edl VS payload-dumper-go

Open up QFIL (which should have been installed as part of the QPST tool). Click "Configuration" -> "FireHose Configuration" and in the window which pops up change the "Device Type" to UFS as informed by the article here "https://www.ereaderpro.co.uk/en/blogs/news/e-ink-product-follow-up-boox-tab-mini-c-and-page-versus-previous-generation". The article indicates that the device uses UFS2.1 as it's storage protocol. It also indicates that the device uses a Qualcomm® Snapdragon™ 662. In order to properly program the chip we need an appropriate programmer which is `prog_firehose_life_ddr_patched.zip`. The driver to communicate with the Qualcomm chip was originally found in a git thread (https://github.com/bkerler/edl/issues/200) attached to a comment as `prog_firehose_life_ddr_patched.zip` here: https://github.com/bkerler/edl/files/7991604/prog_firehose_life_ddr_patched.zip. To use this change the "Select Build Type" to be "Flat Build" and then click "Browse" for the "Programmer Path" and point it to `prog_firehose_life_ddr_patched.zip`.

YMMV, but in my experience it works flawlessly.

If that fails there are chip specific tools you can use to read/write to the right partitions, such as the fantastic EDL tool for Qualcomm devices:

https://github.com/bkerler/edl

EDL is the offical protocol used by support to debug and reset your phone. Issuing the following command should reboot you into fastboot.

Sierrakeygen HOW-TO on Windows 1. Original information from https://github.com/bkerler/edl

As for tracking down the issue on your side, it would be a matter of setting up this and then creating a memory dump while in EDL mode. The "how to get logs out of this" part we'll have to figure out afterwards.

After flashed wrong abl from LG G7 to abl_a partition and reboot, my phone was bricked. No Flash mode nor fastboot, I was use paper clip and short to testpoint in mainboard, its recogized as QUSB_BULK_CID:0402_SN:XXXXXXXX. I can send hello packet to sahara (edl mode) and got these information when using EDL tools (https://github.com/bkerler/edl). Seem like Sony sake authencation and Secure boot prevented me load different loader to sahara, Is there anyway or who can find the correct firehose loader programmer file for this XZ2? :

I had this problem too, I find it simpler to use something like hirensboot CD (a windows live image) or an edl tool to directly flash the image from Linux, like this, first you'll need to decompress the image with this.

You might be able to use bkerlers edl to unbrick the phone. https://github.com/bkerler/edl

I did. Kinda funny that all the links in those search results are marked as linked. I tried every possible solution that I could find. Even this https://github.com/bkerler/edl but still no luck. Thanks for your reply though.

In there you should either find a boot.img, or a payload.bin. If it's the 2nd, unpack it and then patch the boot image.

Use Payload Dumper to dump the base .img system files from the .bin file in the recovery image. https://github.com/ssut/payload-dumper-go

Do really need a boot img? I installed flamingo 13 without one. But if you really need one you can simply use https://github.com/ssut/payload-dumper-go

Since it's compatible with so many devices, it should probably run on most others too as long they support the same Camera API.

As for downloading, I'm not sure if it's available separately, which of course would be the easiest way, but you can always get the APK for it from any LineageOS build. Just download the flashable ZIP image, extract `payload.bin` from inside the ZIP, extract the `product` partition with `payload-dumper-go` [1]: `payload-dumper-go -p product payload.bin`, and then you have an EXT4 image you can simply mount under UN*X, or extract from using numerous tools for Windows.

1. https://github.com/ssut/payload-dumper-go

Yep. I tried with my 6spro. Flash thought fastboot. Step 1: you have to unlock bootloader. 2: download full zip file from https://ui.nubia.cn/rom. 4: Download payload.bin extractor and extract payload.bin from full zip file to the same folder as payload-dumper-go: https://github.com/ssut/payload-dumper-go/releases/tag/1.2.2 5: depending on your pc (window,linux...), I use linux so i run: ./payload-dumper-go payload.bin 6: after that, there will be a new folder full of .img files. 7: boot your phone to fastboot: - if your phone is not shutdown: adb reboot fastboot - if your phone is shutdown: hold volume down + power buttons, then wait until screen fastboot shows up. After that run cmd: fastboot reboot fastboot 8: then flash all .img from step 6 follow this link (in STEP 6: Flash Logical Partition Files, don't forget to flash vendor_system vendor_system.img after vendor) : https://www.droidwin.com/how-to-delete-and-create-logical-partition-on-oneplus-8t/ 9: after rebooting your phone, copy the full zip file from step 2 to your phone, then flash through the local-update in settings (just in case there is any problem). Don't lock the bootloader after that. I don't know if locking bootloader will brick your phone or not.

The installation instructions we have now assume that you were using the 2022-10-30 build, and thus removes a key step that was needed on older builds. Follow the hints LuK1337 provided to figure out what difference there is in the 2022-10-30 build vs the 2022-10-09 build. I'll link this here as another hint: https://github.com/ssut/payload-dumper-go/releases/tag/1.2.2

Use payload-dumper-go: https://github.com/ssut/payload-dumper-go

So if a custom ROM was installed on that device, download a zip of it. Next up, download payload dumber from here: https://github.com/ssut/payload-dumper-go/releases/tag/1.2.2 Extract a downloaded version archive and open a terminal in a directory with an executable. On Linux you should mark the file with 'chmod +x payload-dumpaer-go'. Run 'payllad-dumper-go ROM.zip' and wait. When it finished it's work, go to the newly generated folder and get your boot.omg here.

In the guide: Which one is the A12 Oxygen OS ROM, is it the Beta Build. How to extract stock ROM using payload-dumper-go