Moto G14 XT2341-3 CM2SP3 Hang + need good backup

[Brka]

As title says ...

on device which was killed at FRP operation
(was killed because of Unisoc FDL agent bug, will post more info on bottom),
cm2sp3 just hangs on reading PMT info ...

i have pac from other tool, but unable to write, because software hangs on connect.

have phone in hands for test of some newer beta if possible.

p.s.: A lot of motorola's (G14, G04 etc.) [probably other brands too] were killed, and can be killed,
by just doing identify operation or frp, etc.
problem is in (older) Unisoc FDL agent which NOT prevent reconfig UFS
and as a consequence erase all memory.

p.s.2: Please also check this PAC...

basically, just splloader, uboot, and couple of few other files would be enough for unbrick, to have fastboot ...
but what about imei (security) ... ? will repair work ?

coder, plz confirm and help.

thanks in advance

b.r.
Alex

b.r.
Alex

[Brka]

okay ... some progress with cm2sp3 v2.30b1

device boots, flashing some files ... lets see what will happen.

If somebody have full dump, it will be useful.

edit:
managed to flash all necessary files, but still no fastboot nor it power on.

i have used files from factory rom, downloaded with software fix moto tool.
gps was also initialized (layout) from factory file (Gpt_entry_ufs-sign.bin)

Operation: Connect motorola cancun Boot [FDL] Factory [v2.30b1 (beta)]
Wait...
- Power device Off
- Connect cable [remember Vol+ | Vol-] [remember Test-Point]
Waiting for device...
Device found
PTFN: SPRD U2S Diag (COM10) vid 0x1782 pid 0x4D00
boot: SPRD3
C:\InfinityBox\CM2SP3 - Copy\boot\Motorola\moto-G14-XT2341\fdl1-sign.b791c6a0.ldr
C:\InfinityBox\CM2SP3 - Copy\boot\Motorola\moto-G14-XT2341\fdl2-sign.b791c6a0.e03e4480.2024-03.ldr
Boot[1] [+] Custom... Ok
Exec[1]... Ok
Boot ack: Spreadtrum Boot Block version 1.1
Loader ACK... Ok
Set port speed... 2000000
Enable charge... Ok
Boot[2]... Ok [+] [+]
Exec[2]... Ok
Version: 0x10
Random: 0x00
Enable RAW... Ok
Disable transcode... Ok
Enable uboot logging ... Ok
Loader exec Ok
Dev UID: 4057e1f7ae02b8c1f2f9281669212908b71b7c2d71feda01c6616d6935c067b7
hwid cache loaded: 4

get storage info... MMC

get partitions...
unknown t_size
gpt key item absent;
t_size adjusted
Partitions: 72
Connected
[MemTool] load 72 items
Finished 24 sec
Write GPT[70]... Ok
get partitions...
gpt key item absent;gpt key item absent;
Partitions: 71
0x00100000 0x04000000 prodnv
0x04100000 0x00100000 miscdata
0x04200000 0x00100000 misc
0x04300000 0x00600000 trustos_a
0x04900000 0x00600000 trustos_b
0x04F00000 0x00100000 sml_a
0x05000000 0x00100000 sml_b
0x05100000 0x00300000 uboot_a
0x05400000 0x00300000 uboot_b
0x05700000 0x01000000 uboot_log
0x06700000 0x00800000 logo
0x06F00000 0x00800000 fbootlogo
0x07700000 0x00200000 l_fixnv1_a
0x07900000 0x00200000 l_fixnv2_a
0x07B00000 0x00200000 l_fixnv1_b
0x07D00000 0x00200000 l_fixnv2_b
0x07F00000 0x00200000 l_runtimenv1
0x08100000 0x00200000 l_runtimenv2
0x08300000 0x00200000 persist
0x08500000 0x01900000 l_modem_a
0x09E00000 0x01900000 l_modem_b
0x0B700000 0x00100000 l_deltanv_a
0x0B800000 0x00100000 l_deltanv_b
0x0B900000 0x00A00000 l_gdsp_a
0x0C300000 0x00A00000 l_gdsp_b
0x0CD00000 0x01400000 l_ldsp_a
0x0E100000 0x01400000 l_ldsp_b
0x0F500000 0x00600000 l_agdsp_a
0x0FB00000 0x00600000 l_agdsp_b
0x10100000 0x00100000 pm_sys_a
0x10200000 0x00100000 pm_sys_b
0x10300000 0x00100000 teecfg_a
0x10400000 0x00100000 teecfg_b
0x10500000 0x00A00000 hypervsior_a
0x10F00000 0x00A00000 hypervsior_b
0x11900000 0x04000000 boot_a
0x15900000 0x04000000 boot_b
0x19900000 0x06400000 vendor_boot_a
0x1FD00000 0x06400000 vendor_boot_b
0x26100000 0x00800000 init_boot_a
0x26900000 0x00800000 init_boot_b
0x27100000 0x00800000 dtb_a
0x27900000 0x00800000 dtb_b
0x28100000 0x00800000 dtbo_a
0x28900000 0x00800000 dtbo_b
0x29100000 0x01400000 elabel
0x2A500000 0x15E000000 super
0x188500000 0x04000000 cache
0x18C500000 0x1F400000 blackbox
0x1AB900000 0x00100000 vbmeta_a
0x1ABA00000 0x00100000 vbmeta_b
0x1ABB00000 0x04000000 metadata
0x1AFB00000 0x00A00000 sysdumpdb
0x1B0500000 0x00100000 vbmeta_system_a
0x1B0600000 0x00100000 vbmeta_system_b
0x1B0700000 0x00100000 vbmeta_vendor_a
0x1B0800000 0x00100000 vbmeta_vendor_b
0x1B0900000 0x00100000 vbmeta_system_ext_a
0x1B0A00000 0x00100000 vbmeta_system_ext_b
0x1B0B00000 0x00100000 vbmeta_product_a
0x1B0C00000 0x00100000 vbmeta_product_b
0x1B0D00000 0x00100000 vbmeta_odm_a
0x1B0E00000 0x00100000 vbmeta_odm_b
0x1B0F00000 0x00100000 avbmeta_rs_a
0x1B1000000 0x00100000 avbmeta_rs_b
0x1B1100000 0x00800000 common_rs1_a
0x1B1900000 0x00800000 common_rs1_b
0x1B2100000 0x01000000 common_rs2_a
0x1B3100000 0x1B6A100000 common_rs2_b
0x00000000 0x00080000 splloader
0x00000000 0x00080000 splloader_bak
[MemTool] load 71 items
Finished 1 sec


Operation: Write FW motorola cancun Boot [FDL] Factory [v2.30b1 (beta)]
Wait...
C:\ProgramData\RSA\Download\RomFiles\fastboot_cancun_g_oem_user_14_UTLB34.102_34_92e1850b_release_keys_global_CFC\cancun.xml
Do you have Firmware backup? Yes
Write 33 partitions? Yes
Device/File partition tables are different
Repartition On. Userdata will be lost!
Continue? Yes
Backup nvram...
Read to C:\InfinityBox\CM2SP3 - Copy\tmp\
Reading...
Read [1/71] prodnv 64.00 Mb Ok
Read [2/71] miscdata 1024.00 Kb Ok
Read [13/71] l_fixnv1_a 2.00 Mb Ok
Read [14/71] l_fixnv2_a 2.00 Mb Ok
Read [15/71] l_fixnv1_b 2.00 Mb Ok
Read [16/71] l_fixnv2_b 2.00 Mb Ok
Saved 6 of 6 images. 73.00 Mb of 73.00 Mb
Write GPT[70]... Ok
get partitions...
gpt key item absent;gpt key item absent;gpt key item absent;
Partitions: 72
Reset Userdata: Off
Erase [3/72] misc 1024.00 Kb Ok
Erase [10/72] uboot_log 16.00 Mb Ok
Erase [17/72] l_runtimenv1 2.00 Mb Ok
Erase [50/72] vbmeta_a 1024.00 Kb Ok
Erase [53/72] sysdumpdb 10.00 Mb Ok
Erase [54/72] vbmeta_system_a 1024.00 Kb Ok
Erase [56/72] vbmeta_vendor_a 1024.00 Kb Ok
Erase [58/72] vbmeta_system_ext_a 1024.00 Kb Ok
Erase [60/72] vbmeta_product_a 1024.00 Kb Ok
Erase [62/72] vbmeta_odm_a 1024.00 Kb Ok
Erase [71/72] splloader 512.00 Kb Ok
Writing...
Write [1/72] vbmeta_a 1024.00 Kb Ok 94 us
Write [3/72] vbmeta_system_a 1024.00 Kb Ok 62 us
Write [5/72] vbmeta_vendor_a 1024.00 Kb Ok 47 us
Write [7/72] vbmeta_system_ext_a 1024.00 Kb Ok 47 us
Write [9/72] vbmeta_product_a 1024.00 Kb Ok 47 us
Write [11/72] vbmeta_odm_a 1024.00 Kb Ok 47 us
Write [13/72] prodnv 64.00 Mb Ok 172 us
Write [16/72] trustos_a 6.00 Mb Ok 219 us
Write [17/72] trustos_b 6.00 Mb Ok 234 us
Write [18/72] sml_a 1024.00 Kb Ok 47 us
Estimated time to end 1 min 58 sec
Write [19/72] sml_b 1024.00 Kb Ok 47 us
Write [20/72] uboot_a 3.00 Mb Ok 47 us
Write [21/72] uboot_b 3.00 Mb Ok 47 us
Write [23/72] logo 8.00 Mb Ok 109 us
Write [24/72] fbootlogo 8.00 Mb Ok 109 us
Write [31/72] persist 2.00 Mb Ok 94 us
Write [32/72] l_modem_a 25.00 Mb Ok 1 sec
Write [34/72] l_deltanv_a 1024.00 Kb Ok 47 us
Write [36/72] l_gdsp_a 10.00 Mb Ok 531 us
Write [38/72] l_ldsp_a 20.00 Mb Ok 1 sec
Write [40/72] l_agdsp_a 6.00 Mb Ok 344 us
Write [42/72] pm_sys_a 1024.00 Kb Ok 94 us
Write [48/72] boot_a 64.00 Mb Ok 3 sec
Write [50/72] vendor_boot_a 100.00 Mb Ok 5 sec
Write [52/72] init_boot_a 8.00 Mb Ok 438 us
Write [56/72] dtbo_a 8.00 Mb Ok 469 us
Write [58/72] elabel 20.00 Mb Ok 172 us
Write [59/72] super 5.47 Gb Ok 1 min 44 sec
Write [60/72] cache 64.00 Mb Ok 406 us
Write [61/72] blackbox 500.00 Mb Ok 453 us
Write [70/72] userdata 4.00 Gb Ok 78 us
Write [71/72] splloader 512.00 Kb Ok 62 us
Write [72/72] splloader_bak 512.00 Kb Ok 63 us
Completed 33 of 33
Finished 2 min 23 sec
miscdata: file read fault;
uboot: file read fault;file read fault;
trustos: file read fault;file read fault;
Reboot... Disconnect cable if it freez
Bye

any other ideas ? i may be doing something wrong also ...

p.s. splloader is from that "dead boot fix" pac that i got from some site.


b.r.
Alex

[bobo07]

Bro I have struggled with this device few days to bring it to life. I will upload, tomorrow, backup and files what did worked for me. Unfortunately IMEI repair still doesn't work and I didn't find solution.

[Brka]

Originally Posted by bobo07

Bro I have struggled with this device few days to bring it to life. I will upload, tomorrow, backup and files what did worked for me. Unfortunately IMEI repair still doesn't work and I didn't find solution.

well ... i hope i will be able to power it up at least.

for imei repair ... we'll see.

hopefully coder replies in the meantime, maybe we get lucky.

tia.

b.r.
Alex

[bobo07]

Here is dump (pandora)
https://mega.nz/file/0sgWHJjY#7Xip0b...vdPslAgeHxXk2w

Firmware (pac) is uploading...

My advice is to flash twice dump then write twice firmware.. why? don't know but that ways works...

[blinet]

latest pac SHIPPING_LLD35185_TLBS33.78-258-3_0730_SIGNED from lolinet work good, but imei repaired only with patch and pan dora

[bobo07]

Originally Posted by blinet

latest pac SHIPPING_LLD35185_TLBS33.78-258-3_0730_SIGNED from lolinet work good, but imei repaired only with patch and pan dora

For me only worked SHIPPING_LLD35185_UTLB34.102-34_0727_SIGNED
which I'm uploading...

[bobo07]

Here is firmware..
https://mega.nz/file/kwQRSIAK#cmSM0Z...d0cjd9U8wuJZJA

[Brka]

No luck so far ...

either i'm doing something wrong or ... cm2sp3 v2.30 beta1 doing something wrong with re-partitioning or something

things i did :

- erased flash (as it was when i received phone)
- intialized PMT with cancun.xml/Gpt_entry_ufs-sign.bin/partition.xml
- flashed partitions from post #5 (twice)
- flashed factory pac from post #8 (twice)

GPT/PMT INIT :

Waiting for device...
Device found
PTFN: SPRD U2S Diag (COM10) vid 0x1782 pid 0x4D00
boot: SPRD3
C:\InfinityBox\CM2SP3 - Copy\boot\SoC\sc9230\FDL1.ca3088f9.ldr
C:\InfinityBox\CM2SP3 - Copy\boot\SoC\sc9230\FDL2.ca3088f9.f4a1a1cd.ldr
Boot[1] [-] Custom... Ok
Exec[1]... Ok
Boot ack: Spreadtrum Boot Block version 1.1
Loader ACK... Ok
Set port speed... 2000000
Enable charge... Ok
Boot[2]... Ok [+] [-]
Exec[2]... Ok
Version: 0x10
Random: 0x00
Enable RAW... Ok
Disable transcode... Ok
Enable uboot logging ... Ok
Loader exec Ok
Dev UID: 4057e1f7ae02b8c1f2f9281669212908b71b7c2d71feda01c6616d6935c067b7
hwid cache loaded: 4

get storage info... UFS

get partitions...
unknown t_size
no gpt entries;gpt key item absent;raw parse fail;gpt key item absent 2nd time;
t_size adjusted
Can't get partition table
Device seems as erased or damaged
[MemTool] => [PMT] => [INIT] may helps
Partitions: 2
0x00000000 0x00080000 splloader
0x00000000 0x00080000 splloader_bak
Connected

get sw info...
probe items... Finished 0 us
Android ver: Unknown
UserDataFS: 0x01 [ext4|4+] CacheFS: 0x01 [ext4|4+]
Device ID: none
Strategy: [none|generic]
Firmware ID: none
[MemTool] load 2 items
Finished 29 sec
Write GPT[70]... Ok
get partitions...
unknown t_size
no gpt entries;gpt key item absent;raw parse fail;gpt key item absent 2nd time;gpt key item absent;
t_size adjusted
Partitions: 72
0x00100000 0x04000000 prodnv
0x04100000 0x00100000 miscdata
0x04200000 0x00100000 misc
0x04300000 0x00600000 trustos_a
0x04900000 0x00600000 trustos_b
0x04F00000 0x00100000 sml_a
0x05000000 0x00100000 sml_b
0x05100000 0x00300000 uboot_a
0x05400000 0x00300000 uboot_b
0x05700000 0x01000000 uboot_log
0x06700000 0x00800000 logo
0x06F00000 0x00800000 fbootlogo
0x07700000 0x00200000 l_fixnv1_a
0x07900000 0x00200000 l_fixnv2_a
0x07B00000 0x00200000 l_fixnv1_b
0x07D00000 0x00200000 l_fixnv2_b
0x07F00000 0x00200000 l_runtimenv1
0x08100000 0x00200000 l_runtimenv2
0x08300000 0x00200000 persist
0x08500000 0x01900000 l_modem_a
0x09E00000 0x01900000 l_modem_b
0x0B700000 0x00100000 l_deltanv_a
0x0B800000 0x00100000 l_deltanv_b
0x0B900000 0x00A00000 l_gdsp_a
0x0C300000 0x00A00000 l_gdsp_b
0x0CD00000 0x01400000 l_ldsp_a
0x0E100000 0x01400000 l_ldsp_b
0x0F500000 0x00600000 l_agdsp_a
0x0FB00000 0x00600000 l_agdsp_b
0x10100000 0x00100000 pm_sys_a
0x10200000 0x00100000 pm_sys_b
0x10300000 0x00100000 teecfg_a
0x10400000 0x00100000 teecfg_b
0x10500000 0x00A00000 hypervsior_a
0x10F00000 0x00A00000 hypervsior_b
0x11900000 0x04000000 boot_a
0x15900000 0x04000000 boot_b
0x19900000 0x06400000 vendor_boot_a
0x1FD00000 0x06400000 vendor_boot_b
0x26100000 0x00800000 init_boot_a
0x26900000 0x00800000 init_boot_b
0x27100000 0x00800000 dtb_a
0x27900000 0x00800000 dtb_b
0x28100000 0x00800000 dtbo_a
0x28900000 0x00800000 dtbo_b
0x29100000 0x01400000 elabel
0x2A500000 0x15E000000 super
0x188500000 0x04000000 cache
0x18C500000 0x1F400000 blackbox
0x1AB900000 0x00100000 vbmeta_a
0x1ABA00000 0x00100000 vbmeta_b
0x1ABB00000 0x04000000 metadata
0x1AFB00000 0x00A00000 sysdumpdb
0x1B0500000 0x00100000 vbmeta_system_a
0x1B0600000 0x00100000 vbmeta_system_b
0x1B0700000 0x00100000 vbmeta_vendor_a
0x1B0800000 0x00100000 vbmeta_vendor_b
0x1B0900000 0x00100000 vbmeta_system_ext_a
0x1B0A00000 0x00100000 vbmeta_system_ext_b
0x1B0B00000 0x00100000 vbmeta_product_a
0x1B0C00000 0x00100000 vbmeta_product_b
0x1B0D00000 0x00100000 vbmeta_odm_a
0x1B0E00000 0x00100000 vbmeta_odm_b
0x1B0F00000 0x00100000 avbmeta_rs_a
0x1B1000000 0x00100000 avbmeta_rs_b
0x1B1100000 0x00800000 common_rs1_a
0x1B1900000 0x00800000 common_rs1_b
0x1B2100000 0x01000000 common_rs2_a
0x1B3100000 0x01000000 common_rs2_b
0x1B4100000 0x1B68300000 userdata
0x00000000 0x00080000 splloader
0x00000000 0x00080000 splloader_bak
[MemTool] load 72 items
Finished 297 us

Critical partition write from post 5 :

[MemTool] load 72 items
Finished 297 us
Write 72 partitions? Yes
Writing...
Write [1/72] prodnv 64.00 Mb Ok 2 sec
Write [2/72] miscdata 1024.00 Kb Ok 63 us
Write [3/72] misc 1024.00 Kb Ok 62 us
Write [4/72] trustos_a 6.00 Mb Ok 313 us
Write [5/72] trustos_b 6.00 Mb Ok 312 us
Write [6/72] sml_a 1024.00 Kb Ok 63 us
Write [7/72] sml_b 1024.00 Kb Ok 63 us
Write [8/72] uboot_a 3.00 Mb Ok 172 us
Write [9/72] uboot_b 3.00 Mb Ok 172 us
Write [10/72] uboot_log 16.00 Mb Ok 609 us
Write [11/72] logo 8.00 Mb Ok 313 us
Write [12/72] fbootlogo 8.00 Mb Ok 312 us
Write [13/72] l_fixnv1_a 2.00 Mb Ok 156 us
Write [14/72] l_fixnv2_a 2.00 Mb Ok 62 us
Write [15/72] l_fixnv1_b 2.00 Mb Ok 157 us
Skip [16/72] l_fixnv2_b 2.00 Mb [No data]
Write [17/72] l_runtimenv1 2.00 Mb
[write] [l_runtimenv1] addr 0x0000 size 0x120000; cmd 0x01 ret 0x8A DOWN_SIZE_ERROR
Write [18/72] l_runtimenv2 2.00 Mb Ok 62 us
Estimated time to end 81 min 12 sec
Write [19/72] persist 2.00 Mb Ok 94 us
Write [20/72] l_modem_a 25.00 Mb Ok 1 sec
Write [21/72] l_modem_b 25.00 Mb Ok 1 sec
Write [22/72] l_deltanv_a 1024.00 Kb Ok 62 us
Write [23/72] l_deltanv_b 1024.00 Kb Ok 63 us
Write [24/72] l_gdsp_a 10.00 Mb Ok 500 us
Write [25/72] l_gdsp_b 10.00 Mb Ok 516 us
Write [26/72] l_ldsp_a 20.00 Mb Ok 1 sec
Write [27/72] l_ldsp_b 20.00 Mb Ok 1 sec
Write [28/72] l_agdsp_a 6.00 Mb Ok 344 us
Write [29/72] l_agdsp_b 6.00 Mb Ok 343 us
Write [30/72] pm_sys_a 1024.00 Kb Ok 78 us
Write [31/72] pm_sys_b 1024.00 Kb Ok 79 us
Write [32/72] teecfg_a 1024.00 Kb Ok 62 us
Write [33/72] teecfg_b 1024.00 Kb Ok 78 us
Write [34/72] hypervsior_a 10.00 Mb Ok 531 us
Write [35/72] hypervsior_b 10.00 Mb Ok 500 us
Write [36/72] boot_a 64.00 Mb Ok 3 sec
Write [37/72] boot_b 64.00 Mb Ok 3 sec
Write [38/72] vendor_boot_a 100.00 Mb Ok 5 sec
Write [39/72] vendor_boot_b 100.00 Mb Ok 5 sec
Write [40/72] init_boot_a 8.00 Mb Ok 421 us
Write [41/72] init_boot_b 8.00 Mb Ok 438 us
Write [42/72] dtb_a 8.00 Mb Ok 422 us
Write [43/72] dtb_b 8.00 Mb Ok 453 us
Write [44/72] dtbo_a 8.00 Mb Ok 453 us
Write [45/72] dtbo_b 8.00 Mb Ok 438 us
Write [46/72] elabel 20.00 Mb Ok 750 us
Skip [47/72] super 5.47 Gb [No data]
Write [48/72] cache 64.00 Mb Ok 2 sec
Write [49/72] blackbox 500.00 Mb Ok 18 sec
Write [50/72] vbmeta_a 1024.00 Kb Ok 79 us
Write [51/72] vbmeta_b 1024.00 Kb Ok 78 us
Write [52/72] metadata 64.00 Mb Ok 2 sec
Write [53/72] sysdumpdb 10.00 Mb Ok 375 us
Write [54/72] vbmeta_system_a 1024.00 Kb Ok 78 us
Write [55/72] vbmeta_system_b 1024.00 Kb Ok 78 us
Write [56/72] vbmeta_vendor_a 1024.00 Kb Ok 78 us
Write [57/72] vbmeta_vendor_b 1024.00 Kb Ok 78 us
Write [58/72] vbmeta_system_ext_a 1024.00 Kb Ok 78 us
Write [59/72] vbmeta_system_ext_b 1024.00 Kb Ok 79 us
Write [60/72] vbmeta_product_a 1024.00 Kb Ok 78 us
Write [61/72] vbmeta_product_b 1024.00 Kb Ok 78 us
Write [62/72] vbmeta_odm_a 1024.00 Kb Ok 78 us
Write [63/72] vbmeta_odm_b 1024.00 Kb Ok 78 us
Write [64/72] avbmeta_rs_a 1024.00 Kb Ok 78 us
Write [65/72] avbmeta_rs_b 1024.00 Kb Ok 63 us
Write [66/72] common_rs1_a 8.00 Mb Ok 422 us
Write [67/72] common_rs1_b 8.00 Mb Ok 421 us
Write [68/72] common_rs2_a 16.00 Mb Ok 844 us
Write [69/72] common_rs2_b 16.00 Mb Ok 860 us
Skip [70/72] userdata 109.63 Gb [No data]
Write [71/72] splloader 512.00 Kb Ok 78 us
Write [72/72] splloader_bak 512.00 Kb Ok 31 us
Completed 69 of 72
Finished 1 min 2 sec

also did write full factory pac ... no-go ... phone still dead (returns to flash mode after reboot/disconnect).
Identify works normal after all this, cm2 reads software/os info ...

any more ideas >?

b.r.
Alex

[YellowBoss]

Originally Posted by Brka

No luck so far ...

either i'm doing something wrong or ... cm2sp3 v2.30 beta1 doing something wrong with re-partitioning or something

things i did :

- erased flash (as it was when i received phone)
- intialized PMT with cancun.xml/Gpt_entry_ufs-sign.bin/partition.xml
- flashed partitions from post #5 (twice)
- flashed factory pac from post #8 (twice)

GPT/PMT INIT :

Waiting for device...
Device found
PTFN: SPRD U2S Diag (COM10) vid 0x1782 pid 0x4D00
boot: SPRD3
C:\InfinityBox\CM2SP3 - Copy\boot\SoC\sc9230\FDL1.ca3088f9.ldr
C:\InfinityBox\CM2SP3 - Copy\boot\SoC\sc9230\FDL2.ca3088f9.f4a1a1cd.ldr
Boot[1] [-] Custom... Ok
Exec[1]... Ok
Boot ack: Spreadtrum Boot Block version 1.1
Loader ACK... Ok
Set port speed... 2000000
Enable charge... Ok
Boot[2]... Ok [+] [-]
Exec[2]... Ok
Version: 0x10
Random: 0x00
Enable RAW... Ok
Disable transcode... Ok
Enable uboot logging ... Ok
Loader exec Ok
Dev UID: 4057e1f7ae02b8c1f2f9281669212908b71b7c2d71feda01c6616d6935c067b7
hwid cache loaded: 4

get storage info... UFS

get partitions...
unknown t_size
no gpt entries;gpt key item absent;raw parse fail;gpt key item absent 2nd time;
t_size adjusted
Can't get partition table
Device seems as erased or damaged
[MemTool] => [PMT] => [INIT] may helps
Partitions: 2
0x00000000 0x00080000 splloader
0x00000000 0x00080000 splloader_bak
Connected

get sw info...
probe items... Finished 0 us
Android ver: Unknown
UserDataFS: 0x01 [ext4|4+] CacheFS: 0x01 [ext4|4+]
Device ID: none
Strategy: [none|generic]
Firmware ID: none
[MemTool] load 2 items
Finished 29 sec
Write GPT[70]... Ok
get partitions...
unknown t_size
no gpt entries;gpt key item absent;raw parse fail;gpt key item absent 2nd time;gpt key item absent;
t_size adjusted
Partitions: 72
0x00100000 0x04000000 prodnv
0x04100000 0x00100000 miscdata
0x04200000 0x00100000 misc
0x04300000 0x00600000 trustos_a
0x04900000 0x00600000 trustos_b
0x04F00000 0x00100000 sml_a
0x05000000 0x00100000 sml_b
0x05100000 0x00300000 uboot_a
0x05400000 0x00300000 uboot_b
0x05700000 0x01000000 uboot_log
0x06700000 0x00800000 logo
0x06F00000 0x00800000 fbootlogo
0x07700000 0x00200000 l_fixnv1_a
0x07900000 0x00200000 l_fixnv2_a
0x07B00000 0x00200000 l_fixnv1_b
0x07D00000 0x00200000 l_fixnv2_b
0x07F00000 0x00200000 l_runtimenv1
0x08100000 0x00200000 l_runtimenv2
0x08300000 0x00200000 persist
0x08500000 0x01900000 l_modem_a
0x09E00000 0x01900000 l_modem_b
0x0B700000 0x00100000 l_deltanv_a
0x0B800000 0x00100000 l_deltanv_b
0x0B900000 0x00A00000 l_gdsp_a
0x0C300000 0x00A00000 l_gdsp_b
0x0CD00000 0x01400000 l_ldsp_a
0x0E100000 0x01400000 l_ldsp_b
0x0F500000 0x00600000 l_agdsp_a
0x0FB00000 0x00600000 l_agdsp_b
0x10100000 0x00100000 pm_sys_a
0x10200000 0x00100000 pm_sys_b
0x10300000 0x00100000 teecfg_a
0x10400000 0x00100000 teecfg_b
0x10500000 0x00A00000 hypervsior_a
0x10F00000 0x00A00000 hypervsior_b
0x11900000 0x04000000 boot_a
0x15900000 0x04000000 boot_b
0x19900000 0x06400000 vendor_boot_a
0x1FD00000 0x06400000 vendor_boot_b
0x26100000 0x00800000 init_boot_a
0x26900000 0x00800000 init_boot_b
0x27100000 0x00800000 dtb_a
0x27900000 0x00800000 dtb_b
0x28100000 0x00800000 dtbo_a
0x28900000 0x00800000 dtbo_b
0x29100000 0x01400000 elabel
0x2A500000 0x15E000000 super
0x188500000 0x04000000 cache
0x18C500000 0x1F400000 blackbox
0x1AB900000 0x00100000 vbmeta_a
0x1ABA00000 0x00100000 vbmeta_b
0x1ABB00000 0x04000000 metadata
0x1AFB00000 0x00A00000 sysdumpdb
0x1B0500000 0x00100000 vbmeta_system_a
0x1B0600000 0x00100000 vbmeta_system_b
0x1B0700000 0x00100000 vbmeta_vendor_a
0x1B0800000 0x00100000 vbmeta_vendor_b
0x1B0900000 0x00100000 vbmeta_system_ext_a
0x1B0A00000 0x00100000 vbmeta_system_ext_b
0x1B0B00000 0x00100000 vbmeta_product_a
0x1B0C00000 0x00100000 vbmeta_product_b
0x1B0D00000 0x00100000 vbmeta_odm_a
0x1B0E00000 0x00100000 vbmeta_odm_b
0x1B0F00000 0x00100000 avbmeta_rs_a
0x1B1000000 0x00100000 avbmeta_rs_b
0x1B1100000 0x00800000 common_rs1_a
0x1B1900000 0x00800000 common_rs1_b
0x1B2100000 0x01000000 common_rs2_a
0x1B3100000 0x01000000 common_rs2_b
0x1B4100000 0x1B68300000 userdata
0x00000000 0x00080000 splloader
0x00000000 0x00080000 splloader_bak
[MemTool] load 72 items
Finished 297 us

Critical partition write from post 5 :

[MemTool] load 72 items
Finished 297 us
Write 72 partitions? Yes
Writing...
Write [1/72] prodnv 64.00 Mb Ok 2 sec
Write [2/72] miscdata 1024.00 Kb Ok 63 us
Write [3/72] misc 1024.00 Kb Ok 62 us
Write [4/72] trustos_a 6.00 Mb Ok 313 us
Write [5/72] trustos_b 6.00 Mb Ok 312 us
Write [6/72] sml_a 1024.00 Kb Ok 63 us
Write [7/72] sml_b 1024.00 Kb Ok 63 us
Write [8/72] uboot_a 3.00 Mb Ok 172 us
Write [9/72] uboot_b 3.00 Mb Ok 172 us
Write [10/72] uboot_log 16.00 Mb Ok 609 us
Write [11/72] logo 8.00 Mb Ok 313 us
Write [12/72] fbootlogo 8.00 Mb Ok 312 us
Write [13/72] l_fixnv1_a 2.00 Mb Ok 156 us
Write [14/72] l_fixnv2_a 2.00 Mb Ok 62 us
Write [15/72] l_fixnv1_b 2.00 Mb Ok 157 us
Skip [16/72] l_fixnv2_b 2.00 Mb [No data]
Write [17/72] l_runtimenv1 2.00 Mb
[write] [l_runtimenv1] addr 0x0000 size 0x120000; cmd 0x01 ret 0x8A DOWN_SIZE_ERROR
Write [18/72] l_runtimenv2 2.00 Mb Ok 62 us
Estimated time to end 81 min 12 sec
Write [19/72] persist 2.00 Mb Ok 94 us
Write [20/72] l_modem_a 25.00 Mb Ok 1 sec
Write [21/72] l_modem_b 25.00 Mb Ok 1 sec
Write [22/72] l_deltanv_a 1024.00 Kb Ok 62 us
Write [23/72] l_deltanv_b 1024.00 Kb Ok 63 us
Write [24/72] l_gdsp_a 10.00 Mb Ok 500 us
Write [25/72] l_gdsp_b 10.00 Mb Ok 516 us
Write [26/72] l_ldsp_a 20.00 Mb Ok 1 sec
Write [27/72] l_ldsp_b 20.00 Mb Ok 1 sec
Write [28/72] l_agdsp_a 6.00 Mb Ok 344 us
Write [29/72] l_agdsp_b 6.00 Mb Ok 343 us
Write [30/72] pm_sys_a 1024.00 Kb Ok 78 us
Write [31/72] pm_sys_b 1024.00 Kb Ok 79 us
Write [32/72] teecfg_a 1024.00 Kb Ok 62 us
Write [33/72] teecfg_b 1024.00 Kb Ok 78 us
Write [34/72] hypervsior_a 10.00 Mb Ok 531 us
Write [35/72] hypervsior_b 10.00 Mb Ok 500 us
Write [36/72] boot_a 64.00 Mb Ok 3 sec
Write [37/72] boot_b 64.00 Mb Ok 3 sec
Write [38/72] vendor_boot_a 100.00 Mb Ok 5 sec
Write [39/72] vendor_boot_b 100.00 Mb Ok 5 sec
Write [40/72] init_boot_a 8.00 Mb Ok 421 us
Write [41/72] init_boot_b 8.00 Mb Ok 438 us
Write [42/72] dtb_a 8.00 Mb Ok 422 us
Write [43/72] dtb_b 8.00 Mb Ok 453 us
Write [44/72] dtbo_a 8.00 Mb Ok 453 us
Write [45/72] dtbo_b 8.00 Mb Ok 438 us
Write [46/72] elabel 20.00 Mb Ok 750 us
Skip [47/72] super 5.47 Gb [No data]
Write [48/72] cache 64.00 Mb Ok 2 sec
Write [49/72] blackbox 500.00 Mb Ok 18 sec
Write [50/72] vbmeta_a 1024.00 Kb Ok 79 us
Write [51/72] vbmeta_b 1024.00 Kb Ok 78 us
Write [52/72] metadata 64.00 Mb Ok 2 sec
Write [53/72] sysdumpdb 10.00 Mb Ok 375 us
Write [54/72] vbmeta_system_a 1024.00 Kb Ok 78 us
Write [55/72] vbmeta_system_b 1024.00 Kb Ok 78 us
Write [56/72] vbmeta_vendor_a 1024.00 Kb Ok 78 us
Write [57/72] vbmeta_vendor_b 1024.00 Kb Ok 78 us
Write [58/72] vbmeta_system_ext_a 1024.00 Kb Ok 78 us
Write [59/72] vbmeta_system_ext_b 1024.00 Kb Ok 79 us
Write [60/72] vbmeta_product_a 1024.00 Kb Ok 78 us
Write [61/72] vbmeta_product_b 1024.00 Kb Ok 78 us
Write [62/72] vbmeta_odm_a 1024.00 Kb Ok 78 us
Write [63/72] vbmeta_odm_b 1024.00 Kb Ok 78 us
Write [64/72] avbmeta_rs_a 1024.00 Kb Ok 78 us
Write [65/72] avbmeta_rs_b 1024.00 Kb Ok 63 us
Write [66/72] common_rs1_a 8.00 Mb Ok 422 us
Write [67/72] common_rs1_b 8.00 Mb Ok 421 us
Write [68/72] common_rs2_a 16.00 Mb Ok 844 us
Write [69/72] common_rs2_b 16.00 Mb Ok 860 us
Skip [70/72] userdata 109.63 Gb [No data]
Write [71/72] splloader 512.00 Kb Ok 78 us
Write [72/72] splloader_bak 512.00 Kb Ok 31 us
Completed 69 of 72
Finished 1 min 2 sec

also did write full factory pac ... no-go ... phone still dead (returns to flash mode after reboot/disconnect).
Identify works normal after all this, cm2 reads software/os info ...

any more ideas >?

b.r.
Alex

Repartition should be Ok, it's not an issue. Yes it was an issue with loading data for erased devices but now it should be Ok.
If you are able to get partitions list on identify it means gpt is Ok.
Flashing issue - can not give any advice for now, don't knw what may be wrong. I have one moto on hands for test, will try to erase and see.
if you have any kind of factoryflasher - try it.
Also if some kind of bugs was found in FDLs probably you have a resont to try with different FDLs.
Once I will find someting will let you know.

[YellowBoss]

> Identify works normal after all this, cm2 reads software/os info
it means at least gpt and `boot` are there

> reconfig UFS and as a consequence erase all memory.
I never got such issue. Can it be erased only during write operations or during read too? Any experience?

> but what about imei (security) ... ? will repair work ?
for now - only if you have a backup

> phone still dead (returns to flash mode after reboot/disconnect)
What is the exact behaviour? Any text there?

also wipe and format userdata after flash, who knows.

and last thing - make "OS startup logs", you will get text files. A lot of text but it may be at the end of log there is startup failure reason.
Once you will read logs - old logs will be erased.
You can power phone on again and read logs once again, you will get latest log but not tons of old texts.

[YellowBoss]

Originally Posted by bobo07

Bro I have struggled with this device few days to bring it to life. I will upload, tomorrow, backup and files what did worked for me. Unfortunately IMEI repair still doesn't work and I didn't find solution.

Any chance to get info what loaders was used for flashing? Any softwre logs?
And "flash two times" is quite strange solution, one more reason to get info what FDL files was used.

[YellowBoss]

forum become terrible last time, for fact notifications you may use this public chat https://t.me/InfinityBoxTalks (everybody are welcome)

there is one more chat with limited number of people for more close talks, if you are using telegram I'll write name here too.

[YellowBoss]

How to get Startup Logs

[Brka]

Originally Posted by YellowBoss

Repartition should be Ok, it's not an issue. Yes it was an issue with loading data for erased devices but now it should be Ok.
If you are able to get partitions list on identify it means gpt is Ok.
Flashing issue - can not give any advice for now, don't knw what may be wrong. I have one moto on hands for test, will try to erase and see.
if you have any kind of factoryflasher - try it.
Also if some kind of bugs was found in FDLs probably you have a resont to try with different FDLs.
Once I will find someting will let you know.

Okay ... first precaution for you: If you have same WORKING phone,
that power on ... dont connect it to older FDL.
It will get instantly erased, and you wont be able to make backup.
Without backup (as already known), imei is gone for good,
and for this newer security phones no solution so far, on ANY box/soft.

Phone which doesnt power on ... can be connected, read, written, erased and all other functions, on CM2SP3.
Once it powers on, and is connected to older FDL loader - it gets erased.

I played and tested with other box to confirm this.

Problem with cm2sp3 may be in other thing (other than faulty loader),
and that is - setting boot slot a/b, but - as i suspect also,
it may be in incorrect handling of GPT initialization.

All of that, to be confirmed and tested, requires first of all, newer fdl
which doesnt fully erase UFS memory.

Originally Posted by YellowBoss

Any chance to get info what loaders was used for flashing? Any softwre logs?
And "flash two times" is quite strange solution, one more reason to get info what FDL files was used.

Flash two times is ... because when phone gets connected to older FDL,
it gets erased, and enter some kind of "emergency rescue mode", accepting write of ONLY splloader and splloaderbak partitions, after that, on second boot it accepts gpt init, writing all partitions, etc.

Affected devices are all newer Unisoc T616 devices with UFS memory
(G13, G14, G04s etc etc, i dont even know how many and which models).


Files that bobo07 posted (thanks ofr it) works for unbricking device.
After writing splloader/splloaderbak, and after, all vital partitions from that backup (and those are not found in factory pac or fb rom),
phone power on, fastboot works and can be used motorola software fix,
for flashing stock rom, which fully powers on device.

Unfortunatly, i dont have factory flasher (yet), but i asked some people,
from official service, maybe they can provide something in next days.

b.r.
Alex