INFO[RUU]UZ,userdata,73
INFO[RUU]UZ,userdata,74
INFO[RUU]UZ,userdata,75
INFO[RUU]UZ,userdata,76
INFO[RUU]UZ,userdata,76
INFO[RUU]UZ,userdata,77
INFO[RUU]UZ,userdata,78
INFO[RUU]UZ,userdata,79
INFO[RUU]UZ,userdata,79
INFO[RUU]UZ,userdata,80
INFO[RUU]UZ,userdata,81
INFO[RUU]UZ,userdata,82
INFO[RUU]WP,userdata,70
INFO[RUU]WP,userdata,71
INFO[RUU]WP,userdata,73
INFO[RUU]WP,userdata,74
INFO[RUU]WP,userdata,76
INFO[RUU]WP,userdata,77
INFO[RUU]WP,userdata,79
INFO[RUU]WP,userdata,80
INFO[RUU]WP,userdata,82
INFO[RUU]UZ,userdata,82
INFO[RUU]UZ,userdata,82
INFO[RUU]UZ,userdata,83
INFO[RUU]UZ,userdata,83
INFO[RUU]UZ,userdata,84
INFO[RUU]UZ,userdata,85
INFO[RUU]UZ,userdata,86
INFO[RUU]UZ,userdata,86
INFO[RUU]UZ,userdata,87
INFO[RUU]UZ,userdata,88
INFO[RUU]UZ,userdata,88
INFO[RUU]UZ,userdata,89
INFO[RUU]UZ,userdata,90
INFO[RUU]UZ,userdata,90
INFO[RUU]UZ,userdata,91
INFO[RUU]UZ,userdata,92
INFO[RUU]UZ,userdata,93
INFO[RUU]WP,userdata,82
INFO[RUU]WP,userdata,83
INFO[RUU]WP,userdata,84
INFO[RUU]WP,userdata,86
INFO[RUU]WP,userdata,87
INFO[RUU]WP,userdata,88
INFO[RUU]WP,userdata,90
INFO[RUU]WP,userdata,91
INFO[RUU]WP,userdata,93
INFO[RUU]UZ,userdata,93
INFO[RUU]UZ,userdata,93
INFO[RUU]UZ,userdata,93
INFO[RUU]UZ,userdata,94
INFO[RUU]UZ,userdata,94
INFO[RUU]UZ,userdata,95
INFO[RUU]UZ,userdata,95
INFO[RUU]UZ,userdata,95
INFO[RUU]UZ,userdata,96
INFO[RUU]UZ,userdata,96
INFO[RUU]UZ,userdata,97
INFO[RUU]UZ,userdata,97
INFO[RUU]UZ,userdata,97
INFO[RUU]UZ,userdata,98
INFO[RUU]UZ,userdata,98
INFO[RUU]UZ,userdata,99
INFO[RUU]UZ,userdata,99
INFO[RUU]UZ,userdata,100
INFO[RUU]WP,userdata,93
INFO[RUU]WP,userdata,94
INFO[RUU]WP,userdata,96
INFO[RUU]WP,userdata,97
INFO[RUU]WP,userdata,99
INFO[RUU]WP,userdata,100
INFOstart image[sp1] unzipping & flushing...
INFO[RUU]UZ,sp1,0
INFO[RUU]UZ,sp1,100
INFO[RUU]WP,sp1,0
INFO[RUU]WP,sp1,100
INFOstart image[sp2] unzipping & flushing...
INFO[RUU]UZ,sp2,0
INFO[RUU]UZ,sp2,100
INFO[RUU]WP,sp2,0
INFO[RUU]WP,sp2,100
INFOstart image[dzdata] unzipping & flushing...
INFO[RUU]UZ,dzdata,0
INFO[RUU]UZ,dzdata,100
INFO[RUU]WP,dzdata,0
INFO[RUU]WP,dzdata,100
INFOstart image[tp] unzipping & flushing...
INFO[RUU]UZ,tp,0
INFO[RUU]UZ,tp,100
INFOstart image[tp] unzipping & flushing...
INFO[RUU]UZ,tp,0
INFO[RUU]UZ,tp,100
INFO[RUU]WP,tp,0
INFOstart image[radio] unzipping & flushing...
INFO[RUU]UZ,radio,0
INFO[RUU]UZ,radio,8
INFO[RUU]UZ,radio,13
INFO[RUU]UZ,radio,20
INFO[RUU]UZ,radio,25
INFO[RUU]UZ,radio,33
INFO[RUU]UZ,radio,41
INFO[RUU]UZ,radio,49
INFO[RUU]UZ,radio,57
INFO[RUU]UZ,radio,62
INFO[RUU]UZ,radio,70
INFO[RUU]UZ,radio,79
INFO[RUU]UZ,radio,86
INFO[RUU]UZ,radio,94
INFO[RUU]UZ,radio,99
INFO[RUU]UZ,radio,100
INFO[RUU]WP,radio,0
INFO[RUU]WP,radio,6
INFO[RUU]WP,radio,14
INFO[RUU]WP,radio,19
INFO[RUU]WP,radio,27
INFO[RUU]WP,radio,36
INFO[RUU]WP,radio,44
INFO[RUU]WP,radio,51
INFO[RUU]WP,radio,59
INFO[RUU]WP,radio,68
INFO[RUU]WP,radio,76
INFO[RUU]WP,radio,85
INFO[RUU]WP,radio,95
INFO[RUU]WP,radio,100
INFOstart image[rcdata] unzipping & flushing...
INFO[RUU]UZ,rcdata,0
INFO[RUU]WP,rcdata,0
INFO[RUU]WP,rcdata,100
OKAY

C:\Users\Sean>fastboot-windows reboot
rebooting...

C:\Users\Sean>adb push psneuter /data/local/tmp/
1944 KB/s (557962 bytes in 0.280s)

C:\Users\Sean>adb push gfree /data/local/tmp
2132 KB/s (716548 bytes in 0.328s)

C:\Users\Sean>adb push busybox /data/local/tmp
2302 KB/s (1926944 bytes in 0.817s)

C:\Users\Sean>adb push hboot-eng.img /data/local/tmp/
2088 KB/s (1048576 bytes in 0.490s)

C:\Users\Sean>adb push root_psn /data/local/tmp/
112 KB/s (564 bytes in 0.004s)

C:\Users\Sean>adb push su /sdcard/
516 KB/s (26324 bytes in 0.049s)

C:\Users\Sean>adb push Superuser.apk /sdcard/
1850 KB/s (196120 bytes in 0.103s)

C:\Users\Sean>adb shell chmod 755 /data/local/tmp/*

C:\Users\Sean>adb push recover-clockwork-3.0.2.4-vision.img /data/local/tmp/reco
ver.img
cannot stat 'recover-clockwork-3.0.2.4-vision.img': No such file or directory

C:\Users\Sean>adb push recovery-clockwork-3.0.2.4-vision.img /data/local/tmp/rec
overy.img
2376 KB/s (4573184 bytes in 1.878s)

C:\Users\Sean>adb shell /data/local/tmp/psneuter
property service neutered.
killing adbd. (should restart in a second or two)

C:\Users\Sean>adb shell
# cd /data/local/tmp
cd /data/local/tmp
# ./busybox md5sum /dev/block/mmcblk0p18
./busybox md5sum /dev/block/mmcblk0p18
613ddd077d65d51259795c02ccc2023d  /dev/block/mmcblk0p18
# cd /data/local/tmp
cd /data/local/tmp
# ./gfree -f b hboot-eng.img -y recovery.img
./gfree -f b hboot-eng.img -y recovery.img
--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
--recovery set. recovery image recovery.img will be installed in partition 21
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
 - Section[16]: .modinfo
 -- offset: 0x00000a14 (2580)
 -- size: 0x000000cc (204)
Kernel release: 2.6.32.21-gbfa36d9
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Write protect was successfully disabled.
Searching for mmc_blk_issue_rq symbol...
 - Address: c02a6900, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02a6000
Kernel memory mapped to 0x40002000
Searching for brq filter...
 - Address: 0xc02a6900 + 0x34c
 - 0x2a000012 -> 0xea000012
Backing up current partition 21 and installing specified recovery image...
Backing up partition /dev/block/mmcblk0p21 to /sdcard/part21backup-1319650166.bi
n ...
Writing image recovery.img to partition /dev/block/mmcblk0p21 ...
Backing up current partition 7 and patching it...
Backing up partition /dev/block/mmcblk0p7 to /sdcard/part7backup-1319650166.bin
...
patching secu_flag: 0
Done.
# ./root_psn
./root_psn
# sync
sync
# cd /data/local/tmp
cd /data/local/tmp
# ./busybox md5sum hboot-eng.img
./busybox md5sum hboot-eng.img
2ce1bdd5e4c1119ccfcecb938710d742  hboot-eng.img
# ./busybox md5sum /dev/block/mmcblk0p18
./busybox md5sum /dev/block/mmcblk0p18
613ddd077d65d51259795c02ccc2023d  /dev/block/mmcblk0p18
# ./gfree -b hboot-eng.img
./gfree -b hboot-eng.img
--hboot set. hboot image hboot-eng.img will be installed in partition 18
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
 - Section[16]: .modinfo
 -- offset: 0x00000a14 (2580)
 -- size: 0x000000cc (204)
Kernel release: 2.6.32.21-gbfa36d9
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Write protect was successfully disabled.
Searching for mmc_blk_issue_rq symbol...
 - Address: c02a6900, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02a6000
Kernel memory mapped to 0x40002000
Searching for brq filter...
 - Address: 0xc02a6900 + 0x34c
 - ***WARNING***: Found fuzzy match for brq filter, but conditional branch isn't
. (0xea000012)
Backing up current partition 18 and installing specified hboot image...
Backing up partition /dev/block/mmcblk0p18 to /sdcard/part18backup-1319650747.bi
n ...
Writing image hboot-eng.img to partition /dev/block/mmcblk0p18 ...
Done.
# cd /data/local/tmp
cd /data/local/tmp
# ./busybox md5sum hboot-eng.img
./busybox md5sum hboot-eng.img
2ce1bdd5e4c1119ccfcecb938710d742  hboot-eng.img
# ./busybox md5sum /dev/block/mmcblk0p18
./busybox md5sum /dev/block/mmcblk0p18
2ce1bdd5e4c1119ccfcecb938710d742  /dev/block/mmcblk0p18
# reboot
reboot

C:\Users\Sean>adb push gfree_verify /data/local/tmp
cannot stat 'gfree_verify': No such file or directory

C:\Users\Sean>adb push gfree_verify /data/local/tmp
1000 KB/s (12005 bytes in 0.011s)

C:\Users\Sean>adb shell chmod 755 /data/local/tmp/gfree_verify

C:\Users\Sean>adb shell
$ su
su
# cd /data/local/tmp
cd /data/local/tmp
# stop ril-daemon
stop ril-daemon
# ./gfree_verify
./gfree_verify
gfree verify_cid returned:
@CID: 11111111

OK

gfree verify_secu_flag returned:
@secu_flag: 0

OK

gfree verify_simlock returned:
@SIMLOCK= 00

OK

# start ril-daemon
start ril-daemon
#