[G1 Q&A, Help & Troubleshooting] alrsar:
Hello guys,

I know the first thing you may think is this is another moron who bricked his Cell. But please be patient with me and at least let me learn from my loss. Please let me know what I did wrong.

First I read 3 main thing before doing anything,(1) [Guide] One-Click Root for Rogers HTC Dream:, (2) the post by HYKO and and finally CyanogenMod Wiki. Since I cannot post URL I attached them at the end.

So first I tried to get a hboot 1.33.2005 SPL using the source (1) which went ok.

then I used CyanogenMod Wiki (3) to root my HTC DREAM. Every thing went ok till I tried to update the radio. After I flashed the radio my cell hangs on the rogers logo and does not go any further. I can go to the fastboot (camera butt and END). it is S-off and 1.33.2005 SPL. However, I can not reach the recovery menu (Home and END). I tried flashing back to the older radio 3.22.20.17 and 2.22.29.26I (using the haykuro zip file). none of them worked.

First I want ot know what did I do wrong. Second I noticed my SDcard is broken, and the HBOOT looks for deaimg and deardiag on sd. does anyone know if I can unbrick it using this.

Thanks

alrsar

(1)

1. Download Haykuro's root kit here.

2. Extract the recovery.img and update.zip files from the download and copy them to the root of your sdcard's fat32 partition (if you haven't partitioned your card yet for A2SD, then just the root of the card itself).

2. Last time I checked, the one-click root app, flashrec, has been pulled from the Market, so download it here.

3. Install the app and start it, it will look like this:

4. Tap 'Backup Recovery Image', in some cases the app will fail to backup the image. This shouldn't be a problem, but if it works, it's always nice to have a backup.

5. In the blank above the greyed-out button enter '/sdcard/recovery.img' without the quotes. If you were successful in making the backup, the top button should change to white and say 'Flash Custom Recovery Image'. If not, don't worry, there is a hidden button to the right of the backup button that will bypass the backup requirement. Like so:

6. Press 'Flash Custom Recovery Image'. If you get a flash failed message, try flashing with your phone unplugged from USB.

7. Power your phone down.

8. Power up your phone while holding the home button. You should get the older 1.2 Recovery Menu. If your phone hangs at the Rogers logo, remove your battery, re-install or try the 3-finger salute (Phone, menu, and power button together) and try again. If it still hangs on the Rogers logo, reboot without the home key, this will bring you back to normal boot. You won't be rooted but you won't be bricked.

9. Once you're at the recovery menu, choose the second option, apply sdcard:update.zip. In some cases you may get an error something like E: not found. If you choose the second option again, it should find the update.zip alright and then press home to continue.

10. Now click on reboot (Home & Back). Press and hold the camera button and you should boot into the new 1.33.2005 SPL.

11. If all has gone well and you see hboot 1.33.2005, you can safely follow the rest of the rooting instructions in this thread. There's also a great set of instructions for installing Cyanogen's 4.2.X roms in the same thread. The post is here.

Of course, these instructions may be rendered moot if Rogers chooses to fix the vulnerability that allows one-click root at which point we'll have to hope someone manages to find a way around the so-called 'perfect' SPLs.

If after a couple attempts you remain stuck at the Rogers logo, remove the battery, reinstall it and then power up normally. You should then boot back to the unrooted phone and it will restore the default recovery. You may not be rooted, but at least you're not bricked.

(3)

1. You will need fastboot on your computer to run the following commands. Set up ADB and fastboot on your computer.

2. Download exploid & Amon_Ra's Recovery:

* exploid (includes the source): Download

* Amon_Ra 1.7.0: Download

3. Rename Amon_Ra's Recovery Image to simply recovery.img.

4. Put both the exploid file & Amon_Ra's Recovery in the same directory as adb.

5. Turn on USB Debugging (Settings » Applications » Development).

6. Connect the Rogers Dream to the computer.

7. On the computer, open terminal & navigate to the adb folder

cd /path/to/adb/

8. Type in the following commands:

adb push recovery.img /data/local

adb push exploid /sqlite_stmt_journals

adb shell

cd /sqlite_stmt_journals

chmod 777 exploid

./exploid

9. You will see a message come up. The exploit has now been setup. Unplug & re-plug in the USB cable to the computer.

10. Now type in the following commands:

adb shell

rootshell

NOTE: This will prompt for a password, the password is "secretlol".

chmod 666 /dev/mtd/mtd1

flash_image recovery /data/local/recovery.img

NOTE: The first time this command runs, it may return "mtd: read error at 0x00000000 (Out of memory)". Simply run this command again & it should run without error.

11. The Rogers Dream has now been rooted & will have Amon_Ra's Recovery on it.

Flashing Radio

If the Rogers Dream already had the 911 patch, then the phone will already have the latest radio. Follow these instructions if the Rogers Dream did not have the 911 patch.

1. Download the latest version of the radio (3.22.26.17).

2. Rename the radio image to simply radio.img.

3. Power off the Rogers Dream.

4. Boot into bootloader mode. Hold the Camera button while powering on the Rogers Dream.

5. Connect the Rogers Dream to the computer.

6. On the computer, open the command prompt/terminal & navigate to the Android SDK Tools folder.

7. Type in the following command:

fastboot flash radio radio.img

8. Once finished, you can restart the Rogers Dream.