GSM-Forum - View Single Post - SM-G925F this phone has been disabled by EE

v3ng3ance · 06-03-2015, 12:06

Hi, I managed to remove the EE lock from a500fu. First wipe data and cache, write non uk firmware, then boot into download mode again, do not let it boot into android, flash this custom recovery: https://yadi.sk/d/3lTTKnjsehGoF
It's in chinese but you don't have to do anything, just plug the usb cable, adb mode will be enabled and device online (of course,install proper adb drivers first).

I've found some interesting partitions:

Code:

lrwxrwxrwx    1 root     root            21 May  8  2014 fsc -> /dev/block/mmcblk0p20
lrwxrwxrwx    1 root     root            20 May  8  2014 fsg -> /dev/block/mmcblk0p9
lrwxrwxrwx    1 root     root            21 May  8  2014 hidden -> /dev/block/mmcblk0p26
lrwxrwxrwx    1 root     root            20 May  8  2014 modem -> /dev/block/mmcblk0p2
lrwxrwxrwx    1 root     root            21 May  8  2014 modemst1 -> /dev/block/mmcblk0p14
lrwxrwxrwx    1 root     root            21 May  8  2014 modemst2 -> /dev/block/mmcblk0p15
lrwxrwxrwx    1 root     root            21 May  8  2014 pad -> /dev/block/mmcblk0p11
lrwxrwxrwx    1 root     root            21 May  8  2014 param -> /dev/block/mmcblk0p12
lrwxrwxrwx    1 root     root            21 May  8  2014 persdata -> /dev/block/mmcblk0p23
lrwxrwxrwx    1 root     root            21 May  8  2014 persist -> /dev/block/mmcblk0p22
lrwxrwxrwx    1 root     root            20 May  8  2014 qhee -> /dev/block/mmcblk0p8
lrwxrwxrwx    1 root     root            20 May  8  2014 qsee -> /dev/block/mmcblk0p7
lrwxrwxrwx    1 root     root            21 May  8  2014 recovery -> /dev/block/mmcblk0p17
lrwxrwxrwx    1 root     root            20 May  8  2014 rpm -> /dev/block/mmcblk0p6
lrwxrwxrwx    1 root     root            20 May  8  2014 sbl1 -> /dev/block/mmcblk0p3
lrwxrwxrwx    1 root     root            21 May  8  2014 sec -> /dev/block/mmcblk0p10
lrwxrwxrwx    1 root     root            21 May  8  2014 ssd -> /dev/block/mmcblk0p21
lrwxrwxrwx    1 root     root            21 May  8  2014 system -> /dev/block/mmcblk0p24
lrwxrwxrwx    1 root     root            21 May  8  2014 userdata -> /dev/block/mmcblk0p27

We are interested in "persdata" and"persist". I just did a format on those partitions. Boot in recovery mode and do:

Code:

adb shell
mke2fs /dev/block/platform/7824900.sdhci/by-name/persdata
mke2fs /dev/block/platform/7824900.sdhci/by-name/persist

Then do a factory reset from recovery (third option, then second), then write firmware again, wipe data and cache from recovery, lock should be gone, it worked for me. Hope this helps.