Condition
Bootloader locked
System destroyed
Stuck in bootloop
Fastboot and stock recovery functioning
Requirements
QPST Tool from Qualcomm
This Guide
Lavender India fastboot image
Prog Emmc Firehose MBN
Steps
Take off back cover
Unplug battery
Open QFIL from QPST install folder in Program Files x86
Select flat mode
Copy MBN file to images/ in fastboot image
Select MBN from within images/ in QFIL for programmer
Load xml, select random and patch from images/
Short the EDL pins and hold
Connect with USB
Immediately hit Download in QFIL
Done
Related
Here is a step by step guide on how to flash the stock rom with QFIL and by extension any image.
Download and install the Qualcomm drivers from here
Download either of the firmware from here
Download the support files (Firehose/rawprogram0.xml/patch0.xml) here
Extract the firmware and support files to the same folder so you can easily access them like your desktop
Download and install QPST from here
Open the QFIL application (Find it in your start menu)
In the "Select Build Type" field select Flat Build
In the "Select Programmer" field navigate to the folder you extracted the firmware and support files to and select the prog_emmc_firehose_8909.mbn file
Select the "Load XML" button and navigate to the folder you extracted the firmware and support files to and select the rawprogram0.xml and then the patch0.xml when prompted.
Plug in your tablet
Run the following adb command "adb reboot edl" (Now the screen should be blank but the led light should be red)
If the text at the top of the QFIL application says "No Port Available" click the "Select Port..." option and pick your device. If your device isn't showing up there you didn't install the drivers properly.
Click the Download Button to begin flashing your device
So the above explains how to flash everything if you want to flash individual partitions you can edit your rawprogram0.xml to only include the ones you want. (patch0.xml stays the same) I have linked below 2 examples, one of them flashes just a boot.img and one that just flashes the recovery.img. But you aren't limited to those.
Recovery
Boot
Mine just in case
Awesome, thanks for this post! it will really help us in upcoming projects!
Managed to revive my phone using the B12 files but it crashes after completing system.img, I think the problem is userdata.img, my phone boots but I lost the imei and I don't know how to get it back, I'm still trying.
ZTE 971 not recognized by either QPST or QFIL
Thanks for all the detailed instructions. But my ZTE 971 is not visible to either qpst or qfil eventhough the phone shows in windows 8.1. In the Developer Options menu, I noticed Select USB Configuration, RNDIS (USB ethernet) option cannot be enabled. I wonder if this has anything to do with it. OEM unlocking, USB debbugging are already selected. Any suggestions, please? Thanks.
ps. I live in Turkey. I got this phone last year from AT&T and have unlocked the sim.
My PC is not detecting my ZTE MAVEN 3
I have installed all drives but still facing the issue. I am using it on Windows 10.
I flashed the B13 (ZPST tool shows my device as B13) with the QFIL like your guide says and it says all completed successfully and finishes, but now my phone went from only being able to boot EDL + FTM + Recovery, to now booting directly to EDL mode, which obviously means this guide completely screwed up my phone... Thanks.
Mega says that link for the driver is invalid, but the driver is included in your QPST download anyway.
000Nick said:
I flashed the B13 (ZPST tool shows my device as B13) with the QFIL like your guide says and it says all completed successfully and finishes, but now my phone went from only being able to boot EDL + FTM + Recovery, to now booting directly to EDL mode, which obviously means this guide completely screwed up my phone... Thanks.
Click to expand...
Click to collapse
solucionaste hermano
Mod edit:
you solved brother
Click to expand...
Click to collapse
it says qhsusb_bulk when I connect the the software is not working in the mobile and it is stuck at bootloader screen but I used the press both buttons to go to edl mode method and it said in the device manager a device connected with name : qhsusb_bulk
help pls
Hello All.
I am not able to get the following files
rawprogram.xml and patch.xml for LG G8xPlease help me to get this files ASAP as i have hard bricked the mobile, all partitions deleted
Procedure For Flashing/recovering your Garlic using QFIL/QPST Tool
REQUIREMENTS :
-A working PC.
-Qualcomm Drivers.
-QFIL Tools (I'd prefer and recommend ver2.0.05 as it is much more efficient than the newer ones) *Required .Net Framework 4.5 or higher
-ADB Drivers (just in case if your phone ain't bricked and you don't know how to boot into edl mode)
-N/M Full Firmware files (No the N-Firmware or M-firmware files provided by me).
-Back up your internal storage as this would wipe the internal (I prefer it this way)
-If you are using the QFIL 2.0.05, then you should install the tool.
-Extract the Firmware file and copy it to <directory where you installed qfil>/Qualcomm/bin/ this is to avoid sahara failed error.
-In simple words, keep the extracted firmware files inside the QFIL's folder.
-Connect your phone to PC and type in adb reboot edl in adb terminal to boot into EDL mode, or reboot edl in terminal emulator.
-If you have installed all drivers properly, your phone should be listed under Ports in Device Manager as Qualcomm Diganostic Device xx9008 (note this number, this is important) if your are getting 900E or 9003 (in case of bricked phone) you need to make it boot into 9008 mode using Deep Flash Cable (Guides to this will be provided soon, or you could just refer Google).
PROCEDURE :
-Open QFIL Tool.
-Once the phone is connected in EDL mode, it will show up under the ports (automatically selected, still if for any reason, open up and select port)
-Select Flat Build.
-Select the Programmer Path. It will open up the file browse window, go to the location where you have extracted the firmware and select Programmer_emmec_firehorse file.
-Select Patch File and select raw_unspare.xml file.
Now select Patch.xml.
-Click Download Button and flashing process will begin. Wait till it finishes and hold down your power button to boot your phone.
DOWNLOADS :
- Stock N Qfil
- Stock M Qfil
CREDITS : Athul
pritish1998 said:
- Stock N Qfil
- Stock M Qfil
CREDITS : Athul
Click to expand...
Click to collapse
Can you reupload Stock N Qfil?
Rose in YU YUREK∆ BL∆CK - TINNO p7201 | OFFICIAL
Tap here to view all notes in this chat.
t.me
user74354 said:
Can you reupload Stock N Qfil?
Click to expand...
Click to collapse
the situation is:
phone not booting
stop to "main menu" as picture attached
no way to boot, u tried to put in fastboot mode but can't restore a stock/new rom and after that still red words: nv data is corrupted
mine solution can revive phone but at the end pf process u still have a corrupted imei but maybe we can modify efs1.emmc.win and efs2.emmc.win to restore modemst1 e modemst2 (through hex editor maybe). Or root again with magisk or changing device to DIAG mode and flash with qpst (but with this i had no luck).
what do u need:
twrp image for xiaomi (find it here )
minimal adb and fastboot archive (here )
EFS backup from a working redmi note 8 (download from here)
1) first of all we have to put phone in fastboot mode pressing POWER button and VOLUME DOWN till phone restarts and show mi-rabbit
2) put downloaded twrp image in same folder with adb and rename it twrp.img
3) connect phone to PC through USB and navigate to folder "minimal adb and fastboot", here double click on cmd-here.exe or press shift + right click mouse and click on open powershell here or open command prompt here.
4) digit fastboot flash recovery twrp.img
5) press POWER BUTTON and VOLUME UP till u see redmi logo then left power button and still hold volume up
6) now u are on twrp recovery, PC now recognize phone like mass storage and u have to copy and paste EFS folder decompressed (without subfolders) on "TWRP" folder inside phone
7) on twrp click on "RESTORE" tab and choice "EFS" folder then swipe to restore
Wait till phone restart and configure it
Now phone is starting but u have no imei on it. We can find a solution now to restore imei.
where is the EFS backup from a working redmi note 8
This is a guide on how to root Maven 3 Z835. I've personally tried this using two different firmware versions: "Z835V1.0.0B13" and "Z835V2.0.0B10". Works great on both!
IMPORTANT:
=========
!!!!The ONLY partition you should be messing with is the 'boot' partition!!!! If you mess with any other partition, expect issues like.... not being able to connect to your carrier (missing IEMI).
Attachment notes:
===========
Z835V1.0.0B13_Boot_magisk_patched.img = Patched magisk boot partition image thats ready to go for firmware version "Z835V1.0.0B13" ONLY.
Z835V1.0.0B13_boot.bin - Backup of boot partition of firmware version "Z835V1.0.0B13" ONLY. Doesn't matter if the extension ends in '.bin' or '.img'.
Z835V2.0.0B10_Boot_magisk_patched.img = Patched magisk boot partition image thats ready to go for firmware version "Z835V2.0.0B10" ONLY.
Z835V2.0.0B10_boot.bin - Backup of boot partition of firmware version "Z835V2.0.0B10" ONLY. Doesn't matter if the extension ends in '.bin' or '.img'.
1. Download "Maven3_Z835root.zip" in this posts attachment.
2. Install Magisk (Magisk-v25.2.apk).
3. Boot into windows and install the edl usb drivers (QDLoaderHS_USB_Driver_64bit_Setup.exe).
4. Reboot your phone in edl mode (adb reboot edl).
5. When in edl mode, we need to make sure windows has the correct COM driver loaded for the USB interface (Qualcomm HS-USB QDLoader 9008).
A. Device manager > your android device > update driver > browse computer > pick from list > uncheck 'show compatible hardware' > Qualcomm Incorporated > Qualcomm HS-USB QDLoader 90086. Take note of which COM port its on. It will say in device manager. Ex. Qualcomm HS-USB QDLoader 9008 (COM5)
7. Install QFIL (QPST.2.7.474). QFIL is what you use to backup/flash partitions. QFIL is made by Qualcomm, this phones processor is made by Qualcomm, so thats what we are going to use to manage partitions.
8. Open QFIL
9. Check and see what your phones firmware version is. Settings>About>Build Number. If your Build Number matches mine which is "Z835V1.0.0B13" or "Z835V2.0.0B10", then congrats, you can take a huge shortcut.
BUILD "Z835V1.0.0B13" and "Z835V2.0.0B10" ONLY!!!
==================================
10. Backup your boot partition using QFIL. If we mess something up, no worries, re-flash boot partition.
A. While your phone is in edl mode, with QFIL open, QFIL should automatically detect the correct port. If not you can press 'Select Port' and pick the right one.B. Select Build Type 'Flat Build'B. Browse on 'Select Programmer' > prog_emmc_firehose_8909.mbnC. Click "Load XML". RawProgram column needs to say "rawprogram0.xml". Patch column needs to say "patch0.xml"D. Configuration > FireHose Configuration > Device Type > emmc > OK. Leave everything else to defaults.E. Tools > Partition Manager > OK.F. Right click the 'boot' > Manage Partition Data > Read Data.G. Let it finish, when its done it will export a file to the path: %Appdata%\Qualcomm\QFIL\COMPORT_5" (or whatever COM port you used). The file will be called something like 'ReadData_emmc_Lun0_0x60000_Len98304_DT_24_08_2022_19_44_43.bin'. You can rename that to boot.bin or boot.img if you like.11. Now that we have our backup, we can now actually root!
A. In 'Partition Manager' window, select 'Load Image' and browse for 'Z835V1.0.0B13_Boot_magisk_patched.img' or 'Z835V2.0.0B10_Boot_magisk_patched.img' (depending on your firmware version). Once its done, it will reboot and you have successfully rooted your phone!B. If for some reason it will not flash, its most likely because your bootloader is locked. To unlock go to Settings>Developer Options > Check 'OEM unlocking'.
OTHER BUILDS:
==========
Your goal here is to create a backup of the boot partition, then patch that backup using magisk, and install that magisk patched boot file to the phones boot partition.
1. Follow steps to backup the boot partition using QFIL in step 10 above.
2. Copy the boot partition backup file to your phone (adb push "c:\boot.bin" /mnt/sdcard)
3. Open Magisk > Install > Browse for the boot.bin. It will output a patched boot file with magisk fused with it. Ex. /mnt/sdcard/Download/magisk_patched-25200_zpqvx.img
4. Copy Patched file to your computer (adb pull "/mnt/sdcard/Download/magisk_patched-25200_zpqvx.img")
5. Now flash that magisk patched boot file to your phone (Do step 11.A. except use the boot file that we just patched)
A. If for some reason it will not flash, its most likely because your bootloader is locked. To unlock go to Settings>Developer Options > Check 'OEM unlocking'.
6. Reboot and Enjoy, you are rooted!
NEWS UPDATE:
==========
So I let AT&T Software Update (com.zte.zdm) update my phone to the latest firmware version (Z835V2.0.0B10). I then copied that boot partition, patched/flashed it back to the phone, and BAM root works.
CREDITS:
=================================================================
XDA users who have posted useful information that gave me clues as to what needs to be done.
"Erick Daves Tech" on youtube.
Some other misc websites I can't remember.
Im getting A Download Fail:Sahara Fail error when i attempt to open the partition manager. OEM is unlocked and i am in edl mode. I have installed the proper drivers from the zip file so i am not sure as to why this isnt working for me
Nevermind. I launched into EDL too early. I am root now thank you so much dude
NEEDS UNLOCKED BOOTLOADER - ONLY TESTED ON 12.5.18
you will need:
7zip
fastboot firmware
mtk flashtool
mtkmetautility
drivers
unlocked bootloader
1. Download fastboot firmware and unpack it with 7zip
2 Find boot.img and transfer it to your phone
3. Install magisk and patch the boot.img you copied, copy the patched img to your computer
4. Turn off your phone, launch MTKMETAUtility, click the disable auth, press the vol up and down on your phone and connect it. Close down the MTKMETAUtility
5. Open the MTK flashtool, only check the boot img and select the Magisk patched one.
6. Flash it
taa-daaa