[APP][Update to any Firmware region via Kies2.0][SpoofFw][Kies2.0] - Galaxy S I9000 Themes and Apps

A new approach!
Spoof the firmware version on the device, to trick Kies2.0.
But as you might understand, messing with system files is always dangerous and the possibility for a brick is always present. Hopefully this will not occur I'm doing my best to avoid that.
You should not use this app if you cannot get into Recovery and/or Download mode! (3 button combo) As always when you modifies system files!
Remember to disable any lagfix before updating!
For everyones safety I would recommend doing a manual backup of /system/build.prop and the complete /efs folder including nv_data.bin
The app does this automatically to the internal SDCARD, but just to be on the safe side I would recommend a manual backup to the computer aswell.
There is three steps where a reboot is required after step 2. The app will tell you what to do.
Step1.
Backup everything. If this fails, step2 is not available.
Step2.
Set the new ProductCode and PDA. Reboot!
Step3.
Set CSC and Phone. Do NOT reboot. Connect to Kies2.0 and update!
This setting is not permanent and will go back to previous setting after reboot.
Remember to disable any lagfix before updating!
Done!
-------------------------------------------------------------
How to Restore
Press restore in the menu. Reboot required.
If something fails, please send me your logcat.
So here it is: SpoofFw - requires ROOT and BusyBox
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Online Market link
If you get problems to connect to Kies after you used this program, try remove the registry key "HKEY_CURRENT_USER\Software\Samsung\Kies\DeviceDB"
Please let me now if it works out for you.
If you like my work, please consider a small donation.

Thanks a lot for your patch

Hi,
I'm new to the forum and am very interested in your work, at the moment the file to "fool " Kies 2.0 has not worked for me. I have the version 2.2 of Android 9000XWJPB/I9000FOPJP3/I9000XXJPP/I9000XWJPB and product code FOP. Sorry for my english, i'm from Spain.

what is new in this ??

It does'nt entirely work. Tried and it shows me update available.
But when it supposed to start downloading new rom, it say that latest software is already installed in my phone.Then Kies resets and start over offering update again.
So, I guess it detects the real rom in the phone.
Nice patch, though. Maybe you can see what is the problem.
Thanks

Same here - I just posted in the "original" theme about kies registry patcher.
Kies finds update, and when i start upgrading, the phone disconnects, and then after 1s reconects back. I cannot upgrade.

oh crap. didnt try to actually download it. thought it would work. I'll have a look at it. sorry guys.

No panic
Obviously some can upgrade, some cannot. We are the first with this problem.
I have jpx. Could this cause problems?

Those of you who have tried the patch, can you please post your info from the registry and tell me if it worked or not. Include both product code, hidswver, softwarerevision and modelname.

For me, in the registry is still JPY everywhere, after apply patch.
PRODUCT code : GT-I9000HKDXEU
HIDSWVER: I9000XXJPY/I9000OXAJPY/I9000XXJPY/I9000XXJPY
Model Name:GT-I9000
Software Revision: I9000XXJPY/I9000OXAJPY/I9000XXJPY/I9000XXJPY

HTH....
Running Kies 2.0.0.11014_49
HIDSWVER I9000XXJPO/I9000OXAJPO/I9000XXJPP/I9000XXJPO
Product Code GT-I9000HKDTMU
Model Name GT-I9000
Doesn't work unfortunately - it offers me an upgrade, appears to download the file then gives the Disconnected error.
I've also tried manually editing the registry as per kies 1.5 but no more luck.
I've tried on 2 PCs too.

HIDSWVER: I9000BUJP7/I9000GVD2JP5/I9000BUJP5/I9000BUJP7 (SofwareRev is same)
FW: I9000BUJP7/I9000GVD2JP5(CSC)/I9000BUJP5(modem)
PCode: GT-I9000HKDVD2 (VD2)
Kies: v2.0.0.11014_49
OS: Win7 Ultimate 64bit
I checked my registry but to no avail. Also tried deleting DeviceDB key to force kies into reconstructing it. It doesn't offer the fw upgrade option at all.
At least it's good to know someone is trying to develop a way to spoof kies 2.0. Did the patch work with any previous versions of kies 2.0?

I just got some another idea: could we try to hack ProductCode on device instead of on Kies side?
AFAIU ProductCode == CSC. I've googled we can change CSC in following ways:
1) *#272*HHMM# on Android 2.1 and older
2) *#272*IMEI# on Android 2.2 and newer
3) Opening preconfing with ADB
4) Editing /efs/nv_data.bin
Would it make Kies detecting different ProductCode?
There is still one more thing we have to consider: what if Kies detects our changed ProductCode but also firmware versions that were never released for given ProductCode?

Zajec5 said:
I just got some another idea: could we try to hack ProductCode on device instead of on Kies side?
AFAIU ProductCode == CSC. I've googled we can change CSC in following ways:
1) *#272*HHMM# on Android 2.1 and older
2) *#272*IMEI# on Android 2.2 and newer
3) Opening preconfing with ADB
4) Editing /efs/nv_data.bin
Would it make Kies detecting different ProductCode?
There is still one more thing we have to consider: what if Kies detects our changed ProductCode but also firmware versions that were never released for given ProductCode?
Click to expand...
Click to collapse
I have thought about it too. But we still need to change the PDA and PHONE aswell. But I have not yet located where they are stored. My guess is it's hard coded somewhere. Still the drivers need to take it from somewhere, the question is where.

LuffarJoh said:
I have thought about it too. But we still need to change the PDA and PHONE aswell. But I have not yet located where they are stored. My guess is it's hard coded somewhere. Still the drivers need to take it from somewhere, the question is where.
Click to expand...
Click to collapse
There is something like
getBasebandVersion, but I can't track RILRequest, how is is reading RIL_REQUEST_BASEBAND_VERSION... That could show us some file with baseband version maybe.

I have had some progress.
I have managed to change all necessary codes in the phone to be able to spoof Kies. This time I passed the step that the patch didnt!
Unfortunately it's not that simple, it requires root and changes system properties. But it's all reversible. I think I'll try to make an app of it during next week. First is a final exam on Monday.
watch this space.

well, it's much more fun to develop android application then study for an exam
I have successfully switched from XEN to XEE and to DBT.
I'm almost done, just some more bug testing. I'll probably release it tonight

Good news, wait for your release tonight.

luffarjoh said:
well, it's much more fun to develop android application then study for an exam
i have successfully switched from xen to xee and to dbt.
I'm almost done, just some more bug testing. I'll probably release it tonight
Click to expand...
Click to collapse
great news!!!

I have to push the release until tomorrow, I still have some fine tuning to do! Overall is works very well

Related

[Guide] How to Add Arabic / Persian / Hebrew support to your Kaiser

Hi everybody. I will explain the process here, it is fairly easy
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Here is what you’re going to need:
1.Fonts/Language support: this is the most important part. I took the required files for Arabic support from this site
http://code.google.com/p/arabicandroid/downloads/list
all credit goes to Mr. alsanad for his great code
Persian and Hebrew seem to work fine with the font I'm using right now, but I can read both, so I can't say it's 100% working.
Persian: you may want to play with it a little, maybe add newer fonts later by yourself.
Hebrew: when I search Google I found only fonts for Android 1.5. however if you find the fonts, the process should be the same
anyway, the Arabic font package I am using right now apparently can display Hebrew characters...
2.7-Zip or any program that can create “tar” files
Please note that the fonts you get in most of the cases are made for HTC android devices in mind, not for WM devices. And they require recovery mode and other stuff (I can’t explain a lot because I don’t own Android device). So we’re going to convert the file, and make it suitable for our devices.
Steps:
1.Get the fonts file and extract the content to whatever place you like
In the case of Arabic, you should see two folders:
PHP:
META-INF
System
2.Select the folders, and right click on them, them choose 7-Zip > Add to Archive
3.Make sure you choose archive formate as “tar”
4.Name the file “androidupdate” and save
5.Copy the file to you SD card: put in andboot folder
6.Installing the update: I quote this from “How to replace Windows Mobile with Android”
Place the SD card in your phone and power on your Kaiser. When you see text on your screen hold down the D-pad. D-pad is that button in the center of your up, down, left, right buttons. Keep holding down the D-pad until you see something like this appear on your screen.
Click to expand...
Click to collapse
7.Choose install update: you will see then some lines and then word Installing.
8.When finished, choose quite, or soft rest.
9.You’re done
Make sure you choose the right font for your Android. Apparently each version of android requires some modifications.
You might want to add some specific keyboard. I recommend Smart Keyboard... it is super fast, very accurate, and has support for different languages, such as Arabic and Hebrew.
I tried these steps on Kaiser running VaniljEclair RLS7c with the latest kernel.
I know this guide is basically unpacking, renaming, then installing... But it might be a little hard for some people..And I hope it will help them.
Make sure you back up you date or whatever important information you have on your phone and SD card before you start.
I have uploaded the files I used for my device. these fonts are meant for android 2.1
Cheers
Duke that has got to be the best timed guide I've ever seen, just finished making up a hebrew fonts update for shar1r, lol
Excellent guide, this deserves a sticky, since it is a question that has been asked before, and will be again
I usually edit an existing androidupdate.tar using 7zip, but this method is more complete, ( my method is mostly a lazy hack ).
Awesome!! I just posted a question about this - and voila this great tutorial!
Thank you!!
Sure, no problem. glad I can help
first i gotta tell u this thread is cooool
and thank u for ur effort
but i gotta a porblem
which is first of all i couldn't download the file cuz i'm in syria and google doesn't allow to download from it
i tried ultrasurf
but the same thing happened
anyway i found that u uploaded the files that u use
and u use vaniljeclair as i do
i did the update
but it still giving me error and repeat the same lines before boot
i use vaniljeclair too but rls11 not rls7c
does it has anything to do with it??
-sorry for the long speech lol-
i appreciate ur help
and one more thing
i searched for rls7c but i couldn't find it cuz it always reach for the rls11
thank u again
peace..
man_77 said:
first i gotta tell u this thread is cooool
and thank u for ur effort
but i gotta a porblem
which is first of all i couldn't download the file cuz i'm in syria and google doesn't allow to download from it
i tried ultrasurf
but the same thing happened
anyway i found that u uploaded the files that u use
and u use vaniljeclair as i do
i did the update
but it still giving me error and repeat the same lines before boot
i use vaniljeclair too but rls11 not rls7c
does it has anything to do with it??
-sorry for the long speech lol-
i appreciate ur help
and one more thing
i searched for rls7c but i couldn't find it cuz it always reach for the rls11
thank u again
peace..
Click to expand...
Click to collapse
If the guide isn't working for you then you can always try a multi language build. I know both Scoot and I keep our multi language Cyanogen 6.1 based builds updated. You might want to look towards those.
Link in 1st post doesn't seem to be working for me either.
Yet i think you should change the title of the thread, something like:
How to add YOUR language to a build
Also:
man_77 said:
first i gotta tell u this thread is cooool
and thank u for ur effort
but i gotta a porblem
which is first of all i couldn't download the file cuz i'm in syria and google doesn't allow to download from it
i tried ultrasurf
but the same thing happened
anyway i found that u uploaded the files that u use
and u use vaniljeclair as i do
i did the update
but it still giving me error and repeat the same lines before boot
i use vaniljeclair too but rls11 not rls7c
does it has anything to do with it??
-sorry for the long speech lol-
i appreciate ur help
and one more thing
i searched for rls7c but i couldn't find it cuz it always reach for the rls11
thank u again
peace..
Click to expand...
Click to collapse
Avoid return key, learn to use space. For a moment i thought i was reading a poem...
the coder apparently switched from Google code. here is the new website
http://ardoid.com/
I would recommend using generic Froyo libs as they might work. I don't have my TyTN II anymore... all my testings are on HD2.
http://ardoid.com/?p=64
most of the mutlilang builds will have native support for Arabic/Persian fonts, however, they won't look connected.
you migh need to use "libskia.so" and/or "libwebcore.so" only in this case.
Adding language support is trail and error, so give yourself plenty of time before trying this out.
I am using the libs for the Desire HD on my HD2 and they work perfectly fine.
And yeah, you can try a program called Tor www.torproject.org or Hotspot Shield www.hotspotshield.com to change your IP address.

[TUT][Hack]Change Product code without losing any data

Hi All
This is a tutorial for changing the phone product code and should work with Wave I/II/III
This tutorial works under 32-bit copy of Windows only
Steps:-
1.First of all download this file : http://www.mediafire.com/?yahd09ptzv3ubir
2.Extract the file with WinRAR & you will get 3 other files
a.QPST b.Revskills c.Samsung qualcomm driver
3.Grab your Wave and enter the code *#197328640#
Choose [8] Common >>>[7]Service Configuration>>>[2]DIAG Service Config.>>>[2]Usb DM/CP....Then exit this menu
4.Connect your Wave to the PC...If it asks for a Usb mode choose Usb Debugging
5.You will notice that your PC will detect a new hardware and will ask you for its driver>>>Use Samsung qualcomm driver
6.Install both QPST & Revskills
7.Use QPST to assign a COM Port for the phone
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
8.Now open Revskills and follow the Pics
to see current product code use Display NVItem and use 2757 as item no.
to change that code you need to write new one in Hex editior
Use write NVItem and use 2757 as item no. to write the new product code
proof of product code change
9.Grab your Wave and enter the code *#197328640#
Choose [8] Common >>>[7]Service Configuration>>>[2]DIAG Service Config.>>>[3]Usb UART/AP....Then exit this menu and restart the phone
Revskills part on youtube
If anyone got any question about this please ask
Best Regards
Thank u very much, will try tomorrow. maybe this will help to get my wave back in line with samsung kies. My product code was baaxen but with flashing to 2.0 it changed to baakor and kies would not let me update. hope this will help.
kolk11 said:
Thank u very much, will try tomorrow. maybe this will help to get my wave back in line with samsung kies. My product code was baaxen but with flashing to 2.0 it changed to baakor and kies would not let me update. hope this will help.
Click to expand...
Click to collapse
i hope it works for you
Is it possible to change the product code from GT-S8500BAAXTC to SHW-M210SBAASKT which is the same product with S8530 using this method even also vice versa? Because only Samsung Apps Korea is blocked to download an apps from global models such as S8500 and S8530. Not only from global to Korean model but also Korean model cannot download an apps from other countries.
Sent from my GT-I9100 using XDA App
If the phone's IMEI is not Korean maybe you will end up with a blocked phone that can't access Samsung Apps at all
I don't recommend doing this
This tutorial is for fixing product code if it was changed by accident and not tested for other purposes
Best Regards
I think Samsung Apps doesn't check the IMEI because there was a way to download an app from UK Samsung Apps by Korean model (SHW-M210S).
Actually, it was not that technical method, it just needed fast hands and good eyes
Of course, Sammy blocked it again last week.
Didnt work (yet)
So I tried to get back in line with kies and to turnback my productcode to XEN
SO far didnt work this is what i did:
I flashed back to an old full 1.0 bada firmware version and tried to change my productcode after that. I can connect to qpst and revskill but...
Revskill gives me when I fill in Item 2757; 26
When i click check commands i get: unknown response
Maybe i should flashback to bada 2.0 after that change productcode and then go back to my old updatable dutch firmware
or am i overlooking something
Edit: changed firmware to XXJID (bada 1.2) now I get error: failed in call to write file
Will reboot everything and try again
Did you use QPST to assign the COM Port number???
Assign that number then use it with revskills
If you phone COM Port is not listed in revskills
Make sure that your PC can find your phone as a Samsung HS-USB in the device manager
Don't write command number in revskills...it gets written after pressing let's go
Watch the youtube video for more understanding
Best Regards
mylove90 said:
Did you use QPST to assign the COM Port number???
Assign that number then use it with revskills
If you phone COM Port is not listed in revskills
Make sure that your PC can find your phone as a Samsung HS-USB in the device manager
Don't write command number in revskills...it gets written after pressing let's go
Watch the youtube video for more understanding
Best Regards
Click to expand...
Click to collapse
To bad still getting error failed in call to writefile (see my edit previous post)
Going to flash back to bada 2.0 change productcode and than flash to old updatable firmware
Update; Flashed some back and forward and reinstalled revskills. Now i can see my productcode which is BAAKOR and I want it to be BAAXEN.
So what do I have to change now and where u say: to change that code you need to write new one in Hex editior. What do I have to put in where in order to change my productcode
New code in hex editor
The tutorial tells me: to change that code you need to write new one in Hex editor
How do I know what values should be filled in there to change my productcode to BAAXEN
it is 47542D533835303042414158454E
Did you manage to connect your phone finally ?!
My mistake
Yes after reinstalling revskill I managed to connect.
this afternoon I will change to BAAXEN with the info you provided
Hope this will work (btw how do you know it should be the input u suggested?)
I used PC software called HXD hex editior
Made a new text document and write string data in it in the right side and as you can see in the picture it converted string data to hex value and that is it
Best Regards
mylove90 said:
I used PC software called HXD hex editior
Made a new text document and write string data in it in the right side and as you can see in the picture it converted string data to hex value and that is it
Best Regards
Click to expand...
Click to collapse
Okee but how do u know what string data to write to change productcode to baaxen? (trying to learn / understand)
kolk11 said:
Okee but how do u know what string data to write to change productcode to baaxen? (trying to learn / understand)
Click to expand...
Click to collapse
You don't need to memorise or know what code to write.
You can use this online hexadecimal editor.
Open the link, and paste the value you wish to convert to hex.
Example, to convert GT-S8500BAAXEN.
Just copy GT-S8500BAAXEN into the upper column of the page, and press Convert.
The value 47542d533835303042414158454e will display at the bottom column.
Any idea for S8600 Product Codes? Especially for :
I've tried GT-S8600HKATPL, but this seems wrong...
Code:
GT-S8600??????
S8600BOKJ1 (SW Version)
S8600TPLKJ1 (CSC Version)
Confirmed, because downloadable
Code:
[B]GT-S8600HKAXEF[/B] (France)
S8600XXKJC (SW Version)
S8600OXAKJB (CSC Version)
See KIES/FUS...
http://forum.xda-developers.com/showpost.php?p=19085697&postcount=19
Maybe now also S7250 and S5380 online?
Best Regards
Succesfull
I managed to connect to revskills (after reinstalling twice) and updated succesfully to BAAXEN and Yes kies told me there was an update available. So now Im back in line with kies with the latest official firmware. Now waiting for samsungs update to bada 2.0 cause the beta versions were promissing!
Thank u all for help and information!
Thanx mate, posted in badablog.ru
Hello,
I have a Wave 3 S8600 that when connected to Kies in registry has the product code set to XXXXXXXXXXXXXX . I tried changing the product code in the registry but kies 2 is ignoring this it seems.
Do you know how can I change this using PST? I tried the steps described in first post but my phone doesn't have Usb DM/CP. It has:
1. USB DM []
2. UART [*]
3. USB ACM []
Upon setting the Usb DM and after that connecting to PC it doesn't do anything, QPST is not seeing any new port. According to kies registry should be on Com 13
I am using a Windows 7 32 bit.
Thanks
S8600 is only Qualcomm CPU as I know...
Which Firmware you have...
*#1234#
Btw. You could make please Screenshots from Menu... it seems little bit different...
Maybe somewhere else also to change... to have access to Qualcomm Diagnostic port...
Best Regards

Solution for 'Version unmatch' (I hope final)

I know that this topic has already been discussed many times in many threads (most in MTCD - Verified Cross compatible MCUs).
I also know that there is a known solution to this problem.
However, there are users who report that they still have a problem with that.
I am writing a new thread to present (I hope) the final solution "Version unmatch"
Remember.
The solution presented in the MTCD - Verified Cross compatible MCUs thread still applies:
1. Before uploading new MCU (dmcu.bin), first export your settings to the dmcu.cfg file (FactorySettings, button Export)
2. After uploading new MCU, restore your dmcu.cfg (file dmcu.cfg on SD card, then MCU Update)
Below is the link to the application that unlocks the device from "Version unmatch"
Code:
https://www.sendspace.com/file/ijmf13
This is Android app so you must install it on your device.
After install and run you should see screen similar to that:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Press UNLOCK button. After you should see notifaction like below:
Reboot your unit.
After that, "Version unmatch" should gone
vote for sticky!
Works great!
thank you
Wadzio said:
I know that this topic has already been discussed many times in many threads (most in MTCD - Verified Cross compatible MCUs).
I also know that there is a known solution to this problem.
However, there are users who report that they still have a problem with that.
I am writing a new thread to present (I hope) the final solution "Version unmatch"
Remember.
The solution presented in the MTCD - Verified Cross compatible MCUs thread still applies:
1. Before uploading new MCU (dmcu.bin), first export your settings to the dmcu.cfg file (FactorySettings, button Export)
2. After uploading new MCU, restore your dmcu.cfg (file dmcu.cfg on SD card, then MCU Update)
Below is the link to the application that unlocks the device from "Version unmatch"
Code:
https://www.sendspace.com/file/ijmf13
This is Android app so you must install it on your device.
After install and run you should see screen similar to that:
Press UNLOCK button. After you should see notifaction like below:
Reboot your unit.
After that, "Version unmatch" should gone
Click to expand...
Click to collapse
Very good work, Thanks
how to restore dmcu.cfg?
I place in root of drive before upgrade but was ignored.
I changed from LM to HA and had to manually set display and touch key settings
I had this version unmatched problem and was solved with the tool. thanks
For me, the version unmatch tool crashes every single time. Anyone else experience this? What to do now?!?!
Heard of anyone having an issue with their unit crashing when trying to run the app? Mine does. I even reinstalled it several times and even after a full restore, it still crashes. I have an H201.
does this app requires root ? can you please elaborate a little as how this app works ? as the app is not working it asks for reboot and comes back to menu.
Try to manually reboot. Go to the factory settings menu and type hctreboot (step 10).
same for me, Android 10 ,it crash everytime , there is an update ?
same issue , on Android 10 it crashes everytime
laptopmd said:
same issue , on Android 10 it crashes everytime
Click to expand...
Click to collapse
Yes I think a number of people have reported that. Keen to figure it out?
I'm proud to announce that i've found a way to disable that "version unmatch" by modifying the dmcu.img file. It has worked 3 times with 3 different files so i can confirm it work.
Without boring you with the details, what i've done was :
1. decompress the img file with mtcdmcutool , you obtain a dmcu.bin file.
2. open and decompile the file with Ghidra (see screenshot)
3. here i've found where the software check if the version is "unmatch" (by searching the strings into the file).
4. just before you can see a check (cmp param1,#0x0) and a jump in case it doesn't match (beq , etc etc..) , those strange words is called "assembler language".
5. at the end, simply re-compress the files into a valid dmcu.img file, and update your mcu like always.
My simple solution was to force that parm1 value to 0 , to do that i've modified the code from CMP to MOV param1,0x0 and so the jump happen everytime and you don't get the annoying message and the continuous "beep" of the autoradio. I'm actually using my android radio without issues.
laptopmd said:
I'm proud to announce that i've found a way to disable that "version unmatch" by modifying the dmcu.img file. It has worked 3 times with 3 different files so i can confirm it work.
Without boring you with the details, what i've done was :
1. decompress the img file with mtcdmcutool , you obtain a dmcu.bin file.
2. open and decompile the file with Ghidra (see screenshot)
3. here i've found where the software check if the version is "unmatch" (by searching the strings into the file).
4. just before you can see a check (cmp param1,#0x0) and a jump in case it doesn't match (beq , etc etc..) , those strange words is called "assembler language".
5. at the end, simply re-compress the files into a valid dmcu.img file, and update your mcu like always.
My simple solution was to force that parm1 value to 0 , to do that i've modified the code from CMP to MOV param1,0x0 and so the jump happen everytime and you don't get the annoying message and the continuous "beep" of the autoradio. I'm actually using my android radio without issues.
Click to expand...
Click to collapse
Hey, can you upload mtcdmcutool somewhere?
I can't find it anywhere!
Fakken said:
Hey, can you upload mtcdmcutool somewhere?
I can't find it anywhere!
Click to expand...
Click to collapse
You didn't searched really... it is all on this forum
This is the thread : https://forum.xda-developers.com/an...dification-t3745838/post75471198#post75471198
Try to download the file there
Fakken said:
Try to download the file there
Click to expand...
Click to collapse
So use google, he answered with this link : http://www.tehnari.ru/f180/t266132/
It's in russian but you can see the file link, tried and it work.
I don't want to upload it here without the permission of the developer.
Thank you, i don't know if you believe me, but if searched alot to find the file. I even translated the 4pda.ru to search it.
Eh, thank you very much!
i got "error reading a file!" in mtcdmcutools while trying to convert it to .bin file.
how do i go from here? im using a stock dmcu.img file from xtrons.
In my case it says "illegal system!" additionally to the "Unmatch" Banner.
The Tool crashes right after it is opened, my touch screen only works on the upper slide part and there are no "Car Settings" in the Settings anymore..
Any idea what to do there?

OneUI 3.0 beta for G975U1 out now (update.zip link added)

Didn't see a thread, but I just checked the Members app and saw the OneUI 3.0 beta registration was finally on there for G975U1. Registered and am downloading now.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Links:
BETA 1 - Android 10 ETJ3 -> ZTKI Update.zip link ( courtesy of @GreenDinoXD )
BETA 2 - ZTKI -> ZTL9 Update.zip link ( courtesy of @GreenDinoXD )
Rename .bin file to update.zip
Follow installation instructions from this thread:
Kapitein187 said:
ADB-method:
1. Download SDK platform tools from here https://developer.android.com/studio/releases/platform-tools
2. Extract them on your desktop.
3. Inside the extracted folder put the update.zip
4. Inside this folder, holding left shift, right click the mouse and select "open command prompt here". The command prompt will open.
5. Shutdown the phone.
6. Holding power+volume up buttons, enter into recovery mode.
7. Select "update via ADB". (you scroll down using the volume buttons and select using the power button).
8. Connect the phone to the PC using original samsung USB cable.
9. In the command prompt run the following command:
./adb devices
10. Wait to see that the daemon has started and that your device is found.
11. If you device is found, run the following command:
./adb sideload update.zip
The update process will start. You will see a percentage counting. First it will verify, then patch etc. Do not move the cable, disconnect the phone or power off the PC.
Once the process is completed (it takes some time) the phone will boot itself, update the apps and log into your home screen.
SD-card method:
1. Download the bin file and rename it to update.zip (by going to file options in win10 you can select to view the file extensions. This makes the renaming process much easier and safer, and avoids renaming the file to update.zip.zip)
2. Copy it to the root directory of your SDcard.
3. Shut down your phone.
4. Hold simultaneously Power+volume up buttons to get into stock recovery.
5. Using your volume keys navigate to "update via SdCard" and press power button to select it.
6. Again using volume keys navigate to the file "update.zip" and press power button to select it.
7. Update will start. Leave it till it completes. It will take some time.
8. Phone will reboot by itself and load android.
Click to expand...
Click to collapse
How to capture the update.zip file to share with other people:
1. Download HTTP canary app from playstore
2. Open HTTP Canary app
3. Start the update by pressing "download" and don't pause it
4. Go back to canary app and start it and it will grab the link for you
rikipy said:
How to capture the update.zip file to share with other people:
1. Download HTTP canary app from playstore
2. Open HTTP Canary app
3. Start the update by pressing "download" and don't pause it
4. Go back to canary app and start it and it will grab the link for you
Click to expand...
Click to collapse
Is it still possible to grab the link after it's finished downloading? It's finished but I haven't installed it yet.
jeston said:
Is it still possible to grab the link after it's finished downloading? It's finished but I haven't installed it yet.
Click to expand...
Click to collapse
Just redownload it.
Hello, please post update.zip file
please do you have the update.zip file , please share the link
is it for snapdragon?
Good day, anyone was able to download the zip file? My CSC is XXA. I tried to do the trick of taken out my sim card and restarting my phone to see the notice come up in the members app but cannot enrol because I do not have a us simcard in my phone.
Ackeem.Salmon said:
Good day, anyone was able to download the zip file? My CSC is XXA. I tried to do the trick of taken out my sim card and restarting my phone to see the notice come up in the members app but cannot enrol because I do not have a us simcard in my phone.
Click to expand...
Click to collapse
That's not how this works, unfortunately.
Some people END UP with Snapdragons outside US, i have a friend who i recently found out was on PIE.
It's logical that SIM Region and Actual Location match up.
The only way we can alleviate this is by finding out a way to spoof requests to Samsung's Servers (alla Frija) for OTA's with mocked locations, but i've never seen something like that.
That said, Snapdragon Beta testers seem to be as helpful as Samsung is to them, so far none of them have shared the package with us.
PlutoDelic said:
That's not how this works, unfortunately.
Some people END UP with Snapdragons outside US, i have a friend who i recently found out was on PIE.
It's logical that SIM Region and Actual Location match up.
The only way we can alleviate this is by finding out a way to spoof requests to Samsung's Servers (alla Frija) for OTA's with mocked locations, but i've never seen something like that.
That said, Snapdragon Beta testers seem to be as helpful as Samsung is to them, so far none of them have shared the package with us.
Click to expand...
Click to collapse
okay please if you hear any please let me know .. and thanks so much am grateful
I tried a manual Frija fetch with OP's information, just for the sake of it, and got some interesting results.
This is the latest XAA Android 10 Build in Auto shows:
SM-G975U1_1_20201020093603_5lxag3hh7k_fac.zip.enc4
So build date is 20th October 2020. And this is ETJ3 (November).
Manually looking up for XAA with:
PDA: G975U1UEU4ZTKI
CSC:G975U1OYM4ZTKI
Phone: G975U1UEU4ZTKI
Gives me this:
SM-G975U1_7_20201112155200_rpfk7uveqc_fac.zip.enc4
So, build date is 12th November 2020. Build Date and release dates can differ up to two-three weeks. Weirdly though it reports Android 7.1.1 (which this device never had).
OP (@jeston ) Can you just check if the build date matches with yours in Software Information?
PlutoDelic said:
I tried a manual Frija fetch with OP's information, just for the sake of it, and got some interesting results.
This is the latest XAA Android 10 Build in Auto shows:
SM-G975U1_1_20201020093603_5lxag3hh7k_fac.zip.enc4
So build date is 20th October 2020. And this is ETJ3 (November).
Manually looking up for XAA with:
PDA: G975U1UEU4ZTKI
CSC:G975U1OYM4ZTKI
Phone: G975U1UEU4ZTKI
Gives me this:
SM-G975U1_7_20201112155200_rpfk7uveqc_fac.zip.enc4
So, build date is 12th November 2020. Build Date and release dates can differ up to two-three weeks. Weirdly though it reports Android 7.1.1 (which this device never had).
OP (@jeston ) Can you just check if the build date matches with yours in Software Information?
Click to expand...
Click to collapse
Looks like the build date is November 30...
I can't be the only one in the beta, nobody else has been able to join and grab the update.zip?
jeston said:
Looks like the build date is November 30...
Click to expand...
Click to collapse
That's nice news, why is Frija able to download a November ROM when there isnt one built in that month (As i said, November release was built in October).
I could never do this before with Beta's or Test Firmwares on SamFirm or Frija, why is it suddenly reacting to the exact values of the Beta is a myth to me.
jeston said:
I can't be the only one in the beta, nobody else has been able to join and grab the update.zip?
Click to expand...
Click to collapse
There are quite a few on reddit, but no one sniffed the package. Bummer.
jeston said:
Is it still possible to grab the link after it's finished downloading? It's finished but I haven't installed it yet.
Click to expand...
Click to collapse
yes its still posible and me on insta: Mateuzs_95 so i can help you with the steps:
PlutoDelic said:
That's not how this works, unfortunately.
Some people END UP with Snapdragons outside US, i have a friend who i recently found out was on PIE.
It's logical that SIM Region and Actual Location match up.
The only way we can alleviate this is by finding out a way to spoof requests to Samsung's Servers (alla Frija) for OTA's with mocked locations, but i've never seen something like that.
That said, Snapdragon Beta testers seem to be as helpful as Samsung is to them, so far none of them have shared the package with us.
Click to expand...
Click to collapse
I actually get updates my latest being last month.
PlutoDelic said:
That's nice news, why is Frija able to download a November ROM when there isnt one built in that month (As i said, November release was built in October).
I could never do this before with Beta's or Test Firmwares on SamFirm or Frija, why is it suddenly reacting to the exact values of the Beta is a myth to me.
There are quite a few on reddit, but no one sniffed the package. Bummer.
Click to expand...
Click to collapse
I guess they were quite hasty so nobody thought about grabbing the update
I really hope someone grabs the update and upload the zip. Waiting for 3 months to get a feel of android 11 is just out of it.
Ackeem.Salmon said:
I really hope someone grabs the update and upload the zip. Waiting for 3 months to get a feel of android 11 is just out of it.
Click to expand...
Click to collapse
the guy that created this post can do it right know but i don't know if he want to do it. i can help him but he needs to contact me so i can tell him the steps
BETA 1 FOR G975U1.
Install guide found here I believe. I did not create that guide. I am not responsible for what you do with the file, I just grabbed it cause it seems people needed it.
GreenDinoXD said:
BETA 1 FOR G975U1.
Install guide found here I believe. I did not create that guide. I am not responsible for what you do with the file, I just grabbed it cause it seems people needed it.
Click to expand...
Click to collapse
Can anybody confirm that's the correct update.zip before I include the link in the OP?

FRP BYPASS for S20 FE 5G Android 11 One UI 3.1

I would try to find the video that showed me, but after realizing it took me 3 weeks to find it and I really hate techno now...lol ill spare you the experience!!
***DISCLAIMER***
I did not create this tool and no its not a virus... please read the entire post before you do anything.....
This tool is for when you lock your self out of your own account and don't have the password, or the phone you used to two party authorization is not in service, you changed your number, your girlfriend threw it away, damn it my screen broke, you forget stuff easily, or maybe you didn't know that you bought a used phone that was locked and now your just stuck... Or you might be one of the few and proud local phone repair guys.....
IF YOU LIVE A LIFE OF CRIME AND YOU STOLE A PHONE OR ARE A PART OF A CRIMINAL ORGANIZATION RESELLING ON THE BLACK MARKET YOU ARE THE WORST OF THE WORST PEOPLE ON THE PLANET AND YOU DONT DESERVE THE AIR YOU BREATH.... DO NOT ASK QUESTIONS PERTAINING TO ILLIGAL ACTIVITY BECAUSE YOU WILL BE REPORTED......
PLEASE READ THE ENTIRE POST BEFORE YOU DO ANYTHING
You will need another Android at the end of the process with Android 10, OTG capability or a newer Samsung, S9 or better .. I successfully did this with a Motorola g7 plus as my 2nd phone...
This is a Windows 10 PC method..... if you don't have it get it
Create a new Samsung account on the website and setup two party verification
Download WinRAR https://www.win-rar.com/download.html?&L=0
I would try to find the video but after realizing it took me 3 weeks to find it and now I hate techno music!!
FRP tool
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
​Mod edit: DL link removed due to virus detection.
Disable Anti- Virus on Windows or you will scratch your head wondering where the download went......
Make sure you use WinRAR ONLY not 7zip gunzip anyzip because I dont know why but this is the only way to unzip and to execute the script
Make sure you got up to date samsung drivers and up to date adb blah blah installed
As far as I know this will work on ANDROID 11 ONLY!!!! I Began with ANDROID Q frp locked with out success, so I upgrade firmware from samfw.com
This should work with ANY varient of the QUALCOM snapdragon S20 FE
Samsung Galaxy S20 Fan Edition 5G Firmware Download SM-G781U Free Download
Samsung Galaxy S20 Fan Edition 5G Firmware Download SM-G781U Free Download ⭐ Official and fast update ⭐ Max speed and free download ⭐ Best Samsung Galaxy website
samfw.com
I was on Android 10 so I factory data reset from stock recovery and flashed Android 11 with Patched ODIN
Odin 3.14.1 Patched (Modded) for windows - Odin download for pc​Share Odin3 Flash Tool: 0 Shares Facebook Twitter LinkedIn Copy Link More Now added Odin 3.14.1 Patched version for windows. It specially developed Samsung’s newer phone firmware flash with android 10. We assume this will be very useful, so we thought we would share it. Odin3 version 3.14.1 has...
Once flashed boot the phone and connect to WIFI the same WIFI the Windows PC is on
Unzip and Install the FRP tool with WinRAR ONLY
Disable the native Windows 10 antivirus (MAKE ALL GREEN CHECKS DISSAPPER)
Disable signatures verification from the FRP tool... it will ask you to reboot before running the tool.... DONT REBOOT YET
check anti virus again make sure its disabled
NEXT choose either of these methods to make sure signature verification is turned off...also has procedure to turn it back on when done
How to Disable Driver Signature Verification on 64-Bit Windows 8 or 10 (So That You Can Install Unsigned Drivers)​64-bit versions of Windows 10 and 8 include a “driver signature enforcement” feature. They’ll only load drivers that have been signed by Microsoft. To install less-than-official drivers, old unsigned drivers, or drivers you’re developing yourself, you’ll need to disable driver signature enforcement.
www.howtogeek.com
NOW REBOOT
It should have test mode listed on your desktop in the bottom right corner
GO to the windows security badge in task view area and check your antivirus status....there will be one its the main one turn it off
make sure phone is CHARGED FULLY powered ON, and connected to the same WIFI as the PC.... when u disabled signature it reset the Samsung drivers....
Connect to the PC with the best USB TYPE C cord you can...let windows set the phone up for file sharing (it prompt you just click on file transfer)... when it makes the windows connect noise and tells you setup is finished click the install button on the FRP tool....make sure you keep the phone screen unlocked and lit up... You will get a prompt on the phone click it to open up the youtube... click the account picture scroll to the bottom and there should be a link for PRIVACY POLICY click the link it will take you to the Real google search......ENTER THIS EXACTLY IN SEARCH BAR addrom click the first link it should say FRP tool 2021 or something similar
open galaxy store from the menu.....update the app if needed when its finished updating back out with back nav bar button...re-enter and search for Smartswitch install back out then open the settings app from same menu as before ... navigate to accounts and make sure there is nothing active.. if there is delete it... use the settings search bar and access Smartswitch.....
TIME FOR SECOND PHONE
on the other Android have smart switch from the playstore already installed and make sure the phone has only 1 GOOGLE account. It must be your Account that will be installed on the S20 FE... Make sure you are synced make sure its a clean reset phone no EdXposed, Magisk, or TWRP installed because its critical for the Smartswitch process...
LOG BOTH PHONES INTO SMARTSWITCH
The 2nd phone is the host and the receiver is the S20 FE
Send ONLY your GOGGLE Account AND DEVICE SETTINGS!!!! nothing more, thats all... I had no luck with OTG cable it didn't work trust me when I tell you choose the wireless method 1000% success.... once its done go to developer options and toggle usb debugging set a device pin or pattern make sure you install your Samsung account and Google account.... restore a back up from either cloud...IMPORTANT....
after the backup restores let the phone sit for about 5 seconds...lol.... factory reset from the settings menu.....when it boots back up its gonna be FRP locked AGAIN with your passcode....cheers...
And this worked on your device? I am a little bit sceptical about disabling antivirus. Suspicious
Maybe better to hide this guide, as it can be misused by thefts.
It_ler said:
And this worked on your device? I am a little bit sceptical about disabling antivirus. Suspicious
Maybe better to hide this guide, as it can be misused by thefts.
Click to expand...
Click to collapse
wouldn't they just reset the device rather than wanting to get into it as is ?
this is probably more use to the psycho girlfriend who wants to know who Janis is.
should this work with canadian model SM-G781W ?
3mel said:
wouldn't they just reset the device rather than wanting to get into it as is ?
this is probably more use to the psycho girlfriend who wants to know who Janis is.
Click to expand...
Click to collapse
FRP means Factory Reset Protection. You can probably guess what this guide is bypassing.
Ok, so you want people to download some random file, which VirusTotal shows like a billion different antivirus apps as infected?
Then you want people to disable their Windows antivirus AND driver signature verification?
And then you want people to use winrar(known to have security problems with scripts) to open a .7z file instead of 7zip, app which created that archive in the first place?
And then your instructions tell people to open youtube? right...
If anybody reading this thinks this works, please private message me because I have an amazing business proposition for a bridge for you!
Thread closed due to VirusTotal detection.

Categories

Resources