Question [TB138FC-SD870] XiaoXin Pad Pro 2022 Sharing and support

[ZhenMing]

I understood, then I'll wait, next week my tablet should arrive, I'll unlock the bootloader myself and try to pull boot out of it, I hope it has access to fatboot, then I'll execute the commands adb reboot bootloader, fastboot flashing unlock and then fastboot reboot, something like this

Do write a guide for us, please. This will help us in the future. I could post that as a link in 1st page as a knowledge base for everyone.

Thank you once again.

 

[BlackVictor]

Do write a guide for us, please. This will help us in the future. I could post that as a link in 1st page as a knowledge base for everyone.

Thank you once again.

Well, as soon as I get a tablet and check everything, I'll write here about the results

 

[B.G.A.A.]

So, technically there's no community-approved method by far to flash Chinese ROM to Global ver. for Snapdragon 870?

I found on other thread, matched firmware under title Xiaoxin pro 2022 was not for SD 870 (TB-138FC) but Mediatek Kompanio 1300T (TB-132FU).

 

[ZhenMing]

So, technically there's no community-approved method by far to flash Chinese ROM to Global ver. for Snapdragon 870?

I found on other thread, matched firmware under title Xiaoxin pro 2022 was not for SD 870 (TB-138FC) but Mediatek Kompanio 1300T (TB-132FU).

So far, No.

It is NOT advisable to flash 1300T ROM to SD870 DEVICE.

 

[BlackVictor]

Well, as soon as I get a tablet and check everything, I'll write here about the results

So I got my tablet, then unlocked the bootloader, pulled out the OTA update TB138FC_CN_OPEN_USER_Q00024.0_S_ZUI_14.0.625_ST_220901_to_TB138FC_CN_OPEN_USER_Q00024.0_S_ZUI_14.0.820_ST_230117 but I can't unpack the payload.bin because it's incremental

 

[ZhenMing]

So I got my tablet, then unlocked the bootloader, pulled out the OTA update TB138FC_CN_OPEN_USER_Q00024.0_S_ZUI_14.0.625_ST_220901_to_TB138FC_CN_OPEN_USER_Q00024.0_S_ZUI_14.0.820_ST_230117 but I can't unpack the payload.bin because it's incremental

Yes. That is incremental. Only the ZUI13 to ZUI14 will have the entire ROM with necessary files. We might need to wait for ZUI14->ZUI15 firmware.

 

[BlackVictor]

Yes. That is incremental. Only the ZUI13 to ZUI14 will have the entire ROM with necessary files. We might need to wait for ZUI14->ZUI15 firmware.

I naively believed that with an unlocked bootloader it would help to get a full update, as happens on onelpus, but this did not happen. By the way, I was able to unpack the OTA using Payload Dumper Gui v2.3, but the contents were not complete boot.img has a size of 4.2 MB, and system.img is 355.9 MB
The partition structure in our tablet is A/B. Therefore, for a backup of the boot partition, it will look like this:
dd if=/dev/block/bootdevice/by-name/boot_a of=/sdcard/boot_a.img
dd if=/dev/block/bootdevice/by-name/boot_b of=/sdcard/boot_b.img
however at the moment there are not enough rights to perform this action

 

[BlackVictor]

I was finally able to get Root access from Magisk on our tablet ZUI 14

Magisk patched boot.img for firmware 14.0.820​

Below I will write instructions on how to get it yourself

 

[BlackVictor]

Instructions for getting root TB138FC runing ZUI 14

Read carefully:​

All actions below are at your own risk. I did this and above posted Magisk patched boot.img for firmware 14.0.820.​

UNLOCKING THE BOOTLOADER:
* This will delete all you data

Step 1: Go to SETTINGS Menu and click multiple times on your ZUI version. This will give you Developer access.
Step 2: Go General Settings menu > Developer options
Step 3: Click to enable OEM unlocking, also enable debugging mode.
Step 4: Download platform-tools_r34.0.1-windows to your computer, you may also need usb_driver_r13-windows, unpack everything in a convenient place for you
Step 5: Go to the platform-tools folder and run the command prompt by writing CMD in the folder header and press Enter
Step 6: Connect your USB cable and run the following command:

adb reboot bootloader

Step 7: Run the following command:

fastboot flashing unlock

On your tablet Click volume UP to unlock your bootloader
Wait for the confirmation on the tablet screen

Step 8: Run command:

fastboot reboot

GETTING ROOT ACCESS:
Put your Qualcomm device in 9008 mode
* You may need a qualcomm usb driver for 9008 mode to work properly

Step 1: Turn off the power, then hold Volume UP and insert the USB cable connected to the PC into the tablet
Step 2: Use the EMMCDL_GUI tool to dump partitions boot_a and boot_b

In the program, select the brand Lenovo, model TB-J716F and download the file 29-11-2022_19-32-13_prog_firehose_ddr.elf
Then you need to select the physical partition number 4, select the UFS memory type, and click get GPT partition table
In the list, select the boot_a and boot_b sections and click read from device in the context menu
The resulting partition dumps will be located at \EMMCDL_GUI_1.5\Temp
Disconnect the tablet from the PC, hold volume DOWN and power button for ~10 seconds until you feel the vibration

Step 3: When the tablet boots into the system, enable USB debugging via ADB in the developer settings

Go to the folder with platform tools and start the command line by writing CMD in the folder header

Enter the command to determine the effective slot:

adb shell getprop | grep slot

If you see ro.boot.slot_suffix=_b, then the system is running on slot b. If ro.boot.slot_suffix=_a then slot a
Install the latest version of MAGISK manager app on your tablet
Copy the current boot_*.bin to your tablet (Instead of an * , select your version received by the grep slot command)
Open MAGISK and click Select and patch a file. Find the boot_*.bin you copied and patch this file. Wait for the process to be completed
Copy Magisk patched boot from the Download folder on your device to the platform-tools folder on your PC, then rename it to boot.img

In the command line window on the computer, enter the command:

adb reboot bootloader

When the tablet boots into fastboot mode, enter the command:

fastboot flash boot boot.img

Wait for it to complete then:

fastboot reboot

Done, your tablet is now rooted

 

[theblackcat00]

Instructions for getting root TB138FC runing ZUI 14

Read carefully:​

All actions below are at your own risk. I did this and above posted Magisk patched boot.img for firmware 14.0.820.​

UNLOCKING THE BOOTLOADER:
* This will delete all you data

[ . . . ]

Wait for it to complete then:

Done, your tablet is now rooted

Awesome guide @BlackVictor , I rewrote it on Rentry to make it a little more clear and better visuals.

TB138FC Root Guide

Instructions for getting root on Lenovo TB138FC running ZUI 14 Read carefully: This will delete all of your data!! All actions listed below are at your own risk. I did this and above posted the Magisk patched boot.img for firmware 14.0.820. UNLOCKING THE BOOTLOADER: This will delete all you dat...

rentry.org

PM me if you need to edit

 

[BlackVictor]

I rewrote it on Rentry

As you like, but I think xda and 4pda are the best tech forums that everyone knows about

 

[BlackVictor]

So people now we have the ability to make copies of anything from our tablet thanks to EMMCDL_GUI and there is root, we need someone to build TWRP for our TB138FC

 

[Sparta321]

Hello thread author and everyone might reading my comment, I really need your help and support for my lenovo pad with the codename for SD870 is TB138FC.
Actually I really need the original Chinese fw, because my device just suddently stuck and all systems were lagging, in the end its turn off on its own.
Now, everytime I try to boot to system, it just loads on the lenovo loading screen (not showing any animation, and just stuck there).
Now even worse that it just not show anything on screen, just vibration as a response (hardbrick?)
Before, I did format factory/reset data through recovery mode. But its still occurrs the same issue (stuck loading on lenovo bootlogo).

One thing I would like to mention, is that my BL still in locked mode (I have not done any UBL)

Could anyone please help me, because this device just came 2 days ago and I wish not to send it back to China (takes time and money too).
Thank you for your kindness..

 

[ZhenMing]

Instructions for getting root TB138FC runing ZUI 14

Read carefully:​

All actions below are at your own risk. I did this and above posted Magisk patched boot.img for firmware 14.0.820.​

UNLOCKING THE BOOTLOADER:
* This will delete all you data

Step 1: Go to SETTINGS Menu and click multiple times on your ZUI version. This will give you Developer access.
Step 2: Go General Settings menu > Developer options
Step 3: Click to enable OEM unlocking, also enable debugging mode.
Step 4: Download platform-tools_r34.0.1-windows to your computer, you may also need usb_driver_r13-windows, unpack everything in a convenient place for you
Step 5: Go to the platform-tools folder and run the command prompt by writing CMD in the folder header and press Enter
Step 6: Connect your USB cable and run the following command:


Step 7: Run the following command:


On your tablet Click volume UP to unlock your bootloader
Wait for the confirmation on the tablet screen

Step 8: Run command:


GETTING ROOT ACCESS:
Put your Qualcomm device in 9008 mode
* You may need a qualcomm usb driver for 9008 mode to work properly

Step 1: Turn off the power, then hold Volume UP and insert the USB cable connected to the PC into the tablet
Step 2: Use the EMMCDL_GUI tool to dump partitions boot_a and boot_b

In the program, select the brand Lenovo, model TB-J716F and download the file 29-11-2022_19-32-13_prog_firehose_ddr.elf
Then you need to select the physical partition number 4, select the UFS memory type, and click get GPT partition table
In the list, select the boot_a and boot_b sections and click read from device in the context menu
The resulting partition dumps will be located at \EMMCDL_GUI_1.5\Temp
Disconnect the tablet from the PC, hold volume DOWN and power button for ~10 seconds until you feel the vibration

Step 3: When the tablet boots into the system, enable USB debugging via ADB in the developer settings

Go to the folder with platform tools and start the command line by writing CMD in the folder header

Enter the command to determine the effective slot:

If you see ro.boot.slot_suffix=_b, then the system is running on slot b. If ro.boot.slot_suffix=_a then slot a
Install the latest version of MAGISK manager app on your tablet
Copy the current boot_*.bin to your tablet (Instead of an * , select your version received by the grep slot command)
Open MAGISK and click Select and patch a file. Find the boot_*.bin you copied and patch this file. Wait for the process to be completed
Copy Magisk patched boot from the Download folder on your device to the platform-tools folder on your PC, then rename it to boot.img

In the command line window on the computer, enter the command:


When the tablet boots into fastboot mode, enter the command:


Wait for it to complete then:

Done, your tablet is now rooted

Thank you for your dedication to write this article for us. Appreciate a lot on your work.

Could I request to load Windows 10/11 ARM image to our beloved TB138FC?

 

[BlackVictor]

Thank you for your dedication to write this article for us. Appreciate a lot on your work.

Could I request to load Windows 10/11 ARM image to our beloved TB138FC?

Theoretically, this is possible if you follow the instructions of Xiaomi Mi Pad 5 from the Renegade Project, but I see no reason to look in this direction. The main thing is to make a backup copy of all partitions, or wait for the full firmware image

 

[ataman76]

Hello thread author and everyone might reading my comment, I really need your help and support for my lenovo pad with the codename for SD870 is TB138FC.
Actually I really need the original Chinese fw, because my device just suddently stuck and all systems were lagging, in the end its turn off on its own.
Now, everytime I try to boot to system, it just loads on the lenovo loading screen (not showing any animation, and just stuck there).
Now even worse that it just not show anything on screen, just vibration as a response (hardbrick?)
Before, I did format factory/reset data through recovery mode. But its still occurrs the same issue (stuck loading on lenovo bootlogo).

One thing I would like to mention, is that my BL still in locked mode (I have not done any UBL)

Could anyone please help me, because this device just came 2 days ago and I wish not to send it back to China (takes time and money too).
Thank you for your kindness..

I have the same.

 

[BlackVictor]

Now, everytime I try to boot to system, it just loads on the lenovo loading screen (not showing any animation, and just stuck there).

Boot into bootloader mode, connect the tablet to the PC, and use platform-tools to try to enter the command:

fastboot set_active a

Then try rebooting, if the command didn't work, type

fastboot set_active b

Devices with an A/B partition structure are difficult to kill, how did this happen to you?

 

[Sparta321]

Boot into bootloader mode, connect the tablet to the PC, and use platform-tools to try to enter the command:

Then try rebooting, if the command didn't work, type

Devices with an A/B partition structure are difficult to kill, how did this happen to you?

As I said, that the tablet suddenly becomes lagging and suddenly the screen freeze. I let it sit for a while but then it turned off. After that, everytime I try to boot into system, it just not display anything.
Now the device in hardbrick mode. It wont even vibrate anymore.
I also contact the store to return for warranty.

 

[BlackVictor]

I also contact the store to return for warranty.

If it is possible to return to the store, then it is better to do so, but in general any partition on the tablet can be restored using the EMMCDL_GUI program in Qualcomm 9008 mode

 

[Sparta321]

If it is possible to return to the store, then it is better to do so, but in general any partition on the tablet can be restored using the EMMCDL_GUI program in Qualcomm 9008 mode

Yes, I did research on that method. But isn't it will require original firmware to do so? Using QFIL right?
*Anyway thankyou for replying on my case, really appreciate it