First you open QFIL then select flat build with the right programmer 660 file this is in the flashtools files. then with the partition manager open in qfil you will open powershell where you want the backup saved and you type in the commands ...
--port=\\.\COM8 --search_path=D:\path\to\your\dump --convertprogram2read --sendimage=full_dump.bin --start_sector=0 --lun=0 --num_sectors=122142687 --noprompt --showpercentagecomplete --zlpawarehost=1 --memoryname=emmc
--port=\\.\COM8 --search_path=D:\path\to\your\dump --convertprogram2read --sendimage=full_dump.bin --start_sector=0 --lun=0 --num_sectors=122142687 --noprompt --showpercentagecomplete --zlpawarehost=1 --memoryname=emmc
replacing COM8 with your active com port
you can remove the "--search_path=D:\path\to\your\dump" if you loaded the powershell from where you want the backup to be saved.
Then wait for the process to complete
You can use 7-Zip archiver to open this dump and extract any partition you want.
you can remove the "--search_path=D:\path\to\your\dump" if you loaded the powershell from where you want the backup to be saved.
Then wait for the process to complete
You can use 7-Zip archiver to open this dump and extract any partition you want.
No, I do not have the qcn backup of userdebugged. I am not running the uderdebug on any phone, I am running the global 8.1 build 54 that is posted a couple pages back. POST #403
Thank you everyone that helped me achieve my daily driver my rooted xp8800 running userdebugged att
Does wifi calling work on userdebugged att?? It does not work on the global, that is the main reason I can not have the Global as my Daily phone.
Yes it works but I did flash debugged and my wifi broke I would engage the toggle it would turn on then immediately turn itself off I reflashed it and problem went away
Does anyone know why when you run the sonim update tool it's comes up error no raw program file?
----PROCESS enable dual sim on unlocked xp8800---
-download this firmware and flash with cmd (make a batch file more easy)
2.85 GB file on MEGA
mega.nz
Which Android version is it ?
Many thanks for your fast answer and your work !
I'm eager ton get my hands on the Android 10 firmware !
For working dual SIM need unbranded firmware like european ,american versión not work and sometimes no signal Even phone it's unlocked , has a bug on signal
I flashed the mega download but I still didn't have dual sim I use the modem .img and the other images for my radio that I got from my back up
With the help of Xombiex, i;ve tried many many times to find a proper combination for ATT phones. What i have found so far (btw, i paid even some money for some image from Europe). So, let's start:
- if you have a Sonim XP8 ATT unlocked and you flash and write also modemst1 modem st2 and fsg you are.... [email protected]#ked. Why? because the best that you can achive is Android 8.1 with both sims working and apn thethring. this setup is ACHIVED ONLY by using SONIM 8.1 archive from xombiex (is actually an archive from russia with manipulated baseband). To go even deeper, actually, you need from that archive only the baseband (which i have the feeling that is patched - files that you need modem_a and modem_b). Whriting these partitions on any 8.1 image will achive network signal. If you use 8.1 image from Xombiex will achive also dual sim. BUT these modems files - version: MPSS.AT.2.3.c8-1.137255.1.138439.1-GEN-180420-1925 - will not allow you to upgrade to Android 10 (if you image is OTA enabled, then OTA is downloaded on phone and fails on install).
If you have have android 10 and modify the modem_a and modem_b with Xombiex version, then the phone will not start (EDL is the way to recover).
So, as conclusion - any other modem file is not going to show you signal. you will see maybe 2 sims but no signal. i have the funny feeling that somehow, when you overwrite the modemst1, st2 and fsg you lose the unlock. Since the lock requires the baseband to send the prompt to insert unlock code, then new baseband maybe cannot handle this (maybe was customized for ATT?).
Also with Xombiex modema and b there is a drawback in dual sim configuration: if SIM one is active in LTE/UMTS/GSM (europe), then SIM 2 will see ONLY GSM and UMTS but only US bands. In Europe, there are few operators that use GSM and UMTS 2G/3G bands).
also, THERE IS NO WAY BACK if you flashed modemst1 and modemst2. even QCN backup seems that is skipping this flag for unlock.
Now, if you get ahold of a image from EU for Global SONIM and you are on ATT proceed with caution. NEVERflash modemst1, mdemst2 and fsg! I am following some forum in 4pda - russia and i know that the guys found a way how to "homebrew" an image of Android 10 with "patched baseband" BUT they are not sharing it. Only with money and only in russia face2face. Aparently, there is a big business in Russia and they are having "exclusive" service to unlock dual sim on ATT phones with Android 10 (trust me, i tried even to buy it only for me, no way).
So, this is my experience with an ATT that i messed up big time. Currently i am having 8.1 with dual sim (living in Europe the second sim is.... sort of used due to band restriction).
Also, please note that i have tried the following:
- QCN restore from similar phone (btw, if somebody has an ATT phone unlocked with 8.1 - original, single sim, please share modemst1, modemst2, fsg, and full QCN backup...- if i will succede to upgrade to 10 i will share my findings here)
- for second sim band issue - i;ve tried *#....4636. code and select different combinations / bands, etc. Nothing worked.
- i even played with EFS explorer, QPST software programming different bands - no luck.
So, as a conclusion and hint for other that like to "poke around" - modem a and modem b from Xombiex russian immage seems to be patched but limited to Android 8.1. Dual Sim full functionality and APN enabled is controleld by Android itself and here it seems that the most clean version (of ATT ****) is still the russian version share by Xombiex.
Cheers mates and happy debugging. I am tired, so for now, i am going to enjoy my phone
- if you have a Sonim XP8 ATT unlocked and you flash and write also modemst1 modem st2 and fsg you are.... [email protected]#ked. Why? because the best that you can achive is Android 8.1 with both sims working and apn thethring. this setup is ACHIVED ONLY by using SONIM 8.1 archive from xombiex (is actually an archive from russia with manipulated baseband). To go even deeper, actually, you need from that archive only the baseband (which i have the feeling that is patched - files that you need modem_a and modem_b). Whriting these partitions on any 8.1 image will achive network signal. If you use 8.1 image from Xombiex will achive also dual sim. BUT these modems files - version: MPSS.AT.2.3.c8-1.137255.1.138439.1-GEN-180420-1925 - will not allow you to upgrade to Android 10 (if you image is OTA enabled, then OTA is downloaded on phone and fails on install).
If you have have android 10 and modify the modem_a and modem_b with Xombiex version, then the phone will not start (EDL is the way to recover).
So, as conclusion - any other modem file is not going to show you signal. you will see maybe 2 sims but no signal. i have the funny feeling that somehow, when you overwrite the modemst1, st2 and fsg you lose the unlock. Since the lock requires the baseband to send the prompt to insert unlock code, then new baseband maybe cannot handle this (maybe was customized for ATT?).
Also with Xombiex modema and b there is a drawback in dual sim configuration: if SIM one is active in LTE/UMTS/GSM (europe), then SIM 2 will see ONLY GSM and UMTS but only US bands. In Europe, there are few operators that use GSM and UMTS 2G/3G bands).
also, THERE IS NO WAY BACK if you flashed modemst1 and modemst2. even QCN backup seems that is skipping this flag for unlock.
Now, if you get ahold of a image from EU for Global SONIM and you are on ATT proceed with caution. NEVERflash modemst1, mdemst2 and fsg! I am following some forum in 4pda - russia and i know that the guys found a way how to "homebrew" an image of Android 10 with "patched baseband" BUT they are not sharing it. Only with money and only in russia face2face. Aparently, there is a big business in Russia and they are having "exclusive" service to unlock dual sim on ATT phones with Android 10 (trust me, i tried even to buy it only for me, no way).
So, this is my experience with an ATT that i messed up big time. Currently i am having 8.1 with dual sim (living in Europe the second sim is.... sort of used due to band restriction).
Also, please note that i have tried the following:
- QCN restore from similar phone (btw, if somebody has an ATT phone unlocked with 8.1 - original, single sim, please share modemst1, modemst2, fsg, and full QCN backup...- if i will succede to upgrade to 10 i will share my findings here)
- for second sim band issue - i;ve tried *#....4636. code and select different combinations / bands, etc. Nothing worked.
- i even played with EFS explorer, QPST software programming different bands - no luck.
So, as a conclusion and hint for other that like to "poke around" - modem a and modem b from Xombiex russian immage seems to be patched but limited to Android 8.1. Dual Sim full functionality and APN enabled is controleld by Android itself and here it seems that the most clean version (of ATT ****) is still the russian version share by Xombiex.
Cheers mates and happy debugging. I am tired, so for now, i am going to enjoy my phone
Your hard work and research is highly appreciated. Thanks for posting.With the help of Xombiex, i;ve tried many many times to find a proper combination for ATT phones. What i have found so far (btw, i paid even some money for some image from Europe). So, let's start:
- if you have a Sonim XP8 ATT unlocked and you flash and write also modemst1 modem st2 and fsg you are.... [email protected]#ked. Why? because the best that you can achive is Android 8.1 with both sims working and apn thethring. this setup is ACHIVED ONLY by using SONIM 8.1 archive from xombiex (is actually an archive from russia with manipulated baseband). To go even deeper, actually, you need from that archive only the baseband (which i have the feeling that is patched - files that you need modem_a and modem_b). Whriting these partitions on any 8.1 image will achive network signal. If you use 8.1 image from Xombiex will achive also dual sim. BUT these modems files - version: MPSS.AT.2.3.c8-1.137255.1.138439.1-GEN-180420-1925 - will not allow you to upgrade to Android 10 (if you image is OTA enabled, then OTA is downloaded on phone and fails on install).
If you have have android 10 and modify the modem_a and modem_b with Xombiex version, then the phone will not start (EDL is the way to recover).
So, as conclusion - any other modem file is not going to show you signal. you will see maybe 2 sims but no signal. i have the funny feeling that somehow, when you overwrite the modemst1, st2 and fsg you lose the unlock. Since the lock requires the baseband to send the prompt to insert unlock code, then new baseband maybe cannot handle this (maybe was customized for ATT?).
Also with Xombiex modema and b there is a drawback in dual sim configuration: if SIM one is active in LTE/UMTS/GSM (europe), then SIM 2 will see ONLY GSM and UMTS but only US bands. In Europe, there are few operators that use GSM and UMTS 2G/3G bands).
also, THERE IS NO WAY BACK if you flashed modemst1 and modemst2. even QCN backup seems that is skipping this flag for unlock.
Now, if you get ahold of a image from EU for Global SONIM and you are on ATT proceed with caution. NEVERflash modemst1, mdemst2 and fsg! I am following some forum in 4pda - russia and i know that the guys found a way how to "homebrew" an image of Android 10 with "patched baseband" BUT they are not sharing it. Only with money and only in russia face2face. Aparently, there is a big business in Russia and they are having "exclusive" service to unlock dual sim on ATT phones with Android 10 (trust me, i tried even to buy it only for me, no way).
So, this is my experience with an ATT that i messed up big time. Currently i am having 8.1 with dual sim (living in Europe the second sim is.... sort of used due to band restriction).
Also, please note that i have tried the following:
- QCN restore from similar phone (btw, if somebody has an ATT phone unlocked with 8.1 - original, single sim, please share modemst1, modemst2, fsg, and full QCN backup...- if i will succede to upgrade to 10 i will share my findings here)
- for second sim band issue - i;ve tried *#....4636. code and select different combinations / bands, etc. Nothing worked.
- i even played with EFS explorer, QPST software programming different bands - no luck.
So, as a conclusion and hint for other that like to "poke around" - modem a and modem b from Xombiex russian immage seems to be patched but limited to Android 8.1. Dual Sim full functionality and APN enabled is controleld by Android itself and here it seems that the most clean version (of ATT ****) is still the russian version share by Xombiex.
Cheers mates and happy debugging. I am tired, so for now, i am going to enjoy my phone
Also note with this Dual Sim 8.1 Wifi calling does not work with ATT sim card.With the help of Xombiex, i;ve tried many many times to find a proper combination for ATT phones. What i have found so far (btw, i paid even some money for some image from Europe). So, let's start:
- if you have a Sonim XP8 ATT unlocked and you flash and write also modemst1 modem st2 and fsg you are.... [email protected]#ked. Why? because the best that you can achive is Android 8.1 with both sims working and apn thethring. this setup is ACHIVED ONLY by using SONIM 8.1 archive from xombiex (is actually an archive from russia with manipulated baseband). To go even deeper, actually, you need from that archive only the baseband (which i have the feeling that is patched - files that you need modem_a and modem_b). Whriting these partitions on any 8.1 image will achive network signal. If you use 8.1 image from Xombiex will achive also dual sim. BUT these modems files - version: MPSS.AT.2.3.c8-1.137255.1.138439.1-GEN-180420-1925 - will not allow you to upgrade to Android 10 (if you image is OTA enabled, then OTA is downloaded on phone and fails on install).
If you have have android 10 and modify the modem_a and modem_b with Xombiex version, then the phone will not start (EDL is the way to recover).
So, as conclusion - any other modem file is not going to show you signal. you will see maybe 2 sims but no signal. i have the funny feeling that somehow, when you overwrite the modemst1, st2 and fsg you lose the unlock. Since the lock requires the baseband to send the prompt to insert unlock code, then new baseband maybe cannot handle this (maybe was customized for ATT?).
Also with Xombiex modema and b there is a drawback in dual sim configuration: if SIM one is active in LTE/UMTS/GSM (europe), then SIM 2 will see ONLY GSM and UMTS but only US bands. In Europe, there are few operators that use GSM and UMTS 2G/3G bands).
also, THERE IS NO WAY BACK if you flashed modemst1 and modemst2. even QCN backup seems that is skipping this flag for unlock.
Now, if you get ahold of a image from EU for Global SONIM and you are on ATT proceed with caution. NEVERflash modemst1, mdemst2 and fsg! I am following some forum in 4pda - russia and i know that the guys found a way how to "homebrew" an image of Android 10 with "patched baseband" BUT they are not sharing it. Only with money and only in russia face2face. Aparently, there is a big business in Russia and they are having "exclusive" service to unlock dual sim on ATT phones with Android 10 (trust me, i tried even to buy it only for me, no way).
So, this is my experience with an ATT that i messed up big time. Currently i am having 8.1 with dual sim (living in Europe the second sim is.... sort of used due to band restriction).
Also, please note that i have tried the following:
- QCN restore from similar phone (btw, if somebody has an ATT phone unlocked with 8.1 - original, single sim, please share modemst1, modemst2, fsg, and full QCN backup...- if i will succede to upgrade to 10 i will share my findings here)
- for second sim band issue - i;ve tried *#....4636. code and select different combinations / bands, etc. Nothing worked.
- i even played with EFS explorer, QPST software programming different bands - no luck.
So, as a conclusion and hint for other that like to "poke around" - modem a and modem b from Xombiex russian immage seems to be patched but limited to Android 8.1. Dual Sim full functionality and APN enabled is controleld by Android itself and here it seems that the most clean version (of ATT ****) is still the russian version share by Xombiex.
Cheers mates and happy debugging. I am tired, so for now, i am going to enjoy my phone
Similar threads
Top Liked Posts
-
There are no posts matching your filters.
-
1Four. Qualcomm QCN
1. The most original qcn file of the project is to select a RF card driver that is close to the project motherboard from the Qualcomm original code (similar GPIO configuration and frequency band configuration), and use the QCN corresponding to the RF card driver as the basic QCN file. After adding the static radio frequency NV item and frequency band configuration, it can be used as a QCN configuration file, and the corresponding NV modification of the subsequent software can be modified through QXDM and then backed up from the mobile phone to QCN.
2. QCN tar package production process:
2.1 First define and open the macro FEATURE_EFS_ENABLE_FACTORY_IMAGE_SECURITY_HOLE in the modem code and compile the modem.
2.2 Take a machine and use the fastboot erase command to erase the existing qnc data in the mobile phone, use the QPST tool to burn the prepared QCN file, connect the mobile phone to the computer to open the diag port, and enter the modem side modem_proc/core/storage on the PC command terminal In the /tools directory, execute the perl efsreadimage.pl -z command, which will generate fs_image.tar.gz in the current directory, and copy fs_image.tar.gz to the modem_proc/core/storage/tools/qdst directory, in linux Execute python QDSTMBN.py fs_image.tar.gz in the environment. After completion, the fs_image.tar.gz.mbn file will be generated in the same directory.
2.3 Create a new folder create_efs locally on the PC side, and put the modem_proc\build\ms\bin\AAAAANAZ\efs_image_meta.bin file, fs_image.tar.gz.mbn file and \modem_proc\core\bsp\efs_image_header\tools\ on the modem side Copy all files to create_efs, execute efs_image_create.py efs_image_meta.bin fs_image.tar.gz.mbn in the windows command window, and the final QCN Tar package fs_image.tar.gz.mbn.img file will be generated in this directory if the command is executed successfully .
3. After executing the modem image file unpacking script when compiling the software version, add the prepared QCN tar package fs_image.tar.gz.mbn.img to the fsg partition in the generated download partition file rawprogram0.xml, so that Burn the QCN file by downloading the software. -
6Enjoy!
XP8 Android Root Theory - DEBUG or Magisk over EDL
EDL is a must since Fastboot cannot be unlocked initially from standard "user" builds.
One option is flash a userdebug image (below) allowing for adb root, fastboot unlocking, and other useful features.
or
Without unlocking the bootloader - Similar flashing methods remain valid when standard magisk powered root is desired. This method allows preservation of all current system data aside from boot.img. All is covered since Magisk works with AVB and we have EDL as a flashing alternative. Please see Android Boot Flow > LOCKED Devices with Custom Root of Trust for more information.
Recommend method ..
It's up to you.. If you want OTA updates and your planning to use root apps then go with Magisk. As of today we have current debug images available and I personally prefer isolated adb root access only however future availability of updated Debug images cannot be guaranteed.
Disclaimer
-Devices with locked bootloaders will display a custom OS warning at boot
-Tested on AT&T branded devices only - please provide system dump for validation on other builds
-I have not identified any JTAG procedures and I can not help if you hard brick your device!
-This guide only touches boot_a and should be relatively safe since boot_b remains unmodified. I'm pretty sure this is enough to restore the original boot.img to boot_a under a failure scenario.. But I'm not really qualified enough to say definitively either.
-Take great caution - this is raw emmc access and critical system data! You are proceeding at your own risk!
Magisk Root
USERDEBUG Flash
Images and OTA Files
XP5s
Sprint Image: XP5SA.0.2-03-7.1.2-29.03.00
Works the same. Tested with unmodified Sprint firmware. Like most other apps, the Magisk manager app is unusable since the XP5s has no touch screen - I had to patch the boot image on another device. You can plug in a USB mouse however the cursor does not seem to invoke in-app tap's.
Need to use the appropriate Firehose loader (prog_emmc_firehose_8920.mbn) and replace the boot image location according to the XP5s GPT (start_sector="790528").4xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Sonim XP8 is officially Rooted with TWRP
replace downloaded boot.img with your boot.img in firmware folder from the link below
tested on android 7x-8x USERDEBUG builds.
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
=======================================================================
Bugs -
cant flash system.img
wipe/format data wipes phone completely
ive tested both functions its the way this phone is setup its pretty weird.
=======================================================================
Updates -
will be working on figuring out how to build a custom OS
any help would be greatly appreciated
=======================================================================
NEW LINK with sonim flash tool , boot.img , magisk , and no verity
I dont ! take any credit for the mentioned applications just the TWRP port
==========
Thank you to all who kept this thread in motion lets keep it going !!
========================================================================
ADB -
adb reboot bootloader - takes you to fastboot where you can select recovery mode
adb reboot edl - takes you to flash mode.
adb rebootrecoverydoesnt work !
========================================================================
NEW LINK - GDRIVE 3Hey guys, been a while and I'm glad to share some updates with the community!
Main post here has been updated according to the progress made in the previous posts. Much thanks to everyone for providing early debug images, files, and knowledge!
Updates
- Torrent file hosting moved to Android FIle Host
- Current 8.1.0 AT&T Debug image uploaded
- 8.1.0 Debug image verified to retain dm-verity! At least on current AT&T builds.
- Additional factory images uploaded
- All basic flash tools, elf files, drivers, and GPTConsole executable uploaded
- More images will be uploaded in the following days. Ran out of time to upload everything tonight.
Full Android File Host Repository - Here
We continue to welcome new images for the file collection.2ATT XP8 backup, rooting, and wifi hotspot
Rooted an ATT (carrier unlocked) Sonim XP8 this afternoon and enabled wifi hotspot on the device. Below are notes. These are compiled mostly from XDA posts by Smokeyou. Kudos for his efforts and posts. Thanks also to Sergsinger for his PDA forum posts .Wifi hotspot adjustment by RJGlenn. Feel free to PM me with corrections, additions, and clarifications. This is a work in progress
Instructions below assume lap/desktop OS is recent MS Windows.
Pre-install:
1.) Download and install "Flash Tools" from https://androidfilehost.com/?fid=4349826312261641937
This compressed archive contains,
fh_loader.exe GPTConsole.exe prog_emmc_firehose_8920.mbn
prog_emmc_ufs_firehose_Sdm660_ddr.elf
QC.QMSLPhone.dll
QMSL_MSVC10R.dll
QSaharaServer.exe
SubSysSwDownload.DLL
Download the FlashTools archive and unpack it to C:\ drive.
2.) Download Android Debug Bridge (ADB) from here, https://developer.android.com/studio/releases/platform-tools.
Install ADB on your desktop. Update Windows PATH, (life is short).
3.) Download and install QDLoader HS-USB Driver.zip from here, https://androidfilehost.com/?fid=24459283995295983
In the installation menu, always click "Next" and do not select anything else. Reboot your PC.
4.) Download and install "XP8 drivers" from here, https://www.androidfilehost.com/?fid=4349826312261641909
5.) Secure copies of Magisk.zip and MagiskManager.apk for installation on Android device. Website is https://github.com/topjohnwu/Magisk
6.) On your Sonim XP8 handset, enable developer settings and,
-allow OEM (bootloader) unlocking,
-allow USB debugging,
-allow verify apps over USB, and
-download and install Root Browser Classic (JRummy apps).
PHASE I.) BACKUP YOUR ROM-
1.) Put the smartphone in EDL (Emergency Download) mode. Phone can be put into EDL manually by turning it off, then hold down both Volume buttons and press the Power button: Sonim will appear, then screen will go blank. Phone is now in EDL mode. Another option is via ADB. Open a command prompt window by right-clicking in an empty space while holding the Shift key on the keyboard, then select "open command window here" type in, "adb reboot edl". Connect the phone to the PC, the phone will be identified as " Qualcomm HS-USB QDLoader 9008" in the Device Manager, under Ports (COM and LPT). Remember the port number (COM) displayed here to which the phone is connected. This is very important.
2. Create a backup. In the unpacked FlashTools folder, on an empty space, right-click while holding the Shift key on the keyboard and select "open command window here". Execute the following commands:
2a.) "QSaharaServer.exe -p \\. \ COM<X> -s 13: prog_emmc_ufs_firehose_Sdm660_ddr.elf"
<X> is the port number your phone is connected to, becomes COM1 or COM2 (hard brackets go away)
2b.) Create a backup XML file named "backup.xml". This grabs much of the ROM for a backup. Contents of this .xml are:
2c.) Enter this in a terminal window to create the backup, "fh_loader.exe --convertprogram2read --port=\\.\COM<X> --sendxml=backup.xml" .
<X> is the port number your phone is connected to, becomes COM1 or COM2 (hard brackets go away).
Note: To restore the backup, execute the commands: "QSaharaServer.exe -p \\. \ COM<X> -s 13: prog_emmc_ufs_firehose_Sdm660_ddr.elf",
and "fh_loader.exe --port = \\. \ COM <X> --sendxml = Backup.xml"
Remember <X> is the port number,to which your phone is connected!
PHASE II.) ESTABLISHING ROOT. This is done via MagiskManager and boot patching.
1.) Pull Boot.img. We need a copy of the stock boot image for MagiskManager to patch. It's also good to keep a backup copy of the stock boot image on hand should you need to restore for any reason.
1a.) Create an XML file named "bootbackup.xml" in C:\FlashTools using below code. This will create a backup of boot_a from the Sonim XP8 and save it as "backup_boot.img" in C:\FlashTools.
1b.) Boot to EDL mode using methods in Phase I, step 1. Remember the COM port in use. Run the following commands.
A) Load the firehose programmer, "QSaharaServer.exe -p \\.\COM<X> -s 13rog_emmc_ufs_firehose_Sdm660_ddr.elf"
Remember <X> is the port number,to which your phone is connected.
B) Run the bootbackup.xml file to create backup_boot.img in C:\FlashTools using the following command.
"fh_loader.exe --convertprogram2read --port=\\.\COM<X> --sendxml=bootbackup.xml --lun=0 --memoryname=emmc --noprompt --reset"
2.) Magisk Manager and boot patch
2a.) Transfer "backup_boot.img" to /downloads on the device. MagiskManager will access it here and modify it.
Do this by using Android Debug Bridge (ADB) thus: "adb push C:\FlashTools\backup_boot.img /storage/self/primary/Download/". Note device is NOT in EDL mode.
2b.) On the handset, install magiskmanager.apk. Do this either via ADB, or put the .apk file on the device sdcard, browse to it using RootBrowser, and install.
2c.) Open MagiskManager application, follow presented instructions and apply patch to backup_boot.img in device /downloads directory.
2d.) Run, "ADB pull /storage/self/primary/Download/magisk_patched.img". File should be in whatever directory command was called from (C:\FlashTools\magisk_patched.img).
3.) Apply patched boot.img to device operating system by pushing a copy of magisk_patched.img to the device and overwriting boot_a with it as follows,
3a.) Create an XML file named "magiskoverwrite.xml"
3b.) Boot back into EDL mode and load firehose programmer, "QSaharaServer.exe -p \\.\COM<#> -s 13rog_emmc_ufs_firehose_Sdm660_ddr.elf"
3c.) Apply magisk_patched.img using the following command, "fh_loader.exe --port=\\.\COM<#> --sendxml=magiskoverwrite.xml --lun=0 --memoryname=emmc --noprompt --reset"
Post install notes: Phone asked for password upon reboot following completion of step 3. Screenlock pin did not resolve this.
Did factory reset. Reinstalling MagiskManager.apk from copy on device sdcard, followed by "install" in the application, granted root privileges.
Phase III.) ENABLING WIFI HOTSPOT.
1.) Download and install Root Browser Classic (JRummy apps). Open Root Browser Classic and browse to /system/build.prop. Open with a text editor. Scroll down to "#property to enable entitlement check". Change att.service.entitlement= from "true" to "false". Below this add "net.tethering.noprovisioning=true". Hit save. Close the text editor, then reboot the phone.
