Develop Bugs

[GUIDE] Lost Part7Backup File, What to do now? [RESTORE IMEI]

You just rooted your Mytouch 4g using gfree. But for some reason you want to get back to stock again and unroot the device and lock the bootloader (s-on). If you used gfree, the only method would be to restore ur partition 7 backup file. But what if you dont have that file or if you lost it?
Lets start off by talking about partition 7 first. Partition 7 is the seventh partition on your emmc chip where all the device specific data like imei number are stored. It also contaiins a flag which control's the s-on/off status of the bootloader. Gfree patches the flag and makes your bootloader show "s-off" which is basically unlocking the bootloader. gfree automatically backup's your partition7 image file to your sd card which is named part7backup-xxxxxxx.bin . This file is the image or copy of your original parititon 7 where everything is stored. Gfree makes this backup so that you can restore it to stock if you need it later.
Ok so you lost it, what now? you could just get someone else's part7bin file from xda or somewhere else and replace ur's. But whats the problem with that? your imei number will be replaced with their and there will be 2 phones with the same imei on the same network. And according to what i have learnt, this is illegal. So how do u fix this? Well, there is a way, but what i am going to explain below will help you restore the imei of your phone to your own by using someone else's part7backup file.
PLEASE NOTE THAT CHANGING IMEI NUMBER TO SOMEONE ELSE'S IMEI IS ILLEGAL AND IS CONSIDERED A CRIME. PLEASE USE YOUR OWN IMEI NUMBER AND DO NOT POST YOUR PARTITION7BACKUP FILE IN PUBLIC! I TAKE NO RESPONSIBILY IF YOU BRICK OR DAMAGE YOUR PHONE BY USING THE STEPS BELOW. IT WORKED FOR ME SO IT SHOULD WORK FOR YOU AS WELL.
You will need to do some hex editing in order to do this, and every step is REQUIRED, if you dont follow every step carefully, you might BRICK your phone and no one but yourself will be responsible for that.
Instructions:
Warning : THIS MIGHT ERASE ALL YOUR DATA
1) Make up your mind to do some hardcore hacking with your phone (jk its not hardcore)
2) Get a hex editor, i would recomment 30 day trial of 010 editor. Get it here : http://www.sweetscape.com/download/download_010editor.html
3) Install it. Now dowload the attached part7.zip file and extract part7.bin file (DO NOT REPLACE THIS PART7 BIN FILE DIRECTLY YOU MIGHT BRICK YOUR PHONEE!! This file has the imei number removed)
4) Now right click the extracted part7.bin file and open with 010 editor (Or open the file with any other hex editor).
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
5) 010 Editor will pop up, scroll down till you get to address 0600h
5) As you can see on the image above, the 14 ++++++++++++++ bytes are where your imei number will go. I replaceed the original imei on the part7bin file with ++++++++++++++ for security reasons.
6) Get the original IMEI number of your phone from the back of your battery or from your phone's box if you have one.
7) Type it in notepad or somewhere and copy the first 14 numbers out of 15. The last number is automatically generated and is called imei check number. It is generated automatically using luhn algorithm.
DO NOT USE ANY OTHER IMEI NUMBER THAN YOUR OWN, ITS ILLEGAL! AND DO NOT PUT RANDOM NUMBERS IT MIGHT BRICK YOUR DEVICE!!
8) Go to 010 editor, select the 14 + signs, and right click them, and paste the copied imei.
9) The first 14 digits of your IMEI should be in yellow letters now.
10) Press CTRL+S to save the file.
11) Connect your phone, and put the edited part7.bin file on your sdcard.
12) If you are running stock ROM which is already rooted, skip to step 17
13) Download this file : http://www.megaupload.com/?d=V4NAODYZ
(You are about to restore your phone to stock rom, because we will need to push the part7bin file to your phone, and to do so emmc power cycling is necessary. Most other kernel's dont support modules needed to power cycle emmc. So you will need to use PD15IMG.zip method to get back to stock if you arent on it already.)
14) Put it on your sdcard.
15) Power down your phone and hold your volume down + power button till you get into a white screen with some stuff on it.
WARNING : DOING THE NEXT STEP WILL ERASE ALL YOUR DATA!
16) Press power to get into boorloader mode. Wait till it scans the PD15IMG.zip file. Then press volume up when asked. Wait till it completes and restarts into your stock rom.
17) Download Visionary from here : http://android.modaco.com/topic/320350-19nov-r14-visionary-one-click-root/ and install it on your phone.
18) Turn on usb debugging and temp-root the phone using visionary if not rooted already.
19) Install adb drivers and install android sdk : follow instructions here if you havent already : http://forum.xda-developers.com/showthread.php?t=928370
20) Connect your phone to pc, and change usb mode to "Charge Only". (!IMPORTANT)
21) Now download the gfree.zip file attached and extract it somewhere.
22) If you are on windows vista and up, hold down shift button and right click on the extracted gfree folder. Choose open command window here. (if not on win 7 or vista, open cmd and navigate to the folder).
23) Type the following in the command window as it is, do not change anything if you dont know what you are doing.
adb push gfree /data/local
adb shell
Click to expand...
Click to collapse
24) Now you should see a $ sign in the front. Type the following, press enter and press allow on your phone's screen when asked.
su
Click to expand...
Click to collapse
25) You should see a # sign now instead of $. Now use the follwing commands:
cd /data/local
chmod 777 gfree
./gfree -f
dd if=/sdcard/part7.bin of=/dev/block/mmcblk0p7
reboot
Click to expand...
Click to collapse
26) Your phone will reboot now. And if everything worked perfect, you will see your original imei. To check this open dialer and type *#06# . If you get original imei, then you're done, you will have stock rom with original imei and everything. Enjoy
This was definitely not a easy task, but after working on it for whole night and risking my phone (i could have bricked it), i finally got mine working. Now you can root and do everything else. But just dont forget to save the original part7backup file in safe place if you use gfree again Peace
I TAKE NO RESPONSIBILITY WHAT SO EVER IF ANYTHING GOES WRONG WITH YOUR PHONE! USE AT YOUR OWN RISK.
MODS: I could make an easy part7bin generator for windows, but i am not sure if that would be illegal or if i would be allowed to publish that on xda. Please guide me on this. I am sure an generator would make a lots of things easier.

ksubedi said:
You just rooted your Mytouch 4g using gfree. But for some reason you want to get back to stock again and unroot the device and lock the bootloader (s-on). If you used gfree, the only method would be to restore ur partition 7 backup file. But what if you dont have that file or if you lost it?
Lets start off by talking about partition 7 first. Partition 7 is the seventh partition on your emmc chip where all the device specific data like imei number are stored. It also contaiins a flag which control's the s-on/off status of the bootloader. Gfree patches the flag and makes your bootloader show "s-off" which is basically unlocking the bootloader. gfree automatically backup's your partition7 image file to your sd card which is named part7backup-xxxxxxx.bin . This file is the image or copy of your original parititon 7 where everything is stored. Gfree makes this backup so that you can restore it to stock if you need it later.
Ok so you lost it, what now? you could just get someone else's part7bin file from xda or somewhere else and replace ur's. But whats the problem with that? your imei number will be replaced with their and there will be 2 phones with the same imei on the same network. And according to what i have learnt, this is illegal. So how do u fix this? Well, there is a way, but what i am going to explain below will help you restore the imei of your phone to your own by using someone else's part7backup file.
PLEASE NOTE THAT CHANGING IMEI NUMBER TO SOMEONE ELSE'S IMEI IS ILLEGAL AND IS CONSIDERED A CRIME. PLEASE USE YOUR OWN IMEI NUMBER AND DO NOT POST YOUR PARTITION7BACKUP FILE IN PUBLIC! I TAKE NO RESPONSIBILY IF YOU BRICK OR DAMAGE YOUR PHONE BY USING THE STEPS BELOW. IT WORKED FOR ME SO IT SHOULD WORK FOR YOU AS WELL.
You will need to do some hex editing in order to do this, and every step is REQUIRED, if you dont follow every step carefully, you might BRICK your phone and no one but yourself will be responsible for that.
Instructions:
Warning : THIS MIGHT ERASE ALL YOUR DATA
1) Make up your mind to do some hardcore hacking with your phone (jk its not hardcore)
2) Get a hex editor, i would recomment 30 day trial of 010 editor. Get it here : http://www.sweetscape.com/download/download_010editor.html
3) Install it. Now dowload the attached part7.zip file and extract part7.bin file (DO NOT REPLACE THIS PART7 BIN FILE DIRECTLY YOU MIGHT BRICK YOUR PHONEE!! This file has the imei number removed)
4) Now right click the extracted part7.bin file and open with 010 editor (Or open the file with any other hex editor).
5) 010 Editor will pop up, scroll down till you get to address 0600h
5) As you can see on the image above, the 14 ++++++++++++++ bytes are where your imei number will go. I replaceed the original imei on the part7bin file with ++++++++++++++ for security reasons.
6) Get the original IMEI number of your phone from the back of your battery or from your phone's box if you have one.
7) Type it in notepad or somewhere and copy the first 14 numbers out of 15. The last number is automatically generated and is called imei check number. It is generated automatically using luhn algorithm.
DO NOT USE ANY OTHER IMEI NUMBER THAN YOUR OWN, ITS ILLEGAL! AND DO NOT PUT RANDOM NUMBERS IT MIGHT BRICK YOUR DEVICE!!
8) Go to 010 editor, select the 14 + signs, and right click them, and paste the copied imei.
9) The first 14 digits of your IMEI should be in yellow letters now.
10) Press CTRL+S to save the file.
11) Connect your phone, and put the edited part7.bin file on your sdcard.
12) If you are running stock ROM which is already rooted, skip to step 17
13) Download this file : http://www.megaupload.com/?d=V4NAODYZ
(You are about to restore your phone to stock rom, because we will need to push the part7bin file to your phone, and to do so emmc power cycling is necessary. Most other kernel's dont support modules needed to power cycle emmc. So you will need to use PD15IMG.zip method to get back to stock if you arent on it already.)
14) Put it on your sdcard.
15) Power down your phone and hold your volume down + power button till you get into a white screen with some stuff on it.
WARNING : DOING THE NEXT STEP WILL ERASE ALL YOUR DATA!
16) Press power to get into boorloader mode. Wait till it scans the PD15IMG.zip file. Then press volume up when asked. Wait till it completes and restarts into your stock rom.
17) Download Visionary from here : http://android.modaco.com/topic/320350-19nov-r14-visionary-one-click-root/ and install it on your phone.
18) Turn on usb debugging and temp-root the phone using visionary if not rooted already.
19) Install adb drivers and install android sdk : follow instructions here if you havent already : http://forum.xda-developers.com/showthread.php?t=928370
20) Connect your phone to pc, and change usb mode to "Charge Only". (!IMPORTANT)
21) Now download the gfree.zip file attached and extract it somewhere.
22) If you are on windows vista and up, hold down shift button and right click on the extracted gfree folder. Choose open command window here. (if not on win 7 or vista, open cmd and navigate to the folder).
23) Type the following in the command window as it is, do not change anything if you dont know what you are doing.
24) Now you should see a $ sign in the front. Type the following, press enter and press allow on your phone's screen when asked.
25) You should see a # sign now instead of $. Now use the follwing commands:
26) Your phone will reboot now. And if everything worked perfect, you will see your original imei. To check this open dialer and type *#06# . If you get original imei, then you're done, you will have stock rom with original imei and everything. Enjoy
This was definitely not a easy task, but after working on it for whole night and risking my phone (i could have bricked it), i finally got mine working. Now you can root and do everything else. But just dont forget to save the original part7backup file in safe place if you use gfree again Peace
I TAKE NO RESPONSIBILITY WHAT SO EVER IF ANYTHING GOES WRONG WITH YOUR PHONE! USE AT YOUR OWN RISK.
MODS: I could make an easy part7bin generator for windows, but i am not sure if that would be illegal or if i would be allowed to publish that on xda. Please guide me on this. I am sure an generator would make a lots of things easier.
Click to expand...
Click to collapse
I thought there was hope for me until I saw how long this was...maybe a vid for those uncertain?
Sent from my HTC Glacier using XDA Premium App

Nice work. thanks for this.

This is awesome! Great work! I hope I never have to try this out!
Sent from my HTC Glacier using XDA Premium App

Cant you just flash the PD15IMG, then once you have stock (but still have s-off) get visionary and temp root, then:
ON YOUR PC or Terminal Emulator
(YOU NEED gfree)
Unzip gfree_06.zip to a place on your computer/sdcard. Open a terminal or command window, navigate to where the files are on your computer/phone, and type:
$ adb push gfree /data/local/tmp/gfree
$ adb shell chmod 777 /data/local/tmp/gfree
gfree should now be in your phone at /data/local/tmp
IN THE ROOT SHELL (in the first terminal/command) : Now run:
# /data/local/tmp/gfree -s on -c T-MOB010
# sync
Remove the PD15IMG.zip and the tools from the phome:
# rm /sdcard/PD15IMG.zip
# rm /data/local/tmp/gfree
Disconnect your phone from USB and power it down.
Boot into hboot by holding <Vol-Down> while powering on.
Similar method worked on my G2 when i needed it back to stock/ lost my part7.bin

I2IEAILiiTY said:
I thought there was hope for me until I saw how long this was...maybe a vid for those uncertain?
Sent from my HTC Glacier using XDA Premium App
Click to expand...
Click to collapse
Well its might look difficult but if you follow through the tutorial, it is really easy. And i have no plans for video right now but if i get a lot of requests, ill make one
encrypti0n said:
Cant you just flash the PD15IMG, then once you have stock (but still have s-off) get visionary and temp root, then:
ON YOUR PC or Terminal Emulator
(YOU NEED gfree)
Unzip gfree_06.zip to a place on your computer/sdcard. Open a terminal or command window, navigate to where the files are on your computer/phone, and type:
$ adb push gfree /data/local/tmp/gfree
$ adb shell chmod 777 /data/local/tmp/gfree
gfree should now be in your phone at /data/local/tmp
IN THE ROOT SHELL (in the first terminal/command) : Now run:
# /data/local/tmp/gfree -s on -c T-MOB010
# sync
Remove the PD15IMG.zip and the tools from the phome:
# rm /sdcard/PD15IMG.zip
# rm /data/local/tmp/gfree
Disconnect your phone from USB and power it down.
Boot into hboot by holding <Vol-Down> while powering on.
Similar method worked on my G2 when i needed it back to stock/ lost my part7.bin
Click to expand...
Click to collapse
Well yes, this method will work if you havent replaced your part7bin with another one found on xda already. But if you have replaced it, like i did, you will have to hex edit the part7bin to restore your imei number. But thanks for pointing it out

Thanks for this, ksubedi. I wonder how many people were using the same IMEI from the file posted in the unroot thread I used long ago. Other than the IMEI, are the part7.bin files identical?

I lost my part7backup file from a bad SDcard awhile ago and I would like to at least have the file ready incase i need to return or exchange the phone. Can i follow steps 2-10 to get the file and just not do any additional steps?

OMG Thanks dude so much --
I thought I wouldn't ever get my phone back to S-On haha Now I can get the real update for my phone (2.3.4)
Thanks again

Hi,
Does it matter if the other Part7backup is from a phone with a different RUU/Radio?

[Share] Verizon XT610 unbrick. (For Code Corrupt)

[UPDATED 19MAR2012 GMT+8 20:00]
Unbrick Tutorial on Linux Environment
1. Boot your PC into Knoppix Linux with the CD you burnt.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
http://i224.photobucket.com/albums/dd144/wilson_temp/2012-03-19_19-24-25_140.jpg
(Let it boot, it can be some 5 minutes. Not yet. No need to click anything yet)
2. Browse to the folder where you saved the SBF_FLASH by windows.
Copy the location address. You need it for Terminal below
http://i224.photobucket.com/albums/dd144/wilson_temp/2012-03-19_19-26-09_656.jpg
3. Execute Terminal here
http://i224.photobucket.com/albums/dd144/wilson_temp/2012-03-19_19-26-49_633.jpg
http://i224.photobucket.com/albums/dd144/wilson_temp/2012-03-19_19-24-39_544.jpg
4. Run commands like this.
You will see exactly how this look like. I can only lead you to "Waiting your phone"
I cant afford to flash my phone again. LOL
http://i224.photobucket.com/albums/dd144/wilson_temp/2012-03-19_19-28-23_878.jpg
-----[Stop here for the hour, I will tell you guys how to apply update.zip after a break]-----
[Background and Scenario]
*For who with Code Corrupt. / Bootloader stuck / M logo stuck
Dear all, lately I got my XT610 bricked.
Reason:
Originally I was on 4.6.8 (newest rom). I was then doing the worst thing on earth,
I SBF-ed the whole thing with a 2.26 sbf with RSD-Lite (as how we flash sbf as usual)
Night mare:
1. PC: RSD of every version would not recognise my phone. Driver of every version neither work.
Linux: some people may have heard of sbf_flash under linux. Flashing was ok under linux. Hoever the phone just still wont boot.
2. My phone starts with Bootloader code corruption. Nothing works, RSD wont work. As mentioned, I tried with Linux sbf_flash command (google around what is sbf_flash, plenty of tutorial/explanation around)=], the flashing process was fine but the phone just stuck in M logo for minutes, then bootloader appears again with error code. "ERR :00 1d 00 00 xx" (something like this)
No matter how much times I tried to sbf_flash back the 4.6.8 sbf file, no luck. I was around the edge of collasp and ready to go psycho. I have been double-wiping data and cache for thousands of times....
[What makes it working again?]
I was wondering, as long as Stock recovery is still working (Pressing R+M key), I was going to try out the last "meaningless thing".
I copied the update.zip (the file used to update from 3.87 to 4.6.8 with SD card), I installed this file again by recovery (install update.zip something like this)
In theory, this file should only deal with system part, not the booting part. However I was thinking, bootload is locked, there should be no problem with it.
Recovery works, seems the rom is intact.
M logo changes from white to Red after sbf_flash, means booting was partially done. Only problem left should be the OS. (think in PC way, Bios is intact, Windows is dead)
I was holding my breath, watching the update.zip going. When it comes to update BP complete, I was almost sure the thingie's gonna work again, since RSD showed "Flash BP fail" before, and likely being recovered by this update. Some lines after, there was an error from reading. I ignored it, double-wiped again and restart.
I left my phone on the desk for some seconds. Suddenly, the most unpleasant scream on earth "DROOOOID~" suddenly yells in the air. The most unpleasant scream suddenly becomes the most joyful yell on earth!
[Happy-ending, hurray]
The remaining would be the same as you did before.
Root, install apps, enjoy.
[Conclusion]
1. Linux-environment, sbf_flash the 4.6.8 sbf which you used for RSD/SDL in Windows. (for those commands , try googling. If You still have no idea, drop me a line, I will post that up)
2. Bootlap after Linux flash, , got ERR code in Bootloader after M logo. dont worry.
3. Hold R+M+Power, reboot into recovery.
Do a double wipe.
4. copy update.zip to SD card, install the update.zip.
once the process pass through Update BP complete, ignore any error code there after.
5. Double Wipe again, reboot
6. "DROOOOID~", Root, and have you facebook on!.
*Drop me a line if you got any questions. Though I have no technical background, nor knowledge in programming. Trying and sharing is what we do.
#Only tested on Verizon Droid Pro. Euro/ARG Droid Pro please proceed to the other threads.
*Sorry for the bad English, I am not native speaker.

i tried to flash my motorola droid pro version to Android 2.3.6 ---- Blur_Version.0.22.2.XT610.Personal.en.AR and now the mobile stuck a code corrept. can i use RSD Lite with the back files mentioined up to go back to the original mobile software and how
i have windows 7
---------- Post added at 09:07 PM ---------- Previous post was at 09:06 PM ----------
i tried to flash my motorola droid pro version to Android 2.3.6 ---- Blur_Version.0.22.2.XT610.Personal.en.AR and now the mobile stuck a code corrept. i have windows 7

aymanfoa said:
i tried to flash my motorola droid pro version to Android 2.3.6 ---- Blur_Version.0.22.2.XT610.Personal.en.AR and now the mobile stuck a code corrept. can i use RSD Lite with the back files mentioined up to go back to the original mobile software and how
i have windows 7
---------- Post added at 09:07 PM ---------- Previous post was at 09:06 PM ----------
i tried to flash my motorola droid pro version to Android 2.3.6 ---- Blur_Version.0.22.2.XT610.Personal.en.AR and now the mobile stuck a code corrept. i have windows 7
Click to expand...
Click to collapse
Some ppl said yes, some ppl said not. Im not sure for RSD, since its kinda crap sometimes, as it often fail to detect your phone.
Cant detect = cant flash your phone.
[Mine Suggestion]
1. Download "Knoppix", a Linux build boot on CD (No installation needed) and runs on ram
2. Open terminal, use SBF_FLASH to flash the stock verizon SBF back to the phone. (I dont have the command with me now in office. I upload them once back in home.
3. Connect USB. (No detection needed. 100% successful)
4. You will see the red M logo boot back. (But some chances for stuck there and ERR code afterwards)
5. Apply update.zip as abovesaid (If needed, I will upload that too tonite)
6. Double Wipe. and There you go.
*Should work anyway, even if you have flashed the sbf from any martian devices (joke) beforehand.
Since Bootloader is locked, Moto should be unbrickable. Your stock Verizon sbf will recover anything at long as you still see Bootloader (Code corrupt counts)

how to do please step one and two above:
1. Download "Knoppix", a Linux build boot on CD (No installation needed) and runs on ram
2. Open terminal, use SBF_FLASH to flash the stock verizon SBF back to the phone. (I dont have the command with me now in office. I upload them once back in home.

aymanfoa said:
how to do please step one and two above:
1. Download "Knoppix", a Linux build boot on CD (No installation needed) and runs on ram
2. Open terminal, use SBF_FLASH to flash the stock verizon SBF back to the phone. (I dont have the command with me now in office. I upload them once back in home.
Click to expand...
Click to collapse
1. Google for "Knoppix", you should get an ISO image around 700mb. (No specific version needed. Any)
Burn this to a blank CD/DVD, let it handful on your desk first. You will use this CD to boot your PC into Linux environment when every tool is ready.
*Relax, this would only run on RAM and CD, nothing will be installed on your PC. Your Windows and everything gonna be fine.
2A. Download SBF_FLASH from this post:
http://forum.xda-developers.com/showthread.php?t=775913
-extract the Zip, make it convenient, store it in your C:\SBF
When you later boot into linux on your PC with the abovesaid Knoppix CD,
you gonna execute a program built-in Linux, that is the Terminal. (something look like DOS)
2B. Have your 4.6.8 SBF file ready in the abovesaid C:\SBF folder of PC.(you can get it in an other thread in this Droip Pro forum)
- rename the SBF file to a short name for convenience, say 468.sbf from now on in this post.
-
2C. Execute the Terminal program in Linux.
-execute the following commands. One line means one single command. Dont miss out spacebars or "DOTS"
- command lines below, when ever you see <<< ENTER#xxxxxx, that means press enter and behind these are descriptions for your reference, DONT COPY
---------------Command starts below. dont copy this line-------------
su
cd sda1\SBF <<<ENTER #Or the location where you stored SBF folder in C. (sda* means Disk number in Linux, there is nothing known as C:\ D:\)
chmod +x sbf_flash <<< ENTER # dont miss out the spacebars, dont miss out underscroll
./sbf_flash 468.sbf <<<ENTER #dont miss out the . at the beginning.
---------------Command Stops here. dont copy this line--------------
2D. Connect your phone to usb and your phone(At Code Corrupt screen), let it run.
*Sorry for the bad English, I am not native.
Tonite I will try to upload screenshots for illustration if possible.

aymanfoa said:
how to do please step one and two above:
1. Download "Knoppix", a Linux build boot on CD (No installation needed) and runs on ram
2. Open terminal, use SBF_FLASH to flash the stock verizon SBF back to the phone. (I dont have the command with me now in office. I upload them once back in home.
Click to expand...
Click to collapse
Instructions with screenshot updated in #1 post.

i try but it is not working it is keep showing reborting

aymanfoa said:
i try but it is not working it is keep showing reborting
Click to expand...
Click to collapse
Would you capture the screen /take a picture of both the PC and your phone?
Let me study it

picture of pc and mbile is here
http://i1066.photobucket.com/albums/u416/aymanfoa/pc.jpg
http://i1066.photobucket.com/albums/u416/aymanfoa/mobile1.jpg

aymanfoa said:
picture of pc and mbile is here
http://i1066.photobucket.com/albums/u416/aymanfoa/pc.jpg
http://i1066.photobucket.com/albums/u416/aymanfoa/mobile1.jpg
Click to expand...
Click to collapse
1. Saying reboot is normal. PC part is done.
2.download this file(update.zip)
ht#tp://ww#w.badongo.#com/file/26628385
(Remove hash)
Put it on SD
3. Press R+M+Power to boot the phone into Recovery, when seeing Android+Triangle screen, press Vol Up+Down together.
4a. Wipe Data+Cache
4b. Update with ZIP, select update.zip
5 when done, double wipe again.
restart.
This shuold be the last ressort, good luck

when i Press R+M+Power to boot the phone into Recovery, the phone not accepting to boot into recovery and give the message shown in the picture below.
http://i1066.photobucket.com/albums/u416/aymanfoa/mobile1.jpg
---------- Post added at 10:44 AM ---------- Previous post was at 10:43 AM ----------
when i Press R+M+Power to boot the phone into Recovery, the phone not accepting to boot into recovery and give the message shown in the picture below. my mobile is from usa version.
http://i1066.photobucket.com/albums/...oa/mobile1.jpg

I have never tacked with this ERR code,
But I did some research online, this code should be solved by SBF reflash
Try to reflash sbfs of every versions starting from 2.26 / 3.87 till 4.68.
*Make sure that u remove your battery, press hold R+M and insert battery then with Power (Three buttons) until M logo is gone.
As long as I saw your bootloader is still 03.A0,
Bootloader should be intact from the wrong version rom flashed, since South American/European Bootloader is not 3.A while 3.A is Verizon phone.
Keep on trying, dont be so pissed (pad), I had been trying with mine code corrupted phone for four days day to night until it works again. Your phone is just Undead Zombie LOL

please note i have motorola droid pro version and i have i tried to flash my motorola droid pro version to european flash Android 2.3.6 ---- Blur_Version.0.22.2.XT610.Personal.en.AR and now the mobile stuck a code corrept. i cant back to the original mobile software unless i have flash for usa with same version flash for 2.3.6. usa flash version now only 2.2.3.
---------- Post added at 06:18 PM ---------- Previous post was at 06:18 PM ----------
i need flash for usa mobile with version 2.3.6.sbf

aymanfoa said:
please note i have motorola droid pro version and i have i tried to flash my motorola droid pro version to european flash Android 2.3.6 ---- Blur_Version.0.22.2.XT610.Personal.en.AR and now the mobile stuck a code corrept. i cant back to the original mobile software unless i have flash for usa with same version flash for 2.3.6. usa flash version now only 2.2.3.
---------- Post added at 06:18 PM ---------- Previous post was at 06:18 PM ----------
i need flash for usa mobile with version 2.3.6.sbf
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=1558183
Seems Linux Reflash european version would bring your phone back to live , only u cant root.

nothing will work unless we have flash for usa version mobile 2.3.6

aymanfoa said:
nothing will work unless we have flash for usa version mobile 2.3.6
Click to expand...
Click to collapse
Not likely then. I suspect the recent 4.7.3 is the last "mercy" from Moto for our oldie.
It would be too great if ICS comes, but I dont think it is possible.

In my european pro I've done (with 2.26.20 sbf) (I've locked with 2.3.3 locked sbf...)
Only In a terminal emulator i've added sudo " sudo ./sbf_flash ***.sbf" ...
Thank you

i try every thing nothing will work unless we have flash for usa version mobile 2.3.6

2.download this file(update.zip)
ht#tp://ww#w.badongo.#com/file/26628385
(Remove hash)
Put it on SD
Click to expand...
Click to collapse
Any chance anybody still has a copy of this update file?

[Tools][How-To][Guides] Backup & Restore EFS + Get out from Permanent Safe mode

Note to forum managers: Please make it a Sticky Thread, It should help to all users and there is no use for this tutorial if it is in page 3
Hello XDA Users,
I think some people here know who I am, so I will jump on the "Introduction of myself" for now.
Recently, I have faced many questions & problem of fake IMEI, of damaged EFS folder. So I made a little experiment on my device(GN2).
First, I backuped my EFS folder in 2 types - one is .img and the second is tar.gz.
Then, I deleted my EFS folder using ES Root Explorer. Which made my device to be on somethine called "Permanent Safe Mode" - You can not get out untill you fix your EFS folder and change some values.
This is permanent safe mode:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
After I did my "research" I have managed to make several methods to backup & restore EFS, which should make your life easier and better.
First of all, Disclaimer:
I'm not responsible for any damage caused by using these methods, all methods tested by me, so it should work on your device too.
This is for I9500 Only!!!!!!!
Let's continue.
What you must have:
Latest base with latest modem and latest kernel - very important since in the latest versions samsung prevented the option to install old modems/kernels, so if you install old kernell/modem it can show you wrong IMEI.
Rooted device with the latest Super User
Latest busybox
CWM / PhilZ Recovery
Terminal Emulator
Root explorer - Can be ES File Explorer with working root option or just a root explorer from the market
A working EFS backup(In order to restore it...)
Time & Patient.
Important Notes:
When installing XWUBMG5, several people suffered from Fake IMEI. This is because the new firmware messed up your EFS folder, which means that you can not restore EFS backup until you are on older version, recommended is XXUBMG9(right to 05/08/2013)
Some custom roms include modem installation in their rom installer. Due to modem flashing in recovery, some devices might get Fake IMEI. My recommendation is before even starting to use this guide, please try to install the latest modem via odin from this thread:
http://forum.xda-developers.com/showthread.php?t=2192025
You will find at least one method that works on your device, so don't give up after one method.
Note II & S4 has the same EFS partition (mmcblk0p3), All methods were checked by me on my Note II and fully work. So it should work on S4 too. At least 90% of them
Read all guide and pay attention to all small details.
Backup methods
Method 1 - .img backup
First method, is an automatic backup/restore software.
Special thanks to A.S._id for his software.
Original thread:
http://forum.xda-developers.com/showthread.php?t=2430177&nocache=1&styleid=19
The software:
A.S._id said:
SAMSUNG_I9500_EFS_BACKUP_RESTORE_AUTOMATIC
Instructions:
! Need for backup Root access, debugging USB and busybox
1. Extract from the zip and run. Bat file
2. Is okay to your PC and follow the menu
Automatically create a text file of all the parameters of the device at the time of the copy
Automatic backup of efs:
* Odin flash file. Tar.md5,
* raw.img
* Tar.gz archive
Automatic naming of files and backup archive version of the firmware
Restore to choose from archives and backup images
Automatic start of Odin and the transition to the flashing mode when selecting Odin Restore
DOWNLOAD
Thanks to:
shoma_81, tester99,
For help and assist in the creation of tool
p.s. * Deposit assured recovery - to have the device firmware version corresponding to the backup copy
Click to expand...
Click to collapse
Method 2 - .img backup
Method number 2 will create you efs.img backup on your internal sd. After that you can copy it to your computer.
What you have to do is this:
Open terminal emulator
Write the following:
Code:
su
Then click enter. It will ask for super user permission, give it permissions.
Then write:
Code:
dd if=/dev/block/mmcblk0p3 of=/sdcard/efs.img bs=4096
Then click enter.
When it finishes, check if you have efs.img on your phone memory. If so, copy it to comupter, if not, you did something wrong try again.
Click to expand...
Click to collapse
Method 3 - .tar.gz backup
This method will compress your efs folder into tar.gz file. This method is the same as choosing backup EFS folder in my rom(PhoeniX ROM)/Omega/Wanam/etc.
A tar.gz backup should look like this(On some devices there might be more files, but this picture was taken from Note II N7100 backup and it fully works):
What you have to do is this:
Download this and copy it to your device:
http://d-h.st/f4I
Reboot into recovery
Flash the zip
Reboot your device.
Connect your device to your pc, and copy the backup in "efs_backup" folder.
Click to expand...
Click to collapse
Restore methods
Now the fun begins
You will have to restore your backup when you have one or more of the folowing problem:
Fake IMEI (usually 004999010640000) or "null" IMEI
Blinking SIM card icon on the top tray… ETC
Unable to unlock your SIM card using your PIN
Fake Serial Number (usually 0000000) or "null" Serial
Unable to register to the network (usually comes with Fake IMEI & Fake Serial so check them.)
Attention please,
If you are 100% that your EFS folder is damaged and you have a working EFS backup with the right IMEI number, my recommendation is this:
With root explorer, go to your efs folder and delete all files inside
Long press on power button will turn off your device.
Then turn on the device, you will be in "Permanent Safe Mode".
Continue to one of the following methods.
Click to expand...
Click to collapse
Method 1 - restore .img backup
First method, is an automatic backup/restore software.
Special thanks to A.S._id for his software.
Original thread:
http://forum.xda-developers.com/showthread.php?t=2430177&nocache=1&styleid=19
The software:
A.S._id said:
SAMSUNG_I9500_EFS_BACKUP_RESTORE_AUTOMATIC
Instructions:
! Need for backup Root access, debugging USB and busybox
1. Extract from the zip and run. Bat file
2. Is okay to your PC and follow the menu
Automatically create a text file of all the parameters of the device at the time of the copy
Automatic backup of efs:
* Odin flash file. Tar.md5,
* raw.img
* Tar.gz archive
Automatic naming of files and backup archive version of the firmware
Restore to choose from archives and backup images
Automatic start of Odin and the transition to the flashing mode when selecting Odin Restore
DOWNLOAD
Thanks to:
shoma_81, tester99,
For help and assist in the creation of tool
p.s. * Deposit assured recovery - to have the device firmware version corresponding to the backup copy
Click to expand...
Click to collapse
Method 2 - Restore .img backup
Method number 2 will restore your efs.img backup from your internal sd.
What you have to do is this:
Put your efs.img on your phone memory(not external sd card!) in the main memory, not inside folder.
Open terminal emulator
Write the following:
Code:
su
Then click enter. It will ask for super user permission, give it permissions.
Then write:
Code:
dd if=/sdcard/efs.img of=/dev/block/mmcblk0p3 bs=4096
Then click enter.
Now, reboot your device. If you still don't have IMEI/You are still in Safe Mod, reboot again.
In the second reboot, the bootanimation might stuck and the device will reboot automatically again. Don't worry, it is ok because it installs your efs.img.
Click to expand...
Click to collapse
Method 3 - restore .tar.gz backup
This method will restore .tar.gz backup.
A tar.gz backup should look like this(On some devices there might be more files, but this picture was taken from Note II N7100 backup and it fully works):
If you have like this, continue to the guide:
Create on your Phone Memory(Not Extrenal sd!!) a folder called "efsbackup"(without quotes)
Copy all files & folders from the EFS backup into "efsbackup" folder(The files are like in the picture)
Download this script & copy it to your device:
http://d-h.st/XcL
Reboot into recovery
Go to mount section and click on(Very important!):
Mount /efs
Click to expand...
Click to collapse
Now install the script you have downloaded.
After it finishes, reboot.
Now everything should be fixed, of course if your backup is 100% ok.
If it doesn't work, try method 4.
Click to expand...
Click to collapse
Method 4 - restore .tar.gz backup
This method will restore .tar.gz backup.
A tar.gz backup should look like this(On some devices there might be more files, but this picture was taked from Note II N7100 backup and it fully works):
If you have like this, continue to the guide:
Create on your Phone Memory(Not Extrenal sd!!) a folder called "efsbackup"(without quotes)
Copy all files & folders from the EFS backup into "efsbackup" folder(The files are like in the picture)
Using root explorer, go to "efsbackup folder, select all files & folders there, and click Copy.
Still in root explorer, go to "efs" folder of your device(It is located where all main folders like data, system, etc.).
In "efs" folder, click paste. It will ask you if you want to replace your files, select replace to all files(So all your files from "efsbackup" folder will be in "efs" folder)
Now open terminal emulator
Write the following:
Code:
su
Then click enter. It will ask for super user permission, give it permissions.
Now write:
Code:
busybox chown 1001:1001 /efs/nv_data.bin
Then click enter.
Now write:
Code:
busybox chmod 06755 /efs/nv_data.bin
Then click enter.
Reboot device. Now everything should work.
Click to expand...
Click to collapse
Exit "Permanent Safe Mode"
When you in "Permanent Safe Mode" situation, it means that your EFS folder is broken.
If you succeeded in restoring your IMEI and you still stuck in this Safe Mode, use this guide:
Method 1
Open root explorer.
Navigate to /efs/FactoryApp/
Open "factorymode" file as Text and edit it:
Change this:
Code:
OFF
To:
Code:
ON
Open "keystr" file as Text and edit it:
Change this:
Code:
OFF
To:
Code:
ON
Reboot device.
Click to expand...
Click to collapse
Method 2
Open Terminal emulator
Write the following:
Code:
su
Then click enter. It will ask for super user permission, give it permissions.
Write the following & click enter:
Code:
rm /efs/FactoryApp/keystr
Write the following & click enter:
Code:
rm /efs/FactoryApp/factorymode
Write the following & click enter:
Code:
echo -n ON >> /efs/FactoryApp/keystr
Write the following & click enter:
Code:
echo -n ON >> /efs/FactoryApp/factorymode
Write the following & click enter:
Code:
chown 1000.1000 /efs/FactoryApp/keystr
Write the following & click enter:
Code:
chown 1000.1000 /efs/FactoryApp/factorymode
Write the following & click enter:
Code:
chmod 0744 /efs/FactoryApp/keystr
Write the following & click enter:
Code:
chmod 0744 /efs/FactoryApp/factorymode
Reboot your device
Click to expand...
Click to collapse
This is all I can do for you friends, Worked alot on these methods to give you the best information.
Each method was tested by me and fully works.
If this helped you please press the "Thanks" button.
If you like & appreciate my work please consider a donation!
Credits:
shnizlon
Candanga
A.S._id
dhiru1602
UtkarshGupta
P.M If you think that I forgot you
XDA:DevDB Information
Backup & Restore EFS + Get out from Permanent Safe mode I9500, a Tool/Utility for the Samsung Galaxy S 4
Contributors
tamirda
Version Information
Status: Stable
Created 2013-09-05
Last Updated 2013-09-05

Awesome my friend 5 stars hit, I will link you in my post.
I hope people read in detail and take precautions
Hugs
Sent from my GT-I9500

Crash 1976 said:
Awesome my friend 5 stars hit, I will link you in my post.
I hope people read in detail and take precautions
Hugs
Sent from my GT-I9500
Click to expand...
Click to collapse
Thank you my friend,
In my note II I did like 20 backups before I deleted my EFS folder around 20 times ahah.
People should be aware that samsung is trying to mess up our devices.

Thank you Tarmida, This is the best userful topic ever for my S4 :good:. This will saving many lives of XDA member :good:

Excellent my friend tamirda! :good:
regards!
5 stars! and sticky please!

great topic and guide tamir.5 stars from me :thumbup: will help me a lot if i get stuck with any prob like before arghhhh
Sent from my GT-N7000 using Tapatalk 2

galza said:
great topic and guide tamir.5 stars from me :thumbup: will help me a lot if i get stuck with any prob like before arghhhh
Sent from my GT-N7000 using Tapatalk 2
Click to expand...
Click to collapse
I am happy to help you any time
» Arrow « said:
Excellent my friend tamirda! :good:
regards!
5 stars! and sticky please!
Click to expand...
Click to collapse
Thank you friend!
bafknight said:
Thank you Tarmida, This is the best userful topic ever for my S4 :good:. This will saving many lives of XDA member :good:
Click to expand...
Click to collapse
Thank you friend, and yes this can be very useful for alot of users.
Sent from my GT-N7100 using xda app-developers app

@tamirda
Hi I'm using crash rom 5.5
I made full wipe and flash MG5
By odin and now I have fake imei
I restore crash rom 5.5 backup from cwm and the problem still exsist
I don't make EFS backup before
How to fix it ?
Sent From my i9500 With Crash Rom
--------------------------------
ادعوا لي بالتوفيق في امتحاناتي
wish me good luck for my exams

AL_IRAQI said:
@tamirda
Hi I'm using crash rom 5.5
I made full wipe and flash MG5
By odin and now I have fake imei
I restore crash rom 5.5 backup from cwm and the problem still exsist
I don't make EFS backup before
How to fix it ?
Sent From my i9500 With Crash Rom
--------------------------------
ادعوا لي بالتوفيق في امتحاناتي
wish me good luck for my exams
Click to expand...
Click to collapse
Hello,
It seems that crash backuped your Fake IMEI.
Something that I thing it might help, helped for some other, download latest modem from here:
http://forum.xda-developers.com/showthread.php?t=2192025
install it as a Phone in Odin.
it is importand to mark phone, and flash via odin.
Then try..
If you don't have any other backup, I think you might have to use your warranty.

When I backup the rom I forget my phone in flight mode maybe this the reason why I lost my imei ?
And my baseband now is
I9500DDUBMF8
+Edit
I found these in my internal storage
The First One From Crash Rom 5.0
And The Second From Stock MG5 Where I have fake imei
Sent From my i9500 With Crash Rom
--------------------------------
ادعوا لي بالتوفيق في امتحاناتي
wish me good luck for my exams

AL_IRAQI said:
When I backup the rom I forget my phone in flight mode maybe this the reason why I lost my imei ?
And my baseband now is
I9500DDUBMF8
Sent From my i9500 With Crash Rom
--------------------------------
ادعوا لي بالتوفيق في امتحاناتي
wish me good luck for my exams
Click to expand...
Click to collapse
I don't think there is connection between these two.
Downlaod this:
http://d-h.st/esG
Open odin, Select Phone, select the modem's tar, connect phoen and flash.
After that check if you have IMEI.
If not, Try to install stock XXUBMG9 or XXUBMG5 - If you had MG5 before, it seems that you can not downgrade your phone, so try to install MG5.
If after MG5 there is still no IMEI,
Flash again as Phone via odin this modem:
http://d-h.st/Xxk
If still there is no IMEI, try to restore your current EFS backup.(Make sure you have Root and busybox and all I asked in the main thread)
If after that no IMEI,
Restore to stock and use warranty( make a story that you woke up one morning and you couldn't conect to your network, and you tried to mnake factory reset and still it didn't help)
Good luck

tamirda said:
I don't think there is connection between these two.
Downlaod this:
http://d-h.st/esG
Open odin, Select Phone, select the modem's tar, connect phoen and flash.
After that check if you have IMEI.
If not, Try to install stock XXUBMG9 or XXUBMG5 - If you had MG5 before, it seems that you can not downgrade your phone, so try to install MG5.
If after MG5 there is still no IMEI,
Flash again as Phone via odin this modem:
http://d-h.st/Xxk
If still there is no IMEI, try to restore your current EFS backup.(Make sure you have Root and busybox and all I asked in the main thread)
If after that no IMEI,
Restore to stock and use warranty( make a story that you woke up one morning and you couldn't conect to your network, and you tried to mnake factory reset and still it didn't help)
Good luck
Click to expand...
Click to collapse
Thanks I'll Try These Method
If not working I'll use my warranty
EDIT
I directly flash I9500_UBUBMG9_MODEM
And know it's work fine with me
I Should Try it before ask sorry for that
this is the first time I have this problem
Thank you very much
Sent From my i9500 With Crash Rom

AL_IRAQI said:
Thanks I'll Try These Method
If not working I'll use my warranty
EDIT
I directly flash I9500_UBUBMG9_MODEM
And know it's work fine with me
I Should Try it before ask sorry for that
this is the first time I have this problem
Thank you very much
Sent From my i9500 With Crash Rom
Click to expand...
Click to collapse
Hi mate,
First of all,
I am more than happy that I helped you.
Second, this is ok to ask questions, that is why I am here.
Now backup at leat 5 times your EFS .img & tar.gz.
Enjoy!

tamirda said:
Hi mate,
First of all,
I am more than happy that I helped you.
Second, this is ok to ask questions, that is why I am here.
Now backup at leat 5 times your EFS .img & tar.gz.
Enjoy!
Click to expand...
Click to collapse
I backup 3 times with every method
Thanks
Sent From my i9500 With Crash Rom
--------------------------------
ادعوا لي بالتوفيق في امتحاناتي
wish me good luck for my exams

Awesome guide.
Burned up whole weekend over the issue and now fixed my issue following the guide.
Cannot thank you enough man!
Regards,
Pdash

pdash79 said:
Awesome guide.
Burned up whole weekend over the issue and now fixed my issue following the guide.
Cannot thank you enough man!
Regards,
Pdash
Click to expand...
Click to collapse
I am happy to help & hear that you succeed in restoring IMEI.
Sent from my GT-N7100 using xda app-developers app

I read your post, all most the method use terminal emulator, so what is that ?, and can you give me link of that ?
thanks you very much

daogiahieu said:
I read your post, all most the method use terminal emulator, so what is that ?, and can you give me link of that ?
thanks you very much
Click to expand...
Click to collapse
Linux command line shell on Android. Here's it, mate https://play.google.com/store/apps/details?id=jackpal.androidterm&hl=vi

Thanxs @tamirda
I could see everyday a new post related to messed up EFS folder.
It would surely help people out
Anyhow i had already backed up mine using the EFS professional Software. Is it enough or should i backup using your methods also?

manu44 said:
Thanxs @tamirda
I could see everyday a new post related to messed up EFS folder.
It would surely help people out
Anyhow i had already backed up mine using the EFS professional Software. Is it enough or should i backup using your methods also?
Click to expand...
Click to collapse
I think it is enough, depands on your feeling

[ROOT / TWRP][D851 ONLY][OSX/Linux/Windows] Root/TWRP your TMO G3 with PurpleDrake!

Howdy all!
What's this? Read on, dear reader, to discover the magic that is PurpleDrake.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
What is this?
This is a utility to easily root your LG G3 (specific models only). It's a fairly foolproof script that includes all the dependencies you'll need for getting your phone rooted easily.
This is the FULL version. This means that it will automatically root, and ask you if you want TWRP installed and a custom boot that doesn't trip the root checker!
Click to expand...
Click to collapse
Who made this?
This root is a collaboration between myself (IOMonster), jcase, and autoprime.
Special thanks also to beaups for some initial guidance looking at the vulnerable application.
Thanks to @Shelnutt2 for the security-disabled boot.img
Thanks to @Dees-Troy for the TWRP image!
Click to expand...
Click to collapse
Is my phone compatible?
The new LG G3 models each are slightly different with regards to rooting and unlocking.
To see a matrix of which LG G3 phones are compatible with this root, please see this Google Docs spreadsheet that we've compiled.
When you run this program, your phone will reboot and run a test to see if it's compatible. If the application succeeds, it'll let you know that it's able to permaroot you. If not, it'll fail gracefully and reboot you back to normal Android without having changed anything.
Please note that this version is currently only compatible with the T-Mobile D851 version of the LG G3. For other phones, we suggest you look for the LITE version of PurpleDrake.
Click to expand...
Click to collapse
How do I use this?
WE NOW SUPPORT WINDOWS! YAY ME
To start, for either platform you'll need to scroll down to the download section and get the file.
Ensure that your phone is in ADB mode (PTP Mode for everyone but Verizon. Verizon users need to be in "Internet"/"Ethernet" mode)
Linux Instructions (in a terminal!)
Extract the file you downloaded...
tar xvf ~/Downloads/PurpleDrake-TMO_VERSION.tar.gz
Mark the application as executable, and run it!
cd PurpleDrake-TMO
chmod +x purpledrake_linux.sh
./purpledrake_linux.sh
OSX Instructions (just a bit easier)
Extract the file you downloaded
Double-click on "purpledrake_osx"
Windows Instructions
Extract the file you downloaded
Double-click on "purpledrake_windows"
The application will guide you through all the steps you need.
You will still need to install SuperSU from the market after installing PurpleDrake. This pack does not include one.
If you choose to install the custom boot.img, your phone's root checker will not be tripped and your phone will show as UNROOTED.
After, be sure to check @autoprime's post for how to disable OTA upgrades! here : http://forum.xda-developers.com/showpost.php?p=54254111&postcount=2
Click to expand...
Click to collapse
But, what if I don't want to run your script to root?
Well then, I'd be a little hurt, but you can still do everything the script does manually.
Download the package, and extract it. Open a terminal in the main folder of the archive and run these commands:
Code:
adb reboot --bnr_recovery
adb push ./assets/start_restore /temp/start_restore
adb push ./assets/permaroot.bin /temp/start_restore
adb reboot
That will perma-root you, however there's no protection from doing something stupid or the phone being incompatible. Please be careful!
Click to expand...
Click to collapse
Where do I get this?
WINDOWS/OSX/LINUX VERSION OUT NOW!
- Fixed Windows support
- Fixed OSX ADB issues not detecting phone first try
- Fixed race conditions leading to errors permarooting
- Added 64-bit Linux ADB
Code:
[url]http://downloads.codefi.re/thecubed/lg_g3/purpledrake/PurpleDrake-TMO_R03.tar.gz[/url]
Old version here... (OSX/Linux only)
Code:
[url]http://downloads.codefi.re/thecubed/lg_g3/purpledrake/PurpleDrake-TMO_R01.tar.gz[/url]
Please DO NOT mirror or re-upload the PurpleDrake software to your own site, or any other file host.
If you need drivers for Windows (thanks @autoprime for having these handy!):
Verizon Drivers: http://downloads.codefi.re/autoprime/LG/LG_G3/LG VZW_United_WHQL_v2.14.1.exe
Everyone Else: http://downloads.codefi.re/autoprim...leDriver_S50MAN311AP22_ML_WHQL_Ver_3.11.3.exe
Click to expand...
Click to collapse
Help, it doesn't work!
Post here, let us know what happened and we'll try to help you. DO NOT private message us on XDA or on IRC asking for help. We will not assist privately.
Most questions if not answered here can be answered on #lg-g3 on IRC in Freenode.
Click to expand...
Click to collapse
Thanks so much! How can I show my appreciation?
Since this was a collaboration project, proceeds that are made from this root will be split between amongst us so we can purchase a Sprint test phone to root (as it's currently not rooted).
If you'd like to donate to us, click the "Donate to me" button on the left sidebar under my name, and be sure to enter a comment to let us know that you're donating towards the PurpleDrake project.
Thanks again!
Click to expand...
Click to collapse

FAQ:
Q: I'm running the Windows .bat as administrator and it's closing/not working.
A: There is no need to run the .bat as admin. Just double-click and run.
Q: I get the "Windows cannot find '.\assets\windows\bin\mintty.exe'." error.. watdo?
A: Try just double-clicking on the .bat instead of running as admin.
Also make sure the script is extracted properly first before running.
Q: I [used Flashify and] am stuck in fastboot.. how can I get out?
A: Be cautious using Flashify as it seems it's not working right.. or people are hitting the wrong buttons with it.
HERE are the stock TMO D851 partitions.
Use fastboot to flash recovery(TWRP or stock) and stock boot. This will install TWRP and fix booting into rom.
If on Windows you will need fastboot drivers. Use Google to find fastboot binaries and drivers.
Code:
fastboot flash boot boot.img
fastboot flash recovery recovery.img
fastboot reboot
The commands to flash TWRP manually instead of using flashify is below.
Place TWRP on the root of your internal /sdcard/ using MTP, downloading it directly to phone or using ADB push.
Code:
adb push name_of_file.img /sdcard/
adb shell
su
dd if=/sdcard/name_of_file.img of=/dev/block/platform/msm_sdcc.1/by-name/recovery
Disable OTA:
Open LG Hidden Menu (3845#*851#) --> WLAN Test --> OTA Setting --> OFF
*Replace "851" with your devices model number, 850, 852, 855 etc...
The first D851 update has been released (10M). Bootloader remained unlocked. It would appear future OTAs will be safe to take AS LONG AS YOUR PHONE IS NOT MODIFIED! If you have flashed TWRP or installed xposed or modified /system then you need to restore any changes made or flash stock firmware (tot/kdz) before taking OTA.
If using a non-tmobile g3 I would be hesitant about taking OTA updates. An OTA may update the boot stack to block Bump!
EFS Backup:
Code:
[FONT="Arial Narrow"][B]Backup EFS after jailbreaking your G3. EFS is split into 2 partitions modemst1 and modemst2.
img files will be on root of internal sdcard. Save the .img files somewhere else besides the sdcard... email, cloud, etc..[/B]
DO NOT FLASH OTHER PEOPLES EFS OR FLASH YOUR OWN BACKUPS ONTO ANOTHER PHONE.
THIS WILL BREAK EFS ON THE PHONE YOU ARE FLASHING TO. EFS BACKUPS ARE FOR THE PHONE THEY CAME FROM ONLY.
I have made a new thread on EFS backup and restore which can be found [URL="http://forum.xda-developers.com/lg-g3/development/efs-lg-g3-efs-backup-restore-t2907329"]HERE[/URL].
[/HIDE]
[B][SIZE="5"]Restoring Stock / Remove root flag:[/SIZE][/B]
[HIDE]
Download the tmo .tot file and use lg flash to restore it to stock. itll format everything on internal sdcard so backup anything u may need off it.
T-Mobile firmware can be found [URL="http://downloads.codefi.re/wolfgart/LG_G3/D851"]here[/URL]. Thanks to [user=608699]@wolfgart[/user] for the files and [user=1157052]@thecubed[/user] for codefire hosting.
*Step by step picture guide - [url]http://imgur.com/W83hMPE[/url]
install the drivers.
put phone into Download Mode (power off. unplug USB. pull battery. put battery back in. press/hold Volume Up then plug in USB cable.)
In Windows Device Manager set the phones serial COM port to #41. (*see picture guide for help)
Install [URL="http://downloads.codefi.re/autoprime/LG/LG_G3/Setup_LGFlashTool_1.8.6.527.zip"][B]LG Flash[/B][/URL]. In "C:\LG\LG Flash" folder delete megalock dll. Replace with .dll below.
new megalock dll - [url]http://bit.ly/1cQADXm[/url] (this site includes a "download manager.. UNCHECK THE BOX before downloading dll file.)
Run LG Flash in the "C:\LG\LG Flash" folder. Select korean factory if asked.
When LG Flash opens you will see a box to select firmware and dll.
Select [URL="http://downloads.codefi.re/autoprime/LG/LG_G3/LGUP_8974.dll"][B]LG Flash .dll[/B][/URL]
Select (.tot)
Hit OK (*see picture guide for help)
Hit yellow start button. If you get Milkyway error click ok. LG Flash will then run a crc check on the tot file. Takes a bit.
After crc check finishes unplug the phone. plug phone back in. it should now be seen in LG Flash and start flashing.
Phone will reboot when finished. You may end up on a screen with s "2"... let it sit there for a minute or two.
If stuck on "2" try unplugging the usb cable from the phone.. wait 10 seconds.. then plug the usb cable back in. now wait 30 seconds and hopefully it changes to a "3"
Once the phone says "3" you can unplug the USB.. remove the battery and plug back in.. boot back up... you are now 100% stock.
[/HIDE]
[B][SIZE="5"]PurpleDrake YouTube Videos:[/SIZE][/B]
[HIDE]
[url]https://www.youtube.com/watch?v=wJtz51KgxjM[/url]
[/HIDE]

And where is the bootloader unlock talked about at the bounty thread or was it just a hoax?
Gesendet von meinem LG-D855

Tectas said:
And where is the bootloader unlock talked about at the bounty thread or was it just a hoax?
Gesendet von meinem LG-D855
Click to expand...
Click to collapse
Hoax? What?
This pack is ONLY for the T-Mobile G3 which has an unlocked bootloader out of the box.
D855 support is NOT included in here. There will be a separate thread when we have an unlock for the bootloaders of the rest of the G3 family.

Tectas said:
And where is the bootloader unlock talked about at the bounty thread or was it just a hoax?
Gesendet von meinem LG-D855
Click to expand...
Click to collapse
There is no boot loader unlock..where ever you read this is misinformed...the T-Mobile variant ships boot loader unlocked, it is the only one so far to be shipping unlocked.

Sweet

thecubed said:
Hoax? What?
This pack is ONLY for the T-Mobile G3 which has an unlocked bootloader out of the box.
D855 support is NOT included in here. There will be a separate thread when we have an unlock for the bootloaders of the rest of the G3 family.
Click to expand...
Click to collapse
I'm aware of that and sry it wasn't meant offensive or to put this one down, autoprime, did imply at the bounty thread, that you as well managed to unlock the bootloader, at least at the beginning, that's what I'm referring to, sry that i said it the wrong way, was a bit disappointed, which for sure isn't your fault or the one of this tool, it's still great progress you made.
Gesendet von meinem LG-D855

I wish the international G3 D855 will be unlocked too
Sent from my LG-D855 using XDA Premium 4 mobile app

Great glad to see this released thank to all that is involved
LGG3 and beyond

All my family is sleep in the room with my Mac will be running asap bright and early. Thank you for your hardwork

Thecubed, autoprime, shelnutt2, jcase, and whoever else....thanks for this. Truly appreciated! Can't wait for Windows support. :Cheers:
Sent from my LG-D851 using XDA Premium 4 mobile app

Plans to support recovery for D855 in the near future?
Need to know to sell or not the G3 ?

What the hell software compatible with a mac that's a 1st whoop whoop well done guys and thanks for the hard work

Yeah great time to be a Mac owner

I have a feeling this treads about to turn in to a "when will this version be supported" topic :/
LGG3 and beyond

Success!
1. THANK YOU!
2. It didn't work the first time around, temproot worked but permaroot did not. Maybe it had to do with the fact that I was reading this forum while it was waiting for my input... I can't see how that would have made a difference but whatever. [[ Edit: It worked the second time running, I just followed the instructions immediately - no problems. /Edit ]]
3. Just a reminder for Linux users ... you have to add udev rules as described here: http://developer.android.com/tools/device.html ... and when you are done with that, also run:
$ sudo service udev restart; sudo killall -9 adb
4. My G3 would only connect to my laptop (Ubuntu 14.04) when it was in PTP mode. MTP or Charge Only did _NOT_ work... Only PTP.
5. THANK YOU AGAIN! You devs rock!
Frank.

Same as the guy above didn't work the first time but worked perfect the second! OSX here.

@ OP
http://forum.xda-developers.com/lg-g3/general/s-carrier-specific-g3-threads-t2818549

I keep getting no such file or directory, going to re download drivers and see

@thecuba not telling you what to do but maybe put this on T-Mobile thread as well http://forum.xda-developers.com/tmobile-lg-g3/development
Hope you don't take it the wrong way

V500 im not able to get into bootloader

Hi,
I just want to unlock bootloader on my g pad and flash custom rom. I did this many times on Nexus devices, also sony.
I installed sdk, next Google drivers and my tablet is detected by computer as adb interface.
But when I type command - adb reboot bootlader
Tablet just reboots. I'm not able to get into fastboot. Plz help. It's v500 version. My software version is v50020d.
Earlier I didn't know that LG locks bootloader and I tried many times to flash custom recovery. One time I had made a mistake and using flashify - I flashed twrp for v510. But LG support tool helped me to repair it. Probably it flashed stock with full wipe becsuse I lost data so everything should be fine now but as You can see - it isn't...
HTC One M8

Also command adb reboot oem-unlock only reboots it
HTC One M8

The v500 has a locked bootloader. You need to root first and then install a older aboot and recovery in order to flash roms. This device like the g2 uses loki to bypass the lg lock.

Ok. I've already rooted my device but every time I try to flash twrp using "loki" method I end with screen like this...
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
HTC One M8

WKD622 said:
Ok. I've already rooted my device but every time I try to flash twrp using "loki" method I end with screen like this...
HTC One M8
Click to expand...
Click to collapse
Okay, so that message providing you wait a bit and see twrp start, means that you have successfully bypassed the locked bootloader...
If it freezes there and nothing happens that would be something different... The second sentence reads differently if Loki has bypassed things. The screen above seems to indicate that Loki is not successfully bypassing (hence my edits to this post) it should say something different in the second line if Loki is successful. My tablet is at home right now so I can't take a picture of a working Loki bypass...
A successful bypass should say something like: Device unlock so boot success!

After this screen twrp turns on.
Edit
Okey... Maybe I've done something wrong. Could you tell me how to flash this recovery in points?
I'm not very familiar with LG...
HTC One M8

WKD622 said:
Twrp turns on.
HTC One M8
Click to expand...
Click to collapse
Excellent, then you have successfully installed twrp and you can get into twrp recovery. Next do a backup to an sdcard (if you have one), download a rom to that card and install it...
---
Does TWRP start can you get into it?

muiriddin said:
Excellent, then you have successfully installed twrp and you can get into twrp recovery. Next do a backup to an sdcard (if you have one), download a rom to that card and install it...
Click to expand...
Click to collapse
I had also done this and flash cm but nothing changed.
Maybe this screen was a result of flashing twrp using flashify.
Yesterday I flashed stock so now I want to begin this process one more time . Could You tell me how to do it?
HTC One M8

----
Yes. But now it come to my mind that this problem with booting was a result of twrp for v510 flashed using flashify and next Loki method. Because maybe at the end twrp was for v500 and it worked but I wasn't able to flash anything because it "thought" that I'm using v510. But next i delete line in updater-script connected with authorization and as a result I flashed cm for my v500 but this boot screen didn't changed.
So as you know next thing I've done was flashing stock and now I want to start from beginnig without problems .
Could you tell me how? :/
HTC One M8

WKD622 said:
Yesterday I flashed stock so now I want to begin this process one more time . Could You tell me how to do it?
HTC One M8
Click to expand...
Click to collapse
Okay, my process from a fresh install of 4.4.2 is:
make sure to download everything you need before you start this process and read through it carefully...
1. Root device using stumproot, thread located here:
http://forum.xda-developers.com/lg-g3/orig-development/root-stump-root-lg-g3-sprint-verizon-t2850906
Other root approaches potentially will work as well, I use stump since it also works on my phone...
2. Download and use step 3 from idioterror's thread here:
http://forum.xda-developers.com/showthread.php?t=2698267
You will need to modify his batch file to properly work the details for that are in the thread, the download by itself will not work without changing a line in the batch file (if I recall from memory find the query for 50010b and change it to 50010d.)
If that worked the batch file ends with an attempt to reboot into recovery. Unplug the cable after the batch file sends the reboot command so the adb reboot recovery command can properly complete and get you into recovery...
if the tablet boots back into stock try another adb reboot recovery manually(or use flashify to reboot into recovery), again unplug once the reboot starts.
If that does not get you into TWRP but instead gets you into stock recovery you need to do the steps in idioterror's batch file manually go here for details:
http://forum.xda-developers.com/showpost.php?p=56707177&postcount=15
(be really careful with the dd comands if you do this a mistype with them will be very dangerous)).
Once you have this working recovery you need to decide which base you are going to use with your tablet, the 4.2.2. base (for AOSP based roms) or the 4.4.2 base (for recent stock based roms). The recoveries for the 4.2.2. and 4.4.2 are different see the details in this thread:
http://forum.xda-developers.com/showthread.php?t=2551499
You can run AOSP based roms on the 4.4.2 firmware but you will typically need to flash a 4.4.2 replacement kernel like redkernel or mani... See the proper threads in the development section...
If you are going to run AOSP based roms with the standard kernel skip to 3b...
3a. I am running a 4.4.2 firmware base and a redkernel on lollipop myself, make sure to install the latest 2.8.0 recovery for the 4.4.2 firmware base... You can now flash stock based roms, or AOSP roms with a 4.4.2 capable kernel do not do step 3b for stock based roms...
3b. Install the 4.2.2. base (will actually install a different recovery partition and aboot partition, however it will get your firmware back to 4.2.2. which is what almost all of the AOSP roms expect...) thread and download details here:
http://forum.xda-developers.com/showthread.php?t=2719411
That download is huge and takes a while to flash, don't panic, but make sure that the MD5's match since a failed flash for that one can brick the tablet...
4. Enjoy your rooted and rommable tablet!

muiriddin said:
You will need to modify his batch file to properly work the details for that are in the thread, the download by itself will not work without changing a line in the batch file (if I recall from memory find the query for 50010b and change it to 50010d.)
If that worked the batch file ends with an attempt to reboot into recovery. Unplug the cable after the batch file sends the reboot command so the adb reboot recovery command can properly complete and get you into recovery...
if the tablet boots back into stock try another adb reboot recovery manually(or use flashify to reboot into recovery), again unplug once the reboot starts.
If that does not get you into TWRP this step failed and youwill have to manually walk through what the batch file does... Stop and ask me or someone else for further assistance (or open up idioterror's batch file and figure out what it does so you can do it manually (be really careful with the dd comands if you do this a mistype with them will be very dangerous)).
Click to expand...
Click to collapse
You need to know that yesterday back to stock was my second one. 1st time few days ago I edited script as You wrote here form v50020b to d and it didn't boot to recovery. The same result was when it comes to booting to recovery using app like flashify.
So unfortunately I need to do it with the hardest way . I will try. It will be very nice experience.
I belong to crx team as a (very) novice member so I hope Cr3pt will help me looking at instruction You wrote for me if something goes wrong.
Thanks a lot. Probably everything will be okey but there is an option that I will be back here with more questions. :E
Thanks a lot.
HTC One M8

Does it boot into the stock recovery instead with two really strange errors?
WKD622 said:
You need to know that yesterday back to stock was my second one. 1st time few days ago I edited script as You wrote here form v50020b to d and it didn't boot to recovery. The same result was when it comes to booting to recovery using app like flashify.
So unfortunately I need to do it with the hardest way . I will try. It will be very nice experience.
I belong to crx team as a (very) novice member so I hope Cr3pt will help me looking at instruction You wrote for me if something goes wrong.
Thanks a lot. Probably everything will be okey but there is an option that I will come with more questions.
Thanks a lot.
HTC One M8
Click to expand...
Click to collapse

HTC One M8

WKD622 said:
HTC One M8
Click to expand...
Click to collapse
Yeah, idioterror's script is failing, when I had that happen I had to manually do what was in the batch file via an adb shell. I can't write those instructions until later tonight (assuming my little girl sleeps tonight that is)...
Something has changed which causes his script to fail that I haven't tracked down yet (there is a thread on this somewhere in the LG GPAD forums)... It is either the newest LG drivers, or a newer adb.exe install or something that is conflicting with idioterror's script... his approach still works, you just have to manually do it...
One additional thing, when I manually did it, I had already installed busybox so I did not use his tools (dd etc) I used the ones that I had already installed (I use the BusyBox Pro from Stericson in the play store for this, his free version should also work).

Step by Step Aboot/Recovery when the script fails
WARNING: I'm trying to help, I assume that you know how to recover from mistakes by reverting to stock with LG's software if needed. This is the procedure I followed by manually doing what Id10tError had in his batch file... If anything fails below I messed up in translating the instructions. I did not run the dd commands on my tablet to check since I have already done this process. Please be careful... If you find errors I will try and help... the dd command does have the ability to completely destroy your tablet if you use it incorrectly... if you have questions or see a difference between my instructions and the batch file ask and I'll be glad to answer questions. This was translated from idioterror's script, any errors are mine not his.
I assume that you have installed busybox, (this gives you a working dd on the device)
you have rooted your tablet
and you have adb working on your computer.
You could potentially also do this from the tablet itself if you copy the files needed to the proper locations (skip the push part below) and use a terminal directly. I also assume that you have downloaded idioterror's aboot replacement stuff from my earlier instructions. On the computer go to the directory that you opened the zip file and do a directory listing you should see:
the dd lines below may wrap depending upon how you are displaying this...
The directory should contain:
11/12/2014 09:59 PM <DIR> .
11/12/2014 09:59 PM <DIR> ..
05/16/2014 08:48 PM 524,288 aboot.img
05/16/2014 08:48 PM 815,104 adb.exe
05/16/2014 08:48 PM 96,256 AdbWinApi.dll
05/16/2014 08:48 PM 60,928 AdbWinUsbApi.dll
05/16/2014 08:48 PM <DIR> busybox
05/16/2014 08:48 PM 11,001,856 recovery.lok
07/07/2014 04:41 PM 4,156 runme.bat
then type
adb shell
su
mkdir /sdcard/flash_tmp/
exit
exit
adb push ./aboot.img /sdcard/flash_tmp/aboot.img
adb push ./recovery.lok /sdcard/flash_tmp/recovery.lok
adb shell
su
chmod -R 777 /sdcard/flash_tmp
dd if=/sdcard/flash_tmp/aboot.img of=/dev/block/platform/msm_sdcc.1/by-name/aboot
dd if=/sdcard/flash_tmp/recovery.lok of=/dev/block/platform/msm_sdcc.1/by-name/recovery
rm -rf /sdcard/flash_tmp/
exit
exit
adb reboot recovery
unplug the cable once it starts rebooting and enter TWRP recovery...
It will be dim if you are coming from the 4.4.2 base, go to a dark room if needed so you can see it and flash a newer 4.4.2 recovery next if you are planning on using stock roms, or flash the 4.2.2. base otherwise... see my earlier post for a link to the recovery thread or the 4.2.2 base.

Thanks!
Everything works perfect
HTC One M8

Step 3 of idioterror's thread doesn't work.
You said:
2. Download and use step 3 from idioterror's thread here:
http://forum.xda-developers.com/showthread.php?t=2698267
However, I am unable to download the file from the link.
Do you know of another location where the file can be downloaded?
Thanks in advance!
Morty.