Identify your bootloader version:

Search This thread

bibikalka

Senior Member
May 14, 2015
1,408
1,100
In a strict sense, the procedure doesn't leave the bootloader intact - it first writes the newer version (which is part of the stock ROM) to later replace it back with the original one. And this "later" may be crucial - if in-between something bad happens (bad battery level, bad cable, power outage on the PC side), game over.
What's the ratio of successful vs. bricking here?
Unfortunately, nobody seems to have followed the path @Vlasp had suggested a year ago: to trim down stock ROMs to explicitly exclude bootloader files and install instructions (and possibly add su, and disable ota and ads). I understand that with FF we're no longer limited to signed ROMs, so this should be feasible, and scriptable for future ROM versions, no? (If I could extend days to 36 hours...)

Just saw this - a bit of a weird concern. Given that TWRP/Flashfire are super robust, the 2 zips can be flashed in the same sequence pretty much every time, so the # of devices with issues is probably about 0. I presume the conversation is about this post.
 

Master Melab

Senior Member
Jan 26, 2011
415
11
While playing with AFTV2 tools quite a bit, I thought it'd be convenient to have some way to identify what bootloader version one has (given bricking implications & all). Doing checksums on the full TEE1 & UBOOT partitions is not very useful, because the empty area in the partitions may have junk, and that would impact the checksum. So something slightly different is needed.

Here is what I propose, one can read the first few bytes of TEE1 & UBOOT partitions, and then look at them with a hex editor. Fairly low tech, but there you go ... Unfortunately, "hexdump" is not present by default on Fire, so a few more manipulations are required. First, run this with adb (can also be read with AFTV2 tools):
Code:
adb shell
su
mkdir /sdcard/tmp/
dd if=/dev/block/mmcblk0p4 of=/sdcard/tmp/04_uboot.img
dd if=/dev/block/mmcblk0p9 of=/sdcard/tmp/09_tee1.img
cd /sdcard/tmp
md5 *.img
exit
exit
adb pull /sdcard/tmp

Then, with a hex editor (such as Frhed), look at the first few bytes of these images on your PC. On linux it's even easier, just do "cat -c 8 *.img | hexdump". You should see something like the following:
Code:
04_uboot.img: UBOOT: 88 16 88 58 [COLOR="Red"]b4 33 06 00[/COLOR] 4c 4b 00 00 "LK"
09_tee1.img:  TEE1:  88 16 88 58 [COLOR="Red"]00 3c 10 00[/COLOR] 54 45 45 00 "TEE"
The 4 bytes in red are key to identify the version. Please see the table below for the data I've compiled so far. Let's add to it as more versions become available/known (if your combination is not listed, please post here):
Code:
UBOOT
d8 27 06 00 Unreleased, 5.0.0, (Build date Saturday, August 1, 2015, 10:39 PM GMT)
b4 33 06 00 5.2.2_053820 5.0.1
54 3f 06 00 5.2.2_055120 5.0.1
e4 3b 06 00 5.4.1_112720 5.1.1
38 34 06 00 5.4.2_168620 5.1.2
78 34 06 00 5.4.4_271020 5.1.4
b8 3c 06 00 5.5.2_153420 5.3.1.0

TEE1
00 3c 10 00 Unreleased, 5.0.0, (Build date Saturday, August 1, 2015, 10:39 PM GMT)
00 3c 10 00 5.2.2_053820 5.0.1
00 3c 10 00 5.2.2_055120 5.0.1
00 3c 10 00 5.4.1_112720 5.1.1
00 3c 10 00 5.4.2_168620 5.1.2
00 3c 10 00 5.4.4_271020 5.1.4
90 84 11 00 5.5.2_153420 5.3.1.0

@DoLooper, @kirito9, @sd_shadow, @Kramar111, @zeroepoch, @hwmod, @Tomsgt

Are you talking about the first-stage bootloader? If you are, is it verified by the boot ROM?
 

wfg97079

Member
Oct 30, 2013
39
0
Device is at 5.3.1.0

uboot:
88 16 88 58 C0 9B 0E 00 54 45 45 00 00 00 00 00
Tee1
4B 42 50 4F 98 0B 00 00 A8 0B 00 00 00 00 00 00

Can anyone identify?
 

i.REN

Member
Jan 13, 2022
18
5
I suppose it's on 5.1.2 but I'm not sure what that means pertaining to unlock the bootloader.
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 12
    While playing with AFTV2 tools quite a bit, I thought it'd be convenient to have some way to identify what bootloader version one has (given bricking implications & all). Doing checksums on the full TEE1 & UBOOT partitions is not very useful, because the empty area in the partitions may have junk, and that would impact the checksum. So something slightly different is needed.

    Here is what I propose, one can read the first few bytes of TEE1 & UBOOT partitions, and then look at them with a hex editor. Fairly low tech, but there you go ... Unfortunately, "hexdump" is not present by default on Fire, so a few more manipulations are required. First, run this with adb (can also be read with AFTV2 tools):
    Code:
    adb shell
    su
    mkdir /sdcard/tmp/
    dd if=/dev/block/mmcblk0p4 of=/sdcard/tmp/04_uboot.img
    dd if=/dev/block/mmcblk0p9 of=/sdcard/tmp/09_tee1.img
    cd /sdcard/tmp
    md5 *.img
    exit
    exit
    adb pull /sdcard/tmp

    Then, with a hex editor (such as Frhed), look at the first few bytes of these images on your PC. On linux it's even easier, just do "cat -c 8 *.img | hexdump". You should see something like the following:
    Code:
    04_uboot.img: UBOOT: 88 16 88 58 [COLOR="Red"]b4 33 06 00[/COLOR] 4c 4b 00 00 "LK"
    09_tee1.img:  TEE1:  88 16 88 58 [COLOR="Red"]00 3c 10 00[/COLOR] 54 45 45 00 "TEE"
    The 4 bytes in red are key to identify the version. Please see the table below for the data I've compiled so far. Let's add to it as more versions become available/known (if your combination is not listed, please post here):
    Code:
    UBOOT
    d8 27 06 00 Unreleased, 5.0.0, (Build date Saturday, August 1, 2015, 10:39 PM GMT)
    b4 33 06 00 5.2.2_053820 5.0.1
    54 3f 06 00 5.2.2_055120 5.0.1
    e4 3b 06 00 5.4.1_112720 5.1.1
    38 34 06 00 5.4.2_168620 5.1.2
    78 34 06 00 5.4.4_271020 5.1.4
    b8 3c 06 00 5.5.2_153420 5.3.1.0
    
    TEE1
    00 3c 10 00 Unreleased, 5.0.0, (Build date Saturday, August 1, 2015, 10:39 PM GMT)
    00 3c 10 00 5.2.2_053820 5.0.1
    00 3c 10 00 5.2.2_055120 5.0.1
    00 3c 10 00 5.4.1_112720 5.1.1
    00 3c 10 00 5.4.2_168620 5.1.2
    00 3c 10 00 5.4.4_271020 5.1.4
    90 84 11 00 5.5.2_153420 5.3.1.0

    @DoLooper, @kirito9, @sd_shadow, @Kramar111, @zeroepoch, @hwmod, @Tomsgt
    3
    Quick update (although useless since reading off the timestamps would require root which isn't available yet for 5.3.2.1 and higher - that's why I won't merge this into the checker tool yet):
    Code:
           fireOS-5.0.0/images/preloader.img: 20150728-232738
      fireOS-5.0.1/images/preloader_prod.img: 20150730-164940
      fireOS-5.1.1/images/preloader_prod.img: 20150923-180133
           fireOS-5.0.1/images/preloader.img: 20150930-051243
           fireOS-5.1.1/images/preloader.img: 20151202-052945
      fireOS-5.1.2/images/preloader_prod.img: 20160120-094719
      fireOS-5.1.4/images/preloader_prod.img: 20160217-183554
           fireOS-5.1.2/images/preloader.img: 20160227-021828
           fireOS-5.1.4/images/preloader.img: 20160506-045524
    fireOS-5.3.1.0/images/preloader_prod.img: 20160603-023745
    fireOS-5.3.2.0/images/preloader_prod.img: 20160603-023745
         fireOS-5.3.1.0/images/preloader.img: 20160624-191357
    fireOS-5.3.2.1/images/preloader_prod.img: 20161102-031807
         fireOS-5.3.2.0/images/preloader.img: 20161104-214024
         fireOS-5.3.2.1/images/preloader.img: 20161201-113631
    fireOS-5.3.3.0/images/preloader_prod.img: 20170116-085533
         fireOS-5.3.3.0/images/preloader.img: 20170328-012523


    ---------- Post added at 01:58 PM ---------- Previous post was at 01:11 PM ----------

    Um, by the way, there had been reports that 5.1.3 had been rooted without downgrading to 5.1.2, if I remember correctly.
    If that's your last FireOS version, may I ask you to run the bootloader tool and report back the result? Same for 5.1.2.1... Thanks
    2
    uboot - 88 16 88 58 B8 3C 06 00 4C 4B 00 00 00 00 00
    tee1 - 88 16 88 58 90 84 11 00 54 45 45 00 00 00 00

    5.3.1, lol. whats a good rom for this amazon fire 5th gen?

    [ROM][AOSP] Fire Nexus ROM - LMY49M [22 JULY 2017] - XDA Developers
    https://forum.xda-developers.com/amazon-fire/orig-development/rom-fire-nexus-rom-lmy49f-t3300714

    [ROM] Lineage-12.1 [12 SEP 2017] - XDA Developers
    https://forum.xda-developers.com/amazon-fire/orig-development/rom-lineage-12-1-t3639447
    1
    unknown 5.0.1

    Code:
    UBOOT
    54 3f 06 00 5.2.2_055120 5.0.1
    
    TEE1
    00 3c 10 00 5.2.2_055120 5.0.1
    1
    Fire originally with 5.1.3 - downgraded to 5.1.2 . uboot and tee1 are consistent with 5.1.2 .

    Indeed, when you downgraded, the bootloaders got overwritten and so you see 5.1.2 ! But luckily, this combination does not brick.