i'm trying to rescue my killed Shield K1.
we know that the tablet is still in APX-Mode and there is the possibilty sending commands with nvflash.
what we need is the cpuid or uid which is to get with a special script (thx Moscow Desire). in many cases was people able to find out the "cpuid" and obtain the SKB
. eg. hier with iconia a500 : http://ift.tt/1Z92Akd
i also tried to get the SBK from my K1 with a modificated script(changed the "vid_pid to 0x0955, 0x7F40" and "received_length" to 16) but without success. i got a wrong uid (just last seven digits was true the first eight digits was ziros) and thus a wrong SBK.
if we get the right uid we can be able to use nvflash.
hier is some questions:
how many digits are the right cpuid from K1?
can someone make a script for our purpose?
thanks for your help.
regards
Cappy
-------
#include <libusb-1.0/libusb.h>
#include <stdio.h>
#include <stdint.h>
int main(void)
{
unsigned char data[64];
int received_length;
int r = 1;
libusb_context* ctx = NULL;
libusb_device_handle* dev_handle = NULL;
libusb_init(&ctx);
dev_handle = libusb_open_device_with_vid_pid(ctx, 0x0955, 0x7F40);
if(dev_handle)
{
r = libusb_bulk_transfer(dev_handle, 0x81, data, sizeof(data), &received_length, 10000);
if (r == 0)
{
if(received_length == 16)
{
printf("uid: %#016lx\n", *(uint64_t*)data);
}
else
{
r = 1;
printf("Error: We got %d bytes of data insetad of the 8 bytes we expected...\n", received_length);
}
}
else
{
printf("Error: USB read failed!\n");
}
libusb_release_interface(dev_handle, 0);
}
else
{
printf("Error: Failed to open device!\n");
}
libusb_exit(ctx);
return r;
}
we know that the tablet is still in APX-Mode and there is the possibilty sending commands with nvflash.
what we need is the cpuid or uid which is to get with a special script (thx Moscow Desire). in many cases was people able to find out the "cpuid" and obtain the SKB
. eg. hier with iconia a500 : http://ift.tt/1Z92Akd
i also tried to get the SBK from my K1 with a modificated script(changed the "vid_pid to 0x0955, 0x7F40" and "received_length" to 16) but without success. i got a wrong uid (just last seven digits was true the first eight digits was ziros) and thus a wrong SBK.
if we get the right uid we can be able to use nvflash.
hier is some questions:
how many digits are the right cpuid from K1?
can someone make a script for our purpose?
thanks for your help.
regards
Cappy
-------
#include <libusb-1.0/libusb.h>
#include <stdio.h>
#include <stdint.h>
int main(void)
{
unsigned char data[64];
int received_length;
int r = 1;
libusb_context* ctx = NULL;
libusb_device_handle* dev_handle = NULL;
libusb_init(&ctx);
dev_handle = libusb_open_device_with_vid_pid(ctx, 0x0955, 0x7F40);
if(dev_handle)
{
r = libusb_bulk_transfer(dev_handle, 0x81, data, sizeof(data), &received_length, 10000);
if (r == 0)
{
if(received_length == 16)
{
printf("uid: %#016lx\n", *(uint64_t*)data);
}
else
{
r = 1;
printf("Error: We got %d bytes of data insetad of the 8 bytes we expected...\n", received_length);
}
}
else
{
printf("Error: USB read failed!\n");
}
libusb_release_interface(dev_handle, 0);
}
else
{
printf("Error: Failed to open device!\n");
}
libusb_exit(ctx);
return r;
}
from xda-developers http://ift.tt/25wVvkC
via IFTTT
No comments:
Post a Comment