Database Info

[GUIDE] How to S-OFF your 1.47.x ROM with Revolutionary (without downgrading)

First of all, please let me thank all the people involved into this process:
o unrevoked and AlphaRevX teams (for their great tools)
o davidreece (for reporting the temp root method) http://forum.xda-developers.com/showthread.php?t=1190992
Since Revolutionary is not able (yet) to acquire root access on our ROM, I thought I'd get a temp root access BEFORE launching Revolutionary.
As a matter of facts I have successfully S-OFFed my device running the latest 1.47.401.4 ROM (HBOOT 0.98.0002).
I could not test this method on any other ROM version, but as long as you are able to get temp root using the commands below, you should be safe to go.
So let's get straight to the instructions:
PREREQUISITES:
o You know what you are doing. Messing up with your NAND implies a risk that you should be aware of.
o Android SDK installed. Download the "android-win-tools" from the following link otherwise (thanks .sh4d0w.) and extract the files to your \Windows directory: http://www.4shared.com/file/KK6KvF7Q/android-win-tools.html
HOW TO:
o Get your version of Revolutionary from their site: http://revolutionary.io/
o Ensure your device has "Debug USB" enabled and is connected to your PC in "Charge only" mode.
o Download fre3vo from the following link: http://forum.xda-developers.com/attachment.php?attachmentid=661246&d=1311240968
o Open a command prompt and issue the following commands to get temp root access: (thanks again, davidreece!)
Code:
adb push fre3vo /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell [i](you'll get a $ prompt)[/i]
/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF [i](you should be kicked off adb shell and get back to your command prompt)[/i]
adb shell [i](you should get a # prompt now)[/i]
exit
o DO NOT disconnect or switch your device off!!
o Now that your phone has temporary root access, launch Revolutionary and follow instructions on screen.
o In a matter of seconds you will see the new HBOOT in place
o You may want to answer Y when prompted whether to install CWM or not. It will install the new 4.0.1.4 version of the tool.
o Download the attachment below and flash it via CWM. It will install su and Superuser.apk. Restart your phone and you'll end up with a rooted stock rom.
You should be able to achieve the same results on Linux as well.
That's it, folks.

thank you
but got this problem :
'adb' is not recognized as an internal or external command operable program or batch file.

thank you!!! Worked! Perfect!

hassan1990 said:
thank you
but got this problem :
'adb' is not recognized as an internal or external command operable program or batch file.
Click to expand...
Click to collapse
1. download and install JDK
2. download and install Android SDK
3. run "SDK Manager.exe" and install Android SDK Platform-tools
4. in \platform-tools\ you found adb.exe

thanx you all for this unstuctions now it works for me!!
were can i find de cwm on my phone now?
Gr.Roymar

@ slvrbllt
Add this to the tutorial.
Copy content on adb-win-tools from here>> http://www.4shared.com/file/KK6KvF7Q/android-win-tools.html
To C:/Windows
This is for:
'adb' is not recognized as an internal or external command operable program or batch file.
Because most of us don't have those files preinstalled in windows.

for HBOOT 0.98.0000, you don't need the temp root right?

Right, i can confirm it works without temp root
Only have Debuging on and phone in charge only, and run the program

Enc0der said:
Hi,
just wanted to let you know that your method for s-off finally (!) worked for me on my desire s.
I can't reply on your thread (new user..), but feel free to quote me if someone asks if this works
I'm s-off'ed now
thank you!
Click to expand...
Click to collapse
You're welcome!

so easy
thank tou

Work's like a charm! Thanx!
Although my antivirus (Norton Internet Security) killed revolutionary when i tried to download CWM.. No hassle though, just installed it manually afterwards..

Thanks, it worked.

Hi guys,
My DS is S-OFF now too , but GingerBreak 1.2 seems doesn't work. It still shows rotating circle but nothing happens. Any ideas ?
Thanks for reply.

vencis said:
Hi guys,
My DS is S-OFF now too , but GingerBreak 1.2 seems doesn't work. It still shows rotating circle but nothing happens. Any ideas ?
Thanks for reply.
Click to expand...
Click to collapse
Same for me.. but.. is it a problem? If i want to flash a custom Rom? Not really, right? 4ext is flashed so i can flash a Rom or will something break if i do that?
Cheers

Yes, you're right. I can use prerooted stocked rom or some custom rom. Thanks.

Hi All, followed instructions as laid out. When using revolutionary it hangs waiting for fastboot. Any Idea's?
Thanks

Thanks a lot for this one... I have added this to my FAQ section on this guide http://forum.xda-developers.com/showthread.php?p=16000143#post16000143.
Hope you don't mind

Thanks, it worked. It was a long night
Thanks again!

EbiEre said:
Same for me.. but.. is it a problem? If i want to flash a custom Rom? Not really, right? 4ext is flashed so i can flash a Rom or will something break if i do that?
Cheers
Click to expand...
Click to collapse
No, you are right and should be fine
All of the custom roms come pre rooted anyway, So simply flash one from recovery as you suggested and you'll be ok
Sent from my HTC Desire S using XDA Premium App

it's not working.. i don't know why. it's stuck at acquiring root.. any suggestion? i've done all the adb command. and it's already show #..
this is my third time i tried
(sorry for my bad english)

Help me yank a stock Wind XT720 sbf

Does anyone have access to an *unrooted* Wind phone with the original software installed? I have an idea how to assemble the original sbf for it: a fastboot recovery.
Basically, my idea is:
1) enable adb
2) use adb to reboot into fastboot
3) fastboot boot a custom recovery that will dump the relevant code groups to sdcard
4) use the pieces from the sdcard to assemble the original sbf
So, to try this I need someone that's somewhat technically comfortable (i.e. able to use adb and fastboot). I can walk someone through it on linux. I haven't made the recovery yet, it's sort of still a brainstorming mode. If anyone bites we can work the details out.
Basically, I'll implement it first for my phone and then post instructions. The phone will be left untouched by doing this (except for files written to the /sdcard).

I will look for it tomorrow why do you want it.
Ok
Sent from my Milestone XT720 using xda premium

We've never had the wind sbf.

it'll be hard to find Windmobile has discontinued the phone
of the existing users, not many are aware of XDA, and i've been spreading word of it on Winds forum

More than happy to help you
Mioze7Ae Your one of my hero that make that xt720 livable. I have 7 of those xt720 at work. I root them all and install custom roms exept one that I keep original to make a nandroid or SBF. If you help me, I have a chance for sucsess. I love all the linux distribution that are base on Debian, I dump Ubuntu becose I can not stand unity. now I am running mint on most of my computers. I am not a programmer but I am a hardware expert. I look forward to work with you.
sorry for my english I am french Canadian.
Stéphan

Great! Give me a few days to get some instructions/needed files put together.

Any luck with that? I have access to unrooted Wind XT720 if you still want it.

Ok, here goes:
Step 1: prepare sdcard (root of sdcard is /sdcard)
Download OpenRecovery-XT720-01.zip (http://android.fjfalcon.com/Files/Tools/OpenRecovery-XT720-01.zip)
Extract onto root of sdcard (creates /sdcard/OpenRecovery directory and OpenRecovery.zip)
Download attached dump-partitions-02.zip and put in /sdcard/OpenRecovery/updates
Create empty folder on root of sdcard called dump (/sdcard/dump)
Step 2: fastboot and dump (you need a computer that has both adb and fastboot working)
On PC: Download attached openrecovery-fastboot.img
On Phone: Enable ADB debugging
Plug phone into PC via usb
On PC: Run "adb reboot bootloader" on the PC
Phone will boot to "Fastboot bootloader"
On PC: Run "fastboot boot openrecovery-fastboot.img" (may require sudo)
Phone will boot into OpenRecoveryXT720
On Phone: select "Apply update" > "dump-partitions-02.zip"
Wait for dump to complete
Reboot phone
This will fill the /sdcard/dump folder with these files:
boot.img boot.md5
bpsw.img bpsw.md5
cdrom.img cdrom.md5
cdt.img cdt.md5
cust.img cust.md5
devtree.img devtree.md5
lbl.img lbl.md5
logo.img logo.md5
recovery.img recovery.md5
system.img system.md5
zip up the /sdcard/dump directory and send it to me and I will attempt to assemble an sbf. I don't think any of these partitions contain personal/sensitive data, but I can't be 100% certain so PM is completely fine or you can gmail them to me ([email protected]). Actually, it's possible that kpanic.img might have private/sensitive data (I think it's where crashed kernels get dumped so it could contain anything that was in memory at the time of a crash) and I doubt I need that partition anyway. So don't send that one if you're concerned about that.
Edit: just a moment -- removing kpanic from dump script
Edit: attached dump-partitions-02.zip which doesn't dump kpanic

Not sure if you're still needing this or if you got this, but a google search for this will give you what you need:
XT720_WIND__STR_U2_05.1F.2__USASHLSTAB14P2XAPCNWND03B.0R_1FF.sbf
I would link you but I'm new so I can't post a link
Use the droid developers link

403d said:
Not sure if you're still needing this or if you got this, but a google search for this will give you what you need:
XT720_WIND__STR_U2_05.1F.2__USASHLSTAB14P2XAPCNWND03B.0R_1FF.sbf
I would link you but I'm new so I can't post a link
Use the droid developers link
Click to expand...
Click to collapse
Another link, http://www.pda-planet.com/forum/forum386/thread233.html.

[Q] First step to get Rooted

I have been searching for a week now on how to root my xoom and but i am getting nowhere..
I am currently running stock os.. ICS 4.0.4 IMM76..
I was able to unlock my zoom via adb
I was trying to push recovery-Tiamat-R4c-100611-1150-cwm.img via adb, it will go through the process but after reboot I can not find superuser or busy box installed.
Please help or direct me to right path to get my xoom rooted.
thank you.

You push the recovery through ADB like you were doing....but you boot in to recovery on the Xoom and install the root "update.zip" from there.
That installs su, Superuser.apk and busybox.
You were on the right track...you were just skipping a step. The link that had the recovery.img file you downloaded should also have the root "update.zip" as well.

returning to 5.1.1 - after marshmellow update - help please

Hello good people of xda,
I recently like less then 2 weeks bought my first tablet, the NVidia shield k1 and I loved it. great gaming experience, support for my 64gb card, smooth work, good battery life but... since I updated to 6.0 all of that is gone.
My sd card can no longer by used to move apps too, formatting it to internal storage cause the tablet to "corrupt" my card.
Battery is dyeing like there is no tomorrow, tablet feel much less responsive, the list can go on and on.
Hence I'm looking for help and advice. I want to go back to 5.1 lollipop OS:
- is there anyway to make a rollback officially?
- what tools I would need (would I need to root my device or not??
- will rolling back void my warranty ?
I would appreciate the help on this matter, as since the update my tablet became a 200 dollars tray to carry drink around, and that is not cool at all (shame on you nvdia!!)
many thanks

Get your firmware version here :
https://developer.nvidia.com/shield-open-source
Then fallow this thread :
http://forum.xda-developers.com/showthread.php?t=2399737
Unlock bootloader
And instal your firmware by those commands :
fastboot flash recovery recovery.img
fastboot flash boot boot.img
fastboot flash system system.img
fastboot flash userdata userdata.img
fastboot reboot
Done!
I just rollback on K1 from 6.0 update to 5.1.1

Riddo said:
Hello good people of xda,
I recently like less then 2 weeks bought my first tablet, the NVidia shield k1 and I loved it. great gaming experience, support for my 64gb card, smooth work, good battery life but... since I updated to 6.0 all of that is gone.
My sd card can no longer by used to move apps too, formatting it to internal storage cause the tablet to "corrupt" my card.
Battery is dyeing like there is no tomorrow, tablet feel much less responsive, the list can go on and on.
Hence I'm looking for help and advice. I want to go back to 5.1 lollipop OS:
- is there anyway to make a rollback officially?
- what tools I would need (would I need to root my device or not??
- will rolling back void my warranty ?
I would appreciate the help on this matter, as since the update my tablet became a 200 dollars tray to carry drink around, and that is not cool at all (shame on you nvdia!!)
many thanks
Click to expand...
Click to collapse
You should try a factory reset first. Whatever method you use to go back to 5.1, you have to do a clean install, so, why no try a factory reset first?

Doing a factory restore doesn't reset the android version is just resets it back to fresh with android 6.0

What firmaware are you using. For k1 there is only extract-nv-recovery-image-shield-tablet-sb_na_wf-37154_590.0364
It`s correct?

perun said:
What firmaware are you using. For k1 there is only extract-nv-recovery-image-shield-tablet-sb_na_wf-37154_590.0364
It`s correct?
Click to expand...
Click to collapse
extract-nv-recovery-image-shield-tablet-sb_na_wf-37154_590.0364.sh
and what about next ??

I did a factory reset after the upgrade and it's been really smooth for me
Sent from my LG-H901 using Tapatalk

You need cygwin to unpack this fule using command bash ./name.sh

There's no userdata.img in the file and there's a blob file

OmenHTX said:
You need cygwin to unpack this fule using command bash ./name.sh
Click to expand...
Click to collapse
I have also have the nvidia k1 tablet since recently, but im not satisfied with the quality of marshmallow compared to lollipop.
I just download this file (extract-nv-recovery-image-shield-tablet-sb_na_wf-37154_590.0364.zip) after i Unpacked i got a folder with a SH file extension. I am stuck cuz nvidia says that i need to do something with comand line on ther website but I dont understand.
could you please tel me step by step if its not too mutch

abati said:
I have also have the nvidia k1 tablet since recently, but im not satisfied with the quality of marshmallow compared to lollipop.
I just download this file (extract-nv-recovery-image-shield-tablet-sb_na_wf-37154_590.0364.zip) after i Unpacked i got a folder with a SH file extension. I am stuck cuz nvidia says that i need to do something with comand line on ther website but I dont understand.
could you please tel me step by step if its not too mutch
Click to expand...
Click to collapse
Very simple way to roll back from 6.0
1) Get the software here :
https://developer.nvidia.com/shield-open-source
2) Unzip it and you will get a file_name.sh
2)Unlock your device using this guide :
http://forum.xda-developers.com/show....php?t=2399737
Unlock bootloader
3) Install cygwin to unpack the firmware you downloaded from 1)
use thiscommand bash ./File_name.sh
4) Add ADB and Fastboot path to your windows system path
5) where you unpacked the file_name.sh there should be a flash-all.bat
run it wait for it to finish and you should have a shield k1 back to factory with 5.1.1 installed
If you face any problem on the steps above you can always have a look at this tutorial for rooting your device because they differ very little from install a custom ROM.
http://nvidiashieldzone.com/index.p...tablet-root/root-shield-tablet-v2-1-lollipop/

I found with any ROM, if I factory reset than got to recovery, than default wipe, than load new ROM but start fresh with Google apps 1 at a time. Sometimes reboot after each app especially if it is a new rom or updated rom in this case being marshmallow. This has usually solved issues for me.

eraizel said:
Very simple way to roll back from 6.0
1) Get the software here :
https://developer.nvidia.com/shield-open-source
2) Unzip it and you will get a file_name.sh
2)Unlock your device using this guide :
http://forum.xda-developers.com/show....php?t=2399737
Unlock bootloader
3) Install cygwin to unpack the firmware you downloaded from 1)
use thiscommand bash ./File_name.sh
4) Add ADB and Fastboot path to your windows system path
5) where you unpacked the file_name.sh there should be a flash-all.bat
run it wait for it to finish and you should have a shield k1 back to factory with 5.1.1 installed
If you face any problem on the steps above you can always have a look at this tutorial for rooting your device because they differ very little from install a custom ROM.
http://nvidiashieldzone.com/index.p...tablet-root/root-shield-tablet-v2-1-lollipop/
Click to expand...
Click to collapse
thnx bro, I just watched someone unpacking the sh file on youtube via Linux, So thankfully i succeeded in unpacking the sh file on my kubuntu. At the moment I have a folder with 8 files that i unpacked from the original SH file.
I already installed ADB and Fastboot via the Minimal ADB/Fastboot programme, so after I unlock the bootloader via ADB/fastboot programme, do I only need to go to the folder where I exctracted the SH files and press on the flash-all.bat file ?
---------- Post added at 11:35 PM ---------- Previous post was at 10:37 PM ----------
abati said:
thnx bro, I just watched someone unpacking the sh file on youtube via Linux, So thankfully i succeeded in unpacking the sh file on my kubuntu. At the moment I have a folder with 8 files that i unpacked from the original SH file.
I already installed ADB and Fastboot via the Minimal ADB/Fastboot programme, so after I unlock the bootloader via ADB/fastboot programme, do I only need to go to the folder where I exctracted the SH files and press on the flash-all.bat file ?
Click to expand...
Click to collapse
nvm ma8 !
I managed to succesfully flash the official stock 5.1.1 as you just guided me, Your amazing big thanks !!!

abati said:
I have also have the nvidia k1 tablet since recently, but im not satisfied with the quality of marshmallow compared to lollipop.
I just download this file (extract-nv-recovery-image-shield-tablet-sb_na_wf-37154_590.0364.zip) after i Unpacked i got a folder with a SH file extension. I am stuck cuz nvidia says that i need to do something with comand line on ther website but I dont understand.
could you please tel me step by step if its not too mutch
Click to expand...
Click to collapse
right click on flash-all.bat and click on "edit" you can find those lines with fastboot then started on order. After that reboot it. It will take 15' or longer to go to instructions screen.
Sent from my SHIELD Tablet K1 using Tapatalk

Cygwin
where did you actually learn to unpack the sh file. I have cygwin installed but i have not a clue on how to use it to unpack that file. I am trying to get back to Lollipop.
abati said:
thnx bro, I just watched someone , So thankfully i succeeded in unpacking the sh file on my kubuntu. At the moment I have a folder with 8 files that i unpacked from the original SH file.
I already installed ADB and Fastboot via the Minimal ADB/Fastboot programme, so after I unlock the bootloader via ADB/fastboot programme, do I only need to go to the folder where I exctracted the SH files and press on the flash-all.bat file ?
---------- Post added at 11:35 PM ---------- Previous post was at 10:37 PM ----------
nvm ma8 !
I managed to succesfully flash the official stock 5.1.1 as you just guided me, Your amazing big thanks !!!
Click to expand...
Click to collapse

fairley said:
where did you actually learn to unpack the sh file. I have cygwin installed but i have not a clue on how to use it to unpack that file. I am trying to get back to Lollipop.
Click to expand...
Click to collapse
Try this tutorial, it helped me aswell: Sorry I cannot paste links so just google "how to geek how to use linux commands in windows with cygwin"
Guys, I followed every step in the forementioned guides and how-tos but I get always stuck with the NVIDIA/Android bootscreen (the logo). I downloaded and extracted the Linux folder and executed the flash-all.bat
Did this process several times now. Often after the flash if I go to recovery it is saying "cannot mount cache". Read something it has to do with the KitKat -> Lollipop upgrade and a cache.img is needed?
I just don't get why everybody else just don't have this problem though I did exactly the same steps... btw, this is an European / German device... but I don't think this is the problem?

Thanks
thanks for the links, but it still does not tell you how to unpack the file. Are their any other links you can give me?
Groohmsch said:
Try this tutorial, it helped me aswell: Sorry I cannot paste links so just google "how to geek how to use linux commands in windows with cygwin"
Guys, I followed every step in the forementioned guides and how-tos but I get always stuck with the NVIDIA/Android bootscreen (the logo). I downloaded and extracted the Linux folder and executed the flash-all.bat
Did this process several times now. Often after the flash if I go to recovery it is saying "cannot mount cache". Read something it has to do with the KitKat -> Lollipop upgrade and a cache.img is needed?
I just don't get why everybody else just don't have this problem though I did exactly the same steps... btw, this is an European / German device... but I don't think this is the problem?
Click to expand...
Click to collapse

Error in ADB: Can't push apps/files due to system is read only.

Hello guys! Hope I can find my salvation here. Hehe
I've been coding my Windows App that functions much like a custom recovery but I came into a problem which is bugging me
since last week. I can't seem to push files to my phone through adb. I have no idea why it wont work because pull is working fine, and shell as well. I tried remounting the file system as rw but still no luck. Hope you can help me out guys
My phone's Specification:
-Spreadtrum SC7731
-Running Android 5.1
My environment:
-Windows 10
-adb installed
-device drivers installed.
PS: If you are wondering why make a recovery that runs in PC while you can just have it in your phone?
-Unfortunately, I got a problem with that. I ported TWRP for my phone, but touch wont work which makes it useless.
Please help me sensei's!

Unlock the bootloader, flash a custom recovery (CMW for exmpl), put the root package at the root dir of the sdcard, now boot the phone into recovery mode and select install zip from sdcard then reboot
On pc, write the following command : "adb remount"
Gratzz you're now rooted and able to push files into system partition ��
Root at your own risk. Unlocking the bootloader makes you lose the warranty and will wipe your data .. So take a backup.

FinnTheHuman. said:
Unlock the bootloader, flash a custom recovery (CMW for exmpl), put the root package at the root dir of the sdcard, now boot the phone into recovery mode and select install zip from sdcard then reboot
On pc, write the following command : "adb remount"
Gratzz you're now rooted and able to push files into system partition ��
Root at your own risk. Unlocking the bootloader makes you lose the warranty and will wipe your data .. So take a backup.
Click to expand...
Click to collapse
Reread the OP. :fingers-crossed::fingers-crossed: I'm on Spreadtrum phone which means no source(yet.. or forever). I don't really know if you just misinterpreted the post or just trying to acquire post count. :3