[GUIDE] How to downgrade from OTA RUU 2.2 to 2.1

[smwoodward]

Fixed the typo's in the code, thanks to Contempt4You for pointing it out for me.

Note, i had to remove the links due to the restrictions of being a new user, but the tools can be found fairly easily, you will need the revert.zip that contains flash_image and mtd0.img, the evo-root.zip from the how to root android 2.2 on the evo 4g on this forums and all you need is the rageagainstthecage-arm5.bin, and an original PB31IMG.zip from the RUU 2.1

I adapted this guide from these instructions

As always, I have no responsibility when you try this things go really foobar, and you have a nice paper weight.

I am going to copy and paste much of the instructions off of the page above, make the changes specific to the DInc, and will try to update the links for the stuff to download as I can. Everything that is needed is already hosted somewhere on the internet.

Make sure your phone is unplugged from your computer until I tell you to plug it in!
If you already have the Android SDK and HTC Sync set up on your computer, skip to Step 4 now

Step 1: Download the Android SDK here

Step 2: Extract the Android SDK zip. Move the contents of the extracted zip to C:\
Your Android tools folder path should now be C:\android-sdk-windows\tools

Step 3: Download HTC Sync 2.0.40
Run the installer. Move on once installed. If reboot is required, do so and then move on.

Windows 7 Users:
Go to your start menu, then control panel. When that is open, (if you are in category view mode) click on "Uninstall a program" and then choose HTC Sync to uninstall. If you are in Icon view mode choose "Programs and Features" and then click on HTC Sync to uninstall. This will load the proper drivers needed for unrevoked3.

Other Windows Version Users:
Go to your start menu, then control panel. When that is open, select Add/Remove Programs, and then choose HTC Sync to uninstall. This will load the proper drivers needed for unrevoked3.

next download

It contains a few files necessary to root the DInc.
Unzip the contents of the zip to your android sdk tools folder.

Also download the original 2.1 PB31IMG.zip file, or is a download link to the RUU 2.1.

Put this zip in your sdk tools folder as well, as a zip, not extracted.

After unzipping the contents of revert.zip to your android sdk tools folder and placing the PC31IMG.zip move on.

Step 4: Make sure USB Debugging is ON (checked) on your EVO. Go to Settings > Applications > Development > and make sure it is checked.

Step 5: Plug your phone into the computer via USB, Make sure that the connection type in the Notification Pull-Down Bar is "Charge Only", not "Disk Drive" or else this won't work.
If your computer asks you to restart after the new drivers were installed, do that now.


Step 6: Open up a command promt from your android-sdk/tools folder.
Windows 7 users:
Open up the android sdk folder and hold shift and right click on the tools folder. You will see an option that says "Open command window here" Choose that one and you will be set. the command prompt should read something like C:\android-sdk-windows\tools>

Other Windows Version Users:
Go to the start menu, go to All Programs, then Accessories, and click on command prompt. Once open type

cd C:\android-sdk-windows\tools

Once ready, type these commands in cmd prompt from your adb tools directory. After every line press enter.

adb push unrevoked-forever.zip /sdcard/
adb push flash_image /data/local/
adb push rageagainstthecage-arm5.bin /data/local/tmp/
adb push mtd0.img /sdcard/
adb push PB31IMG.zip /sdcard/

Note: the PB31IMG.zip will take longer than expected to transfer to the sdcard. It is a BIG file.


Now we chmod a few things. After every line press enter. It should repeat what you typed in and then return you to a blank line with an $ for everything in adb shell

adb shell
cd /data/local/tmp
chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
cd /data/local
chmod 0755 /data/local/flash_image

Ok now for the root shell.

*
(still in adb shell)

cd /data/local/tmp
./rageagainstthecage-arm5.bin

You will now see some text on your cmd prompt screen explaining the exploit.


Wait for the adb shell to go away, and it will dump you into your windows command prompt again (no shell) should look something like this:

C:\android-sdk-windows\tools>


Once that dumps you out of the shell, type

adb shell

and you will see you now have a

#

instead of a

$

now type

cd /data/local
./flash_image misc /sdcard/mtd0.img

that will flash your misc partition with Toast's mtd-eng.img.

This should return you to a blank line with #.

If you get an "Out of memory error" with a huge list of weird lines, here's how to fix it.

Reboot your phone normally.
Open a command prompt and go backwards in this guide until you see the big red * and start from there.


Once it is flashed correctly, move on:

Type

reboot bootloader

Remember how you pushed that huge PB31IMG.zip to your sdcard earlier? This is where that comes in handy. Once you booted into hboot, Select "bootloader" with your volume up/down buttons and hit the power button. Let it sit for a little bit while it loads the PB31IMG.zip. This can take up to 5 minutes. When it finally asks if you want to apply this zip, choose YES. (Remember, this is the same as running an RUU, so it will delete all of your user data).

Once it is finished, select restart. You now are on the stock 2.1 build of Android.

From here you can root your phone and do unrevoked forever and what not for the people that updated to 2.2 without being s=off

 

[beebzgonewild]

Confirmed Works.

 

[mt15]

Thank You So much

I have been tyring to find a way to do this all day...works perfectly...took a little effort to find the files but overall great right up....

 

[smwoodward]

If someone who has enough post wants to post the links to the files, please do.

Sent from my ADR6300 using XDA App

 

[borgey420]

well really all you have to do now is flash a original PB31IMG.zip in HBOOT if you have s-off which you should if you're hacking in the first place.

 

[TNS201]

well really all you have to do now is flash a original PB31IMG.zip in HBOOT if you have s-off which you should if you're hacking in the first place.

Don't you think the whole point of his post was for people who didn't do S-OFF and did the latest leaked RUU and are stuck now because they fail to read.

 

[smwoodward]

Yeah, that is what this guide is about is for the people who were not s-off. At the time I did the ruu update I didn't feel comfortable doing s-off and then I learned about it, felt better, but then it was too late, I already updated to froyo. This is how I solved that problem so I could s-off my phone after the update.

Sent from my ADR6300 using XDA App

 

[ACD168]

nice man so this is for people who didn't do s-off before doing the 2.2 RUU and can now go back to 2.1 so essentially they could now s-off to get root for 2.2? great work, bro!


** would this work for new phones, or say a refurb that came with 2.2 already, and unrevoked hasn't come out with a new root method yet, so you could use this method to get back to 2.1, s-off, then ota to 2.2 and attain root. even better.

 

[lafester]

excellent post assuming it works
lots of people will want this if they need to root now.

 

[smwoodward]

In theory it should work, I don't see why it wouldn't. I don't have one that came with 2.2 so I don't know for sure.

Sent from my ADR6300 using XDA App

 

[zeiroe]

Confirmed this is working. Some typos in the writeup but that's easily fixed once you catch it.

 

[ACD168]

Confirmed this is working. Some typos in the writeup but that's easily fixed once you catch it.

I took a quick glance at this and stopped because right away I noticed errors and didn't wanna screw anything up. Glad to see it works, thanks.

 

[pules]

here you go!

Android SDK
HTC Sync 2.0.40
revert.zip that contains flash_image and mtd0.img
the evo-root.zip contains rageagainstthecage-arm5.bin
original PB31IMG.zip from the RUU 2.1 or if you prefer rapishare, here you go

I believe he used this guide

 

[sdsurferbob]

sorry if this is a stupid question, but to confirm, does this process downgrade the radio too? The radio is what worries me the most, and presumably because the 2.15 radio was in the RUU, this process would downgrade it back to 1.x? Is it contained in the PCI...zip file? thanks all (used the RUU and now don't have any sound from internal speaker, trying to get back)

 

[smwoodward]

If you will send me a PM with what typos I made, I will fix them. I am currently in AIT with the guard and don't have much time. The code should be correct, I believe the typos is where I wrote it up, and then had to remove the links because of the forums restriction of posting links when you are new.

Yes, this does downgrade the radio too. You are making your phone exactly like it came originally.

Thank you so much for posting he links.

Sent from my ADR6300 using XDA App

 

[pules]

I'm getting permission denied errors

C:\android-sdk-windows\tools>adb push mtd0.img /sdcard/
failed to copy 'mtd0.img' to '/sdcard//mtd0.img': Permission denied

what am I doing right?


edit: nevermind....figured it out....my SD card wasn't mounted on my phone

 

[androidsteve]

im doing this now. i hope i do everything right. i will post

 

[zeiroe]

Hey smwoodward, I hope you don't mind but I posted a reiteration of your guide on my blog. I see this being needed in the future for the new DInc's that will come with flavor of 2.2 out the box.

 

[smwoodward]

Hey smwoodward, I hope you don't mind but I posted a reiteration of your guide on my blog. I see this being needed in the future for the new DInc's that will come with flavor of 2.2 out the box.

No dude, 100% cool with me.

Sent from my ADR6300 using XDA App

 

[pules]

what am I doing wrong?

I followed directions step by step and I get it all done correct, but when it comes to loading the image off of the SDcard onto the phone in HBoot, I get error message "no image or wrong image"

HELP PLEASE!!!