[TUTORIAL] Unlock Samsung [GT-S5570 / i5500 / Galaxy Ace] - Miscellaneous Android Development

Unlock your Samsung Phone
[GT-S5570 / more...]​
------------------------------------------------------------------------------------------------------------------------------------------------------------
First i would like to say some words about this thread. I made this thread at some users requests, original thread contains some obsolete method for unlocking, making some people brick theyr phone. The last method and safe one, was somewhere mixed through other posts from different method and may confuse users. I just rewrite this from 0 for a better understanding and possible questions, discussions about this. I don't own anything from method used.
Original author of method: tweakradje
Original thread: http://forum.xda-developers.com/showthread.php?t=828534&page=34
------------------------------------------------------------------------------------------------------------------------------------------------------------
This tutorial was tested on a Samsung GT-S5570 ( Galaxy Mini ) but worked on some other models too ( i5500 / Galaxy Ace ). For more details you can search in original thread.
First thing you must know is that in order to keep following this tutorial you must have your phone rooted. Temporary or permanent, both will do the job. For any information about rooting phone ( Android 2.2 / 2.3 ) you can do a quick search on XDA-forum or Google.
Root Desktop App: SuperOneClick
SuperOneClick Root Tutorial: Root Tutorial
Now there are 2 methods for extracting the file we need to obtain unlock code, one using ADB Shell(if you use this method, make sure you have installed Android USB Driver first) or using a Terminal App for phone. ADB comes with Android SDK Tools and Terminal Emulator App from market or somewhere else.
• Method 1 (ADB Shell)
- Open one instance of "Command Prompt" and go to folder containing ADB tool (adb.exe). (e.g C:\Program Files (x86)\Android\android-sdk\platform-tools>)
- Make sure your phone is connected to PC and "USB Debugging" it's enabled. (Settings -> Applications -> Development -> USB debugging [X])
- The following commands will be executed in "Command Prompt" that we opened earlier:
Code:
- adb shell
- su
- cat /dev/block/bml5>/sdcard/bml5.img
- exit (2x)
- adb pull /sdcard/bml5.img
So let's understand what we did here. First we run remote shell interactively, grant super-user access, extract the bml5 file to /sdcard then copy it to PC.
The file that we copied to PC should be in C:\Users\~username~\AppData\Local\VirtualStore but you can do a quick search to find it.
• Method 2 (Terminal App)
- Open Terminal Emulator app
- Grant Super-user access to application
- The following commands will be executed in current opened application:
Code:
- su
- cat /dev/block/bml5>/sdcard/bml5.img
- exit (2x)
- Close the application.
bml5 -> (BE-EM-EL-FIVE)
2x -> run the command 2 times
Attention: If you run cat command with the path from above and it's says the file doesn't exists or something like that make sure you try "cat /dev/bml5>/sdcard/bml5.img". For Samsung GT-S5570 the files is under /dev/block.
Click to expand...
Click to collapse
If you get this message when trying to access .bml file while your connected to PC: Permission Denied then try to get your USB card out of Mass Storage mode, so card won't be used by another process.
Click to expand...
Click to collapse
Ok, so after using one of these methods we have our file bml5.img in our PC if we used first method or on our /sdcard if we used second method. Keep in mind that we need this file on our PC, so if you used second method just copy the file to PC!
Now comes the part where we need to work with the file that we just extracted. So, in order to get the unlock code we need a HEX Editor, i've used XVI32 Hex Editor to open the file.
• Finding the unlock code
- Open XVI32 Application that we just downloaded. Hit CTRL+O and select the bml5.img file that we extracted earlier. (Open the file)
- At the first look we will see just a bunch of FF's and 00's and random decimals or symbols, but somewhere deep in there it's our unlock code.
- Hit CTRL+F to open search dialog, select "Hex String" and put the following search string
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 30 30 30 30 30 30 30 30
Click to expand...
Click to collapse
(maybe the search string won't be the same for all phones, but the one from above worked for Samsung GT-S5570)
- Mark "Case Sensitive", Direction "Down", Scope from "Begin".
- Click ok, or hit ENTER to start our search.
- So now, we must hit F3 untill we find our unlock code.
Our unlock code will be 8 digits plain text surrounded by unknown symbols just like in image below.
(I've hited F3 like 3 times, but don't know if it's the same for everyone. Also to make sure you see the code, after hitting F3 make sure you go 2-3 rows up to make sure the code is not above the searched string.)
(Unlock code can be finded in multiple places in file, so if you skip one searched string by mistake, just pay attention for next ones)
After getting the unlock code, write it somewhere in PC or paper... close the phone, remove the actual SIM Card, insert a foreign one and turn it ON! Wait untill it boots up, insert the unlock code and your done. Now you have an unlocked phone!
Attention: Unlock code can be extracted using a Custom ROM like CM7 in my case, the file was there, but can't be unlocked since the window to insert code doesn't appear(pop-up). In order to unlock your phone you must have a Stock ROM that actually can read any Samsung code and have that Network unlock code window!
Click to expand...
Click to collapse
Most custom roms that tries to remove blur break the subsidy lock interface (sim unlock screen doesn't show on them). If you flash other rom and subsidy unlock screen doesn't pop when you insert foreign sim, you will need to flash back stock ROM in order to unlock. So the easyest way for those of you running a Custom ROM, just do a nandroid backup using CWM, flash Stock ROM, unlock your phone then restore your backup.
Click to expand...
Click to collapse
• Useful Codes
*#7465625# - Dial code to check if phone it's network locked.
#7465625*638*UNLOCK-CODE# - Replace UNLOCK-CODE with your 8 digits number, then dial. Phone might reboot.
Click to expand...
Click to collapse
Details about test environment
Code:
Phone used: Samsung GT-S5570 (Galaxy Mini)
Android Version: 2.3.4 (Gingerbread)
PC Windows: Windows 7 (64-bit)
------------------------------------------------------------------------------------------------------------------------------------------------------------
If you have reached the end of the tutorial and you wasn't able to obtain the unlock code( find numbers like 00000000 / 11111111 ), then it means that your phone it's "Hard Locked" or doesn't have the unlock code provided with the phone. I don't know any solution until now for this problem. For most of the people here, this works flawlessly, for some doesn't work.
------------------------------------------------------------------------------------------------------------------------------------------------------------
If you find this tutorial useful please consider pushing the Thanks button at the end of thread.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
You can also send me a beer by donating Thank you.

Nice work. I will add it to the OP of my thread.
Cheers

tweakradje said:
Nice work. I will add it to the OP of my thread.
Cheers
Click to expand...
Click to collapse
Nice. Thank you i hope it's clear enough.
Cheers

Nice work OP!

I have extracted the unlock code from a Samsung Galaxy ACE (st-5830) with CM7 mod with the PC method. However, the file was in the SD finally.
I can't unlock the phone until I flash a stock rom. In less than a week I will post if it has work or not.
Thank you everyone.
EDIT: IT IS WORKING RIGHT. My Galaxy Ace is now unlock and making calls. =)

davidteleco said:
I have extracted the unlock code from a Samsung Galaxy ACE (st-5830) with CM7 mod with the PC method. However, the file was in the SD finally.
I can't unlock the phone until I flash a stock rom. In less than a week I will post if it has work or not.
Thank you everyone.
EDIT: IT IS WORKING RIGHT. My Galaxy Ace is now unlock and making calls. =)
Click to expand...
Click to collapse
Nice to hear that heh
@pvp26 - Thank you.

Thanks. I have bml5.img on my sdcard, but how do I transfer it to my PC. I've been searching and can't seem to find an answer. I tried following a link (can't post it because I'm a new member) but my “Wireless and Network” does not have a USB utilities
EDIT: I got it unlocked!! I just emailed myself bml5.img. But does anyone know why I couldn't transfer before?

Many thanks for your organized post.
With it I was able to find my unlock code but I cant get the popup message.( "Unlock code can be extracted using a Custom ROM like CM7 in my case, the file was there, but can't be unlocked since the window to insert code doesn't appear") I have cyanogenmod 7.1 and I would like to know which stock rom you used and where did you get it. Thanks and good job.

LuisDuarte said:
Many thanks for your organized post.
With it I was able to find my unlock code but I cant get the popup message.( "Unlock code can be extracted using a Custom ROM like CM7 in my case, the file was there, but can't be unlocked since the window to insert code doesn't appear") I have cyanogenmod 7.1 and I would like to know which stock rom you used and where did you get it. Thanks and good job.
Click to expand...
Click to collapse
I used stock Gingerbread 2.3.4 that you can get it on samfirmware, scrool down, search for your phone model and click FIRMWARE from table.
@dannycastaway - i don't know exactly why, but usually when you insert USB cable a notification should show on statusbar, slide down and click "Manage Storage / Copy files" something like that and activate it.

It works really good for me!
Samsung Gio S5660, gingerbread 2.3.4 (locked from Bell mobility).
Thanks

This is really a good simple guide. That works, thanks

nice one..!
works fine.. thank you!

Nice work!
Samsung Galaxy Mini (GT-S5570), Gingerbread 2.3.5, Orange network - working flawlessly
Thank you!

I have just registered to show my appreciation! Ive got an S2, but bought the mrs an ACE locked to Orange.
While ive flashed Android Roms on my old galaxy portal, Ive never used ADB, and after a bit of searching online I managed to get my head round it.
So heres a Big thank you for a Complete working unlock on a Galaxy ACE.
Only thing i may add is that i had to use 'cat /dev/bml5>/sdcard/bml5.img'
And with hex editor found the code straight away.
Thanks again!
Ill stick around and see what i can do with my S2 now aswell

tks!
great guys! you are truly amazing.
Perfectly working on i5500
But if you restore the phone unlock code to be reset again? and remains always the same?
Thanks for the answer

marianomonaco said:
great guys! you are truly amazing.
Perfectly working on i5500
But if you restore the phone unlock code to be reset again? and remains always the same?
Thanks for the answer
Click to expand...
Click to collapse
The phone should remain unlocked even after reset or flashing ROM.

Worked in Samsung i5500 Android 2.1
I have a Samsung Galaxy i5500 (Galaxy 5, Galaxy europa, Corby, Galaxy 550), with Android 2.1 update1 bought in Amazon USA.
The given instructions worked perfectly.
I found the code in the first search and was only once in the file.
I got root using SuperOneClick: http://forum.xda-developers.com/showthread.php?t=803682
Here is how I made SuperOneClick work for me: http://forum.xda-developers.com/showthread.php?t=803682
I had previously installed:
Java SDK (JDK): http://www.oracle.com/technetwork/java/javase/downloads/index.html
(needed by Android SDK)
Android SDK: http://developer.android.com/sdk/index.html
(that installs adb)
Android USB Driver: http://developer.android.com/sdk/win-usb.html
(I don't know if it's needed)

Hi, many thanks for the guide, it didnt work for me I have a galaxy y and there is no: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 30 30 30 30 30 30 30 30 in bml5.

AchilleX said:
It works really good for me!
Samsung Gio S5660, gingerbread 2.3.4 (locked from Bell mobility).
Thanks
Click to expand...
Click to collapse
How did you manage to do it? What's the process you've used?
I've tried the second method and in the terminal emulator it says permission denied

wow, very useful, thanks!

Related

[S4][Hack][Root] SIM Unlock for FREE

Background:
The HTC Sensation has a sim unlock code on /dev/block/mmcblk0p6.
This was found and exploited months ago by Sensation users.
For the One S, HTC have decided to get a bit sneaky. The code still exists on the same block but they have encrypted the actual SIM unlock code by adding a key generated from the phone’s IMEI number.
This method uses the IMEI number to calculate the key which can then be subtracted to give a working SIM unlock code.
Thanks to contributions from various users, we now have 3 different methods of obtaining your SIM unlock code.
All are tested and confirmed to work on all versions of the HTC One S.
Method 1 (details below) requires no downloads and takes about 5 minutes.
Method 2 uses the first step of method 1 and then a small executable program on a Windows PC to do the calculation.
Method 3 requires the download of a Bash Script but fully automates the procedure.
Note 1: All methods require Root and only work at present for the S4 version.
Note 2: It is possible that the 'strings' command referred to in the text will only work if you have Busybox installed. If you are already using a custom ROM, you will probably have this. If you are on a rooted Stock ROM and cannot execute the strings command, try installing Busybox first.
Any feedback on this issue would be welcomed in the thread.
Note 3: CM10 based ROMS will normally return the correct values for UN_Lock_code, but fail to unlock when a new SIM card is inserted. If you have this problem, revert to a Sense-based ROM (e.g Trickdroid, Venom) for the unlock process. You may return to a CM10 base after the phone is unlocked.
Methods 2 and 3 can be found in Post 2.
METHOD 1
To find your SIM UNLOCK CODE you need:
1) Root
2) Android Terminal Emulator (free from the market)
3) Your IMEI number (dial *#06# on your dialler)
There are 4 steps to the process:
1) Obtain your UN_lock_code from your phone
2) Calculate the key from your IMEI number
3) Subtract (2) from (1)
4) Unlock your phone
Step 1
Obtain your UN_lock_code from your phone as follows:
Open the Terminal Emulator app and type:
su [enter]
strings -n 8 /dev/block/mmcblk0p6 [enter]
It will output several lines of data (including your IMEI number)
One of the lines will be [eg] UN_Lock_code=063312345
Make a note of this number (This is NOT your SIM unlock code)!
Step 2
Make a key from your IMEI number:
a) Write down the last 7 digits of your IMEI number in this format: 1234 567
b) Reverse the 2 blocks: 567 1234
c) Add a 4th digit X: 567 X 1234 where:
X = the sum of the first 3 digits (If the sum is 2 digits, write only the 2nd digit)
[5 + 6 + 7 = 18 in the example above so X = 8]
[if the sum is 3, X = 3]
[if the sum is 17, X = 7]
[if the sum is 25, X = 5] etc.
Using the above IMEI number we get:
567 8 1234 (= the key)
Step 3
Perform a simple sum.
UN_Lock_code [step 1] – key [step 2] = SIM UNLOCK CODE
e.g. 063312345 - 56781234 = 6 531 111
This needs to be an 8-digit number, so add a zero at the beginning if necessary
YOUR SIM UNLOCK CODE IS: 0653 1111
Step 4
Unlock your phone
a) Remove your SIM card (no need to turn off the phone)
b) Insert alternate SIM card
c) When prompted, enter SIM UNLOCK CODE obtained from step 3
d) Reboot when instructed
Please hit the thanks button!
METHOD 2 - Semi Automatic
Windows PC.
For this method follow step (1) from the above post to obtain your UN_Lock code
You can then download this app which will automate the calculation process.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Enter your UN_Lock code and the last 7 digits of your IMEI number and press the 'OK' button.
Your SIM Unlock code will be shown in the bottom box.
METHOD 3 - Fully Automatic
a) Download this Bash Script
b) Extract the zip
c) Move the unlock.sh to /system/ (it will not run from the sdcard due to Android restrictions)
d) Open terminal and run:
su <enter>
/system/unlock.sh <enter>
(Or execute the .sh file directly from root explorer)
The SIM Unlock code will be shown in the terminal and also saved to /sdcard/sim_unlock_code.txt
Credits
This is not all my own work!
Several people have contributed to this thread. If you appreciate their work, please hit the thanks button in their posts as well.
Method 1
Thank you to jh787 for this post. He was the first guy to compare the UN_Lock_code to his real (paid-for) sim unlock code.
I just tweaked the idea to find the mysterious X (and provided this guide).
Thanks also to jh787, mycomputerisjunk, rh387 and eneka who provided me with their actual unlock codes.
This allowed me to work out how to calculate the key and validate the method.
Method 2
Many thanks to Josnaro for the code and Wel1973 for the translation (this post).
Method 3
Bash script courtesy of WCCobra in this post
Do I have to go back to stock for this?
Sent from my HTC One S using xda premium
encho said:
Do I have to go back to stock for this?
Click to expand...
Click to collapse
No need - no
Will report back..
Will Be Really Thankful To You If You Do This Properly.
I am Getting a HTC One S From Canada and I would Need to Unlock It After I Get It
Thanks In Advance !!
Also Pressed It !!
I wrote an Easy Guide On My Blog
http://www.freshnewsarea.com/?p=1411
I want to try it so please guide me
Sent from my HTC VLE_U using xda premium
Reading the first post would start, I've sent my details hope it works
Sent from my HTC One S using Tapatalk 2
You want try the same process of Htc Sensation?
ahmadroid said:
I want to try it so please guide me
Sent from my HTC VLE_U using xda premium
Click to expand...
Click to collapse
Read the op!
This could be very useful as apparently my phone would support AWS (well, still have to verify but for that I need to unlock it) and my second carrier is AWS.
ascot17 said:
1) The last 7 digits of your IMEI number (type *#06# in dialler to get this)
Click to expand...
Click to collapse
In terminal, it give you the IMEI just the line before the unlock code
Sent from my HTC One S using xda premium
NienorGT said:
In terminal, it give you the IMEI just the line before the unlock code
Click to expand...
Click to collapse
It does indeed!
The numbers are bigger after *#06# though so it is much easier to read!!
ascot17 -
Finally, My phone is unlock...Pop in my brother Att&t sim card and Woolaaa it worked.
KUDO
Just pm the numbers thanks I hope I can be of help
ascot17 said:
(I have posted this in 'General', but nobody seems to be reading in there!)
With a lot of help from jh787, I have been discussing a hack which will give us SIM unlock for free.
I now have a method which I think works for all, but I need a few people to test first.
So, if you:
a) Have already bought an unlock SIM code for your phone OR
b) Want to see if this method will work
Then please read on and send me a pm with your results.
You need:
1) Root
2) Terminal Emulator (free from the market)
3) A spare Micro SIM from another network
Step 1
Obtain your UN_lock_code from your phone as follows:
Open the Terminal Emulator app and type:
su [enter]
strings -n 8 /dev/block/mmcblk0p6 [enter]
It will output several lines of data.
One of the lines will be [eg] UN_Lock_code=063312345
Make a note of this number (This is NOT your SIM unlock code)
Step 2
Send me a pm with:
1) The last 7 digits of your IMEI number (type *#06# in dialler to get this)
2) The UN_Lock_code obtained from step 1 above.
If you have already bought a SIM unlock code and know that it works, please send me that as well. (This will help to confirm if this method works properly).
For anyone who has not yet SIM-unlocked their phone, but is willing to try [1 attempt!], I will generate a SIM unlock code and send it back via pm for you to try. If it works, I will publish the method for all to use.
Thanks in advance for your help!
Click to expand...
Click to collapse
Gonna do this the minute I grab mines. Lol
Sent from ICS device!
It works mine is officially unlocked
Sent from my HTC One S using Tapatalk 2
Can u pls post the method to unlock?
Totòòò said:
Can u pls post the method to unlock?
Click to expand...
Click to collapse
I will do later today.
Just need to write a idiot-proof guide!
ascot17 said:
I will do later today.
Just need to write a idiot-proof guide!
Click to expand...
Click to collapse
Imma need that one lol j/k. Thanks for the hard work though.
Sent from ICS device!
ascot17 said:
I will do later today.
Just need to write a idiot-proof guide!
Click to expand...
Click to collapse
Haha thanks u r great!

[HOW-TO][FIX] Repair your IMEI with QPST - updated w/ info

Huge thanks to Peoplearmy for providing me with the knowledge on how to do this.
This guide is intended for those who:
Lost their IMEI and did not back it up
OR
Lost their IMEI, which now reads "0" (one zero)
Operating system needed: WINDOWS
If you are running OSX or Linux you can emulate Windows by using Parallels (OSX) or Virtualbox (Linux)
Things you need:
QPST_2.7_378
Rooted stock ROM (Root66 preferred)
======================START======================​
Download QPST from the link above
Write down your IMEI (you can find it on the back of the phone behind the battery)
Turn on your phone
Open the keypad and dial *#22745927
Enable hidden menu
Go back to the keypad and dial *#7284#
Click Qualcomm USB Settings
Select RMNET + DM + MODEM and click ok
On your computer, open up Device Manager
Locate Ports (COM & LPT) and expand it
You should see the following:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Write down (COM10) (yours may be different, just write it down)
Open up QPST
Select Ports & Add new port...
Enter your port (mine was (COM10) so I will put "COM10" in BOTH boxes)
In QPST select Start Clients and RF NV Item Manager
In RF NV Item Manager go to Settings -> Comport
Select your port from the drop menu and press ok
Under "File" choose Read Supported NV RF Items
From the list of items navigate to number 550
You will see 9 text boxes. This is where you will put in your IMEI. It's weird how it's ordered so follow this EXACTLY. You will need to enter your IMEI from left to right, but backwards. Here's what I mean:
***Make sure the Hex box is checked***
Code:
[B]EXAMPLE:[/B] Say your IMEI is 954091051099226
The boxes would look like so:
8 (This must go in the first box)
9a (The "a" represents the fact that the last pair only consists of 1 number)
45
90
01 (this can be written as 1 as well)
15
90
29
62
Once you enter in the data, press Write NV
Reboot your phone (remember to put your phone back to MTP + ADB by dialing *#7284#)
Your IMEI is now back!
Nice work going through all that :highfive:
=============NEED HELP / HAVE QUESTIONS?=============​
I don't see "Ports (COM & LPT)" in Device Manager. Where is it?
Some of you may have trouble, even after dialing the correct numbers and that's okay. Here's what you need to do:
Open up cmd as Administrator
Type hdwwiz.exe to start the Hardware Wizard
Follow the onscreen prompts until you come to two choices
Select Install the hardware that I manually select from a list (Advanced)
Scroll down until you find Ports (COM & LPT) and select it
Add your phone's ports
Now go into Device Manager on your computer and start from instruction #10 in the first part of this guide.
Any news on fixing _______?
If there are any developments, I'd be posting about them on Twitter
I like this a lot. I want to donate to you.
Thanks for the consideration, but please donate to Peoplearmy instead. He is the main mastermind behind this.
=================FOR KNOWLEDGE=================​
If your previous phone was only capable of 3G - remember we had to dial *228 to activate it or update our PRL? Well, DO NOT dial this on a 4G phone. Constantly dialing *228 on our Galaxy S3s has the potential to fry the SIM cards rendering our phones useless. With 4G phones, the PRL is automatically pushed to the phone via the SIM card and should be given periodic updates by Verizon.
Great info. Thanks for the how to! Third (or fourth) line should be 01 btw . Hope this will ressurect some bricks!
Sent from my SCH-I535 using xda app-developers app
prenedo said:
Great info. Thanks for the how to! Third (or fourth) line should be 01 btw . Hope this will ressurect some bricks!
Sent from my SCH-I535 using xda app-developers app
Click to expand...
Click to collapse
Oh, right. Thanks lol
This should encourage more people to try out the AOSP releases!
One note, in your IMEI example, I think you have 10 instead of 01. If I'm wrong, please delete this post.
Mods, feel free to delete once it's fixed.
Sent from my SCH-I535 using Tapatalk 2
mmalkin said:
This should encourage more people to try out the AOSP releases!
One note, in your IMEI example, I think you have 10 instead of 01. If I'm wrong, please delete this post.
Mods, feel free to delete once it's fixed.
Sent from my SCH-I535 using Tapatalk 2
Click to expand...
Click to collapse
Corrected it lol
This is great development. Will try CM10 in a week
Sent from Verizon Galaxy S 3 w/ XDA APP
It is awesome to know... I may try CM9 or CM10 later...
Just wanted to point out on the QPST download page, don't click any of the "download" buttons (there are multiple on the page). Just scroll to the middle of the page, enter the code, and click on "Qualcomm Product Support Tools (QPST) v.2.7.323"
Hitting the download buttons downloaded a "setup.exe" file. Not sure what it does but it sounds suspicious. Hope that helps and thanks PureMotive for the very thorough guide.
Thanks for your hard work, looks great..
Has anyone who lost their IMEI tried this?
Sent from my Verizon Samsung Galaxy S III with a locked bootloader - F*** YOU VERIZON
weblexa said:
Has anyone who lost their IMEI tried this?
Sent from my Verizon Samsung Galaxy S III with a locked bootloader - F*** YOU VERIZON
Click to expand...
Click to collapse
I just did it yesterday.
This should be moved to Original Development so it doesn't get lost and is truly original.
Sent from my SCH-I535 using xda premium
How to do it from cm10 http://forum.xda-developers.com/showpost.php?p=29434759&postcount=152
PureMotive said:
I just did it yesterday.
Click to expand...
Click to collapse
Awesome. I've been holding off on flashing CM10 until we found a way to fix the IMEI. Think I'll do some flashing tonight.
Sent from my Verizon Samsung Galaxy S III with a locked bootloader - F*** YOU VERIZON
PureMotive said:
Thanks to peoplearmy for providing me with the knowledge on how to do this.
This guide is intended for those who:
Lost their IMEI and did not back it up
OR
Lost their IMEI, which now reads "0" (one zero)
Operating system needed: WINDOWS
If you are running OSX or Linux you can emulate Windows by using Parallels (OSX) or Virtualbox (Linux)
Things you need:
QPST version 2.7 build 323
Rooted stock ROM
======================START======================​
Download QPST from the link above
Write down your IMEI (you can find it on the back of the phone behind the battery)
Turn on your phone
Open the keypad and dial *#22745927
Enable hidden menu
Go back to the keypad and dial *#7284#
Click Qualcomm USB Settings
Select RMNET + DM + MODEM and click "ok"
On your computer, open up Device Manager
Locate Ports (COM & LPT) and expand it
You should see the following:
Write down (COM 10) (yours may be different, just write it down)
Open up QPST
Select Ports & Add new port...
Enter your port (mine was (COM 10) so I will put "COM10" in BOTH boxes)
In QPST select Start Clients and RF NV Item Manager
In RF NV Item Manager go to Settings -> Comport
Select your port from the drop menu and press "ok"
Under "File" choose Read Supported NV RF Items
From the list of items navigate to number 550
You will see 9 text boxes. This is where you will put in your IMEI. It's weird how it's ordered so follow this EXACTLY. You will need to enter your IMEI from left to right, but backwards. Here's what I mean:
***Make sure the Hex box is checked***
EXAMPLE: Say your IMEI is 954091051099226
the boxes would look like so:
8 (This must go in the first box)
9a (I believe the "a" represents the fact that the last pair only consists of 1 number)
45
90
01 (this can be written as 1 as well)
15
90
29
62
Once you enter in the data, press "Write NV"
Reboot your phone
Congrats, your IMEI is back!
Click to expand...
Click to collapse
Frigging AWESOME! GREAT work all!
Sent from a galaxy far, far away....
Can anyone go to Settings -> Status and locate their MEID and tell me how many digits it is? Also, please let me know if you only see numbers or if there are letters as well. I believe a corrupt MEID (Dec & Hex) is the cause of errors such as persistent roaming and I would like to try to find a fix.
my MEID is 14 digits long. IMEI is 15 digits. both correct. on cm10.
PureMotive said:
Can anyone go to Settings -> Status and locate their MEID and tell me how many digits it is? Also, please let me know if you only see numbers or if there are letters as well. I believe a corrupt MEID (Dec & Hex) is the cause of errors such as persistent roaming and I would like to try to find a fix.
Click to expand...
Click to collapse
MEID DEC = all numbers. 18 total
MEID HEX = numbers and letters. 1 letter (x) and 15 numbers. The letter is the 2nd thing listed followed by 14 numbers. For example, 0x13234123412341
larry_walker said:
my MEID is 14 digits long. IMEI is 15 digits. both correct. on cm10.
Click to expand...
Click to collapse
Thank you. Do you have numbers and letters in your MEID or is it just one or the other? Also, is it a single string of numbers?
I forgot to ask, but if anyone is thinking of switching ROMs soon, can you compare the MEID on your first ROM with the MEID on the second ROM? Tell me if they are the same or different. This will greatly help development. Thanks!
PureMotive said:
Thank you. Do you have numbers and letters in your MEID or is it just one or the other? Also, is it a single string of numbers?
I forgot to ask, but if anyone is thinking of switching ROMs soon, can you compare the MEID on your first ROM with the MEID on the second ROM? Tell me if they are the same or different. This will greatly help development. Thanks!
Click to expand...
Click to collapse
Is my MEID corrupted since i have a dec and hex?

[Q&A] [MOD]/[HOWTO] Unlock your native hotspot app [UPDATE 11/10]

Q&A for [MOD]/[HOWTO] Unlock your native hotspot app [UPDATE 11/10]
Some developers prefer that questions remain separate from their main development thread to help keep things organized. Placing your question within this thread will increase its chances of being answered by a member of the community or by the developer.
Before posting, please use the forum search and read through the discussion thread for [MOD]/[HOWTO] Unlock your native hotspot app [UPDATE 11/10]. If you can't find an answer, post it here, being sure to give as much information as possible (firmware version, steps to reproduce, logcat if available) so that you can get help.
Thanks for understanding and for helping to keep XDA neat and tidy!
wtb better instructions.
yeah dude. I was thinking the instructions weren't very well explained.
You need to give some indication as to which version is appropriate to download.
Your initial instructions are pretty vague and leave one guessing/assuming to upload the latest version of the update. Which softbricks the CFRooted S5s (sprint).
....
ALso there are issues with both of the ADB downloads you recommend. the SDK has issues with path length on install. The other installs fine but in windows there is no path 'ie e:\'
so .... how to unbrick
Pherox said:
yeah dude. I was thinking the instructions weren't very well explained.
You need to give some indication as to which version is appropriate to download.
Your initial instructions are pretty vague and leave one guessing/assuming to upload the latest version of the update. Which softbricks the CFRooted S5s (sprint).
....
ALso there are issues with both of the ADB downloads you recommend. the SDK has issues with path length on install. The other installs fine but in windows there is no path 'ie e:\'
so .... how to unbrick
Click to expand...
Click to collapse
Unbrick with odin.
The downloads are named after the version of the rom you are on.
I didn't really recommend those adb, other people did so I provided the link.
Theres video tutorials floating around, not done by me. FWIW, I barely have time to make this mod and I don't even use the stock roms anymore, so I dont really have the time to hold peoples hands. You should do research before you flash anything on any phone.
If you wanna write something up that you feel would make it easier for an inexperienced person to understand, feel free to shoot me a link and I will include it in OP. Until then you are the first person I have heard of to softbrick, I am assuming this is because you flashed the wrong version. This which version do I flash question has been asked several times in the thread, so the answer is there, but to recap:
The last three letters of your rom version should match the three letter code on the download file.
Use the version tagged odex for odexed roms, and deodex for deodexed roms.
The first versions modify your APNs, they should work on any version of the stock rom, however it is unreliable and will need to be reflashed after a PRL update.
Flash the zip from recovery.
I will update the OP to have less directions since they seem to have mislead you, my apologies.
Native Hotspot S5 NE5
Hey I just flashed the 1.4 version for NE5 for the Sprint version of the S5.
My issue is that there is no toggle in the notification pull down. Is there anyway I can add it?
Thanks
Yes there is. I don't know how, but search for variations of "how to add toggles"
Please help
I have a Sprint Note 3 running on 4.4.4 with a Build Number ending with NH7. Does anyone know of a way to get the hotspot to work with this build? Any help would GREATLY BE APPRECIATED!
Dw4yne187 said:
I have a Sprint Note 3 running on 4.4.4 with a Build Number ending with NH7. Does anyone know of a way to get the hotspot to work with this build? Any help would GREATLY BE APPRECIATED!
Click to expand...
Click to collapse
Have you tried Galaxy tools? It works on the S5 with 4.4.4. It is not in the play store, search for it on XDA and install.
No, I haven't used galaxy tools yet. I will give it a try now. Thanks for trying to help man, I appreciate it.
Sprint detailed procedure to unlock your native hotspot?
I have a Sprint Galaxy S5 version 4.4.2, NE5 type stock and want to perform the unlock your native hotspot routine by miked63017.
I have completed his step 1 under prerequisites and the root went fine I think. I am a little concerned since I am a first time rooter and pretty much a
Nooby to the process. I am a little concerned about step 2 and beyond:
Can I use the TWRP from the playstore for this custom recovery?
Can i make a backup with TWRP also or Titanium backup?
Would the .zip be unlockHotspot-1.4-NE5-ODEX.zip and would I flash it with ODIN?
Here is the process as best I can tell from the XDA posts. The asterisks are my notes :
NOTE---
This has been tested by a few people in the original thread with success, your mileage may vary. As always, you are responsible for your phone, and it's warranty.
--PREREQUISITES--
1 Your phone must be rooted, I have followed the guide here http://forum.xda-developers.com/show....php?t=2696537
Check your device model ! Settings -> About device -> Model number. See the third post for exact supported model numbers. If your device is a totally different model, it will not work (may even brick) ! NE5***************
CF-Root is the root for "rooting beginners" and those who want to keep as close to stock as possible. CF-Root is meant to be used in combination with stock Samsung firmwares, and be the quickest and easiest way for your first root.
Donate
CF-Root has been available for many devices (Galaxy S1, S2, S3, S4, Galaxy Note, Note2, Note3, dozens of Tab models, etc!) and has clocked over 22.5 million downloads. This is not even counting custom ROMs that already include it. Don't be a leech, buy me a beer (and use the "Thanks" button!). Imagine if every CF-Root user has donated me $1...
What's installed
- SuperSU binary and APK
- Stock recovery
Installation and usage
Flash the CF-Auto-Root package as PDA in ODIN (details on how to do that are in next post), and your device should reboot into a modified recovery (signified by a large red Android logo) and it will install SuperSU for you and restore the stock recovery, and reboot back into Android.
If you don't get to the red Android logo, boot into recovery manually ("adb reboot recovery", or boot while holding Power+VolUp+Home).
Using this root increases your flash counter and trips the KNOX warranty flag!
Did you see the red Android logo during rooting, but SuperSU does not appear? This may sometimes occur due to left-over files and settings, however, you can usually install SuperSU from Google Play at this stage and it'll just work.
CF-Auto-Root homepage
http://autoroot.chainfire.eu/
CF-Auto-Root main thread
[CENTRAL] CF-Auto-Root
ODIN Installation (detailed)
Follow these instructions to the letter. Do not touch any buttons or checkboxes that are not listed below to touch!
- Download and unzip the CF-Auto-Root-....zip file (see posts below this one)
- If you end up with a recovery.img and cache.img file, you've extracted twice. You need to end up with a .tar.md5 file - don't extract that one
- (USB) Disconnect your phone from your computer
- Start Odin3-vX.X.exe
- Click the PDA button, and select CF-Auto-Root-....tar.md5
- Put your phone in download mode (turn off phone, then hold VolDown+Home+Power to boot - if it asks you to press a button to continue, press the listed button, or run adb reboot download command)
- (USB) Connect the phone to your computer
- Make sure Repartition is NOT checked
- Click the Start button
- Wait for Android to boot
- Done (if it took you more than 30 seconds, you need practise!)
NOTE: Sometimes the device does *not* boot into recovery mode and root your device. Just do the entire procedure again if this happens. If it still will not install root and such, make sure that in Odin "Auto Reboot" is not checked. Then after flashing, pull the battery, and boot with VolUp+Home+Power button to boot into recovery manually. This will start the install process.
New to Samsung? Unfamiliar with Odin? Think all the above is a hassle? Get used to it. It's very simple, and us Samsung folk use Odin (or Mobile ODIN ) for everything! It's so very very convenient once you get used to it. Notice the 30 second comment above? For experienced users, the entire process indeed takes only 30 seconds!
Download
SM-G900F (International Qualcomm): CF-Auto-Root-klte-kltexx-smg900f.zip
SM-G900H (International Exynos): CF-Auto-Root-k3g-k3gxx-smg900h.zip
SM-G900I (Oceania?): CF-Auto-Root-klte-kltedv-smg900i.zip
SM-G900L (Korea): CF-Auto-Root-kltelgt-kltelgt-smg900l.zip
SM-G900M (Middle and South America?): CF-Auto-Root-klte-klteub-smg900m.zip
SM-G900R4 (US Cellular): CF-Auto-Root-klteusc-klteusc-smg900r4.zip
SM-G900T (T-Mobile US): CF-Auto-Root-kltetmo-kltetmo-smg900t.zip
********* SM-G900P (Sprint): CF-Auto-Root-kltespr-kltespr-smg900p.zip **************
SM-G900T1 (Metro PCS): CF-Auto-Root-kltemetropcs-kltemetropcs-smg900t1.zip
SM-G900W8 (Canada): CF-Auto-Root-kltecan-kltevl-smg900w8.zip
SM-G900S (Korea?): CF-Auto-Root-klteskt-klteskt-smg900s.zip
SM-G901F: http://download.chainfire.eu/481/CF-...xx-smg901f.zip
SM-G906K: http://download.chainfire.eu/539/CF-...tt-smg906k.zip
SM-G906L: http://download.chainfire.eu/540/CF-...gt-smg906l.zip
SM-G906S: http://download.chainfire.eu/541/CF-...kt-smg906s.zip
Other models
CF-Auto-Root is not yet available for all models - one stock firmwares for these models become available, let me know, and I'll make the corresponding CF-Auto-Roots. Make sure to check the main CF-Auto-Root site as well, as models may be listed there that are not listed here.
2 You must have a custom recovery installed, I have used the one from here http://forum.xda-developers.com/show....php?t=2697762
Quote:
Originally Posted by Dees_Troy
Most devices can be updated quickly and easily with the TWRP Manager app:
Play Store Link
1) Install TWRP Manager from the Play Store
2) Open TWRP Manager and provide root permissions
3) Hit Advanced->Install Recovery
4) Verify the correct device name on your screen then press Install Recovery if the correct device is showing
Sprint SM-G900P Samsung Galaxy S5
So here is the step by step:
1. Make a backup------with the above TWRP from play store? *****************
2. Download the appropriate zip for you rom version. The three letter code in the filename should match the last three letters of your rom version. Odex version is for odexed roms, deodex version for deodexed roms.
*********File Type: zip unlockHotspot-1.4-NE5-ODEX.zip ************
3. Flash the zip and reboot. ****** Using ODIN? *****************
Thanks to @Scolias for jumping on the zip creation so fast, and being the first one to test the modification (other than me)
**UPDATE***
For the original mod version:
If you update your PRL you will need to reflash and reboot:
Thanks for the heads up @Y.G.
**UPDATE 2***
Added Icon in Notification panel, Thanks @eyecon82 for providing the SQL data for Notification panel. Also added some SQL to try to enable bluetooth and usb tethering, let me know how they work. Download and flash version 1.2 for these updates.
***Update 3***
Since it has already been pulled into a DeOdex for our phone, and the same modification used on the s3 KitKat I figured I would post the services.jar files here too. You need to be on DeOdex for these to work, and note that the latest DeOdex available for our Sprint S5 from @sleshepic already has this built in. These are mostly just for reference, and so all the hotspot downloads are in one easy to find place.
ND2 Services.jar - http://forum.xda-developers.com/atta...8&d=1398719510
NCB Services.jar - http://forum.xda-developers.com/atta...9&d=1398822075
Rename the file to Services.jar for your baseband version, backup your old copy and put the new one in. Using the Services.jar survives PRL updates and does not require the usage of the previous mods.
If anyone needs it I can post the changes in the smali files here, its pretty simple though using grep in tethering.smali, it involves setting a var to 0x0 from 0x1, in the tethering.smali by the dun_required string.
***Update 4***
Big thanks to @rocket321 for helping me out with odexing. I have made a flashable zip that uses services.jar instead of modifying the APN. Flashing the new version will remove all APN modifications from the previous versions and install the new services,jar for odex or de-odex versions. Currently I have only built for ND2 roms, if there is any need for NCB let me know and I will work on it. New files attached below, just flash from recovery and tether . Enjoy and if this helps you please give thanks, and don't forget to thank @rocket321 as well.
Anybody making ROMs feel free to incorporate the files below, otherwise they should be able to be flashed right on top of the rom, assuming there are no modifications to the services.jar file in the desired ROM..
***Update 5***
Added NCB zips, built jars and odexes using my new tool modStudio
***Update 6***
Added NE5 versions to downloads, big thanks to @crawrj and @townsenk for making them
***Update 7***
Added NI3 versions, need testing the size of the ODEX package has shrunk and I am not sure why. Please let me know if you guys notice anything weird, so far so good for me but YMMV. Added back new dynamic way of adding to the notification panel, again let me know how this works out.
***Update 8***
Added new NI3 versions for testing, make a backup before testing JIC
***Update 9***
Cleaned up OP a little
Attached Files
File Type: zip unlockHotspot.zip - [Click for QR Code] (396.5 KB, 1275 views)
File Type: zip unlockHotspot-1.2.zip - [Click for QR Code] (396.8 KB, 2590 views)
File Type: zip unlockHotspot-1.3-ND2-DEODEX.zip - [Click for QR Code] (3.59 MB, 491 views)
File Type: zip unlockHotspot-1.3-ND2-ODEX.zip - [Click for QR Code] (6.72 MB, 969 views)
File Type: zip unlockHotspot-1.3-NCB-DEODEX.zip - [Click for QR Code] (3.45 MB, 246 views)
File Type: zip unlockHotspot-1.3-NCB-ODEX.zip - [Click for QR Code] (6.47 MB, 551 views)
File Type: zip unlockHotspot-1.4-NE5-DEODEX.zip - [Click for QR Code] (3.71 MB, 807 views)
------------File Type: zip unlockHotspot-1.4-NE5-ODEX.zip - [Click for QR Code] (6.96 MB, 1874 views)----------------
File Type: zip unlockHotspot-1.5-NI3-ODEX.zip - [Click for QR Code] (3.72 MB, 252 views)
File Type: zip unlockHotspot-1.5-NI3-DEODEX.zip - [Click for QR Code] (3.72 MB, 248 views)
File Type: zip unlockHotspot-1.6-NI3-DEODEX.zip - [Click for QR Code] (3.72 MB, 74 views)
File Type: zip unlockHotspot-1.6-NI3-ODEX.zip - [Click for QR Code] (7.02 MB, 190 views)
Last edited by miked63017; 16th November 2014 at 08:32 AM.
flashing NI3 appears to disable private mode
new poster, but def been checking this forum out for a while. ive been doing a fair amount of testing to solve my private mode not working issue. i flashed stock rom NI3 using Odin one-click mentioned in the forum, added philz and CFroot and tested root. all is well and private mode is still working.
after flashing the unlockHotspot-1.6-NI3-ODEX.zip mod, private mode is broken. i ran a nandroid back to before flashing the NI3 zip, and all is well. i then decided to install the unlockHotspot-1.6-NI3-ODEX.zip mod again to test my theory, same results...private mode not functional.
i did a thread search and did not see this mentioned previously. just a warning for all those out there that do use private mode and want wifi tether functionality.
also is anyone aware of a workaround?
Thanks!
Hotspot kikat and Sprint Solved Finally...
HOTSPOT sprint for free!!! SOLVED could be at&t Verizon or another COMPANY but need some support I left you my video and a Description But now those people with kikat that application works fantastic
¡¡¡HOTSPOT¡¡¡ Sprint Free, Solved
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
wifi tethering sprints s5 with 4.4.4
So there is no nk4 builds for wifi tethering on sprints s5 with 4.4.4? Really need access to wifi tethering. Any help is appreciated.
randomh3ro1 said:
So there is no nk4 builds for wifi tethering on sprints s5 with 4.4.4? Really need access to wifi tethering. Any help is appreciated.
Click to expand...
Click to collapse
Download Galaxy Tools and select hotspot. Done.
Sent from my icrap 2 using Tapatalk HD
Anybody available to test my new hotspot project? PM me with your email address if you are interested, let me know what build you are on and what device, this should work for any sprint device but I have only tested on my SM-G900P running the NKD Lollipop build.
Forgot to mention, you must be rooted.
Started thread here http://forum.xda-developers.com/spr...apps/app-gs5-native-hotspot-unlocker-t2980905
Just rooted my s5 the wifi tethering zips you have for it don't have the same build #
My device ends build BOA6 it's a sprint s5. (excuse me, I'm a noob)
E2online said:
My device ends build BOA6 it's a sprint s5. (excuse me, I'm a noob)
Click to expand...
Click to collapse
Install the latest version of the app available via the link one post above yours.
Software Version and build number ends in 0A6
Hi today I Rooted my phone and installed a custom recovery but then I saw that you said in your post that the 3 letters or numbers of the rom determined which file I would download but my galaxy s5 software version and build number (which I dont know if the software version or the build number is the rom) ends in 0A6. What should I do or is this mod not for me? Thanks for your help!
Install zip for G900PVPU2BOD3
Is there an install zip for G900PVPU2BOD3?
Tethering Problem on Samsung GS5 au SCL23
Brought this phone from Japan.....i'm having the same tethering issue....the hotspot turns off instantly the moment i turn it on....my phone is not rooted and the build number of my phone ends with NJ1....please help me to fix it.....thanks in advance
Verizon S5 Hotspot Validation Error Msg
So i have a Verizon S5 whenever i try to turn on my Hotspot Validation Error pops up after configuration. i am not in the USA so i cannot contact Verizon and im using a dofferent sim in my GS5. Any solutions to fix my problem???

[UPDATED GUIDE] [BOOTLOADER UNLOCK] Huawei p8 lite 2017 (pra-lx1)

This guide is the only one made and tested personally by me, I am not responsible for malfunctions or any damage to the device, carefully read every single step and everything will be successful
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
[ATTENTION]: Before proceeding, save all your data on your computer and REMOVE ANY KIND OF UNLOCKING (sequence, pin, fingerprint etc ..); remove the sim and the microSD; get a microSD, at least 3/4 giga, where you can upload the files necessary for the procedure.
[NECESSARY CONDITIONS]: Starting from emui 8; have the cell phone charged to 100%; bootloader unlocked and the only procedure I know and working is the one I propose in the guide, the code is obtained by paying 4 €/$, THERE ARE NO FREE ALTERNATIVES.
[PREREQUISITES]: Download -> HiSuite , Dc-Unlocker
At this point we create a folder on the desktop and we will call it ANDROID1O to have a reference point and we will extract the folder contained in the dc-unlocker archive. Once the folder has been extracted, install adb and fastboot in order. At this point we can also install HiSuite.
[PROCEDURE]
[DOWNGRADE] In
order for dc-unlocker to read the bootloader code it is necessary to go back to an older version of android, so let's proceed as follows:
(1) We connect the mobile phone to the computer and start HiSuite, in some cases it will start automatically, and we follow the procedure that will be shown to us to enable debugging. If you have followed everything correctly HiSuite will read your device without problems.
(2) Remaining on HiSuite, click on the UPDATE SYSTEM item, a window will appear, at this point we can press on PREVIOUS VERSION (now I don't remember the precise wording) and we can start the downgrade. It will take a while.
(3) At the end of the downgrade we can start the mobile phone by skipping and ignoring the various configurations by putting the language in Italian as a matter of practicality, let's move on to the next step
[GET BOOTLOADER CODE]
(1) We go to the system settings ---> information ----> we do many taps until the message "now you are a developer" appears ----> we go back ----> developer options and activate usb debugging.
(2) Let's go to HiSuite and in the settings located at the top right we remove the check mark under "Start when it connects to the device" and close it.
(3) We buy the credits to read the bootloader code from https://www.dc-unlocker.com/buy in this way:
- We select the payment method
- We leave "new user account"
- We enter a username that we like it
- We enter an e-mail address to which we can easily access, here we will be sent the credentials to be able to access dc-ulocker
- We enter 4 in the credits box and then type on confirm
- If everything went well, the screen will appear with the credentials and you will receive a copy on the email
(We now have the necessary credits to be able to read the unlock code)
(4) Let's go back to the folder created on the desktop and start dc-unlocker and clicking on the SERVER item we enter the credentials obtained on the site
(5) At this point in the drop-down at the top left we look for the item HUAWEI PHONES
(6) A guide will appear that in any case I will report here:
- In the call keypad type the following combination * # * # 2846579 # * # *
- Press on MANUFACTURE MODE
(7) We can connect the mobile phone and press on the magnifying glass we see on dc-unlocker and if we have done everything correctly the program it will detect our mobile phone
(8) When the phone has been recognized we go to the UNLOCKING section and press on READ BOOTLOADER CODE, if we have done everything correctly we will get a code that we will enter somewhere so as not to lose it, we will need it later
(I leave you the video dc-unlocker official guide on how to unlock bootloader if you have any doubts ---> Help
(9) We disconnect the mobile phone from the computer
(10) After writing down the bootloader code we can close dc-unlocker, connect the mobile phone to a wifi network and search for system updates to return to the latest version of android and therefore to emui8,
if no updates appear, we try to force them by going to settings, wifi, press and hold on the wifi to which we are connected, modify, check advanced options, press on proxy, manual,
in proxy hostname we write localhost and in the port we write 8080 , we press on connect and if we return to the updates item it should find the most recent version. At this point we can update the mobile phone to the most recent version.
[BOOTLOADER UNLOCK]
(1) After returning to the most recent version of android we turn on the mobile phone
(2) We go to the system settings ---> information ----> do many taps until the message "you are now a developer "----> go back ----> developer options and activate the usb debug and the active voice unlock manufacturer
(3) We connect the mobile phone to the computer, press on transfer files, go back to the developer settings and activate the debug , at this point the mobile will ask us to give permissions to our computer and we confirm
(4) Let's go back to the desktop and at the top right click on file, open windows powershell, open windows poweshell as administrator and click on yes
(5) We type the command "adb devices" (write it without quotes), we wait for the end of the 'execution of the command and type again the command "adb devices" (without quotes)
and so we will see a number that corresponds to our mobile phone
(6) We give the command "adb reboot bootloader" (without quotes) and we send
(7) The mobile phone will start in a white screen with an android, the important thing is that two written in red appear with the words PHONE Unlocked and FRP Unlock
(8) From the Widows poweshell screen opened previously we give the command "fastboot oem unlock CODICEBOOTLOADER" (without quotation marks) (CODICEBOOTLOADER refers to the code obtained with Dc-Unlocker) and press on
enter (9) On the cellualre a warning will appear, press once the volume up key and then the power key to confirm the unlocking of the bootloader
(10) When the procedure is finished, it will take very little time, we give the command "fastboot reboot" (without quotes) and when the mobile phone screen it will go black we unplug it
(11) The cellualre will restart a couple of times with a white and other yellow writing, let it go, it will be returned to the factory settings and we will just have to skip all the configuration procedures but set the language in Italian
Finally the bootloader is unlocked!
Here's a free way https://github.com/SkyEmie/huawei-honor-unlock-bootloader
JanoRasho13 said:
Here's a free way https://github.com/SkyEmie/huawei-honor-unlock-bootloader
Click to expand...
Click to collapse
You try this?
pitrazzu said:
You try this?
Click to expand...
Click to collapse
I didn't, but a friend of mine with p20 lite succeeded unlocking!
JanoRasho13 said:
I didn't, but a friend of mine with p20 lite succeeded unlocking!
Click to expand...
Click to collapse
Knowing this sooner I would do it with this tool. Anyway good to knoe but I don't think I would stay with Huawei brand due to their anti-community mods policy.
DunoCZ said:
Knowing this sooner I would do it with this tool. Anyway good to knoe but I don't think I would stay with Huawei brand due to their anti-community mods policy.
Click to expand...
Click to collapse
Yes, absolutelly. Why you prevent me to mod my phone if the phone is mine?
Here is a free alternative to DC-UNLOCKER
I've unlocked the bootloader and installed TWRP on my wife's phone (emui 8 up to date dec 2020)
Here is the program : Potato NV
Follow these instructions : PotatoNV - wiki
To find where the testpoint is located search for pralx1 STF testpoint on your favourite internet search engine.
PS : By the way, the understanding of how it works goes way beyond my technical skills...
Junkilito said:
Here is a free alternative to DC-UNLOCKER
I've unlocked the bootloader and installed TWRP on my wife's phone (emui 8 up to date dec 2020)
Here is the program : Potato NV
Follow these instructions : PotatoNV - wiki
To find where the testpoint is located search for pralx1 STF testpoint on your favourite internet search engine.
PS : By the way, the understanding of how it works goes way beyond my technical skills...
Click to expand...
Click to collapse
And that means I no longer need to downgrade?
gabefufezan said:
And that means I no longer need to downgrade?
Click to expand...
Click to collapse
I didn't need to downgrade. I've just downgraded after the unlock via dload in order to install Android 11 Rom.
JanoRasho13 said:
Here's a free way https://github.com/SkyEmie/huawei-honor-unlock-bootloader
Click to expand...
Click to collapse
I want to try this way. Did it work for you guys?
This is supossed to happen, right?
gabefufezan said:
View attachment 5273573This is supossed to happen, right?
Click to expand...
Click to collapse
It's almost impossible to find it randomly. There are too many combinations...
If you read the issue section of this git, you'll see it by yourself.
Junkilito said:
It's almost impossible to find it randomly. There are too many combinations...
If you read the issue section of this git, you'll see it by yourself.
Click to expand...
Click to collapse
So that means the tool is unefficient?
gabefufezan said:
So that means the tool is unefficient?
Click to expand...
Click to collapse
I think so.
gabefufezan said:
So that means the tool is unefficient?
Click to expand...
Click to collapse
I tried but It didn't work. Unfortunately I had an aplhanumeric code despite that my device was european, and this made impossible the task to find the code ( it would take millions of years to do a minimum percentage of combinations ).
I found it using PotatoNV, it adds the difficult part to disassemble the phone but it is very efficient.
gabefufezan said:
View attachment 5273573This is supossed to happen, right?
Click to expand...
Click to collapse
It is not supposed to happen this way. You have to see something like "fastboot error: wrong password", so you're probably missing some permissions.
Anyway unless you have a numeric code there is virtually zero chance to find it in that way.
In my case I ran the script and in ~4 hours it tried all the numeric codes supposed to fit with my imei, but with no success. Later I discovered that my code was alphanumeric.
Hi everyone, I've just obtained te bootloader code, but now I'm stuck on EMUI 5.0.3, there are no updates available.
I tried forcing it but nothing changes..
On my P8 Lite 2017, I've tried the PotatoNV method which is, in fact, very easy (the most difficult part was to open the back cover, but with an opening tool it's easier) and no need to downgrade. For me the SkyEmie method was just a waste of time.
pitrazzu said:
(10) After writing down the bootloader code we can close dc-unlocker, connect the mobile phone to a wifi network and search for system updates to return to the latest version of android and therefore to emui8,
if no updates appear, we try to force them by going to settings, wifi, press and hold on the wifi to which we are connected, modify, check advanced options, press on proxy, manual,
in proxy hostname we write localhost and in the port we write 8080 , we press on connect and if we return to the updates item it should find the most recent version. At this point we can update the mobile phone to the most recent version.
Click to expand...
Click to collapse
Hello, i'm stuck at this step, i'm back at EMUI 5.0.3 and when i check for update it tells me "no updates"
Worked for me (PRA-LX1) !!
So easy, except from potatoNV (didn't try back panel is broken, as a result I cannot open my phone) all other free solutions have not worked for me.

General TB132FU - FAQ and How to's

Read carefully:​This is a dedicated post for general questions only. If you need technical support about flashing or restoring your device, please use the general topic for TB132FU. Please search for your question below before asking.​​NEW: How to restore the lost Serial Number (on the second response)
How to flash Official global rom​Did my work help you? Be free to buy me a coffee. PayPal me at @alsbvg​
FAQ:
Why so many versions of TB132FU and why so much confusion about the Android system, updates, etc?​
There are currently 3 systems available for the tablet known as TB132FU and is really important to find which one you have.
Fake Global version - Modified Android 12
Official International version - Official Android 12 or latest by Lenovo international
Chinese version - Zui 14 based on Android 12 or latest by Lenovo China
But why so many versions then? The Chinese model is apparently cheaper than the international version, so Chinese sellers are selling online the Chinese model with a modified android version to look like the international version.
How to identify which version of TB132FU I have? By the seller:​If you purchased your tablet online from china like on Aliexpress or from a seller that sells items from china, you most likely have the “Fake” Global version.
If you purchased your tablet on Lenovos’s website or a certified local or national seller in your country, you most likely have the International version. This version usually costs more.
If you purchased from china or anywhere else, but your tablet has a Chinese interface, you have the Chinese version running ZUI 14 or latest.
How to identify which version of TB132FU I have? By the system version:​To make sure which one you have you can also do the following:
On your tablet go to SETTINGS > ABOUT DEVICE > and find your system version.
If it starts with TB132FU_S3 you have the Chinese version running an unofficial android version. The number S3 confirms it’s a modified OS. You will never get any updates.
If it says TB132FU_S0 you have the official international version. This is the official version, so you already have the best compatible system for your tablet. You will get official updates.
If you open the settings and see on the About device menu the system version ZUI, well you have the chinese official device and system.
Can I convert my Chinese TB132FU into the international version?​The answer currently is no. Why? To keep it short: There is a code inside your tablet saying “This is the Chinese tablet” and because of this code you can't install the international android system. Maybe in the future, someone from the community will be able to find that code and change it so the tablet thinks it is the international version.
Can I convert my Official Lenovo-bought TB132FU to the Chinese version to use ZUI?​Same as the answer above. We need to find the code and how to modify it first.
Can I use Lenovo’s Rescue and Smart Assistant software to convert my Chinese TB132FU into the international version?​No. You will brick your device if you try to update your system using this tool.
What are the differences between the Chinese TB132FU and the International version?​Chinese version with ZUI 14
Software: It comes with an Android flavor called ZUI currently based on android 12. Updates will be available.
System languages: English and Chinese only.
Full support for super fast charging with the original charger. Full charge in less than 90 minutes in most cases.
Computer mode: No longer available. The online community is pushing Lenovo to enable this option again.
HDR and L1 status: Fully functional HDR and L1 status for HD content on Netflix in most cases.
Chinese version with Fake global version
Software: It comes with a modified Android 12. No updates will be available.
System languages: All languages available.
Slow charging. Can take up to 3 hours to fully charge.
Computer mode: Available.
HDR and L1 status: Falty HDR on most apps. L1 status for HD content on Netflix.
Official International Version
Software: It comes with Android 12. Updates will be available by Lenovo.
System languages: All languages available.
Slow charging. Can take up to 3 hours to fully charge. (By some reports online) This information hasn't been confirmed yet as the community with the official international version is still small.
Computer mode: Available.
HDR and L1 status: Working HDR. L1 status for HD content on Netflix.
(Under construction)
How-tos and tutorials links:
How to install/restore ZUI on my fake global version?​There are three options available. Please read all 3 below and decide which one you want to try.
OPTION ONE: If you are in a hurry and have technical knowledge download the file our community colleague @Fatperman managed to upload and install it using the SP flash tool. Thread here. A Step-by-step tutorial will be provided by another community member soon. A link will be provided once available.
OPTION TWO: If you are not in a hurry and don't have the technical knowledge to flash the system, there is an easier way, but it takes one or two days.
1 - Download Lenovo’s Rescue and Smart Assistant software here.
2 - Open the software and create an account. Connecting to Google is easier.
3 - Once connected to an account, find the SMALL blue FEEDBACK button on the right side bottom of your screen and click there.
4 - Put your email address and in COMMENTS write that you have problems flashing the Chinese version of TB132FU and that you would like to restore it to the original ZUI 14 software. PLEASE USE YOUR OWN WORDS.
5 - After one or two days (usually), INSIDE the software you will receive a response with instructions on how to install ZUI more easily. Note: You will not get a response via email, you will receive institutions inside Lenovo’s Rescue and Smart Assistant software.
The instructions are pretty simple. READ THEM carefully once you receive them. It's really easy. Basically, they will send you a link to download a special rescue tool and some credentials. Take a screenshot of the instructions as you will need to uninstall the official Rescue software and will lose the message.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Download and install the software they sent, enter using the temporary credentials (the credential are confidential and should not be shared), and follow the instructions on the screenshot you took. You will just need to turn off the tablet, click to restore, and connect the cable. After a few minutes, you will have the original ZUI 14 software.
Thanks again for the amazing help of our colleague @Fatperman for his exceptional work!
NEW - OPTION THREE:
This is by far the easist way to recover or flash the original ZUI 14 on our TB132FU. DON'T CLICK to Restore before reading all the steps.
Step 1: Download the original ZUI firmware here. Extract the files to a new folder. Password is on the table. Read carefully.
Step 2: Download and log in on the official rescue and smart assistant.
Step 3: Select to rescue your device and select as in the picture below:
Step 4: Click to download the firmware.
Step 5: Wait for the download to be completed until you see START Rescue. But don't click there yet. Don't close the program.
Step 6: Click the donwloads icon at the top and identify the folder where the download was saved.
On mine it was saved at C:\ProgramData\RSA\Download\RomFiles
Step 7: Access and Open the folder of the downloaded firmware and DELETE all files there, but don't delete the folder.
Step 8: Go to the ZUI firmware you downloaded before and copy all files inside the folder. Paste them inside the folder where you just deleted all files.
It should look something like this:
Step 9: TURN OFF YOUR TABLET and Go back to the rescue tool and now click the blue button Start Rescue. Follow the instructions on your screen.
Wait for the tablet to restar and DONE. You recovered or donwloaded the original ZUI on your tablet.
How to debloat my recently installed ZUI 14 and remove the Chinese apps and make it look better?​1 - After starting your device, select English and connect to your wifi network.
2 - Once you are set, press the home screen for 3 seconds. Click Desktop Settings.
Switch off the "Left one screen".
Change to "Drawer Style"
3 - Find the setting button and go to General Settings > Language & input > Current Keyboard. Change it to English. (You can download Gboard or another keyboard later)
4 - Go back to the original setting screen and click on the search box. Search for google play services. Click to enable. Then search for Google Play Store and enable it as well.
5 - Before opening the Play store and connecting to your account, go to Apps management and uninstall any apps with Chinese characters you may find. Do not uninstall the HD browser just yet in case you need to download something later. Then restart your device.
6 - Open the Google Play store, and connect your account. Now you can update and download all your apps.
(If you see an error saying Google can't connect please follow the steps in this tutorial)
7 - Unistall HD Browser and done.
How to ROOT my TB132FU running ZUI 14?​DISCLAMER: You will lose your data, so backup. It can brick your device if you don't know what to do. You need to know how to use ADB and fastboot commands. The tutorial is for advanced users that knows how to use ADB. Do your research first. If anything goes wrong, flash the ZUI firmware again.
For this tutorial you will need:
Windows computer with all necessary drivers installed
Know how to use ADB
The latest MAGISK manager app.
The latest ZUI firmware for TB132FU
Some minutes to complete all the steps.
Step 1: Go to SETTINGS Menu and click multiple times on your ZUI version. This will give you Developer access.
Step 2: Go General Settings menu > Developer options
Step 3: Click to enable OEM unlocking, also enable debugging mode.
Step 4: Connect your USB cable and run the following command:
adb reboot bootloader
Step 5: Run the fllowing command:
fastboot flashing unlock
On your tablet Click volume UP to unlock your bootloader
Wait for the confirmation on the tablet screen
Step 6: Run command:
fastboot reboot
This will make your tablet restart. Skip all configuarion steps on your tablet and install the latest version of MAGISK on your tablet.
Step 7: On your computer, go to the Firmware folder and copy the file boot.img to your tablet.
Step 8: Open MAGISK and click Select and patch a file. Find the boot.img you copied and patch this file. Wait for the process to be completed.
Step 9: Connect your tablet to your computer and access the folder Downloads in your tablet. There you will see a new boot image Magisk created. Rename that file to boot.img
Step 10: This is the most important step. You will now flash this boot.img file using the following commands:
adb reboot bootloader - to reboot to fastboot
fastboot flash boot boot.img
Wait for it to complete then:
fastboot reboot
Done, your tablet is now rooted. You can install Magisk again and root checker to make sure.
How to UNLOCK the bootloader of my TB132FU running ZUI 14?​This will delete all you data
Step 1: Go to SETTINGS Menu and click multiple times on your ZUI version. This will give you Developer access.
Step 2: Go General Settings menu > Developer options
Step 3: Click to enable OEM unlocking, also enable debugging mode.
Step 4: Connect your USB cable and run the following command:
adb reboot bootloader
Step 5: Run the fllowing command:
fastboot flashing unlock
On your tablet Click volume UP to unlock your bootloader
Wait for the confirmation on the tablet screen
Step 6: Run command:
fastboot reboot
Done! Your bootloader is now unlocked.
How to Install and use GOOGLE PLAY on my TB132FU running ZUI 14?​First you have to download and install a compatible Google Framework app. Got to APKmirror and search for google framework. Click the one that says Google Services Framework 12. Scroll down and find the version "December 17, 2021 GMT-0300". Install this version. Only this or older version will work. Do not try a different one. It will update automatically eventually.
Then go to settings and search for Google Play and enable the app. Done. You can now log in and use the PLay Store
How to RESTORE lost S/N Seria number?
Step 1 - Go back to ZUI 14. Use one of the options provided in this thread.
Step 2 - Unlock bootloader and OEM. Please refer to the tutorial to unlock the bootloader in this thread.
Step 3 - Once your bootloader is unlocked go and install on your computer MTK META Utility. Link here. Also install HxD here.
Step 4 - Turn off your tablet, disconnect the USB cable and open MTK META.
Step 5 - Click the option Dump NV region. Wait for it to finish reading. It will open a folder.
Step 6 - On the folder that opened, right-click with your mouse the file proinfo.bin and click to open with HxD, or open the software and drag and drop the file there.
Step 7 - Edit the proinfo.bin to add your Serial Number. Change the 12345ABCDE you see to your actual S/N. It's on the back of your tablet on a small sticker.
Step 8 - On the same folder press SHIFT on your keyboard and right-click on an empty space and click OPEN CMD/SHELL terminal here. Or if you use a ADB folder, copy the proinfo.bin file to it so you can flash it.
Step 9 - Turn on your tablet, make sure Debugging is active, connect your tablet to the computer and send these two commands:
adb reboot bootloader
(this will reboot your tablet to fastboot although the line says bootloader)
Once you see the red lines send the command:
fastboot flash proinfo proinfo.bin
And done. You can check in your setting menu if your serial number changed.
Now you can reflash ZUI or the global rom.
thanks man
Great job !
als_bvg said:
How to debloat my recently installed ZUI 14 and remove the Chinese apps and make it look better?​
4 - Go back to the original setting screen and click on the search box. Search for google play services. Click to enable. Then search for Google Play Store and enable it as well.
5 - Before opening the Play store and connecting to your account, go to Apps management and uninstall any apps with Chinese characters you may find. Do not uninstall the HD browser just yet in case you need to download something later. Then restart your device.
6 - Open the Google Play store, and connect your account. Now you can update and download all your apps.
(If you see an error saying Google can't connect please follow the steps in this tutorial)
7 - Unistall HD Browser and done.
(Under construction)
Click to expand...
Click to collapse
bro im on zui14 and uninstall all apps, i download the google services and play store but cant still connecting to google account, i dtryed the google installer and stay on 3%... any help?
did it, first intall google services framwork, then google play and restart before log in
Hi can you please guys share the Chinese version of the Lenovo RSA no need for the personal credentials, I tried too contact them as you said but I haven't received any answers thanks
Swanzzl said:
Hi can you please guys share the Chinese version of the Lenovo RSA no need for the personal credentials, I tried too contact them as you said but I haven't received any answers
Click to expand...
Click to collapse
I don't think there's a Chinese version of the software. The credentials are needed. They may be off for the holidays so you will need to wait. Hopefully someone gets back to you during this week. Otherwise I would recommend writing again.
after install zui14 my device show message "orange state" in boot, I can't update even with vpn.
can i lock bootloader after installing zui14 in chinese version? how to proceed?
Yes you can. If anything goes wrong you can do everything again. I Unlocked the bootloader and tried flashing a recovery, bricked the tablet and used the tool to fix again.
ednardo777 said:
after install zui14 my device show message "orange state" in boot, I can't update even with vpn.
can i lock bootloader after installing zui14 in chinese version? how to proceed?
Click to expand...
Click to collapse
als_bvg said:
5 - After one or two days (usually), INSIDE the software you will receive a response with instructions on how to install ZUI more easily. Note: You will not get a response via email, you will receive institutions inside Lenovo’s Rescue and Smart Assistant software.
Click to expand...
Click to collapse
Where do I find the instructions in the software? Do they appear as a notification? p.s. I sent the message (feedback) two days ago and still haven't received a answer.
als_bvg said:
Sim você pode. Se algo der errado, você pode fazer tudo de novo. Desbloqueei o bootloader e tentei fazer uma recuperação, bloqueei o tablet e usei a ferramenta para consertar novamente.
Click to expand...
Click to collapse
thanks man
eamcardoso said:
Where do I find the instructions in the software? Do they appear as a notification? p.s. I sent the message (feedback) two days ago and still haven't received a answer.
Click to expand...
Click to collapse
It will popup as a notification inside the rescue tool. They might be off for the holidays. I'll share another method tonight.
Third method on how to flash ZUI or restore the tablet added to the FAQ. Enjoy! Also Tutorial on how to root the device.
als_bvg said:
Third method on how to flash ZUI or restore the tablet added to the FAQ. Enjoy! Also Tutorial on how to root the device.
Click to expand...
Click to collapse
This method worked for me thanks bro
After unlocking the bootloader every time you boot up the device the following text will be displayed on the screen:
Code:
Orange State
Your device has been unlocked and can't be trusted..
Your device will boot in 5 seconds
To remove this text warning and 5s delay you need to change the file "lk.img" (firmware folder):
Open "lk.img" with a hex editor (for example, HxD)
In menu toolbar click "Search-Find" and select "Hex-values" tab.
Search 08 B5 0E 4B 7B 44 1B 68 1B 68 02 2B
Copy text 08 B5 00 20 08 BD 1B 68 1B 68 02 2B
Return back to hex editor window then right click on the highlighted items and select "Paste Insert"
The newly modified 24 characters will be displayed in red
Click "File" and select "Save".
Flash the modified "lk.img" in fastboot mode
fastboot flash lk lk.img
ZUI_14.0.691
The firmware already includes Google Services Framework.
/system/system_ext/priv-app/GoogleServicesFramework/GoogleServicesFramework.apk
com.google.android.gsf - version 12-7567768
It is disabled by default.
When you turn on "Settings - Apps management - Google Basic Services" the application status changes to enabled (installed).
ug0o said:
After unlocking the bootloader every time you boot up the device the following text will be displayed on the screen:
Code:
Orange State
Your device has been unlocked and can't be trusted..
Your device will boot in 5 seconds
To remove this text warning and 5s delay you need to change the file "lk.img" (firmware folder):
Open "lk.img" with a hex editor (for example, HxD)
In menu toolbar click "Search-Find" and select "Hex-values" tab.
Search 08 B5 0E 4B 7B 44 1B 68 1B 68 02 2BView attachment 5799489
Copy text 08 B5 00 20 08 BD 1B 68 1B 68 02 2B
Return back to hex editor window then right click on the highlighted items and select "Paste Insert"View attachment 5799501
The newly modified 24 characters will be displayed in redView attachment 5799503
Click "File" and select "Save".
Flash the modified "lk.img" in fastboot mode
fastboot flash lk lk.img
Click to expand...
Click to collapse
Nice work! Do you have any idea where the code for text on the picture below might be? Technically, if we are able to find this code and modify it, it should allow us to use the Offical Global rom. I tried to replicate these steps and these steps with no success. I can flash the image using fastboot but the message doesn't disappear.
Protip: The version TB132FU_USR_S000034_2206180119_MPR0_ROW allows the bootloader to remain unlocked. Useful for tests with the Global version
While the version "TB132FU_USR_S000089_2210200620_MPR0_ROW" will lock the bootloader and the commands to unlock will not work.
Let me know if you have any insights.
als_bvg said:
Protip: The version TB132FU_USR_S000034_2206180119_MPR0_ROW allows the bootloader to remain unlocked. Useful for tests with the Global version
While the version "TB132FU_USR_S000089_2210200620_MPR0_ROW" will lock the bootloader and the commands to unlock will not work.
Click to expand...
Click to collapse
I had TB132FU_S000034_220618_ROW installed.
I flashed ZUI 14.0.691.
And now I can't flash any firmware through the flashtool. I can't flash my backup of TB132FU_S000034_220618_ROW.
That's why I'm still on the ZUI 14.0.691.
I'm getting used to it
ug0o said:
I had TB132FU_S000034_220618_ROW installed.
I flashed ZUI 14.0.691.
And now I can't flash any firmware through the flashtool. I can't flash my backup of TB132FU_S000034_220618_ROW.
That's why I'm still on the ZUI 14.0.691.
I'm getting used to it
Click to expand...
Click to collapse
Awesome. Just a note: The fake global was TB132FU_S300062_220921_ROW, and the version we could use to try removing the code is TB132FU_USR_S000034_2206180119_MPR0_ROW. This version is flashable via the Third method on the FAQ. I tried to flash a backup using the Flash Tool and even splitting the dump using Wwr MTK tool and using the third flashing method, but no success with the backup either.
But If we manage to locate the 'Incompatible software' code we could use an official ROM.

Categories

Resources