yashsingh1/xdaforums huggingface dataset:
[General Questions and Answers] Vee63b:
Same on my end. Can browse and search, but goes back one screen and FC on pressing "Play" or "Cast"
[General Questions and Answers] Planterz:
That's definitely a problem. T-Mobile gives customers with the unlimited high-speed Simple Choice plan a free premium Rhapsody subscription ($4/mo for other plans, plus it doesn't count against your data). If it hasn't been already, this needs to be reported to T-Mobile immediately.
[General Questions and Answers] moosiemooses:
Anyone using rhapsody that is actually using tmo service? I noticed in the FC pics no one has a sim in. Could be the reason.
[General Questions and Answers] Vee63b:
Sim Card's in, on wifi calling when I'm at home.
[General Questions and Answers] moosiemooses:
Damn... Just fc on me too...
[General Questions and Answers] mdabeezy:
Spotify did that to me for the first week until I uninstalled and and reinstalled it.
[General Questions and Answers] treIII:
Is anyone on here that wants this device unlocked or rooted a developer? I am not. My thought is if a developer tried to root this unlock boot loader etc.. That it may not be that difficult for someone with the know how. It seems that we may not have someone who is qualified. Ask some of your favorite developers that you have donated to or had a good relationship with and they may take a glance at this.

Sent from my Z970 using Xparent Blue Tapatalk 2
[General Questions and Answers] moosiemooses:
Willing to drop $200+
[General Questions and Answers] BenisHeger:
Can someone confirm if this site is legit? rootandroid(dot)com ? $39.99 and they mention 'XDA-Developers'.. Is this for real?
[General Questions and Answers] Planterz:
Definitely not.
[General Questions and Answers] moosiemooses:
Don't do it. http://www.androidpit.com/scam-alert-don-t-get-duped-by-root-android-com
[General Questions and Answers] moosiemooses:
L launcher, Greenify and double tap... Golden
[General Questions and Answers] mingolianbeef:
Give the new apex launcher update a go, it has the true Android lollipop animations for the home screen. Been using it for a week now I think, super smooth!
[General Questions and Answers] moosiemooses:
On it:thumbup:

Didn't know apex was on their game!
[General Questions and Answers] StonerSteve420:
Where did everyone go?
[General Questions and Answers] Vee63b:
I can't speak for everyone else, but I'd say New Year's kept me pretty intoxicated and full of food and sleep lol
[General Questions and Answers] BenisHeger:
+1

Took some time yesterday to try every available method out there, nothing works. Just have to sit back and wait it out. I'm having fun customizing it in the mean time, launchers, wallpaper, apps.
[General Questions and Answers] Shlickwilly:
I was reading chainfire's auto root pages and what he would need to try to make it work on unsupported phones. Do we have a recovery.IMG or a copy of the OEM ROM image?
[General Questions and Answers] Vee63b:
System's so locked down I can even make a backup of it smh...
[General Questions and Answers] D33PTHAWTE:
Picked up my Zmax the other day as an interim while I await a replacement screen for my Huawei Ascend Mate 2.

Enjoying the Zmax and reading through the thread reminds me so much of what all of us Mate 2 owners went through getting root.

The big difference is that ZTE is so unhelpful as far as unlocking the bootloader. Huawei would send it right to us.

Just read through all 68 pages in the past two days and aside from a couple of folks causing trouble you guys already have a good community.

I signed the petition twice and requested an actual forum for the Zmax.
[General Questions and Answers] Shlickwilly:
Thanks for trying Vee63

Was anyone able to find a downloaded version of the ROM maybe from t-mobile or ZTE USA or perhaps even MetroPCS
[General Questions and Answers] BenisHeger:
T-Mobile & Metro have user manuals for download, ZTE USA has nothing for downloads for the ZMAX. Oddly, I was able to find older Android builds (ICS / JB) on ZTE's site.
[General Questions and Answers] Vee63b:
No problem, wasn't able to find anything for a downloadable rom.
[General Questions and Answers] voidcomp:
Anyone going to CES? Imagine ZTE is going to have a booth. How about stopping over and telling them about our bootloader/unlock desires? :)
[General Questions and Answers] Shlickwilly:
Benis got a link for that d/l page?
[General Questions and Answers] BenisHeger:
I was poking around almost every ZTE site I could find looking for downloads. Somehow I came across this one. I still can't post URL's yet so -----------------> support.zte.com.cn/support/news/NewsMain.aspx?_langType=en

In the drop down tree click on service bulletins, there it will show you a list of devices and source code to d/l.
[General Questions and Answers] Shlickwilly:
Looked thru that site. I did not find anything for the the Z970. I'm starting to think that T Mobile ordered this phone to be produced under a contract that bound them to lock the bootloader. When you look at the support section of this site z970 isn't even listed. At this point I wish I had enough money to just send a zmax 2 chain fire or some other noted root specialist that could open up the phone and work it thru the JTAG or what ever those interfaces are called. I would be willing to donate towards a dev phone if we could find 1 willing to really try. The Walmart version is down to 179.oo
[General Questions and Answers] mdabeezy:
JTAG! I love the amount of peeking and poking that can be done via a JTAG interface. If the 360 can be hacked that way this phone should be cake as there is no hypervisor as far as I'm aware.
[General Questions and Answers] Shlickwilly:
UART/COM port* is the other type of port I was thinking of. Has anyone opened this up yet to look inside at the main board.? Post some pics Plz.
[General Questions and Answers] drbones:
I'd contribute $20 to buy a phone if we had a dev willing to look at it.
[General Questions and Answers] jbyers5355:
If we do get a dev to accept the task I will donate towards a phone for them also
[General Questions and Answers] BenisHeger:
I'm in as well for a donation to purchase a device. Any updates yet on when we will have a dedicated ZMAX thread?
[General Questions and Answers] mjsell2:
I just used holo backup to pull the system under opensuse Linux. I am working on extracting the .ab image the make sure it worked.
[General Questions and Answers] shabbypenguin:
Nothing against chainfire, he is an amazing dev but he doesnt exploit phones. His software is extremely good at rooting devices that have a flashing software that can be used at a low level. For most phones (like ZTE's) you need root to write to teh recovery partition, cf-root works by flashing a custom recovery that installs supersu, without a way to install cf-root its not much help to you.

You guys need someone who would be able to leverage a vulnerability into an exploit, very few people have that skillset. i would be very careful about finding someone who may have rooted a phone or two in the past via any ole method and sending them a few hundred bucks. my suggestion would be reaching out to someone like jcase and see, he is very talented and possibly your best shot at it.
[General Questions and Answers] treIII:
This is a fact. Jcase or beaups. They are good. This would probably be simple for them. You can reach them at root ninja it had their iirc chat link on their sunshine site for soff for modern Motorola HTC devices

Sent from my Nexus 6 using Xparent Blue Tapatalk 2
[General Questions and Answers] johnb380:
Hell everyone got this phone a few weeks ago and have been reading the thread. Hoping we can find a way to get root on this thing!
[General Questions and Answers] voidcomp:
Hope either has paypal. There's certainly enough $ expressed to pay them. I'm in for a contribution too.
[General Questions and Answers] devious900:
Been watching this thread for a few weeks as I picked up four of these phones via Wal-Mart's $179 deal as my family jumped on the T-Mobile bandwagon. Waiting patiently for root but in the meantime, really enjoying this phone after moving from old Galaxy S3's.

Had an issue with the proximity sensor not working correctly on two of the phones. When calling and holding the phone to your face, the screen would stay off no matter how you held the phone. The only way to enable the screen again was to press the power key. Searching, I found that ZTE like many other companies has a secret menu used to test various parts of the phone. In this menu, the proximity sensor can be reset fixing the problems my phones had.

Dial *983*0# to enable the menu.

Hope this can help others who might have the same issue or just use the other menu tests to review info about their phone.
[General Questions and Answers] Shlickwilly:
I contacted the Sunshine support team via there irc channel and asked them if they would be interested in trying to help us out with Root for the ZTE ZMZX Z970. I was answered immediately upon entering the channel. :D the Team said that they would give it a shot but would need a LOANER phone to work with. I was told to emphasize This was only to be a loaner phone and it would be returned. I would imagine that you would have to risk the condition of the returned phone. I know i read back in this forum there was a user that was talking of getting a phone for testing. I am going to start looking back and see if I can contact him directly. In the mean time If you would like to PM me about a loaner plz do so. .. . ok going to look back and see if I can find that post .
[General Questions and Answers] D33PTHAWTE:
That's awesome of you to take the lead and contact those guys.

I'm awaiting a replacement screen for my primary device, but if no one else has provided a device before then I'd be willing to risk my Zmax for the cause.
[General Questions and Answers] jcase:
He is referring to me, I am willing to look at it, I would need a loaner that would be returned in working order (or better). I do not want money pooled for a device, but if someone has one they are willing to loan me let me know.
[General Questions and Answers] Planterz:
I don't have an Avant, but I'll take 3 chicken tacos with no lettuce.

But seriously, if you can root this thing, I might just buy one.
[General Questions and Answers] john16v:
I got into the menu, got it tested and re-calibrated (everything said OK) but how do you reset the sensor? Is there a rest icon or something?

Thx
[General Questions and Answers] devious900:
Just a re-calibration was all it took to get my phones working right. Your right, after checking again, there's no reset option.
[General Questions and Answers] perrisiam:
I'm having alot of trouble with the phone mic, it cuts in and out no matter how I am holding the phone, this does not happen on speaker.

I tried a factory reset to see if it was a program I installed, same issue, I had the phone replaced, same issue.

I am wondering if it might have something to do with dual mics, if anyone knows how to adjust that, also maybe it's dolby?

I have no idea, anyone else having the same issue?
[General Questions and Answers] BenisHeger:
No issues with mine, going on week 2.
[General Questions and Answers] john16v:
Ok, that's what I thought. Thanks! Another thing about the proximity sensor, when you get a screen protector make sure you get the one with the cut out. (Stay away from XtremeGuard)

Have you try that *983*0# sub menu test to see if there is anything that can test the mics? If not, perhaps another replacement?

GL
[General Questions and Answers] Ra.burt86:
yes, I could donate a little, too
[General Questions and Answers] moosiemooses:
I have one! Take as long as you need with it!!!
[General Questions and Answers] jcase:
Too late just bought one.
[General Questions and Answers] _ck_:
Greetings from the ZTE Z667 thread, a (very) poor cousin of the z970

Our phones are also very locked down in the newest 4.4.2 versions but we have an older model from last year that is 4.3 based and can be poked around a little.

hroark13 recently made a mini-breakthough that might help you with the z970

he discovered if a sdcard has a special file called ZTE_FLAG on it with a special signature inside, it will attempt to install update.zip from the bootloader/recovery:

http://xdaforums.com/showpost.php?p=57959701&postcount=196

http://xdaforums.com/showpost.php?p=57969007&postcount=206

This is possibly important because when recovery is loaded is the only time all the rom is allowed to be written. It seems to have write-protected parts after boot.

Hope that helps somehow, good luck!
[General Questions and Answers] KEMC2k6:
Can't wait to see what you come up with jcase, thanks for looking into it!
[General Questions and Answers] BenisHeger:
Which version did you end up getting?
[General Questions and Answers] perrisiam:
Thanks, I did read that post, gave it a whirl, there is a mic test in that menu but no joy
[General Questions and Answers] jcase:
Z970
[General Questions and Answers] BenisHeger:
Right, but Walmart / T-Mobile / MetroPC's? Not sure if there is much difference, but the MetroPCS version is running 4.4.4, the Walmart version (the one I bought) is 4.4.2. I'm using that with a T-Mobile plan.
[General Questions and Answers] jcase:
Walmart, 4.4.2.

Does anyone have full firmware for this, for any version?
[General Questions and Answers] hroark13:
hi Jcase

not sure if this will help you or not

I did not see any kernel source code for the Zmax, but I have found 4.4.2 kernel source for the ZTE X9180 KitKat(4.4.2) kernel(3.4.x) source code

Which has the msm8926 cpu, so the kernel may be similar to the kernel you have, and you may be able to find a vuln somewhere

https://github.com/ztemt/X9180_kernel

---------- Post added at 06:43 PM ---------- Previous post was at 06:30 PM ----------

here are some Chinese ROMS for the V9180 which is the same as the X9180

I know it is not for the ZMAX, but since it has the same CPU you may be able to learn something form it

http://www.ztehn.com/download.php

---------- Post added at 06:48 PM ---------- Previous post was at 06:43 PM ----------

here is another place to possible download a ROM for the V9180

http://www.needrom.com/download/zte-v5-v9180-dual-sim-support/
[General Questions and Answers] Velrix:
I spoke with ZTE today about receiving source code. From what I am told they are planning to release but they have not yet however I was told to email mobile@zte.com.cn for any source code releases. If I receive anything I will post it here. Otherwise I will be trying to get the full backup. So far nothing.

---------- Post added at 07:19 PM ---------- Previous post was at 06:55 PM ----------

Quick update... File system as follows....

cat proc/filesystems
nodev sysfs
nodev rootfs
nodev bdev
nodev proc
nodev cgroup
nodev tmpfs
nodev debugfs
nodev sockfs
nodev pipefs
nodev anon_inodefs
nodev devpts
ext3
ext2
ext4
nodev ramfs
vfat
fuseblk
nodev fuse
nodev fusectl
nodev selinuxfs

cat proc/partitions
major minor #blocks name

253 0 196608 zram0
179 0 15388672 mmcblk0
179 1 8192 mmcblk0p1
179 2 8192 mmcblk0p2
179 3 8192 mmcblk0p3
179 4 8192 mmcblk0p4
179 5 8192 mmcblk0p5
179 6 8192 mmcblk0p6
179 7 8192 mmcblk0p7
179 8 8192 mmcblk0p8
179 9 8192 mmcblk0p9
179 10 8192 mmcblk0p10
179 11 40960 mmcblk0p11
179 12 8192 mmcblk0p12
179 13 8192 mmcblk0p13
179 14 8192 mmcblk0p14
179 15 8192 mmcblk0p15
179 16 8192 mmcblk0p16
179 17 8192 mmcblk0p17
179 18 8192 mmcblk0p18
179 19 8192 mmcblk0p19
179 20 131072 mmcblk0p20
179 21 16384 mmcblk0p21
179 22 16384 mmcblk0p22
179 23 16384 mmcblk0p23
179 24 8192 mmcblk0p24
179 25 819200 mmcblk0p25
179 26 1572864 mmcblk0p26
179 27 12435456 mmcblk0p27
179 32 512 mmcblk0rpmb
179 64 15339520 mmcblk1
179 65 15335424 mmcblk1p1

Obviously permission denied as we have no root.. "shell@draconis:/dev $ dd if=/dev/block/zram0 of=/sdcard/zram.img

dd if=/dev/block/zram0 of=/sdcard/zram.img

/dev/block/zram0: cannot open for read: Permission denied"

Rom Download from ZTE China - Removed wrong device
[General Questions and Answers] hroark13:
also

I am not sure how hard it is to obtain a private key, pretty sure it is impossible, but afox27 has provided 2 small (3mb) ZTE signed update zips for the ZTE Whirl 2

http://xdaforums.com/showpost.php?p=57953467&postcount=172

the only thing these zips do is update the build.prop, there are a few different files between the two zips

ZTE most likely uses the same Private Key for most of their phones

---------- Post added at 07:33 PM ---------- Previous post was at 07:21 PM ----------

what phone is that ROM for ?
[General Questions and Answers] Velrix:
Our phone z970 off the China ZTE site!

---------- Post added at 07:36 PM ---------- Previous post was at 07:34 PM ----------

Taking the first link off..

This is the correct link below

From this link

REMOVED
[General Questions and Answers] hroark13:
looks like it is for the ZTE Kis III V790

MSM7225A

dont think that will help much
[General Questions and Answers] mcknixy:
snowball is rolling! Thanks to those diligently pursuing development for all of us. I can feel it....

?
[General Questions and Answers] treIII:
Can someone who uses metro please upload their WiFi calling apk from their zmax? I read that its different than the Tmobile version. Thanks

Sent from my Tapatalk 2
[General Questions and Answers] Velrix:
Your right! I fixed the link
[General Questions and Answers] hroark13:
and the ZTE Grand X V970T has a MediaTek MT6577

that wont help either
[General Questions and Answers] Velrix:
You are correct.. Total fail on my part. I will keep digging sorry about the fire alarm!
[General Questions and Answers] hroark13:
it is the thought that counts, and it is good you are trying to help

another ZTE Phone that has the msm8926 cpu is the Blade Vec and Blade Vec 4G

Zte has kernel source code for them here

http://opensource.ztedevice.com/

hopefully there will be draconis stuff in it

ZMAX is P892T57

Blade Vec 4G is P892D30

so there may be some similar stuff between them

here is a Blade Vec 4G spanish ROM to download

http://www.ztedevices.com/support/smart_phone/14a8704e-de3c-400e-839c-3c35bd16f065.html

.hK
[General Questions and Answers] Velrix:
I wonder if we can get a filesystem/partition tree to verify
[General Questions and Answers] hroark13:
not sure, but ZTE's download sites suck, take forever to download anything, and most of the time the download fails

I think between the Red Bull and Blade Vec, the Blade Vec will be most similar
[General Questions and Answers] jcase:
So wait which firmware is this phone?
[General Questions and Answers] hroark13:
there is none available for it, I was just trying to provide links to ZTE Phones that have the same CPU, and may have a similar ROM

Just figured it may help you some how

I dont think you will find a ZMAX ROM out there for quite some time
[General Questions and Answers] Velrix:
I agree with the Blade Vec (From searching its also called Orange Rono or Turkcell T50)

OS	Android OS, v4.4.2 (KitKat)

Chipset	Qualcomm MSM8926 Snapdragon 400

CPU	Quad-core 1.2 GHz Cortex-A7

GPU	Adreno 305

The same setup as our phone. I can almost promise the firmware is basically identical. If we find an exploit with that firmware we are golden!
[General Questions and Answers] hroark13:
yeah I think so too

Blade Vec 4g and Zmax use same kernel source it seems, I am uploading it to github now, there is a msm8226_P892D30_defconfig in the blade vec source and the Zmax is P892D30 same kernel source usually means very similar roms

Blade Vec 4g KitKat Kernel

https://github.com/hroark13/android_kernel_zte_8x26
[General Questions and Answers] Velrix:
http://www.symbianize.com/showthread.php?t=1232873 Check this out. This phone has the same chip but 1g ram. They have a exploit for root on it. This may help us.
[General Questions and Answers] hroark13:
zImage builds with that source / config

hopefully it boots

LD [M] drivers/spi/spidev.ko

AS arch/arm/boot/compressed/piggy.gzip.o

LD arch/arm/boot/compressed/vmlinux

OBJCOPY arch/arm/boot/zImage

Kernel: arch/arm/boot/zImage is ready

hroark13@dev01:~/d/git/1$

derp
[General Questions and Answers] Vee63b:
A few post back I was trying to pull the recovery.img from the ZMAX, screenshot is still there, lists each partition. I'll attach screenshot again; jcase, good luck! I'm back to 16 Hr days and haven't had much time to try anything else, Med School and work beating me to an exhausted mess. I'll pop back in when I can to try and help.
[General Questions and Answers] hroark13:
yeah the Blade vec 4g that is in that link, has an open boot loader

you can do

adb reboot bootloader

and flash a custom kernel or recovery

I dont think ZMax people will be so lucky
[General Questions and Answers] Velrix:
Ya I can't get bootloader already tried.
[General Questions and Answers] hroark13:
here is some the Blade Vec 4G partitions, plus the unpacked ramdisk

boot.img

emmc_appsboot.mbn

NON-HLOS.bin

recovery.img

rpm.mbn

sbl1.mbn

sdi.mbn

splash.img

https://www.mediafire.com/?fpuznmsv28iddzp

---------- Post added at 11:53 PM ---------- Previous post was at 10:59 PM ----------

has anyone tried DFU mode on this phone yet ?

What you do is unplug battery put it back in, hold vol up, vol down and power

the the red LED should light

then plug it into your USB on your computer and run

dmesg -tail

on some of the ZTE MSM8x30 phones, when you did this, you had access to the nand, and could dd it
[General Questions and Answers] nobreak1970:
In this mode it tries to install a couple of drivers and fails. Not sure where to get them.

UPDATE:

QHSUSB_Bulk = qualcomm driver for something. If you google it you will notice that many many phones got bricked and this driver helped out in some way?

Teredo Tunneling Pseudo-Interface. <--- nevermind this...a windows thing. sorry for the confusion.
[General Questions and Answers] treIII:
Jcase will get the job done. Fact. If its possible he will do it. If its considered not possible he will do it.

Sent from my Nexus 6 using Xparent Blue Tapatalk 2
[General Questions and Answers] hroark13:
i think if it says QUSB BULK, then the nand is not accessable

I think it needs to say QUSB DLOAD

---------- Post added at 06:05 AM ---------- Previous post was at 05:42 AM ----------

I am an idiot

the ZMAX is P892T57

Blade Vec 4G is P892D30

so that kernel source does not support the Zmax, sorry everyone, brain fart

---------- Post added at 06:39 AM ---------- Previous post was at 06:05 AM ----------

there is a msm8226_P892T50_defconfig in that source, but I dont know how similar the P892T57 and P892T50 are
[General Questions and Answers] Velrix:
I am able to get into DFU mode. How would I dd in this mode?
[General Questions and Answers] IBeMe:
Cricket's $200 ZTE Grand X Max+ features wide-angle front camera, 6-inch display (hands-on)

http://www.cnet.com/products/zte-grand-x-max-plus/

this only has a 720 display

originally, I was under the impression it had a higher res screen
[General Questions and Answers] Velrix:
Just a quick update ;

I was able to get to DFU and FTM modes however the USDL utility some ZTE users have used before on other phones would fail trying to do a backup of nvdata and firmware. I do notice that in FTM mode we still have ADB access though so Im thinking there has to be some directly which we can get access to and force a exploit for root. After we get temp root we can DD the files and work on perm root.
[General Questions and Answers] Velrix:
Jcase this may be of use for us -

http://androidforums.com/threads/cm11-developer-and-tester-thread-for-zte-msm-8x30-devices.834705/

https://github.com/hroark13/zte_msm...evice/zte/msm8x30-common/BoardConfigCommon.mk
[General Questions and Answers] jc33777:
Man wish i would of looked a little more before i got this last night i do enjoy the phone alot just wish i could root to get rid of the metro crap
[General Questions and Answers] BenisHeger:
What kind of bloatware came with that version? I bought the Walmart Family Mobile version, which I think is the same one T-Mobile sells, but mine was $179. It came with T-Mobile TV and the T-Mobile 'My Account". The other thing I find odd is that the MetroPCS version has KK 4.4.4, whereas mine is KK 4.4.2.