Database Users

[Q] Replace or modify bootloader

Hi,
I would like to have some informations about the Google Nexus 10 Bootloader (and more generally all google device bootloader). Is it possible to reverse-engineering and modify some opcode, or it's signed by the hardware device like the samsung device (I9100 bootloader & co) ? OR is it a way to put my own bootloader based on Das U-Boot on the device ?
The goal is to turn on some CPU mode (hypervisor) to run the kernel in a special mode for virtualization purpose.
Is it sbl.bin who setup CPU mode for the kernel ?
Is bootloader wrapper or 'trampoline like' (which is called by the real bootloader, and will call the kernel with some additional cpu options) is a viable solution ? [1][2]
The cpu load the kernel in a non-secure SVC mode or secure SVC mode ?
[1] h t t p wiki.xen.org/wiki/Xen_ARM_with_Virtualization_Extensions/FastModels
[2] h t t p github.com/virtualopensystems/boot-wrapper
[3] w w w xenproject.org/presentations-and-videos/video/xpds13v-dual-android.html
[4] h t t p events.linuxfoundation.org/sites/events/files/slides/SRUK_Xen_Presentation_2013_v7.pdf
Thanks for your help!

Anyone ?
Is the Samsung guys from [3] has the right the change (and sign) the bootloader to enable HYP-mode, or did they find another way to do this ?
Thanks!

Bramone said:
Anyone ?
Is the Samsung guys from [3] has the right the change (and sign) the bootloader to enable HYP-mode, or did they find another way to do this ?
Thanks!
Click to expand...
Click to collapse
Try posting in the correct section , here you will get no response, look at the top of this page....
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Do NOT post question threads in General section!
Take one post lower in Q&A ...:good:

Any help on bootloader modification? I have a phone with bricked eMMC and I need to modify bootloader to load boot.img (kernel+ramdisk) from external sd card instead of eMMC if it's possible.
https://forum.xda-developers.com/android/help/how-to-boot-sd-card-qmobile-z8-bricked-t3712171

moto g4 only fastboot screen-no recovery-latest version help

info as below
Port : Fastboot Interface
Baud Rate : Not Applicable
Device : Motorola QC
Operation : Flash
Fw Model : athene
Fw Version : athene-user 6.0.1 MPJ24.139-13.1 1 release-keysM8952_205.61.03.28R
Searching for Device in FastBoot Mode... OK
Reading Phone Information...
Model : XT1643
Boot Ver. : moto-msm8952-B0.0C
Baseband : M8952_70009.08.03.48R ATHENE_INDIA_DSDS_CUST
Software : Blur_Version.24.31.64.athene.retail.en.US
IMEI : Mod edited
CPU : MSM8952
RAM : 2GB SAMSUNG LP3 DIE=8Gb M5=01 M6=05 M7=00 M8=1F
EMMC : 16GB SAMSUNG QE13MB RV=08 PV=07 FV=0000000000000007
got file """"Blur_Version.24.31.64.athene.retail.en.US.zip"""" as below
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
now no recovery-so can not flash via mmc-tried to bootloader unlock-it also error as below
C:\android>fastboot oem unlock ZYGXHZPVFQIWRRR3XBOO
... (bootloader) Check 'Allow OEM Unlock' in Android Settings > Developer
(bootloader) Options
OKAY
Execution time is 15(ms)
set not turn on-then how allow oem unlock?
so what i do as a next step?

Please try to be clear, describe your problem clearly, it's hard to understand what you are saying..
I read and understand is this,
Nougat blur zip can not be flashed via FASTBOOT method... If you have corrupted Recovery or anything then just flash STOCK IMAGES...
For Bootloader unlocking ( follow Complete Guide)
-Turn on your phone,
- goto Settings > Developer options
- find Allow OEM unlock and enable it.

Same question. What are you trying to do? Your best bet it to revert back to stock images over fastboot and reread how you install the soak test. If that is what you are trying to do.

[Resolved] LON-L29 - Cannot install opengapps + FRPlock problem

Hello there,
I have a problem, my Huawei Mate 9 Pro (C636) device does not install OpenGApps when I do, although no error messages appear in TWRP (3.2.1-0)
I have in the logs the installation of the different applications that are running. But during the OS boot (Lineage OS 15.1 OpenKirin) I don't have any of the applications (I tried the pico, nano, and super versions of opengapps).
In addition to this concern, since the last re-installation of my lineageOS firmware, I have the FRPLock option which is activated in my bootloader that I can't uninstall, which prevents me from reinstalling my OS.
How to disable it knowing that I can't reactivate the "OEM Unlock" option in the developer options because, according to android, the OEM lock is already disabled.
Thanks to all those who will try to help me, I have not found anyone else in the same case as me, I get stuck.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
---
Edit : I've just remove my os, I got no OS and FRP Lock
Can you help me to rollback to the right OS ?
>fastboot getvar rescue_version
rescue_version: rescue0.6
Finished. Total time: 0.066s
> fastboot getvar rescue_phoneinfo
rescue_phoneinfo: LON-L29C636B233
Finished. Total time: 0.004s
Click to expand...
Click to collapse
---
EDIT 2 : I've try to reinstall the update with `Multi-Tool 8`
I've download the 3 updates files from `firmware finder` :
LON-L29C636B378 (8.0.0.378)
LON-L29CC636B378 (8.0.0.378)
--------------------------------------
FullOTA-MF
--------------------------------------
2.97 GB
--------------------------------------
From hi cloud : full/update.zip
From hi cloud : full/public/update_data_full_public.zip
From hi cloud : /full/LON-L29_hw_spcseas/update_full_LON-L29_hw_spcseas.zip
Click to expand...
Click to collapse
But I can't install them via adb or fastboot, how can I install them ?
The update fail when I extract theses files one by one in dload folder of my USB stick.
Can you Help me please ?

Shiishii said:
Hello there,
I have a problem, my Huawei Mate 9 Pro (C636) device does not install OpenGApps when I do, although no error messages appear in TWRP (3.2.1-0)
I have in the logs the installation of the different applications that are running. But during the OS boot (Lineage OS 15.1 OpenKirin) I don't have any of the applications (I tried the pico, nano, and super versions of opengapps).
In addition to this concern, since the last re-installation of my lineageOS firmware, I have the FRPLock option which is activated in my bootloader that I can't uninstall, which prevents me from reinstalling my OS.
How to disable it knowing that I can't reactivate the "OEM Unlock" option in the developer options because, according to android, the OEM lock is already disabled.
Thanks to all those who will try to help me, I have not found anyone else in the same case as me, I get stuck.
---
Edit : I've just remove my os, I got no OS and FRP Lock
Can you help me to rollback to the right OS ?
---
EDIT 2 : I've try to reinstall the update with `Multi-Tool 8`
I've download the 3 updates files from `firmware finder` :
But I can't install them via adb or fastboot, how can I install them ?
The update fail when I extract theses files one by one in dload folder of my USB stick.
Can you Help me please ?
Click to expand...
Click to collapse
I finally succeeded on my own ^^
I'm so happy.
Here the solution to fix it :
To solve the problem if others are in the same situation, I have performed an update via e-Recovery but using the Wifi sharing of my PC. On the connection sharing network card of my PC, I put the DNS given by the "Multi-Tool 8" software via the firmware finder, I took the latest firmware from my smartphone and I launched the search on e-recovery in Wifi.
After long waits, it restarted

Cant FRP Samsung J5

Hi
Ive been trying for the last 2 days to bypass the FRP on the J5.
Ive included some screenshots so that you can see whats going on
I purchased the phone really cheap and i dont know if the phone is locked or unlocked.
it did have a EE sim but i got it without a sim as i was going to put my PAYG sim in it.
it has no sim in it at the moment
Ive done a full factory reset and ive tryed all the easy video options (pressing home 3 times, or using the keyboard settings)
but it doesnt work.
Ive then tryed Imyfone lockwiper but i keeps coming up with failed to find data package
I cant get the exact Device PDA and have tryed the nearest matching ones FXXU5 but none work.
any advice on what to try next easy or hard.
.
.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
.

Have you got ADB enabled on your phone? I think if you have it enabled on your phone and installed on a computer then you can remove the FRP via command line.

Hi thanks for the response
I spent the past 2 days reading about ADB and USB Debugging before posting as am new to android phone as my last phone has been this
.
.
I downloaded ADB from XDA and opened command prompt to run it, then i run the J5 in download mode, but nothing appears on the computer.
.
.
.
.
if i run the J5 in normal mode (again i cant get into the J5 due to FRP) I can get the J5 icon on the computer but cant access anything else
.
.
.
.
Is there something im doing wrong.
thanks again.

Looking on YouTube there are some videos that show how to remove FRP by flashing a combination file to your phone. You have to find the correct matching combination file which will then allow you to remove the FRP by:
Going into settings
Tap "Build number" 7 times
Go into "Developer options"
Enable "Allow OEM unlocking"
Hope this works for you as I also have a phone that is FRP blocked however I was unable to find a combination file that matches my phone.

davinci M1903F10G (locked bootloader) bootloop, it is possible to recover the user data ?

Hello,
i have here a Xiaomi M1903F10G from a good friend, which stuck in a boot loop: phone seems to boot normal, home screen is visible for roundabout 1 second and the phone reboot immediately. Do we have a chance to get the user data (family photos etc.) ?
With Vol+ + Power button i get a "main menu mi-recovery 3.0" with the following options:
Reboot
Wipe Data
Connect with MIAssistant
With Vol- and Power button i can enter Fastboot mode, here are some info:
Bash:
[email protected]$ fastboot oem device-info
(bootloader) Verity mode: true
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: false
OKAY [ 0.001s]
Finished. Total time: 0.001s
I can successful enter the EDL mode (i think) via shorting the pins on the main pcb, then phone shows up as "Qualcomm HS-USB QDLoader 9008 (COM6)". According to [GUIDE] How to dump and write back the storage on most of Qualcomm devices i should then use the right firehose file and try to open the partition manager. I tried many different firehose files(see attachments)/storage settings/2 computers(win10x64)/cables(usb-a 2.0/usb-a 3.0/usb-c), i can never successfully open the partition manager.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Now the question:what i can do to recover the user data for my friend ? I know i could oem unlock and try to boot into twrp, but as far as i know unlock would wipe all user data. (My friend has also the bill from when he bought the device if that helps).

there is not much you can do on locked bootloader. you can dump raw partitions, that's it. it isn't of any use because of encryption. all you could try is check file system for possible errors (if not metadata encrypted)
have you found loader that worked? try this python script in linux
https://github.com/bkerler/edl

Hello Alecxs,
thanks for your reply. Unfortunately, in the meantime i had to give the phone back to my friend. She told me, she want to try her luck with a commercial data recovery store. Hopefully they are lucky and are able to recover the photos.
Best,
Marcel

Recover photos? Aren't photos synchronised with Google?

Nope.

Then, all data should be backuped. No way to retrieve as data is encrypted anyway

yaro666 said:
Then, all data should be backuped. No way to retrieve as data is encrypted anyway
Click to expand...
Click to collapse
That is not correct, but thanks anyway.