[G2 and Desire Z Q&A, Help & Troubleshooting] NinjaSverre:
Hi! I've been home for the last six hours trying to revert my Desire Z to stock, achieving S-ON and setting my CID back to HTC__Y13.

Now to start of, I'm not entierly sure that I need to do any of this, but this is my work phone that I decided to root yesterday and flash CM7. After this I was unable to connect to a custom APN my job use to access their intranet.

My first theory was that it for some reason required a Sense ROM, don't ask me why but troubleshooting always starts with the easiest solution. That didn't help and I figured that it, for some obscure reason, had to do with my phone now being S-OFF and using SuperCID. Since that's the only things that have changed, AFAIK.

After trying several guides, here on XDA and other forums I just can't get it to work.

gfree gives me the error;

/data/local/tmp/gfree -s on -c HTC__Y13
--secu_flag on set
--cid set. CID will be changed to: HTC__Y13
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-g6e170e7
New .modinfo section size: 204
[B]Attempting to power cycle eMMC... Failed.
Module failed to load: Operation not permitted[/B]

BUT! if I try to just change the CID it gives me;

/data/local/tmp/gfree -c HTC__Y13
--cid set. CID will be changed to: HTC__Y13
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-g6e170e7
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Searching for mmc_blk_issue_rq symbol...
- Address: c02adc1c, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02ad000
Kernel memory mapped to 0x40011000
Searching for brq filter...
- Address: 0xc02adc1c + 0x34c
- 0x2a000012 -> 0xea000012
Patching and backing up partition 7...
Done.

Which in my eyes looks ok. But after rebooting gfree_verify still tells me that my CID is 11111111.

I can connect to my carriers APN just fine, but work APN is a no-go.

WHAT TO DO?

in advance, many thanks!

UPDATE:I played around with a couple of other guides, and tried restoring the original backup again. Tried before but with no sucess. No idea why it gave me a bit more progress this time.

# /data/local/tmp/gfree -r part7backup-1323885190.bin
/data/local/tmp/gfree -r part7backup-1323885190.bin
--restore set. Partition 7 will be restored from file: part7backup-1323885190.bi
n
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-g6e170e7
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Write protect was successfully disabled.
Searching for mmc_blk_issue_rq symbol...
- Address: c02adc1c, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02ad000
Kernel memory mapped to 0x40002000
Searching for brq filter...
- Address: 0xc02adc1c + 0x34c
[B] - ***WARNING***: Found fuzzy match for brq filter, but conditional branch isn't
. (0xea000012)
Backing up current partition 7 and restoring specified backup...
Error opening restore file.[/B]

UPDATE AGAIN: Installed newest OTA, started to get desperate, CID is now correct, no root, but it still tells me it's S-OFF. As far as APN connectivity I'm lost. Still no cigar.