hy
How to fix beta timebomb ?
patch (shell32.exe) or modified S000
Because i have installed beta on my hymalaya m1000 and i do not know if fix beta
timebomb is after the update or in the rom kitchen
thx
learn to recook or use a newer rom without that issue, that's all. The same clue as luby gave you. beta are test rom to test, not to use.
NadiaaibaN said:
hy
How to fix beta timebomb ?
patch (shell32.exe) or modified S000
Because i have installed beta on my hymalaya m1000 and i do not know if fix beta
timebomb is after the update or in the rom kitchen
thx
Click to expand...
Click to collapse
to fix timebomb
search pattern in shell32.exe
00 00 00 4A B2 FF FF EB
replace with
00 00 00 4A 00 00 A0 E1
Originally Posted by sp3dev
Click to expand...
Click to collapse
Hi,
Im new to this forum and I find it quite usefull, I have been able to unlock 2 samsung gio following the various tutorials, in fact I've tried this method: http://forum.xda-developers.com/showthread.php?t=1335548
It worked flawlessly with bell prepaid gios, however, Ive been trying to repeat the process with this Samsung GT-I5500M (bell, android 2.1 update 1) and the result is not as good as the previous attempts.
First of, the rooting was extremely hard to do. I have tried every possibility out there for rooting, It was a pain.
Ill share my findings for helping the community, z4root 1.3.0 will crash at mid stage, z4root 1.1 will freeze, superoneclick 2.3.3 will get stuck step at 5, Universal Android 1.6.2 beta 5 will show the mysterious error No fu gooo.
The only rooting method that worked with this bell prepaid android 2.1 was a previous version of superoneclick 2.1.1 !
Now that the rooting has been a sucess, ive tried going further and look for the bml5.img in search of an unlock code.
Again, some problems appeared, I wasnt able to find any occurences of the hex string provided in the tutorial, which is FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 30 30 30 30 30 30 30 30.
I went to this thread http://forum.xda-developers.com/showthread.php?t=828534&page=49 and they suggested looking for 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 FF FF FF FF FF FF FF FF FF FF FF FF FF FF, only numbers that seemed to be valid were 01234567. Ive tried unlocking the phone with these numbers but no sucess at all.
I even tried to look for MCN and MNN of my service provider in the file but again the search query returned nothing. Bell is 302610.
Im asking for the help of the community
Ill provide my bml5.img in attachment.
http://www.megaupload.com/?d=Y6ZQ33B3
have you tried to deactivate and activate USB debugging when Superoneclick stops at step 5?
it worked for me.
Yup thats no more the problem, ive been able to root it with an earlier version of superoneclick 2.1.1.
I cant find the unlock code in the bml5.img file, thats the problem now.
collmomo said:
Hi,
Im new to this forum and I find it quite usefull, I have been able to unlock 2 samsung gio following the various tutorials, in fact I've tried this method: http://forum.xda-developers.com/showthread.php?t=1335548
It worked flawlessly with bell prepaid gios, however, Ive been trying to repeat the process with this Samsung GT-I5500M (bell, android 2.1 update 1) and the result is not as good as the previous attempts.
First of, the rooting was extremely hard to do. I have tried every possibility out there for rooting, It was a pain.
Ill share my findings for helping the community, z4root 1.3.0 will crash at mid stage, z4root 1.1 will freeze, superoneclick 2.3.3 will get stuck step at 5, Universal Android 1.6.2 beta 5 will show the mysterious error No fu gooo.
The only rooting method that worked with this bell prepaid android 2.1 was a previous version of superoneclick 2.1.1 !
Now that the rooting has been a sucess, ive tried going further and look for the bml5.img in search of an unlock code.
Again, some problems appeared, I wasnt able to find any occurences of the hex string provided in the tutorial, which is FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 30 30 30 30 30 30 30 30.
I went to this thread http://forum.xda-developers.com/showthread.php?t=828534&page=49 and they suggested looking for 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 FF FF FF FF FF FF FF FF FF FF FF FF FF FF, only numbers that seemed to be valid were 01234567. Ive tried unlocking the phone with these numbers but no sucess at all.
I even tried to look for MCN and MNN of my service provider in the file but again the search query returned nothing. Bell is 302610.
Im asking for the help of the community
Ill provide my bml5.img in attachment.
http://www.megaupload.com/?d=Y6ZQ33B3
Click to expand...
Click to collapse
I get the exact same code 01234567
Sent from my TripNiCE Pyramid using Tapatalk
yep, tried both the tutorials posted here and I end up with a 01234567 (which I foolishly tried).
Would love to hear an answer from a veteran cell unlocker.
Same problem with i5500m Virgin Mobile
I have same problem with Virgin Mobile Samsung GT-i5500M.
Able to root with SuperOneClick2.1.1, but only found 01234567 in the bml5 file.
Anymore suggestions?
(DONE) Unlock
hi all, ive done that thing to unlock my Gt-i5500m but its no luck,
what i try to do is UPGRADE and ROOT it to CyanogenMod 7.2.0 then
after that my phone is unlock now, im on CyanogenMod 10.1 and it
still unlock,this is the best ROM i install in my Galaxy 5
I picked up an Samsung Gio but did not like it. feels to cheap for an 200.00 CDN Phone also sound on the device is to low cant hear the sound when outside so I'm thinking about picking up the LG Eclypse so my Question is: Is there an LG Eclypse | LG-C800G Unlock Tool? or a way for me to grab the unlock key from within the device like I did with the Samsung Gio?
can I use this method ?
http://forum.xda-developers.com/showpost.php?p=17148825&postcount=334 : - adb shell
- su
- cat /dev/bml5>/sdcard/bml5.img (BE-EM-EL-FIVE is about 25 Mb)
- exit (2x)
- adb pull /sdcard/bml5.img
- now open in hex editor on PC (like xvi32)
- find the proper block with hex search:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 FF FF FF FF FF FF FF FF FF FF FF FF FF FF (2 times)
Scroll a few pages of FF's down until you see the first number (unlock code)
- my unlock code is at #1282C0A
- put locked sim in phone, boot and enter code from above
Click to expand...
Click to collapse
Thanks in advance,
clml
Anyone?
Sorry if I seem inpatient but I dont want to take back the Gio and pick up the LG if I cant unlock it without charge as money is really tight as wife is pregnant and on bed rest so want to have a phone that I could actually hear when outside as that's where I spend most of my days is outside due to work.
hello all, is there a cyanogenmod rom for Acer Liquid Z3 (Z130)
Thanks
bryan-k said:
hello all, is there a cyanogenmod rom for Acer Liquid Z3 (Z130)
Thanks
Click to expand...
Click to collapse
here stock rom for z130 bro : http://www.acer.com.sg/ac/en/SG/content/drivers/4889;-;Z130
:victory:
is there any custom rom that would work on the z3 ?
((
micdarau85 said:
is there any custom rom that would work on the z3 ?
((
Click to expand...
Click to collapse
Mhh, just found this post, was never a ROM for this phone developed?
I just would like to skin down the stock rom and make it lighter...
g
Rom developing
It is possible to root the acer liquid Z3 (Z130) as well as installing TWRP. I'm about to develop Cyanogenmod for it. I hope that admins will give me a thread to start posting instructions:
Howto root it: root it using the app framaroot: http://forum.xda-developers.com/apps/framaroot/root-framaroot-one-click-apk-to-root-t2130276
Howto flash it with TWRP: Install and execute rashr and flash recovery with TWRP:
https://docs.google.com/file/d/0B0XQigIT17uEcDQtaDJ3U0UtOWc/edit?pli=1
The kernel source is availible at http://us.acer.com/ac/en/US/content/drivers
The supposed procedure in getting the z130 specific image is (excerpt of kernel source readme):
Build steps:
1. Download Android 4.2.2 source code from google
2. Modify buildGPL.sh, replace the Your_Toolchain_PATH with your tool path in android code.
for example: android/prebuilts/gcc/linux-x86/arm/arm-linux-androidYour_Toolchain_PATHeabi-4.6/bin
3. Run the script under your shell
./buildGPL.sh
Thanks!
Click to expand...
Click to collapse
I'm happy if I get a companion while developing. If you're new to cyanogenmod you can start with:
http://wiki.cyanogenmod.org/w/Build_for_a700#Build_CyanogenMod_and_ClockworkMod_Recovery
Give me a thread and device section !
Greets,
wendenerp
going on
My main motivation in getting cyanogenmod running is to get a german android system language. Since I bought the Z130 in the Phlippines
it only came with English and a couple of Asian languages. None of the language programs (morelocale2, locale, Sprache) could change the system language to german even while rooted. Today I tried to flash a system partition of the Acer homepages' Update images, namely the OS_Acer_AV052.Z130.1.007.00.LA.GEN1s_A42J_A
TWRP worked fine, but it didn't boot. I could rescue to the old system.ext4.win after the Acers' image failed.
I already contacted Acer. Maybe they will at least tell me which image has the german system language and works with the dual sim kernel... I'm still considering cyanogenmod's images though.
I added some detailed german instructions on rooting the liquid z3 and installing TWRP: http://www.wendenerp.de/Sonstiges.html
So far,
wendenerp said:
My main motivation in getting cyanogenmod running is to get a german android system language. Since I bought the Z130 in the Phlippines
it only came with English and a couple of Asian languages.
Click to expand...
Click to collapse
i have the single sim version with european languages. i wish i could get some asian languages on this phone X)
I started a cyanogenmod project on github for the Acer liquid Z3: https://github.com/wendenerp/android_device_acer_zx. I had some trouble with the local manifest file, but I think this should be alright:
<?xml version="1.0" encoding="UTF-8"?>
<manifest>
<project name="wendenerp/android_device_acer_zx" path="device/acer/zx" remote="github" revision="cm-11.0" />
</manifest>
Click to expand...
Click to collapse
Next thing is to get the vendor specific programs and drivers out of the original firmware...
I'm having some problems with getting the ramdisk image out of boot.img.
The boot.img is 6 mb in size. I tried unpackbootimg, unmkbootimg and split_bootimg. All of these tools split the same way:
The kernel gets 4mb and the ramdisk 600k, which adds up to 4.6mb. Additionally the ramdisk is of file type data:
Code:
file boot_img.lzma
boot_img.lzma: data
so neither gunzip nor lzma -dc works to extract the initramfs. I assume there is a bug in all of these split tools or acer made up some strange boot.img format...
boot.img split error
Unfortunately the split utilities don't split the boot image correctly.
The image should contain the size and location of the kernel and ramdisk inn the first bytes of the boot.img, but this is how it looks like:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win |grep 'ANDROID' -n4
1:00000000 41 4e 44 52 4f 49 44 21 58 36 3d 00 00 80 00 10 |ANDROID!X6=.....|
2-00000010 34 bc 09 00 00 00 00 11 00 00 00 00 00 00 f0 10 |4...............|
3-00000020 00 01 00 10 00 08 00 00 00 00 00 00 00 00 00 00 |................|
4-00000030 31 33 37 37 37 30 33 33 30 39 00 00 00 00 00 00 |1377703309......|
5-00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
The split_bootimg.scrip takes the values out of the first too rows in little endian to determine the sizes and locations:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ ./split_bootimg.pl boot.emmc.win
Page size: 2048 (0x00000800)
Kernel size: 4011608 (0x003d3658)
Kernel location: 268468224 (0x10008000)
Ramdisk size: 638004 (0x0009bc34)
Ramdisk location: 285212672 (0x11000000)
Second size: 0 (0x00000000)
Board name: 1377703309
Command line:
Writing boot.emmc.win-kernel ... complete.
Writing boot.emmc.win-ramdisk.gz ... complete.
Unfortenutely the location exceeds the size of the boot.img:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win
...
0046fc30 00 81 11 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
0046fc40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00600000
So it looks like the scipt only pulls some random data from the memory for the kernel and for the ramdisk
In fact the ramdisk starts at a different location:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win |grep '1f 8b 08'
00005220 6e 20 65 72 72 6f 72 00 1f 8b 08 00 00 00 00 00 |n error.........|
003d4200 1f 8b 08 00 00 00 00 00 00 03 ec 7d 0b 7c 54 c5 |...........}.|T.|
All 3 split utilities do the same:
unpackbootimg, unmkbootimg, split_bootimg
---------- Post added at 12:41 PM ---------- Previous post was at 11:42 AM ----------
since the bootloader is u-boot I think the image has a different format:
HTML:
http://www.compulab.co.il/workspace/mediawiki/index.php5/U-Boot:_Images#Image_format
progress
I also was able to extract the ramdisk out of the boot.img and added it together with the mkvendor.sh output at github.
I was also able to compile the kernel from sources provided at acer.com. I requested the sources of the u-boot image too.
You are doing great job dude keep going )))
U-Boot Source Code request
This is my request to Acer for the U-Boot source:
Dear Sir/Madam,
thank you for your reply. Software licensed under the GPL2 can be reused and modified and sold with the restriction of handing out the source and build instructions for the sold product.
In case of the Acer Liquid Z130, Acer has aquired and modified the following Software:
Linux Kernel, the Android OS, the U-boot bootloader, of which the linux kernel and U-boot is licensed under the GPL2, meaning that acer is obliged to hand out the source code of its modified U-boot and the modified kernel plus the build instructions. Since Acer only handed out the instructions and source of the modified linux kernel on its webpage, it hasn't yet met its obligations.
Since Android uses a different licence, you can refuse to hand out part of its code but you can gain popularity in the opensource community by doing so.
Yours sincerely
Denis Wentland
The request dates from 3th of July. How much time to give them and how to proceed in case they don't follow?
U-boot
While investigating usb-traffic, I encountered some CDC-ACM messages on the powered off, battery removed, usb-connected device . For 1 second the device opens its USB serial port and spams some READYREADYREADY messages . Then it closes it for some 8 seconds again.
On factory mode it asks for the input password on the /dev/ttyACM0 port.
I hope I can find out the password and enter U-Boot command prompt.
Since U-boot is under GPL Acer should hand out the source for me to find out the pasword.
hexdumping the boot loader firmware it has some uboot-messages:
000277f0 2d 20 0a 00 5b 25 73 5d 20 55 6e 70 6c 75 67 67 |- ..[%s] Unplugg|
00027800 65 64 20 43 68 61 72 67 65 72 2f 55 73 62 20 62 |ed Charger/Usb b|
00027810 65 74 77 65 65 6e 20 50 72 65 2d 6c 6f 61 64 65 |etween Pre-loade|
00027820 72 20 61 6e 64 20 55 62 6f 6f 74 20 69 6e 20 4b |r and Uboot in K|
00027830 65 72 6e 65 6c 20 43 68 61 72 67 69 6e 67 20 4d |ernel Charging M|
00027840 6f 64 65 2c 20 50 6f 77 65 72 20 4f 66 66 20 0a |ode, Power Off .|
but unfortunetaly not the Serial output messages
I have a french Acer Z3 Single SIM and as many on XDA i am a kind of flasholic.
I found a file .ZIP opened it and found boot.zip, system.img, recovery.zip that I I flashed from ADB\Fastbboot.
Was able to boot the phone but it’s from dual SIM update Thaï operator.
This one : Update_Acer_AV052_Z130_1.005.00_AAP_AISH https://www.dropbox.com/s/5s07i8g1hq3ekga/Z130SingleSIM_Tha%C3%AFSTOCK_ROM.zip
I don’t get any network signal from it. If it can help…maybe?
WARNING: if some of you decide to dowload this, please do not install it on your phone, because you will not be able to install another System.zip. Or unless you want an asian DUO SIM THAÏ Operator ok! :good:
wendenerp said:
While investigating usb-traffic, I encountered some CDC-ACM messages on the powered off, battery removed, usb-connected device . For 1 second the device opens its USB serial port and spams some READYREADYREADY messages . Then it closes it for some 8 seconds again.
On factory mode it asks for the input password on the /dev/ttyACM0 port.
I hope I can find out the password and enter U-Boot command prompt.
Since U-boot is under GPL Acer should hand out the source for me to find out the pasword.
hexdumping the boot loader firmware it has some uboot-messages:
000277f0 2d 20 0a 00 5b 25 73 5d 20 55 6e 70 6c 75 67 67 |- ..[%s] Unplugg|
00027800 65 64 20 43 68 61 72 67 65 72 2f 55 73 62 20 62 |ed Charger/Usb b|
00027810 65 74 77 65 65 6e 20 50 72 65 2d 6c 6f 61 64 65 |etween Pre-loade|
00027820 72 20 61 6e 64 20 55 62 6f 6f 74 20 69 6e 20 4b |r and Uboot in K|
00027830 65 72 6e 65 6c 20 43 68 61 72 67 69 6e 67 20 4d |ernel Charging M|
00027840 6f 64 65 2c 20 50 6f 77 65 72 20 4f 66 66 20 0a |ode, Power Off .|
but unfortunetaly not the Serial output messages
Click to expand...
Click to collapse
sory idk what it means. but does that mean we cant get it on our z3?
---------- Post added at 06:32 AM ---------- Previous post was at 06:30 AM ----------
hello guys. may i know what bloatware that can safely be remove from this phone? its full with useless app. wish i could uninstall all of it to make it more like stock android
Salut,
as-tu trouver une roms stock pour le z3 ?
Merci
Hi,
Anybody have an original stock ROM for z130 EMEA ?
Please help me. I have lost mine...
Thx...
Sent from my Nexus 5 using XDA Free mobile app
hi guys..
is there Polish language for this device..?
http://www.acer.com.sg/ac/en/SG/content/drivers/4889;-;Z130