How I got my Sprint LG G2 (LS980) to work on T-Mobile - Guide with Screenshots - Sprint LG G2

I have a Sprint LG G2 (LS980) that I wanted to use on T-mobile. There is a ton of info scattered in various threads on achieving bits and pieces of this task, but nothing I could follow straight through to get it done. I did not come up with any of the info in here, I just assembled it to form a guide that I used to successfully get my LS980 working on T-Mobile. Thanks to all the hard work of everyone else who wrote the apps I used, and those who came up with the exploits that made it all possible.
(Also, I wrote this in HTML before I realized I had to use BBCode here. I used a HTML to BBCode converter, so if something looks formatted weird, let me know, I might have overlooked it)
Apps Used
RootBrowser
RadioSwitcher
RootChecker
ChangeAPN
ROMToolbox Lite
Flash Stock Rom
Based on steps here.
Downloads
Download firmware and dll files for your specific phone model
I used LS980ZVA_01.tot& LGLS980_20130904_LGFLASHv151.dll
Download LGDrivers
File name: 'LGUnitedMobileDriver_S51MAN313AP22_ML_WHQL_Ver_3.13.2.exe'
Original article says to get the Verizon Drivers if you're doing a verizon phone, however since I'm dealing specifically with the Sprint LS980 I didn't get them.
Download LGFlashTool v1.8
Download MegaLock.dll
Install LG Drivers
Run the downloaded file 'LGUnitedMobileDriver_S51MAN313AP22_ML_WHQL_Ver_3.13.2.exe'
Click Next through the prompts, they require no real configuration.
If successful, you should get a prompt:
LG United Mobile Driver Installed Successfully.
Click to expand...
Click to collapse
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Setup LG Flash Tool
Run the downloaded file Setup_LGFlashTool_1.8.1.1023.exe
Click Next through the prompts, nothing needs unique configuration. It will install by default to C:\LG\LGFlashTool\
Copy the downloaded MegaLock.dll from earlier into C:\LG\LGFlashTool, and over-write the one that is already there.
Boot into Download Mode
Plug usb cable to computer
On the phone, hold volume up and plug other end of usb cable into phone
Screen will show 'Download Mode'
The screen will then show 'Firmware Update'
The device is now in Download Mode and ready to be flashed
Configure Port for Phone
Open Device Manager and expand Ports (COM & LPT)
Right click LGEAndroidNet USB Serial Port and choose Properties
In the Properties window click the Port Settings tab, then click Advanced
In the Advanced Settings window, set the COM Port Number to COM41 and click OK
The entry in Device Manager should show as having COM41 now.
Flash the Phone
Run LGFlashTool as Administrator
"C:\LG\LGFlashTool\LGFlashTool.exe"
In the Model Config window that opens:
Check Select Manual Mode
DLL:"C:\LG G2\LGLS980_20130904_LGFLASHv151.dll"
S/W:"C:\LG G2\LS980ZVA_01\LS980ZVA_01.tot"
Click Ok
In the LG Flash Tool screen click the Yellow Arrow to Start
The Port 1 box should, after a second, show Ready!
If the Port 1 box does not start showing processing after a few seconds, unplug the phone then plug it back in. This should start it.
As it processes, the phone may reboot a couple times (I never counted how many times)
At 94% my phone will restart, and the app will show 'Waiting 120 sec for reboot'. When the phone restarts at this point, it is loaded into the OS and waiting to be configured. I have never gotten the Flash Tool it to hit 100% successfully, despite being in the phone. I have not seen this to be a problem yet.
Once inside the phone, close the Flash Tool.
Root the Device
The device has to be in debug mode before it can be rooted with this method.
Enable Debug Mode
Open Apps| Settings
Select About Phone
Choose Software Information
Click Build Number 7 times. After about 4 clicks you will see feedback indicating remaining clicks until you are a developer
You are now 3 steps away from being a developer.
Click to expand...
Click to collapse
After 7 clicks, you will see a popup that says:
You are now a developer!
Click to expand...
Click to collapse
Back out to the root of Settings and choose Developer options
In the Developer Options, check USB Debugging
Root the device
Download IOroot here.
Extract the downloaded ioroot.zip
Run ioroot.bat as Administrator
A cmd window will launch and show:
enable ADB connection..
Developer Options unlocked and ON.
USB debugging ON.
Accept RSA key fingerprint.
Press any key to continue...
Click to expand...
Click to collapse
On the Phone, click OK when prompted for Allow USB Debugging?
On the Computer, press ENTER to advance the batch
The batch script will next pause showing:
USB Connection Mode needs to be toggled.
Toggle USB mode to another setting and then back again.
Ex.
Charge Mode to MTP then MTP back to Charge.
Ethernet Mode to MTP then MTP back to Ethernet.
Sometimes unplugging USB and then plugging back in helps.
Then press ENTER to confirm ADB root...
--------------------------------------------------------
Click to expand...
Click to collapse
On the Phone, switch the USB mode to a different option,then switch it back.
On the Computer, press ENTER to advance the batch script
The batch will show:
adbd is already running as root
uid=0(root) gid=0(root)
If you do NOT see uid=0(root) gid=0(root) above then
it is likely your device firmware is not supported or
USB mode was not toggled properly. You can try to
run the script again or..
PRESS CTRL+c to stop this script...
If you DO see uid=0(root) gid=0(root) mentioned above...
CONGRATS.. Rooted ADB is now confirmed.
You will have a rooted ADB shell but no apps on the
phone will be able to access root functions.
PRESS ENTER to backup EFS and continue with full root.
PLEASE NOTE!
Continuing with full root can trip LG's rootchecker.
This means your phone will show ROOTED in Download mode.
You can remove root flag by flashing stock firmware...
.bin .cab .tot or .kdz
If you do not want to possibly invalidate your warranty
press CTRL+c to stop this script...
--------------------------------------------------------
Press any key to continue . . .
Click to expand...
Click to collapse
Make sure you see uid=0(root)gid=0(root) as shown in the screenshot above
Press Enter to continue The script will next show:
Backing up EFS...
6144+0 records in
6144+0 records out
3145728 bytes transferred in 0.626 secs (5025124 bytes/sec)
6144+0 records in
6144+0 records out
3145728 bytes transferred in 0.617 secs (5098424 bytes/sec)
2978 KB/s (3145728 bytes in 1.031s)
2977 KB/s (3145728 bytes in 1.031s)
________________________________________________________
EFS partitions now in ioroot folder on computer
named modemst1.img and modemst2.img
They will come in handy in case of an emergency.
Store them somewhere you won't lose them.
Press ENTER to continue with full root.
--------------------------------------------------------
Press any key to continue . . .
Click to expand...
Click to collapse
Press Enter to continue
The script will show:
Mounting system, pushing su binary...
2525 KB/s (121260 bytes in 0.046s)
WARNING: generic atexit() called from legacy shared library
0 KB/s (629 bytes in 1.000s)
Rebooting Phone.
________________________________________________________
You should hopefully now be fully rooted!!
IOroot complete.
Confirm root with Root Checker app from Play Store.
--------------------------------------------------------
Press any key to continue . . .
Click to expand...
Click to collapse
The phone should reboot and be rooted now.
Check Root with Root Checker
If nothing went wrong, the phone should be rooted now. To make sure, we can use Root Checker. (there are probably other apps that will do this as well, but I used this one)
Download, install, and launch RootChecker
In the application, click Verify Root
It should return back showing
Congratulations! this device hasroot access!
Click to expand...
Click to collapse
Unlock SIM
Steps here are from this article. I am just writing it out here with notes that helped me.
Download and install Root Browser (I only had success using version 2.2.3.)
Download ls980SIMunlockFinal.rar
Extract ls980SIMunlockFinal.rar (I used 7-zip)
Replace 'Carrier' folder
Within the extracted contents, copy the 'Carrier' folder onto the phones internal storage (I copied it to Internal Storage\Downloads)
On the Phone, open Root Browser and navigate to where the Carriers contents were copied
Note: My screenshots show me copying the files from where I copied the files to in Internal Storage\Downloads (storage\sdcard0\Downloads)
Click Storage
Click sdcard0
Click Download
Long press carrier
Click copy
Click the green back arrow until you're back at root
Click Paste
When prompted, choose to overwrite.
Note: Alternatively, you could rename the original 'carrier' folder for safekeeping... I never did though.
carrier already exists. Do you want to overwrite it?
Click to expand...
Click to collapse
Reboot the phone.
Replaceapns-conf.xml
From original post - "To make APNs stick automatically"
Note: I later add a new APN, despite having replaced the apns-conf.xml here. I honestly don't know if this step is necessary for that reason, but I did it in my process, so I'm adding it here.
Within the extracted contents, copy the apns-conf.xml onto the phones internal storage (I copied it to Internal Storage\Downloads or root\storage\sdcard0\download)
On the Phone, open Root Browser and navigate to where the apns-conf.xml was copied
Long press the apns-conf.xml and choose copy
Navigate to root\etc, and click paste
When prompted to overwrite, choose Yes
Note: Again, you could rename the original to keep a backup.
Navigate to root/data/data/com.android.providers.telephony/databases
Delete/Rename telephony.dband mmssms.db
Note: I didn't actually delete the telephony.db and mmssms.db originally, and I still had success. But I also don't know what deleting those so they can be rebuilt does, so I included the steps.
Reboot the phone.
Update build.prop
Backup build.prop
Open Root Explorer and navigate to root\system
Long press build.prop and choose Copy, then click Paste to create a backup.
Edit build.prop
Download and install ROMToolbox Lite.
We're going to use the Build Properties application included in the Toolbox for editing the build.prop.
Open Root Explorer and navigate to root\system
Click build.prop and choose to open with Build Properties
If you get the Welcome screen, click OK
Locate and click on each of the following settings, and set the Value as shown below, and click Save
persist.service.crash.enable=1
ro.build.target_operator=spr
ro.carrier=spr
Reboot the phone.
Switch the Radio
Download and install RadioSwitcher (I only had success with version 1.2.)
Open Radio Switcher, and set the Preferred network type to LTE/GSM/WCDMA
Create a New APN
Despite replacing the apns-conf.xml earlier, I still ended up having to create a new APN.
Download, install, then open ChangeAPN
Click Menu and choose New APN
Here are the settings I used in the APN from here
Name:*T-MOBILE
APN:*epc.tmobile.com
Proxy:<Leave in Blank>
Port:*<Leavein Blank>
Username:*<Leavein Blank>
Password:*<Leavein Blank>
Server:*<Leavein Blank>
MMSC:*http://mms.msg.eng.t-mobile.com/mms/wapenc
MMSproxy:*<Leavein Blank>
MMSport:*<Leavein Blank>
MCC:310
MNC:260
Authenticationtype:*<Leavein Blank>
APNtype:default,supl,mms
APNProtocol:Leave it to the Default one
Click to expand...
Click to collapse
Click Menu then Save
Reboot the phone
Notes
After all of this was complete, I had the LS980 working on my T-Mobile SIM card successfully. Some other threads I've read discussed installing recoveries like TWRP to make a backup, but every time I tried, it ended up causing a boot loop, so I ultimately didn't do it. From what I can tell it is not a necessity to simply get the phone to work on T-Mobile. Once all the settings/changes have been made, I just popped in my SIM Card from my other phone and it worked fine.
Known Issues
Since we got it running on T-Mobile, there are a few issues that we've been facing.
Unable to call some numbers
When trying to make calls, ff the number does not have a 1 at the beginning, I get a crash.
Unfortunately, the process com.android.phone has stopped.
Click to expand...
Click to collapse
Adding a '1' before the number has corrected it.
This article lists another possible more permanent fix, that I will eventually try out:
If you want to fix this manually, Follow the following fix found by jsergio123)
*To fix the issue of the com.android.phone process crashing when you don't dial a 1 in front of the number edit the /data/data/com.android.providers.settings/databases/settings.db file with a SQLlite editor and change in the "system" table "assist_dial" and "assist_dial_init_db_check" to "0". If you don't see those 2 rows then you can add them. Fix permissions, wipe cache and reboot.
Click to expand...
Click to collapse
Text Messages, and Multimedia Messages Fail to send
When trying to send texts, or picture messages, I was getting regular failures.
This article had a solution.
1. In dialer press ##443336772#, you will get a 6 digit SPC code, remember it!
2. In dialer press ##DATA# , this will take you to hidden Data settings
3. Select MMSC
4. Hit Edit, you will be prompted for your SPC code, enter it
5. Now have 3 options: Set URL, Gateway, and Set Port. Set all
My working settings:
Set URL: http://mms.msg.eng.t-mobile.com/mms/wapenc
Gateway: 10.12.0.2
Set Port: 80
6. Reboot

3g not working on My lg g2 ls980 plz solve it.

Moin. said:
3g not working on My lg g2 ls980 plz solve it.
Click to expand...
Click to collapse
See the section of the article on switching your radio.

Thank you Fuzz1303. This is, without question, the most thorough tutorial available for using an LS980 on a domestic GSM carrier. After weeks of trying to piece together various threads explaining the process, I stumbled upon your tutorial and BINGO, it was a cake walk. Again, thank you.
Now that it's done, will the unlock stick through custom ROM flashing? I have installed TWRP.

bibbin said:
Thank you Fuzz1303. This is, without question, the most thorough tutorial available for using an LS980 on a domestic GSM carrier. After weeks of trying to piece together various threads explaining the process, I stumbled upon your tutorial and BINGO, it was a cake walk. Again, thank you.
Now that it's done, will the unlock stick through custom ROM flashing? I have installed TWRP.
Click to expand...
Click to collapse
I dealt with the same sort of headache flashing mine, so I'm glad this helped.
As for the unlock sticking, I'm not totally positive. I never played much with the custom roms just as I kept having issues and finally got tired of battling it.

It is easier to get a Nexus 5 instead.

Fuzz1303 said:
I dealt with the same sort of headache flashing mine, so I'm glad this helped.
As for the unlock sticking, I'm not totally positive. I never played much with the custom roms just as I kept having issues and finally got tired of battling it.
Click to expand...
Click to collapse
Once again, thanks for this spectacular tutorial. FYI, my G2 is still chugging along strong and I'm safely running Resurrection Remix. I started with Lollipop and moved on to Marshmallow. So happy. Thanks.

I need help, I just get "adbd cannot run as root in production builds
uid=2000(shell) gid=2000(shell) groups=1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats) context=u:r:toolbox:s0" and have no idea how to fix... help please!

Related

[GUIDE] Lost Part7Backup File, What to do now? [RESTORE IMEI]

You just rooted your Mytouch 4g using gfree. But for some reason you want to get back to stock again and unroot the device and lock the bootloader (s-on). If you used gfree, the only method would be to restore ur partition 7 backup file. But what if you dont have that file or if you lost it?
Lets start off by talking about partition 7 first. Partition 7 is the seventh partition on your emmc chip where all the device specific data like imei number are stored. It also contaiins a flag which control's the s-on/off status of the bootloader. Gfree patches the flag and makes your bootloader show "s-off" which is basically unlocking the bootloader. gfree automatically backup's your partition7 image file to your sd card which is named part7backup-xxxxxxx.bin . This file is the image or copy of your original parititon 7 where everything is stored. Gfree makes this backup so that you can restore it to stock if you need it later.
Ok so you lost it, what now? you could just get someone else's part7bin file from xda or somewhere else and replace ur's. But whats the problem with that? your imei number will be replaced with their and there will be 2 phones with the same imei on the same network. And according to what i have learnt, this is illegal. So how do u fix this? Well, there is a way, but what i am going to explain below will help you restore the imei of your phone to your own by using someone else's part7backup file.
PLEASE NOTE THAT CHANGING IMEI NUMBER TO SOMEONE ELSE'S IMEI IS ILLEGAL AND IS CONSIDERED A CRIME. PLEASE USE YOUR OWN IMEI NUMBER AND DO NOT POST YOUR PARTITION7BACKUP FILE IN PUBLIC! I TAKE NO RESPONSIBILY IF YOU BRICK OR DAMAGE YOUR PHONE BY USING THE STEPS BELOW. IT WORKED FOR ME SO IT SHOULD WORK FOR YOU AS WELL.
You will need to do some hex editing in order to do this, and every step is REQUIRED, if you dont follow every step carefully, you might BRICK your phone and no one but yourself will be responsible for that.
Instructions:
Warning : THIS MIGHT ERASE ALL YOUR DATA
1) Make up your mind to do some hardcore hacking with your phone (jk its not hardcore)
2) Get a hex editor, i would recomment 30 day trial of 010 editor. Get it here : http://www.sweetscape.com/download/download_010editor.html
3) Install it. Now dowload the attached part7.zip file and extract part7.bin file (DO NOT REPLACE THIS PART7 BIN FILE DIRECTLY YOU MIGHT BRICK YOUR PHONEE!! This file has the imei number removed)
4) Now right click the extracted part7.bin file and open with 010 editor (Or open the file with any other hex editor).
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
5) 010 Editor will pop up, scroll down till you get to address 0600h
5) As you can see on the image above, the 14 ++++++++++++++ bytes are where your imei number will go. I replaceed the original imei on the part7bin file with ++++++++++++++ for security reasons.
6) Get the original IMEI number of your phone from the back of your battery or from your phone's box if you have one.
7) Type it in notepad or somewhere and copy the first 14 numbers out of 15. The last number is automatically generated and is called imei check number. It is generated automatically using luhn algorithm.
DO NOT USE ANY OTHER IMEI NUMBER THAN YOUR OWN, ITS ILLEGAL! AND DO NOT PUT RANDOM NUMBERS IT MIGHT BRICK YOUR DEVICE!!
8) Go to 010 editor, select the 14 + signs, and right click them, and paste the copied imei.
9) The first 14 digits of your IMEI should be in yellow letters now.
10) Press CTRL+S to save the file.
11) Connect your phone, and put the edited part7.bin file on your sdcard.
12) If you are running stock ROM which is already rooted, skip to step 17
13) Download this file : http://www.megaupload.com/?d=V4NAODYZ
(You are about to restore your phone to stock rom, because we will need to push the part7bin file to your phone, and to do so emmc power cycling is necessary. Most other kernel's dont support modules needed to power cycle emmc. So you will need to use PD15IMG.zip method to get back to stock if you arent on it already.)
14) Put it on your sdcard.
15) Power down your phone and hold your volume down + power button till you get into a white screen with some stuff on it.
WARNING : DOING THE NEXT STEP WILL ERASE ALL YOUR DATA!
16) Press power to get into boorloader mode. Wait till it scans the PD15IMG.zip file. Then press volume up when asked. Wait till it completes and restarts into your stock rom.
17) Download Visionary from here : http://android.modaco.com/topic/320350-19nov-r14-visionary-one-click-root/ and install it on your phone.
18) Turn on usb debugging and temp-root the phone using visionary if not rooted already.
19) Install adb drivers and install android sdk : follow instructions here if you havent already : http://forum.xda-developers.com/showthread.php?t=928370
20) Connect your phone to pc, and change usb mode to "Charge Only". (!IMPORTANT)
21) Now download the gfree.zip file attached and extract it somewhere.
22) If you are on windows vista and up, hold down shift button and right click on the extracted gfree folder. Choose open command window here. (if not on win 7 or vista, open cmd and navigate to the folder).
23) Type the following in the command window as it is, do not change anything if you dont know what you are doing.
adb push gfree /data/local
adb shell
Click to expand...
Click to collapse
24) Now you should see a $ sign in the front. Type the following, press enter and press allow on your phone's screen when asked.
su
Click to expand...
Click to collapse
25) You should see a # sign now instead of $. Now use the follwing commands:
cd /data/local
chmod 777 gfree
./gfree -f
dd if=/sdcard/part7.bin of=/dev/block/mmcblk0p7
reboot
Click to expand...
Click to collapse
26) Your phone will reboot now. And if everything worked perfect, you will see your original imei. To check this open dialer and type *#06# . If you get original imei, then you're done, you will have stock rom with original imei and everything. Enjoy
This was definitely not a easy task, but after working on it for whole night and risking my phone (i could have bricked it), i finally got mine working. Now you can root and do everything else. But just dont forget to save the original part7backup file in safe place if you use gfree again Peace
I TAKE NO RESPONSIBILITY WHAT SO EVER IF ANYTHING GOES WRONG WITH YOUR PHONE! USE AT YOUR OWN RISK.
MODS: I could make an easy part7bin generator for windows, but i am not sure if that would be illegal or if i would be allowed to publish that on xda. Please guide me on this. I am sure an generator would make a lots of things easier.
ksubedi said:
You just rooted your Mytouch 4g using gfree. But for some reason you want to get back to stock again and unroot the device and lock the bootloader (s-on). If you used gfree, the only method would be to restore ur partition 7 backup file. But what if you dont have that file or if you lost it?
Lets start off by talking about partition 7 first. Partition 7 is the seventh partition on your emmc chip where all the device specific data like imei number are stored. It also contaiins a flag which control's the s-on/off status of the bootloader. Gfree patches the flag and makes your bootloader show "s-off" which is basically unlocking the bootloader. gfree automatically backup's your partition7 image file to your sd card which is named part7backup-xxxxxxx.bin . This file is the image or copy of your original parititon 7 where everything is stored. Gfree makes this backup so that you can restore it to stock if you need it later.
Ok so you lost it, what now? you could just get someone else's part7bin file from xda or somewhere else and replace ur's. But whats the problem with that? your imei number will be replaced with their and there will be 2 phones with the same imei on the same network. And according to what i have learnt, this is illegal. So how do u fix this? Well, there is a way, but what i am going to explain below will help you restore the imei of your phone to your own by using someone else's part7backup file.
PLEASE NOTE THAT CHANGING IMEI NUMBER TO SOMEONE ELSE'S IMEI IS ILLEGAL AND IS CONSIDERED A CRIME. PLEASE USE YOUR OWN IMEI NUMBER AND DO NOT POST YOUR PARTITION7BACKUP FILE IN PUBLIC! I TAKE NO RESPONSIBILY IF YOU BRICK OR DAMAGE YOUR PHONE BY USING THE STEPS BELOW. IT WORKED FOR ME SO IT SHOULD WORK FOR YOU AS WELL.
You will need to do some hex editing in order to do this, and every step is REQUIRED, if you dont follow every step carefully, you might BRICK your phone and no one but yourself will be responsible for that.
Instructions:
Warning : THIS MIGHT ERASE ALL YOUR DATA
1) Make up your mind to do some hardcore hacking with your phone (jk its not hardcore)
2) Get a hex editor, i would recomment 30 day trial of 010 editor. Get it here : http://www.sweetscape.com/download/download_010editor.html
3) Install it. Now dowload the attached part7.zip file and extract part7.bin file (DO NOT REPLACE THIS PART7 BIN FILE DIRECTLY YOU MIGHT BRICK YOUR PHONEE!! This file has the imei number removed)
4) Now right click the extracted part7.bin file and open with 010 editor (Or open the file with any other hex editor).
5) 010 Editor will pop up, scroll down till you get to address 0600h
5) As you can see on the image above, the 14 ++++++++++++++ bytes are where your imei number will go. I replaceed the original imei on the part7bin file with ++++++++++++++ for security reasons.
6) Get the original IMEI number of your phone from the back of your battery or from your phone's box if you have one.
7) Type it in notepad or somewhere and copy the first 14 numbers out of 15. The last number is automatically generated and is called imei check number. It is generated automatically using luhn algorithm.
DO NOT USE ANY OTHER IMEI NUMBER THAN YOUR OWN, ITS ILLEGAL! AND DO NOT PUT RANDOM NUMBERS IT MIGHT BRICK YOUR DEVICE!!
8) Go to 010 editor, select the 14 + signs, and right click them, and paste the copied imei.
9) The first 14 digits of your IMEI should be in yellow letters now.
10) Press CTRL+S to save the file.
11) Connect your phone, and put the edited part7.bin file on your sdcard.
12) If you are running stock ROM which is already rooted, skip to step 17
13) Download this file : http://www.megaupload.com/?d=V4NAODYZ
(You are about to restore your phone to stock rom, because we will need to push the part7bin file to your phone, and to do so emmc power cycling is necessary. Most other kernel's dont support modules needed to power cycle emmc. So you will need to use PD15IMG.zip method to get back to stock if you arent on it already.)
14) Put it on your sdcard.
15) Power down your phone and hold your volume down + power button till you get into a white screen with some stuff on it.
WARNING : DOING THE NEXT STEP WILL ERASE ALL YOUR DATA!
16) Press power to get into boorloader mode. Wait till it scans the PD15IMG.zip file. Then press volume up when asked. Wait till it completes and restarts into your stock rom.
17) Download Visionary from here : http://android.modaco.com/topic/320350-19nov-r14-visionary-one-click-root/ and install it on your phone.
18) Turn on usb debugging and temp-root the phone using visionary if not rooted already.
19) Install adb drivers and install android sdk : follow instructions here if you havent already : http://forum.xda-developers.com/showthread.php?t=928370
20) Connect your phone to pc, and change usb mode to "Charge Only". (!IMPORTANT)
21) Now download the gfree.zip file attached and extract it somewhere.
22) If you are on windows vista and up, hold down shift button and right click on the extracted gfree folder. Choose open command window here. (if not on win 7 or vista, open cmd and navigate to the folder).
23) Type the following in the command window as it is, do not change anything if you dont know what you are doing.
24) Now you should see a $ sign in the front. Type the following, press enter and press allow on your phone's screen when asked.
25) You should see a # sign now instead of $. Now use the follwing commands:
26) Your phone will reboot now. And if everything worked perfect, you will see your original imei. To check this open dialer and type *#06# . If you get original imei, then you're done, you will have stock rom with original imei and everything. Enjoy
This was definitely not a easy task, but after working on it for whole night and risking my phone (i could have bricked it), i finally got mine working. Now you can root and do everything else. But just dont forget to save the original part7backup file in safe place if you use gfree again Peace
I TAKE NO RESPONSIBILITY WHAT SO EVER IF ANYTHING GOES WRONG WITH YOUR PHONE! USE AT YOUR OWN RISK.
MODS: I could make an easy part7bin generator for windows, but i am not sure if that would be illegal or if i would be allowed to publish that on xda. Please guide me on this. I am sure an generator would make a lots of things easier.
Click to expand...
Click to collapse
I thought there was hope for me until I saw how long this was...maybe a vid for those uncertain?
Sent from my HTC Glacier using XDA Premium App
Nice work. thanks for this.
This is awesome! Great work! I hope I never have to try this out!
Sent from my HTC Glacier using XDA Premium App
Cant you just flash the PD15IMG, then once you have stock (but still have s-off) get visionary and temp root, then:
ON YOUR PC or Terminal Emulator
(YOU NEED gfree)
Unzip gfree_06.zip to a place on your computer/sdcard. Open a terminal or command window, navigate to where the files are on your computer/phone, and type:
$ adb push gfree /data/local/tmp/gfree
$ adb shell chmod 777 /data/local/tmp/gfree
gfree should now be in your phone at /data/local/tmp
IN THE ROOT SHELL (in the first terminal/command) : Now run:
# /data/local/tmp/gfree -s on -c T-MOB010
# sync
Remove the PD15IMG.zip and the tools from the phome:
# rm /sdcard/PD15IMG.zip
# rm /data/local/tmp/gfree
Disconnect your phone from USB and power it down.
Boot into hboot by holding <Vol-Down> while powering on.
Similar method worked on my G2 when i needed it back to stock/ lost my part7.bin
I2IEAILiiTY said:
I thought there was hope for me until I saw how long this was...maybe a vid for those uncertain?
Sent from my HTC Glacier using XDA Premium App
Click to expand...
Click to collapse
Well its might look difficult but if you follow through the tutorial, it is really easy. And i have no plans for video right now but if i get a lot of requests, ill make one
encrypti0n said:
Cant you just flash the PD15IMG, then once you have stock (but still have s-off) get visionary and temp root, then:
ON YOUR PC or Terminal Emulator
(YOU NEED gfree)
Unzip gfree_06.zip to a place on your computer/sdcard. Open a terminal or command window, navigate to where the files are on your computer/phone, and type:
$ adb push gfree /data/local/tmp/gfree
$ adb shell chmod 777 /data/local/tmp/gfree
gfree should now be in your phone at /data/local/tmp
IN THE ROOT SHELL (in the first terminal/command) : Now run:
# /data/local/tmp/gfree -s on -c T-MOB010
# sync
Remove the PD15IMG.zip and the tools from the phome:
# rm /sdcard/PD15IMG.zip
# rm /data/local/tmp/gfree
Disconnect your phone from USB and power it down.
Boot into hboot by holding <Vol-Down> while powering on.
Similar method worked on my G2 when i needed it back to stock/ lost my part7.bin
Click to expand...
Click to collapse
Well yes, this method will work if you havent replaced your part7bin with another one found on xda already. But if you have replaced it, like i did, you will have to hex edit the part7bin to restore your imei number. But thanks for pointing it out
Thanks for this, ksubedi. I wonder how many people were using the same IMEI from the file posted in the unroot thread I used long ago. Other than the IMEI, are the part7.bin files identical?
I lost my part7backup file from a bad SDcard awhile ago and I would like to at least have the file ready incase i need to return or exchange the phone. Can i follow steps 2-10 to get the file and just not do any additional steps?
OMG Thanks dude so much --
I thought I wouldn't ever get my phone back to S-On haha Now I can get the real update for my phone (2.3.4)
Thanks again
Hi,
Does it matter if the other Part7backup is from a phone with a different RUU/Radio?

[GUIDE] Unbrick, Root, And Install CWM

How to Unbrick, Root, And Install CWM​
Disclaimer: This guide is for your information only. I am not responsible for any further damage cause to your device by not following the guide correctly. Parts of this guide are based on the Unbricking guide produced by XDA member, Machzelet. Namely the Unbrick process.
This guide will give you step by step instructions on how to initially unbrick, root, and install ClockWorkMod Recovery on your LG Nitro HD. You will also learn how to make yourself a CWM backup that you can use to unbrick your Nitro whenever you need to... even when you are away from your PC.
NOTE: More people have had success using this guide on Windows XP than Windows 7.
It is understood by the author that CWM and CWM backups are nothing new to the XDA community. This guide is less about groundbreaking discoveries and more about clarification and introduction of an on-the-fly unbricking concept. As with all posts on the community forum, this guide is not set in stone and can/will be changed upon suggestion from other XDA Forum members.
Required Downloads
Nitro_Unbrick.zip (760.24MB) (Unzip to the location of your choice. 7zip is recommended.)
Notes Before You Start
Make sure to allow the phone to boot into the stock ROM at least once before flashing any other ROMs.
Unbrick the Phone
Copy ‘Android’ folder to C:\
In the ‘Run…’ dialog, type “sysdm.cpl” and press enter.
Click the ‘Advanced’ tab.
Click the ‘Environment Variables…’ button.
In the ‘System Variables’ section, highlight the entry labeled ‘Path’.
Click the ‘Edit…’ button at the bottom of the window.
Add “;C:\Android” to the end of the Variable Value.
Click ‘OK’.
Click ‘OK’.
Click ‘OK’.
Log out of Windows and log back in.
Once logged in, run the exe in the ‘LGP930’ folder to ensure that the Nitro drivers are installed. (This should install all of the necessary drivers. However, if it does not, install the drivers in the sub-folder as well.)
Once drivers are installed, run the exe file in the ‘shttp3’ folder.
Check the box to agree to the license.
Click ‘Install’.
When finished, run “C:\shttps\http.exe”.
Right click the ‘Small Server’ icon in the System Tray and select ‘Settings…’.
Click ‘HTTP’ at the top.
Change the second box from ‘8080’ to ‘9002’ and click ‘OK’ in the top right.
Extract the file named ‘www.zip’ located in the ‘shttp3’ folder to “C:\shttps\www”.
Edit the ‘hosts’ file in “C:/Windows/System32/drivers/etc” and add the following line: “127.0.0.1 csmg.lgmobile.com”
Save the file.
In the ‘Run…’ dialog, type “ipconfig /flushdns”.
Run the file named “B2CAppSetup.exe” located in the ‘KDZ_FW_UPD_EN’ folder and then close it.
Run the file named “UpTestEX_mod2_marwin.exe” located in the ‘KDZ_FW_UPD_EN’ folder. (If you get errors, you may need to install msxml.msi.)
In the ‘Merge’ section, click the folder next to the ‘Select model.dll’ field.
Navigate to the “model.dll” file in the ‘KDZ_FW_UPD_EN’ folder and click ‘OK’.
In the ‘Test’ section, change ‘PhoneMode’ to “EMERGENCY”.
Click the folder next to the ‘Select kdz file’ field.
Navigate to the “V10F_00.kdz” file in the root folder and click ‘OK’.
Click ‘CSE web upgrade test’ at the bottom right of the window.
With the phone off, hold the Volume Up button and plug it into the PC via USB.
Once the screen says “Download Mode”, move on to the next step.
Click ‘Upgrade Start’.
Change the language to English and click ‘OK’.
If the upgrade stops at 4%, start over from step 23 and try again.
While the upgrade is in progress, copy the contents of the ‘Images’ folder to an SD card.
When the phone reboots, use Task Manager to close the upgrade application.
When the phone is up and running, tap the left button and choose English.
Tap ‘Exit’.
Enable Root Rights
Enable USB Debugging and Unknown Sources.
Insert your SD card and let it mount and scan.
Run the exe in the 'SuperOneClick' folder. (If you can't obtain root rights using this application, try Bin4ry's guides.)
Follow the instruction given in the application.
Flash AT&T Stock ROM (2.3.5)
Once the phone reboots, type “cmd” in the ‘Run…’ dialog and press enter.
Type “adb shell” and press enter.
Type “su” and press enter.
Run the following commands one by one in order:
Code:
dd if=/sdcard/[COLOR="Magenta"]boot.img[/COLOR] of=/dev/block/[COLOR="Magenta"]mmcblk0p8[/COLOR]
dd if=/sdcard/[COLOR="Orange"]recovery.img[/COLOR] of=/dev/block/[COLOR="Orange"]mmcblk0p13[/COLOR]
dd if=/sdcard/[COLOR="Lime"]firmware.img[/COLOR] of=/dev/block/[COLOR="Lime"]mmcblk0p1[/COLOR]
dd if=/sdcard/[COLOR="Cyan"]baseband.img[/COLOR] of=/dev/block/[COLOR="Cyan"]mmcblk0p14[/COLOR]
dd if=/sdcard/[COLOR="DeepSkyBlue"]system.img[/COLOR] of=/dev/block/[COLOR="DeepSkyBlue"]mmcblk0p27[/COLOR]
After the last command finishes (It will take a while.), pull the battery out of your phone and unplug the USB.
Replace the battery.
Hold the Power and Volume Down buttons at the same time until the screen says “Factory Reset”.
Press the Power button twice and wait for the phone to reboot into the stock AT&T ROM.
Install ClockWorkMod Recovery
If you haven’t already, follow the steps to root once more.
Install ROM Manager from the Play Store.
Open ROM Manager and tap ‘Flash ClockWorkMod Recovery’.
Tap the first option that says “LG P930”.
Let ROM Manager do its thing.
Create A Recovery
Turn off the phone.
Hold the Power and Volume Down buttons at the same time until the screen says “Factory Reset”.
Press the Power button twice and wait for the phone to reboot into ClockWorkMod.
Tap ‘Backup and Restore’.
Tap ‘Backup’.
When the blue menu appears again, tap ‘Reboot System Now’.
Restore Your Backup
Pull the battery out.
Replace the battery.
Hold the Power and Volume Down buttons at the same time until the screen says “Factory Reset”.
Press the Power button twice and wait for the phone to reboot into ClockWorkMod.
Tap ‘Wipe data/factory reset’.
Tap ‘Wipe cache partition’. (For good measure.)
Tap ‘Backup and Restore’.
Tap ‘Restore’.
Choose your backup.
When the blue menu appears again, tap ‘Reboot System Now’.
So is this a way to get back to stock from ics leak? Or would I still need to unbrick into the korean version?
Sent from my LG-P930 using xda app-developers app
miguellopez12 said:
So is this a way to get back to stock from ics leak? Or would I still need to unbrick into the korean version?
Sent from my LG-P930 using xda app-developers app
Click to expand...
Click to collapse
No, this will take you into the Korean version. It is essentially the same as Machzelet's guide. I just clarified a few of the steps, added a different rooting method, and explained ClockWorkMod Recovery installation and backup/restore.
nice, hopefully clears up the nuttiness that thread fell into. d'ling the zip now, well, i think i am, on another box.
FYI, I added a note to the guide about HO!NO!s CWM flashable ROM.
great guide, nice write up.
just to be sure, under restoring your backup after bricking #5. says to factory reset, then restore you CWM backup. Will your clockwork backups be deleted when you wipe data/factory reset, I think they usually are on my galaxy tab 7.0 plus.
thanks.
Hello I'm in need of some help I can't back up my current Rom because clockwork mod doesn't work on my phone is there another way
Sent from my GT-S5830i using xda app-developers app
themadbomber said:
Hello I'm in need of some help I can't back up my current Rom because clockwork mod doesn't work on my phone is there another way
Sent from my GT-S5830i using xda app-developers app
Click to expand...
Click to collapse
Download this file and copy it to your SD card.
Try replacing "dd if=/sdcard/recovery.img of=/dev/block/mmcblk0p13" in step 3 of the AT&T ROM section with "dd if=/sdcard/recovery-clockwork-5.8.2.0-p930.img of=/dev/block/mmcblk0p13" and go through the steps again and ignore the ClockWorkMod Recovery install section.
mattman86 said:
How to Setup Your Easy Unbricking Backup​
Disclaimer: This guide is for your information only. I am not responsible for any further damage cause to your device by not following the guide correctly. Parts of this guide are based on the Unbricking guide produced by XDA member, Machzelet. Namely the Revival process.
This guide will give you step by step instructions on how to initially unbrick, root, and install ClockWorkMod Recovery on your LG Nitro HD. You will also learn how to make yourself a CWM backup that you can use to unbrick your Nitro whenever you need to... even when you are away from your PC.
It is understood by the author that CWM and CWM backups are nothing new to the XDA community. This guide is less about groundbreaking discoveries and more about clarification and introduction of an on-the-fly unbricking concept. As with all posts on the community forum, this guide is not set in stone and can/will be changed upon suggestion from other XDA Forum members.
Required Downloads
Nitro Easy Unbrick.zip (Unzip to the location of your choice.)
Reviving the Phone
Copy ‘Android’ folder to C:\
In the ‘Run…’ dialog, type “sysdm.cpl” and press enter.
Click the ‘Advanced’ tab.
Click the ‘Environment Variables…’ button.
In the ‘System Variables’ section, highlight the entry labeled ‘Path’.
Click the ‘Edit…’ button at the bottom of the window.
Add “;C:\Android” to the end of the Variable Value.
Click ‘OK’.
Click ‘OK’.
Click ‘OK’.
Log out of Windows and log back in.
Once logged in, run the exe in the ‘LGP930’ folder to ensure that the Nitro drivers are installed.
Once drivers are installed, run the exe file in the ‘shttp3’ folder.
Check the box to agree to the license.
Click ‘Install’.
When finished, run “C:\shttps\http.exe”.
Right click the ‘Small Server’ icon in the System Tray and select ‘Settings…’.
Click ‘HTTP’ at the top.
Change the second box from ‘8080’ to ‘9002’ and click ‘OK’ in the top right.
Extract the file named ‘www.zip’ located in the ‘shttp3’ folder to “C:\shttps\www”.
Edit the ‘hosts’ file in “C:/Windows/System32/drivers/etc” and add the following line: “127.0.0.1 csmg.lgmobile.com”
Save the file.
In the ‘Run…’ dialog, type “ipconfig /flushdns”.
Run the file named “B2CAppSetup.exe” located in the ‘KDZ_FW_UPD_EN’ folder and then close it.
Run the file named “UpTestEX_mod2_marwin.exe” located in the ‘KDZ_FW_UPD_EN’ folder.
In the ‘Merge’ section, click the folder next to the ‘Select model.dll’ field.
Navigate to the “model.dll” file in the ‘KDZ_FW_UPD_EN’ folder and click ‘OK’.
In the ‘Test’ section, change ‘PhoneMode’ to “EMERGENCY”.
Click the folder next to the ‘Select kdz file’ field.
Navigate to the “V10F_00.kdz” file in the ‘KDZ_FW_UPD_EN’ folder and click ‘OK’.
Click ‘CSE web upgrade test’ at the bottom right of the window.
With the phone off, hold the Volume Up button and plug it into the PC via USB.
Once the screen says “Download Mode”, move on to the next step.
Click ‘Upgrade Start’.
Change the language to English and click ‘OK’.
If the upgrade stops at 4%, start over from step 23 and try again.
While the upgrade is in progress, copy the contents of the ‘Images’ folder to an SD card.
When the phone reboots, use Task Manager to close the upgrade application.
When the phone is up and running, tap the left button and choose English.
Tap ‘Exit’.
Enabling Root Rights
Enable USB Debugging and Unknown Sources.
Insert your SD card and let it mount and scan.
Run the file named “ROOT.bat” located in the ‘ROOT’ folder.
Follow the instructions on in the CMD window.
Flashing AT&T Stock ROM
Once the phone reboots, type “cmd” in the ‘Run…’ dialog and press enter.
Type “adb shell” and press enter.
Type “su” and press enter.
Run the following commands one by one in order:
Code:
dd if=/sdcard/boot.img of=/dev/block/mmcblk0p8
dd if=/sdcard/recovery.img of=/dev/block/mmcblk0p13
dd if=/sdcard/firmware.img of=/dev/block/mmcblk0p1
dd if=/sdcard/baseband.img of=/dev/block/mmcblk0p14
dd if=/sdcard/system.img of=/dev/block/mmcblk0p27
After the last command finishes (It will take a while.), pull the battery out of your phone and unplug the USB.
Replace the battery.
Hold the Power and Volume Down buttons at the same time until the screen says “Factory Reset”.
Press the Power button twice and wait for the phone to reboot into the stock AT&T ROM.
Installing ClockWorkMod Recovery
If you haven’t already, follow the steps to root once more.
Install ROM Manager from the Play Store.
Open ROM Manager and tap ‘Flash ClockWorkMod Recovery’.
Tap the first option that says “LG P930”.
Let ROM Manager do its thing.
If you plan on flashing HO!NO!s ICS CWM ROM, now would be a good time to do that. After, you can customize it and move on with this guide.
Create First Recovery for Easy Unbricking
Turn off the phone.
Hold the Power and Volume Down buttons at the same time until the screen says “Factory Reset”.
Press the Power button twice and wait for the phone to reboot into ClockWorkMod.
Tap ‘Backup and Restore’.
Tap ‘Backup’.
When the blue menu appears again, tap ‘Reboot System Now’.
Restoring Your Backup after Bricking
Pull the battery out.
Replace the battery.
Hold the Power and Volume Down buttons at the same time until the screen says “Factory Reset”.
Press the Power button twice and wait for the phone to reboot into ClockWorkMod.
Tap ‘Wipe data/factory reset’.
Tap ‘Wipe cache partition’. (For good measure.)
Tap ‘Backup and Restore’.
Tap ‘Restore’.
Choose your backup.
When the blue menu appears again, tap ‘Reboot System Now’.
Notes
Make sure to allow the phone to boot into the stock ROM at least once before flashing any other ROMs.
Don't forget to wipe the cache and data partitions each time you unbrick.
Click to expand...
Click to collapse
Hi tried the steps above but after i click the ‘Upgrade Start’.button its reads my phone and says The Cell phone is the latest version already. So you don't need to update.
right ow i am on ICS Leak no root.
Please advise..
mith13 said:
Hi tried the steps above but after i click the ‘Upgrade Start’.button its reads my phone and says The Cell phone is the latest version already. So you don't need to update.
right ow i am on ICS Leak no root.
Please advise..
Click to expand...
Click to collapse
this is *usually* the culprit
Edit the ‘hosts’ file in “C:/Windows/System32/drivers/etc” and add the following line: “127.0.0.1 csmg.lgmobile.com”
Also ipconfig /flushdns
scott0 said:
this is *usually* the culprit
Edit the ‘hosts’ file in “C:/Windows/System32/drivers/etc” and add the following line: “127.0.0.1 csmg.lgmobile.com”
Click to expand...
Click to collapse
Thank you for responding scott0. I have been busy today and not able to read the latest posts.
Also, I had a lot of troubles with that part too. So I added step 23 to refresh the DNS.
scott0 said:
this is *usually* the culprit
Edit the ‘hosts’ file in “C:/Windows/System32/drivers/etc” and add the following line: “127.0.0.1 csmg.lgmobile.com”
Click to expand...
Click to collapse
Hi scott0,
This time i copy pasted the log above and got this error-server maintenance, is it usual should i try after sometime or so..
and this is the change made to host fine is it OK.
# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
127.0.0.1 csmg.lgmobile.com
mith13 said:
Hi scott0,
This time i copy pasted the log above and got this error-server maintenance, is it usual should i try after sometime or so..
and this is the change made to host fine is it OK.
# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
127.0.0.1 csmg.lgmobile.com
Click to expand...
Click to collapse
guyss need some help please..
That *should* work. but, I've never had luck with just having a single space. It has only worked for me when i use a tab.
Also, do you still have the B2CAppSetup.exe application running?
Can we UN-sticky the "Official" guide and make this one the official? That OP did some great work, but won't update the steps to help people avoid common problems (ie. rename the kdz file). If people started using this one instead, it would be more beneficial to the community.
I tried to download this. but it told me 12 hours to download. wtf?
houstonsveryown said:
I tried to download this. but it told me 12 hours to download. wtf?
Click to expand...
Click to collapse
It's probably a big file because it contains 2 complete ROMS, plus other files.
---------- Post added at 03:45 PM ---------- Previous post was at 03:43 PM ----------
houstonsveryown said:
I tried to download this. but it told me 12 hours to download. wtf?
Click to expand...
Click to collapse
I just clicked on it. It's 804MB and I have 20 minutes left. Check your connection
Im not sure whats going on. My connection is great.15up 6 down. Im not sure if it chrome or what.
Thx, will try this when i get home on my soft-bricked nitro!
Skickat från min GT-N7000 via Tapatalk 2

[FIX/TOOL] Backup/Restore/Fix IMEI & Data Restore Tool v3.5 - Updated 03/22/2013!!!

[FIX/TOOL] Backup/Restore/Fix IMEI & Data Restore Tool v3.5 - Updated 03/22/2013!!!
USE THIS AT YOUR OWN RISK AS QPST WILL FLASH JUST ABOUT ANYTHING YOU TELL IT TO. I AM NOT RESPONSIBLE IF YOUR PHONE BECOMES MORE BRICKED THAN IT ALREADY IS, EXPLODES, OR TRANSFORMS INTO A SITH LORD AND ATTACKS YOU WITH A LIGHT SABER!
Verizon Users please refer to this thread HERE for IMEI and Roaming fix.
Click for Screenshots in Post #4
FILES YOU WILL BE NEEDING
DOWNLOAD QPST V2.7.378 from HERE
(if you have build version 2.7.385 please let me know)
Fix for Data Issues (Stuck on EDGE/2g) see Post # 3
(Sasktel users custom App has not been updated for you guys cause I am still in need of additional data)
How to get to DIAG Mode
**AOSP ROMs to get to DIAG Mode see Post #2
Option1:Stock ROM (Stock Dialer) dial *#7284#.
Option 2: Stock ROM (No Stock Dialer) flash this file HERE!
Install QuickShortcutMaker.
Open it and type IOT in the search box.
Click on the entry that says IOTHiddenMenu / IOTHiddenMenu / com.android.hiddenmenu/com.android.hiddenmenu.IOTHiddenMenu
Click OK
STOCK ROMS: In the hidden menu or PhoneUtil menu select USBSettingsMenu choose the correct mode and click ok.​
To get started put phone into RMNET + DM + MODEM mode (DIAG Mode)
Connect your phone to your computer using your USB cable (Stock cable will work best no guarantees with any other cable).
You might need these if your phone won't connect USB Drivers.
Look in device manager under ports and serials you should see your phone there.
Now open QPST Configuration click on ports tab and then on Add new port button type in COM## where ## is the port number your phone is connected to.
To make a backup:
Open Software Download from the Start Clients menu.
Click on the Backup tab.
Make sure your phone is listed under port.
Select a location to save your backup (recommended).
Click Start and wait for it to finish.
You should now have a QCN file of your NV Data.
Save the file in a safe place.
To restore:
Open Software Download from the Start Clients menu.
Click on the Restore tab.
Make sure your phone is listed under port.
Select the location you saved your backup to.
Click Start and wait for it to finish.
The phone will attempt to restart if it fails don't panic just manually reboot your phone it may take longer than usual but you should be fine.
IMEI Injection:
Please see Post #3 for IMEI Injection + Data Restore All in one App and Instructions
or
Inject IMEI with QPST
Open RF NV Item Manager from the bin folder found in Program Files folder/Qualcomm/QPST
(RF NV Manager is no longer accessible from the start menu or from inside QPST Configuration).
Click on Setting menu in RF NV Item Manager and select Comport.
Select your phone from the list of ports and click ok.
Go to File menu and select Read From Phone.
You will get a list of NV items and their values from your phone.
Look for item NV_UE_IMEI_I it will be item number 550 you can do a search for it using the search.
If you are unable to find it you will need to add it in
Go to Option => Customize NV Item List.
Then look for the item on the left and move it to the right.
Click OK now you should be able to find it.
NEVER ADD AN ITEM THAT YOU DO NOT KNOW THE CORRECT VALUE FOR YOU CAN DAMAGE YOUR PHONE IF YOU DO SO!​
On the right you will see a set of 9 text boxes this is where your IMEI should be.
Click the Hex Check Box.
The Hex values for your IMEI will consist of no more than 2 characters per a box and must match your IMEI or it will not take the values you enter. The IMEI is also listed in a special order so you must follow this guide to ensure your IMEI is correct. The first box will always be an 8.
Example if your IMEI was: 954091051099226 then the boxes would look like this:
8
9a
45
90
01
15
90
29
62​
Click on the button Write NV to write the values to your phone.
Once they have been written reboot your phone and check to see if your IMEI has been restored.
If IMEI is correct and you are stuck on EDGE/2g go to Post #3.
Remember to go back into the Hidden Menu and set your USB Settings back to MTP + ADB once you are done!!!!
________________________________________________________________________________________________
Thread Rules:
Do not ask how to spoof IMEI or how to clone IMEI you will be ignored!
Do not answer someone who asks for information on IMEI spoofing or cloning!
Please do not ask questions unless you have used the Search option!!
Please do not use this thread as a place to settle out any ill feelings towards each other or any other developments!!!
Please do not ask questions that have already been answered!!
Please do help each other when at all possible!!
Don't hesitate to have fun while we all try to figure this problem out!
If I do not answer you right away it's not because I don't like you it's because I have a family, a job, a life outside of development that needs tending to!!
Also thanks to jroyalty, zmore, drothenberger, David Dee, PureMotive, Bigbyte.me, GerardAnthony, Amoamare, <>, XDA, and everyone who donated their phone data for research =)
DX
I don't ask for donations (I do this cause I enjoy it) but a nice latte every now and then late at night is quite refreshing while developing...lol
________________________________________________________________________________________________
AOSP Roms
Added scripts as downloadable files for those who may want them that way.
Place phone in and out of DIAG Mode by running these scripts.
Script to enter DIAG Mode (RMNET + DM + MODEM Mode)
Code:
echo 0 > /sys/class/android_usb/android0/enable 0
echo smd,bam > /sys/class/android_usb/android0/f_rmnet/transports
echo diag > /sys/class/android_usb/android0/f_diag/clients
echo 1 > /sys/class/android_usb/android0/f_acm/instances
echo rmnet,acm,diag > /sys/class/android_usb/android0/functions
echo 1 > /sys/class/android_usb/android0/enable
Script to return to MTP(eject first)
Code:
echo "" > /sys/devices/virtual/android_usb/android0/f_mass_storage/lun_ex/file
echo 0 > /sys/devices/virtual/android_usb/android0/enable
echo "mtp,acm,adb" > /sys/class/android_usb/android0/functions
echo 1 > /sys/devices/virtual/android_usb/android0/enable
vold
Custom App updated current support is for AT&T, T-Mobile, Bell, Telus, and Rogers. I am in need of anyone with a working Sasktel phone in order to get this working for Sasktel.
Updated to version 3.5. Added IMEI Injection Checkbox.
Download - SGS3 Data Restorer App
This custom app will create a QCN file that can be restored to your phone after you inject your IMEI back into your phone and find yourself with data connection issues. This is only used if you had lost your IMEI and did not have a backup created!!
Instructions:
Create a QCN backup of your phone using QPST (see OP for instructions).
On a Windows Vista or higher computer download the app and install it.
Once installed, close the app.
Go to start menu, you will find app under DanX and run it.
(If there are any new updates the app will find it.)
Select your Carrier
If you need your IMEI injected then click the checkbox next to "Inject IMEI"
Upload your QCN backup into the app.
If you clicked the checkbox a window will pop up at this time asking for your IMEI.
**Enter it exactly how you see it on the back of your phone.
Select a save location and create a save name.
Verify that your IMEI is correct.
Click "IMEI Verified" button.
Wait and the QCN should be generated.
Go to the location where you saved the QCN.
Go to QPST and restore file into your phone (see OP for instructions).
Manually reboot your phone.
If you have a slow connection still but you're no longer on 2g reboot again.
If you still a have slow connection after that consider flashing stock again through Odin and then generate another backup using this app.
You can also try flashing a different modem and then generate another backup using this app.
If it still is not working respond to this thread.
I do not guarantee any success and results may vary on how badly you have screwed your phone!
I am not responsible if you screw your phone worst than it already is as QPST is a deadly phone weapon use it at your on risk.
DX
I cannot guarantee release times as I do this on my spare time but I promise I will try to keep this updated as long as I can. Though the coffee may keep me up I do sleep every now and then if you used the app and you liked it please donate it pays for coffee.
Screenshots
Great emergency resource.
Now everyone can start flashing again like it's going outta style.
--------------------------------------------------------------------------------------------------
EDIT: Added some screenshots of the process to reassure whomever it helps:
1_SAM_GS3_EXPLOITER_By_GeeK_finished.png
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
1b_Hidden_menu_screenshot_montage.jpg
2_win7_drivers_after_changing_to_RMNET_DM_MODEM.png
3_QPST_InstallShield.png
4_Device_Manager_Phone_COM_Port.png
5_QPST_Add_New_Port.png
6_QPST_Port_Added.png
7_QPST_Software_Download_BackupNV.png
8_QPST_RF_NV_Manager_WRITE_IMEI_TO_NV.png
This last screenshot is for people who haven't already backed up their IMEI but want to try forcefully writing it back. The example 15-digit IMEI number I used (but didn't actually write) was: 123456789012345
Awesome.
If confirmed, please make an app that we can all donate too. This will be most beneficial to you and the community.
Thank you for the countless nights
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
I'm more interested in the IMEI injection. If someone has already lost their IMEI and can simply inject their original IMEI back into the phone then we're golden (not that you shouldn't have a backup just in case, but it's nice nevertheless).
Haha look whose got their own thread! great work man look forward to this being confirmed so we can all breathe a sigh of relief!
Sent from my SGH-I747 using Tapatalk 2
Thanks man! You are a life saver for many. Your work is much appreciated.
The only thing I'm confused is secured and unsecured kernel.
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
As soon as this is confirmed working I think it will be time to fulfill our promise of donating to the one who solved this issue
We need links to insecure kernels for Canadian carries unfortunately
rgoyena said:
The only thing I'm confused is secured and unsecured kernel.
Click to expand...
Click to collapse
An "insecure" kernel is one in which adb automatically gets root access. This is required for GeeK's mod to work. If you are on UCALEM, you can flash the one from here. (There are others, too.)
If you're running the LG1 stock kernel, you can install the "adb insecure" app. Run it and click the box to make your kernel insecure, then use GeeK's mod. This is what I did and it worked perfectly.
EDIT: "adb insecure" should work for any kernel, including the Canadian ones.
rgoyena said:
The only thing I'm confused is secured and unsecured kernel.
Click to expand...
Click to collapse
Just to add to what drothenberger said: in secure mode, when you adb shell into your phone, you have to use 'su' post-login to become root:
Code:
$ adb shell
[email protected]:/ $ su
[email protected]:/ #
This is a pain, because you can't directly do stuff like "adb push foobar.apk /system/app/" without being root first, which is what the insecure mode fixes. Newer versions of CyanogenMod also now have a root settings menu that gives you even finer grained control of this.
It does work for Can carriers, I confirmed that in the other thread. Take a look at my mini guide there: http://forum.xda-developers.com/showthread.php?p=29462669
Sent from my SGH-I747M using XDA Premium HD app
I'm running faux kernel for att.
About adb. Now this is a problem for me. Never used it and always tried to avoid using it. Lol
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
rgoyena said:
I'm running faux kernel for att.
About adb. Now this is a problem for me. Never used it and always tried to avoid using it. Lol
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
Click to expand...
Click to collapse
kernel doesn't matter as long as it is stock. The app will make it insecure. Adb is something essential if you are flashing.
Sent from my SGH-I747M using XDA Premium HD app
Hey this is awesome! I hope it is confirmed working! I have one quick question. When you say that you have to be on a stock rom, do you mean "stock" stock as in, the stock rom the phone came out of the box in, or does it still work on a stock based rom (like a debloated/deodex rom, with mods etc?)
drothenberger said:
An "insecure" kernel is one in which adb automatically gets root access. This is required for GeeK's mod to work. If you are on UCALEM, you can flash the one from here. (There are others, too.)
If you're running the LG1 stock kernel, you can install the "adb insecure" app. Run it and click the box to make your kernel insecure, then use GeeK's mod. This is what I did and it worked perfectly.
EDIT: "adb insecure" should work for any kernel, including the Canadian ones.
Click to expand...
Click to collapse
I'm on LG1 and I used adb insecure, purchased from the Market (gotta support Chainfire, the man rocks!). It all worked flawlessly for backing up my IMEI.
ViralCipher said:
Hey this is awesome! I hope it is confirmed working! I have one quick question. When you say that you have to be on a stock rom, do you mean "stock" stock as in, the stock rom the phone came out of the box in, or does it still work on a stock based rom (like a debloated/deodex rom, with mods etc?)
Click to expand...
Click to collapse
stock based, not aosp. I am on k747 Sammy kernel and it worked
Sent from my SGH-I747M using XDA Premium HD app
SOOOO happy now I can start flashing away when i get my s3 on monday!

[GUIDE] Full FileSystem Access over SFTP / CMD over SSH on Windows 10 Mobile

Hi all,
This guide uses the built-in SSH server on the phone that gets activated once you enable Device Discovery to give us TRUE full file system access. MTP doesn't truly give full file system access as there are files and folders that aren't accessible still.
NOTE: The automation of the steps listed in this whole guide has been incorporated into an easy GUI within @gus33000 's app called Interop Tools. Big thanks to him for taking the time to simplify this whole process.
Many thanks to @gus33000 [For the simplification and guinea pig process ] and @black_blob [ For making me try the UMCIAuditMode trick again]!
Manual Steps for SFTP
Tools needed
@djamol's Root Tool , or even the OEMSetting.reg tweak that @WojtasXda came up with
Some SFTP program (Swish Easy SFTP works the BEST, WinSCP works second best, but for some reason it can't read the root C: drive from SFTP).
Steps:
If you're using @djamol's Root Tool, use @vcfan's Lumia Registry Editor for this
The following keys should be set to the following string values under the Path of System\Currentcontrolset\control\ssh\sirepuser
Represented in this guide as key: value
stfp-home-dir : C:\
default-home-dir : C:\
sftp-mkdir-rex : .*
sftp-open-dir-rex : .*
sftp-read-file-rex : .*
sftp-remove-file-rex : .*
sftp-rmdir-rex : .*
sftp-stat-rex : .*
sftp-write-file-rex : .*
auth-method : password
user-pin : 1234
After you've verified that at least one of these keys have been set, exit the app
[*] Go to the phone settings app and put your Windows 10 Mobile phone in Developer Mode, activate Device Discovery then turn on Pair mode
[*] Pair to your phone using WConnect, either from usb connect mode ("wconnect usb") or IP (wconnect youripaddress) using the pin on your device
[*] When this is complete, go to %USERPROFILE%\appdata\local\Microsoft\WConnectSrv. In this directory, you should see a privkey.pem file. Hold on to this
[*] Open up PuttyGen, click on the Conversions menu and then click Import key. Point to the path that contains the privkey.pem file, then press Okay
[*] Back in PuttyGen, click on the Save private key button and then save the .ppk file off somewhere that you'll remember.
[*] Open Pagent, click Add key and point to the .ppk file you generated before. You'll want to make sure this is ALWAYS running.
If using Swish
Go to Windows Explorer, dbl-click on the Swish icon under Devices and Drives. Click on Add SFTP Connection at the top
Enter in a label that you wish to save the connection present as .
Under host your phone's IP as Host.
Enter in Sirepuser as the User.
Enter / as the Path.
Press Create
Go back to the Swish folder then click on the connection that you just created (YOU MUST HAVE PAGENT RUNNING FOR THIS TO WORK).
When prompted, enter "1234" as the password.
If using WinSCP:
Open WinSCP. Underneath of the Password box, click on Advanced.
Click on the SFTP menu item and set the Preferred SFTP protocol version to 2
Click on the SSH -> Authentication menu item. Click Allow agent forwarding, click on the ellipsis next to Private key file and choose the .ppk file you saved from PuttyGen
Press Ok to save the settings
Back on the WinSCP main screen, enter in your phone's Wi-Fi IP into host name and for the User name, type in Sirepuser. Press save and then save this session as a "Site" in WinSCP
Login. When prompted, enter "1234" as the password.
You'll receive an error initially about not being able to browse /C/ and blah blah. You can right-click and click on Goto Folder. /C/Data will be a nice folder to start at since that's where most of the goodies are.
Voila, you should know be able to have full file system access.
Now there are a FEW caveats to this..
If you're looking to modify/download any of the important files in the AOW folder, you won't be able to. For SOME REASON, it's returning "No such file or directory" if you try to download/modify some certain files. It will also return this if you try to do the same for the registry hives.
If you happen to remove all paired pins on your phone, you must add pin from the phone and use the pin as the password to your SFTP session
I'm tired of my SFTP access cutting out because the WiFi disappears when the screen goes to lock >_<. What do I do?!?!!?
Using the same Lumia Registry Editor from Djamol's Root Tool, Head to the \system\currentcontrolset\services\keepwifionsvc Path and set the following DWORD value
Start => 2
For some reason the service that keeps wifi running even while the screen is under lock is disabled on 10512. This enables it. Reboot and you'll have WiFi working under lock screen on 10512.
Manual Steps for running CMD over SSH (assuming you've done the SFTP steps above) Redstone builds required. 10586.XXX builds will NOT work
Tools Needed:
IoT Insider Preview ISO
Interop Tools - Download the latest arm package and all packages from the Dependencies directory. Install the dependencies first, THEN install the app.
Pageant
Putty
Steps:
First, you'll need to download the Windows IoT Core Insider Preview ISO. Mount it and then install the MSI. Next, you'll need to go into Disk Management (diskmgmt.msc) and create a new 4GB VHD by clicking Action-> Create VHD. Set the location to any place you wish for it to be, set the size to 4GB and keep the rest the same. Pay attention to the disk number shown in the Disk Management screen after you create and mount that VHD (They have a blue drive icon to the left of them).
When this is complete, open up an elevated command prompt. Go to C:\Program Files (x86\Microsoft IoT\FFU.
Run the following command:
Code:
dism.exe /Apply-Image /ImageFile:flash.ffu /ApplyDrive:\\.\PhysicalDriveN /SkipPlatformCheck
Where N is the disk number. At this point, you should start seeing a bunch of volumes created. The MainOS volume is the one we'll care about.
Go to that drive and copy the Windows\System32\cmd.exe and Windows\system32\en-us\cmd.exe.mui to your phone's Document's folder.
Next step is to open up the Interop Tools app, and tap on the Interop Unlock menu item from the hamburger menu. Select the option to restore NDTKSvc, reboot.
When the device comes back up, re-open Interop Tools and this time click on the Registry Editor from the hamburger menu.
Enter the following values, then press Write Data:
Registry Hive : HKEY_LOCAL_MACHINE
Registry Type: String
Registry Key Path: SYSTEM\Controlset001\Control\SSH\Sirepuser
Registry Value Name: default-shell
Registry Value Data: C:\Data\Users\Public\Documents\cmd.exe
Write this key tap on the hamburger menu and go to the Registry Browser. Travel to HKEY_LOCAL_MACHINE -> SYSTEM -> ControlSet001 -> Control -> Ci.
Tap the + button on the application bar and make sure the values are set to the following and then press Write:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Type: Integer
Registry Key Path: SYSTEM\ControlSet001\Control\CI
Registry Value Name: UMCIAuditMode
Registry Value Data: 1
This actually enables the execution of unsigned executables. This is how we end up making CMD and the other programs work ^_^.
Reboot your phone. Wait a good 3-5 minutes before you try doing anything because your phone will be acting very unstable (Some apps crashing, and others working).
While you have pageant open and the private key added, open up a putty SSH session to your phone using the username of Sirepuser. You should be delighted at this point (If you did everything correctly) to see a Command Prompt. You should be getting random resource string errors when you try typing DIR, etc and this is due to the fact that we don't have the mui string in the correct place. Let's fix that.
ONE BIG THING TO NOTE: running CMD in SSH is very sensitive to keystrokes. If you are typing a command and press backspace even once, then the command won't send at all. It will state that it doesn't recognize what you're doing, so be sure to type these things in FLAWLESSLY (yeah it's annoying)
What we want to do now is then copy the cmd.exe to C:\Windows\System32 and the cmd.exe.mui to C:\Windows\System32\en-US. Run the following commands:
copy c:\Data\Users\Public\cmd.exe c:\Windows\System32
copy c:\Data\Users\Public\cmd.exe.mui c:\Windows\System32\en-US
Back on your phone, go back to Interop Tools and click on the Registry Editor. Follow the same exact steps as you did for changing the default-shell key, but make one change:
Registry Value Data: C:\Windows\system32\cmd.exe
At this point, restart your putty session and then you'll be good to go with CMD running over SSH as SYSTEM!
Extra:
There was a reason I said to copy off the system32 folder somewhere... If you follow the same process to get the files to your Documents folder and move them over to system32, you can have quite a bit of exes to run from the command line. The easiest thing to do is to use xcopy to get everything there.
Extra #2:
You can run .NET Console apps in CMD if they are named the following 3 names: TailoredDeploy.exe, WConnectAgent.exe or WConnectAgentLauncher.exe.
Make a directory on your SD Card named "test" or put it in the test directory on your phone's C: drive and it should go. Beware that the runtime is weird on the phone and not ALL things are possible to do with a .NET Console app
PLEASE... For the love of god DO NOT add DefApps to the Administrators group if you don't want all of your apps to stop working
Have fun ^_^
Also...
USE THIS AT YOUR OWN RISK! I AM NOT RESPONSIBLE IF YOU BLOW UP YOUR PHONE ON PURPOSE OR BY ACCIDENT
Hi, snickler! Can I have your permission to repost your tut? It's great and I wanna share with everyone since everyone's really hoping for a full fs access. Of course, i will link your post and add you and the others to the disclaimer.
OH My god . very good so fast . forget MTP Full FS for ever
ngame said:
OH My god . very good so fast . forget MTP Full FS for ever
Click to expand...
Click to collapse
"Theoretical Full FS"
I've tried, but failed
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
@zetvn, did you follow ALL steps? Make sure Device Discovery is on and that your phone's WiFi is on. That message basically means you have a timeout. Also check your IP address and see if it is the correct WiFi address
ADeltaX said:
"Theoretical Full FS"
Click to expand...
Click to collapse
It's full access until you want to modify any of the IMPORTANT files in the AOW directory lol. I'll see how I can get around that and post more, but yes this IS indeed full access.
snickler said:
It's full access until you want to modify any of the IMPORTANT files in the AOW directory lol. I'll see how I can get around that and post more, but yes this IS indeed full access.
Click to expand...
Click to collapse
I was replying about MTP, not about SSH access. lol
. Have you gotten any closer to rooting AOW @ADeltaX?
Is there any way to copy files to C:\Windows\Fonts in the phone without the PC?
snickler said:
. Have you gotten any closer to rooting AOW @ADeltaX?
Click to expand...
Click to collapse
70% yes.
Adb shell is now as root user.
SU binary works fine.
Busybox too.
Superuser app seems to work too.
BUT
Apps can't reference from superuser app because of limit of project astoria caused by some modified libs. (stderr stdout = null)
SU binary refernce from libc.so and it's also modified....
ADeltaX said:
70% yes.
Adb shell is now as root user.
SU binary works fine.
Busybox too.
Superuser app seems to work too.
BUT
Apps can't reference from superuser app because of limit of project astoria caused by some modified libs. (stderr stdout = null)
SU binary refernce from libc.so and it's also modified....
Click to expand...
Click to collapse
Brilliant! Is it on your thread yet? If so, point me to it
snickler said:
Brilliant! Is it on your thread yet? If so, point me to it
Click to expand...
Click to collapse
Not yet, I need to upload these files and create a new thread.
I have a very slow connection, so probably will be ready within 2-4 hours :\
I'll mention you if i'll open the thread/the file is ready.
ADeltaX said:
Not yet, I need to upload these files and create a new thread.
I have a very slow connection, so probably will be ready within 2-4 hours :\
I'll mention you if i'll open the thread/the file is ready.
Click to expand...
Click to collapse
Awesome! Yeah, definitely make a new thread for this. BTW, I updated my OP to include a reg key change to enable WiFi under lock screen. It may not be useful for everyone connecting via USB, but for those on IP it will be VERY helpful
guys please answer: Is there a way to copy files to fonts folder from the phone without using PC?
MrMHK said:
guys please answer: Is there a way to copy files to fonts folder from the phone without using PC?
Click to expand...
Click to collapse
Look at Djamol's Root Tool. There's utilities in there that you should be able to move files with.
Time to play... Thanks for this!
Invite me too
ADeltaX said:
Not yet, I need to upload these files and create a new thread.
I have a very slow connection, so probably will be ready within 2-4 hours :\
I'll mention you if i'll open the thread/the file is ready.
Click to expand...
Click to collapse
Invite me too plz, I want to learn much & much again...
Lost...
Hey there i am following the instructions as written, went to install the vcREG bootstrap and the instructions they give is to apply it to the reinstalled Extras+Info app on the SD card. well when i try to download it it says the app is no longer available? is there a work around?
AteBitDesigns said:
Hey there i am following the instructions as written, went to install the vcREG bootstrap and the instructions they give is to apply it to the reinstalled Extras+Info app on the SD card. well when i try to download it it says the app is no longer available? is there a work around?
Click to expand...
Click to collapse
You didn't follow instructions. It states to use Djamol's root tool and use the Lumia Registry Editor within it that is vcReg's.

How To Guide [GUIDE] Change Splash screen for this phone!

NOTE: I am not responsible for any bricked devices. DO THIS AT YOUR OWN RISK!
Click to expand...
Click to collapse
I recently changed my splash screen logo from samsung to a custom one i made in pixlr. Its looks coool. A video is attached below.
REQUIREMENTS:
- ROOTED A32 4G
- usb c cable (to connect to pc)
- windows PC (for zipping and etc.)
- ADB installed on your pc. (For running shell commands) [OR YOU COULD USE SOME TERMINAL EMULATOR]
If your doing this on your phone just follow along, i included seperate commands.
STEPS:
1. Download attached up_param.bin (i extracted this from android 11 firmware. it shld work with fine with 12 they are same. Since downloading whole firmware takes alot of time)
2. Install 7zip if you already didn't from here.
3. Make a working directory anywhere
4. Use 7 zip to extract up_param.bin to a folder.
After extracting this is what you should see
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
These are all the images!
5. modify files as you like. (MAKE SURE THE DIMENSIONS ARE THE SAME. AND DO NOT REMOVE ANY IMAGE IT COULD BRICK)
NOTE: DO NOT TOUCH DOWNLOAD MODE IMAGES. if you f**k them up you will never be able to get into download mode again
You can replace boot_warning.jpg, logo.jpg (main file responsible logo), letter.jpg (the logo that shows for a split second), svb_orange.jpg (boot loader unlock warning)
6. select all images -> right click -> add to archive.
7. set it to tar.
8. set compression method to GNU.
This is what it should look like
9. Click on OK.
10. Now connect your A32 to the PC. (enable USB debugging)
11. Copy over the tar file that was generated by 7zip to anywhere. i am gonna assume we placed it in the internal storage (/sdcard/)
12. Run the following commands.
NOTE: I am editing the original thread since i checked in up param file of my new a13 fw and found new file. Its for if the battery temperature is too high. if you modify the up param from a11 fw and flash that it may not exist and the phone will boot loop if it wants to display the menu...
iM UPLOADING A13 stock up_param HERE FROM A325FXXU2CVK3.
Uploaded as up_param-a13.bin
adb shell (Phone users skip this.)
su
(Grant su permission if the popup comes up).
Then run
ls -l /dev/block/platform/****/by-name
After you get a long output. Search for up_param.
(We all have the same phone but just in case some people with diff samsung mtk phones come here).
now we just have to run 2 more commands and we are done!
Taking backups incase something goes wrong.
(People with different phones replace your up_param partition name here.)
dd if=/dev/block/mmcblk0p35 of=/sdcard/backup-param.bin
Now flashing our new modified up_param with new images
dd if=/sdcard/filename.tar of=/dev/block/mmcblk0p35
WE ARE DONE! now reboot and enjoy the new logo!
CREDITS:
- Orignal post: here.
Also video attached below
Captain_cookie_200 said:
I recently changed my splash screen logo from samsung to a custom one i made in pixlr. Its looks coool. A video is attached below.
REQUIREMENTS:
- ROOTED A32 4G
- usb c cable (to connect to pc)
- windows PC (for zipping and etc.)
- ADB installed on your pc. (For running shell commands) [OR YOU COULD USE SOME TERMINAL EMULATOR]
If your doing this on your phone just follow along, i included seperate commands.
STEPS:
1. Download attached up_param.bin (i extracted this from android 11 firmware. it shld work with fine with 12 they are same. Since downloading whole firmware takes alot of time)
2. Install 7zip if you already didn't from here.
3. Make a working directory anywhere
4. Use 7 zip to extract up_param.bin to a folder.
After extracting this is what you should see
View attachment 5775661
These are all the images!
5. modify files as you like. (MAKE SURE THE DIMENSIONS ARE THE SAME. AND DO NOT REMOVE ANY IMAGE IT COULD BRICK)
NOTE: DO NOT TOUCH DOWNLOAD MODE IMAGES. if you f**k them up you will never be able to get into download mode again
You can replace boot_warning.jpg, logo.jpg (main file responsible logo), letter.jpg (the logo that shows for a split second), svb_orange.jpg (boot loader unlock warning)
6. select all images -> right click -> add to archive.
View attachment 5775663
7. set it to tar.
8. set compression method to GNU.
This is what it should look like
View attachment 5775665
9. Click on OK.
10. Now connect your A32 to the PC. (enable USB debugging)
11. Copy over the tar file that was generated by 7zip to anywhere. i am gonna assume we placed it in the internal storage (/sdcard/)
12. Run the following commands.
adb shell (Phone users skip this.)
su
(Grant su permission if the popup comes up).
Then run
ls -l /dev/block/platform/****/by-name
After you get a long output. Search for up_param.
View attachment 5775673
(We all have the same phone but just in case some people with diff samsung mtk phones come here).
now we just have to run 2 more commands and we are done!
Taking backups incase something goes wrong.
(People with different phones replace your up_param partition name here.)
dd if=/dev/block/mmcblk0p35 of=/sdcard/backup-param.bin
Now flashing our new modified up_param with new images
dd if=/sdcard/filename.tar of=/dev/mmcblk0p35
WE ARE DONE! now reboot and enjoy the new logo!
Click to expand...
Click to collapse
Very good thanks
kilam9900 said:
Very good thanks
Click to expand...
Click to collapse
hehe your welcome. hope it works epikly for you. (if you do it)
Captain_cookie_200 said:
hehe your welcome. hope it works epikly for you. (if you do it)
Click to expand...
Click to collapse
I will do it but I am scare to f**k size so I will do it on PC
kilam9900 said:
I will do it but I am scare to f**k size so I will do it on PC
Click to expand...
Click to collapse
oh lmao. if you do end up breaking your up_param it would still boot fine. but downlaod mode would break until a proper up param file is flashed again.
Captain_cookie_200 said:
oh lmao. if you do end up breaking your up_param it would still boot fine. but downlaod mode would break until a proper up param file is flashed again.
Click to expand...
Click to collapse
I'm reassured
I recommend using dd oflag=direct,sync if=/sdcard/filename.tar of=/dev/block/mmcblk[...] otherwise you may get all sorts of problems, even a bricked phone, especially if you reboot straightaway after flashing. Inside Android all data transfers are cached, it's not the Download tool where everything is synchronous (or at least flushed before reboot).
uluruman said:
I recommend using dd oflag=direct,sync if=/sdcard/filename.tar of=/dev/block/mmcblk[...] otherwise you may get all sorts of problems, even a bricked phone, especially if you reboot straightaway after flashing. Inside Android all data transfers are cached, it's not the Download tool where everything is synchronous (or at least flushed before reboot).
Click to expand...
Click to collapse
i didnt have to deal with anything like that. i did multiple flashes atleast 15 flashes using dd to the up param partition and i did not brick my phone at all. worse you could get is a black screen while booting. and your download mode would not work. but its easy to get it back just flash the up param file again the one that was backed up. although thanks for the info. i did this using recovery. could also be done while booted into android itself
Captain_cookie_200 said:
i didnt have to deal with anything like that. i did multiple flashes atleast 15 flashes using dd to the up param partition and i did not brick my phone at all. worse you could get is a black screen while booting. and your download mode would not work. but its easy to get it back just flash the up param file again the one that was backed up. although thanks for the info. i did this using recovery. could also be done while booted into android itself
Click to expand...
Click to collapse
I ran into this problem when rebooted the phone using the "reboot" shell command right after the "dd". When rebooting from the UI all caches are flushed, of course, but the "reboot" command is a bit crude method I suppose (although in Linux it's always absolutely graceful). Anyway, the logo screen looked absolutely fine, and the system booted okay, but when I tried to enter Download I got the black screen and the boot loop, and no way to either enter Download, Recovery or boot the system. In fact the only thing that still worked was forced reboot (Power + Vol Down). I was able to get out of this situation by connecting the charger and holding Power + Vol Down to force the phone into the off state, then I connected it to the PC and tried entering the Download mode once again, and this time it worked although the graphics was all messed up.
uluruman said:
I ran into this problem when rebooted the phone using the "reboot" shell command right after the "dd". When rebooting from the UI all caches are flushed, of course, but the "reboot" command is a bit crude method I suppose (although in Linux it's always absolutely graceful). Anyway, the logo screen looked absolutely fine, and the system booted okay, but when I tried to enter Download I got the black screen and the boot loop, and no way to either enter Download, Recovery or boot the system. In fact the only thing that still worked was forced reboot (Power + Vol Down). I was able to get out of this situation by connecting the charger and holding Power + Vol Down to force the phone into the off state, then I connected it to the PC and tried entering the Download mode once again, and this time it worked although the graphics was all messed up.
Click to expand...
Click to collapse
did you touch the download mode images in any way? i dont know why this happened for you. i guess i did press the reboot button instead of using the command. since i do it on first fw reflash and i flash a gsi immdiiately afterwards... download shouldnt have died like that tho. i messed with my down load images completely. i competely replaced them with diff new images that are diff sizes too. i dont know why this is happening for you. my download works fine. although it reverts to the old download image somehow once on downloading mode. for confirmations it does show my edited images.
Captain_cookie_200 said:
did you touch the download mode images in any way? i dont know why this happened for you. i guess i did press the reboot button instead of using the command. since i do it on first fw reflash and i flash a gsi immdiiately afterwards... download shouldnt have died like that tho. i messed with my down load images completely. i competely replaced them with diff new images that are diff sizes too. i dont know why this is happening for you. my download works fine. although it reverts to the old download image somehow once on downloading mode. for confirmations it does show my edited images.
Click to expand...
Click to collapse
I suppose your Download still worked fine because the up_param tar archive was complete and not corrupt, and even image files were normal and not chopped in the middle of the data stream. In my case it was the latter, when cache is not flushed the data stream is just cut, and such a simple program as Download obviously cannot handle broken files. The Download tool itself is kept in the separate "debugger" flash memory, I guess it has the default graphics too which can be displayed if no graphics is found in up_param.
uluruman said:
I suppose your Download still worked fine because the up_param tar archive was complete and not corrupt, and even image files were normal and not chopped in the middle of the data stream. In my case it was the latter, when cache is not flushed the data stream is just cut, and such a simple program as Download obviously cannot handle broken files.
Click to expand...
Click to collapse
oh i see. thanks for telling about this. it would help people alot from preventing to brick their phone from bricking
Captain_cookie_200 said:
oh i see. thanks for telling about this. it would help people alot from preventing to brick their phone from bricking
Click to expand...
Click to collapse
Correction: 'dd oflag=direct,sync' does not work in Android shell, the working alternative is 'dd conv=fsync'
Captain_cookie_200 said:
I recently changed my splash screen logo from samsung to a custom one i made in pixlr. Its looks coool. A video is attached below.
REQUIREMENTS:
- ROOTED A32 4G
- usb c cable (to connect to pc)
- windows PC (for zipping and etc.)
- ADB installed on your pc. (For running shell commands) [OR YOU COULD USE SOME TERMINAL EMULATOR]
If your doing this on your phone just follow along, i included seperate commands.
STEPS:
1. Download attached up_param.bin (i extracted this from android 11 firmware. it shld work with fine with 12 they are same. Since downloading whole firmware takes alot of time)
2. Install 7zip if you already didn't from here.
3. Make a working directory anywhere
4. Use 7 zip to extract up_param.bin to a folder.
After extracting this is what you should see
View attachment 5775661
These are all the images!
5. modify files as you like. (MAKE SURE THE DIMENSIONS ARE THE SAME. AND DO NOT REMOVE ANY IMAGE IT COULD BRICK)
NOTE: DO NOT TOUCH DOWNLOAD MODE IMAGES. if you f**k them up you will never be able to get into download mode again
You can replace boot_warning.jpg, logo.jpg (main file responsible logo), letter.jpg (the logo that shows for a split second), svb_orange.jpg (boot loader unlock warning)
6. select all images -> right click -> add to archive.
View attachment 5775663
7. set it to tar.
8. set compression method to GNU.
This is what it should look like
View attachment 5775665
9. Click on OK.
10. Now connect your A32 to the PC. (enable USB debugging)
11. Copy over the tar file that was generated by 7zip to anywhere. i am gonna assume we placed it in the internal storage (/sdcard/)
12. Run the following commands.
NOTE: I am editing the original thread since i checked in up param file of my new a13 fw and found new file. Its for if the battery temperature is too high. if you modify the up param from a11 fw and flash that it may not exist and the phone will boot loop if it wants to display the menu...
iM UPLOADING A13 stock up_param HERE FROM A325FXXU2CVK3.
Uploaded as up_param-a13.bin
adb shell (Phone users skip this.)
su
(Grant su permission if the popup comes up).
Then run
ls -l /dev/block/platform/****/by-name
After you get a long output. Search for up_param.
View attachment 5775673
(We all have the same phone but just in case some people with diff samsung mtk phones come here).
now we just have to run 2 more commands and we are done!
Taking backups incase something goes wrong.
(People with different phones replace your up_param partition name here.)
dd if=/dev/block/mmcblk0p35 of=/sdcard/backup-param.bin
Now flashing our new modified up_param with new images
dd if=/sdcard/filename.tar of=/dev/block/mmcblk0p35
WE ARE DONE! now reboot and enjoy the new logo!
Click to expand...
Click to collapse
NOTE: I am editing the original thread since i checked in up param file of my new a13 fw and found new file. Its for if the battery temperature is too high. if you modify the up param from a11 fw and flash that it may not exist and the phone will boot loop if it wants to display the menu...
iM UPLOADING A13 stock up_param HERE FROM A325FXXU2CVK3.
Uploaded in orignal thread as up_param-a13.bin
I made it and works perfectly, thanks for the tutorial!!
ApiYoshi said:
I made it and works perfectly, thanks for the tutorial!!
Click to expand...
Click to collapse
glad to hear thatt. and your welcome
how to apply this on snapdragon devices
they don't have up_parem.bin file ??
elswerky said:
how to apply this on snapdragon devices
they don't have up_parem.bin file ??
Click to expand...
Click to collapse
they do? check inside bl file of your firmware. Or using the partition list command should show it
Captain_cookie_200 said:
they do? check inside bl file of your firmware. Or using the partition list command should show it
Click to expand...
Click to collapse
Bl file itself doesn't have up_parem.bin file
Unlike exynis devices which have it
And am.nit familiar with partition as you said if you can helping me
Talking about tab S6 w8th android 12 , OneUi 4.1

Categories

Resources