Razer Phone 2 Bricked Help?

Search This thread

FellpeSoares

Member
Sep 13, 2016
22
4
Brazil
Can someone help me with full image backup of partitions eMMC?
I can try unbrick my rp2 with full backup mmcblk0 on sd card due my phone don't enter in fastboot anymore, only i see Qualcomm HS-USB QDLoader 9008 when connecting usb


I also tried buying unbrick files from this site
https://www.aryk.store/2019/07/razer-phone-2-unbrick-files.html
but they are scammers!! they only sent me an empty folder on google drive

------Update-------
(Razer Phone 2 don't have mmcblk0)

Now i have other Razer Phone 2, i have full backup now of partitions sda, sdb, sdc, sde, sdf...
but i have new problem, how i merge theses partitions "cutted" to my flashdrive?

theses partitions have same header looking in hex viewer comparing with gpt_both files
gpt_both0.bin -> sda
gpt_both1.bin -> sdb
gpt_both2.bin -> sdc
gpt_both3.bin -> sdd
gpt_both4.bin -> sde
gpt_both5.bin -> sdf

vhmu4Lh.jpg



Also i used EDL Generator to create xml files if someone have prog_firehore
looking systeminfo_a or _b in txt, you see name of firehose used i think
RCL-0-VV-prog_ufs_firehose_8998_ddr.elf, RCL-0-0016-prog_ufs_firehose_8998_ddr.elf
 

Attachments

  • rp2partitions.zip
    43.1 KB · Views: 85
Last edited:

Jordan5900

Member
Jan 10, 2020
7
1
Guelph
Google Pixel 3
bootloader is unlocked but don't boot more, only show Qualcomm HS-USB QDLoader 9008 when connect usb on PC

Okay yeah I've been here before,
Follow this post

https://forum.xda-developers.com/android/development/guide-fixing-hard-bricks-t3403868/amp/

Before you try doing everything try just getting the drivers and using CMD to boot into bootloader or try system, once it's in bootloader, if all your files are gone, get ur factory ROM and reflash EVERYTHING MANUALLY. Like to into the flash all.bat and do every flash command it shows in that order - I had the trouble that the phone doesn't keep android-info.txt on it so reflashing everything manually will bypass using the flash all.bat and it failing.
 

FellpeSoares

Member
Sep 13, 2016
22
4
Brazil
Okay yeah I've been here before,
Follow this post

https://forum.xda-developers.com/android/development/guide-fixing-hard-bricks-t3403868/amp/

Before you try doing everything try just getting the drivers and using CMD to boot into bootloader or try system, once it's in bootloader, if all your files are gone, get ur factory ROM and reflash EVERYTHING MANUALLY. Like to into the flash all.bat and do every flash command it shows in that order - I had the trouble that the phone doesn't keep android-info.txt on it so reflashing everything manually will bypass using the flash all.bat and it failing.

thanks for helping, but this don't work because razer phone 2 don't use TOT files, these files are for LG
 

Cremosidad

Member
Aug 11, 2021
8
0
¿Alguien puede ayudarme con la copia de seguridad de imagen completa de las particiones eMMC?
Puedo intentar desbloquear mi rp2 con copia de seguridad completa mmcblk0 en la tarjeta sd debido a que mi teléfono ya no ingresa en fastboot, solo veo Qualcomm HS-USB QDLoader 9008 al conectar el usb


También intenté comprar archivos sin ladrillos de este sitio.
https://www.aryk.store/2019/07/razer-phone-2-unbrick-files.html
pero son estafadores !! solo me enviaron una carpeta vacía en google drive

------Actualizar-------
(Razer Phone 2 no tiene mmcblk0)

Ahora tengo otro Razer Phone 2, ahora tengo una copia de seguridad completa de las particiones sda, sdb, sdc, sde, sdf ...
pero tengo un nuevo problema, ¿cómo fusiono estas particiones "cortadas" en mi unidad flash?

Estas particiones tienen el mismo encabezado que se ve en el visor hexadecimal en comparación con los archivos gpt_both
gpt_both0.bin -> sda
gpt_both1.bin -> sdb
gpt_both2.bin -> sdc
gpt_both3.bin -> sdd
gpt_both4.bin -> sde
gpt_both5.bin -> sdf

vhmu4Lh.jpg



También utilicé EDL Generator para crear archivos xml si alguien tiene prog_firehore
mirando systeminfo_a o _b en txt, ves el nombre de la manguera de incendios utilizada, creo
RCL-0-VV-prog_ufs_firehose_8998_ddr.elf, RCL-0-0016-prog_ufs_firehose_8998_ddr.elf
¿Podría resolverse el problema? Tengo un error algo similar
 
Can someone help me with full image backup of partitions eMMC?
I can try unbrick my rp2 with full backup mmcblk0 on sd card due my phone don't enter in fastboot anymore, only i see Qualcomm HS-USB QDLoader 9008 when connecting usb


I also tried buying unbrick files from this site
https://www.aryk.store/2019/07/razer-phone-2-unbrick-files.html
but they are scammers!! they only sent me an empty folder on google drive

------Update-------
(Razer Phone 2 don't have mmcblk0)

Now i have other Razer Phone 2, i have full backup now of partitions sda, sdb, sdc, sde, sdf...
but i have new problem, how i merge theses partitions "cutted" to my flashdrive?

theses partitions have same header looking in hex viewer comparing with gpt_both files
gpt_both0.bin -> sda
gpt_both1.bin -> sdb
gpt_both2.bin -> sdc
gpt_both3.bin -> sdd
gpt_both4.bin -> sde
gpt_both5.bin -> sdf

vhmu4Lh.jpg



Also i used EDL Generator to create xml files if someone have prog_firehore
looking systeminfo_a or _b in txt, you see name of firehose used i think
RCL-0-VV-prog_ufs_firehose_8998_ddr.elf, RCL-0-0016-prog_ufs_firehose_8998_ddr.elf
so the soc for rp2 is sdm 845. i saw the firehose img in text that you saw but it just makes no sense for 8998 to be in system img when 8998 is the wrong chipset...RAZER enjoys playing games or something...ive been talking with and edl firehose exploiter and may be making progress
 

FellpeSoares

Member
Sep 13, 2016
22
4
Brazil
After the official end of Razer support, I think it's more difficult to get these files now, dev's must be the only one who can have at hand in this moment.

Details of compatible Firehose that we need
HWID: 0008B0E101400003
MSM_ID: 0008B0E1
OEM_ID: 0140
MODEL_ID: 0003
CPU: SDM845
PK_HASH: 074DDB00C617690187503D8C795F497005C760965F8F48A7A8955271E4BF826B

Code:
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: rsassaPss         
         Hash Algorithm: sha256
         Mask Algorithm: mgf1 with sha256
          Salt Length: 0x20
         Trailer Field: 0xBC (default)
        Issuer: C = US, ST = CA, L = San Francisco, OU = Razer MBU, O = Razer, CN = Razer Attestation CA
        Validity
            Not Before: Mar  5 02:12:06 2019 GMT
            Not After : Feb 28 02:12:06 2039 GMT
        Subject: C = US, CN = Razer Subsystem Signing User, L = San Francisco, O = Razer, ST = California, OU = 01 0000000000000000 SW_ID, OU = 02 6000000001400003 HW_ID, OU = 04 0140 OEM_ID, OU = 05 00000228 SW_SIZE, OU = 06 0003 MODEL_ID, OU = 07 0001 SHA256, OU = 03 0000000000000000 DEBUG, OU = 13 0001 IN_USE_SOC_HW_VERSION
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:5a:af:ba:3e:b3:8b:e0:25:13:e9:02:cd:
                    1b:a4:d9:e0:78:a6:89:09:2d:8e:84:4c:b7:52:18:
                    a9:fa:a1:c9:6f:6e:92:8c:30:88:a0:89:99:45:dd:
                    b3:1c:23:45:17:82:db:c7:1e:c7:45:f4:1f:12:ce:
                    bd:5e:50:b2:75:18:cb:07:c5:23:9d:14:ba:04:95:
                    b2:b9:3c:1f:32:60:3f:0f:f5:7c:d6:de:43:69:10:
                    9c:9f:55:9c:b4:35:ea:e9:b8:d7:5e:e1:f8:1c:05:
                    f2:97:d2:06:1b:b0:14:37:9d:de:a8:b3:14:0c:f8:
                    42:cc:c9:ec:42:c2:ec:c8:41:fb:12:67:2c:8b:5c:
                    cd:ca:a9:ea:db:30:89:4c:56:f7:b4:73:0c:46:7a:
                    30:0a:e5:9d:33:b6:3d:04:c4:41:87:9c:41:58:2d:
                    f8:e6:66:a6:52:a5:01:35:9a:92:dc:51:a1:28:e8:
                    e7:a5:11:ca:ec:a8:1f:0c:cb:58:bb:f9:61:59:46:
                    0d:92:05:cb:ce:2d:1e:7b:dc:08:93:f1:61:f5:ad:
                    72:20:a9:db:86:6d:0b:75:63:6c:04:54:a5:5e:89:
                    91:13:b9:23:da:ad:55:0e:4f:15:08:0c:19:39:56:
                    25:c2:94:6e:97:4f:b4:fa:10:b4:32:25:ea:40:6f:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:CA:43:84:0F:CD:A4:7B:D8:06:12:D2:BF:89:31:6B:93:35:00:DC:F2


            X509v3 Basic Constraints:
                CA:FALSE, pathlen:0
            X509v3 Key Usage:
                Digital Signature
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha256
         Mask Algorithm: mgf1 with sha256
          Salt Length: 0x20
         Trailer Field: 0xBC (default)


         06:46:11:a4:82:07:1e:d7:d0:67:eb:16:89:08:04:48:82:a8:
         91:3d:9d:5e:32:60:f2:ba:11:c7:d1:6b:99:a1:40:ee:41:ad:
         e4:e5:95:06:8e:86:59:a5:ad:bd:63:e0:30:9c:d2:f8:75:57:
         b3:1d:86:a7:eb:a7:e1:a9:6f:da:70:74:0d:82:ed:7a:ec:1a:
         ae:83:d4:0f:25:b6:ba:ae:ac:e0:9a:94:4c:25:6d:38:6e:61:
         8d:59:15:73:24:a7:d4:34:2f:41:ae:51:38:d0:46:cd:90:63:
         44:9c:d7:c3:64:7b:44:3e:7c:cb:c9:0d:c0:d4:d7:4a:95:fd:
         d9:1b:8b:50:a9:38:bf:cf:a7:b2:8f:b6:9e:83:e3:2e:a0:02:
         f2:57:60:cd:9e:ab:27:2c:c6:00:f1:dd:c9:2f:9a:bb:fe:4f:
         9d:10:66:be:d1:61:d1:77:71:37:a6:de:e1:1f:55:14:0a:16:
         2f:54:f3:a5:6b:0e:10:2c:2e:18:28:d0:e7:d2:19:fb:0c:7b:
         61:5b:96:7b:48:7e:36:7a:1c:4c:36:07:9d:40:27:7a:ce:05:
         9f:23:88:47:69:14:d6:1b:e9:3d:72:1c:91:ed:ab:45:e3:10:
         22:a2:8a:67:db:dc:61:02:32:74:58:49:de:0e:ad:87:e9:62:
         59:72:13:95
 

Cremosidad

Member
Aug 11, 2021
8
0
After the official end of Razer support, I think it's more difficult to get these files now, dev's must be the only one who can have at hand in this moment.

Details of compatible Firehose that we need
HWID: 0008B0E101400003
MSM_ID: 0008B0E1
OEM_ID: 0140
MODEL_ID: 0003
CPU: SDM845
PK_HASH: 074DDB00C617690187503D8C795F497005C760965F8F48A7A8955271E4BF826B

Code:
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: rsassaPss       
         Hash Algorithm: sha256
         Mask Algorithm: mgf1 with sha256
          Salt Length: 0x20
         Trailer Field: 0xBC (default)
        Issuer: C = US, ST = CA, L = San Francisco, OU = Razer MBU, O = Razer, CN = Razer Attestation CA
        Validity
            Not Before: Mar  5 02:12:06 2019 GMT
            Not After : Feb 28 02:12:06 2039 GMT
        Subject: C = US, CN = Razer Subsystem Signing User, L = San Francisco, O = Razer, ST = California, OU = 01 0000000000000000 SW_ID, OU = 02 6000000001400003 HW_ID, OU = 04 0140 OEM_ID, OU = 05 00000228 SW_SIZE, OU = 06 0003 MODEL_ID, OU = 07 0001 SHA256, OU = 03 0000000000000000 DEBUG, OU = 13 0001 IN_USE_SOC_HW_VERSION
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:5a:af:ba:3e:b3:8b:e0:25:13:e9:02:cd:
                    1b:a4:d9:e0:78:a6:89:09:2d:8e:84:4c:b7:52:18:
                    a9:fa:a1:c9:6f:6e:92:8c:30:88:a0:89:99:45:dd:
                    b3:1c:23:45:17:82:db:c7:1e:c7:45:f4:1f:12:ce:
                    bd:5e:50:b2:75:18:cb:07:c5:23:9d:14:ba:04:95:
                    b2:b9:3c:1f:32:60:3f:0f:f5:7c:d6:de:43:69:10:
                    9c:9f:55:9c:b4:35:ea:e9:b8:d7:5e:e1:f8:1c:05:
                    f2:97:d2:06:1b:b0:14:37:9d:de:a8:b3:14:0c:f8:
                    42:cc:c9:ec:42:c2:ec:c8:41:fb:12:67:2c:8b:5c:
                    cd:ca:a9:ea:db:30:89:4c:56:f7:b4:73:0c:46:7a:
                    30:0a:e5:9d:33:b6:3d:04:c4:41:87:9c:41:58:2d:
                    f8:e6:66:a6:52:a5:01:35:9a:92:dc:51:a1:28:e8:
                    e7:a5:11:ca:ec:a8:1f:0c:cb:58:bb:f9:61:59:46:
                    0d:92:05:cb:ce:2d:1e:7b:dc:08:93:f1:61:f5:ad:
                    72:20:a9:db:86:6d:0b:75:63:6c:04:54:a5:5e:89:
                    91:13:b9:23:da:ad:55:0e:4f:15:08:0c:19:39:56:
                    25:c2:94:6e:97:4f:b4:fa:10:b4:32:25:ea:40:6f:
                    d8:47
                Exponente: 65537 (0x10001)
        Extensiones X509v3:
            Identificador de clave de autoridad X509v3:
                clave:CA:43:84:0F:CD:A4:7B:D8:06:12:D2:BF:89:31:6B:93:35:00:DC:F2


            Restricciones básicas de X509v3:
                CA: FALSO, ruta: 0
            Uso de la clave X509v3:
                Firma digital
    Algoritmo de firma: rsassaPss       
         Algoritmo hash: sha256
         Algoritmo de máscara: mgf1 con sha256
          Sal Longitud: 0x20
         Campo de tráiler: 0xBC (predeterminado)


         06:46:11:a4:82:07:1e:d7:d0:67:eb:16:89:08:04:48:82:a8:
         91:3d:9d:5e:32:60:f2:ba:11:c7:d1:6b:99:a1:40:ee:41:ad:
         e4:e5:95:06:8e:86:59:a5:ad:bd:63:e0:30:9c:d2:f8:75:57:
         b3:1d:86:a7:eb:a7:e1:a9:6f:da:70:74:0d:82:ed:7a:ec:1a:
         ae:83:d4:0f:25:b6:ba:ae:ac:e0:9a:94:4c:25:6d:38:6e:61:
         8d:59:15:73:24:a7:d4:34:2f:41:ae:51:38:d0:46:cd:90:63:
         44:9c:d7:c3:64:7b:44:3e:7c:cb:c9:0d:c0:d4:d7:4a:95:fd:
         d9:1b:8b:50:a9:38:bf:cf:a7:b2:8f:b6:9e:83:e3:2e:a0:02:
         f2:57:60:cd:9e:ab:27:2c:c6:00:f1:dd:c9:2f:9a:bb:fe:4f:
         9d:10:66:be:d1:61:d1:77:71:37:a6:de:e1:1f:55:14:0a:16:
         2f:54:f3:a5:6b:0e:10:2c:2e:18:28:d0:e7:d2:19:fb:0c:7b:
         61:5b:96:7b:48:7e:36:7a:1c:4c:36:07:9d:40:27:7a:ce:05:
         9f:23:88:47:69:14:d6:1b:e9:3d:72:1c:91:ed:ab:45:e3:10:
         22:a2:8a:67:db:dc:61:02:32:74:58:49:de:0e:ad:87:e9:62:
         59:72:13:95[/CÓDIGO]

[/QUOTE]
How to load this code in the razer phone 2?
 

itz_jordann

Member
Mar 3, 2020
19
6
I DONT UNDERSTAND HOW DEEP YOU GUYS GET INTO THESE RZRS. WHENEVER I HAVE A PRBLEM I FLASHALL.BAT. AND IT REFRESHES THE PHONE THEN I RESTART WHATEVER IWAS TRYINA DO. HOWD YOU GET SO DEEP INTO THAT WHOLE OF BEING BRIICKED