Database Users

[Q] Only 6gb of storage after 4.2 update? (16gb Nexus 7)

I just updated to 4.2 from 4.1.2 by booting into the boot loader and manually flashing each partition using fast boot. The only exceptions being the boot loader I itself and recovery which I flashed clockwork. After booting I into 4.2 I noticed only 6gb of storage was available for use (I have the 16gb version). I know 4.2 made storage changes due to multi-user, but something appears to have gone wrong.
My partition table is as follows. I see the 16gb partition, but can't find then in root explorer or any other app.
major minor #blocks name
7 0 3150 loop0
7 1 2111 loop1
7 2 2111 loop2
179 0 15267840 mmcblk0
179 1 12288 mmcblk0p1
179 2 8192 mmcblk0p2
179 3 665600 mmcblk0p3
179 4 453632 mmcblk0p4
179 5 512 mmcblk0p5
179 6 10240 mmcblk0p6
179 7 5120 mmcblk0p7
179 8 512 mmcblk0p8
179 9 14103552 mmcblk0p9
179 32 2048 mmcblk0boot1
179 16 2048 mmcblk0boot0
254 0 3150 dm-0
254 1 2110 dm-1
254 2 2110 dm-2
Anyone know what might be up or how to fix it?
Also noteworthy, since I used fast boot and never did anything that should have wiped my sdcard, everything is now missing on my sdcard anyway... And I can't find where it went for the life of me.

Reflash it
You may have to reflash back to stock and then get the ota update but let it install itself.
Then root it and install recovery.
George

I have the exact same thing' so annoying

[System, Boot & Recovery Dump][8-27-13] SGH-T599 (4.1.2) JZO54K.T599UVAMB5

I managed to get the system folder. Via http://forum.xda-developers.com/showthread.php?t=1578099
CWM
Instructions and discussion available here
Click to expand...
Click to collapse
CWM Flashable Recovery
Both have been tested by me
Stock Recovery
CWM 6.0.3.6 by Unjustified Dev
Click to expand...
Click to collapse
DOWNLOAD:
System.img (/dev/block/mmcblk0p22)
Boot.img (/dev/block/mmcblk0p20)
Recovery.img (/dev/block/mmcblk0p21)
Modem.img - T599UVAMB5 (/dev/block/mmcblk0p12)
modem.bin (/dev/block/mmcblk0p16)
param.lfs (/dev/block/mmcblk0p19)
Preload.img (/dev/block/mmcblk0p24)
efs.img (/dev/block/mmcblk0p11)
Click to expand...
Click to collapse

Hmmm... can you explain me what is that? Thx

Feyerabend said:
Hmmm... can you explain me what is that? Thx
Click to expand...
Click to collapse
It is for development purposes. It is basically the stock firmware minus the kernel and recovery.

goldfingerfif said:
I uploaded the system tar its almost 1GB I cannot pull the Kernel though.
I managed to get the system folder. Via http://forum.xda-developers.com/showthread.php?t=1578099
If someone can assist with getting the kernel without root I would be forever grateful. If it is unpossible then please let me know as well as I cannot find a root method that works.
Click to expand...
Click to collapse
So, what you basicly need is someone with linux who can make a system.img from this, and add supersu and su binary?
And then someone who makes a factoryreset and flash it in odin I guess..
That person might then be able to extract recovery.img and boot.img. Am I right?

tys0n said:
So, what you basicly need is someone with linux who can make a system.img from this, and add supersu and su binary?
And then someone who makes a factoryreset and flash it in odin I guess..
That person might then be able to extract recovery.img and boot.img. Am I right?
Click to expand...
Click to collapse
You don’t NEED linux, you can use Cygwin with windows, but yes someone can then make system.img or system.tar.md5 with supersu and su.
From there if a root shell is obtained recovery and boot partitions should be able to be extracted from the phone.
Then insecure kernel and custom recovery can be installed.
I’ve done something like this with the T989 but this phone is for someone at my work and so bricking is an issue unlike if it was a personal phone as well there is less motivation to do it if it isn’t mine.

goldfingerfif said:
You don’t NEED linux, you can use Cygwin with windows, but yes someone can then make system.img or system.tar.md5 with supersu and su.
From there if a root shell is obtained recovery and boot partitions should be able to be extracted from the phone.
Then insecure kernel and custom recovery can be installed.
I’ve done something like this with the T989 but this phone is for someone at my work and so bricking is an issue unlike if it was a personal phone as well there is less motivation to do it if it isn’t mine.
Click to expand...
Click to collapse
Somethimg like this I guess? http://forum.xda-developers.com/showthread.php?t=1081239&highlight=odin

tys0n said:
Somethimg like this I guess? http://forum.xda-developers.com/showthread.php?t=1081239&highlight=odin
Click to expand...
Click to collapse
Yes just like that minus the need to unpack it because it is just a tarball so 7zip or whatever should open it fine. I am at work but I believe my home computer has either a linux vm installed or Cygwin with dsixda’s kitchen.
I should be able to manually or through dsixda’s kitchen add supersu and su convert to a odin img and flash.
If it successfully roots so I can at least get a rooted shell so I can dd if=/dev/block/….. of=/sdcard/…img to get a recovery.img and boot.img then carefully cook up a TWRP or CWM recovery to flash then make a “custom” or modified stock rom to flash with insecured kernel.

Anything new on how this is going?

thecasual01 said:
Anything new on how this is going?
Click to expand...
Click to collapse
I added SuperSU.apk and su binary.
Scared to flash it without a known good working factory image. Need to read up on a couple things a little more like triple check I can flash just the system partition without boot, etc.

goldfingerfif said:
I added SuperSU.apk and su binary.
Scared to flash it without a known good working factory image. Need to read up on a couple things a little more like triple check I can flash just the system partition without boot, etc.
Click to expand...
Click to collapse
Excuse me if this may come across as stupid or ignorant, but to my understanding the SGH-T599 seems to be an alternative version of the S3 Mini , I think the main difference is the screen size? That being said, can you not use the current existing kernel, boot.img of the S3 mini? I'm basing this off the fact that I had soft-bricked my phone by attempting to flash CWM Recovery but it didn't work, and I couldn't get myself the stock recovery.img file so in an attempt to revive my phone, I substituted that with the S3 mini's and it worked. Although at first every time i turned on and off the phone it displayed noise (TV Static) but it no longer does so.
I would offer being a test monkey, but this is my only phone and I do not have any other phones that I could use in the scenario it does get bricked.

goldfingerfif said:
I added SuperSU.apk and su binary.
Scared to flash it without a known good working factory image. Need to read up on a couple things a little more like triple check I can flash just the system partition without boot, etc.
Click to expand...
Click to collapse
I think it will be fine to flash system.img only as long as you don't use any pit and repartition. Factory reset first to prevent bootloops.
tamil.soljahz said:
Excuse me if this may come across as stupid or ignorant, but to my understanding the SGH-T599 seems to be an alternative version of the S3 Mini , I think the main difference is the screen size? That being said, can you not use the current existing kernel, boot.img of the S3 mini? I'm basing this off the fact that I had soft-bricked my phone by attempting to flash CWM Recovery but it didn't work, and I couldn't get myself the stock recovery.img file so in an attempt to revive my phone, I substituted that with the S3 mini's and it worked. Although at first every time i turned on and off the phone it displayed noise (TV Static) but it no longer does so.
I would offer being a test monkey, but this is my only phone and I do not have any other phones that I could use in the scenario it does get bricked.
Click to expand...
Click to collapse
Are you saying you used a boot.img from s3 mini?

tamil.soljahz said:
Excuse me if this may come across as stupid or ignorant, but to my understanding the SGH-T599 seems to be an alternative version of the S3 Mini , I think the main difference is the screen size? That being said, can you not use the current existing kernel, boot.img of the S3 mini? I'm basing this off the fact that I had soft-bricked my phone by attempting to flash CWM Recovery but it didn't work, and I couldn't get myself the stock recovery.img file so in an attempt to revive my phone, I substituted that with the S3 mini's and it worked. Although at first every time i turned on and off the phone it displayed noise (TV Static) but it no longer does so.
I would offer being a test monkey, but this is my only phone and I do not have any other phones that I could use in the scenario it does get bricked.
Click to expand...
Click to collapse
What exactly did you use to get it up and running, just the recovery.img, system.img, or boot.img (kernel) you flashed or some combo?
Looks like processor, screen and possibly bluetooth are different
T-599 vs i8190

goldfingerfif said:
What exactly did you use to get it up and running, just the recovery.img, system.img, or boot.img (kernel) you flashed or some combo?
Looks like processor, screen and possibly bluetooth are different
T-599 vs i8190
Click to expand...
Click to collapse
I just flashed the recovery.img, and (incorrectly) came to the assumption that the boot.img and system.img would work on the phone as well. In fact, I realize I can't access recovery. I was asking whether that the S3 mini's boot.img would work on the T599V as well.
Also, according to this link: http://www.sammobile.com/2012/11/24/review-samsung-galaxy-s-iii-mini-gt-i8190-2/
it says the S3 mini uses the U8420 chipset as well, which is why I thought the phones were similar.

tamil.soljahz said:
I just flashed the recovery.img, and (incorrectly) came to the assumption that the boot.img and system.img would work on the phone as well. In fact, I realize I can't access recovery. I was asking whether that the S3 mini's boot.img would work on the T599V as well.
Also, according to this link: http://www.sammobile.com/2012/11/24/review-samsung-galaxy-s-iii-mini-gt-i8190-2/
it says the S3 mini uses the U8420 chipset as well, which is why I thought the phones were similar.
Click to expand...
Click to collapse
The site you linked doesn't mention the SGH-T599 just the GT-8190 and the GT-i9300, did you send the right link?

According to http://www.gsmchoice.com/en/catalogue/samsung/galaxyexhibit/ it's built on same board. ST-Ericsson U8420.
It' same for i8190, some sites say U8500 others say U8420.

The Cydia Impactor root method works on the T599, I just did it to mine. Stays rooted on reboot.

marksalot said:
The Cydia Impactor root method works on the T599, I just did it to mine. Stays rooted on reboot.
Click to expand...
Click to collapse
Cool
So, first guy who "dd" will be hero of the day
If partition layout is the same as i8190 it should look like this.
Code:
GT-I8190 PARTITION LAYOUT
Official Name * Fs * Mount point * Known as * Contents
/efs * ext4 * /dev/block/mmcblk0p11 * Efs folder *Device IMEI,mac address etc
/modemfs * ext4 * /dev/block/mmcblk0p12 * Radio *
/SdCcard * vfat * /dev/block/mmcblk1 /dev/block/mmcblk1p1 * Internal sd * Your stuff
/boot * emmc * /dev/block/mmcblk0p20 * kernel/zimage * Drivers etc
/recovery * emmc * /dev/block/mmcblk0p21 * Recovery partion * ??????
/system * ext4 * /dev/block/mmcblk0p22 * System folder * The operation system
/cache * ext4 * /dev/block/mmcblk0p23 * Cache partition * Update.zips csc,samsung and carriers customizations
/preload * ext4 * /dev/block/mmcblk0p24 * Hidden partition * Media files,apks etc from Samsung/carriers
/.lfs * j4fs * /dev/block/mmcblk0p19 * param.lfs ## * splash screen,charging animation download mode pngs, etc
/data * ext4 * /dev/block/mmcblk0p25 length=-16384 * data folder * Your download apps, current device and use, settings
/temp * ? * /dev/block/mmcblk0p5 * nedded to load *
* * * psccd and CSPSA *
* * * when reset is *
* * * triggered *
* * * *
* * * *
* *
* * * *
I guess boot, recovery, and param is most wanted

Here is the content of /proc/partitions
Code:
major minor #blocks name
7 0 5229 loop0
179 0 3866624 mmcblk0
179 1 128 mmcblk0p1
179 2 384 mmcblk0p2
179 3 1024 mmcblk0p3
179 4 1024 mmcblk0p4
179 5 512 mmcblk0p5
179 6 512 mmcblk0p6
179 7 512 mmcblk0p7
179 8 512 mmcblk0p8
179 9 1024 mmcblk0p9
179 10 1024 mmcblk0p10
179 11 16384 mmcblk0p11
179 12 16384 mmcblk0p12
179 13 16384 mmcblk0p13
179 14 51200 mmcblk0p14
179 15 64 mmcblk0p15
179 16 14336 mmcblk0p16
179 17 2048 mmcblk0p17
179 18 2048 mmcblk0p18
179 19 16384 mmcblk0p19
179 20 16384 mmcblk0p20
179 21 16384 mmcblk0p21
179 22 1228800 mmcblk0p22
179 23 737280 mmcblk0p23
179 24 102400 mmcblk0p24
179 25 1535983 mmcblk0p25
179 64 2048 mmcblk0boot1
179 32 2048 mmcblk0boot0
179 96 15637504 mmcblk1
179 97 15633408 mmcblk1p1
254 0 5229 dm-0
Here is the output of busybox df -h
I have a 16GB SD Card, apparently Maverick (GPS map app I installed) creates it's own partition.
Code:
busybox df -h
Filesystem Size Used Available Use% Mounted on
tmpfs 402.1M 112.0K 401.9M 0% /dev
tmpfs 402.1M 0 402.1M 0% /mnt/asec
tmpfs 402.1M 0 402.1M 0% /mnt/obb
tmpfs 402.1M 0 402.1M 0% /dev/shm
/dev/block/mmcblk0p22
1.2G 965.4M 215.7M 82% /system
/dev/block/mmcblk0p12
15.7M 4.3M 11.4M 28% /modemfs
/dev/block/mmcblk0p23
708.7M 12.0M 696.7M 2% /cache
/dev/block/mmcblk0p11
15.7M 4.5M 11.2M 29% /efs
/dev/block/mmcblk0p24
98.4M 11.6M 86.8M 12% /preload
/dev/block/mmcblk0p25
1.4G 1.3G 173.7M 88% /data
df: /mnt/.lfs: Function not implemented
/dev/fuse 1.3G 1.3G 73.7M 95% /storage/sdcard0
/dev/block/dm-0 5.0M 2.9M 2.1M 57% /mnt/asec/com.codesector.maverick.full-1
/dev/block/vold/179:97
14.9G 10.1G 4.8G 68% /storage/extSdCard

cat /proc/partitions gives me in I8190.
Code:
major minor #blocks name
7 0 16664 loop0
7 1 2111 loop1
7 2 5229 loop2
7 3 2111 loop3
7 4 2111 loop4
7 5 2111 loop5
7 6 2111 loop6
7 7 17703 loop7
179 0 7634944 mmcblk0
179 1 128 mmcblk0p1
179 2 384 mmcblk0p2
179 3 1024 mmcblk0p3
179 4 1024 mmcblk0p4
179 5 512 mmcblk0p5
179 6 512 mmcblk0p6
179 7 512 mmcblk0p7
179 8 512 mmcblk0p8
179 9 1024 mmcblk0p9
179 10 1024 mmcblk0p10
179 11 16384 mmcblk0p11
179 12 16384 mmcblk0p12
179 13 16384 mmcblk0p13
179 14 51200 mmcblk0p14
179 15 64 mmcblk0p15
179 16 14336 mmcblk0p16
179 17 2048 mmcblk0p17
179 18 2048 mmcblk0p18
179 19 16384 mmcblk0p19
179 20 16384 mmcblk0p20
179 21 16384 mmcblk0p21
179 22 1228800 mmcblk0p22
179 23 860160 mmcblk0p23
179 24 327680 mmcblk0p24
179 25 4945920 mmcblk0p25
179 64 2048 mmcblk0boot1
179 32 2048 mmcblk0boot0
179 96 15558144 mmcblk1
179 97 13473792 mmcblk1p1
179 98 2075648 mmcblk1p2
254 0 16663 dm-0
254 1 2110 dm-1
254 2 5229 dm-2
254 3 2110 dm-3
254 4 2110 dm-4
254 5 2110 dm-5
254 6 2110 dm-6
254 7 17703 dm-7
7 8 2111 loop8
254 8 2110 dm-8
7 9 26019 loop9
254 9 26019 dm-9
Looks like it matches pretty well

So, I used the Online Nandroid app, it detects the T599 as "codinatmo" and doesn't have a patch available.
Manually chose the "Samsung Galaxy S III mini GT-l8190" patch and installed.
Was able to back up boot.img and recovery.img, both 16MB.

Do not flash cm12 over 5.1 bootloader/finding the files for qhusb_bulk

THREAD IS NOW AT ->
http://forum.xda-developers.com/nexus-6/general/fix-fix-qhusbbulk-cm12-t3059518

I will help out. I have been reading all the threads about bricking. I have a working phone running skop and elemental. My computer is a little netbook running windows 7 32. I wont have access to it till later though.
Sent from my Nexus 6

Casper34 said:
I will help out. I have been reading all the threads about bricking. I have a working phone running skop and elemental. My computer is a little netbook running windows 7 32. I wont have access to it till later though.
Sent from my Nexus 6
Click to expand...
Click to collapse
sure no problems, i will need some comands to be run, not flashing or anything.
and thanks

opssemnik said:
sure no problems, i will need some comands to be run, not flashing or anything.
and thanks
Click to expand...
Click to collapse
I will PM you when I get near my computer, or can I run them in terminal emulator?
Sent from my Nexus 6

Casper34 said:
I will PM you when I get near my computer, or can I run them in terminal emulator?
Sent from my Nexus 6
Click to expand...
Click to collapse
which you prefer, tho the output will be a bit big

opssemnik said:
which you prefer, tho the output will be a bit big
Click to expand...
Click to collapse
Check PMs
Sent from my Nexus 6

Casper34 said:
Check PMs
Sent from my Nexus 6
Click to expand...
Click to collapse
can you show me the output of:
ls /dev/block
cat /proc/partitions
ls /dev/block/platform

So we just need to flash 5.0 bootloader before we flash cm Roms? can we still flash asop 5.0?
Sent from my Nexus 6 using Tapatalk

kenbrownstone said:
So we just need to flash 5.0 bootloader before we flash cm Roms? can we still flash asop 5.0?
Sent from my Nexus 6 using Tapatalk
Click to expand...
Click to collapse
once you flash the 5.1 bootloader you can not go back to 5.0.x bootloader. i tried and got a motorola error saying mismatch. so if you flash the 5.1 bootloader that's what you're stuck on. what i want to know is, can you still flash a 5.0.x system/boot image even though you're on 5.1 bootloader?

I flashed back to stock other day after running it ..Should that have been affected
Sent from my Nexus 6 using Tapatalk

looking foward to unbricking it. Thanks a lot

opssemnik said:
can you show me the output of:
ls /dev/block
cat /proc/partitions
ls /dev/block/platform
Click to expand...
Click to collapse
Here you go...... this from 5.0.1
Spoiler
[email protected]:/ $ su
[email protected]:/ # ls /dev/block
bootdevice
dm-0
loop0
loop1
loop2
loop3
loop4
loop5
loop6
loop7
mmcblk0
mmcblk0p1
mmcblk0p10
mmcblk0p11
mmcblk0p12
mmcblk0p13
mmcblk0p14
mmcblk0p15
mmcblk0p16
mmcblk0p17
mmcblk0p18
mmcblk0p19
[email protected]:/ # cat /proc/partitions
major minor #blocks name
179 0 30535680 mmcblk0
179 1 114688 mmcblk0p1
179 2 16384 mmcblk0p2
179 3 384 mmcblk0p3
179 4 56 mmcblk0p4
179 5 16 mmcblk0p5
179 6 32 mmcblk0p6
179 7 1024 mmcblk0p7
179 8 256 mmcblk0p8
179 9 512 mmcblk0p9
179 10 500 mmcblk0p10
179 11 4156 mmcblk0p11
179 12 384 mmcblk0p12
179 13 1024 mmcblk0p13
179 14 256 mmcblk0p14
179 15 512 mmcblk0p15
179 16 500 mmcblk0p16
179 17 4 mmcblk0p17
179 18 512 mmcblk0p18
179 19 1024 mmcblk0p19
179 20 1024 mmcblk0p20
179 21 1024 mmcblk0p21
179 22 1024 mmcblk0p22
179 23 16384 mmcblk0p23
179 24 16384 mmcblk0p24
179 25 2048 mmcblk0p25
179 26 32768 mmcblk0p26
179 27 256 mmcblk0p27
179 28 32 mmcblk0p28
179 29 128 mmcblk0p29
179 30 8192 mmcblk0p30
179 31 1024 mmcblk0p31
259 0 2528 mmcblk0p32
259 1 1 mmcblk0p33
259 2 8 mmcblk0p34
259 3 16400 mmcblk0p35
259 4 9088 mmcblk0p36
259 5 16384 mmcblk0p37
259 6 262144 mmcblk0p38
259 7 65536 mmcblk0p39
259 8 1024 mmcblk0p40
259 9 2097152 mmcblk0p41
259 10 27807616 mmcblk0p42
179 32 4096 mmcblk0rpmb
254 0 27807616 dm-0
[email protected]:/ # ls /dev/block/platform
msm_sdcc.1
[email protected]:/ #
Sent from my Nexus 6

My nexus is also bricked after flash cm12 on top of the 5.2 bootloader. I hit reboot in TWRP and the phone shut down and hasn't done anything since. I cannot get anything to show on the screen and my computer is not recognizing it through fastboot or adb commands. I am running Ubuntu if that helps but again, I cannot see the device connected at all. I am starting to think I need to send this in for RMA
Any help is appreciated.
EDIT: When I run "lsusb" command, I get the following line when my phone is plugged in-
Bus 002 Device 006: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)

Casper34 said:
Here you go...... this from 5.0.1
Spoiler
[email protected]:/ $ su
[email protected]:/ # ls /dev/block
bootdevice
dm-0
loop0
loop1
loop2
loop3
loop4
loop5
loop6
loop7
mmcblk0
mmcblk0p1
mmcblk0p10
mmcblk0p11
mmcblk0p12
mmcblk0p13
mmcblk0p14
mmcblk0p15
mmcblk0p16
mmcblk0p17
mmcblk0p18
mmcblk0p19
[email protected]:/ # cat /proc/partitions
major minor #blocks name
179 0 30535680 mmcblk0
179 1 114688 mmcblk0p1
179 2 16384 mmcblk0p2
179 3 384 mmcblk0p3
179 4 56 mmcblk0p4
179 5 16 mmcblk0p5
179 6 32 mmcblk0p6
179 7 1024 mmcblk0p7
179 8 256 mmcblk0p8
179 9 512 mmcblk0p9
179 10 500 mmcblk0p10
179 11 4156 mmcblk0p11
179 12 384 mmcblk0p12
179 13 1024 mmcblk0p13
179 14 256 mmcblk0p14
179 15 512 mmcblk0p15
179 16 500 mmcblk0p16
179 17 4 mmcblk0p17
179 18 512 mmcblk0p18
179 19 1024 mmcblk0p19
179 20 1024 mmcblk0p20
179 21 1024 mmcblk0p21
179 22 1024 mmcblk0p22
179 23 16384 mmcblk0p23
179 24 16384 mmcblk0p24
179 25 2048 mmcblk0p25
179 26 32768 mmcblk0p26
179 27 256 mmcblk0p27
179 28 32 mmcblk0p28
179 29 128 mmcblk0p29
179 30 8192 mmcblk0p30
179 31 1024 mmcblk0p31
259 0 2528 mmcblk0p32
259 1 1 mmcblk0p33
259 2 8 mmcblk0p34
259 3 16400 mmcblk0p35
259 4 9088 mmcblk0p36
259 5 16384 mmcblk0p37
259 6 262144 mmcblk0p38
259 7 65536 mmcblk0p39
259 8 1024 mmcblk0p40
259 9 2097152 mmcblk0p41
259 10 27807616 mmcblk0p42
179 32 4096 mmcblk0rpmb
254 0 27807616 dm-0
[email protected]:/ # ls /dev/block/platform
msm_sdcc.1
[email protected]:/ #
Sent from my Nexus 6
Click to expand...
Click to collapse
Thanks, im preparing the QPST / Drivers zip, im also looking into the factory images

ccb1208 said:
My nexus is also bricked after flash cm12 on top of the 5.2 bootloader. I hit reboot in TWRP and the phone shut down and hasn't done anything since. I cannot get anything to show on the screen and my computer is not recognizing it through fastboot or adb commands. I am running Ubuntu if that helps but again, I cannot see the device connected at all. I am starting to think I need to send this in for RMA
Any help is appreciated.
EDIT: When I run "lsusb" command, I get the following line when my phone is plugged in-
Bus 002 Device 006: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)
Click to expand...
Click to collapse
yep, in that mode we need a program that acts as QPST (or QPST itself) a 2nd_loader.hex (new bootloader) and a APQ8974_image hex that matches ours nexus 6, once there we can send the basic stuff and get rsd mode / fastboot to work, then we just flash factory images

Your best bet would be to try the Moto X/G blankflash program. It uses an executable called qboot which is a USB loader. It may be possible to use the 8226 programmer to flash the bootloader image back to the device from bulk mode. I'd doubt it'd work, but worth checking out.

freebee269 said:
once you flash the 5.1 bootloader you can not go back to 5.0.x bootloader. i tried and got a motorola error saying mismatch. so if you flash the 5.1 bootloader that's what you're stuck on. what i want to know is, can you still flash a 5.0.x system/boot image even though you're on 5.1 bootloader?
Click to expand...
Click to collapse
Yes, you can go back to the 5.0.x system after updating to 5.1
I just flashed the ENTIRE 5.0.1 factory image, minus the bootloader.
You must obviously already be bootloader unlocked to do so.
No ill-effects whatsoever.
If you do go back to 5.0.x, make sure you flash the radio for it as well. There's a chance you'll not be able to receive calls if on LTE with 5.1's radio, as was the case for me. Only on 3g/4g did calls go through (I'm on TMO, btw)

I had the same calls issue on T-Mobile, I was on a 5.0.2 ROM and had flashed the 5.1 bootloader and radio and a friend said she called me but I didn't get a call. When she came over I had her call me again but got nothing, I could call her though. I booted to a 5.1 rom and had her call me and my phone rang.

Hey I have a fully working N6 running stock 5.1, what can I do to help?

opssemnik said:
can you show me the output of:
ls /dev/block
cat /proc/partitions
ls /dev/block/platform
Click to expand...
Click to collapse
swimdude1120 said:
Hey I have a fully working N6 running stock 5.1, what can I do to help?
Click to expand...
Click to collapse
Run those commands if you are rooted and quote opssemnik, the one with the commands, so he can see them.
If you do, put the word SPOILER in brackets [] and then the output, the /SPOILER in the brackets []
Sent from my Nexus 6

TWRP-2.8.6.0 recovery mod(fix)

NOTE: Testers no longer required, now confirmed working for both kitkat and lollipop
This is for the T800/T805/T807 Exynos version only
Basically I have fixed some issues with the official build:
It is not possible to get root access to the shell with adb in the official version, you will get an error. I have fixed this as it is important for adb to be able to get shell access, you never know when it might be needed.
The reboot options have been corrected to change the reboot option from BOOTLOADER to DOWNLOAD . Reboot to Download mode now works.
TWRP still uses outdated Supersu and root files, so I have updated these to the latest versions.
Please use Odin 10.6 for installing: Odin 10.6
unofficial-twrp-2.8.6.0-chagall.tar

Anybody? just 2mins of your time. It won't brick your device. If it flashes with Odin and doesn't boot just reflash the official twrp or stock recovery.

ashyx said:
Anybody? just 2mins of your time. It won't brick your device. If it flashes with Odin and doesn't boot just reflash the official twrp or stock recovery.
Click to expand...
Click to collapse
Had some time before I do chores Fails in odin and flashify. In odin it would say name write start... then fail! And yet official twrp flashes fine

Right this is silly. I'm gonna do a simple repack of the official twrp, no changes. Can you test that? If that fails then at least I know where the problem lies!

ashyx said:
Right this is silly. I'm gonna do a simple repack of the official twrp, no changes. Can you test that? If that fails then at least I know where the problem lies!
Click to expand...
Click to collapse
Yep sure can!

DUHAsianSKILLZ said:
Yep sure can!
Click to expand...
Click to collapse
ok here you go.
https://www.androidfilehost.com/?fid=95916177934548161

ashyx said:
ok here you go.
https://www.androidfilehost.com/?fid=95916177934548161
Click to expand...
Click to collapse
Works!

DUHAsianSKILLZ said:
Works!
Click to expand...
Click to collapse
Good stuff, I have a feeling the lollipop update has changed the size of the recovery partition which is why it was being rejected.
If the link below works then I will see if I can reduce the size, but could really need to know what size the new partition is.
https://www.androidfilehost.com/?fid=95916177934548184

ashyx said:
Good stuff, I have a feeling the lollipop update has changed the size of the recovery partition which is why it was being rejected.
If the link below works then I will see if I can reduce the size, but could really need to know what size the new partition is.
https://www.androidfilehost.com/?fid=95916177934548184
Click to expand...
Click to collapse
Yep this one works also. Rebooting into download mode from twrp works fine. Seems to be the one!

Great, looks like we've discovered the problem. Just need to fix the adb shell issue and if size allows update supersu. Thanks your a great help. I'll update tomorrow.

ashyx said:
Great, looks like we've discovered the problem. Just need to fix the adb shell issue and if size allows update supersu. Thanks your a great help. I'll update tomorrow.
Click to expand...
Click to collapse
When you post the update tomorrow, or whenever you post it. Ill give it a try. Sorry I couldnt be much help on the testing stage at this time. I have been so busy with my own mods that I dont have much time for others at the time.
But I will try it out on your next update.. for sure... thanks for your support on this Machine...

Of course I realise you are busy with other things so appreciate the time.:good:
I have reduced the size of the files below, the first one is slightly large than the second. I cant reduce any more without reducing functionality, so if the first one doesn't work the second should, but at least 2 of the main issues, the adb shell problem and wrong reboot option will be fixed in both.
twrp2860v1
twrp2860v2
thanks again.

ashyx said:
Of course I realise you are busy with other things so appreciate the time.:good:
I have reduced the size of the files below, the first one is slightly large than the second. I cant reduce any more without reducing functionality, so if the first one doesn't work the second should, but at least 2 of the main issues, the adb shell problem and wrong reboot option will be fixed in both.
twrp2860v1
twrp2860v2
thanks again.
Click to expand...
Click to collapse
Hi I have just flashed the first one and it failed but the second one flashed ok.

ashyx said:
Of course I realise you are busy with other things so appreciate the time.:good:
I have reduced the size of the files below, the first one is slightly large than the second. I cant reduce any more without reducing functionality, so if the first one doesn't work the second should, but at least 2 of the main issues, the adb shell problem and wrong reboot option will be fixed in both.
twrp2860v1
twrp2860v2
thanks again.
Click to expand...
Click to collapse
I flashed the 2nd one, and it seemed to work. Matter of fact I just flashed my updated rom with it. Worked so far.
Thanks for taking the time to bring us yet another working TWRP...

Thanks for testing guys. First post updated with final version.
I'm curious as to what the size of the recovery partition has been changed to. Could someone run the following command either in Terminal or ADB if you're running Lollipop?:
cat /proc/partitions

ashyx said:
Thanks for testing guys. First post updated with final version.
I'm curious as to what the size of the recovery partition has been changed to. Could someone run the following command either in Terminal or ADB if you're running Lollipop?:
cat /proc/partitions[/QUOTE
Just sent you a email message.
Click to expand...
Click to collapse

ashyx said:
Thanks for testing guys. First post updated with final version.
I'm curious as to what the size of the recovery partition has been changed to. Could someone run the following command either in Terminal or ADB if you're running Lollipop?:
cat /proc/partitions
Click to expand...
Click to collapse
Here you go:
Code:
cat /proc/partitions
major minor #blocks name
7 0 4180 loop0
7 1 32380 loop1
7 2 32380 loop2
253 0 1048576 vnswap0
179 0 30535680 mmcblk0
179 1 4096 mmcblk0p1
179 2 4096 mmcblk0p2
179 3 20480 mmcblk0p3
179 4 4096 mmcblk0p4
179 5 4096 mmcblk0p5
179 6 4096 mmcblk0p6
179 7 4096 mmcblk0p7
259 0 8192 mmcblk0p8
259 1 8192 mmcblk0p9
259 2 10240 mmcblk0p10
259 3 10240 mmcblk0p11
259 4 4096 mmcblk0p12
259 5 20480 mmcblk0p13
259 6 4096 mmcblk0p14
259 7 4096 mmcblk0p15
259 8 12288 mmcblk0p16
259 9 4096 mmcblk0p17
259 10 2467840 mmcblk0p18
259 11 204800 mmcblk0p19
259 12 337920 mmcblk0p20
259 13 27385856 mmcblk0p21
179 24 4096 mmcblk0rpmb
179 16 4096 mmcblk0boot1
179 8 4096 mmcblk0boot0
179 32 124868096 mmcblk1
179 33 124863488 mmcblk1p1
254 0 4180 dm-0
254 1 32380 dm-1
254 2 32380 dm-2

Eliminater74 said:
Here you go:
Code:
cat /proc/partitions
major minor #blocks name
7 0 4180 loop0
7 1 32380 loop1
7 2 32380 loop2
253 0 1048576 vnswap0
179 0 30535680 mmcblk0
179 1 4096 mmcblk0p1
179 2 4096 mmcblk0p2
179 3 20480 mmcblk0p3
179 4 4096 mmcblk0p4
179 5 4096 mmcblk0p5
179 6 4096 mmcblk0p6
179 7 4096 mmcblk0p7
259 0 8192 mmcblk0p8
259 1 8192 mmcblk0p9
259 2 10240 mmcblk0p10
259 3 10240 mmcblk0p11
259 4 4096 mmcblk0p12
259 5 20480 mmcblk0p13
259 6 4096 mmcblk0p14
259 7 4096 mmcblk0p15
259 8 12288 mmcblk0p16
259 9 4096 mmcblk0p17
259 10 2467840 mmcblk0p18
259 11 204800 mmcblk0p19
259 12 337920 mmcblk0p20
259 13 27385856 mmcblk0p21
179 24 4096 mmcblk0rpmb
179 16 4096 mmcblk0boot1
179 8 4096 mmcblk0boot0
179 32 124868096 mmcblk1
179 33 124863488 mmcblk1p1
254 0 4180 dm-0
254 1 32380 dm-1
254 2 32380 dm-2
Click to expand...
Click to collapse
The recovery partition size hasn't changed it's still 10mb -
2 10240 mmcblk0p10
The strange thing is, as a test I have somehow been able to flash a working 28mb recovery image to a 10mb partition under kitkat. Not sure how this is even possible!

ashyx said:
The recovery partition size hasn't changed it's still 10mb -
2 10240 mmcblk0p10
The strange thing is, as a test I have somehow been able to flash a working 28mb recovery image to a 10mb partition under kitkat. Not sure how this is even possible!
Click to expand...
Click to collapse
Hey buddy. I've flashed your version in the first post ( which was updated in 6th April right? ) but I can't reboot into twrp. Any update on that?
Regards

d3xtr0 said:
Hey buddy. I've flashed your version in the first post ( which was updated in 6th April right? ) but I can't reboot into twrp. Any update on that?
Regards
Click to expand...
Click to collapse
How are you trying to boot into recovery and which version tab s do you have?
You can also try the updated version here: http://forum.xda-developers.com/gal...p-2-8-6-1-unofficial-sm-t800-805-807-t3074633

Need help putting phone into USB Diag Mode

I have looked at and tried every manual or how to I could find all over the web. Nothing seems to be working. Even if I run a getprop sys.usb.config it shows that the phone is in Diag,adb. However, I am not getting a comport showing up in Windows device manager. Does ASUS disable this process?

Have you enabled developer options in settings and selected "USB debugging" ?
If so, sounds like it might be a Windows driver issue. Grab the latest ones off the ASUS website and post back.

wang1chung said:
Have you enabled developer options in settings and selected "USB debugging" ?
If so, sounds like it might be a Windows driver issue. Grab the latest ones off the ASUS website and post back.
Click to expand...
Click to collapse
Yes, yes, and yes. Have done all that. Once in Diag mode it is suppose to show up as a Qualcomm comport device. Didn't doesn't even show up for me to install drivers.

when you plug your phone in, do you see "usb debugging" in the pull down menu?
Maybe another member can help with the Windows issue as I don't use that OS.
What are you trying to do?

wang1chung said:
when you plug your phone in, do you see "usb debugging" in the pull down menu?
Maybe another member can help with the Windows issue as I don't use that OS.
What are you trying to do?
Click to expand...
Click to collapse
Yes, USB debugging is activated, and I can ADB just fine. What I am trying to do is put the phone in USB Diagnostic(Diag) Mode, not USB debugging. When in USB Diag Mode the phone will communicate to the PC as a serial comport. This will allow me to use the Qualcomm Utilities to possibly edit and unlock LTE bands on it.

Ah, my apologies, I thought you meant debugging mode.
Maybe someone else can chime in to assist.
Have you tried a different computer? Post a link to the software, I'll try it on my Linux box. I could really use this software on the ZenFone Ultra if it works.

wang1chung said:
Ah, my apologies, I thought you meant debugging mode.
Maybe someone else can chime in to assist.
Have you tried a different computer? Post a link to the software, I'll try it on my Linux box. I could really use this software on the ZenFone Ultra if it works.
Click to expand...
Click to collapse
Yes it is the Ultra that I am trying to use it for. Posted here because there is more traffic, and thought maybe the devices are close enough that if someone figured it out on the Zenfone, that it could translate to the Ultra as well. There are multiple guides on XDA, but this is the main one I was trying to follow:
https://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
Although I do admit I have been bouncing around from guide to guide, basically everything that Google search could uncover.

You'll be my wife's hero if you can get this done. Post back how it goes.
Edit: I see the ZenFone 3 ultra zu680kl on willmyphonework.net shows different 4g bands than the phones for sale on gearbest. Which bands did you need and do you have any idea why they're different? I was looking at the global version not the China one.

wang1chung said:
You'll be my wife's hero if you can get this done. Post back how it goes.
Edit: I see the ZenFone 3 ultra zu680kl on willmyphonework.net shows different 4g bands than the phones for sale on gearbest. Which bands did you need and do you have any idea why they're different? I was looking at the global version not the China one.
Click to expand...
Click to collapse
I need 2, 4, and 17

I need the same, lol
In my researching, there was one guy that said he got it to work with an asus rom with an app called "ASUS log tool e". I downloaded that firmware, extracted the app and tried to install. It didn't work, said the app already existed. Maybe there's a hidden one already on our phones?
I also tried win7 32bit and linux, can't detect my phone either.
On updating to nougat, I have lost root explorer (latest version from the play store doesn't work). I'll keep messing with it.
You find anything?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

doctahjeph said:
..... There are multiple guides on XDA, but this is the main one I was trying to follow:
https://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
Click to expand...
Click to collapse
so, I think I got it to work. Using your guide you referenced, I can browse the nv files with qpst and read the data from ID 01877 in qxdm. I stopped there because all my LTE bands work and I didn't want to mess anything up, lol.
I forced windows to install "Qualcomm hs-usb qdloader 9008" drivers after I executed a script I found that enables (I think) diag mode.
Can you take a look with your zu680kl ?
I used the script from doroid.org/2017/01/24/zenfone-3-ze520kl-rooted-diag-mode/

wang1chung said:
so, I think I got it to work. Using your guide you referenced, I can browse the nv files with qpst and read the data from ID 01877 in qxdm. I stopped there because all my LTE bands work and I didn't want to mess anything up, lol.
I forced windows to install "Qualcomm hs-usb qdloader 9008" drivers after I executed a script I found that enables (I think) diag mode.
Can you take a look with your zu680kl ?
I used the script from doroid.org/2017/01/24/zenfone-3-ze520kl-rooted-diag-mode/
Click to expand...
Click to collapse
Awesome!! I will definitely take a look at this today. Thanks!

wang1chung said:
so, I think I got it to work. Using your guide you referenced, I can browse the nv files with qpst and read the data from ID 01877 in qxdm. I stopped there because all my LTE bands work and I didn't want to mess anything up, lol.
I forced windows to install "Qualcomm hs-usb qdloader 9008" drivers after I executed a script I found that enables (I think) diag mode.
Can you take a look with your zu680kl ?
I used the script from doroid.org/2017/01/24/zenfone-3-ze520kl-rooted-diag-mode/
Click to expand...
Click to collapse
yes yes yes!!! finally!! you are the man!! I freaking love you dude!!

No way, it works? So you have successfully enabled those LTE bands? Omg, I'm buying that phone now!

wang1chung said:
No way, it works? So you have successfully enabled those LTE bands? Omg, I'm buying that phone now!
Click to expand...
Click to collapse
wait, lol. sorry the computer seeing the phones an a comport part works. I am in the process now of trying to edit the bands. I will report back soon, hopefully with good news.

Lol
Ok, well to test that you have successfully enabled them, the app "network signal guru" is the only one I've found that displays the correct in use LTE band.
Good luck!

wang1chung said:
Lol
Ok, well to test that you have successfully enabled them, the app "network signal guru" is the only one I've found that displays the correct in use LTE band.
Good luck!
Click to expand...
Click to collapse
Not looking good​ so far. I get right up to rewriting the NV values, but Everytime I reboot to set the new values they always resort back to the original values. From what I have read this maybe a fail safe setup in the kernel by ASUS. In which case I can get around it with a stock custom kernel. Non of those lying around. I have no clue how to even compile one myself. So more research I must do.

doctahjeph said:
Not looking good​ so far. I get right up to rewriting the NV values, but Everytime I reboot to set the new values they always resort back to the original values. From what I have read this maybe a fail safe setup in the kernel by ASUS. In which case I can get around it with a stock custom kernel. Non of those lying around. I have no clue how to even compile one myself. So more research I must do.
Click to expand...
Click to collapse
Did you happen to get the correct SPC code for QPST? I have read there are issues writing the NV values without the correct SPC code, how did you get it? I tried reading 00085 (sec_code) and get a "no diag response". Edit: I updated qxdm and confirmed it is 000000.
I am trying to do a full NV backup through the "software download" part of QPST and it doesn't complete. Have you been able to? I'd feel more comfortable if I had a full and proper QCN backup before I started messing with it.
Are we assuming Asus injected the anti-tamper code into the stock kernel only? So compiling the stock kernel with unmolested source code should be all we need?
---------- Post added at 04:00 AM ---------- Previous post was at 03:43 AM ----------
forgot to add some partition info I got when I was bored. I made some dd backups of all the partitions too, just missing the QCN backup file.
EDIT: From what I've read, the IMEI info is stored in the modemst1, modemst2, and fsg partitions (mmcblk0p24, mmcblk0p26 and mmcblk0p27). If a QCN backup is not possible, I would definitely advise backing up these.
Code:
ASUS_Z012D:/ # cat /proc/partitions
major minor #blocks name
7 0 98304 loop0
254 0 786432 zram0
179 0 61071360 mmcblk0
179 1 1280 mmcblk0p1
179 2 1280 mmcblk0p2
179 3 512 mmcblk0p3
179 4 512 mmcblk0p4
179 5 2048 mmcblk0p5
179 6 2048 mmcblk0p6
179 7 256 mmcblk0p7
179 8 256 mmcblk0p8
179 9 256 mmcblk0p9
179 10 256 mmcblk0p10
179 11 256 mmcblk0p11
179 12 256 mmcblk0p12
179 13 256 mmcblk0p13
179 14 256 mmcblk0p14
179 15 128 mmcblk0p15
179 16 128 mmcblk0p16
179 17 32 mmcblk0p17
179 18 8 mmcblk0p18
179 19 5120 mmcblk0p19
179 20 5120 mmcblk0p20
179 21 16 mmcblk0p21
179 22 1024 mmcblk0p22
179 23 1024 mmcblk0p23
179 24 1536 mmcblk0p24
179 25 1 mmcblk0p25
179 26 1536 mmcblk0p26
179 27 1536 mmcblk0p27
179 28 20480 mmcblk0p28
179 29 1024 mmcblk0p29
179 30 1024 mmcblk0p30
179 31 1024 mmcblk0p31
259 0 1024 mmcblk0p32
259 1 1024 mmcblk0p33
259 2 1024 mmcblk0p34
259 3 1024 mmcblk0p35
259 4 1024 mmcblk0p36
259 5 1024 mmcblk0p37
259 6 512 mmcblk0p38
259 7 512 mmcblk0p39
259 8 32 mmcblk0p40
259 9 512 mmcblk0p41
259 10 1024 mmcblk0p42
259 11 512 mmcblk0p43
259 12 4096 mmcblk0p44
259 13 256 mmcblk0p45
259 14 256 mmcblk0p46
259 15 8 mmcblk0p47
259 16 11264 mmcblk0p48
259 17 2048 mmcblk0p49
259 18 1536 mmcblk0p50
259 19 2048 mmcblk0p51
259 20 16384 mmcblk0p52
259 21 65536 mmcblk0p53
259 22 16384 mmcblk0p54
259 23 32768 mmcblk0p55
259 24 32768 mmcblk0p56
259 25 32768 mmcblk0p57
259 26 32768 mmcblk0p58
259 27 32768 mmcblk0p59
259 28 49152 mmcblk0p60
259 29 16384 mmcblk0p61
259 30 86016 mmcblk0p62
259 31 32768 mmcblk0p63
259 32 212992 mmcblk0p64
259 33 131072 mmcblk0p65
259 34 3932160 mmcblk0p66
259 35 56233967 mmcblk0p67
179 32 4096 mmcblk0rpmb
179 64 62521344 mmcblk1
179 65 62520320 mmcblk1p1
253 0 56233951 dm-0
ASUS_Z012D:/ # df
Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 1716480 5876 1710604 1% /
tmpfs 1826588 644 1825944 1% /dev
tmpfs 1826588 0 1826588 0% /mnt
/dev/fuse 55220256 26700280 28519976 49% /mnt/runtime/default/emulated
/dev/fuse 55220256 26700280 28519976 49% /mnt/runtime/read/emulated
/dev/fuse 55220256 26700280 28519976 49% /mnt/runtime/write/emulated
/dev/block/vold/public:179,65 62505024 56435648 6069376 91% /mnt/media_rw/ADCA-0A16
/dev/fuse 62505024 56435648 6069376 91% /mnt/runtime/default/ADCA-0A16
/dev/fuse 62505024 56435648 6069376 91% /mnt/runtime/read/ADCA-0A16
/dev/fuse 62505024 56435648 6069376 91% /mnt/runtime/write/ADCA-0A16
/dev/block/mmcblk0p66 3749404 3443272 306132 92% /system
/dev/block/loop0 92656 2392 90264 3% /system/bin/su
/dev/block/mmcblk0p65 124912 408 124504 1% /cache
/dev/block/mmcblk0p56 28144 340 27804 2% /persist
/dev/block/mmcblk0p54 12016 5052 6964 43% /dsp
/dev/block/mmcblk0p62 85968 75008 10960 88% /firmware
/dev/block/mmcblk0p61 12016 40 11976 1% /persdata/absolute
/dev/block/mmcblk0p53 60400 4020 56380 7% /asdf
/dev/block/mmcblk0p28 16048 5328 10720 34% /factory
/dev/block/mmcblk0p60 12016 8344 3672 70% /asusfw
/dev/block/mmcblk0p63 27632 44 27588 1% /ADF
/dev/block/mmcblk0p64 199648 163352 36296 82% /APD
/dev/block/dm-0 55220256 26700280 28519976 49% /data
ASUS_Z012D:/ #
ASUS_Z012D:/data # parted /dev/block/mmcblk0
GNU Parted 1.8.8.1.179-aef3
Using /dev/block/mmcblk0
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) p
Model: MMC HCG8a4 (sd/mmc)
Disk /dev/block/mmcblk0: 62.5GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Number Start End Size File system Name Flags
1 17.4kB 1328kB 1311kB sbl1
2 1328kB 2639kB 1311kB sbl1bak
3 2639kB 3163kB 524kB rpm
4 3163kB 3687kB 524kB rpmbak
5 3687kB 5785kB 2097kB tz
6 5785kB 7882kB 2097kB tzbak
7 7882kB 8144kB 262kB devcfg
8 8144kB 8406kB 262kB devcfgbak
9 8406kB 8668kB 262kB keymaster
10 8668kB 8930kB 262kB keymasterbak
11 8930kB 9192kB 262kB cmnlib
12 9192kB 9455kB 262kB cmnlibbak
13 9455kB 9717kB 262kB cmnlib64
14 9717kB 9979kB 262kB cmnlib64bak
15 9979kB 10.1MB 131kB lksecapp
16 10.1MB 10.2MB 131kB lksecappbak
17 10.2MB 10.3MB 32.8kB DDR
18 10.3MB 10.3MB 8192B ssd
19 10.3MB 15.5MB 5243kB aboot
20 15.5MB 20.8MB 5243kB abootbak
21 20.8MB 20.8MB 16.4kB sec
22 33.6MB 34.6MB 1049kB devinfo
23 50.3MB 51.4MB 1049kB sysinfo
24 51.4MB 53.0MB 1573kB fsg
25 53.0MB 53.0MB 1024B fsc
26 53.0MB 54.5MB 1573kB modemst1
27 54.5MB 56.1MB 1573kB modemst2
28 56.1MB 77.1MB 21.0MB ext4 factory
29 77.1MB 78.1MB 1049kB asuskey
30 78.1MB 79.2MB 1049kB asuskey2
31 79.2MB 80.2MB 1049kB asuskey3
32 80.2MB 81.3MB 1049kB asuskey4
33 81.3MB 82.3MB 1049kB asuskey5
34 82.3MB 83.4MB 1049kB asuskey6
35 83.4MB 84.4MB 1049kB persistent
36 84.4MB 85.5MB 1049kB asusgpt
37 85.5MB 86.5MB 1049kB misc
38 86.5MB 87.0MB 524kB keystore
39 87.0MB 87.6MB 524kB config
40 87.6MB 87.6MB 32.8kB limits
41 87.6MB 88.1MB 524kB mota
42 88.1MB 89.2MB 1049kB dip
43 89.2MB 89.7MB 524kB syscfg
44 89.7MB 93.9MB 4194kB mcfg
45 93.9MB 94.1MB 262kB apdp
46 94.1MB 94.4MB 262kB msadp
47 94.4MB 94.4MB 8192B dpo
48 94.4MB 106MB 11.5MB splash
49 106MB 108MB 2097kB abootdebug
50 108MB 110MB 1573kB fsgCA
51 110MB 112MB 2097kB abootlog
52 117MB 134MB 16.8MB oem
53 134MB 201MB 67.1MB ext4 asdf
54 201MB 218MB 16.8MB ext4 dsp
55 218MB 252MB 33.6MB mdtp
56 252MB 285MB 33.6MB ext4 persist
57 285MB 319MB 33.6MB ftm
58 319MB 352MB 33.6MB boot
59 352MB 386MB 33.6MB recovery
60 386MB 436MB 50.3MB ext4 asusfw
61 436MB 453MB 16.8MB ext4 persdata
62 453MB 541MB 88.1MB fat16 modem
63 541MB 575MB 33.6MB ext4 ADF
64 575MB 793MB 218MB ext4 APD
65 793MB 927MB 134MB ext4 cache
66 927MB 4953MB 4027MB ext4 system
67 4953MB 62.5GB 57.6GB userdata

doctahjeph, have you made any progress? Did you write "0" value to 6828/6829 before writing 134283487 value? Have you tried the new Lineage OS rom (https://forum.xda-developers.com/zenfone-3/development/unofficial-lineageos-14-1-ze520kl-t3587178), maybe it'll allow you to write if you just flash the kernel from this rom? It'll definitely FC like a mofo but might be enough to write the NV values.
I tried this on my wife's phone, the Le Max x900, got into diag mode, re-wrote the nv values , even got the new LTE bands to show up in network signal guru but it won't switch to them (I deselected band 7 and it wouldn't switch to 2/4/17 like my zf3 does). I'm not sure this works for all the phones, unless you've found some other info out? I'm wondering about NV 1878 which I've read needs to be changed, but if there is no version of the phone that comes with those bands enabled, there's no way to know what the value should be. I tried flashing a modem from a similar phone with those bands enabled and soft-bricked it, lol.
anyways, if you need any values from zf3, let me know.

Any luck with this. I am donating 500 bucks to anyone who solves this. Enabling all Lte bands to work