Bricked redmi 9AT

[Please help] Bricked redmi 9AT

Vicu
Newbie

4

25-07-2024, 03:50 PM

#1

I updated my son's phone. With MIflash. I loaded the factory rom, the update was successful, but since then the phone won't turn on.
I tried to put the factory stock rom with flash tool, but it always stops with this error message:
Error on sending data: DA hash mismatch
The last time I used MTKclient, this is the result:
C:\mtkclient-main>python mtk.py peek [addr] [length] --preloader=patched_preloader.bin
MTK Flash/Exploit Client Public V2.0.1 © B.Kerler 2018-2024

ArgHandler - O:Var1: 0x0
Preloader - Status: Waiting for PreLoader VCOM, please reconnect mobile to brom mode
Preloader
Preloader - [LIB]: ←[31mStatus: Handshake failed, retrying...←[0m

Port - Hint:

Power off the phone before connecting.
For brom mode, press and hold vol up, vol dwn, or all hw buttons and connect usb.
For preloader mode, don't press any hw button and connect usb.
If it is already connected and on, hold power for 10 seconds to reset.
C:\mtkclient-main>python mtk w boot_a boot.img
MTK Flash/Exploit Client Public V2.0.0 Beta © B.Kerler 2018-2023

Preloader - Status: Waiting for PreLoader VCOM, please reconnect mobile to brom mode

Port - Hint:

Power off the phone before connecting.
For brom mode, press and hold vol up, vol dwn, or all hw buttons and connect usb.
For preloader mode, don't press any hw button and connect usb.
If it is already connected and on, hold power for 10 seconds to reset.

Port - Device detected Smile

Preloader - CPU: MT6765/MT8768t(Helio P35/G35)
Preloader - HW version: 0x0
Preloader - WDT: 0x10007000
Preloader - Uart: 0x11002000
Preloader - Brom payload addr: 0x100a00
Preloader - DA payload addr: 0x201000
Preloader - CQ_DMA addr: 0x10212000
Preloader - Var1: 0x25
Preloader - Disabling Watchdog...
Preloader - HW code: 0x766
Preloader - Target config: 0xe7
Preloader - SBC enabled: True
Preloader - SLA enabled: True
Preloader - DAA enabled: True
Preloader - SWJTAG enabled: True
Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False
Preloader - Root cert required: False
Preloader - Mem read auth: True
Preloader - Mem write auth: True
Preloader - Cmd 0xC8 blocked: True
Preloader - Get Target info
Preloader - BROM mode detected.
Preloader - HW subcode: 0x8a00
Preloader - HW Ver: 0xca00
Preloader - SW Ver: 0x0
Preloader - ME_ID: A6B892468F27379710006F79B4CEBBA3
Preloader - SOC_ID: 0F70C99EC24AA8834597CC16F7FF95DA0A7824182DC4BF1BC875C071D6892E8C
Preloader
Preloader - [LIB]: ←[33mAuth file is required. Use --auth option.←[0m
DaHandler - Device is protected.
DaHandler - Device is in BROM-Mode. Bypassing security.
DaHandler - Preloader is not supplied. Acquiring it through BROM exploit.
PLTools - Loading payload from mt6765_payload.bin, 0x264 bytes
Exploitation - Kamakiri Run
Exploitation - Done sending payload...
PLTools - Successfully sent payload: C:\mtkclient-main\mtkclient\payloads\mt6765_payload.bin
Port - Device detected Smile

DaHandler
DaHandler - [LIB]: ←[33mDevice is in BROM mode. No preloader given, trying to dump preloader from ram.←[0m
DAXFlash - Uploading xflash stage 1 from MTK_DA_V5.bin
XFlashExt - Patching da1 ...
Mtk - Patched "Patched loader msg" in preloader
Mtk - Patched "hash_check" in preloader
Mtk - Patched "Patched loader msg" in preloader
Mtk - Patched "get_vfy_policy" in preloader
XFlashExt - Patching da2 ...
XFlashExt - Security check patched
XFlashExt - DA version anti-rollback patched
XFlashExt - SBC patched to be disabled
XFlashExt - Register read/write not allowed patched
DAXFlash - Successfully uploaded stage 1, jumping ..
Preloader - Jumping to 0x200000
Preloader - Jumping to 0x200000: ok.
DAXFlash - Successfully received DA sync
DAXFlash - Sending emi data ...
DAXFlash - DRAM setup passed.
DAXFlash - Sending emi data succeeded.
DAXFlash - Uploading stage 2...
DAXFlash - Upload data was accepted. Jumping to stage 2...
DAXFlash
DAXFlash - [LIB]: ←[31mStage was't executed. Maybe dram issue ?.←[0m
DAXFlash
DAXFlash - [LIB]: ←[31mError on booting to da (xflash)←[0m
please give a hint, what to do

maxpayne
Intern

4,059

30-07-2024, 09:05 PM

#2

(25-07-2024, 03:50 PM)Vicu ...
please give a hint, what to do

Try this command @ https://www.hovatek.com/forum/thread-46342.html

Note!
We have a reply schedule for Free Support. Please upgrade to Private Support if you can't wait.

Vicu
Newbie

4

31-07-2024, 09:13 AM

#3

(30-07-2024, 09:05 PM)maxpayne
(25-07-2024, 03:50 PM)Vicu ...
please give a hint, what to do

Try this command @ https://www.hovatek.com/forum/thread-46342.html

Thanks for replay, but same error.
da_hash_mismatch (0xc0070004)

justshez
Intern

2,372

31-07-2024, 11:40 AM

#4

(31-07-2024, 09:13 AM)Vicu
(30-07-2024, 09:05 PM)maxpayne
(25-07-2024, 03:50 PM)Vicu ...
please give a hint, what to do

Try this command @ https://www.hovatek.com/forum/thread-46342.html
Thanks for replay, but same error.
da_hash_mismatch (0xc0070004)

where did you download the firmware you're using

Note!
We have a reply schedule for Free Support. Please upgrade to Private Support if you can't wait.

Vicu
Newbie

4

31-07-2024, 12:57 PM

#5

(31-07-2024, 11:40 AM)justshez
(31-07-2024, 09:13 AM)Vicu
(30-07-2024, 09:05 PM)maxpayne
(25-07-2024, 03:50 PM)Vicu ...
please give a hint, what to do

Try this command @ https://www.hovatek.com/forum/thread-46342.html
Thanks for replay, but same error.
da_hash_mismatch (0xc0070004)

where did you download the firmware you're using

to be honest, I dont remember, but many other redmi user claimed the same situation on telegram chanel... Sad

Vicu
Newbie

4

31-07-2024, 01:29 PM

#6

Issue solved.
To be honest, I dont understand why, but download from telegram chanel flash tool version V5.2020.00, and follow the step's and bumm...
fixed

View a Printable Version

Users browsing this thread:
1 Guest(s)

Find us

Call us

Mail us

Useful Links

Actions