C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push su /data/loca l/tmp 1647 KB/s (26324 bytes in 0.015s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push busybox /data /local/tmp 1489 KB/s (1926944 bytes in 1.263s) C:\Program Files (x86)\Android\android-sdk\platform-tools>/adb push fixsu.sh /da ta/local/tmp '/adb' is not recognized as an internal or external command, operable program or batch file. C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push fixsu.sh /dat a/local/tmp/ cannot stat 'fixsu.sh': No such file or directory C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push su /data/loca l/tmp/ 1391 KB/s (22228 bytes in 0.015s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push busybox /data /local/tmp/ 1481 KB/s (1372660 bytes in 0.904s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push fixsu.sh /dat a/local/tmp/ 18 KB/s (594 bytes in 0.031s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb install superuser/ apk can't find 'superuser/apk' to install C:\Program Files (x86)\Android\android-sdk\platform-tools>adb install superuser. apk 1366 KB/s (196521 bytes in 0.140s) pkg: /data/local/tmp/superuser.apk Success C:\Program Files (x86)\Android\android-sdk\platform-tools>/adb shell chmod 755 / data/local/tmp/fixsu.sh '/adb' is not recognized as an internal or external command, operable program or batch file. C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell chmod 755 /d ata/local/tmp/fixsu.sh C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell /data/local/ tmp/fixsu.sh C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push flashgc /data /local/tmp/ 1430 KB/s (662817 bytes in 0.452s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell chmod 755 /d ata/local/tmp/flashgc C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell /data/local/ tmp/flashgc --cid /sys/class/mmc_host/mmc2/mmc2:*/cid CID = 0353445355303847807181920200a9b4 Reversed CID = b4a90002928171804738305553445303 C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push goldcard.img /data/local/tmp/ 24 KB/s (384 bytes in 0.015s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell # adb shell /data/local/tmp/flashgc /data/local/tmp/goldcard.img --backupfile /d ata/local/tmp/sdcardMbr-backup.img adb shell /data/local/tmp/flashgc /data/local/tmp/goldcard.img --backupfile /dat a/local/tmp/sdcardMbr-backup.img adb: not found # exit exit C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell /data/local/ tmp/flashgc /data/local/tmp/goldcard.img --backupfile /data/local/tmp/sdcardMbr- backup.img Backing up sd-card MBR (/dev/block/mmcblk1) to "/data/local/tmp/sdcardMbr-backup .img" ... Success: Backup file "/data/local/tmp/sdcardMbr-backup.img" has been created. Writing image "/data/local/tmp/goldcard.img" to sd-card (/dev/block/mmcblk1) ... Success: Image "/data/local/tmp/goldcard.img" has been written to sd-card. C:\Program Files (x86)\Android\android-sdk\platform-tools>adb pull /data/local/t mp/sdcardMbr-backup.img 10 KB/s (512 bytes in 0.046s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb reboot bootloader C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push busybox /data /local/tmp error: device not found C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push busybox /data /local/tmp 1077 KB/s (1926944 bytes in 1.747s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push gfree /data/l ocal/tmp 1401 KB/s (716548 bytes in 0.499s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push hboot-eng.img /data/local/tmp/ 1339 KB/s (1048576 bytes in 0.764s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push psneuter /dat a/local/tmp/ 1247 KB/s (557962 bytes in 0.436s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push recovery-cloc kwork-3.0.2.4-vision.img /data/local/tmp/recovery.img 1547 KB/s (4573184 bytes in 2.886s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push root_psn /dat a/local/tmp/ 0 KB/s (564 bytes in 1.000s) C:\Program Files (x86)\Android\android-sdk\platform-tools>/adb push su /sdcard/ '/adb' is not recognized as an internal or external command, operable program or batch file. C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push su /sdcard/ 823 KB/s (26324 bytes in 0.031s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push superuser.apk /sdcard/ 236 KB/s (196120 bytes in 0.811s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell $ chmod 755 /data/local/tmp/* chmod 755 /data/local/tmp/* $ /data/local/tmp/psneuter /data/local/tmp/psneuter property service neutered. killing adbd. (should restart in a second or two) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell # cd /data/local/tmp/ cd /data/local/tmp/ # ./busybox md5sum /dev/block/mmcblk0p18 ./busybox md5sum /dev/block/mmcblk0p18 613ddd077d65d51259795c02ccc2023d /dev/block/mmcblk0p18 # .gfree -f -b hboot.img -y recovery.img .gfree -f -b hboot.img -y recovery.img .gfree: not found # ./gfree -f -b hboot.img -y recovery.img ./gfree -f -b hboot.img -y recovery.img --secu_flag off set --cid set. CID will be changed to: 11111111 --sim_unlock. SIMLOCK will be removed --hboot set. hboot image hboot.img will be installed in partition 18 --recovery set. recovery image recovery.img will be installed in partition 21 Section header entry size: 40 Number of section headers: 44 Total section header table size: 1760 Section header file offset: 0x000138b4 (80052) Section index for section name string table: 41 String table offset: 0x000136fb (79611) Searching for .modinfo section... - Section[16]: .modinfo -- offset: 0x00000a14 (2580) -- size: 0x000000cc (204) Kernel release: 2.6.32.21-gbfa36d9 New .modinfo section size: 204 Attempting to power cycle eMMC... OK. Write protect was successfully disabled. Searching for mmc_blk_issue_rq symbol... - Address: c02a6900, type: t, name: mmc_blk_issue_rq, module: N/A Kernel map base: 0xc02a6000 Kernel memory mapped to 0x40002000 Searching for brq filter... - Address: 0xc02a6900 + 0x34c - 0x2a000012 -> 0xea000012 Backing up current partition 18 and installing specified hboot image... Backing up partition /dev/block/mmcblk0p18 to /sdcard/part18backup-1324013251.bi n ... Writing image hboot.img to partition /dev/block/mmcblk0p18 ... Error opening input image. # ./root_psn ./root_psn sync sync # # ./busybox md5sum hboot-eng.img ./busybox md5sum hboot-eng.img 2ce1bdd5e4c1119ccfcecb938710d742 hboot-eng.img # busybox md5sum /dev/vlock/mmcblk0p18 busybox md5sum /dev/vlock/mmcblk0p18 md5sum: can't open '/dev/vlock/mmcblk0p18': No such file or directory # ./busybox md5sum /dev/block/mmcblk0p18 ./busybox md5sum /dev/block/mmcblk0p18 613ddd077d65d51259795c02ccc2023d /dev/block/mmcblk0p18 # ./gfree -f -b hboot-eng.img -y rocovery.img ./gfree -f -b hboot-eng.img -y rocovery.img --secu_flag off set --cid set. CID will be changed to: 11111111 --sim_unlock. SIMLOCK will be removed --hboot set. hboot image hboot-eng.img will be installed in partition 18 --recovery set. recovery image rocovery.img will be installed in partition 21 Section header entry size: 40 Number of section headers: 44 Total section header table size: 1760 Section header file offset: 0x000138b4 (80052) Section index for section name string table: 41 String table offset: 0x000136fb (79611) Searching for .modinfo section... - Section[16]: .modinfo -- offset: 0x00000a14 (2580) -- size: 0x000000cc (204) Kernel release: 2.6.32.21-gbfa36d9 New .modinfo section size: 204 Attempting to power cycle eMMC... OK. Write protect was successfully disabled. Searching for mmc_blk_issue_rq symbol... - Address: c02a6900, type: t, name: mmc_blk_issue_rq, module: N/A Kernel map base: 0xc02a6000 Kernel memory mapped to 0x40002000 Searching for brq filter... - Address: 0xc02a6900 + 0x34c - ***WARNING***: Found fuzzy match for brq filter, but conditional branch isn't . (0xea000012) Backing up current partition 18 and installing specified hboot image... Backing up partition /dev/block/mmcblk0p18 to /sdcard/part18backup-1324013468.bi n ... Writing image hboot-eng.img to partition /dev/block/mmcblk0p18 ... Backing up current partition 21 and installing specified recovery image... Backing up partition /dev/block/mmcblk0p21 to /sdcard/part21backup-1324013468.bi n ... Writing image rocovery.img to partition /dev/block/mmcblk0p21 ... Error opening input image. # exit exit C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push recovery-cloc kwork-3.0.2.4-vision.img /data/local/tmp/recovery.img 1475 KB/s (4573184 bytes in 3.026s) C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell # cd /data/local/tmp cd /data/local/tmp # ./gfree -f -b hbooteng.img -y recovery.img ./gfree -f -b hbooteng.img -y recovery.img --secu_flag off set --cid set. CID will be changed to: 11111111 --sim_unlock. SIMLOCK will be removed --hboot set. hboot image hbooteng.img will be installed in partition 18 --recovery set. recovery image recovery.img will be installed in partition 21 Section header entry size: 40 Number of section headers: 44 Total section header table size: 1760 Section header file offset: 0x000138b4 (80052) Section index for section name string table: 41 String table offset: 0x000136fb (79611) Searching for .modinfo section... - Section[16]: .modinfo -- offset: 0x00000a14 (2580) -- size: 0x000000cc (204) Kernel release: 2.6.32.21-gbfa36d9 New .modinfo section size: 204 Attempting to power cycle eMMC... OK. Write protect was successfully disabled. Searching for mmc_blk_issue_rq symbol... - Address: c02a6900, type: t, name: mmc_blk_issue_rq, module: N/A Kernel map base: 0xc02a6000 Kernel memory mapped to 0x40002000 Searching for brq filter... - Address: 0xc02a6900 + 0x34c - ***WARNING***: Found fuzzy match for brq filter, but conditional branch isn't . (0xea000012) Backing up current partition 18 and installing specified hboot image... Backing up partition /dev/block/mmcblk0p18 to /sdcard/part18backup-1324013612.bi n ... Writing image hbooteng.img to partition /dev/block/mmcblk0p18 ... Error opening input image. # ls -1 ls -1 -1: No such file or directory # ls -1 ls -1 -1: No such file or directory # cd /data/local/tmp/ cd /data/local/tmp/ # ls -1 ls -1 -1: No such file or directory # ls -l ls -l -rw-rw-rw- root root 4573184 2011-06-04 16:37 recovery.img -rwxr-xr-x shell shell 1926944 2010-03-22 19:29 busybox -rwxr-xr-x shell shell 1048576 2011-07-14 21:30 hboot-eng.img -rwxr-xr-x shell shell 564 2011-04-01 20:28 root_psn -rwxr-xr-x shell shell 557962 2011-01-11 05:01 psneuter -rwxr-xr-x shell shell 716548 2011-06-17 00:18 gfree # ls -1