Develop Bugs

FLOCK - unlocking/unfreezing S8500/S8530 for free could not be any easier!

This is the solution for unlocking Wave phones.​Big thanks goes to mijoma.
All you do and enter into your phone you do at your own risk. Nobody else but you take whole responsibility for what happens to your phone!
Remember than flashing of phone is a little risky, however if performed properly, risk of damaging anything is very low.
If your phone locked-up all of the sudden - be sure to read this thread aswell: http://forum.xda-developers.com/showthread.php?t=1787648
Most of bada 1.2 and 2.0 final-release (not ones from beta releases) bootloaders should be supported.
You need some knowledge about flashing.
How to check what lock do you have?
Enter *#7465625# code, you will see list of active and inactive locks.
What do you need?
Wave 1 or 2 phone with bada 1.2 or 2.0
For Wave I with bada 1.2 - FLOCK_S8500_b1.2
For Wave I with bada 2.0 - FLOCK_S8500_b2x
For Wave II with bada 1.2 - FLOCK_S8530_b1.2
For Wave II with bada 2.0 - FLOCK_S8530_b2x
Flash the right FOTA file. Turn off the phone, wait few seconds, and then turn it on holding CALL (so you have to press CALL and ENDCALL, 2 keys) key until white screen with red texts shows up. Release keys.
Be patient, FOTA module is calculating 3 codes (Subset lock, Netlock, Unfreeze) for your phone, it can take up to 10 minutes. After you get the code you are interested in you can turn off the phone.
Write down the codes you need. Turn off the phone by holding power button for 15 seconds or taking off battery.
After obtaining code, do procedure below:
[Netlock], 2 ways:
1. Insert an unsupported SIM card, start phone and after being asked about "Network Lock" enter Unlock Code you had written down.
2. enter #7465625*638*Unlock code# <thanks to homelessghost for tip>
[Freeze]
1. Insert any SIM card, start phone and after being asked about "Freeze" make call and enter code you had written down.
[Subset]
Can anyone provide guide?
That's all - enjoy unlocked phone!
Troubleshooting:
Instead of white screen with red texts, usual booting logo appears and then Bada starts, what am I doing wrong?
Make sure you flashed right FLOCK without errors. If you did so, first - flash APPS from the same bada version, but from ROM that does contain .fota (certain APPS versions can have locked FOTA module), second - if it doesn't work - update your bootloader to some newer/another one and write post here containing information what version of bootloader (bootloader, not bada) you had before that was not working.
Important: Be very careful when writing down and entering unlock code.
If you got any other questions - please ask in this thread.
It is possible that some phones are not unlockable this method. Then the code wouldn't show up.
General method concept (if you are really interested in sources or way how it works - please PM me or mijoma) should work for most of "Samsung 3G" phones - like JET, Wave3, Monte. If you are owner of locked phone of this class and you are able to do dumps of memory - please contact with me.

Hi,
Thanks a lot for your job, you're my god
Here's my Hash: C7 2D C4 73 07 18 FA 2B 15 7E 29 07 3F BD 04 2E C7 4C 82 E6
Thanks

Thanks so much Rebellos! My phone has been network-locked since I got it and always unable to update with Kies, so I've been stuck on a May 2010 Bada 1.0 firmware forever. Looking forward to being able to flash it
Speaking of which, I've always read that you can't flash anything to a locked phone. Is flashing the bootloader and FOTA alright though? And will the bootloader be compatible with my firmware? It's S8500NEJE6/S8500H3GJ7.
If that is fine, then I'll send you my hash. Thanks so much for doing this!

Thanks a lot, Rebellos!
Here it is my hash code (I only have the network lock):
01 6C 99 C4 BF DC 57 72 B1 23 2E 0B 4C 71 C8 0E C7 DC 79 47
Thanks again!

Very interesting your project but there is a problem.
In Latin America can not change firmware and than through KIES .. we can not use the "Multiloader" because we have the code "SUBSET [ON]" and if we have the code that the [ON] and flash our phone freeze only makes our telephone and so we are unable to use your tutorial.
You know any way to change the code first "SUBSET" to [ON] [OFF] and by doing so Latin American users can use "Multiloader" how many times we want.
I hope your answer and relied heavily on his wisdom!
Already many thanks! Greetings from Argentina!

Phone can be flash-locked - then bootloader will deny any attempt of flashing, though I can't promise I haven't ommited some malicious procedure allowing something like bootloader upgrade but refusing firmware upgrade and refusing bootloader downgrade, causing kinda brick.
Is it a rule that phone flashing is locked always when its [ON] SUBSET Lock?
I will try to look into it.

HandzUp! said:
Hi,
Thanks a lot for your job, you're my god
Here's my Hash: C7 2D C4 73 07 18 FA 2B 15 7E 29 07 3F BD 04 2E C7 4C 82 E6
Thanks
Click to expand...
Click to collapse
25957353
Please let me know if it works.
homelessghost said:
Thanks a lot, Rebellos!
Here it is my hash code (I only have the network lock):
01 6C 99 C4 BF DC 57 72 B1 23 2E 0B 4C 71 C8 0E C7 DC 79 47
Thanks again!
Click to expand...
Click to collapse
code not found
Sorry, I'm looking for other ways of unlocking too.

Works Perfectly, my Wave S8500 is now Unlocked, THANKS A LOT !

Rebellos said:
Phone can be flash-locked - then bootloader will deny any attempt of flashing, though I can't promise I haven't ommited some malicious procedure allowing something like bootloader upgrade but refusing firmware upgrade and refusing bootloader downgrade, causing kinda brick.
Is it a rule that phone flashing is locked always when its [ON] SUBSET Lock?
I will try to look into it.
Click to expand...
Click to collapse
Does that mean it's safe for me to flash bootloader and FOTA if my phone is only network-locked?

dixter said:
Does that mean it's safe for me to flash bootloader and FOTA if my phone is only network-locked?
Click to expand...
Click to collapse
I won't bet my hand for that it is in all cases. But I'm pretty certain it is.

Rebellos said:
I won't bet my hand for that it is in all cases. But I'm pretty certain it is.
Click to expand...
Click to collapse
OK, thanks. Presumably there is no way to obtain the hash without flashing? I suppose it should be fine since those who have already given you hashes must have flashed their network locked phones with no problems.

In "theory" there AT Commands and/or Dev Commands... in combination with WinComm to see result.
Theory because not my business and I have no locked device for tests.
Anyway.
It is ever interesting, how many ways exists to disable Security.
@ Rebellos
Maybe you can teach me how to copy/find "SIMSecure" area in JTAG dump.
Then I could check if my theory is bull.shi.t.
Thanx.
My hints NOT for public... only for my little brain.
Best Regards

Ok, thanks anyway

If we who possess a Wave in Latin America we have all the [ON]. The only problem is the SUBSET flash. If we have the SUBSET in [ON] the phone freezes (unnfreeze mode) after using Multiloader.
It would be good to try to change the way SUBSET to pass it to [OFF] and so test any firmware.
Thank you very much for your response. I hope you find some solution for us because we feel like slaves and prisoners of samsung and has forgotten us regarding updates and all you have to do with the Wave.
Thank you very much! Greetings from Argentina!

dixter said:
OK, thanks. Presumably there is no way to obtain the hash without flashing? I suppose it should be fine since those who have already given you hashes must have flashed their network locked phones with no problems.
Click to expand...
Click to collapse
The hash is generated from IMEI somehow. But I don't know how yet. I flashed my networklocked wave like hundreds of times with no problems. Even updated it from 1.2 to 2.0 while it was still netlocked.
@adfree:
These data are encrypted with SEED algorithm using key generated from oneNAND serial number. Are you able to obtain it?
@elkpojlb
It needs some work but can be done. Though I'm out of time for next few weeks.

Well no problem friend .. long time and we hope some solution so that we do not do anything but wait a bit! Thank you very much and I hope they can do!
Greetings friend!

Rebellos said:
The hash is generated from IMEI somehow. But I don't know how yet. I flashed my networklocked wave like hundreds of times with no problems. Even updated it from 1.2 to 2.0 while it was still netlocked.
@adfree:
These data are encrypted with SEED algorithm using key generated from oneNAND serial number. Are you able to obtain it?
@elkpojlb
It needs some work but can be done. Though I'm out of time for next few weeks.
Click to expand...
Click to collapse
Wow, that's news to me, I've never flashed because I heard it'd brick a locked phone. Now the noob question, which checkboxes should I tick in Multiloader for just flashing bootfiles and FOTA? Boot Change, Full Download or nothing at all? Or does it require one flash for bootfiles and another flash for FOTA? Sorry - the next post from me should contain a hash!

homelessghost said:
Thanks a lot, Rebellos!
Here it is my hash code (I only have the network lock):
01 6C 99 C4 BF DC 57 72 B1 23 2E 0B 4C 71 C8 0E C7 DC 79 47
Thanks again!
Click to expand...
Click to collapse
03935173 - say kudos to mijoma, he found my mistake in code founder.
dixter said:
Wow, that's news to me, I've never flashed because I heard it'd brick a locked phone. Now the noob question, which checkboxes should I tick in Multiloader for just flashing bootfiles and FOTA? Boot Change, Full Download or nothing at all? Or does it require one flash for bootfiles and another flash for FOTA? Sorry - the next post from me should contain a hash!
Click to expand...
Click to collapse
Boot Change, then select directory with bootfiles and file with FOTA. Try to find some tutorial before you do it.

Czesc to mój Hash
A9 67 68 7D DC DB 43 BD 77 18 97 CA FD 09 A4 2E 33 17 44 5E

marcin205 said:
Czesc to mój Hash
A9 67 68 7D DC DB 43 BD 77 18 97 CA FD 09 A4 2E 33 17 44 5E
Click to expand...
Click to collapse
93819157
Cheers

Lg g4 - lastest version of lgup/dll file

FIX REFUBRISH/DOWNGRADE ETC STUCK AT 16% DOWNLOAD MODE UNABLE TO GET BACK TO STOCK
error 0x2000 invalid command response Has Been FixeD WITH THE LASTEST DLL FILE
FILE INCLUDE (DLL+PATCH_DLL+SETUP LGUP+DRIVER) package
Please Read The *READ ME FILE FOR THE RIGHT INSTALLATION WITHOUT GETTING ANY PROBLEM :
Link Easy To Download No Ads Bulllsh*t.................. :
https://drive.google.com/file/d/0B_yWw6RLoA-gdTMtZFczMUhQOHM/view?usp=sharing
Video To Patch *.dll file
https://www.youtube.com/watch?v=w4RSEholcuM

The video is deleted. Where can i Finf it

Abandoned War Place said:
FIX REFUBRISH/DOWNGRADE ETC STUCK AT 16% DOWNLOAD MODE UNABLE TO GET BACK TO STOCK
error 0x2000 invalid command response Has Been FixeD WITH THE LASTEST DLL FILE
FILE INCLUDE (DLL+PATCH_DLL+SETUP LGUP+DRIVER) package
Please Read The *READ ME FILE FOR THE RIGHT INSTALLATION WITHOUT GETTING ANY PROBLEM :
Link Easy To Download No Ads Bulllsh*t.................. :
https://drive.google.com/file/d/0B_yWw6RLoA-gdTMtZFczMUhQOHM/view?usp=sharing
Video To Patch *.dll file
https://www.youtube.com/watch?v=w4RSEholcuM
Click to expand...
Click to collapse
You Sir are the Hero of the night!
Thank you!!!!!

How do you patch the dll? Video not working

inso420 said:
How do you patch the dll? Video not working
Click to expand...
Click to collapse
Navigate to LGUP install directory (default C:\Program Files (x86)\LG Electronics\LGUP) and simply replace the 8994.dll in model\8994 directory.

Here is the version 0.4.3 from the F500 variant of the device.
It was the only one that worked for me on the v29 firmware.
LGUP_8994.dll

i still got this error error 0x2000 invalid

shahid001 said:
i still got this error error 0x2000 invalid
Click to expand...
Click to collapse
cause you need flash the v20p KDZ first, then you can flash any other KDZ.

the_naxhoo said:
cause you need flash the v20p KDZ first, then you can flash any other KDZ.
Click to expand...
Click to collapse
can you give me link pleasse

shahid001 said:
can you give me link pleasse
Click to expand...
Click to collapse
https://forum.xda-developers.com/showpost.php?p=73642302&postcount=4

I had wasted so much time and tried so many solutions before coming across your post!
This works perfectly.
Thank you so much !

the_naxhoo said:
https://forum.xda-developers.com/showpost.php?p=73642302&postcount=4
Click to expand...
Click to collapse
i have lg g4 f500l 30b will it work for it i want to downgrade to android 6 ?

thank you the naxhoo
the_naxhoo said:
https://forum.xda-developers.com/showpost.php?p=73642302&postcount=4
Click to expand...
Click to collapse
Thank you it worked for my G4 H815!! It was bricked since my upgrade to nougat and it was impossible to go back to stock ROM Marshmallow.. (error 0x2000 with LGUP) Do you know why it works with this kdz and not with others? It's the only M version allowed for downgrade?
You saved my week :good:

ur d best man. worked like a charm mate. Tnx

Acc request
Plz acc my request for the file because i really really need the file

need the file please accept request moular*** @gmail.com
---------- Post added at 11:48 AM ---------- Previous post was at 11:35 AM ----------
tulen_kobi said:
here is the version 0.4.3 from the f500 variant of the device.
It was the only one that worked for me on the v29 firmware.
lgup_8994.dll
Click to expand...
Click to collapse
thank you!!!! Fixed 0x2000 error on my nugot vs986 downgrading to mm !!!

thank you very much it works with VS986 2BA to 13B
tulen_kobi said:
Here is the version 0.4.3 from the F500 variant of the device.
It was the only one that worked for me on the v29 firmware.
LGUP_8994.dll"LGUP_8994.dll
Click to expand...
Click to collapse
Thank you very much it works with VS986 2BA to 13B.
LGUP always stops at 16% then gives me a "0x2000 error.invalid command response"
After replacing the DLL file that you provided. It works.

May it will work for H818p Nougat,,, because I'm searching it for many times
My Nougat H818p is in hanging condition when downgrading to MM , LL or flashing Nougat again at
PrimaryGPT 11% i think,,, so please experts solve my issues urgently

Thank you so much !!!
After a passage with the rom "H-ROM V30 PORT V2.2", I bricked my H815 under LG UP ... You save my phone !!!
Thank you so so much !!!

Abandoned War Place said:
FIX REFUBRISH/DOWNGRADE ETC STUCK AT 16% DOWNLOAD MODE UNABLE TO GET BACK TO STOCK
error 0x2000 invalid command response Has Been FixeD WITH THE LASTEST DLL FILE
FILE INCLUDE (DLL+PATCH_DLL+SETUP LGUP+DRIVER) package
Please Read The *READ ME FILE FOR THE RIGHT INSTALLATION WITHOUT GETTING ANY PROBLEM :
Link Easy To Download No Ads Bulllsh*t.................. :
https://drive.google.com/file/d/0B_yWw6RLoA-gdTMtZFczMUhQOHM/view?usp=sharing
Video To Patch *.dll file
Click to expand...
Click to collapse
All the link given is very death

modemst1/2

Hi,
does anyone have an idea where I could find modemst1.bin and modemst2.bin files for GT-I9195 (they're not included in the stock firmware on sammobile ). I'm experiencing loss of signal while on 3G/4G networks (stock firmware) after flashing different ROMs. I've tried flashing new QCN, but it didn't help. If someone would be willing to share his/hers, that would be greatly appreciated.

Hi uploaded the file to my gdrive account:
https://drive.google.com/drive/folders/0B8MKV7A-HwoiWHhZZlluWDJyY1k?usp=sharing
Its from an european samsung gt-i9195. Viewed your profile but you have not left from who you are.
I dont know if you can it use for a us model as example.
Hope it helps.
Regards
hrodeberht

gt9195 said:
Hi,
does anyone have an idea where I could find modemst1.bin and modemst2.bin files for GT-I9195 (they're not included in the stock firmware on sammobile ). I'm experiencing loss of signal while on 3G/4G networks (stock firmware) after flashing different ROMs. I've tried flashing new QCN, but it didn't help. If someone would be willing to share his/hers, that would be greatly appreciated.
Click to expand...
Click to collapse
Or see this
https://forum.xda-developers.com/ga...odem-samsung-galaxy-s4-mini-gt-i9195-t3390780
Though if you are on stock you might want to see the other modem thread which has older modems which may work better with the older ROM, you will just have to try them out.
You might also want to check the connections on the transmitter and or tighten the screws on the motherboard so it's properly grounded (possible even clean connectors if tarnished, though normally just disconnect and reconnect a few times will "clean" the tarnish off)

Many thanks!
hrodeberht said:
Hi uploaded the file to my gdrive account:
Its from an european samsung gt-i9195. Viewed your profile but you have not left from who you are.
I dont know if you can it use for a us model as example.
Hope it helps.
Regards
hrodeberht
Click to expand...
Click to collapse
Thank you very much for the files! I also have a european version (SIM). I've tried replacing the files, however It didn't work. Do you perhaps know, if replacing QCN file would do the trick? So far, I've tried several QCNs, however I have no idea which versions are they from. Would it be too much to ask you for your QCN? You could zero out the IMEI, which is the number immediately after the value 88 00 01 00 26 02 00 00 (hex), starting with 08 xA (x being the first number of your IMEI). It's written in three different places in the file.
Best regards

gt9195 said:
Thank you very much for the files! I also have a european version (SIM). I've tried replacing the files, however It didn't work. Do you perhaps know, if replacing QCN file would do the trick? So far, I've tried several QCNs, however I have no idea which versions are they from. Would it be too much to ask you for your QCN? You could zero out the IMEI, which is the number immediately after the value 88 00 01 00 26 02 00 00 (hex), starting with 08 xA (x being the first number of your IMEI). It's written in three different places in the file.
Best regards
Click to expand...
Click to collapse
Hi,
I don't know that, if it helps, but I can share you mine. Could you please post the (adb shell) command which partition? I have to save to a file. Thank you.
Regards
hrodeberht

hrodeberht said:
Hi,
I don't know that, if it helps, but I can share you mine. Could you please post the (adb shell) command which partition? I have to save to a file. Thank you.
Regards
hrodeberht
Click to expand...
Click to collapse
I'm not sure if it can be done with adb, however it can be with QPST (if you don't have it/can't find it, I can upload it somewhere - be careful as there are some malware infested versions available online). Be sure to delete (replace with X) the IMEI. Once you have the QCN file, you can search for it with a hex editor. For example, if IMEI is 1 23 45 67 89 01 02 03 it can be found in a QCN file by searching for a string 08 1(first digit of your IMEI)A 32 54 76 98 10 20 30 (or by searching for a string 88 00 01 00 26 02 00 00 - IMEI is the hexadecimal string of length 18 immediately after the value 88 00 01 00 26 02 00 00 starting with 08). There are 3 locations in the file where it is written.
Thank you very much, best regards!

gt9195 said:
I'm not sure if it can be done with adb, however it can be with QPST ...
Click to expand...
Click to collapse
I think I cannot help anymore. I installed qpst but with the german explanation for the galaxy i9195 I followed I have to type *#0808# on the phone to change the usb connection type. But with lineage os this service code does not work.
Sorry.
Regards
hrodeberht

hrodeberht said:
I think I cannot help anymore. I installed qpst but with the german explanation for the galaxy i9195 I followed I have to type *#0808# on the phone to change the usb connection type. But with lineage os this service code does not work.
Sorry.
Regards
hrodeberht
Click to expand...
Click to collapse
No problem, thank you for the effort. I have one last option, to change the EFS partition. I've tried flashing a bin file I found online, however I'm not sure from which carrier it was (I had mixed results, some improvement but I lost the IMEI so I had to flash my QCN and signal was lost again). Would it you mind sending me your EFS.bin (via PM as I'm not sure it is allowed). I think it contains the serial number, so if you're not comfortable with sharing yours, I understand.

Stock firmware dump!?

Anyone able to get the Firmware for this Flagship? Please share Links if You know any Sources and please consider doing a Dump from Your Device if possible (Keep in mind that ADB just pulls a Part of the Firmware, a rooted Device will allow a full Dump).
Once shared with Me will i link the Source here! Can't wait to get My Fingers on the new ThinQ Stuff!

I have the tmobile version of the phone, bought day 1, never turned it on. Of course not rooted. That is what I am waiting for. Tell me how to do it and I will send that dump to you.

Miustone said:
Anyone able to get the Firmware for this Flagship? Please share Links if You know any Sources and please consider doing a Dump from Your Device if possible (Keep in mind that ADB just pulls a Part of the Firmware, a rooted Device will allow a full Dump).
Once shared with Me will i link the Source here! Can't wait to get My Fingers on the new ThinQ Stuff!
Click to expand...
Click to collapse
Is there an instruction guide on how to get this? I've got a T-Mobile variant, so idk how helpful it'll be, but willing to help if there's any way I can

champ784 said:
Is there an instruction guide on how to get this? I've got a T-Mobile variant, so idk how helpful it'll be, but willing to help if there's any way I can
Click to expand...
Click to collapse
Would be good to know if it's rooted and/or equipped with TWRP. That makes the Things less complicated...
Thanks for Your Offer!

Miustone said:
Would be good to know if it's rooted and/or equipped with TWRP. That makes the Things less complicated...
Thanks for Your Offer!
Click to expand...
Click to collapse
Sadly, no... I haven't seen any root options as of yet, so I'll keep an eye out

Hello, There is KDZ firmware for T-mobile LG G7 ThinQ (LMG710TM )
https://www.mylgphones.com/download...firmware-g710tm10d_00_tmo_us_op_0525-kdz.html
---------- Post added at 09:12 PM ---------- Previous post was at 09:06 PM ----------
Miustone said:
Anyone able to get the Firmware for this Flagship? Please share Links if You know any Sources and please consider doing a Dump from Your Device if possible (Keep in mind that ADB just pulls a Part of the Firmware, a rooted Device will allow a full Dump).
Once shared with Me will i link the Source here! Can't wait to get My Fingers on the new ThinQ Stuff!
Click to expand...
Click to collapse
Hello, I have got a OTA update package for the G7 thinQ
Here are some files in the package
abl 165,888
cmnlib 226,632
cmnlib64 295,640
devcfg 58,204
factory 8,192
hyp 258,048
keymaster 382,016
laf 35,009,747
META-INF <DIR>
modem 105,992,192
patch <DIR>
pmic 51,104
raw_resources 3,523,716
rpm 234,444
sec 436
storsec 49,176
system.new.dat 12,288
system.patch.dat 532,817,085
system.transfer.list 626,088
tz 1,941,504
xbl 2,665,852
xbl2 2,665,852
Do you think it is useful? I will upload it to google drive

asialove2013 said:
Hello, There is KDZ firmware for T-mobile LG G7 ThinQ (LMG710TM )
https://www.mylgphones.com/download...firmware-g710tm10d_00_tmo_us_op_0525-kdz.html
---------- Post added at 09:12 PM ---------- Previous post was at 09:06 PM ----------
Hello, I have got a OTA update package for the G7 thinQ
Here are some files in the package
abl 165,888
cmnlib 226,632
cmnlib64 295,640
devcfg 58,204
factory 8,192
hyp 258,048
keymaster 382,016
laf 35,009,747
META-INF <DIR>
modem 105,992,192
patch <DIR>
pmic 51,104
raw_resources 3,523,716
rpm 234,444
sec 436
storsec 49,176
system.new.dat 12,288
system.patch.dat 532,817,085
system.transfer.list 626,088
tz 1,941,504
xbl 2,665,852
xbl2 2,665,852
Do you think it is useful? I will upload it to google drive
Click to expand...
Click to collapse
Please publish Google Drive link :good:

asialove2013 said:
Hello, There is KDZ firmware for T-mobile LG G7 ThinQ (LMG710TM )
https://www.mylgphones.com/download...firmware-g710tm10d_00_tmo_us_op_0525-kdz.html
---------- Post added at 09:12 PM ---------- Previous post was at 09:06 PM ----------
Hello, I have got a OTA update package for the G7 thinQ
Here are some files in the package
abl 165,888
cmnlib 226,632
cmnlib64 295,640
devcfg 58,204
factory 8,192
hyp 258,048
keymaster 382,016
laf 35,009,747
META-INF <DIR>
modem 105,992,192
patch <DIR>
pmic 51,104
raw_resources 3,523,716
rpm 234,444
sec 436
storsec 49,176
system.new.dat 12,288
system.patch.dat 532,817,085
system.transfer.list 626,088
tz 1,941,504
xbl 2,665,852
xbl2 2,665,852
Do you think it is useful? I will upload it to google drive
Click to expand...
Click to collapse
The System Parts would be nice to have. Not sure how to extract them yet but i'll find a way somehow :fingers-crossed:
Thanks in advance!

TCL A30

I used the forum search engine for "mtkclient Treble" and did not get any hits.
Recently, a new Hovatek tool to unlock, read/write MediaTek based devices, mtkclient has been made available. To my eye it looks like it would be used to flash a Treble GSI on mediatek devices that have fastboot disabled.
I have a cheap TCL A30(Android 11) with a MT6562 chipset that Treble checker reports as arm64 with system as root. Mtkclient dump
Code:
boot.bin gpt.bin nvcfg.bin protect1.bin sspm_2.bin
boot_para.bin gz1.bin nvdata.bin protect2.bin swversion.bin
cache.bin gz2.bin nvram.bin recovery.bin tee1.bin
dtbo.bin lk2.bin oembin.bin scp1.bin tee2.bin
efuse.bin lk.bin oempersist.bin scp2.bin vbmeta.bin
expdb.bin logo.bin otp.bin sec1.bin vbmeta_system.bin
flashinfo.bin md1img.bin para.bin seccfg.bin vbmeta_vendor.bin
frp.bin md_udc.bin persist.bin spmfw.bin vendor_boot.bin
super.bin gpt_backup.bin metadata.bin proinfo.bin sspm_1.bin
No boot_a/boot_b in the above confirming a system as root partition scheme .
I'm guessing that I choose/build an arm64 a/b image?
Next question: Are *.bin files equivalent to *.img files?
Would the install process be to backup/extract super.bin, replace system.bin and repack to a modified super.bin
Disable/modify vbmeta.bin and then flash the modified super.bin? I have an Arch Linux build box, what Linux based tools are recommended to unpack/repack the super.bin?
Given that Treble GSI flashing with mtkclient looks to be new ground and could broadly apply to A/B and A only devices, the thread content could apply elsewhere. Moderators feel free to move.

Mtk client is pretty cool stuff yea. Yes .bin files work the same as .img files, you can just rename them to eachother and they work.
Haven't tried a GSI yet but I tried flashing magisk boot.img with it but never got my phone to boot system was always corrupted. Phone was Xiaomi Redmi 11T. Might work, if you test it I'd like to know what happens. Don't know maybe I'll try it some day if I have nothing to do.

Hi,I need TCL A30 Dump Firmware

Mesba1247 said:
Hi,I need TCL A30 Dump Firmware
Click to expand...
Click to collapse
It is a large Dump of up to 8GB. Well beyond the allowance for most email attachments.
This XDA thread has more specifics and is further along in development:
https://forum.xda-developers.com/t/tcl-a509dl-no-fastboot-ability.4356737/page-4#posts
In that thread there is a detailed description about how to install a python based tool that is free to download from the internet: mtkclient. With it you can generate your own "Dump" with this command:
Code:
mtk rl "Dump_directory"

971shep said:
这是一个高达 8GB 的大转储。 远远超出了大多数电子邮件附件的允许范围。
这个XDA线程有更多的细节，并且正在进一步开发中：
https://forum.xda-developers.com/t/tcl-a509dl-no-fastboot-ability.4356737/page-4#posts
在该线程中，有关于如何安装可从互联网免费下载的基于 python 的工具的详细说明：mtkclient。 有了它，您可以使用以下命令生成自己的“转储”：
Code:
mtk rl “Dump_directory”
Click to expand...
Click to collapse
You can upload to "Mega" or "Google Drive"

You can upload to "Mega" or "Google Drive"

Send me the OneDrive link, I need to useSend me the OneDrive link, I need to use

Mesba1247 said:
Send me the OneDrive link, I need to useSend me the OneDrive link, I need to use
Click to expand...
Click to collapse
From my standpoint, the tools are free and easy to use. Is there a reason you cannot generate your own TCL A30 dump.?

971shep said:
From my standpoint, the tools are free and easy to use. Is there a reason you cannot generate your own TCL A30 dump.?
Click to expand...
Click to collapse
my computer is under repairmy computer is under repair

Mesba1247 said:
my computer is under repairmy computer is under repair
Click to expand...
Click to collapse
You cannot do read/write operations with the dump until you have a working computer with mtkclient.