How to fix Fake UBL for ARB4 devices - Xiaomi Redmi Note 5 Pro Guides, News, & Discussion

MI Flash : http://bigota.d.miui.com/tools/MiFlash2018-5-28-0.zip
Firstly we download this rom : https://drive.google.com/drive/folders/16lQ-A175D_5DJU-YT4lbul5htgaNNw21
Then we take the device into EDL Mode and install Rom.
After installing the ROM, install the device again in EDL Mode.
We are putting rawprogram0.xml into the AntiTest folder.
rawprogram0.xml "https://drive.google.com/open?id=1TNlPjMTkyh7urJiRV9egzLnzDr27dlOL"
We are installing from MiFlash "clean all in a selected" way again.
Good luck when the device is opened Fake UBL will be removed wait 720 hours and the bootloader will be unlocked

Wow how did you come up with this? Seems persist.img contains the bootloaders unlock/lock status. Great.
Maybe you could just replace the rawprogram0.xml on the anti_test_note5 images folder with this
http://www.mediafire.com/file/btd8ddid8dbn3tc/rawprogram0.xml/file
I enabled persist.img on the default rawprogram0.xml so that you could just flash it once on miflash and not doing it twice.

devcon69 said:
Wow how did you come up with this? Seems persist.img contains the bootloaders unlock/lock status. Great.
Maybe you could just replace the rawprogram0.xml on the anti_test_note5 images folder with this
http://www.mediafire.com/file/btd8ddid8dbn3tc/rawprogram0.xml/file
I enabled persist.img on the default rawprogram0.xml so that you could just flash it once on miflash and not doing it twice.
Click to expand...
Click to collapse
persist.img has been known currently to contribute to several "curse" (s) those occured when you buy RN5 whyred China version which has been flashed to Global. Probably the seller broke this partition when trying to unlock the phone (carrier bundling unlock).
The curses come in different flavors :
1. OIIMIFA (correct one is OEIMIFA), no matter what you flash, using recovery/fastboot, it will stay as OIIMIFA. This is the earliest curse, at that time, still no ARP yet.
2. Fake ROM, overlay on top say it is unofficial ROM
3. Sensor not functioning, all accelero, compass, gyro and other sensors seems to be totally broken
4. Many other variant, such as OEIMIFA 9.5.17.0.0 (5 digit version); 9.5.6.0 but ROM show MIUI 10 interface (possibly already anti 4, but show anti 3 version ROM); 9.5.19.0 but still anti 3 (probably seller flash using firmwareless, my guess); JIAMIFA and many more. They keep evolving by natural selection :LOL
5. The worst of all the curses is the Fake UBL. Since all above can be cured easily by flashing persist.img, if it is UBL ready. But fake UBL get locked out, status show unlocked, no way to bind account, but it is still locked out in fastboot.
That's why the solution is to flash persist.img. AFAIK, it is not flashed by default. That's why during OIIMIFA curse, when users try so many fastboot ROM, nothing changed (because persist.img is not flashed)

Desmanto said:
persist.img has been known currently to contribute to several "curse" (s) those occured when you buy RN5 whyred China version which has been flashed to Global. Probably the seller broke this partition when trying to unlock the phone (carrier bundling unlock).
The curses come in different flavors :
1. OIIMIFA (correct one is OEIMIFA), no matter what you flash, using recovery/fastboot, it will stay as OIIMIFA. This is the earliest curse, at that time, still no ARP yet.
2. Fake ROM, overlay on top say it is unofficial ROM
3. Sensor not functioning, all accelero, compass, gyro and other sensors seems to be totally broken
4. Many other variant, such as OEIMIFA 9.5.17.0.0 (5 digit version); 9.5.6.0 but ROM show MIUI 10 interface (possibly already anti 4, but show anti 3 version ROM); 9.5.19.0 but still anti 3 (probably seller flash using firmwareless, my guess); JIAMIFA and many more. They keep evolving by natural selection :LOL
5. The worst of all the curses is the Fake UBL. Since all above can be cured easily by flashing persist.img, if it is UBL ready. But fake UBL get locked out, status show unlocked, no way to bind account, but it is still locked out in fastboot.
That's why the solution is to flash persist.img. AFAIK, it is not flashed by default. That's why during OIIMIFA curse, when users try so many fastboot ROM, nothing changed (because persist.img is not flashed)
Click to expand...
Click to collapse
Good. Nice to know man. Thanks for the detailed info.

[ask] Verified me account.
Hi,
I'm stuck with this fake UBL thing for quite a while now, and haven't found any solution.
Does it need verified / bind Mi account when doing the flashing part ? (the first and second time)

StracerX said:
Hi,
I'm stuck with this fake UBL thing for quite a while now, and haven't found any solution.
Does it need verified / bind Mi account when doing the flashing part ? (the first and second time)
Click to expand...
Click to collapse
have you disconnected your battery with pull up battery socket and entering edl mode?

anugrahlando said:
have you disconnected your battery with pull up battery socket and entering edl mode?
Click to expand...
Click to collapse
I haven't done it with the files provided within this thread. I would like to know if the flashing process needs a mi account because i haven't got one that bound to a ReN 5.
If the flashing process doesn't need one, I think I would like to give it a shot.

StracerX said:
I haven't done it with the files provided within this thread. I would like to know if the flashing process needs a mi account because i haven't got one that bound to a ReN 5.
If the flashing process doesn't need one, I think I would like to give it a shot.
Click to expand...
Click to collapse
if you flash in edl mode with battery disconnected it wouldnt ask you to authorized mi acc

Is it a must to remove battery? I'm not familiar with dismantling the hardware so juz trying to avoid.

anugrahlando said:
if you flash in edl mode with battery disconnected it wouldnt ask you to authorized mi acc
Click to expand...
Click to collapse
Thanks for the info, I think I will give it a shot.
Pinage said:
Is it a must to remove battery? I'm not familiar with dismantling the hardware so juz trying to avoid.
Click to expand...
Click to collapse
Yes, because to access the test point to enter the edl mode as discussed, you would have to open the back case and unscrew some panels covering it.
I found it quite a hassle the last time i tried to do it, especially when opening the hard back case.

UtkuAblak said:
MI Flash : http://bigota.d.miui.com/tools/MiFlash2018-5-28-0.zip
Firstly we download this rom : https://drive.google.com/drive/folders/16lQ-A175D_5DJU-YT4lbul5htgaNNw21
Then we take the device into EDL Mode and install Rom.
After installing the ROM, install the device again in EDL Mode.
We are putting rawprogram0.xml into the AntiTest folder.
rawprogram0.xml "https://drive.google.com/open?id=1TNlPjMTkyh7urJiRV9egzLnzDr27dlOL"
We are installing from MiFlash "clean all in a selected" way again.
Good luck when the device is opened Fake UBL will be removed wait 720 hours and the bootloader will be unlocked
Click to expand...
Click to collapse
Confirmed working with a bit of tinkering for:
redmi note 5, internal 64gb, ram 4 giga, red box, rear camera 12mp+5mp
my experience:
1. Enter EDL mode - Battery plugged in
2. Flash Anti ROM with original rawprogram0.xml (I accidentally chose clean and Lock)
3. unplug the phone, and replace rawprogram0.xml with the patched version (persist only )
4. Enter EDL Mode again, flash ROM clean mode. This time, the flasher app only flashed persist.img. Finish a lot quicker
5. unplugged the phone - disconnect the battery (lazy me)
6. Turn on phone - Automatically Enter Mi Recovery 3 - Said MIUI Rom not compatible, FAILED
Then...
7. Download Fastboot ROM from : https://en.miui.com/thread-2340434-1-1.html
8. I chose latest fastboot ROM: http://bigota.d.miui.com/V10.0.2.0....EICNFH_20180918.0000.00_8.1_cn_7af050826b.tgz
9. Extract the ROM, then replaced Firehose file from this: https://forum.xda-developers.com/redmi-note-5-pro/how-to/fix-arb-bricked-device-qfil-t3841780
Repeat step 1 to 6, this time , for the China Stable ROM
Again Stuck in Recovery...BUT... I waited..and the phone restart by it self, and after a very long boot, The phone finished boot
SUCCESS!
Then...
Binding device to Mi account, SUCCESSS
Power off phone, enter fastboot
Trying to unlock using mi unlock, FAILED
NO PHONE NUMBER ASSOSIATED
Login to : https://account.xiaomi.com/ and complete the data
Then RE Unlock
FAILED AGAIN, I have to wait 360 hours since the last unlock attempt
No problem, I can wait ,
I'm Relieved.... FAKE UBL IS GONE

This Miui Version can't be installed
I follow your step, but when i turned on the phone, it boot into recovery mode "this MIUI version can't be installed on this device"
Please help.
Thank you

dedieko said:
Confirmed working with a bit of tinkering for:
redmi note 5, internal 64gb, ram 4 giga, red box, rear camera 12mp+5mp
my experience:
1. Enter EDL mode - Battery plugged in
2. Flash Anti ROM with original rawprogram0.xml (I accidentally chose clean and Lock)
3. unplug the phone, and replace rawprogram0.xml with the patched version (persist only )
4. Enter EDL Mode again, flash ROM clean mode. This time, the flasher app only flashed persist.img. Finish a lot quicker
5. unplugged the phone - disconnect the battery (lazy me)
6. Turn on phone - Automatically Enter Mi Recovery 3 - Said MIUI Rom not compatible, FAILED
Then...
7. Download Fastboot ROM from : https://en.miui.com/thread-2340434-1-1.html
8. I chose latest fastboot ROM: http://bigota.d.miui.com/V10.0.2.0....EICNFH_20180918.0000.00_8.1_cn_7af050826b.tgz
9. Extract the ROM, then replaced Firehose file from this: https://forum.xda-developers.com/redmi-note-5-pro/how-to/fix-arb-bricked-device-qfil-t3841780
Repeat step 1 to 6, this time , for the China Stable ROM
Again Stuck in Recovery...BUT... I waited..and the phone restart by it self, and after a very long boot, The phone finished boot
SUCCESS!
Then...
Binding device to Mi account, SUCCESSS
Power off phone, enter fastboot
Trying to unlock using mi unlock, FAILED
NO PHONE NUMBER ASSOSIATED
Login to : https://account.xiaomi.com/ and complete the data
Then RE Unlock
FAILED AGAIN, I have to wait 360 hours since the last unlock attempt
No problem, I can wait ,
I'm Relieved.... FAKE UBL IS GONE
Click to expand...
Click to collapse
I follow your steps, but it always end up in ACK could not match.
My bootloader is blocked and for my luck with no account linked, so i can't unlock BL.
Anyone know how fix this problem?

Related

Need help! No fastboot!

I was on Crdroid and wanted to get back into Miui since there was weekly miui 12 version now. Downloaded it and flashed it but it would not boot. I remembered on poco i had that i needed to flash latest miui andro 9 before flashing latest miui andro 10 for some reason so i got back into twrp and did it. After reboot it went into some sort of boot loot and i lost any recovery and fastboot. Cant get into edl for that matter also. Anyone has any suggestion?
Can you elaborate a bit more, when you try to boot into fastboot with the button combination, does it work?
Do you get any indications when trying to turn on your phone?
malimukk said:
Can you elaborate a bit more, when you try to boot into fastboot with the button combination, does it work?
Do you get any indications when trying to turn on your phone?
Click to expand...
Click to collapse
Button combination gives me blank screen and revovery gives MI logo and just that until it rebots and stays like that in some loop. I can get into test mode after opening it to try QFill flashing but i forgot about account authorisation thing. I do not have any type of service center in my country that wants to deal with this. Issue is probably due to anti rollback policy in 2s. So i need solution to flash somehow thru qualcomm port but aparently only wth that account that has authorisation.
Thats where i got till now. Spent a whole day also at 4pda trying to find solution but nothing there worked for me
scudteshka said:
Button combination gives me blank screen and revovery gives MI logo and just that until it rebots and stays like that in some loop. I can get into test mode after opening it to try QFill flashing but i forgot about account authorisation thing. I do not have any type of service center in my country that wants to deal with this. Issue is probably due to anti rollback policy in 2s. So i need solution to flash somehow thru qualcomm port but aparently only wth that account that has authorisation.
Thats where i got till now. Spent a whole day also at 4pda trying to find solution but nothing there worked for me
Click to expand...
Click to collapse
Oh that's unfortunate! I think that in this case you will need to find someone with an authorized account that will flash it for you remotely. There have been some people around here offering that service for a small fee but it might be worth paying as that might be the only way to fix it.
Same thing happend to me, first time i tried using custom rom. i dont know what exactly happened. i think its have something common with anti-rollback feature. I sent the divice to OFFICIAL service center.... I told them "use mi flash tool and authorised account to flash fastboot rom in edl" These OFFICIAL trained technicians... ehm idiots... change whole mother board.... atleast they count it as warrasnty repair.... there is one guy on reddit who succesfull unbricked his device via "shady bussines" (there is also contact on reddit page)... some guys offer xiaomi unbrick services via teamviewer. you can give it a try: https://www.reddit.com/r/Xiaomi/comments/ftix9v/shady_services_unbrick_with_mi_authorised_account/ EDIT: its last reply reddit (hope its allowed to post links)
note: you can put yr device in edl mode by pressing powerbutton. im not sure if its pressing or holding. (yr phone need to by connected to pc, then mi flash detect the phone if all drivers are instaled, it should be shown in "windows device manager" as PORT named "qualcomm hs-usb qdloader 9008")
if you dont have authorised acc. this will happen https://imgur.com/a/oJVpKEl so you need someone with authorised account who will unbrick yr phone via teamviewer [Sorry for my bad english]
Ijust dont understand why xiaomi dont allow user flashing in edl mode... or just make harder to brick phone... i had oneplus and i never bricked it. bricking xiaomi is just super easy thank to their stupid anti-rollback and other b****its. i will never use custom rom on xiaomi again. i will dont buy xiaomi again
Did you try the MI Flash app? ...try to fastboot and check if mi flash works
Also try fastboot(combo-buttons only) and see if you can see the phone (cmd -> fastboot devices) ...if you see a device then you are good to go
If you have a fastboot miui rom you can use my guide: https://forum.xda-developers.com/xiaomi-mi-mix-2s/help/weird-behavior-boot-loop-random-t4086703
It's like using MI flash program but doing it manually - if mi flash gives you issues or else
P.S. CMD MUST be with administrator rights of course!
Hi Guys,
got a big problem here today. after installing on orangefox a miui11 stable rom suddenly flashlight went on and it stopped to install it... i was like WTF? so i have go to reboot to the recovery and my mix 2s DIED.
now
1) battery is drained
2) no fastboot (black screen on vol down + power key)
3) no recovery (black screen on vol up + power key)
4) bootloop on miui logo
any idea?

Blackview Tab 8 unlocked Bootloader, but how to magisk?

Hi,
so with this Tutorial i was able to unlock the bootloader of the Blackview tab 8.
but i just could not find any way to flash magisk.
- "fastboot boot patched_img.img" and "fastboot flash boot patched_img.img" gave me "fastboot: error: Couldn't parse partition size '0x'"
- "fastboot flash:raw boot boot.img" was able to flash the patched_boot.img (a twrp i tried to port as well), but then i was stuck at blackview logo (SOFTBRICK)
- SPD Research Tool R24.0.0003 was able to flash patched_boot.img, but same stuck at logo (SOFTBRICK)
The only way i was able to unbrick it, involved opening back cover and disconnecting the battery and reconnecting it again.
then put research tool to download mode and flash stock img
I'm hoping for some advices, what i could try to get magisk flashed
- Tab8 Firmware (DK_SC9863A_P30_5G_10.0_Tab8_EEA_20201022_V1.0)
- SPD Research Tool R24 (there are 2 other tools but afaik research tool is the only one, where i can choose which partitions to flash)
best regards
Oxo
Hi,
I've got a tab8 too (eu) and I have the boot_patched.img generated by magisk manager but I can't unlock the bootloader. I used the tuto you gave (your first link) too.
Could you explain what you did to successfully unlock your bootloader please?
Thanx
Bests regards
I was trying to backup the stock ROM of this same tablet, however i must have incorrectly installed SPD drivers or somehow had uninstalled them, Research Download said "failed user cancel", then boom when i tried to switch it on it was not turning on nor charging. I have been trying to charge it for about 4 days, no dice, it does not charge still, nor turning on.
I must have soft bricked it, because it gets detected by the PC as "SPRD U2S Diag (COM5)", but when i try to flash Stock ROM i downloaded it either says " failed user cancel" or gets stuck at "checking baudrate".
I don't know what to do, would opening it and test point it make a difference? Because some guy on Youtube was able to flash his SPD phone after test pointing it, as it was facing "failed user cancel"
Another question, which key combinations did you use when flashing your Tab 8? Vol - and Power or?
nr0000000 said:
Hi,
I've got a tab8 too (eu) and I have the boot_patched.img generated by magisk manager but I can't unlock the bootloader. I used the tuto you gave (your first link) too.
Could you explain what you did to successfully unlock your bootloader please?
Thanx
Bests regards
Click to expand...
Click to collapse
I did it like described in the tutorial i linked. did you use linux? maybe in a VM or so, to use the .sh script. AFAIK it doesnt work with windows
also dont forget to activate "OEM unlocking" in dev options
StormChaser1337 said:
I was trying to backup the stock ROM of this same tablet, however i must have incorrectly installed SPD drivers or somehow had uninstalled them, Research Download said "failed user cancel", then boom when i tried to switch it on it was not turning on nor charging. I have been trying to charge it for about 4 days, no dice, it does not charge still, nor turning on.
I must have soft bricked it, because it gets detected by the PC as "SPRD U2S Diag (COM5)", but when i try to flash Stock ROM i downloaded it either says " failed user cancel" or gets stuck at "checking baudrate".
I don't know what to do, would opening it and test point it make a difference? Because some guy on Youtube was able to flash his SPD phone after test pointing it, as it was facing "failed user cancel"
Another question, which key combinations did you use when flashing your Tab 8? Vol - and Power or?
Click to expand...
Click to collapse
i dont know about test point actually. you can open it pretty easily and just disconnect battery. then connect again, use sdp tool and start the flash process, then press vol- and hold it while pluging in usb cable. thats what i do, if im stuck and cant do anything else.
regarding button combination, i'm not sure. usually i use adb reboot bootloader.
Also for the Blackview Tab 8 you need to extract keys from your vbmeta.img and sign it differently, also every other .img you wanna flash, like patched magisk boot.img. i successfully rooted mine some time ago, but i flashed some magisk modules and something went wrong and i ended up bootlooping. now im trying to root again.
somehow i cant flash the vbmeta.img. i dont remember if i did anything different last time.
all the stuff i did to get it rooted, i have taken from that hovatek forum.
edit: uploaded Stock Rom Images and stuff like for example a magsik patched boot image, which got repacked with android image kitchen then signed and repacked again with avbtool here
PS: dont have time to invest to this atm, also i just read that there was a update sometime this year which i didnt get, so maybe that changed some stuff.
I was considering buying this Blackview tablet and before I ordered it I got in touch with the Blackview home people in Hong Kong. They were extremely UNHELPFUL AND EVEN RUDE (not unusual for the chinese). As far as I am concerned this mob does not deserve to be supported and having a product that is so difficult to do any tinkering with precludes it from my list for sure. It is so time for consumers to DEMAND that any product that does not give explicit instructions as to unlocking and flashing is not supported. Why is it not possible in this day and age for this to happen. OK I know why but you get my meaning.

2.0.4DJB TCL 10 Pro Firmware Update

This is an untouched copy of the recent update for our devices. It has no file extension from TCL, but I'll leave info on how to download the firmware originally below, with it mirrored to Android File Host. Can just open this file like a Zip file
Original Link from TCL grabbed with LogCat
Code:
https://g2slave-ap-north-01.tclcom.com/64c9b63f5a85fdd27b552eec614f884add8fdb67/54/586054
Mirror Link: https://www.androidfilehost.com/?w=files&flid=322525
I have tried patching the Boot.img.p with Magisk, but it doesn't recognize the file format. Renamed it to just boot.img, still won't patch
KaptinBoxxi said:
This is an untouched copy of the recent update for our devices. It has no file extension from TCL, but I'll leave info on how to download the firmware originally below, with it mirrored to Android File Host. Can just open this file like a Zip file
Original Link from TCL grabbed with LogCat
Code:
https://g2slave-ap-north-01.tclcom.com/64c9b63f5a85fdd27b552eec614f884add8fdb67/54/586054
Mirror Link: https://www.androidfilehost.com/?w=files&flid=322525
I have tried patching the Boot.img.p with Magisk, but it doesn't recognize the file format. Renamed it to just boot.img, still won't patch
Click to expand...
Click to collapse
Completely new to this phone. Nice grab! I was able to use your download and 7z zip to extract boot.img from boot.img.p.
I tried to put this file into magisk but no luck.
Have you been able to unlock the bootloader yet?
I tried the fastboot OEM unlock and fastboot flashing unlock when in bootloader mode but it doesn't work.
With someone else's help I was able to locate where the boot.img is located on the phone but unable to extract it.
/dev/block/bootdevice/by-name/boot
Backup boot.img via terminal one-line command
I am trying to make an image backup of boot. The script must work on any android. I think on any Android the boot location is /dev/block/platform/???/by-name/boot My command line find /dev/block/
android.stackexchange.com
Screenshots attached.
JayTM said:
Completely new to this phone. Nice grab! I was able to use your download and 7z zip to extract boot.img from boot.img.p.
I tried to put this file into magisk but no luck.
Have you been able to unlock the bootloader yet?
I tried the fastboot OEM unlock and fastboot flashing unlock when in bootloader mode but it doesn't work.
With someone else's help I was able to locate where the boot.img is located on the phone but unable to extract it.
/dev/block/bootdevice/by-name/boot
Backup boot.img via terminal one-line command
I am trying to make an image backup of boot. The script must work on any android. I think on any Android the boot location is /dev/block/platform/???/by-name/boot My command line find /dev/block/
android.stackexchange.com
Screenshots attached.
Click to expand...
Click to collapse
I did the same thing you probably did to attempt to patch it with Magisk, no luck. I haven't had the time to try further recently. Enabling OEM Unlock and attempting to unlock the bootloader just leads to needing an unlock code, much like bootloader unlocking a Moto device.
I contacted TCL support a long time back when I first got the phone and they were 100% not willing to help with any USA based TCL 10 Pro unlocking. The customer service worker literally said they weren't allowed to help with US based devices. There's no downloads anywhere for the firmware either, which I think goes against Google's agreement to android on a device, but I'm not 100% sure on that.
KaptinBoxxi said:
I did the same thing you probably did to attempt to patch it with Magisk, no luck. I haven't had the time to try further recently. Enabling OEM Unlock and attempting to unlock the bootloader just leads to needing an unlock code, much like bootloader unlocking a Moto device.
I contacted TCL support a long time back when I first got the phone and they were 100% not willing to help with any USA based TCL 10 Pro unlocking. The customer service worker literally said they weren't allowed to help with US based devices. There's no downloads anywhere for the firmware either, which I think goes against Google's agreement to android on a device, but I'm not 100% sure on that.
Click to expand...
Click to collapse
Android 11 for the TCL 10L has been being pushed in italy. This a large file about 2 to 3 GB. I really hope when we see it on our phones you are able to pull the link from logcat as well. This should be the entire rom. All we have now is OTA patch files. I've tried so many things. I have all drivers fully working even the Qualcomm 9008 Diagnostic driver. I can put the phone into EDL mode.
To put phone into EDL mode you need usb debugging enabled and type in secret code into the dialer *#*#3424#*#* which enables the diagnostic port via toast notification. Then turn phone off, hold both volume up and volume down and plug phone into PC. You will be prompted with the Download mode screen. Hold volume up to enter EDL.
There are ways to backup in EDL mode, I'm just not well versed in commands.
JayTM said:
Android 11 for the TCL 10L has been being pushed in italy. This a large file about 2 to 3 GB. I really hope when we see it on our phones you are able to pull the link from logcat as well. This should be the entire rom. All we have now is OTA patch files. I've tried so many things. I have all drivers fully working even the Qualcomm 9008 Diagnostic driver. I can put the phone into EDL mode.
To put phone into EDL mode you need usb debugging enabled and type in secret code into the dialer *#*#3424#*#* which enables the diagnostic port via toast notification. Then turn phone off, hold both volume up and volume down and plug phone into PC. You will be prompted with the Download mode screen. Hold volume up to enter EDL.
There are ways to backup in EDL mode, I'm just not well versed in commands.
Click to expand...
Click to collapse
I'm wondering if I can pull some social engineering off, maybe be like "Hey my phone reset itself, can't boot it, but I read online something for a samsung phone called Odin and Fastboot and such? Some how you can install the system that way?" See what they say/link me to
KaptinBoxxi said:
I'm wondering if I can pull some social engineering off, maybe be like "Hey my phone reset itself, can't boot it, but I read online something for a samsung phone called Odin and Fastboot and such? Some how you can install the system that way?" See what they say/link me to
Click to expand...
Click to collapse
Good luck to you.
I contacted TCL support myself with no luck. They immediately put my case in pending close status.
Is there a way this ZTE tool can be modified to work for our device?
Axon 7 EDL Tool - Flash / Backup / Restore / Unlock in the EDL mode
Axon 7 EDL Tool BAT-program for Flash / Backup / Restore / Unlock the phone in EDL mode Qualcomm HS-USB QDLoader 9008 (COM ...) !!! Whatever you do, you do at your own risk !!!" !!! If you are not sure of yourself do not use this program ...
forum.xda-developers.com
All partitions are detected in EDL mode.
JayTM said:
Is there a way this ZTE tool can be modified to work for our device?
Axon 7 EDL Tool - Flash / Backup / Restore / Unlock in the EDL mode
Axon 7 EDL Tool BAT-program for Flash / Backup / Restore / Unlock the phone in EDL mode Qualcomm HS-USB QDLoader 9008 (COM ...) !!! Whatever you do, you do at your own risk !!!" !!! If you are not sure of yourself do not use this program ...
forum.xda-developers.com
All partitions are detected in EDL mode.
Click to expand...
Click to collapse
I'll check it out. If its possible to view the code in a tool like dnSpy or extract files from the exe with 7zip, its possible to use with our device, i'm sure as long as the commands are similar
Well you're in luck as it is just a .bat file program simple notepad++ will do.
I will be following this thread with intrest, root could be the deciding factor in me purchasing this device.
Tech101yt said:
I will be following this thread with intrest, root could be the deciding factor in me purchasing this device.
Click to expand...
Click to collapse
Have had the phone for less than 6 months and I'm already having LCD issues. When the display is off, just sitting on a table or something, it'll flash white randomly like its getting an electric signal at random. Its nothing I did. I've never hard dropped the thing. Everywhere I go pretty much is carpeted except work. If manufacturer warranty doesn't cover me, I'll stop recommending the phone to people
I actually switched to an Essential Phone recently. Way better experience, way cheaper too. I have around a dozen of them anyway and have been selling em on swappa (dunno if I'm allowed to say that here, but oh well) lol
@KaptinBoxxi Sounds like you have Ambient Display on for notifications.
mschoolbus said:
@KaptinBoxxi Sounds like you have Ambient Display on for notifications.
Click to expand...
Click to collapse
Nah its turned off. It flashes like a broken LCD would look. All snowy and stuff like an old TV. Its not notifications, just a bad LCD
that sucks... could try reseating the screen's ribbon cable :-/
can anybody share the full update rom about android 11?
top170 said:
can anybody share the full update rom about android 11?
Click to expand...
Click to collapse
I don't believe anyone has Logcatted the update process yet to get the firmware, but on the subject of this post, I do have some updates
I was digging through my Logcat from january and realized I missed something massive. I have yet to figure out the URL structure, but I have all the info for it.
So when you go to the following link, it gives a bunch of errors of missing info
https://g2master-sa-east.tclclouds.com/notify_new.php
For the firmware here on this post at least, each value from my device is
Code:
id = 0156260
curef = T799B-2ALCUS11
vk = 741ace917e3527af81412ca93b0fcce2de04a264
salt = 1611977254070885419
fv = 4DJ1LM10
tv = 4DJBLMB0
op = 1000
status = 999
mode = 2
cltp = 10
type = firmware
formatted from logcat
reportContent= {"id":"0156260","salt":"1611977254070885419","curef":"T799B-2ALCUS11","fv":"4DJ1LM10","tv":"4DJBLMB0","mode":"2","cltp":"10","type":"Firmware","op":"1000","status":"999","vk":"741ace917e3527af81412ca93b0fcce2de04a264"}
no matter what, I get the errors on the web page

Question Help with unbricking OP9

Hey all!
Where do I start...? My apologies if my explanation is all over the place. I'll try to skip out all the parts that doesn't matter. Here it goes.
I wiped out my phone entirely to the point where there is only fastboot available. No recovery either. Storage is completely empty. Then, I found this guide: https://forum.xda-developers.com/t/restore-oneplus-9-to-stock-via-fastboot-commands.4265153/ and followed it through until step 5 where I can no longer flash anything further because I get this:
D:\adb>fastboot flash product product.img
Invalid sparse file format at header magic
Sending sparse 'product' 1/6 (262120 KB) OKAY [ 5.937s]
Writing 'product' FAILED (remote: 'No such file or directory')
fastboot: error: Command failed
Click to expand...
Click to collapse
I then tried what was mentioned on the note about switching partition between a/b (I was on B, then switched to A): Still the same error. So, I went looking for other guides and found this: https://forum.xda-developers.com/t/global-oneplus-9-msm-tool-updated.4284779/. I downloaded everything, but the MSM tool kept giving me a "Packed image not exist!" error. I did some digging on that too and found it was supposed to be in the same directory as certain files (I can't remember), so I dragged this to my adb tools folder and still got the same error. I gave up on this method.
Then, I remember finding somewhere about merging all the partitions into one or something of the sort but lost the link. It was also for an older OnePlus model so I wasn't sure if it would've worked anyway.
SO ANYWAY, here I am at a loss. A few things I also want to mention that I've tried if it might help any:
Booted Windows with driver signature enforcement disabled
Tried booting into recovery and it was just black
Flashed twrp but touch wasn't working for some reason
Was able to load into twrp where I could toggle between ADB/fastboot mode, but freezes if I decide to reboot into system (which brings me to twrp's main menu)
Referenced back to the first guide and found a script that Slikkster2k made for powershell, but I think it just continues despite failing on the same step thus making it unsuccessful (not Slikkster's issue of course)
Attempted to find a way to sideload a stock rom.zip but was unsuccessful
All of my adb drivers and OnePlus drivers are up to date
My bootloader is unlocked
I know there's a way to fix this phone because it can still boot. I just don't have enough knowledge or experience so I tend to get lost on certain tutorials/guides. Any help would be appreciated.
Model: LE2110
First of all, you need to provide us with the model of your OP9
Is it Tmobile LE2117? or else? Please check.
zh_eco said:
First of all, you need to provide us with the model of your OP9
Is it Tmobile LE2117? or else? Please check.
Click to expand...
Click to collapse
Right! Of all the things I mentioned, I forgot to list that.
My model is LE2110. Unlocked.
try using the MSM tool in the sticky above.
just make sure you are in EDL mode and that your OnePlus has enought battery power.
Try to use OP9 Pro Indian MSM Tool to get your phone working.
Then flash Indian OP9 MSM Tool..
Unfortunatly I can't find the the MSM tools now as the link is now.
However, you can also give this one a try :
[Locked] Global 11.2.10.10 MSM Tool (added experimental support for Indian variant flashing as well)
This method is outdated. You must use this method or you will run into problems...
forum.xda-developers.com
jmadiaga said:
try using the MSM tool in the sticky above.
just make sure you are in EDL mode and that your OnePlus has enought battery power.
Click to expand...
Click to collapse
I cannot reboot into EDL mode. I forgot how I got up to the part where I could toggle between adb/fastboot so I couldn't reproduce it.
lyx91 said:
I cannot reboot into EDL mode. I forgot how I got up to the part where I could toggle between adb/fastboot so I couldn't reproduce it.
Click to expand...
Click to collapse
Simple. To boot EDL you need to do the folowing, then flash using MSM Tool.
Open the MSM app, select 'Others', and next.
Once you're in the flashing window do the following:
1-plug the usb cable to the phone.
2-plug your phone to the cable and very quickly hold volume + and - and power button.
3-Once you see 'Connected' on the flashing window, Release the buttons.
4-Click on start before the device gets connected (sometimes issues with usb3.0)
To fix Sahara Communication Error:
Simply while the phone is plugged in, hold volume + and - and power button (all at once) till the the device gets disconnected, and then it'll show 'Connected', after that then release the buttons.
Alright. I got everything working and my phone is now back up and running again. Thanks so much!
So now my next question is if my phone is on an Indian ROM now or global? How would I check?
lyx91 said:
Alright. I got everything working and my phone is now back up and running again. Thanks so much!
So now my next question is if my phone is on an Indian ROM now or global? How would I check?
Click to expand...
Click to collapse
Download Oxygen Updater from the Play Store:
Oxygen Updater - Apps on Google Play
Skip staged rollout queues and update your OnePlus device ASAP!
play.google.com
Then Procced till the step where you choose your device name and model.
If the device name was put by default as 'OnePlus 9' then it is Global ROM
If the device name was put by default as 'OnePlus 9 IN' then it is Indian ROM
If the device name was put by default as 'OnePlus 9 EU' then it is European ROM
Alright. Just OnePlus 9 was selected so I'm on Global. Thank you so much for your help!
sometimes there's this thing about spoonfeeding too.
but hey, you got your phone back so congrats.

Xiaomi Mi5 linageos 19.1 bricked after fastboot oem lock ?

Hello everybody,
i'm not new in custom roms, but i have a problem, i can't solve by myself:
I flashed an unlocked Mi5 to linageos 19.1 without problems.
I had the bad idea to relock the bootloader due to security reasons (fastboot oem lock).
Now the device is not booting anymore, i can just see the Mi-Logo flashing very shortly.
I can access fastboot, but can't boot into recovery.
I tried to unlock the device again, but the Mi Unlocker fails and prompts me to go to the developer options in Miui, which is clearly impossible.
Any chance to proceed from fastboot (fastboot oem unlock does not work...) ?
Thanks, Jan
congrats, you succesfully hard bricked your phone. please take it for a walk to the xiaomi service and pay for gettting it fixed. who told you it is a good idea to relock the bootloader with a custom rom installed ?
Fytdyh said:
congrats, you succesfully hard bricked your phone. please take it for a walk to the xiaomi service and pay for gettting it fixed. who told you it is a good idea to relock the bootloader with a custom rom installed ?
Click to expand...
Click to collapse
actually, i remember some banking apps complained about the locked bootloader. I thought i can lock/unlock it in fastboot mode, but looks like i was wrong.
I will give the MiFlash Tool a chance, but i have not much hope...
@Fytdyh: do you think, Xiaomi Service can fix it ?
jever2k said:
actually, i remember some banking apps complained about the locked bootloader. I thought i can lock/unlock it in fastboot mode, but looks like i was wrong.
I will give the MiFlash Tool a chance, but i have not much hope...
@Fytdyh: do you think, Xiaomi Service can fix it ?
Click to expand...
Click to collapse
Make sure if your bootloader is really locked or not using fastboot command
fastboot oem device-info
OR,
fastboot getvar unlocked
If it's not locked, you can simply flash your stock rom using flash tool available for mi. Before downloading a rom from internet, take note of your device info using fastboot command ,
fastboot getvar all
And if bootloader is really locked, you have to flash stock rom from EDL mode. You may have to remove back cover to turn on EDL mode. Your device has snapdragon chipset (Plus point). Watch tutorials about xiaomi edl rom flash - snapdragon. You can go to service centre. If they tell you that you have to replace motherboard, don't be agree. Tell them to flash rom using EDL mode.
Tawsif999 said:
Make sure if your bootloader is really locked or not using fastboot command
fastboot oem device-info
OR,
fastboot getvar unlocked
If it's not locked, you can simply flash your stock rom using flash tool available for mi. Before downloading a rom from internet, take note of your device info using fastboot command ,
fastboot getvar all
And if bootloader is really locked, you have to flash stock rom from EDL mode. You may have to remove back cover to turn on EDL mode. Your device has snapdragon chipset (Plus point). Watch tutorials about xiaomi edl rom flash - snapdragon. You can go to service centre. If they tell you that you have to replace motherboard, don't be agree. Tell them to flash rom using EDL mode.
Click to expand...
Click to collapse
looks like i am getting closer... located the two EDL points to short during PC connection, installed the Qualcomm serial driver. For a second i see the device appearing as COM6 but then it disappears again and is not availiable anymore.
Any hints ?
Thanks again, Jan
jever2k said:
looks like i am getting closer... located the two EDL points to short during PC connection, installed the Qualcomm serial driver. For a second i see the device appearing as COM6 but then it disappears again and is not availiable anymore.
Any hints ?
Thanks again, Jan
Click to expand...
Click to collapse
Try this to solve the issue.
If it doesn’t help, read this to boot properly into edl
jever2k said:
Hello everybody,
i'm not new in custom roms, but i have a problem, i can't solve by myself:
I flashed an unlocked Mi5 to linageos 19.1 without problems.
I had the bad idea to relock the bootloader due to security reasons (fastboot oem lock).
Now the device is not booting anymore, i can just see the Mi-Logo flashing very shortly.
I can access fastboot, but can't boot into recovery.
I tried to unlock the device again, but the Mi Unlocker fails and prompts me to go to the developer options in Miui, which is clearly impossible.
Any chance to proceed from fastboot (fastboot oem unlock does not work...) ?
Thanks, Jan
Click to expand...
Click to collapse
Flash stock recovery for your device via fastboot, then you should be able to boot into recovery or flash a stock system.img or your full stock firmware for your device, then unlock the bootloader(fastboot oem unlock) then flash TWRP and LineageOS again.
Droidriven said:
Flash stock recovery for your device via fastboot, then you should be able to boot into recovery or flash a stock system.img or your full stock firmware for your device, then unlock the bootloader(fastboot oem unlock) then flash TWRP and LineageOS again.
Click to expand...
Click to collapse
But he mentioned, bootloader fails to unlock. Actually it's hard brick(Even though he can boot into fastboot,the bootloader is locked. So nothing to do with fastboot).Without unlocked bootloader, flashing something from fastboot will hard brick his device completely (Will not be able to boot into fastboot). Or flashing will be denied
Tawsif999 said:
Try this to solve the issue.
If it doesn’t help, read this to boot properly into edl
Click to expand...
Click to collapse
OK, next level reached. The phone is connected to the com-port and the correct driver is displayed.
The whole procedure is a bit unstable, i need to connect the phone several times, to get a stable EDL mode.
The Xiaomi Flasher recognizes the phone, but flashing does not succeed. Sometimes it's not able to receive a kind of Hello message, sometimes it displays "object reference not set to an instance of an object".
I also downloaded the QPST flasher, but have no plan, how to use it.
I'll keep on trying!
Thanks to all, who helped me to reach this point!
jever2k said:
OK, next level reached. The phone is connected to the com-port and the correct driver is displayed.
The whole prcedure is a bit unstable, i need to connect the phone several times, to get a stable EDL mode.
The Xiaomi Flasher recognizes the phone, but flashing does not succeed. Sometimes it's not able to receive a kind of Hello message, sometimes it displays "object reference not set to an instance of an object".
I also downloaded the QPST flasher, but have no plan, how to use it.
I'll keep on trying!
Thanks to all, who helped me to reach this point!
Click to expand...
Click to collapse
I found something new by watching this video. Maybe you don't understand hindi(India is our relative country, so I do).
Lemme explain,
This guy's xiaomi k20 pro phone hard bricked with a locked bootloader. He tried a lot to repair it(by deep flash or something idk). But everything failed. At last he came to this step of EDL mode. But xiaomi Edl mode flash requires an "AUTHORIZED MI ACCOUNT" . Xiaomi people pay to get authorized account license that normal users don't have. So the guy contacted with them on a telegram page called "Mod Edit: Name Removed" . They told him that they will repair his phone via teamviewer. All he had to do is pay some $ & connect phone in edl mode. Rest of the things were done by them. And his phone repaired successfully! (Watch the video from 4:00)
So In his video, he is telling to go to that page & contact with "Mod Edit: Name Removed" there. They take 20-25$ (depends on device). If you tell them you're from Mod Edit: Name Removed's video, they will give some discount
Tawsif999 said:
But he mentioned, bootloader fails to unlock. Actually it's hard brick(Even though he can boot into fastboot,the bootloader is locked. So nothing to do with fastboot).Without unlocked bootloader, flashing psomething from fastboot will hard brick his device completely (Will not be able to boot into fastboot). Or flashing will be denied
Click to expand...
Click to collapse
Yeah, I jumped the gun and posted before seeing all the replies in the thread describing their whole scenario, should've known better.
They obviously need a hardware approach, i.e. JTAG/RIFF/Octoplus or replace motherboard.
Tawsif999 said:
I found something new by watching this video. Maybe you don't understand hindi(India is our relative country, so I do).
Lemme explain,
This guy's xiaomi k20 pro phone hard bricked with a locked bootloader. He tried a lot to repair it(by deep flash or something idk). But everything failed. At last he came to this step of EDL mode. But xiaomi Edl mode flash requires an "AUTHORIZED MI ACCOUNT" . Xiaomi people pay to get authorized account license that normal users don't have. So the guy contacted with them on a telegram page called "Mod Edit: Name Removed" . They told him that they will repair his phone via teamviewer. All he had to do is pay some $ & connect phone in edl mode. Rest of the things were done by them. And his phone repaired successfully! (Watch the video from 4:00)
So In his video, he is telling to go to that page & contact with "Mod Edit: Name Removed" there. They take 20-25$ (depends on device). If you tell them you're from Mod Edit: Name Removed's video, they will give some discount
Click to expand...
Click to collapse
Thanks for research!
Meanwhile, i stopped using Windows due to all the caveats and switched to reliable Debian Linux on a different machine.
Again it takes 10 attempts to get into EDL Mode.
I used qdl (Qualcomm downloader for Linux) with all the firehose, raw and patch .xmls
Code:
sudo ./qdl --debug --storage ufs --include . prog_ufs_firehose_8996_ddr.elf partition.xml rawprogram0.xml rawprogram1.xml rawprogram2.xml rawprogram3.xml rawprogram4.xml rawprogram5.xml patch0.xml patch1.xml patch2.xml patch3.xml patch4.xml patch5.xml
Output looked like some stuff was written, at the end i receive:
Code:
qdl: failed to write: Connection timed out
However, the phone is now dead as can be without fastboot working any more.
Maybe i'll give it another try, or get a used Mainboard...
Best regards, Jan
jever2k said:
Thanks for research!
Meanwhile, i stopped using Windows due to all the caveats and switched to reliable Debian Linux on a different machine.
Again it takes 10 attempts to get into EDL Mode.
I used qdl (Qualcomm downloader for Linux) with all the firehose, raw and patch .xmls
Code:
sudo ./qdl --debug --storage ufs --include . prog_ufs_firehose_8996_ddr.elf partition.xml rawprogram0.xml rawprogram1.xml rawprogram2.xml rawprogram3.xml rawprogram4.xml rawprogram5.xml patch0.xml patch1.xml patch2.xml patch3.xml patch4.xml patch5.xml
Output looked like some stuff was written, at the end i receive:
Code:
qdl: failed to write: Connection timed out
However, the phone is now dead as can be without fastboot working any more.
Maybe i'll give it another try, or get a used Mainboard...
Best regards, Jan
Click to expand...
Click to collapse
jever2k said:
Thanks for research!
Meanwhile, i stopped using Windows due to all the caveats and switched to reliable Debian Linux on a different machine.
Again it takes 10 attempts to get into EDL Mode.
I used qdl (Qualcomm downloader for Linux) with all the firehose, raw and patch .xmls
Code:
sudo ./qdl --debug --storage ufs --include . prog_ufs_firehose_8996_ddr.elf partition.xml rawprogram0.xml rawprogram1.xml rawprogram2.xml rawprogram3.xml rawprogram4.xml rawprogram5.xml patch0.xml patch1.xml patch2.xml patch3.xml patch4.xml patch5.xml
Output looked like some stuff was written, at the end i receive:
Code:
qdl: failed to write: Connection timed out
However, the phone is now dead as can be without fastboot working any more.
Maybe i'll give it another try, or get a used Mainboard...
Best regards, Jan
Click to expand...
Click to collapse
That's expensive. Anyway, it will be better if you don’t waste time on this. Just go for 3rd party help(From that official telegram channel or service centre). That will cost less
Tawsif999 said:
That's expensive. Anyway, it will be better if you don’t waste time on this. Just go for 3rd party help(From that official telegram channel or service centre). That will cost less
Click to expand...
Click to collapse
Thanks Tawsif for the good hints and links.
I don't really depend on the phone, so i will keep trying.
It's not wasted time, it's mainly learning new stuff and improving skills.
I believe, i'm not too far away and if it works, it's the best satisfaction.
If not, i bricked an old Mi 5.
All the best,
Jan

Categories

Resources