[HOW-TO][EXYNOS/SNAPDRAGON] Root S20 series and upgrade firmware

[wyt18]

I have a x1s and would like to flash TWRP in AP via Odin. I see here lots of users flashing with vbmeta tar together in USERDATA

Is one approach better than the other? Also, for x1s what is the best source of TWRP image (official twrp.me, unofficial telegram ianmcd, or the z3s TWRP that is linked in this thread)?

 

[Spawn.ff]

Is there no way to root without wiping all data? I'm trying a dd disk cloning to recover some deleted folders, by using ncat, but it's necessary root the phone.

 

[73sydney]

Is there no way to root without wiping all data? I'm trying a dd disk cloning to recover some deleted folders, by using ncat, but it's necessary root the phone.

you dont need to wipe data to install root, you only need to wipe data when doing things like disabling encryption.....which is i guess what youre trying to achieve to fiddle with dd

the time to decrypt data is straight after flashing the ROM....because at any time after that its just a destructive process that obliterates what youre hoping to save

honestly in almost every experience with trying to recover data on an android device, the time you spend (usually fruitlessly) is better spent wiping and starting over and employing a better backup strategy....

whcih for app and app data is something like Migrate

[APP][ROOT][5.0+][1st Nov 2020] Migrate - custom ROM migration tool

Jumping from one custom ROM to another can be a challenging task. So I decided to make an app to simplify the process. Introducing Migrate! Migrate-GPE (v4.0) is on Google Play It was temporarily suspended. Read more here...

forum.xda-developers.com

and perhaps syncthing for media and migrate backups off device

 

[ComfySofa]

Hi - is there a walk through for an already rooted phone.....bought my s20 from a mate - not had a modded phone for ages so while im ok with reflashing im a bit rusty....and this is newer than ive used....

Im on Beyond Rom 4.4 but want to go to 4.6 and i need the firmware update....could anyone help?

Im pretty sure ive got everything downloaded....just need a walkthrough...

Cheers

 

[domina]

Hi, I can not get the phone to recovery from download mode after flashing. Anything I can do? I try to hold power and down for reset and then power and up for twrp but no success.

I just does not boot into the system showing a DID and a barcode.

[Edit/Solution]
I have a G9810. I followed this guide to succeed: https://www.recovery-mode.com/twrp/twrp-for-galaxy-s20-g9810-snapdragon-support-android-12.html
The TWRP from this thread for A12 is not suitable for this model.

 

[denz@]

Can someone confirm if my S20 bootloader can be unlocked ? I have a feeling that it can't be.
Baseband G981NKSU1GVG1
I tried but nothing happens. Just says it's turned on but in Download Mode it still says that it's locked .

 

[xbt-]

I just did this on my G985F/DS (Exynos S20+) and it went smoothly, no issues. Fully rooted, and I also installed TWRP successfully although that's a different post. Even though I knew what I was doing it still took a couple hours - mainly due to having to download the firmware file which is slow due to their server speed (understandably). Took about 40 mins to an hour to download that, and then also a couple times extracting it, etc.

Also I unlocked the bootloader, but on reboot OEM Unlock was missing but I reenabled it by doing the date trick.

FYI the reason the date trick doesn't work is because you HAVE to first connect to the internet so google play can contact the servers. Don't let it run a bunch of updates, just keep it on about 30 seconds or so to give it a moment to register your phone date and time. Then turn off wifi, and set the date back 10 days exactly. OEM Unlock shows up.

Valuable links that are not in this thread (or at least not in OP) - everything I used to finish my root. Your root may go faster if you read this post.

Firmware (DO THIS FIRST, it will take a long time to download):
(You will need to find your exact phone and the region, as it said in OP.)
https://samfw.com/firmware/SM-G985F/

Magisk:
https://github.com/topjohnwu/magisk/releases

Multidisabler (remove encryption on TWRP):

[Pie/10/11] [System-as-root] Multidisabler: disables encryption, Vaultkeeper, auto-flash of stock recovery, proca, wsm, cass, etc.

The multi-disabler started life on the Exynos S10 range, the first Samsung devices to launch with Android 9 (Pie). Since then, it has grown to support a great many Samsung devices running either Android 9, 10 or 11, and with either an Exynos or a...

forum.xda-developers.com

TWRP:
INSTRUCTIONS: https://forum.xda-developers.com/t/...-for-galaxy-s20-s20-s20-ultra-exynos.4441701/
Download: https://twrp.me/samsung/samsunggalaxys20plus.html

For TWRP, please read the page especially this section, in fact I will edit this section for this model (see the bold underline part which I added):

Note many devices will replace your custom recovery automatically during first boot. To prevent this, hold "Volume Up" and "Bixby/Power" button on the first boot after flashing TWRP to boot to TWRP. Once TWRP is booted, TWRP will patch the stock ROM to prevent the stock ROM from replacing TWRP. If you don't follow this step, you will have to repeat the install.

LSPosed (formerly Xposed a long time ago):
(I used 1.8.4, which is the latest as of this writing, I'm on Android 12. Get the Riru release, e.g. lsposed-v1.8.4-6609-riru-release.zip )
https://github.com/LSPosed/LSPosed/releases

Xposed Modules:
GravityBox (unofficial port to Android 12, most of it works) [Releases - Github]
Firefds Kit
Dark Tricks
Let Me Downgrade
NoStorageRestrict
Maps Tweaks
MatrixRain
XPrivacyLua
UpdateLocker
AppSettingsReborn

Remove bootloader warning:
https://forum.xda-developers.com/t/...ove-bootloader-unlocked-warnings-etc.4500737/

Remove boot animation:
In build.prop change this line to:
debug.sf.nobootanimation=1

Bluetooth patch:

BluetoothLibraryPatcher - Fix bluetooth pairings loss [Android 14/13/12/11/10/Pie/Oreo/Nougat]

Bluetooth Library Patcher • Description : This patch attends to avoid losing bluetooth pairings after reboot or airplane mode switch on rooted samsung devices. It patches on the fly the bluetooth library and should support most of samsung...

forum.xda-developers.com

OPTIONAL:

NeoBackup (formerly OandBackupX):
https://github.com/NeoApplications/Neo-Backup/releases/tag/8.1.3

Alternatively use TitaniumBackup, it still works on Android 12 and is better than NeoBackup.


Hope it helps

 

[73sydney]

For any other S20+ 5G (Exynos) owners, i made a tar file (actually 2, theres a "light" version) that you flash alongside the ROM in ODIN and:

- flashes TWRP
- boots to TWRP immediately after ODIN completes (leave Auto Reboot enabled) - avoiding the vulcan death grip button push nonsense
- formats data, decrypts data and stop the system from reverting TWRP to stock recovery
- installs TWRP Bootlogo Patcher to remove the ugly warning on boot
- install Bluetooth patch

Theres also a "light" version that just does

- flashes TWRP
- boots to TWRP immediately after ODIN completes (leave Auto Reboot enabled) - avoiding the vulcan death grip button push nonsense
- formats data, decrypts data and stop the system from reverting TWRP to stock recovery

Further details and files are here:

[S-20 Series_Snapdragon]-[Upgrade A13 Using Odin]-[Automatically Root Remove Forceencrypt Patch Bluetooth And Fix Safetynet]

Must Have An Unlocked Bootloader To Do This! This A full stock firmware file I have created to flash with odin to automatically install TWRP recovery along with Disable VBMETA image. The Userdata _AIO tar file will also automatically install...

forum.xda-developers.com

Inspired by the OP of the thread

I also explain how i did it so other users with other S20 series devices can update the original tar files in the OP

 

[73sydney]

{Mod edit: Quoted thread has been deleted}

theres already an existing simple flashable zip....

 

[73sydney]

{Mod edit: Quoted thread has been deleted}

Its not necessary to change all the screens......in fact its a bad idea as some of the info is useful, people only really need/want the initial boot screen text removed for purely aesthetic reasons....

 

[xbt-]

Update: I got two apps working on the Android 12 / OneUI 4.1 that was giving some problems, thought you would like to know how I fixed it.

The issue:
Newly installed app (for older version of Android) crashes immediately, never requests permissions. Attempts to open it always result in crash.

The fix:
Clear data, uninstall new version, install an older version, and upgrade back to the new version.

Details:

Both my two most important apps I was able to get installed and working:
TitaniumBackup (8.4.0.1, latest forever, no more dev)
App Quarantine Pro (3.0 Beta 6, latest forever, no more dev)

I'm not sure why, but both of them when I installed the latest version, they would crash immediately, not request root or permissions or anything. Any attempt to open would be instant crash.

Well I got it working, and here is how. I don't know why, but I uninstalled, and then installed an older version of each, and it worked, and then I upgraded to the latest version, and that worked too.

It's kind of a life saver, I thought I was going to have to live without App Quarantine Pro, and I wasn't liking it, but on a fresh install (for a different reason) I tried again and this time it worked when I did the above.

For TitaniumBackup, I first installed version 8.4.0.1, but it crashed immediately. Tried clearing data and reinstalling a couple times but it didn't work. Then I uninstalled, and then installed version 8.3.3, and it worked, then I upgraded to the 8.4.0.1 and it worked as well.

(Originally on my original install of TitaniumBackup on this phone, I did the same thing, but didn't realize what fixed it. This time I figured it out because I did the same method with App Quarantine Pro as well and that worked too.)

For App Quarantine Pro, I first installed version 2.9, and it worked, and then installed version 3.0 Beta 6 and it worked.

Don't know why this happened, but that's how I did it, so if you face the same problems, maybe it will work for you too.

 

[serajr]

Rooting Android 13!

Procedure to update from A12 (or A11) to A13 ONLY - Fresh install (any data will be lost)!
Try it at your own risk!!

1. Download A13 firmware
( https://forum.xda-developers.com/t/galaxy-s20-g986b-firmwares-5g-android-13.4515711/post-87720943 )

2. Extract boot.img.lz4 and vbmeta.img.lz4 from AP > Pack both as a single tar file with 7-zip > Patch the tar file with latest Magisk canary app in your device > magisk_patched-?????.tar file will be created

- TWRP (skip this if not installing it):
3. Download "Data_Encryption_Recovery_Restoration_Disabler_1.1_By_Serajr.zip" to your sdcard
( https://forum.xda-developers.com/t/...es-and-upgrade-firmware.4079353/post-86456749 )

- TWRP (skip this if not installing it):
4. Download official twrp-3.7.0_?????.img - or newest, if available.
( https://forum.xda-developers.com/t/...-for-galaxy-s20-s20-s20-ultra-exynos.4441701/ )
Thanks @corsicanu

- TWRP (skip this if not installing it):
5. Rename downloaded twrp img file to: recovery.img - and push it into magisk_patched-?????.tar file (which will now contain 3 files)

6. Flash full A13 firmware with Odin: BL + AP + CP + CSC (not HOME_CSC, for a full data wipe) + magisk_patched-?????.tar in USERDATA (uncheck Odin's Auto Reboot option)

- TWRP (skip this if not installing it):
7. KEEP USB CABLE PLUGGED IN, now press "vol down + power" to force reboot the phone, and then immediately press "vol up + power" to boot into TWRP

- TWRP (skip this if not installing it):
8. Wipe data

- TWRP (skip this if not installing it):
9. Flash "Data_Encryption_Recovery_Restoration_Disabler_1.1_By_Serajr.zip" from your sdcard

10. Reboot your device into system (this may take a while)

11. Enter Magisk app to finish its installation.

12. You're done!

-----------------------------------------------------------------------------------------------​

And for the records...
To update your current firmware with a new security patch, change these two steps above to the ones below:

6. Flash the new firmware with Odin: BL + AP + CP + HOME_CSC (keeping the data) + magisk_patched-?????.tar in USERDATA (uncheck Odin's Auto Reboot option)

- TWRP (skip this if not installing it):
8. DO NOTHING HERE

 

[73sydney]

Also worth mentioning the Bluetooth Library Patcher is no longer needed under A13

For any other S20+ 5 G users who might be using my AIO.zip in USERDATA, nothing bad will happen if you use the full one with Bluetooth Library Patcher included in it, it will just fail to find the library and error out. If in doubt just use the "light" version which merely installs TWRP, formats and decrypts data and stops stock recovery rollback (thanks to @serajr s work) and optionally flash the bootlogo patcher manual from here

 

[Matce]

Rooting Android 13!

Procedure to update from A12 (or A11) to A13 ONLY - Fresh install (any data will be lost)!
Try it at your own risk!!

1. Download A13 firmware
( https://forum.xda-developers.com/t/galaxy-s20-g986b-firmwares-5g-android-13.4515711/post-87720943 )

2. Extract boot.img.lz4 and vbmeta.img.lz4 from AP > Pack both as a single tar file with 7-zip > Patch the tar file with latest Magisk canary app in your device > magisk_patched-?????.tar file will be created

- TWRP (skip this if not installing it):
3. Download "Data_Encryption_Recovery_Restoration_Disabler_1.1_By_Serajr.zip" to your sdcard
( https://forum.xda-developers.com/t/...es-and-upgrade-firmware.4079353/post-86456749 )

- TWRP (skip this if not installing it):
4. Download official twrp-3.7.0_?????.img - or newest, if available.
( https://forum.xda-developers.com/t/...-for-galaxy-s20-s20-s20-ultra-exynos.4441701/ )
Thanks @corsicanu

- TWRP (skip this if not installing it):
5. Rename downloaded twrp img file to: recovery.img - and push it into magisk_patched-?????.tar file (which will now contain 3 files)

6. Flash full A13 firmware with Odin: BL + AP + CP + CSC (not HOME_CSC, for a full data wipe) + magisk_patched-?????.tar in USERDATA (uncheck Odin's Auto Reboot option)

- TWRP (skip this if not installing it):
7. KEEP USB CABLE PLUGGED IN, now press "vol down + power" to force reboot the phone, and then immediately press "vol up + power" to boot into TWRP

- TWRP (skip this if not installing it):
8. Wipe data

- TWRP (skip this if not installing it):
9. Flash "Data_Encryption_Recovery_Restoration_Disabler_1.1_By_Serajr.zip" from your sdcard

10. Reboot your device into system (this may take a while)

11. Enter Magisk app to finish its installation.

12. You're done!

-----------------------------------------------------------------------------------------------​

And for the records...
To update your current firmware with a new security patch, change these two steps above to the ones below:

6. Flash the new firmware with Odin: BL + AP + CP + HOME_CSC (keeping the data) + magisk_patched-?????.tar in USERDATA (uncheck Odin's Auto Reboot option)

- TWRP (skip this if not installing it):
8. DO NOTHING HERE

Thanks for the instructions!

Can you also update/root to A13 without losing data?

Currently on fully rooted A12. Magisk/LSposed with vbmeta_disabled.rar so decryption is off

 

[73sydney]

Thanks for the instructions!

Can you also update/root to A13 without losing data?

Currently on fully rooted A12. Magisk/LSposed with vbmeta_disabled.rar so decryption is off

I have never done a minor version jump to minor version jump with magisk, let alone a major version - i am one of those who always backs up apps, clean installs, reroots, restores apps, hence why i have spent time to update and use my AIO.zip, to make the process quicker

If you were to attempt it, i might (and this last word should serve as a disclaimer):

Make a backup of apps, using something like Migrate (free - Use v4 ONLY, 5 has issues at time of writing) or Swift Backup (not free for some features) as a well, backup, in case things go pear shaped.

Then uninstall root magisk completely

Flash A13 via ODIN and use HOME_CSC in CSC slot to keep data

Re-root with magisk

Any flashing attempt carries an element of risk, so if in doubt, backup, clean flash, root and restore

 

[Bolandowski]

I've followed the OP's guide and everything was going well until the final step.

I put the magisk patched file into AP and hit start inside Odin while download mode was active but my phone is stuck on the Secure by Knox screen at boot.
It refuses to remain off now. Holding down any combination of side keys reboots the device. Ideally it would be off so I can re-enter download mode yes?

Any help? I'm new to this but i'm a quick learner if I've messed up somewhere!

---

Power + Vol Down will reboot my device

Power + Vol Up will reboot my device

Power + Vol Down + Up will reboot my device

I'm not sure what to do

 

[73sydney]

I've followed the OP's guide and everything was going well until the final step.

I put the magisk patched file into AP and hit start inside Odin while download mode was active but my phone is stuck on the Secure by Knox screen at boot.
It refuses to remain off now. Holding down any combination of side keys reboots the device. Ideally it would be off so I can re-enter download mode yes?

Any help? I'm new to this but i'm a quick learner if I've messed up somewhere!

---

Power + Vol Down will reboot my device

Power + Vol Up will reboot my device

Power + Vol Down + Up will reboot my device

I'm not sure what to do

you need to have a cable plugged in on modern Samsung devices to enable those key combos to work....

 

[Bolandowski]

you need to have a cable plugged in on modern Samsung devices to enable those key combos to work....

Tried that too mate, I got it to boot into download mode once the battery died but I couldn't get ODIN to write so i'm just browsing around to see what I should do.

 

[Matce]

is there a working TWRP for S20 Snapdragon on A13 yet?
The latest version I found (which I also use with A12) is twrp-3.6.0_11-4_afaneh92-x1q

 

[itachi uchia]

Tried that too mate, I got it to boot into download mode once the battery died but I couldn't get ODIN to write so i'm just browsing around to see what I should do.

Hey, did you find the solution with this problem?