Deleted
@rocker00
Hey, I'm glad that I could help you out with the rooting process!
It feels really good when you actually see your work being used to help others out and with credits added too !
If you need more scripts just PM me, I would love to get involved with your projects !
Does this require a locked or unlocked bootloader and can this be ported to the Sony Xperia Z2 tablet
XenTeckz said:
Does this require a locked or unlocked bootloader and can this be ported to the Sony Xperia Z2 tablet
Click to expand...
Click to collapse
You don't need a unlocked bootloader, but I could help you with the Z2 tablet port!
moman2000 said:
@rocker00
Hey, I'm glad that I could help you out with the rooting process!
It feels really good when you actually see your work being used to help others out and with credits added too !
If you need more scripts just PM me, I would love to get involved with your projects !
Click to expand...
Click to collapse
XenTeckz said:
Does this require a locked or unlocked bootloader and can this be ported to the Sony Xperia Z2 tablet
Click to expand...
Click to collapse
@moman2000 thank you my friend for these nice words sure we are here to help each others but actually this is not my project at all
@XenTeckz it's for both locked and unlocked and for z2 tablet support you can ask shoey63 about that.
@rocker00
Thanks for making this thread:good:
I don't own a Z2, but I have added both D5803 and D5802 to to iovyroot binary.
Code:
//Z2 23.5.A.0.575
{ "D6502", "Linux version 3.4.0-perf-g43ea728 ([email protected]) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 22 17:27:56 2016",
{ (void*)FSYNC_OFFSET(0xc1233a70) },
(void*)0xc122848c, (void*)0xc12284b4, (void*)0xc102f200, (void*)0xc1226a30 },
//Z2 23.5.A.0.575
{ "D6503", "Linux version 3.4.0-perf-g43ea728 ([email protected]) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 22 17:27:56 2016",
{ (void*)FSYNC_OFFSET(0xc1233a70) },
(void*)0xc122848c, (void*)0xc12284b4, (void*)0xc102f200, (void*)0xc1226a30 },
It seems to be the same kernel anyway
Regarding Z2 TAB support:
@danalec might be able to help.
Have a look here http://forum.xda-developers.com/xperia-z2-tablet/general/sgp551-xperia-z2-tablet-official-t2871485/post68136137#post68136137
shoey63 said:
@rocker00
Thanks for making this thread:good:
I don't own a Z2, but I have added both D5803 and D5802 to to iovyroot binary.
Code:
//Z2 23.5.A.0.575
{ "D6502", "Linux version 3.4.0-perf-g43ea728 ([email protected]) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 22 17:27:56 2016",
{ (void*)FSYNC_OFFSET(0xc1233a70) },
(void*)0xc122848c, (void*)0xc12284b4, (void*)0xc102f200, (void*)0xc1226a30 },
//Z2 23.5.A.0.575
{ "D6503", "Linux version 3.4.0-perf-g43ea728 ([email protected]) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 22 17:27:56 2016",
{ (void*)FSYNC_OFFSET(0xc1233a70) },
(void*)0xc122848c, (void*)0xc12284b4, (void*)0xc102f200, (void*)0xc1226a30 },
It seems to be the same kernel anyway
Regarding Z2 TAB support:
@danalec might be able to help.
Have a look here http://forum.xda-developers.com/show...7&postcount=30
Click to expand...
Click to collapse
i added the link to your thread so everybody can knows the supported devices and keep in touch with your thread.
thanks this works
Install.bat?
Hi, the "recovery" zip seems to be empty when downloaded. There is no install.bat file inside that I can see.
Thanks
patchyfog said:
Hi, the "recovery" zip seems to be empty when downloaded. There is no install.bat file inside that I can see.
Thanks
Click to expand...
Click to collapse
download again everything is included in the zip.
rocker00 said:
download again everything is included in the zip.
Click to expand...
Click to collapse
Hi, just downloaded again, still empty
patchyfog said:
Hi, just downloaded again, still empty
Click to expand...
Click to collapse
try to extract with 7zip or winzip because no any issue with the zip i downloaded 2 times to make sure its ok !
Hello everyone, tnak you for this solution, but I can't continue until the step *-power the device off and flash .575 kernel with flashtool ( attached ).NOTE: rename the file from .zip to .ftf ( VERY IMPORTANT ) because Flashtool can't see the ftf files :/
BroenGuiraldson said:
Hello everyone, tnak you for this solution, but I can't continue until the step *-power the device off and flash .575 kernel with flashtool ( attached ).NOTE: rename the file from .zip to .ftf ( VERY IMPORTANT ) because Flashtool can't see the ftf files :/
Click to expand...
Click to collapse
To flash a file with flashtool it must be ftf. So just rename .zip to .ftf
Sent from my D6503 using XDA-Developers mobile app
I renamed it already in *.ftf, I tried to eventually drag it but it doen't work, the function isn't supported by Flashtool.
I tried to move the ftf file to an other folder but can't be seen by Flashtool.
I'll try later that day at home because I tried at office, but there is maybe some security locked function on my computer like antivirus (I doubt of that, I desactivate it for the *.bat file for example) or anything else.
Keep in touch.
Edit: Alright, the issue is solved, I tried from my own computer, it's working fine, I can see ftf files.
By the way, important information /!\ : You must launch the tool *.bat with administrator rights on Windows 10. Without this, there is some errors like "adb server version (32) doesn't match this client (36)" and the phone don't reboot into recovery mode when it's finish.
*-flash supersu then flash .291 kernel with wiping Cache & Dalvik... ==> OK done.
*-start the device ==> OK done.
Edit 2: At second reboot can't access to recovery, the phone bootloop :/
Hi, the phone don't go into recovery automatically.
Edit: I got it. Have to create PATH system variable
rocker00 said:
try to extract with 7zip or winzip because no any issue with the zip i downloaded 2 times to make sure its ok !
Click to expand...
Click to collapse
Hey, yeah 7Zip worked, thanks.
I have Z2 D6502 Can it Work ?
phone turn on
the root procedure is successful. I have a little problem: when I put in charging the phone turned off, turns on and refill on.
Tips? I state that I have locked bootloader.
karantamboli said:
I have Z2 D6502 Can it Work ?
Click to expand...
Click to collapse
SuperMattew84 said:
the root procedure is successful. I have a little problem: when I put in charging the phone turned off, turns on and refill on.
Tips? I state that I have locked bootloader.
Click to expand...
Click to collapse
@karantamboli it should work because it's the same kernel so you may give a try
@SuperMattew84 did you flash .291 kernel again after you have done with root ?
Related
how to make rom from source code?
source code link
download.lenovo.com/consumer/open_source_code/S5000_Open_Source_20130918.tar.gz
rendane said:
how to make rom from source code?
source code link
download.lenovo.com/consumer/open_source_code/S5000_Open_Source_20130918.tar.gz
Click to expand...
Click to collapse
Just ordered this tablet, would love to know if there are any roms out there for it; root seems to be lost on after the OTA update, is that right?
Do you know of any threads/sites for the S5000?
threads/sites for the S5000
Bingley said:
Just ordered this tablet, would love to know if there are any roms out there for it; root seems to be lost on after the OTA update, is that right?
Do you know of any threads/sites for the S5000?
Click to expand...
Click to collapse
lenovo-forums.ru/forum/220-%D0%BF%D1%80%D0%BE%D1%88%D0%B8%D0%B2%D0%BA%D0%B8-lenovo-s5000
rendane said:
how to make rom from source code?
source code link
download.lenovo.com/consumer/open_source_code/S5000_Open_Source_20130918.tar.gz
Click to expand...
Click to collapse
it's just a kenel Source~
Anyone know how to root after the ota update?
voice call ability
qzsu0420 said:
it's just a kenel Source~
Click to expand...
Click to collapse
lenovo-forums.ru/forum/220-%D0%BF%D1%80%D0%BE%D1%88%D0%B8%D0%B2%D0%BA%D0%B8-lenovo-s5000
I want a rom, that it has voice call ability
can you help me?
I'm also begging someone to help me find a way to add call function to this tablet since everything worked perfectly for me except from the missing of calling function.
Sorry again for my bad English.
Thr Roms on russian forum doesn't support calling. I flashed one of them for Google support and now I lost call option.
You can root this tablet with Farmaroot. it works fine.
[rom] s5000_a422_002_034_130924_cn_3g
[ROM] S5000_A422_002_034_130924_CN_3G
ِDOWNLOAD
Hardware : MT8389
Model : Lenovo S5000-H
Build number : S5000_A422_002_034_130924_CN_3G
Build date UTC : 20130923-194953
Android v : 4.2.2
Baseband v: -----
Kernel v : 3.4.5 ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 SMP
languages: English, Chinese
Keyboard: multilanguage
Can we find a way to add in Gapps to this ROM, I'm sorry for repeating the same question in 2 different topic thread.
rendane said:
[ROM] S5000_A422_002_034_130924_CN_3G
ِDOWNLOAD
Hardware : MT8389
Model : Lenovo S5000-H
Build number : S5000_A422_002_034_130924_CN_3G
Build date UTC : 20130923-194953
Android v : 4.2.2
Baseband v: -----
Kernel v : 3.4.5 ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 SMP
languages: English, Chinese
Keyboard: multilanguage
Click to expand...
Click to collapse
Is this the original, rootable firmware, or the updated, non-rootable one?
Bingley said:
Is this the original, rootable firmware, or the updated, non-rootable one?
Click to expand...
Click to collapse
This is original rootable firmware and you need SRoot.exe (in chinese language) Even the "SUperUser" is in chinese but root is perfectly working.
---------- Post added at 11:08 AM ---------- Previous post was at 10:40 AM ----------
kelvinpham said:
Can we find a way to add in Gapps to this ROM, I'm sorry for repeating the same question in 2 different topic thread.
Click to expand...
Click to collapse
please visit my post in this link if you want to add GApps:
http://forum.xda-developers.com/showthread.php?t=2624477&page=2
help lenovo s5000h 3g
jayayuyang said:
This is original rootable firmware and you need SRoot.exe (in chinese language) Even the "SUperUser" is in chinese but root is perfectly working.
---------- Post added at 11:08 AM ---------- Previous post was at 10:40 AM ----------
please visit my post in this link if you want to add GApps:
http://forum.xda-developers.com/showthread.php?t=2624477&page=2
Click to expand...
Click to collapse
hi broth
i write you from italy i need a rom for my lenovo s5000-h 3g with italian lenguage and stable for 3g on my country do you now how can find ?
pls broth help me im desperate , if i not find i must resend a tablet to china for reinstall and is expansive , i tryed to reflash my tablet with one rom , but have onli chinese and english and playstore is not avalaible and i don't can install playstore apk ....pls you can tell me how find this rom with italian lenguage?
thankyou and sorry for my poor english!!!
lenovo s5000-h radio fm
Hi i bought this tablet from china with Chinese rom and i put the international rom from an Russian site this rom doesn’t have radio fm how can i put fm radio to the international rom ? i have try some fm apk witch i fount on the internet even i put again the chines rom and i extract the original apk file and doesn’t work is thereany way i can work the fm radio?
Thanks
You can install the app in this link http://www.4shared.com/mobile/d4OUMcwFba/Radio.html
excuse me, i have a problem with my lenovo s5000. can you help me. please?
the problem is, after i upgrade my tab to android 4.4.2 kitkat, my tab can't detect my sim card, i can't send or receive messages. and also i can't activate my data connection. why should i do? actually if possible, i want to downgrade it back to 4.2.2 jellybean but i don't know the way to do that.
i have galxy s5 copu phone with this specific
Hardware : MT6589
Model : GT-I9600
Build number : ALPS.JB3.MP.V1.2
Build date UTC : 20140521-103653
Android v : 4.2.2
Baseband v: MOLY.WR8.W1315.MD.WG.MP.V2, 2013/07/02 17:21
Kernel v : 3.4.5 ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 SMP Wed May 21 18:34:51 CST 2014
whene i try to recovery mode the screens how erro n command to run click next to update ur system
and download mode dont existe any help my friends
ramailo said:
i have galxy s5 copu phone with this specific
Hardware : MT6589
Model : GT-I9600
Build number : ALPS.JB3.MP.V1.2
Build date UTC : 20140521-103653
Android v : 4.2.2
Baseband v: MOLY.WR8.W1315.MD.WG.MP.V2, 2013/07/02 17:21
Kernel v : 3.4.5 ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 SMP Wed May 21 18:34:51 CST 2014
whene i try to recovery mode the screens how erro n command to run click next to update ur system
and download mode dont existe any help my friends
Click to expand...
Click to collapse
Sorry but if half of that information is correct, you have a clone i.e. a fake S5. Clones typically lack download mode, have pre 4.4.2 OS and MT class processors.
.
fffft said:
Sorry but if half of that information is correct, you have a clone i.e. a fake S5. Clones typically lack download mode, have pre 4.4.2 OS and MT class processors.
.
Click to expand...
Click to collapse
it mean there is no solution for it ? or any other image i can install it or so
ramailo said:
it mean there is no solution for it ? or any other image i can install it or so
Click to expand...
Click to collapse
That would be entirely dependent upon the design of the clone. You'd need to identify, who made it and find their web /support site to delineate your options.
Failing that, do a Google search to see if anyone else online has puzzled out the viable options for your clone. You might be able to update the firmware to a generic Kitkat. You probably won't be able to get OTA updates, use Odin or do a lot of other things that you can with a S5.
.
fffft said:
That would be entirely dependent upon the design of the clone. You'd need to identify, who made it and find their web /support site to delineate your options.
Failing that, do a Google search to see if anyone else online has puzzled out the viable options for your clone. You might be able to update the firmware to a generic Kitkat. You probably won't be able to get OTA updates, use Odin or do a lot of other things that you can with a S5.
.
Click to expand...
Click to collapse
i try to find the designer but no chance thats why im seeking help
ramailo said:
i have galxy s5 copu phone with this specific
Hardware : MT6589
Model : GT-I9600
Build number : ALPS.JB3.MP.V1.2
Build date UTC : 20140521-103653
Android v : 4.2.2
Baseband v: MOLY.WR8.W1315.MD.WG.MP.V2, 2013/07/02 17:21
Kernel v : 3.4.5 ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 SMP Wed May 21 18:34:51 CST 2014
whene i try to recovery mode the screens how erro n command to run click next to update ur system
and download mode dont existe any help my friends
Click to expand...
Click to collapse
Look here for instance http://www.china-devices.com/Thread-mt6572-ALPS-JB3-MP-V1 , it seems to be a Chinese HDC device, they produce cloned S4/S5 devices. Don`t flash anything from here mate or you could brick your device.
---------- Post added at 11:03 PM ---------- Previous post was at 10:57 PM ----------
ramailo said:
i have galxy s5 copu phone with this specific
Hardware : MT6589
Model : GT-I9600
Build number : ALPS.JB3.MP.V1.2
Build date UTC : 20140521-103653
Android v : 4.2.2
Baseband v: MOLY.WR8.W1315.MD.WG.MP.V2, 2013/07/02 17:21
Kernel v : 3.4.5 ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 SMP Wed May 21 18:34:51 CST 2014
whene i try to recovery mode the screens how erro n command to run click next to update ur system
and download mode dont existe any help my friends
Click to expand...
Click to collapse
Look here for instance http://www.china-devices.com/Thread-mt6572-ALPS-JB3-MP-V1 https://www.google.com/search?q=MOL...07/02+17:21&ie=utf-8&oe=utf-8&aq=t&gws_rd=ssl or here , it seems to be a Chinese HDC device, they produce cloned S4/S5 devices. Don`t flash anything from here mate or you could brick your device.
lohano word
i looked on china forum always there is somthing worng if i find room for mtk6589 the model i finde is not same as my model you think it well be finde to update room butwith same harware but not same model ??
it seems to be a Chinese HDC device, they produce cloned S4/S5 devices. Don`t flash anything from here mate or you could brick your device.
---------- Post added at 11:03 PM ---------- Previous post was at 10:57 PM ----------
Look here for instance or here , it seems to be a Chinese HDC device, they produce cloned S4/S5 devices. Don`t flash anything from here mate or you could brick your device.[/QUOTE]
Hi. Today one man told me that he installed Tobias patch and it works. Then I checked this too on my own too and it seems works too . Security test, image enhancement etc work as well as before...
http://forum.xda-developers.com/xpe...credentials-restore-unlocking-t3296383/page26
I guess people who using z4 tab with lost drm key(who don't have TA Backup and already unlocked bootloader) can bravely use this patch.
So, the purpose of this thread is to inform that Tobias's patch works successfully for our tablet too.
alex009988 said:
Hi. Today one man told me that he installed Tobias patch and it works. Then I checked this on my own too and it seems works too. At least *#*#7378423#*#* security test shows no error with drm keys.
http://forum.xda-developers.com/xpe...credentials-restore-unlocking-t3296383/page26
I guess people who using z4 tab with lost drm key can bravely use this patch.
Click to expand...
Click to collapse
Working like a charme! Thx for the Link!
Year. I hope that his patch would work for future Sony update too.
Mr. Schnabel said:
Working like a charme! Thx for the Link!
Click to expand...
Click to collapse
+1
Sorry for asking but It seems that I missed something. If I start the rootkernel command I get a note that TWRP integration and drmfix is skipped
Code:
- Unpacking kernel
Found android boot image
gzip: kernel_tmp.gz: decompression OK, trailing garbage ignored
Kernel version: 3.10.84
- Detected vendor: somc (Sony), device: karin, variant: windy
- Unpacking initramfs
- Detected platform: 64-bit
- Detected Android version: 6.0
- Disabling SONY RIC
- Skipping TWRP integration. No image for model karin
- Skipping drmfix. Unsuppported/untested for model karin
- Creating new initramfs
- Creating boot image
- Cleaning up
Done
Or is removing/disabling of the Sony RIC enought?
EDIT: Sorry my mistake. The outdated drmrestore.zip works like a charm. Hopefully Tobias would get the package on the z4, too.
denk_mal said:
Sorry for asking but It seems that I missed something. If I start the rootkernel command I get a note that TWRP integration and drmfix is skipped
Code:
- Unpacking kernel
Found android boot image
gzip: kernel_tmp.gz: decompression OK, trailing garbage ignored
Kernel version: 3.10.84
- Detected vendor: somc (Sony), device: karin, variant: windy
- Unpacking initramfs
- Detected platform: 64-bit
- Detected Android version: 6.0
- Disabling SONY RIC
- Skipping TWRP integration. No image for model karin
- Skipping drmfix. Unsuppported/untested for model karin
- Creating new initramfs
- Creating boot image
- Cleaning up
Done
Or is removing/disabling of the Sony RIC enought?
EDIT: Sorry my mistake. The outdated drmrestore.zip works like a charm. Hopefully Tobias would get the package on the z4, too.
Click to expand...
Click to collapse
I just flashed this old version, how do I test if it's working?
Thanks
Sent from my Xperia using Tapatalk
jongcruz said:
I just flashed this old version, how do I test if it's working?
Thanks
Sent from my Xperia using Tapatalk
Click to expand...
Click to collapse
Go into the settings -> Display -> Image enhancement
If you change to X-Reality or Super-vivid mode you should noticed the different between the two pictures on the left side.
Also you can check keys on the service menu, service tests, security *#*#7378424#*#* it should show "key is OK"
Also you should notice the difference on photos, and movies between "off" and super-vivid mod. So again, the patch works like a charm)
alex009988 said:
Also you can check keys on the service menu, service tests, security *#*#7378424#*#* it should show "key is OK"
Also you should notice the difference on photos, and movies between "off" and super-vivid mod. So again, the patch works like a charm)
Click to expand...
Click to collapse
I believe you have a typo; For me it is *#*#7378423#*#*
denk_mal said:
I believe you have a typo; For me it is *#*#7378423#*#*
Click to expand...
Click to collapse
Oh year. My mistake. Cuz 3 and 4 buttons are near each other.
To help you remember *#*#7378423#*#*, the numbers 7378423 spell SERVICE.
Thank you very much Tobias and all the good people here
Now my rooted Xperia Z4 tablet is working just like an un-rooted one.
All Sony's propriety features are working flawlessly now.
Does this bring back the native remote play function?
Hi,
Installing the patch via TWRP on SGP771 woks fine
Firmware: 32.2.A.0.305
Kernel v40
After I did this, my touch screen stopped working. This is software version 32.3.A.2.33 Any ideas?
---------- Post added at 09:27 PM ---------- Previous post was at 08:46 PM ----------
killdozer56 said:
Hi,
Installing the patch via TWRP on SGP771 woks fine
Firmware: 32.2.A.0.305
Kernel v40
Click to expand...
Click to collapse
Which patch are you talking about? Tobias or drmrestore.zip? which version of tobias did you use? Thank you so much
Hi, I have been attempting to unlock the QUALCOMM US Boot-loaders, and have been able to find flags In the ODIN boot-loader files.
EDIT: got some "keys"
ANY DEVS PARTCIPATING, Sign your packages with one of these
-ffffffffffffffffffffffffffff16a2e0b8f03e13dd29455c5c2a3d
-5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b
-6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296
-4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5
-ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551
-b3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef
-3617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60
---------------------------------
Also, another interesting part in keymaster.mbn was
KEYMASTER_SECURE_WRITE_PROTECT
0123456789ABCDEFkeymaster
da9008f709
-------------------
all flags from devcfg.mbn are
keystore_retain_wrong_passwd_attempt
OEM_counter_enable_rpmb
OEM_allow_rpmb_key_provision
OEM_disable_rpmb_autoprovisioning
OEM_sec_wdog_bark_time
OEM_sec_wdog_bite_time
OEM_reset_reason_list
OEM_l2_wa_enable
OEM_rot_enable_transfer_APPS
OEM_rot_enable_transfer_MODEM
OEM_rot_pk_hash1_fuse_values
OEM_pil_secure_app_load_region_size
OEM_pil_subsys_load_region_start
OEM_pil_subsys_load_region_size
OEM_disable_secure_app_pimem
client_00
client_01
client_02
client_03
client_04
client_05
client_06
client_07
cmnlib_gppo_rpmb_enablement
cmnlib_gppo_root_path license_data_store_path
proprietary_play_enabler_video_protect
proprietary_play_enabler_default_behaviour
IV_constraint robustness_version
proprietary_play_enabler_profile
proprietary_opl_profile_0
disable_security_stream_check provision_constraint_flag
use_legacy_hdmi_hdcp_check
get_IV_constraint
maximum_hdcp_2x_capability
enable_kcb_logging_flag
hdcp1_storage_type
chamomile_ips
hdcp2p2_storage_type
chamomile_ips_hdcp2p2
kernel_version
kernel_version_str_length
challenges
challenges_array_length fpta_name
gk_timeout_config
QFPROM_rail_id
QFPROM_rail_type
pam_qfprom_rail
ddr_rail_reg
arb_priority_cfg
number_priorities
number_pvc_port
pvc_port_cfg spmi_channel_cfg
spmi_channel_cfg_size
tz_mpu_rg_cfg
rg_cfg_size
pmic_arb_hal_id_xpu
spmi_rg_config
blsp_spi_mosi[6]
blsp_spi_miso[6]
blsp_spi_cs_n[6]
blsp_spi_clk[6]
blsp_spi_mosi[5]
blsp_spi_miso[5]
blsp_spi_cs_n[5]
blsp_spi_clk[5]
blsp_spi_mosi[1]
blsp_spi_miso[1]
blsp_spi_cs_n[1]
blsp_spi_clk[1]
blsp_spi_mosi[7]
blsp_spi_miso[7]
blsp_spi_cs_n[7]
blsp_spi_clk[7]
blsp_spi_mosi[11]
blsp_spi_miso[11]
blsp_spi_cs_n[11]
blsp_spi_clk[11]
blsp_i2c_sda[1]
blsp_i2c_scl[1]
blsp_i2c_sda[2]
blsp_i2c_scl[2]
blsp_i2c_sda[3]
blsp_i2c_scl[3]
blsp_i2c_sda[4]
blsp_i2c_scl[4]
blsp_i2c_sda[5]
blsp_i2c_scl[5]
blsp_i2c_sda[6]
blsp_i2c_scl[6]
blsp_i2c_sda[7]
blsp_i2c_scl[7]
blsp_i2c_sda[8]
blsp_i2c_scl[8]
blsp_i2c_sda[9]
blsp_i2c_scl[9]
blsp_i2c_sda[10]
blsp_i2c_scl[10]
blsp_i2c_sda[11]
blsp_i2c_scl[11]
blsp_i2c_sda[12]
blsp_i2c_scl[12]
blsp1_spi_cs1_n
tlmm_gpio_test_pin
tlmm_base tlmm_offset
tlmm_total_gpio
mst_pd
mst_md
gcc_blsp1_ahb_clk gcc_blsp1_qup5_spi_apps_clk
"fidocrypto" "" "/efs/" "/data/misc/qsee/" "/data/misc/qsee/" "Linux version 3.14.26-g43b1178-00038-g96ef344 ([email protected]) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Jun 5 15:15:57 PDT 2015" authhat
-----------
the most interesting was
-OEM_rot_pk_hash1_fuse_values
as in the efuse value?
I would really love for some people to give some support
I will give these files as-is or I can give as raw text.
Edit: these flags are based off of QA6
Edit2: I wonder if we could find a dev with the Qualcomm version of the s7 (china), grab the Odin files, (AP,BL,CP) (flash your own csc carrier) and use CROM SERVICE
Devman-0903 said:
Hi, I have been attempting to unlock the QUALCOMM US Boot-loaders, and have been able to find flags In the ODIN boot-loader files.
all flags from devcfg.mbn are
keystore_retain_wrong_passwd_attempt
OEM_counter_enable_rpmb
OEM_allow_rpmb_key_provision
OEM_disable_rpmb_autoprovisioning
OEM_sec_wdog_bark_time
OEM_sec_wdog_bite_time
OEM_reset_reason_list
OEM_l2_wa_enable
OEM_rot_enable_transfer_APPS
OEM_rot_enable_transfer_MODEM
OEM_rot_pk_hash1_fuse_values
OEM_pil_secure_app_load_region_size
OEM_pil_subsys_load_region_start
OEM_pil_subsys_load_region_size
OEM_disable_secure_app_pimem
client_00
client_01
client_02
client_03
client_04
client_05
client_06
client_07
cmnlib_gppo_rpmb_enablement
cmnlib_gppo_root_path license_data_store_path
proprietary_play_enabler_video_protect
proprietary_play_enabler_default_behaviour
IV_constraint robustness_version
proprietary_play_enabler_profile
proprietary_opl_profile_0
disable_security_stream_check provision_constraint_flag
use_legacy_hdmi_hdcp_check
get_IV_constraint
maximum_hdcp_2x_capability
enable_kcb_logging_flag
hdcp1_storage_type
chamomile_ips
hdcp2p2_storage_type
chamomile_ips_hdcp2p2
kernel_version
kernel_version_str_length
challenges
challenges_array_length fpta_name
gk_timeout_config
QFPROM_rail_id
QFPROM_rail_type
pam_qfprom_rail
ddr_rail_reg
arb_priority_cfg
number_priorities
number_pvc_port
pvc_port_cfg spmi_channel_cfg
spmi_channel_cfg_size
tz_mpu_rg_cfg
rg_cfg_size
pmic_arb_hal_id_xpu
spmi_rg_config
blsp_spi_mosi[6]
blsp_spi_miso[6]
blsp_spi_cs_n[6]
blsp_spi_clk[6]
blsp_spi_mosi[5]
blsp_spi_miso[5]
blsp_spi_cs_n[5]
blsp_spi_clk[5]
blsp_spi_mosi[1]
blsp_spi_miso[1]
blsp_spi_cs_n[1]
blsp_spi_clk[1]
blsp_spi_mosi[7]
blsp_spi_miso[7]
blsp_spi_cs_n[7]
blsp_spi_clk[7]
blsp_spi_mosi[11]
blsp_spi_miso[11]
blsp_spi_cs_n[11]
blsp_spi_clk[11]
blsp_i2c_sda[1]
blsp_i2c_scl[1]
blsp_i2c_sda[2]
blsp_i2c_scl[2]
blsp_i2c_sda[3]
blsp_i2c_scl[3]
blsp_i2c_sda[4]
blsp_i2c_scl[4]
blsp_i2c_sda[5]
blsp_i2c_scl[5]
blsp_i2c_sda[6]
blsp_i2c_scl[6]
blsp_i2c_sda[7]
blsp_i2c_scl[7]
blsp_i2c_sda[8]
blsp_i2c_scl[8]
blsp_i2c_sda[9]
blsp_i2c_scl[9]
blsp_i2c_sda[10]
blsp_i2c_scl[10]
blsp_i2c_sda[11]
blsp_i2c_scl[11]
blsp_i2c_sda[12]
blsp_i2c_scl[12]
blsp1_spi_cs1_n
tlmm_gpio_test_pin
tlmm_base tlmm_offset
tlmm_total_gpio
mst_pd
mst_md
gcc_blsp1_ahb_clk gcc_blsp1_qup5_spi_apps_clk
"fidocrypto" "" "/efs/" "/data/misc/qsee/" "/data/misc/qsee/" "Linux version 3.14.26-g43b1178-00038-g96ef344 ([email protected]) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Jun 5 15:15:57 PDT 2015" authhat
-----------
the most interesting was
-OEM_rot_pk_hash1_fuse_values
as in the efuse value?
I would really love for some people to give some support
I will give these files as-is or I can give as raw text.
Edit: these flags are based off of QA6
Edit2: I wonder if we could find a dev with the Qualcomm version of the s7 (china), grab the Odin files, (AP,BL,CP) (flash your own csc carrier) and use CROM SERVICE
Click to expand...
Click to collapse
Look guys, I know things look bad for the QUALCOMM variants, but with a good team of devs, we can do this! I'm tired of this crap that our OEM'S give us.
Stuff is too advanced for me but seems like some good ideas. I agree, we can do it if we work as a team.
I'm not a developer but, let me know how I can help. Can do basic odin flashes and such.
I wouldove to help in anyway I have been wanting this phones bootloader unlocked for a while now. I have the Sprint variant SM-G935P. please contact me.
There isn't a lot of info here, but this might be a lead.
http://google.com/newsstand/s/CBIwvuP0_Tk
Now we are getting somewhere, Let's attempt use bootstomp on 6.0.1 odin files all the way up to the latest 7.0
I would be glad to help and do some research, i dont know too much lingo but I can figure it out
@Devman-0903 , we can't use China's firmware, different partition sizes :/
I bought a 6P and a TL-WN722 (V1) to get Andrax or Nethunter running. I've rooted the device using Magisk and have Andrax working but i cant get the wifi dongle to recognize or green light. Ive read about modprobe and custom kernals but im not really sure what im meant to do and in what order. I dont want to brick my new 6P.
Also i failed to install nethunter (via Magisk dl) - i point to the kalifs-arm64-full.tar.xz file (i rename that file) - it seems to install but then when i go to Install & Update and select Nethunter the chroot seems not to have worked and i go round the install chroot loop again. Maybe this is linked to my incorrect kernal???
Hope someone can help.
Thanks
About phone
Regulatory labels
Send feedback about this device
Model
Nexus 6P
Android version
8.1.o
Android security patch level
5 December 2018
Baseband version
angler-03.88
Kernel version
3.10.73-g309d642 (gcc version 4.9.x-google
20140827 (prerelease) (GCC) )
[email protected] #1
Thu Oct 11 UTC 2018
Build number
OPM7.181205.001
Only way iv found is to downgrade to 7.1.2 and flash this kernel, aside from building your own kernel from source.