Skip to content

Latest commit

 

History

History
117 lines (95 loc) · 5.33 KB

README_EN.md

File metadata and controls

117 lines (95 loc) · 5.33 KB
Raw

Root_TB371FC

Lenovo XiaoXin Pad Pro 2023 12.7 root and 9008 rescue

Tools

platform-tools

https://developer.android.com/tools/releases/platform-tools
It contains adb fastboot

Qualcomm Flash Image Loader (9008)

https://qfiltool.com
Dont forget to install \Driver\Qualcomm USB Driver V1.0.exe

root apk

https://github.com/topjohnwu/Magisk/releases

ZUI ROM

Lenovo doesn't provide their ZUI ROMs, so far i managed to find 3 versions from XDA forum
ZUI 15.0.405(suggest to download)
https://www.mediafire.com/file/vdfae5lei59frbo/TB371FC-ZUI_15.0.405-QFIL.zip/file

Other versions for record purpose,
ZUI 15.0.154 Dev version
https://mirrors.lolinet.com/firmware/lenowow/Tab_P12_Pro_2023/TB371FC/
ZUI 15.0.440(this is the first version supports PC mode)
https://www.mediafire.com/file/k7pjpl2841rb8gl/TB371FC-ZUI_15.0.440_FASTBOOT_QFIL_v2.zip/file

Can I root on current version of ZUI instead of downloading a previous release?

Unfortunately, no.
In order to use root tool Magisk, it requires a matched version of boot.img from the current ROM.
While Lenovo doesn't provide their ROMs, it is no way to obtain the correct boot.img.

Enable developer mode

In ZUI, settings -> about -> software version (zui 15.0.xxx) tapping on it -> in developer mode
Settings -> General -> Developer mode -> Enable USB debugging -> Connect to computer -> trust this computer

Unlock bootloader

You lost warranty if you unlock your device and there is no way to lock again, risk on your own

If you're bootloader is already unlock skip this step.

Execute adb reboot bootloader to fastboot, you will see the tablet's serial number
Go to Lenovo bootunloader unlock application website, provide your SN, Lenovo will send you a link via email
http://cdn.zui.lenovomm.com/developer/tabletboot/{your SN number}/sn.img
If you can't wait, you can also replace string AAAAAAAA with your SN number in the file sn_AAAAAAAA.img from this repo
You need a hex editor to perform the SN update, notepad won't work
Execute fastboot flash unlock sn.img to flash sn.img
Execute fastboot reboot tablet is now showing unlocked

9008 flashing

Open the device manager from Windows
Disconnect your tablet from Windows
Power off your tablet
Open QFIL.exe to configure as following

  • configuration -> Firehose configuration
    • Device type select "ufs"
    • Validation mode select "0 - no validation"
    • Reset after download check on
    • OK
  • Build type select "Flat Build"
  • Programmer select prog_firehose_ddr.elf from your ROM version 405
  • Load XML select ALL xml files (important) from your ROM 405

Press and hold volume +, connect tablet with Windows via USB
You should be able to see from the device manager, a device with suffix 9008 shows up
Back to QFIL.exe click on Download, flash commences

Install Magisk and root

Redo Enable developer mode and connect your tablet with Windows via USB
Follow the Magisk instruction to patch boot.img and flash it.

My steps following
Copy Magisk-v27.0.apk and boot.img (from ROM 405) to tablet
Install Magisk apk and run the app
From Magisk, install -> select and patch a file -> select boot.img
Copy the patched magisk_patched_xxxxxxx.img to Windows
Execute adb reboot bootloader to bootloader
Execute fastboot flash boot magisk_patched_xxxxxxx.img to flash boot.img
Enter ZUI and run Magisk, you will see the button superuser now is clickable
root is completed

Other versions of the boot.img

Thanks to the original uploader/poster

There are few other versions on XDA reposted from 4PDA (ZUI 15 boot.img 543/575/650)

In the meantime, myself download few and placed in boot.imgs

  • 15.0.664
  • 16.0.430

Troubleshooting

QFIL errors

If you have errors during the ROM flash with QFIL. For example Sahara protocol errors, or path not found errors try using QFIL installed from QPST https://qpsttool.com/qpst-tool-v2-7-496 instead of the standalone version https://qfiltool.com/qfil-tool-v2-0-3-5.(LarrysGIT#1)

Update ZUI normally via OTA

If you had flahsed with a Magisk patched boot.img, you need to flash the original boot.img first, if you don't do such, OTA will loop between download and upgrade updates, and never finishes.
Execte adb reboot bootloader to bootloader
Execute fastboot flash boot boot.img to flash the original boot.img

Disable system OTA update

Execute adb shell
Execute su it will give error permission denied
In Magisk, allow shell to run as root
Execute su again
Execute pm disable com.lenovo.ota

google apps are unable to connect to internet

ZUI install google framework already, however, it is disabled by default and version is behind
Enable google framework from settings -> apps
ZUI bases on Android 13, download the apk and install it, google services will work again
https://www.apkmirror.com/apk/google-inc/google-services-framework/google-services-framework-13-release/