Related
Hello,
I tried to flash Android 4.4 with an updated version of TWRP.
Once the installation was done, my tab hangs at the bootscreen.
I'm seeing the asus logo, but without the text "This device is unlocked"
Lucky me, i have the NVflash, and the blobs.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
and the imgs
Also i'm able to get in the APX mode
Code:
D:\Tablet Brick safe\tf201_nvflashpack>wheelie --blob blob.bin
Wheelie 0.1 - Preflight for nvflash.
Copyright (c) 2011-2012 androidroot.mobi
========================================
Waiting for device in APX mode...
[=] Chip UID: 0x15d07875164040c
[=] RCM Version: 0x30001
[=] CPU Model: Tegra 3
[+] Sending bootloader...
Sending file: 100 %
[!] Done - your device should now be ready for nvflash
So what should i do next?
Thanks dor the help.
brantje said:
So what should i do next?
Thanks dor the help.
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=1927818
And boom goes the dynamite..
wickid_d said:
http://forum.xda-developers.com/showthread.php?t=1927818
And boom goes the dynamite..
Click to expand...
Click to collapse
If I don't have blob.bin, can I unbrick my tf201 ?
How can I get this file ?
darkjeff said:
If I don't have blob.bin, can I unbrick my tf201 ?
How can I get this file ?
Click to expand...
Click to collapse
With the lack of information, I'll tell you it depends on the kind of brick. If it's a soft brick and you still have access to the fastboot menu, yes, but if it's a hard brick to where you don't have that access, no. Your blob.bin is exclusive to your board, and you have to go through the nvflash process to get it. It's kind of like a fingerprint. I've even contacted one of the nvidia developers about it before replacing my board. I hope that clarifies things a little.
wickid_d said:
With the lack of information, I'll tell you it depends on the kind of brick. If it's a soft brick and you still have access to the fastboot menu, yes, but if it's a hard brick to where you don't have that access, no. Your blob.bin is exclusive to your board, and you have to go through the nvflash process to get it. It's kind of like a fingerprint. I've even contacted one of the nvidia developers about it before replacing my board. I hope that clarifies things a little.
Click to expand...
Click to collapse
I updated CM but it did not boot on. I has access to fastboot but no more after reboot. I don't know why now my tab is in loop boot.
darkjeff said:
I updated CM but it did not boot on. I has access to fastboot but no more after reboot. I don't know why now my tab is in loop boot.
Click to expand...
Click to collapse
Have you tried using adb to reboot to it? 'adb reboot-bootloader'? Even if CM (or any rom, for that matter) is just barely starting to boot, you should be able to do this. Once you get to fastboot, follow this guide:
https://www.androidroot.mobi/pages/guides/tegra3-guide-nvflash-jellybean/
And then follow the guide in my previous post in this thread and that will at the very least get you back to stock.
And remember, whenever you flash something in fastboot, no matter what it is, use the option '-i 0x0b05'.. Like for recovery 'fastboot -i 0x0b05 flash recovery (name of recovery here)' This will save you more headaches.
Trouble with generating blob.bin with Flatline_tf201.img / CWM
Moved to proper thread
brantje said:
Hello,
I tried to flash Android 4.4 with an updated version of TWRP.
Once the installation was done, my tab hangs at the bootscreen.
I'm seeing the asus logo, but without the text "This device is unlocked"
Lucky me, i have the NVflash, and the blobs.
So what should i do next?
Thanks dor the help.
Click to expand...
Click to collapse
Did you solve it? I think i am in same trouble.
vanquishe said:
Did you solve it? I think i am in same trouble.
Click to expand...
Click to collapse
Mot yet l. Will look into it this weekend. Quite busy with work.
Sent from my SM-N9005 using Tapatalk
I am in the same fix. Here is what I did so far. I hope someone can provide some advice.
1. Stock JB, newest from OTA, untouched
(im from japan, so i think its a JP SKU)
2. Followed guide to unlock + backup blobs + enable nvflash for JB
http://matthill.eu/android/transformer-prime-tf201-jellybean-nvflash/
3. Rooted with motochopper
4.Followed guide to install: [ROM][4.4.2 CM-11.0][Cyanogenmod 11.0 Unofficial][KOT49H][20/02/14]
http://forum.xda-developers.com/showthread.php?t=2589554
4.1 Downloaded and transfer following files to sdcard folder
cm-11-20140220-UNOFFICIAL-tf201
pa_gapps-modular-mini-4.4.2-20140227-signed
4.2 Downloaded recovery.img.SOS 2013-12-29 08:42
http://forum.xda-developers.com/devdb/project/?id=2229#downloadsfastboot -i 0xb05 flash recovery recovery.img.SOS
4.3 fastboot -i 0xb05 flash recovery recovery.img.SOS
(I did notice it was 0xb05 and not 0x0b05 but i copied paste exactly)
4.4 restart TF, "power+down", select RCK
4.5 Did the following in recovery menu:
a. Backup, but did it to sdcard instead of ext storage
b. wipe data/factory
c. wipe cache partition
d. wip dalvik cache
e. install zip: cm-11-20140220-UNOFFICIAL-tf201
f. install zip: pa_gapps-modular-mini-4.4.2-20140227-signed
At step f, the screeen said somthing about insufficient space.
So i thought i would try without GAPPS and selected reboot system now.
5. Got stuck at Asus word in middle of screen
a. Bottom right shows "Powered by nvidia terga"
b. Oddly, top left no longer displays "device is unlocked"
6. Tried to reboot (holding power long time)
a. Screen black out, vibrate
b. Tried to get to fastboot (power + down) but the icons never show
c. Constantly stuck with Asus screen
7. Attempted to follow guide:
[GUIDE] nvFlash General Users Guide [Unbrick/Recover/Downgrade/Upgrade]- TF201
http://forum.xda-developers.com/showthread.php?t=1927818&highlight=nvflash
a. "Power + up", apx device shows in windows 7 device manager
b. wheelie.exe --blob blob.bin
c. nvflash.exe -r --download 4 bootloader.EBT
(bootloader.ebt is the output i got previously from flatline)
(my bootloader.ebt is 1,558,608 bytes)
(blob.edt from TF201-JB-10.4.2.15-Unblobed is 1,558,589 bytes)
d. This is the log
log: C:\nvflash>nvflash.exe -r --download 4 bootloader.ebt
Nvflash v1.13.87205 started
[resume mode]
sending file: bootloader.ebt
bootloader.ebt sent successfully
e. Device went black screen, device manager does not show APX
f. I power the device up but shows black screen. "power + down" still does not work.
g. However, "power + up" still get APX device in windows.
---------- Post added at 10:40 AM ---------- Previous post was at 09:51 AM ----------
Im thinking I could try either of the following:
Option 1:
1. Follow this [GUIDE] nvFlash General Users Guide [Unbrick/Recover/Downgrade/Upgrade]- TF201
http://forum.xda-developers.com/showthread.php?t=1927818&highlight=nvflash
but use the boot.ebt from TF201-JB-10.4.2.15-Unblobed
and try to go as far as I can and pray for the best
(what puzzles me is that instructions dun seem to have anything to do with the unlock-token.img,bricksafe.img,factory-config.img)
Option 2:
1. Follow this [NvFlash] [Recovery] With [Generated Blobs][TF300T]
http://forum.xda-developers.com/showthread.php?p=48948717&highlight=bricksafe+img#post48948717
seems to talk about unlock-token.img,bricksafe.img,factory-config.img
but it is for tf300T
also, i have no idea how to get the following file
"this is how we got around it.download the correct .blob from TWRP rename it twrp.blob then run
"Code: nvflash -r --download 5 twrp.blob"
Option 3:
1. Sit and wait for help... no one on MIRC seems to be responding T T
Any ideas?
vanquishe said:
I am in the same fix. Here is what I did so far. I hope someone can provide some advice.
Any ideas?
Click to expand...
Click to collapse
Ok, first off, it IS 0x0b05.. 0b05 is the vendor/hardware hexadecimal ID number, which is why -i (short for ID) when using fastboot. You can verify this by hooking the tablet up to a linux environment and running 'lsusb' in terminal and looking for the Asus line. In Windows, I'm not exactly sure why the 0x gets added at the front. I guess it's just how Windows handles hardware IDs. (source: https://www.androidroot.mobi/pages/guides/tegra3-guide-nvflash-jellybean/ part: (Please note that for transformer tablets the fastboot command might require the option "-i 0x0b05".))
Second, you won't be able to install the full PA Gapps along with CM11 - you're right, there isn't enough room. Use either the micro or mini package. This is talked about in the CM11 thread you mentioned, where I have been frequenting, as of late.
Third, and finally, what exactly are you waiting on? You've done everything correctly as far as I can tell. Just start the process over with reinstalling stock via this guide:
http://forum.xda-developers.com/showthread.php?t=1927818 and you can either flash TWRP through nvflash mode like you did (good job on that ), or via fastboot, and go from there. Whether it shows 'this device is unlocked' or not, at this point, shouldn't matter.. You've run through the nvflash process and created your blob.bin along with the other files.
I hope this helps.
Hi Mates,
Will start looking into it now.
As long i can get TWRP i'm happy, because then i i'm not far from installing a custom rom.
14:55 - Tablet was empty its charging now
16:27 - I'm screwd i think...
D:\Downloads\Tablet Brick safe\Tablet Brick safe\tf201_nvflashpack>wheelie.exe -
-blob blob.bin
Wheelie 0.1 - Preflight for nvflash.
Copyright (c) 2011-2012 androidroot.mobi
========================================
Waiting for device in APX mode...
[=] Chip UID: 0x15d07875164040c
[=] RCM Version: 0x30001
[-] Error 3 receiving response from command
Will keep this post updated about my progress.
vanquishe said:
I am in the same fix. Here is what I did so far. I hope someone can provide some advice.
1. Stock JB, newest from OTA, untouched
(im from japan, so i think its a JP SKU)
2. Followed guide to unlock + backup blobs + enable nvflash for JB
http://matthill.eu/android/transformer-prime-tf201-jellybean-nvflash/
3. Rooted with motochopper
4.Followed guide to install: [ROM][4.4.2 CM-11.0][Cyanogenmod 11.0 Unofficial][KOT49H][20/02/14]
http://forum.xda-developers.com/showthread.php?t=2589554
4.1 Downloaded and transfer following files to sdcard folder
cm-11-20140220-UNOFFICIAL-tf201
pa_gapps-modular-mini-4.4.2-20140227-signed
4.2 Downloaded recovery.img.SOS 2013-12-29 08:42
http://forum.xda-developers.com/devdb/project/?id=2229#downloadsfastboot -i 0xb05 flash recovery recovery.img.SOS
4.3 fastboot -i 0xb05 flash recovery recovery.img.SOS
(I did notice it was 0xb05 and not 0x0b05 but i copied paste exactly)
4.4 restart TF, "power+down", select RCK
4.5 Did the following in recovery menu:
a. Backup, but did it to sdcard instead of ext storage
b. wipe data/factory
c. wipe cache partition
d. wip dalvik cache
e. install zip: cm-11-20140220-UNOFFICIAL-tf201
f. install zip: pa_gapps-modular-mini-4.4.2-20140227-signed
At step f, the screeen said somthing about insufficient space.
So i thought i would try without GAPPS and selected reboot system now.
5. Got stuck at Asus word in middle of screen
a. Bottom right shows "Powered by nvidia terga"
b. Oddly, top left no longer displays "device is unlocked"
6. Tried to reboot (holding power long time)
a. Screen black out, vibrate
b. Tried to get to fastboot (power + down) but the icons never show
c. Constantly stuck with Asus screen
7. Attempted to follow guide:
[GUIDE] nvFlash General Users Guide [Unbrick/Recover/Downgrade/Upgrade]- TF201
http://forum.xda-developers.com/showthread.php?t=1927818&highlight=nvflash
a. "Power + up", apx device shows in windows 7 device manager
b. wheelie.exe --blob blob.bin
c. nvflash.exe -r --download 4 bootloader.EBT
(bootloader.ebt is the output i got previously from flatline)
(my bootloader.ebt is 1,558,608 bytes)
(blob.edt from TF201-JB-10.4.2.15-Unblobed is 1,558,589 bytes)
d. This is the log
log: C:\nvflash>nvflash.exe -r --download 4 bootloader.ebt
Nvflash v1.13.87205 started
[resume mode]
sending file: bootloader.ebt
bootloader.ebt sent successfully
e. Device went black screen, device manager does not show APX
f. I power the device up but shows black screen. "power + down" still does not work.
g. However, "power + up" still get APX device in windows.
---------- Post added at 10:40 AM ---------- Previous post was at 09:51 AM ----------
Im thinking I could try either of the following:
Option 1:
1. Follow this [GUIDE] nvFlash General Users Guide [Unbrick/Recover/Downgrade/Upgrade]- TF201
http://forum.xda-developers.com/showthread.php?t=1927818&highlight=nvflash
but use the boot.ebt from TF201-JB-10.4.2.15-Unblobed
and try to go as far as I can and pray for the best
(what puzzles me is that instructions dun seem to have anything to do with the unlock-token.img,bricksafe.img,factory-config.img)
Option 2:
1. Follow this [NvFlash] [Recovery] With [Generated Blobs][TF300T]
http://forum.xda-developers.com/showthread.php?p=48948717&highlight=bricksafe+img#post48948717
seems to talk about unlock-token.img,bricksafe.img,factory-config.img
but it is for tf300T
also, i have no idea how to get the following file
"this is how we got around it.download the correct .blob from TWRP rename it twrp.blob then run
"Code: nvflash -r --download 5 twrp.blob"
Option 3:
1. Sit and wait for help... no one on MIRC seems to be responding T T
Any ideas?
Click to expand...
Click to collapse
Exact same boat, so will try and look for answers now.
Where on mirc, maybe we can help each other.
I will just sit quietly here and wait for anyone with an answer.
(Yes, me too)
vanquishe said:
(what puzzles me is that instructions dun seem to have anything to do with the unlock-token.img,bricksafe.img,factory-config.img)
Click to expand...
Click to collapse
Yes, that.
I would like to write more, but you have actually posted what I did. However, I found a hint in a thread where someone hat a wheelie that did not work, and another version that did. Unfortunately, I was slightly drunk and cannot find it anymore.
Xerxes-3.0 said:
I will just sit quietly here and wait for anyone with an answer.
(Yes, me too)
Yes, that.
I would like to write more, but you have actually posted what I did. However, I found a hint in a thread where someone hat a wheelie that did not work, and another version that did. Unfortunately, I was slightly drunk and cannot find it anymore.
Click to expand...
Click to collapse
I had help from a nice person from IRC. Now my TF201 is up and running again.
I will up the process he guided me once I get home later.
Please thank lj50036 from the CMB team.
It was him that guided me thru the process to unbrick my TP.
-----------------------------------------------
Bricked situation:
1. Last activity before brick: Stock with latest OTA -> Flatline (OK) -> Motochopper (OK) -> Flash CWM recovery (OK) -> Unofficial CM11 (Reboot = bricked)
2. Stuck at ASUS logo on power up/reboot. (Device is unlocked no longer shows on top left corner)
3. Cannot get to fastboot (power + dwn = stuck at ASUS logo)
4. However, can invoke APX mode (power + up = APX device detects in windows)
-----------------------------------------------
Preparation:
1. All the output files from the flatline (blob.bin, unlock-token, bricksafe, factory-config etc)
2. Fastboot,adb,nvflash exe (you should have all these when you did flatline)
3. Enough battery (I left it overnight to charge, since I had no way of checking batt)
4. The stock firmware from ASUS (you should get the same version as the one you had prior to brick)
-----------------------------------------------
Actual process:
1. I was told to put all the files from fastboot,nvflash etc in C root (ie .exe,.img,.dlls, bin etc). I think it is not a must, as long as you have all the files together and dir has no spaces.
2. Unzip the firmware file from ASUS.
My case: the file name is JP_epaduser_10_4_2_18UpdateLauncher, extracted to find JP_epad-user-10.4.2.18. Extract again to find a file called Blob, which is about 500mb.
3. Copy the blob file to C root
4. Open CMD as admin. Make sure you do so as admin.
5. Goto C root, type: cd\
6. Just make sure you can execute the following exe: fastboot, adb, nvflash, type: fastboot
The commands should output the help related info....ie parameters etc
7. Now boot you tablet into apx conneted to your pc from tablet to pc no hubs docks> Device manager shows Asus tranformer prime APX interface.
8. Type: wheelie --blob blob.bin
My output:
C:\>wheelie --blob blob.bin
Wheelie 0.1 - Preflight for nvflash.
Copyright (c) 2011-2012 androidroot.mobi
========================================
Waiting for device in APX mode...
[=] Chip UID: 0x15c7d7a49042111
[=] RCM Version: 0x30001
[=] CPU Model: Tegra 3
[+] Sending bootloader...
Sending file: 100 %
[!] Done - your device should now be ready for nvflash
My tablet screen shows:
top left: entering nvflash recovering mode / nv3p server
chip uid: 015c7d7a49042111
center: Asus
bottom right owr by...
9. Now it may reboot at the end of this just get back to apx mode on your tablet.
Type: nvflash -r --download 7 unlock-token.img
Output:
C:\>nvflash -r --download 7 unlock-token.img
Nvflash v1.13.87205 started
[resume mode]
sending file: unlock-token.img
unlock-token.img sent successfully
*My device black out. So i rebooted to APX again as instructed.
10. Type: wheelie --blob blob.bin
11. Type: nvflash -r --download 14 factory-config.img
Output:
C:\>nvflash -r --download 14 factory-config.img
Nvflash v1.13.87205 started
[resume mode]
sending file: factory-config.img
factory-config.img sent successfully
*My device black out. So i rebooted to APX again as instructed. An did wheelie again
12. Type: nvflash -r --rawdevicewrite 0 2944 bricksafe.img
Output:
C:\>nvflash -r --rawdevicewrite 0 2944 bricksafe.img
Nvflash v1.13.87205 started
[resume mode]
sending file: bricksafe.img
bricksafe.img sent successfully
*device did not blackout this time. So no need to reboot.
13. Type: nvflash -r --go
Output:
C:\>nvflash -r --go
Nvflash v1.13.87205 started
[resume mode]
14. Power + DWN to try to get to fastboot. Select the USB icon.
*windows device manager should detect fast boot interface
*confirm this by typing: fastboot devices
*my output was: 015c7d7a49042111 fastboot
15. Type: fastboot erase system
Output:
C:\>fastboot erase system
******** Did you mean to fastboot format this partition?
erasing 'system'...
OKAY [ 2.671s]
finished. total time: 2.671s
16. Type: fastboot erase recovery
Output:
C:\>fastboot erase recovery
erasing 'recovery'...
OKAY [ 1.929s]
finished. total time: 1.929s
17. Type: fastboot -w
Output:
C:\>fastboot -w
erasing 'userdata'...
OKAY [ 50.110s]
formatting 'userdata' partition...
Creating filesystem with parameters:
Size: 61980278784
Block size: 4096
Blocks per group: 32768
Inodes per group: 8192
Inode size: 256
Journal blocks: 32768
Label:
Blocks: 15131904
Block groups: 462
Reserved block group size: 1024
Created filesystem with 11/3784704 inodes and 283616/15131904 blocks
sending 'userdata' (141195 KB)...
Created filesystem with 11/3784704 inodes and 283616/15131904 blocks
sending 'userdata' (141195 KB)...
writing 'userdata'...
OKAY [ 26.179s]
FAILED (command write failed (Unknown error))
finished. total time: 76.878s
*dont be bothered by the error
18. Type: fastboot devices
Output:
C:\>fastboot devices
???????????? fastboot
19. Reboot and get back to fastboot again, check that your device is detected by Type: fastboot devices
Output:
C:\>fastboot devices
015c7d7a49042111 fastboot
20.fastboot erase boot
Output:
C:\>fastboot erase boot
erasing 'boot'...
OKAY [ 1.874s]
finished. total time: 1.874s
21.Type: fastboot erase misc
Output:
C:\>fastboot erase misc
erasing 'misc'...
OKAY [ 0.978s]
finished. total time: 0.978s
22. Type: fastboot erase cache
Output:
C:\>fastboot erase cache
******** Did you mean to fastboot format this partition?
erasing 'cache'...
OKAY [ 1.713s]
finished. total time: 1.713s
23. Next cmd takes long time. Type: fastboot -i 0x0B05 flash system blob
* During the writing process of this step you will get the blue bar on your screen.....
Output:
C:\>fastboot -i 0x0B05 flash system blob
erasing 'system'...
OKAY [ 2.225s]
sending 'system' (537604 KB)...
OKAY [ 90.363s]
writing 'system'...
OKAY [130.010s]
finished. total time: 222.600s
24. Type: fastboot -i 0x0B05 reboot
*this reboot should bring you to stock rom
*will take some time, just be patient
*does not matter if you have usb connected or not
-----------------------------------------------
If you reach here, you should have a fresh TP with stock, except its unlocked.
Hope this helps.
This is great, thank you.
I actually wanted to do this yesterday evening when i found out that the prime has run out of battery (because I'm a genius), but I will do this today.
Ok, it did not work from scratch, but then, I had already another ROM so I made things difficult.
With your checklist, I got to step 13, but still only APX mode. So i did some guessing work.
What I did (in short, assuming I have everything till your step 7 and doing the wheelie everytime):
a) nvflash -r --download 4 bootloader.ebt
b) nvflash -r --download 7 unlock-token.img
c) nvflash -r --download 5 recovery.img.SOS (the modified CWM from namidairo for his unofficial CM11)
d) nvflash -r --rawdevicewrite 0 2944 bricksafe.img (no wheelie afterwards)
e) nvflash -r --go
Now I DO have the option for fastboot but no recovery (unrecoverable boot loader error).
Will continue frfom here.
===
Next: Another bootloader. I tried the blob.EBT from the stock ROM and with this, it actually tries to boot by itself (showing "device is unlocked").
===
Fine. I repeated wheelie and step c), got the blue bar, now I have thew modified CWM v6.0.4.5. Running. Yay me.
Okay, after one try with CM11 ended me where I was starting, I came back to CWM with step a) and b), and now I'm going to bed.
I am stupid and skipped flashing the stock ROM.
Stupid me. Now it works. Weee!
Did I say thank you? I think just one time. Thank you for posting thes extrensive get-youself-out-of-the-dirt-manual.
This thread has the most important info for the TFP I've seen. This info should be shared out to the Brick recovery thread (and linked to the custom ROM threads)! I've been thinking of moving from Androwook to CM11, and the only way I would try it is with a really good grasp on recovering the blob files. So again thanks, this is now bookmarked to my favorites. And especially a huge thanks to Xerxes-3.0 and vanquishe. You both just saved me from my future brick!
The phone is OPPO r7 plus(china mobile).After I make a CM-12.1 ROM for my phone,I flash the Rom to my phone.But my phone can not enter into the new system,and it just looping boot animaton,so I executed "adb shell >> /sdcard/log.txt" to get log,some mistakes are
I/aee/core_forwarder( 3517): compress_files: complete save fileROCESS_COREDUMP with size 121638912 to /data/core/zcore-3515.zip
W/art ( 3502): Could not create image space with image file '/system/framework/boot.art'. Attempting to fall back to imageless running. Error was: Failed to generate image '/data/dalvik-cache/arm/[email protected]@boot.art': Failed execv(/system/bin/dex2oat --image=/data/dalvik-cache/arm/[email protected]@boot.art --dex-file=/system/framework/core-libart.jar --dex-file=/system/framework/conscrypt.jar --dex-file=/system/framework/okhttp.jar --dex-file=/system/framework/core-junit.jar --dex-file=/system/framework/bouncycastle.jar --dex-file=/system/framework/ext.jar --dex-file=/system/framework/framework.jar --dex-file=/system/framework/telephony-common.jar --dex-file=/system/framework/voip-common.jar --dex-file=/system/framework/ims-common.jar --dex-file=/system/framework/mms-common.jar --dex-file=/system/framework/android.policy.jar --dex-file=/system/framework/apache-xml.jar --dex-file=/system/framework/oppo-framework.jar --dex-file=/system/framework/mediatek-common.jar --dex-file=/system/framework/mediatek-framework.jar --
How can I resolve these problems?
A few years ago, my bro has set a pattern lock for his old "G-Tide E66", then the phone was left abandoned. Now, I need this phone for some reason.
Info:
1- USB Debugging disabled.
2-Volume Up/Down corrupted.
3-Wifi / Mobile data are turned off.
Details:
- I get to the pattern screen.
-Andriod: Chocolate II
-Drop down menu, not working from the lock screen.
- No shareit to try open Wifi glitch.
Trials:
1-I tried looking for a pinhole to reset the phone ( Couldn't find where it is.)
2- Using Andriod Debug Bridge (ADB):
adb reboot recovery ( I got No command, Fixed it by holding the power button. then stuck in the recovery with corrupted volume down, I thought of triggering the key event from adb)
adb shell input keyevent 25 (25 = VOLUME_DOWN) ( I got this error: - exec '/system/bin/sh' failed: No such file or directory (2) nRet(-1) - Not sure about solution so I thought of another method.)
3-Using FastBoot:
adb reboot bootloader ( the phone reboots in recovery mode)
fastboot devices ( the device shows)
fastboot -w ( Loading for about 9 hours in "erasing 'user data'...." , I got this error: "FAILED TO read user data too many links" , I saw suggestions about rebooting the device, PC connecting to another socket ( In my case I have 5 , 2 of which are SS v3) triple failure.)
Other manual erases like:
fastboot erase cache (fail too).
4- Using Android Multi Tools v1.02b FAISAL JEE from SE-Thiland.
Reset Face/PIN Lock : rm failed for /data/system/password.key, Permission denied
Reset Face/Gesture Lock: rm failed for /data/system/gesture.key, Permission denied
Reset GMail:
rm failed for /data/data/com.android.providers.settings/databases/settings.db, Permission denied
rm failed for /data/data/com.android.providers.settings/databases/settings.db-shm, Permission denied
rm failed for /data/data/com.android.providers.settings/databases/settings.db-wal, Permission denied
Wipe Data/cache:
erasing 'cache' (forever.)
Wipe Data:
Wiping /data
Error opendir'ing /data 'Permission denied'
Done wiping /data
5- Looking for G-Tide reset code , I failed too ( Found None and I got Not Emergency number pop up).
6- Using the wisdom " When you are stuck , start to F***" , I started typing random ****, eventually failed too.
7- Calling 999 and trying to unlock fails.
8- Rooting using superSU
I tried this command not sure if correct:
adb install <PATH of SuperSU.apk>
"com.noshufou.android.su.apk"
I got success and not sure what to do next.
9- Recovery img:
fastboot flash recovery < RECVERY IMG>
I used this
cm-13.0-20160901-NIGHTLY-d851-recovery.img
Result:
sending 'recovery' (11648 KB)...
OKAY [ 0.373s]
writing 'recovery'...
FAILED (remote:
partition 'recovery' not support flash)
finished. total time: 0.392s
10- MirrorGO software.
11- Google Android Manager , apparently no internet so no luck too.
12- <I didn't try this> Installing a ROM
not really sure if that will work or screw everything, any ideas and how to install ?
is it ?
adb install <PATH of ROM.zip>
NOTE: I know the phone is dirt cheap , but I have to unlock it whatever the hell I do.
NOTE: If you think you can help through operating my PC through TeamViewer, give it a try.
I will connect the phone and you do the job.
NOTE: It seems like I have a masterpiece no info regarding E66, like the company created a single device.
Thanks in advance.
I need help to root my Aligator S5065 Duo phone. It ha Andoid 7.0 and the chipset is Mediatek MT6580.
Here is some info from the phone:
BB Chip : mt6580
MS Board. : ALIGATORS5065
Build Time : Tue Jan 23 15:35:41 CST 2018
Krenel Ver. : 3.18.35+ ([email protected]) (gcc version 4.8 (GCC)) #2 SMP PREEMPT Tue Jan 23 16:11:14 CST 2018
Android Ver. : 7.0
SW Ver. : alps-mp-n0.mp2-V1-droi6580.weg.n
Custom Build Verno. : unknown
IMEI1 : XXX
IMEI2 : XXX
Modem Ver. ALIGATOR_S5065_OS_1.1_2018 0123
Bar code : 010901MT000000000000003891_155648
The idea was:
1) make a full backup using MTK Droid Tool
2) flash TWRP using SP Flash Tool
3) boot TWRP and install Magisk
Problems:
1) MTK Droid Tool v2.5.3. doesn't support this chipset and I didn't found a newer version - so no full backup
I've tried to download a stock ROM or a full backup.
I have found MT6580__ALIGATOR__ALIGATOR_S5065__alps-mp-n0.mp2-V1_droi6580.weg.n__Android_7.0.ispff but it seems to need Infinity CM2 Dongle for flashing, which I don't own.
I have also found ALIGATOR S5065 – 7.0_MT6580_WL581M.LG.ALIG.HB.N.F.S12.B18.0927.V3.02_OS_1.1_20170927.zip which seems to be usable but not exactly the same as I have in my phone, at least it contains a scatter file. With the help of this scatter file I have I've read back my phone but the read imgs are considerably bigger, than the original ones in the zip - that doesn't seem right?
2) I have downloaded TWRP_3.2.3-0_20180803_UNOFFICIAL_MT6580_N.zip which should be a TWRP recovery for my chipset and the same kernel version, so I hoped it could work. But when trying to flash it with SP Flash Tool I get "PMT changed for the ROM" error message. The suggested solution for this error seem to be very risky (formating the phone, atc.), so I didn't dare to try ...
Now I'm stuck and I don't know how to proceed.
Any help would be really appreciated
Some progress:
I got a custom TWRP recovery image from Matty1993 <- thank you very much
I flashed it using adb and fastboot:
adb devices - successfully listed my device
adb reboot bootloader
fastboot flash recovery c:\adb\recovery.img - got this error message: "FAILED (remote: 'not allowedin locked state')"
Locked bootloader, unlocking ...
fastboot flashing unlock
- (bootloader) Start unlock flow
- OKAY [ 18.800s]
- Finished. Total time: 18.816s
Flashing the recovery.img
fastboot flash recovery c:\adb\recovery.img
Sending 'recovery' (10226 KB) OKAY [ 0.359s]
Writing 'recovery' OKAY [ 0.640s]
Finished. Total time: 1.030s
Success
fastboot reboot-bootloader
Rebooting into bootloader OKAY [ 0.000s]
Finished. Total time: 0.016s
fastboot erase cache (I don't know if it was a good idea but it was in the tutorial, I was following)
******** Did you mean to fastboot format this ext4 partition?
Erasing 'cache' OKAY [ 0.109s]
Finished. Total time: 0.125s
fastboot reboot
Rebooting OKAY [ 0.000s]
Finished. Total time: 0.016s
Now when booting the phone complains:
Orange state
Your device has been unlocked and can't be trusted
Your device will boot in 5 seconds
In 5 second it starts to boot but it stays forever on the "POWERED BY android" logo
I can boot to TWRP recovery (also fastboot), so I did and flashed magisk (because the main goal was to root my phone) and selected to delete cache/dalvik.
I'm not able to switch off the phone, it reboots. I had tu pull the battery (luckily it's removable).
The phone info changed
BB Chip : mt6580
MS Board. : ALIGATORS5065
Build Time : Tue Jan 23 15:35:41 CST 2018
Krenel Ver. : 3.18.35+ ([email protected]) (gcc version 4.8 (GCC)) #2 SMP PREEMPT Tue Jan 23 16:11:14 CST 2018
Android Ver. : 7.0
SW Ver. : alps-mp-n0.mp2-V1-droi6580.weg.n
Custom Build Verno. : unknown
IMEI1 : unknown
IMEI2 : unknown
Modem Ver. ALIGATOR_S5065_OS_1.1_2018 0123
Bar code : unknown
The IMEIs and Bar code are now "uknown".
What did I wrong and what to do, to fix it?
forget MTK Droid Tool it is outdated and does not support scatter for devices > 4 GB. you can use SP Flash Tool for full ROM dump. First thing you should do is backup your nvram partition, hopefully it is not too late...
https://www.getdroidtips.com/backup-restore-imei-nvram-data-mediatek
If you already have backup of stock boot.img:
- copy file to /external_sd/TWRP/BACKUPS folder
- rename it to boot.emmc.win
- create a backup of current boot (just in case)
- restore renamed stock boot.emmc.win from TWRP
regarding boot stuck:
- Format Data and Wipe Cache from TWRP, reboot recovery, wipe again (Wipe -> Format Data -> type yes)
- reboot TWRP, check if /system /data and /cache is mounted/mountable (you should see folders or files inside)
- reboot system and wait 5 minutes, first boot may take a while because the data partition is forced encrypt
- if android is completely booted, check IMEI
Now, if your device is in good condition, reboot recovery and make a full TWRP backup.
Thank you very much for your help.
I did a dump before, using the SP Flash Tool and the scatter from the downloaded ALIGATOR S5065 – 7.0_MT6580_WL581M.LG.ALIG.HB.N.F.S12.B18.0927.V3.0 2_OS_1.1_20170927.zip file.
So I have a sort of a "backup"
Now I'm going to read and I'll report back how it went.
blakegriplingph said:
NVRAM data must have been wiped off somehow, as that's one reason as to why your serial numbers have gone kaput.
Click to expand...
Click to collapse
If this is the case, you can "download" (=flash) your backup files from SP Flash Tool. In scatter file change entries to "is_download: true". Open the edited scatter file with SP Flash Tool. Make sure you uncheck all checkboxes, except nvram, nvdata (and cache, if you still have problems with this partition). Double click on file name and select the file for each partition. Make sure EMMC_USER is selected. The file sizes must fit partition size. Do NEVER flash PRELOADER! Press start, then connect phone, then insert battery.
nvram.bin 5120 KiB (0x00500000)
nvdata.bin 32768 KiB (0x02000000)
cache.img 409600 KiB (0x19000000)
If done, hold Volume Up key while unplug + plug in USB cable, this will boot into recovery. Wipe Cache and Data
My sizes of the backup files:
nvram.bin 5 242 880 seems OK
nvdata.bin 33 554 432 seems OK
cache.img 419 430 400 bigger
Is there a way I can check the integrity of them before flashing?
And what when I get the "PMT changed for the ROM" error message?
I've attached the used scatter file
Should be fine if you use same scatter file used for read back. If you got "PMT changed" (probably wrong scatter file), you must restore all partitions (except preloader) with the exactly same scatter file you have created your backup. Then your phone should be restored to its original state no matter if scatter file was wrong. Once you get your phone in good condition, you can create your own scatter file with current partition layout from WwR MTK v2.30
Matty1993 said:
All good mate yeah orange state is because you unlocked bootloader and didnt factory reset [...]
If you still get dramas with orange state let me know ill manually patch the dm-verity out of your boot.img for you
Click to expand...
Click to collapse
Orange state just mean unlocked bootloader, you can't get rid of. Do not lock the bootloader again, just leave it orange state is fine...
I thought so and it doesn't really bother me
Matty1993 said:
Your device comes with out of the box encryption in your boot.img fstab your system path will be /dev/block/platform/mtk-msdc/******/msdc/by-name/system /system ext4 ro wait, "verify"
Click to expand...
Click to collapse
Zdendav said:
I did all the steps:
- wipe, format
- factory reset
hangs on the "POWERED BY android" logo, when trying to boot
- flashed boot.img in fastboot
- reboot
I was not fast enough to go onto TWRP, it tried to boot, hangs on the "POWERED BY android" logo
-reboot into TWRP
- wipe, format
- factory reset
still hangs on the "POWERED BY android" logo, when trying to boot
I can borrow exactly the same phone from a relative (fully working) - maybe I should do a full backup of it, then I'll have "clean" images of boot, recovery etc.
Meanwhile I did another full backup and this time I used WwR MTK v2.30 to create a correct scatter.
I attach both scatter files.
Click to expand...
Click to collapse
as @Matty1993 already figured out, your phone seems fine, just dm-verity prevents to boot because of recovery checksum mismatch. You have to disable dm-verity.
Install Disable_Dm-Verity_ForceEncrypt.zip from TWRP. This will patch your boot.img and modify fstab entries. Format Data, then use "Copy Log" option and upload recovery.log here
aIecxs said:
Should be fine if you use same scatter file used for read back. If you got "PMT changed" (probably wrong scatter file), you must restore all partitions (except preloader) with the exactly same scatter file you have created your backup. Then your phone should be restored to its original state no matter if scatter file was wrong. Once you get your phone in good condition, you can create your own scatter file with current partition layout from WwR MTK v2.30
Click to expand...
Click to collapse
I did try and I got the "PMT changed" even when I selected all partitons except preloader ..
I did borrow exactly the same phone from a relative and created a full backup and from it a proper scatter file. I compared both scatter files and there are differences (as expected)
I attach both scatter files
I don't know how to proceed.
1) Lock the bootloader?
2) Flash parts from the borrowed phone? Which parts?
PS I have also a backup of userdata taken in factory mode.
don't flash anything with SP flash tool, just see my previous post. boot + recovery + nvram are identical, but tee1 + tee2 + teeinfo missing, and metadata + userdata have different size. keep the backup created with scatter file from WwR_MTK this seems to be the right one
aIecxs said:
Install Disable_Dm-Verity_ForceEncrypt.zip from TWRP. This will patch your boot.img and modify fstab entries. Format Data, then use "Copy Log" option and upload recovery.log here
Click to expand...
Click to collapse
Done. Did it all in one go (without any reboot), then powered off.
Log is attached
aIecxs said:
don't flash anything with SP flash tool, just see my previous post. boot + recovery + nvram are identical, but tee1 + tee2 + teeinfo missing, and metadata + userdata have different size. keep the backup created with scatter file from WwR_MTK this seems to be the right one
Click to expand...
Click to collapse
Sorry I missed your post until I posted mine ...
I'll keep all backups until it's sorted out.
And thank you very much aIecxs and Matty1993 for all your help
thanks for the log. seems there is something wrong, maybe with TWRP or maybe with phone.
Code:
E:Primary block device '/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/userdata' for mount point '/data' is not present!
Failed to mount '/cache' (Invalid argument)
Error installing zip file '/external_sd/Disable_Dm-Verity_ForceEncrypt_04.03.19.zip'
Flash stock boot.img and stock recovery.img from fastboot. reboot into stock recovery. Wipe Data + Cache. reboot to bootloader. boot into TWRP from fastboot. copy log to sdcard and upload again. reboot your phone and wait 5 minutes.
I flashed the stock recovery and boot in fastboot in one go.
Then rebooted to recovery but there is only "Supported API: 3" in the lower left corner of the display and that's all.
What to do next?
Edit: It's even worse, I'm not able to enter fastboot, recovery etc., the phone doesn't react to the volume button and always show the orange message a boot to the Supported API: 3 screen.
This indicates something is wrong with cache partition. Usually a normal system boot from stock boot.img will fix this. If you can't enter fastboot mode, flash recovery from SP Flash Tool. Try this version it has changed fstab. This should fix the /data mount. Then you should be able to enter fastboot again.
Code:
[strike]/data ext4 /dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/userdata flags=encryptable=/dev/block/platform/mtk-msdc.0/by-name/metadata[/strike]
/data ext4 /dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/userdata flags=encryptable=/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/metadata
Regarding /cache try following from fastboot:
Code:
fastboot format:ext4 cache
after this wipe cache again from stock recovery (you can boot stock recovery from fastboot without flashing it). if cache still not mounted in TWRP, your only choice left is flash backup of cache partition from your friends phone from SP Flash Tool
edit: attachment deleted
Flashed your recovery, now it always boots into twrp, volume buttons still seem to not work, I'm still not able to enter fastboot.
Edit: I was able to enter fastboot by "adb reboot bootloader" when in TWRP, strangely "adb reboot fastboot" booted into TWRP.
I formatted the cache, rebooted into stock recovery, formatted the cache again.
Rebooted into TWRP, in file manager the cache is empty, in the mount menu I'm not able to tick any of the listed partitions to mount it ...
I'm not able to post the new log, it copies it to /data/media but in the file manager the location is empty ...
i have added some mount points, please download and flash again. you can copy recovery.log from adb
Code:
adb pull /tmp/recovery.log C:\adb\recovery.log
please post output of df and mount
Code:
adb shell
mount
busybox df -aT
/ # mount
rootfs on / type rootfs (rw,seclabel)
tmpfs on /dev type tmpfs (rw,seclabel,nosuid,relatime,mode=755)
devpts on /dev/pts type devpts (rw,seclabel,relatime,mode=600)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,seclabel,relatime)
selinuxfs on /sys/fs/selinux type selinuxfs (rw,relatime)
tmpfs on /tmp type tmpfs (rw,seclabel,relatime)
adb on /dev/usb-ffs/adb type functionfs (rw,relatime)
/ # busybox df -aT
Filesystem Type 1K-blocks Used Available Use% Mounted on
tmpfs tmpfs 463204 44 463160 0% /dev
devpts devpts 0 0 0 0% /dev/pts
proc proc 0 0 0 0% /proc
sysfs sysfs 0 0 0 0% /sys
selinuxfs selinuxfs 0 0 0 0% /sys/fs/selinux
tmpfs tmpfs 463204 32 463172 0% /tmp
adb functionfs 0 0 0 0% /dev/usb-ffs/adb
So I have a few of these Kramer Panels which aren't supported anymore (The official webpage doesn't have them anymore but the same product here) and I want to wipe out the Kronomeet Software they got going on and install some other flavor of Android (I'm thinking Lineage OS).
To start I got adb and fastboot up and running with Aptitude.
Code:
$ adb --version
Android Debug Bridge version 1.0.41
Version 28.0.2-debian
$ fastboot --version
fastboot version 28.0.2-debian
Connecting fine with adb, and using lsusb we see
Bus 001 Device 037: ID 2207:0011 Fuzhou Rockchip Electronics Company SmartTab
Googling around that name led me to the Rockchip Wiki, which had an article on Fastboot and a bunch of open source repos
https://opensource.rock-chips.com/wiki_Fastboot
Which states: "Rockchip uses 0x2207 as its USB vendor ID. This VID is not in Google's original fastboot code. So every fastboot command has to use "-i" parameter to specify vid to fastboot."
However, running -i on fastboot gives me an invalid option error:
Code:
$ sudo fastboot -i 0x2207 devices
fastboot: invalid option -- 'i'
I also tried downloading the most recent version of the android platform tools with fastboot version 33.0.3-8952118, which gave the same results.
Doing any other fastboot command without the -i just has < waiting for any device >
So essentially, I'm trying to figure out how to load a custom rom onto it, and what my next steps try are.
Other Misc Info I've tried:
In the Developer Settings on the tablet, there's no option to enable "OEM Unlocking"
Tablet doesn't have a power button, just a switch, so no pressing power and volume at the same time.
Rockchip seems to have a TWRP image available to build, which I would like to be able to fastboot flash (https://github.com/rockchip-software/TWRP/tree/android-9.0)
There's also a development tool (https://opensource.rock-chips.com/wiki_Rkdeveloptool) that also lets you load firmware.
Using adb reboot bootloader reboots the tablet to a black empty screen, which I can then communicate with the rkdeveloptool.
In this mode, lsusb returns a new name:
Code:
$ lsusb
Bus 001 Device 038: ID 2207:320a Fuzhou Rockchip Electronics Company RK3288 in Mask ROM mode
$ ./rkdeveloptool ld
DevNo=1 Vid=0x2207,Pid=0x320a,LocationID=106 Loader
$ ./rkdeveloptool ppt
**********Partition Info(parameter)**********
NO LBA Name
00 00002000 uboot
01 00004000 misc
02 00006000 resource
03 0000E000 kernel
04 00016000 boot
05 00026000 recovery
06 00036000 backup
07 00050000 cache
08 00090000 kpanic
09 00092000 system
10 00392000 metadata
11 0039A000 radical_update
12 003BA000 userdata
Found some more useful thread, and am trying to use rkflashkit. But still struggling to find out what .img to use.
Firmware Upgrade Guide For RK3188 RK3288 RK3368 Devices
UPD: Rreflashing guide for linux Host PC added. BEFORE START What you need: 1. Image file 2. Host PC (Windows) 3. USB OTG Cable Supported host OS: 1. Windows XP （32/64bit) 2. Windows 7 (32/64bit) 3. Windows 8 (32/64bit) All manipulations I...
forum.xda-developers.com
[Q] has anyone had success flashing a RK3126 based tablet?
Hello, I've got an irulu X30 (expro 30 plus) running stock firmware, nougat 7.1.2 I've been trying to use rkflashtool in linux and androidtool in windows. Both programs can report some device info and read partitions, the img files created...
forum.xda-developers.com