OPPO A5 2020 dead after password remove [Answered]

[gsmfriend]

hello medusa TEAM and every one

After remove password from OPPO A5 2020
no phone is dead (QD LOADER 9008)

what's goes Wrong ,,, all is fine connection with box

and remove password operation ok

but phone now is not powered ON , dead boot or what

help solution please.

thanks.

[Medusa Box]

Hello.

Please post here full Software log with all performed operation, we will check it.

[gsmfriend]

Welcome to Medusa Pro Software version 2.2.0.
Started.
Reader #0: Alcor Micro USB Smart Card Reader 0
Reader #1: FT SCR2000 0

Please disconnect battery and USB cable.

Model Settings:
Interface : eMMC
Voltage : 2.2V
Bus Mode : 1 bit
Bus speed : Auto

Connecting...
Device : Hynix eMMC hC8aP
Page size : 512 B
Block size : 512 B
Block count : 122142720
Size : 58.24 GB (59640.00 MB)
---------------------------------------------------------------
CID Info

CID : 90014A68433861503E0351B158DF96C9
Manufacturer ID : 0X90
Device/BGA : BGA (Discrete embedded)
OEM/Application ID : 0X4A
Product name : hC8aP
Product revision : 0.3
Product serial number : (hex) 51B158DF
Manufacturing date : 09/2019
---------------------------------------------------------------
CSD Info

CSD : D02700328F5903FFFFFFFFEF8E400043
CSD structure : CSD version No. 1.2
SPEC version : 4.1, 4.2, 4.3, 4.4, 4.41, 4.5,
4.51, 5.0, 5.01, 5.1
Data read access time1: 15 ms
TRAN speed : 26 MHz
READ block length : 512 Bytes
WP group enable : YES
PERM_WRITE_PROTECT : NO
TMP_WRITE_PROTECT : NO
---------------------------------------------------------------
EXTCSD Info

Revision 1.8 (for MMC v5.1)
Erase block size : 512 Kbytes
Boot1 size : 4096 Kbytes
Boot2 size : 4096 Kbytes
RPMB size : 16384 Kbytes

Partition config : (0x38) 00111000
Boot partition enable : User area
(Bus width = 1Bit)
Boot ACK : No boot acknowledge sent (default)

Boot bus conditions : (0x00) 00000000
Boot bus width : x1 (sdr) or x4 (ddr) bus width in boot operation mode (default)
Reset boot bus conditions : Reset bus width to x1, single data rate and backward compatible timings after boot operation (default)
Boot mode : Use single data rate + backward compatible timings in boot operation (default)

RST_n function : (0x01) RST_n signal is permanently enabled

Partitioning support : Device supports partitioning features
Enhanced attribute : Device can have enhanced technological features in partitions and user data area.
Max enhanced data size: 30531584 Kbytes
Partitions attribute : 0x0
Part setting completed: 0x0
GP partition 1 size : 0 b
GP partition 2 size : 0 b
GP partition 3 size : 0 b
GP partition 4 size : 0 b
Enhanced area size : (0x0) 0 b
Enhanced area start : (0x0) 0 b

Backup EXT_CSD saved to file C:/Program Files (x86)/Medusa Pro Software/EXT_CSD Backups/hC8aP_01_03_2021_15_42_48.bin.
Connect successful.
---------------------------------------------------------------
SW: 2.2.0; FW: 1.24.
P00: GPT (00000000, 00000028) 20 KB
P01: oppodycnvbk (00000028, 00005000) 10 MB
P02: oppostanvbk (00005028, 00005000) 10 MB
P03: modemst1 (0000A028, 00001000) 2048 KB
P04: modemst2 (0000B028, 00001000) 2048 KB
P05: opporeserve1 (0000C028, 00004000) 8 MB
P06: opporeserve2 (00010028, 00020000) 64 MB
P07: opporeserve3 (00030028, 00020000) 64 MB
P08: oppo_sec (00050028, 00005000) 10 MB
P09: xbl (00060000, 00001C00) 3584 KB
P10: xblbak (00061C00, 00001C00) 3584 KB
P11: xbl_config (00080000, 00000100) 128 KB
P12: xbl_configbak (00080100, 00000100) 128 KB
P13: tz (000A0000, 00002000) 4 MB
P14: tzbak (000C0000, 00002000) 4 MB
P15: rpm (000E0000, 00000400) 512 KB
P16: rpmbak (00100000, 00000400) 512 KB
P17: hyp (00120000, 00004000) 8 MB
P18: hypbak (00140000, 00004000) 8 MB
P19: boot (00144000, 00030000) 96 MB
P20: bootbak (00174000, 00030000) 96 MB
P21: cache (001A4000, 00080000) 256 MB
P22: keymaster (00240000, 00000400) 512 KB
P23: keymasterbak (00240400, 00000400) 512 KB
P24: cmnlib (00240800, 00000400) 512 KB
P25: cmnlib64 (00240C00, 00000400) 512 KB
P26: cmnlibbak (00241000, 00000400) 512 KB
P27: cmnlib64bak (00241400, 00000400) 512 KB
P28: mdtpsecapp (00241800, 00002000) 4 MB
P29: mdtpsecappbak (00243800, 00002000) 4 MB
P30: mdtp (00245800, 00010000) 32 MB
P31: mdtpbak (00255800, 00010000) 32 MB
P32: modem (00265800, 00080000) 256 MB
P33: dsp (002E5800, 00020000) 64 MB
P34: dspbak (00305800, 00020000) 64 MB
P35: abl (00325800, 00000800) 1024 KB
P36: ablbak (00326000, 00000800) 1024 KB
P37: ddr (00326800, 00000800) 1024 KB
P38: bluetooth (00327000, 00000800) 1024 KB
P39: bluetoothbak (00327800, 00000800) 1024 KB
P40: ssd (00340000, 00000010) 8 KB
P41: dtbo (00340010, 0000C000) 24 MB
P42: dtbobak (0034C010, 0000C000) 24 MB
P43: recovery (00360000, 00020000) 64 MB
P44: recoverybak (00380000, 00020000) 64 MB
P45: imagefv (003A0000, 00001000) 2048 KB
P46: imagefvbak (003A1000, 00001000) 2048 KB
P47: uefisecapp (003A2000, 00001000) 2048 KB
P48: uefisecappbak (003A3000, 00001000) 2048 KB
P49: persist (003A4000, 00010000) 32 MB
P50: metadata (003B4000, 00008000) 16 MB
P51: misc (003BC000, 00000800) 1024 KB
P52: keystore (003BC800, 00000400) 512 KB
P53: devcfg (003BCC00, 00000100) 128 KB
P54: devcfgbak (003BCD00, 00000100) 128 KB
P55: qupfw (003BCE00, 000000A0) 80 KB
P56: qupfwbak (003BCEA0, 000000A0) 80 KB
P57: frp (003BCF40, 00000400) 512 KB
P58: rawdump (003BD340, 00040000) 128 MB
P59: devinfo (00400000, 00000008) 4 KB
P60: dip (00400008, 00000800) 1024 KB
P61: apdp (00420000, 00000200) 256 KB
P62: spunvm (00420200, 00004000) 8 MB
P63: splash (00424200, 00010520) 32.64 MB
P64: limits (00440000, 00000008) 4 KB
P65: toolsfv (00440008, 00000800) 1024 KB
P66: logfs (00460000, 00004000) 8 MB
P67: cateloader (00464000, 00001000) 2048 KB
P68: logdump (00465000, 00020000) 64 MB
P69: vbmeta (004A0000, 00000080) 64 KB
P70: vbmetabak (004A0080, 00000080) 64 KB
P71: storsec (004A0100, 00000100) 128 KB
P72: multiimgoem (004A0200, 00000040) 32 KB
P73: multiimgqti (004A0240, 00000040) 32 KB
P74: secdata (004A0280, 00000032) 25 KB
P75: catefv (004A02B8, 00000400) 512 KB
P76: catecontentfv (004A06B8, 00000800) 1024 KB
P77: uefivarstore (004A0EB8, 00000400) 512 KB
P78: DRIVER (004C0000, 00010000) 32 MB
P79: fsg (004E0000, 00001000) 2048 KB
P80: fsc (00500000, 00000100) 128 KB
P81: system (00500100, 00C7E000) 6.246 GB
P82: vendor (0117E100, 00322000) 1604 MB
P83: odm (014A0100, 00080000) 256 MB
P84: userdata (01520100, 05F5BEDF) 47.68 GB
Backuping modemst1 partition...
Opening C:/Program Files (x86)/Medusa Pro Software/Backups/hC8aP_modemst1_0xa028_0x1000_01_03_2021_15_42_48.b in file...
Reading. Please wait... Done.
Elapsed time 00:00:00
SW: 2.2.0; FW: 1.24.
Backuping modemst2 partition...
Opening C:/Program Files (x86)/Medusa Pro Software/Backups/hC8aP_modemst2_0xb028_0x1000_01_03_2021_15_42_48.b in file...
Reading. Please wait... Done.
Elapsed time 00:00:00
SW: 2.2.0; FW: 1.24.
Backuping fsg partition...
Opening C:/Program Files (x86)/Medusa Pro Software/Backups/hC8aP_fsg_0x4e0000_0x1000_01_03_2021_15_42_48.bin file...
Reading. Please wait... Done.
Elapsed time 00:00:00
SW: 2.2.0; FW: 1.24.

---------------------------------------------------------------
Searching Android build info...
Ok

Disk/Image size : 8f800000 bytes
Device sector size : 512 bytes
Partition offset : 5243136
Number of sectors : 13099008
Build ID : PKQ1.190714.001
Release ID : 9
Architecture ABI : arm64-v8a
Architecture ABI List : arm64-v8a,armeabi-v7a,armeabi
Build Description : trinket-user 9 PKQ1.190714.001 eng.root.20200426.214856 release-keys

---------------------------------------------------------------
Reset operation finished

[Medusa Box]

Did You read full backup before perform Remove password operation?

[gsmfriend]

no , I have only modemst1, modemst2, ext_csd

may be clk ,cmd resistor is not ok

someone tell that i have to shot clk resistor for phone to work

if clk line is not good phone goes to qdloader 9008

is that true...i will test it.
any other solution.

[gsmfriend]

phone alive again by shorting clk resistor but hang on logo
i'll test flashing.

[demirlord]

Yes, Short circuit clk resistor. Problem is solved.

[gsmfriend]

done but phone now restart on logo

thanks for reply.

[demirlord]

your need full dump A502020 CPH1931. ? I have Dump. My device has improved with the clk resistor. and I got a backup.

[gsmfriend]

can you upload it please

I am in crisis with customer

help pls
thanks.

[jhepoy_org]

Originally Posted by gsmfriend

Welcome to Medusa Pro Software version 2.2.0.
Started.
Reader #0: Alcor Micro USB Smart Card Reader 0
Reader #1: FT SCR2000 0

Please disconnect battery and USB cable.

Model Settings:
Interface : eMMC
Voltage : 2.2V
Bus Mode : 1 bit
Bus speed : Auto

Connecting...
Device : Hynix eMMC hC8aP
Page size : 512 B
Block size : 512 B
Block count : 122142720
Size : 58.24 GB (59640.00 MB)
---------------------------------------------------------------
CID Info

CID : 90014A68433861503E0351B158DF96C9
Manufacturer ID : 0X90
Device/BGA : BGA (Discrete embedded)
OEM/Application ID : 0X4A
Product name : hC8aP
Product revision : 0.3
Product serial number : (hex) 51B158DF
Manufacturing date : 09/2019
---------------------------------------------------------------
CSD Info

CSD : D02700328F5903FFFFFFFFEF8E400043
CSD structure : CSD version No. 1.2
SPEC version : 4.1, 4.2, 4.3, 4.4, 4.41, 4.5,
4.51, 5.0, 5.01, 5.1
Data read access time1: 15 ms
TRAN speed : 26 MHz
READ block length : 512 Bytes
WP group enable : YES
PERM_WRITE_PROTECT : NO
TMP_WRITE_PROTECT : NO
---------------------------------------------------------------
EXTCSD Info

Revision 1.8 (for MMC v5.1)
Erase block size : 512 Kbytes
Boot1 size : 4096 Kbytes
Boot2 size : 4096 Kbytes
RPMB size : 16384 Kbytes

Partition config : (0x38) 00111000
Boot partition enable : User area
(Bus width = 1Bit)
Boot ACK : No boot acknowledge sent (default)

Boot bus conditions : (0x00) 00000000
Boot bus width : x1 (sdr) or x4 (ddr) bus width in boot operation mode (default)
Reset boot bus conditions : Reset bus width to x1, single data rate and backward compatible timings after boot operation (default)
Boot mode : Use single data rate + backward compatible timings in boot operation (default)

RST_n function : (0x01) RST_n signal is permanently enabled

Partitioning support : Device supports partitioning features
Enhanced attribute : Device can have enhanced technological features in partitions and user data area.
Max enhanced data size: 30531584 Kbytes
Partitions attribute : 0x0
Part setting completed: 0x0
GP partition 1 size : 0 b
GP partition 2 size : 0 b
GP partition 3 size : 0 b
GP partition 4 size : 0 b
Enhanced area size : (0x0) 0 b
Enhanced area start : (0x0) 0 b

Backup EXT_CSD saved to file C:/Program Files (x86)/Medusa Pro Software/EXT_CSD Backups/hC8aP_01_03_2021_15_42_48.bin.
Connect successful.
---------------------------------------------------------------
SW: 2.2.0; FW: 1.24.
P00: GPT (00000000, 00000028) 20 KB
P01: oppodycnvbk (00000028, 00005000) 10 MB
P02: oppostanvbk (00005028, 00005000) 10 MB
P03: modemst1 (0000A028, 00001000) 2048 KB
P04: modemst2 (0000B028, 00001000) 2048 KB
P05: opporeserve1 (0000C028, 00004000) 8 MB
P06: opporeserve2 (00010028, 00020000) 64 MB
P07: opporeserve3 (00030028, 00020000) 64 MB
P08: oppo_sec (00050028, 00005000) 10 MB
P09: xbl (00060000, 00001C00) 3584 KB
P10: xblbak (00061C00, 00001C00) 3584 KB
P11: xbl_config (00080000, 00000100) 128 KB
P12: xbl_configbak (00080100, 00000100) 128 KB
P13: tz (000A0000, 00002000) 4 MB
P14: tzbak (000C0000, 00002000) 4 MB
P15: rpm (000E0000, 00000400) 512 KB
P16: rpmbak (00100000, 00000400) 512 KB
P17: hyp (00120000, 00004000) 8 MB
P18: hypbak (00140000, 00004000) 8 MB
P19: boot (00144000, 00030000) 96 MB
P20: bootbak (00174000, 00030000) 96 MB
P21: cache (001A4000, 00080000) 256 MB
P22: keymaster (00240000, 00000400) 512 KB
P23: keymasterbak (00240400, 00000400) 512 KB
P24: cmnlib (00240800, 00000400) 512 KB
P25: cmnlib64 (00240C00, 00000400) 512 KB
P26: cmnlibbak (00241000, 00000400) 512 KB
P27: cmnlib64bak (00241400, 00000400) 512 KB
P28: mdtpsecapp (00241800, 00002000) 4 MB
P29: mdtpsecappbak (00243800, 00002000) 4 MB
P30: mdtp (00245800, 00010000) 32 MB
P31: mdtpbak (00255800, 00010000) 32 MB
P32: modem (00265800, 00080000) 256 MB
P33: dsp (002E5800, 00020000) 64 MB
P34: dspbak (00305800, 00020000) 64 MB
P35: abl (00325800, 00000800) 1024 KB
P36: ablbak (00326000, 00000800) 1024 KB
P37: ddr (00326800, 00000800) 1024 KB
P38: bluetooth (00327000, 00000800) 1024 KB
P39: bluetoothbak (00327800, 00000800) 1024 KB
P40: ssd (00340000, 00000010) 8 KB
P41: dtbo (00340010, 0000C000) 24 MB
P42: dtbobak (0034C010, 0000C000) 24 MB
P43: recovery (00360000, 00020000) 64 MB
P44: recoverybak (00380000, 00020000) 64 MB
P45: imagefv (003A0000, 00001000) 2048 KB
P46: imagefvbak (003A1000, 00001000) 2048 KB
P47: uefisecapp (003A2000, 00001000) 2048 KB
P48: uefisecappbak (003A3000, 00001000) 2048 KB
P49: persist (003A4000, 00010000) 32 MB
P50: metadata (003B4000, 00008000) 16 MB
P51: misc (003BC000, 00000800) 1024 KB
P52: keystore (003BC800, 00000400) 512 KB
P53: devcfg (003BCC00, 00000100) 128 KB
P54: devcfgbak (003BCD00, 00000100) 128 KB
P55: qupfw (003BCE00, 000000A0) 80 KB
P56: qupfwbak (003BCEA0, 000000A0) 80 KB
P57: frp (003BCF40, 00000400) 512 KB
P58: rawdump (003BD340, 00040000) 128 MB
P59: devinfo (00400000, 00000008) 4 KB
P60: dip (00400008, 00000800) 1024 KB
P61: apdp (00420000, 00000200) 256 KB
P62: spunvm (00420200, 00004000) 8 MB
P63: splash (00424200, 00010520) 32.64 MB
P64: limits (00440000, 00000008) 4 KB
P65: toolsfv (00440008, 00000800) 1024 KB
P66: logfs (00460000, 00004000) 8 MB
P67: cateloader (00464000, 00001000) 2048 KB
P68: logdump (00465000, 00020000) 64 MB
P69: vbmeta (004A0000, 00000080) 64 KB
P70: vbmetabak (004A0080, 00000080) 64 KB
P71: storsec (004A0100, 00000100) 128 KB
P72: multiimgoem (004A0200, 00000040) 32 KB
P73: multiimgqti (004A0240, 00000040) 32 KB
P74: secdata (004A0280, 00000032) 25 KB
P75: catefv (004A02B8, 00000400) 512 KB
P76: catecontentfv (004A06B8, 00000800) 1024 KB
P77: uefivarstore (004A0EB8, 00000400) 512 KB
P78: DRIVER (004C0000, 00010000) 32 MB
P79: fsg (004E0000, 00001000) 2048 KB
P80: fsc (00500000, 00000100) 128 KB
P81: system (00500100, 00C7E000) 6.246 GB
P82: vendor (0117E100, 00322000) 1604 MB
P83: odm (014A0100, 00080000) 256 MB
P84: userdata (01520100, 05F5BEDF) 47.68 GB
Backuping modemst1 partition...
Opening C:/Program Files (x86)/Medusa Pro Software/Backups/hC8aP_modemst1_0xa028_0x1000_01_03_2021_15_42_48.b in file...
Reading. Please wait... Done.
Elapsed time 00:00:00
SW: 2.2.0; FW: 1.24.
Backuping modemst2 partition...
Opening C:/Program Files (x86)/Medusa Pro Software/Backups/hC8aP_modemst2_0xb028_0x1000_01_03_2021_15_42_48.b in file...
Reading. Please wait... Done.
Elapsed time 00:00:00
SW: 2.2.0; FW: 1.24.
Backuping fsg partition...
Opening C:/Program Files (x86)/Medusa Pro Software/Backups/hC8aP_fsg_0x4e0000_0x1000_01_03_2021_15_42_48.bin file...
Reading. Please wait... Done.
Elapsed time 00:00:00
SW: 2.2.0; FW: 1.24.

---------------------------------------------------------------
Searching Android build info...
Ok

Disk/Image size : 8f800000 bytes
Device sector size : 512 bytes
Partition offset : 5243136
Number of sectors : 13099008
Build ID : PKQ1.190714.001
Release ID : 9
Architecture ABI : arm64-v8a
Architecture ABI List : arm64-v8a,armeabi-v7a,armeabi
Build Description : trinket-user 9 PKQ1.190714.001 eng.root.20200426.214856 release-keys

---------------------------------------------------------------
Reset operation finished

bro can you share pinout for medusa thanks

[gsmfriend]

what pinouts..medusa box or oppo A5 2020 (isp)

[jhepoy_org]

Originally Posted by gsmfriend

what pinouts..medusa box or oppo A5 2020 (isp)

oppo ufs isp bro and medusa because ng rx and tx in the adaptor label

[gsmfriend]

cph1931 is EMMC inside not UFS
and this is ISP pinout I use.

[demirlord]

https://disk.yandex.com.tr/d/XINkEOl8NjZdlg here dump