[HACK] Change System Status to 'Official' with only Busybox

Search This thread

ryanbg

Inactive Recognized Developer
Jan 3, 2008
858
1,739
movr0.com
Hi guys,

I found a method to change System Status in Odin mode to 'Official/Samsung' that is very simple and only using the busybox application "devmem". Use this command in adb shell or terminal emulator. Just type it in, hit enter, and reboot. Bam.

Code:
devmem 0xF91CF8C 32 0xFF000000

This will change your status to Official and remove the padlock with 'Custom' on it. If you want 'Custom', replace FF with EE.

Immediately upon reboot, Odin mode and the device recognize the device as official.

The explanation is that this is from a small region of memory that stores what's known as DDI data. I don't know what that means yet, but some other information like the CC Mode flag and device name/product number are stored here. I'm still doing further research on what else resides here.

Enjoy.
 
Last edited:

E:V:A

Inactive Recognized Developer
Dec 6, 2011
1,447
2,222
-∇ϕ
Seem that "DDI" can be either:

  1. A "MAC-e header parameter" as specified HERE.
    Data Description Indicator (DDI):
    The DDI field identifies the logical channel, MAC-d flow and size of the MAC-d
    PDUs concatenated into the 3GPP associated MAC-es PDU. The mapping between the
    DDI values and the logical channel ID, MAC-d flow and PDU size is provided by
    higher layers. The length of the DDI field is 6 bits. When, due to the
    quantization in the transport block sizes that can be supported, the size of the
    data plus header is less than the TB size originally selected by the E-TFC
    selection entity minus 6 bits, the DDI value [111111] shall be appended at the
    end of the MAC-e header to indicate that there are no more MAC-es PDUs
    concatenated into this MAC-e PDU. In any other case it will be understood that
    another MAC-es PDU would not fit and it will therefore not be necessary to
    reserve room in the transport block for this additional DDI field.
  2. QVGA Display Driver IC (DDI) chip that incorporates QUALCOMM's Mobile Display Digital Interface (MDDI).


I'd vote its the second, as it also contain a good chunk of SRAM memory.
 
Last edited:
  • Like
Reactions: zwieringa

czach5932

Senior Member
Jan 25, 2013
192
32
Gretna
I thought I read in passing that syscope was the app that checked to see if the system was modified or not. I think it said if you get your phone to say official and freeze/uninstall syscope you won't have the padlock show up anymore.

Sent from my SM-N900V using XDA Premium HD app
 

knox0x1

Senior Member
Jan 13, 2015
232
26
I get to here but not anywhere else. Am I on the right track.. If so what next?

Sent from my SM-N900V using XDA Free mobile app

---------- Post added at 06:52 AM ---------- Previous post was at 06:50 AM ----------

Sent from my SM-N900V using XDA Free mobile app
 

Deansmithok

Member
Aug 11, 2016
11
1
Zurich
Hi

I have "blocked by cc mode" on my S7 :(

I have TWRP installed which has a terminal. I can't use USB for anything :(

I try "busybox devmem..." But it comes back saying can't find /dev/mem. I'm guessing this is what's called. Do you know where I can download "mem" from please.

I need to bring my phone back to life. I can use the SD card to copy across.


Please help
 

donc113

Senior Member
Jul 27, 2009
879
203
Samsung Galaxy Note 10+
Hi

I have "blocked by cc mode" on my S7 :(

I have TWRP installed which has a terminal. I can't use USB for anything :(

I try "busybox devmem..." But it comes back saying can't find /dev/mem. I'm guessing this is what's called. Do you know where I can download "mem" from please.

I need to bring my phone back to life. I can use the SD card to copy across.


Please help
Busybox is an app. It creates s series of links to commands that are typically available on a Linix (unix) system. Android kernel is linix based.

devmem is a command available in an adb shell or in terminal mode.

No idea if the hack still works or not.

If it does still work I am sure it would require root.

Sent from my SM-N900V using Tapatalk
 
  • Like
Reactions: andreoide

Deansmithok

Member
Aug 11, 2016
11
1
Zurich
Busybox is an app. It creates s series of links to commands that are typically available on a Linix (unix) system. Android kernel is linix based.

devmem is a command available in an adb shell or in terminal mode.

No idea if the hack still works or not.

If it does still work I am sure it would require root.

Sent from my SM-N900V using Tapatalk
Hi
I have root.
I have terminal and busybox, but the devmem command fails.
I can install anything on the phone using TWRP :)

I'll try your hack. I really hope it works. There is almost no other info on cc mode available.

Best regards
 

donc113

Senior Member
Jul 27, 2009
879
203
Samsung Galaxy Note 10+
Hi
I have root.
I have terminal and busybox, but the devmem command fails.
I can install anything on the phone using TWRP :)

I'll try your hack. I really hope it works. There is almost no other info on cc mode available.

Best regards
This is what I get running devmem

u0_a255@hltevzw:/ $ devmem
BusyBox v1.24.2-Stericson (2016-04-23 13:23
:09 EDT) multi-call binary.

Usage: devmem ADDRESS [WIDTH [VALUE]]

Read/write from physical address

ADDRESS Address to act upon
WIDTH Width (8/16/...)
VALUE Data to be written
1|u0_a255@hltevzw:/ $


To actually use it, you need to su first to get the # root prompt like this:

1|ua255@hltevzw:/ $ su
root@hltevzw:/ #


Then try the command /dev/mem isn't writeable by ordinary users




Sent from my SM-N900V using Tapatalk
 

Deansmithok

Member
Aug 11, 2016
11
1
Zurich
Hi
Thanks for the "su" headup.
The problem is that I have so little installed on the phone now.
I need the dev/mem code
I even need the "su" code. At the moment it says "su not found".
So I need to install some zips. Can you suggest some for me please... I guess busybox would be one, do you know where I can get all the code for the "dev" folder please - which Zip is that?
Regards
Dean
 

donc113

Senior Member
Jul 27, 2009
879
203
Samsung Galaxy Note 10+
Hi
Thanks for the "su" headup.
The problem is that I have so little installed on the phone now.
I need the dev/mem code
I even need the "su" code. At the moment it says "su not found".
So I need to install some zips. Can you suggest some for me please... I guess busybox would be one, do you know where I can get all the code for the "dev" folder please - which Zip is that?
Regards
Dean
Both busybox and supersu are available in the playstore. /dev/mem is a file directory not a file, unless you are root, it's not acessible to you.

Sent from my SM-N900V using Tapatalk
 

Deansmithok

Member
Aug 11, 2016
11
1
Zurich
Both busybox and supersu are available in the playstore. /dev/mem is a file directory not a file, unless you are root, it's not acessible to you.

Sent from my SM-N900V using Tapatalk
Hi
I have root. Thank God.
I don't have play store, but I can find the Zips and install them through TWRP.
Then I'll su and busybox that devmem command.
I'll let you know how it goes.
Regards
 

Deansmithok

Member
Aug 11, 2016
11
1
Zurich
How do you not have play store (Google Play)? They are not zips, they are apps.

Sent from my SM-N900V using Tapatalk
Hi
I don't have the play store because I don't have android.
The apps need android, but my phone won't even boot. I have "custom rom blocked by cc mode"
Download is blocked by it too.
All I have left is TWRP in recovery mode.
Regards
 

Deansmithok

Member
Aug 11, 2016
11
1
Zurich
I got adb shell to work. I connected to the phone...

root@hero2lte:/dev # ./su
root@hero2lte:/dev # ./mem
sh: ./mem: can't execute: Permission denied
126|root@hero2lte:/dev # busybox devmem
BusyBox v1.22.1 bionic (2016-08-25 18:25 -0400) multi-call binary.

Usage: devmem ADDRESS [WIDTH [VALUE]]

Read/write from physical address

ADDRESS Address to act upon
WIDTH Width (8/16/...)
VALUE Data to be written

1|root@hero2lte:/dev # busybox devmem 0xF91CF8C
Bus error
135|root@hero2lte:/dev #
 
Last edited:

donc113

Senior Member
Jul 27, 2009
879
203
Samsung Galaxy Note 10+
I got adb shell to work. I connected to the phone...

root@hero2lte:/dev # ./su
root@hero2lte:/dev # ./mem
sh: ./mem: can't execute: Permission denied
126|root@hero2lte:/dev # busybox devmem
BusyBox v1.22.1 bionic (2016-08-25 18:25 -0400) multi-call binary.

Usage: devmem ADDRESS [WIDTH [VALUE]]

Read/write from physical address

ADDRESS Address to act upon
WIDTH Width (8/16/...)
VALUE Data to be written

1|root@hero2lte:/dev # busybox devmem 0xF91CF8C
Bus error
135|root@hero2lte:/dev #
You just need devmem and the address. Not busybox devmem and the address.

The only thing I can suggest is that you use ODIN to flash back to whatever the latest stock ROM you were on and go through the rooting process all over again.

The bootloader won't allow you to boot with a non stock recovery unless you unlock the bootloader.



Sent from my SM-N900V using Tapatalk
 

Top Liked Posts

  • There are no posts matching your filters.
  • 8
    Hi guys,

    I found a method to change System Status in Odin mode to 'Official/Samsung' that is very simple and only using the busybox application "devmem". Use this command in adb shell or terminal emulator. Just type it in, hit enter, and reboot. Bam.

    Code:
    devmem 0xF91CF8C 32 0xFF000000

    This will change your status to Official and remove the padlock with 'Custom' on it. If you want 'Custom', replace FF with EE.

    Immediately upon reboot, Odin mode and the device recognize the device as official.

    The explanation is that this is from a small region of memory that stores what's known as DDI data. I don't know what that means yet, but some other information like the CC Mode flag and device name/product number are stored here. I'm still doing further research on what else resides here.

    Enjoy.
    1
    Seem that "DDI" can be either:

    1. A "MAC-e header parameter" as specified HERE.
      Data Description Indicator (DDI):
      The DDI field identifies the logical channel, MAC-d flow and size of the MAC-d
      PDUs concatenated into the 3GPP associated MAC-es PDU. The mapping between the
      DDI values and the logical channel ID, MAC-d flow and PDU size is provided by
      higher layers. The length of the DDI field is 6 bits. When, due to the
      quantization in the transport block sizes that can be supported, the size of the
      data plus header is less than the TB size originally selected by the E-TFC
      selection entity minus 6 bits, the DDI value [111111] shall be appended at the
      end of the MAC-e header to indicate that there are no more MAC-es PDUs
      concatenated into this MAC-e PDU. In any other case it will be understood that
      another MAC-es PDU would not fit and it will therefore not be necessary to
      reserve room in the transport block for this additional DDI field.
    2. QVGA Display Driver IC (DDI) chip that incorporates QUALCOMM's Mobile Display Digital Interface (MDDI).


    I'd vote its the second, as it also contain a good chunk of SRAM memory.
    1
    Hi

    I have "blocked by cc mode" on my S7 :(

    I have TWRP installed which has a terminal. I can't use USB for anything :(

    I try "busybox devmem..." But it comes back saying can't find /dev/mem. I'm guessing this is what's called. Do you know where I can download "mem" from please.

    I need to bring my phone back to life. I can use the SD card to copy across.


    Please help
    Busybox is an app. It creates s series of links to commands that are typically available on a Linix (unix) system. Android kernel is linix based.

    devmem is a command available in an adb shell or in terminal mode.

    No idea if the hack still works or not.

    If it does still work I am sure it would require root.

    Sent from my SM-N900V using Tapatalk