Root LG Velvet (LM-G900EM) - LG Velvet Guides, News, & Discussion

Finally got root on LG-Velvet LM-G900EM
Here is how i did.
I know...this is finally little bit complicated, but i dont want to copy something that possibly affects copyrights or other stuff.
Here is all that i've learned and done.
So you should be able to root also.
Prerequisites:
(allways have a valid backup)
- Unlocked LG-Velvet-Bootloader (on android device)
- Installed Python (on pc):
https://www.python.org/
- Unpacked Steadfast kdz-tools (on pc):
https://github.com/WildOne69/kdztools
(Modify the undz.py: Put a # in line 26. This should look like this:"#import zstandard as zstd"
Otherwhise you will get an error:"ModuleNotFoundError: No module named 'zstandard'"
- Downloaded Velvet Stock-Rom (kdz) (on pc)
http://lg-roms.com/lg-firmware/lmg900em/g900em10c/9081
1. Download the kdz-rom from lg-roms (on pc)
(this uses a special download-tool which may be spain)
Finally you should have something like:
G900EM10f_00_0716.kdz
2. Extract a dz-file from the kdz-file. (on pc)
Go to the directory where you've stored the kdz-tools.
example:
python unkdz.py -f G900EM10f_00_0716.kdz -x
(this gains something like G90010f_0_user-signed-ARB0_COM1_EU_OP_0716.dz in a subdirectory)
3. Extract the boot.img from the extracted dz-file. (on pc)
example:
python undz.py -f c:G90010f_0_user-signed-ARB0_COM1_EU_OP_0716.dz -s 40
..now you've got a boot_a.image hopefully in a subdirectory.
This is the original boot.img
4. Copy the boot.img to your mobile. (from pc to android device)
5. Run Magisk and patch the extracted boot.img (on android device)
6. Copy the magisk_patched.img to your computer again. (from android device to pc)
7. adb reboot bootloader (on pc)
Keep in mind that the Velvet is an A/B device, so we need to flash the boot.img twice.
8. fastboot flash boot_a magisk_patched.img
(on pc)
9. fastboot flash boot_b magisk_patched.img
(on pc)
10. fastboot reboot
(on pc)
11. Open Magisk and pray that you've root.
(on android device)
Have fun.
BR
Mike
PS:
Be careful locking your bootloader afterwards. As i've observed locking the bootloader again resets the mobile back to factory-defaults...so all your work has been gone.
I'm not responsible if you brick your device or it takes harm in any case.
Updates: As LG launched updates twice meanwhile i was forced to patch the boot-partitions again.
Simpliest way to do the updates with root:
- Start the update with LG-Bridge.
- After the download of the new KDZ is complete copy it out of the temp-directory (to extract the boot_a.img later)
- Do the phone-update with LG-Bridge. (Now your phone is in an unrooted state again)
- proceed with steps 2-11
- Jobs done (Actual android-version rooted)

Is there anyway to get this to work with lg-G900UM

Catrock31 said:
Is there anyway to get this to work with lg-G900UM
Click to expand...
Click to collapse
I think the way is the same.
Just depends on the possibility to get an bootloader-unlock file fron LG or not.

MikGx said:
I think the way is the same.
Just depends on the possibility to get an bootloader-unlock file fron LG or not.
Click to expand...
Click to collapse
Guys, can you upload the stock ringtones ?
Thks

Nice work OP. Works like a charm. I remember the pre-Nougat days when rooting an Android device was, for the most part, a simple affair. Nowadays, with A/B partitions, Forward Error Correction (FEC), system-as-root, etc., rooting is tedious to say the least. Nice job figuring this one out. :good:

Hi!
The undz.py returs this error message :
File "undz.py", line 173
if cmd.batchMode:
^
TabError: inconsistent use of tabs and spaces in indentation
Can you help?

Bandetos said:
Hi!
The undz.py returs this error message :
File "undz.py", line 173
if cmd.batchMode:
^
TabError: inconsistent use of tabs and spaces in indentation
Can you help?
Click to expand...
Click to collapse
Just a fast shoot before quittin the day:
Kdz-filename you downloaded is exactly the same as i wrote? (If you got a newer version the kdz-riddle would start again...as this unkdz/undz project is some years old and discontinued.)
@the 1st step this error looks like another dz or corrupt dz-file. (Give the download and kdz unpack a 2nd try?)
Another guess could be that you maybe choose another slice (-s number)?
There are 2 boot-images as velvet is an a/b device.

MikGx said:
Just a fast shoot before quittin the day:
Kdz-filename you downloaded is exactly the same as i wrote? (If you got a newer version the kdz-riddle would start again...as this unkdz/undz project is some years old and discontinued.)
@the 1st step this error looks like another dz or corrupt dz-file. (Give the download and kdz unpack a 2nd try?)
Another guess could be that you maybe choose another slice (-s number)?
There are 2 boot-images as velvet is an a/b device.
Click to expand...
Click to collapse
it doesn't working
maybe attach the boot.img file

if you check the version of python you got:
Python.3.8_3.8.1776.0
?
to be honest...dont want to take care on a file-store in the internet.

LG launchned a new FOTA...and a new kdz.
Turned out that flashin the old magisk_patched.img (boot.img) extracted from the old kdz causes UI-performance problems if you reflash it after update.
Usually magisk-SU should work if you prevent reboot after install the FOTA and then flashing magisk in the newest app version to the inactive slot.
Failback: if you run into this performance-issues, you can use lg bridge (!!!hopefully have an existing LG-Switch-Backup!!!) to set back your Velvet to defaults.
You can copy out the new kdz during the extraction-phase of LGBridge (so you dont need to download it extra) from your win-userprofile (c:\users\username\AppData\Local\LG.....\Update(something)\*.kdz
...and extract the new boot.img as described in the first article.
Install magisk and root the boot.img also as described first.
Then restore your latest LGSwitch backup and all is fine.
At the moment im working on a twrp-solution based on the work of mauronofrio from twrp-team. I can boot TWRP (based on avicii .13) but i am only able to backup (metadata and super).
Not gettin userdata and boot(recovery). Thi is hard as the velvet seems to be treble&A/B.
...i'm no dev...just like to play lego. )

Either way, it's good to see that we at least have a few people trying to figure out things with this device. Honestly, I still carry my Redmi Note 7 Pro with me every day because of how much I miss being able to download a custom rom etc.
MikGx said:
LG launchned a new FOTA...and a new kdz.
Turned out that flashin the old magisk_patched.img (boot.img) extracted from the old kdz causes UI-performance problems if you reflash it after update.
Usually magisk-SU should work if you prevent reboot after install the FOTA and then flashing magisk in the newest app version to the inactive slot.
Failback: if you run into this performance-issues, you can use lg bridge (!!!hopefully have an existing LG-Switch-Backup!!!) to set back your Velvet to defaults.
You can copy out the new kdz during the extraction-phase of LGBridge (so you dont need to download it extra) from your win-userprofile (c:\users\username\AppData\Local\LG.....\Update(something)\*.kdz
...and extract the new boot.img as described in the first article.
Install magisk and root the boot.img also as described first.
Then restore your latest LGSwitch backup and all is fine.
At the moment im working on a twrp-solution based on the work of mauronofrio from twrp-team. I can boot TWRP (based on avicii .13) but i am only able to backup (metadata and super).
Not gettin userdata and boot(recovery). Thi is hard as the velvet seems to be treble&A/B.
...i'm no dev...just like to play lego. )
Click to expand...
Click to collapse

Catrock31 said:
Is there anyway to get this to work with lg-G900UM
Click to expand...
Click to collapse
Hello.
I have a LG from Freedom Mobile.
Does this procedure work on their phones?
I'd like to use the dual sim capabilities.

JackTheMan18 said:
Hello.
I have a LG from Freedom Mobile.
Does this procedure work on their phones?
I'd like to use the dual sim capabilities.
Click to expand...
Click to collapse
I did that on an LM-G900EM. (No dual sim)
As i did it just usin the stock-rom, theoretically dual sim capability shoudnt get lost.
All this stands and falls with the possibility to unlock the bootloader.
If LG provides an unlock-code the rest should work.

Good
Very good, you are very good. As a LG velvet Chinese user, I sincerely hope that you can develop a ROM compatible with China’s 5G

BruceLee131 said:
Very good, you are very good. As a LG velvet Chinese user, I sincerely hope that you can develop a ROM compatible with China’s 5G
Click to expand...
Click to collapse
There was no development.
In my 1st article i just described how to extract, rooted and flashed the original stock boot.img
This should be possible for everybody who:
- got the bootloader unlock code from lg
- isnt afraid to flash boot.img to the mobile
BR
M.

MikGx said:
Just a fast shoot before quittin the day:
Kdz-filename you downloaded is exactly the same as i wrote? (If you got a newer version the kdz-riddle would start again...as this unkdz/undz project is some years old and discontinued.)
@the 1st step this error looks like another dz or corrupt dz-file. (Give the download and kdz unpack a 2nd try?)
Another guess could be that you maybe choose another slice (-s number)?
There are 2 boot-images as velvet is an a/b device.
Click to expand...
Click to collapse
I'm also getting this error. I did try a second time following your steps to a tee and still getting the same error.

MikGx said:
There was no development.
In my 1st article i just described how to extract, rooted and flashed the original stock boot.img
This should be possible for everybody who:
- got the bootloader unlock code from lg
- isnt afraid to flash boot.img to the mobile
BR
M.
Click to expand...
Click to collapse
Hi, I have bought LG Wing. I have entered into Developer Mode and I have activated OEM unlocked option. So do I need a bootloader unlock code? Can I root LG Wing with your instructions?

How did you get adb to recognize your device once you put it in download mode?

MikGx said:
I think the way is the same.
Just depends on the possibility to get an bootloader-unlock file fron LG or not.
Click to expand...
Click to collapse
I'm sorry if this is a dumb question, but if it isn't possible to get an unlock code for the G900UM (U.S. model), is there a way to gain SU status/root without unlocking the bootloader? I'm sure there's no exploit to unlock the bootloader without LG code, but I saw in some other threads (different makes/models) discussion of gaining SU via fastboot without unlocking the bootloader? So if my main concern is knowing everything that is on my phone and eliminating privacy/security vulnerabilties, can I gain SU status without unlocking the bootloader?

MikGx said:
There was no development.
In my 1st article i just described how to extract, rooted and flashed the original stock boot.img
This should be possible for everybody who:
- got the bootloader unlock code from lg
- isnt afraid to flash boot.img to the mobile
BR
M.
Click to expand...
Click to collapse
I got the unlock.bin file from LG.
I'm not afraid to flash any partition...
it's simply impossible to flash twrp-3.4.0-g900em-dom133.imgù
writing 'recovery'...
FAILED (remote: Cannot flash this partition in unlocked state)
And even boot with that recovery
downloading 'boot.img'...
OKAY [ 0.718s]
booting...
FAILED (remote: BootImage is Incomplete)
Finally i'm not able to extract boot.img form LG kdz stock rom

Related

Huawei Mediapad t3 7

Hello folks,
Bought a Mediapad T3 7 from Walmart recently. Has anyone found root yet? I tried all of the Kingroot, etc. APK's so far. Don't waste your time. Tried them all.
If our magicians here can find root, I'd love it!
Thanks,
Rich
Got the same request. Tried KingRoot and iRoot, cause you never know
I'd imagine it's coming one day or another. Tablet isn't that old yet.
Just a matter of somebody compiling twrp for it, I'd imagine..
I would love to know if any progress has been made. I need TWRP and an AOSP ROM. I love the devices look and feel, and its bluetooth operability. but absolutely DESPISE the UI and how it operates.
+1. Decent little tab but no built-in ext4 format for external SD, hoping for root. Getting it to run on stock android would be neat, too.
I tried the online root solutions-none of them work. Just tried Kingroot today and no good.
Same here I got a new huawei t3 10" great tablet by the way but no way I can root it.. I've tried all the Internet suggested ways and nothing seem to work at all but I manage to get the Device ID typing a code in the dialer.
Mercer99 said:
Same here I got a new huawei t3 10" great tablet by the way but no way I can root it.. I've tried all the Internet suggested ways and nothing seem to work at all but I manage to get the Device ID typing a code in the dialer.
Click to expand...
Click to collapse
hi, are you able to make calls on your T3 10? If yes, can you let me know your firmware details, thanks
buddimanv said:
hi, are you able to make calls on your T3 10? If yes, can you let me know your firmware details, thanks
Click to expand...
Click to collapse
Hi there, about that yes I can make phone calls with it I bought the Model with the 4G option (there is 3 models from the same Huawei tablet one of them is WiFi only and the other two can make phone calls) also I managed to unlocked the bootloader by using the device ID I got earlier and Huawei website.
mine is AGS-L09 model
Thanks Mercer99, appreciate it (for your device security, can you remove the image as this has your IMEI)- we have the same model, but different firmware.
AGS-L09C199B002 is “Saudi Arabia Oman Kenya Cameroon Jordan Qatar Ghana Android 7.0 EMUI 5.1” region.
AGS-L09C127B031 is “Greece Hungary United Kingdom Nonspecific Android 7.0_EMUI” . The dialer/calling function is disabled on this firmware - confirmed on Vodafone and EE network.
Is there any way you can extract the OEMINFO from your device and share it with us. This should enable me to debrand the phone if I can find your firmware (downloaded EUROPEAN version with Firmware finder already – so really need an European OEMINFO).
My phone is still locked to Vodafone so I am not sure whether I can flash the firmware or even need root to flash a different OEMINFO (bootloader is unlocked already).
Sorry buddimanv I would love to help but I don't know how
OEMinfo
Last time I did was with P9 Lite - changing from EE to European firmware using a tool (I think SRK Tool or “VNS-L21/22/23/31 [EU] Toolkit [0.0.0.12] All-in-One”) but it was rooted - seems like root is needed before anything. I think the process would be to change the firmware on tablet as well.....
I was hoping as bootloader is unlocked, we can retrieve OEMINFO from fastboot or something and debrand….would be good if anyone can clarify.
Possible Root Solution
Anyone prepared to test rooting method below?
How to install Magisk with ADB
How to install Magisk with ADB
Does not require the availability of custom recovery and root-access
1. Delete all other types of root-access and restore the partition image of the boot partition
2. Download Magisk v13.6 or later and download / unzip from the firmware partition image of the boot partition
3. Unpack the Magisk archive, put the boot image of the boot partition in the same folder, and rename it to boot.img
4. Rename the folder with the name corresponding to the architecture of your device (arm, arm64, chromeos, x64, x86), in magisk_inject
5. In the terminal, change the current directory to the folder with Magisk and run the following commands one at a time:
PHP:
adb shell "rm -rf / data / local / tmp / *"
adb push META-INF / com / google / android / update-binary common magisk_inject boot.img / data / local / tmp
adb shell "cd / data / local / tmp / magisk_inject; mv ../common/*.; chmod 755 *; sh ../update-binary indep boot_patch.sh ../boot.img; mv ../bin/ busybox busybox "
adb pull /data/local/tmp/magisk_inject/new-boot.img
adb shell "cd / data / local / tmp; rm -rf * .img magisk_inject / *. img update-binary bin common"
6. To flash the resulting boot partition image with the name new-boot.img
PHP:
fastboot flash boot new-boot.img
7. Download the system and make sure that Magisk Manager is installed and that its version corresponds to the version of Magisk. If not, manually install the correct version of Magisk Manager.
Click to expand...
Click to collapse
or follow original post
Via Magisk Manager (Only support v14.0+):
This method does not need root, and also does not require a custom recovery.
However, you MUST have a stock boot image dump beforehand, and also be able to flash the patched boot image, either through fastboot/download mode or ODIN
Install the latest Magisk Manager
If you're planning to flash the patched boot image through ODIN, go to Settings > Update Settings > Patched Boot Output Format, and select .img.tar. For normal users leave it as the default .img
Press Install > Install > Patch Boot Image File, and select your stock boot image file
Magisk Manager will now patch your boot image, and store it in [Internal Storage]/MagiskManager/patched_boot.img[.tar]
Flash the patched boot image to your device and reboot. Voilà!
Check whether Magisk Manager is installed and the version matches the latest one in the OP
If for some reason Magisk Manager isn't installed/upgraded automatically, please install it manually
Click to expand...
Click to collapse
Bootloader can be unlocked easily of course (code is given immediately) - here
I am tempted but trying to control myself as I don't have a copy of my existing firmware to revert back via dload method if something goes wrong. However, AGS-L09C199B003 firmware is available, so if it fails, I believe you can always go back to stock. I have a feeling this will work.
Took a risk and its rooted now - Magisk v14.0 installed fine and seems to be working (need to test further). Also, Vodafone unlocked the device now for me
Challenge now is to debrand so as to enable functions which has been disabled by Vodafone (namely calling).
Would appreciate if anyone can help - need OEMINFO from another region so as to change the firmware, especially European one or even other UK network who does not disable calling.
Could not contain myself…. In my quest to debrand so I can have a dialer/phone calling function, downloaded a firmware (either from FF Team or on the internet), tried flashing system.img file to see if it installs the dialer as it would not install extracted ones and it did not work. So tested with the boot.img and it did work but phone kept rebooting to eRecovery.
Restoring from TWRP (incomplete/untested) backup did not work. Can’t install any other regional firmware because of OEMINFO. eRecovery can’t find any firmware. The only thing – TWRP/Stock Recovery, eRecovery or bootloader!
Chatted with Huawei support and they won’t give me a link to download the firmware – want me to send for repair, which I don’t really want to – too much hassle and they may end up blaming me anyway….lol He agreed to upload one to their website if he can find one.
I would appreciate if anyone can give me an OEMINFO or link to EUROPEAN firmware with a dialer….. I think European one is AGS-L09C127B031CUSTC127D002 – would appreciate if anyone can share the file with me.
Mercer99 said:
Hi there, about that yes I can make phone calls with it I bought the Model with the 4G option (there is 3 models from the same Huawei tablet one of them is WiFi only and the other two can make phone calls) also I managed to unlocked the bootloader by using the device ID I got earlier and Huawei website.
mine is AGS-L09 model
Click to expand...
Click to collapse
More details and links for the bootloader please, I really need a tutorial-thanks.
dorpmuller said:
More details and links for the bootloader please, I really need a tutorial-thanks.
Click to expand...
Click to collapse
What a buncha bull**** the huawei site is. I got there and when I go to type the product id# in it brings up a calculator dialog with digits I don't even have on the calc.
Done with huawei. All night effing with this is enough. Won't deal with bizarre companies. I'll stick with my samsungs.
I tried... thanks for all of your responses.
Rich
dorpmuller said:
What a buncha bull**** the huawei site is. I got there and when I go to type the product id# in it brings up a calculator dialog with digits I don't even have on the calc.
Done with huawei. All night effing with this is enough. Won't deal with bizarre companies. I'll stick with my samsungs.
I tried... thanks for all of your responses.
Rich
Click to expand...
Click to collapse
I got stuck on the calculator part too. I didn't see the parenthesis buttons. But I turn the tablet on its sit. the view turned horizontal and i was able to see more buttons available. Horrible design for the calculator app.
Hi guys, can someone finally root this Tablet? I would also like to install TWRP to install an AOSP ROM.
Thank you!
Hi.
Did anyone succeed unlock Mediapad T3 7 bootloader ?
I have model BG2-W09 wifi only (European version). I have problem get product id
which is necessary part for bootloader unlock on Huawei site. Stucked to the calculator thing,
when i'll enter ()()1357946()()= on the calculator - i will get ERROR.
Contacted with the Huawei customer service for the help and got not nice answer:
We are unable to send boot loader code via email and can only be obtained through our website.
If you would want to unlock your phone, you should meet the following conditions:
1.Please register your Huawei ID in our official website on your phone.
2.Log in and logout your Huawei ID continuously for 14 days.
3.Each Huawei ID should not apply for the unlock code more than fifth time within 6 months.
Early people informed that email support works fast, but seems now the Huawei tightened terms.
Now i can expect 2 weeks everyday login to meet the requirements.
Some comments about tablet, maybe following helps someone.
One strange thing i've noticed with the tablet, it's not so easy bring up fastboot / recovery menu.
Pressing volume down + power brings up Chinese language test menu (8 options), nowhere to go with that,
pressing volume up + power brings up dialog with 3 options, "Reboot system now" or "Wipe data / factory reset" or "Wipe cache partition". Pressing by same all 3 buttons, volume up + volume down + power brings
up message that update not succeeded, update file not found on sd card. Also if you press only volume down and connect micro usb cable, it brings you to the Chinese test menu again. Also weird why European version tablet has at all Chinese test menu ?
I have triple boot desktop computer and i've downloaded 3 latest adb and fastboot platform-tools packages, for windows (using 10), mac and linux. With windows, using cmd i can start adb session, query device,
seems like everything works, when i'll try:
"adb reboot bootloader", device just reboots back to the main. Tried the same with the Ubuntu, same thing, adb helps finds the device, but when trying: "adb reboot bootloader" device just reboots into normal, not going into fastboot/rescue mode.
The thing is different with the mac (OSX 10.12), when i'll type to the terminal:
"adb reboot bootloader" the device rebooting into the fastboot mode.... and the terminal not responding any further, example when quering: "fastboot devices",
but having already fastboot mode activated on tablet and when rebooting desktop into windows 10 or ubuntu, i'm able using fastboot, tablet responds to the: "fastboot devices" or "fastboot oem get-bootinfo", even "fastboot oem unlock" responds informing about not valid key...
So far i'm able to put tablet into fastboot mode only using mac. Hope that's useful info for someone struggling
with same problems.
Unfortunately bootloader is still locked, problem finding product id, Huawei also did not help.
Huawei product id generator did not recognise Mediapad T3 versions.
Any ideas how to find product id or maybe someone can share the unlock code ?
Thanks in advance.

[GUIDE] How to restrore persist partition and stop phone from retarting every minute.

Hey,
You may have noticed that after flashing some ROM, your phone might restart every thirty seconds. This happenes if you use the factory_flash script, which also deletes your IMEI. Here I will provide 2 solutions on how to restore the persist partition.
Method one: Fastboot
1. Extract persist.img from official Xiaomi ROM:
http://en.miui.com/download-333.html
It is located in the images folder.
2. Download Minimal ADB and Fastboot:
https://xiaomifirmware.com/download-link/?dlm-dp-dl=7270
3. Put your phone into fastboot: Volume Up + Power.
4. Connect it with your pc
5. Open command prompt and execute:
fastboot flash persist (path to persist.img)
6. Reboot your device
Method 2: TWRP:
1. Extract persist.img from official ROM:
http://en.miui.com/download-333.html
2. Download Minimal ADB and Fastboot:
https://xiaomifirmware.com/download-link/?dlm-dp-dl=7270
3. Download TWRP for Mi A1:
https://forum.xda-developers.com/mi-a1/development/recovery-twrp-3-1-1-0-touch-recovery-t3688472
4. Put your phone into fastboot and flash TWRP using:
fastboot flash recovery (path to twrp)
¡Sometimes you might get remote: error: partition table not found. In this case, use fastboot flash boot_a (path to twrp)!
5. Holding Volume +, execute fastboot reboot. KEEP HOLDING THE BUTTON UNTIL YOU SEE THE TWRP SCREEN!
6. If you are on a Mac, use Android file transfer to put persist.img into root of phone storage(not in any folder). If on windows, use file explorer.
7. Reboot again to twrp.
8. Go to advanced—>terminal.
9. Exécute
dd if=/sdcard/persist.img of=/dev/block/mmcblk0p27
10. Go to reboot—>system.
11. If your phone is stuck on the android loading screen, reboot back to fast boot, and use mi flash with clean all except storage to return normal boot image.
12. Like this thread.
Don’t hesitate to write in the comment in the case of an error.
Can anyone confirm if is XiaomiFirmware a legit/official site of Xiaomi?
Sent from my Mi A1
SmallTarzan said:
Can anyone confirm if is XiaomiFirmware a legit/official site of Xiaomi?
Sent from my Mi A1
Click to expand...
Click to collapse
I doubt that cuz of the photos that are put on tutorials, but you could get precise inststructions and real downloads.
CoolPlushBear said:
I doubt that cuz of the photos that are put on tutorials, but you could get precise inststructions and real downloads.
Click to expand...
Click to collapse
"precise instructions" as "tested and working instructions"
"real downloads" as "official downloads"
Am I right?
SmallTarzan said:
"precise instructions" as "tested and working instructions"
"real downloads" as "official downloads"
Am I right?
Click to expand...
Click to collapse
The download links redirect to the official Xiaomi Bigota download servers, and the instructions are usually supposed to work, but ususally, not all are tested.
CoolPlushBear said:
The download links redirect to the official Xiaomi Bigota download servers, and the instructions are usually supposed to work, but ususally, not all are tested.
Click to expand...
Click to collapse
I wouldn't try it myself.
SmallTarzan said:
I wouldn't try it myself.
Click to expand...
Click to collapse
Why not? Remember that the only way to actually break a phone is to smash it against something. All of the instructions there seem logical.
CoolPlushBear said:
Why not? Remember that the only way to actually break a phone is to smash it against something. All of the instructions there seem logical.
Click to expand...
Click to collapse
It's not about whether the instructions are logical or not.
It's about whether the files are safe or aren't.
Take a look at this:
(Check the attachment section)
You state that the files are being downloaded from official Xiaomi servers. However, as you can see, they aren't.
I'm not going to argue about the source or safety of these files, but I hardly believe that they are official - therefore, theoretically not safe.
SmallTarzanself said:
It's not about whether the instructions are logical or not.
It's about whether the files are safe or aren't.
Take a look at this:
(Check the attachment section)
You state that the files are being downloaded from official Xiaomi servers. However, as you can see, they aren't.
I'm not going to argue about the source or safety of these files, but I hardly believe that they are official - therefore, theoretically not safe.
Click to expand...
Click to collapse
I highly doubt that they are not safe, since I tried out the persist image myself. If you would like though, I can provide some from Bigota download server.
it worked for me - tried everything for the past 2 days then this is just the solution ive been searching for
thanks a ton man!!!! :laugh:
Just so y'all know, this can get you into trouble with federal agencies in many countries because this is the kind of crap terrorists do to mask their devices (MAC spoofing).
You really should have at least a warning in the thread.
Get persist.img from official fastboot ROM instead, it will surely have a safe "engineering registered" MAC (or none at all).
CosmicDan said:
Just so y'all know, this can get you into trouble with federal agencies in many countries because this is the kind of crap terrorists do to mask their devices (MAC spoofing).
You really should have at least a warning in the thread.
Get persist.img from official fastboot ROM instead, it will surely have a safe "engineering registered" MAC (or none at all).
Click to expand...
Click to collapse
You are right, and although I doubt that federal agencies will get you into trouble, I changed the link to the official rom.
CoolPlushBear said:
You are right, and although I doubt that federal agencies will get you into trouble, I changed the link to the official rom.
Click to expand...
Click to collapse
Good man
But remember - history's greatest blunders all started with ignoring doubts
Can confirm this works.
Just did it, and it worked perfectly.
The instructions are slightly wrong though.
Power + Volume DOWN is fastboot, not volume up.
Anyone got this error while trying to flash persist.img ? I'm kinda stuck :
$ fastboot flash persist persist.img
target reported max download size of 534773760 bytes
sending 'persist' (4744 KB)...
OKAY [ 0.140s]
writing 'persist'...
FAILED (remote: Error: This image isn't allow download
)
finished. total time: 0.160s
Click to expand...
Click to collapse
EDIT : I tried the twrp option and now I have random reboot + wifi does not activate at all.
Que20 said:
Anyone got this error while trying to flash persist.img ? I'm kinda stuck :
EDIT : I tried the twrp option and now I have random reboot + wifi does not activate at all.
Click to expand...
Click to collapse
I have the same error in Fastboot mode. I'll not try TWRP now that i've read your post.
Que20 said:
Anyone got this error while trying to flash persist.img ? I'm kinda stuck :
EDIT : I tried the twrp option and now I have random reboot + wifi does not activate at all.
Click to expand...
Click to collapse
I had the same problem i couldn't connect to wifi after dumping persist.img, i fixed by using the tool from this thread: https://forum.xda-developers.com/mi-a1/how-to/tool-persist-resurrector-v1-0-0-0-t3781095
mardrest said:
I had the same problem i couldn't connect to wifi after dumping persist.img, i fixed by using the tool from this thread: https://forum.xda-developers.com/mi-a1/how-to/tool-persist-resurrector-v1-0-0-0-t3781095
Click to expand...
Click to collapse
Problem is the guy say :
If you have flashed someone else's persist image -
You CANNOT use this tool since you have destroyed the last chance to repair original Wi-Fi MAC.
Click to expand...
Click to collapse
So I dont know if I should try it.
Plus it doesn't have a unix version. And I don't have a Windows computer around...
EDIT : I feel like force flashing the persist through TWRP was a really bad idea... :/
I'm now stuck, I can't use the phone. I have no MAC Address.
EDIT2: HELP! T_T
Que20 said:
Problem is the guy say :
So I dont know if I should try it.
Plus it doesn't have a unix version. And I don't have a Windows computer around...
EDIT : I feel like force flashing the persist through TWRP was a really bad idea... :/
I'm now stuck, I can't use the phone. I have no MAC Address.
EDIT2: HELP! T_T
Click to expand...
Click to collapse
Another option is to manually edit wlan_mac.bin located in /persist with hex editor, if its blank you must put 3 times an mac adress changing the last digit 1 + or 1 - like f4 f5 db ef ed 34 f4 f5 db ef ee f4 f5 db e0 (numbers from 0-9 and a-f) save and restart phone. Must be 18 bytes file.
PD. Mac adress has 12 digits/numbers.

Blackview BV9800 PRO Rugged Beast MAGISK ROOT REQUIRED

Hi everyone,
I have rooted my last few smartphones and was always happy with it. Now I got new Blackview BV9800 PRO and I want to root it with Magisk. but as the phone is new, there is lack of information on the internet, Anyway, I have found some information, but it is not complete and I believe You, smart guys, can help me to root my smartphone
This is the information I got:
How to root it with Magisk :
Download your rom from : viewtopic.php?f=285&t=532354 (you can alternatively extract it with SP Flash Tool and WWR)
Download and install Magisk Manager on your phone : https://github.com/topjohnwu/Magisk/rel ... v7.5.0.apk
Patch the boot image with Magisk Manager
Unlock the bootloader. (Wipe the phone! )
Flash the patched boot image with SP Flash Tool or Fastboot. (ONLY the boot image)
Reinstall Magisk Manager
This is what I did and what happened:
I installed latest Magisk apk from official sources. I opened the app, clicked on "Install Magisk", then via this app I downloaded the zip file, then tried to installed it via Magisk but got an error "Unsupported/Unknown image format".
Any ideas what have I done wrong? Did I have to flash boot image from the ROM, and not the one Magisk downloaded? P.S., the smartphone is new, nothing more then I written above is done to it (no oem unlocking, no usb debugging, etc).
RESERVED
I let Magisk manager patch the original boot.img. After flashing it with fastboot or SP Flash the phone stuck with message that verified boot didn't accept the signature.
Hm... Is there anyone who rooted BV9800 Pro successfuly and could guide us? ?
update fail.
I greet you, I accidentally deleted it when I updated, Nvram. on my phone. BV9800pro. It is possible to provide me with firmware recovered from a similar phone. I also posted on the forum at Blackview but without answer
Isn't there a full firmware download on Blackview website available? I thought I've seen it there
update fail
LGZACRO said:
Isn't there a full firmware download on Blackview website available? I thought I've seen it there
Click to expand...
Click to collapse
Hello
Yesterday during an update, by accident, my equipment, BV9800pro, performed a complete formatting, "Full Format + Dowload", it seems that Nvram has also been rewritten. it is possible to provide us with a solution or file with this data, specific to our equipment. i need a original nvram.bin, and nvram.data, in firmware from Blackview site this its not exist..
if someone wants to help me, I send them a private message with their email address
My phone is not rooted unfortunatelly, if I can help in anyway (if there is a way) I would pull out the files for You.
Do You know how to guaranteed root BV9800 Pro without running into problems?
LGZACRO said:
My phone is not rooted unfortunatelly, if I can help in anyway (if there is a way) I would pull out the files for You.
Do You know how to guaranteed root BV9800 Pro without running into problems?
Click to expand...
Click to collapse
who guarantees this?
rooting worked for me with that solution given to the PM. I wanted to install AOSP, but I found that the thermal image did not work anymore, there were some problems when previewing the video files from Facebook, and I gave up. from the mistake as I mentioned I format + dowload and delete all important partitions. nvram .bin si nvdata. Nothing works properly, TEE and Google Key are inactive, the thermal image fails, some applications are closed immediately. This is the experience with rooting and installing AOSP on the BV9800Pro
Oh man... Sounds bad... have You emailed blackview after sale support (via email, not forum)? No response from them?
And let's say I only root my BV9800Pro, will I be able to send You the files You need?
LGZACRO said:
Oh man... Sounds bad... have You emailed blackview after sale support (via email, not forum)? No response from them?
And let's say I only root my BV9800Pro, will I be able to send You the files You need?
Click to expand...
Click to collapse
make total firmware dump and send the bakup , or nvram.bin nvdata.bin file,
I must root to be able ro do this, right? Does TWRP works well on BV9800Pro?
LGZACRO said:
I must root to be able ro do this, right? Does TWRP works well on BV9800Pro?
Click to expand...
Click to collapse
i dont now. i dont install twrp.
Ok, pm me your skype or signal or wickr or fb. We will try to do this in few hours
LGZACRO said:
Oh man... Sounds bad... have You emailed blackview after sale support (via email, not forum)? No response from them?
And let's say I only root my BV9800Pro, will I be able to send You the files You need?
Click to expand...
Click to collapse
I posted in their forum a detailed error report but the moderator deleted my post.
Don't bargain for help by them.
---------- Post added at 02:35 PM ---------- Previous post was at 02:33 PM ----------
LGZACRO said:
I must root to be able ro do this, right? Does TWRP works well on BV9800Pro?
Click to expand...
Click to collapse
As I mention there's no TWRP available for this phone yet.
I just rooted BV9800 pro yesterday.
You don't need to SP flash tool or others, just need adb and fastboot.
Quick steps:
1. set OEM unlock to allow
2. connect phone to windows
3. use adb to check if connecting. command: adb devices
4. using adb to reboot to bootloader, command: adb reboot bootloader
5. And then the phone will enter fastboot mode ( you could see small string at left bottom corner)
6. use fastboot command to unlock bootloader. command: fastboot flashing unlock
7. If fastboot program is waiting, please check windows device manager, there should be an unknown device, let windows search driver automatically. it needs android interface driver.
8.Using volume up or down to agree unlock.
9. If agree, all data will be disappeared.
10. Install Magisk manger
11. Download stock ROM from blackview forum. it is zip file. Unzip it and copy boot-verified.img to phone.
12. patch boot.img by Magisk manger.
13. Copy patch image file to windows
14. use adb to reboot phone to fastboot mode
15. reflash boot image file. command: fastboot flash boot patched file name (normally, I would put patch image file in the same folder of fastboot)
16. reboot (fastboot reboot) and reinstall Magisk manager
There are many Magisk root steps instruction in internet. You could refer to other steps, they should be clear than mine. I prepared lots of drivers and application. Finally, I only used adb and fastboot to root this phone.
I rooted it exactly like You and it worked perfectly! Thanks for auch detailed rooting guide!
By the way guys, I think we Should open the request for TWRP for BV9800Pro. How do You think?
After you unlocked bootloader, it changed to orange state, and it always shows "Your device has been unlocked and can't be trusted..Your device will boot in 5 seconds", it could be resolved by modified LK image.
Refer to
1. https://forum.hovatek.com/thread-31664.html
2. http://bbs.blackview.hk/viewtopic.php?f=286&t=532899 -- included modified LK image
Of course, you could reflash by fastboot, no need to use SP flash tool.
hi if u have back up on your phone could u provide for me link. I had some problems with my loudspeaker and i thought its from the root, or software and i did full format and download. and now it show some watermark and probably is because i l deleted NVRAM.
i download already official version but didn't help ... thank u upfront.
james35888 said:
I just rooted BV9800 pro yesterday.
You don't need to SP flash tool or others, just need adb and fastboot.
Quick steps:
1. set OEM unlock to allow
2. connect phone to windows
3. use adb to check if connecting. command: adb devices
4. using adb to reboot to bootloader, command: adb reboot bootloader
5. And then the phone will enter fastboot mode ( you could see small string at left bottom corner)
6. use fastboot command to unlock bootloader. command: fastboot flashing unlock
7. If fastboot program is waiting, please check windows device manager, there should be an unknown device, let windows search driver automatically. it needs android interface driver.
8.Using volume up or down to agree unlock.
9. If agree, all data will be disappeared.
10. Install Magisk manger
11. Download stock ROM from blackview forum. it is zip file. Unzip it and copy boot-verified.img to phone.
12. patch boot.img by Magisk manger.
13. Copy patch image file to windows
14. use adb to reboot phone to fastboot mode
15. reflash boot image file. command: fastboot flash boot patched file name (normally, I would put patch image file in the same folder of fastboot)
16. reboot (fastboot reboot) and reinstall Magisk manager
There are many Magisk root steps instruction in internet. You could refer to other steps, they should be clear than mine. I prepared lots of drivers and application. Finally, I only used adb and fastboot to root this phone.
Click to expand...
Click to collapse
zlatkomas said:
hi if u have back up on your phone could u provide for me link. I had some problems with my loudspeaker and i thought its from the root, or software and i did full format and download. and now it show some watermark and probably is because i l deleted NVRAM.
i download already official version but didn't help ... thank u upfront.
Click to expand...
Click to collapse
Hi, I'm not rooted (yet) and my BV9800 PRO is having some issues with the loudspeaker, any media like YouTube or Spotify, play audio for a second or two and then just go mute, volume can be high but no audio at all, phone calls last longer but also go mute and have to go back to regular "ear-speaker" to keep listen to the other side. Are this the same problems you refer to? I can't remember if this happened after the OTA update tho. Thank you.

Root/TWRP on new Xperia 5

Dear community,
I'm not having deep knowledge about mobile costumization so far so please be patient if my questions seem a bit annoying ...
I'm planning to get a new xperia 5 and to get root access / TWRP running on it.
I've read these two threads:
TWRP
Root
So to my questions:
1. Are the above guides still functional for up-to-date devices ?
2. On my old Xperia XZ5 I was able to save the trim area - what about that when unlocking the bootloader on the Xperia 5 ?
3. If I'm doing anything wrong during the Root-Guide and my device gets bricked - will I be able to recover it again, for example via the Xperia companion ?
4. And finally - what is the "fastboot location" from the root guide ?
Best regards,
RV.
Edit: In case the "fastboot location" means the executable path I managed to find it (in my case) under "C:\adb".
Edit 2: Regarding an eventually needed recovery, I'm guessing that something like
Code:
fastboot flash system /path/to/stockrom.img
should do the job ...
1. No TWRP for Devices with system-as-root
2. No Trim Area. DRMs get restored after relocking the Bootloader and flashing a Firmware with the Companion again. Approved and tested by myself btw.
Read My other Guides like the GSI ones for More...
You can start fastboot from a folder by holding shift while doing a right click on empty space in the folder ("open commandline here"). That ensures you can just type fastboot flash system system.img to flash the file from the selected folder...
Btw. TWRP dies out. Your best chance is Pixel Experience which gives you an pretty basic Recovery that is based on the Open Devices Sources. Alternative are Magisk Modules like my MARS_SOM if You want to flash around like back in the Days. Android 10+ is fort knox somehow. Bad Times for People like Me who did work with AROMA Installer and co
Miustone said:
1. No TWRP for Devices with system-as-root
2. No Trim Area. DRMs get restored after relocking the Bootloader and flashing a Firmware with the Companion again. Approved and tested by myself btw.
Read My other Guides like the GSI ones for More...
You can start fastboot from a folder by holding shift while doing a right click on empty space in the folder ("open commandline here"). That ensures you can just type fastboot flash system system.img to flash the file from the selected folder...
Btw. TWRP dies out. Your best chance is Pixel Experience which gives you an pretty basic Recovery that is based on the Open Devices Sources. Alternative are Magisk Modules like my MARS_SOM if You want to flash around like back in the Days. Android 10+ is fort knox somehow. Bad Times for People like Me who did work with AROMA Installer and co
Click to expand...
Click to collapse
Thanks for the info. What are you currently on? Rom or stock? If you're with rom, please what are you using at the moment?

Sonim XP3800 - images, rooting and software

The Sonim XP3800 is a very rugged phone, but it is very limited. Rooting can expand its capabilities.
1) This is the stock image for the Sprint model
3A.0.5-05-8.1.0-29.70.00_USER_PST.zip
2) This is the magisk - patched boot image
boot.img
3) Flash tool
Sonim Feature Phone Software Installer
Username: testmulti
Password: testmulti123
4) After flashing the patched boot image, use adb to install Magisk Manager
5) To install apps directly from the phone, install https://github.com/bavelee/PokeInstaller
6) To enable DIAG mode, use the secret code
Code:
*#*#0701#*#*
will doing this to my xp3800 sprint carrier locked phone allow me to use gci as carrier?
@ytagger - which carrier/version is the image for? I setup dev mode on my US Cellular unlocked XP3, had a successful connection via the Sonim Software Tool, unzipped the image and overwrote the boot.img, but I got a version not applicable to phone or downgrade error when trying to flash it. What’s the approach for this?
saniko said:
@ytagger - which carrier/version is the image for? I setup dev mode on my US Cellular unlocked XP3, had a successful connection via the Sonim Software Tool, unzipped the image and overwrote the boot.img, but I got a version not applicable to phone or downgrade error when trying to flash it. What’s the approach for this?
Click to expand...
Click to collapse
This image is for Sprint. I'll try to upload the US Cellular version later
ytagger said:
This image is for Sprint. I'll try to upload the US Cellular version later
Click to expand...
Click to collapse
That would be awesome. I’m worried that I might lose the IMEI or something similar, but it would be nice to have a daw more tools on my phone.
Here is a full backup of a US Cellular Sonim XP3
Hmm - I had a better understanding of how to flash and root the Sprint image. I don’t know how to work with the US Cellular one. It does not seem to have the img files that allowed the Sonim flash tool to work
You're right, it won't work with the Sonim Flash tool, at least not without modification. It's not a stock image. But you can use QFIL to flash it. https://qfiltool.com/qfil-tool-v2-0-3-5
Argh - I adb pushed magisk onto the Sonim XP3 to see if I could install the boot image. Unfortunately, couldn't find a way to select the file inside magisk (sonim only allows Gallery, Contacts, Music Player to select files). Can't fastboot flash the boot.img because I can't unlock the bootloader
So lost @ytagger . Tried QFIL but struggled to make anything work.
Hey I don't have any experience with this and was looking to put apps on the sprint Sonim without using adb, i tried using the flash tool and downloaded the boot img on the computer, but I have no idea if I'm using the tool wrong or if the boot img needs to be modified extracted or unzipped and if I'm supposed to find the file in the build path or something else entirely, can somebody please help me?
I can’t really help you, but I can mention that adbed some apps to the device and realized how impossible it can be to use apps in android without a touch screen And such low resolution. I may not see the value in this that I had hoped for.
saniko said:
I can’t really help you, but I can mention that adbed some apps to the device and realized how impossible it can be to use apps in android without a touch screen And such low resolution. I may not see the value in this that I had hoped for.
Click to expand...
Click to collapse
Check out the website apps4flip they have a bunch of apps that work without a touchscreen and those are meant for a crippled android 5, the sonim I think is better, there is even a mouse for it in the forums there though it probably doesn't drag, my problem was locating the boot.img in the build path of the flash tool if that's how you use it, if anybody can help that would be great
Hi, all. Someone succeed with dualsim activation? Have some xp3 and xp5s. Both with double slots but only one active card. I think similar sim-disable method for 3, 5s, 8.
That app4flip website is amazing even if you don't care for the religious overtones. I spent an entire day examining the stuff people had considered and the mouse app is perfect to handle apps that rely on a touchscreen.
ytagger said:
The Sonim XP3800 is a very rugged phone, but it is very limited. Rooting can expand its capabilities.
1) This is the stock image for the Sprint model
3A.0.5-05-8.1.0-29.70.00_USER_PST.zip
2) This is the magisk - patched boot image
boot.img
3) Flash tool
Sonim Feature Phone Software Installer
Username: testmulti
Password: testmulti123
4) After flashing the patched boot image, use adb to install Magisk Manager
5) To install apps directly from the phone, install https://github.com/bavelee/PokeInstaller
6) To enable DIAG mode, install Activity Launcher. Then open EPST Hidden Menu activity DiagView. Now enable DIAG mode. This is a special DIAG mode which also includes other USB modes. QFIL may not recognize it. Otherwise, enable it through root with
Code:
setprop sys.usb.config diag,adb
.
Click to expand...
Click to collapse
Decompile the system APK, Erase all data(factory reset) and not enter the system, know what is wrong?
ytagger said:
The Sonim XP3800 is a very rugged phone, but it is very limited. Rooting can expand its capabilities.
1) This is the stock image for the Sprint model
3A.0.5-05-8.1.0-29.70.00_USER_PST.zip
2) This is the magisk - patched boot image
boot.img
3) Flash tool
Sonim Feature Phone Software Installer
Username: testmulti
Password: testmulti123
4) After flashing the patched boot image, use adb to install Magisk Manager
5) To install apps directly from the phone, install https://github.com/bavelee/PokeInstaller
6) To enable DIAG mode, install Activity Launcher. Then open EPST Hidden Menu activity DiagView. Now enable DIAG mode. This is a special DIAG mode which also includes other USB modes. QFIL may not recognize it. Otherwise, enable it through root with
Code:
setprop sys.usb.config diag,adb
.
Click to expand...
Click to collapse
Do you know where one could find the AT&T firmware for the Sonim XP3800 ?
hi
tring to flash my xp3800. cant download stock image. can anybody help?
thx
It seems like a fairly complicated process to root this device with the fh programmer and edl mode. Confused to say the least. As far as I can tell without the original firmware file I am sol, can you please reupload the sprint firmware file. I only want to root to be able to adjust my apn settings, I am unable to edit them without root access. I am thinking my mms would work if I could get a ATT image flashed to the device. Almost no information or files on this device exist. Im not even sure how you got the files originally lol. Can I pull the firmwre off the device?
There is now a serious need for a way to remove the UICC lock from the Sprint XP3's since T-Mobile will be discontinuing support for Sprint SIM's this year.
ytagger said:
The Sonim XP3800 is a very rugged phone, but it is very limited. Rooting can expand its capabilities.
1) This is the stock image for the Sprint model
3A.0.5-05-8.1.0-29.70.00_USER_PST.zip
2) This is the magisk - patched boot image
boot.img
3) Flash tool
Sonim Feature Phone Software Installer
Username: testmulti
Password: testmulti123
4) After flashing the patched boot image, use adb to install Magisk Manager
5) To install apps directly from the phone, install https://github.com/bavelee/PokeInstaller
6) To enable DIAG mode, use the secret code
Code:
*#*#0701#*#*
Click to expand...
Click to collapse
Sprint XP3 locked to CDMA network, how to fix it

Categories

Resources