i have a fix for restoring product code back to original for the captivate. Working with a vibrant owner who has messed up nv_dat.bin and product code and trying to port my fix for him but need some hex code info to make sure i convert the fix properly.
I am asking any willing vibrant owners who have correct product code (SGH-T959ZKATMB)
to download the free market app HEX EDIT and report some info for me.
What i need to know is the Hex code for 4 specific lines of your correct nv_data.bin (if vibrant)
1. Use Hex Editor App from market (free)
2. Open the nv_data file (once in hex editor use capacitive menu button to get to options)
3. Goto the options again and JUMP TO line 0188008 will take you to line 00188008. Will need the data from it and three other lines you will see below it.
There will 8 block of data between the line # and the text at the right that you reposted. Please post the #'s/letters for each corresponding block so i can ensure that i convert properly.
00188008 | | | | | | | | |
00188010 | | | | | | | | |
00188018 | | | | | | | | |
00188020 | | | | | | | | |
what i would need is the two numeral/letter codes for each of the blocks listed next to corresponding line #'s. Each line has 8 blocks. Also the text to the far right of the final block would help as well.
if preferred you can provide this data in a PM
If you don't want to manually transcribe the data over to a message you could snap a screen shot of the hex editor with these lines visible and post.
00188000 - ff ff ff ff 52 45 56 50 - . . . . R E V 0
00188008 - 2e 33 00 00 00 00 ff 54 - . 3 . . . . . T
00188010 - 4d 42 00 00 00 00 53 47 - M B . . . . S G
00188018 - 48 2d 54 39 35 39 5a 4b - H - T 9 5 9 Z K
00188020 - 42 54 4d 42 00 00 00 00 - B T M B . . . .
00188028 - 00 00 01 50 02 4e 03 4e - . . . P . N . N
silow said:
00188000 - ff ff ff ff 52 45 56 50 - . . . . R E V 0
00188008 - 2e 33 00 00 00 00 ff 54 - . 3 . . . . . T
00188010 - 4d 42 00 00 00 00 53 47 - M B . . . . S G
00188018 - 48 2d 54 39 35 39 5a 4b - H - T 9 5 9 Z K
00188020 - 42 54 4d 42 00 00 00 00 - B T M B . . . .
00188028 - 00 00 01 50 02 4e 03 4e - . . . P . N . N
Click to expand...
Click to collapse
thank you much
will let you know if this helps him.
hy
How to fix beta timebomb ?
patch (shell32.exe) or modified S000
Because i have installed beta on my hymalaya m1000 and i do not know if fix beta
timebomb is after the update or in the rom kitchen
thx
learn to recook or use a newer rom without that issue, that's all. The same clue as luby gave you. beta are test rom to test, not to use.
NadiaaibaN said:
hy
How to fix beta timebomb ?
patch (shell32.exe) or modified S000
Because i have installed beta on my hymalaya m1000 and i do not know if fix beta
timebomb is after the update or in the rom kitchen
thx
Click to expand...
Click to collapse
to fix timebomb
search pattern in shell32.exe
00 00 00 4A B2 FF FF EB
replace with
00 00 00 4A 00 00 A0 E1
Originally Posted by sp3dev
Click to expand...
Click to collapse
Anyone able to return to s-on once they got s-off?
Sent from my Liberty using XDA App
andrew.cambridge said:
Anyone able to return to s-on once they got s-off?
Sent from my Liberty using XDA App
Click to expand...
Click to collapse
why would you?
brswattt said:
why would you?
Click to expand...
Click to collapse
HERE Usually you put it back on when repairs are needed.
---------- Post added at 03:43 PM ---------- Previous post was at 03:42 PM ----------
brswattt said:
why would you?
Click to expand...
Click to collapse
warranty, and free repairs.
---------- Post added at 03:44 PM ---------- Previous post was at 03:43 PM ----------
andrew.cambridge said:
Anyone able to return to s-on once they got s-off?
Sent from my Liberty using XDA App
Click to expand...
Click to collapse
Find Unroot methods on this Page.
gotcha. ;p
Alpharev site states that loading a stock RUU will revert HBOOT and hence s-on.
I haven't tried it.
For repair work. I can send in for repair, then sell it for a small profit.
artiemon said:
Alpharev site states that loading a stock RUU will revert HBOOT and hence s-on.
I haven't tried it.
Click to expand...
Click to collapse
This doesn't work.
http://forum.xda-developers.com/showthread.php?t=1160251
Start here.you'll have to pull the hboot img from the 2.2.2 ruu.I'd also recommend contacting attn1 on irc chat node.If you brick your phone don't cry to me.
Sent from my HTC Aria using XDA App
andrew.cambridge said:
For repair work. I can send in for repair, then sell it for a small profit.
Click to expand...
Click to collapse
what's wrong with it? How much you are asking for? How much is it right now without repairs? I need a Evo testing phone, is there a XDA community discount? do you have insurance?
Tekn010933 said:
what's wrong with it? How much you are asking for? How much is it right now without repairs? I need a Evo testing phone, is there a XDA community discount? do you have insurance?
Click to expand...
Click to collapse
PM me
Sent from my MB860 using XDA App
Getting back to hboot that came on phone
I have read through the post http://forum.xda-developers.com/showthread.php?t=1160251 and it make sense if you have a wildfire phone.
The instructions show how to update the memory location to fool the flash into thinking it is getting an upgrade rather than a downgrade(which it will refuse).
For the wildfire, this is done with the command "fastboot oem mb 9C068490 1 30".
Does anyone know how to figure out what memory location needs to get updated with what value for the Aria? The exact fastboot command would be great.
Here is a dump from my Aria using the command "fastboot oem mb ?"
C:\fastboot>fastboot oem mb ?
... INFOmemory dump
INFO00000000: 2E 31 30 30 32 00 00 00 | 1002...
INFO00000010: 37 32 32 37 20 53 50 4C | 7227 SPL
INFO00000018: 00 00 00 00 00 00 A0 E1 | ........
INFO00000020: 53 48 49 50 00 00 00 00 | SHIP....
INFO00000028: 00 00 A0 E1 00 00 A0 E1 | ........
INFO00000030: 48 42 4F 4F 54 2D 37 32 | HBOOT-72
INFO00000038: 32 37 00 00 00 00 A0 E1 | 27......
INFO00000040: 64 69 72 74 79 2D 34 35 | dirty-45
INFO00000048: 62 66 39 38 37 31 00 00 | bf9871..
INFO00000050: 00 00 0F E1 80 10 80 E3 | ........
INFO00000058: 01 F0 29 E1 30 0F 11 EE | ..).0...
INFO00000060: 02 01 80 E3 30 0F 01 EE | ....0...
INFO00000068: 00 00 A0 E3 9A 0F 07 EE | ........
INFO00000070: 10 0F 11 EE 02 06 80 E3 | ........
INFO00000078: 10 0F 01 EE 00 00 A0 E3 | ........
INFO00000080: 9A 0F 07 EE 02 01 A0 E3 | ........
INFO00000088: 16 00 80 E3 92 0F 0F EE | ........
INFO00000090: 00 00 8F E2 DD 00 00 EB | ........
INFO00000098: 00 00 00 40 00 00 C0 12 | [email protected]
INFO000000A0: D4 00 00 00 00 00 40 4D | [email protected]
INFO000000A0: D4 00 00 00 00 00 40 4D | [email protected]
INFO |
OKAY
I would prefer to flash the hboot from original AT&T RUU which I have extracted. It is named "hboot_liberty_7227_0.57.0000_100507_.nb0".
Any help would be appreciated.
I picked up an Samsung Gio but did not like it. feels to cheap for an 200.00 CDN Phone also sound on the device is to low cant hear the sound when outside so I'm thinking about picking up the LG Eclypse so my Question is: Is there an LG Eclypse | LG-C800G Unlock Tool? or a way for me to grab the unlock key from within the device like I did with the Samsung Gio?
can I use this method ?
http://forum.xda-developers.com/showpost.php?p=17148825&postcount=334 : - adb shell
- su
- cat /dev/bml5>/sdcard/bml5.img (BE-EM-EL-FIVE is about 25 Mb)
- exit (2x)
- adb pull /sdcard/bml5.img
- now open in hex editor on PC (like xvi32)
- find the proper block with hex search:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 FF FF FF FF FF FF FF FF FF FF FF FF FF FF (2 times)
Scroll a few pages of FF's down until you see the first number (unlock code)
- my unlock code is at #1282C0A
- put locked sim in phone, boot and enter code from above
Click to expand...
Click to collapse
Thanks in advance,
clml
Anyone?
Sorry if I seem inpatient but I dont want to take back the Gio and pick up the LG if I cant unlock it without charge as money is really tight as wife is pregnant and on bed rest so want to have a phone that I could actually hear when outside as that's where I spend most of my days is outside due to work.
hello all, is there a cyanogenmod rom for Acer Liquid Z3 (Z130)
Thanks
bryan-k said:
hello all, is there a cyanogenmod rom for Acer Liquid Z3 (Z130)
Thanks
Click to expand...
Click to collapse
here stock rom for z130 bro : http://www.acer.com.sg/ac/en/SG/content/drivers/4889;-;Z130
:victory:
is there any custom rom that would work on the z3 ?
((
micdarau85 said:
is there any custom rom that would work on the z3 ?
((
Click to expand...
Click to collapse
Mhh, just found this post, was never a ROM for this phone developed?
I just would like to skin down the stock rom and make it lighter...
g
Rom developing
It is possible to root the acer liquid Z3 (Z130) as well as installing TWRP. I'm about to develop Cyanogenmod for it. I hope that admins will give me a thread to start posting instructions:
Howto root it: root it using the app framaroot: http://forum.xda-developers.com/apps/framaroot/root-framaroot-one-click-apk-to-root-t2130276
Howto flash it with TWRP: Install and execute rashr and flash recovery with TWRP:
https://docs.google.com/file/d/0B0XQigIT17uEcDQtaDJ3U0UtOWc/edit?pli=1
The kernel source is availible at http://us.acer.com/ac/en/US/content/drivers
The supposed procedure in getting the z130 specific image is (excerpt of kernel source readme):
Build steps:
1. Download Android 4.2.2 source code from google
2. Modify buildGPL.sh, replace the Your_Toolchain_PATH with your tool path in android code.
for example: android/prebuilts/gcc/linux-x86/arm/arm-linux-androidYour_Toolchain_PATHeabi-4.6/bin
3. Run the script under your shell
./buildGPL.sh
Thanks!
Click to expand...
Click to collapse
I'm happy if I get a companion while developing. If you're new to cyanogenmod you can start with:
http://wiki.cyanogenmod.org/w/Build_for_a700#Build_CyanogenMod_and_ClockworkMod_Recovery
Give me a thread and device section !
Greets,
wendenerp
going on
My main motivation in getting cyanogenmod running is to get a german android system language. Since I bought the Z130 in the Phlippines
it only came with English and a couple of Asian languages. None of the language programs (morelocale2, locale, Sprache) could change the system language to german even while rooted. Today I tried to flash a system partition of the Acer homepages' Update images, namely the OS_Acer_AV052.Z130.1.007.00.LA.GEN1s_A42J_A
TWRP worked fine, but it didn't boot. I could rescue to the old system.ext4.win after the Acers' image failed.
I already contacted Acer. Maybe they will at least tell me which image has the german system language and works with the dual sim kernel... I'm still considering cyanogenmod's images though.
I added some detailed german instructions on rooting the liquid z3 and installing TWRP: http://www.wendenerp.de/Sonstiges.html
So far,
wendenerp said:
My main motivation in getting cyanogenmod running is to get a german android system language. Since I bought the Z130 in the Phlippines
it only came with English and a couple of Asian languages.
Click to expand...
Click to collapse
i have the single sim version with european languages. i wish i could get some asian languages on this phone X)
I started a cyanogenmod project on github for the Acer liquid Z3: https://github.com/wendenerp/android_device_acer_zx. I had some trouble with the local manifest file, but I think this should be alright:
<?xml version="1.0" encoding="UTF-8"?>
<manifest>
<project name="wendenerp/android_device_acer_zx" path="device/acer/zx" remote="github" revision="cm-11.0" />
</manifest>
Click to expand...
Click to collapse
Next thing is to get the vendor specific programs and drivers out of the original firmware...
I'm having some problems with getting the ramdisk image out of boot.img.
The boot.img is 6 mb in size. I tried unpackbootimg, unmkbootimg and split_bootimg. All of these tools split the same way:
The kernel gets 4mb and the ramdisk 600k, which adds up to 4.6mb. Additionally the ramdisk is of file type data:
Code:
file boot_img.lzma
boot_img.lzma: data
so neither gunzip nor lzma -dc works to extract the initramfs. I assume there is a bug in all of these split tools or acer made up some strange boot.img format...
boot.img split error
Unfortunately the split utilities don't split the boot image correctly.
The image should contain the size and location of the kernel and ramdisk inn the first bytes of the boot.img, but this is how it looks like:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win |grep 'ANDROID' -n4
1:00000000 41 4e 44 52 4f 49 44 21 58 36 3d 00 00 80 00 10 |ANDROID!X6=.....|
2-00000010 34 bc 09 00 00 00 00 11 00 00 00 00 00 00 f0 10 |4...............|
3-00000020 00 01 00 10 00 08 00 00 00 00 00 00 00 00 00 00 |................|
4-00000030 31 33 37 37 37 30 33 33 30 39 00 00 00 00 00 00 |1377703309......|
5-00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
The split_bootimg.scrip takes the values out of the first too rows in little endian to determine the sizes and locations:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ ./split_bootimg.pl boot.emmc.win
Page size: 2048 (0x00000800)
Kernel size: 4011608 (0x003d3658)
Kernel location: 268468224 (0x10008000)
Ramdisk size: 638004 (0x0009bc34)
Ramdisk location: 285212672 (0x11000000)
Second size: 0 (0x00000000)
Board name: 1377703309
Command line:
Writing boot.emmc.win-kernel ... complete.
Writing boot.emmc.win-ramdisk.gz ... complete.
Unfortenutely the location exceeds the size of the boot.img:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win
...
0046fc30 00 81 11 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
0046fc40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00600000
So it looks like the scipt only pulls some random data from the memory for the kernel and for the ramdisk
In fact the ramdisk starts at a different location:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win |grep '1f 8b 08'
00005220 6e 20 65 72 72 6f 72 00 1f 8b 08 00 00 00 00 00 |n error.........|
003d4200 1f 8b 08 00 00 00 00 00 00 03 ec 7d 0b 7c 54 c5 |...........}.|T.|
All 3 split utilities do the same:
unpackbootimg, unmkbootimg, split_bootimg
---------- Post added at 12:41 PM ---------- Previous post was at 11:42 AM ----------
since the bootloader is u-boot I think the image has a different format:
HTML:
http://www.compulab.co.il/workspace/mediawiki/index.php5/U-Boot:_Images#Image_format
progress
I also was able to extract the ramdisk out of the boot.img and added it together with the mkvendor.sh output at github.
I was also able to compile the kernel from sources provided at acer.com. I requested the sources of the u-boot image too.
You are doing great job dude keep going )))
U-Boot Source Code request
This is my request to Acer for the U-Boot source:
Dear Sir/Madam,
thank you for your reply. Software licensed under the GPL2 can be reused and modified and sold with the restriction of handing out the source and build instructions for the sold product.
In case of the Acer Liquid Z130, Acer has aquired and modified the following Software:
Linux Kernel, the Android OS, the U-boot bootloader, of which the linux kernel and U-boot is licensed under the GPL2, meaning that acer is obliged to hand out the source code of its modified U-boot and the modified kernel plus the build instructions. Since Acer only handed out the instructions and source of the modified linux kernel on its webpage, it hasn't yet met its obligations.
Since Android uses a different licence, you can refuse to hand out part of its code but you can gain popularity in the opensource community by doing so.
Yours sincerely
Denis Wentland
The request dates from 3th of July. How much time to give them and how to proceed in case they don't follow?
U-boot
While investigating usb-traffic, I encountered some CDC-ACM messages on the powered off, battery removed, usb-connected device . For 1 second the device opens its USB serial port and spams some READYREADYREADY messages . Then it closes it for some 8 seconds again.
On factory mode it asks for the input password on the /dev/ttyACM0 port.
I hope I can find out the password and enter U-Boot command prompt.
Since U-boot is under GPL Acer should hand out the source for me to find out the pasword.
hexdumping the boot loader firmware it has some uboot-messages:
000277f0 2d 20 0a 00 5b 25 73 5d 20 55 6e 70 6c 75 67 67 |- ..[%s] Unplugg|
00027800 65 64 20 43 68 61 72 67 65 72 2f 55 73 62 20 62 |ed Charger/Usb b|
00027810 65 74 77 65 65 6e 20 50 72 65 2d 6c 6f 61 64 65 |etween Pre-loade|
00027820 72 20 61 6e 64 20 55 62 6f 6f 74 20 69 6e 20 4b |r and Uboot in K|
00027830 65 72 6e 65 6c 20 43 68 61 72 67 69 6e 67 20 4d |ernel Charging M|
00027840 6f 64 65 2c 20 50 6f 77 65 72 20 4f 66 66 20 0a |ode, Power Off .|
but unfortunetaly not the Serial output messages
I have a french Acer Z3 Single SIM and as many on XDA i am a kind of flasholic.
I found a file .ZIP opened it and found boot.zip, system.img, recovery.zip that I I flashed from ADB\Fastbboot.
Was able to boot the phone but it’s from dual SIM update Thaï operator.
This one : Update_Acer_AV052_Z130_1.005.00_AAP_AISH https://www.dropbox.com/s/5s07i8g1hq3ekga/Z130SingleSIM_Tha%C3%AFSTOCK_ROM.zip
I don’t get any network signal from it. If it can help…maybe?
WARNING: if some of you decide to dowload this, please do not install it on your phone, because you will not be able to install another System.zip. Or unless you want an asian DUO SIM THAÏ Operator ok! :good:
wendenerp said:
While investigating usb-traffic, I encountered some CDC-ACM messages on the powered off, battery removed, usb-connected device . For 1 second the device opens its USB serial port and spams some READYREADYREADY messages . Then it closes it for some 8 seconds again.
On factory mode it asks for the input password on the /dev/ttyACM0 port.
I hope I can find out the password and enter U-Boot command prompt.
Since U-boot is under GPL Acer should hand out the source for me to find out the pasword.
hexdumping the boot loader firmware it has some uboot-messages:
000277f0 2d 20 0a 00 5b 25 73 5d 20 55 6e 70 6c 75 67 67 |- ..[%s] Unplugg|
00027800 65 64 20 43 68 61 72 67 65 72 2f 55 73 62 20 62 |ed Charger/Usb b|
00027810 65 74 77 65 65 6e 20 50 72 65 2d 6c 6f 61 64 65 |etween Pre-loade|
00027820 72 20 61 6e 64 20 55 62 6f 6f 74 20 69 6e 20 4b |r and Uboot in K|
00027830 65 72 6e 65 6c 20 43 68 61 72 67 69 6e 67 20 4d |ernel Charging M|
00027840 6f 64 65 2c 20 50 6f 77 65 72 20 4f 66 66 20 0a |ode, Power Off .|
but unfortunetaly not the Serial output messages
Click to expand...
Click to collapse
sory idk what it means. but does that mean we cant get it on our z3?
---------- Post added at 06:32 AM ---------- Previous post was at 06:30 AM ----------
hello guys. may i know what bloatware that can safely be remove from this phone? its full with useless app. wish i could uninstall all of it to make it more like stock android
Salut,
as-tu trouver une roms stock pour le z3 ?
Merci
Hi,
Anybody have an original stock ROM for z130 EMEA ?
Please help me. I have lost mine...
Thx...
Sent from my Nexus 5 using XDA Free mobile app
hi guys..
is there Polish language for this device..?
http://www.acer.com.sg/ac/en/SG/content/drivers/4889;-;Z130