ZTE Z289L diagnostic port/emergency mode for firmware dump/load

**rich hathaway** · 11-13-2016, 11:30 AM

This devices diagnostic port is achievable by url and the devices UI, it can also be achieved by the devices pinouts, it has 3, 2 on the back and one on the front under the chipset cover as you can see by my pics below, I have the diag/emergency port enabled via the pinout so I can dump the firmware and find the correct url to set the diag mode normally without having to take the device apart and manipulate the pinouts, I also attached a small video of the diag port and a screenshot of the freshly dumped firmware from this device.
Anyone else working on this device? feel free to post your findings in this thread with mine.

Here are the devices partitions, there sizes as well as there address's and names for you all to play with

================================================== ==========
00 0 00000a ff ff ff 00 STD 0:MIBIB
01 a 00001b ff 01 00 00 LNX 0:SBL2
02 25 00001b ff 01 00 00 LNX 0:RPM
03 40 00002c ff ff 00 00 STD 0:EFS2
04 6c 00001b ff 01 00 00 LNX 0

SP1
05 87 000002 ff 01 00 00 LNX 0:PAD
06 89 000196 ff 01 00 00 LNX 0

SP2
07 21f 00002c ff ff ff 00 STD 0

ATABAK
08 24b 000005 ff 01 00 00 LNX 0:PMFLAG
09 250 000007 ff 01 00 00 LNX 0:APPSBL
10 257 000052 ff 01 00 00 LNX 0:APPS
11 2a9 0000ad ff ff ff 00 STD 0:CACHE
12 356 000009 ff 01 00 00 LNX 0:MISC
13 35f 000051 ff 01 00 00 LNX 0:RECOVERY
14 3b0 000005 ff 01 00 00 LNX 0:FOTA
15 3b5 0000a1 ff 01 00 00 LNX 0:RECOVERYFS
16 456 0000b7 ff 01 00 00 LNX 0:SYSTEM
17 50d 000150 ff 01 00 00 LNX 0:ZTEDATA
18 65d 00002c ff ff ff 00 STD 0:FILEBAK
19 689 000177 ff 01 00 00 LNX 0:USERDATA
================================================== ==========

[Only registered and activated users can see links. ]

[Only registered and activated users can see links. ]

[Only registered and activated users can see links. ]

[Only registered and activated users can see links. ]