Related
Dear all [especially the developers],
Is there a practical way of changing the above mentioned ROM's page pool?
Is there a tool?
I tried Latest Page Pool Changer release [V.2.21] but it doesn't behave as it should.
With JCEspi2005's help I realized it doesn't report or write the right or, at least, the reported and visible values...
How can we sort this out?
Can someone point me in the right direction?
Hang Tua, given the fact I am solely using your ROMs would you be so kind you would help me?
Click to expand...
Click to collapse
Dear all,
INTRODUCTION
With JCEspi2005 precious help and guidance and Swiftblade precious information, we both came to the conclusion that Raphael page pool change method can now be unveiled.
CONSIDERATIONS
JCEspi2005 changed a ROM's page pool to 24 and I tested it.
Result: Ok.
I changed 2 ROM's page pool and tested it.
Result: Ok.
TOOLS
A Hex editor like:
XVI32 V.2.31 ¤ Link
HexEdit V.1.03 ¤ Link
PROCEDURE [Information source: Link]
Address: 70F0
Values:
[00MB Pagepool] |00 15 A0 03 | 02 15 A0 13 | 00 10 83 E5 | DA C2 FF EB|
[12MB Pagepool] |03 15 A0 03 | 02 15 A0 13 | 00 10 83 E5 | DA C2 FF EB|
[16MB Pagepool] |10 16 A0 03 | 02 15 A0 13 | 00 10 83 E5 | DA C2 FF EB|
[18MB Pagepool] |12 16 A0 03 | 02 15 A0 13 | 00 10 83 E5 | DA C2 FF EB|
[24MB Pagepool] |18 16 A0 03 | 02 15 A0 13 | 00 10 83 E5 | DA C2 FF EB|
1. Open the OS.nb or the .NBH file with a Hex Editor
2. Search the for hex string pattern |03 15 A0 03 | 02 15 A0 13 | 00 10 83 E5 | DA C2 FF EB| [Two addresses should be found]
3. At the first address found, change the first two bytes "03 15" to "12 16" for 18MB pagepool
4. Repeat Step Nº 3 at the 2nd address found
5. Save & Exit the Hex Editor
6. If you are using the OS.nb, start cooking your new ROM with it
7. Flash the new .NBH file to your Raphael and enjoy the 18MB True Pagepool
For other pagepool sizes, change the first byte "03" to "XX" hex value corresponding to your desired pagepool in Step Nº 3 and 4. [Remember that this is hex value, i.e. "10" = 16MB, "12" = 18MB, "18" = 24MB, etc.]
Happy Page Pool changing, happy flashing and cheers!
P.S. There were some doubts about dynamic page pool [Page Pool 0] usage but after a day of testing 0 page pooled ROMs I can almost assure the there are not stability issues.
Although several more days of testing [at least 2] are needed to ensure it doesn't affect stability, by now, I can infer that it is quite stable as well as reliable.
MEMORY
Do note that your available memory will differ according to the page pool you use.
If you feel like knowing how much memory you will have available after page pool change, maybe it's time for some linear and simple arithmetics
This post will be updated as we find out about new information or outcoming issues.
Special thanks to JCEspi2005. I hope out «partnership» goes on and on
Cheers and good luck to all.
Hi there,
I've tried pagepool changer and it appears to work just as it says on the tin!
If you look on the right hand side of the windows there is a box where you can change the pagepool size. Hit the button and you'll notice that the ROM file has been changed (Check the date stamp if you don't believe me) I've checked the ROm image with a hex editor and it has change the corrct values.
Hope this helps.
WizP said:
Hi there,
I've tried pagepool changer and it appears to work just as it says on the tin!
If you look on the right hand side of the windows there is a box where you can change the pagepool size. Hit the button and you'll notice that the ROM file has been changed (Check the date stamp if you don't believe me) I've checked the ROm image with a hex editor and it has change the corrct values.
Hope this helps.
Click to expand...
Click to collapse
Attached is a little application to run in your PDA. DevHealth.exe generates a mem_X.txt file on your SD card root (let some time to do it). Inside this file you can view the real PagePool.
Can you test your changed ROM to see what changes do?
Cheers
WizP said:
Hi there,
I've tried pagepool changer and it appears to work just as it says on the tin!
If you look on the right hand side of the windows there is a box where you can change the pagepool size. Hit the button and you'll notice that the ROM file has been changed (Check the date stamp if you don't believe me) I've checked the ROm image with a hex editor and it has change the corrct values.
Hope this helps.
Click to expand...
Click to collapse
That's not the question...
The question is: Does it read and change the right addresses?
No it doesn't. JCEspi2005 created a ROM with PP12 and the referred tool reads 6.
I'll try to find a tool that correctly addresses Raphael ROMs.
Cheers.
mrvanx asked me about this thread.... yes I can confirm the pagepool changer will not work, as nk.exe dynamically sets pagepool, depending on (probably) ram size. htc niki and elf/elfin are the same deal.
this is easy to fix of course with a small assembly patch
cmonex said:
this is easy to fix of course with a small assembly patch
Click to expand...
Click to collapse
Pls guide us to the true path
cmonex said:
mrvanx asked me about this thread.... yes I can confirm the pagepool changer will not work, as nk.exe dynamically sets pagepool, depending on (probably) ram size. htc niki and elf/elfin are the same deal.
this is easy to fix of course with a small assembly patch
Click to expand...
Click to collapse
Thanks, this is just i was beleaving...
Are you planing yo make the "small" patch for us?
Following this post http://forum.xda-developers.com/showpost.php?p=2274534&postcount=1 i managed to create a modified NBH of WWE shipped ROM wirh 24Mb PagePool for someone to test it (i can't do it for now...)
The link
http://rapidshare.com/files/1488550...el_CRC_52.33.25.17_1.02.25.19_Ship_PP24Mb.rar
Report back, please...
Thanks.
cmonex said:
mrvanx asked me about this thread.... yes I can confirm the pagepool changer will not work, as nk.exe dynamically sets pagepool, depending on (probably) ram size. htc niki and elf/elfin are the same deal.
this is easy to fix of course with a small assembly patch
Click to expand...
Click to collapse
Would you be so kind you would inform us (if you can) of the addresses and values for Raphael ROM's pagepool?
Even if there is no tool yet, we can HEX edit the NBH and change it.
I am personally interested in pagepool 0 [dynamic].
Thank you in advance.
Cheers.
well, here is an example:
.text:80058220 B0 28 9F E5 LDR R2, =dword_803F6350
.text:80058224 A8 78 9F E5 LDR R7, =0xA8081064
.text:80058228 00 30 95 E5 LDR R3, [R5]
.text:8005822C 9C 88 9F E5 LDR R8, =0x52444C55
.text:80058230 94 08 9F E5 LDR R0, =aKPagePoolSize0
.text:80058234 01 0C 53 E3 CMP R3, #0x100
.text:80058238 03 15 A0 03 MOVEQ R1, #0xC00000
.text:8005823C 02 15 A0 13 MOVNE R1, #0x800000
.text:80058240 00 10 82 E5 STR R1, [R2]
.text:80058244 00 30 97 E5 LDR R3, [R7]
.text:80058248 08 00 53 E1 CMP R3, R8
.text:8005824C 01 15 A0 03 MOVEQ R1, #0x400000
.text:80058250 00 10 82 05 STREQ R1, [R2]
0x803F6350 is what the pagepool changer usually patches, this is set to 6MB by default in the nk.exe. the problem is the real pagepool will never be 6MB, this code above dynamically decides if 4, 8, or 12MB it should be. (on my raphael it went for 12MB)
the elf patch is ok, as long as the STREQ on the last line doesn't execute, if it does, then copying the elf patch is not enough. so I suggest this patch:
STR R1, [R2] -> NOP (00 00 A0 E1)
and STREQ R1, [R2] -> another NOP (00 00 A0 E1)
after this pagepool changer should work nicely, and this is easier than that patching for Elf. once you patch the nk.exe like this, it will be fine.
on top of that, an entirely cosmetic patch: you can change the R1 contents too (similar to Elf patch) so KITL log will show the right value.
P.S: my guess is it only sets it to 4MB if ULDR is loaded. so usually not of importance.
Raphael ROMs Page Pool Changing
First post updated. Do read it
Cheers.
cmonex said:
well, here is an example:
.text:80058220 B0 28 9F E5 LDR R2, =dword_803F6350
.text:80058224 A8 78 9F E5 LDR R7, =0xA8081064
.text:80058228 00 30 95 E5 LDR R3, [R5]
.text:8005822C 9C 88 9F E5 LDR R8, =0x52444C55
.text:80058230 94 08 9F E5 LDR R0, =aKPagePoolSize0
.text:80058234 01 0C 53 E3 CMP R3, #0x100
.text:80058238 03 15 A0 03 MOVEQ R1, #0xC00000
.text:8005823C 02 15 A0 13 MOVNE R1, #0x800000
.text:80058240 00 10 82 E5 STR R1, [R2]
.text:80058244 00 30 97 E5 LDR R3, [R7]
.text:80058248 08 00 53 E1 CMP R3, R8
.text:8005824C 01 15 A0 03 MOVEQ R1, #0x400000
.text:80058250 00 10 82 05 STREQ R1, [R2]
0x803F6350 is what the pagepool changer usually patches, this is set to 6MB by default in the nk.exe. the problem is the real pagepool will never be 6MB, this code above dynamically decides if 4, 8, or 12MB it should be. (on my raphael it went for 12MB)
the elf patch is ok, as long as the STREQ on the last line doesn't execute, if it does, then copying the elf patch is not enough. so I suggest this patch:
STR R1, [R2] -> NOP (00 00 A0 E1)
and STREQ R1, [R2] -> another NOP (00 00 A0 E1)
after this pagepool changer should work nicely, and this is easier than that patching for Elf. once you patch the nk.exe like this, it will be fine.
on top of that, an entirely cosmetic patch: you can change the R1 contents too (similar to Elf patch) so KITL log will show the right value.
P.S: my guess is it only sets it to 4MB if ULDR is loaded. so usually not of importance.
Click to expand...
Click to collapse
Thanks for so deep info
The procedure is like the Elfin one...
Cheers
jcespi2005 said:
Thanks for so deep info
The procedure is like the Elfin one...
Cheers
Click to expand...
Click to collapse
yeah, and who pointed that out originally?
I've tried the posted procedure for finding, and changing the Pagepool - but everytime i search for the hex string, i get no returned results. Am i doing something wrong?
Hello all,
My device
I have a Rikomagic MK 802 IIIS mini PC with the following specs:
Model MK802 IIIS 8GB Dual Core
CPU RK3066 Dual Core - Cortex-A9 Up to 1.6GHz
GPU Quad- Core 2D/ 3D/ OpenGL ES2.0(AMD Z430)/ OpenVG1
OS Android 4.1
RAM 1GB DDR3
Memory 8GB Flash
Expansion Micro SD T-Flash(Maximum support 32GB)
Video Format WMV/ASF/MP4/3GP/3G2M4V/AVI/MJPEG/RV10/DivX/VC-1/MPEG-2/MPEG-4/H.263/H.264/1280*720P HD 30 fps, 1080P/720*480 D1 30fps
Audio Format MP3/WMA/APE/FLAC/AAC/OGG/AC3/WAV
Picture format Max.8000x8000 JPEG BMP GIF PNG
WiFi 802.11 b/g/n
Flash Supports flash 11.1
HDMI(male),Micro SD slot, USB host*1,USB OTG*1, USB power port; LED(Blue)
My primary problem (long story short): I managed to brick the MK802 IIS device in the process of installing Pi****u Linux on it. After trying to install the Linux kernel on the recovery partition manually, by doing from Android cmdline "busybox dd if=ug802recovkernel.img of=/dev/block/mtd/by-name/recovery bs=8192" and then "su" and "reboot recovery", I ended up with a non-booting system. I tried several times power off + power on cycles, but Android is not loading anymore. So, I would like to reflash the factory firmware on my device, to have the Android 4.1 booting again ... and I know about RKAndroidTool v1.35 for Windowses, but ...
... I am not using Windows OSes (better said, I avoid using them as much as I can, by trying to find *nix based solutions).
Therefore my main question: Is there Linux software to restore factory firmware on a Rikomagic MK802 IIIS device?
During my research, after googling for "rkandroidtool for linux" I found this promising link on our XDA community: http://forum.xda-developers.com/showthread.php?t=1286305
This "rkflashtool for Linux and rk2808, rk2818 and rk2918 based tablets" is reported to work fine by many, and later on in the above thread, user "frankjt" says:
there are good news, updated with ProductID 0x300a like this:
. . .
if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x300a)))
. . .
rkflashtool works on Cube's rk3066 tablets too (all functions: r, w, b).
Thanks to Ivop's excellent tool my Cube U30GT-H (firmware 1.02) is rooted now.
Click to expand...
Click to collapse
So, it seems this rkflashtool for Linux does a great job on rk3066 tablets, but is it working on mini PCs too?
Has anyone tried this tool on miniPC ? Preferably Rikomagic MK802 IIIS, but if you have experience on similar models, please share them here.
Is there a guide on how to reflash miniPCs with Linux software only? Please post it.
What are the hexadecimal addresses to be used when attempting to write an .img file on the Rikomagic MK802 IIIS mini PC?
Any advice, or feedback on these questions are very welcomed!
Regards.
Hi,
Doing a little bump of this thread.
After doing more google research, this time for "rk3066 flash tool linux" I've found:
armtvtech dot com and the rest of the link is: /armtvtechforum/viewtopic.php?f=66&t=350
slatedroid dot com and the rest of the link is: /topic/42826-flashing-rk3066-with-linux/
So definetly I'm not a singular case in my frustrations.
It seems that recommandations point to the rkflashtool that I mentioned in my previous post:
arctablet dot com and the rest of the link is: /wiki/index.php/Update_tablet_using_Linux (see the "Preparation" section)
Now the main question that remains: Anyone tested (successfully or not) Linux rkflashtool on a Rikomagic MK 802 IIIS mini PC?
Or, to put it simpler: Anyone tested Linux rkflashtool on any RK3xxx based android stick computer (aka mini PC) ?
If yes, please post your stories here.
PS: Sorry for the cryptic weblinks syntax, but I am still a new member, not allowed to post these ..
PSS(off-topic): Sorry for giving Pic Untu a "bad name" in the opening post, it wasn't my intention
Never mind, I was thinking of a different device.
Sent from my One X using xda app-developers app
---------- Post added at 08:49 PM ---------- Previous post was at 08:37 PM ----------
This person reports success with rkflashtool on an mk808: http://www.slatedroid.com/topic/460...08-from-linux/page__view__findpost__p__631970
ragesoss said:
Never mind, I was thinking of a different device.
Sent from my One X using xda app-developers app
---------- Post added at 08:49 PM ---------- Previous post was at 08:37 PM ----------
This person reports success with rkflashtool on an mk808: slatedroid com /topic/46001-writing-images-to-the-mk808-from-linux/page__view__findpost__p__631970
Click to expand...
Click to collapse
Thanks a lot, ragesoss!
I read the tutorial and the feedback, looks very promising!!
I'll test it myself on my MK802 IIIS and post the results here.
Very frustrating: seems that rkflashtool restore isn't working on Rikomagic MK802IIIS
First of all, the explanation for why I bricked my Rikomagic MK802 IIIS: when trying to install Pic Untu, I did that dd command on the recovery partition (see the first post in this thread for the exact command). Well, the procedure is not working like this because when accessing the mtdblock devices with normal *nix commands (dd, cat), the mtdblock Android driver is not handling I/O as usual and it causes data corruption on all the mtd device. That's why I bricked the device.
So, not having a backup before, I had to use a WindowsXP vmware VM with windows RK flashing utility. I restored the device to firmware "Rikomagic MK802IIIS 4GB, 8GB Recovery Software (20130121)" downloaded from rikomagic.co.uk.
Restoring was successfull so here I am with a fully functional Android which boots up OK. All fine for a day...
I decided to make a full device backup using Linux rkflashtool which I downloaded from the thread I mentioned in my first post (http://forum.xda-developers.com/showthread.php?t=1286305), this is the link: http://forum.xda-developers.com/attachment.php?attachmentid=785592&d=1321547155
I modified the source so that the rk3066 chipset is recognized (I added the 2207 usb vendor id).
The OS/computer I've used: Kubuntu 12.04 LTS 64 bit on a Thinkpad T420:
Code:
[email protected]:~# uname -a
Linux awesome 3.2.0-49-generic #75-Ubuntu SMP Tue Jun 18 17:39:32 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
Now follows the copy/paste of commands & output of the backup operation, with the mention that: of course I put the device in flashing mode first, using paperclip + power-on cable in device's OTG connector linked to laptop :
Code:
[email protected]:~# ./rkflashtool r 0x00000000 0x01000000 > /mnt/media/mk802iiis_android_backup_20130706.bin
[email protected]:~# du /mnt/media/mk802iiis_android_backup_20130706.bin
8388608 /mnt/media/mk802iiis_android_backup_20130706.bin
[email protected]:~# du -h /mnt/media/mk802iiis_android_backup_20130706.bin
8.0G /mnt/media/mk802iiis_android_backup_20130706.bin
[email protected]:~#
[email protected]:~# hexdump -C /mnt/media/mk802iiis_android_backup_20130706.bin |head -10
00000000 50 41 52 4d 5b 02 00 00 46 49 52 4d 57 41 52 45 |PARM[...FIRMWARE|
00000010 5f 56 45 52 3a 34 2e 30 2e 34 0d 0a 4d 41 43 48 |_VER:4.0.4..MACH|
00000020 49 4e 45 5f 4d 4f 44 45 4c 3a 72 6b 33 30 73 64 |INE_MODEL:rk30sd|
00000030 6b 0d 0a 4d 41 43 48 49 4e 45 5f 49 44 3a 30 30 |k..MACHINE_ID:00|
00000040 37 0d 0a 4d 41 4e 55 46 41 43 54 55 52 45 52 3a |7..MANUFACTURER:|
00000050 52 4b 33 30 53 44 4b 0d 0a 4d 41 47 49 43 3a 20 |RK30SDK..MAGIC: |
00000060 30 78 35 30 34 31 35 32 34 42 0d 0a 41 54 41 47 |0x5041524B..ATAG|
00000070 3a 20 30 78 36 30 30 30 30 38 30 30 0d 0a 4d 41 |: 0x60000800..MA|
00000080 43 48 49 4e 45 3a 20 33 30 36 36 0d 0a 43 48 45 |CHINE: 3066..CHE|
00000090 43 4b 5f 4d 41 53 4b 3a 20 30 78 38 30 0d 0a 4b |CK_MASK: 0x80..K|
As you can see, the resulted backup file has 8 GB size, and the hexdump of it shows the usual stuff for a non-corrupted backup.
Note1: I avoided to "spam" the thread with the whole header of the hexdumped backup file, but I assure you that it has the boot command line with the size/offset of all the partitions. So, it is a backup successfully created.
Note2: The backup operation took about 25-30 minutes, no errors in the system logs.
After backup was done, Android still boots OK, all is fine. Until the nightmare came...
I decided to test the restore process, so I added the device once more in flashing mode (with paperclip & OTG), and did:
Code:
[email protected]:~/rk3066-rkflashtool/rk3066-rkflashtool-master/trunk# ./rkflashtool e 0x00000000 0x01000000
rkflashtool: info: interface claimed
rkflashtool: info: erasing flash memory at offset 0x00ffff00
[email protected]:~# ./rkflashtool w 0x00000000 0x01000000 < /mnt/media/mk802iiis_android_backup_20130706.bin
...
...
...
rkflashtool: info: writing flash memory at offset 0x00fffe80
rkflashtool: info: writing flash memory at offset 0x00fffea0
rkflashtool: info: writing flash memory at offset 0x00fffec0
rkflashtool: info: writing flash memory at offset 0x00fffee0
rkflashtool: info: writing flash memory at offset 0x00ffff00
rkflashtool: info: writing flash memory at offset 0x00ffff20
rkflashtool: info: writing flash memory at offset 0x00ffff40
rkflashtool: info: writing flash memory at offset 0x00ffff60
rkflashtool: info: writing flash memory at offset 0x00ffff80
rkflashtool: info: writing flash memory at offset 0x00ffffa0
rkflashtool: info: writing flash memory at offset 0x00ffffc0
rkflashtool: info: writing flash memory at offset 0x00ffffe0
Note1: Writing operation took 2 hours and 8 minutes, no errors in the system logs..
Note2: ... but it was the end of my working mk802iiis !
When I reconnected the device, Android won't boot, instead the device seems to enter the flashing mode again. I say it "seems" because I am not really sure, actually it should not even attempt to enter flashing mode because I'm not touching the little oriffice with the paperclip.
So that's it on short: Android does not start!
When I specifically manually entered flashing mode again, I tried to read several megabytes from near the start addresses of the flash memory. Unfortunately, I get garbage:
Code:
[email protected]:~# hexdump -C recoverytry.bin |head -10
00000000 ae e6 ff a7 75 26 3e 6f ee b7 d3 66 33 f7 e7 fa |....u&>o...f3...|
00000010 97 b4 e6 fe bf da 10 4e 70 b6 a7 d9 db 9f 3b b7 |.......Np.....;.|
00000020 6b 3d f6 7f fe ff bf 5e e1 af ef 3e ff df 93 f7 |k=.....^...>....|
00000030 d7 ee 3f ef 31 d2 cb cc ef eb db f7 f7 ff 7f e7 |..?.1...........|
00000040 cf 6d 96 e9 dd a5 d6 9f f7 11 67 ef 6d dc dd fd |.m........g.m...|
00000050 5e 4b f3 77 7d fd bd cd 9f 15 f9 17 83 fb f7 5b |^K.w}..........[|
00000060 b9 11 fd 61 b4 cd dd 93 b9 f7 de d7 f8 d1 9b ef |...a............|
00000070 76 fe bf 1f 67 77 f5 5f 67 e2 97 96 15 f7 ae 7f |v...gw._g.......|
00000080 e4 ce 7d e5 36 fb fe 56 ce e6 fb ca f3 f7 d0 37 |..}.6..V.......7|
00000090 3d af 49 cd d5 71 ff f9 33 db fe 34 f6 17 d3 1d |=.I..q..3..4....|
Compare the output above with the first 10 lines of my backup file posted earlier and you can understand what I mean by garbage.
So to resume:
1) I managed to create a correct backup of mk802iiis using rkflashtool ("rkflashtool r" worked as expected)
2) Rkflashtool failed to restore the backup ("rkflashtool w" doesn't work, at least not for restoring all 8 GB).
Does anyone experienced similar situations?
Is 8 GB too much to backup at once?
Is there some workaround for this?
Could be a PC problem or device problem?
Is 2 hours too long(or too short) for flashing 8 GB to NAND?
Please help.
Regards,
Lexminriko
An important omission from my previous post (my apologies for not realizing the importance of the following):
Using Linux rkflashtool on my Kubuntu 12.04 64bit I was able to successfully backup /restore partitions.
For example, I could restore recovery partition with the command:
Code:
./rkflashtool w 0x000010000 0x000008000 < /mnt/media/mk802iiis_original_recovery_part_20130706.bin
The "brickeage" occured only when I tried to restore all NAND in one step, with the command already mentioned in my previous post:
Code:
./rkflashtool w 0x00000000 0x01000000 < /mnt/media/mk802iiis_android_backup_20130706.bin
Main questions remain:
Anyone experienced similar situations on Rikomagic MK802 IIIS ?
Is there a way to fix this bricked device in Linux(with rkflashtool or other Linux software), given the command that caused the damage?
If you experienced similar troubles, please post.
Regards,
Lexminriko
lexminriko said:
Hello all,
My device
I have a Rikomagic MK 802 IIIS mini PC with the following specs:
Model MK802 IIIS 8GB Dual Core
CPU RK3066 Dual Core - Cortex-A9 Up to 1.6GHz
GPU Quad- Core 2D/ 3D/ OpenGL ES2.0(AMD Z430)/ OpenVG1
OS Android 4.1
RAM 1GB DDR3
Memory 8GB Flash
Expansion Micro SD T-Flash(Maximum support 32GB)
Video Format WMV/ASF/MP4/3GP/3G2M4V/AVI/MJPEG/RV10/DivX/VC-1/MPEG-2/MPEG-4/H.263/H.264/1280*720P HD 30 fps, 1080P/720*480 D1 30fps
Audio Format MP3/WMA/APE/FLAC/AAC/OGG/AC3/WAV
Picture format Max.8000x8000 JPEG BMP GIF PNG
WiFi 802.11 b/g/n
Flash Supports flash 11.1
HDMI(male),Micro SD slot, USB host*1,USB OTG*1, USB power port; LED(Blue)
My primary problem (long story short): I managed to brick the MK802 IIS device in the process of installing Pi****u Linux on it. After trying to install the Linux kernel on the recovery partition manually, by doing from Android cmdline "busybox dd if=ug802recovkernel.img of=/dev/block/mtd/by-name/recovery bs=8192" and then "su" and "reboot recovery", I ended up with a non-booting system. I tried several times power off + power on cycles, but Android is not loading anymore. So, I would like to reflash the factory firmware on my device, to have the Android 4.1 booting again ... and I know about RKAndroidTool v1.35 for Windowses, but ...
... I am not using Windows OSes (better said, I avoid using them as much as I can, by trying to find *nix based solutions).
Therefore my main question: Is there Linux software to restore factory firmware on a Rikomagic MK802 IIIS device?
During my research, after googling for "rkandroidtool for linux" I found this promising link on our XDA community: http://forum.xda-developers.com/showthread.php?t=1286305
This "rkflashtool for Linux and rk2808, rk2818 and rk2918 based tablets" is reported to work fine by many, and later on in the above thread, user "frankjt" says:
So, it seems this rkflashtool for Linux does a great job on rk3066 tablets, but is it working on mini PCs too?
Has anyone tried this tool on miniPC ? Preferably Rikomagic MK802 IIIS, but if you have experience on similar models, please share them here.
Is there a guide on how to reflash miniPCs with Linux software only? Please post it.
What are the hexadecimal addresses to be used when attempting to write an .img file on the Rikomagic MK802 IIIS mini PC?
Any advice, or feedback on these questions are very welcomed!
Regards.
Click to expand...
Click to collapse
You can use the official Linux tool called 'upgrade_tool' ... simply do a google search for 'linux upgrade_tool' and you'll get a several sites with guides and useful info about it.
Operation: Read Codes
Selected model: SM-J710GN
Software version: 29.1
Searching Samsung modem detected COM31
Reading phone info OK
Model SM-J710GN
AP version J710GNDXU1API5
CSC version J710FOJV1APD7
CP version J710GNDXU1API1
Product code SM-J710GZDUXSG
Phone SN RF8HB3F8XDW
Unique number CAJ03EB415FE3A3
Reading IMEI OK
IMEI: 358447076448431 (SIGN: OK)
IMEI 2: 358448076448439 (SIGN: OK)
Please wait, generating hash codes file, this can take few minutes OK
Reading data from phone OK
Modem board SHANNON315
HWID: 0E 05 00 00 00 00 00 00 00 00 00 00 C0 DC 26 54
Reading NV data OK
Checking NV data OK
Calculating OK
Please wait, calculating codes OK (time - 00:00:05)
Freeze code 04208508
NET lock 68285393
SUB lock 00000000
SP lock 00000000
CP lock 00000000
SIM lock 00000000
For check lock status *#7465625#
hope be usefull
Something is eating up my CPU and making my tablet run hot. And I don't know how to fix it. I looked with 3C Toolbox to see what's using the CPU, and it seems to mostly be multiple instances of /system/bin/app_process, which apparently belongs to the kernel. Well, shoot. If it were an app that were using up all the CPU cycles, I could just disable it. But what do I do when it's the kernel?
I looked in Amplify to see if I could find any clues. The one thing that really seems suspicious is com.google.android.gms/.chimera.GmsIntentOperatiomService. I feel like it should not be startinging that many thousands of services. But what can I do about it?
Here are some logs from various apps that may help us get to the bottom of this. Any help is appreciated.
CPU-Z
Qualcomm Snapdragon S4
1.73 GHz
Cores
2
Architecture
Krait
Revision
r2p0
Process
28 nm
Clock Speed
384 MHz - 1.73 GHz
CPU 0
1728 MHz
CPU 1
1728 MHz
CPU Load
100 %
GPU Vendor
Qualcomm
GPU Renderer
Adreno (TM) 305 @ 500 MHz
GPU Clock Speed
320 MHz
GPU Load
0 %
Scaling Governor
interactive
Model
Samsung Galaxy Tab 3 7.0 (SM-T217S)
Distributor
Sprint
Brand
samsung
Board
MSM8960
Hardware
qcom
Screen Size
7.00 inches
Screen Resolution
600 x 1024 pixels
Screen Density
169 dpi
Dimensions
188.0 x 111.1 x 9.9 mm
Weight
304 g
Total RAM
1346 MB
Available RAM
458 MB (34%)
Internal Storage
4.86 GB
Available Storage
1.27 GB (26%)
Release Date
2013-04-04
Android Version
7.1.2
API Level
25
Security Patch Level
2017-04-05
Bootloader
T217SVPUBOH1
Build ID
lineage_lt02ltespr-userdebug 7.1.2 N2G47E 4637d31271 test-keys
Java VM
ART 2.1.0
OpenGL ES
3.0
Kernel Architecture
armv7l
Kernel Version
3.4.113-gf82f607f (4637d31271)
Root Access
Yes
Google Play Service
20.12.16 (040300-306753009)
System Uptime
06:39:59
3C Toolbox
Guide:
Process
Used CPU %
CPU
100%
Memory
904.52MB
442.32MB
SD Card
3.58GB
1.27GB
3.76GB
10.70GB
/system/bin/app_process
18.58%
/system/bin/app_process
18.14%
/system/bin/app_process
17.56%
system_server
15.30%
Gmail
11.79%
Docs
10.03%
Magisk Manager
7.34%
3C All-in-One Toolbox:ui
9.18%
Google Play services
6.65%
Google Backup Transport:com.google.android.gms.persistent
6.55%
/system/bin/surfaceflinger
5.66%
Android System WebView:sandboxed_process0
4.69%
System UI
4.91%
Sheets
3.16%
dfndr performance
/system/bin/app_process
18.58%
/system/bin/app_process
18.14%
/system/bin/app_process
17.56%
system_server
15.30%
Gmail
11.79%
Docs
10.03%
Magisk Manager
7.34%
3C All-in-One Toolbox:ui
9.18%
Google Play services
6.65%
Google Backup Transport:com.google.android.gms.persistent
6.55%
/system/bin/surfaceflinger
5.66%
Android System WebView:sandboxed_process0
4.69%
System UI
4.91%
Sheets
3.16%
dfndr performance
2.25%
cLock
1.39%
Used %
Excluded
System
Kernel
2.25%
cLock
1.39%
Amplify
Home
DEVICE STATS
DEVICE STATS
View your progress
RESET
Stats collected for
05:05:05
Wakelock time allowed
02:12:59
Wakelock time blocked
00:57
Wakelocks acquired
1452
Wakelocks blocked
265
Alarms fired
114
Alarms blocked
0
Guide
Number of Wakelocks
Type
Wakelock Time Allowed
Wakelocks
Search
New
Sort by count
Limited
Safe to limit
71
SyncLoopWakeLock
17
33
NlpWakeLock
08
28
NetworkStats
08
21
Wakeful StateMachine: GeofencerStateMachine
00
9
GCoreFlp
01
9
Icing
11:21
4
StartingAlertService
32
1
*net_scheduler*
23
Unknown
269
*gms_scheduler*:internal
03:32
163
*launch*
05:23
119
*alarm*
03:59
77
ServiceStateTracker
01
28
GnssLocationProvider
15:59
11
org.fdroid.fdroid.net.ConnectivityMonitorService:launch
00
11
org.fdroid.fdroid.net.ConnectivityMonitorService:run
03
10
*job*/com.google.android.apps.docs.editors.kix/com.google/[removed]@gmail.com:android
02:18
8
GCM_READ
01
8
com.psafe.cleaner.common.factories.NotificationFactoryImpl:run
17
8
com.psafe.cleaner.common.factories.NotificationFactoryImpl:launch
01:00
7
org.mozilla.gecko.telemetry.TelemetryUploadService:run
57
6
UlrDispSvcFastWL
16
6
NetworkTimeUpdateService
00
6
PhoneWindowManager.mPowerKeyWakeLock
01
5
*gms_scheduler*/com.google.android.gms/.auth.account.be.legacy.AuthCronService
01:37
5
IntentOp:.reminders.notification.RefreshNotificationsIntentOperation
03
5
*gms_scheduler*/com.google.android.gms/.ads.social.GcmSchedulerWakeupService
22
5
SCREEN_FROZEN
04
4
*gms_scheduler*/com.google.android.gms/.tapandpay.gcmtask.TapAndPayGcmTaskService
03
4
ActivityManager-Sleep
05
4
IntentOp:com.google.android.gms/.chimera.GmsIntentOperationService
01:02
4
WifiSuspend
01
4
JobExecutor
00
4
*job*/com.psafe.cleaner/com.evernote.android.job.v21.PlatformJobService
01
4
org.mozilla.gecko.telemetry.TelemetryUploadService:launch
44
4
*gms_scheduler*/com.google.android.gms/.udc.service.UdcContextInitService
04:50
4
*gms_scheduler*/com.google.android.gms/.gass.chimera.SchedulePeriodicTasksService
16
4
wake:CollectionChimeraSvc
09
3
*gms_scheduler*/com.google.android.gms/.ipa.base.IpaGcmTaskService
07
3
*gms_scheduler*/com.google.android.gms/.phenotype.service.sync.PhenotypeConfigurator
03:54
3
*sync*/gmail-ls/com.google/[removed]@gmail.com
03:42
3
org.mozilla.gecko.dlc.DlcStudyService:run
19
3
*gms_scheduler*/com.google.android.gms/.gcm.gmsproc.GcmInGmsTaskService
11
3
show keyguard
03
3
DozeService
01
3
org.mozilla.gecko.dlc.DlcStudyService:launch
09
3
GCM_CONN_ALARM
03
3
fiid-sync
01:01
3
startDream
03
3
wake:com.google.android.gms/.chimera.GmsIntentOperationService
03:00
3
DreamManagerService
01:41
3
*job*/gmail-ls/com.google/[removed]@gmail.com:android
03:45
3
*gms_scheduler*/com.google.android.gms/.clearcut.uploader.QosUploaderService
13
3
IntentOp:.reminders.notification.ScheduleTimeRemindersIntentOperation
00
2
ScheduleNextAlarmWakeLock
00
2
video-playing
29
2
*gms_scheduler*/com.google.android.gms/.measurement.PackageMeasurementTaskService
01
2
*gms_scheduler*/com.google.android.gms/.security.snet.SnetNormalTaskService
08
2
CryptauthEnroller
15
2
*job*/com.android.vending/com.google.android.finsky.scheduler.JobSchedulerEngine$PhoneskyJobSchedulerJobService
00
2
com.mobisystems.office.fonts.ScannerService:launch
08
2
DG:service
02
2
*gms_scheduler*/com.google.android.gms/.icing.service.IcingGcmTaskService
02
2
*job*/com.google.android.gms.chromesync/com.google/[removed]@gmail.com:android
01:24
2
*gms_scheduler*/com.google.android.gms/.checkin.EventLogService
58
2
audio-playing
25
2
*sync*/com.google.android.apps.docs.editors.kix/com.google/[removed]@gmail.com
01:59
2
*job*/com.google.android.apps.docs.editors.docs/com.google.android.apps.docs.sync.content.ContentSyncJobService
13
2
Checkin Service
02
2
IntentOp:.reminders.notification.ScheduleLocationRemindersIntentOperation
01
2
com.mobisystems.office.fonts.ScannerService:run
16
2
wake:com.google.android.gms/.auth.account.be.accountstate.LoginAccountsChangedIntentService
02:00
2
GCM_HB_ALARM
00
1
wake:com.google.firebase.iid.WakeLockHolder
00
1
CMWakeLock
02
1
org.mozilla.gecko.dlc.DlcSyncService:run
39
1
SyncManagerImpl
02:34
1
*gms_scheduler*/com.google.android.gms/.chimera.container.ConfigService
14
1
IntentOp:.mdm.services.SitrepChimeraService
09
1
GmsDownloadIntentOp
13
1
*job*/com.google.android.gms.auth.accountstate/com.google/[removed]@gmail.com:android
16
1
org.mozilla.gecko.dlc.DlcSyncService:launch
00
1
IntentOp:.auth.authzen.cryptauth.AccountChangeProcessingIntentOperation
20
1
*gms_scheduler*/com.google.android.gms/.chimera.container.ConfigService
14
1
com.mobisystems.office.chat.pending.PendingEventsIntentService:run
00
1
*gms_scheduler*/com.google.android.gms/.telephonyspam.sync.SpamListSyncTaskService
02
1
*sync*/com.google.android.gms.chromesync/com.google/[removed]@gmail.com
13
1
com.mobisystems.libfilemng.search.EnumerateFilesService:run
07
1
IntentOp:com.google.android.gms/.chimera.PersistentIntentOperationService
00
1
IntentOp:.auth.frp.FrpUpdateIntentOperation
00
1
com.mobisystems.office.chat.pending.PendingEventsIntentService:run
00
1
*gms_scheduler*/com.google.android.gms/.telephonyspam.sync.SpamListSyncTaskService
02
1
*sync*/com.google.android.gms.chromesync/com.google/[removed]@gmail.com
13
1
com.mobisystems.libfilemng.search.EnumerateFilesService:run
07
1
IntentOp:com.google.android.gms/.chimera.PersistentIntentOperationService
00
1
IntentOp:.auth.frp.FrpUpdateIntentOperation
00
1
GmsDownloadIntentOp
13
1
*job*/com.google.android.gms.auth.accountstate/com.google/[removed]@gmail.com:android
16
1
org.mozilla.gecko.dlc.DlcSyncService:launch
00
1
IntentOp:.auth.authzen.cryptauth.AccountChangeProcessingIntentOperation
20
1
*gms_scheduler*/com.google.android.gms/.chimera.container.ConfigService
14
1
com.mobisystems.office.chat.pending.PendingEventsIntentService:run
00
1
*gms_scheduler*/com.google.android.gms/.telephonyspam.sync.SpamListSyncTaskService
02
1
*sync*/com.google.android.gms.chromesync/com.google/[removed]@gmail.com
13
1
com.mobisystems.libfilemng.search.EnumerateFilesService:run
07
1
IntentOp:com.google.android.gms/.chimera.PersistentIntentOperationService
00
1
IntentOp:.auth.frp.FrpUpdateIntentOperation
00
1
com.mobisystems.office.chat.pending.PendingEventsIntentService:run
00
1
*gms_scheduler*/com.google.android.gms/.telephonyspam.sync.SpamListSyncTaskService
02
1
*sync*/com.google.android.gms.chromesync/com.google/[removed]@gmail.com
13
1
com.mobisystems.libfilemng.search.EnumerateFilesService:run
07
1
IntentOp:com.google.android.gms/.chimera.PersistentIntentOperationService
00
1
IntentOp:.auth.frp.FrpUpdateIntentOperation
00
Not safe to limit
468
RILJ
14
51
WindowManager
17:25
17
AudioMix
27:44
3
GOOGLE_C2DM
01
Alarms
Search
New
Sort by count
Limited
Safe to limit
Unknown
23
com.google.android.gms.gcm.ACTION_CHECK_QUEUE
16
com.google.android.gms.common.operation.LOG_CORE_ANALYTICS
8
com.google.android.chimera.container.NEW_MODULE_TIMEOUT
4
com.android.deskclock.ON_QUARTER_HOUR
4
com.google.android.gms.auth.authzen.cryptauth.DEVICE_STATE_CHECK_DELAY_COMPLETE
3
com.google.android.intent.action.GCM_RECONNECT
3
com.android.server.action.NETWORK_STATS_POLL
2
com.google.android.gms.gcm.HEARTBEAT_ALARM
1
com.google.android.gms/.mdm.receivers.RetryAfterAlarmReceiver
1
com.google.android.gms.common.download.START
1
ActionOnTimeLucky
1
com.google.android.gms.matchstick.register_intent_action
Not safe to limit
60
android.intent.action.TIME_TICK
Services
Search
New
Sort by count
Limited
Safe to limit
Unknown
6134
com.google.android.gms/.chimera.GmsIntentOperationService
163
com.google.android.gms/.chimera.container.FileApkIntentOperation$ExternalFileApkService
124
com.google.android.gms/.chimera.PersistentIntentOperationService
56
com.google.android.gms/.chimera.GmsBoundBrokerService
46
org.fdroid.fdroid/.net.WifiStateChangeService
40
com.google.android.gms/.chimera.container.FileApkChimeraService$FileApkService
17
com.cyanogenmod.lockclock/.weather.WeatherUpdateService
17
com.google.android.gms/.icing.service.IndexWorkerService
16
com.google.android.gms/.cast.service.CastSocketMultiplexerLifeCycleService
Services
Search
New
Sort by count
12
org.fdroid.fdroid/.net.ConnectivityMonitorService
10
in.co.pricealert.apps2sd/.Apps2SDTasker
10
com.google.android.gms/.chimera.GmsApiService
10
com.google.android.gm/com.android.mail.widget.BaseGmailWidgetProviderService
9
org.mozilla.firefox/org.mozilla.gecko.media.MediaControlService
9
com.psafe.cleaner/.common.factories.NotificationFactoryImpl
7
ch.protonvpn.android/org.strongswan.android.logic.CharonVpnService
7
org.mozilla.firefox/org.mozilla.gecko.telemetry.TelemetryUploadService
7
org.fdroid.fdroid/.localrepo.SDCardScannerService
5
com.google.android.gms/.gcm.GcmService
5
com.google.android.gm/.GmailIntentService
5
ccc71.at.free/lib3c.notifications.lib3c_notification_service
5
ccc71.at.free/lib3c.indicators.lib3c_indicators_service
4
com.google.android.gms/.nearby.sharing.ReceiveSurfaceService
4
com.android.calendar/.alerts.AlertService
Services
Search
New
Sort by count
3
org.mozilla.firefox/org.mozilla.gecko.dlc.DlcStudyService
3
com.google.android.gms/.auth.proximity.firstparty.FirstPartyDeviceRegistrationService
4
com.cyanogenmod.lockclock/.ClockWidgetService
4
com.google.android.gms/.nearby.messages.service.NearbyMessagesService
4
com.google.android.gms/.chimera.UiIntentOperationService
4
com.google.android.gms/.tron.CollectionService
3
org.mozilla.firefox/com.leanplum.LeanplumPushRegistrationService
3
com.google.android.gms/.cast.service.CastPersistentService
3
com.google.android.gms/com.google.android.contextmanager.service.ContextManagerService
3
org.mozilla.firefox/org.mozilla.gecko.dlc.DlcStudyService
3
com.google.android.gms/.auth.proximity.firstparty.FirstPartyDeviceRegistrationService
3
com.google.android.gms/com.google.android.location.reporting.service.DispatchingService
2
com.google.android.gms/.subscribedfeeds.GcmReceiverService
2
com.google.android.gms/.fido.fido2.pollux.CableAuthenticatorService
2
com.google.android.gms/.rcs.binding.RcsBindingPersistentService
2
com.android.providers.calendar/.EmptyService
2
com.google.android.gms/.common.stats.GmsCoreStatsService
2
com.google.android.gms/.magictether.host.TetherListenerService
3
com.google.android.gms/com.google.android.location.reporting.service.DispatchingService
2
com.google.android.gms/.subscribedfeeds.GcmReceiverService
2
com.google.android.gms/.fido.fido2.pollux.CableAuthenticatorService
2
com.google.android.gms/.rcs.binding.RcsBindingPersistentService
2
com.android.providers.calendar/.EmptyService
2
com.google.android.gms/.common.stats.GmsCoreStatsService
2
com.google.android.gms/.magictether.host.TetherListenerService
Services
Search
New
Sort by count
2
com.google.android.gms/com.google.location.nearby.direct.service.NearbyDirectService
2
com.google.android.gms/.thunderbird.EmergencyPersistentService
2
com.google.android.gms/.auth.setup.devicesignals.LockScreenService
2
com.google.android.gms/.auth.authzen.GcmReceiverService
2
2
com.google.android.gms/.auth.account.be.accountstate.LoginAccountsChangedIntentService
2
com.google.android.gms/.wearable.service.WearableControlService
2
com.google.android.gms/.location.persistent.LocationPersistentService
2
com.android.gallery3d/.app.PackagesMonitor$AsyncService
2
com.google.android.gms/.trustagent.api.bridge.TrustAgentBridgeService
2
com.google.android.gms/.droidguard.DroidGuardService
2
com.google.android.gms/.auth.easyunlock.authorization.InitializerIntentService
2
com.android.providers.calendar/.CalendarProviderIntentService
2
com.google.android.gms/.deviceconnection.service.DeviceConnectionWatcherService
2
com.google.android.gms/.auth.account.be.channelid.ChannelBindingStateIntentService
2
com.mobisystems.office/.fonts.ScannerService
1
com.mobisystems.office/.chat.pending.PendingEventsIntentService
1
com.google.android.gms/.checkin.CheckinService
Services
Search
New
Sort by count
1
ru.wHgVDhPg.yYjJowhiS/com.ui.PatchService
2
com.google.android.gms/.fitness.service.recording.FitRecordingBroker
2
com.google.android.gms/.lockbox.LockboxService
2
com.google.android.gms/.gcm.nts.SchedulerService
1
in.co.pricealert.apps2sd/.Apps2SDService
1
com.smartprojects.MemoryLocker/.MemoryLockerService
1
com.amazon.kindle/com.amazon.android.providers.downloads.DownloadService
1
org.mozilla.firefox/org.mozilla.gecko.dlc.DlcSyncService
1
com.google.android.gms/.auth.proximity.firstparty.SystemMemoryCacheService
1
com.android.vending/com.google.android.finsky.setup.VpaService
1
com.mobisystems.office/com.mobisystems.libfilemng.search.EnumerateFilesService
1
com.google.android.youtube/com.firebase.jobdispatcher.GooglePlayReceiver
1
com.mobisystems.office/.chat.pending.PendingEventsIntentService
1
com.google.android.gms/.checkin.CheckinService
1
ru.wHgVDhPg.yYjJowhiS/com.ui.PatchService
1
com.mobisystems.office/com.mobisystems.connect.client.push.PushListenerService
0
org.fdroid.fdroid/.data.InstalledAppProviderService
1
com.mobisystems.office/com.mobisystems.connect.client.push.PushListenerService
0
org.fdroid.fdroid/.data.InstalledAppProviderService
FYI: app_process starts the interpreted runtime, then starts up the application.
Code:
To XDA moderators : There's no sub-forum for these 4 models.
Nokia C2 Tava, Tennen and 2 V Tella are basically same device. Please move this topic when available, thanks.
Hi all,
Recently I got Nokia C2 Tennen and C5 Endi bootloader unlocked again.
If you guess I achieved that by utilizing prototype firmware, then you're right.
However I don't have other retail device to test, anybody would like to give it a try?
I would be definitely interested to try it out. I have a c5 needing bootloader unlock
Legendanubis said:
I would be definitely interested to try it out. I have a c5 needing bootloader unlock
Click to expand...
Click to collapse
Alright.
May I know if you're familiar with operating SP flash tool?
i wouldl love to try it. I have got a locked c2 tava that i am unable to factory reset. A friend brought the phone to me to FRP bypass (bought it cheap from someone that said it just needed to be charged, gave a false pin and here we are) That was a month ago. Im very new to all of this and while ive been studying bootloaders and root i havnt actually had the pleasure. Any advice is welcome on this TA-1218. I cannot find ANYTHING on the EXACT model. All help is appreciated. Thanks
jh
hikari_calyx said:
Alright.
May I know if you're familiar with operating SP flash tool?
Click to expand...
Click to collapse
I am not familiar with it, I currently use bugjaeger to flash my phone's. But would love to get this c5's bootloader unlocked so if I can't use my program to flash I would definitely learn the sp flash tool
Bootloader unlock done with Hydra Tools. Also put a work root and magisk root on as well.
Hydra MediaTeK Tool Ver 1.0.3 Build 77
Windows 10 (Version 10.0, Build 19042, 64-bit Edition)
Intel(R)Core(TM) i5-2410M CPU @ 2.30GHz
Intel(R) HD Graphics 3000
Ram Installed : 4 GB
Windows Access Right : Admin
Software Run As Admnistrator
******* Dongle Info *******
Version : Hydra Tool v 1.20
Serial : [removed]
Initialize : OKAY
Status : Activated
Life : [removed]
=====================================
Searching for MTK Device... Found
Port Identification : Flashmode BROM
FriendlyName : MediaTek USB Port_V1633 (COM10)
Device : 6&13d9c38d&0&3
SymbolicName :\\??\\USB#VID_0E8D&PID_0003#6&13d9c38d&0&3#\[removed]
Driver Ver : 01/22/2015,3.0.1504.0
Opened handle..
Handshaking... Ok
Identifying Hardware ID.....
Reading Device hardware info..
hw code : 0717 MT6761 [6761]
hw subcode : 8A00
hw version : CA01
sw version : 0200
Target config : E3
SBC : 01 (True)
SLA : 02 (True)
DAA : 00 (False)
SWJTAG : 02 (True)
EPP : 00 (False)
CERT : 00 (False)
MEMREAD : 20 (True)
MEMWRITE : 40 (True)
CMD_C8 : 80 (True)
Exploiting Device...
Exploit Sent..
Successfully Exploited...
Handshaking... Ok
\\HydraTool_FullPackage_08-01-2021\backup\\Preloader_dump\\prel.tmp
Handshaking...
Identifying Hardware ID.....
Reading Device hardware info..
hw code : 0717 MT6761 [6761]
hw subcode : 8A00
hw version : CA01
sw version : 0200
Target config : 00
SBC : 00 (False)
SLA : 00 (False)
DAA : 00 (False)
SWJTAG : 00 (False)
EPP : 00 (False)
CERT : 00 (False)
MEMREAD : 00 (False)
MEMWRITE : 00 (False)
CMD_C8 : 00 (False)
MEID : [removed]
Stage 1.. [Size:232216]
Sending : Please wait.. Accepted
Identifying Protocol...
Protocol : New
Synchronization... [ERROR]- NOT SYNC
=============================================
Reasons why it fails due to the following"
1. Harware problem/issues
2. If you did Testpoint Kindly check the parts you Touch/TP
3. Powershortage, try to connect Battery
4. Check or replace usb cable and plug directly to your pc usb port.
=============================================
SYNC
Preloader Initialization...
Parsing prel.tmp
Init : Accepted
Executing : SYNC
Reading Device UniqueID, RAM and Flash Chip Info...
UNIQUE ID : [removed]
ERAM Size : 0x0000000000039000 -228 KB
IRAM Size : 0x0000000080000000 -2 GB
eMMC BOOT1 : 0x0000000000400000 -4 MB
eMMC BOOT2 : 0x0000000000400000 -4 MB
eMMC RPMB : 0x0000000001000000 -16 MB
eMMC USER : 0x0000000747C00000 -29.121 GB
eMMC CID : [removed] - QD63MB
Executing : ACCEPTED...
Reading GPT0 -EMMC [0x00008000] 0 130 Items
0
Autobackup Partitions
-preloader [0x00000000] 512 KB -> preloader.bin...1 Ok0
-> Renaming Preloader.... preloader_armstrong.bin0
Creating Scatter file... \\HydraTool_FullPackage_08-01-2021\\\backup\\Auto\\0717__111921012459\\MT6761_Android_scatter.txt
-pgpt [0x00000000] 8 MB -> pgpt.bin...1 Ok
-frp [0x02D80000] 1024 KB -> frp.bin...1 Ok
-nvdata [0x04E80000] 64 MB -> nvdata.bin...1 Ok
-protect1 [0x0C51A000] 8 MB -> protect1.bin...1 Ok
-protect2 [0x0CD1A000] 10.898 MB -> protect2.bin...1 Ok
-persist [0x0E000000] 48 MB -> persist.bin...1 Ok
-nvram [0x1A900000] 64 MB -> nvram.bin...1 Ok
Done!!!0
\\HydraTool_FullPackage_08-01-2021\\\backup\\Auto\\0717__111921012459
MTK Phone Loader is NOW RUNNING.
Reading Device UniqueID, RAM and Flash Chip Info...
UNIQUE ID : 2 [removed]
ERAM Size : 2 0x0000000000039000 -228 KB
IRAM Size : 2 0x0000000080000000 -2 GB
eMMC BOOT1 : 0x0000000000400000 -4 MB
eMMC BOOT2 : 0x0000000000400000 -4 MB
eMMC RPMB : 0x0000000001000000 -16 MB
eMMC USER : 0x0000000747C00000 -29.121 GB
eMMC CID : [removed] - QD63MB
Reading GPT0 -EMMC [0x00008000] 0 130 Items
-------------------------------------
Operation : Unlock Bootloader
Processing...
-------------------------------
Bootloader Status...
Bootloader : Locked
-------------------------------
Verifying status after operation...
-------------------------------
Bootloader Status...
Bootloader : Unlocked
-------------------------------
Action Result : 0 Ok
Elapsed Time : 00:01:04
(its been a while. i know)
i successfully got my c2 tennen (ta-1218) bootloader unlocked and rooted.
im still running on stock tho.
plus no custom recoveries yet.
Quartzbreaker said:
i wouldl love to try it. I have got a locked c2 tava that i am unable to factory reset. A friend brought the phone to me to FRP bypass (bought it cheap from someone that said it just needed to be charged, gave a false pin and here we are) That was a month ago. Im very new to all of this and while ive been studying bootloaders and root i havnt actually had the pleasure. Any advice is welcome on this TA-1218. I cannot find ANYTHING on the EXACT model. All help is appreciated. Thanks
Click to expand...
Click to collapse
Have you ever found a solution to your problem? Im having same issue and cant seem to find a fix for it.
This may mot be the correct thread and if so please accept my apology but I'm trying to unlock the bootloader for a Moto g pure and neither Motorola or at&t will give the bootloader codes. I saw reference here to sp flash tool and wondered if someone could help me utilizing that. I do not have a desktop or laptop and all I have to work with is mobile. Mtkclient won't run because I can't get PySides6 dependencies to install in Termux. I was able to install NetHunter , the one for no rooted devices, but so far I can't find a way to force flash
hikari_calyx said:
Code:
To XDA moderators : There's no sub-forum for these 4 models.
Nokia C2 Tava, Tennen and 2 V Tella are basically same device. Please move this topic when available, thanks.
Hi all,
Recently I got Nokia C2 Tennen and C5 Endi bootloader unlocked again.
If you guess I achieved that by utilizing prototype firmware, then you're right.
However I don't have other retail device to test, anybody would like to give it a try?
Click to expand...
Click to collapse
SUCCESS! [BOOTLOADER UNLOCK] Nokia C2 Tava TA-1218.
[BOOTLOADER UNLOCK] Nokia C2 Tava TA-1218. I was actually approached by a person from XDA named @Soadeathdealer who gave me remote access to unlock his phone's bootloader. This phone bootloader was successfully unlocked using Unlock Tool which...
forum.xda-developers.com
cagedbadger said:
This may mot be the correct thread and if so please accept my apology but I'm trying to unlock the bootloader for a Moto g pure and neither Motorola or at&t will give the bootloader codes. I saw reference here to sp flash tool and wondered if someone could help me utilizing that. I do not have a desktop or laptop and all I have to work with is mobile. Mtkclient won't run because I can't get PySides6 dependencies to install in Termux. I was able to install NetHunter , the one for no rooted devices, but so far I can't find a way to force flash
Click to expand...
Click to collapse
I don't think the moto g pure has been unlocked yet. At least boost variant.