• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

Question Repair ROG Phone 5 ZS673KS through edl firmware, no need to unlock Bootloader to modify COUNTRY CN to WW

Search This thread

s_leandro

Member
Apr 17, 2013
21
2
Rio de Janeiro
Is it possible to unlock a locked bootloader using EDL? I have a tencent version already with ww installed and bootloader locked. The unlock app does not work obviously but I can access EDL mode, would it be possible to unlock it somehow?
 
  • Like
Reactions: aimsjahan

johnny886

Senior Member
Sep 21, 2018
100
110
Is it possible to unlock a locked bootloader using EDL? I have a tencent version already with ww installed and bootloader locked. The unlock app does not work obviously but I can access EDL mode, would it be possible to unlock it somehow?
If your ROG3/ROG5/ROG5S is the CN version, but you have flashed the WW firmware, you cannot unlock the Bootloader, or you are prompted to unlock successfully, but the Bootloader is still not unlocked after restarting, you can write the correct SSN and ISN of the phone Go to asuskey4, then restore to the phone partition, and then use the official unlocking tool to unlock it.Unable to unlock in edl mode.
 

s_leandro

Member
Apr 17, 2013
21
2
Rio de Janeiro
If your ROG3/ROG5/ROG5S is the CN version, but you have flashed the WW firmware, you cannot unlock the Bootloader, or you are prompted to unlock successfully, but the Bootloader is still not unlocked after restarting, you can write the correct SSN and ISN of the phone Go to asuskey4, then restore to the phone partition, and then use the official unlocking tool to unlock it.Unable to unlock in edl mode.
Is it possible for you to make a how-to guide of this process? I would be very grateful to you and I believe it would help me and a lot of people that made the same mistake buying a locked phone like mine.
 
Last edited:

ashrah28

New member
Nov 10, 2021
2
0
thank you! i did with no error, following all instruction to flash cn to ww. The last command "su" is un recognized so i skipped it. but it works perfect with no problem.

my question is how can i update my firmware to latest release by asus?


Version WW-18.0840.2109.188

2021/11/05 3.41 GBytes

ROG Phone 5 (ZS673KS) software Image:WW-18.0840.2109.188 for WW/JP/EU/RU only*

This firmware is only for ROG Phone 5 WW/JP/EU version use and not applicable to ROG Phone 5S/5S Pro series models.
Note: Please be patience it's normal when downloading status bar stop a while with large update package.

For WW SKU Improved Item:
1. Optimize the charging experience function
 

ashrah28

New member
Nov 10, 2021
2
0
well i figured it out. done updating firmware to latest with no error even hardwarestub FOTA no notification at all, i just follow his instruction at the end of the tutorial.
first we need to change/edit country CN to WW at persist.img using winhex full version to show all the option to edit file. if free version you wont see it.
next step is edit asuskey4 using winhex again change CN to WW then at the tutorial it says clean the IMEI so i did change it to new one. but be sure to backup the original 8 file that we backup. next is run minimal adb command propt then input the code one by one.

adb push persist.img /sdcard/
adb push asuskey4 /sdcard/
adb shell
su
dd if=/sdcard/persist.img of=/dev/block/bootdevice/by-name/persist
dd if=/sdcard/asuskey4 of=/dev/block/bootdevice/by-name/asuskey4

hope it will help and thank you TS! @johnny886
 

Attachments

  • Untitled.jpg
    Untitled.jpg
    395.5 KB · Views: 88

johnny886

Senior Member
Sep 21, 2018
100
110
well i figured it out. done updating firmware to latest with no error even hardwarestub FOTA no notification at all, i just follow his instruction at the end of the tutorial.
first we need to change/edit country CN to WW at persist.img using winhex full version to show all the option to edit file. if free version you wont see it.
next step is edit asuskey4 using winhex again change CN to WW then at the tutorial it says clean the IMEI so i did change it to new one. but be sure to backup the original 8 file that we backup. next is run minimal adb command propt then input the code one by one.

adb push persist.img /sdcard/
adb push asuskey4 /sdcard/
adb shell
su
dd if=/sdcard/persist.img of=/dev/block/bootdevice/by-name/persist
dd if=/sdcard/asuskey4 of=/dev/block/bootdevice/by-name/asuskey4

hope it will help and thank you TS! @johnny886
Nice, but ROG 5s can't do this, this method is no longer valid. No one has found a new method on ROG5s
 
  • Like
Reactions: ashrah28

seiferfury

Member
Apr 19, 2014
23
1
@johnny886

So if I'm reading this guide correctly, there is only one other step ROG5 users need to do to fully convert to global, and it's changing the asuskey4 entry? Because I've already unlocked my bootloader and did all the previous guides in this forum to convert to Global; I don't want to do them all over again.

But I do want to use the phone without disabling HardwareStub (since the app still is useful). Can I modify just the asuskey4 file without taking any other steps?
 

vegasphinx

Senior Member
I tried this guide on a tencent version bootloader relocked, and I got sahara protocol error on all 3 methods( cmd file, miflash, QFIL). on miflash error occured when flashing userdata_1.img. Here's some log from miflash :
[22:52:16 COM6]:Image D:\V364\ROG5\ENG\vbmeta_system.img transferred successfully,elapse 00:00:00.0468788 [22:52:16 COM6]:Write file D:\V364\ROG5\ENG\vbmeta_system.img to partition[vbmeta_system_b] sector 2348568 [22:52:16 COM6]:write file legnth 4096 to partition 2348568 [22:52:16 COM6]:WriteFile position 0, size 4096 [22:52:16 COM6]:1 chunks match 2 ack [22:52:16 COM6]:Image D:\V364\ROG5\ENG\vbmeta_system.img transferred successfully,elapse 00:00:00.0156327 [22:52:16 COM6]:Write sparse file D:\V364\ROG5\ENG\userdata_1.img to partition[userdata] sector 2352680 [22:52:16 COM6]:ERROR_BAD_FORMAT 0 [22:52:16 COM6]:ERROR_UNSUPPORTED_TYPE 0 [22:52:16 COM6]:System.Exception: ERROR_UNSUPPORTED_TYPE at XiaoMiFlash.code.bl.SerialPortDevice.WriteFilesToDevice(String portName, String swPath, String rawFilePath) at XiaoMiFlash.code.bl.SerialPortDevice.FirehoseDownloadImg(String swPath) at XiaoMiFlash.code.bl.SerialPortDevice.XiaomiFlash() at XiaoMiFlash.code.bl.SerialPortDevice.WriteFilesToDevice(String portName, String swPath, String rawFilePath) at XiaoMiFlash.code.bl.SerialPortDevice.FirehoseDownloadImg(String swPath) at XiaoMiFlash.code.bl.SerialPortDevice.XiaomiFlash() [22:52:16 COM6]:after restart close COM6

Any suggestions?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 7
    These materials can only be used for ROG Phone 5_ZS673KS, and ROG Phone 5S_ZS676KS cannot be used.

    ROG Phone 5S ZS676KS Please see here:https://forum.xda-developers.com/t/...ootloader-to-modify-country-cn-to-ww.4353339/

    If your ROG Phone 5 ZS673KS only has edl mode (port 9008), then this tool can help you repair your phone through edl mode.

    Or if you want to modify COUNTRY, flash the firmware of WW, you don't need to apply to unlock the Bootloader,

    you don't need ROOT, just follow me.

    1.Connect the phone to the computer through the USB port on the left, enter the fastboot mode,

    and then open "Reboot-to-edl.bat" to enter the edl mode. Or enter fastboot oem enter-dload in cmd.


    2.You must flash in the ENG firmware that I modified. If you find the firmware online,

    you may lose your fingerprint and IMEI after flashing.

    Method 1: The phone enters edl mode, and when you see port 9008 in the device manager,

    open the ENG folder--open "0-update_image_EDL.bat"

    Method 2: The phone enters edl mode, and after you see port 9008 in the device manager, use the XiaoMiFlash tool to flash in.

    Method 3: The phone enters edl mode, and after you see port 9008 in the device manager,flash in through the QPST tool.


    3.After flashing in the firmware and successfully booting up, be sure to back up your phone partition files. If your phone's fingerprint is lost or IMEI is lost,

    it can be restored to normal. If you don't have a backup, it will be very troublesome.

    Double-click to open "Backup.bat", it will automatically back up your phone partition files, you need to save these files, follow-up will definitely help you.

    Include these Eight files:“persist.img factory.img modemst1 modemst2 asuskey4 fsg fsgCA fsc”

    Normally, you don’t need to restore these files. If your fingerprint or imei is lost and you need to restore these files to your phone,

    please flash the ENG firmware, then put these Eight files into the ROG 5 folder, and double-click to open " Restore.bat" can be restored to your phone.

    4.If your machine is an global version, after backing up and saving Eight files, directly enter the fastboot mode, open the WW folder-open "flash_raw_and_wipe_data.cmd" to flash the WW firmware,

    and successfully repair your ROG 5.

    If you cannot flash the firmware in fastboot mode, the prompt: fastboot error CID () Mapping wrong Xrom!

    You can Double click to open"Open-Cmd.bat",Then enter the commands, enter fastboot -v flash all xx.raw

    xx.raw is the firmware on your computer, for example: fastboot -v flash all C:\Users\johnny\Desktop\ROG5\WW\WW_ZS673KS_18.0810.2101.95_M2.13.24.9-ASUS_1.1.46_Phone-user.raw

    ASUS:
    version display asus fastboot version and list support project.
    -v flash all : disable asus raw id checking.
    -g flash all : disable repartition.
    -C flash all : disable CRC_<partition>.

    If your machine is the CN version, and you want to flash into the WW Firmware, but don’t want to unlock the BootLoader, you can use WinHex to open the persist.img you just backed up,

    find COUNTRY, change CN to WW and save it, and you can directly restore it to your phone through the dd command Inside, there is no need to unlock or install magisk.

    Double click to open"Open-Cmd.bat",Then enter the commands one by one

    adb push persist.img /sdcard/

    adb shell

    su

    dd if=/sdcard/persist.img of=/dev/block/bootdevice/by-name/persist

    Then enter the fastboot mode, open the WW folder-open "flash_raw_and_wipe_data.cmd" to flash the WW firmware.

    File Downlaod Link:https://drive.google.com/file/d/1SyvQTp4lNw9-54k12EPOooQjdvSuCLyk/view?usp=sharing
    YouTube:

    I have also studied Hardwaresub Services for a long time, ROG1/ROG2/ROG3 only need to modify COUNTRY, CN to WW, and then flash into the global version,

    there will be no such prompt. In addition to modifying COUNTRY, ROG 5 also needs to modify asuskey4.

    In this partition, clear the imei, then there is no prompt. But I can’t do anything with ROG 5S.

    This machine verifies modemst1 and modemst2. I tried it for a long time, but I couldn’t get rid of the prompt except for the whitelist.

    If your ROG3/ROG5/ROG5S is the CN version, but you have flashed the WW firmware, you cannot unlock the Bootloader, or you are prompted to unlock successfully, but the Bootloader is still not unlocked after restarting, you can write the correct SSN and ISN of the phone Go to asuskey4, then restore to the phone partition, and then use the official unlocking tool to unlock it.
    2
    Nice job putting together what james(whatever) abused the community to accomplish and never cared enough to document for anyone else.

    Might want to change the label to "How to Guide" instead of "Question" (contrary to most that label a question as a guide) and consider rewording the title a bit, though. It reads "convert your phone if you are stuck in EDL", but "restore from EDL or convert without unlocking bootloader" is what you explain and that's a much larger audience.
    2
    Is it possible to unlock a locked bootloader using EDL? I have a tencent version already with ww installed and bootloader locked. The unlock app does not work obviously but I can access EDL mode, would it be possible to unlock it somehow?
    If your ROG3/ROG5/ROG5S is the CN version, but you have flashed the WW firmware, you cannot unlock the Bootloader, or you are prompted to unlock successfully, but the Bootloader is still not unlocked after restarting, you can write the correct SSN and ISN of the phone Go to asuskey4, then restore to the phone partition, and then use the official unlocking tool to unlock it.Unable to unlock in edl mode.
    1
    @johnny886 tnx for ur complete tutorial
    can u make tutorial video with phone for convert to ww. im noob about asus and many user want convert but worried about brick phone or lose fingerprint and imei
    and after convert we able manual update phone ?
    IMEI and Fingerprint work with no error, afterall you have to update manually(copy new FW to your root storage) , OTA will not work. His instruction very clear even for newbie . just need to read carefully
    1
    i know
    cz in my region i can't find asus service center i worried i do some mistake and my phone get brick or something like that
    Then i think you should stop right here . In his video about 5s also very clear. 5 is the same