• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root ZTE Zmax Pro Official Root Discussion

Status
Not open for further replies.
ExtoliS said:
It was in memory dump from QPST.

I don't remember which .bin file it was. I'll check.
Edit: It was in CODERAM.BIN, Line 91-116

Code: 
ZTE10UZTE Signing Root0
160126101502Z
360121101502Z0b10    UCN10    UCA10UShangHai10
USMP10
U
ZTE10UZTE Signing CA0‚ 0
    *†H†÷
‚
0‚‚ È“°·¬x“<²,$œ+þžvÊ 3Ÿa±û$©è/Ö)ڍ¯ý4cþë=_vmÜØÔÑpPù(\MÂû•íåyŒPC7NÄøW*2oÜCÅL¡Qo%.§‚Ø2vlo§ÕcÕMï[(jz”81    Ð®<|ƒœƒ6#Šµ‰š3)Ô5¹ÿûÓésæê®T$…ªÍ ·¥F˜
Ÿ0"eRN;VRì'ß¼êû…¹iúhž©TûZáÏ®ûÛ9l•åËŸ´¬<2Òìf\Sq^†é"ï®[ñ
Ç®mq»ˆƒÎzx‘P¼¤awÕU¹*dµáq5\IšæwC£`0^0U#0€Y$V°·Uÿ<4¶¬XsYû ¬0UÓÞqìß´H…ÕD–Øî \ˆ0U0ÿ 0U0
    *†H†÷
‚ ·²Éna¿º))ó©â.FR¬;{ñN˲ ÛaG¿±Eouâp´ÐØYãþÔC³'»Örb(¢ŠM$üU ñ°è(†m¯#qÄ Íag·¿›¼V† š7Ú
˶=:Hï‘îƒù]¼Ð©|ïÔ7?ˆ1a¡"\Múû u²DÇr¥,»d·~^'ë"EIP
ihسùÚAj^É[Þ
Œòˆ£W=wn-Щ·4äÒã[b-†¶ä•–‰;·刓’iã6ap[K|b«cÍiÀ~³Æj¸Ûªá-7Û!Ùã€p=Õ~Ó©† ©Ð\90‚‰0‚q 0
    *†H†÷
0j10    UCN10UShangHai10UShangHai10
USMP10
U
ZTE10UZTE Signing Root0
160126101502Z
360121101502Z0j10    UCN10UShangHai10UShangHai10
USMP10
U
ZTE10UZTE Signing Root0‚ 0
    *†H†÷
Click to expand...
can you tell me how to genearte it, what is your qpst version?
 
Last edited:
ExtoliS said:
The version I used was 2.7.460, and all I did was put it in edl mode, which you need to press VOL Up and VOL Down while the phone turns on. Then you use your us cable. And QSPT should start dumping the ram.
Click to expand...
can you upload those .bin files
 
ExtoliS said:
The version I used was 2.7.460, and all I did was put it in edl mode, which you need to press VOL Up and VOL Down while the phone turns on. Then you use your us cable. And QSPT should start dumping the ram.
Click to expand...
vol up + down goes to zte handset diagnostic interface mode not edl :p, didn't understand anything there are many apps under the qpst package which one is the app you run................
 
SapphireEx said:
Current log
Code: 
adb reboot ftm
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
//Just rebooted. Did I forget the command?
//FTM successfully entered, had to use VolDown+Power to enter it
//B08 phone connected via USB C to USB 2.0 cable
//QPST_2.7.460 extracted and started
//QPST_2.7.460 deleted the old package I apparently had
//QPST_2.7.460 successfully installed
//Device not detected. No driver loaded. Attempting load via CDD. Failed. Attempting Sigma drivers. Failed
//Hardware ID is: USB\VID_19D2&PID_0500&REV_0310&MI_00 (ZTE Modem/ Composite USB?
//Forced driver install 'Generic ADB driver' successful.
//QPST still not detected. Pretty sure it requires a COM port.
//Reinstall driver as Qualcomm HS-USB QDLoader 9008 (On port 21) successful.
//QPST detects phone as 'MSM8952'
//QPST properties of MSM8952: No MIN Analog, STATE Entering CDMA, VERSION MPSS.TA.1.0.c3-00069-8952_GEN_PACK-1.55637.1.58990.1, MSM 2300-A2
//COMPILED Jun 22 2016
//Service Port Mapping: ERROR Could not read RDM_DEV_MAP from selected phone
//SWITCH MODEM TO DIAG (Did nothing?)
//START CLIENTS- BACKUP instantly crashed QPST
//QPST EFS Explorer (Currently communi...holy shit. We have read access
//Error NV read only state
//So no writing for us eh?
//Backing up NVMemory from phone: Success (A little tip here. Use QCN and NOT XQCN.
//Restoring the just dumped NVMemory: Success! (We have write access)
//Going to try something really stupid. Flashing 8660.mbn. If it does flash, we have unsigned MBN access, on the bad side, I lose a debug phone.
//Error could not create a temp directly. Bloody win10 I swear. Restarting QPST in Admin mode.
//Its backing up the NVRAM currently.
//It did it.
--------------------------
//Final edit. Upon entering Sahara mode, I get an error that is specifically "Could Not Communicate with Flash Programmer"

I will continue to update this as I can

*Edit Holy **** we can communicate.

@messi2050 @GarnetSunset You guys wanna jump in on this?

The debug unit is bricked, but I successfully flashed a bad MBN. Probably. It glitched I think. Phone rebooted as normal.
Click to expand...
DUUUDE YES
 
SapphireEx said:
Current log
Code: 
adb reboot ftm
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
//Just rebooted. Did I forget the command?
//FTM successfully entered, had to use VolDown+Power to enter it
//B08 phone connected via USB C to USB 2.0 cable
//QPST_2.7.460 extracted and started
//QPST_2.7.460 deleted the old package I apparently had
//QPST_2.7.460 successfully installed
//Device not detected. No driver loaded. Attempting load via CDD. Failed. Attempting Sigma drivers. Failed
//Hardware ID is: USB\VID_19D2&PID_0500&REV_0310&MI_00 (ZTE Modem/ Composite USB?
//Forced driver install 'Generic ADB driver' successful.
//QPST still not detected. Pretty sure it requires a COM port.
//Reinstall driver as Qualcomm HS-USB QDLoader 9008 (On port 21) successful.
//QPST detects phone as 'MSM8952'
//QPST properties of MSM8952: No MIN Analog, STATE Entering CDMA, VERSION MPSS.TA.1.0.c3-00069-8952_GEN_PACK-1.55637.1.58990.1, MSM 2300-A2
//COMPILED Jun 22 2016
//Service Port Mapping: ERROR Could not read RDM_DEV_MAP from selected phone
//SWITCH MODEM TO DIAG (Did nothing?)
//START CLIENTS- BACKUP instantly crashed QPST
//QPST EFS Explorer (Currently communi...holy shit. We have read access
//Error NV read only state
//So no writing for us eh?
//Backing up NVMemory from phone: Success (A little tip here. Use QCN and NOT XQCN.
//Restoring the just dumped NVMemory: Success! (We have write access)
//Going to try something really stupid. Flashing 8660.mbn. If it does flash, we have unsigned MBN access, on the bad side, I lose a debug phone.
//Error could not create a temp directly. Bloody win10 I swear. Restarting QPST in Admin mode.
//Its backing up the NVRAM currently.
//It did it.
--------------------------
//Final edit. Upon entering Sahara mode, I get an error that is specifically "Could Not Communicate with Flash Programmer"

I will continue to update this as I can

*Edit Holy **** we can communicate.

@messi2050 @GarnetSunset You guys wanna jump in on this?

The debug unit is bricked, but I successfully flashed a bad MBN. Probably. It glitched I think. Phone rebooted as normal.
Click to expand...
I'm gonna give this a try tonight. Hype.
 
Seems King pushed a new package. Give it a go people.
 

Attachments

  • Screenshot_20170908-144706.png
    Screenshot_20170908-144706.png
    87.7 KB · Views: 423
ExtoliS said:
Ah I see... Hope everything goes okay with preparing to get butt f**ked by Irma.

&lt;br&gt; Also be safe.
Click to expand...
Ha. I'll should be fine as long as it downgrades to a cat3 or lower by the time it hits us. Not sure if the house can take more than 90mph winds. I'll have plenty of time if I do end up evaccing to my bar though, as originally planned.
 
SapphireEx said:
Ha. I'll should be fine as long as it downgrades to a cat3 or lower by the time it hits us. Not sure if the house can take more than 90mph winds. I'll have plenty of time if I do end up evaccing to my bar though, as originally planned.
Click to expand...
Shouldn't be to bad.. Harvey was pretty bad for us mainly because of floods.
 
loonycgb2 said:
Shouldn't be to bad.. Harvey was pretty bad for us mainly because of floods.
Click to expand...
Two completely different animals on two completely different terrains.
Hope you'll East Coasters. Specially Floridians just end up with a cool story about how Irma was nothing but a tease.
 
ExtoliS said:
Alright Here is the step by step.

#1 Download and Install Latest Version of QPST
#2 Once Done with that, use the EFS Explorer application.
x8pnjEK


#3 Grab USB Cable and plug it in to the computer, (not in the phone yet.)
#4 Reboot Phone and PRESS VOL Up AND VOL Down, then plug in the USB cable to the phone.

#5 EFS Explorer should change from being blank to saying ("*Download") as the phone is in download mode

8hrnKZY


#6 Phone should restart after a min or so, that signifies it dumped the ram.

#7 To find the dump folder, go to the Windows file explorer,
#8 Go to This PC, and search This PC for "Sahara" with out quotation marks.
It should be a folder. Open the folder and there should be a folder labeled COM1, OR COM2... ETC.

#9 Once inside the COM folder there should be .bin files use Notepad ++ to open as some are to big to be opened normally.
Click to expand...
not trying to be an ass but...
how does this help us?
because i did the steps found the dump files
then open the .bin files in notepad++ an all i see is gibberish.
what are these files for?
how can these dump files help us with achieving root?
 
ExtoliS said:
Alright Here is the step by step.

#1 Download and Install Latest Version of QPST
#2 Once Done with that, use the EFS Explorer application.
x8pnjEK


#3 Grab USB Cable and plug it in to the computer, (not in the phone yet.)
#4 Reboot Phone and PRESS VOL Up AND VOL Down, then plug in the USB cable to the phone.

#5 EFS Explorer should change from being blank to saying ("*Download") as the phone is in download mode

8hrnKZY


#6 Phone should restart after a min or so, that signifies it dumped the ram.

#7 To find the dump folder, go to the Windows file explorer,
#8 Go to This PC, and search This PC for "Sahara" with out quotation marks.
It should be a folder. Open the folder and there should be a folder labeled COM1, OR COM2... ETC.

#9 Once inside the COM folder there should be .bin files use Notepad ++ to open as some are to big to be opened normally.
Click to expand...
images are not loading.., also if you can upload uplaod the .bin files this gonna save us time
 
Status
Not open for further replies.
Back
Top Bottom