Database Users

[UNBRICKING] Research on Unbricking Method for Zenfone 2

TESTERS NEEDED
The main intention of the threat was to find a way to restore a completely bricked zenfone 2. It is apparent that we are not having a spare bricked device to test upon.
Anyone with a Bricked Zenfone 2, A PC, and willingness to devote time, please participate.
Otherwise, this thread is going no where as we people who are searching for methods do not have bricked devices(And do not want to specially brick them for testing)(Obviously!!!) and all talks are in taking us nowhere.
Click to expand...
Click to collapse
"Bricked Devices" is a regularly heard phrase on XDA. Sadly, Asus devices dont come with a dedicated PC Companion or PC Suite software which can safely unbrick a Zenfone just in case someone is able to damage fastboot.
That Said, there have been Zenfone 2's that have been Hard Bricked in the past months. Fortunately, many of them may have got replaced as the device comes with a One Year Warranty. But what after that...???
So, i wanted to do some research upon this unexplored topic.
On successfully Hard Bricking your device, you will see something like this :highfive:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
( credit to the one who bricked and clicked)
I do not have a bricked device, but if anyone can get one and test stuff, we may end up getting something concrete to restore in future.
So, i came across a page: http://www.asus-zenfone.com/2014/11/how-to-unbrick-zenfone-5-and-zenfone-6_8.html
But soon i understood that all these things are foreign to me ( So far ).
Also, The drivers for the SOC are for CloverView Plus Devices.
It would be seriously great if we can successfully recover from corrupt fastboot. As without fastboot we can do absolutely nothing.
I request senior members, Devs and all others to provide inputs and links and keep this thread productive.
Who knows, someday we may end up in a situation without warranty and with a corrupt fastboot.
I will keep on updating this thread with updates from your side
Lets Start.

So that method in the link is like the Odin for Samsung, or the NvFlash for nvidia. Except that it is for Cloverview (32 nm SOC) vs Moorfield (22nm SOC) which is what we have.

cmendonc2 said:
So that method in the link is like the Odin for Samsung, or the NvFlash for nvidia. Except that it is for Cloverview (32 nm SOC) vs Moorfield (22nm SOC) which is what we have.
Click to expand...
Click to collapse
Exactly!!. We need something that works on Moorefield

[email protected] said:
Exactly!!. We need something that works on Moorefield
Click to expand...
Click to collapse
I looked further into it and what we need is the DNX_FW, IFWI, DNX_OS, and OS files for this device. This guide has more details on the Intel Manufacturer Flasher, which seems to be a version of the xFSTK downloader? The downloader seems only to write files (or download files) to the device, not generate them or copy them from the device. Someone with more experience would have to do that.

cmendonc2 said:
I looked further into it and what we need is the DNX_FW, IFWI, DNX_OS, and OS files for this device. This guide has more details on the Intel Manufacturer Flasher, which seems to be a version of the xFSTK downloader? The downloader seems only to write files (or download files) to the device, not generate them or copy them from the device. Someone with more experience would have to do that.
Click to expand...
Click to collapse
I think we first need drivers for the moorefield SOC ( SOC Drivers) to access the partitions without fastboot support.
I havent read the PDF that you linked. Will read and revert back.

Great job guys
Better be prepared now than panic later haha
Hope i can help but im totally new in this kind of stuff
This makes me want to take a course related to this stuff cause its amazing how u brainstorm with each other

tactician10 said:
Great job guys
Better be prepared now than panic later haha
Hope i can help but im totally new in this kind of stuff
This makes me want to take a course related to this stuff cause its amazing how u brainstorm with each other
Click to expand...
Click to collapse
Well, thats what XDA is here for.
Learning is a never ending process. And i have learnt a lot from others in this place.
And regarding this thread being inactive.
I have got a few things, but they seem irrelevant to me. Searching for something really solid in this regard. No point in posting irrelevant findings from my side and bumping up the thread.
I am going to get a bricked Zenfone 5 (Sure) and Zenfone 2(Hopefully) from a local repair shop.
Will try doing serious software damage to the Zenny 2 and will then try to recover. Lets See!!

i have this problem, broke my fastboot

Does your phone bootup???? Does Android bootup?
If it doesnt, you are currently out of luck
As already said by @cmendonc2 , we need someone senior to extract some files

@edit@
I solved it.
I reflashed recovery via Adb in screen selection "recovery mode/bootloader/normal"
I'm very happy

test subject..
Phone is hard bricked.. cant fastboot and on reboot it bootloops. I went into stock recovery via adb n actually data wiped n now cant adb either.. so.. tell me what u want me to try n ill let u know. Btw i already requested RMA but asus says maybe 4 weeks till i get it back.. so im hoping u guys can help me fix it before i send it in. Thanks

Seoulja said:
Phone is hard bricked.. cant fastboot and on reboot it bootloops. I went into stock recovery via adb n actually data wiped n now cant adb either.. so.. tell me what u want me to try n ill let u know. Btw i already requested RMA but asus says maybe 4 weeks till i get it back.. so im hoping u guys can help me fix it before i send it in. Thanks
Click to expand...
Click to collapse
Can you boot into Android????
What is your device model?? ZE550ML or ZE551ML??

Seoulja said:
Phone is hard bricked.. cant fastboot and on reboot it bootloops. I went into stock recovery via adb n actually data wiped n now cant adb either.. so.. tell me what u want me to try n ill let u know. Btw i already requested RMA but asus says maybe 4 weeks till i get it back.. so im hoping u guys can help me fix it before i send it in. Thanks
Click to expand...
Click to collapse
[email protected] said:
Can you boot into Android????
What is your device model?? ZE550ML or ZE551ML??
Click to expand...
Click to collapse
ZE551ML / ZOOA
It bootloops when i try to boot it. I get the usb symbol when i try to fastboot. I wanna try using intel phone flash tool but require .xml flash file within a stock Rom .zip file. I looked everywhere but i can't find a zip with .xml flash file.

moorefield driver
[email protected] said:
I think we first need drivers for the moorefield SOC ( SOC Drivers) to access the partitions without fastboot support.
I havent read the PDF that you linked. Will read and revert back.
Click to expand...
Click to collapse
Hello, if you install the Intel phone flash tool lite, the tool install also the moorefield driver. When you open the xfstk downloader the tool looks the phone but in stock rom from asus i can not found the ifwi os dnx os image files. If anyone will find the files please tell to me.
Thans for your help.

We need some experienced dev to extract these files for us
Without that, there is no option

levi1232005 said:
Hello, if you install the Intel phone flash tool lite, the tool install also the moorefield driver. When you open the xfstk downloader the tool looks the phone but in stock rom from asus i can not found the ifwi os dnx os image files. If anyone will find the files please tell to me.
Thans for your help.
Click to expand...
Click to collapse
Hey there!!
Check out this page: http://forum.xda-developers.com/general/xda-assist/intel-phone-flash-tool-t3129091. Its for Zenfone 5
The Guy has stated that he found the Necessary files by unpaking the boot.img,which can be found in the firmware zip available on Asus Support website.
Alternatively, you can get it from Here. But these are older ones. I would recommend the Asus website though.
The Intel Phone falsh tool is available at https://01.org/android-ia/downloads/intel-phone-flash-tool-lite . Try it out.
I have wiped my Linux and windows partitions as i am installing Windows 10. So this is all i can help you with. If you need any information, Just Ask. I will do my best to help.
As for extracting the boot.img, do a quick google search. XDA has a thread for that. You need either Linux or cygwin.
All the best!!!!
Disclaimer: I have not tested these things. Try at your own risk

cmendonc2 said:
I looked further into it and what we need is the DNX_FW, IFWI, DNX_OS, and OS files for this device. This guide has more details on the Intel Manufacturer Flasher, which seems to be a version of the xFSTK downloader? The downloader seems only to write files (or download files) to the device, not generate them or copy them from the device. Someone with more experience would have to do that.
Click to expand...
Click to collapse
Hey,
I just stumbled upon something.
I downloaded the latest OTA zip package (20MB) of the ze551ml
I opened the ifwi folder
And i found the bin files. DNX FW etc of various zenfone variants.
Can you throw some light on this???
P.S.
Folder screenshot attached!!

Here's some more info I found on the IFWI images:
Two special IFWI images are used for booting in this mode: _dnx_fwr.bin and _dnx_osr.bin. These comprise a simple flash tool that writes a raw image to the eMMC boot partitions and another to the main eMMC space. xFSTK is provided with paths to the IFWI image and a eMMC image. The eMMC image contains an OSIP header (location/size of U-Boot in eMMC, load address, and entry point), a partition table, and partitions with U-Boot and the U-Boot environment.
Click to expand...
Click to collapse
So the dnx_fwr.bin is probably this file:
Code:
dnx_fwr_ann_a0-mofd_v1-ze551ml.bin
The ifwi.bin is probably this file:
Code:
ifwi_ann_a0-mofd_v1-ze551ml.bin
I checked the MD5sums of the different versions and they are different. I guess we need a bricked ZF2 to test and see. Although we still don't have the OSR files. Perhaps @shakalaca can help us.

Okay right
I just had one last week. I tried everything i could. Finally i gave it back.
And Today i stumbled upon this.
Ill see if the guy still has that bricked zen.
Thanks for your reply
Sent from my ASUS_Z00AD using XDA Free mobile app

Good day sir, i was just wondering if this reseach is still going. Still unable to find any solution to my hard bricked zenfone 2 ZE200ml. Im somehow counting on this. Goodluck!

Help! No response from phone anymore!

All I did was hold Vol - and Power to get to Download Mode, but forgot to hold Home. I walked away for a minute while it booted supposedly to the Warning screen, came back and noticed the blue light was on. Went to investigate but the phone turned off before I got to see what was up.
Now the phone won't charge, won't power on, no response to plugging into computer, can't get to Download Mode or Recovery, no vibration when trying to power it on. It's a bone stock device, no root/recovery/rom. Never even got USB Debugging turned on. What the hell happened here?

Looks like you put it into safe mode
http://www.gottabemobile.com/2016/01/07/samsung-galaxy-s5-problems-fixes/
Tried removing the battery for 5 minutes?
That's supposedly how to exit safemode
http://www.basictechtricks.com/2014/05/safe-mode-in-samsung-galaxy-s5.html

*Detection* said:
Looks like you put it into safe mode
http://www.gottabemobile.com/2016/01/07/samsung-galaxy-s5-problems-fixes/
Tried removing the battery for 5 minutes?
That's supposedly how to exit safemode
http://www.basictechtricks.com/2014/05/safe-mode-in-samsung-galaxy-s5.html
Click to expand...
Click to collapse
battery was out for over an hour, still nothing. safe mode disables charging as well? and no vibration when you try to turn it on either?

dragonhart6505 said:
battery was out for over an hour, still nothing. safe mode disables charging as well? and no vibration when you try to turn it on either?
Click to expand...
Click to collapse
Take battery out wait ten sec hold recovery buttons insert battery.. Try a few times
Stock? Custom?.. Ive seen blue light on freinds s4 usually a fail install .. Stock.
I usually just keep trying for recovery.. And usually do it after a few attempts
Sent from my SM-G900F using Tapatalk

Yep looks like you got it into safe mode, in order to exit safe mode hold volume up and power button for 10 seconds. Good luck.
Press thanks if I helped.

Christiancs1969 said:
Take battery out wait ten sec hold recovery buttons insert battery.. Try a few times
Stock? Custom?.. Ive seen blue light on freinds s4 usually a fail install .. Stock.
I usually just keep trying for recovery.. And usually do it after a few attempts
Sent from my SM-G900F using Tapatalk
Click to expand...
Click to collapse
phone is stock. was going to start a restore, but didnt get that far to start it. been trying, about 10 times now. no response from the phone still...

dragonhart6505 said:
phone is stock. was going to start a restore, but didnt get that far to start it. been trying, about 10 times now. no response from the phone still...
Click to expand...
Click to collapse
Could give this a shot
http://forum.xda-developers.com/galaxy-s5/general/g900f-debrick-img-lollipop-t3240626

dragonhart6505 said:
phone is stock. was going to start a restore, but didnt get that far to start it. been trying, about 10 times now. no response from the phone still...
Click to expand...
Click to collapse
[emoji20] thats not nice .. If i get any other ideas..
My friends does it when he has auto update.. It downloads then sticks on install.. Maybe because of low battery.. I charge then just repeat steps .. Until i get lucky
Sent from my SM-G900F using Tapatalk

*Detection* said:
Could give this a shot
http://forum.xda-developers.com/galaxy-s5/general/g900f-debrick-img-lollipop-t3240626
Click to expand...
Click to collapse
ah, im familiar with this for a Galaxy S3 that had the same problem im experiencing now, but that was after flashing a wrong modem in that instance. i have a 16gb SD card, need this debrick for G900A

dragonhart6505 said:
ah, im familiar with this for a Galaxy S3 that had the same problem im experiencing now, but that was after flashing a wrong modem in that instance. i have a 16gb SD card, need this debrick for G900A
Click to expand...
Click to collapse
Looks like someone uploaded one
https://www.dropbox.com/sh/3zpnc774z3dih22/AAA8C1AyjrGDzaqom96YTp8Ea?dl=0
Source:
http://forum.xda-developers.com/att...-create-g900a-debricking-image-t3085344/page2

*Detection* said:
Looks like someone uploaded one
https://www.dropbox.com/sh/3zpnc774z3dih22/AAA8C1AyjrGDzaqom96YTp8Ea?dl=0
Source:
http://forum.xda-developers.com/att...-create-g900a-debricking-image-t3085344/page2
Click to expand...
Click to collapse
much obliged

dragonhart6505 said:
much obliged
Click to expand...
Click to collapse
Hope it sorts it, good luck

*Detection* said:
Looks like someone uploaded one
https://www.dropbox.com/sh/3zpnc774z3dih22/AAA8C1AyjrGDzaqom96YTp8Ea?dl=0
Source:
http://forum.xda-developers.com/att...-create-g900a-debricking-image-t3085344/page2
Click to expand...
Click to collapse
file no longer exists and thread is dead for some time now. anyone have a backup of the debrick img? por favor?

dragonhart6505 said:
file no longer exists and thread is dead for some time now. anyone have a backup of the debrick img? por favor?
Click to expand...
Click to collapse
I must be psychic, when I posted those links, it was working, so I upped it to my MEGA incase this happened (Links were live for almost 10 months too, weird)
G900A debrick
Code:
https://mega.nz/#!HVJzxZ4a!GeVibA3jIUAZqv9hfDyQdvJTEnT60hXCNN1fWqP4WxQ

*Detection* said:
I must be psychic, when I posted those links, it was working, so I upped it to my MEGA incase this happened (Links were live for almost 10 months too, weird)
G900A debrick
Code:
https://mega.nz/#!HVJzxZ4a!GeVibA3jIUAZqv9hfDyQdvJTEnT60hXCNN1fWqP4WxQ
Click to expand...
Click to collapse
lol k thanks. now...i absolutely need a 16gb sd? or could i do with my 32...

dragonhart6505 said:
lol k thanks. now...i absolutely need a 16gb sd? or could i do with my 32...
Click to expand...
Click to collapse
Not sure, give it a shot with the 32, I'd imagine the worst that will happen is it will force the card into thinking it is only 16GB, which you should be able to reverse with a free partitioning program, by deleting and recreating the partitions once you're done

*Detection* said:
Not sure, give it a shot with the 32, I'd imagine the worst that will happen is it will force the card into thinking it is only 16GB, which you should be able to reverse with a free partitioning program, by deleting and recreating the partitions once you're done
Click to expand...
Click to collapse
ok so just throw this in win32diskimg? what am i doing again? lol

Flash this Debrick file to your 16GB Micro SD card with Win32DiskImager
*Insert your Micro SD card into your computer (backup any information you may have on it we are going to ERASE, FORMAT it to ex FAT
*Open win32DiskImager
*Navigate through the browse button to the location where you downloaded the correct Debrick file
*Select your Debrick file by double clicking on it
*In the upper right corner of Win32DiskImager you should make sure that the drive letter assigned to your sd card is selected.
***Which ever drive that is listed will be erased, formatted
*Click write in the bottom right hand side
put the Debrick SD card in the Phone, Pull and Replace the Battery
Plug phone in usb and boot into download mode
yout phone should boot into download mode then flash stock firmware via odin
http://forum.xda-developers.com/galaxy-s5/general/g900f-debrick-img-lollipop-t3240626

*Detection* said:
Flash this Debrick file to your 16GB Micro SD card with Win32DiskImager
*Insert your Micro SD card into your computer (backup any information you may have on it we are going to ERASE, FORMAT it to ex FAT
*Open win32DiskImager
*Navigate through the browse button to the location where you downloaded the correct Debrick file
*Select your Debrick file by double clicking on it
*In the upper right corner of Win32DiskImager you should make sure that the drive letter assigned to your sd card is selected.
***Which ever drive that is listed will be erased, formatted
*Click write in the bottom right hand side
put the Debrick SD card in the Phone, Pull and Replace the Battery
Plug phone in usb and boot into download mode
yout phone should boot into download mode then flash stock firmware via odin
http://forum.xda-developers.com/galaxy-s5/general/g900f-debrick-img-lollipop-t3240626
Click to expand...
Click to collapse
awesome sauce. any link to official 5.0/5.1 odin package? already on lollipop, cant downgrade (wont even bother trying)

Can't see one on any of the usual places, sammobile or samsung-updates
I`ll have a look around and post back if I find one, but doesn't look good if it's not on Sammobile
EDIT - Found this
http://downloadmirror.co/android/KR/Copy-of-G900AUCU3BOC4-OneClick.zip
The instructions for flashing that specific one-click ROM are here
http://www.droidviews.com/install-android-5-0-lollipop-firmware-on-att-galaxy-s5-sm-g900a-oc4/
Maybe try that too
Found another OTA with instructions
Android 5.1.1 Lollipop G900AUCU4COI5 firmware update file for AT&T Galaxy S5 SM-G900A
https://www.reddit.com/r/galaxys5/comments/3qgvom/android_511_lollipop_g900aucu4coi5_firmware/
---------- Post added at 16:40 ---------- Previous post was at 16:19 ----------
OK, looks like that One-Click includes ODIN - so I'd go through the debrick routine with the SDCard, then when it says to load up ODIN and flash stock, use the One-Click File
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

SM-G900F hardbricked QHSUSB_BULK

Hi I have an SM-G900F rooted Lollipop. I flashed a G900I (Marshmallow) tar file full flash with flashfire. It showed an error while flashing preload otherwise no problems. but the phone has been hardbricked eversince (no download mode or recovery) and pc recognises it as QSHSUSB_BULK. I saw that microsd method for retreival of the phone. but it didnt work. someone please help.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Hey there mate.. The sd card method is all you got.. How ever there is another method called GTAG but forget that.... And use the sd card method... Requirments are as follows :
1.bricked samsung galaxy s5
2.recovery image file for ur current android version
3. Micro sd card 16gb or 32 gb but 32gb is more reliable.....
The thing is if your phone cant find a boot sequence on the primary storage it moves to the secondary (the micro sd)
4.download win 32 disk imager to write the recovery image file to the sd and boot.. Then if it works shut down and boot to download mode and flash an official firmware of samsung android 6.0 is released for s5.. Download that from sam mobile
REMEMBER DONOT TAKE OUT THE SD CARD IN THE WHOLE PROCESS.. To putting back ur sd card as before use sd formatter... Any further questions contact me

Of course you bricked it, you flashed a G900I ROM to a G900F phone, why?
Bootloader and who knows what else will be wrong

y u do this if coming frm sm g900f dont try any version to flash into yr phone.

ELA.T said:
Hey there mate.. The sd card method is all you got.. How ever there is another method called GTAG but forget that.... And use the sd card method... Requirments are as follows :
1.bricked samsung galaxy s5
2.recovery image file for ur current android version
3. Micro sd card 16gb or 32 gb but 32gb is more reliable.....
The thing is if your phone cant find a boot sequence on the primary storage it moves to the secondary (the micro sd)
4.download win 32 disk imager to write the recovery image file to the sd and boot.. Then if it works shut down and boot to download mode and flash an official firmware of samsung android 6.0 is released for s5.. Download that from sam mobile
REMEMBER DONOT TAKE OUT THE SD CARD IN THE WHOLE PROCESS.. To putting back ur sd card as before use sd formatter... Any further questions contact me
Click to expand...
Click to collapse
thanks a lot bro. got it done.

*Detection* said:
Of course you bricked it, you flashed a G900I ROM to a G900F phone, why?
Bootloader and who knows what else will be wrong
Click to expand...
Click to collapse
Haslie said:
y u do this if coming frm sm g900f dont try any version to flash into yr phone.
Click to expand...
Click to collapse
I wanted to use band 40 lte in india where i live. but g900f doesnt support b40. as they were identical in hardware, i tried to switch the software part and went wrong

Yes i rooted ...wait let me attach the links

gpkumaran said:
I wanted to use band 40 lte in india where i live. but g900f doesnt support b40. as they were identical in hardware, i tried to switch the software part and went wrong
Click to expand...
Click to collapse
Remember that if it is a hardware limitation then there's nothing else software can do, like flashing a ROM other than the ones compatible for your variant. It will not enable Band 40 on your phone.

gpkumaran said:
I wanted to use band 40 lte in india where i live. but g900f doesnt support b40. as they were identical in hardware, i tried to switch the software part and went wrong
Click to expand...
Click to collapse
Nope, not 'identical' or they would both be called G900F
Different models have different bootloaders, at the very minimum, meaning you can never flash a 100% untouched stock ROM for a different model

ELA.T said:
Any ideas on how to root on Android 6
Click to expand...
Click to collapse
I jus flashed tar file from CF Autoroot for rooting Android 6. Hope this helps. Download here

Vineen said:
Remember that if it is a hardware limitation then there's nothing else software can do, like flashing a ROM other than the ones compatible for your variant. It will not enable Band 40 on your phone.
Click to expand...
Click to collapse
*Detection* said:
Nope, not 'identical' or they would both be called G900F
Different models have different bootloaders, at the very minimum, meaning you can never flash a 100% untouched stock ROM for a different model
Click to expand...
Click to collapse
Yup. Learned that the hard way. Now, I`m thinking if the Bad flash was mainly due to differences in PIT file rather than the hardware differences. So I have an evil idea of flashing a PIT file from G900I first and then trying to flash the whole firmware tar. But I`m worried i might end up with a SUPER HARD BRICK. i`ll update here if i go along with the idea. Any other senior members kindly enlighten if such an idea is possible..

I've just explained why you can't flash the stock firmware from a different model, but by all means, go ahead and brick your phone again
PIT is not going to change the bootloader

gpkumaran said:
I jus flashed tar file from CF Autoroot for rooting Android 6. Hope this helps. Download here
Click to expand...
Click to collapse
I rooted thank you tho.. You help is really appreciated..i used another method

ELA.T said:
I rooted thank you tho.. You help is really appreciated..i used another method
Click to expand...
Click to collapse
which method?

Hi. i've just hardbricked my phone.
i flashed (dirty over ota) latest cm13 nightly and during the day my g900f rebooted 5 times. then i've wiped everything and flashed latest BlissRom+pico gapps, rebooted and phone rebooted again on the welcome screen. ok. 45%percent of the battery. led does not shine. but when i connect it to pc - qhsusb_BULK.
Then i've got download mode, rebooted and my BlissPop started up. ok. then i've rebooted to TWRP 3.0.2.0 wiped everything again and turned it off. thats all. i can not boot this device anymore. led is dead. i can not boot recovery and download mode. i've pulled battery and waited 30 seconds. nothing. usb doctor tells 5,25Volts and 0.07A when it plugged to 220V. Battery=3,7V. i've tested with multimeter. that's all i can help... i'm so dissapoined for now. maybe you can tell me what to do? p.s. sorry for my English.

Sirocco.ukr.lviv said:
Hi. i've just hardbricked my phone.
i flashed (dirty over ota) latest cm13 nightly and during the day my g900f rebooted 5 times. then i've wiped everything and flashed latest BlissRom+pico gapps, rebooted and phone rebooted again on the welcome screen. ok. 45%percent of the battery. led does not shine. but when i connect it to pc - qhsusb_BULK.
Then i've got download mode, rebooted and my BlissPop started up. ok. then i've rebooted to TWRP 3.0.2.0 wiped everything again and turned it off. thats all. i can not boot this device anymore. led is dead. i can not boot recovery and download mode. i've pulled battery and waited 30 seconds. nothing. usb doctor tells 5,25Volts and 0.07A when it plugged to 220V. Battery=3,7V. i've tested with multimeter. that's all i can help... i'm so dissapoined for now. maybe you can tell me what to do? p.s. sorry for my English.
maybe battery is discharged or dead? but g900f is not charging it.
Click to expand...
Click to collapse
Use this method mentioned in this thread:from ELA.T
Hey there mate.. The sd card method is all you got.. How ever there is another method called GTAG but forget that.... And use the sd card method... Requirments are as follows :
1.bricked samsung galaxy s5
2.recovery image file for ur current android version
3. Micro sd card 16gb or 32 gb but 32gb is more reliable.....
The thing is if your phone cant find a boot sequence on the primary storage it moves to the secondary (the micro sd)
4.download win 32 disk imager to write the recovery image file to the sd and boot.. Then if it works shut down and boot to download mode and flash an official firmware of samsung android 6.0 is released for s5.. Download that from sam mobile
REMEMBER DONOT TAKE OUT THE SD CARD IN THE WHOLE PROCESS..

Made a complete ZVA dump

So after following some basic instructions that i still managed to mess up
i made a complete dump on zva. which means a debrick image can be made.
if we had the needed firehose.bin we could possibly fix hard-bricks in qfil in qpst.
I'm uploading said dump to my google drive but kinda reluctant to share it in fear if u used my dump then u might also get my iemi. so once i figure that one out i will make it available to all

So i was looking around in a few of the files in my hex editor and noticed. Id have to pull it up on i think bootloader backup. That user debug is set to 0. Wonder if its modifiable to set to 1 and enable a debug bootloader

Any idea how to dump the PRL? QPST 2.7.460 crashes when I try to read the info from the phone. LGUP might be able to do it with the proper LS992 DLL, but I can't find one that works.

Hai Karate said:
Any idea how to dump the PRL? QPST 2.7.460 crashes when I try to read the info from the phone. LGUP might be able to do it with the proper LS992 DLL, but I can't find one that works.
Click to expand...
Click to collapse
ive never had to dump a prl before every cdma phone i get i gsm unlock
ive read the prl on my g4 i use 2.7.402 and its never failed me

TheMadScientist420 said:
So after following some basic instructions that i still managed to mess up
i made a complete dump on zva. which means a debrick image can be made.
if we had the needed firehose.bin we could possibly fix hard-bricks in qfil in qpst.
I'm uploading said dump to my google drive but kinda reluctant to share it in fear if u used my dump then u might also get my iemi. so once i figure that one out i will make it available to all
Click to expand...
Click to collapse
Kinda a long shot but could we inject root into the system after boot using the sd card method of loading a dump?

thjubeck said:
Kinda a long shot but could we inject root into the system after boot using the sd card method of loading a dump?
Click to expand...
Click to collapse
I dont know rite now
my g5 is down

thjubeck said:
Kinda a long shot but could we inject root into the system after boot using the sd card method of loading a dump?
Click to expand...
Click to collapse
Interesting idea, have a link or can you go more into detail about loading a dump via SD? This is my first LG and I'm still trying to figure some things out. My Samsungs were so easy to root, flash TWRP in Odin, flash SuperSU, done.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

bilgerryan said:
Interesting idea, have a link or can you go more into detail about loading a dump via SD? This is my first LG and I'm still trying to figure some things out. My Samsungs were so easy to root, flash TWRP in Odin, flash SuperSU, done.
Click to expand...
Click to collapse
Ive been doin lgs for some time now, It sounds like he is describing the rooted system injection like on sprint g4 with the dd commands.

bilgerryan said:
Interesting idea, have a link or can you go more into detail about loading a dump via SD? This is my first LG and I'm still trying to figure some things out. My Samsungs were so easy to root, flash TWRP in Odin, flash SuperSU, done.
Click to expand...
Click to collapse
I originally had the root shell from December but it was useless and I ended up flashing a newer KDZ file and have not been able to downgrade yet so for me that method is out and was not working and I have been looking for other options.
So far have two options. https://forum.xda-developers.com/g4/general/lg-g4-100-root-success-directives-root-t3180586
UPDATE: The send_command.exe does find the phone so testing to see what happens here
UPDATE 2: Que the haters LAF got me forgot about that guys sorry. So looks like LGUP may be the only option if we can figure out how to convince it to work.
UPDATE 3: Purposely bricking your phone gets you into LAF mode. You have to stop it at 10% on a KDZ update and it will allow you to use LAF mode again.
My other option is use the "expanded" version of LGUP and flash the system partition.I have tried extracting the system partition and flashing but having trouble getting LGUP to flash .img to the system. Seems to only let you choose where to put the partition if you are using a .dz or .kdz file.
As for the SD method, I read a post about using the SD card with a dump of the phone to recover from a hardbrick. Not completely sure of the details on that.
The G5 is not currently my daily driver so am able to experiment some with it.
P.S. Disclaimer to anyone who comes across this reply looking for root. I know some about what is possible with this phone but do not quote me as fact as I can and have been wrong before

thjubeck said:
I originally had the root shell from December but it was useless and I ended up flashing a newer KDZ file and have not been able to downgrade yet so for me that method is out and was not working and I have been looking for other options.
So far have two options. https://forum.xda-developers.com/g4/general/lg-g4-100-root-success-directives-root-t3180586
UPDATE: The send_command.exe does find the phone so testing to see what happens here
UPDATE 2: Que the haters LAF got me forgot about that guys sorry. So looks like LGUP may be the only option if we can figure out how to convince it to work.
My other option is use the "expanded" version of LGUP and flash the system partition.I have tried extracting the system partition and flashing but having trouble getting LGUP to flash .img to the system. Seems to only let you choose where to put the partition if you are using a .dz or .kdz file.
As for the SD method, I read a post about using the SD card with a dump of the phone to recover from a hardbrick. Not completely sure of the details on that.
The G5 is not currently my daily driver so am able to experiment some with it.
P.S. Disclaimer to anyone who comes across this reply looking for root. I know some about what is possible with this phone but do not quote me as fact as I can and have been wrong before
Click to expand...
Click to collapse
I saw a post somewhere about making your own kdz, let me see if I can find it again. We were able to get a downgrade working as far back as ZV8.

bilgerryan said:
I saw a post somewhere about making your own kdz, let me see if I can find it again. We were able to get a downgrade working as far back as ZV8.
Click to expand...
Click to collapse
Not getting anywhere on the custom kdz. Found some tools and have got the kdz extracted but recompiling seems to be the issue here.

This might help you for kdz
https://forum.xda-developers.com/showthread.php?t=2215929

Hello, I need urgent help, I tried an unlocking service for my G5 and the person using the remote server bricked my phone. It is not stuck on download mode, I cannot even get into recovery. I don't know how to reflash this phone, I think if I had the correct .dll for the LG flash tool it would help me greatly as I could at least try to flash it. Thank you for your consideration.

Kevovaz said:
Hello, I need urgent help, I tried an unlocking service for my G5 and the person using the remote server bricked my phone. It is not stuck on download mode, I cannot even get into recovery. I don't know how to reflash this phone, I think if I had the correct .dll for the LG flash tool it would help me greatly as I could at least try to flash it. Thank you for your consideration.
Click to expand...
Click to collapse
Already answered you in the unlocking thread.

majedalanni said:
This might help you for kdz
https://forum.xda-developers.com/showthread.php?t=2215929
Click to expand...
Click to collapse
The first tool looks promising but since google code went to archive mode seems that it can't be found.

TheMadScientist said:
So after following some basic instructions that i still managed to mess up
i made a complete dump on zva. which means a debrick image can be made.
if we had the needed firehose.bin we could possibly fix hard-bricks in qfil in qpst.
I'm uploading said dump to my google drive but kinda reluctant to share it in fear if u used my dump then u might also get my iemi. so once i figure that one out i will make it available to all
Click to expand...
Click to collapse
Just wondering about this but is the reason the original tool posted by unmentionable names removed because it involves purposely bricking your phone? I found a forum post on the G4 about this and tried it with the G5 and I can get into LAF mode although limited on the newest bootloader version.

thjubeck said:
Just wondering about this but is the reason the original tool posted by unmentionable names removed because it involves purposely bricking your phone? I found a forum post on the G4 about this and tried it with the G5 and I can get into LAF mode although limited on the newest bootloader version.
Click to expand...
Click to collapse
Yea i bricked mine but a diffrent reason and no fix cause g5 uses .elf not firehose.bin

TheMadScientist said:
Yea i bricked mine but a diffrent reason and no fix cause g5 uses .elf not firehose.bin
Click to expand...
Click to collapse
Okay. I posted on another forum and asked one of developers of that tool if they'd be willing to let someone try it who doesn't really care about the fact that you could brick your phone so here's hoping they'll let someone else try to finish the tool and get something working. Didn't get anywhere with the kdz method so thought I'd try stirring up the hornets nest again by asking.

thjubeck said:
Okay. I posted on another forum and asked one of developers of that tool if they'd be willing to let someone try it who doesn't really care about the fact that you could brick your phone so here's hoping they'll let someone else try to finish the tool and get something working. Didn't get anywhere with the kdz method so thought I'd try stirring up the hornets nest again by asking.
Click to expand...
Click to collapse
Wheres that at i might poke at that nest too. I hate to think my g5 is truly dead.

TheMadScientist said:
Wheres that at i might poke at that nest too. I hate to think my g5 is truly dead.
Click to expand...
Click to collapse
https://forum.xda-developers.com/tmobile-lg-g5/help/jcase-beaups-lg-tool-t3357312/page3
I replied to jcase at the end of this post on the tmobile forum. Thought about PMing him but its supposedly taboo to ask about the tool they posted so I figured I'd see if he would reply. Any other ideas let me know. I really want to know how they got root working and if it was full root or just user debug as the full root is helpful but userdebug was not as useful.
Really hate it that someone was stupid and released it early and got them ticked off about it.

Question How I can obtain a firmware file for this device?

Hello all!
I have a question concerning a device, I have a Cricket Dream 5G and the device is completely bootloader unlocked. However, I'm trying to figure out how I can obtain a firmware file for the device seeing as the Carrier or manufacturer hasn't released one. It is a MediaTek device running the MT6833 and efforts to make a scatter file in order to read with SP Flash tools have been unsuccessful,
I've also attempted to download an OTA update and see if it saved the file locally, as well as packet dump the update process via Wireshark. No Cigar.. it appears to be in the Cache partition which isn't accessible without root (which cannot be obtained without running TWRP with the device being Android 11). does anyone have any suggestions on how I might be able to get a copy of the system image or boot images for the use of making a working TWRP?
Thanks a lot!

Josephdbrewer25 said:
Hello all!
I have a question concerning a device, I have a Cricket Dream 5G and the device is completely bootloader unlocked. However, I'm trying to figure out how I can obtain a firmware file for the device seeing as the Carrier or manufacturer hasn't released one. It is a MediaTek device running the MT6833 and efforts to make a scatter file in order to read with SP Flash tools have been unsuccessful,
I've also attempted to download an OTA update and see if it saved the file locally, as well as packet dump the update process via Wireshark. No Cigar.. it appears to be in the Cache partition which isn't accessible without root (which cannot be obtained without running TWRP with the device being Android 11). does anyone have any suggestions on how I might be able to get a copy of the system image or boot images for the use of making a working TWRP?
Thanks a lot!
Click to expand...
Click to collapse
It works for most of newer MediaTek devices, you could back up any partition from it https://github.com/bkerler/mtkclient eventually you could root it too.
As per a TWRP for your device, you should try to build it from source or porting it from a similar device (system image not needed though) or wait for some developer to do it.

SubwayChamp said:
It works for most of newer MediaTek devices, you could back up any partition from it https://github.com/bkerler/mtkclient eventually you could root it too.
As per a TWRP for your device, you should try to build it from source or porting it from a similar device (system image not needed though) or wait for some developer to do it.
Click to expand...
Click to collapse
I've successfully backed up the device and gained root access. Thank you so much for recommending this tool. It worked, just voided my warranty lol. Had to disconnect the battery which requires taking apart the device

SubwayChamp said:
It works for most of newer MediaTek devices, you could back up any partition from it https://github.com/bkerler/mtkclient eventually you could root it too.
As per a TWRP for your device, you should try to build it from source or porting it from a similar device (system image not needed though) or wait for some developer to do it.
Click to expand...
Click to collapse
Also do you know where the stock recovery is located. I can't seem to find it anywhere, like it doesn't even exist.

Josephdbrewer25 said:
I've successfully backed up the device and gained root access. Thank you so much for recommending this tool. It worked, just voided my warranty lol. Had to disconnect the battery which requires taking apart the device
Click to expand...
Click to collapse
Usually when a device's software had been modified, it may lose the warranty, or not, depending on what the "small" letters on a contract says, anyway, you could restore to its original state at any time, as you see in the need to claim it.
Normally, this tool works only installing the USDK64 drivers, and connecting device when power off, pressing the two volume buttons, I never need to open the back cover as MediaTek devices have the preloader mode, that it used by this tool to bypass the DA/SLAA protection, it does in the first stage the same thing that this tool does https://www.xda-developers.com/bypass-mediatek-sp-flash-tool-authentication-requirement/ but without the need to use SP Flash tool but reading/writing directly onto the device.
Josephdbrewer25 said:
Also do you know where the stock recovery is located. I can't seem to find it anywhere, like it doesn't even exist.
Click to expand...
Click to collapse
Newer devices doesn't have a dedicated recovery partition.

SubwayChamp said:
Usually when a device's software had been modified, it may lose the warranty, or not, depending on what the "small" letters on a contract says, anyway, you could restore to its original state at any time, as you see in the need to claim it.
Normally, this tool works only installing the USDK64 drivers, and connecting device when power off, pressing the two volume buttons, I never need to open the back cover as MediaTek devices have the preloader mode, that it used by this tool to bypass the DA/SLAA protection, it does in the first stage the same thing that this tool does https://www.xda-developers.com/bypass-mediatek-sp-flash-tool-authentication-requirement/ but without the need to use SP Flash tool but reading/writing directly onto the device.
Newer devices doesn't have a dedicated recovery partition.
Click to expand...
Click to collapse
It wouldn't stay in preloader mode, after a few minutes it would just reboot. Disconnecting the battery worked.
As for the recovery, I know it doesn't have a partition but it's gotta be somewhere, right? I can boot into recovery. It's been awhile since I've dabbled in this. My last phone I rooted was the Moto X 1st gen but to build twrp I need the stock recovery, right? I've seen on the net it's in the boot.img but I've yet to see it.

Josephdbrewer25 said:
It wouldn't stay in preloader mode, after a few minutes it would just reboot. Disconnecting the battery worked.
As for the recovery, I know it doesn't have a partition but it's gotta be somewhere, right? I can boot into recovery. It's been awhile since I've dabbled in this. My last phone I rooted was the Moto X 1st gen but to build twrp I need the stock recovery, right? I've seen on the net it's in the boot.img but I've yet to see it.
Click to expand...
Click to collapse
My device is the Cricket Dream 5G EC211001. It's weird

Josephdbrewer25 said:
It wouldn't stay in preloader mode, after a few minutes it would just reboot. Disconnecting the battery worked.
As for the recovery, I know it doesn't have a partition but it's gotta be somewhere, right? I can boot into recovery. It's been awhile since I've dabbled in this. My last phone I rooted was the Moto X 1st gen but to build twrp I need the stock recovery, right? I've seen on the net it's in the boot.img but I've yet to see it.
Click to expand...
Click to collapse
It doesn't really need to stay in preloader, this is the whole purpose of this tool, preloader is, actually, useless for flashing, when you press the two volume buttons, the device enters to preloader mode
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
if you installed correctly the drivers, then, mtkclient detects the device, in the short time, and make it return to BROM mode through a handshake, to bypass the DA/SLAA authorization,
BROM mode is disabled by OEMs, similarly to EDL point, without this kind of tool, no more remedy that opening the back cover.
Moto 1st gen, it's a long time ago. It is placed in a tiny portion of the ramdisk, but you don't need to find where’s located.
If you think to port it, actually is not as easy due to newer implementations, A/B slots, virtual slots, a way to fix it permanently, etc., but basically what you need is in the boot image