It is known that after cross-flashing and then removing the NT code, we will lose the LTE network and mobile data. In order to use our network and mobile data again we need to flash the patched modem partition, see more about that in this thread Modem Patched, Fixed LTE & Mobile data.
This time I will show you how to fix the NT code without using a patched modem.
So let's go...
It is recommended to make a full partition backup before any cross-flashing. Performing this tutorial will require a backup of our original FTM partition before cross-flashing.
When we finish cross-flashing e.g. EU firmware when boot to android for the first time of course we will have NT code error, flash our original FTM to EU firmware then apply the instructions depending on whether you have root or not.
Spoiler: Non-root users
We will download the HxD hex editor with which we will edit the partition.
When we flash the original FTM it is not necessary to exit the partition manager from Qfill because we will make a backup copy of the OP_a partition.
My original FTM is from an AT&T device, yours will probably be the same or a different device.
In the downloaded hex editor, we will open our original FTM partition and OP_a partition.
We will open FTM in HxD then we will find NT code at address 14000 in my case it is ATT NT code where we can see mcc/mnc[xxxxxx],subset[xx] in case 310410,FF, after finding NT code we will leave FTM open in HxD
.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Open OP_a in HxD and find the string FFFFFF,11 which means EU NT code it's our EU croosflahed firmware.
Inside OP_a partition "FFFFFF,11" we will overwrite with our correct NT code in my ATT case "310410,FF".
Now that we have entered the correct mcc/mnc[xxxxxx],subset[xx] we can save the changes then flash back the modified OP_a partition.
Extra feature;
If we want to display a menu for selecting 5G under Network Mode, do this.
Find inside OP_a "networksettings.OPEN_EU" then rename the .apk extension to .bak, save the changes.
Spoiler: Rooted users
Magisk module soon..
Ok for this initial part we are done now you have NT code removed and network and mobile data fixed.
Soon there will be a magisk module for rooted devices.
Note: If you use this method of fixing the NT code then it is not necessary to use a patched modem, otherwise you will be using it.
Note: For JP variants, I'm not sure about this method because the devices don't have an OP partition.
Nice work
I converted from Verizon to EU fixed as instructed but got NT Code error, do you have a detailed guide for Verizon to switch to E
go to path as picture and see which nt code inside cust_path_mapping,, if EU code it means that you did not change nt code . Nt code inside file and ftm must be some.
Or easy way just edit FTM and flash patched modem.
Related
Hi
Before you start to notice that the protection program of the program reveals that virus
But it is a false alarm
And you you the option to continue or exit
After the success of the first version of the R3 Tools program of some sort
There is a daily program new users
It is here comes the role of the change and the transition to the second version, which contains many of the features and additions and amendments and a new interface
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
First amendments
- Amendment to the standard display flashes
- Speed up the opening of programs
- The amendment to the level where it became the updates does not re-open the program after talking but live update without rebooting
Additions
Repair imei property (it is disabled now this feature because they are in experimentation on mobile)
Supports:
Repair IMEI Mida Tek
Repair IMEI SpreadTrum
Repair IMEI Allwinner
Repair IMEI Rockchip
- As well as add file browser and management for Android phones
Characteristics: copy / move files at the same phone or can be copied or moved to Windows
Deleting files
Rename files
Create a folder
Create a file
Compressing and decompressing files
And it uses your root property that I need, such as copying or system files matching any browsing and handles all the files in cases was recounted in the phone available
- Dealing with the Android feature
Deals with the ADB and Fastboot
ADB: formate device, delete Algimaal account, delete the lock screen, recounted the work of the phone, remove your root read phone data, reboot the phone to any setting you want
fastboot: formate phone, 'usually run to the phone to boot loder, flashing a particular area such as the boot cache userdata system misc
In the properties will be added to another is under experimentation
Other property fantastic
And is the interface for flashing Samsung devices only (Gary support the rest) are very similar interface Z3X
Where each phone Smsonj in a single interface and a single program and easy to deal with and fitter works 100%
The program basically built on Odin3 and Downloader V5.67 and Downloader V5.63
This picture when you try flashing the phone S5263
And I've experimented with many Samsung phones
And so there is the same interface for flashing RockChip and Allwinner and LG But are under experimentation
And by the load can only Agmlb update from the software or download immediately with the following link
http://rabi3android.com/R3%20Tools/R3%20Tools%20rabi3%20android.exe
Updated 02/09/2016
Added info property and this property will give you just about any phone information by imei
And it gives you a phone image
And while you will need?
1 - Taba in Phone Info
2 - comes to you live phone and his name erased or does not go astray but imei shows and this case Sdvtna more than once and from which the luxury of the exact name of the phone
3 - verify that the correct imei
And this picture of clarification
Only update the program and will have the new property
Updated 02/10/2016
It has been a wonderful addition to property
And the notices, which enables you to know what is new or modifications of flashes
After updating the data base
This is j7108's
is from 5.1.1 but should can use in 6.0.1 as well:
https://mega.nz/#!nNkliAQb!VvopPnS5Zkk15Mhlikaixmg6zWbhyfS_xXe2unSmRqo
Boot Logo =/= Boot animation
Tool you need:
Windows Pc : 7zip, Odin, maybe a linux OS as well
Please note that I'm not responsible if you brick your device, flash back original BL_{firmware version}.tar.md5 to unbrick it
1. You need to get BL_{firmware version}.tar.md5 from your stock firmware, I get from SmartSwitch/Kies which has 4 .tar.md5 files
If your stock firmware consist of only 1, you might can extract it, not entirely sure how. Do share in the comment if you know.
2. You should open BL_{firmware version}.tar.md5 inside linux environment and modify param.bin because the tar contain permission information
Inside param.bin contain Logo.jpg which you can replace it
(rename the param.bin to param.tar so you can open it, after replace the picture, check the permission, tar it, rename it back to param.bin)
Note: The order(cm, sboot then param) and the permission inside the tar is extremely important. Once messed you will brick your phone
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Please share your method how to pack tar on Windows as well. I don't know how to set the permission in windows.
3. Once done repack the 3 files to anynameBL.tar note the .md5 is not needed. If you want to use .tar.md5, Odin need to verify it and it need extra steps
I apologies for lack of linux knowledge, I can't provide comprehensive method. All these steps are simplest possible approach.
We are almost done, now before you flash the Bootloader that you just repack, you need to make sure Frp Lock(if your phone has this feature) is OFF else you will brick your device.
To close Frp Lock, enable Developer Options(google it for step), enable OEM Unlock
Put your device to Odin mode, and you can start flashing
enjoy your new favorite stylish boot logo and turn off OEM Unlock to secure your device back
you write "The order(cm, sboot then param) inside the tar is extremely important" but in the screenshot there is another order.
And in some BL-images which i examined, it is always sboot, param and then cm!
hi
how to edit permission logo after edit file?
windows 32bit
Can a DEV please create a Version for SM-G9550 Snapdragon Version? I already tried another CSC zip to change to VZW (Verizon) USA. Works perfect, phone is recognized after the to install bat as VZW
i took the VoLTE_Fix.zip from here: https://www.androidfilehost.com/?fid=817550096634782202 its from the 955U Thread
"Now Unzip the VoLTE_Fix.zip Inside the SM-G955U1_System folder
Click and run 1_Install.bat
After zip is installed phone will reboot
Once phone is at setup screen reboot back to recovery
In recovery click Apply Update From ADB
Click and run 2_Install.bat Inside the SM-G955U1_System folder"
At this Point this works perfect , but i wonder about the boot Vibrate, its longer definitive. Is this normal?
Now my Question:
I need Vodafone (VD2) instead the VZW. Could a Dev build a Version with the CSC from VD2 inside? I tried a few times build own, but not really successfull.
i also tried the VZW flashable CSC test. But after install that i need to restore EFS infos to get it work
Really NO ONE?? NO ANSWER??
What exactly are you trying to do here? I know with the US Snapdragon varient changing CSC features amongst carriers is one adb command away.
Have you read through any of the carrier switching threads?
Sent from my SM-G955U1 using XDA-Developers Legacy app
012345678 said:
Really NO ONE?? NO ANSWER??
Click to expand...
Click to collapse
I have extracted VD2 from CSC selection zip from S8/S8+ forums (exynos versions but CSC is same for snap too)
Made a zip file, try flashing via Recovery and see if it works.
VD2-CSC-S8S8p.zip (This has OMC file structure... if this doesn't work, you may try renaming Folder_OMC to Folder_CSC in the zip and try)
Wow, that one works. First update to CHC_G9550CHC1AQJ4 , then TWRP 3.1.1.1 . insert your zip. After restart I only need to "activate" the correct CSC in Phone Info app. Then i reset the Phone manually and all set to VD2. And Sales Code is set to VD2. Thanks.
Look here.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Could you tell me how do you build this csc? And maybe you know a good program to pass verify stock adb package transfer . Because the volte zip from verizon works in adb without root and twrp.
Sent from my SM-G9550 using XDA-Developers Legacy app
Hi what is secret to using file manager on phone Android 10+ with su access to read and write in system - remove bloat apps? I have su access, but I read in 10+ file system not allow from file manager, only need use adb. How to use file manager with su to remove manually on Android 10+? I get error when deleting app from any file manager with su access "cannot delete". Danke.
Well, i guess that i can reply your question. It seems that we can't mount R/W due to Google's use of dynamic partitions for new version android devices.
However, we still have a way to fix it. Use su permissions and dd command to export those partitions which you want to modify (for example: system, product, vendor, and oem, but oem special), unpack and then repack, at last reboot you devices into fastbootd mode and flash back those partitions into you devices. reboot, now, you can R/W those partitions .
if you need to edit oem partition. You need edit a file in vendor partition firstly. Export and unpacking vendor partition. Finding a file which called "fstab.qcom". Open it and delect（,avb_keys=/product/etc/security/avb/oem.avbpubkey）code inside. Repacking and flash into you devices again. After this, the repackaged oem partition can be mounted correctly by flashing it again otherwise the oem partition can not be mounted (no files inside).
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
SirisRui said:
Well, i guess that i can reply your question. It seems that we can't mount R/W due to Google's use of dynamic partitions for new version android devices.
However, we still have a way to fix it. Use su permissions and dd command to export those partitions which you want to modify (for example: system, product, vendor, and oem, but oem special), unpack and then repack, at last reboot you devices into fastbootd mode and flash back those partitions into you devices. reboot, now, you can R/W those partitions .
if you need to edit oem partition. You need edit a file in vendor partition firstly. Export and unpacking vendor partition. Finding a file which called "fstab.qcom". Open it and delect（,avb_keys=/product/etc/security/avb/oem.avbpubkey）code inside. Repacking and flash into you devices again. After this, the repackaged oem partition can be mounted correctly by flashing it again otherwise the oem partition can not be mounted (no files inside).
View attachment 5577955
Click to expand...
Click to collapse
Wow very complex but thank you for explain!
https://forum.xda-developers.com/t/...ick-instructions.4337339/page-6#post-86996673 someone posted
X7Max A14 Firmware Backup Files (Backed up through SP Flash Tool) here
BACKUP_FLASH.7z
drive.google.com
And I have no idea how to flash it, tho there's a guide in that thread, I think it's not for flashing a backed up rom.
AFAIK, those backed up files has to be converted using some tools or something to make it flashable? Just give me a little clue.
Just bumping one last time, won't happen again.
read back from SP Flash Tool is done by specifying start address + length for region EMMC_USER and can be written to EMMC_USER same way (assuming you pass mediatek secure boot with proper download agent and auth_sv5.auth file)
if you have one single big file, you can create scatter file and split into partitions with WwR MTK v2.51
there exist another alternative tool for SP Flash Tool called mtkclient, but I never used.
anand127 said:
https://forum.xda-developers.com/t/...ick-instructions.4337339/page-6#post-86996673 someone posted
X7Max A14 Firmware Backup Files (Backed up through SP Flash Tool) here
BACKUP_FLASH.7z
drive.google.com
And I have no idea how to flash it, tho there's a guide in that thread, I think it's not for flashing a backed up rom.
AFAIK, those backed up files has to be converted using some tools or something to make it flashable? Just give me a little clue.
Click to expand...
Click to collapse
Attach a screenshot showing its contents.. this will determine how you're to flash it
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
The same thread did have a guide it says
"Unpack and copy your backup ROM_ files in this folder
- Choose scatter from this folder in SP Flash Tools
- Uncheck SECCFG (ROM_20) and flash ( Dont forget use MTKbypass utility and check port)
- After Flashig again go EDL mode and flash only SECCFG (ROM_20)
- Maybe need Format Data in Recovery
- Done"
What he/she meant by EDL mode? Mediatek doesn't have edl mode. Needs a bit clarification
Never mind
why do you want flash SECCFG? Do you know what SECCFG is for?
Judging by your reply, It got confusing pretty fast I guess
I can't get any clearer than this, how do I flash these files in screenshot? Simply select scatter and auth sv5 and all in one signature.bin and hit flash? Off course after using mtkauthbypass
unless you have some assignment (maybe img_list.txt file) files are useless because file names do not reflect partition names. for example what is partition name of ROM_33?
edit: assuming scatter file assign the ROM files automatically
- select all_in_one_signature.bin, and auth_sv5.auth (no bypass needed)
- uncheck preloader, seccfg, metadata, userdata (must not flashed)
- select "Download only"
- start "Download"
- connect phone (must powered off)