reversed to "00d400b9730000102020494d53445303".
This code I should input to this formular for creating a GOLDCARD, but it doesn't work anymore.
So I looked around and found this threat, where a goldcardcreator is downloadable.
In this zip-file is included a program named "SimpleGoldCard", which read a reversed CID from the cell. On a command-Line I typed in
Code:
gcard -c 00d400b9730000102020494d53445303 -r -o "GoldCard.img"
Than I putted in the sd-Card into the Card-Reader of my Desktop, formatted it, used the tool "HeX Editor", copyed (line) 00000000 to offset (line) 00000170 (including the 00000170 line) and pasted it to the SD-Card.
After that I hope to created a correct GoldCard.
2. After that I downloaded the files psneuter, PC10IMG.zip and root. But in this threat is written, that I have to extract "misc_version_01.zip". Where is this file? I searched in this forum and downloaded a file named like this. Are there Differences or is a special version needed? I copyed the PC10IMG.zip to the SD-Card and put this to the cell.
3. then I booted the cell again, connected it to the desktop and used the following commands to put the downloaded files to the cell
Code:
adb push psneuter /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/psneuter
adb shell
After that I should get the # - symbol instead of the $ - symbol which means, that I rooted the phone. But here is my first problem, I didn't get the # - symbol, so I don't have the permission to start the next programms.
4. Normally I would do next the following commands and then to reboot and flash the older Firmware.
Code:
/data/local/tmp/misc_version -s 1.33.405.5
exit
adb reboot bootloader
But when I reboot, the bootloader is looking for the PC10IMG.zip, is loading and checking this ... and gives me the information
CID incorrect!
Update Fail!
Press <POWER> to reboot.
Well, this is the next big problem.
Cold anybody tell me, where my mistakes are? I read 2 days in the forum, tryed a lot to get the final result, but now I don't have the time anymore to continue in this way.
THanks a lot. with best regards, Speedy8
Mods please move to q&a
Always check the stickies
http://forum.xda-developers.com/showthread.php?p=43195539
Follow the threads linked here, don't use any other to root your phone, they will either be outdated or cause you trouble.
After following these threads if you still have issues post back and I'll try to help ya
Best of luck!
Sent from my Nexus 4 using xda premium
well ... I searched again today ... and found the following threat, which was working on my cell-phone.
And also at the cyanogenmod-page you can find the relevant things to root the Desire Z. You can find it here.
Now I will first install the latest cyanogenmod, which is for the Desire Z not the Android 4, but at the moment newer than 2.3.3.
Thanks for answering, my Questions are answered.
With best regards.