How To Guide Unlock Bootloader without proper unlock file - Xiaoxin Pad Pro 2021 [TB-J716F]

Search This thread

solopsd

New member
Jul 15, 2014
3
0
Hi, I'm trying to do this on the TB128UF but I don't get the fpinfo, any solution? Thank you.
Captura de pantalla_20221130_111242.png
 

Philipe.ost

New member
Dec 5, 2022
4
2
Hello. In the screenshot I changed the "ssd" file to "fpinfo" by mistake. I did the process and reset the original rom, the tablet is unlocked but does not start, I believe that because of this changed file, it is in a looping.

Could someone generate the ssd file in ".bin" so that I can perform the replacement on the partition?

Captura de tela 2022-12-05 003645.png
 
  • Like
Reactions: f1tm0t

Philipe.ost

New member
Dec 5, 2022
4
2
I managed to replace the file and reinstall the system. Tried ZUI 12 and ZUI 13 selecting "Reset State Machine" in FireHose Configuration, giving same error and looping on startup showing "lenovo".

In the QFIL application it gives an error "Get Partition Files Failed:MetaCli not found !!!".

metacli22.jpg


In the system, it even enters Android Recovery, but when selecting the factory reset, it returns to the same screen.

IMG_20221206_005947.jpg
 
Last edited:
  • Like
Reactions: brunoafranca97

juyran

Member
Dec 7, 2011
11
2
Hello fellow friend,

"Corrupted device" NO LONGER
This guide is targetted at those who like me, locked their bootloader and got the message : "corrupted device blabla"
And are desperate as Lenovo doesn't answer when we ask for the unlock file via the ZUI unlock website.

Well, it is possible to change your serial number temporarily to unlock your bootloader with a known file for this serial. And this how you do it ->

1. Go into EDL mode (hold down volume up and connect to PC)
2. Launch QFIL, go to Tools -> Partition Manager (make sure you have selected the correct programmer prog_firehose_ddr.elf from the Chinese ROM)
3. Right click on the partition "fpinfo" -> Manage Partition
4. Click read data
5. Backup the data (it contains your serial number), you can find it in : AppData\Roaming\Qualcomm\QFIL\"your folder" mine is COMPORT_3 (the file contains the start adress of the partition : 0x2208)
6. Open a copy with an hex editor like HxD and modify your SN to HAHAHAHA (make sure your file is the same size as the original)
7. Back to QFIL : Load the modified file to the partition
8. Right click on the partition "frp" -> Manage Partition
9. Backup the data (file 0x2188)
10.
Open a copy and change the last byte from 00 to 01
11. Back to QFIL : Load the modified file to the partition
12. Download sn.img for HAHAHAHA from here
13. Boot your tablet into bootloader mode (check the new SN)
14. fastboot flash unlock sn.img
15. fastboot oem unlock-go

16. CELEBRATE because your bootloader is unlocked !
17. Back to QFIL : inject back your serial number backup in partition "fpinfo"
18. You can go back where you left -> Flash the Stock Chinese ROM
Thank you so much. My device is alive again.
In order to lock the bootloader again without trouble, do I have to change back my sn and do I have to change back that last byte to 0 again?
 

Lehile

Member
Dec 9, 2022
7
11
Hi guys!

FIrst of all, when the XiaoXin Pad arrived to me, I saw on app DRM info that widevine is L3 and global rom... I changed de system to CN version (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and widevine still was L3, so I have locked the tablet and it semi bricked the tablet. So after hours trying to return to normal, I unlocked the tablet again and QFIL the CN ROM again (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and updated the CN ROM to latest version.

01. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617
02. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.476_ST_220805

You can download the updates here.

After it, I locked the tablet and the system is runnning normally and widevine L1 is there, everything alright. Thanks guys.
 
  • Like
Reactions: huracancun

wb1029

New member
Dec 5, 2022
3
1
Hi guys!

FIrst of all, when the XiaoXin Pad arrived to me, I saw on app DRM info that widevine is L3 and global rom... I changed de system to CN version (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and widevine still was L3, so I have locked the tablet and it semi bricked the tablet. So after hours trying to return to normal, I unlocked the tablet again and QFIL the CN ROM again (TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst ) and updated the CN ROM to latest version.

01. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617
02. TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.395_ST_220617_to_TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.476_ST_220805

You can download the updates here.

After it, I locked the tablet and the system is runnning normally and widevine L1 is there, everything alright. Thanks guys.
cn rom zui is your current version 395?
I've uploaded and locked zui 13.5.476 but it's widevine l3
 

denismota

Member
Apr 23, 2011
9
0
Please help me, when I try to follow these steps mine gives the error of the photo, I don't have the option to click with the right mouse button, I don't know what else to do.

sorry about my English
20221217_093721.jpg
20221217_093730.jpg
20221217_093743.jpg
 

denismota

Member
Apr 23, 2011
9
0
Olá colega amigo,

" Dispositivo corrompido " NÃO MAIS
Este guia é direcionado para aqueles que, como eu, bloquearam o bootloader e receberam a mensagem: "dispositivo corrompido blabla"
E estão desesperados porque a Lenovo não responde quando pedimos o arquivo de desbloqueio pelo site de desbloqueio ZUI.

Bem, é possível alterar seu número de série temporariamente para desbloquear seu bootloader com um arquivo conhecido para este serial. E é assim que você faz ->

1. Entre no modo EDL (mantenha o volume para cima e conecte ao PC)
2. Inicie o QFIL, vá para Ferramentas -> Gerenciador de partições (certifique-se de ter selecionado o programador correto prog_firehose_ddr.elf da ROM chinesa)
3. Clique com o botão direito do mouse na partição " fpinfo " -> Gerenciar partição
4. Clique em ler dados
5. Faça backup dos dados (ele contém seu número de série), você pode encontrá-lo em: AppData\Roaming\Qualcomm\QFIL\"sua pasta" a minha é COMPORT_3 (o arquivo contém o endereço inicial da partição: 0x2208 )
6. Abra uma cópia com um editor hexadecimal como HxD e modifique seu SN para HAHAHAHA (certifique-se de que seu arquivo tenha o mesmo tamanho do original)
7. De volta ao QFIL: Carregue o arquivo modificado na partição
8. Clique com o botão direito na partição " frp " -> Gerenciar partição
9. Faça backup dos dados (arquivo 0x2188)
10.
Abra uma cópia e altere o último byte de 00 para 01
11. De volta ao QFIL: Carregue o arquivo modificado na partição
12. Baixe sn.img para HAHAHAHA daqui _
13. Inicialize seu tablet no modo bootloader (verifique o novo SN)
14. desbloqueio do flash de inicialização rápida sn.img
15. fastboot OEM unlock-go

16. COMEMORE porque seu bootloader está desbloqueado!
17. De volta ao QFIL: injetar de volta o backup do número de série na partição " fpinfo "
18. Você pode voltar de onde parou -> Flash the Stock Chinese ROM

se puder gravar um video ajudaria a todos que estao com dificuldades, obrigado.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    hi, I wonder if the same sn.img for HAHAHAHA works for Legion Y700 (TB-9707f) ???

    I went ahead and try it without waiting for answer. Confirming this works perfectly and returned my Y700 back to normal without waiting cheesy LENOVO support for sending correct sn.img for my device.
  • 23
    Hello fellow friend,

    "Corrupted device" NO LONGER
    This guide is targetted at those who like me, locked their bootloader and got the message : "corrupted device blabla"
    And are desperate as Lenovo doesn't answer when we ask for the unlock file via the ZUI unlock website.

    Well, it is possible to change your serial number temporarily to unlock your bootloader with a known file for this serial. And this how you do it ->

    1. Go into EDL mode (hold down volume up and connect to PC)
    2. Launch QFIL, go to Tools -> Partition Manager (make sure you have selected the correct programmer prog_firehose_ddr.elf from the Chinese ROM)
    3. Right click on the partition "fpinfo" -> Manage Partition
    4. Click read data
    5. Backup the data (it contains your serial number), you can find it in : AppData\Roaming\Qualcomm\QFIL\"your folder" mine is COMPORT_3 (the file contains the start adress of the partition : 0x2208)
    6. Open a copy with an hex editor like HxD and modify your SN to HAHAHAHA (make sure your file is the same size as the original)
    7. Back to QFIL : Load the modified file to the partition
    8. Right click on the partition "frp" -> Manage Partition
    9. Backup the data (file 0x2188)
    10.
    Open a copy and change the last byte from 00 to 01
    11. Back to QFIL : Load the modified file to the partition
    12. Download sn.img for HAHAHAHA from here
    13. Boot your tablet into bootloader mode (check the new SN)
    14. fastboot flash unlock sn.img
    15. fastboot oem unlock-go

    16. CELEBRATE because your bootloader is unlocked !
    17. Back to QFIL : inject back your serial number backup in partition "fpinfo"
    18. You can go back where you left -> Flash the Stock Chinese ROM
    3
    Bạn nên tắt thiết bị của mình sau đó nhấn nút tăng âm lượng và kết nối USB với máy tính, sau đó bạn chạy fastboot comand để mở khóa, sau đó bạn ngắt kết nối và bật thiết bị lên, bạn sẽ thấy bootloader được mở key, sau đó bạn tải rom tiếng Trung và tải lại các tập tin bạn đã sao lưu
    Bạn nên tắt thiết bị của mình sau đó nhấn nút tăng âm lượng và kết nối USB với máy tính, sau đó bạn chạy fastboot comand để mở khóa, sau đó bạn ngắt kết nối và bật thiết bị lên, bạn sẽ thấy bootloader được mở key, sau đó bạn tải rom tiếng Trung và tải lại các tập tin bạn đã sao lưu
    to
    Bạn nên tắt thiết bị của mình sau đó nhấn nút tăng âm lượng và kết nối USB với máy tính, sau đó bạn chạy fastboot comand để mở khóa, sau đó bạn ngắt kết nối và bật thiết bị lên, bạn sẽ thấy bootloader được mở khóa , sau đó bạn tải rom tiếng Trung và tải lại các tập tin bạn đã sao lưu
    Bạn nên tắt thiết bị của mình sau đó nhấn nút tăng âm lượng và kết nối USB với máy tính, sau đó bạn chạy fastboot comand để mở khóa, sau đó bạn ngắt kết nối và bật thiết bị lên bạn sẽ thấy bootloader được mở khóa, sau đó bạn tải rom tiếng Trung và tải lại các tập tin bạn đã sao lưu
    I have succeeded thank you very much for your kind help. Dear friend
    2
    I have succeeded thank you very much for your kind help. Dear friend
    You're welcome !
    2
    Had an error here. Need some help.
    Tablet P11 Pro 2021 now is just in black screen, like in EDL Mode, if I try to access or download anything via QFIL I got MetaCli Not Found and Download Fail:Sahara Fail:QSaharaServer Fail:process fail

    QFIL still recognizes, but ADB can't list to reboot EDL, any thought
    Looks like your device is is EDL mode, disconnect all the cables hold power until you see the screen
    2
    View attachment 5704955
    Al intentar bloquear el bootloader se me borra todo el sistema y solo me sale esa pantalla, hay alguna forma de solucionarlo o es hora de ir a llorar debajo de la cama?
    You only need to lock after you updated your system to ZUI 13.1.560 (search the forum for the files), else it will "semi-brick" your device.
    Follow my guide to unlock back your device.