yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] alecxs:
I am not able to sign up because of a non-working capture (I'm not a robot). tried with two different browsers. therefore i can not download the link

anyway because of the size of this rar file i don't believe there is anything left.

can you get into fastboot mode?
[Android Q&A, Help & Troubleshooting] sauray:
But you don't really need to sign up to download. You can directly download, even without an account on the service, I believe. Still, I'll upload it somewhere else, and edit this post with the link.

Probably because it's compressed? But, even then, whatever's left doesn't seem to be of any use as of now.

Well, I did mention it's 'hard-bricked'. Nothing comes up on the screen, however hard I try. So, no, I cannot get into fastboot...
[Android Q&A, Help & Troubleshooting] alecxs:
downloaded with another PC. have had a look inside, all files are empty - seems your phone is completely ERASED by written Zeros.

i think you can not flash anything because of MTK Secure Boot. You should focus on how to unlock secro. (i found some other post where somebody mentioned you must remove battery for 10 minutes, but i think this is nonsense). unfortunately i didn't find a Tutorial, but someone on XDA mentioned this

https://blog.csdn.net/ouxie/article/details/48290077

from google translate, and my tiny less understanding, SEC_RO is always flashable (with device specific Secure Boot DA). i believe you don't have secro.img anymore, so best is to get a full dump of a working device. look inside scatter file, there you can change is_download: true or maybe playing around with type: NORMAL_ROM

besides this (i don't think this really matters) you can create your own scatter file based direct on working device, then you have a 100% complete scatter file (you can compare for differences, at least). here is the instructions: WwR MTK v2.30

i know this does not really help, but in case you figured out how to unlock secro and made it flashable again, you have a good base of fileset to start (pgpt sgpt nvram lk secro seccfg ...)

here's a bit more technical information for understanding preloader, there is mentioned a "ADVMETA_BOOT" boot mode (from what i believe you can write NVRAM, but guess this is already handled internal by SP Flash Tool itself)

http://www.lieberbiber.de/2015/07/04/mediatek-details-partitions-and-preloader

http://www.lieberbiber.de/2015/07/05/mediatek-details-little-kernel

at least, you need to flash lk.bin as minimum requirement to get fastboot working

attached Lenovo Secure Boot Download Agent
[Android Q&A, Help & Troubleshooting] Black6spdZ:
any unlocking / flashing update on this pos Lenovo tab?
[Android Q&A, Help & Troubleshooting] alecxs:
[MENTION=10483263]MFrabbitjr[/MENTION]

if you read carefully then you will know that

Firmware Upgrade

Format All + Download

will seriously brick your device. this is because it format the entire EMMC_USER

you don't have backup of all partitions. even if you had, not all partitions are allowed to flash (depending on secro, seccfg, vbmeta, ...)

if you got STATUS_SEC_DL_FORBIDDEN then please read this link

So what’s all this talk about Mediatek Secure Boot and DA files?
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
I have hard brick device. So my goal is to unbrick it first and than root it.

I tried to run SPFT with da_pl.img and it works better than with mkt-allinone.img

i was able to manual format device emmc 0x8000000 to 0x100000

i really have no idea what i'm doing .

i'm following a lot of guides and have read a lot about the device boot and recovery and if i understand correctlly i need partitons on my devic but for some reason it wount allow me to flash and create them or should i say fix them.

i downloaded this files

www_needrom_com/download/lenovo-tb-7304f-official-android-7-and-frp-instructions-and-flash-tool/

i'm using the da_pl.img from (only wifi no sim card)

folder but i run the spft tool in other folder because the one in (only wifi no sim card) folder wount work, is this a problem?
[Android Q&A, Help & Troubleshooting] alecxs:
according to the link you posted you have only formatted frp partition (to remove google account verification). if this is the only action you have done, and device was working before, this should not brick it

- download & unzip platform-tools (if you don't have already)

- open C:\Windows\System32\cmd.exe and navigate to folder platform-tools (for example cd "%UserProfile%\Downloads\platform-tools")

- press vol down + power and connect tablet in fastboot mode

- wait for drivers installed or install manually (check in device manager)

- type this commands, mark everything with right mouse click, copy with Enter key, paste result in forum

fastboot devices
fastboot getvar all
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
"Fastboot devices" command doesnt work.

"fastboot getvar all" returns waiting on a device(nothing happens)

"adb devices" returns daemon not running starting now at tcp:5037

daemon started successfully

"adb reboot bootloader" returns error:no devices/emulators found

(I think i did flash the device with wrong firmware with spft tool but it has been a crazy week and i cant really remember.)
[Android Q&A, Help & Troubleshooting] alecxs:
adb is not working in fastboot mode. fastboot is working only in fastboot mode.

please try the volume button method to enter fastboot mode
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
I did what u told me to do and it returned (waiting for the device).

When it should have entered fastboot mode it just connected and disconnected really fast the (waiting on the device) was active all the time.

Pls tell me we can fix this.
[Android Q&A, Help & Troubleshooting] alecxs:
i am afraid there is nothing you can do. if there is no "fastboot mode" displayed at tablet screen, fastboot mode is not working

basically you are facing two main problems

- scatter file is incomplete. you need a working tablet to create a full scatter file.

- stock rom (usually) does not contain all partitions. you need (at least) a working tablet from where you can clone missing partitions

you can try to flash rom (Download only) post #13 with download agent from post #19 but guess it is forbidden because of broken secro seccfg

make sure to uncheck the preloader checkbox
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
Need help with TB-7304F

OK thx a lot you really helped me. I got in.

First I downloaded this files (bsp_needrom_com/2018/04/TB-7304F_S000060_171019_ROW.rar?st=D60wPwIImjlIOb0tgJnBPQ&e=1580329677)

this is only europe download link and you must replace the first two _ with . also you have to write https:// before the url

if it wount let you download you can register on this site and download it manually.(you really need this if you hard bricked your device)

Secondly I choose the MT8167_Android_scatter file in SPFT and the dl_pl.bin file also auth_sv5.auth file.

Next I manually flash format all partitions in the format tab of SPFT.(watch online on how to do it.Once u get the hang of it its easy.)

(just open MT8167_Android_scatter file and ctrl+f and search in this order lk, lk2, boot, recovery, logo, tee1, tee2, system, cache and userdata.)

there should be and this is only example:(linear_start_addr: 0x8000000) or something like that, just beside each of the words you are finding trough file.

and few word forward there should also be example (partition_size: 0x200000) now search for lk and copy both of these into manual format under the format tab in SPFT then you have to play around a bit with power up and down buttons in combination with powerup button so you will format all that.

once you are done, replace the dl_pl.bin file with MTK_AllInOne_DA.bin now the SPFT might give you errors and stuff just ignore them watch some videos how to bypass them. you should be alright after a few tries:) (i was trying for 3 days straight)

I really hope this helped you. (if so pls thank me:)
[Android Q&A, Help & Troubleshooting] alecxs:
so basically you did a manual format of lk and tee and this by-passed secure download?

Glad to here you fixed by yourself!

would you mind helping out others with missing partitions? from twrp in adb shell, print the partition list with following command (you can post the output here)

ls -l $(find /dev/block -name by-name)/*

next compare with stock ROM which partitions are missing/not included in stock ROM
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
I would really like to help, but i dont know how, can u be more specific code by code what must i enter, do i do it in fastboot mode?

Also can you pls tell me if this is safe way for rooting:- www_stupdroid_com/2018/05/root-Lenovo-Tab-7-Essential.html (we can have this discussion on another forum if u would like).

I will be back tommorow, because i really have to go to sleep right now. My job takes a lot out of me and I´m totally busted.
[Android Q&A, Help & Troubleshooting] alecxs:
you can use the twrp from stupdroid (it is the same from post #13) but i won't trust any "Root now.exe" (i don't know if it is malicious, might work but it is VERY unusal rooting method)

before rooting it is recommended (and most likely neccessary) to unlock bootloader. however, this will perform a factory reset

- enable developer options in settings

- enable OEM unlock

- reboot in fastboot mode

- run this command and confirm with Volume Up

fastboot flashing unlock

traditional rooting is:

- download/copy Magisk-v20.3.zip or SR3-SuperSU-v2.79-SR3.zip to your tablet

- flash twrp from fastboot

fastboot flash recovery TWRP_lenovotb_7304f-030818.img

- reboot into recovery with Volume Up + Power

(if you accidentially boot into android, twrp is gone, reflash and try again)

- install Magisk Latest Stable or SuperSU from twrp

rooting without twrp:

- readback boot.img with SP Flash Tool

- copy boot.img (to any device, no root required)

- install Latest Magisk Manager apk (to any device, no root required)

- patch boot.img with Magisk Manager (1, 2, 3, 4)

- flash magisk_patched.img into boot partition from fastboot/SP Flash Tool

fastboot flash boot magisk_patched.img

if you encounter any issues with flashing modified images you need to flash patched vbmeta first, this will disable avb

fastboot flash --disable-verity --disable-verification vbmeta vbmeta.img

if you encounter bootloop after flashing modified images, install this zip to disable dm-verity

Universal DM-Verity ForceEncrypt Disk Quota Disabler

for locked bootloader there is another method (Mediatek 64 bit only) use this as last option if Lenovo Support deny unlocking:

bootless root with suboot script
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
(bootloader) max-download-size: 0x8000000

(bootloader) partition-size: frp: 100000

(bootloader) partition-type: frp: raw data

(bootloader) partition-size:userdata: d7780000

(bootloader) partition-type:userdata: ext4

(bootloader) partition-size:cache: 1b000000

(bootloader) partition-type:cache: ext4

(bootloader) partition-size:system: d3800000

(bootloader) partition-type:system: ext4

(bootloader) partition-size:metadata: 2100000

(bootloader) partition-type:metadata: raw data

(bootloader) partition-size:tee2: 500000

(bootloader) partition-type:tee2: raw data

(bootloader) partition-size:tee1: 500000

(bootloader) partition-type:tee1: raw data

(bootloader) partition-size:expdb: a00000

(bootloader) partition-type:expdb: raw data

(bootloader) partition-size:logo: 800000

(bootloader) partition-type:logo: raw data

(bootloader) partition-size: para: 80000

(bootloader) partition-type: para: raw data

(bootloader) partition-size:recovery: 1000000

(bootloader) partition-type:recovery: raw data

(bootloader) partition-size:boot: 1000000

(bootloader) partition-type:boot: raw data

(bootloader) partition-size:lk2: 60000

(bootloader) partition-type:lk2: raw data

(bootloader) partition-size:lk: 60000

(bootloader) partition-type:lk: raw data

(bootloader) partition-size:seccfg: 40000

(bootloader) partition-type:seccfg: raw data

(bootloader) partition-size: persist: 3000000

(bootloader) partition-type: persist: ext4

(bootloader) partition-size: protect2: a00000

(bootloader) partition-type: protect2: ext4

(bootloader) partition-size: protect1: a00000

(bootloader) partition-type: protect1: ext4

(bootloader) partition-size:nvram: 500000

(bootloader) partition-type:nvram: raw data

(bootloader) partition-size: proinfo: 300000

(bootloader) partition-type: proinfo: raw data

(bootloader) partition-size: preloader: 40000

(bootloader) partition-type: preloader: raw data

(bootloader) off-mode-charge: 1

(bootloader) warranty: yes

(bootloader) unlocked: no

(bootloader) secure: yes

(bootloader) kernel: lk

(bootloader) product: HQ8167_TB_N

(bootloader) version-preloader: 0.1.00

(bootloader) version: 0.5

all: Done!!

Finished. Total time: 0.123s

this is what fastboot getvar all returns. Cant seem to unlock bootloader

also about that partitions can u be more specific how can i help and i will do it.
[Android Q&A, Help & Troubleshooting] alecxs:
thx, the scatter file is nearly matching, except for userdata partition (different size), also for secro there is no scatter. missing partitions are: proinfo nvram protect persist seccfg para expdb frp kb dkb metadata (and partition tables: pgpt sgpt)

compared size with TB-7304F_S000060_171019_ROW (in hex)

partition_name partition_size MFrabbitjr
pgpt 0x80000 (not in fastboot)
proinfo 0x300000
nvram 0x500000
protect1 0xa00000 ext4
protect2 0xa00000 ext4
persist 0x3000000 ext4
seccfg 0x40000
secro ?
lk 0x60000
lk2 0x60000
boot 0x1000000
recovery 0x1000000
para 0x80000
logo 0x800000
expdb 0xa00000
frp 0x100000
tee1 0x500000
tee2 0x500000
kb 0x200000 (not in fastboot)
dkb 0x200000 (not in fastboot)
metadata 0x2100000
system 0xd3800000 ext4
cache 0x1b000000 ext4
userdata 0xc61a8000 0xd7780000
flashinfo 0x1000000 (not in fastboot)
sgpt 0x80000 (not in fastboot)

if have a free day sometime:

- for creating a full scatter file follow all links behind WwR MTK in post #19 (there is a video tutorial from Gadget Guru)

- change all entries in scatter file (with Notepad++) is_download: true

- readback missing partitions with SP Flash Tool

(do not upload nvram until i post a way to replace your mac address with 001122334455 for reference)

for bootloader unlock you must boot into android first, then enable developer options:

Settings -> About Phone -> tap Build number seven (7) times

Settings -> Developer options -> OEM unlocking -> Turn on

(also, if you want to use adb reboot-bootloader)

Settings -> Developer options -> USB debugging -> Ok

then boot into fastboot mode and try one of these:

fastboot oem unlock
fastboot oem unlock-go
fastboot oem unlock-critical
fastboot flashing unlock
fastboot flashing unlock-go
fastboot flashing unlock-critical
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
1.)OK thx for some new insight.

But the commands:- fastboot oem unlock-critical and fastboot flashing unlock-critical didnt work. tried everything from above.

2.)All I can say is that this tablet is locked really tight. I can't flash files on recovery with SPFT it says STATUS_INSUFFICIENT_BUFFER(0XC0010007)

However i can flash the right files on the tablet! Should I Format+Download it all and choose twrp.img as for recovery?

3.)Also with fastboot i can only look up devices and reboot, with adb I can only kill and start server. OEM is unlocked under tablet settings developer and usb debugging is turned on.

4.)The SPFT tells me that I shouldn't have scatter file downloads as true, it tells me separately for each one.

SIGH------------Why can't I just force the files onto the device?-------------SIGH

5.)Also if i follow this tutorial:-

www_getdroidtips_com/download-latest-magisk-zip-magisk-manager-root-phone/

(just replace the first two_ with .)

I used the second method I just dont know what kind of img should i use when it comes to choose in magisk.(I tried a few for example:-readback boot from my device .img and recovery.img and twrp.img)

I then tried to flash trough SPFT to recovery but i got the error.

Can you tell me if im on the right track and what can i do, the SPFT starts to download but i get that ****ty error.
[Android Q&A, Help & Troubleshooting] alecxs:
are you really sure "OEM unlocking" is ticked?

all you can do is patch the boot.img with Magisk Manager (this will disable dm-verity) and try to flash with the auth_sv5.auth file. if it is avb1 it should work because afaik Magisk Manager can re-sign with avb1. unfortunately with locked bootloader you can't flash unsigned images, avb does prevent that. even if you could flash with SP Flash Tool, android won't boot. i don't know how to disable avb because this tablet seems to have no vbmeta partition.

maybe there is an additional trick besides OEM unlocking for example Vol key. or this device requires an unlocking code wich you must request from Lenovo. you can try the motorola site but i don't believe this works

fastboot oem get_unlock_data
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
I am absolutely positive. Except if it unticks just before tablet shutsdown. And ticks back when it powers up.

What I should have asked is how to extract stock boot image?(for magisk... ...searching the internet right now for the solution.)
[Android Q&A, Help & Troubleshooting] alecxs:
you can use AIK by [MENTION=4544860]osm0sis[/MENTION], it supports avb1

https://xdaforums.com/showthread.php?t=2073775

---------- Post added at 20:09 ---------- Previous post was at 20:01 ----------

or try the stupdroid tutorial... there is a file inside "rk.bak" i don't know what this is. maybe it is a patched/rooted lk.bin you can flash into lk, then the bootloader becomes unlocked??
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
OK you are very resorceful and helpful, but i dont really know how to use these things without instructions :)

Can you pls explain. Should i put these Android image kitchen files on my tablet?

They really dont look like something for my windows 7 :)

Or even better can i make stock boot image with SPFT and if so how do i do it?

Is this stock boot image called the preloader?

I will now try to put some of those tools on my tablet and will report back.
[Android Q&A, Help & Troubleshooting] alecxs:
don't have time i must go to work now..

the preloader is not the bootloader. the preloader is just responsible for loading the bootloader. if you flash wrong preloader, you won't be able to detect tablet with SP Flash Tool anymore. preloader should never touched at all, always untick checkbox when flashing rom! the bootloader is lk and the unlock information is stored in seccfg. for more information see links post #19

you can use the boot-verified.img from TB-7304F_S000060_171019_ROW folder. if you want to dump boot from SP Flash Tool, add new entry in readback tab, name the file boot.img, select EMMC_USER and use start address 0x4d80000 and partition size 0x1000000 from scatter file. click readback, then connect usb-cable while device is off, readback will start as soon as preloader comes up

if you want to look inside the boot.img with AIK (don't know why you want this), just disable antivirus, download Android.Image.Kitchen.v3.6-Win32.zip from the Download section, unzip, copy boot-verified.img into Android.Image.Kitchen.v3.6-Win32 folder and run unpackimg.bat
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
OK thx dude.

I now made a boot.img with magisk. now all i have to do is to insert it into boot partition.

I don't know how yet. Because scatter file is giving me errors or just loads the boot that i created which then when i click download button and connect the divec gives me another error(status_preloader_invalid). Ok i think i just tryed everything possible with this device i guess we wount see it rooted.

If any1 comes up with somekind of idea other than the fastboot mode which doesn´t seem to work pls llet me know i will be happy to give it a try.

Also if u think i can help post your question here and i will try to anwser it XDA is really great!

!!!!Special thanks to aIecxs for all his contribution and help that he gave me!!!!!

!!!!!Without him I would never unbrick my device!!!!!
[Android Q&A, Help & Troubleshooting] alecxs:
try the bootless root method with suboot script. it is very complicated so read carefully

Amazing Temp Root for MediaTek ARMv8

there is also an app from another user, but don't expect help for this app in the original mtk-su thread
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
OK.

1.)Do a full download (except for the !!!preloader!!!) with SPFT of this https://www.needrom.com/download/le...ndroid-7-and-frp-instructions-and-flash-tool/

(The correct DL Manager should be MTK_AllInOne_DA.bin in the (Flash-tool_for_WLAN_no_sim_device)FOLDER).

1.1)Manually erase the (EMMC_USER START:-0x8000000 END:-0x100000)

2.)When it boots into system the First thing you have to do is to disable AUTO UPDATES under developer options.(Also pay attention that no update is installed(only the android should update 1xtime))

3.)Copy&Install magisk.apk(https://github.com/topjohnwu/Magisk/releases/download/manager-v7.5.1/MagiskManager-v7.5.1.apk)

or this (https://magisk.download/download-in-progress/?dlm-dp-dl=511) it doesn't matter.

4.)Also readback the boot with SPFT to do so you must put in(EMMC_USER START:-0x4d80000 END:-0x1000000 saved as boot.img)

5.)Copy Boot.img on Android device.

6.)Then open installed magisk app and select install when you are promoted again also select install and then (select and patch a file)

7.)Select that Boot.img and thats it.

You now have TB-7304F somehow rooted its not rooted all the way.

The main thing is that u can now install apk like VLC Media player and stuff...
[Android Q&A, Help & Troubleshooting] alecxs:
Thx for the rooting guide. you forgot last step, so one more question. Magisk Manager does successfully re-sign the magisk_patched.img with AVBv1. did you rename file into boot-verified.img before you flashed back (or file name doesn't matter for SP Flash Tool)?

since you have root now, you can use official TWRP app for flashing TWRP_lenovotb_7304f-030818.img (just make sure to delete /system/recovery-from-boot.p before, or boot at least once straight into recovery after flashing)

And can you please upload zip file with only scatter file, dl_pl.bin, auth_sv5.auth file (the exact ones) with which you was able to successfully unbrick your completely erased emmc_user?
[Android Q&A, Help & Troubleshooting] MFrabbitjr:
I did try to rename magisk_patched.img file into boot.img and boot_verified.img I only got errors saying status_insufficient_buffer and the second time the SPFT didn't want to load somekind of error with scatterfile...

I will try TWRP app and report how it goes. I have no idea how to delete /system/recovery from boot.p and i dunno what the .p stands for.

https://drive.google.com/drive/folders/1LmTFy0-mtW3wwV2j8OPynCQtxK3BgyoW

Try this link and tell me if you get it.
[Android Q&A, Help & Troubleshooting] alecxs:
link is working, many thanks! i have attached a copy here in forum as mirror (hit thanks button post above to MFrabbitjr, not me)

if you can't flash magisk patched boot.img then the result is you are not rooted, yet. therefore you can't do further steps (TWRP app requires root)

fyi: recovery-from-boot.p is a failsafe backup of stock android system recovery which overwrites twrp on each boot. i have added screenshot

what happens if you just unpack + repack unmodified stock boot-verified.img with AIK?