Database Users

[Q] Backing up stock HBOOT

My sister-in-law got a Bell Desire Z and she may want my assistance with rooting and S-OFF.
I see that the key instruction to install ENG HBOOT is:
dd if=/sdcard/hbooteng.img of=/dev/block/mmcblk0p18
I'm guessing, then, if I wanted to back up the stock HBOOT first, I could do the following?
dd if=/dev/block/mmcblk0p18 of=/sdcard/hbootstock.img
And then if we later needed to restore stock HBOOT from the backup:
dd if=/sdcard/hbootstock.img of=/dev/block/mmcblk0p18
Did I get the syntax right? I wouldn't want to brick her phone

Yes, thats the way to do it. I also backed up all other 30 partitions just in case
Not sure about the restore though. I mean: It's the right commands and everything, but I'm not sure if it will work. Don't see why not though.

dicer42 said:
Yes, thats the way to do it. I also backed up all other 30 partitions just in case
Not sure about the restore though. I mean: It's the right commands and everything, but I'm not sure if it will work. Don't see why not though.
Click to expand...
Click to collapse
Actually now that I've read about nightmarish situations where G2 owners tried to flash back using PC10IMG.zip after perm root and S-OFF, but the first thing it did was replace stock HBOOT, which subsequently locked them out of the rest of the phone. Yikes. I guess you really have to know what you're doing!

cmstlist said:
Actually now that I've read about nightmarish situations where G2 owners tried to flash back using PC10IMG.zip after perm root and S-OFF, but the first thing it did was replace stock HBOOT, which subsequently locked them out of the rest of the phone. Yikes. I guess you really have to know what you're doing!
Click to expand...
Click to collapse
That problem will happen ONLY in the case you are flashing a PC10img.zip different from your original version, or if you are flashing an older version...
That will not happen if you get pc10img.zip from your accurate current version or a newer firmware version

Revert to Stock: howto undo Root, S-Off?

I rooted my Desire Z with gfree gfree ("Permaroot", S-Off, CID 11111111) according to the guide in the XDA-Wiki.
Of course i still have the backup of "partition 7" ("part7backup-<time>.bin") and i did a nandroid backup directly after rooting.
How and in which order i can revert completly to stock (without S-off, root, busybox, ...)?
There is an explanation in the Wiki:
Returning_to_Stock
But is this enough? su, busybox, superuser.apk are still in the flash, isn't it?

Installing busybox and having a file called "Superuser.apk" on your phone isn't enough to void your warranty. Just remove the Superuser app so it doesn't stick out like a sore thumb, and remove su from /system/bin if you like.

Hi
I'm in a similar position, needing to return my Z due to a hardware defect I'd like to restore the stock image
I've been able to restore the stock OS image but my radio remains S-OFF and i no longer have the partition 7 backup made by g-free during unlocking (see aforementioned hardware fault)
Can i simply use the part7backup-timestamp.bin from another unlocked desire Z, and if so, would someone be kind enough to post theirs?
If not, what other recourse do i have?

steviewevie said:
Installing busybox and having a file called "Superuser.apk" on your phone isn't enough to void your warranty. Just remove the Superuser app so it doesn't stick out like a sore thumb, and remove su from /system/bin if you like.
Click to expand...
Click to collapse
It's not because of warranty. Here in germany you can return things bought over the internet for 2 week. I was quite happy with my Desire Z and decided to keep it, so i rooted. After a few days i realized that i hardly never use the hardware keyboard and so i changed my mind and want to return it (for ordering a Desire HD).
FOr being able to return it, the device has to be in the state it was when i got it. So not only S-off, but also root should be undone completly.

Deebens said:
I'm in a similar position, needing to return my Z due to a hardware defect I'd like to restore the stock image
I've been able to restore the stock OS image but my radio remains S-OFF and i no longer have the partition 7 backup made by g-free during unlocking (see aforementioned hardware fault)
Can i simply use the part7backup-timestamp.bin from another unlocked desire Z, and if so, would someone be kind enough to post theirs?
If not, what other recourse do i have?
Click to expand...
Click to collapse
You can use gfree to set S-ON, by running "gfree -s on" (see the Wiki). You can also reset the CID using gfree. However, if your phone was SIM locked and you unlocked it with gfree, you can only restore that lock by restoring the partition 7 backup. So you won't be able to do that bit if you need to restore the SIM lock.

steviewevie said:
You can use gfree to set S-ON, by running "gfree -s on" (see the Wiki). You can also reset the CID using gfree. However, if your phone was SIM locked and you unlocked it with gfree, you can only restore that lock by restoring the partition 7 backup. So you won't be able to do that bit if you need to restore the SIM lock.
Click to expand...
Click to collapse
Thankyou for your swift reply!
I had wondered if this was all I had needed to do, but no matter how many times i read it i was not confident of this fact. Thanks for confirming for me.
Having resolved to restore my phone to stock, however, it is now behaving itself perfectly.
Blah.

Is there really no way to completly unroot?

Bierfreund said:
Is there really no way to completly unroot?
Click to expand...
Click to collapse
Yes, you can re-flash the stock ROM which will be completely unrooted. When you do this, make sure you know what you are doing - e.g. if you flash an older stock ROM whilst you still have the eng hboot but no S-OFF via gfree, you could brick/semi-brick your phone.
It really depends if you've flashed a different ROM, exactly how you got S-OFF etc.
The simplest is if you have radio S-OFF via gfree, in which case you can flash a stock ROM, get temp root again (not perm root) and then use gfree to go back to S-ON (gfree -s on).

Edit: Got it fixed.

So is there no way to sim-lock it back without the partition7 backup? I had to run gfree twice for some reason on my G2 to get it to work, and it backed up the sim-unlocked partition7. Am I screwed out of sim-locking it back?

phoenx06 said:
So is there no way to sim-lock it back without the partition7 backup? I had to run gfree twice for some reason on my G2 to get it to work, and it backed up the sim-unlocked partition7. Am I screwed out of sim-locking it back?
Click to expand...
Click to collapse
Are you saying you dont have the original "part7backup-timestamp.bin"? Do you need your sim unlock back on for warranty? I doubt they will check if you sim unlocked your phone and even if they do T-mobile freely gives out the unlock code for your phone to there loyal Tmobile customers, so I doubt the sim unlock affects your warranty.

Hi guys,
I've 2 Part7backup because i had to run gfree twice - gfree 05 and gfree 02.
Got S-off with the 2nd gfree 02
Not knowing they're important, i deleted both of them.
I've only manage to retrieve the 1 of the deleted part7backup which belongs to the gfree 05.
Are both the Part7backup the same?
Can i run gfree again the 2nd time to get the Part7backup file?
Thanks.

With out redoing sim lock can we still just s-on with sim lock still being off

S-ON and S-OFF

Today I accidently turned it on (the thing in the bootloader) and now I can't turn it off no matter what so I can do a revert to stock .img, I used the PDI15.img or w.e that would revert back to stock forgetting that I had the newest radio and now I can't revert to stock or turn S-OFF. Please help
Current Configurations:
GLACIER PVT SHIP S-ON
HBOOT - 0.86.0000
MICORP - 0429
RADIO - 26.09.04.26_M
eMMC - BOOT
More Info:
When I use a PDIMG or w/e file it errors out as being old

Can you still boot? Like into your rom? If so just try rooting using visionary and using a root explorer to push the gfree files to data/local/ then just follow the normal rooting procedure
Sent from my HTC Glacier using XDA Premium App

Nicgraner said:
Can you still boot? Like into your rom? If so just try rooting using visionary and using a root explorer to push the gfree files to data/local/ then just follow the normal rooting procedure
Sent from my HTC Glacier using XDA Premium App
Click to expand...
Click to collapse
Yeah I can still boot into my rom, bootloader, and recovery and okay will try that
EDIT: Okay I did, I tried turning S-OFF but it says something about eMMC power cycle failed

XxKOLOHExX said:
Yeah I can still boot into my rom, bootloader, and recovery and okay will try that
EDIT: Okay I did, I tried turning S-OFF but it says something about eMMC power cycle failed
Click to expand...
Click to collapse
dude! I noticed this also this morning. I am rooted(using setcpu and root explorer just fine) but in hboot it says s=on. I was also wanting to flash the stock .img and start fresh. thought I was the only one having this problem. tried everything you did and got the same results.

What ROM are you on? AFAIK, gfree, requires the stock kernel to do what it does. How on earth did you turn S-ON? That sort of thing shouldn't just happen out of nowhere.

How is the progress on fixing your phone?

jdkoren said:
What ROM are you on? AFAIK, gfree, requires the stock kernel to do what it does. How on earth did you turn S-ON? That sort of thing shouldn't just happen out of nowhere.
Click to expand...
Click to collapse
currently on Evil D mTGB v1.0, Faux 0.0.7 CFS lv leak kernel. everything works fine, no FC's or anything. just having the same issues as XxKOLOHExX. I really have no idea how it turned on by itself, I dont remember doing anything out of the ordinary

I was trying to get back to stock from the rom i was on. (MIUI) and when I used the stock .img though the bootloader it went all good till it rebooted, then it said failed because the file was old and now I am stuck with s-on and I don't know how to turn it off

How did you get to the stock bootloader? Did you have eng bootloader at one point? What meth of root did you use? Alot of info missing.
Now download the stock radio.img and push it via adb or just download the PD15IMG.zip (radio only not rom included). Once this is done you can revert back to stock rom/radio using standard PD15IMG.zip (radio+rom). Now depending on the type of root you used it would depend if you still have radio flag on/off even if your reverted back to stock bootloader.
PS: You can get PD15IMG.zip (stock radio) from master radio thread and PD15IMG.zip (stock radio/rom) by doing search.

PermROOT said:
How did you get to the stock bootloader? Did you have eng bootloader at one point? What meth of root did you use? Alot of info missing.
Now download the stock radio.img and push it via adb or just download the PD15IMG.zip (radio only not rom included). Once this is done you can revert back to stock rom/radio using standard PD15IMG.zip (radio+rom). Now depending on the type of root you used it would depend if you still have radio flag on/off even if your reverted back to stock bootloader.
PS: You can get PD15IMG.zip (stock radio) from master radio thread and PD15IMG.zip (stock radio/rom) by doing search.
Click to expand...
Click to collapse
It flashed the bootloader when I flashed the PD15IMG.zip, it just stop when I did the whole procedure. Nope never flashed an Engineer Bootloader. I used theunlockr.com sites method
I tried that, it uziped then tried to flash the radio then just went back to the original menu for the bootloader

If you used the VISIONary+ (TempROOT) and root.sh (PermROOT) meth then you already had engineering hboot (0.85.2007) pushed though terminal on "/dev/block/mmcblk0p18". Now you did something in between is what I would like to know.
As you flashed new radio (26.09.04.26_M) which I am clear. But what I like to know is how did you end up with default hboot (0.86.0000)? If you had S=OFF you didn't lose it via flashing new radio. Which PD15IMG.zip did you install? Now when you say PD15IMG.zip what do you mean? It can be anything as its default mt4g system based image. Stock PD15IMG.zip = (Sense 2.2.1 Rom/Radio 26.03.02.26_M). Did you install leaked PD15IMG.zip from Panache? or GB2.3.3S?
Are you not 1 of the Royal dev's? who try to take over Silence's IG if I recall. I am just assuming here but this is why you do "NOT" dump system image via hboot. What you should have done was do complete total system wipe (format /data; /system) and then flash new edify based CWMR flashable rom.

PermROOT said:
If you used the VISIONary+ (TempROOT) and root.sh (PermROOT) meth then you already had engineering hboot (0.85.2007) pushed though terminal on "/dev/block/mmcblk0p18". Now you did something in between is what I would like to know.
As you flashed new radio (26.09.04.26_M) which I am clear. But what I like to know is how did you end up with default hboot (0.86.0000)? If you had S=OFF you didn't lose it via flashing new radio. Which PD15IMG.zip did you install? Now when you say PD15IMG.zip what do you mean? It can be anything as its default mt4g system based image. Stock PD15IMG.zip = (Sense 2.2.1 Rom/Radio 26.03.02.26_M). Did you install leaked PD15IMG.zip from Panache? or GB2.3.3S?
Are you not 1 of the Royal dev's? who try to take over Silence's IG if I recall. I am just assuming here but this is why you do "NOT" dump system image via hboot. What you should have done was do complete total system wipe (format /data; /system) and then flash new edify based CWMR flashable rom.
Click to expand...
Click to collapse
Yeah I know that, I Was trying to go back to stock everything using the unrooting method(PD15IMG.zip). Using this file I was able to get through the first step and it rebooted, then it went back to bootloader and now it won't take the PD15IMG.zip saying that it is an older file. Yes I am one of the devs, That's why before posting I tried everything I could think of, gfree, old unrooting methods, etc. I didn't use a dump lol I'm not that noobish haha

Thats where you got owned as the PD15IMG.zip (stock rom/radio) just reverted back to hboot (0.86.0000) from eng hboot (0.85.2007). While you attempted to go further you couldn't do to security turning on (S=ON). Now this normally wouldn't be problem but since you had newer radio (26.09.04.26_M) it wouldn't replace it with old.
All you had to do was follow few simple meths which you should have learned it over the years. Go back same way you came by first reverting back to original radio image and then after doing complete system wipe you should have reverted back to original factory based via stock pd15img.
Ill post back with solution soon let me think this out. I don't want to brick your phone trying to manually push the radio.img nor the eng_hboot.img. As if you try to push radio now would fail on write and give you hard brick. Since S=ON and if you try to push eng_hboot.img who knows what will happen as no R/W access on mmcblk could could also fail thus giving bad flash which can also brick the device. Ill see what happens and post back at... you folks just made more extra work for me.

PermROOT said:
Thats where you got owned as the PD15IMG.zip (stock rom/radio) just reverted back to hboot (0.86.0000) from eng hboot (0.85.2007). While you attempted to go further you couldn't do to security turning on (S=ON). Now this normally wouldn't be problem but since you had newer radio (26.09.04.26_M) it wouldn't replace it with old.
All you had to do was follow few simple meths which you should have learned it over the years. Go back same way you came by first reverting back to original radio image and then after doing complete system wipe you should have reverted back to original factory based via stock pd15img.
Ill post back with solution soon let me think this out. I don't want to brick your phone trying to manually push the radio.img nor the eng_hboot.img. As if you try to push radio now would fail on write and give you hard brick. Since S=ON and if you try to push eng_hboot.img who knows what will happen as no R/W access on mmcblk could could also fail thus giving bad flash which can also brick the device. Ill see what happens and post back at... you folks just made more extra work for me.
Click to expand...
Click to collapse
Thank you so much for the help

PermROOT said:
Thats where you got owned as the PD15IMG.zip (stock rom/radio) just reverted back to hboot (0.86.0000) from eng hboot (0.85.2007). While you attempted to go further you couldn't do to security turning on (S=ON). Now this normally wouldn't be problem but since you had newer radio (26.09.04.26_M) it wouldn't replace it with old.
All you had to do was follow few simple meths which you should have learned it over the years. Go back same way you came by first reverting back to original radio image and then after doing complete system wipe you should have reverted back to original factory based via stock pd15img.
Ill post back with solution soon let me think this out. I don't want to brick your phone trying to manually push the radio.img nor the eng_hboot.img. As if you try to push radio now would fail on write and give you hard brick. Since S=ON and if you try to push eng_hboot.img who knows what will happen as no R/W access on mmcblk could could also fail thus giving bad flash which can also brick the device. Ill see what happens and post back at... you folks just made more extra work for me.
Click to expand...
Click to collapse
lol sorry for the extra work, just dont wanna have the chance of bricking my phone but like XxKOLOHExX I wanted to revert back to stock from mTGB using the stock PD15IMG_Glacier_TMOUS_1.17.531.2_Radio_12.28b.60.140e_26.03.02.26_M_release_155771_signed. everything he described is happening to me also, step by step. I rooted with the visionary+ and permroot method(unlockr). I did download and flash the 26.08.04.30 radio. heres what I see in hboot
GLACIER PVT SHIP S-ON
HBOOT-0.86.0000
MICROP-0429
RADIO-26.08.04.30_M3
eMMC-boot
Sep 27 2010, 11:12:59
so what youre saying is that we should try flashing the stock radio first, wipe the whole phone(including sdcard?), then flash the stock PD15IMG? Ill give it a shot real quick, thanks
*edit* hboot wont even let me flash the stock radio, itll say checking but wont actually let me update it

Well clarknick27 the problem here is that root.sh to gain PermROOT via VISIONary+ just push the 0.85.2007 eng hboot and giving temporary S=OFF, the true security flag as we know it is controlled in the radio. So when you try to revert back using stock PD15IMG (rom/radio) it reverted back to the stock 0.86.0000 hboot thus turning on the security flag on.
What you all should have done is reverted back same way you installed it. Which would have been first use PD15IMG.zip (stock radio) and then use stock PD15IMG.zip (radio/rom). I still need some sleep lol I just wokeup after sleeping 2hours.
The MT4G I tested on I rooted it via VISIONary+ and then flashed GB Leak rom not the PD15IMG.zip (leak radio/rom) which contained the 0.89.0005 hboot. So after flashing stock radio PD15IMG.zip (radio 26.03.02.26_M) I was able to flash stock PD15IMG.zip (rom/radio) without problem. Which is same as I suspected even after S=ON due to same version radio no problem. If I had newer radio after that point it would be locked out. Let me go to sleep and wakeup and ill see what happens from there. As I have clean MT4G ill have to reroot it first.

BTW XxKOLOHExX and clarknick27 just in case my account gets disabled. Do the following and report it here and ill see from there.
1) Which working rom you currently have installed on the device?
I know trying to reroot using gfree may give you similar result as my test: http://forum.xda-developers.com/showthread.php?t=1066966 < not important but unable to root on newer rom.
2) What happens when you try to reroot it using VISIONary+ (TempROOT) and root.sh (PermROOT)?
Did you try it? If so what is the end result? so post back. Ill check and go from there.

PermROOT said:
BTW XxKOLOHExX and clarknick27 just in case my account gets disabled. Do the following and report it here and ill see from there.
1) Which working rom you currently have installed on the device?
I know trying to reroot using gfree may give you similar result as my test: http://forum.xda-developers.com/showthread.php?t=1066966 < not important but unable to root on newer rom.
2) What happens when you try to reroot it using VISIONary+ (TempROOT) and root.sh (PermROOT)?
Did you try it? If so what is the end result? so post back. Ill check and go from there.
Click to expand...
Click to collapse
1) currently running Evil D's mTGB v1.0 rom with Faux's 0.0.7 CFS LV leak kernel. tried rooting with visionary and terminal first, no success. I then tried out the gfree method, and got "Attempting to power cycle eMMC...failed. Module failed to load: No such file or directory."
2) I installed Visionary using Astro file manager, then run Visionary. I click on "temproot now" and it starts, but then the screen goes black and doesnt do anything. I have let it sit on the black screen for well over 15mins before with no luck. I can click on "attempt to permroot" and it will ask for permissions and reboot and everything. my s=on but I still have root access and 0.86.000 bootloader. this is what I see using terminal before rebooting to see if s=off

Did you do the Radio S=OFF using gfree? If so that would explain why you still have root as security is disabled on the device totally. If thats the case then just push the eng bootloader manually via adb or though terminal and reboot. For now XxKOLOHExX is locked lets see what I find ill post back for him.

PermROOT said:
Did you do the Radio S=OFF using gfree? If so that would explain why you still have root as security is disabled on the device totally. If thats the case then just push the eng bootloader manually via adb or though terminal and reboot. For now XxKOLOHExX is locked lets see what I find ill post back for him.
Click to expand...
Click to collapse
thanks for taking the time to help out, Ill give it a shot
*edit* just tried pushing the eng bootloader through adb and it didnt stick or flash, rebooted into hboot and it still says 0.86.0000, s=on, 26.08.04.30_M3 radio

[Q] gfree on cm7.

I have my phone rooted,with root.sh. An I was thinking since I don't have full s-off,can I run gfree on cm7.1. Or will I need to go back to a 2.2.1 stock rom(rooted) an run gfree. Figured I'd ask before I do something stupid.
From my fist to your face, enjoy.

Any one got any ideas
From my fist to your face, enjoy.

Nandroid backup.
RUU back to old 2.2.1 and follow gfree guide for Radio S-OFF, SIM unlock, root, Clockwork etc.
Nandroid restore.

cmstlist said:
Nandroid backup.
RUU back to old 2.2.1 and follow gfree guide for Radio S-OFF, SIM unlock, root, Clockwork etc.
Nandroid restore.
Click to expand...
Click to collapse
So I would have to re-root then, thought so, thanks
From my fist to your face, enjoy.

Mr.Highway said:
So I would have to re-root then, thought so, thanks
From my fist to your face, enjoy.
Click to expand...
Click to collapse
Right, well even if you flash to a pre-rooted version of original 2.2.1, you still need to also change the bootloader (and possibly radio? I don't know) to the matching version as well. And if you only had root.sh S-OFF until now, then installing these things will screw up what you already had.

cmstlist said:
Right, well even if you flash to a pre-rooted version of original 2.2.1, you still need to also change the bootloader (and possibly radio? I don't know) to the matching version as well. And if you only had root.sh S-OFF until now, then installing these things will screw up what you already had.
Click to expand...
Click to collapse
only reason why i rooted with that method is cause i didnt have access to a computer. i might just return my phone back to completely stock (fireware,radio...). then re root it with gfree an restore my cm7.1. thats gonna have to wait till after work today though

S-OFF ENG without ADB

Hey guys,
I´ve got back my stolen DesireZ (thanx to Theftaware) and want it to bring up-to-date to the same level my other DesireZ is. Since it is already prem rooted with S-OFF SHIP putting on it Andromadus Audacity was no problem. I also want to update radio, but with S-OFF SHIP only it´s impossible to flash. I would need a step up to S-OFF ENG (engineering).
Is there a simple and fast way without installing the dev suite for having the ADB command? Thank you, in advance!
Mike

MIkeRD03 said:
Hey guys,
I´ve got back my stolen DesireZ (thanx to Theftaware) and want it to bring up-to-date to the same level my other DesireZ is. Since it is already prem rooted with S-OFF SHIP putting on it Andromadus Audacity was no problem. I also want to update radio, but with S-OFF SHIP only it´s impossible to flash. I would need a step up to S-OFF ENG (engineering).
Is there a simple and fast way without installing the dev suite for having the ADB command? Thank you, in advance!
Mike
Click to expand...
Click to collapse
I don't think there is a way to flash that partition without adb. You might be able to do it with a series of commands through terminal emulator but I doubt it. Someone a bit wiser in these things would have to chime in
Sent from my HTC Vision using XDA

Pretty sure you can update the radio without eng hboot, just get the PC10IMG's from the official radio thread and flash them through hboot.
Otherwise, it should be possible to dd the eng hboot in, it is quite risky though. One mistype will mean a bricked phone.
Though if you really don't want to bother with adb, get gfree, and the correct eng hboot, and run
./gfree -b hboot-eng.img
from terminal (you'll have to cd to the right place, chmod and all that jazz first)
then triple check the md5sums to make sure you havn't killed anything before rebooting.
-Nipqer

In fact in SHIP mode only the last original radio for my DesireZ is possible, not the lastest radio of all. So I need ENG mode to do it. But I see I have no choice and will install ADB again. Thanx guys for your help!
Mike