[Recovery] EVA NoCheck Recovery - Flash unapproved OTA firmwares!

[Atarii]

Overview
This is a patched recovery image which bypasses the usual checks performed during a firmware flash, allowing you to flash unapproved OTA firmwares. For example, the latest FullOTA-MF b394:

You can also downgrade without using the b300 rollback package (untested)

Prerequisites

• Unlocked bootloader
• Rooted
• Backup your data (flashing may cause bootloader to re-lock or restore factory default etc. - don't blame me if it goes wrong!)

Instructions
Download firmware:

• Use Huawei Firmware Finder (Play Store link) to download the latest firmware files - you will need all 3 zip files:
  - update.zip
  - update_data_full_public.zip
  - update_full_EVA-L09_hw_eu.zip

Tips: check for the latest number (102064 for b394) and ensure you have the larger filesize (around 2GB). For example, these are the latest at time of writing b394:

Flash nocheck recovery:

• Reboot device to fastboot mode (power off fully, hold down volume button and connect USB cable)
• Run the following to flash recovery:
  

  fastboot flash recovery eva_l09b391_nocheckrecovery.img
  fastboot reboot

Send commands via ADB

• Phone should be booted back to system - connect phone via adb and allow root prompt:
  

  adb shell
  su

• Create HWOTA folder:
  

  mkdir /data/update/HWOTA

• Copy firmware to HWOTA folder (replace 102064 below with correct value - this is for b394):
  

  cp /sdcard/HWFF/102064/update* /data/update/HWOTA/

• Paste recovery command:
  

  echo "--update_package=/data/update/HWOTA/update.zip" > /cache/recovery/command
  echo "--update_package=/data/update/HWOTA/update_data_full_public.zip" >> /cache/recovery/command
  echo "--update_package=/data/update/HWOTA/update_full_EVA-L09_hw_eu.zip" >> /cache/recovery/command
  exit

• Finally reboot to recovery to start firmware upgrade:
  

  adb reboot recovery

• Firmware should install and reboot automatically

Extras
You can probably Re-Brand to alternative customers too i.e. c636 (Asian region) to c432 (European region). Follow the tutorial here: https://forum.xda-developers.com/honor-8-pro/how-to/oeminfo-c432-t3625886 - you'll need the correct OEMINFO files, this is untested.

Thanks
- Olddroid
- Mankindtw
- Hackslash
- DkiOnline (L09 tester)
- jimz6 (L19 tester)
- LastStandingDroid

XDA:DevDB Information
EVA NoCheck Recovery, Tool/Utility for the Huawei P9

Contributors
Atarii

Version Information
Status: Stable

Created 2017-11-14
Last Updated 2017-11-17

 

[Atarii]

Changelog

31-01-2018
Added L29 recovery image

17-11-2017
Added L19 recovery image

14-11-2017
Initial release

 

[rafitcu]

THX, i try and successfully, i am on latest firmware now

 

[Atarii]

THX, i try and successfully, i am on latest firmware now

Great - thanks for the feedback

 

[Atarii]

Update: I've added the L19 recovery image after successful feedback

 

[ekhi]

updated succesfully.
only two points, on prerequisites I think you should add that the phone should be rooted cause after I flashed the nochechrecovery I needed to reflash twrp and root.
and the second point is that there is missing a / before de * in the step when you copy the 3 zips to data.
nice to know there is a method to bypass the verification on firmwares :good::good:

 

[chudy_85]

Can any one try downgrade after update to b394 using b300???

 

[kukubau]

Can one modify the recovery.img file for a certain firmware version other than B391?

 

[Tecalote]

Can one modify the recovery.img file for a certain firmware version other than B391?

You haven't read OP #1?

 

[kukubau]

You haven't read OP #1?

You didn't understand my question.

Can one modify the recovery.img from another firmware package, other than B391?

Let's say I'd like to do a HEX file diff between two image files and modify the img file myself.

Is this possible? What should I look for?

For learning purposes.

 

[Atarii]

You didn't understand my question.

Can one modify the recovery.img from another firmware package, other than B391.

Let's say I'd like to do a HEX file diff between two image files and modify the img file myself.

Is this possible? What should I look for?

For learning purposes.

You can use this recovery with any firmware and ignore the version - I just used b391 as the base as that's the firmware I was on at the time.

You can't modify other recovery images by diffing the hex - you need to disassemble the recovery binary and overwrite the checks with arm assembly

 

[chudy_85]

@Atarii

Do you try downgrade using b300 update.app and then to b136 or b182???

Your method it's safe?? What when we brick device

 

[kukubau]

You can use this recovery with any firmware and ignore the version - I just used b391 as the base as that's the firmware I was on at the time.

You can't modify other recovery images by diffing the hex - you need to disassemble the recovery binary and overwrite the checks with arm assembly

Thanks for the clarification.

I've flashed the L19 B391 recovery image and flashed the B391 OTA using your method, but the phone didn't boot afterwards.

I'll try the B390 OTA later today, to see if it makes a difference.

 

[dkionline]

Thanks for the clarification.

I've flashed the L19 B391 recovery image and flashed the B391 OTA using your method, but the phone didn't boot afterwards.
I'll try the B390 OTA later today, to see if it makes a difference.

if not, boot up and hold vol+ like you would enter to twrp, then it should flash automatically.

 

[Atarii]

Thanks for the clarification.

I've flashed the L19 B391 recovery image and flashed the B391 OTA using your method, but the phone didn't boot afterwards.

I'll try the B390 OTA later today, to see if it makes a difference.

Did you use the 2GB file?

 

[kukubau]

Did you use the 2GB file?

Yes.

---------- Post added at 02:55 PM ---------- Previous post was at 02:53 PM ----------

if not, boot up and hold vol+ like you would enter to twrp, then it should flash automatically.

I've flashed my phone and unbricked it hundreds of times.

I've even posted an unbrick guide here on XDA forums.

I guess I know how to force flash it using the three key combo.

 

[Atarii]

@Atarii

Do you try downgrade using b300 update.app and then to b136 or b182???

Your method it's safe?? What when we brick device

I haven't personally tested this but I know others have for other device - so use at your own risk

 

[dkionline]

Yes.

---------- Post added at 02:55 PM ---------- Previous post was at 02:53 PM ----------



I've flashed my phone and unbricked it hundreds of times.

I've even posted an unbrick guide here on XDA forums.

I guess I know how to force flash it using the three key combo.

Im not using 3 key, only 1.
If not boot, you have manually boot with key i posted before.

 

[superkryo]

This is so nice. Is it possible to make one for PO Plus, VIE-L09 and VIE-L29? Thanks

 

[kukubau]

Im not using 3 key, only 1.
If not boot, you have manually boot with key i posted before.

Doesn't boot into android os, no matter what.

I'll post a follow up after I try the B390 fw, maybe incremental updates are required.