yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] emuzychenko:
Most Qualcomm-based Android PDAs support emergency download (EDL) mode allowing to unbrick device, unlock bootloader or modify protected device parameters. If ADB interface is accessible, "adb reboot edl" can be used to reboot to EDL mode.

Many bricked PDAs cannot be booted with full ADB support while FastBoot mode is accessible. But if bootloader is locked, there is no way to flash a partition or boot an image.

Some firmwares support rebooting to EDL in Android Bootloader aboot module (the "reboot-edl" command) but fastboot utility doesn't recognize "reboot-edl" in the command line and refuses to sent the command to the device.

Since FastBoot command protocol is simple and text-based, it is enough to send a packet containing "reboot-edl" text over USB. The simplest way to do that is to patch Windows fastboot.exe file, replacing "reboot-bootloader" text with "reboot-edl". As "reboot-bootloader" string is found in the command line, fastboot.exe sends the same constant string to the device. So if "reboot-bootloader" is replaced with "reboot-edl", you can specify "reboot-edl" in the command line and the same text will be sent to the device.

In the attached example, the mentioned string is located at offset 2685c.

I occasionally locked bootloader in my unlocked/rooted Xiaomi Redmi Note 3 Pro (Snapdragon) so it could boot to FastBoot or Diagnostic 900E modes. Tried to swich from 900E to 9008 with QPST but it reported unspecified error.

Analyzing aboot (emmc_appsboot.mbn), found that it supports "reboot-edl" so the only remaining thing was to find a way to send it to the bootloader.

With the attached fastboot.exe, successfully rebooted to EDL mode (9008) and re-flashed proper partition images.

Of course, patched version does not support "reboot-bootloader" command because it has been replaced by "reboot-edl".

There also is a detailed guide.
[Android Software/Hacking General [Developers Only]] Santhosh M:
Works perfectly for me :)
[Android Software/Hacking General [Developers Only]] s_wheel:
It's working and for me also! Great work!

Many users can to reject the test point method.
[Android Software/Hacking General [Developers Only]] emuzychenko:
Please don't forget to vote to collect a proper statistics. :)
[Android Software/Hacking General [Developers Only]] marabujo:
Thank you very much. You are a genius ;D
[Android Software/Hacking General [Developers Only]] alessiobnb:
Thank you so much.

I was able to enter edl-mode but miflash gives error 0x80070008 max buffer sector is 256. What can i do?
[Android Software/Hacking General [Developers Only]] emuzychenko:
Unfortunately, I'm not familiar with MiFlash so cannot help you. It is better to search other threads (here and on Xiaomi).
[Android Software/Hacking General [Developers Only]] tecno789:
It doesn't work on xiaomi Mi5

What a pity, I saw for the moment the hope
[Android Software/Hacking General [Developers Only]] emuzychenko:
Will take a look at Mi 5 bootloader. Maybe there is a solution too.
[Android Software/Hacking General [Developers Only]] tecno789:
Thanks too much.

I will appreciate it
[Android Software/Hacking General [Developers Only]] emuzychenko:
Who has no success with this method, please upload somewhere (or post URL to an existing file) the image file of your "aboot" partition from FastBoot firmware, I will try to analyze them. For Redmi Note 3 Pro, image file is named "emmc_appsboot.mbn". If your FastBoot firmware contains a batch file that calls fastboot.exe, the appropriate image file name can be found there.
[Android Software/Hacking General [Developers Only]] scarletnokarasu:
hi i can't get it work on xiaomi mi max

here is my aboot and emmc_appsboot.mbn

https://drive.google.com/open?id=0B2M9hEQgSgheZjFNeFR4U2tCb00
[Android Software/Hacking General [Developers Only]] emuzychenko:
Your bootloader supports the following oem commands in FastBoot mode:

oem unlock

oem lock

oem edl

oem device-info

oem enable-charger-screen

oem disable-charger-screen

oem off-mode-charge

oem poweroff

oem select-display-panel

So "oem edl" should switch the phone to EDL mode (any fastboot.exe will support that).

Additionally, "oem poweroff" should power the phone off.
[Android Software/Hacking General [Developers Only]] emuzychenko:
Checked Mi 4c, Mi 5 and Mi Max bootloaders - all of them support "oem edl" to switch to EDL mode. Looks like a kind of "protection" is implemented in RN3P bootloader that supports only "reboot-edl" command.
[Android Software/Hacking General [Developers Only]] anil4523:
emmc_appsboot.mbn file from Fastboot firmware of 7.3.5.0 MAAMIDD Global Stable of Mi 5 - https://mega.nz/#!OUZ1QaoI!EIgsKTOn6PQZ236pluhHmVRQ5D9HCKWeNRfzqgFbkgM

This will support all of that mentioned by [MENTION=7379761]emuzychenko[/MENTION]

View attachment 3777128

But it is mentioned that edl is blocked in 7.3.x.x firmware, so how to check whether edl is working or not ??

Thanks
[Android Software/Hacking General [Developers Only]] emuzychenko:
Sorry but cannot download the file - mega.nz asks me for creating an account.
[Android Software/Hacking General [Developers Only]] Kanth's:
you are a genius . I can now say bye bye to testpoint method
[Android Software/Hacking General [Developers Only]] Thri11:
Awesome guide ...

Worked for me also....
[Android Software/Hacking General [Developers Only]] anil4523:
Here is google drive link of boot.img & emmc_appsboot.mbn file of 7.3.5.0 MAAMIDD Global Stable for Mi5 - https://drive.google.com/open?id=0B0M_ponZ2Qxjd0lueS1fREtWRkE

Video - https://www.youtube.com/watch?v=4GOi61S-qUs
[Android Software/Hacking General [Developers Only]] Kanth's:
my miflash is giving error 0x80070008 Open Serial Port "\\.\COM8"
[Android Software/Hacking General [Developers Only]] jurben:
Excelent findings. Thanks. I can do this on my linux's fastboot and able to reboot my Redmi Note 3 Snapdragon to edl from fastboot mode.

But..

For my Redmi 3 I cannot find oem edl or reboot-edl in appsboot.mbn.

---------- Post added at 03:34 PM ---------- Previous post was at 03:26 PM ----------

I think this patch is just to send commands to device to reboot into edl. But if the device itself is locked to refuse booting into edl mode that will be other things to do to unlock.
[Android Software/Hacking General [Developers Only]] emuzychenko:
Surely.
[Android Software/Hacking General [Developers Only]] iakovl:
used the file to go to EDL, PC sees 9008

but in MiFlash i get an error
[Android Software/Hacking General [Developers Only]] emuzychenko:
Try a production version, not the beta.
[Android Software/Hacking General [Developers Only]] iakovl:
moved to another computer and it worked

classic pc repair...

1) switch cable

2) switch usb port

3) switch pc

:P
[Android Software/Hacking General [Developers Only]] ap6709:
You just saved me from visiting the service centre bro!!!
[Android Software/Hacking General [Developers Only]] :
Does anyone know if this works on Sony Xperia Z3c,i currently have no time to test
[Android Software/Hacking General [Developers Only]] majee12:
Impressive

Perfect.
[Android Software/Hacking General [Developers Only]] THEHOLYG0D:
Wish this came out earlier cause I also have a modern snapdragon device, It bricked somehow, fastboot wasn't flashing partitions, and i have a strong feeling this is gonna work, but Its now in service center, will let you know soon thanks very much for this, just to be clear like, the command should be this right? "adb reboot edl", and normal fastboot commands follow?
[Android Software/Hacking General [Developers Only]] SkandaH:
[MENTION=5208748]Mohammad Siddique[/MENTION]

If you're talking about Yuphoria, then its bootloader doesn't support any reboot to edl command.
[Android Software/Hacking General [Developers Only]] THEHOLYG0D:
How you know I was talking about YUPHORIA :333

Thanks for the heads up :33
[Android Software/Hacking General [Developers Only]] tarunr:
Moto G 2nd Gen

Any chances of this working on Moto G2.. Hard bricked my phone.. :confused: :crying:
[Android Software/Hacking General [Developers Only]] HampTheToker:
Aboot for Asus Zenfone 2 Laser ZE551KL https://www.dropbox.com/s/7dtykne7sb32dsd/emmc_appsboot_8916.mbn?dl=0
[Android Software/Hacking General [Developers Only]] En Enu Elan Elua:
Xiaomi Mi3W doesn't work
[Android Software/Hacking General [Developers Only]] SkandaH:
Its your signature... & we may crossed path before in YU forums.

[MENTION=2556762]HampTheToker[/MENTION]

Asus doesn't provide any reboot to EDL option. Available options are:

reboot

reboot-bootloader

preflash

oem reboot-recovery

oem device-info

oem get_build_version

oem disable-charger-mode

oem enable-charger-mode

oem select-display-panel

oem adb_enable

oem adb_enable_cts

oem partition-test

You may take a look in the discussion in this thread.
[Android Software/Hacking General [Developers Only]] THEHOLYG0D:
​

Deadpool wala Tito :3
[Android Software/Hacking General [Developers Only]] saarxee:
It works on Mi 5 locked bootloader and OEM EDL command doesnt work because LOCKED BOOTLOADER error...??
[Android Software/Hacking General [Developers Only]] HampTheToker:
Thanks. I had mine unlocked twenty minutes after I took it out of the box, lol. I was hoping this could be useful for other ZF2L users that have trouble with that app. I appreciate the info, tho. ??
[Android Software/Hacking General [Developers Only]] aromerblz:
I doubt it may work, but does this have a shot at Samsung phones?
[Android Software/Hacking General [Developers Only]] emmaedeh:
Pls open appeal to any developer, is it possible to use this to create a root exploit for lg g3 running marshmallow. We LG G3 users on stock MM need root. Thanks in advance.
[Android Software/Hacking General [Developers Only]] Floating Point:
How do you analyze aboot to know which commands in fastboot mode is supported? IDA?
[Android Software/Hacking General [Developers Only]] ftan299:
I have a moto x xt1060 locked bootlader. I am only able to go to fastboot mode and EDL (QCHUSB mode). My phone is bricked. How can i revive it from edl mode?
[Android Software/Hacking General [Developers Only]] celoxocis:
I would like to know that too. Thanks in advance!
[Android Software/Hacking General [Developers Only]] emuzychenko:
There is no need to disassemble the code. Looking on aboot_fastboot_register_commands function in aboot.c, you can see there is a command table starting from "flash:" and "erase:". So just open binary module in a hex viewer, search for "flash:" and you will see the command table.
[Android Software/Hacking General [Developers Only]] celoxocis:
This is interesting i checked my aboot and i have found the following:

reboot-bootloader
oem unlock
oem unlock-go
oem lock
flashing unlock
flashing lock
flashing lock_critical
flashing unlock_critical
flashing
get_unlock_ability
oem device-info preflash
oem enable-charger-screen
oem disable-charger-screen
oem select-display-panel

but if i boot into the stock ROM and have the device rooted im able to enter EDL mode with "adb reboot edl".

Shouldn't my fastboot be able to reboot into EDL too? despite the missing command?

just trying to understand how it actually works.
[Android Software/Hacking General [Developers Only]] emuzychenko:
Of course no.
[Android Software/Hacking General [Developers Only]] celoxocis:
Does it depend on the aboot.c or fastboot.c? Just curious.
[Android Software/Hacking General [Developers Only]] emuzychenko:
aboot.c contains server code, fastboot.c contains client code. A client is able just to send a command and receive a result, no more. If a server does not support a command, there is no way to force it.

Only "oem" commands are sent without checking/parsing. But some non-oem commands like "reboot-edl" or "fwinfo:", are not recognized by fastboot client code so they cannot be sent by a typical fastboot client. I think some vendors build their own fastboot clients from slightly modified fastboot.c code allowing to send non-standard commands to a server. Maybe there is a simple universal fastboot client that just sends a given command string and receives a reply string, supporting no binary data transfer, partition operations and other standard fastboot commands.
[Android Software/Hacking General [Developers Only]] Topogigi:
FYI: does not work for Peregrine (Moto G 4G 2013 XT1039). Command not recognized. My bricked device (corrupted EMMC) will remain in the drawer :(
[Android Software/Hacking General [Developers Only]] akskbn:
This Method is not working for Latest MIUI Xioami MI5.
[Android Software/Hacking General [Developers Only]] emuzychenko:
Because it should not.
[Android Software/Hacking General [Developers Only]] chr0m:
I was about to do the touchpoint method when I saw this for getting into EDL mode. Well I can get into EDL mode, but when I try to flash I always get an error after a couple of seconds.

Reached the end of the file.(0x80070026: ReadRobust failed)﻿
[Android Software/Hacking General [Developers Only]] rex.raul:
Who wish to try Test Point Method when fastboot_edl is there. Many Many thanks to [MENTION=7379761]emuzychenko[/MENTION] . You saved the day of mine :D
[Android Software/Hacking General [Developers Only]] code guy:
Awesome!!
[Android Software/Hacking General [Developers Only]] shia786:
Hi is there any way you can get this working on ZTE Axon 7, I am currently stuck in fast boot mode and no way out other than edl mode so I can flash TWRP recovery

Thanks in advanced
[Android Software/Hacking General [Developers Only]] Kanth's:
This is not working for Redmi 3S - Snapdragon 430
[Android Software/Hacking General [Developers Only]] MrPhodovisck:
Thanks, man.
[Android Software/Hacking General [Developers Only]] exodius48:
[MENTION=7379761]emuzychenko[/MENTION] not working properly on my device. my device rebooted to edl with blink led , but i get message on my computer that "device not recognized". How to solve?
[Android Software/Hacking General [Developers Only]] mihail1:
Hello, my phone at all does not turn on when connected PC is it as Qualcomm 900E. I can not enter into fastboot mode (power and down does not work).

You can do the trick something to do with it? The phone is redmi note 3 pro
[Android Software/Hacking General [Developers Only]] mofazar:
hello, my Redmi note 3 stuck in edl mode
[Android Software/Hacking General [Developers Only]] sparky6688:
Tried on my bricked and unlocked Redmi3. Only boot into bootloop, not into edl/recovery mode. any suggestion?
[Android Software/Hacking General [Developers Only]] juliog:
C:\adb2\edl>fastboot_edl reboot-edl

rebooting into bootloader...

FAILED (remote: Unknown command)

finished. total time: 0.016s
[Android Software/Hacking General [Developers Only]] Shardana:
Xiaomi 5 does not work on me ....is in bootloop ...

if use "fastboot reboot-EDL" -> screen off, but turns on again immediately with MIUI logo
[Android Software/Hacking General [Developers Only]] digitalnasarma:
Hi, I brick my phone and try this method to go to EDL mode but nothing happens, It waits for devices forever... What to do, any help?

Just to mention, I have locked bootloader on RN3P. I was on miui global stable and try to unlock bootloder with unoficial way and stack in butloop

When is turn off device manager will show as: Qualcomm HS-USB Diagnostics 900E (COM3)
[Android Software/Hacking General [Developers Only]] digitalnasarma:
I solve problem by removing battery and then connect to computer. Follow this instruction: http://xiaomitips.com/guide/how-to-unbrick-redmi-note-3-snapdragon-best-solution/
[Android Software/Hacking General [Developers Only]] Qaibo:
Thank you!
[Android Software/Hacking General [Developers Only]] Adi!@#:
Love you bro ! May god bless you with the happiest life :) This is the only method which allowed me to unbrick my phone. May your life be blessed

---------- Post added at 11:11 AM ---------- Previous post was at 11:08 AM ----------

Bro never try the unofficial method. It's quite risky. Why you in such a hurry to get your phone bricked ? Just apply for permission from Xiaomi's website and try after one week it will surely work. It worked for me too. My phone got bricked due to phone decryption/data corrupt error:p . But finally this guy's method saved my phone. Really thankful to him :angel:
[Android Software/Hacking General [Developers Only]] aguy46:
On redmi 3s not work
[Android Software/Hacking General [Developers Only]] hzx505:
Thank you very much.
[Android Software/Hacking General [Developers Only]] Phyo Nyi Nyi:
wrong ROM

---------- Post added at 07:00 PM ---------- Previous post was at 06:52 PM ----------

it is very useful for me
[Android Software/Hacking General [Developers Only]] rafaelbrunner:
Is it possible to have this fastboot patched also for MAC OS? :good::fingers-crossed:
[Android Software/Hacking General [Developers Only]] maximuscesar:
Guys, I could put my fone into EDL mode using this method:

[YOUTUBE]https://www.youtube.com/watch?v=xFeNSj3ngXY[/YOUTUBE]
[Android Software/Hacking General [Developers Only]] Brkge:
I made an updated one with the latest platform-tools(2016-12-16). It works the same. Just changed reboot-bootloader to reboot-edl. But the size difference of fastboot.exe made me share :). I guess you can use It for all fastboot usage purposes. It contains adb either.

https://drive.google.com/file/d/0B-symSC2ttl2RXBBZU10Yzg3bEU
[Android Software/Hacking General [Developers Only]] zedaale:
Are you able to unlock the phone after the edl flash?
[Android Software/Hacking General [Developers Only]] juliog:
dont work for me, tested in MOTOROLA MSM8916 XT1541

rebooting into edl...

FAILED (remote: Unknown command)

finished. total time: 0.000s
[Android Software/Hacking General [Developers Only]] mrsim:
i only seem to get this message after downloading extracting and connecting with the device in fastboot

"fastboot is not recognised as an internal or external command,operable program or batch file"

the device is recognised with android SDK no problem but this file refuses to see it at all...?
[Android Software/Hacking General [Developers Only]] luvshines:
I have locked my Redmi 4A and forgot the pattern.

I have a mac OSX so unable to run tools like bootloader unlock etc.

Can I use EDL mode to erase userdata ? If yes, how to switch to edl mode ? This binary works only on Windows :(
[Android Software/Hacking General [Developers Only]] fake2die:
Try to use the recovery password feature 1st,,as long as u still use the same phone numbers u can reset the password I think..
[Android Software/Hacking General [Developers Only]] luvshines:
Recovery password feature ?

It says 119 minutes till try again.

Trying the recovery mode requires Mi PC suite, which again would require windows.

I am ok if I loose the data, just need an option to wipe clean
[Android Software/Hacking General [Developers Only]] fake2die:
No,,from the web..

I forget the web,,u can google Xiaomi password recovery..

Try login then recover from there..

It will send SMS code to verify then u can reset ur password..

Well,, that's​ what I'm doing with my father Redmi note 3..
[Android Software/Hacking General [Developers Only]] luvshines:
I have tried Android device manager already, didn't work.

There is an option in Mi account too, right ? Can't locate it :confused:
[Android Software/Hacking General [Developers Only]] fake2die:
No,,it use your MI account..

https://account.xiaomi.com/pass/forgetPassword..

Go there,,change language to English,,then login..
[Android Software/Hacking General [Developers Only]] luvshines:
I tried that but it says that 'Find device' might be turned off on your phone.

Ended up choosing 'Erase' from Android Device manager and that seemed to work :good:
[Android Software/Hacking General [Developers Only]] arnab8820:
How to analyze the emmc_appsboot.mbn file? I want to try it on my Lenovo a6000
[Android Software/Hacking General [Developers Only]] dark_boy99:
hi htc desire 816g have edl mode?
[Android Software/Hacking General [Developers Only]] db77:
Hello,

My Redmi 4 Pro is bricked :(

The bootloader is locked after a try to flash the latest Miui ROM.

Mi Unlock don't work because it say to go in parameters to check "Unlock" mode but GSM don't boot normally so it is not possible.

So MiFlash don't work because bootloader locked.

I can only boot in bootloader : the little man with FASTBOOT writen.

I try EDL mode with fastboot command but nothing happened... GSM stay on MI logo... so no EDL mode :(

Can I use DFC to put my phone in EDL mode or only Test Point method ?

Thanks in advance for help, links and all ideas ...
[Android Software/Hacking General [Developers Only]] jason2988:
Many thanks.

It worked for me.:good:
[Android Software/Hacking General [Developers Only]] leo_hacker82:
bro thanks my xioamy say system destroyed and stay in fastboot..

i uuse your command and phone reboots to system normally thanks a lot
[Android Software/Hacking General [Developers Only]] hq15955657:
Can this method use in Samsung phones?
[Android Software/Hacking General [Developers Only]] mrpj:
Thank you very much...it worked 100% for me...
[Android Software/Hacking General [Developers Only]] massif2018:
redmi note 3 black screen red led no access to fastboot after MAJ

Hello

My redmi note 3 does not want to turn on

I v a black screen and red led after update

I can't access to fastboot mode

What can i do ?

thank you
[Android Software/Hacking General [Developers Only]] Reza740:
I love this gude,and much more thanks for all who supporting this and the end I sad u all saved many users
[Android Software/Hacking General [Developers Only]] Somibear:
thanks

thanks
[Android Software/Hacking General [Developers Only]] amalumman:
NO rom inside. How to get into edl mode

wiped everything . No ROM inside. How to get into EDL mode ON MY LENOVO K6 NOTE
[Android Software/Hacking General [Developers Only]] iacovides:
Thanks
[Android Software/Hacking General [Developers Only]] refedit:
Should this work with Oneplus 6?

I got Hard/Soft bricked.
[Android Software/Hacking General [Developers Only]] silentzer14:
My Phone is not switching on, it's just flashing red which indicates its on EDL mode. How can I Fix this ? It's hard bricked -_-

Thanks for your help in advance.
[Android Software/Hacking General [Developers Only]] refedit:
My OP6 was bricked to. Only managed to enter Fastboot mode and flash recovery, but after switching off, recovery was lost.

So, if you can enter fastboot mode, try with Linux.

You can follow this steps:

https://android.gadgethacks.com/how...actory-images-android-using-fastboot-0175277/

I used another website that I followed but this one seems the same.

Otherwise, I can post the one I followed my self, but I have to check on Linux laptop when I get home
[Android Software/Hacking General [Developers Only]] silentzer14:
Okey , now after successfully flashing and putting my phone up , my phone signal are lost. I mean no network connection but the sim card is detected do you know how to fix this ? or what should be the problem ? thank you
[Android Software/Hacking General [Developers Only]] refedit:
Flash this file "Flash-all.bat" https://androidfilehost.com/?fid=818222786056033735 from this post https://xdaforums.com/oneplus-6/how-to/rom-stock-fastboot-roms-oneplus-6-t3796665

Was the only solution for me after trying evrything else.
[Android Software/Hacking General [Developers Only]] silentzer14:
Would it be compatible for my device ? I'm using COOLPAD 1 by the way
[Android Software/Hacking General [Developers Only]] refedit:
Dude, try Linux. Worked like a charm. In my case, none of the Windows OS didn't allow me to install qualcomm driver
[Android Software/Hacking General [Developers Only]] bmanuelangel:
i cant download the attached file, i don't know why
[Android Software/Hacking General [Developers Only]] murchz:
Hi [MENTION=7379761]emuzychenko[/MENTION], everyone

Apparently I can't boot in EDL mode with my HTC sensation (ARHD 7.3, stock kernel, unlocked bootloader, s-off), using your tool. When I execute the command, the phone just reboots regularly...

Any idea on how to solve this?

Thanks!
[Android Software/Hacking General [Developers Only]] skanskan:
Can we use it with the Xiaomi Mi8?

Can we use it even if we have the bootlader locked and don't have the authorization?