yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy Note 8 Guides, News, & Discussion] OptimuSlime:
See above for OEM steps. AGAIN this was in Factory Binary, the COMBINATION file I used was made from the one BlueFox hosts on AFH... "N950USQU2AQK2" I believe it is missing Meta-data due to my phone having had the IMEI repaired and this is the way the repair guy left it on my PC. When I write new FW to the phone it obviously is then missing the OEM Option, so we need a rom that would support Snapdragon, and have the OEM Option pulled from the combination file I think.
[Samsung Galaxy Note 8 Guides, News, & Discussion] kilayo:
Upload this if you can or send link
[Samsung Galaxy Note 8 Guides, News, & Discussion] OptimuSlime:
The regular N950U1SQU2AQK2 combination file should work. It's hosted on AFH by BlueFox (I think there is a number after his name) Just search "carrier switching note 8" to find him, and the Combo file is in the top of the thread.
[Samsung Galaxy Note 8 Guides, News, & Discussion] OptimuSlime:
https://androidfilehost.com/?fid=962021903579496616

That should be the one I used. I doubt removing the metadata had any effect, pretty sure it'll work as is for you. Metadata just messes with my new IMEI lol so I have to remove it from AP's and Combos to get them to work for my phone, but if you have original IMEI it doesn't affect you.
[Samsung Galaxy Note 8 Guides, News, & Discussion] me2151:
Just so you know. We have known about it for awhile. It doesnt unlock he bootloader. all it does is flip a 1 to a 0 or vice versa in the props. its useless.
[Samsung Galaxy Note 8 Guides, News, & Discussion] cdnsnOw:
Well there goes my hopes and dreams
[Samsung Galaxy Note 8 Guides, News, & Discussion] raman21raman:
:( again sad mode.

Now i feel like what is OEM BOOTLOADER...have we ever seen it :crying:
[Samsung Galaxy Note 8 Guides, News, & Discussion] OptimuSlime:
​

Ya I heard :(

Hey what is the build.prop line that is changed?

I mean in an Exynos Note 8 or S8
[Samsung Galaxy Note 8 Guides, News, & Discussion] DroidisLINUX:
This is unrooted correct?

---------- Post added at 02:08 AM ---------- Previous post was at 02:06 AM ----------

there is a default.prop says oem_unock_supported=1 or =0

I believe it changes it

default.prop is inside root directory.

not in system
[Samsung Galaxy Note 8 Guides, News, & Discussion] rodsola:
N950USQU3CRC2 por favor ocupo el combination se les agradece de antemano
[Samsung Galaxy Note 8 Guides, News, & Discussion] sefrcoko:
Please post in English too please, you can use Google translate if needed.
[Samsung Galaxy Note 8 Guides, News, & Discussion] BigCountry907:
The enable oem unlock toggle does more than change the build.prop.

If you pull the persistence partition you will find that the first 2 lines are changed by the switch.

Ive been doing some testing with my note 8 and my Galaxy Tab E.

The tab is qualcomm chip and allows unlocking the bootloader.

May already have a way to get the bootloader unlocked. I didnt know about the setting in the build.prop.

That setting along with writing the unlocked persistence partition my do the trick.

Beyond that my past experience tells me that there is at least 1 more partition on the device that is never written to by any firmware update that will have some bytes changed for unlocking.

If someone with the non qualcomm Note 8 can do a dd copy of theese partitions with the phone both locked and unlocked it might give me the answer. MY FIRST GUESS is the MISC Partition.

The idea here is to compare all these partitions in binary hex format to see who changes for unlock.

Theese are the partitions for the N950U

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 steady -> /dev/block/sda13

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 storsec -> /dev/block/sdd20

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 sec -> /dev/block/sdd5

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 nad_refer -> /dev/block/sda15

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 omr -> /dev/block/sda23

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 pad -> /dev/block/sdd22

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 param -> /dev/block/sda7

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 persist -> /dev/block/sda5

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 persistent -> /dev/block/sda12

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 misc -> /dev/block/sda8

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 fsc -> /dev/block/sda3

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 fsg -> /dev/block/sdd4

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 devcfg -> /dev/block/sdd19

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 devinfo -> /dev/block/sdd9

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 dpo -> /dev/block/sdd17

lrwxrwxrwx 1 root root 16 2017-12-11 10:21 dqmdbg -> /dev/block/sda14

lrwxrwxrwx 1 root root 15 2017-12-11 10:21 dsp -> /dev/block/sdd7

Get me thoose form the non us device and were on our way.

In adb shell do

cd /dev/block/platform/soc.0/7824900.sdhci/by-name

ls -al

That will match your partition blocks to the partition names.

Thanks for the help.
[Samsung Galaxy Note 8 Guides, News, & Discussion] dushotgun:
Wish I could help. For anyone who doesn't know [MENTION=7006025]BigCountry907[/MENTION] has unlocked other bootloaders so please help him out.
[Samsung Galaxy Note 8 Guides, News, & Discussion] JedidroidX:
Contact the samfail team, they for sure will assist you!

Most likely they didn't overlook any changes from oem unlocking but there is a spark of hope.
[Samsung Galaxy Note 8 Guides, News, & Discussion] me2151:
On the snapdragon models the bootloader unlock is done in the STEADY partition(yes im talking about U/U1/W models but the HK models also use STEADY)

I know exactly how to unlock the snapdragon bootloaders however its almost impossible to forge the ticket.
[Samsung Galaxy Note 8 Guides, News, & Discussion] Ferbee:
Hey I'm on an unlocked note 8 (N950F) custom rom you name it I've already done it to the device

I ran the code you wanted and came back with an error (screenshot 1)

I actually checked the place you are looking for and I get stuck at soc.0 because it seems like Exynos doesn't have it (screenshot 2)

Happy to help when you need it, just mention me in the thread and I'll be here :D
[Samsung Galaxy Note 8 Guides, News, & Discussion] Ferbee:
[MENTION=7006025]BigCountry907[/MENTION]

I ran your line of code with my corresponding directories and I got this

Hope it helps :D
[Samsung Galaxy Note 8 Guides, News, & Discussion] diabl0w:
I believe he is looking for a dd dumped copy of the partitions he listed, zip them, then toggle the oem unlock option the other way, reboot, do another dd copy and zip them up, and upload them so he can compare the changes made. I could be misunderstanding I guess
[Samsung Galaxy Note 8 Guides, News, & Discussion] DJHenjin:
Hopefully we can get this figured out and get BL unlock on snapdragon S8/S8+. Out of curiosity, what BL version are you on? My S8 is shown as SM-G950WVLU5BRG4 for the model number.
[Samsung Galaxy Note 8 Guides, News, & Discussion] DJHenjin:
I wonder if following the process of re-provisioning the UFS file system as outlined on this lnk would allow us to downgrade bootloaders so that we can go back to rootable versions of the OEM ROM

96boards .org /documentation/consumer/dragonboard/dragonboard820c/installation/board-recovery.md.html
[Samsung Galaxy Note 8 Guides, News, & Discussion] BigCountry907:
So are you saying that the serial or something is hashed to generate a token? Based off hardware.

It is very possible STEADY is the one. It could be one method of unlock.

From what I've analized I believe things like allowing custom boot img and custom bootloaders are able to be switched on and off.

I see data changes in 3 partitions on a fully unlocked TAB 3. The TAB 3 does not have the STEADY partition but it has a PERSDATA partition. The TAB 3 is the same android version and a similar Qualcomm chipset. The changes between locked and unlocked depends on data in the PERSDATA , PERSISTENT, and EFS partition.

Following that model I am in the process of analyzing the changes that occur on the Note 8.

I did notice that when you have a bad Odin flash like when the download mode says error use smartswitch if you use Odin to flash the modem. CP the modem, modemstr1, and modemstr2 partitions are refreshed and the error goes away.

As far as FRP unlock = off the PERSISTENT , EFS, AND PERSIST partitions are changed.

It seems that I have seen if you zero only PERSISTENT ftp lock is turned on. If you zero PERSISTENT and PERSIST ftp lock is turned off. Upon reboot after zeroing data is written to both partitions and EFS is mmodifyed as well.

Upon dumping EFS into hex and viewing in a editor I see in readable text similar to build.prop entries.

These property entries like Allow oem unlock and Allow modified boot ectera are in there.

Analysis of the EFS partition shows groups of 4 and 8 pairs of hex bits that change with locked and unlocked state.

There are references to byte offsets for the state of ALLOW or DISALLOW.

I believe these byte patterns are switches. My method of unlocking this device depends on it at the moment.

Now far as them buil.prop type settings in the EFS......:confused:

Im positive those are read in when you boot into the bootloader.

They set up the system far before /system is read.

I have seen entries in the recovery log pointing to reading the EFS.

All these things make me believe the EFS is key.
[Samsung Galaxy Note 8 Guides, News, & Discussion] me2151:
Yes. The tokens are generated using the devices IMEI and the devices DID
[Samsung Galaxy Note 8 Guides, News, & Discussion] BigCountry907:
If you have some spare time what might be helpful is a dd copy of each partition with the bootloader locked and unlocked.

You would run this command for each partition. Use the paths for your device.

dd if=/dev/block/sda7 of=/sdcard/boot.img

The files should be on the internal storage when your done.

---------- Post added at 01:07 PM ---------- Previous post was at 01:02 PM ----------

Since there is no fastboot on samsung devices what is the normal method of unlocking.

Like for htc you first get a unlock token. Then you submit that token to a generator the generator then gives back an unlock code. the unlock code is flashed and the device is unlocked.

I guess what im wondering is if we can find a way to generate a unlock code and feed it to a generator.

Even by means of flashing the Note 8 Partitions to a different device then generating the codes on the non note 8 device.

I suppose if you have the time to explain the how the bootloader is unlocked on a high level that could be helpful.

---------- Post added at 01:30 PM ---------- Previous post was at 01:07 PM ----------

On a second note....lol

Im thinking if you have a full dump of the device in an earlier state you possibly could downgrade.

You would need root access so you would have had to maintained root during upgrading.

Each of the partitions would need to be copied previously.

I initially root using the samfail method. A little differently than samfail way though.

First i flash the factory combination rom using odin.

N950USQU2AQK2_COMBINATION >>> this is the v2 samfail equivilent

So i take the samfail pre-rooted system and flash it with odin.

This causes errors but to clear out the errors i use the factory rom.

N950USQS2BQK2_N950UOYN2BQK2_ATT

I flash only the modem part of this rom.

CP_N950USQS2BQK2_CP8012179_CL12461033_QB15680825_REV00_user_low_ship_MULTI_CERT.tar

After flashing the modem you will not get errors in download mode or any boot up problems.

After that I install the Safestrap Recovery for the note 8.

I use the terminal in the recovery to " dd " flash any partitions i want to change. < RAW dd images only NO SPARSE >

So if you flash a un-rooted system by.

dd if=/sdcard/system.img of=/dev/block/sda20

You need to root it before you leave safestrap. So use supersu ZIP file and normal install.

Be sure to set supersu to do system install and not touch the boot image.

make a file called .supersu

In the .supersu file put theese lines.

SYSTEMLESS=false

PERMISSIVE=false

KEEPVERITY=true

KEEPFORCEENCRYPT=true

copy the .supersu file to

/data

/system

/cache

After the file is there simply flash the supersu zip in the safestrap recovery just like you would in normal TWRP.

That is how i change system files without loosing root.

To upgrade the device use the safestrap recovery and dd flash the image files for each partition in the update.

Then root before leaving safestrap.

To go back to earlier version use dd to flash ever one of the backup partitions. < Dont use odin.
[Samsung Galaxy Note 8 Guides, News, & Discussion] pbedard:
Thanks for put time into this
[Samsung Galaxy Note 8 Guides, News, & Discussion] me2151:
Bootloader unlocking is done via flashing the token in odin. Odin recognizes its a token. The device verifies the token is valid then does its magic of allowing custom binaries. the token is then stored in the Steady partition along with some other strings(like who the token is generated for). Once unlocked Download mode with state that it allows custom binaries in an additional line thats hidden otherwise. I DO have a dd of a steady partition that has had a token used however for security sake and protection of the individual i cannot share it.
[Samsung Galaxy Note 8 Guides, News, & Discussion] BigCountry907:
My T560NU is running T560NUUEU1CQK2 My N950U is running N950USQU2AQK2.

They are both QK2 bootloader version the T560 is msm8909 the N950 is msm8998.

I don't think it's a full bootloader unlock but by simply toggling Allow-OEM-Unlock ON allows Custom Binaries Custom System Custom Kernel. The switch causes changes in the PERSDATA PERSISTENT and EFS partitions.

I believe these are switches that have several states.

Changing the switch on the N950 causes changes in three partitions.

PERSISTENT PERSIST and EFS partition.

I believe these switches are the same switches.

PERSISTENT and PERSIST can be Zeroed so messing with them is not too dangerous.

EFS is a different story. It has the potential to brick.

If I can locate without a doubt the switches and modify the N950 to match the T560 provided the bootloaders are structured the same I think it's possible we could expect to have the same capability.

Custom System Custom Kernel Custom Binaries

Even if it's not a full bootloader unlock it is all we need right.

So anyone have any ideas

Just as a reference see bootloader unlock here.

https://xdaforums.com/galaxy-tab-e/help/galaxy-tab-e-sm-t560nu-maybe-tips-tricks-t3580901
[Samsung Galaxy Note 8 Guides, News, & Discussion] BigCountry907:
I thought i edited my last post. I forgot what i put there now.

I have done much more playing.

The operation of the note8 and the tab e as far as the FRP switch goes is identical.

I did notice that unless you are running the factory binary /system.img it seems to turn frp back off on reboot.

At any rate i know for sure that the persistent partition is the one for sure controlling the switch.

The last byte is either 00 or 01.

01 = frp off = oem unlock on

The only interesting thing i found in the build.prop of the tab is

ro.security.icd.flagmode=multi

Maybe that relates to the flags in the EFS partition.

It all comes down to EFS for sure.
[Samsung Galaxy Note 8 Guides, News, & Discussion] JedidroidX:
I have read on several post regarding the exynos variant of the note 8 and how restoration of backed up efs partitions have led to a non bootable device. This can give reassurance of your assumption on how the efs partitions data integrity impacts the bootloading sequence. I've also read about qfuses which I don't think are present in your Samsung tab. I'm just sharing the little I know and hoping it will contribute to our goal.
[Samsung Galaxy Note 8 Guides, News, & Discussion] truantAndragogy:
rip?
[Samsung Galaxy Note 8 Guides, News, & Discussion] BigCountry907:
No it's not RIP.

It's shift gears a little.

There are other avenues.

I have started a new thread dealing with my research.

https://xdaforums.com/galaxy-note-8/development/wip-n950u-bootloader-unlocking-build-t3854549

I will warn you though that things are getting much more high level.
[Samsung Galaxy Note 8 Guides, News, & Discussion] Gudaji:
please how do they unlock it thanks please show me the steps
[P3600 ROM Development] ervius:
***All links to other roms are deleted, The final ROM-test is only here!***

the last one 19209 is here:

http://xdaforums.com/showthread.php?t=383464

Hi all, finally was solved the kayboard iusee (masibe there are others, I rebuild form begin the ITA WM 6.1,

greetings:

bepe, for all........

eliasweb for processkiller that kills htc processes that remain into memory also after closing...

udk for help, support and friendship...

all italian cookers that partecipate with suggestions and new ideas...

and all you that with tests, made better this rom!

ok, if you want try it and report for all possible bugs.

******************************************************************

here newest version; its same but:

included .NET CF 3.5 and now contacts on HTC Home in today works property....

WM6_1_ITA_essential-Plus-v2.rar

******************************************************************

ADVICE:

in rom is integrated sdconfig tool: if you want install all cabs, at rom flashing, create a folder called sdconfig in your storage card, insert into all cabs, provxml, tsk you want, and at customizing, allc abs will be installed automatically, if you want make all after rom installing, prepare the sdconfig folder with cabs etc.... ang goto "impostazioni->sistema->sdconfig tool", the ppc will reset, and then install all cabs automatically....

WARNING:

don't use "pocketcm keyboard" as external keyboard, it causes fast increase in size into "device.exe"m until you don't have anymore free memory on device....

I hope someone can post to the author about this bug, becouse I liked it but have this bug....

there are others goods keyboard, I can suggest "touchpal" in italian version, is shareware, but works very well, and add new, and unknown for it, words in dictionary!!!

if you want is better first of all (but not necessary!) install DES Hard SPL:

DES_Hard-SPL.TRIN_2.zip

install from windows mobile opened, the ppc stop on boot, repeat the operation, executing again "ROMUpdateUtility.exe" and after ppc remain off, soft reset and wait, now you have also DES HSPL, and then you can flash everithing you want!!

bye!

SERIAL NEED???

here the licenser, so you can use it like you want and disable the nag screen...

(you have to put the license-file, just created, into "\my documents" folder!)

http://rapidshare.com/files/100281765/licenser.rar

P.S.: if licenser give error at startup on yur pc, you need to download also ".NET Framework 2.0"

Working sip change...

http://xdaforums.com/attachment.php?attachmentid=74080&d=1204674676
[P3600 ROM Development] marty_73:
Downloading, I'll let you know ASAP!
[P3600 ROM Development] GDT:
Hi ervius, I'm downloading too. Just curiosity, can you tell us where was the problem with SIP?
[P3600 ROM Development] FunkyFrench:
need mirror

hi,

I can't Dl from rapidshare.

Can someone help me with a mirror ?

thnks
[P3600 ROM Development] ervius:
the problem for the sip:

maybe uncompatible mui or exe or dll into \oem folder....

to solve I rebuilded all rom form zero.....

bye!
[P3600 ROM Development] marty_73:
Oh, I tought that the phonepad was still there... :(

Ok, I've just installed the international PhonePad + SIP change and it works fine.

The "Camera Album" application always asks fot the folder to browser, is this right?
[P3600 ROM Development] ervius:
yes, phonepad, not more inside, and for htc Album solved (maybe forgott inside an old package)

P.S.: for 31 downloaders, I'm upping last rom with also this iusses fixed, wait...
[P3600 ROM Development] marty_73:
I've found 1 more problem:

- tapping on the screen doesn't produce the click, even if enabled in Impostazioni->Suoni e notifiche

Do you whay TomTom always start with disabled audio (and I have to manually enable it every time)?
[P3600 ROM Development] yuzanuvole:
Where is the link??
[P3600 ROM Development] ervius:
in my last rom (just upping in file sharing service) it works well....

don't ask me anymore of last rom, I deleted it, download fiorst this one (when you have new link) and then we can talk about.

bye!

EDITED: The link to download is ready in 1st post!
[P3600 ROM Development] marty_73:
Ok, getting it...
[P3600 ROM Development] ervius:
I would like to suggest this keyboard, is in italian layout and autocompete words, and black skin.;)

EDITED: is it that causes memory leak increasing device.exe in memory...
[P3600 ROM Development] adrenalynik:
Great !! I test immediately...
[P3600 ROM Development] marcosorano:
with all program closed i ave only 15mb ram free:eek: is normal:confused:???
[P3600 ROM Development] ervius:
no, see with "getione attività" and switch to "processi" and search for big processes....

maybe "HTC_HDlg.exe" remain in memory sometimes...
[P3600 ROM Development] marcosorano:
no i ad disabled htc home and on start after 1 minut i ave 70% of ram used i searched in processi the biggest is filesys 11,5 mb
[P3600 ROM Development] ervius:
is pcmkeyboard that increase device.exe....

I've installed phonepad, ezdial and touchpal (shareware) and device.exe doesn't increase...
[P3600 ROM Development] Alexmine:
Hello, I have a system crash by cliccking on SDconfig tool, somebody confirm this?
[P3600 ROM Development] marcosorano:
ok you rigth men.... tank you:)
[P3600 ROM Development] ervius:
is only a reset.....

hehehhe

to start costumizing then.....

you have to prepare with cabs the sdconfig\ folder into storage card, and then use the tools, only reset the device and next install all cabs by custimizing...

maybe was better to advise with a messagebox before reset...

in next soft release... ;)
[P3600 ROM Development] marty_73:
Ok, loaded the new rom, now I'm installing TomTom, Phonepad and SIP Change...

"Selezione sullo schermo" e "Pulsanti hardware" under the Suoni e notifiche yet don't work.
[P3600 ROM Development] ervius:
in mine works well...

if I don't have a problem, cannot solve...
[P3600 ROM Development] marty_73:
"Pulsanti hardware" works, it's only "Selezione sullo schermo" that doesn't work but it's not a bug, this happens when TouchFlo is enabled, so maybe it's normal this way.
[P3600 ROM Development] adrenalynik:
Wonderful rom! :)

But wm5torage dosn't work still....:(
[P3600 ROM Development] marty_73:
I've solved the disabled audio issue starting TomTom, don't know why but this happens when internet connection is on. I checked after syncronizing meteo and after logging in to Live Messenger.

Don't remember if this happened with WM5 too...
[P3600 ROM Development] ervius:
in mine works property... I used last 1.8 version!

I can:

read and write all on my sd card, seeing my ppc like an a normal usb key!
[P3600 ROM Development] adrenalynik:
Ho la stessa versione ma il pc non la rileva come disco usb :(:(

I have the same version but the PC does not find it like disc usb
[P3600 ROM Development] GDT:
Hi ervius, I've just updated to your last work.... what can I say... Great!

Only a question... there's a process with no name that loads at startup and stay there... I see it via wktask... What is it?

Another thing... is there any way to import .reg file? Regedit software you included have "Import" function but it is grayed out...

Thank you!
[P3600 ROM Development] marty_73:
One more problem, since I received my first SMS (by the way, is there a way to disable the look like a "chat" of the received SMSs?) the messages counter in the stand-by page always shows "1" even if I deleted all the messages (received, sent ecc...) and it keeps on saying "SMS (1)"....... :(
[P3600 ROM Development] ervius:
try here:

http://xdaforums.com/showthread.php?p=1978222

or this cab from there...
[P3600 ROM Development] ervius:
1) I don't know;

2) use other professional regedit
[P3600 ROM Development] marty_73:
Ok, chat SMS problem solved, anythings works fine except the SMS counter that's always 1 more than the real number of incoming messages.

I've searched the forum and others had the same problem with older ROMs, am I the only one having this issus with this ROM?