How To Guide Unlock Bootloader without proper unlock file - Xiaoxin Pad Pro 2021 [TB-J716F]

[bernardo.castro1]

Hi,

In the step "17. Back to QFIL : inject back your serial number backup in partition "fpinfo"" I just need to load the original fpinfo? Is it necessary to load the original frp too or not?

 

[solopsd]

Hi, I'm trying to do this on the TB128UF but I don't get the fpinfo, any solution? Thank you.

 

[huracancun]

I block the bootloader and im in a loop, I try to connect with the ADB and not recognizes it and the only thing that i know to do its load the sn.img, but the page is down, what i can do? Can I edit other sn?
My sn is HA1HJC10
http://cdn.zui.lenovomm.com/developer/tabletboot/[your sn number]/sn.img

 

[f1tm0t]

My sn is HA1HJC10

Your case is described in first post.

 

[Philipe.ost]

Hello. In the screenshot I changed the "ssd" file to "fpinfo" by mistake. I did the process and reset the original rom, the tablet is unlocked but does not start, I believe that because of this changed file, it is in a looping.

Could someone generate the ssd file in ".bin" so that I can perform the replacement on the partition?

 

[f1tm0t]

generate the ssd file

What version of FW? Must be no matter, mine is from 14.0.127 ZUI

 

[Philipe.ost]

I couldn't replace the file because I can't access it anymore. It now displays this message.

 

[Philipe.ost]

I couldn't replace the file because I can't access it anymore. It now displays this message.

View attachment 5777735

The tablet starts in fastboot mode and showing unlocked status.

 

[f1tm0t]

Toggle radio button on Meta Build, choose needed files; after go to Menu -- Part Manager.

 

[Philipe.ost]

I managed to replace the file and reinstall the system. Tried ZUI 12 and ZUI 13 selecting "Reset State Machine" in FireHose Configuration, giving same error and looping on startup showing "lenovo".

In the QFIL application it gives an error "Get Partition Files Failed:MetaCli not found !!!".

In the system, it even enters Android Recovery, but when selecting the factory reset, it returns to the same screen.

 

[f1tm0t]

"Get Partition Files Failed:MetaCli not found !!!"

On my experience and mind it is PC/windows error, not tablet. Google it for solution.

 

[juyran]

Hello fellow friend,

"Corrupted device" NO LONGER
This guide is targetted at those who like me, locked their bootloader and got the message : "corrupted device blabla"
And are desperate as Lenovo doesn't answer when we ask for the unlock file via the ZUI unlock website.

Well, it is possible to change your serial number temporarily to unlock your bootloader with a known file for this serial. And this how you do it ->

1. Go into EDL mode (hold down volume up and connect to PC)
2. Launch QFIL, go to Tools -> Partition Manager (make sure you have selected the correct programmer prog_firehose_ddr.elf from the Chinese ROM)
3. Right click on the partition "fpinfo" -> Manage Partition
4. Click read data
5. Backup the data (it contains your serial number), you can find it in : AppData\Roaming\Qualcomm\QFIL\"your folder" mine is COMPORT_3 (the file contains the start adress of the partition : 0x2208)
6. Open a copy with an hex editor like HxD and modify your SN to HAHAHAHA (make sure your file is the same size as the original)
7. Back to QFIL : Load the modified file to the partition
8. Right click on the partition "frp" -> Manage Partition
9. Backup the data (file 0x2188)
10. Open a copy and change the last byte from 00 to 01
11. Back to QFIL : Load the modified file to the partition
12. Download sn.img for HAHAHAHA from here
13. Boot your tablet into bootloader mode (check the new SN)
14. fastboot flash unlock sn.img
15. fastboot oem unlock-go

16. CELEBRATE because your bootloader is unlocked !
17. Back to QFIL : inject back your serial number backup in partition "fpinfo"
18. You can go back where you left -> Flash the Stock Chinese ROM

Thank you so much. My device is alive again.
In order to lock the bootloader again without trouble, do I have to change back my sn and do I have to change back that last byte to 0 again?

 

[turbo30001]

You only need to lock after you updated your system to ZUI 13.1.560 (search the forum for the files), else it will "semi-brick" your device.
Follow my guide to unlock back your device.

Can you do a video to avoid inadvertant mistakes?

 

[Lehile]

Hi guys!

FIrst of all, when the XiaoXin Pad arrived to me, I saw on app DRM info that widevine is L3 and global rom... I changed de system to CN version (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and widevine still was L3, so I have locked the tablet and it semi bricked the tablet. So after hours trying to return to normal, I unlocked the tablet again and QFIL the CN ROM again (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and updated the CN ROM to latest version.

01. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617
02. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.476_ST_220805

You can download the updates here.

After it, I locked the tablet and the system is runnning normally and widevine L1 is there, everything alright. Thanks guys.

 

[dr.math]

I want to download TB128FU_S000020_220309_ROW
But I didn't find it anywhere

 

[wb1029]

Hi guys!

FIrst of all, when the XiaoXin Pad arrived to me, I saw on app DRM info that widevine is L3 and global rom... I changed de system to CN version (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and widevine still was L3, so I have locked the tablet and it semi bricked the tablet. So after hours trying to return to normal, I unlocked the tablet again and QFIL the CN ROM again (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and updated the CN ROM to latest version.

01. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617
02. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.476_ST_220805

You can download the updates here.

After it, I locked the tablet and the system is runnning normally and widevine L1 is there, everything alright. Thanks guys.

cn rom zui is your current version 395?
I've uploaded and locked zui 13.5.476 but it's widevine l3

 

[denismota]

Please help me, when I try to follow these steps mine gives the error of the photo, I don't have the option to click with the right mouse button, I don't know what else to do.

sorry about my English

 

[denismota]

Olá colega amigo,

" Dispositivo corrompido " NÃO MAIS
Este guia é direcionado para aqueles que, como eu, bloquearam o bootloader e receberam a mensagem: "dispositivo corrompido blabla"
E estão desesperados porque a Lenovo não responde quando pedimos o arquivo de desbloqueio pelo site de desbloqueio ZUI.

Bem, é possível alterar seu número de série temporariamente para desbloquear seu bootloader com um arquivo conhecido para este serial. E é assim que você faz ->

1. Entre no modo EDL (mantenha o volume para cima e conecte ao PC)
2. Inicie o QFIL, vá para Ferramentas -> Gerenciador de partições (certifique-se de ter selecionado o programador correto prog_firehose_ddr.elf da ROM chinesa)
3. Clique com o botão direito do mouse na partição " fpinfo " -> Gerenciar partição
4. Clique em ler dados
5. Faça backup dos dados (ele contém seu número de série), você pode encontrá-lo em: AppData\Roaming\Qualcomm\QFIL\"sua pasta" a minha é COMPORT_3 (o arquivo contém o endereço inicial da partição: 0x2208 )
6. Abra uma cópia com um editor hexadecimal como HxD e modifique seu SN para HAHAHAHA (certifique-se de que seu arquivo tenha o mesmo tamanho do original)
7. De volta ao QFIL: Carregue o arquivo modificado na partição
8. Clique com o botão direito na partição " frp " -> Gerenciar partição
9. Faça backup dos dados (arquivo 0x2188)
10. Abra uma cópia e altere o último byte de 00 para 01
11. De volta ao QFIL: Carregue o arquivo modificado na partição
12. Baixe sn.img para HAHAHAHA daqui _
13. Inicialize seu tablet no modo bootloader (verifique o novo SN)
14. desbloqueio do flash de inicialização rápida sn.img
15. fastboot OEM unlock-go

16. COMEMORE porque seu bootloader está desbloqueado!
17. De volta ao QFIL: injetar de volta o backup do número de série na partição " fpinfo "
18. Você pode voltar de onde parou -> Flash the Stock Chinese ROM

se puder gravar um video ajudaria a todos que estao com dificuldades, obrigado.

 

[Gabrielbonelle]

se puder gravar um video ajudaria a todos que estao com dificuldades, obrigado.

Do you speak Portuguese? I can help you.

 

[denismota]

Você fala português? Posso te ajudar.

sim eu falo portugues, e sua ajuda será muito bem vinda, já não sei mais o que fazer