Elias extracted the files. The interface was Spartan—barely more than a command-line interface with a few buttons. Select Port: "SPD Diag Port (COM12)" Action: [Reset UserLock] [Erase FRP] [Diag Fix]
The U2S didn't care. She shorted the test point on the motherboard while sending the --force-erase flag. The tool bypassed the RPMB (Replay Protected Memory Block), writing zeros to the partition that held the FRP token. When the phone rebooted, it thought it had just left the assembly line. No memory of its owner. No memory of its jailer. sprd u2s diag reset tool