Inseego M2xxx series

[stich86]

Hi all,

any suggestion on this unit?

Qualcomm Sahara / Firehose Client V3.61 (c) B.Kerler 2018-2023.
main - Using loader prog_firehose_sdx55.mbn ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2, Version supported: 1
main - Mode detected: sahara
sahara -
------------------------
HWID:              0x000cf0e1001a0001 (MSM_ID:0x000cf0e1,OEM_ID:0x001a,MODEL_ID:0x0001)
CPU detected:      "SDX55M:CD90-PH809"
PK_HASH:           0xeb4f4206e731274fca394baa87aac8ccb7b76a9ed5b04801d0f858641030e7c9ea4169ff8def7cd1e04039ae13908e03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Serial:            0x44773590

sahara - Protocol version: 2, Version supported: 1
sahara - Uploading loader prog_firehose_sdx55.mbn ...
sahara - 32-Bit mode detected.
sahara - Firehose mode detected, uploading...

Booting in fastboot, device doesn't seems fused or locked:

fastboot oem device-info
(bootloader) Verity mode: true
(bootloader) Device unlocked: true
(bootloader) Device critical unlocked: true
(bootloader) Charger screen enabled: false

fastboot getvar all
(bootloader) parallel-download-flash:yes
(bootloader) hw-revision:20000
(bootloader) unlocked:yes
(bootloader) off-mode-charge:0
(bootloader) charger-screen-enabled:0
(bootloader) battery-soc-ok:yes
(bootloader) battery-voltage:0
(bootloader) version-baseband:
(bootloader) version-bootloader:
(bootloader) erase-block-size: 0x40000
(bootloader) logical-block-size: 0x1000
(bootloader) variant:SDX NAND
(bootloader) partition-type:system:ext4
(bootloader) partition-size:system: 0x10180000
(bootloader) partition-type:fotacookie:raw
(bootloader) partition-size:fotacookie: 0x80000
(bootloader) partition-type:sec:raw
(bootloader) partition-size:sec: 0x80000
(bootloader) partition-type:recoveryfs:raw
(bootloader) partition-size:recoveryfs: 0x2800000
(bootloader) partition-type:fota:raw
(bootloader) partition-size:fota: 0x140000
(bootloader) partition-type:recovery:raw
(bootloader) partition-size:recovery: 0x1740000
(bootloader) partition-type:devinfo:raw
(bootloader) partition-size:devinfo: 0x100000
(bootloader) partition-type:misc:raw
(bootloader) partition-size:misc: 0x140000
(bootloader) partition-type:modem:raw
(bootloader) partition-size:modem: 0x6480000
(bootloader) partition-type:scrub:raw
(bootloader) partition-size:scrub: 0x80000
(bootloader) partition-type:boot:raw
(bootloader) partition-size:boot: 0xBC0000
(bootloader) partition-type:loader_sti:raw
(bootloader) partition-size:loader_sti: 0x100000
(bootloader) partition-type:toolsfv:raw
(bootloader) partition-size:toolsfv: 0x100000
(bootloader) partition-type:uefi:raw
(bootloader) partition-size:uefi: 0x200000
(bootloader) partition-type:abl:raw
(bootloader) partition-size:abl: 0x80000
(bootloader) partition-type:qhee:raw
(bootloader) partition-size:qhee: 0x80000
(bootloader) partition-type:aop:raw
(bootloader) partition-size:aop: 0x80000
(bootloader) partition-type:multi_image:raw
(bootloader) partition-size:multi_image: 0x80000
(bootloader) partition-type:xbl_config:raw
(bootloader) partition-size:xbl_config: 0x80000
(bootloader) partition-type:apdp:raw
(bootloader) partition-size:apdp: 0x80000
(bootloader) partition-type:ddr:raw
(bootloader) partition-size:ddr: 0x100000
(bootloader) partition-type:tz_devcfg:raw
(bootloader) partition-size:tz_devcfg: 0x80000
(bootloader) partition-type:tz:raw
(bootloader) partition-size:tz: 0x140000
(bootloader) partition-type:efs2:raw
(bootloader) partition-size:efs2: 0x1380000
(bootloader) partition-type:mibib:raw
(bootloader) partition-size:mibib: 0x200000
(bootloader) partition-type:sbl:raw
(bootloader) partition-size:sbl: 0x200000
(bootloader) secure:no
(bootloader) serialno:44773590
(bootloader) product:
(bootloader) max-download-size:201326592
(bootloader) kernel:uefi

@RenateUSB any advice?
I've a M2100 with broken UEFI, now it's stuck on 900E mode, no way to recover it :(

Thanks!

[RenateUSB]

I don't know what state you're in. I don't know what command you used. I don't know what the result was.

[stich86]

put unit in EDL and do a simple edl printgpt --loader=LOADERNAME

that's all..

[RenateUSB]

You have to force it into 9008 mode, using EDL cable, EDL test points or defeating the flash memory.

[stich86]

You have to force it into 9008 mode, using EDL cable, EDL test points or defeating the flash memory.

yes for put it in EDL there should be a test point inside, but without a correct loader there is no way to restore it :(