Sprint LG G Flex 2 ZV9 root-update [T-Mobile] - LG G Flex 2

I am NOT responsible if you brick your phone while following the instructions given below!!
Credit goes to @randrew87 and @Alex_XV6700
Findings so far for ZV9 Update:
First, the rooted .img can be found here.
Note: I was on ZV6 and followed the instructions here: http://forum.xda-developers.com/g-flex2/general/return-to-stock-ls996-stock-img-t3217089 - to get back to UN-root for ZV6. Once I was un-rooted, I did all OTA updates to ZV9. If you enabled bands using the "Shortcut Master" app in ZV6 before unrooting, all bands enabled will stay when upgraded to ZV9.
Simply follow the same steps for previous ZV6 updates to install ZV9 root.img:
1) Download LG Flex 2 USB Driver (google, this one is easy - it's a 10.9MB LG driver)
2) Download LG_Root.zip from here: https://www.androidfilehost.com/?fid=24052804347788843
3) Go to Settings -> General -> About Phone -> Software Info -> and tap Build Number 7 times until Developer mode is enabled.
4) Unzip the zv9 rooted .img
5) Plug in the phone to computer and copy the firmware file ZV9system.img (make sure to have the "ZV9system.img" file name!!) to the root folder.
6) Unzip the LG_Root.zip
7) Power off Phone, then press and hold volume up while plugging into computer to get into "download mode". Phone screen should show "download mode" briefly.
8) From LG_Root folder run "ports" bat file. it should show you which port the phone is connected to, you are looking for the port for LGANDNETDIAG1, in my case it was COM4, it will be different for you
9) Open a command prompt (windows - run > cmd) and go into the folder that you extracted LG_Root into (cd C:\directory\to\ LG ROOT)
10) Then run the following command "Send_Command.exe \\.\COM4" - No quotes, with COM4 replaced by the port you saw from step 8. You should see something that says "SPECIAL COMMAND: ENTER, LEAVE"
11) then type "id" and press enter (no quotes), you will see something like: uid=0(root) gid=0(root) context=u:r:recovery:s0, if you don't see this repeat step 10 until you do
12) Run following dd command: "dd if=/data/media/0/ZV9system.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0" no quotes
around the command
13) it will take a few minutes and bring you back to the "#" prompt. type LEAVE hit enter
14) your phone will reboot and you will be rooted on ZV9!
This is where things get tricky
Note: It is still being worked out how to get 4G LTE band re-enabled on ZV9!!
The latest testing instructions are given by @randrew87 here: http://forum.xda-developers.com/showpost.php?p=64122754&postcount=385 - When getting to step 2 (2. get your MSL code HERE follow parts I & II of the tutorial.), I was not able to run "Basic Flasher" due to Windows 10 issues. I could also not get my MSL by dialing ##443336772#. I ended up having to start a Sprint LiveChat and give them my phones MEID. I made up some technical excuse on why I needed my MSL number and the chat rep bought it and provided it to me!
Now that I had my MSL code, I was able to complete the steps @randrew87 provided:
3. on the dial pad tap ##3282# (this is data cofiguration hidden menu) and do the next procedure:
- tap lte, a notification window shows, tap edit, MSL code input window shows -->> enter it (is a six digit number)
- tap "LTE enabled" turn to on.
- tap "band priority" select ban 4 and change its value to "1"
-tap "LTE Roaming Enabled" turn to on.
Click to expand...
Click to collapse
However, LTE Roaming Enabled was grayed out for me. I could not figure out a way to turn it on. I am also not able to keep a consistent band for LTE when LTE DOES show up. I've attached some screenshots of the settings I currently have in place to give you all an idea of where I am at.
I wanted to start a new thread on this as I believe more people will be asking about LTE on the ZV9 update. If you are able to get 4G LTE working, please post how you did so!
http://i.imgur.com/vix0aIH.png (band priority screenshot) | http://i.imgur.com/oAgI6MB.png (LTE ##3282# settings) | http://i.imgur.com/XZElcz6.png (phones network settings > mobile networks) | http://i.imgur.com/gR9AiuP.png (LTE Discovery App results)

I was able to get 4G LTE back working on this build! I'll post more details soon.
Click to expand...
Click to collapse
Just got some time to put up what I did. Thanks to @csrow at - http://forum.xda-developers.com/showpost.php?p=64169534&postcount=23 I was able to get my 4G LTE back working on Band 4 with ZV9. Simply following the instructions below assuming you are on the rooted.img for ZV9 and are stuck on 3G still.
Downloaded "Shortcut Master" app from the Play store and searched for "com.lge.sprinthiddenmenu.iot.ltedataroam'. Run that app and enabled bands 2, 4, and 12 to cover the T-Mobile LTE bands. Also enabled data Roaming.

Whar are the major changes from ZV6 TO ZV9?

cadavar said:
Whar are the major changes from ZV6 TO ZV9?
Click to expand...
Click to collapse
This is what I was able to find:
http://pdadb.net/index.php?m=repository&id=1725&c=lg_ls996_g_flex2_android_5.1.1_lollipop_system_update_zv6
Code:
Version: ZV6
Author: Sprint
Category: ROM Update
Language: Multiple languages
Release Date: June 08, 2015
File Time: Jun 12, 15 15:02:35
File Views: 2349 views
ROM Update Details
Google Android 5.1.1 upgrade for Sprint G G Flex 2
Android version: 5.1.1
Build number: LS996ZV6
Description of Enhancements/Fixes
- OS upgrade to Android 5.1.1 (Lollipop)
- Factory Reset Protection
I also found - http://support.sprint.com/support/article/Find-and-update-the-software-version-on-your-LG-G-Flex2/WServiceAdvisory_542_GKB83857-dvc8760002prd#!/
Code:
Find and update the software version on your LG G Flex2
Last Updated: Nov 23, 2015
Software Updates - LG G Flex2
Software updates may be released in stages and can take several days for delivery.
If prompted that an update is available, follow the onscreen instructions to complete the installation.
Check the current device software:
Check the software version
Manually check for updates:
Check for software updates
Current version:
LS996ZV9
Version
Release Date
Description of Enhancements/Fixes
LS996ZV9 11/20/2015
Sprint Global Roaming
Minor UI Updates
App Updates
Bug Fixes
LS996ZV8 08/31/2015
Patch for critical security vulnerability ('Stagefright')
LS996ZV7 07/15/2015
Various bug fixes and enhancements
LS996ZV6 06/08/2015
OS upgrade to Android 5.1.1 (Lollipop)
Factory Reset Protection
LS996ZV5 03/25/2015
Bug Fixes
LS996ZV4 03/13/2015
Initial release
Hope this helps.

cadavar said:
Whar are the major changes from ZV6 TO ZV9?
Click to expand...
Click to collapse
Snapdragon patches and the "vulnerability" patches too, including stagefright and some others.
Great guide man! @tdorid44
Glad you could get there by reading and taking the time to fix the stuff for yourself. Thanks for quoting me and Randrew. We're all about helping the community :good:

Would this work with nTelos as99510a Software Version -- SCR Version is AS995z01_nTelos -- LMY47S Build Number

i cant wait to try this...i was able to get it to wrk on zv9 but i forgot what steps...b4 i bricked my phone

@tdorid44 how did you get your msl code from sprint...they keep asking for the previous owner ...and i also told them need the msl code for testing purposes
.....UPDATE......SPRINT GAVE IT TO ME....JUST SAY U DONT KNOW YOUR NUMBER OR WHO U GOT THE PHONE FROM...AND JUST SAY I ALL KNOW IS THE IMEI AND ALSO SAY AFTER SPRINT UPDATE MSL BOX KEEP POPPING UP....AND VOLIA....YOU GET YOUR MSL CODE.......I ALREADY REMEMBERED MINES...PRETTY SIMPLE TO REMEMBER

So is this for t-mobile or sprint? or either?
Also are there any changes to the Snapdragon going from zv8 - zv9?

So does this work on LS996ZV9? And Do I have to have to downgrade to ZV6 then install the ZV9 image?
Edit1:
Successfully rooted it and unlocked. But now Sprint handsfree activation starts randomly and I don't now how to remove it...
Edit2:
Since I was too lazy to unlock it with all the msl or spc thing. I used this method here
http://forum.xda-developers.com/g-flex2/help/managed-to-gsm-ls996-awaited-apn-t3090484/page7
By @tomtam and it also works well.

ZV9 TOT anyone ??????

working on the ls996, good work.

I am new to LG Gflex2...i followed your instructions but i get stuck at "dd is not recorgnised as an external command or operable program or batch file"
What to do!!!

AS soon as i hit search and it opens, when i attemtp to launch, it force closes. any solution for this?
tdorid44 said:
Just got some time to put up what I did. Thanks to @csrow at - http://forum.xda-developers.com/showpost.php?p=64169534&postcount=23 I was able to get my 4G LTE back working on Band 4 with ZV9. Simply following the instructions below assuming you are on the rooted.img for ZV9 and are stuck on 3G still.
Downloaded "Shortcut Master" app from the Play store and searched for "com.lge.sprinthiddenmenu.iot.ltedataroam'. Run that app and enabled bands 2, 4, and 12 to cover the T-Mobile LTE bands. Also enabled data Roaming.
Click to expand...
Click to collapse

Can i use this to root the zv9 ?
DRosales317 said:
So does this work on LS996ZV9? And Do I have to have to downgrade to ZV6 then install the ZV9 image?
Successfully rooted it and unlocked. But now Sprint handsfree activation starts randomly and I don't now how to remove it...
Click to expand...
Click to collapse
do i use this if im already on zv9

robertlee1989 said:
do i use this if im already on zv9
Click to expand...
Click to collapse
If you want root then yeah why not? You can still use this even if you're on ZV9.

robertlee1989 said:
do i use this if im already on zv9
Click to expand...
Click to collapse
I have the same problem.did you figure it out?

Related

How To: Enable LTE without ROOT/FLASH (model: SM-N900W8)

It's been awhile since I was on the forum but thought I would create a quick post for those who wish to enable LTE on the Samsung Galaxy Note 3 (model: SM-N900W8) where LTE has been crippled. I have compiled the following steps and this should get you up and running without having to ROOT your device, install RECOVERY software or FLASH a new modem.
1) Obtain the device IMEI by pressing *#06# on your dial pad and record this number to reference later.
2) Type in *#272*[IMEI Number]# Where [IMEI Number] is the number you recorded in the step above.
3) You will be prompted with a 3 letter "Regional Settings" menu. Cross reference the 3 letter code with the carrier list at the following link: http://www.samsungis.com/Firmwares/SM-N900W8.html. You do so by hovering over the 3 letter code under the "Region" column. If the SIM you wish to use is from one of these carriers and the carrier supports LTE, we're on our way! The above steps are confirmation, do not modify anything yet!
4) Unlock your device using a preferred unlocking method. Myself, I use http://www.cellunlocker.net which charges $32.99 US for a Samsung Galaxy Note 3 unlock code. It's a reliable site with quick turn-around.
5) Once you receive your unlock code, put in the SIM from the carrier you wish to use and enter the unlock code when prompted.
6) Once unlocked, it may reboot and when at the main menu, follow step 2 and 3 above but this time, select your 3 letter carrier code for the carrier SIM you just inserted then click on OK or INSTALL.
The device will go through a boot up sequence but once complete, you will have LTE enabled. If you do not see this, go into your network settings and you should have the option to select GSM/WCDMA/LTE (auto connect).
Hope this helps those of you wishing to enable the crippled LTE band but do not wish to delve into all the technical jargon related to ROOTING, RECOVERY and FLASHING.
Thanks for this.
Thanks
Thank you for sharing this wonderful trick. I was looking for something like this for a long time.
Please be noted that the secret code *#272*[IMEI Number]# does not exist in many recent models.
You can use Phone INFO ★Samsung★ app > Menu > 'Secret Codes' to check if this code does exist.
THIS WILL ERASE YOUR PHONE...
But it works...

[How To] Write a PRL to V20

WARNING I AM NOT RESPONSIBLE FOR WHAT YOU DO TO YOUR DEVICE
MESSING WITH NV ITEMS CAN CAUSE SERIOUS DAMAGE TO YOUR HANDSET
USING THIS TOOL/INFO TO BREAK THE LAW IS NOT CONDONED
USING THIS TO VIOLATE YOUR CARRIERS TERMS IS NOT CONDONED
I WILL NOT HELP WITH WRITING ANYTHING TO YOUR DEVICE OTHER THEN A PRL
I DO NOT PROVIDE ANY LINKS TO THE PRL OR TOOLS USED. USE GOOGLE SEARCH BOLD ITEMS + XDA BELOW!
1. LG Drivers installed, Diag drivers specifically
2. MSL for your phone
3. QPST installed ( 2.7 or newer preferred )
4. SPRINT/VZW PRL file of your choice ( Sprint is on 54xxx) Universal sprint VZW is 00001 00002 etc, be careful as those can piss off your carrier!
Step 1 - Install your LG drivers and acquire your MSL from sprint.
Step 2 - Google and install QPST.
Step 3 - Find what PRL you want to use and put it in a folder on your computer.
Step 4 - Turn off USB debugging on your phone...go to settings > applications > development > uncheck USB debugging
Step 5 - Open the dialer on your phone and enter ##3424# Turn Diag ON
Step 6 - Connect your phone to the computer and select Charging only if prompted.
Step 7 - Open QPST Configuration wherever you installed it.
Step 8 - Click on "Add new port"
Step 9 - UN-Check "Select Serial and USB/Diagnostic Ports Only"
Step 10 - Select your phone on the list and hit OK.
Step 11 - Select your phone on the list.
Step 12 - Click on the "Start Clients" tab at the top and select "Service Programming"
Step 13 - Select your phone on the list and hit OK
Step 14 - Click on "Read from Phone' in the bottom left
Step 15 - Enter your MSL when prompted and hit OK
Step 16 - Click on the "Roam" tab then click "Browse" and navigate to your PRL file. After selecting your PRL click "Write to Phone".
Step 17 - Your phone will reboot at this point and you will see a couple popups on your computer that you can just hit OK to close. Let your phone reboot and don't close QPST until it is finished writing to your phone.
Step 18 - The PRL should be written to your phone now. You can verify it by going to settings > General > About Phone > Status
Once back on sprint prl, you should be able to UPDATE prl and get it to update to the one for your act/area!
Pleas feel free to post results or if you had to do something different!
This is also another option, but i haven't found a way to get it to locate a prl and write it.
maybe some oter people can figure out how to get this to work from the handset?
Ive tried running in production mode, in dev mode, made changes from user to debug and dev in the build.prop
but its still a blank screen when you try it.
using quick setting app you can search ( SPRO ) and click the 1st entry. This isn't for new users so stay outta this stuff lol!
the full entry is com.lge.lgdmsclient.ui.test.SPROmadmHiddenMenuForSprint
in a nutshell it would be exploiting a prl write test to get it to actually write a dif. prl
Verified that Cmda Workshop Trail will write the prl also, it wasn't mentioned in op due to it is NOT FREE, and will require a purchase after 30 days.
You sir are a boss
verizon users are stuck as usual

[GUIDE] Convert a Nokia 6 Global variant to China variant or vice versa

Code:
/*
* Your data will be lost! Backup before doing this.
* You'll still get OTA updates.
*/
Prerequisites
December 2017 OTA - Download links: TA-1021, TA-1025, TA-1033, TA-1039
OST LA - Download link
China variant's Firmware - Download D1C-562F-0-00CN-B01_Exploit.7z from here
Step 1:
Copy the December OTA to your SDcard or PC.
Once you have taken a backup of your data, reboot to recovery. If you have the December OTA in your SDcard, select "Apply update from SD card" and select the file. Else if you have it your PC, select "Install update from ADB" and use "adb sideload <filename>" to flash it. The installation will fail. Reboot once. Now your bootloader will be downgraded to Nougat.
Step 2:
Extract D1C-562F-0-00CN-B01_Exploit.7z.
Step 3:
Extract OST LA properly. In the extracted folder right click on setup.bat, run it with administrator privileges. After the procedures are completed, open "OST 604 FIH Mobile" in the start menu. Connect your phone to PC and select "Reboot to bootloader" from recovery. Load the .mlf file from D1C-562F-0-00CN-B01_Exploit folder. Uncheck "Check System AP Status" and click next. You'll get a warning that the software versions don't match. Click OK and continue. OST will prompt you to erase data, accept that too. The OST will now flash the software. Wait for it to complete.
Step 4:
Once it is complete, the phone will reboot. Complete the initial setup. Congrats! You have successfully converted your Nokia 6 into a China variant. You can install the Google Play store apk from here.
Some cool features you'll be getting:
Code:
[LIST]
[*]Long Screenshot
[*]Screen recording
[*]Smart alert
[*]Double tap status bar to sleep
[*]Direct call and answer
[*]One hand mode
[*]Network speed indicator
[*]and more ...
[/LIST]
To revert back to global, you can flash TA1021_PLE-558B-0-00WW-B01.7z
Credits: @hikari_calyx
No link
Bit hard with no file link
krankedcaraudio said:
Bit hard with no file link
Click to expand...
Click to collapse
Which link? All links are working. I just checked...
China variant's Firmware - Download link
This file has been removed.
krankedcaraudio said:
China variant's Firmware - Download link
This file has been removed.
Click to expand...
Click to collapse
https://ibb.co/mv2gvK
Try refreshing or use a different browser
Sorry for ftm file missing.
I'm reuploading D1C-562C and D1C-562D (September 2018) firmwares.
Speaking of that, I've replaced the bootloader to older version to create following exploits:
- dm-verity command for flashing recovery and phone easily
- qualcomm EDL mode access possible
- accept bootloader unlock key
hikari_calyx said:
Sorry for ftm file missing.
I'm reuploading D1C-562C and D1C-562D (September 2018) firmwares.
Speaking of that, I've replaced the bootloader to older version to create following exploits:
- dm-verity command for flashing recovery and phone easily
- qualcomm EDL mode access possible
- accept bootloader unlock key
Click to expand...
Click to collapse
:good:
FTM file is not a big deal. It's just a matter of copy-pasting it to the extracted folder
Continue uploading new firmwares!
i do not recommend you guys do this, the chinese version doesn't have google location services and instead uses some chinese location provider which doesn't work with google location history and apps like google fit
Can we convert nokia 6 china to golbal and have NFC working?
No SIM card
Flashed this on my TA-1021. Still no SIM card detected on neither of slots. Problem started after flashing the "homebrew" Oreo firmware. Can anyone help please?
Fakkurai said:
i do not recommend you guys do this, the chinese version doesn't have google location services and instead uses some chinese location provider which doesn't work with google location history and apps like google fit
Click to expand...
Click to collapse
Rlly? which nokia 6 model were you using when you did it? I was thinking to do this on my nokia 6 TA 1039...
---------- Post added at 03:13 PM ---------- Previous post was at 03:05 PM ----------
Akilesh T said:
Code:
Some cool features you'll be getting:
[LIST]
[*]Long Screenshot
[*]Screen recording
[*]Smart alert
[*]Double tap status bar to sleep
[*]Direct call and answer
[*]One hand mode
[*]Network speed indicator
[*]and more ...
[/LIST]
Click to expand...
Click to collapse
Does this Chinese version allow miracast screen mirroring?
I can convert my Chinese version to global variant?
tvi_vladutz said:
I can convert my Chinese version to global variant?
Click to expand...
Click to collapse
Yes. Download TA1021_PLE-558B-0-00WW-B01.7z from here. Rest of the process is the same.
Does this Chinese version allow miracast screen mirroring?
Click to expand...
Click to collapse
Yes. Casting can be done. Am I right @singhnsk?
Akilesh_15 said:
Yes. Download TA1021_PLE-558B-0-00WW-B01.7z from here. Rest of the process is the same.
Click to expand...
Click to collapse
Ok, thank you, I'll try, in case of anything happens, I can rollback that?
tvi_vladutz said:
Ok, thank you, I'll try, in case of anything happens, I can rollback that?
Click to expand...
Click to collapse
Yes, you can switch between CN and WW easily.
But I will receive the future updates?
Help! It's broken... Is stuck at Powered by Android....
Error 7
Error in /sideload/... something...
I have acces to Recovery but i'm noob in phone recovering,I'm into pc's
Sorry for double post.
I really need some help.
Update: I resolved, now i have TA-1025 instead TA-1000, I hope things will be better now, thank you for help.
Update2: I've lost some of the features like the design itself, call recording, screen recording, doube tap to lock but the main problem from CN is fixed, I can use both sim's.
Akilesh_15 said:
Yes. Casting can be done. Am I right @singhnsk?
Click to expand...
Click to collapse
Not sure of Miracast. But it does work with a ton of devices. Not being able to cast to Windows 10 PC since the past few updates. It used to work in the past.
After converting, the OTA work, right?

How To Guide How to enable VOLTE and VoWifi on Realme GT Neo 2 (and probably other Realme devices) when the toggles are not available in SIM info & settings

This post records how I combine many tutorials online and finally enable VOLTE and VoWifi on my Realme GT Neo 2 while the toggles are not available at the beginning.
TLDR: Most Realme devices support VOLTE and VoWifi, but the toggles may not be available in countries where Realme is not sold officially. However, they could be enabled by editing the build.prop file. Root and Magisk are necessary. Using Magisk, services like Google Pay can still work properly (price is potentially less security).
As we all know, most Realme devices support VOLTE and VoWifi, and usually you can find and activate them easily in Settings->Mobile network->SIM-> SIM info & settings. There are many tutorials on the website. However, in countries where Realme is not sold officially, you may not find these 2 toggles. I'm not sure about the exact reason but some are saying that local operators have strict whitelist policy (like ATT and TMobile), and of course a device sold only overseas won't be on it.
My situation​I bought a Chinese version Realme GT Neo 2 and the bands are compatible with Tmobile 4G (link). After getting the phone, I refer to this post to flash the global version firmware. My operator is Mint, a mvno of Tmobile and I cannot find VOLTE or VoWifi toggles. After reading this post and using an app called ForceLTE, I'm able to use 4G data. But whenever I make a phone call, the signal jumps back to 3G and data becomes H+(HSDPA). Recently Mint sent me a message, saying that they are retiring 3G soon and my device is not compatible. After a certain date, my phone will not be able to make/receive phone calls if still relying on 3G.
IMEM check fails on Tmobile, Mint, and ATT websites.
On Xiaomi devices there's a code used to activate VOLTE directly, on Oneplus devices you can use log app, but no similar way can be found for Realme devices.
This method I find could be applied to other Realme devices in other countries when the toggles are not available in SIM info & settings.
Disclaimer​Please try the posts I mentioned first.
This method requires root. Take your own risk for any of your behaviors.
I'm not responsible for any of your losses (including, but not limited to device, finance, data, personal info)
Device info​Realme GT Neo 2 chinese version
Global version firmware (RMX3370_11_C.02) via TWRP
Bootloader locked after flashing the firmware
Steps​1. Unlock the bootloader (refer to this post). Attention: unlock will get all data wiped!
2. Install TWRP (refer to this post) and Magisk (refer to this post).
Attention: even after you flash TWRP.img to the recovery partition, if you keep using stock firmware (no matter what region/version), recovery will go back to stock one after the first time you boot to the system. You'll have to install Magisk (or use 3rd party firmware) to keep TWRP
3. Install MagiskHide props config (refer to this post) to allow us to edit the build.prop file. It is in system partition (ext4, read-only), and can no longer be edited directly (even if you try to remount it in TWRP or ZArchiver with -rw).
4. Install a terminal emulator from google playstore. Android is a linux system, imagine this app as a window you can open on your PC with linux to input commands.
5. In the emulator,
5.1 type "su" and enter
5.2 type "props" and enter
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
5.3 type "5" and enter (Add/edit custom props)
5.4 type "n" and enter (New custom prop)
5.5 type "persist.dbg.ims_volte_enable" and enter (the prop we want to add)
5.6 type "1" and enter (enter your desired option)
5.7 type "y" and enter (Enter y(es), n(o), e(xit) or an option from above)
5.8 type "n" and enter (do you want to reboot now)
5.9 repeat step 5.3-5.8 for the following props:
persist.dbg.ims_volte_enable, type "1" in step 5.6
persist.dbg.volte_avail_ovr, type "1" in step 5.6
persist.dbg.vt_avail_ovr, type "1" in step 5.6
persist.dbg.wfc_avail_ovr, type "1" in step 5.6
persist.radio.rat_on, type "combine" in step 5.6
persist.radio.data_ltd_sys_ind, type "1" in step 5.6
persist.radio.data_con_rprt, type "1" in step 5.6
persist.radio.calls.on.ims, type "1" in step 5.6
In step 5.8 after you finish entering the last prop, type "y" and enter (reboot now)
6. After reboot, check whether 2 toggles are there in Settings->Mobile network->SIM-> SIM info & settings
7. If you still want to properly use apps like Google Pay after root, refer to this post
Test if VOLTE and 4G network work​1. In settings->Notifications & status bar->Status icons, make sure you turn on VoLTE, VoWiFi and Mobile network
2. If you are connected to a wifi and VoWifi works, you should see a small wifi sign above telephone sign in status bar, like this
In addition, for Tmobile, in Settings->Mobile network->SIM1, the Carrier is shown as T-Mobile Wi-Fi Calling (for mvno like mint, don't forget to turn it on on mint website->personal settings first).
3. Disconnect the wifi, you should see "4G" above the network sign, as well as VoLTE sign in the status bar. Turn on data, make a phone call (such as voicemail), minimize the window, check if "4G" sign is still there. Finally, with the call going on, try openning a website like Google. If "4G" sign is there during the whole process, congratulations!
Let me know if this works for you, or if you have any questions/suggestions. Thanks!
Worked for me thanks. Couldn't get volte registered on network. But I now have my toggles.
andrew202 said:
Worked for me thanks. Couldn't get volte registered on network. But I now have my toggles.
Click to expand...
Click to collapse
Hi, thanks for the reply and it's good to hear that. I just updated the steps to check VoWifi and VoLTE, do they work for you? If not, try this post (developer options + ForceLTE) and reboot.
darkhunter9 said:
Hi, thanks for the reply and it's good to hear that. I just updated the steps to check VoWifi and VoLTE, do they work for you? If not, try this post (developer options + ForceLTE) and reboot.
Click to expand...
Click to collapse
No my ims status is not registered. I spoke with my isp telus. Basically device not on list I won't get volte to work. So guessing the only option is some sort of spoofing.
andrew202 said:
No my ims status is not registered. I spoke with my isp telus. Basically device not on list I won't get volte to work. So guessing the only option is some sort of spoofing.
Click to expand...
Click to collapse
Please do not give up hope. Using MagiskHide props you can even change your device name (RMX3370). Probably one plus device would be a good choice to fake.
GOOD JOB! I have a rmx3366, Realme GT Explorer Master Edition with the original chinese version firmware(RMX3366_11_A.16), realme UI v2.0. Do you think I can follow your steps without flashing the global version firmware?
I will be ready to go with Tmobile 2g for voice/text otherwise.
piapiapia said:
GOOD JOB! I have a rmx3366, Realme GT Explorer Master Edition with the original chinese version firmware(RMX3366_11_A.16), realme UI v2.0. Do you think I can follow your steps without flashing the global version firmware?
I will be ready to go with Tmobile 2g for voice/text otherwise.
Click to expand...
Click to collapse
Yes I believe the method should work for most Realme devices, even with UI 2.0.
If you have your bootloader unlocked, feel free to give it a try without flashing global firmware. All properties you set in MagiskHide props config are reversible. Start from step 2.
If your bootloader is still locked, the unlocking process will wipe all data anyway (for personal info security). For a better chance, I suggest to flash the global firmware. I'm not sure whether Chinese version firmware has any restriction (software side) on specific 4G bands used by carrier in US/other countries.
darkhunter9 said:
Yes I believe the method should work for most Realme devices, even with UI 2.0.
If you have your bootloader unlocked, feel free to give it a try without flashing global firmware. All properties you set in MagiskHide props config are reversible. Start from step 2.
If your bootloader is still locked, the unlocking process will wipe all data anyway (for personal info security). For a better chance, I suggest to flash the global firmware. I'm not sure whether Chinese version firmware has any restriction (software side) on specific 4G bands used by carrier in US/other countries.
Click to expand...
Click to collapse
It is helpful! Thank you! My phone does not have a global version, but it works well with Tmobile so far except the volte part. I will try on the Chinese stock firmware.
piapiapia said:
It is helpful! Thank you! My phone does not have a global version, but it works well with Tmobile so far except the volte part. I will try on the Chinese stock firmware.
Click to expand...
Click to collapse
Did a little bit search and it seems what you said is a sad truth. Good luck bro!
help me i have followed you but its not successful
Phan Đức Nam said:
help me i have followed you but its not successful
Click to expand...
Click to collapse
Sorry can you please provide some more info or description?
darkhunter9 said:
Xin lỗi, bạn có thể vui lòng cung cấp thêm một số thông tin hoặc mô tả được không?
Click to expand...
Click to collapse
my neo2 bought in china, i have moved my rom to russia (a.02) and some other versions are not working
Phan Đức Nam said:
my neo2 bought in china, i have moved my rom to russia (a.02) and some other versions are not working
Click to expand...
Click to collapse
Did you do step 5? I didn't see "(active)" behind your "5 - Add/edit custom props". So basically, these props are not added to magisk successfully. In addition, in your screenshot I see 5G signal available. If that's the case there's really no need to worry about 4G VOLTE.
darkhunter9 said:
Did you do step 5? I didn't see "(active)" behind your "5 - Add/edit custom props". So basically, these props are not added to magisk successfully. In addition, in your screenshot I see 5G signal available. If that's the case there's really no need to worry about 4G VOLTE.
Click to expand...
Click to collapse
I did step 5 it didn't work so it failed, my 5G icon is Theme only
Phan Đức Nam said:
I did step 5 it didn't work so it failed, my 5G icon is Theme only
Click to expand...
Click to collapse
Maybe check firmware starting with C and RUI3 then. Sorry I cannot provide a solid solution.
darkhunter9 said:
Maybe check firmware starting with C and RUI3 then. Sorry I cannot provide a solid solution.
Click to expand...
Click to collapse
I am in RUI 3 C.06 RU region but still not working
Phan Đức Nam said:
I am in RUI 3 C.06 RU region but still not working
Click to expand...
Click to collapse
As I said, somehow these custom props are not added to your Magisk successfully, as 5 is not active in your screenshot.
I haven't done any of the steps, but the weird thing is, is VoLTE enabled by default?
I use Google Phone instead of built-in call app, and it shows HD next to the numbers. Does it mean VoLTE is enabled?
My model is RMX3370, Chinese version, running Realme UI 3.0, RMX3370_11_C.08
JohnVo said:
I haven't done any of the steps, but the weird thing is, is VoLTE enabled by default?
I use Google Phone instead of built-in call app, and it shows HD next to the numbers. Does it mean VoLTE is enabled?
My model is RMX3370, Chinese version, running Realme UI 3.0, RMX3370_11_C.08
View attachment 5666647
Click to expand...
Click to collapse
Not necessarily. The best way to check is if you are on a call check if you can still access the internet using mobile data. Without VoLTE, the modem shifts to 3G/2G, and you can't use mobile data simultaneously.
Hey XDA,
I felt obliged to contribute since the following steps worked for me and I got VoLTE and WiFi Calling switches in settings in my Realme GT Neo 2 global version RMX3370 that is on Freedom Mobile in Canada.
All factory, no root required, no bootloader unlock required.
May work on other Realme models.
Source: https://realme-gadgetlife.net/how-to-enable-volte/ (in Japanese, I used Google Translate). I can't remember where I found this link, all credits go to where they are due.
Steps, check pictures in the above link:
1. Enable Developers Options and USB Debugging (search online if needed)
2. Connect your phone to a Windows laptop
3. On the phone choose connection type Transfer files / Android Auto
(first time you will be prompted on your phone if you want to allow USB connection from this PC, choose Yes)
4. On the laptop install platform tools, open a command prompt and change directory to where they are installed
5. Enter command "adb devices"
6. The output should say:
List of devices attached
<your realme serial number> device
7. Enter command: "adb reboot fastboot"
8. The phone will enter the fastboot mode and display language selector. No need to do anything on the phone.
9. Enter command: "fastboot reboot recovery"
10. Nothing changes on the phone, no need to touch it this time either
11. Enter command: "adb devices"
12. The output will be:
List of devices attached
<your realme serial number> recovery
Here I installed realme Software&Driver Update tool from
Software Update - realme (India)
Update the latest software version on your realme phone.
www.realme.com
This may help if you're having issues at this step.
13. Enter the commands listed below ONE BY ONE. For some reason they didn't work when I entered them all together.
adb shell setprop persist.data.iwlan.enable true
adb shell setprop persist.dbg.ims_volte_enable 1
adb shell setprop persist.dbg.volte_avail_ovr 1
adb shell setprop persist.dbg.vt_avail_ovr 1
adb shell setprop persist.dbg.wfc_avail_ovr 1
adb shell setprop persist.radio.rat_on combine
adb shell setprop persist.radio.data_ltd_sys_ind 1
adb shell setprop persist.radio.data_con_rprt 1
adb shell setprop persist.radio.calls.on.ims 1
adb shell setprop persist.data.iwlan 1
adb shell setprop persist.data.iwlan.ipsec.ap 1
adb shell setprop persist.radio.volte.dan_support true
adb shell setprop persist.radio.VT_ENABLE 1
adb shell setprop persist.sys.cust.lte_config true
adb shell setprop persist.rcs.supported 1
adb reboot
14. The phone reboots and the VoLTE and WiFi Calling switches are there in Settings - Mobile Networks - <SIM> !
Note that I am not saying that your phone will display VoLTE or VoWiFi in the notification area but at least the switches (options) become available in settings
Thanks to the authors of the page above!

General TB132FU - FAQ and How to's

Read carefully:​This is a dedicated post for general questions only. If you need technical support about flashing or restoring your device, please use the general topic for TB132FU. Please search for your question below before asking.​​NEW: How to restore the lost Serial Number (on the second response)
How to flash Official global rom​Did my work help you? Be free to buy me a coffee. PayPal me at @alsbvg​
FAQ:
Why so many versions of TB132FU and why so much confusion about the Android system, updates, etc?​
There are currently 3 systems available for the tablet known as TB132FU and is really important to find which one you have.
Fake Global version - Modified Android 12
Official International version - Official Android 12 or latest by Lenovo international
Chinese version - Zui 14 based on Android 12 or latest by Lenovo China
But why so many versions then? The Chinese model is apparently cheaper than the international version, so Chinese sellers are selling online the Chinese model with a modified android version to look like the international version.
How to identify which version of TB132FU I have? By the seller:​If you purchased your tablet online from china like on Aliexpress or from a seller that sells items from china, you most likely have the “Fake” Global version.
If you purchased your tablet on Lenovos’s website or a certified local or national seller in your country, you most likely have the International version. This version usually costs more.
If you purchased from china or anywhere else, but your tablet has a Chinese interface, you have the Chinese version running ZUI 14 or latest.
How to identify which version of TB132FU I have? By the system version:​To make sure which one you have you can also do the following:
On your tablet go to SETTINGS > ABOUT DEVICE > and find your system version.
If it starts with TB132FU_S3 you have the Chinese version running an unofficial android version. The number S3 confirms it’s a modified OS. You will never get any updates.
If it says TB132FU_S0 you have the official international version. This is the official version, so you already have the best compatible system for your tablet. You will get official updates.
If you open the settings and see on the About device menu the system version ZUI, well you have the chinese official device and system.
Can I convert my Chinese TB132FU into the international version?​The answer currently is no. Why? To keep it short: There is a code inside your tablet saying “This is the Chinese tablet” and because of this code you can't install the international android system. Maybe in the future, someone from the community will be able to find that code and change it so the tablet thinks it is the international version.
Can I convert my Official Lenovo-bought TB132FU to the Chinese version to use ZUI?​Same as the answer above. We need to find the code and how to modify it first.
Can I use Lenovo’s Rescue and Smart Assistant software to convert my Chinese TB132FU into the international version?​No. You will brick your device if you try to update your system using this tool.
What are the differences between the Chinese TB132FU and the International version?​Chinese version with ZUI 14
Software: It comes with an Android flavor called ZUI currently based on android 12. Updates will be available.
System languages: English and Chinese only.
Full support for super fast charging with the original charger. Full charge in less than 90 minutes in most cases.
Computer mode: No longer available. The online community is pushing Lenovo to enable this option again.
HDR and L1 status: Fully functional HDR and L1 status for HD content on Netflix in most cases.
Chinese version with Fake global version
Software: It comes with a modified Android 12. No updates will be available.
System languages: All languages available.
Slow charging. Can take up to 3 hours to fully charge.
Computer mode: Available.
HDR and L1 status: Falty HDR on most apps. L1 status for HD content on Netflix.
Official International Version
Software: It comes with Android 12. Updates will be available by Lenovo.
System languages: All languages available.
Slow charging. Can take up to 3 hours to fully charge. (By some reports online) This information hasn't been confirmed yet as the community with the official international version is still small.
Computer mode: Available.
HDR and L1 status: Working HDR. L1 status for HD content on Netflix.
(Under construction)
How-tos and tutorials links:
How to install/restore ZUI on my fake global version?​There are three options available. Please read all 3 below and decide which one you want to try.
OPTION ONE: If you are in a hurry and have technical knowledge download the file our community colleague @Fatperman managed to upload and install it using the SP flash tool. Thread here. A Step-by-step tutorial will be provided by another community member soon. A link will be provided once available.
OPTION TWO: If you are not in a hurry and don't have the technical knowledge to flash the system, there is an easier way, but it takes one or two days.
1 - Download Lenovo’s Rescue and Smart Assistant software here.
2 - Open the software and create an account. Connecting to Google is easier.
3 - Once connected to an account, find the SMALL blue FEEDBACK button on the right side bottom of your screen and click there.
4 - Put your email address and in COMMENTS write that you have problems flashing the Chinese version of TB132FU and that you would like to restore it to the original ZUI 14 software. PLEASE USE YOUR OWN WORDS.
5 - After one or two days (usually), INSIDE the software you will receive a response with instructions on how to install ZUI more easily. Note: You will not get a response via email, you will receive institutions inside Lenovo’s Rescue and Smart Assistant software.
The instructions are pretty simple. READ THEM carefully once you receive them. It's really easy. Basically, they will send you a link to download a special rescue tool and some credentials. Take a screenshot of the instructions as you will need to uninstall the official Rescue software and will lose the message.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Download and install the software they sent, enter using the temporary credentials (the credential are confidential and should not be shared), and follow the instructions on the screenshot you took. You will just need to turn off the tablet, click to restore, and connect the cable. After a few minutes, you will have the original ZUI 14 software.
Thanks again for the amazing help of our colleague @Fatperman for his exceptional work!
NEW - OPTION THREE:
This is by far the easist way to recover or flash the original ZUI 14 on our TB132FU. DON'T CLICK to Restore before reading all the steps.
Step 1: Download the original ZUI firmware here. Extract the files to a new folder. Password is on the table. Read carefully.
Step 2: Download and log in on the official rescue and smart assistant.
Step 3: Select to rescue your device and select as in the picture below:
Step 4: Click to download the firmware.
Step 5: Wait for the download to be completed until you see START Rescue. But don't click there yet. Don't close the program.
Step 6: Click the donwloads icon at the top and identify the folder where the download was saved.
On mine it was saved at C:\ProgramData\RSA\Download\RomFiles
Step 7: Access and Open the folder of the downloaded firmware and DELETE all files there, but don't delete the folder.
Step 8: Go to the ZUI firmware you downloaded before and copy all files inside the folder. Paste them inside the folder where you just deleted all files.
It should look something like this:
Step 9: TURN OFF YOUR TABLET and Go back to the rescue tool and now click the blue button Start Rescue. Follow the instructions on your screen.
Wait for the tablet to restar and DONE. You recovered or donwloaded the original ZUI on your tablet.
How to debloat my recently installed ZUI 14 and remove the Chinese apps and make it look better?​1 - After starting your device, select English and connect to your wifi network.
2 - Once you are set, press the home screen for 3 seconds. Click Desktop Settings.
Switch off the "Left one screen".
Change to "Drawer Style"
3 - Find the setting button and go to General Settings > Language & input > Current Keyboard. Change it to English. (You can download Gboard or another keyboard later)
4 - Go back to the original setting screen and click on the search box. Search for google play services. Click to enable. Then search for Google Play Store and enable it as well.
5 - Before opening the Play store and connecting to your account, go to Apps management and uninstall any apps with Chinese characters you may find. Do not uninstall the HD browser just yet in case you need to download something later. Then restart your device.
6 - Open the Google Play store, and connect your account. Now you can update and download all your apps.
(If you see an error saying Google can't connect please follow the steps in this tutorial)
7 - Unistall HD Browser and done.
How to ROOT my TB132FU running ZUI 14?​DISCLAMER: You will lose your data, so backup. It can brick your device if you don't know what to do. You need to know how to use ADB and fastboot commands. The tutorial is for advanced users that knows how to use ADB. Do your research first. If anything goes wrong, flash the ZUI firmware again.
For this tutorial you will need:
Windows computer with all necessary drivers installed
Know how to use ADB
The latest MAGISK manager app.
The latest ZUI firmware for TB132FU
Some minutes to complete all the steps.
Step 1: Go to SETTINGS Menu and click multiple times on your ZUI version. This will give you Developer access.
Step 2: Go General Settings menu > Developer options
Step 3: Click to enable OEM unlocking, also enable debugging mode.
Step 4: Connect your USB cable and run the following command:
adb reboot bootloader
Step 5: Run the fllowing command:
fastboot flashing unlock
On your tablet Click volume UP to unlock your bootloader
Wait for the confirmation on the tablet screen
Step 6: Run command:
fastboot reboot
This will make your tablet restart. Skip all configuarion steps on your tablet and install the latest version of MAGISK on your tablet.
Step 7: On your computer, go to the Firmware folder and copy the file boot.img to your tablet.
Step 8: Open MAGISK and click Select and patch a file. Find the boot.img you copied and patch this file. Wait for the process to be completed.
Step 9: Connect your tablet to your computer and access the folder Downloads in your tablet. There you will see a new boot image Magisk created. Rename that file to boot.img
Step 10: This is the most important step. You will now flash this boot.img file using the following commands:
adb reboot bootloader - to reboot to fastboot
fastboot flash boot boot.img
Wait for it to complete then:
fastboot reboot
Done, your tablet is now rooted. You can install Magisk again and root checker to make sure.
How to UNLOCK the bootloader of my TB132FU running ZUI 14?​This will delete all you data
Step 1: Go to SETTINGS Menu and click multiple times on your ZUI version. This will give you Developer access.
Step 2: Go General Settings menu > Developer options
Step 3: Click to enable OEM unlocking, also enable debugging mode.
Step 4: Connect your USB cable and run the following command:
adb reboot bootloader
Step 5: Run the fllowing command:
fastboot flashing unlock
On your tablet Click volume UP to unlock your bootloader
Wait for the confirmation on the tablet screen
Step 6: Run command:
fastboot reboot
Done! Your bootloader is now unlocked.
How to Install and use GOOGLE PLAY on my TB132FU running ZUI 14?​First you have to download and install a compatible Google Framework app. Got to APKmirror and search for google framework. Click the one that says Google Services Framework 12. Scroll down and find the version "December 17, 2021 GMT-0300". Install this version. Only this or older version will work. Do not try a different one. It will update automatically eventually.
Then go to settings and search for Google Play and enable the app. Done. You can now log in and use the PLay Store
How to RESTORE lost S/N Seria number?
Step 1 - Go back to ZUI 14. Use one of the options provided in this thread.
Step 2 - Unlock bootloader and OEM. Please refer to the tutorial to unlock the bootloader in this thread.
Step 3 - Once your bootloader is unlocked go and install on your computer MTK META Utility. Link here. Also install HxD here.
Step 4 - Turn off your tablet, disconnect the USB cable and open MTK META.
Step 5 - Click the option Dump NV region. Wait for it to finish reading. It will open a folder.
Step 6 - On the folder that opened, right-click with your mouse the file proinfo.bin and click to open with HxD, or open the software and drag and drop the file there.
Step 7 - Edit the proinfo.bin to add your Serial Number. Change the 12345ABCDE you see to your actual S/N. It's on the back of your tablet on a small sticker.
Step 8 - On the same folder press SHIFT on your keyboard and right-click on an empty space and click OPEN CMD/SHELL terminal here. Or if you use a ADB folder, copy the proinfo.bin file to it so you can flash it.
Step 9 - Turn on your tablet, make sure Debugging is active, connect your tablet to the computer and send these two commands:
adb reboot bootloader
(this will reboot your tablet to fastboot although the line says bootloader)
Once you see the red lines send the command:
fastboot flash proinfo proinfo.bin
And done. You can check in your setting menu if your serial number changed.
Now you can reflash ZUI or the global rom.
thanks man
Great job !
als_bvg said:
How to debloat my recently installed ZUI 14 and remove the Chinese apps and make it look better?​
4 - Go back to the original setting screen and click on the search box. Search for google play services. Click to enable. Then search for Google Play Store and enable it as well.
5 - Before opening the Play store and connecting to your account, go to Apps management and uninstall any apps with Chinese characters you may find. Do not uninstall the HD browser just yet in case you need to download something later. Then restart your device.
6 - Open the Google Play store, and connect your account. Now you can update and download all your apps.
(If you see an error saying Google can't connect please follow the steps in this tutorial)
7 - Unistall HD Browser and done.
(Under construction)
Click to expand...
Click to collapse
bro im on zui14 and uninstall all apps, i download the google services and play store but cant still connecting to google account, i dtryed the google installer and stay on 3%... any help?
did it, first intall google services framwork, then google play and restart before log in
Hi can you please guys share the Chinese version of the Lenovo RSA no need for the personal credentials, I tried too contact them as you said but I haven't received any answers thanks
Swanzzl said:
Hi can you please guys share the Chinese version of the Lenovo RSA no need for the personal credentials, I tried too contact them as you said but I haven't received any answers
Click to expand...
Click to collapse
I don't think there's a Chinese version of the software. The credentials are needed. They may be off for the holidays so you will need to wait. Hopefully someone gets back to you during this week. Otherwise I would recommend writing again.
after install zui14 my device show message "orange state" in boot, I can't update even with vpn.
can i lock bootloader after installing zui14 in chinese version? how to proceed?
Yes you can. If anything goes wrong you can do everything again. I Unlocked the bootloader and tried flashing a recovery, bricked the tablet and used the tool to fix again.
ednardo777 said:
after install zui14 my device show message "orange state" in boot, I can't update even with vpn.
can i lock bootloader after installing zui14 in chinese version? how to proceed?
Click to expand...
Click to collapse
als_bvg said:
5 - After one or two days (usually), INSIDE the software you will receive a response with instructions on how to install ZUI more easily. Note: You will not get a response via email, you will receive institutions inside Lenovo’s Rescue and Smart Assistant software.
Click to expand...
Click to collapse
Where do I find the instructions in the software? Do they appear as a notification? p.s. I sent the message (feedback) two days ago and still haven't received a answer.
als_bvg said:
Sim você pode. Se algo der errado, você pode fazer tudo de novo. Desbloqueei o bootloader e tentei fazer uma recuperação, bloqueei o tablet e usei a ferramenta para consertar novamente.
Click to expand...
Click to collapse
thanks man
eamcardoso said:
Where do I find the instructions in the software? Do they appear as a notification? p.s. I sent the message (feedback) two days ago and still haven't received a answer.
Click to expand...
Click to collapse
It will popup as a notification inside the rescue tool. They might be off for the holidays. I'll share another method tonight.
Third method on how to flash ZUI or restore the tablet added to the FAQ. Enjoy! Also Tutorial on how to root the device.
als_bvg said:
Third method on how to flash ZUI or restore the tablet added to the FAQ. Enjoy! Also Tutorial on how to root the device.
Click to expand...
Click to collapse
This method worked for me thanks bro
After unlocking the bootloader every time you boot up the device the following text will be displayed on the screen:
Code:
Orange State
Your device has been unlocked and can't be trusted..
Your device will boot in 5 seconds
To remove this text warning and 5s delay you need to change the file "lk.img" (firmware folder):
Open "lk.img" with a hex editor (for example, HxD)
In menu toolbar click "Search-Find" and select "Hex-values" tab.
Search 08 B5 0E 4B 7B 44 1B 68 1B 68 02 2B
Copy text 08 B5 00 20 08 BD 1B 68 1B 68 02 2B
Return back to hex editor window then right click on the highlighted items and select "Paste Insert"
The newly modified 24 characters will be displayed in red
Click "File" and select "Save".
Flash the modified "lk.img" in fastboot mode
fastboot flash lk lk.img
ZUI_14.0.691
The firmware already includes Google Services Framework.
/system/system_ext/priv-app/GoogleServicesFramework/GoogleServicesFramework.apk
com.google.android.gsf - version 12-7567768
It is disabled by default.
When you turn on "Settings - Apps management - Google Basic Services" the application status changes to enabled (installed).
ug0o said:
After unlocking the bootloader every time you boot up the device the following text will be displayed on the screen:
Code:
Orange State
Your device has been unlocked and can't be trusted..
Your device will boot in 5 seconds
To remove this text warning and 5s delay you need to change the file "lk.img" (firmware folder):
Open "lk.img" with a hex editor (for example, HxD)
In menu toolbar click "Search-Find" and select "Hex-values" tab.
Search 08 B5 0E 4B 7B 44 1B 68 1B 68 02 2BView attachment 5799489
Copy text 08 B5 00 20 08 BD 1B 68 1B 68 02 2B
Return back to hex editor window then right click on the highlighted items and select "Paste Insert"View attachment 5799501
The newly modified 24 characters will be displayed in redView attachment 5799503
Click "File" and select "Save".
Flash the modified "lk.img" in fastboot mode
fastboot flash lk lk.img
Click to expand...
Click to collapse
Nice work! Do you have any idea where the code for text on the picture below might be? Technically, if we are able to find this code and modify it, it should allow us to use the Offical Global rom. I tried to replicate these steps and these steps with no success. I can flash the image using fastboot but the message doesn't disappear.
Protip: The version TB132FU_USR_S000034_2206180119_MPR0_ROW allows the bootloader to remain unlocked. Useful for tests with the Global version
While the version "TB132FU_USR_S000089_2210200620_MPR0_ROW" will lock the bootloader and the commands to unlock will not work.
Let me know if you have any insights.
als_bvg said:
Protip: The version TB132FU_USR_S000034_2206180119_MPR0_ROW allows the bootloader to remain unlocked. Useful for tests with the Global version
While the version "TB132FU_USR_S000089_2210200620_MPR0_ROW" will lock the bootloader and the commands to unlock will not work.
Click to expand...
Click to collapse
I had TB132FU_S000034_220618_ROW installed.
I flashed ZUI 14.0.691.
And now I can't flash any firmware through the flashtool. I can't flash my backup of TB132FU_S000034_220618_ROW.
That's why I'm still on the ZUI 14.0.691.
I'm getting used to it
ug0o said:
I had TB132FU_S000034_220618_ROW installed.
I flashed ZUI 14.0.691.
And now I can't flash any firmware through the flashtool. I can't flash my backup of TB132FU_S000034_220618_ROW.
That's why I'm still on the ZUI 14.0.691.
I'm getting used to it
Click to expand...
Click to collapse
Awesome. Just a note: The fake global was TB132FU_S300062_220921_ROW, and the version we could use to try removing the code is TB132FU_USR_S000034_2206180119_MPR0_ROW. This version is flashable via the Third method on the FAQ. I tried to flash a backup using the Flash Tool and even splitting the dump using Wwr MTK tool and using the third flashing method, but no success with the backup either.
But If we manage to locate the 'Incompatible software' code we could use an official ROM.

Categories

Resources