ViVO Y91 Y95 user pattern lock

AbuAhda

please help me open the teacher's y95 vivo pattern .......

madgoeslim

AbuAhda Hello,
Since newest vivo models, especially with qualcomm platform implement new secure boot firehose with custom auth, so reset user lock via USB mode is not possible.
You can try via iSP methode, and here is the iSP for Vivo Y91, also same PCB with Y95 too.
The step is easy, just solder this pin in UFi iSP adapter, use USB for VCC and VCCQ, open UFi eMMC ToolBox, checklist Direct ISP, do Identify eMMC, go to User Area, checklist at userdata partition, and do Erase.

joy

madgoeslim
i do this same ..and connect usb from pc...but error occured.

AbuAhda

THANK YOU, MASTER

AbuAhda

kapan ufi update lagi

joy

not working

madgoeslim

joy Because I make and try it by myself, so I can proof that this ISP is fully working.
I personally revive 3 devices deadboot by wrong clear entire disk in QFiL, and end up by writing full factory image firmware via ISP methode.

joy

madgoeslim
dump file please

madgoeslim

joy If you have any error, there are description or hint about the error, and post the detail error for further assistance.

sapari

it's clear pict to see

GsmMarhaba

Vivo Y91, Y93, Y95, V11, Vivo 1811 Pattern Unlock Ufi Box / UFi Dongle Via USB No Need ISP Pinout
Vivo Y91 Qualcomm Pattern Unlock, FRP Remove

https://youtu.be/EGB53j7t3ZA

lim

hallo...i have problem with direct vivo y91
in the middle of flashing i've got an error and stopped
'' Writing system at 0xE22EC000 (256416 sectors)... Failed to write block 0xE22EC000:65536 (return code: 0, CMD Error: )
cmd response: 0x0, card status: 0x0, card state: 0 (Card is in unknown state)
OS error code: 0x00000079(The semaphore timeout period has expired)''

can anyone help me ...thanks

madgoeslim

lim in the middle of flashing i've got an error and stopped
'' Writing system at 0xE22EC000 (256416 sectors)... Failed to write block 0xE22EC000:65536 (return code: 0, CMD Error: )
cmd response: 0x0, card status: 0x0, card state: 0 (Card is in unknown state)
OS error code: 0x00000079(The semaphore timeout period has expired)''

Hi, please post full detail log for further assistance.

lim

madgoeslim Connection status: EHCI:HUB:USB 2.00 High-Speed
Interface: UFI High-Speed
Serial number: 0011-8841-5764
Boot version: 1.05, FW version: 1.13 (Aug 19 2019 23:46:09)
Insertion test... Done
VCCQ not properly connected
Init bus...
VCC: 3.3 V, VCCQ: 1.8 V
Bus: 1 bit (SDR 4MHz)
Access mode: sector mode
Power supply: dual-voltage (1.70-1.95V, 2.7-3.6V)
Card/BGA: BGA (Discrete embedded) - High density MMC
Manufacturer ID: 0x90 (SK Hynix)
Product name: HAG4a2 (0x484147346132), rev: 0xA5, serial number: 0x3B53D8DB
Manufacturing date: Oct 2018
CID: 90014A48 41473461 32A53B53 D8DBA5D4
CSD: D0270132 8F5903FF FFFFFFE7 8A400016
EXT_CSD revision: 1.8 (MMC v5.1)
Partition info:
Boot1: 4096 KiB
Boot2: 4096 KiB
RPMB: 4096 KiB
User area: 14.68 GiB(15,758,000,128 bytes)

Processing file: "gpt_backup0.bin"... Skipped
Processing file: "gpt_main0.bin"...
Applying patch: Update last partition 59 'userdata' with actual size in Primary Header....Done
Applying patch: Update Primary Header with LastUseableLBA....Done
Applying patch: Update Primary Header with BackupGPT Header Location....Done
Applying patch: Update Primary Header with CRC of Partition Array....Done
Applying patch: Zero Out Header CRC in Primary Header....Done
Applying patch: Update Primary Header with CRC of Primary Header....Done
Writing PrimaryGPT at 0x00000000 (34 sectors)... Done in 0.069 s
Processing file: "NON-HLOS.bin"...
Writing modem at 0x01000000 (262144 sectors)... Done in 4 mins 41.815 s
Processing file: "sbl1.mbn"...
Writing sbl1 at 0x09003000 (669 sectors)... Done in 0.718 s
Processing file: "sbl1.mbn"...
Writing sbl1bak at 0x09083000 (669 sectors)... Done in 0.715 s
Processing file: "rpm.mbn"...
Writing rpm at 0x09103000 (329 sectors)... Done in 0.356 s
Processing file: "rpm.mbn"...
Writing rpmbak at 0x09183000 (329 sectors)... Done in 0.352 s
Processing file: "tz.mbn"...
Writing tz at 0x09203000 (2992 sectors)... Done in 3.192 s
Processing file: "tz.mbn"...
Writing tzbak at 0x09403000 (2992 sectors)... Done in 3.194 s
Processing file: "devcfg.mbn"...
Writing devcfg at 0x09603000 (75 sectors)... Done in 0.080 s
Processing file: "devcfg.mbn"...
Writing devcfgbak at 0x09643000 (75 sectors)... Done in 0.081 s
Processing file: "adspso.bin"...
Writing dsp at 0x09683000 (32768 sectors)... Done in 35.176 s
Processing file: "adspso.bin"...
Writing dspbak at 0x0A683000 (32768 sectors)... Done in 35.091 s
Processing file: "modemst.mbn"...
Writing modemst1 at 0x0B683000 (3000 sectors)... Done in 3.203 s
Processing file: "modemst.mbn"...
Writing modemst2 at 0x0B903000 (3000 sectors)... Done in 3.212 s
Processing file: "PD1818EF_EX_fs_image.tar.gz.mbn.img"...
Writing fsg at 0x0C008000 (656 sectors)... Done in 0.703 s
Processing file: "sec.dat"...
Writing sec at 0x0C288000 (1 sectors)... Done in 0.003 s
Processing file: "emmc_appsboot.mbn"...
Writing aboot at 0x0E000000 (8049 sectors)... Done in 8.607 s
Processing file: "emmc_appsboot.mbn"...
Writing abootbak at 0x0F000000 (8049 sectors)... Done in 8.642 s
Processing file: "dtbo.img"...
Writing dtbo at 0x10000000 (2750 sectors)... Done in 2.931 s
Processing file: "dtbo.img"...
Writing dtbobak at 0x10800000 (2750 sectors)... Done in 2.938 s
Processing file: "boot.img"...
Writing boot at 0x11020000 (30675 sectors)... Done in 32.838 s
Processing file: "recovery.img"...
Writing recovery at 0x15020000 (57879 sectors)... Done in 1 min 1.951 s
Processing file: "system_1.img"...
Writing system at 0x1A020000 (262160 sectors)... Done in 4 mins 41.296 s
Processing file: "system_2.img"...
Writing system at 0x220F1000 (16 sectors)... Done in 0.018 s
Processing file: "system_3.img"...
Writing system at 0x222EC000 (256432 sectors)... Done in 4 mins 35.099 s
Processing file: "system_4.img"...
Writing system at 0x2A21B000 (258104 sectors)... Done in 4 mins 36.766 s
Processing file: "system_5.img"...
Writing system at 0x320F1000 (16 sectors)... Done in 0.019 s
Processing file: "system_6.img"...
Writing system at 0x322EC000 (256432 sectors)... Done in 4 mins 34.991 s
Processing file: "system_7.img"...
Writing system at 0x3A21B000 (258104 sectors)... Done in 4 mins 36.754 s
Processing file: "system_8.img"...
Writing system at 0x420F1000 (16 sectors)... Done in 0.018 s
Processing file: "system_9.img"...
Writing system at 0x422EC000 (256432 sectors)... Done in 4 mins 35.038 s
Processing file: "system_10.img"...
Writing system at 0x4A21B000 (258104 sectors)... Done in 4 mins 36.831 s
Processing file: "system_11.img"...
Writing system at 0x520F1000 (16 sectors)... Done in 0.018 s
Processing file: "system_12.img"...
Writing system at 0x522EC000 (256432 sectors)... Done in 4 mins 35.049 s
Processing file: "system_13.img"...
Writing system at 0x5A21B000 (258104 sectors)... Done in 4 mins 36.782 s
Processing file: "system_14.img"...
Writing system at 0x620F1000 (16 sectors)... Done in 0.020 s
Processing file: "system_15.img"...
Writing system at 0x622EC000 (256432 sectors)... Done in 4 mins 34.932 s
Processing file: "system_16.img"...
Writing system at 0x6A21B000 (258104 sectors)... Done in 4 mins 37.512 s
Processing file: "system_17.img"...
Writing system at 0x7221B000 (258104 sectors)... Done in 4 mins 37.036 s
Processing file: "system_18.img"...
Writing system at 0x7A21B000 (258104 sectors)... Done in 4 mins 36.996 s
Processing file: "system_19.img"...
Writing system at 0x8221B000 (258104 sectors)... Done in 4 mins 36.894 s
Processing file: "system_20.img"...
Writing system at 0x8A21B000 (10144 sectors)... Done in 10.884 s
Processing file: "system_21.img"...
Writing system at 0x92020000 (16 sectors)... Done in 0.019 s
Processing file: "system_22.img"...
Writing system at 0x9221B000 (83792 sectors)... Failed to write block 0x93E4B000:65536 (return code: 36, Transmission Error: Data CRC fail)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_23.img"...
Writing system at 0x9A020000 (16 sectors)... Failed to write block 0x9A020000:8192 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_24.img"...
Writing system at 0x9A21B000 (258104 sectors)... Failed to write block 0x9A21B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_25.img"...
Writing system at 0xA221B000 (258104 sectors)... Failed to write block 0xA221B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_26.img"...
Writing system at 0xAA21B000 (258104 sectors)... Failed to write block 0xAA21B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_27.img"...
Writing system at 0xB221B000 (258104 sectors)... Failed to write block 0xB221B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_28.img"...
Writing system at 0xBA21B000 (258104 sectors)... Failed to write block 0xBA21B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_29.img"...
Writing system at 0xC221B000 (258104 sectors)... Failed to write block 0xC221B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_30.img"...
Writing system at 0xCA21B000 (258104 sectors)... Failed to write block 0xCA21B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_31.img"...
Writing system at 0xD221B000 (258104 sectors)... Failed to write block 0xD221B000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)
Processing file: "system_32.img"...
Writing system at 0xDA21B000 (258104 sectors)... Failed to write block 0xDA21B000:65536 (return code: 0, CMD Error: )
cmd response: 0x0, card status: 0x0, card state: 0 (Card is in unknown state)
OS error code: 0x00000079(The semaphore timeout period has expired)
Processing file: "system_33.img"...
Writing system at 0xE20F1000 (16 sectors)... Failed to write block 0xE20F1000:8192 (return code: 0, CMD Error: )
cmd response: 0x0, card status: 0x0, card state: 0 (Card is in unknown state)
OS error code: 0x00000079(The semaphore timeout period has expired)
Processing file: "system_34.img"...
Writing system at 0xE22EC000 (256416 sectors)... Failed to write block 0xE22EC000:65536 (return code: 1, CMD Error: Timeout)
cmd response: 0xD00, card status: 0x0, card state: 6 (Card is receiving operation information)
status: unknown (0)

adnanshahid

cmd response: 0x0, card status: 0x0, card state: 0 (Card is in unknown state) samsung chip problem sk hynix ok

madgoeslim

lim Processing file: "system_22.img"...
Writing system at 0x9221B000 (83792 sectors)... Failed to write block 0x93E4B000:65536 (return code: 36, Transmission Error: Data CRC fail)

Hi,
You are working in ISP Mode, right?
This is connection issue. You may try to connect battery to the phone for better power stability.
you also can resume rewrite the next part that error instead of rewrite whole firmware.