Database Info

BenQ E72: collection of findings

Hi all,
...my recently bought BenQ E72 (candidate to replace my Tornado) has kept me busy and below is my findings-log (which most of them I could not find elsewhere, so they may be useful for you as well).
My device is intended for BT Fusion Service (which is no more offered) and this may explain the cheap price at Expansys.UK (I have not bought it from them, but from a different source in the UK offering refurbished ones).
Unfortunately my device was sent without a wired headset (which I am still struggeling to get). My investigations on the dual-use of the mini-USB are so far failing to decode the use of the wires. I suspect that (just like for the Motorola Razor V3) some active electronic parts are required in the headset to communicate with the mobile.
Cleanup \Windows folder:
- Remove locales not needed for MunduIM (fr, it, br, ...directories)
- \Data folder is for beetzRSS -> move to SD card in options menu
- \Java folder for JBED -> move to SD card, change keys in registry at (HKEY_CURRENT_USER\Software\JBlend)
- \Profiles folder for PIE -> move to SD card by changing paths at: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders (may not be persistent if card is not ready at boot time or is removed)
- \Rings folder for ringtones -> also in \windows but are not referenced from there, so they stay here
- \skins folder is for HipCam (HKEY_LOCAL_MACHINE\Software\Emuzed Inc\HipCam)
- \sounds folder is for Camera sounds (HKEY_LOCAL_MACHINE\System\Pictures\Camera\OEM)
- \themes folder is for HipCam (HKEY_LOCAL_MACHINE\Software\Emuzed Inc\HipCam)
- \traveller folder for FIZZ Traveler
(move to SDCard, change items in HKEY_CURRENT_USER\Software\FizzSoftware\MicroClient\TRS)
Ring tones selected from:
\windows\rings\*.*
\windows\ring*.* (no midi)
Install more than one T9 language:
- get packages from http://melgurth.ovh.org/index.php?page=downloads
- download also the package that you already have + the ones you want (so all have the same version)
- install them all, ignore device reboot requests in the meantime
- edit HKEY_LOCAL_MACHINE\T9 Input Method\MUI\Languages string "Available" to contain concatenated (separated by comma) all language numbers
- reboot device
Retrieve hidden settings/options in the setup menus by removing the commenting in the relevant XML files:
- callforwarding.cpl.xml get CFU settings for Data and Fax (Phone->Call Forwarding)
- clckalrm.cpl.xml get Automatic Timezone setting from Network (Clock&Alarm->TimeZone->AutoTimeZone)
- telephonygsm.cpl.xml get Frequencyband selection (Phone->Band Selection = usually "automatic")
- connectgsm.cpl.xml get SMS delivery options (Connections->SMS Service = usually "circuit only")
Info:
This device obviously is configured differently for several operators (see \windows\initflashfiles.dat).
Mentioned interesting strings are Orange, movistar, Flashlite, etc..
Intersting that the BT Fusion does not have an entry here.
Power Drain:
- batteryfunctions do not deliver drain and temperature, but the backup battery voltage is reported
Drain is (rough values):
- 60 mA Display visible
- 90 mA Lowest Light
- 110 mA more
- 120 mA normal
- 130 mA high
- 150 mA highest
BT creates peaks ~ 10 mA on top roughly once per second
WiFi creates peaks ~60 mA similar rate as above
- power off still drains the battery to charge the backup battery but only a few µA (micro Ampere)
Interesting Programs (not linked via .lnk files) in \windows:
- DevHealth.exe will also be called by LogMaster and creates a very elaborate memory and process report. It is named "mem_1.txt" and is either located in the Storage Card root or the main memory root, sized ~ 292kB. Subsequent calls will generate files named mem_<n>.txt where <n> relates to the called number. This file includes the DLL relationship of all active loaded modules, so it is easy for ROM cleaners to sort out the debug ROM remains.
-> This is the key application to investigate further any modifications of Startup options or ROM modifications.
- LogMaster.exe sets various trace and log points, can call netlogctl.exe, swmodemtrace.exe, celogflush.exe, DevHealth.exe, WinsockLogApp.exe, links to LogUtil.dll which relates to logfiles: OSImageVersion.txt, sqpco.log, sqmodem.log, sqdriver.log, sqatcmd.log)
- QDW.exe (internall referenced: "QDW.exe is launched by AppExceptionMonitor.exe", but this .exe is missing, only a dll is remaining) This would read (or write) to files in \Windows\System\ExceptionExtraLogs\. It calls copylog.exe to do the job.
If directly called it asks for a memory card and generates a directory \yyyymmdd_hhmmss\ExceptionExtraLogs\ generating (copying) files ELog.txt KITL.txt qatcmd.log qdriver.log qmodem.log qpco.log verinfo.txt call is hinished with "copy failed".
- PreForWSA.exe is called via HLKM\init\Launch.. and may prepare WinSockLogging (may call \Windows\WinsockLogApp.exe)
- prtscrn.exe generates a screendump of the current state, it is also called via long press of the Vol-Up key and generates a file called scncap<n>.jpg in the "\My Documents" folder (<n> is a sequence number starting at 1).
ToDo:
- remove UMAClient.exe from \HKLM\init\Launch.. but still keep WiFi switched off after reboot. UMAClient cares for the settings in Settings->Connections->WiFi transmission. If not loaded also the WiFi mode to disable WiFi if not connected after <time> does not work.
Candidates for ROM Cleanup:
- CeRegExport.exe (not a valid Windows CE application), executes on PC and links to rapi.dll to communicate with the device.
- D3DMDemo.exe (just displays a boiuncing ball and a rotating colored cube)
- D3DMPerf.exe (displays a colored cylinder, then quits)
- related dlls: D3DM_TI3D.dll, d3dm.dll (not referenced in mem_1.txt)
- AppExceptionMonitor.dll
...more to add here once ROM cooking will be possible
What do these programs do?
- ERS.exe (stays resident, links to coredll.dll only)
...
enjoy + enhance,
bye
tobbbie

hi
thanks for your effort.
i'll study this report and compare with my e72 (by expansys, sim free and app locked, unlocked by utility found on the net)

can't edit the windows files
Thanks for the information. I have been trying to get access to the 'band' setting for some time. However I have been unable to edit the actual xml files. I have tried using SDA unlocker and RAPI and keep getting 'phone is unlockable'. How are you editing these files?

You cannot edit them onboard as they are in ROM. Copy them to your PC, remove the Read-Only attribute, edit and copy it back to the device. It will put in device memory and virtually overwrite the ROM copy. If you delete it on the device the old ROM copy will be used again.

Thanks. That is what I have been trying to do, but every time I get '...could not be placed on device. You do not have permission to create item'. It is like the file system is locked, but I cannot find a way to get past it. Any ideas?

Oh, yes you need to unlock it first. No clue how I did it, it is also not directly mentioned in my old blog. But from there are some links to other sites - you need to look it up there. It is basically the same thing that needs to be done on any WinMo device. Have you tried to search here already (use "E72 Unlock" as a start)?

Thanks. I was able to unlock the phone, copy the xml files off make the changes (removed the commenting), and copy them back to the device. However when I try to use a control panel function that relies on one of these xml files I get 'the control panel document telphonygsm.cpl.xml cannot be loaded. Verify the XML and try loading the control panel again.'
The XML is well formed (as best as I can tell), yet I get this every time I swap in the modified file I get this. If I put the original back in place everything is fine. It looks like the XML is bad, but I can't find anything wrong with it.

Ok, I think I figured it out. In the section that was commented out there were languages that were not relevant to what I had setup on the phone. Once I removed those it accepted the XML files and I was able to view the control panel. Thanks for your help.

Good stuff here. Bump up.

Has anyone found a way to change default hardkey mappings ?

Impressive! Thank you for your hard work. I have the same phone and I am glad we can all share our findings here.
I believe a good source of information will be in the engineering menu which I can't access (yet).
I don't plan on hitting random codes but I can tell you how to enter a code if you want to:
##*[Numbers]#
Be warned, there are codes that will trash your ROM, so be careful!
Also, I am planning on running this on my phone when I have some free time:
http://www.fewbits.com/startmgr/
I will log my findings asap
Cheers from Argentina!

Dear All,
I have a benq e72 since one year. The problem; once I wake up in the morning (three days before); I saw my PDA was not functioning and all applications inside were referred as "not found" icons.
I simply tried to power it off ... not suceeded ... it was completely hanged.
I removed the battery and restarted. dead .. it shows me only BenQ (the very initial screen) .. no more going to windows.
I tried to master reset the device by clicking right key + power button .. but again not succeded ...it shows me "proceeding master reset" .. and nothing proceed up actually.
I tried to update the loader .. by clicking left key + power button .. same situation .. nothing happened.
I tried the KITL too... by clicking home + power button ...
I tried to upgrade the rom to wm 6.1 or 6.5 ... i followed your posts ... but shows me "download ebood error" ... again not succeeded ..
the warranty is finished also ...
Can any one help .. please ....

What if you buy a new battery and shove it in? Would that work?

tobbbie said:
Hi all,
Retrieve hidden settings/options in the setup menus by removing the commenting in the relevant XML files:
- callforwarding.cpl.xml get CFU settings for Data and Fax (Phone->Call Forwarding)
- clckalrm.cpl.xml get Automatic Timezone setting from Network (Clock&Alarm->TimeZone->AutoTimeZone)
- telephonygsm.cpl.xml get Frequencyband selection (Phone->Band Selection = usually "automatic")
- connectgsm.cpl.xml get SMS delivery options (Connections->SMS Service = usually "circuit only")
Click to expand...
Click to collapse
There is the orginal xml files for who forget backup these..

The original files stay in the ROM - even if you "overwrite" them with the changed files. What you see in the \windows directory is an overlay of the ROM filesystem with a directory of the same name where you can write to. So in fact you just "overlay" the ROM file with one on the device. You cannot loose the original file - hence no need for a backup
You detect those files in ROM usually by their Read-only attribute, but to be sure use Totalcommander CE - it shows in the file properties if it is a ROM file.

Fix for GB getting mobile version of website despte desktop UA string

I've noticed since upgrading my Droid X to Gingerbread that many websites that were previously fooled by setting the User Agent (in Dolphin HD) to "desktop" are no longer fooled and can now detect that I'm on a mobile device. This can be quite irritating as the mobile version of many sites is horrible.
To see if this article pertains to you, if you're set for a desktop user agent string, go to http://www.bbc.co.uk and see if you get the mobile version of the page or the desktop version. If you get the mobile version despite your user agent setting, this hack may help you.
When this first happened to me I decided to find out how the sites were detecting the fact that I'm on a mobile device. Generally a website only knows what you tell it about yourself, and what you tell it about yourself is 100% in the HTTP headers your browser sends (or that get added by a proxy server if you use one). So the first logical place to look was to see what all headers the browser was sending. Note: for any who might object that it also knows things about you by your cookies, your cookies are actually sent as HTTP headers as well.
I have a CGI script on one of my web servers that I use to see what all headers my browser is passing. There are plenty such scripts/sites on the web -- here is a decent one (it's not mine) if you want to see what your browser sends. Examining the headers, one stuck out like a sore thumb:
Code:
HTTP_X_WAP_PROFILE='http://uaprof.vtext/com/mot/mb810/mb810.xml'
Geez, that's a pretty dead giveaway isn't it? I checked a phone running FroYo and it does not send that header, so that further confirms this is the header these sites use to detect me as a mobile (since they don't detect me as a mobile under FroYo and do under Gingerbread).
I then Googled HTTP_X_WAP_PROFILE and found numerous coding resources where they suggest looking to see if that header exists and/or is set to anything in order to detect mobile browsers. Bingo.
Great - so how to get rid of it? My first thought is that since the header is clearly identifying me as a Droid X (MB810), there has to be something in the phone that is providing the data. Since I observed that the header is present whether I access the net via WiFi or via 3G, that further confirmed that this is all happening in the phone and not being added by Verizon in transit.
The first sensible place to look was /system/build.prop. Turns out that the first sensible place to look was the right place to look as I found this line:
Code:
ro.mot.hw.uaprof='http://uaprof.vtext/com/mot/mb810/mb810.xml'
Well, that's about as perfect as you could ask for. Not knowing if the phone might be touchy about completely removing this setting, my first attempt was to change the line to read like this:
Code:
ro.mot.hw.uaprof=''
I found that you must reboot the phone for the setting to take effect (no real surprise there). Unfortunately, afterward, when I examined the headers being sent by the browser, they now contained this:
Code:
HTTP_X_WAP_PROFILE=''
With that setting, the various websites still detected me as a mobile browser (which you would expect). Next I tried changing the build.prop to this:
Code:
ro.mot.hw.uaprof=
* Note - there is nothing after the equal sign - not a space or anything, just a carrriage return.
This (pleasantly) resulted in the HTTP_X_WAP_PROFILE header being completely absent -- the ideal outcome. Happily, the various websites that were detecting me as a mobile no longer did. Success!
In the interest of being thorough, I tested just removing the ro.mot.hw.uaprof setting altogether (by commenting out the line). I figured that probably was not the best plan, but I wanted to see what would happen. When I did that, the following header was the result:
Code:
ro.mot.hw.uaprof='http://uaprof.motorola.com/phoneconfig/MotoMB200/profile/MotoMB200.rdf'
Interesting default value -- and of course I was again identifiable as a mobile device.
So, the fix for this is pretty simple. The exact property that needs to be modified in your build.prop would of course vary if you're not running a Motorola build, but I'd expect it to be readily identifiable. Of course you have to be rooted to do this, and of course you should make a backup copy of your build.prop before you modify it, and of course you should think about what your fallback recovery is going to be if you foul up your build.prop and end up in a boot loop or something. Can you boot into Recovery and then fix the file with ADB, etc. -- it all depends on how your phone is set up.
For those that like step-by-step, here's precisely what I did:
Open Root Explorer (or other "root aware" editor)
Navigate to /system
Mount system as R/W
Open build.prop in text editor
Find the ro.mot.hw.uaprof line
Put a # at the beginning of the existing line (to make it into a comment)
Insert a new line below the existing line that says "ro.mot.hw.uaprof=" (without the double quotes -- no characters after the equal sign)
Save and exit editor
Mount system as R/O
Reboot phone
By doing it this way I end up with a backup copy of the original string in case I want to easily put it back. Root explorer automatically saves the original build.prop as build.prop.bak, but if you're really cautious you might want to actually make a copy of the file to your SD card or something.
At this point, in Dolphin HD, with my user agent string set to Desktop, all of the web sites that had begun seeing me as a mobile device now serve the normal desktop page (as desired). If I want to see the mobile version (for some reason) I can just switch Dolphin HD back to Android mode (user agent string) and then I get the mobile version.
Hope this helps someone. Sorry it was so long -- almost everything I write up is.
P.S. If you do this successfully on a non-Motorola phone, post here and let others know.

firstly,, BIG THANKS
I am running a GB2.3.3build.596 P3D 2file root DroidX..
when i open ROOT EXPLORER in r/w mount and open the build.prop i can not type anything..and this mobile site only crap was the reason i took 2 days of forum reading at 3 forums before i went ahead and sbf'd back to froyo from a stock Verz 2.3.3GB to then root ,and then to install the 2 P3D files to have a .596 build GB rooted phone
any suggestions, maybe another editor ware? total newb

[Q] Trick WP7 to use Data connection as Wi-fi(larger marketplace downloads) ?

Trying to see if this is possable....
What I would like to do, is make my WP7 device see my Data Connection as a Wi-Fi connection to download larger apps from the Marketplace when I am away from home or away from a wi-fi connection. Something that could be turned on and off.
Is this even possable ?
I hate the fact because I am on the road I can't buy a new App because of it's size, even tho I am on a full 5 bar 3G connection.....
Thoughts ?

My guess is that there is a throttling bit set in the registry for the Zune app for when not on wifi - I just can't seem to find it.

There's a value which appears to control this limit specified a file in \My Documents\Zune\PimentoCache\Keepers. The files there are downloaded to the phone based on your carrier and OEM, but they can be temporarily replaced (this is how my OEM Marketplace XAPs work).

GoodDayToDie said:
There's a value which appears to control this limit specified a file in \My Documents\Zune\PimentoCache\Keepers. The files there are downloaded to the phone based on your carrier and OEM, but they can be temporarily replaced (this is how my OEM Marketplace XAPs work).
Click to expand...
Click to collapse
Are you saying that what I am looking for IS possable ?
If so where do I get started with this ?
I'd love something that could go in the Settings menu to enable a 50mb limit or something, that I can turn off when I am done.

You'll need to interop unlock and/or root your phone so you can browse/edit the registry.

Moved TO WP7 Q&A​
Thread moved to WP7 Q&A. Please post in the correct section in the future. Posting in the dev section just to try to get extra exposure is not allowed.​

GoodDayToDie said:
There's a value which appears to control this limit specified a file in \My Documents\Zune\PimentoCache\Keepers. The files there are downloaded to the phone based on your carrier and OEM, but they can be temporarily replaced (this is how my OEM Marketplace XAPs work).
Click to expand...
Click to collapse
Now that this thread is back open.. I would like to see if it's possable to get to the bottom of this.
What my dream is here... A little app that is in the Settings that will allow you to change your settings to allow the limit to extend to 50-100mb for a short time. This will allow users to download a larger App from the marketplace.
One of my biggest hates on WP7 is when I am on the road (not at home or by a wi-fi network), I can not BUY a new app because of it's size limits.
Has anyone tried this ? And do you need root access on your device for an app to be able to change this setting (by just flipping a switch) ?
Thanks !

Check this thread for more details that might be useful.
http://forum.xda-developers.com/showthread.php?t=1602691&highlight=download+limit

DavidinCT said:
Now that this thread is back open.. I would like to see if it's possable to get to the bottom of this.
What my dream is here... A little app that is in the Settings that will allow you to change your settings to allow the limit to extend to 50-100mb for a short time. This will allow users to download a larger App from the marketplace.
One of my biggest hates on WP7 is when I am on the road (not at home or by a wi-fi network), I can not BUY a new app because of it's size limits.
Has anyone tried this ? And do you need root access on your device for an app to be able to change this setting (by just flipping a switch) ?
Thanks !
Click to expand...
Click to collapse
I had the same issue and the solution to it is to edit the xml files LKG_MOConfig.xml and Downloaded_MOConfig.xml located at /My Documents/Zune/PimentoCache/Keepers. The download limit is set to 20 and can be edited to a higher value. I recently downloaded an 80 MB file through my 3G network. The only downside it seems is the files get replaced by the OS in every few days. To get round that I have made the files read-only and testing it. Will let you know how it goes.
And yes it will require a rooted or a fully unlocked phone.
Thanks to ken52787 for figuring out the files and his thread http://forum.xda-developers.com/showthread.php?t=1602691

You don't need full unlock, just interop_unlock with a file browser.
Testing myself...

drkfngthdragnlrd said:
Here's the pre-edited files with a 200 MB limit & the "Read Only" attribute set in case it works. You don't need full unlock, just interop_unlock with a file browser.
Testing myself...
Click to expand...
Click to collapse
I'd remove these files. These are only valid for T-Mobile and my guess is it'll cause some problems if someone tries to buy apps with them on another network.
If someone can't figure out how to edit the xml themselves and change a single number, they probably shouldn't be messing with this to begin with.

Can these be put in a XAP ?

ken52787 said:
I'd remove these files. These are only valid for T-Mobile and my guess is it'll cause some problems if someone tries to buy apps with them on another network.
If someone can't figure out how to edit the xml themselves and change a single number, they probably shouldn't be messing with this to begin with.
Click to expand...
Click to collapse
Good point, had a brain fart & didn;'t think these files might be courier dependent, files removed...

Actually, I'd really appreciate it if multiple people (different carriers in particular, I already have the OEMs) posted their PimentoCache XML files. I'm working on an app that will allow people to easily switch their Marketplace settings (OEM, MO, max download size, etc.).

GDTD - Let me get these files off my Verizon Trophy and I will post so you can add to your xap. I'm off for work so it may not be until later today.

Here are the VZW files. I already edited them for 200MB download limit.
View attachment 1016305

[Guide] Multi User Setup for Kitkat 4.4.4 (for noobs)

This tutorial will show you how to setup your device as admin and configure other user profiles (this is important when you're not the owner). Your device maker disabled multiuser functionality in Kitkat, like on my Lenovo Tab 2 A10-70L? - then this for you. At least, that's where this procedure is tested on. Afaik, this should work on Lollipop too. But will it work for your device? - No clue, you tell us!
Basically it's an accumulation of what I've read here (thanks again) and my personal experience as a noob myself.
So far, this guide is incomplete and I'm hoping for some pro tipps to perfect it. Please help me sort out the unclear parts highlighted in red and I'll update this post accordingly. The sooner the better, because this actually is not my device and someday soon I'll have to pass it over to my mom since it's my present to her, I'm only setting this slab up...
Preconditions:
Android treats the first account created as "owner". Only owner will have root privileges if installed accordingly (=admin).
Root permission and a file manager (e.g. ES File Explorer) are required for this fix so go get that first. For the Lenovo Tab 2 A10-70L, I followed this beautiful guide, besides that, I can't help much here.
Unable/uninstall all bloatware (I was adventurous with Titanium Backup with no probs so far, but some crap remained from looking at new user folders; still in search of a vendor/device-specific "save to remove" list)
Install ALL apps you and the other users suppesdly need. This will avoid the need to redownload and reinstall all the apps for each and every user wasting storage. Think thrice, usually it'll be more than desired, but better you do it instead of a DAU... Each user will be able to install apps later though. Full control over user restrictions can be applied for "guest profile" only.
Steps:
In file explorer, go to /system/ and open build.prop
Check if you have anything like the below text (you shouldn't, otherwise edit accordingly) and add these lines at the end of it:
Code:
# Multi Users
fw.max_users=[COLOR="DarkGreen"]X[/COLOR]
fw.show_multiuserui=1
Replace X with your desired digit (up to 7?)
(I've read somewhere that 7 users is maximum that system can handle, but I haven't tried)
Save, reboot and log in as "owner" (your profile)
Go to Settings>Device and say hello to new item "Users"
Create new users and/or a guest profile (important: write down the order in which you created them!)
All new user profiles are now shown as "new user" no matter what you wrote in the profile properties (only guest will be shown as "guest"). Mind you, this also applies for the lockscreen!
In file explorer, go to /data/system/users/ to find your users' folders containing some system files (what exactly?) Now guess what - the order of the numbered folders and #.xml files match the order you created them. "0" is you, the owner.
Open each .xml file and replace "Owner" with "Your Name" and "New user" with "Username"
Put the device to sleep, trigger lockscreen and log in to each user profile and
Pull down shortcut menu from top right and enable autorotate
Go to Settings>Users>Security, check all settings and note each unlock-code
Disable background services like sync, location, etc. that could potentionally drain battery where applicable
Rinse & repeat 8) for all new profiles
Install "Multi-User App Share" and set apps per user. (Or is there a newer app or more hackish approach without the need for xposed or compiling stuff etc.?)
= DONE =
If you want the user icon in status bar, follow http://forum.xda-developers.com/gal...-users-mod-t3017782/post58659868#post58659868 (haven't tried that ).

Well... build.prop fixes are working, at least for me. It's good alternative to multi-user app from Xposed (we don't want to use Xposed too much...).
Still tried with decompiling & compiling framework for fixing icon problem, and... in framework-res there is not status_bar_expanded_header.xml file, se we are in deep ****.
I am working on: LP

[Root] [HD 10 Suez] Remove parental control applications/restrictions [May 2019]

I've tried to complete this mission a few times, each ending in disaster...until now.
Summary:
The parental control applications too are restrictive. Amazon made some slight changes to the Android code which gave these applications full, and in my opinion unnecessary control of the tablets and the security options. Disabling or uninstalling them can and will eventually cause you to reflash stock firmware. That's because they are labeled as "device/profile owner applications". Located in /data/system is 'device_owner.xml'. That file configures the apps as device/profile owners and doing anything to stop them results in a disaster, often unfixable without reflashing stock. The idea was to trick FireOS by switching device owner applications right from under it's nose. It's not easy but it is possible.
This will be along guide. one or two of these steps may not even be necessary but I am going to present them as I did them and was successful. Beyond that you are free to remove steps and try the process at your will. However any deviation from the guide can result in damage to your device. Even this guide may result in damage to your device, because not everyone's results will be the same. From here on out you are on your own and I am not responsible for any damage done to your devices. This will take some time, if you do not have it it is recommended you do not continue until you do. It will not be possible to pause for extended periods through this guide. This WILL REQUIRE a factory reset. You must be rooted or have an unlocked tablet to complete the guide. You must also have the Google play store and related services installed as system applications in priv-app folder. For this it's recommended to flash a pico Gapps package in TWRP.
THIS OPERATION WAS PERFORMED ON A DEVICE THAT WAS DEODEXED ON 5.6.1.0 WITH A 5.3.6.0 (LATEST FIREOS) BOOT IMAGE. This will not likely work on a stock ROM that has not been deodexed.
Instructions:
1. You need to download an application that uninstalls system applications. Any one of them will do so long as it works. You will absolutely need to download an application that does this. Also download a root file explorer.
2. Uninstall the application called 'Managed provisioning.' then open a shell using a terminal emulator or ADB. Then type the commands below.
Code:
adb shell
su
settings put global device_provisioned 0
3. Go to settings > security > device administrator and make sure Google pay is a device administrator. This is very important and you must not miss this step.
4. Using a root explorer, go to /data/system and copy device_owner.xml to your internal storage. If using your PC please use Notepad++, though it's recommended you complete the following tasks on your device.
4b. Go to system/etc/permissions/ and open handheld_core_hardware.xml in a text editor. Find the line that says: <!-- feature name="android.software.managed_users" --> and replace that line with the one below, save the file and reboot:
Code:
<feature name="android.software.managed_users" />
5. Then go to your internal storage and open the file device_owner.xml in a text editor. Replace the lines of text with the text below, making sure the format is NOT changed from the original and save the file:
Code:
<profile-owner package="com.google.android.gms" name="Google Play services" userId="0" component="com.google.android.gms/com.google.android.gms.mdm.receivers.MdmDeviceAdminReceiver" />
6. NOTE: this step CANNOT be done in TWRP. Again Using a root explorer, copy and paste device_owner.xml to /data/system, overwriting the current one (remember to back up the original). Set permissions to rw (0600) and reboot. If there are no errors or popups and your home and recents button still work after rebooting, continue to the next step.
7. Reboot to recovery and clear/wipe cache and dalvik and reboot system. When booted, if no pop errors from anything, open the uninstaller app you downloaded and uninstall Parental Controls and Parental monitoring. Again reboot to recovery and wipe cache and dalvik and reboot system.
8. Again if no errors, reboot to recovery again and this time do a factory reset. This step is very important and cannot be missed. It is absolutely required that the data be wiped on the device or the device and system will recognize it is no longer owner of said device and it will start shutting you out of security and other options on the device.
9. When rebooted, Open the shell in terminal emulator again or ADB and type the following command below. A reboot should not be necessary when done:
Code:
su
settings put global device_provisioned 1
10. Download an activity launcher (I use activity manager and yes you need to pay a slight fee to use the root part of the launcher, but it's worth it.) Scroll settings and search for 'generic lockscreen set' and long press it to open it with root access. All of your lock screen options should be open and available to you even after removing the parental applications. If they are congratulations you have now remove parental applications and the restrictions that came with them from your device. Go back to /data/system and you will also notice that the device_owner.xml is gone. Killing 2 birds with one stone. If any lockscreen options are blocked then you have failed to properly remove the parental applications and the policies that go along with them.
NOTE: You may need to deactivate 'smart lock' and trusted gms as that may interfere with some lock screen options.
I'll let you guys decide, but I think the device is vastly improved in terms of performance and in Internet connectability after removing these applications.

Edit: forgot a step. Can't believe I did that.
Sent from my Amazon KFSUWI using XDA Labs

I must have goofed. I did a factory reset and now my tablet is back to stock. lol
Edit: I take that back. I tap on parental controls and nothing happens lol
Edit2: Yep It's running good. You were right too. It seems like it runs a lot smoother without amazon's parental controls.

Shadow Death said:
I must have goofed. I did a factory reset and now my tablet is back to stock. lol
Edit: I take that back. I tap on parental controls and nothing happens lol
Edit2: Yep It's running good. You were right too. It seems like it runs a lot smoother without amazon's parental controls.
Click to expand...
Click to collapse
Cuz I'm pretty sure without the support of manage profiles, the parental applications actually cut down on a Wi-Fi speed. I don't think it's cutting short the connection, rather the metrics and scripts associated with other apps and configs, cause it to constantly disconnect and reconnect. also fireOS doesn't like when you have more than one network saved at a time, in the same area. You can also delete etc/wifiloglevels.sh if you are on the deodexed rom. Can also set the value of the line in build prop for wifi rssi levels to ""

Shadow Death said:
I must have goofed. I did a factory reset and now my tablet is back to stock. lol
Edit: I take that back. I tap on parental controls and nothing happens lol
Edit2: Yep It's running good. You were right too. It seems like it runs a lot smoother without amazon's parental controls.
Click to expand...
Click to collapse
Add: you Dan probably reinstall the managed provisioning app. It might let you create a work profile I am not sure. I am going to experiment with that more tomorrow.

I'd like to add that I am on the same battery cycle as the other day when I started this process at 65%. I haven't been as aggressive in my use as much as normal this weekend but I haven't had to put it on the charger all well and usually I have to do that a few times a week if I really use it.

I forgot to mention that step 4 and possibly 5 seem jumbled.

Shadow Death said:
I forgot to mention that step 4 and possibly 5 seem jumbled.
Click to expand...
Click to collapse
Are you using the app?

DragonFire1024 said:
Are you using the app?
Click to expand...
Click to collapse
I'm not sure what app you mean. What I meant was this part:
Using a root explorer, go to /data/system and copy device_owner.xml to your internal storage and open it in a text editor. If using your PC please use Notepad++, though it's recommended you complete the following tasks on your device. Open system/etc/permissions/handheld_core_hardware.xml in a text editor.
Click to expand...
Click to collapse

Shadow Death said:
I'm not sure what app you mean. What I meant was this part:
Click to expand...
Click to collapse
I'll fix it tomorrow. Thanks.

DragonFire1024 said:
I'll fix it tomorrow. Thanks.
Click to expand...
Click to collapse
I figured out what you meant but I thought I would point it out just in case others can't.

Shadow Death said:
I figured out what you meant but I thought I would point it out just in case others can't.
Click to expand...
Click to collapse
Worded it a bit better and broke it apart somewhat. I definitely saw where one would get lost right there. Good eyes!

Hi Dragon Fire,
Is it now working ok? I have the HD8 (7th generation) and would like to eliminate the restrictions of the parental control.

masterted said:
Hi Dragon Fire,
Is it now working ok? I have the HD8 (7th generation) and would like to eliminate the restrictions of the parental control.
Click to expand...
Click to collapse
Every thing is working so far as I can see. There is a slight delay with some apps that require a lock screen be activated for them to work. I use a WiFi app my provider provides and it requires a screen lock. It failed to recognize it at first. Clearing the providers app cache and restarting it worked.
Sent from my Droid RAZR M using XDA Labs

Hi guys, I got a couple questions about this process...
Could someone who did it already check to see if it is possible to change the language of the tablet? On my own tablet, I get a message about parental controls being required, however my own tablet was rooted and debloated a different way last year. In my case, I don't care about changing the language, and I'm totally satisfied with the results I got.
I ask because I'd like to do this "stock Android look & feel" process for a friend (they do not even have an Amazon account, nor want one), but they need to be able to switch language between English and Spanish on a regular basis, and I don't want to mess up their tablet with mods that would prevent this.
Thanks for any insights you guys might have on this... really appreciate the hard work and vast knowledge represented here on XDA.

Kids Dashboard free app and free cloud (Basically you are making dashboard kiosk like small mdm).
PLAY STORE LINK : https://play.google.com/store/apps/details?id=com.tabnova.aidashboard
Cloud Login: https://cloud.kidsdashboard.com
Main site : http://www.kidsdashboard.com/
Complet free app enjoy dont waste money