Database Users

[Q] Replace or modify bootloader

Hi,
I would like to have some informations about the Google Nexus 10 Bootloader (and more generally all google device bootloader). Is it possible to reverse-engineering and modify some opcode, or it's signed by the hardware device like the samsung device (I9100 bootloader & co) ? OR is it a way to put my own bootloader based on Das U-Boot on the device ?
The goal is to turn on some CPU mode (hypervisor) to run the kernel in a special mode for virtualization purpose.
Is it sbl.bin who setup CPU mode for the kernel ?
Is bootloader wrapper or 'trampoline like' (which is called by the real bootloader, and will call the kernel with some additional cpu options) is a viable solution ? [1][2]
The cpu load the kernel in a non-secure SVC mode or secure SVC mode ?
[1] h t t p wiki.xen.org/wiki/Xen_ARM_with_Virtualization_Extensions/FastModels
[2] h t t p github.com/virtualopensystems/boot-wrapper
[3] w w w xenproject.org/presentations-and-videos/video/xpds13v-dual-android.html
[4] h t t p events.linuxfoundation.org/sites/events/files/slides/SRUK_Xen_Presentation_2013_v7.pdf
Thanks for your help!

Anyone ?
Is the Samsung guys from [3] has the right the change (and sign) the bootloader to enable HYP-mode, or did they find another way to do this ?
Thanks!

Bramone said:
Anyone ?
Is the Samsung guys from [3] has the right the change (and sign) the bootloader to enable HYP-mode, or did they find another way to do this ?
Thanks!
Click to expand...
Click to collapse
Try posting in the correct section , here you will get no response, look at the top of this page....
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Do NOT post question threads in General section!
Take one post lower in Q&A ...:good:

Any help on bootloader modification? I have a phone with bricked eMMC and I need to modify bootloader to load boot.img (kernel+ramdisk) from external sd card instead of eMMC if it's possible.
https://forum.xda-developers.com/android/help/how-to-boot-sd-card-qmobile-z8-bricked-t3712171

Fastboot says "flashed" but nothing changes.

Hello. Some time ago I flashed stock rom ALE-L21C22B160 and I got blank page in "Motion control" so I went to Huawei site and I downloaded C432B170. Then I extracted boot, recovery and system, then I flashed it without any problems.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Then I simply did "fastboot reboot" and my device rebooted with the old firmware, nothing changed at all.

I think you also need to flash to Cust.img

EpicBas said:
I think you also need to flash to Cust.img
Click to expand...
Click to collapse
Thanks, it worked, but I can't get proper firmware, I'm always getting one of those:
- blank "Motion control" page
- phone getting into rescue mode due to some problem with boot.img
Can you give me a link to firmware that actually works and has motion control? Thanks.

Lotherad said:
Thanks, it worked, but I can't get proper firmware, I'm always getting one of those:
- blank "Motion control" page
- phone getting into rescue mode due to some problem with boot.img
Can you give me a link to firmware that actually works and has motion control? Thanks.
Click to expand...
Click to collapse
@Lotherad Try one of these which matches your phone http://huawei-updates.ru/ALE-L21.html

EpicBas said:
@Lotherad Try one of these which matches your phone http://huawei-updates.ru/ALE-L21.html
Click to expand...
Click to collapse
It says "Attention! Please update system again Error! Func NO : 11 (recovery image) Error NO : 2 (load failed!)". Oh man, is there any hope for me? :crying:

did you unlock the bootloader ? and enabled USB bedugging ? ( sorry if it's stupid question )
any way , here is a thread that you do not need to flash with fastboot via commands ( C432B052 Rom version ) , it will automatically do the job , and i think it would work fine for you , and also if you want to have marshmallow , you can simply follow the reste of the thread
Link : http://tundevs.blogspot.com/p/huawei-p8-marshmallow.html
good luck

A way to unlock hardbricked Meizu Pro 5 ?

Hi,
I've hard bricked my Pro 5. No recovery access, no boot to rom, locked bootloader. After many search i see this : https://forum.xda-developers.com/meizu-pro-5/how-to/meizu-customer-service-flash-tools-save-t3447678, but this is bull-****.
I test many manipulations to get something on my phone other than "Bootloader, Locked".
So i dicovered this : Press and holp Vol + and Vol - and press one time power button. We get this :
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
After research about this, we get this :
http://forum.gsmhosting.com/vbb/f777/galexy-s6-exynos-7420-dead-1975230/#post12369382
And this :
http://www.mediafire.com/file/9qmezaezy1fyzrr/Galaxy_S6_Boot_recovery.pptx
Possible way to unlock hardbricked Pro 5 ?
Same way exist for Qualcomm Processor : http://www.androidbrick.com/unbrick...-have-the-right-kind-of-rom-qhsusb_dload_edl/

Subscribed, i do also have a spare "bricked" device

same problem here bro.tried everything..only mode available is fastboot and locked bootloader.in pc device manager i get unknown android 1.going to investigate the problem futher more.pls keep us in touch.tnx

barbonee said:
same problem here bro.tried everything..only mode available is fastboot and locked bootloader.in pc device manager i get unknown android 1.going to investigate the problem futher more.pls keep us in touch.tnx
Click to expand...
Click to collapse
Hey there. Got the same problem. Tried everything. Nothing happens. Have you got your problem solved yet?

The same problem
Sent from my PRO 5 using Tapatalk

Only way to solve this is taking the phone to technical service. Done it myself. Be careful tought, they will try to make you change the entire mother board (280€), but if you insist they will "find a way" to install the correct software in your phone and leave it as if it was new

it is possible to recovery via dongle ... but sn and imei can be lost

Try this thread.
https://forum.xda-developers.com/me...hard-bricked-lost-t3838461/page2#post79752427
Try this thread; it worked perfectly for me.

Motorola Moto G31 (W) XT273-3

Hello i have a Motorola Moto G31 (W) XT273-3
OEM Locked - Android 11
FRP Locked
AP fastboot Flash Mode (Secure)
BL: MBM-2.1-Cofud_g-3e4f6a263-22075
Baseband: <not found>
Product/Variant: Cofud XT2173-3 64GB PVT
Serial Number: ZY22DXWR2G
CPU: MT6769V/CZ
eMMC: 64GB MICRON G1J9R8 RV=08 PV=00
FV=0000000000000204
DRAM = 4GB MICRON LP2 DIE=4GB M5=FF M6=06 M7=00 M8=18
CONSOLE=[NULL]: null
TOOLS MODE CONFIG: DISABLED
BATTERY OK
TRANSFER MODE: USB CONNECTED
Access - Summary of within RECOVERY MODE: NO COMMAND (DROID IMAGE with Error Sign) - can though with Vol up get into inside the recovery mode.
IMEI1: 3564200662778950
IMEI2: 3564200662778968
Within normal operational mode, it can access to wifi
the wifi address is 192.168.1.75
MAC Address to WI-FI card is 4a: 5e: 8f: 58: da: oc
FRP: 0X2F08000 - 0X100000
Pattern: 0X30B0000000 - 0XC0000000
i read another article https://firmwarespro.com/frp/motorola-moto-g31-detail where they describe a potential method to bypass FRP (Without having EMAIL and password information) i have not been able to sucess with that yet though, that's why i ask professionals here for advice and guidance how / if i can write the EEeProm chipset or someway reinstall custom ROM to the phone internal storage - and from that point bypass / get rid of previous stored Google FRP data.
Thanks in advice
Best regards
Richiie

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

https://mirrors.lolinet.com/firmware/motorola/cofud/official/ i found this foreign archive including ROM files for various phones. Could this perhaps be something that can be used in order to succeed properly?
https://custom-rom.org/download-custom-rom-for-moto-g31-android-12/ found this aswell but i don't know it's integrity if its a trusted source?
Here below is the link i mentioned previously found the unofficial method to bypass FRP.
Motorola Moto G31 FRP Bypass Android 11 Google Account Unlock Without PC & APK Free
In this post, I share the latest step-by-step tutorial to Motorola Moto G31 FRP Bypass Android 11 Google Account Unlock Without PC & APK Free
www.bypassfrpfiles.com
best regards

Hello every one, I have same phone, maybe some make custom system for this device, or pls how I can do it myself for share, maybe some linageos avaliable for this device?
pls some help me about assembling custom of for this phone how I can do it?
Also I have all needed for compile, but I cant know how make custom firmware from sources, pls help some one

overtube said:
Hello every one, I have same phone, maybe some make custom system for this device, or pls how I can do it myself for share, maybe some linageos avaliable for this device?
pls some help me about assembling custom of for this phone how I can do it?
Also I have all needed for compile, but I cant know how make custom firmware from sources, pls help some one
Click to expand...
Click to collapse
Anybody got anything, any information or advice what to do or how to proceed?
Best regards

Richiie89 said:
Anybody got anything, any information or advice what to do or how to proceed?
I want make custom os for phone but I can't find blobs on github for this model
Click to expand...
Click to collapse

I would buy this phone if it had custom rom and unlockable bootloader.

veseihaty said:
I would buy this phone if it had custom rom and unlockable bootloader.
Click to expand...
Click to collapse
I wish there would be more guides and how-to's how to proceed / reinstall the bootloader for this phone and make it work properly again.

davinci M1903F10G (locked bootloader) bootloop, it is possible to recover the user data ?

Hello,
i have here a Xiaomi M1903F10G from a good friend, which stuck in a boot loop: phone seems to boot normal, home screen is visible for roundabout 1 second and the phone reboot immediately. Do we have a chance to get the user data (family photos etc.) ?
With Vol+ + Power button i get a "main menu mi-recovery 3.0" with the following options:
Reboot
Wipe Data
Connect with MIAssistant
With Vol- and Power button i can enter Fastboot mode, here are some info:
Bash:
[email protected]$ fastboot oem device-info
(bootloader) Verity mode: true
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: false
OKAY [ 0.001s]
Finished. Total time: 0.001s
I can successful enter the EDL mode (i think) via shorting the pins on the main pcb, then phone shows up as "Qualcomm HS-USB QDLoader 9008 (COM6)". According to [GUIDE] How to dump and write back the storage on most of Qualcomm devices i should then use the right firehose file and try to open the partition manager. I tried many different firehose files(see attachments)/storage settings/2 computers(win10x64)/cables(usb-a 2.0/usb-a 3.0/usb-c), i can never successfully open the partition manager.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Now the question:what i can do to recover the user data for my friend ? I know i could oem unlock and try to boot into twrp, but as far as i know unlock would wipe all user data. (My friend has also the bill from when he bought the device if that helps).

there is not much you can do on locked bootloader. you can dump raw partitions, that's it. it isn't of any use because of encryption. all you could try is check file system for possible errors (if not metadata encrypted)
have you found loader that worked? try this python script in linux
https://github.com/bkerler/edl

Hello Alecxs,
thanks for your reply. Unfortunately, in the meantime i had to give the phone back to my friend. She told me, she want to try her luck with a commercial data recovery store. Hopefully they are lucky and are able to recover the photos.
Best,
Marcel

Recover photos? Aren't photos synchronised with Google?

Nope.

Then, all data should be backuped. No way to retrieve as data is encrypted anyway

yaro666 said:
Then, all data should be backuped. No way to retrieve as data is encrypted anyway
Click to expand...
Click to collapse
That is not correct, but thanks anyway.