Related
You need a screwdriver and a brain
Safely remove back cover battery and back case.
According to the screens, short-circuit between two points on the board with a wire.
These are TP7 & TP9 (red marked in picture)
Connect your phone to a computer without a battery.
In device manager you will see device as Qualcomm HS-USB QDLoader 9008
Now, you can remove the wire from Test Point.
Open QFIL click Download
After the firmware is flashed connect all body parts and enjoy the phone.
Attached picture
Not Working :crying:
Mine is showing HID compliant device&USB input device instead of QCOM9008.
When I shorting the test points nothing happening(not even detected as anything)
Are you sure about test points?
Please help me @K4sh
senthamizhan said:
Mine is showing HID compliant device&USB input device instead of QCOM9008.
When I shorting the test points nothing happening(not even detected as anything)
Are you sure about test points?
Please help me @K4sh
Click to expand...
Click to collapse
Yes, these are the test points above the memory card slot. May be your motherboard has certain variations.just click the photo of motherboard and attach here.
And also you have to connect USB while short circuited TP7 & TP9 and than you can remove wire when connected to download mode.
Seems to be having same chip
K4sh said:
Yes, these are the test points above the memory card slot. May be your motherboard has certain variations.just click the photo of motherboard and attach here.
And also you have to connect USB while short circuited TP7 & TP9 and than you can remove wire when connected to download mode.
Click to expand...
Click to collapse
2 copper points in red circle are to be connected.
Take 2 needles, hold in v shape and point the 2 ends on both points ask any one to connect USB cable to PC while holding needles, the phone will be attached in download mode.
Working great
Thanks man, it is worked..
Finally unbricked my phone.
In my case same problem but device manager nothing to show any type of this
sagar1996 said:
In my case same problem but device manager nothing to show any type of this
Click to expand...
Click to collapse
Install USB deview and check whether any devices are connected like USB input device,USB root hub,generic USB device. If yes then your device can be unbricked.
For me too it didn't shown any thing on device manager(rarely it shows as HID compliant device when i try to enter download mode)but USB deview did.
Just give a try it will work unless it is a hardware problem
senthamizhan said:
Install USB deview and check whether any devices are connected like USB input device,USB root hub,generic USB device. If yes then your device can be unbricked.
For me too it didn't shown any thing on device manager but USB deview did.
Just give a try it will work unless it is a hardware problem
Click to expand...
Click to collapse
Unfortunately i flash non a6000 rom that's way happened this i will try
---------- Post added at 12:19 PM ---------- Previous post was at 12:17 PM ----------
Unfortunately i flash non a6000 rom that's way happened this
Thanks bro its work for me :good::good::good:
Working great
very Thanks man, it is worked..
Finally unbricked my phone.
sagar1996 said:
Thanks bro its work for me :good::good::good:
Click to expand...
Click to collapse
elsmry said:
very Thanks man, it is worked..
Finally unbricked my phone.
Click to expand...
Click to collapse
Love to help! ???
K4sh said:
You need a screwdriver and a brain
Safely remove back cover battery and back case.
According to the screens, short-circuit between two points on the board with a wire.
These are TP7 & TP9 (red marked in picture)
Connect your phone to a computer without a battery.
In device manager you will see device as Qualcomm HS-USB QDLoader 9008
Now, you can remove the wire from Test Point.
Open QFIL click Download
After the firmware is flashed connect all body parts and enjoy the phone.
Click to expand...
Click to collapse
broo it is not getting detected for me even i use this method.is there any way to check the usb data ways
it is not showing in USBdview also in device manager
ramured said:
broo it is not getting detected for me even i use this method.is there any way to check the usb data ways
it is not showing in USBdview also in device manager
Click to expand...
Click to collapse
You have to connect USB cable while shortcutting the 2 points
Read carefully whole thread, if it not works than it is a hardware problem
This Procedure Can Also Be Used To Flash Stock Rom And To Regain Warranty
Scenarios-
1.You Somehow relocked your bootloader while on custom rom
2.Your phone flashes the zuk logo and then screen goes blank with led blinking and you cant see the options to go to fastboot or other modes
3.Your Phone Shows port 9008 or 900e while connected to PC
3.You want to regain your warranty
4.You just want to go back to stock rom
This Guide Is for All of the Above Sceneriaos
Following this guide will revert your phone back to stock ROM nougat while deleting your user data and relocking your bootloader
WARNING
If your device is already bricked and if it goes worse than I am not responsible for it. Do at your own risk.
Prerequisites-
A)Downloads and Drivers
1.ZUK USB Driver https://www.androidfilehost.com/?fid=745425885120716994
2.QPST tool https://www.androidfilehost.com/?fid=673368273298940270
3.Mi Flash tool(Download Latest Version) http://xiaomiflashtool.com/category/download
4.ADB and fastboot Drivers https://www.androidfilehost.com/?fid=529152257862712103
5.Minimal ADB and Fastboot https://forum.xda-developers.com/showthread.php?t=2317790
6.Qualcomm QHSUSB driver https://androidfilehost.com/?fid=673368273298940267
B)QPST ROM
1.Indian Version Nougat http://www.mediafire.com/file/f86cs...SER_Q01080.2_N_ZUI_2.5.104_ST_170418_QPST.zip
2.Chinese Version Nougat
http://s.bs.zui.com/DGDc
Extract these rom to preferably a new folder in the root of c drive
STEPS
INSTALL ALL TOOLS AND DRIVERS GIVEN ABOVE
A)If phone is running fine
1.Enable USB Debugging on your Device and give permission to any prompts
2.Open Minimal ADB and Fastboot and put the following command
adb reboot edl
OR
Put the phone in fastboot mode, Open Minimal ADB and Fastboot and put the following command
fastboot reboot edl
3.Close Window
4.Open Mi Flash Tool
5.Click "select" button on the upper left and browse to the directory where you extracted your stock rom and click refresh on the right COM port shall appear below
6.Click Flash
7.DONT REMOVE OR DISCONNECT THE USB CABLE FLASHING WILL TAKE SOME TIME
8.After success is shown press the power button for sometime until the phone vibrates first boot will take some time
9.Tada! You are back to stock rom along with your WARRANTY!(If Mi flash doesnt work use QFIL as per given in the steps 1 to 4 given below)
B)If phone doesnt bootup
1. Restart your PC and open QFILClick
2. Select "Flat Build" and "Browse". Now navigate to the extracted ROM/Firmware, and select prog_emmc_firehose_8996_ddr.elf.
3.Select the "load xml" button. This will appear a new explorer. One of them will be needed to navigate to the file
rawprogram0.xml the second one will ask for patch0.xml
4.Turn your phone off. Now press and hold the volume + button, while pressing the power button for 0.5 seconds and plug in the
USB cable in the same moment. If it was successful your phone should appear at QPST/QFIL and you are able to press the
download button. Press the download process and wait to finish.
If it fails, In QFIL Change
"Device Type" to eMMC
"Validation Mode" to 0-No validation
"Reset after Download" no needed to tick (optional)
5.If your phone is not detected in the QFIL or it shows up as port 900E then there are 2 ways to get to 9008 mode
I)
a.Unplug your phone from the computer.
b. Press and hold the POWER button until your phone restarting 3-5 times.
c. After the 3rd times (or more), you will see the notification LED goes off in the middle of boot process, and at that time, quick
press VOLUME + button and release the POWER button but keep the VOLUME + button pressed.
d. Your phone will be at POWER OFF status.
e. After your phone is completely off, press and hold the VOLUME +, then press POWER button and connect your USB at the
same time.
f. Your computer will showing a notification about a new port.
g. If you succeed, you will see Diagnostic Port 9008 at QFIL software
II)
Right click on my computer and select MANAGE, then select Device Manager
See if your device is connected as Diagnostic Port 900E
If it is shown as “QHSUSB_BULK” under Other Device
a. Right-click on QHSUSB_BULK and choose “Update Driver Software“
b. Now click on the Browse button and locate the extracted Qualcomm QDLoader drivers.
c. The installation process shall take place immediately and a system notification will appear. Just choose “Install this driver software anyway“.
d.Click the Close button and check back at Device Manager window. You will now see “Qualcomm HS-USB QDLoader 9008 (COM10)” under Ports (COM & LPT) section.
6. Flash your phone using QFIL software once phone connects in 9008 mode and then reboot.
(Alternatively you can also use the Mi Flash Tool once the phone is in 9008 port)
7.Tada! You have successfully unbricked your phone and regained your WARRANTY!
Update: For saving your user data if your phone gets bricked by bootloader getting locked ONLY follow the below guide
How To-
1. How to switch it off
-firstly this is happening because you have locked you're bootloader
- You have black screen and led on so just hold power button then Zuk logo will be flash after that you will get black screen again and again the phone was preparing to reboot but before that the led will get turn off immediately release power button
- You have it Your phone is switched off
(Let it reboot once after that don't leave the power button and after that led will get off for small time this is the time you have to remove finger from power button this is tricky )
2. Going to Bootloader
-Firstly connect the USB to laptop
-after you have switched off your phone press volume up and down together and with holding buttons connect the phone to USB and you will see the fastboot mode
3. Unlock your phone
-Remember the unlock bootloader file in your email re download it and unlock your bootloader again(no need to redownload if you already have it the file is permanent)
- after unlocking phone you will see phone rebooted press power button reboot press volume the volume button and go to reboot option
- go to fastboot and flash the TWRP and you will see that your data on internal storage is present so flash any ROM and you will see your data
Update: Deep flash using Deep Flash Cable And Procedure to make a deep flash cable
Cut the outer rubber and metal covering of usb cable.
Strip a small portion of the black and green wires carefully preferably using a needle to avoid the copper wires to be torn.
Then plug the usb jack into the pc and phone and keep mi flash tool open.
Then touch both the wires(shortcircuit the green and black) using a needle or blunt edge of knief for about 4-5 sec and then remove.
The phone must be in 9008 mode now with COM port open in miflash tool
Now Flash To Your Hearts Content!
After flashing carefully cover the cut portion by putting the rubber casing first and then covering with electrical tape.
So be careful not to tear anything you just need to precisely cut the covering (around 0.5 cm) in the shape of a ring
Happy Flashing!
I think someone has made this guide already.
I see.
well i have a similar issue that i am stuck at 9008 port that is edl but, i can flash rom via Qfil and Mi Flash toll but i cant boot onto it=
I cant get out of edl mode lol. stuck at it.
I deleted some files from qpst rom for intentionally hard bricking my phone and heres another fix.
Cut the outer plastic and metal covering of usb cable.
Strip a small portion of the black and green wires carefully preferably using a needle to avoid the copper wires to be torn.
Then plug the usb jack into the pc and phone and keep mi flash tool open.
Then touch both the wires(shortcircuit the green and black) using a needle or blunt edge of knief for about 4-5 sec and then remove.
The phone must be in 9008 mode now with COM port open in miflash tool
Now Flash To Your Hearts Content!
Happy Flashing!
AstroBiswas said:
Prerequisites-
A)Downloads and Drivers
1.ZUK USB Driver https://www.androidfilehost.com/?fid=745425885120716994 - not last edition, latest is v1.0.8
2.QPST tool https://www.androidfilehost.com/?fid=673368273298940270 - not last edition, latest is 2.7.460 (fix "sahara" error)
3.Mi Flash tool(Download Latest Version) http://xiaomiflashtool.com/category/download - not needed
4.ADB and fastboot Drivers https://www.androidfilehost.com/?fid=529152257862712103
5.Minimal ADB and Fastboot https://forum.xda-developers.com/showthread.php?t=2317790 - not needed (if you use the previous paragraph).
6.Qualcomm QHSUSB driver https://androidfilehost.com/?fid=673368273298940267
Click to expand...
Click to collapse
@AstroBiswas Read red comment.
Not_James_Bond said:
I think someone has made this guide already.
Click to expand...
Click to collapse
Of course!
https://forum.xda-developers.com/le...-to-recover-hard-bricked-zuk-z2-plus-t3576007
Not even coming up as 900E
AstroBiswas said:
This Procedure Can Also Be Used To Flash Stock Rom And To Regain Warranty
Scenarios-
1.You Somehow relocked your bootloader while on custom rom
2.Your phone flashes the zuk logo and then screen goes blank with led blinking and you cant see the options to go to fastboot or other modes
3.Your Phone Shows port 9008 or 900e while connected to PC
3.You want to regain your warranty
4.You just want to go back to stock rom
This Guide Is for All of the Above Sceneriaos
Following this guide will revert your phone back to stock ROM nougat while deleting your user data and relocking your bootloader
WARNING
If your device is already bricked and if it goes worse than I am not responsible for it. Do at your own risk.
Prerequisites-
A)Downloads and Drivers
1.ZUK USB Driver https://www.androidfilehost.com/?fid=745425885120716994
2.QPST tool https://www.androidfilehost.com/?fid=673368273298940270
3.Mi Flash tool(Download Latest Version) http://xiaomiflashtool.com/category/download
4.ADB and fastboot Drivers https://www.androidfilehost.com/?fid=529152257862712103
5.Minimal ADB and Fastboot https://forum.xda-developers.com/showthread.php?t=2317790
6.Qualcomm QHSUSB driver https://androidfilehost.com/?fid=673368273298940267
B)QPST ROM
1.Indian Version Nougat http://www.mediafire.com/file/f86cs...SER_Q01080.2_N_ZUI_2.5.104_ST_170418_QPST.zip
2.Chinese Version Nougat
http://s.bs.zui.com/DGDc
Extract these rom to preferably a new folder in the root of c drive
STEPS
INSTALL ALL TOOLS AND DRIVERS GIVEN ABOVE
A)If phone is running fine
1.Enable USB Debugging on your Device and give permission to any prompts
2.Open Minimal ADB and Fastboot and put the following command
adb reboot edl
OR
Put the phone in fastboot mode, Open Minimal ADB and Fastboot and put the following command
fastboot reboot edl
3.Close Window
4.Open Mi Flash Tool
5.Click "select" button on the upper left and browse to the directory where you extracted your stock rom and click refresh on the right COM port shall appear below
6.Click Flash
7.DONT REMOVE OR DISCONNECT THE USB CABLE FLASHING WILL TAKE SOME TIME
8.After success is shown press the power button for sometime until the phone vibrates first boot will take some time
9.Tada! You are back to stock rom along with your WARRANTY!(If Mi flash doesnt work use QFIL as per given in the steps 1 to 4 given below)
B)If phone doesnt bootup
1. Restart your PC and open QFILClick
2. Select "Flat Build" and "Browse". Now navigate to the extracted ROM/Firmware, and select prog_emmc_firehose_8996_ddr.elf.
3.Select the "load xml" button. This will appear a new explorer. One of them will be needed to navigate to the file
rawprogram0.xml the second one will ask for patch0.xml
4.Turn your phone off. Now press and hold the volume + button, while pressing the power button for 0.5 seconds and plug in the
USB cable in the same moment. If it was successful your phone should appear at QPST/QFIL and you are able to press the
download button. Press the download process and wait to finish.
If it fails, In QFIL Change
"Device Type" to eMMC
"Validation Mode" to 0-No validation
"Reset after Download" no needed to tick (optional)
5.If your phone is not detected in the QFIL or it shows up as port 900E then there are 2 ways to get to 9008 mode
I)
a.Unplug your phone from the computer.
b. Press and hold the POWER button until your phone restarting 3-5 times.
c. After the 3rd times (or more), you will see the notification LED goes off in the middle of boot process, and at that time, quick
press VOLUME + button and release the POWER button but keep the VOLUME + button pressed.
d. Your phone will be at POWER OFF status.
e. After your phone is completely off, press and hold the VOLUME +, then press POWER button and connect your USB at the
same time.
f. Your computer will showing a notification about a new port.
g. If you succeed, you will see Diagnostic Port 9008 at QFIL software
II)
Right click on my computer and select MANAGE, then select Device Manager
See if your device is connected as Diagnostic Port 900E
If it is shown as “QHSUSB_BULK” under Other Device
a. Right-click on QHSUSB_BULK and choose “Update Driver Software“
b. Now click on the Browse button and locate the extracted Qualcomm QDLoader drivers.
c. The installation process shall take place immediately and a system notification will appear. Just choose “Install this driver software anyway“.
d.Click the Close button and check back at Device Manager window. You will now see “Qualcomm HS-USB QDLoader 9008 (COM10)” under Ports (COM & LPT) section.
6. Flash your phone using QFIL software once phone connects in 9008 mode and then reboot.
(Alternatively you can also use the Mi Flash Tool once the phone is in 9008 port)
7.Tada! You have successfully unbricked your phone and regained your WARRANTY!
Update: For saving your user data if your phone gets bricked by bootloader getting locked ONLY follow the below guide
How To-
1. How to switch it off
-firstly this is happening because you have locked you're bootloader
- You have black screen and led on so just hold power button then Zuk logo will be flash after that you will get black screen again and again the phone was preparing to reboot but before that the led will get turn off immediately release power button
- You have it Your phone is switched off
(Let it reboot once after that don't leave the power button and after that led will get off for small time this is the time you have to remove finger from power button this is tricky )
2. Going to Bootloader
-Firstly connect the USB to laptop
-after you have switched off your phone press volume up and down together and with holding buttons connect the phone to USB and you will see the fastboot mode
3. Unlock your phone
-Remember the unlock bootloader file in your email re download it and unlock your bootloader again(no need to redownload if you already have it the file is permanent)
- after unlocking phone you will see phone rebooted press power button reboot press volume the volume button and go to reboot option
- go to fastboot and flash the TWRP and you will see that your data on internal storage is present so flash any ROM and you will see your data
Update: Deep flash using Deep Flash Cable And Procedure to make a deep flash cable
Cut the outer rubber and metal covering of usb cable.
Strip a small portion of the black and green wires carefully preferably using a needle to avoid the copper wires to be torn.
Then plug the usb jack into the pc and phone and keep mi flash tool open.
Then touch both the wires(shortcircuit the green and black) using a needle or blunt edge of knief for about 4-5 sec and then remove.
The phone must be in 9008 mode now with COM port open in miflash tool
Now Flash To Your Hearts Content!
After flashing carefully cover the cut portion by putting the rubber casing first and then covering with electrical tape.
So be careful not to tear anything you just need to precisely cut the covering (around 0.5 cm) in the shape of a ring
Happy Flashing!
Click to expand...
Click to collapse
My hard brick z2 is not even coming up as 900E. Basically computer doesn't detect and no changes in device manager either. Please confirm what to do.
I have tried pressing buttons told by many others and in various other forums. It doesn't work. Does deep flash cable method work even if the phone is not detecting in 900E mode?
You have to boot in proper edl mode...for edl mode hold volume up button 15 second and immediately click power button for .5 sec and attach data cable to phone which is connected to pc and & immediately prees again power button. all while procees alway hold volume up button....
Zuk Z2 Pro Stuck in EDL HS-USB 9008 Port and automatically connecting and disconnect
Hi,
My Zuk Z2 Pro is stuck in EDL 9008 Port. Phone is totally bricked and no sound, no light, no vibration. When i connect with the computer, phone is connecting on HS USB 9008 port and get disconnected after 20-22 seconds and again automatically connected with in half second time.
I am facing this issue after flashing a ZUI 1.9 by using a QPAST/QFIL application. I think i have made stupid mistake by flashing a phone with "ERASE ALL BEFORE DOWNLOAD" option.
I have tried every scenario to get stable this 9008 port but no luck. Since last 5 days i am studying forums and applying every kind of solution but same result.
I am writing this post with high expectations and hope someone will take notice and help me to get rid of this problem.
I can pay through paypal if someone wants to provide professional services to resolve this matter
I will appreciate if someone have any idea and can help me. Thanks
Can someine please help me with this weird situation? Device got disconnected while flashing via qfil. Now no zuk logo nothing. Phone vibrates every 30 sec that's it. Wont even gets recognized by my laptop(no 9008 or 900e port!)
SilenT__ShadoW said:
Can someine please help me with this weird situation? Device got disconnected while flashing via qfil. Now no zuk logo nothing. Phone vibrates every 30 sec that's it. Wont even gets recognized by my laptop(no 9008 or 900e port!)
Click to expand...
Click to collapse
You need to use the deep flash guide which involved cutting and sorting the cable , procedure given in last part of OP
AstroBiswas said:
You need to use the deep flash guide which involved cutting and sorting the cable , procedure given in last part of OP
Click to expand...
Click to collapse
I've tired that also. Connecting phone to pc while green and black wires attached together and detaching them after 5 sec. That also did nothing. However i connect my phone to my pc it just vibrates and blinks led every 30 sec till i remove battery!
SilenT__ShadoW said:
I've tired that also. Connecting phone to pc while green and black wires attached together and detaching them after 5 sec. That also did nothing. However i connect my phone to my pc it just vibrates and blinks led every 30 sec till i remove battery!
Click to expand...
Click to collapse
You need to completely poweoff the phone (difficult in hard brick actually) before this procedure i have forgotten the way to do it, was given on zuk.eu i think, dont worry it may take time but these days hard bricks is repairable too.
AstroBiswas said:
You need to completely poweoff the phone (difficult in hard brick actually) before this procedure i have forgotten the way to do it, was given on zuk.eu i think, dont worry it may take time but these days hard bricks is repairable too.
Click to expand...
Click to collapse
Isn't removing battery connection means powering off the device???
SilenT__ShadoW said:
Isn't removing battery connection means powering off the device???
Click to expand...
Click to collapse
Yes!
AstroBiswas said:
Yes!
Click to expand...
Click to collapse
I'm doing the same.... Removing battery connection every time to switch off.
SilenT__ShadoW said:
I'm doing the same.... Removing battery connection every time to switch off.
Click to expand...
Click to collapse
Thats strange keep trying, perfect timing matters
AstroBiswas said:
Thats strange keep trying, perfect timing matters
Click to expand...
Click to collapse
What do you mean by perfect timing?!?
Never mind. Got my laptop to recognise it and flashed successfully.
Don't know what made it to change its mind!?
What happened?
- was trying to flash and cable got disconnected by accident.
- my phone started to vibrate and blink at the same time for every 30 sec(no zuk logo nothing) and can't seems to be stopped.
- laptop doesn't seems to recognise when device gets connected (no 900e or 9008 port shows up at device manager)
What I did?
- Reinstalled my windows (no problem for me as I only keep system files on partition c)
- Disabled driver verification (windows 10 thing)
- Installed zuk driver, adb , mi tools inside partition c(all inside a folder called zuk)
- used cable that came with phone instead of 3rd party to deep flash
AstroBiswas said:
This Procedure Can Also Be Used To Flash Stock Rom And To Regain Warranty
Scenarios-
1.You Somehow relocked your bootloader while on custom rom
2.Your phone flashes the zuk logo and then screen goes blank with led blinking and you cant see the options to go to fastboot or other modes
3.Your Phone Shows port 9008 or 900e while connected to PC
3.You want to regain your warranty
4.You just want to go back to stock rom
This Guide Is for All of the Above Sceneriaos
Following this guide will revert your phone back to stock ROM nougat while deleting your user data and relocking your bootloader
WARNING
If your device is already bricked and if it goes worse than I am not responsible for it. Do at your own risk.
Prerequisites-
A)Downloads and Drivers
1.ZUK USB Driver https://www.androidfilehost.com/?fid=745425885120716994
2.QPST tool https://www.androidfilehost.com/?fid=673368273298940270
3.Mi Flash tool(Download Latest Version) http://xiaomiflashtool.com/category/download
4.ADB and fastboot Drivers https://www.androidfilehost.com/?fid=529152257862712103
5.Minimal ADB and Fastboot https://forum.xda-developers.com/showthread.php?t=2317790
6.Qualcomm QHSUSB driver https://androidfilehost.com/?fid=673368273298940267
B)QPST ROM
1.Indian Version Nougat http://www.mediafire.com/file/f86cs...SER_Q01080.2_N_ZUI_2.5.104_ST_170418_QPST.zip
2.Chinese Version Nougat
http://s.bs.zui.com/DGDc
Extract these rom to preferably a new folder in the root of c drive
STEPS
INSTALL ALL TOOLS AND DRIVERS GIVEN ABOVE
A)If phone is running fine
1.Enable USB Debugging on your Device and give permission to any prompts
2.Open Minimal ADB and Fastboot and put the following command
adb reboot edl
OR
Put the phone in fastboot mode, Open Minimal ADB and Fastboot and put the following command
fastboot reboot edl
3.Close Window
4.Open Mi Flash Tool
5.Click "select" button on the upper left and browse to the directory where you extracted your stock rom and click refresh on the right COM port shall appear below
6.Click Flash
7.DONT REMOVE OR DISCONNECT THE USB CABLE FLASHING WILL TAKE SOME TIME
8.After success is shown press the power button for sometime until the phone vibrates first boot will take some time
9.Tada! You are back to stock rom along with your WARRANTY!(If Mi flash doesnt work use QFIL as per given in the steps 1 to 4 given below)
B)If phone doesnt bootup
1. Restart your PC and open QFILClick
2. Select "Flat Build" and "Browse". Now navigate to the extracted ROM/Firmware, and select prog_emmc_firehose_8996_ddr.elf.
3.Select the "load xml" button. This will appear a new explorer. One of them will be needed to navigate to the file
rawprogram0.xml the second one will ask for patch0.xml
4.Turn your phone off. Now press and hold the volume + button, while pressing the power button for 0.5 seconds and plug in the
USB cable in the same moment. If it was successful your phone should appear at QPST/QFIL and you are able to press the
download button. Press the download process and wait to finish.
If it fails, In QFIL Change
"Device Type" to eMMC
"Validation Mode" to 0-No validation
"Reset after Download" no needed to tick (optional)
5.If your phone is not detected in the QFIL or it shows up as port 900E then there are 2 ways to get to 9008 mode
I)
a.Unplug your phone from the computer.
b. Press and hold the POWER button until your phone restarting 3-5 times.
c. After the 3rd times (or more), you will see the notification LED goes off in the middle of boot process, and at that time, quick
press VOLUME + button and release the POWER button but keep the VOLUME + button pressed.
d. Your phone will be at POWER OFF status.
e. After your phone is completely off, press and hold the VOLUME +, then press POWER button and connect your USB at the
same time.
f. Your computer will showing a notification about a new port.
g. If you succeed, you will see Diagnostic Port 9008 at QFIL software
II)
Right click on my computer and select MANAGE, then select Device Manager
See if your device is connected as Diagnostic Port 900E
If it is shown as “QHSUSB_BULK” under Other Device
a. Right-click on QHSUSB_BULK and choose “Update Driver Software“
b. Now click on the Browse button and locate the extracted Qualcomm QDLoader drivers.
c. The installation process shall take place immediately and a system notification will appear. Just choose “Install this driver software anyway“.
d.Click the Close button and check back at Device Manager window. You will now see “Qualcomm HS-USB QDLoader 9008 (COM10)” under Ports (COM & LPT) section.
6. Flash your phone using QFIL software once phone connects in 9008 mode and then reboot.
(Alternatively you can also use the Mi Flash Tool once the phone is in 9008 port)
7.Tada! You have successfully unbricked your phone and regained your WARRANTY!
Update: For saving your user data if your phone gets bricked by bootloader getting locked ONLY follow the below guide
How To-
1. How to switch it off
-firstly this is happening because you have locked you're bootloader
- You have black screen and led on so just hold power button then Zuk logo will be flash after that you will get black screen again and again the phone was preparing to reboot but before that the led will get turn off immediately release power button
- You have it Your phone is switched off
(Let it reboot once after that don't leave the power button and after that led will get off for small time this is the time you have to remove finger from power button this is tricky )
2. Going to Bootloader
-Firstly connect the USB to laptop
-after you have switched off your phone press volume up and down together and with holding buttons connect the phone to USB and you will see the fastboot mode
3. Unlock your phone
-Remember the unlock bootloader file in your email re download it and unlock your bootloader again(no need to redownload if you already have it the file is permanent)
- after unlocking phone you will see phone rebooted press power button reboot press volume the volume button and go to reboot option
- go to fastboot and flash the TWRP and you will see that your data on internal storage is present so flash any ROM and you will see your data
Update: Deep flash using Deep Flash Cable And Procedure to make a deep flash cable
Cut the outer rubber and metal covering of usb cable.
Strip a small portion of the black and green wires carefully preferably using a needle to avoid the copper wires to be torn.
Then plug the usb jack into the pc and phone and keep mi flash tool open.
Then touch both the wires(shortcircuit the green and black) using a needle or blunt edge of knief for about 4-5 sec and then remove.
The phone must be in 9008 mode now with COM port open in miflash tool
Now Flash To Your Hearts Content!
After flashing carefully cover the cut portion by putting the rubber casing first and then covering with electrical tape.
So be careful not to tear anything you just need to precisely cut the covering (around 0.5 cm) in the shape of a ring
Happy Flashing!
Click to expand...
Click to collapse
Okay fine, somebody suggested me to flash stock ROM via qpst method, because I was having battery issues, the flashing process stopped, and I forgot to untick clean all and lock, this left my phone with a screen saying, 'unable to boot'. PC is not detecting my device now, but earlier I unlocked bootloader and flashed tw recovery, but I wasn't able to boot to it, and on qpst, my phone is detected as Diagnostic Port 900E.
AstroBiswas said:
This Procedure Can Also Be Used To Flash Stock Rom And To Regain Warranty
Scenarios-
1.You Somehow relocked your bootloader while on custom rom
2.Your phone flashes the zuk logo and then screen goes blank with led blinking and you cant see the options to go to fastboot or other modes
3.Your Phone Shows port 9008 or 900e while connected to PC
3.You want to regain your warranty
4.You just want to go back to stock rom
This Guide Is for All of the Above Sceneriaos
Following this guide will revert your phone back to stock ROM nougat while deleting your user data and relocking your bootloader
WARNING
If your device is already bricked and if it goes worse than I am not responsible for it. Do at your own risk.
Prerequisites-
A)Downloads and Drivers
1.ZUK USB Driver https://www.androidfilehost.com/?fid=745425885120716994
2.QPST tool https://www.androidfilehost.com/?fid=673368273298940270
3.Mi Flash tool(Download Latest Version) http://xiaomiflashtool.com/category/download
4.ADB and fastboot Drivers https://www.androidfilehost.com/?fid=529152257862712103
5.Minimal ADB and Fastboot https://forum.xda-developers.com/showthread.php?t=2317790
6.Qualcomm QHSUSB driver https://androidfilehost.com/?fid=673368273298940267
B)QPST ROM
1.Indian Version Nougat http://www.mediafire.com/file/f86cs...SER_Q01080.2_N_ZUI_2.5.104_ST_170418_QPST.zip
2.Chinese Version Nougat
http://s.bs.zui.com/DGDc
Extract these rom to preferably a new folder in the root of c drive
STEPS
INSTALL ALL TOOLS AND DRIVERS GIVEN ABOVE
A)If phone is running fine
1.Enable USB Debugging on your Device and give permission to any prompts
2.Open Minimal ADB and Fastboot and put the following command
adb reboot edl
OR
Put the phone in fastboot mode, Open Minimal ADB and Fastboot and put the following command
fastboot reboot edl
3.Close Window
4.Open Mi Flash Tool
5.Click "select" button on the upper left and browse to the directory where you extracted your stock rom and click refresh on the right COM port shall appear below
6.Click Flash
7.DONT REMOVE OR DISCONNECT THE USB CABLE FLASHING WILL TAKE SOME TIME
8.After success is shown press the power button for sometime until the phone vibrates first boot will take some time
9.Tada! You are back to stock rom along with your WARRANTY!(If Mi flash doesnt work use QFIL as per given in the steps 1 to 4 given below)
B)If phone doesnt bootup
1. Restart your PC and open QFILClick
2. Select "Flat Build" and "Browse". Now navigate to the extracted ROM/Firmware, and select prog_emmc_firehose_8996_ddr.elf.
3.Select the "load xml" button. This will appear a new explorer. One of them will be needed to navigate to the file
rawprogram0.xml the second one will ask for patch0.xml
4.Turn your phone off. Now press and hold the volume + button, while pressing the power button for 0.5 seconds and plug in the
USB cable in the same moment. If it was successful your phone should appear at QPST/QFIL and you are able to press the
download button. Press the download process and wait to finish.
If it fails, In QFIL Change
"Device Type" to eMMC
"Validation Mode" to 0-No validation
"Reset after Download" no needed to tick (optional)
5.If your phone is not detected in the QFIL or it shows up as port 900E then there are 2 ways to get to 9008 mode
I)
a.Unplug your phone from the computer.
b. Press and hold the POWER button until your phone restarting 3-5 times.
c. After the 3rd times (or more), you will see the notification LED goes off in the middle of boot process, and at that time, quick
press VOLUME + button and release the POWER button but keep the VOLUME + button pressed.
d. Your phone will be at POWER OFF status.
e. After your phone is completely off, press and hold the VOLUME +, then press POWER button and connect your USB at the
same time.
f. Your computer will showing a notification about a new port.
g. If you succeed, you will see Diagnostic Port 9008 at QFIL software
II)
Right click on my computer and select MANAGE, then select Device Manager
See if your device is connected as Diagnostic Port 900E
If it is shown as “QHSUSB_BULK” under Other Device
a. Right-click on QHSUSB_BULK and choose “Update Driver Software“
b. Now click on the Browse button and locate the extracted Qualcomm QDLoader drivers.
c. The installation process shall take place immediately and a system notification will appear. Just choose “Install this driver software anyway“.
d.Click the Close button and check back at Device Manager window. You will now see “Qualcomm HS-USB QDLoader 9008 (COM10)” under Ports (COM & LPT) section.
6. Flash your phone using QFIL software once phone connects in 9008 mode and then reboot.
(Alternatively you can also use the Mi Flash Tool once the phone is in 9008 port)
7.Tada! You have successfully unbricked your phone and regained your WARRANTY!
Update: For saving your user data if your phone gets bricked by bootloader getting locked ONLY follow the below guide
How To-
1. How to switch it off
-firstly this is happening because you have locked you're bootloader
- You have black screen and led on so just hold power button then Zuk logo will be flash after that you will get black screen again and again the phone was preparing to reboot but before that the led will get turn off immediately release power button
- You have it Your phone is switched off
(Let it reboot once after that don't leave the power button and after that led will get off for small time this is the time you have to remove finger from power button this is tricky )
2. Going to Bootloader
-Firstly connect the USB to laptop
-after you have switched off your phone press volume up and down together and with holding buttons connect the phone to USB and you will see the fastboot mode
3. Unlock your phone
-Remember the unlock bootloader file in your email re download it and unlock your bootloader again(no need to redownload if you already have it the file is permanent)
- after unlocking phone you will see phone rebooted press power button reboot press volume the volume button and go to reboot option
- go to fastboot and flash the TWRP and you will see that your data on internal storage is present so flash any ROM and you will see your data
Update: Deep flash using Deep Flash Cable And Procedure to make a deep flash cable
Cut the outer rubber and metal covering of usb cable.
Strip a small portion of the black and green wires carefully preferably using a needle to avoid the copper wires to be torn.
Then plug the usb jack into the pc and phone and keep mi flash tool open.
Then touch both the wires(shortcircuit the green and black) using a needle or blunt edge of knief for about 4-5 sec and then remove.
The phone must be in 9008 mode now with COM port open in miflash tool
Now Flash To Your Hearts Content!
After flashing carefully cover the cut portion by putting the rubber casing first and then covering with electrical tape.
So be careful not to tear anything you just need to precisely cut the covering (around 0.5 cm) in the shape of a ring
Happy Flashing!
Click to expand...
Click to collapse
What if the phone even won't boot tofastboot mode?? It only vibrates every 10 sec or maybe, will EDL cable work??
Can anybody help
sagarsk said:
Not even coming up as 900E
My hard brick z2 is not even coming up as 900E. Basically computer doesn't detect and no changes in device manager either. Please confirm what to do.
I have tried pressing buttons told by many others and in various other forums. It doesn't work. Does deep flash cable method work even if the phone is not detecting in 900E mode?
Click to expand...
Click to collapse
I also have the same question and I am in the same situation
Three days ago, my phone went off by itself and I had a hard time starting again, it was just loading the bootanimation, I tried to reinstall the ROM, but it did not go into TWRP, although the message Recovery appears on the screen, I insisted and after several attempts, I got into the recovery, formatted everything and I installed the AICP ROM again, and I had to restart,my phone freezes in the LeEco bootloader, then again I insisted until the ROM finally started, but soon realized that it was taking too long to start (30 minutes waiting and nothing).
So I rebooted again, and from then on, I can not go into any mode anymore, trying to access the TWRP, the phone only stays on the Recovery screen until reboot after 2 minutes, when letting the phone try to start the ROM, it only stays on the LeEco screen and restart after 2 minutes, when entering Fastboot, it enters the screen in Fastboot mode, but is not recognized by the computer, not even as unknown device, the same for Download mode.
Is there anything I can try?
Doesn't seem like a a fried motherboard. In my experience, If you fried the CPU, you would still be able to access Fastboot, if you fried the GPU part of the chip, or if the LCD has failed you would feel vibrations..
Do you thin it is possible that you accidentally put the phone into EDL mode? It can sometimes be hard to get out of, and it will give you similar issues.
To leave EDL press and hold volume down and power for 1 minute or longer.
Try this
Install the All in One tool and use it to update your android and fastboot drivers. Afterwards see if the computer recognises the phone port connection by going to Control Panel>System> Device Manager* ( Even though, you may not see the drive, you will maybe still see unknown device or te port)
Maybe a Brick?
If it does not see the phone or show a unknown USB device with port 9008
Try placing the phone into EDL mode by pressing and holding the Vol Up (+) and Vol Down (-) together while simultaneously connecting the phone by USB cable to the computer. Do you see the port or phone now? If you see port 9008 you possibly are bricked, follow the steps on my unbricking thread., if you can not get back to TWRP, or fastboot,and the phone keeps a charge. Then I would think that you are definitely bricked.
Other possible issues
The issue could be the battery. Have you tried using other USB C Cables? If you can use a different usb cable let it charge for a couple of hours then see if you can get into TWRP again . If you can enter fastboot mode try reflashing TWRP, you can use the All in One tool for this.
tsongming said:
Doesn't seem like a a fried motherboard. In my experience, If you fried the CPU, you would still be able to access Fastboot, if you fried the GPU part of the chip, or if the LCD has failed you would feel vibrations..
Do you thin it is possible that you accidentally put the phone into EDL mode? It can sometimes be hard to get out of, and it will give you similar issues.
To leave EDL press and hold volume down and power for 1 minute or longer.
Try this
Install the All in One tool and use it to update your android and fastboot drivers. Afterwards see if the computer recognises the phone port connection by going to Control Panel>System> Device Manager* ( Even though, you may not see the drive, you will maybe still see unknown device or te port)
Maybe a Brick?
If it does not see the phone or show a unknown USB device with port 9008
Try placing the phone into EDL mode by pressing and holding the Vol Up (+) and Vol Down (-) together while simultaneously connecting the phone by USB cable to the computer. Do you see the port or phone now? If you see port 9008 you possibly are bricked, follow the steps on my unbricking thread., if you can not get back to TWRP, or fastboot,and the phone keeps a charge. Then I would think that you are definitely bricked.
Other possible issues
The issue could be the battery. Have you tried using other USB C Cables? If you can use a different usb cable let it charge for a couple of hours then see if you can get into TWRP again . If you can enter fastboot mode try reflashing TWRP, you can use the All in One tool for this.
Click to expand...
Click to collapse
Thanks for answering. I've tried everything.
But I can not see the smartphone when connected. USB drivers are properly installed (I used to recover other LeEco x651, x526 and x520 devices)
I left it restarting for more than hours holding the power button and volume down, no results.
The device does not appear in the Windows device manager in any way, not even as Unknown or 9008 port.
I tried several usb cables.
There is no communication with TWRP or ROM installed and neither with the computer, even though I enter into fastboot / 9008 mode. Only LeEco / recovery logo and Fastboot screen.
I think my main memory is damaged or something.
kakobr said:
Thanks for answering. I've tried everything.
But I can not see the smartphone when connected. USB drivers are properly installed (I used to recover other LeEco x651, x526 and x520 devices)
I left it restarting for more than hours holding the power button and volume down, no results.
The device does not appear in the Windows device manager in any way, not even as Unknown or 9008 port.
I tried several usb cables.
There is no communication with TWRP or ROM installed and neither with the computer, even though I enter into fastboot / 9008 mode.sl Only LeEco / recovery logo and Fastboot screen.
I think my main memory is damaged or something.
Click to expand...
Click to collapse
Well that sucks, if you feel like sending to the phone to China for repair, you can find several shops that are offering to repair any damaged Leeco for $10 and an average cost of $30 for resoldering. On the TaoBao website, use Chrome for translation. Some of their ads mention overseas repair
If it's memory it would be an easy fix for them.
If you don't want to fix it, I highly recommend the Mi8 if it's within your budget, its a perfect phone and you can find them for close to $300. My brother has a Redmi note 6 Pro which is also really nice. He paid $190.
Good Luck.
Sent from my Xiaomi MI 8 using XDA Labs
kakobr said:
Thanks for answering. I've tried everything.
But I can not see the smartphone when connected. USB drivers are properly installed (I used to recover other LeEco x651, x526 and x520 devices)
I left it restarting for more than hours holding the power button and volume down, no results.
The device does not appear in the Windows device manager in any way, not even as Unknown or 9008 port.
I tried several usb cables.
There is no communication with TWRP or ROM installed and neither with the computer, even though I enter into fastboot / 9008 mode. Only LeEco / recovery logo and Fastboot screen.
I think my main memory is damaged or something.
Click to expand...
Click to collapse
Check out this possible do it yourself fix : https://forum.xda-developers.com/showpost.php?p=79302729&postcount=71
I managed to identify the test point on the motherboard.
This allows the tablet to switch from Qualcomm HS-USB Diagnostics 900E driver mode to Qualcom HS-USB QDLoader 9008 mode.
My tablet could not be booted into bootloader, recovery or system.
Button vibration did not work.
The tablet only logged on to a PC with the Qualcomm HS-USB Diagnostics 900E driver.
The EDL cable did not help and the buttons of the 900E driver only restarted.
Photos and brief instructions I posted on the Russian forum here:
http://4pda.ru/forum/index.php?s=&showtopic=849554&view=findpost&p=90398828
I attach the photo here.
Only one hidden test point is connected to the metal frame (needle).
My tutorial on the Russian forum has been updated, missing the source file for MiFlash.
Today it was added.
Downgrade from Android 8.1 to 7.1.1 is possible!
Applies to tablets with unlocked bootloader.
The entire factory clean version must be reinstalled.
Use the same installation and tools as in the introductory link.
It is necessary to install in EDL mode.
To start EDL mode (driver 9008) from a working tablet, follow these steps:
1) Turn off the tablet
2) run the device manager in windows - ports
3) run and set up MiFlash (firmware path,option "save user data")
4) connect tablet to computer (USB)
5) hold all three buttons on the tablet (power+volumeUP+volumeDown) until the 9008 driver loads in the windows manager
6) run "refresh" in MiFlash without delay and immediately afterwards "flash"
It is important to start recording as soon as the driver is loaded, otherwise the input will close even if the driver remains loaded!
If there is a delay in recording, the EDL mode may close and the recording will not work.
In this case, you must start by disconnecting the tablet and turning it off.
The restored tablet remains unlocked (if you have unlocked it previously) while Lenovo updates work.
Hello i want to contact you are you still alive
I want to unbrixk my tab i accidentally deleted aboot.img
Hello i want to contact you
I want to unbrick my tab are you available???
Just to clarify, the test points on the board are the points you see on the board labeled "FORCE, VDD, TX, RX" and can be different sizes.
One such point was hidden under a folded out frame and that is the correct one. Connect this point with a needle to the metal frame and follow the order of operations in the instructions.
MiFlash - recommended:
Download in progress... | Xiaomi Tips
Thank you for downloading. Your download should start automatically in a few seconds.. Download FAQs Broken download link? Let us know. Is the file safe
xiaomitips.com
System:
TB-X304L_S000035_170703_ROW_QFIL.rar | by yulianto adikragil for Generic Device/Other
Download GApps, Roms, Kernels, Themes, Firmware, and more. Free file hosting for all Android developers.
androidfilehost.com
Follow the procedure.
After loading 9008, release the checkpoint as soon as possible.
I used XiaoMiFlash (beta).
You need to prepare XiaoMiFlash before taking action.
"Refresh" and "flash" should start immediately after disconnecting the breakpoints.
The path to the XiaoMiFlash firmware should only be "bat" files, not "images".
The fact that the 9008 driver loads in Windows indicates a functional boot.
You "only" need to complete the remaining steps correctly and on time.
If unsuccessful, repeat the procedure by disconnecting the battery.
If you changed the drivers manually, uninstall them first.
Let them download automatically.
There is a risk that this is not the 9008 driver.
You'll still need this:
The files contained in the image folder TB-X304L_S000035_170703_ROW_QFIL.rar need to be put into the inage folder X304L and then use this folder for MiFlash.
I have to thank You a lot. You saved my good old Lenovo. First when I read Your tutorial, I thought that could never ever work. I was exactly same problem as You were. I tried everything, even raindance. Nothing not helped. Two weeks with drivers, softwares, thousand tutorials...etc. But that did the trick! Now when I know How to unbrick totally dead Lenovo, it is actually only 10 minutes and lenovo fired up again.
Actually it is really easy do with linux by using QDL. No driver hassles or timing when connect or similar. I've linux installed, so if someone gonna try this, Live linux from USB stick working as well. User friendly could be for example Linux Mint Mate, Ubuntu...
1. Install Linux Your USB device and boot it by using Your PC.
2. Get QDL flash tool for Your PC (free and very easy to use).
3. Install QDL depencies: libxml2 and libudev (fastboot is optional, if unlocking bootloader same time).
sudo apt-get install libxml2 libudev fastboot
4. Stop modem manager: sudo systemctl stop ModemManager
5. Start flashing : ./qdl --storage emmc --include <Your Whole Stock firmware path> <Firehose path> <RAW program path (xml format)> <patch0 path (xml format)>
Enter and QDL start waiting for EDL device....
Next open second terminal for monitoring: dmesg and as You can see it is coursed 900e mode.
Next disconnect battery and leave it disconnected whole process time. Now it is time to short testpoint. reconnect device to PC when testpoint is shorted and check dmesg . When You'll see it changing 9008 mode. You're ready to start flashing. At this moment QDL still waiting EDL device > Ctrl+C and start over again ./qdl ...etc and flashing starting.
This is how easily You can hard unbrick Lenovo X304F Tab4 10 or X304L.
In my case I accidently Flashed X704 firmware to my device. It went just fine. But when booting, You know. I tought that's it! But It wasn't. Thanks again @StaryMuz.
I'm glad you found my advice helpful. The Linux tutorial is useful and it's good that you posted it.
i ended up bootlooping on the lenovo logo (tbx304L) and locked bootloader
and is it necessary to be on stock 8.1 to downgrade? @StaryMuz
the recovery shows 7.1.1 but still bootlooping
StaryMuz said:
I managed to identify the test point on the motherboard.
This allows the tablet to switch from Qualcomm HS-USB Diagnostics 900E driver mode to Qualcom HS-USB QDLoader 9008 mode.
My tablet could not be booted into bootloader, recovery or system.
Button vibration did not work.
The tablet only logged on to a PC with the Qualcomm HS-USB Diagnostics 900E driver.
The EDL cable did not help and the buttons of the 900E driver only restarted.
Photos and brief instructions I posted on the Russian forum here:
http://4pda.ru/forum/index.php?s=&showtopic=849554&view=findpost&p=90398828
I attach the photo here.
Only one hidden test point is connected to the metal frame (needle).
Click to expand...
Click to collapse
Many of the links for the rescue files are now missing but I will share how I rescued my TB-X304F in 2023. I followed your photo indicating the test point location/ trick along with the Lenovo Rescue and Smart Assistant program.
Rescue and Smart Assistant (RSA) - Lenovo Support US
support.lenovo.com
1) open the tablet
2) Remove the metal cover
3) Carefully Peel/bend the metal frame around the chip on the right in order to find the hidden test point. It is right under the frame. (the frame should gently move away from the chip, the frame is not difficult)
Now be sure to install the Lenovo Rescue and Smart Assistant program on your PC. Launch it, and look up the tablet's firmware by either S/N or manually looking it up. Download the necessary firmware files within the program until you get to the point of start rescue. Click Proceed, ok, ok, until you get to the screen that says: Find QDLoader COM Port which is asking you to hold the volume +&- but we have already tried that and didn't work so at this point then do the following:
- disconnect the battery
- connect the USB cable to the phone and computer
- Connect the test point with a needle (touch) to the frame and hold
- connect the battery and watch the driver in the windows manager
- as the 9008 driver loads, disconnect the point and let the Lenovo Rescue and Smart Assistant do its thing.
Tablet rescued!
Hi XDA!
(tl;dr - The "specific technical questions" are in the last section. )
I'll spare everyone a detailed explanation of what I've been through with this phone in the last few weeks, except to say that I have exhausted all simple solutions.
The current state of the phone is that both its main and recovery partitions hang with a white LED.
There are two states in which I understand it should at least register to a USB host as a visible device, whether or not proper drivers are installed (though I have tried many drivers as well):
1. FastBoot
I can Power+Vol-Up into the FastBoot menu, which appears and operates, but there is no contact with the computer over USB.
2. Qualcomm
I can Vol-Up then plug-in which should boot into "Qualcomm mode" (a.k.a. EDL mode?), but there is also no indication of a low-level device reporting itself as "Qualcomm" or "QHUSB_BULK", or the presence of any device at all on four different laptops, both Windows (via Device Manager) and Linux (via lsusb).
2a. Each of these cable/port/laptop combinations do work for charging the OnePlus 5
2b. The same cable and ports function properly for FastBoot/data with another phone.
2c. The vol-up+plug-in method for inducing "Qualcomm mode" does appear to do something, which is that it stays on a black screen doing nothing instead of booting upon plug-in, which is what it does with no vol-up. (Before, plugging it in would send it to the "battery charge" screen, but now, having broken it further, it boots into white-LED failure).
Failure modes eliminated:
1. The USB-C/headphone port assembly was also replaced because the previous one had been unstable for a while and I wanted to ensure that a loose connection was not the cause of the FastBoot issue. The new port is now solid and reliable. I also inspected the internal ribbon port where the ports connect to the board to ensure that the tiny fragile connectors were not damaged during the swap.
2. I have also tried all methods of gaining access after disconnecting the battery for a while, and attempting to connect before pressing any keys.
Specific Technical Questions:
1. Is there another way to get the OnePlus 5 into EDL mode other than Vol-Up+cable-connect? Such as with an EDL cable or by shorting test points on the board?
2. Is there a way to boot from another device, such as via OTG, connecting to a port on the board, or using special service hardware?
3. Is it possible to communicate with a USB device even when it does not appear to low-level USB inspection tools running on the host machine, such as lsusb (Linux) or various Windows USB utilities that scan all attached USB controllers for registered devices? (Or shall I continue to interpret the phone's invisibility to any such tool as an indication that no possible driver could recognize it, and thus avoid trying the dozen or so candidates I've collected?)
4. Is it theoretically possible for (buggy, incorrect, malicious) software being written to the recovery partition to break USB data connectivity or impair FastBoot?
5. Is it possible that a hardware issue might break the USB port for data, while allowing it to function correctly for charging?
6. Are there any other suggestions for a way forward I haven't considered here?
Thanks!
Pseudorando said:
2. Is there a way to boot from another device, such as via OTG, connecting to a port on the board, or using special service hardware?
Click to expand...
Click to collapse
The only ability Android platforms have for external boot is by providing a boot image via ADB. This is done while the device is in bootloader mode, with this command:
fastboot boot <image>
This instructs the device to boot the image provided instead of what is written to the /boot partition.
If the bootloader is corrupt, the only thing that can be done is a low level reflash, as the board does not have the capability to load external software on its own - only the bootloader can.
Pseudorando said:
3. Is it possible to communicate with a USB device even when it does not appear to low-level USB inspection tools running on the host machine, such as lsusb (Linux) or various Windows USB utilities that scan all attached USB controllers for registered devices? (Or shall I continue to interpret the phone's invisibility to any such tool as an indication that no possible driver could recognize it, and thus avoid trying the dozen or so candidates I've collected?)
Click to expand...
Click to collapse
No - if Windows does not even display an unidentified USB device, it's dead as a stone.
Pseudorando said:
4. Is it theoretically possible for (buggy, incorrect, malicious) software being written to the recovery partition to break USB data connectivity or impair FastBoot?
Click to expand...
Click to collapse
I'm not familiar with OnePlus, but /recovery is a separate partition from /bootloader; as long as /bootloader is not corrupt, the device should at least start into bootloader mode, which would allow flashing partitions such as /recovery (if the bootloader is unlocked).
Fastbootd is a part of recovery mode that allows directly flashing partitions as well; normally, the recovery engine does not allow external flashing of partitions, and is meant to unpack and flash software packages.
Pseudorando said:
5. Is it possible that a hardware issue might break the USB port for data, while allowing it to function correctly for charging?
Click to expand...
Click to collapse
Yes. As noted above, if any of the "cold boot" code such as bootloader is corrupt, the device may not communicate via USB, because that's a software issue. However, the onboard power management hardware continues to function and will charge the battery when power is connected via USB.
Pseudorando said:
6. Are there any other suggestions for a way forward I haven't considered here?
Click to expand...
Click to collapse
Again...I'm not familiar with OnePlus devices, but as a generally universal rule of thumb, a device in a state such as yours is completely bricked and cannot be resurrected. If you can seek repair, do so - it most likely won't be cheap, as you'll be buying a new mainboard for the device, and you'll lose all your data anyway. Best course of action: Buy a replacement device.
V0latyle said:
The only ability Android platforms have for external boot is by providing a boot image via ADB. This is done while the device is in bootloader mode, with this command:
fastboot boot <image>
This instructs the device to boot the image provided instead of what is written to the /boot partition.
If the bootloader is corrupt, the only thing that can be done is a low level reflash, as the board does not have the capability to load external software on its own - only the bootloader can.
No - if Windows does not even display an unidentified USB device, it's dead as a stone.
I'm not familiar with OnePlus, but /recovery is a separate partition from /bootloader; as long as /bootloader is not corrupt, the device should at least start into bootloader mode, which would allow flashing partitions such as /recovery (if the bootloader is unlocked).
Fastbootd is a part of recovery mode that allows directly flashing partitions as well; normally, the recovery engine does not allow external flashing of partitions, and is meant to unpack and flash software packages.
Yes. As noted above, if any of the "cold boot" code such as bootloader is corrupt, the device may not communicate via USB, because that's a software issue. However, the onboard power management hardware continues to function and will charge the battery when power is connected via USB.
Again...I'm not familiar with OnePlus devices, but as a generally universal rule of thumb, a device in a state such as yours is completely bricked and cannot be resurrected. If you can seek repair, do so - it most likely won't be cheap, as you'll be buying a new mainboard for the device, and you'll lose all your data anyway. Best course of action: Buy a replacement device.
Click to expand...
Click to collapse
Thanks for your fast and detailed reply. I'm still holding out some hope that I just need to properly induce a mode where the phone will become responsive to flashing tools which address the Qualcomm controller directly, which appears to be a mode separate from the /bootloader (which itself does appear to at least load properly, displaying the FastBoot menu, which lets me navigate to select a boot partition, restart the bootloader, or power off).
Other phones which use this Qualcomm chip can be put into EDL mode by either on-board test points or a cable that shorts out (or otherwise modifies the signal on) specific pins. But in the case of the OnePlus 5, the mode is either software accessible (not in my case), or accessible by a held key-combo (which appears not to work for me).
I found this nicely-detailed write-up of the EDL mode and its internals:
Exploiting Qualcomm EDL Programmers (1): Gaining Access & PBL Internals
Research & Exploitation of Qualcomm EDL Firehose Programmers: From PBL (Boot ROM) Extraction, Research & Analysis to Secure Boot Bypass in Nokia 6. (Part 1)
alephsecurity.com
Pseudorando said:
Thanks for your fast and detailed reply. I'm still holding out some hope that I just need to properly induce a mode where the phone will become responsive to flashing tools which address the Qualcomm controller directly, which appears to be a mode separate from the /bootloader (which itself does appear to at least load properly, displaying the FastBoot menu, which lets me navigate to select a boot partition, restart the bootloader, or power off).
Other phones which us this Qualcomm chip can be put into EDL mode by either on-board test points or a cable that shorts out (or otherwise modifies the signal on) specific pins. But in the case of the OnePlus 5, the mode is either software accessible (not in my case), or accessible by a held key-combo (which appears not to work for me).
I found this nicely-detailed write-up of the EDL mode and its internals:
Exploiting Qualcomm EDL Programmers (1): Gaining Access & PBL Internals
Research & Exploitation of Qualcomm EDL Firehose Programmers: From PBL (Boot ROM) Extraction, Research & Analysis to Secure Boot Bypass in Nokia 6. (Part 1)
alephsecurity.com
Click to expand...
Click to collapse
I'm familiar with EDL mode, many Qualcomm devices automatically go into EDL mode when the bootloader fails to start. However if EDL mode is corrupted too...there's nothing you can do.
Maybe you can try an EDL Deep Flash Cable, which gets the device into EDL Mode with the press of a button on the cable. It also works on hard-bricked devices.
@Pseudorando
Has your issue resolved or do you still need help to get in edl mode?
Well this is a pretty thorough brick so the follow-up is not as much for help as for closure.
(tl;dr: The old data is still inaccessible, I have replaced it with a new phone, and the old one is a time-capsule project for another day.)
I got my hands on another OnePlus 5 to verify that my diagnostic procedures were being done correctly by seeing if they work on a non-bricked device.
And they do. In every mode, the new phone identified itself (even without drivers) as predicted-- FastBoot, EDL, and as a storage device when booted normally.
I also eliminated a hardware issue with the USB-C connector assembly by swapping the phones' rear panels which include the jacks and the ribbon cable to the board. The new phone worked with the old phone's jacks, and the old phone did not work with the new phone's jacks.
Upon swapping the back panels to the original phones again, I damaged the USB port's ribbon connector to the motherboard of the old phone, which seems unrecoverable without just replacing the motherboard. This led me to stripping the board to identify the flash chip where all my data is still stored.
It's a Samsung KLUCG4J1ED. (eUFS, BGA 153, UFS 2.1, 1.8/3.3v, 11.5 x 13 x 1mm, G3 2-lane)
My current plan for recovering the photos and Signal account to let my contacts know I'm still alive is to extract the flash chip and read it with a test socket.
Thanks for asking