I'm looking for Gingerbread stock ROM with Sense to unroot my HTC DZ. I've searched in the HTC Desire Z subforum but what I found were either G2/DZ stock Froyo ROM or Gingerbread without Sense.
Can you guide me to find the original stock ROM with sense?
Thanks!
First off, if you rooted with gfree, you need to flash a stock froyo rom to unroot properly.
Then you can flash a gingerbread stock rom, which can be found on shipped-roms.com (which currently seems to be down).
To unroot fully (remove S-OFF, superCID, etc) you need adb set up, gfree, psneuter and the part7backup-xxxxxxxx.bin that gfree created when you ran it (should be on your sdcard)
then flash a stock 1.34 rom (DZ) or 1.19 rom (G2).
Push psneuter and gfree and part7backup to /data/local/tmp
Code:
adb shell
cd /data/local/tmp
chmod 755 *
./psneuter
adb shell
cd /data/local/tmp
./gfree -r part7backup-xxxxxxx.bin
-Nipqer
Nipqer said:
First off, if you rooted with gfree, you need to flash a stock froyo rom to unroot properly.
Then you can flash a gingerbread stock rom, which can be found on shipped-roms.com (which currently seems to be down).
To unroot fully (remove S-OFF, superCID, etc) you need adb set up, gfree, psneuter and the part7backup-xxxxxxxx.bin that gfree created when you ran it (should be on your sdcard)
then flash a stock 1.34 rom (DZ) or 1.19 rom (G2).
Push psneuter and gfree and part7backup to /data/local/tmp
adb shell
cd /data/local/tmp
chmod 755 *
./psneuter
adb shell
cd /data/local/tmp
./gfree -r part7backup-xxxxxxx.bin
-Nipqer
Click to expand...
Click to collapse
Really helpful! Thanks.
But I've removed the part7backup-xxxxxxxx.bin from sdcard (Actually, I've formatted the sdcard). So can't I unroot completely to factory state?
That makes it a little bit more annoying.
Same set up, but the gfree command would change
First we need to know your default cid, so in adb shell do:
Code:
dd if=/dev/block/mmcblk0p17 bs=1 count=8 2>/dev/null; echo
then we need to run gfree like so:
Code:
./gfree -s off -c <CID from previous command>
-Nipqer
Thanks Nipqer!
I'm waiting for shipped-roms.com!
Related
I rooted my phone using the gfree method outlined in the wiki, but made a Nandroid backup of stock before I started anything. I restored the backup; is there anything else I need to do before sending it back?
I noticed that still have the Superuser app in my app drawer, and I wasn't able to follow the instructions for S-OFF here (http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Turning_S-On) as it said "Permission denied" when I type cd /data/local (I also noticed that I don't have the /data/local folder anymore on my sd card).
Gfree gives you an option to turn S-off or S-on, go back to the wiki and re-read it, the code below is copied from the Wiki and I highlighted the options in red for you, just run gfree again with the -s option
Code:
gfree usage:
gfree [-h|-?|--help] [-v|--version] [-s|--secu_flag on|off]
-h | -? | --help: display this message
-v | --version: display program version
-s | --secu_flag[COLOR="red"] on|off[/COLOR]: turn secu_flag [COLOR="Red"]on[/COLOR] or [COLOR="red"]off[/COLOR]
-c | --cid <CID>: set the CID to the 8-char long CID
-S | --sim_unlock: remove the SIMLOCK
-f | --free_all: same as --secu_flag off --sim_unlock --cid 11111111
As far as superusers app, just go into the app manager and remove it.
Sorry, I should've clarified that I don't have gfree anymore. I tried again and this is the prompt I get:
$ su
su
# cd data/local
cd data/local
# chmod 777 gfree
chmod 777 gfree
Unable to chmod gfree: No such file or directory
# ./gfree
./gfree
./gfree: not found
#
Push the gfree file back to data/local and rerun the commands except with -s option read the wiki again and use the right commands.
Sent from my HTC Vision using XDA App
All right, got my phone back to stock unrooted and with S-ON. Here's what I did (note that my circumstances my be different than yours so try this at your own risk):
I rooted and S-OFFed using the rage (v 0.03-this will come into play later) method on the wiki (http://forum.xda-developers.com/wik...sion#Rooting_the_Vision_.28G2.2FDZ.29_and_DHD). I did this right when I got the phone, so no OTA update (I had 1.19). Downloaded ROM Manager and did a Nandroid backup at this point (in my above post I said I made a backup right at the beginning which I was mistaken on). Then I went ahead and flashed CyanMod.
Phone earpiece broke, so I had to get the phone back to stock. First I restored my backup ROM (so back to 1.19 again). Used the unroot guide (http://forum.xda-developers.com/showthread.php?t=835971), and during step one, I got the following error:
E:Board does not support mtd utils.E:Failure at line 344:
write_raw_image PACKAGE:boot.img BOOT:
Installation aborted.
Failure at line 6:
install_zip SDCARD:/stock_root.zip​Some others seemed to get this error as well and it looked benign. Continued and rebooted the phone. Figured this would be a failure, so I followed the HexEditor steps. Turns out the misc.img file was already the right version, but I renamed it and ran dd if=/sdcard/miscnew.img of=/dev/block/mmcblk0p17 just in case.
Step 2 ran without any problems, so now I had a stock phone with S-OFF. To turn it back on, I temp rooted the phone (just follow the TEMP Root steps in the wiki). I then tried to follow the S-ON directions on the wiki (http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Turning_S-On), but the phone would automatically reboot after the dd line while not changing S-OFF.
Then I realized that I could use ./gfree -s on to turn S-ON since I was using 0.03, which worked perfectly. Rebooted to remove the temp root, and did a factory restore for good measure, and I believe I have a fairly pristine G2 ready for replacement.
Thanks to all the wikis and threads for their help!
I have a question about restoring to factory settings. Cant you just use the RUU from HTC (if you have a Desire Z that is) and just run that? Wont that just put it back to factory settings?
Hello.
I've tried to root my Desire Z. I wanted to achieve only the ROOT not S-off and so on. Just to be able to use some root requiring applications like DSP Manager or Adds free.
1. So I've downloaded and installed Android SDK.
2. Started ADB
3. "adb devices" gave me the proper answer
4. Then I've copied and started psneuter and misc_vesion:
adb push psneuter /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/psneuter
adb shell
/data/local/tmp/misc_version -s 1.33.405.5
exit
5. Then I've tried to root the phone:
Ive copied the required files:
adb install AndroidTerm.apk
adb push busybox /data/local/tmp/
adb push gfree /data/local/tmp/
adb push rage /data/local/tmp
adb push root /data/local/tmp/
adb shell chmod 0755 /data/local/tmp/*
adb push su /sdcard/
adb push Superuser.apk /sdcard/
And then from the Terminal Emulator I've entered
/data/local/tmp/root
I've got some messages that the everything is read only so I've tried rage first:
/data/local/tmp/rage
I've got the proper "Forked #### childs" output
and then I've tried the "/data/local/tmp/root" again. But I'm getting the "cannot fork" message.
I'm new in this stuff s please help me. What do I do wrong?
I only want the simple root access I don't want to downgrade my phone and install any custom roms.
Please help.
ps. my "compilation number" is: 1.72.405
As far as I remember your supposed to flash 1.34 Rom after changing the version number to 1.33 as the rooting is only possible via 1.34 Rom and not 1.72 Rom .... And you clearly missed that step .... Open desire z wiki and read the psneuter guide ... Follow it word for word .... You will root your phone
Maxymo123 said:
Hello.
I've tried to root my Desire Z. I wanted to achieve only the ROOT not S-off and so on. Just to be able to use some root requiring applications like DSP Manager or Adds free.
1. So I've downloaded and installed Android SDK.
2. Started ADB
3. "adb devices" gave me the proper answer
4. Then I've copied and started psneuter and misc_vesion:
adb push psneuter /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/psneuter
adb shell
/data/local/tmp/misc_version -s 1.33.405.5
exit
5. Then I've tried to root the phone:
Ive copied the required files:
adb install AndroidTerm.apk
adb push busybox /data/local/tmp/
adb push gfree /data/local/tmp/
adb push rage /data/local/tmp
adb push root /data/local/tmp/
adb shell chmod 0755 /data/local/tmp/*
adb push su /sdcard/
adb push Superuser.apk /sdcard/
And then from the Terminal Emulator I've entered
/data/local/tmp/root
I've got some messages that the everything is read only so I've tried rage first:
/data/local/tmp/rage
I've got the proper "Forked #### childs" output
and then I've tried the "/data/local/tmp/root" again. But I'm getting the "cannot fork" message.
I'm new in this stuff s please help me. What do I do wrong?
I only want the simple root access I don't want to downgrade my phone and install any custom roms.
Please help.
ps. my "compilation number" is: 1.72.405
Click to expand...
Click to collapse
Sent from my HTC Vision using XDA App
Just out of curiosity, if you only want to root to use some applications and such, why don't you just temp root using visionary and just redo it whenever you restart your phone?
Thanks for the answers guys.
your supposed to flash 1.34 Rom after changing the version number to 1.33
Click to expand...
Click to collapse
hispeedworm - I don't want to downgrade my phone. I don't need it and I don't want to loose whole the settings and apps and start from the beginning just for using some special apps.
mmduluth - I've used the visionary method from this topic while it seemed the easiest one for the beginner. However after taping the "TempRoot Now!" the VISIONary+ seemed to hang. The screen was black for several minutes.
So I've decided it does not work.
Anyway, I'd prefer to have permanent root than a temp one for example for using "autostarts" - which as far as I'm concerned works AFTER rebooting the phone.
So anyone could tell me where is a mistake in what I did?
I suppose I've omitted one thing in former trials so I've tried to root it again.
After entering the Terminal Emulator I've run rage:
/data/local/tmp/rage
I've got the Forked #### childs message so everything was ok till then.
Then I've reset terminal --> menu-->reset term
And then I've run the terminal again.
I should get the # sign but what I get is the totally white screen with no possibility to write any command. It's not responding. I can only get out from it by pressing the home button.
So what's going wrong?
Maxymo123 said:
I suppose I've omitted one thing in former trials so I've tried to root it again.
After entering the Terminal Emulator I've run rage:
/data/local/tmp/rage
I've got the Forked #### childs message so everything was ok till then.
Then I've reset terminal --> menu-->reset term
And then I've run the terminal again.
I should get the # sign but what I get is the totally white screen with no possibility to write any command. It's not responding. I can only get out from it by pressing the home button.
So what's going wrong?
Click to expand...
Click to collapse
If you read enough threads/post, at the moment, the only way to gain permaroot is to downgrade your ROM. Unless, somebody finds a way to do it without the need to downgrade.
And, as I understand, using Visionary apps would cause damage to your device. Be careful!
Cheers...
Thank you silverwind. Now it's clear.
So anyone is working on this?
Cheers
Hello everyone!
Not my phone, just helping a friend
We got problems downgrading from Gingerbread to earlier version of Android.
So, wanted to root, flash custom recovery, then MIUI.
Started with this tut, then understood, that Gingerbread isn't rootable and it needs to be downgraded.
So, tried [GUIDE] Downgrade G2 (2.3.X) & DZ (2.3.X) & mT4g (2.3.4) & DHD w/ S-ON to Stock Froyo and HTC Desire Z: Firmware Downgrade (Gingerbread).
So, installed JRE, JDK, SDK (ADB), drivers.
With phone plugged to PC (USB Debuggind ON), ADB & Device manager sees it.
So, moved files to C:\android-sdk\platform-tools and ran cmd (administrator privileges). Till "adb shell it's good". But, after that, when ran chmod, it says, that permissions denied.
Question:
What we're doing wrong and how to fix it?
We've read so many guides, but unsuccessfully so far..
Device HTC Desire Z
Android 2.3.3
Kernel version 2.6.35.10-g7b95729
Baseband 12.56.60.25U_26.10.04.03_M
Build 2.42.405.2 CL84109
Thanks about helping!
Is it permission denied when u try to change the version? If permission denied during change the version, run this command:
cd /data/local/tmp/misc_version
chmod 777 misc_version
./misc_version -s 1.00.000.0
sync
Sent from my HTC Vision using XDA App
Are you sure your temp root is working?
aDeQ666, no, it wont chmod when typing chmod 777 /data/local/tmp/fre3vo, so - no temp root for us. Tried visionary, z4root, SuperOneClick - nothing works
It was updated from Froyo to Gingerbread via OTA, i think that's the issue? What else we can do? Thanks!
Could you post a copy/pastebin of your cmd when running it? It'll be much easier to spot the error if we can see exactly what you did/are doing.
-Nipqer
I have one problem when i tried to root htc desire. i already done the downgrade and now i am want to root... i folllowed the instructions on the link you gave untill this
[chmod 755 /data/local/tmp/*
/data/local/tmp/psneuter
NOTE: You will drop out of the shell after this command. Restart the shell using:
adb shell
cd /data/local/tmp
./busybox md5sum /dev/block/mmcblk0p18]
well after command:
chmod 755 /data/local/tmp/*
/data/local/tmp/psneuter
i`m not dropping out of the shell and the next instruction results with a "cd: bad substitution" msg. what should i do?
sorry for my bad english
When do u received the error? Is it when u downgrading or try to root? Are u using the wiki guide?
What I've down a few times now (and this does work) is use the fre3vo guide (the one you linked) to downgrade then continue with the guide below from step 14 or 15 to gain perm root.
http://forum.xda-developers.com/showthread.php?t=905261
Hope that helps.
Edit: You're better off flashing 1.34.405.5 as the one on the CM wiki may not be working. Its worth a shot IMO.
aDeQ666 said:
Is it permission denied when u try to change the version? If permission denied during change the version, run this command:
cd /data/local/tmp/misc_version
chmod 777 misc_version
./misc_version -s 1.00.000.0
sync
Sent from my HTC Vision using XDA App
Click to expand...
Click to collapse
Hi, i have been trying to change my misc version but it gives me permission denied and i have # (root) already. So i tried chmod after cd which didn't have a problem but now when i try harder./misc_version it says the file not found.
Please help
I used this guide. it worked fine for me =)
http://forum.xda-developers.com/showthread.php?t=905261
*faceslapps self* sorry. I was a tad too fast. I didn't see that someone allready posted that guide here.
This is the command that i use before this:
adb push misc_version /data/local/tmp/misc_version
cd /data/local/tmp/misc_version
chmod 777 misc_version
./misc_version -s 1.00.000.0
sync
Sent from my HTC Desire Z using XDA App
I used this guide when I had to go through the pain of downgrading my desire z http://forum.xda-developers.com/showthread.php?p=15851843 . It worked very easily, just follow the instructions nice and carefully, the problem is that you need ADB set up for you to use that guide though.
Once you downgrade though, I would use the guide here for rooting your phone http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2 .
I hope that helps, that's what I used for my phone.
To be more precise in regards to the problem though, i just realised that i had the same problem as you when i was trying to run the chmod command where i had temproot but i kept getting "permission denied". As it turned out, i had accidentally written "adb push fre3vo /data/local/tmp/" instead of "adb push fre3vo /data/local/tmp" when i was following that downgrading guide. Basically what my mistake did was, it pushed fre3vo into a new folder within /tmp instead of just placing fre3vo in /tmp. So what you can do to figure out where fre3vo is, navigate to the /tmp folder using CD (in adb shell) and once you get to /tmp, type "ls". This will then display all the contents of /tmp and then you will be able to see if you accidentally created a folder like i did. Then once you check that, when you go to run the chmod command, you have to run it like "chmod 777 /data/local/tmp/**possible accidental folder name**/fre3vo", see if that works now .
Use this guide should do the job for you www.desirez.strawmetal.com
aDeQ666 said:
This is the command that i use before this:
adb push misc_version /data/local/tmp/misc_version
cd /data/local/tmp/misc_version
chmod 777 misc_version
./misc_version -s 1.00.000.0
sync
Sent from my HTC Desire Z using XDA App
Click to expand...
Click to collapse
were you able to fix this problem?
I had the same problem with my Desire Z with OTA 2.3.3.
Finally I've unlocked bootloader as show at htcdev.com.
Then I used this guide http://forum.xda-developers.com/showthread.php?t=1453066 (great thx for it), and CM 7.1 works like a charm.
All best.
allendon said:
were you able to fix this problem?
Click to expand...
Click to collapse
For my case, yes.
Sent from my HTC Vision using XDA App
Hi,
I had to return to stock rom for warranty and now i am trying to root it again. i have completed root and s-off operations but i can't enter recovery. when i select recovery from bootloader menu, i only see exclamation mark with black screen...
i entered these commands but second command gave me "gfree -y: unknown operation". how can i solve this?
Code:
4.a.2. gfree, install hboot and clockworkmod recovery
In the root shell (indicated by the #) that you got in the Temporary root section execute the following commands:
# cd /data/local/tmp
[B][U]# ./gfree -f -b hboot-eng.img -y recovery.img[/U][/B]
# ./root_psn
# sync
Means you are running an older version of gfree.
Only gfree 0.7 supports the -y arg.
You can find it here
(to find out what version of gfree you have, use ./gfree -v )
-Nipqer
Nipqer said:
Means you are running an older version of gfree.
Only gfree 0.7 supports the -y arg.
You can find it here
(to find out what version of gfree you have, use ./gfree -v )
-Nipqer
Click to expand...
Click to collapse
Thank you for your help but now the same command is giving me "./gfree: permission denied". why should it be?
Did you use the chmod command? Check the wiki, but it will probably be something like "chmod 755 /path/to/gfree"
chmod 755 /data/local/tmp/*
Also the command might have to be:
/data/local/tmp/gfree -v
to run gfree, unless you cd to /data/local/tmp (or wherever you pushed gfree to), in which case the '.' in './gfree' means 'this directory'
-Nipqer
Thank you all for help. Everyday i had another error. For example today i got psneuter error but i finally installed recovery...
Sent from my HTC Vision using xda premium
Hi. I did a factory reset and now I cannot get past the white HTC welcome screen. I don't have the phone rooted, hboot says S-ON. I had USB debugging disabled when doing the reset, so now I can't turn it on (since I won't get anywhere near the actual system).
Also, I don't know if this is the cause of not having USB debugging on - adb can't seem to find my device. When connected, it shows HBOOT USB PLUG, but adb devices returns an empty list..
Is there a way I can root/unlock the phone, without having debugging on, so that I can flash a recovery and a new system?
Thanks
Not too likely, adb will never work in bootloader mode but fastboot should. adb only works in os and recovery.
What you'll need to do is flash an RUU through bootloader or fastboot to get things working again. Check the development section here for a list of the latest RUUs for the vision
Sent from my Nexus 4 using XDA Premium 4 mobile app
I was swamped and got back to it by now. Thank you for your suggestion. It doesn't work though.
I downloaded the newest RUU from htcdev.com, the phone did get recognized by fastboot and the RUU installer seemed happy. However, when the actual update started, it got stuck on "Rebooting bootloader" or similar for over half an hour. That's when I decided to cancel it.
Next on, I tried steps shown here: androidforums .c o m/htc-desire-s/678126-desire-s-stuck-bootloader.html
fastboot erase cache - this got stuck on 'erasing cache', nothing happened afterwards
fastboot oem rebootRUU - this wrote "..." and nothing else happened
Is there anything else I can try?
ROOT
http://forum.xda-developers.com/showthread.php?t=2348266
http://forum.xda-developers.com/showthread.php?t=1178912
http://forum.xda-developers.com/wiki/HTC_Vision
How To Get R/W Access (Permanent Root / "Permaroot") using gfree v1.0[edit]
Prerequisites
Having the proper USB drivers installed - HTC Sync including Windows USB Drivers for the Vision
Disable auto-run or uninstall Visionary if you have it (It's important!)
adb (installed as part of the Android SDK.) See this guide on how to install/setup adb on your PC.
The HTC Desire Z with a firmware version higher than 1.34, T-Mobile G2 with a firmware version higher than 1.22 and the Desire HD with a firmware version higher then 1.32 have to be downgraded before proceeding.
Downgrading HTC Desire Z, T-Mobile G2 and Desire HD
For the 1.XX firmware HTC Desire Z follow this guide Downgrade DZ till step 12 and then come back.
For the 1.XX firmware HTC Desire HD follow this guide Downgrade HD and then come back.
For the 2.XX firmware HTC Desire Z/Desire HD and T-Mobile G2 follow this guide GUIDE Downgrade G2 2.13.531.8 (2.3.3 T-Mobile Rom w/ S-ON) & DZ 2.3.3 w/ S-ON" and come back. The history can be found in this thread New exploit works with Gingerbread! and Desire Z users see this posting of the thread Desire Z explanation.
Please use your brain when following these postings / guides. Especially make sure that you use a PC10IMG.zip for your device!
1. Necessary files
psneuter psneuter.zip (md5sum 89c2dec8d72d87b4c669f44dd31c8d17)
gfree v1.0 gfree_10.zip (md5sum 0bc9fc22bda897c765b02066f8a3c83b)
root_psn root_psn.zip (md5sum c8fe38ef55eb8951def9ff17b2eb99c1)
Superuser package su-2.3.6.2-efgh.zip (md5sum 43d9a40b63e916635d5ad7ca32433fab)
1.1. engineering hboot
Download the appropriate HBOOT for your phone:
T-Mobile G2: vision.hboot-0.76.2000.zip / Mirror (md5sum 7669AE12DC2FAA10AE555A164980EFD0)
HTC Desire Z: vision.hboot-0.84.2000.zip / Mirrors in this thread (md5sum 2CE1BDD5E4C1119CCFCECB938710D742)
HTC Desire HD: ace_glacier.hboot-0.85.2007.zip (md5sum df4fd77f44993eb05a4732210d2eddc6)
Note that the md5sums are for the actual hboot img contained within the zip file, not the for the zip file itself. Note also that the dz, g2, and dhd each use their own version of the engineering boot, as the phones are partitioned differently. (If you have previously installed the wrong HBOOT for your phone, you may need to reflash everything after partition 18)
1.2. clockwork recovery
Download the appropriate clockwork recovery for your phone:
ClockworkMod Recovery 5.0:
T-Mobile G2 and HTC Desire Z: recovery-clockwork-5.0.2.7-vision.img (md5sum 87a428549440894dbe2f96dd5efc4fb5)
HTC Desire HD: recovery-clockwork-5.0.2.0-ace.img (md5sum b8d77b9352dcbb41839e45342ea35658)
ClockworkMod Recovery 5.8 (touch):
T-Mobile G2 and HTC Desire Z: recovery-clockwork-touch-5.8.1.0-vision.img (md5sum b21aa5a0d593b6ebce880be3316ff64a)
HTC Desire HD: recovery-clockwork-touch-5.8.1.5-ace.img (md5sum fd6abfbc459663455a25b88ca7d77442)
Rename the file to 'recovery-clockwork.img'.
2. Copy the files to the phone
Before you can adb as described below you need to enable debugging in the settings on the phone. In Settings go to "Applications -> Development" and check the "USB debugging" option.
Connect the phone to the USB of your PC. The phone will stay connected during the complete procedure.
Make sure that you do NOT turn on USB storage. There has to be a sdcard in the phone and it has to be mounted to the phone!
In the commands to run below, $ or # represent the prompt and should NOT be entered as part of the commands (in Windows this will be something like C:\> instead).
Unpack all the zip files to a directory on your PC. Open a terminal (or command window) on your PC and change the current directory to where the files are on your PC and execute these commands:
$ adb push psneuter /data/local/tmp/
$ adb push gfree /data/local/tmp/
$ adb push busybox /data/local/tmp/
$ adb push hboot-eng.img /data/local/tmp/
$ adb push root_psn /data/local/tmp/
$ adb push su /sdcard/
$ adb push Superuser.apk /sdcard/
$ adb shell chmod 755 /data/local/tmp/*
2. clockwork recovery for T-Mobile G2 and HTC Desire Z
To copy your clockwork recovery execute the following command in the terminal or command window
$ adb push recovery-clockwork.img /data/local/tmp/recovery.img
3. Temporary root
In the terminal (or command window) execute these commands:
$ adb shell /data/local/tmp/psneuter
$ adb shell
after the last command you should have a root shell in adb (this is indicated by a # prompt). Leave this terminal (or command window) that contains the root shell open.
4 S-OFF, root and its friends Super-CID, SIM-unlock, engineering hboot, clockwork recovery and root
In the following section we are trying to gain write access to the emmc by power cycling it.
We recommend to install the engineering hboot as part of the gfree procedure.
In the root shell (indicated by the #) that you got in the Temporary root section execute the following commands:
# cd /data/local/tmp
# ./gfree -f -b hboot-eng.img -y recovery.img
# ./root_psn
# sync
Wait a few seconds for the changes to "take".
4.1. Automatic gfree hboot verification
As it is very important that the hboot was installed correctly gfree calculates md5sums of the partition. It will calculate the following 3 checksums
md5sum #1 - checksum of partition 18 before the installation
md5sum #2 - checksum of the hboot image that should be installed
md5sum #3 - checksum of partition 18 after the installation
gfree will check the md5sums and give you a proper success or error message. The messages are explained in detail at gfree-wiki
The messages that you want to see are either:
md5sum #1 == md5sum #2 - the hboot image is already installed -> skipping installation
or
md5sum #3 == md5sum #2 - the hboot image was successfully installed -> OK!
If you get a different error message you should run for help at #G2ROOT on Freenode.
If you got one of the two success messages described above -> You are fine, Reboot your phone by executing the following command in the root shell (indicated by the #):
# reboot
5. Verify the success of gfree
You can verify the success of gfree by using gfree_verify.
Download gfree_verify.zip from gfree_verify_v01.zip (md5sum 8e3535fd720d19fa0aec4eb711b897c4)
Unzip gfree_verify_v01.zip to a place on your PC.
Open a terminal (or command window) on your PC and change the current directory to where the files are on your PC and execute these commands:
$ adb push gfree_verify /data/local/tmp
$ adb shell chmod 755 /data/local/tmp/gfree_verify
$ adb shell
In this shell:
Remark: When you run su for the first time in the adb shell make sure the the screen of the phone is unlocked. Because when you enter the command the Superuser app will show up and ask you if you want to grant superuser access to app Unknown (2000).
Check the Remember check box and click allow.
$ su
# cd /data/local/tmp
# stop ril-daemon
# ./gfree_verify
You should see the following output:
gfree verify_cid returned:
@cid: 11111111
OK
gfree verify_secu_flag returned:
@secu_flag: 0
OK
gfree verify_simlock returned:
@simlock= 00
OK
Start the interface layer again (IN THE ADB SHELL ON YOUR PC):
# start ril-daemon
Did it work? Here's what you're looking for:
@cid: 11111111 <--- this response means you have superCID!
@simlock= 00 <--- this means your simlock is off.
@secu_flag: 0 <--- this means your radio is S-OFF.
6. Backup and cleanup
During the process gfree created backups of the partitions that it changed on your sdcard in /sdcard/
The files are called /sdcard/part7backup-.bin, part18backup-<time>.bin (if you installed hboot) and part21backup-<time>.bin. It is highly recommended that you copy these files to a save location on your PC and keep them!
You can delete the files in /data/local/tmp they are not needed anymore.
7. Next steps
Find a custom rom that you would like to install and install it using the clockwork recovery.
Enjoy the freedom of your phone.
If you like free phones and our work we would like to ask you to support the EFF.
Support the EFF[edit]
or
http://forum.xda-developers.com/showthread.php?t=1097977