| | 1 | = Radio S-OFF = |
| | 2 | '''WORK IN PROGRESS NOT DONE YET''' |
| | 3 | And scotty2 did it again! |
| | 4 | |
| | 5 | == Howto (Overview of the steps) == |
| | 6 | 1. Perm root your phone |
| | 7 | |
| | 8 | 2. Make a backup of partition 7 of your phone |
| | 9 | |
| | 10 | 3. Use a custom kernel and the appropriate wp-this module to get rid of the write protection of the radio partitions |
| | 11 | |
| | 12 | 4. Copy the image of partition 7 to your PC and modify it with a HEX-editor, push it back to phone and copy it to the partition 7 |
| | 13 | |
| | 14 | At this point in time the @secu_flag is removed from your phone and you can run certain AT@SIMLOCK commands. |
| | 15 | |
| | 16 | 5. start hboot, attach a serial console to it and start rtask c |
| | 17 | |
| | 18 | 6. attach a serial console to the now running AT-command interpreter and run AT@SIMLOCK=3,2 to write the subsidy data clear text to partition 7 |