Version 1 (modified by anonymous, 12 years ago) (diff)


Back to Stock


You need to have radio S-OFF to follow this steps Please make sure that gfree_verify returns secu_flag = 0 before following this steps.

Install the stock image

In case of the original T-Mobile G2 the stock rom is called

adb push / /sdcard/

Disconnect the phone from USB and shutdown the phone.

Boot into hboot by holding <Vol-Down> while powering on.

hboot should load the automatically and the ask you if you want to update. Press <Vol Up> to start the update.

After updating the radio hboot will start again (screen will get dark for some seconds)

If you had the fake S-OFF engineering hboot installed it will be replaced by this process

radio S-ON and original CID

There are 2 ways to get radio S-ON and the original CID.

You can either restore the backup of your partition 7 or you can use gfree to set secu_flag = 1 and CID = T-MOB010 (or your corresponding original CID).

Restoring the backup will also bring back the SIM-lock data, while using gfree will keep the phone SIM-unlocked.

In both cases you need to first use rage to gain temporary root.

temporary root

Before you can adb as described below you need to enable debugging in the settings on the phone. In Settings go to "Applications -> Development" and check the "USB debugging" option.

You will need the Android Terminal Emulator, get it from the market!

In the commands to run below, $ or # represent the prompt and should NOT be entered as part of the commands.

Get the that is attached to this page and unzip the files to a folder. From a cmd window or terminal, navigate to that folder and execute these commands:

$ adb push su /sdcard/su
$ adb push Superuser.apk /sdcard/Superuser.apk
$ adb push rage /data/local/tmp/rage
$ adb push busybox /data/local/tmp/busybox
$ adb push root /data/local/tmp/root
$ adb shell chmod 0755 /data/local/tmp/*


  1. Launch Terminal Emulator
  1. $ /data/local/tmp/rage
  1. Wait for the message: "Forked #### childs."
  1. Menu > Reset Term - Terminal Emulator will exit.
  1. Launch Terminal Emulator, it Force Closes. Launch a second time, and you'll have a root shell

using gfree to get radio S-ON and the original CID


Get that is attached to this page

Unzip to a place on your computer. Navigate to where the files are on your computer, and type:

$ adb push gfree /data/local/tmp/

Gfree should now be in your phone at /data/local/tmp


You should still have terminal emulator up, at a root prompt from earlier.

Now run:

# cd /data/local/tmp
# ./gfree -s on -c T-MOB010
# sync

Disconnect your phone from USB and power it down.

Boot into hboot by holding <Vol-Down> while powering on.

restoring the backup of partition 7