[RECOVERY][ROOT] Samsung Galaxy S4 Mini Dual SIM (GT-I9192)

[cheatman]

Hey guys, I finally made it with the rooting of the Galaxy S4 Mini Dual Sim variant (GT-I9192 model / SerranoDS)
Use the files attached and the procedure below to achieve root on your device.

This process and the files in this post will void your warranty. 
You are responsible for your actions.
Using these modifications might render your device unusable. 
Only proceed if you are comfortable with this fact.

WARNING: Do not use this procedure for any other device than the GT-I9192 (the dual sim model)!!!
This rooted kernel is for the XXUAMF7 stock ROM and it may or may not work correctly with other stock versions.

This root/recovery was only tested on EURO / AFRICA models of the I9192. Other regions may not be compatible.

Onto the procedure:

• Download and extract the kernel, recovery & ODIN flashing utility "ROOT_I9192_CWM6_Kernel.zip" and save it to your computer from here. The recovery image was initially created by arco68 (thanks and credits go to him for the recovery!)
• Download and copy the "GT-I9192-RootKit-v2.zip" to your device SD card, from here.
• Turn off the phone.
• Press and hold home, volume down and power. Download screen should appear.
• Connect USB cable, and press volume up.
• Start Odin, make sure "F. Reset Time" is not checked, and then click PDA button to select the recovery image.
• Select "ROOT_I9192_CWM6_Kernel.tar" file, and press Start button. The phone will reboot when finished flashing a new kernel and recovery.
• Reboot into recovery mode and select the option to install the ZIP file you have previously copied to your device and begin flashing it.
• After flashing using CWM, reboot into system and enjoy your rooted device.

Root procedure functionality:

- Root access (obviously)
- Insecure boot process (early adb/logcat, QtAdb support, adb root support)
- Insecure kernel (disabled Samsung setuid prevention mechanisms - credits go to arco68!)

Note: After rooting you will get notifications about applications doing not permitted actions. This is a good thing, meaning that Samsung has properly implemented the security features of this device, features that we are trying to defeat. To get rid of this notification freeze/disable or remove the following three packages:

- KNOXAgent.apk
- KNOXStore.apk
- ContainerAgent.apk

That's it, you warranty is now void! Have fun with your device! And keep those thanks coming to show your support for the device development.

Cheers,
C.

 

[cheatman]

Known Issues

• The prompt for root access does not appear. This is a problem with the Superuser.apk and can be fixed by installing SuperSU by Chainfire instead. Install the updated binary and remove Superuser when requested.
• Wi-Fi doesn't work after installation. Flash the XXUAMF7 stock ROM version before applying this root package or an equivalent ROM from your region.

 

[fburgos]

great work I'll try it when I get at my office

 

[davioxx]

UPDATE 2

Lost wifi! Im running this firmware version

Ap: i9192UBUAMF9
CP: i9192UBUAMF9
CSC i9192UUBAMF9


UPDATE! 1

What i had to do to get it working,

1.- Flash recovery through odin with "F. Reset Time and auto reboot unchecked,
2.- manually force reboot into recovery FROM odin mode
3.- profit!


edit: Didnt work for me :/ i still boot to normal recovery

 

[fburgos]

Didn't work for me




Uploaded with ImageShack.us

 

[davioxx]

Didn't work for me

follow my instructions and it will , when the system boots before rooting it automatically removes the modified recovery so you have to jump directly from odin to recovery mode in order to be able to root

 

[fburgos]

follow my instructions and it will , when the system boots before rooting it automatically removes the modified recovery so you have to jump directly from odin to recovery mode in order to be able to root

now my recovery looks like this, does it mean my binary count has increased? Can I get official updates with kies

 

[cheatman]

I posted another version of the recovery zip in the first post, with MD5 hash added to it so you don't flash any corrupt files. Let me know if it works fine with this version.
EDIT: you must enter recovery after the phone resets. If you don't, it might not work (though, it worked for me with full reboot).


@davioxx: thanks for feedback and info

Cheers,
C.

 

[fburgos]

follow my instructions and it will , when the system boots before rooting it automatically removes the modified recovery so you have to jump directly from odin to recovery mode in order to be able to root

I posted another version of the recovery zip in the first post, with MD5 hash added to it so you don't flash any corrupt files. Let me know if it works fine with this version.
EDIT: you must enter recovery after the phone resets. If you don't, it might not work (though, it worked for me with full reboot).


@davioxx: thanks for feedback and info

Cheers,
C.

davioxx, solution works fine

 

[davioxx]

I posted another version of the recovery zip in the first post, with MD5 hash added to it so you don't flash any corrupt files. Let me know if it works fine with this version.
EDIT: you must enter recovery after the phone resets. If you don't, it might not work (though, it worked for me with full reboot).


@davioxx: thanks for feedback and info

Cheers,
C.

Still No wifi :/

I can test anything if you like I have had this device for a little bit more than a month and was waiting for root

 

[fburgos]

Still No wifi :/

I can test anything if you like I have had this device for a little bit more than a month and was waiting for root

same here, no wifi/wifihotspot,

i use a lot wifihotspot at home

can i remove all the bloatware and return and flash original kernel?

any one has the original kernel?

 

[cheatman]

Still No wifi :/

I can test anything if you like I have had this device for a little bit more than a month and was waiting for root

I don't really understand much when you say only "no wifi". Give me more details to work with. What you did, what the outcome was, what's your current stock ROM, region, variant etc.
@fburgos: I have attached the original stock kernel by Samsung to this post. You have to flash it with ODIN. Note that it is aslo from the XXUAMF7 stock ROM as the insecured one.

C.

 

[fburgos]

Still No wifi :/

I can test anything if you like I have had this device for a little bit more than a month and was waiting for root

I don't really understand much when you say only "no wifi". Give me more details to work with. What you did, what the outcome was, what's your current stock ROM, region, variant etc.

@fburgos: I have attached the original stock kernel by Samsung to this post. You have to flash it with ODIN. Note that it is aslo from the XXUAMF7 stock ROM as the insecured one.

C.

im not shure how to logcat but heres the result

[ 07-18 16:29:42.772   767: 1155 E/WifiHW   ]

##################### set firmware type 0 #####################



[ 07-18 16:29:42.772   767: 1155 D/WifiStateMachine ]

setWifiEnabled : WifiNative.setFwType(0)



[ 07-18 16:29:42.772   767:  813 D/WfdService ]

intent recieved android.net.wifi.WIFI_STATE_CHANGED



[ 07-18 16:29:42.802   767:12206 E/WifiHW   ]

return of insmod : ret = -1, No such file or directory





[ 07-18 16:29:42.802   767:12206 E/WifiStateMachine ]

Failed to load driver!



[ 07-18 16:29:42.802   767:  767 I/LocationManagerService ]

remove 432f7680



[ 07-18 16:29:42.802   767:  767 D/LocationManagerService ]

provider request: gps ProviderRequest[OFF]



[ 07-18 16:29:42.822   767:  813 D/WfdService ]

intent recieved android.net.wifi.WIFI_STATE_CHANGED



[ 07-18 16:29:42.822   767:  968 E/WifiStateMachine ]

DriverFailedState





[ 07-18 16:29:42.822   767: 1110 D/GpsLocationProvider ]

setRequest ProviderRequest[OFF]



[ 07-18 16:29:42.832  2497: 2497 I/elm      ]

MainReceiver.onReceive() : android.net.wifi.WIFI_STATE_CHANGED



[ 07-18 16:29:42.832   767: 1252 D/LocationManagerService ]

request 433d1828 passive Request[POWER_NONE passive fastest=0] from com.google.android.gms(10052)



[ 07-18 16:29:42.832   767: 1252 D/LocationManagerService ]

provider request: passive ProviderRequest[ON interval=0]



[ 07-18 16:29:42.842  2497: 2497 D/elm      ]

MainReceiver.listeningToNetworkStateChanged( context, intent ).



[ 07-18 16:29:42.842  2497: 2497 D/elm      ]

MDMBridge.getInstance()



[ 07-18 16:29:42.842  2497: 2497 D/elm      ]

MDMBridge.getAllLicenseInfoFromSDK()



[ 07-18 16:29:42.842  2497: 2497 I/elm      ]

MainReceiver.onReceive() END - - - - - : android.net.wifi.WIFI_STATE_CHANGED



[ 07-18 16:29:42.842  2497: 2497 D/elm      ]

ElmAgentService : onStartCommand()



[ 07-18 16:29:42.842  2497: 2497 D/elm      ]

ElmAgentService : onStartCommand() : intent is not null



[ 07-18 16:29:42.862  2497: 2497 I/elm      ]

MainReceiver.onReceive() : android.net.wifi.WIFI_STATE_CHANGED



[ 07-18 16:29:42.862  2497: 2497 D/elm      ]

MainReceiver.listeningToNetworkStateChanged( context, intent ).



[ 07-18 16:29:42.862  2497: 2497 D/elm      ]

MDMBridge.getInstance()



[ 07-18 16:29:42.862  2497: 2497 D/elm      ]

MDMBridge.getAllLicenseInfoFromSDK()



[ 07-18 16:29:42.862  2497: 2497 I/elm      ]

MainReceiver.onReceive() END - - - - - : android.net.wifi.WIFI_STATE_CHANGED



[ 07-18 16:29:42.872  2497: 2497 D/elm      ]

ElmAgentService : onStartCommand()



[ 07-18 16:29:42.872  2497: 2497 D/elm      ]

ElmAgentService : onStartCommand() : intent is not null



[ 07-18 16:29:42.882   767: 1110 D/GpsLocationProvider ]

stopNavigating



[ 07-18 16:29:42.882   767: 1110 E/LocSvc_afw ]

I/Entering int loc_stop() line 499 



[ 07-18 16:29:42.882   767: 1110 E/LocSvc_eng ]

I/===> int loc_eng_stop(loc_eng_data_s_type&) line 648 



[ 07-18 16:29:42.882   767: 1290 E/LocSvc_eng ]

D/void loc_eng_deferred_action_thread(void*):1586] received msg_id = LOC_ENG_MSG_STOP_FIX context = 0x6f48a4e8





[ 07-18 16:29:42.882   767: 1290 E/LocSvc_eng ]

I/Entering int loc_eng_stop_handler(loc_eng_data_s_type&) line 675 



[ 07-18 16:29:42.882   767: 1290 E/LocSvc_adapter ]

D/ virtual loc_api_adapter_err LocApiV02Adapter::stopFix():382]: stop called 





[ 07-18 16:29:42.882   767: 1290 E/LocSvc_api_v02 ]

I/---> locClientSendReq line 2114 QMI_LOC_STOP_REQ_V02



[ 07-18 16:29:42.882   767: 1110 E/LocSvc_eng ]

D/gps_set_battery_flag, connect=0



[ 07-18 16:29:42.882   767: 1110 E/LocSvc_eng ]

E/gps_set_battery_flag() : file open error



[ 07-18 16:29:42.882   767: 1110 E/LocSvc_eng ]

I/Exiting int loc_eng_stop(loc_eng_data_s_type&) line 669 0



[ 07-18 16:29:42.882   767: 1110 E/LocSvc_afw ]

I/Exiting int loc_stop() line 520 0



[ 07-18 16:29:42.882   767: 1290 E/LocSvc_eng ]

I/Entering void loc_inform_gps_status(loc_eng_data_s_type&, GpsStatusValue) line 932 



[ 07-18 16:29:42.882   767: 1290 E/LocSvc_eng ]

I/<=== status_cb line 941 GPS_STATUS_SESSION_END

i have this firmware:

 

[davioxx]

I don't really understand much when you say only "no wifi". Give me more details to work with. What you did, what the outcome was, what's your current stock ROM, region, variant etc.

@fburgos: I have attached the original stock kernel by Samsung to this post. You have to flash it with ODIN. Note that it is aslo from the XXUAMF7 stock ROM as the insecured one.

C.

Already posted it but no worries

Ap: i9192UBUAMF9
CP: i9192UBUAMF9
CSC i9192UUBAMF9

what i mean by no wifi is that after doing the whole procedure i lost my wifi it doesnt start, i push button and nothing happens,

 

[davioxx]

Can you update the files for the version I have? Currently there are only like 3 different versions on ssmmobile I hope it's not a problem.

Thanks!


By the way do you know what would happen if I flash the stock boot image? Will I still be rooted as changes are done to system partition?

 

[cheatman]

Ok, so judging by the screenshot I understand that:

1. You flashed the recovery image and the rebooted into the system.
2. Wireless stopped working.

In the screenshot it seems that you are not running the insecure kernel. So I'm ruling out any problem with the kernel. Also, judging by the error generated by wireless it seems it cannot load the kernel module for wireless functions. Can you also flash the insecure kernel (so you can gain root) and give me a listing of the following command:

ls -al /system/lib/modules

@davioxx: the system partition will still be rooted, but the kernel will prevent you from gaining root privileges (Error 13 preventing suid privileges). This is why an insecure kernel is required as well.

Cheers,
C.

 

[davioxx]

Can I help you in any way to get this working for my version?

 

[cheatman]

Yeah, provide me the output of the command I said in my previous post. It will help me understand if you have the wifi driver as a module or precompiled in your kernel.
Also, let me know if you have a I9192L (L stands for Latin America) variant or a EUR/Africa variant.

If you have a Latin America version, this kernel will most likely not work for you (separate sources must be built). I will look into it, but I can't test it on my phone and I can't promise anything.

PS: same principle applies to China and South West Asia (SWA) variants. You will need different kernels for everything to work fine.

Cheers,
C.

 

[davioxx]

ima_debug_log.ko
wlan.ko
[email protected]:/system/lib/modules # ls -al
-rw-r--r-- root root 15344 2013-01-15 02:11 adsprpc.ko
-rw-r--r-- root root 8816 2013-01-15 02:11 ansi_cprng.ko
-rw-r--r-- root root 8640 2013-01-15 02:11 dma_test.ko
-rw-r--r-- root root 6172 2013-01-15 02:11 evbug.ko
-rw-r--r-- root root 77720 2013-01-15 02:11 exfat_core.ko
-rw-r--r-- root root 35756 2013-01-15 02:11 exfat_fs.ko
-rw-r--r-- root root 38196 2013-01-15 02:11 mcdrvmodule.ko
-rw-r--r-- root root 20704 2013-01-15 02:11 mckernelapi.ko
-rw-r--r-- root root 39584 2013-01-15 02:11 mmc_test.ko
-rw-r--r-- root root 9672 2013-01-15 02:11 msm-buspm-dev.ko
drwxr-xr-x root root 2013-01-15 02:11 prima
-rw-r--r-- root root 27944 2013-01-15 02:11 qce40.ko
-rw-r--r-- root root 27088 2013-01-15 02:11 qcedev.ko
-rw-r--r-- root root 48836 2013-01-15 02:11 qcrypto.ko
-rw-r--r-- root root 7568 2013-01-15 02:11 radio-iris-transport.ko
-rw-r--r-- root root 6188 2013-01-15 02:11 reset_modem.ko
-rw-r--r-- root root 3356 2013-01-15 02:11 scsi_wait_scan.ko
-rw-r--r-- root root 18096 2013-01-15 02:11 spidev.ko
-rw-r--r-- root root 23876 2013-01-15 02:11 test-iosched.ko
-rw-r--r-- root root 5632 2013-01-15 02:11 tima_debug_log.ko
lrwxrwxrwx root root 2012-12-31 22:53 wlan.ko -> /system/lib/modules/prima/prima_wlan.ko

---------- Post added at 03:27 AM ---------- Previous post was at 03:26 AM ----------

9192 version nothing special

 

[cheatman]

Well, the output seems identical (specifically, the WIFI driver is there) so I have no idea why the driever is not properly loaded. Most probable cause is the base version (you have to flash XXUAMF7. Download and flash XXUAMF7 from samfirmware and then restart the rooting process.

Either that, or I can give you my system modules so you can try with them. There may be incompatibilities between the kernel build and the modules build and the module might not be loaded properly is the magic numbers are not correct.

So, if you have a standard I9192, flash XXUAMF7 stock on it and then root again. Let me know how it goes.

Cheers,
C.