Hi guys,
This is all about developing the Focus S, since we are on our own on this one I thought id start the ball moving but it would be great if others can help, my first target is to try and download as much of the device as possible
Can I promise anything at all? nope
Have I achieved anything yet? well id say 1 step above doing nothing at all, if you can call that progress then yes, there is progress
Is it even possible to do anything? i dunno
Could i brick my device? possibly, i honestly don't know
in short, this is me blindly wondering in the dark with absolutely no direction what so ever!
So what have i done, well, i managed to get the Focus S talking to Qualcomms diagnostic utility, QPST and RevSkills CDMA Workshop
I cant get QXDM to install on Win 8 x64 and im not sure we need that one anyway
it is possible to edit stuff on the phone at a very low level, NOT OS level, it should be possible to download the various images on the phone, but ive yet to have any luck with that, it keeps coming up with "Arm9 fatal error"
ive been able to download and backup various phone settings but this is still outside of the OS#
I can play about with the EFS but there are several folders that i cant get in to yet
So far,both the samsung download mode and the ARM9 (?) download mode IS visible and installes as a com port, but there is no response on that port, i can only get a response within windows when i enable USB diag mode....
i decided not to link to the various tools ive mentioned here, i dont know the legalities of it all so use google, they are all easy to find.
Samsung studio 3 drivers
http://downloadcenter.samsung.com/c...813082717640_Samsung_USB_Driver_Installer.exe
Install it with compability for windows vista.
Samsung Focus info (note that most of this doesn't work, its for the older focus but some does)
http://forum.xda-developers.com/wiki/index.php?title=Samsung_Focus
Handy Diagnostic codes
*#7284# - USB Path control (select to change how your phone communicates with your computer)
*#197328640# - The Root Menu (seriously, don't get too cocky, you could bugger up your device)
Samsung USB Download mode
Turn off Device
hold the camera button and the Volume UP
Whilst holding those two push and hold the power button until it vibrates
Samsung Device Hard reset
Turn off Device
hold the camera button and the Volume Down
Whilst holding those two push and hold the power button until it vibrates
Follow on screen instructions
Enable Diagnostic mode and Connect to QPST or other GSM/CDMA software
Download and install the Samsung drivers above
open the diagnostic app and dial code *#7284#
Select Modem,USB Diag
Reboot
When you plug the phone in you should see a COM port install and appear in device manager
load QPST configuration
Click on the Ports Tab then Click add new port
Select your Phone com port
Click OK then select the phone from the list, hit enable
Click on start clients then you can play with a bunch of options
Please note that this is a serious piece of kit, its designed for low level editing, what I mean by that is that it couldn't care less about if it works or not after you finish playing, a couple of other software options to play with are CDMA tools and RevTools both have the potential to paperweight your phone!
NOTE: Zune will not connect and whilst connected to PC you may lose all GSM connectivity whilst connected as well.
Enable FTM (Factory Test Mode)
open Diagnostic app and dial code*#197328640#
select 6 (common)
Select 1 (FTM)
Select 1 (on)
Click return save (it doesn't always persist unless you do)
Hit Back until you back to the main menu then win key to Windows
REBOOT to enable
NOTE: You will lose ability to connect to GSM with this enabled, a reboot is required to enable it after its set and to deactivate it, ive not found a noticeable difference with this on
If im not wrong, WP uses arm v7.
Good luck with this, it would be nice to see a 7.8 ROM on this device before I go buy the ATIV.
tayfelix said:
If im not wrong, WP uses arm v7.
Click to expand...
Click to collapse
yes your right, but that's what it says, it reboots in to some sort of QC download mode, QPST is the waiting for it to talk to it which it doesn't do, it just sits there with this error message.
I have been able to backup the Important bits that make the phone work, and I have access to the EFS, I can change all sorts at a very low level but any time I try and download some of the various "partitions" it reboots to this special download mode. because we don't have any form of ROM I thought the first priority should be to see if we can make a backup of it, outside of MS encrypted zune backup I mean
the software is old so perhaps it doenst work with newer hardware, but then it does with android soooo.....
LudoGris said:
Good luck with this, it would be nice to see a 7.8 ROM on this device before I go buy the ATIV.
Click to expand...
Click to collapse
don't hold your breath, I still don't really know what im doing, consider this playing.....in a mine field
Hmmm. If this does work. Will it ever work on focus flash/ omnia w? Cuz it got the same spec except different screen sizes
tayfelix said:
Hmmm. If this does work. Will it ever work on focus flash/ omnia w? Cuz it got the same spec except different screen sizes
Click to expand...
Click to collapse
That depends what you mean by work, will the focus flash connect to various diagnostic tools? yes probably, will it be possible to download the ROM? maybe, beyond that I haven't got a clue
starting to run out of ideas, I think either the download mode via QPST is disabled or, and more likely, the driver isn't correct, when it enters the arm9 fatal error screen it is still using same driver, the same driver samsungs download mode uses, but both won't talk to QPST unless I enable diagnostic mode within windows phone OS, the prob with that is that it won't then allow access to the file systemSent from my fake Lumia 900 using XDA Windows Phone 7 App
It also have diagnostic tools .
tayfelix said:
It also have diagnostic tools .
Click to expand...
Click to collapse
be careful, you can bugger up your device!i will write a more detailed guide later
First things first, you will need to make sure you have the samsung diagnostic tool install
bring up the phone dialer and dial
##634#
you will now see a diagnostic app on your app list, run it and type in
*#7284#that will enable you to change the USB connection mode,select
Modem USB diag
OPTIONAL - Typing in the following code will bring up the diagnostic root menu
#197328640#you can find a full list Here Many of the codes on that list just run functions found in the root menu
Bare in mind that pissing around with some of the things in there will bring about a swift crappy end to your day!
plugging in your your phone at this point will install a Samsung COM driver
next download and install QPST on your computer, run the config part of that, it will ask you to select your phone, you will need to add a com port, it should then list your phone to connect to it
you can then edit the EFS, service/phone settings, download settings
you will need to know your SPC number, mine was already 0000000, there are ways of working out your number if leaving it all at zeros doesnt work.
use the service editor to read the phone settings, it will ask for your SPC, once loaded,you can save those settings to a file, very important ifyou screw something up
Cool, I will try it when I'm free. Hmm what's UR focus s BOOTLOADER, firmware version and diagnostic version ?
tayfelix said:
Cool, I will try it when I'm free. Hmm what's UR focus s BOOTLOADER, firmware version and diagnostic version ?
Click to expand...
Click to collapse
as reported in windows phone about screen, note that the Focus S and Omnia 7, has a firmware update that will stop any interop unlocking, i had it installed but it killed my battery life and my phone reception so i took it off, id suspect the bootldt vs will be different between devices, even though they were released at the same time
bootldr 6.5.16.0
firmware 2103.11.10.1 (not the Samsung update that breaks interop)
diagnostic 0923 (not the Samsung update that breaks interop)
Er it's focus, focus s , focus flash/omnia w and omnia 7 that are affected by the freakin update. This is my version from the about info
Firmware: 2424.12.04.1
Bootloader: 6.4.4.0
Diagnostic : 1109
Note : I cant interlop unlock my omnia as Samsung fixed the exploit in the new firmware version
How did u remove the firmware ?
tayfelix said:
Er it's focus, focus s , focus flash/omnia w and omnia 7 that are affected by the freakin update. This is my version from the about info
Firmware: 2424.12.04.1
Bootloader: 6.4.4.0
Diagnostic : 1109
Note : I cant interlop unlock my omnia as Samsung fixed the exploit in the new firmware version
How did u remove the firmware ?
Click to expand...
Click to collapse
I made a backup before I installed it
I think we can get an xap of my version of the diagnostic tools, but the firmware update also changes drivers an a few other things, those cant be changed, if we could send custom cabs to the device we are laughing, but we cant, to cab send requires the cab to be signed, and the device would need to have that certificate, which cant be put on whilst its all in use
:S don't think so as diagnostic tool is based on firmware I think.
tayfelix said:
:S don't think so as diagnostic tool is based on firmware I think.
Click to expand...
Click to collapse
try this, remove your existing diagnostic app and install this xap
How can u install a xap..
Is your device still unlocked? The Samsung update will stop you applying the unlock but if you had it already installed it will still work, if it is unlocked then use an cap deployed, my link to the wee guide details how to do it, if it's interop unlocked but you can't install an xap deplorer the use the xap deplorer included with the WP SDK
Sent from my Lumia 900 using XDA Windows Phone 7 App
it's ok. I will just wait for someone to be able to unlock the device as I already got the exploit for interlop unlock patched
tayfelix said:
it's ok. I will just wait for someone to be able to unlock the device as I already got the exploit for interlop unlock patched
Click to expand...
Click to collapse
well there isn't anyone working on unlocking it as far as I know, so if its going to happen then we need to do it ourselves.
Ive exhausted just about every avenue I can think of getting access to the device, ive been able to dump parts of the RAM but still not the ROM,
EFS is writable but I cant get in to the secure folders. The only way I can think of for getting the ROM is to get it working in one of the two download modes, both will not talk to anything tho, perhaps if I had the commands to copy the ROM I could just send them in the hope it will reply but it sure as hell isn't saying anything to the commands I have sent.
Hmmm. Must there be a exploit? Zzz there's are very little/no hackers having a focus s or a focus flash/omnia w. they all have 1st gen devices I think.
I've installed all kinds of motorola drivers including the one that the device manager from motorola website, still I cannot read the qc diag serial port. Does anyone have these drivers?! I'm working on sim unlocking the sprint moto x and I gotta be able to get into the modem and see what I'm dealing with. Get me usb serial access to issue QC commands and hopefully I'll be able to post instructions for simunlock and cricket/metropcs flash (that opens up pretty much every carrier except verizon for the sprint model). I wont know until I can qxdm to it, I wish I had a radiocomm version that supported the msm8960 but the version I have goes up through the 6x00 not even close. I still think I can get done what I need to do with qxdm.
Thanks in advance.
+1,did you find then?
thundercles said:
I've installed all kinds of motorola drivers including the one that the device manager from motorola website, still I cannot read the qc diag serial port. Does anyone have these drivers?! I'm working on sim unlocking the sprint moto x and I gotta be able to get into the modem and see what I'm dealing with. Get me usb serial access to issue QC commands and hopefully I'll be able to post instructions for simunlock and cricket/metropcs flash (that opens up pretty much every carrier except verizon for the sprint model). I wont know until I can qxdm to it, I wish I had a radiocomm version that supported the msm8960 but the version I have goes up through the 6x00 not even close. I still think I can get done what I need to do with qxdm.
Thanks in advance.
Click to expand...
Click to collapse
looks like you're booted into bp tools for those interfaces to be dectected, correct? i'm not sure whether or not the moto device manager has drivers for these interfaces as i always use the standalone drivers. here's a link to the latest available as of this posting:
http://batakang.com/ftp/?dir=devs/mhous33/drivers
whichever driver installer you use, the drivers have to be installed manually. iirc motorola qc diag interface is the only one you need to communicate with qpst/qxdm.
in device manager, right click on motorola qc diag interface > update driver software > browse my computer for driver software > let me pick from a list of device drivers on my computer > ports (com & lpt).
under manufacturer, select motorola.
under model, select motorola qc diag port.
click next, driver should be installed successfully.
looks like you're using windows 8, so you may have to temporarily disable driver signing for it to install.
hope this helps.
Q9Nap said:
looks like you're booted into bp tools for those interfaces to be dectected, correct? i'm not sure whether or not the moto device manager has drivers for these interfaces as i always use the standalone drivers. here's a link to the latest available as of this posting:
http://batakang.com/ftp/?dir=devs/mhous33/drivers
whichever driver installer you use, the drivers have to be installed manually. iirc motorola qc diag interface is the only one you need to communicate with qpst/qxdm.
in device manager, right click on motorola qc diag interface > update driver software > browse my computer for driver software > let me pick from a list of device drivers on my computer > ports (com & lpt).
under manufacturer, select motorola.
under model, select motorola qc diag port.
click next, driver should be installed successfully.
looks like you're using windows 8, so you may have to temporarily disable driver signing for it to install.
hope this helps.
Click to expand...
Click to collapse
Lmao I posted this same rant on facebook and a phone flashing friend did these things with team viewer and went ahead and helped me retrieve my MSL code as well. It is all coming down to the UICC unlock, this is what is holding back our ability to sim unlock the sprint version of this phone (because without the UICC unlock it wont read any other Sim cards anyways) I'm working on that right now but I have a headache so it will be later.
ok,please if you have sucefully unlock gsm i will love to pay you if you give me the way.
MSL code
thundercles said:
Lmao I posted this same rant on facebook and a phone flashing friend did these things with team viewer and went ahead and helped me retrieve my MSL code as well. It is all coming down to the UICC unlock, this is what is holding back our ability to sim unlock the sprint version of this phone (because without the UICC unlock it wont read any other Sim cards anyways) I'm working on that right now but I have a headache so it will be later.
Click to expand...
Click to collapse
Does this mean getting the MSL code is useless in unlocking the device for GSM use?
do you have that moto x drivers? i dont find it anywhere.. will you please reupload it some where.. Thanks.
Anyone know how to enter into Diag mode with GPe ROM flashed on Sprint M8?
The usual code, ##3424# does not work. Also *#*#3424#*#* doesnt work either.
You don't, unless you're on a Sense ROM.
Unless you have EPST you dont do those codes
So how to get EPST?
This makes me wonder on how it happens on the Sprint GPe device itself?
Found a way to put in Diag mode:
echo 1 > /sys/class/android_usb/f_diag/on
honest1212 said:
Found a way to put in Diag mode:
echo 1 > /sys/class/android_usb/f_diag/on
Click to expand...
Click to collapse
Nice!
honest1212 said:
Found a way to put in Diag mode:
echo 1 > /sys/class/android_usb/f_diag/on
Click to expand...
Click to collapse
Please explain how to do it, I'm kinda noob in these things
saviola123 said:
Please explain how to do it, I'm kinda noob in these things
Click to expand...
Click to collapse
It appears he used terminal commands on board the Android device
So I can't access diag mode on the Remix (Mini 2 for Verizon). I assume it's a verizon thing. I use weaksauce to get root on bootup, so I'm sure I can try to install the APK from someone. MY HTC M8 calls it DM Command Service. Not sure what it is called on the mini 2s but if someone could find it, and provide it for me that would great. I'm assuming VZ does not like people toying around with data settings, which I get, but I back up my phones via CDMA Workshop and I need it in Diag mode for that. I forgot if it was in /system/apps or /system/priv-apps.
Pleeease!!! I tried all the cominations of 3424; ie ##3424# and *#*#3424#*#*. They don't work and the APK not being there may explain it...
jobzombi said:
So I can't access diag mode on the Remix (Mini 2 for Verizon). I assume it's a verizon thing. I use weaksauce to get root on bootup, so I'm sure I can try to install the APK from someone. MY HTC M8 calls it DM Command Service. Not sure what it is called on the mini 2s but if someone could find it, and provide it for me that would great. I'm assuming VZ does not like people toying around with data settings, which I get, but I back up my phones via CDMA Workshop and I need it in Diag mode for that. I forgot if it was in /system/apps or /system/priv-apps.
Pleeease!!! I tried all the cominations of 3424; ie ##3424# and *#*#3424#*#*. They don't work and the APK not being there may explain it...
Click to expand...
Click to collapse
not sure if this the ones but its the only ones i found
Has anyone tried enabling VoLTE as described in this thread?
https://forum.xda-developers.com/oneplus-3t/how-to/guide-enable-volte-root-devices-t3593652
Mine hasn't shipped yet, but if anyone else is willing to try it'd be appreciated.
HiHungryImDad said:
Has anyone tried enabling VoLTE as described in this thread?
https://forum.xda-developers.com/oneplus-3t/how-to/guide-enable-volte-root-devices-t3593652
Mine hasn't shipped yet, but if anyone else is willing to try it'd be appreciated.
Click to expand...
Click to collapse
Pretty late answer, but I've just tried it, it doesn't work at least in my country (tencent phone with ww ROM).
I want to change the ims profiles to perhaps enable a working foreign VoLTE profile via PDC tool.
I got stuck at enabling tge right qualcomm diag modes.
I am rooted and enabled the menu switches according to this post.
The adb shell command
setprop sys.usb.config diag,rmnet,serial,adb
Didn't work. I only got a serial qcom diag device in my Windows device manager with the props
setprop sys.usb.config rndis,diag,adb
but with those settings alone the PDC program don't recognise my Qcom modem.
Does anyone know some more settings for the sys.usb.config variable?