Update README

* add short manual
* remove donation links and funding file
This commit is contained in:
Andrey Smirnoff 2022-03-01 22:47:24 +00:00 committed by GitHub
parent fa3da08477
commit d7f27e6ab7
3 changed files with 114 additions and 14 deletions

4
.github/FUNDING.yml vendored
View file

@ -1,4 +0,0 @@
ko_fi: certs
custom:
- http://paypal.me/teegris
- https://buymeacoffee.com/teegris

@ -1 +1 @@
Subproject commit 66c21c016a6acb2fa74caec32563dec2be8616d9
Subproject commit 4755428d3dfc2e990ee26139db967db77e799afd

122
README.md
View file

@ -10,16 +10,115 @@
## Download
### 👉 [Click here to download the latest version](https://github.com/mashed-potatoes/PotatoNV/releases/download/v2.2.1/PotatoNV-next-v2.2.1-x86.exe).
### 👉 [Click here to download the latest version](https://github.com/mashed-potatoes/PotatoNV/releases/download/v2.2.1_2022.03/PotatoNV-next-v2.2.1_2022.03-x86.zip).
Get binaries for Windows in [the releases section](https://github.com/mashed-potatoes/PotatoNV/releases).
For Linux or macOS consider using the [PotatoNV-crossplatform](https://github.com/mashed-potatoes/PotatoNV-crossplatform).
## Getting started
## User manual
Just follow this video guide: https://www.youtube.com/watch?v=YkGugQ019ZY.
Follow the [video guide](https://www.youtube.com/watch?v=YkGugQ019ZY) or read the manual below.
## How it works (in a nutshell)
### Make sure your device is compatible
0. Are you sure you're actually using a Huawei/Honor device?
1. Open the Settings → About phone. Check the CPU: it should be _**HiSilicon Kirin** \*\*\*_. If it is not your case (MediaTek, Qualcomm), then alas, your device is not supported. :(
2. Okay, now you know CPU model. It should be one of these modification:
- Kirin 620
- Kirin 650
- Kirin 658
- Kirin 659
- Kirin 925
- Kirin 935
- Kirin 950
- Kirin 960
3. Don't worry if CPU is not listed above ask for a special bootloader for your device in the support chat **if it's older than 4 years** (date of manufacture is 2018 or earlier).
4. **100% incompatible CPUs: Kirin 710, 710A, 710F, 810, 980, 985, 990 & newer.**
### Getting inside
The first step is the most difficult thing to do. You need to disassemble your device: this is necessary in order to access the contacts on the motherboard.
If you're not sure that you have enough experience to disassemble the device, then consider using paid software, that supports _"software testpoint"_.
> ⚠️ **I strongly recommend watching video manuals for disassembling your device.**
> ⚠️ **Be extremely careful with planar cables!**
> These cables are used in tablets, as well as in phones with a fingerprint scanner on the back cover.
You will need: a hair dryer, a guitar pick or a plastic card, conductive tweezers and maybe a screwdriver.
1. Turn off the device.
2. Heat the back cover evenly with a hair dryer.
3. After a couple of minutes, try to stick the plastic card into the corner between case and lid, try to lift the edge and then deepen the card.
4. Move around the perimeter of the back cover, peeling off glue.
5. Now you can remove the back cover.
### Entering download mode
It's time to Google. You need to find the location of a special point on the motherboard testpoint.
> 💡 If you are wondering why you need to do something with the unfortunate testpoint, then read [the contents of the spoiler below](#how-it-works).
To search, use the model name before the hyphen + "testpoint".
For example for Honor 9 Lite (LLD-L31) you should Google ["lld testpoint"](https://www.google.com/search?q=lld+testpoint&tbm=isch).
<details>
<summary>An example how a typical testpoint photo looks like.</summary>
![Honor 9 Lite Testpoint location](https://i.imgur.com/233Kn27.jpg)
</details>
The marks may vary:
1. Only one point is marked in the photo.
2. In the photo, a line is drawn between the point and the metal shield.
3. In the photo, a line is drawn between two points.
Here you will need sleight of hand: try to short-circuit the point and the metal shield (in option 1 and 2), or short-circuit both points (option 3) with tweezers.
Without removing the tweezers, connect the USB cable to the computer.
After 3 seconds, the tweezers can be removed.
Open the "Device Manager" you should see an unknown device named `USB SER`, or Serial Port `HUAWEI USB COM 1.0`.
If the device has not been detected, make sure you are using a good cable, the tweezers are not a dielectric, and you are shorting the desired point.
### Unlocking the bootloader
- Install [HiSuite](https://consumer.huawei.com/en/support/hisuite/).
- Install [Huawei Testpoint Drivers](https://files.dc-unlocker.com/share.html?v=share/18B15B9D02C945A79B1967234CECB423).
- Download [the latest release](https://github.com/mashed-potatoes/PotatoNV/releases) of PotatoNV.
- Start PotatoNV.
> 💡 All bootloaders are flashing to RAM, so an incorrect bootloader cannot harm the device.
> 💡 `Disable FBLOCK` checkbox disables a special securtiy check.
> That modification allows you to flash/erase secure partitions or execute oem commands,
> that are not available with normal unlocking by unlock code \[`USERLOCK`].
> ⚠️ `FBLOCK` unlocking works correctly only on devices with Kirin 960 or Kirin 65x.
> Disabling this option can cause serious problems on legacy devices.
Okay, now refer to [this table](#tested-devices) and select the appropriate bootloader.
Press the Start button. 🪄
The procedure will take no more than a minute.
The program should write a new unlock code, keep it in a safe place.
Reboot your device to fastboot mode and execute following command on the host machine:
```shell
fastboot oem unlock YOUR_CODE_HERE
```
have fun.
<!-- right, anti? :) -->
## How it works
<details>
Even before creating PotatoNV, [@TishSerg](https://github.com/TishSerg) discovered that unlock key can be rewritten with the **SHA256 hash** of the desired key to the `USRKEY` property. However, to access **_NVME_** _(a raw partition that stores stuff like serial number, device traits, etc.)_, a user should flash _custom_ recovery or gain temporary root privileges. But both methods are complex and are not guaranteed to work. After researching the legacy bootloader of some Huawei devices, I've found a `nve` command, which allows to read or write any property in the **_NVME_** partition. Of course, this command requires an unlocked bootloader.
So it remains to find a way to quickly unlock the bootloader. The way out is quite simple - use the bootloader from the board software.
@ -30,12 +129,13 @@ After uploading the bootloader, the device should switch to the fastboot mode. T
So, we're just going to send a command through the USB bulk interface to write SHA256 hash to USRKEY and reboot the device.
That's it.
</details>
## Tested devices
Device | Model | Bootloader
------ | ----- | ----------
Huawei P8 Lite (2015) **(!)** | `ALE` | Kirin 620
Huawei P8 Lite (2015) | `ALE` | Kirin 620
Huawei Y6II | `CAM` | Kirin 620
Honor 5C / 7 Lite | `NEM` | Kirin 65x (A)
Honor 7X | `BND` | Kirin 65x (A)
@ -50,6 +150,8 @@ Huawei Y9 (2018) | `FLA` | Kirin 65x (A)
Huawei MediaPad M5 Lite | `BAH2` | Kirin 65x (B)
Huawei Nova 2i / Mate 10 Lite | `RNE` | Kirin 65x (B)
Huawei P Smart 2018 | `FIG` | Kirin 65x (B)
Honor 6 Plus | `PE` | Kirin 925
Huawei P8 | `GRA` | Kirin 935
Honor 8 Pro / V9 | `DUK` | Kirin 950
Honor 8 | `FRD` | Kirin 950
Huawei P9 Standart | `EVA` | Kirin 950
@ -62,13 +164,15 @@ Huawei P10 | `VTR` | Kirin 960
## Donate
**It would be much appreciated if you want to make a small donation to support my work!**
~~It would be much appreciated if you want to make a small donation to support my work!~~
PayPal: http://paypal.me/teegris.
All my accounts are blocked due to the political situation. So nvm! :)
Buy Me a Coffee: https://www.buymeacoffee.com/teegris.
Thank you, Martin, Moisés, Tibor, Emanuele & all those I've forgotten (sorry!).
Ko-Fi: https://ko-fi.com/certs.
### Sponsored by JetBrains
<img src="https://resources.jetbrains.com/storage/products/company/brand/logos/jb_beam.svg" alt="JetBrains logo." width="120">
## License