Database Users

Stock recovery extraced from BTV-W09C233B019 ROM - untested

Hi M3 users,
I'm a long time lurker and reader on XDA. Now it's time to give something back or at least participate
Following my recent M3 purchase a dugg a bit deeper into this topic and tried to get us the stock recovery for our devices.
I'm not really a dev. I just used the information I found here and in the russian forum where greatslon (thank you guy) is posting his work.
If you find an error in the process please let me know. The files have not been tested in any way. I have no idea if this would even work (encryption and so on).
So I managed to extract the recovery.img file from the chinese rom. This method will also work for the LTE variant.
Maybe @greatslon or @somboons can share their view on the topic or maybe @somboons can even use it in his tool.
Resources
http://4pda.ru/forum/index.php?showtopic=780572&st=120
http://forum.xda-developers.com/showthread.php?t=2433454
http://forum.xda-developers.com/tools/general/huawei-firmware-finder-team-mt-t3469146
https://play.google.com/store/apps/details?id=com.teammt.gmanrainy.huaweifirmwarefinder
Tools used
Huawei Firmware Finder (Team MT)
Huawei Update Extractor
Download
M3_BTV-W09C233B019_recovery.zip
Process
1. Start firmware finder (did use the android version)
2. Change device to BTV-W09C233
3. Downloaded the firmware B019 for BTV-W09C233 (no firmware for other variants present ATM)
4. Extracted and copied update.app to SD card
5. copy to PC
6. Extract recovery.img and recovery2.img using Huawei Update Extractor
Best regards,
Benjamin

Don't quite understand what's this for. First of all, recovery should be the same version as your ROM. I don't know if their mismatch will immediately lead to some malfunction, but some people on 4pda said they should match. Second - stock recovery's functions are limited to factory reset (wiping data, cache, etc.) and installing OTA updates. Without changing OEMINFO (and it's still unconfirmed), you won't be able to install any OTA except those, intented for your model and region, so again there's no need to install a higher version of recovery than your ROM is. But anyway, thank you for the extraction instruction.
P.S. I think there's no need to flash both recovery and recovery2. Recovery2 can be successfully replaced with TWRP and this combination is really great, cause you can launch TWRP by holding Volume Up button only.
And the only reason why you should keep recovery original is that it doesn't really wipe /data - it also creates some files there like custom.bin, containing your regional settings.

Hi Slavon,
Thanks for your highly appreciated comment. @somboons was looking for a stock recovery so I thought this might help.
Your given information are really helpful. I did not know that you could flash TWRP in recovery2 and replace erecovery Handy information.
I'm pretty new to the Huawei structure so always glad to learn something.
EDIT
A lot of good information can be found here: http://forum.xda-developers.com/honor-7/general/dual-recovery-honor-7-t3308398
Thank you very much,
sselpeelsxx

Giving Back
Benjamin,
I've also been a long time XDA lurker. Most of the devices I have owned were mainstream and thus already had a very active XDA developer community; Even if root had yet to be achieved, there would be hundreds of messages on the topic.
It seems the Mediapad M3 is just getting started. I am a developer of over 20 years, but very little android experience. However, I have recently spent a considerable amount of time (about 50-100 hours) working with the low level ADB protocol source code. And I have rooted and flashed no less than 50 devices, everything from cell phones to Android TV devices to routers.
I'm going to take this device on as my first real dev effort in this arena.
I have a few goals:
1. Get working backups for people that soft-brick or need to revert (including myself).
2. Recompile TWRP for the M3 to confirm greatslon's work, and better understand the process.
3. Release a stock rom that's pre-rooted and cleaned up (not that there was a lot of bloat on my device).
4. Release a custom rom that's not MIUI (perhaps based of CyanogenMod).
Since I have virtually no experience, I am sure these goals are quite lofty and will take some time. But hey, you got to have a plan, and I don't have anything else to work on right now.
Let me know if you want to work on anything together, or if you need any help with anything development related.
- 0D0A

Hey hey 0D0A,
I totally agree with you regarding the backups, I think once the first OTA update is pushed for the EU and US devices we have a good and safe way to go back.
Especially the US owners are struggling with greatslons TWRP version, that's the first thing we should tackle after the backup topic is cleared
I will contact you regarding possible work
Best regards,
Benjamin

can flash twrp via fastboot but get error saying and no recovery
hi, first thanks greatslon for doing the work on m3.
i seem to have succeeded in getting stuck and can't get it to boot into your custom twrp. adb on linux was working fine, but no longer. ditto for fastboot just get "waiting for devices" now. i switched to win10 and installed the hisuite app so i can use fastboot but still no adb. so i have tried to flash recovery and recovery2 but when i try to boot recovery i get error "Func NO: 11 (recovery image) ERROR NO: 2 (load failed)."
i then downloaded your custom rom and tried to flash the boot for that still no luck. i can't use adb so i am not sure how to just flash the custom rom with fastboot without being able to get into any recovery.
i did have this all rooted and working with your twrp but kept having issues with dpi and there was an ota update (b003) which wouldn't apply. so i tried to restore backup and it wen't south from there. basically now can't do much other than see the unlock "can't be trusted" page and bootloader.
any suggestions?

Desperately need stock recovery img, not sure exactly what when wrong, but it is stuck in a horrible boot loop. Tried Benjamin's recovery files and they seem to remove twrp and put it somewhat back to normal, but can only access the emui recovery and that fails to load the files. Put twrp back and tried greatslon's ROMs, they load but goes back to boot loop. Wipe and format everything, install my original backup through twrp recovery, it says it works, but again, back to boot loop... at this point I think I'm dead... any ideas, any word on the official recovery img? anything? Help!!

What device do you have? And what version were you on?

sselpeelsxx said:
What device do you have? And what version were you on?
Click to expand...
Click to collapse
I have the M3, BTV-W09, not sure what version, MM6.0 EMUI 4.1

Anyone have any other ideas on horrendous boot loop?

sselpeelsxx said:
Hey hey 0D0A,
I totally agree with you regarding the backups, I think once the first OTA update is pushed for the EU and US devices we have a good and safe way to go back.
Especially the US owners are struggling with greatslons TWRP version, that's the first thing we should tackle after the backup topic is cleared
I will contact you regarding possible work
Best regards,
Benjamin
Click to expand...
Click to collapse
Hello, I am unlocked, TWRPed, and rooted, but am trying to reverse all of that. My build number is BTV-W09C128B002. Is it safe to download the stock recovery from the OP for my device? Or do I really need the C128 version?

Hello and sorry for the late response, you would need the matching version for your C128 device.
I may be able to extract recovery from an update, I have to look into this tomorrow.
Regards

sselpeelsxx said:
Hello and sorry for the late response, you would need the matching version for your C128 device.
I may be able to extract recovery from an update, I have to look into this tomorrow.
Regards
Click to expand...
Click to collapse
Thanks! I have been able to use the Huawei Extractor to extract a recovery.img from OTA updates, but have been afraid to try flashing it. It has been recommended to hold off on trying that since that recovery.img is from an OTA and not a FULL update. Any thoughts?

Recovery unaviable after Nougat update

Hey people,
I've updated to the unofficial Nougat leak here and ever since I can't get into the recovery. The ROM is OK but no matter what I do I can't get into the recovery. After "adb reboot recovery" I just get stuck in a boot loop and I must get into the upgrade utility and restart phone into the system from there. I've tried to flash few other recovery but nothing works. So far I'm fine with the system and I'd like to also try LineageOS but I have no way to flash the ROM. I have tried "Fastboot flash zip xx.zip" from the bootloader to flash LineageOS but it told me I don't have permissions so it was no good.
So do you folks here have any idea what I did wrong and how to make the recovery work again? I'm kind of learn from the tutorial guy so I'll post the sources I've been using to do the flash.
Unlocking bootloader and flashing new recovery
I've only used the unlock bootloader and flash twrp sections with their provided recovery. I've also tried to flash THIS recovery by Meticulus after the nougat update.
Flashing the ROM + used ROM
Used the old process because upgrade with system utility kept giving me errors.
Model number - VNS-L21
Also if this issue can't be (yet) fixed do you know any way to safely flash ROMs without recovery?
Thanks for any kind of help

You cannot flash any ROM in the nougat recovery, because it does not support /data mounting. Downgrade to MM and install the ROM you want from there.

@SALVO9
Ok, thank you for the reply. I'll probably try to downgrade and flash it afterwards to know which ROM suits me better. All I need to do is find the stock ROM copy it to the phone and restart with all buttons pushed right? Also, do you have any info about when there will be a nougat recovery that can mount /data?

TheAstaros said:
@SALVO9
All I need to do is find the stock ROM copy it to the phone and restart with all buttons pushed right?
Click to expand...
Click to collapse
No.
Flash proper OEMinfo first!

@Schlengge
Thanks for the advice. I did my research because I didn't know a thing about oeminfo and I have hit a wall since my phone is not rooted(Should have mentioned that earlier I know) and I'm supposed to replace custom.bin and then flash the img. So afterwards I searched how to root this nougat ROM and found nothing no app was working and everything I found was just using the phone's recovery which I can't access. Does anything come to mind? I will continue getting through the pages of google but I don't think I'll find anything useful.
EDIT> After some searching I found the official rollback package. I have yet to test it (downloading on slow connection atm) and I hope it will work.

Ok it's finally done and I'm back at old stock ROM(EMUI 4.1.1 VNS-L21C432B160) after hours of searching I gave up on the oeminfo or rooting the phone. I searched for the stock firmware and found some rollback packages on the Huawei site. I will post the links in there you even have instructions packed with the zip.
LINK1
LINK2
Download both start with the smaller one because it's flashing first and follow the instructions in the pdf. Worked for me so hope it also helps you.
Also as I found out just now this rollback also locks back your bootloader so be sure to unlock it back again with the code.

Rollback NXT-AL10 TO EMUI 6 ?

HI
can anyone help me to rollback my nxt-al10 to emui 6 please

drlsd said:
HI
can anyone help me to rollback my nxt-al10 to emui 6 please
Click to expand...
Click to collapse
Emui 6 ?? or maybe you want to say emui 4 and android 6 ??

Yes ,thank you very much ,i mean emiu 4.1 please

drlsd said:
Yes ,thank you very much ,i mean emiu 4.1 please
Click to expand...
Click to collapse
unlock & flash TWRP recovery & flash another firmware using TWRP
https://forum.xda-developers.com/tools/general/huawei-firmware-finder-team-mt-t3469146

I would like too to rollback my nxt-al10 from emui 5.0 (android 7.0) to emui 4.0 or 4.1.
Now my rom is nrd90m test-keys (AL10).
I read last post and I don't know how to unlock & flash TWRP recovery - before emui 5.0 I use SRKToolHuawei but now SRKTool don't support emui 5.0
Guys pleas help me.

bodzio3333 said:
I would like too to rollback my nxt-al10 from emui 5.0 (android 7.0) to emui 4.0 or 4.1.
Now my rom is nrd90m test-keys (AL10).
I read last post and I don't know how to unlock & flash TWRP recovery - before emui 5.0 I use SRKToolHuawei but now SRKTool don't support emui 5.0
Guys pleas help me.
Click to expand...
Click to collapse
If you're​ on nrd90m test key ,you can simply dload your last EMUI4 or 4.1 rom
Sent from my Huawei Mate 8 using Tapatalk

amin318 said:
If you're​ on nrd90m test key ,you can simply dload your last EMUI4 or 4.1 rom
Sent from my Huawei Mate 8 using Tapatalk
Click to expand...
Click to collapse
I tried with dload method rom NXT-AL10C00B386 and while after boot in update I see that:
Software install failed!
Incomatibility with current version.
Please download the correct update package.
Please help

​
bodzio3333 said:
I tried with dload method rom NXT-AL10C00B386 and while after boot in update I see that:
Software install failed!
Incomatibility with current version.
Please download the correct update package.
Please help
Click to expand...
Click to collapse
Did you change your phone's cust version? If u changed it you should dload a firmware (4/4.1) that match with your new cust
I rolled back with this method dozen times when EMUI 5 was not officiall!
Sent from my Huawei Mate 8 using Tapatalk

amin318 said:
​
Did you change your phone's cust version? If u changed it you should dload a firmware (4/4.1) that match with your new cust
I rolled back with this method dozen times when EMUI 5 was not officiall!
Sent from my Huawei Mate 8 using Tapatalk
Click to expand...
Click to collapse
No. this time my rom was stock I dload NXT-AL10C00B386, lost root and unlock bl and them do OTA to EMUI 5.0.
I realy don't know when I stuck od NRD90M. One time I pull the phone out of my pocket and see red message after reboot... that's all.
Hisute can't help me, I try.
Some advices, please.

bodzio3333 said:
No. this time my rom was stock I dload NXT-AL10C00B386, lost root and unlock bl and them do OTA to EMUI 5.0.
I realy don't know when I stuck od NRD90M. One time I pull the phone out of my pocket and see red message after reboot... that's all.
Hisute can't help me, I try.
Some advices, please.
Click to expand...
Click to collapse
Is that red message verification failed message?
If yes then please unlock the bootloader again even if it says unlocked. Then it will do factory reset and the red message will disappear.
You can then try to flash the stock firmware in TWRP. You can use B368 or B386 stock firmware from another thread and flash in TWRP. That is if you have TWRP. If you don't then unlock bootloader and then install TWRP using SRK tools. You can use SRK tools for adb commands also. Just type 000 on first page off srk tools and you will get into command prompt. Using that push the TWRP into your phone. ADB is very stable in srk tools and it will always identify your device. So that problem you won't have.
I couldn't find a proper rollback for AL10 . May be some one else can give if it is there for this model. If it was L29 model then rollback package is available and you can easily rollback using that in this type of situation.
If the flashing of stock ROM worked then you try to debrand your phone to L29 later. You will have many options then and L29 firmwares are more stable. I have AL10 which I debranded to L29 & I totally recommend debranding to C432 once your problem is solved
Do the above steps only if you are on marshmallow firmware.
Don't forget :good::good::good::good::good:

I created a al10 roll back for all al10 phones. It converts it to a DL0017 dual active sim. Message me for details how to obtain it from me .. MUST have twrp installed .

Samavb said:
Is that red message verification failed message?
If yes then please unlock the bootloader again even if it says unlocked. Then it will do factory reset and the red message will disappear.
You can then try to flash the stock firmware in TWRP. You can use B368 or B386 stock firmware from another thread and flash in TWRP. That is if you have TWRP. If you don't then unlock bootloader and then install TWRP using SRK tools. You can use SRK tools for adb commands also. Just type 000 on first page off srk tools and you will get into command prompt. Using that push the TWRP into your phone. ADB is very stable in srk tools and it will always identify your device. So that problem you won't have.
I couldn't find a proper rollback for AL10 . May be some one else can give if it is there for this model. If it was L29 model then rollback package is available and you can easily rollback using that in this type of situation.
If the flashing of stock ROM worked then you try to debrand your phone to L29 later. You will have many options then and L29 firmwares are more stable. I have AL10 which I debranded to L29 & I totally recommend debranding to C432 once your problem is solved
Do the above steps only if you are on marshmallow firmware.
Don't forget :good::good::good::good::good:
Click to expand...
Click to collapse
Thank you for help
Yes it is red message verification failed message.
I'll change AL10 to L29C432 when I can do that
The bigest problem is that I stuck on androit 7.0 emui 5.0.
So maybe you help me unlock bl (I have unlock code) and flash TWPR....

Unlock bootloader ADB commands + Stock + Debrand
bodzio3333 said:
Thank you for help
Yes it is red message verification failed message.
I'll change AL10 to L29C432 when I can do that
The bigest problem is that I stuck on androit 7.0 emui 5.0.
So maybe you help me unlock bl (I have unlock code) and flash TWPR....
Click to expand...
Click to collapse
If you want to unlock bootloader through ADB?
Here are the steps.
In your phone go to settings - >developer options - > put usb debubbing ON
switch off the phone.
Press and hold the down button for 3 seconds & then connect it to the computer
It will then go to fastboot mode.
then open SRK tools
type 000 to enter the command prompt.
Type the following command
fastboot oem unlock xxxxxxxxxxxxx
In this command xxxxxxxx is your bootloader code. just replace xxxxxxx with your code and press enter.
This will unlock your bootloader & will do a factory reset.
In SRK tools there is an option for bootloader unlock but I think that is only if you are in EMUI 4.0 or EMUI 4.1 that is what I think may be anyone else who tried this option in android 7.0 can confirm but the adb commands will work.
I have enclosed screenshots for better understanding.
you have mentioned that you are in Android 7.0
Can you tell me your exact firmware that you have on your phone at the moment?
After you get rid of that red message. Your bootloader is unlocked.
There is Erecovery process - > steps below (but there is a problem with this process)
1)Switch off the phone.
2) Press and hold the volume up button and then connect your phone to computer or charger. Yes charger. Then you can download stock firmware through your WIFI - > this will also install stock firmware. But I think this won't work because of unlocked bootloader
So once again install the TWRP for Android 7.0 I think it is Twrp 3.0.2 or Twrp 3.0.3 - > this is definitely for nougat.
ADB command to install twrp recovery is
fastboot flash recovery twrp.img ( rename the TWRP to twrp.img ) in the adb.
Try to flash the stock firmware zip files in TWRP.
Here you have two options - > You can either try flashing B386 files (only one zip file) or B562 (android 7.0 - > 2 zip files - first update.zip and then the other zip file)
If you are successful in this step then your TWRP will be overwritten with stock recovery.
That is ok. don't worry. Kangvip ROM is pre-rooted ROM. So you will get root in the end. For now its ok to be on Stock at this step.
Stock Recovery + Stock ROM + bootloader locked -> then you can dload back to EMU 4.1 using B386 firmware.
Then you can unlock bootloader (again) yes its a pain + followed by TWRP + ROOT - one after the other in SRK tools its all there. you can use the options in SRK tools this time.
And once you have root again.
Take backup and save it on your SD card. (except DATA , take backup of all options listed there, why? bcoz if you include data - > it will increase the backup size and it will take more time.
*Disclaimer* -> Very tricky & risky process - proceed with caution & full attention
Then - > you can debrand - > to C432 -(debranding is very tricky process, so keep your backup handy) This should be done very carefully because any problem here means you might find less space on your internal memory. Then you will have to restore that backup to get back your space.
Here is the link to excellent tutorial by somboons Watch it carefully.
https://www.youtube.com/watch?v=JZVsIKtdgV4
Just follow that as it is for debranding from AL10 to L29-C432
I am very very sorry for all these confusing and tricky steps. Please proceed with caution when you are doing the debranding process. Do not get diverted during that process.
Yes I did all this when I debranded my Huawei Mate 8 AL10 to L29. I had lot of anxious moments, doubts & my mind started playing tricks if mate 8 was dead on few occassions. But in the end my phone prevailed. Now I am happily using L29 - Kangvip B577. That is where I want you to land up in the end.
Do not worry and do not panic any time. Be prepared to face few challenges during this process. I will help you but please share your experience and follow the steps carefully.
During debranding you might have your phone rebooting or something might happen. That time do factory reset and continue from where you left off. If you get red message - > then you have to unlock bootloader. Otherwise continue.
This whole process will test your patience & consume time. So I hope you are willing to do this. Its worth it. I learnt my lesson, I am never buying chinese version of Huawei phones/tablets again. Only European models from now onwards.
Finally
Do not forget to click on :good::good::good::good::good::good::good:
I hope you understand.

I stared few hours ago.
First unlock bl - red message disapire
After bl I was error durind format bus system run witout any problem.
Then flash TWRP 3.1.0-2 and try to flash NXT-AL10C00B368-update.zip but I see this:
http://gofile.me/6tsPr/sHOJ4cLcr
http://gofile.me/6tsPr/cXniG4g8D
Some advices?

Options
bodzio3333 said:
I stared few hours ago.
First unlock bl - red message disapire
After bl I was error durind format bus system run witout any problem.
Then flash TWRP 3.1.0-2 and try to flash NXT-AL10C00B368-update.zip but I see this:
http://gofile.me/6tsPr/sHOJ4cLcr
http://gofile.me/6tsPr/cXniG4g8D
Some advices?
Click to expand...
Click to collapse
TWRP 3.1.0.2 is actually used for flashing nougat firmwares.
Which firmware are you on right now?
Are you on nougat or marshmallow? Please provide the full firmware build number.
if your phone is on marshmallow.
TWRP version depends on your firmware.
If you are on EMUI 4.0/4.1 then pls use the TWRP 3.0.2
you can use SRK tools to install that TWRP if you are on EMUI 4.0/EMUI 4.1
Install that version. Then
Factory reset
Flash the B386 zip file in TWRP.
You can get the B386 from here https://forum.xda-developers.com/showpost.php?p=69331930&postcount=1338
If your phone is on Android Nougat.
Then you have to use dload method.
Unzip the B386 zip file.
Put the update.app in the dload folder inside your external sdcard.
Go to your dialer
*#*#2846579#*#*
Select "software upgrade"
then Select - > SD card upgrade.
And then it will reboot and install the stock firmware.
This thread has all the Stock firmwares.
https://forum.xda-developers.com/mate-8/general/huawei-mate-8-stock-firmware-official-t3391727
Hope the above steps solve your problem. If not, then we will try something else. please answer all the questions to help you better especially your full build number (firmware version).
:good::good::good::good::good:

Thank you
I'm on emui 5,0 android 7,0 nugat ROM nrd90m test-keys - before I don't remember, upgrade ota for AL10 model. Maybe AL10C00B552.
So I have to try flash nugat ROM AL10 by TWRP 3.1.0.2.
Dload method dont work - I never need sd card for this.
Can I flash nugat rom dload method? And where I find stock recovery for nugat?

TWRP & Erecovery methods
bodzio3333 said:
Thank you
I'm on emui 5,0 android 7,0 nugat ROM nrd90m test-keys - before I don't remember, upgrade ota for AL10 model. Maybe AL10C00B552.
So I have to try flash nugat ROM AL10 by TWRP 3.1.0.2.
Dload method dont work - I never need sd card for this.
Can I flash nugat rom dload method? And where I find stock recovery for nugat?
Click to expand...
Click to collapse
Since you are on nougat with test keys, try to flash the latest nougat firmware on your phone model NXT-AL10 (Try flashing firmwares using TWRP )
Link for the firmware
link 1 https://mega.nz/#!Y4IVEbxY!7C8u3FP3V8eAV4jVNmbRUfj2W1nc8p5gMtaScVmzeA0
if the link 1 doesn't work then try link 2
link 2 https://mega.nz/#!U9ZkTZzI!fbPnyDIxCGGFkiGxtF3SMicLqmTDNTq8SG8fVw8lfz8
download & flash it using TWRP.
Once you finish flashing - you should have android nougat stock B584
Go to settings - > about you should see that B584. in build number.
If your build number is showing anything other than test-keys then you will be able to use dload method or Hisuite method using PC.
Now if IT IS showing B584, then you can dload to B386. then unlock bootloader -> TWRP using SRK tools - > Root - > and then debrand to L29C432. - > this is the road map for you. we will go through this only after you succeed in the above steps.
Try the below steps only if the above steps don't work
if you want to flash the nougat recovery
then unzip the zip file in link 1.
Use Huawei update extractor software HuaweiUpdateExtractor_0.9.9.3
and then extract the recovery.img from the update.app file.
now
switch on usb debugging in your settings.
switch off the phone
press & hold volume down and then connect to phone to laptop
put the extracted recovery.img file in the same folder as the SRK tools
open SRK tools
type 000 to enter command prompt
type fastboot flash recovery recovery.img
(please remember all these steps that use adb commands come with element of risk. so please proceed with caution and go slow. Proceed with these steps only if you know what you are doing otherwise do not proceed)
Try the TWRP steps first and see if that will resolve your issue before flashing any stock recovery. If your flashing through TWRP then it will install stock recovery & stock ROM.
Please share your progress.
:good::good:

Samavb said:
Since you are on nougat with test keys, try to flash the latest nougat firmware on your phone model NXT-AL10 (Try flashing firmwares using TWRP )
Link for the firmware
link 1 https://mega.nz/#!Y4IVEbxY!7C8u3FP3V8eAV4jVNmbRUfj2W1nc8p5gMtaScVmzeA0
if the link 1 doesn't work then try link 2
link 2 https://mega.nz/#!U9ZkTZzI!fbPnyDIxCGGFkiGxtF3SMicLqmTDNTq8SG8fVw8lfz8
download & flash it using TWRP.
Once you finish flashing - you should have android nougat stock B584
Click to expand...
Click to collapse
You must know that I'm very grateful for your help
Do I have to format data before start flashing B584.zip or do nothing?
Do I need update_data_full_all_cn.zip ?

2 Answers
bodzio3333 said:
You must know that I'm very grateful for your help
Do I have to format data before start flashing B584.zip or do nothing?
Do I need update_data_full_all_cn.zip ?
Click to expand...
Click to collapse
Glad to read Ur kind words but V have a long road ahead. So let's fix ur phone :good:
Answers
1) Yes, you can format DATA before flashing this zip file. you can also do factory reset before flashing the zip file. (Remember we are doing this step only to get ur phone out of that test keys & this firmware is not ur final firmware that u will use. )
2) I was searching for a firmware that u can flash on ur phone and I found B584 and felt this might help. The guys in the other thread mentioned it as full firmware. After u flash this firmware, check in settings - > about - > build number if it is anything else other than test keys then u succeeded in this step.
Goal of this flashing of B584 is only to get rid of that test keys in build number. Once that is gone then U can downgrade to B386 using steps in my previous posts followed by the road map.
:good::good::good:

Samavb said:
Glad to read Ur kind words but V have a long road ahead. So let's fix ur phone :good:
Answers
1) Yes, you can format DATA before flashing this zip file. you can also do factory reset before flashing the zip file. (Remember we are doing this step only to get ur phone out of that test keys & this firmware is not ur final firmware that u will use. )
2) I was searching for a firmware that u can flash on ur phone and I found B584 and felt this might help. The guys in the other thread mentioned it as full firmware. After u flash this firmware, check in settings - > about - > build number if it is anything else other than test keys then u succeeded in this step.
Goal of this flashing of B584 is only to get rid of that test keys in build number. Once that is gone then U can downgrade to B386 using steps in my previous posts followed by the road map.
:good::good::good:
Click to expand...
Click to collapse
When I flash B584.zip see this error in twrp:
Failed to mount '/cust' (invalid argument)
Failed to mount '/version' (invalid argument)
E:unknown command [errno]
E:unknown command [errno]
Update process ended with ERROR: 7
No good.....

[Guide] Hacking, customizing and managing Huawei Mate 9 - a comprehensive overview

Hi,
I received my dual-sim Huawei Mate 9 Europe version a few weeks back. I selected this as the natural choice after running Samsung Note 3 for several years. There was no other phone that quite fit the bill as this one -
Big screen
Excellent battery
Excellent performance
I am a reasonably advanced user of my android phones - keeping them rooted, unlocked, flashing different roms are just by my alley
However after tinkering around with this new baby, I realized that this is quite different than what I was used to with Note 3.
Never before had I to read so many different forum threads to gain a full understanding of how to do things that I could do very easily with my Note 3 earlier without the need to have an indepth knowledge - just copy the steps and execute was good enough to get what I wanted. i.e.
The bureacratic boot loader unlocking process (never had to deal with this before from Samsung)
Rooting
Flashing custom recovery
Flashing custom rom
Backing up and restoring the different partitions through custom recovery
Flashing stock rom in case things don't work out as expected with the new rom
etc. etc.
I have spent several days reading practically all the forum threads on Mate 9, in order to get a good overview of how to manage this awesome device.
I am usually prone to forgetting things. So I knew after a few weeks, there will be something else that will catch my fancy and whatever I have learnt about Huawei Mate 9 after investing so many days will have gone to waste and I would have to scour the threads again if I need to do something with my Mate 9.
So I started to write down a basic guide in a text file to act as a refresher capsule whenever I decide to open the hood again after a few months
I also wanted to share my summarized learning capsule back to the community, since I have learnt so many from the various threads and the experiences from so many people.
This prompted me to actually create an XDA account (even though I have been a voracious consumer of XDA for several years, but never created an account).
Just one last tip - if you are a new user of Mate 9 trying to understand all the concepts from scratch, then try to read this guide in its entirety. Some concepts are introduced in the beginning, which might be confusing at the start, but you will understand it well after it is covered again towards the later part of the guide. Once you have a good hang of the different concepts involved, then you can jump directly to the specific section for reference.
So enough background to this thread and now out with the content.
--------------------------------------------------------------------------------------------------------------------------------------------------------
Phone Information
--------------------------------------------------------------------------------------------------------------------------------------------------------
The Model number of my phone is MHA-L29. It is a dual sim phone hence L29 at the end.
Single sim version has model number MHA-L09 i.e. L09 at the end.
The firmware version that I am running is : MHA-L29C432B156
Here is the breakup of how to read this number or the naming convention
Naming convention
L29 = Dual sim
C432 = Europe region (there are other regions as well e.g. C636 for Asian and so on)
B156 = version (this is the actual version number of the firmware)
--------------------------------------------------------------------------------------------------------------------------------------------------------
How to best use the phone
--------------------------------------------------------------------------------------------------------------------------------------------------------
For best results in order to get the full power from the hood, you will use the phone with
bootloader is unlocked
phone is rooted
either Custom recovery of TWRP or Stock recovery will be on the phone depending on the situation.
For daily usage, keep stock recovery on your phone since in case of tough situations requiring unbricking etc. stock recovery is the best to have around.
You will also remove the crapware/bloatware. It is difficult to list all the bloatwares, since they differ based on the region.
Factory resets
Reset due to minor issues
In such situations, typically your data partition is messed up but other partition (system) is fine.
If you have software issues due to software which has been additionally installed or phone has become slow etc. then boot to recovery (stock recovery) and do a factory reset. If you are running custom recovery (TWRP), then first you will need to flash the stock recovery. Then do a factory reset through the stock recovery. This action will format the data partition and copy the necessary stuff from the system partition over.
Restart the system.
Reset due to major issues
In such situations, typically your data as well as system partition is messed up. This will typically happen in case you have software issues due to un-installation of core system applications (as a root user) which have resulted in them being removed from the system partition and now you cannot restore them by an ordinary factory reset (since factory reset does not modify/reset the system partition, it only resets the data partition).
This step also requires you to have initially backed-up the system partition using TWRP. If you haven't backed-up the system partition, then you can also extract the system partition by using Huawei Update Extractor tool on the stock firmware of your region and version, which will give you the image file of the system partition that can be used further below.
Steps -
If you are running stock recovery, then first you will need to flash custom recovery (TWRP).
Using TWRP wipe the system partition.
Reboot to recovery.
Format (not wipe) the data partition.
Reboot to recovery.
Wipe the dalvik cache and cache.
Now from the already backed up TWRP partition backups
(a) restore the system partition (or the system partition image file extracted using Huawei Update Extractor)
(b) restore the data partition.
Reboot to recovery.
Wipe the dalvik cache and cache.
Restart the system.
The above should be enough for full reset. An alternative to 7.(b) above is to flash the 2 zip files containing region specific and other related system applications (you might get "error 7", but that is normal).
Upgrades
You can continue to receive over the air (full or incremental) upgrades from huawei even in a rooted and bootloader unlocked phone.
However in order to apply the received updates, you will need stock recovery, as only stock recovery has the capabilities to install the received updates. Thus before applying any update, if you are running custom recovery (TWRP), then first you will need to flash the stock recovery.
Make sure you backup all your private data and do a full installation (instead of incremental). You can select to install the full package by clicking on the 3 dots on top right corner of update screen and selecting to download the full installation package.
After this process, do a full factory reset, so your system is fully reset and updated based on the latest version.
It might happen that after the update, bootloader is locked again and you have lost your root privileges. In that case follow the steps below for unlocking the bootloader and rooting the phone again.
Also after this step, do the below.
Download the new stock firmware from hwmt.ru (as below) and the related 2 zip files zip files containing region specific and other related system applications for the new version and back them up
Make a TWRP backup of all the partitions and and back them up.
This is necessary as you might need them for other activities e.g. flashing stock recovery of the new version, doing full factory resets etc.
--------------------------------------------------------------------------------------------------------------------------------------------------------
General information on Rooting / Bootloader unlocking / Firmware
--------------------------------------------------------------------------------------------------------------------------------------------------------
The device that you get from the factory is bootloader locked with a region specific firmware.
Partitions
The phone has several different partitions (e.g. boot, data, system etc.)
The "BOOT" partition contains the boot image which boots the system and reads from other partitions
The "DATA" partition contains the user private data (e.g. contacts etc.) and is encrypted by the boot partition (Android Nougat feature). When the Android operating system starts, the boot partition decrypts the data partition and then reads it. This is the reason why other "parallel" softwares like TWRP will not be able to read from data partition, since when they read it, then it is already encrypted. Due to this TWRP will be able to backup(clone) all the other partitions except for data partition, as data partition is encrypted on the first boot of a new system. The other way to backup the data partition is to make the backup before you have booted the system (which results in encryption of the partition).
You can do this by the following steps -> "format (not wipe)" the data partition through TWRP + reboot again to TWRP + flashing the 2 zip files containing region specific and other related system applications (you might get "error 7", but that is normal). After this immediately backup the data partition.
The "RECOVERY" partition contains the stock recovery which you can replace with custom recovery TWRP
The "RECOVERY2" partition contains the "Huawei eRecovery mode" and "Huawei updater mode"
Unlocking bootloader
You can unlock the bootloader with the help of unlocking code. You get this from Huawei. Read further below on how to go about it.
Rooting phone
In order to root the phone there are 2 ways
Old method
This requires you to patch your boot partition and replace the stock boot image (which encrypts the data partition), with a custom boot image which does not encrypt the data partition.
After this you format (not wipe) the data partition, so that it is replaced by an unencrypted data partition and then you root the system in which the root exploit is directly injected in the unencrypted data partition.
New method
This does not require you change your boot image. You basically just install the custom recovery TWRP and then root using the PHH super user zip file. Read further below on how to go about it.
Recovery
If you are rooting using the new method, then you will replace the stock recovery with TWRP.
The disadvantage of TWRP recovery is that it is only the Stock Recovery that has the capability to do a proper "Factory Reset" the phone. Basically when you do a factory reset, then you "format (not wipe)" the data partition. But Huawei firmwares, also have some region specific and other related system applications (e.g. themes, camera, system updates etc.), which are also installed on the data partition. The stock recovery recognizes this and does the factory reset carefully (either by removing everything except for necessary system applications OR by doing a complete format (not wipe) of data partition but then re-applying the necessary system applications). TWRP also can do a "factory reset", but TWRP will simply format the data partition dumbly and not take care of re-installing the necessary system applications on the data partition. If you happen to do a "factory reset" or format "data" partition through TWRP, then you will need to manually flash the zip files containing region specific and other related system applications. You can get those zip files (e.g. update_data_public.zip & update_hw_eu.zip) through the same routine for downloading stock firmware detailed below. When installing these zip files through TWRP, you might get "error 7", but that is normal and you can ignore it.
Stock recovery is also useful for managing OTA updates. Typically when you download firmware updates, then they boot to stock recovery for further processing.
Hence even if you have installed TWRP, you will need to flash stock recovery for factory resets or handling new firmware updates.
Thus as mentioned before, for regular daily usage, keep stock recovery on your phone.
In order to get the stock recovery image, you can extract the stock recovery image file by downloading the "update.zip" of the target firmware and extract the "UPDATE.APP" file and then running the "Huawei Update Extractor" tool on it. Commands to flash the obtained stock recovery image file are similar to the command to flash TWRP recovery below.
Note, when you run the "Huawei Update Extractor" on UPDATE.APP file, then you will see RECOVERY.img, as well RECOVERY2.img
RECOVERY refers to the stock recovery and RECOVERY2 refers to huawei eRecovery mode & huawei updater mode.
Stock firmware
Huawei has region based firmwares e.g. in my case, the region is europe (C432)
There are stock firmwares of each region. However except for 2 regions (C636 and AL00), all other stock firmwares cannot be directly flashed. This is by design from Huawei. Even though the stock firmwares are easily available for all regions, but it is only for these 2 regions that firmwares have the PACKAGE_TYPE token set to OFFLINE_UPDATE. The PACKAGE_TYPE tokens for other region's stock firmwares are set to ONLINE_UPDATE, which makes it not possible to flash those through Huawei Updater.
Thus if you are majorly messed up or bricked, then the only way out is to rebrand your phone to a C636 (i.e. changing the OEMINFO partition from C432 (europe) to C636) and then flash that stock firmware for C636.
https://forum.xda-developers.com/mate-9/how-to/guide-rebrand-chinese-al00-mate9-to-t3554656
https://funkyhuawei.club/rebranding
In order to flash the C636 stock firmware, download the "update.zip" of the target firmware and extract the "UPDATE.APP" file into the "dload" folder created at the root of an external SD card and then starting the phone in a "Huawei Updater mode".
In order to get back to your region (C432), you will then have to use tools like "Firmware Finder" (FF), which spoof Huawei servers through DNS and network and make it possible for the updater to download and flash their stock firmwares thinking it is downloading it online from the huawei servers. You might not be able to update to the latest firmware using FF (since Huawei doesn't authenticate for latest versions sometimes), but you can try to update to an older version first and once that is sorted out, then you can update directly within system update settings to move to the latest update.
As a short-cut and if situation permits, you can also use FF, to directly flash your own region's firmware, without needing to go through the C636 route first.
However if that doesn't work, then flashing the C636 as described above is the only way out.
Also the eRecovery mode or recovery through hisuite only works if you are on a C636 region firmware.
Some useful links -
https://forum.xda-developers.com/mate-9/how-to/guide-rebrand-chinese-al00-mate9-to-t3554656
https://forum.xda-developers.com/mate-9/development/oeminfo-library-t3555353
https://funkyhuawei.club/rebranding
https://forum.xda-developers.com/mate-9/how-to/guide-rebrand-chinese-al00-mate9-to-t3554656/page5
https://forum.xda-developers.com/ma...urb175v1-0-t3575146/post71812906#post71812906
https://forum.xda-developers.com/showpost.php?p=71804525&postcount=393
https://forum.xda-developers.com/ma...lost-ideas-t3561569/post71208272#post71208272
https://forum.xda-developers.com/mate-9/how-to/guide-installing-b138-using-firmware-t3557089
--------------------------------------------------------------------------------------------------------------------------------------------------------
FRP Lock (Factory Reset Protection)
--------------------------------------------------------------------------------------------------------------------------------------------------------
Sometimes during normal usage of the phone, if the phone detects some security anomaly, it would engage the FRP lock .
It has also been found that the phone enters FRP lock mode also when you do a "Reset to default" in the developer mode. So try to avoid doing that.
Basically what happens when you reset the developer mode is that the "OEM Unlock" setting goes back to disabled, and typically when OEM Unlock is disabled, then FRP lock is enabled. However if the bootloader is unlocked, then you will find that it is not possible to change the "OEM Unlock" setting in developer mode, because if bootloader is unlocked then this setting is greyed out and not possible to change.
In short ->
Bootloader is Locked -> "OEM Unlock" setting is greyed out
"OEM Unlock" is enabled -> FRP Lock is Unlocked
"OEM Unlock" is disabled -> FRP Lock is Locked
FRP lock is to prevent mis-use of the phone in case of theft. Since it requires you to enter your google sign-on information again after doing a factory reset before you can use the phone..
FRP lock disables entering any fastboot command, which is a big issue since it means you cannot do anything in bootloader mode i.e. no flashing another recovery, no lock/unlock OEM etc.
In order to check if your phone is FRP locked or not, enter the bootloader mode. Over there it will be mentioned "FRP Lock" or "FRP Unlock", the former indicating that the phone is FRP locked.
In such scenarios, the only way out of the FRP lock mode is to flash the stock firmware again (which means your phone will be restored to totally factory condition i.e. bootloader will be locked, phone will be unrooted).
At the point when the phone enters FRP Lock, if you happen to have stock recovery, then you have a better situation as compared to if you have custom recovery (TWRP).
This is because if you have stock recovery, then you can simply use FF to flash your region's stock firmware. However if you have TWRP, then you have to flash the C636 version (asian) using Huawei Updater mode and then move on to your region's stock firmware.
--------------------------------------------------------------------------------------------------------------------------------------------------------
Using Firmware Finder (FF)
--------------------------------------------------------------------------------------------------------------------------------------------------------
Firmware Finder basically spoofs the Huawei servers by using a local proxy server leading the phone to thinking that there is a firmware update available, and thus allowing you to flash the firmware you wish (with some restrictions of course).
Using Firmware Finder requires you to have stock recovery.
If you are trying to install European regional firmware from scratch, then start by installing version B138 through FF and then move to higher versions using normal system update (or if you are not getting prompted for a normal system update automatically, then of course update through FF.)
For getting the full version of B156 (2.2 GB) through FF, at the time of writing this it was not yet authenticated by Huawei, so if you try to download it you will get authentication error after the download is completed and being verified. Thus, you will instead need to download a partial update of 409 MB through FF (if you are moving from B138 to B156). If you are moving from B126 to B156 then you will need to download the partial update of 473 MB through FF. This will allow you to have B156 on your phone.
The limitation of FF is that it only allows you to install firmwares which are authenticated(approved) by Huawei. Thus in order to install the latest and greatest, you might not be able to use FF. In such cases you can use paid services such as FunkyHuawei which allows you to install even non authenticated(approved) latest and greatest Huawei firmwares.
Though personally, I feel that it is for a good reason that Huawei does not authenticate the latest and greatest since they are beta versions and it is not that big an issue to not have them on the phone.
FF has 2 APKs for the phone - one is the actual application and the second one is a proxy server. The usage is simple - you find the firmware to install using the main application and then send the selected firmware over to download through the proxy server application on the phone. You will also need to change your Wifi settings to add a local proxy server (localhost:8080) before trying to check through system update on availability of new firmware.
FF firmware download on the phone has 3 phases.
Phase 1
The first phase requires you to modify the wifi network config to have localhost and 8080 as proxy to go through the FF Proxy application, which will spoof the Huawei servers and allow the handshake to happen to download the right firmware.
Phase 2
Once the download has started, then move on to the second phase, in which you pause the download, and then once again modify the wifi network config to remove the proxy configuration and then resume the download. This will allow you to download the update at full speed without any proxy intervention
Phase 3
The third phase starts at the last phase of the download in which you pause the download at last remaining 1%. After that you turn off wifi and start mobile data and resume the download from there. This is good because after the download is complete, the firmware will be verified and a last authentication handshake will be done to huawei server, and this doesn't need to be spoofed or be through wifi. Instead it is better that it should be originating through your mobile network.
i.e. a spoofed connection is only required in the first phase of the download
After updating from FF, you will need to do a factory reset of the phone. Then proceed with normal installation, bootloader unlocking, custom recovery installation, rooting. If necessary also flash the 2 zip files containing region specific and other related system applications. After this revert back to stock recovery and do a factory reset again. After this the phone is fully clean and ready to use.
--------------------------------------------------------------------------------------------------------------------------------------------------------
How to download stock firmware
--------------------------------------------------------------------------------------------------------------------------------------------------------
Go to this site (replace the MHA-L29C432 part of the string at the end with the model number of your own Mate 9 device)
http://hwmt.ru/oth/HWFF/info/view.php?find_model=MHA-L29C432
In the "Тип" column, you should only filter by FULL (no OTA, as that update is only eligible for usage by a paid service called funkyhuawei)
Check that the link in the "Список изменений" column is almost the same as "Файл обновления" column. Only difference should be the last part which should be changelog.xml in former and update.zip in the latter.
Now using the link, change the last part of the link to filelist.xml
This will give the xml path with the details of the files as part of that version.
Example
Code:
<vendorInfo logfile="changelog.xml" name="common" package="update.zip" subpath=""/>
<vendorInfo logfile="" name="public" package="update_data_public.zip" subpath="public"/>
<vendorInfo logfile="" name="hw/eu" package="update_hw_eu.zip" subpath="hw/eu"/>
Now change the url to download the above 3 zip files using the subpath i.e
Code:
$URL/update.zip
$URL/public/update_data_public.zip
$URL/hw/eu/update_hw_eu.zip
--------------------------------------------------------------------------------------------------------------------------------------------------------
Information on entering the various modes on the phone
--------------------------------------------------------------------------------------------------------------------------------------------------------
Engineer mode
In a powered ON phone
enter the following on the dialler
*#*#2846579#*#*
Huawei Updater mode
In a powered OFF phone
hold volume up + volume down + power for a long time (around 10 seconds)
Recovery mode
In a powered OFF phone
hold volume up + power
In a powered ON phone
enter the following through the command line on computer
adb reboot recovery
Huawei eRecovery mode
In a powered OFF phone
power on the phone through the power button
at the prompt that "Your device has been unlocked and cannot be trusted", it will tell you to press the power up button for 3 seconds to enter the eRecovery mode
Download mode / Fastboot mode / Bootloader mode
In a powered OFF phone
keep the volume button pressed down
connect the USB cable to the computer and the phone
In a powered ON phone
enter the following through the command line on computer
adb reboot bootloader
--------------------------------------------------------------------------------------------------------------------------------------------------------
Information on using adb or fastboot commands on your phone
--------------------------------------------------------------------------------------------------------------------------------------------------------
Make sure that "Minimal ADB and Fastboot" program is installed on your computer
Make sure USB debugging is enabled in phone settings
Make sure all reasonable permissions have been allowed as per the developer options
Make sure that hisuite is installed (which will ensure that USB drivers are installed)
--------------------------------------------------------------------------------------------------------------------------------------------------------
Information on unlocking the bootloader
--------------------------------------------------------------------------------------------------------------------------------------------------------
Steps to obtain unlock code
Entry page for unlocking bootloader is
http://emui.huawei.com/en/
Then click on Download. And then click on "Unlock bootloader"
OR
Visit this page
https://emui.huawei.com/en/plugin/unlock/detail
Enter the required details on the form
Steps to unlock the bootloader
Make sure that USB Debugging is enabled on the phone and the phone has been verified to connect to the computer and phone has permanently accepted the RSA id and connected in debug mode.
Also make sure that "Enable OEM Unlock" has been enabled in the developer options.
Put the phone in "Download mode / Fastboot mode / Bootloader mode"
Enter the following commands
fastboot oem unlock $CODE
fastboot reboot
In the above command, replace $CODE with the actual code received from Huawei
--------------------------------------------------------------------------------------------------------------------------------------------------------
Information on installing custom recovery (TWRP)
--------------------------------------------------------------------------------------------------------------------------------------------------------
Copy the "twrp-3.0.2-2-hi3660.img" file to the "Minimal ADB and Fastboot" directory
Put the phone in "Download mode / Fastboot mode / Bootloader mode"
Enter the following commands
fastboot flash recovery twrp-3.0.2-2-hi3660.img
fastboot reboot
--------------------------------------------------------------------------------------------------------------------------------------------------------
Information on rooting the phone
--------------------------------------------------------------------------------------------------------------------------------------------------------
Make sure that the version of TWRP installed is twrp-3.0.2-2-hi3660
Copy superuser-r275.zip into an external SD card
Boot into TWRP recovery mode and install the above zip file
Restart the phone in normal mode and install the "Superuser_2.0_Beta_9.apk" application
--------------------------------------------------------------------------------------------------------------------------------------------------------
Attachments referred in the guide
--------------------------------------------------------------------------------------------------------------------------------------------------------
https://drive.google.com/drive/folders/0B4pklpmVwGHqOWs3SlpWOEdUcUk

Top work ???

Good job...:good::good::good::good::good::good::good:

Nice. Thanks.

Good summary.
Add the supersu SuperSU-v2.79-MATE9-init.d_support.zip.
This is the method to get busybox and viper4android installed, for they use fix paths of supersu.
My device: Mate 9 supersu b156 Mediapad X2 GEM 701->703 B212 KangVIP (AJ mod)

Hi saurabhg9, I just starting reading you incredible Mate 9 summary guide and had to stop only to say that I simple love the way you explain everything, so simple, so clear, so useful... Thanks a lot for you to share your refreshing capsules, they are just the medicine my Mate 9 and I needed! :good::good::good:
Going back to continue the treatment!
Edit to ask for a little help... Recently I installed the L09C432B181 using Funky services and used it rooted by THIS method and all was going fine. Then I decided to give a try to RomAur but went back to stock restoring system and data. All well apart from root, so I rerooted flashing the 3 zips again but no way to get proper root back. It works but doesn't ask permission any more, the log is empty and it ask for binaries update in each boot. My main reason for root is to control the phone with gestures but only one of the commands of GMD app works.
I tried your 2.-Reset due to major issues using the twrp backup system and data without any result. Tried also the root superuser-r275.zip from the last section with no success either.
Tried as a last option spend another Funky credit in the B182 but always get the same "getting package info failed" error, what should be happening?
Any idea? Maybe extract a clean system and flashing it by adb (edit: tried but get "target reported max download size 471859200 bytes" error)?
Thanks again!

Thanks Peppus!
Sounds like you might need a clean start for your phone and do a "full reset".
In order to do that, I suggest doing a clean stock install of C432B138 using FF and then update to B156.
After that you could unlock the bootloader and root. This will atleast give you a clean base to start with for further experimenting depending on where you would like to go from there.

Epic work, but there are too many things which are absent and can cause mess up knowledge.
No info about MHA-AL00
No info how hard to unlock bootloader on MHA-AL00
No info what is difference between simple root and root with additional functional like dm-verity...
And more, and more....
P.s. I don't want to blame, cause I know that it is too hard to gather information from thousands threads.

5[Strogino] said:
Epic work, but there are too many things which are absent and can cause mess up knowledge.
No info about MHA-AL00
No info how hard to unlock bootloader on MHA-AL00
No info what is difference between simple root and root with additional functional like dm-verity...
And more, and more....
P.s. I don't want to blame, cause I know that it is too hard to gather information from thousands threads.
Click to expand...
Click to collapse
Thanks for the feedback!
I really wish there was a "wiki" functionality at XDA, so guides such as these could be developed with the joint knowledge of its members.
Unfortunately, that is also reflecting above, where most of the content is based on my own personal experience and what I have learnt in past few days based from various threads. and what works for me.
If you could provide me the specific text to be updated above (in regards to the things that you mentioned above), I would gladly add it
I am sure lot of others, including me would benefit from such.
Cheers!
Saurabh

saurabhg9 said:
Thanks Peppus!
Sounds like you might need a clean start for your phone and do a "full reset".
In order to do that, I suggest doing a clean stock install of C432B138 using FF and then update to B156.
After that you could unlock the bootloader and root. This will atleast give you a clean base to start with for further experimenting depending on where you would like to go from there.
Click to expand...
Click to collapse
Hi, that is what Audioralf recommended me and I was trying to avoid but I think it is the only option I have now. Thanks for your interest :good:

Peppus said:
Hi, that is what Audioralf recommended me and I was trying to avoid but I think it is the only option I have now. Thanks for your interest :good:
Click to expand...
Click to collapse
Yes - clean scratch install is good!
I do mine at far lesser problems than yours

saurabhg9 said:
Yes - clean scratch install is good!
I do mine at far lesser problems than yours
Click to expand...
Click to collapse
By the way, does anybody know which is the latest build installed in a L09C432? by Firmware Finder? Thanks!

My good guess would be for b138, since the version numbers for L29 and L09 are quite similar at least for the c432 region.
Try doing a FF install for L09C432B138. Then partial update using FF to 156, if you are not prompted by system update automatically

Hi,
Just updated the guide with some new information relating to -
* FRP Lock
* Using Firmware Finder
Also updated various miscellaneous parts of the guide with additional information and clarification.

hi
this guide is just awesome
top work
for the mate 9 beginners now all is crystal clear
thx for the guide and explenation
greetz benji

Benji1983 said:
hi
this guide is just awesome
top work
for the mate 9 beginners now all is crystal clear
thx for the guide and explenation
greetz benji
Click to expand...
Click to collapse
Thanks!
Glad you found it useful.

Hi,
Thx for your awesome collection of how-to's and how everything works!!!!
Tried to start with all the stuff like you did, but some things were/are too strange for me, so i decided to wait until i found an "encyclopedia" like this :good:
Saved a lot of time i guess
So again thx for your great work. Appreciate that

saurabhg9 said:
...In order to get back to your region (C432), you will then have to use tools like "Firmware Finder" (FF), which spoof Huawei servers through DNS and network and make it possible for the updater to download and flash their stock firmwares thinking it is downloading it online from the huawei servers. You might not be able to update to the latest firmware using FF (since Huawei doesn't authenticate for latest versions sometimes), but you can try to update to an older version first and once that is sorted out, then you can update directly within system update settings to move to the latest update...
Click to expand...
Click to collapse
Hi saurabhg9, do you mean that you can rebrand to another region using Firmware Finder? I thought that you only can install the same region roms by it.
Thanks for the update!
Cheers!

Yes.
There are 2 steps to rebranding.
First step is to ensure that your oeminfo files match that of the targeted region. This can be easily done through twrp.
Second step is to flash that regions firmware using FF.
As mentioned in my guide, you might not be able to flash the bleeding edge versions (you need paid services i..e. funky for that). But if you keep things simple and reasonable then you can get the huawei approved ones of most of the regions (e.g. B156 through FF has been verified personally by me for Europe. I haven't tried higher versions since even this version is fairly new and good)

Also I have read that to flash C636, you do not even need to flash the oeminfo of that region (asia).
Haven't verified this personally but have read some guys do it successfully while they were trying to revive their messed up Europe (C432) phones and they had just placed the C636 UPDATE.APP in dload folder and installed it using the Huawei Updater Mode (3 button method)

(SOLVED) I used TWRP and accidentally wrote over the boot recovery partition

Hello,
In a late-night act of utter stupidity, when over-tired, I re-flashed the boot recovery with TWRP and bricked my M3. It obviously can't now enter boot recovery.
I've used TWRP and successfully re-flashed custom roms on my original Mate, and changed regions. (Not in any way an expert, I know how to follow instructions.)
I was trying to convert my Chinese (I was living there) ROM to UK. It's tricky nowadays.
This was a stupid error when tired. Any way back?
I read somewhere that people with the right hardware can do it, but finding someone. I'm in Leeds, UK.
The pad does (did) what I need, and I'm not in a position to buy a new one. If it's dead, it's dead; and I can move on.
Cheers in advance for any input.
SOLVED
See my last post on this thread.
After using Multi Tool V8 to enquire into the machine I switched off and rebooted.
It came back with a "Wipe cache" and "Reset to factory settings" Huawei screen, so I did both and - It booted!
It had spectacularly failed to do anything but boot-loop since coming out of a very dead battery yesterday.
1) Boot recovery, OTA recovery, and dload recovery from SD were all unavailable after the original overwriting of the bootloader.
2) After being dead for months, all recovery options booted from power button plus vol- Vol+ and Vol+/- - but still bootlooping.
Then, suddenly it booted into wipe cache/factory reset screen.
Android 7, EMUI 5.1.3
I have no idea why.
Now fully working. (Including restarting)

I fell in a similar situation after having flashed a magisk module .. unfortunately my nandroid backup didn't restore my devices, but I was able to enter in twrp recovery.. so,..
if you can boot in twrp recovery, not all hopes are lost..
first of all, you must download a stock firmware for your device (i suggest to download trough huawei firmware finder: https://forum.xda-developers.com/tools/general/huawei-firmware-finder-team-mt-t3469146/amp/)
You must download a fullota version of stock firmware
then, you can flash this firmware (3 zip files) trough hurupdater via twrp recovery: https://forum.xda-developers.com/ho...lash-official-firmware-recovery-t3769279/amp/
in order to not overwrite twrp recovery, put the twrp.img file in the same folder and rename it to recovery.img
you can find more info in this topic (follow the instructions, in particular those on how to use hurupdater): https://forum.xda-developers.com/me...ting-btv-dl09-to-unapproved-firmware-t3817541
in order to find a firmware suitable to your device, try to find info on it: you have a mediapad m3 European? American? asian? just wifi or also 4G-LTE (whit a sim and phone functions)? lite or normal version? 10 inches or 8.4?
everyone of these devices have different codenames and suitable firmwares
I found exact firmware for my devices with the procedure described here:
https://forum.xda-developers.com/showpost.php?p=77241673&postcount=3
.. but, if you flashed a wrong firmware, i really don't know if it might help you..
anyway, i wish the info above could help you.

qllkevuoi said:
I fell in a similar situation after having flashed a magisk module .. unfortunately my nandroid backup didn't restore my devices, but I was able to enter in twrp recovery.. so,..
if you can boot in twrp recovery, not all hopes are lost..
first of all, you must download a stock firmware for your device (i suggest to download trough huawei firmware finder: https://forum.xda-developers.com/tools/general/huawei-firmware-finder-team-mt-t3469146/amp/)
You must download a fullota version of stock firmware
then, you can flash this firmware (3 zip files) trough hurupdater via twrp recovery: https://forum.xda-developers.com/ho...lash-official-firmware-recovery-t3769279/amp/
in order to not overwrite twrp recovery, put the twrp.img file in the same folder and rename it to recovery.img
you can find more info in this topic (follow the instructions, in particular those on how to use hurupdater): https://forum.xda-developers.com/me...ting-btv-dl09-to-unapproved-firmware-t3817541
in order to find a firmware suitable to your device, try to find info on it: you have a mediapad m3 European? American? asian? just wifi or also 4G-LTE (whit a sim and phone functions)? lite or normal version? 10 inches or 8.4?
everyone of these devices have different codenames and suitable firmwares
I found exact firmware for my devices with the procedure described here:
https://forum.xda-developers.com/showpost.php?p=77241673&postcount=3
.. but, if you flashed a wrong firmware, i really don't know if it might help you..
anyway, i wish the info above could help you.
Click to expand...
Click to collapse
Thanks for the reply, and sorry for the delay. New child has somewhat taken over our lives!
I'll take a look at the tablet again when I have time, probably next month.

Update - Bootloader working after battery drain: Now what?
[Edit] Post redundant as it started working - see OP.
NwotNot said:
Thanks for the reply, and sorry for the delay. New child has somewhat taken over our lives!
I'll take a look at the tablet again when I have time, probably next month.
Click to expand...
Click to collapse
Well...
After being without power for so long I turned the tablet on and it booted!
However, it then went into OTA and updated - rebooted - and locked the damned bootloader.
1) It's showing as rooted.
2) Boot loader is locked.
3) Fastboot & rescue mode comes up.
4) Recovery (OTA) still comes up but "Fails" this time.
I don't recall how I unlocked it last time. I don't ever rememebr an unlock code.
Status:
Fastboot reports it exists.
ADB reports "Null" not found. (ADB drivers installed).
Firmware version: CPN-AL00C233B078
Device name: CPN-AL00
Serial Number: Showing
IMEI: Showing
Bootloader state: LOCK
I have an old TWRP backup - don't know how to use it.
Solutions?
a) Any kind devs prepared to work with me and find the boot unlocker code for this 5-year old tablet?
b) Any other solutions now we know what's what?
I'm self employed without income in this pandemic and can't really afford to buy a new tablet. If I have to, it won't be Huawei.
(There's a T3 10.6" at £89, but I'm not biting - I need to sort out a budget tablet with at least the oomph of the M3.)
Any help much appreciated. :good:
David.