Back to Stock

Prerequisites:

You need to have radio S-OFF to follow this steps Please make sure that gfree_verify returns secu_flag = 0 before following this steps.

Install the stock image

In case of the original T-Mobile G2 the stock rom is called PC10IMG_Vision_TMOUS_1.19.531.1_Radio_12.21.60.09b_26.02.01.15_M2_release_149459_signed.zip

adb push /PC10IMG_Vision_TMOUS_1.19.531.1_Radio_12.21.60.09b_26.02.01.15_M2_release_149459_signed.zip /sdcard/PC10IMG.zip

Disconnect the phone from USB and shutdown the phone.

Boot into hboot by holding <Vol-Down> while powering on.

hboot should load the PC10IMG.zip automatically and the ask you if you want to update. Press <Vol Up> to start the update.

After updating the radio hboot will start again (screen will get dark for some seconds)

If you had the fake S-OFF engineering hboot installed it will be replaced by this process

radio S-ON and original CID

There are 2 ways to get radio S-ON and the original CID.

You can either restore the backup of your partition 7 or you can use gfree to set secu_flag = 1 and CID = T-MOB010 (or your corresponding original CID).

Restoring the backup will also bring back the SIM-lock data, while using gfree will keep the phone SIM-unlocked.

In both cases you need to first use rage to gain temporary root.

temporary root

Before you can adb as described below you need to enable debugging in the settings on the phone. In Settings go to "Applications -> Development" and check the "USB debugging" option.

In the commands to run below, $ or # represent the prompt and should NOT be entered as part of the commands (in windows this will be something like C:\> instead).

Get the psneuter.zip from here ​http://www.thinkthinkdo.com/trac/project1/raw-attachment/wiki/psneuter/psneuter.zip and unzip the psneuter.zip files to a folder. From a cmd window or terminal, navigate to that folder and execute these commands:

$ adb push psneuter /data/local/tmp/psneuter
$ adb shell chmod 777 /data/local/tmp/psneuter
$ adb shell /data/local/tmp/psneuter
$ adb shell

after the last command you should have a root shell in adb (this is indicated by a # prompt). Leave this terminal (or command window) that contains the root shell open.

restoring the backup of partition 7

Setting S-ON and CID and restoring the simlock can be done using gfree to restore the backup of you partition 7.

You can use gfree to remove the write protection from the emmc and the kernel and restore the backup. To do so you can use the "-r" option of gfree.

ON YOUR PC:

Get gfree_04.zip that is attached to this page ​http://www.thinkthinkdo.com/trac/project1/wiki/gfree.

Unzip gfree_04.zip to a place on your computer. Open a terminal or command window, navigate to where the files are on your computer, and type:

$ adb push gfree /data/local/tmp/gfree
$ adb shell chmod 777 /data/local/tmp/gfree

gfree should now be in your phone at /data/local/tmp

IN THE ROOT SHELL (in the first terminal/command) :

We assume that the backup of your partition 7 in in /sdcard and is called part7backup-<time>.bin (replace <time> with the time string of your backup).

Now run:

# /data/local/tmp/gfree -r /sdcard/part7backup-<time>.bin
# sync

Remove the PC10IMG.zip and the tools from the phome:

# rm /sdcard/PC10IMG.zip
# rm /data/local/tmp/psneuter
# rm /data/local/tmp/gfree

Disconnect your phone from USB and power it down.

Boot into hboot by holding <Vol-Down> while powering on.

The heading should now read: "VISION PVT SHIP S-ON"

using gfree to get radio S-ON and the original CID

If you lost your partition 7 backup or you do not want to restore the simlock data you can use the -c and -s options of gfree to set the CID and the S-ON flag.

ON YOUR PC:

Get gfree_04.zip that is attached to this page ​http://www.thinkthinkdo.com/trac/project1/wiki/gfree.

Unzip gfree_04.zip to a place on your computer. Open a terminal or command window, navigate to where the files are on your computer, and type:

$ adb push gfree /data/local/tmp/gfree
$ adb shell chmod 777 /data/local/tmp/gfree

gfree should now be in your phone at /data/local/tmp

IN THE ROOT SHELL (in the first terminal/command) : Now run:

# /data/local/tmp/gfree -s on -c T-MOB010
# sync

Remove the PC10IMG.zip and the tools from the phome:

# rm /sdcard/PC10IMG.zip
# rm /data/local/tmp/psneuter
# rm /data/local/tmp/gfree

Disconnect your phone from USB and power it down.

Boot into hboot by holding <Vol-Down> while powering on.

The heading should now read: "VISION PVT SHIP S-ON"