[ZTE Maven 3  Guides, News, & Discussion] TouchOdeath:
This is a guide on how to root Maven 3 Z835. I've personally tried this using two different firmware versions: "Z835V1.0.0B13" and "Z835V2.0.0B10". Works great on both!

IMPORTANT:

=========

!!!!The ONLY partition you should be messing with is the 'boot' partition!!!! If you mess with any other partition, expect issues like.... not being able to connect to your carrier (missing IEMI).

Attachment notes:

===========

Z835V1.0.0B13_Boot_magisk_patched.img = Patched magisk boot partition image thats ready to go for firmware version "Z835V1.0.0B13" ONLY.

Z835V1.0.0B13_boot.bin - Backup of boot partition of firmware version "Z835V1.0.0B13" ONLY. Doesn't matter if the extension ends in '.bin' or '.img'.

Z835V2.0.0B10_Boot_magisk_patched.img = Patched magisk boot partition image thats ready to go for firmware version "Z835V2.0.0B10" ONLY.

Z835V2.0.0B10_boot.bin - Backup of boot partition of firmware version "Z835V2.0.0B10" ONLY. Doesn't matter if the extension ends in '.bin' or '.img'.

1. Download "Maven3_Z835root.zip" in this posts attachment.

2. Install Magisk (Magisk-v25.2.apk).

3. Boot into windows and install the edl usb drivers (QDLoaderHS_USB_Driver_64bit_Setup.exe).

4. Reboot your phone in edl mode (adb reboot edl).

5. When in edl mode, we need to make sure windows has the correct COM driver loaded for the USB interface (Qualcomm HS-USB QDLoader 9008).

A. Device manager > your android device > update driver > browse computer > pick from list > uncheck 'show compatible hardware' > Qualcomm Incorporated > Qualcomm HS-USB QDLoader 9008​

6. Take note of which COM port its on. It will say in device manager. Ex. Qualcomm HS-USB QDLoader 9008 (COM5)

7. Install QFIL (QPST.2.7.474). QFIL is what you use to backup/flash partitions. QFIL is made by Qualcomm, this phones processor is made by Qualcomm, so thats what we are going to use to manage partitions.

8. Open QFIL

9. Check and see what your phones firmware version is. Settings>About>Build Number. If your Build Number matches mine which is "Z835V1.0.0B13" or "Z835V2.0.0B10", then congrats, you can take a huge shortcut.

BUILD "Z835V1.0.0B13" and "Z835V2.0.0B10" ONLY!!!

==================================

10. Backup your boot partition using QFIL. If we mess something up, no worries, re-flash boot partition.

A. While your phone is in edl mode, with QFIL open, QFIL should automatically detect the correct port. If not you can press 'Select Port' and pick the right one.​

B. Select Build Type 'Flat Build'​

B. Browse on 'Select Programmer' > prog_emmc_firehose_8909.mbn​

C. Click "Load XML". RawProgram column needs to say "rawprogram0.xml". Patch column needs to say "patch0.xml"​

D. Configuration > FireHose Configuration > Device Type > emmc > OK. Leave everything else to defaults.​

E. Tools > Partition Manager > OK.​

F. Right click the 'boot' > Manage Partition Data > Read Data.​

G. Let it finish, when its done it will export a file to the path: %Appdata%\Qualcomm\QFIL\COMPORT_5" (or whatever COM port you used). The file will be called something like 'ReadData_emmc_Lun0_0x60000_Len98304_DT_24_08_2022_19_44_43.bin'. You can rename that to boot.bin or boot.img if you like.​

11. Now that we have our backup, we can now actually root!

A. In 'Partition Manager' window, select 'Load Image' and browse for 'Z835V1.0.0B13_Boot_magisk_patched.img' or 'Z835V2.0.0B10_Boot_magisk_patched.img' (depending on your firmware version). Once its done, it will reboot and you have successfully rooted your phone!​

B. If for some reason it will not flash, its most likely because your bootloader is locked. To unlock go to Settings>Developer Options > Check 'OEM unlocking'.​

OTHER BUILDS:

==========

Your goal here is to create a backup of the boot partition, then patch that backup using magisk, and install that magisk patched boot file to the phones boot partition.

1. Follow steps to backup the boot partition using QFIL in step 10 above.

2. Copy the boot partition backup file to your phone (adb push "c:\boot.bin" /mnt/sdcard)

3. Open Magisk > Install > Browse for the boot.bin. It will output a patched boot file with magisk fused with it. Ex. /mnt/sdcard/Download/magisk_patched-25200_zpqvx.img

4. Copy Patched file to your computer (adb pull "/mnt/sdcard/Download/magisk_patched-25200_zpqvx.img")

5. Now flash that magisk patched boot file to your phone (Do step 11.A. except use the boot file that we just patched)

A. If for some reason it will not flash, its most likely because your bootloader is locked. To unlock go to Settings>Developer Options > Check 'OEM unlocking'.

6. Reboot and Enjoy, you are rooted!

NEWS UPDATE:

==========

So I let AT&T Software Update (com.zte.zdm) update my phone to the latest firmware version (Z835V2.0.0B10). I then copied that boot partition, patched/flashed it back to the phone, and BAM root works.

CREDITS:

=================================================================

XDA users who have posted useful information that gave me clues as to what needs to be done.

"Erick Daves Tech" on youtube.

Some other misc websites I can't remember.