[G2 and Desire Z General] Gizmo07:
C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell cat /dev/msm

_rotator

/dev/msm_rotator: invalid length

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell cat /dev/msm

_rotator

/dev/msm_rotator: invalid length

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push fre3vo /data/

local/tmp

434 KB/s (9796 bytes in 0.022s)

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell

$ chmod 777 /data/local/tmp/fre3vo

chmod 777 /data/local/tmp/fre3vo

$ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF

/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF

fre3vo by #teamwin

Please wait...

Attempting to modify ro.secure property...

fb_fix_screeninfo:

id: msmfb

smem_start: 802160640

smem_len: 3145728

type: 0

type_aux: 0

visual: 2

xpanstep: 0

ypanstep: 1

line_length: 1920

mmio_start: 0

accel: 0

fb_var_screeninfo:

xres: 480

yres: 800

xres_virtual: 480

yres_virtual: 1600

xoffset: 0

yoffset: 0

bits_per_pixel: 32

activate: 16

height: 80

width: 48

rotate: 0

grayscale: 0

nonstd: 0

accel_flags: 0

pixclock: 0

left_margin: 0

right_margin: 0

upper_margin: 0

lower_margin: 0

hsync_len: 0

vsync_len: 0

sync: 0

vmode: 0

Buffer offset: 00000000

Buffer size: 8192

Scanning region faa90000...

Scanning region fab80000...

Scanning region fac70000...

Scanning region fad60000...

Scanning region fae50000...

Scanning region faf40000...

Scanning region fb030000...

Scanning region fb120000...

Scanning region fb210000...

Scanning region fb300000...

Scanning region fb3f0000...

Scanning region fb4e0000...

Scanning region fb5d0000...

Scanning region fb6c0000...

Scanning region fb7b0000...

Scanning region fb8a0000...

Scanning region fb990000...

Scanning region fba80000...

Scanning region fbb70000...

Potential exploit area found at address fbb80e00:200.

Exploiting device...

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell

# exit

exit

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push misc_version

/data/local/tmp/misc_version

1535 KB/s (589849 bytes in 0.375s)

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push flashgc /data

/local/tmp/flashgc

cannot stat 'flashgc': No such file or directory

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb push flashgc-maste

r/data/local/tmp

Android Debug Bridge version 1.0.29

-d - directs command to the only connected USB devic

e

returns an error if more than one USB device is

present.

-e - directs command to the only running emulator.

returns an error if more than one emulator is r

unning.

-s <serial number> - directs command to the USB device or emulator w

ith

the given serial number. Overrides ANDROID_SERI

AL

environment variable.

-p <product name or path> - simple product name like 'sooner', or

a relative/absolute path to a product

out directory like 'out/target/product/sooner'.

If -p is not specified, the ANDROID_PRODUCT_OUT

environment variable is used, which must

be an absolute path.

devices - list all connected devices

connect <host>[:<port>] - connect to a device via TCP/IP

Port 5555 is used by default if no port number

is specified.

disconnect [<host>[:<port>]] - disconnect from a TCP/IP device.

Port 5555 is used by default if no port number

is specified.

Using this command with no additional arguments

will disconnect from all connected TCP/IP devic

es.

device commands:

adb push <local> <remote> - copy file/dir to device

adb pull <remote> [<local>] - copy file/dir from device

adb sync [ <directory> ] - copy host->device only if changed

(-l means list but don't copy)

(see 'adb help all')

adb shell - run remote shell interactively

adb shell <command> - run remote shell command

adb emu <command> - run emulator console command

adb logcat [ <filter-spec> ] - View device log

adb forward <local> <remote> - forward socket connections

forward specs are one of:

tcp:<port>

localabstract:<unix domain socket name>

localreserved:<unix domain socket name>

localfilesystem:<unix domain socket name>

dev:<character device name>

jdwp:<process pid> (remote only)

adb jdwp - list PIDs of processes hosting a JDWP transport

adb install [-l] [-r] [-s] [--algo <algorithm name> --key <hex-encoded key> --

iv <hex-encoded iv>] <file>

- push this package file to the device and instal

l it

('-l' means forward-lock the app)

('-r' means reinstall the app, keeping its data

)

('-s' means install on SD card instead of inter

nal storage)

('--algo', '--key', and '--iv' mean the file is

encrypted already)

adb uninstall [-k] <package> - remove this app package from the device

('-k' means keep the data and cache directories

)

adb bugreport - return all information from the device

that should be included in a bug report.

adb backup [-f <file>] [-apk|-noapk] [-shared|-noshared] [-all] [-system|-nosy

stem] [<packages...>]

- write an archive of the device's data to <file>

.

If no -f option is supplied then the data is wr

itten

to "backup.ab" in the current directory.

(-apk|-noapk enable/disable backup of the .apks

themselves

in the archive; the default is noapk.)

(-shared|-noshared enable/disable backup of the

device's

shared storage / SD card contents; the defau

lt is noshared.)

(-all means to back up all installed applicatio

ns)

(-system|-nosystem toggles whether -all automat

ically includes

system applications; the default is to inclu

de system apps)

(<packages...> is the list of applications to b

e backed up. If

the -all or -shared flags are passed, then t

he package

list is optional. Applications explicitly g

iven on the

command line will be included even if -nosys

tem would

ordinarily cause them to be omitted.)

adb restore <file> - restore device contents from the <file> backup

archive

adb help - show this help message

adb version - show version num

scripting:

adb wait-for-device - block until device is online

adb start-server - ensure that there is a server running

adb kill-server - kill the server if it is running

adb get-state - prints: offline | bootloader | device

adb get-serialno - prints: <serial-number>

adb status-window - continuously print device status for a specifie

d device

adb remount - remounts the /system partition on the device re

ad-write

adb reboot [bootloader|recovery] - reboots the device, optionally into the boo

tloader or recovery program

adb reboot-bootloader - reboots the device into the bootloader

adb root - restarts the adbd daemon with root permissions

adb usb - restarts the adbd daemon listening on USB

adb tcpip <port> - restarts the adbd daemon listening on TCP on th

e specified port

networking:

adb ppp <tty> [parameters] - Run PPP over USB.

Note: you should not automatically start a PPP connection.

<tty> refers to the tty for PPP stream. Eg. dev:/dev/omap_csmi_tty1

[parameters] - Eg. defaultroute debug dump local notty usepeerdns

adb sync notes: adb sync [ <directory> ]

<localdir> can be interpreted in several ways:

- If <directory> is not specified, both /system and /data partitions will be u

pdated.

- If it is "system" or "data", only the corresponding partition

is updated.

environmental variables:

ADB_TRACE - Print debug information. A comma separated list

of the following values

1 or all, adb, sockets, packets, rwx, usb, sync

, sysdeps, transport, jdwp

ANDROID_SERIAL - The serial number to connect to. -s takes prior

ity over this if given.

ANDROID_LOG_TAGS - When used with the logcat option, only these de

bug tags are printed.

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell chmod 777 /d

ata/local/tmp/*

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb shell

# cd /data/local/tmp

cd /data/local/tmp

# ./misc_version -s 1.00.000.0

./misc_version -s 1.00.000.0

--set_version set. VERSION will be changed to: 1.00.000.0

Patching and backing up partition 17...

# sync

sync

# dd if=/dev/block/mmcblk0p17 bs=1 skip=160 count=10

dd if=/dev/block/mmcblk0p17 bs=1 skip=160 count=10

1.00.000.010+0 records in

10+0 records out

10 bytes transferred in 0.003 secs (3333 bytes/sec)

# adb shell

adb shell

adb: not found

# adb reboot bootloader

adb reboot bootloader

adb: not found

# adb shell

adb shell

adb: not found

# exit

exit

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb reboot bootloader

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb reboot bootloader

error: device offline

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb reboot bootloader

C:\Program Files (x86)\Android\android-sdk\platform-tools>

---------- Post added at 05:05 AM ---------- Previous post was at 04:19 AM ----------

Is this the right way doing it?

---------- Post added at 05:15 AM ---------- Previous post was at 05:05 AM ----------

Downloaded another PD15IMG file from here:

http://xdaforums.com/showthread.php?t=1178912

tried to boot it, system said main is older version.

Probably did something wrong with cmd