View Single Post
Old 09-11-2011, 01:53   #1 (permalink)
arodney
No Life Poster
 
arodney's Avatar
 
Join Date: Dec 2005
Location: Guyana / USA
Posts: 670
Member: 205897
Status: Offline
Sonork: 100.1589406
Thanks Meter: 230
Manual Guide on How to downgrade from Mytouch 4G 2.3.4 & HB 0.89.0005 Stock Rom

You have to use ADB to send these commands

This is the Phone info :

Code:
17:32:36 > 	MODEL:               	 HTC GLACIER / GLACIER
17:32:36 > 	CID:                     	 T-MOB010
17:32:36 > 	MID:                     	 PD1510000
17:32:36 > 	BOOT LOADER:  	 0.89.0005
17:32:36 > 	VERSION:            	 2.3.4 / GRJ22
17:32:36 > 	FIRMWARE:         	 2.19.531.1 / 26.11.04.03_M
17:32:36 > 	KERNEL:              	 2.6.35.10-g225de41 (gcc 4.4.0)
17:32:36 > 	CPU TYPE:          	 MSM7X30 / ARMv7

Gaining Temp Root on 2.3.3 or 2.3.4 Android HB 0.890.0005

1. Download these files :
unzip them and place the files in your platform-tools folder.

To elaborate, place the fre3vo file inside of the fre3vo.zip file and the misc_version file inside the misc_version.zip file in your platform-tools directory.). Do not put these files in any folders just in the platform-tools directory

2. Make sure you have your sdcard inserted in your phone, and you are NOT in USB Storage Mode, and your sdcard is NOT FULL.

3. Run the following command to verify the exploit has access to what it needs. (Only the first line is the command. The second line should be the result returned if all goes well.)

Code:
$ adb shell cat /dev/msm_rotator
/dev/msm_rotator: invalid length
4. If you received the same message, you're good to continue on.

5. Run the following commands from your platform-tools directory.

Code:
$ adb push fre3vo /sdcard/fre3vo
$ adb shell
$ chmod 777 /data/local/tmp/fre3vo
$ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
6. (It may take a minute or two. From what I can tell, this appears to be the quickest method as the exploit seems to be found in the latter regions.)

After you enter that command above, with luck you should see something similar to the last few lines in the following displayed below.

Code:
Buffer offset:      00000000
Buffer size:        8192

Scanning region fb7b0000...
Scanning region fb8a0000...
Scanning region fb990000...
Scanning region fba90000...
Potential exploit area found at address fbb4d600:a00.
Exploiting device...
7. If the exploit works, you will be kicked out of ADB shell, proceed to Step #8.

B. If the above does not work, and fails, you can try the following, and hopefully one will work, try the following (you must reboot your phone before you try another set):

Code:
$ /data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF
$ /data/local/tmp/fre3vo -debug -start 20000000 -end 2FFFFFFF
$ /data/local/tmp/fre3vo -debug -start 30000000 -end 3FFFFFFF
$ /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF
$ /data/local/tmp/fre3vo -debug -start E0000000 -end EFFFFFFF
8. If you did get kicked out of adb shell, open it again. You should now see the lovely # instead of $, thus granting you temp root. Go ahead and exit out of shell to proceed to the next stage.


Code:
$ adb shell
# exit


Changing Version Number to Allow Downgrade

1. If you followed the first portion of this, you should of unzipped misc_version.zip in the platform-tools directory.

If you haven't done that yet, do that now and then run the following commands from your platform-tools directory.

Code:
$ adb push misc_version /sdcard/misc_version
$ adb shell chmod 777 /data/local/tmp/misc_version
$ adb shell
# /data/local/tmp/misc_version -s 1.00.000.0
--set_version set. VERSION will be changed to: 1.00.000.0
Patching and backing up partition 17...
*Note: If you get the following error below,

Code:
Error opening backup file.
Please make sure your sdcard is inserted in your phone and is NOT mounted to your computer (ie: make sure you are NOT in USB Storage Mode).

Code:
# sync
Double check and make sure everything looks good so far by running the following command (still in adb shell).

Code:
# dd if=/dev/block/mmcblk0p17 bs=1 skip=160 count=10
1.00.000.010+0 records in
10+0 records out
10 bytes transferred in 0.001 secs (10000 bytes/sec)

Download the Stock Rom for the myTouch 4G (PD15IMG.zip) and save it to platform-tools directory as well. The Stock Rom can be found here: MEGAUPLOAD - The leading online storage and file delivery service

Push it to your sdcard and reboot into bootloader with the following commands:

Code:
$ adb push PD15IMG.zip /sdcard/PD15IMG.zip
$ adb reboot bootloader
1. Your phone should now reboot into the bootloader. If The first option should say "BOOTLOADER" highlighted in blue, select that by pressing the power button. It will now scan the sdcard for PD15IMG.zip. Once it does, it will ask you to update.

2. Press the `Volume Up` button to begin the update (or in this case, downgrade). When this has finished, you can reboot and you'll be back with the Stock Rom and you can now root from there, which there are plenty of other guides to go by on how to do that.
  Reply With Quote
 
Page generated in 0.11468 seconds with 7 queries