How root and unlock bootloader Motorola Moto E6s XT2053-2 (Fiji) - Moto E6s Questions & Answers

Hello,
There is any way for unlocking bootloader and rooting the device Motorola Moto E6s XT2053-2 (Fiji) ?
I can allow oem unlock on develop settings. But fastboot says oem unlock doesn't exist and I can't flash anything.
:-(
Thank you very much

try to downgrade for the fist version of fiji firmware and put this command via fastboot
fastboot flashing unlock_critical
it worked with E6+

raphable said:
try to downgrade for the fist version of fiji firmware and put this command via fastboot
fastboot flashing unlock_critical
it worked with E6+
Click to expand...
Click to collapse
how did you downgrade with unlocked bootloader?

VD171 said:
how did you downgrade with unlocked bootloader?
Click to expand...
Click to collapse
install flash tool, and download the oldest rom for fiji from lolinet mirrors, then, extract the rom and power off your device, open flash tool and select the scatter file from the stock, press the download button. In the device, press volume down and connect to the computer, then, if flashed successfully, go to fastboot and run the command

raphable said:
install flash tool, and download the oldest rom for fiji from lolinet mirrors, then, extract the rom and power off your device, open flash tool and select the scatter file from the stock, press the download button. In the device, press volume down and connect to the computer, then, if flashed successfully, go to fastboot and run the command
Click to expand...
Click to collapse
which DA file did you use? also my oldest rom is 288.13, pretty much factory stock for my phone region but fastboot commands are still disabled

VD171 said:
Hello,
There is any way for unlocking bootloader and rooting the device Motorola Moto E6s XT2053-2 (Fiji) ?
I can allow oem unlock on develop settings. But fastboot says oem unlock doesn't exist and I can't flash anything.
:-(
Thank you very much
Click to expand...
Click to collapse
Here is instruction for e6 plus, i think for e6s it might work. I want try this later.
Stock firmwares can take here

Mortyk said:
Here is instruction for e6 plus, i think for e6s it might work. I want try this later.
Stock firmwares can take here
Click to expand...
Click to collapse
Thanks, I will try this !

VD171 said:
Thanks, I will try this !
Click to expand...
Click to collapse
Link to fitmware little incorrect.
I pasted link for 2053-2, but in my phone show 2053-1.
Here is for 2053-1.
Waiting for your report on the successful operation.

VD171 said:
Thanks, I will try this !
Click to expand...
Click to collapse
So you try unlock the phone or no?

well i tried rooting it by flashing an empty vbmeta and a patched boot.img and soft bricked my device because there's no way to unlock the bootloader with the current fw
gonna need to reflash my preloader but the DA isn't letting me flash anything to that partition

luridphantom said:
well i tried rooting it by flashing an empty vbmeta and a patched boot.img and soft bricked my device because there's no way to unlock the bootloader with the current fw
gonna need to reflash my preloader but the DA isn't letting me flash anything to that partition
Click to expand...
Click to collapse
If you try to flash any modified/patched partition to an unlocked device, certainly you will brick it.

VD171 said:
If you try to flash any modified/patched partition to an unlocked device, certainly you will brick it.
Click to expand...
Click to collapse
it's been a while and i've unbricked my device and now am trying to unlock the bootloader
anybody know how to enter brom mode on these fijis? if thats possible, this tool can unlock bootloaders by patching the seccfg partition: https://github.com/bkerler/mtkclient

luridphantom said:
it's been a while and i've unbricked my device and now am trying to unlock the bootloader
anybody know how to enter brom mode on these fijis? if thats possible, this tool can unlock bootloaders by patching the seccfg partition: https://github.com/bkerler/mtkclient
Click to expand...
Click to collapse
You can't.

I tested it, but it gave an error: Preloader - [LIB]: Status: Handshake failed, retrying...

br.rafael.venancio said:
I tested it, but it gave an error: Preloader - [LIB]: Status: Handshake failed, retrying...
Click to expand...
Click to collapse
yea i can enter meta mode so far but nothing else. even the usual volume down and usb plug in that works in spft doesn't work for mtkclient. must be some authentication required to enter brom for flashing

luridphantom said:
yea i can enter meta mode so far but nothing else. even the usual volume down and usb plug in that works in spft doesn't work for mtkclient. must be some authentication required to enter brom for flashing
Click to expand...
Click to collapse
You can't.

Hi! I am Ukraine bad english. I am unlock (not pay dongle, just pc) this smart moto e6s 4/64 (and this very simple for 2/32) Now, i am try in hex edit lk for remove 5 sec and message, flash lk from e6plus no try. info for edit lk for remove 5 sec and message? help. and help how root. (also i am unlock meizu m3 max, not pay dongle, just pc, flash preloader, reset pin frp work)

severagent007 said:
Hi! I am Ukraine bad english. I am unlock (not pay dongle, just pc) this smart moto e6s 4/64 (and this very simple for 2/32) Now, i am try in hex edit lk for remove 5 sec and message, flash lk from e6plus no try. info for edit lk for remove 5 sec and message? help. and help how root. (also i am unlock meizu m3 max, not pay dongle, just pc, flash preloader, reset pin frp work)
Click to expand...
Click to collapse
you used a pay dongle or what free tool to unlock? mtkclient doesnt work for me but i know the dongles can unlock the e6s
to root, go to lolinet and find your firmware version there, unzip and extract boot.img and patch with magisk. flash with fastboot

luridphantom said:
you used a pay dongle or what free tool to unlock? mtkclient doesnt work for me but i know the dongles can unlock the e6s
to root, go to lolinet and find your firmware version there, unzip and extract boot.img and patch with magisk. flash with fastboot
Click to expand...
Click to collapse
its very simple) from fastboot anl 29.137 firmware. Thanks i am try patch boot. fastboot still not flash any part but spft now flash editing lk vbmeta/ vbmeta i flash empty and lk with remove mess orange state. But i am dont flash twrp - i am dont know adress partition - in scatter not find him. Now i am search why its did

severagent007 said:
its very simple) from fastboot anl 29.137 firmware. Thanks i am try patch boot. fastboot still not flash any part but spft now flash editing lk vbmeta/ vbmeta i flash empty and lk with remove mess orange state. But i am dont flash twrp - i am dont know adress partition - in scatter not find him. Now i am search why its did
Click to expand...
Click to collapse
ok i will try when i get home. maybe i cant downgrade to that version and they removed it like with the e6
posted the lolinet link in the other thread. the scatter file is in there

Related

[PRELOADER][IMG][STOCK] PRELOADER Partition Binary for MERLIN (Xiaomi Redmi 10X 4G / Xiaomi Redmi Note 9)

Original Stock PRELOADER_MERLIN.BIN for MERLIN
Works with:
- Xiaomi Redmi 10X 4G
- Xiaomi Redmi Note 9
Firmware Versions:
- (Engineering) AL2522-Merlin-V039-Q-0513
- (Engineering) AL2522-Merlin-V044-Q-0920
- V12.5.1.0.RJOMIXM (FLASHING EDL only.)
- V12.0.1.0.RJOMIXM (FLASHING EDL only.)
- V12.0.8.0.QJOMIXM (FLASHING EDL only.)
- V12.0.7.0.QJOMIXM (FLASHING EDL only.)
- V12.0.6.0.QJOMIXM (FLASHING EDL only.)
- V12.0.5.0.QJOMIXM (FLASHING EDL only.)
- V12.0.4.0.QJOMIXM
- (China) V12.0.4.0.QJOCNXM
- V12.0.3.0.QJOMIXM
- V11.0.5.0.QJOMIXM
- V11.0.4.0.QJOMIXM
- V11.0.2.0.QJOMIXM
How to flash it?
Code:
fastboot flash preloader preloader_merlin.bin
MD5 hashes:
AL2522-Merlin-V039-Q-0513: bc7ebc0c2ca06b0d99856d595949e215
AL2522-Merlin-V044-Q-0920: d2c78e614adf75b98b2b6de74dfb4675
V12.5.1.0.RJOMIXM: 5db0756e0c2c0af508e5a823f204a6f1
V12.0.1.0.RJOMIXM: 1871c0dc6d8de2060175f8c90b133012
V12.0.8.0.QJOMIXM: d9a5ed36161265b61176178bebed8281
V12.0.7.0.QJOMIXM: 2124bb907077b745b8ada8d7108802f9
V12.0.6.0.QJOMIXM: 8c5d38f293d1609da6f79aa7d43b5c0b
V12.0.5.0.QJOMIXM: 27349a358cfd49f73ed3d31d423ca7fd
V12.0.4.0.QJOMIXM: 61ec78ae4a096c0b9f46cf814e5988c3
(China) V12.0.4.0.QJOCNXM: d06b365a15bc622327772586d3c54b18
V12.0.3.0.QJOMIXM: 9a14afee8301b12848ff8ec56c5aebbf
V11.0.5.0.QJOMIXM: 6fb0758e03bf1e43794f5a5273b627b8
V11.0.4.0.QJOMIXM: ea0e773af461a339b76907f94eff73c9
V11.0.2.0.QJOMIXM: d7d5c5b53817b4cc62accfe0eb0cabe3
Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-10x-4g-redmi-note-9.4225177/
My device is on China version 12.0.8, will I get bricked if I flash preload 12.0.4 Global?
p233 said:
My device is on China version 12.0.8, will I get bricked if I flash preload 12.0.4 Global?
Click to expand...
Click to collapse
No.
It will works perfectly.
I've attached preloader of V12.0.4.0.QJOCNXM (China) too.
Enjoy
How do i flash is in EDL mode, what should i use because i am at miui 12.5 and i dont know how to make this into edl mode and flash it there
briangwapo81 said:
How do i flash is in EDL mode, what should i use because i am at miui 12.5 and i dont know how to make this into edl mode and flash it there
Click to expand...
Click to collapse
You can't. If you are at MIUI V12.0.5.0 or higher, ou need to flash in fastboot.
For EDL you need an authorized account for use EDL.
You need to go the service centre for professional assistance.
Read it: https://www.xda-developers.com/xiaomi-edl-unbrick-authorized-mi-accounts/
Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-10x-4g-redmi-note-9.4225177/
VD171 said:
You can't. If you are at MIUI V12.0.5.0 or higher, ou need to flash in fastboot.
For EDL you need an authorized account for use EDL.
You need to go the service centre for professional assistance.
Read it: https://www.xda-developers.com/xiaomi-edl-unbrick-authorized-mi-accounts/
Click to expand...
Click to collapse
I made the way of VD171 and succeeded. Furthermore I can switch back to MIUI 11.0.5 Global. However, when I was in version 11.0.5, I installed TWRP, but Root didn't work.
p233 said:
I made the way of VD171 and succeeded. Furthermore I can switch back to MIUI 11.0.5 Global. However, when I was in version 11.0.5, I installed TWRP, but Root didn't work.
Click to expand...
Click to collapse
Here, you can see what is working for MERLIN: https://forum.xda-developers.com/t/...omi-redmi-10x-4g-xiaomi-redmi-note-9.4209269/
As you can see, MAGISK is working perfectly on V11.0.5.0.
Did you flash magisk using TWRP or did you flash magisk patched boot.img ?
Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-10x-4g-redmi-note-9.4225177/
VD171 said:
Here, you can see what is working for MERLIN: https://forum.xda-developers.com/t/...omi-redmi-10x-4g-xiaomi-redmi-note-9.4209269/
As you can see, MAGISK is working perfectly on V11.0.5.0.
Did you flash magisk using TWRP or did you flash magisk patched boot.img ?
Click to expand...
Click to collapse
I flash magisk using TWRP.
p233 said:
I flash magisk using TWRP.
Click to expand...
Click to collapse
Try patching boot.img using magisk manager.
And then, flashing the magisk patched boot.img to boot partition.
Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-10x-4g-redmi-note-9.4225177/
Good afternoon! I flashed my RN 9 with the version merlin_global_images_V12.0.1.0.RJOMIXM. Then I flashed LK from lk-V12.0.4.0.QJOMIXM. The result is this: the phone is loaded only in EDL mode. Now only carry it to the service center?
Gardlok said:
Good afternoon! I flashed my RN 9 with the version merlin_global_images_V12.0.1.0.RJOMIXM. Then I flashed LK from lk-V12.0.4.0.QJOMIXM. The result is this: the phone is loaded only in EDL mode. Now only carry it to the service center?
Click to expand...
Click to collapse
Just bypass the EDL authentication and flash the LK-V12.0.1.0.RJOMIXM.
I suggest you to flash the preloader-V12.0.4.0.QJOMIXM and then, you can flash in download mode and avoid the EDL authentication.
VD171 said:
Just bypass the EDL authentication and flash the LK-V12.0.1.0.RJOMIXM.
I suggest you to flash the preloader-V12.0.4.0.QJOMIXM and then, you can flash in download mode and avoid the EDL authentication.
Click to expand...
Click to collapse
After loading the DA, after 60 seconds (timeout), it returns an error: Error: "EXCEPTION STATUS_EXT_RAM_EXCEPTION". I am 100% sure that I did not click "format all". I have successfully bypassed authentication. I saw your post, it said that preloader_merlin-V12.0.1.0.RJOMIXM cannot load DA...
Gardlok said:
After loading the DA, after 60 seconds (timeout), it returns an error: Error: "EXCEPTION STATUS_EXT_RAM_EXCEPTION". I am 100% sure that I did not click "format all". I have successfully bypassed authentication. I saw your post, it said that preloader_merlin-V12.0.1.0.RJOMIXM cannot load DA...
Click to expand...
Click to collapse
You need to flash using the firmware upgrade mode, it will erase userdata and relock bootloader.
And then, you can restore your backup.
VD171 said:
You need to flash using the firmware upgrade mode, it will erase userdata and relock bootloader.
And then, you can restore your backup.
Click to expand...
Click to collapse
The switched-off phone is not detected by the computer in any way, only EDL mode is possible, I tried to flash in the "Firmware upgrade" mode, the error is the same...
Gardlok said:
The switched-off phone is not detected by the computer in any way, only EDL mode is possible, I tried to flash in the "Firmware upgrade" mode, the error is the same...
Click to expand...
Click to collapse
May you attach the screenshot, please?
VD171 said:
May you attach the screenshot, please?
Click to expand...
Click to collapse
Ok. In the settings, I put UART, 921600.
Gardlok said:
Ok. In the settings, I put UART, 921600.
Click to expand...
Click to collapse
The good news: your device is okay, just need some attention.
The bad news: you really need to do more tests.
Did you try another older MIUI version?
VD171 said:
The good news: your device is okay, just need some attention.
The bad news: you really need to do more tests.
Did you try another older MIUI version?
Click to expand...
Click to collapse
Yes, I tried it. I have tried many different versions of the firmware, both for Russia and for the whole world. I also tried the engineering firmware. I also tried to install various drivers, SPFT. I was booting using Live WinPE. Conclusion: there is always an error that is described above. I think the phone's memory has switched to read-only mode. My phone is under warranty, I will take it to the service... I was upset... eh...
Gardlok said:
Yes, I tried it. I have tried many different versions of the firmware, both for Russia and for the whole world. I also tried the engineering firmware. I also tried to install various drivers, SPFT. I was booting using Live WinPE. Conclusion: there is always an error that is described above. I think the phone's memory has switched to read-only mode. My phone is under warranty, I will take it to the service... I was upset... eh...
Click to expand...
Click to collapse
You just applied some change to the device, causing some brick.
SP Flash Tool is your best friend, certainly it can solve your problems.
Please help me, my phone comes with miui 12.5.X, I have unlocked the bootloader with "MediatekBootloaderUnlock" and I can use "MTK-bypas" to flash it using SP - TOOL, apparently the flashing is always successful, however the system won't boot , it only shows the android logo and I can't access the recovery menu, only fastboot. I tried with MIU 13, MIU 12.5.3 with the same results.
In the end I tried with MIU 12.0.1 (merlin_global_images_V12.0.1.0.RJOMIXM_20210520.0000.00_11.0_global):
1- Use EDL bypass and SPFLASH, it was successful, because fastboot now shows a different logo, but the system does not start and I cannot access the recovery menu either.
2- Use Mediatek Bootloader Unlock
3- Start fastboot and use: "fastboot flash preloader preloader_merlin--V12.0.1.0.RJOMIXM.bin" with apparent success.
4- I go back to SP-Flash and try to flash again MIU 12.0.1 (in theory it should no longer need EDL bypass), uncheck "preloader", I press download and connect my phone and it starts to turn itself on, if I press a key then I receive the authentication error.
If someone could give me a better guide on what to do, I would greatly appreciate it. I have tried formatting using SP-Flash and tried to flash by changing the preloader from "merlin_global_images_V12.0.1.0.RJOMIXM_20210520.0000.00_11.0_global" to "preloader_merlin--V12.0.1.0.RJOMIXM.bin", using "DA_VD171--3.3001 .2020-07-02020-07-14.bin" and "MT6768_Android_scatter--V12.0.1.0.RJOMIXM.txt" but I get the error, the screenshot is from this attempt.
Please help me

Unbrick your Realme C12

What is a brick?​If there is no usual way to recover your mobile, then it is called brick in my opinion. That means if you can't able to go to recovery and fastboot mode or the device is just blank with no sign of life.
When brick happens?​It will happen because of locking bootloader with custom images or just because of Mediatek/Realme strange behaviour.
What we have to do if brick happens?​Simply we have to flash stock firmware with Smart Phone Flash Tool(aka SPFlash Tool). With only SPFlash Tool we can't do anything, since we don't have permission for it. But with the advent of MTK-bypass, we can have full control over our device. If we don't have this MTK-bypass, then we have search for costly alternative's.
You can't flash only if your eMMC is damaged, which is the worst case because oppo phones are prone to eMMC failure.
Click to expand...
Click to collapse
Where to get firmware to flash?​Download decrypted .ofp firmware from https://drive.google.com/file/d/1SOmRxix9_UtjOLLanXPYxf4YK1NrA_RW/view
Thanks to @bx2_nero for it.
What is the procedure for using MTK-bypass and SPFlashTool?​MTK-bypass is a Python script and it needs different USB ways for working. So with these two in place, we can get our work done.
Linux Users​For Linux we have to use FireISO or patched kernels for working of MTK-bypass.
Use the Linux guide by @bx2_nero at https://forum.xda-developers.com/t/...our-realme-6-6i-india-6s-linux-method.4251077
Windows Users​For Windows we have to use libusb32 filter for MTK-bypass working.
Use the guide by @daeSundae at https://forum.xda-developers.com/t/...india-6s-using-spflash-tool-for-free.4222027/
MTK-bypass Official instructions​See Github ReadMe at https://github.com/MTK-bypass/bypass_utility and XDA support thread at https://forum.xda-developers.com/t/mod-dev-mediatek-mtk-auth-bypass-sla-daa-utility.4232377/
Credits​xyzz / xyz`: GitHub | XDA
chaosmaster / k4y0z: GitHub | XDA
Dinolek: GitHub | XDA
References​- https://forum.hovatek.com/thread-37957.html
- https://www.xda-developers.com/bypass-mediatek-sp-flash-tool-authentication-requirement/
- https://forum.xda-developers.com/t/repair-dead-hard-bricked-realme-3-3i-tutorial.4224255/
- https://forum.xda-developers.com/t/...d-flash-in-edl-with-no-auth-for-free.4229683/
- https://forum.xda-developers.com/t/...ash-tool-authentication.4236881/post-84627359
MTKClient
After MTK-bypass got success, @viperbjk who is a reverse engineer came up with a FOSS replacement of SP Flash Tool.
MTKClient combines MTK-bypass and SP Flash Tool together and with many improvements and new features.
Ability to flash partitions without Scatter file
Ability to Readback partitions without specifying address and length
Ability to Format partitions without specifying address and length
Run multiple commands without reconnecting the device
Flash protected partitions(opporeserve2, special_preload, my_custom and cdt_engineering) with locked bootloader
Unlock bootloader without need of in-depth test/Deep testing app from Realme
GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool
MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.
www.github.com
Reserved
I need help, my C12 is stuck on fastboot mode. This happened after flashing a GSI using TWRP and flashing the image in the Super (System and Vendor) partition.
I tried rebooting to recovery mode by executing fastboot reboot recovery but it says that bootloader is not known.
I also tried to flash a GSI (taught it might fix the problem) using fastboot flash system system.img but it says that no partition named system exists.
Please suggest what I should do.
Bro, can you make a video about this? my realme c12 got hardbricked after I flashed ozip file from stock recovery while bootloader is unlocked. it got hardbricked when I reboot it after flashing ozip
DFM23 said:
Bro, can you make a video about this? my realme c12 got hardbricked after I flashed ozip file from stock recovery while bootloader is unlocked. it got hardbricked when I reboot it after flashing ozip
Click to expand...
Click to collapse
What is the present state of the device? Can you able to boot to fastboot mode?
HemanthJabalpuri said:
What is the present state of the device? Can you able to boot to fastboot mode?
Click to expand...
Click to collapse
it has no sign of life, cant go to recovery or fastboot. when I connect it to pc it goes connect and disconnected.
How can I reboot to recovery mode when in fastboot mode? The command fastboot reboot recovery is not working for me.
youcancallmekhen said:
How can I reboot to recovery mode when in fastboot mode? The command fastboot reboot recovery is not working for me.
Click to expand...
Click to collapse
Use latest platform tools
youcancallmekhen said:
How can I reboot to recovery mode when in fastboot mode? The command fastboot reboot recovery is not working for me.
Click to expand...
Click to collapse
HemanthJabalpuri said:
Use latest platform tools
Click to expand...
Click to collapse
Sir I've finally able to reboot to recovery. I've tried flashing the OZIP file for my model but after some time it says Installation failed. When I was still using custom recovery, I wasn't able to mount System and Vendor. My bootloader is also unlocked sir.
Should I lock my bootloader sir?
youcancallmekhen said:
Should I lock my bootloader sir?
Click to expand...
Click to collapse
Don't lock bootloader.
Download this https://drive.google.com/file/d/1jLdDz7M0G_KPDn4jXjTeuFnO1C-MFaBs/view (It is from A.87 UI 1.0 Stock ROM)
Extract above 7z file and flash ONLY super partition from it and TWRP from https://androidfilehost.com/?fid=7161016148664807816 with below commands
Code:
fastboot -w
fastboot flash super super.img
fastboot flash recovery TWRP.img
fastboot reboot recovery
Now enable 'Skip Treble Compatibility error' in TWRP settings and flash stock ROM .ozip in TWRP.
Thanks
HemanthJabalpuri said:
Don't lock bootloader.
Download this https://sourceforge.net/projects/realmec11/files/Fastboot-ROM/[email protected]/download
Extract above 7z file and flash ONLY super partition from it with below commands
Code:
fastboot -w
fastboot flash super super.img
fastboot flash recovery stock-recovery.img
fastboot reboot recovery
Now flash stock ROM .ozip in stock recovery.
Thanks
Click to expand...
Click to collapse
Oh my, thank you so much sir. You have no idea how much you are helping me sir! My parents will be so happy, and we won't waste money… Thank you so much sir…
I'll update you sir after doing these, thank you sir! ♥
HemanthJabalpuri said:
Don't lock bootloader.
Download this https://sourceforge.net/projects/realmec11/files/Fastboot-ROM/[email protected]/download
Extract above 7z file and flash ONLY super partition from it with below commands
Code:
fastboot -w
fastboot flash super super.img
fastboot flash recovery stock-recovery.img
fastboot reboot recovery
Now flash stock ROM .ozip in stock recovery.
Thanks
Click to expand...
Click to collapse
I don't have much data left today sir, so I will download this later. Thank you very much again sir, you're my hero!
DFM23 said:
it has no sign of life, cant go to recovery or fastboot. when I connect it to pc it goes connect and disconnected.
Click to expand...
Click to collapse
Follow the guide and you can get your mobile back to life.
Thanks
HemanthJabalpuri said:
Follow the guide and you can get your mobile back to life.
Thanks
Click to expand...
Click to collapse
thank you bro, Ill follow your guide then. btw does the RMX2185 firmware you provided works with realme c12? I look it up and saw that it was for realme c11
DFM23 said:
thank you bro, Ill follow your guide then. btw does the RMX2185 firmware you provided works with realme c12? I look it up and saw that it was for realme c11
Click to expand...
Click to collapse
Yes, both use same firmware.
I tried the guide but when I click download on sp flash tool it would stay in red bar for 1 min or more then message will appear saying STATUS_EXT_RAM_EXCEPTION. I have read a same comment here in xda about realme c12 I dont know if its only on realme c12.
Thanks for your works sir, you are super awesome!
I rooted My Device (Realme X2 Pro) by Magisk. And Since My Device Bootloader was unlocked I Unrooted/Uninstalled MAgisk.
While Locking Bootloader My Device is Stuck where It displays { The Current Image (boot/recovery) have been destroyed dand cannot boot. Please flash the correct Image or Contact Customer Service to fix it }
While Trying to ENter the Fast Boot Mode {By pressing Volume + - and Power Button} Its Unresponsive
It shows Realme Logo And chrging Display for a Instant
Do you Know any way around to fix my Problem?
Bhuprab said:
I rooted My Device (Realme X2 Pro) by Magisk. And Since My Device Bootloader was unlocked I Unrooted/Uninstalled MAgisk.
While Locking Bootloader My Device is Stuck where It displays { The Current Image (boot/recovery) have been destroyed dand cannot boot. Please flash the correct Image or Contact Customer Service to fix it }
While Trying to ENter the Fast Boot Mode {By pressing Volume + - and Power Button} Its Unresponsive
It shows Realme Logo And chrging Display for a Instant
Do you Know any way around to fix my Problem?
Click to expand...
Click to collapse
Since your device is Qualcomm, I don't know. In any device, we have to flash stock rom (or atleast the partitions that are modified) to get device in working state.
You may get better help at https://forum.xda-developers.com/f/realme-x2-pro-questions-answers.9439/
Thanks

hardbricked realme 5 pro, No bootloader and No recovery

I tried to upgrade my phone to Realme UI 2 with dirty flash but at first my phone get into a bootloop, I tried to reflash Vbmeta but it made it worse.
I tried this guide about unbrick : https://forum.xda-developers.com/t/...-to-stock-unbrick-and-fastboot-flash.3995285/ but not worked it just returned me to bootloop again.
I locked my bootloader accidently
My phone now only show this message and stuck till I press power button to turn off.
Is there is any way to flash stock ROM again with any tool ?
( MSM tool needs a username and password to work )
and I cannot find any QFIL files on Internet
IS there any way to re unlock my bootloader ?
shrefeltony said:
IS there any way to re unlock my bootloader ?
Click to expand...
Click to collapse
Did you managed to fix it?
shrefeltony said:
I tried to upgrade my phone to Realme UI 2 with dirty flash but at first my phone get into a bootloop, I tried to reflash Vbmeta but it made it worse.
I tried this guide about unbrick : https://forum.xda-developers.com/t/...-to-stock-unbrick-and-fastboot-flash.3995285/ but not worked it just returned me to bootloop again.
I locked my bootloader accidently
My phone now only show this message and stuck till I press power button to turn off.
Is there is any way to flash stock ROM again with any tool ?
( MSM tool needs a username and password to work )
and I cannot find any QFIL files on Internet
Click to expand...
Click to collapse
ONLY ONEWAY TO FIX THIS IS FLASHING THE PHONE WITH EASY JTAG PINOUT METHOD
PrateekPanwar64X said:
Did you managed to fix it?
Click to expand...
Click to collapse
I did managed to fix my device. Pressed power button and both volume keys while connected to PC (when bootloader was locked) and saw Q_BULK in device manager > COM ports.
After then it was flashed with original ROM using MSM tool and done.
PrateekPanwar64X said:
I did managed to fix my device. Pressed power button and both volume keys while connected to PC (when bootloader was locked) and saw Q_BULK in device manager > COM ports.
After then it was flashed with original ROM using MSM tool and done.
Click to expand...
Click to collapse
Hi @PrateekPanwar64X can you provide me the MSM tool that u used sir. I appreciate your help sir : )
iPonze said:
Hi @PrateekPanwar64X can you provide me the MSM tool that u used sir. I appreciate your help sir : )
Click to expand...
Click to collapse
Password of zip file should be 123
Although I don't have login credentials for msm tool. Paid to a telegram group to fix it.
Problem was I locked my bootloader myself with custom ROM [Following that warning while starting phone] and thought I'd bypass warning.
PrateekPanwar64X said:
Password of zip file should be 123
Although I don't have login credentials for msm tool. Paid to a telegram group to fix it.
Problem was I locked my bootloader myself with custom ROM [Following that warning while starting phone] and thought I'd bypass warning.
Click to expand...
Click to collapse
oh hi! thanks for providing a zip file. btw, how much do you pay?
can u send me the source of the RUI 2.0 firmware you got and ill try to fix it
umm download platform-tools
- Clean wipe - Flash C.14 or latest firmware (No need if already there) - Go to custom recovery terminal and write setprop ro.separate.soft 19691 - Flash Realme UI 2.0 ozip - Reboot to bootloader - Download Realme UI 2.0 vbmeta and flash it using fastboot with fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img - Reboot to system
PrateekPanwar64X said:
Password of zip file should be 123
Although I don't have login credentials for msm tool. Paid to a telegram group to fix it.
Problem was I locked my bootloader myself with custom ROM [Following that warning while starting phone] and thought I'd bypass warning.
Click to expand...
Click to collapse
Just a quick question, did you uninstall/delete the file later? And heads up for anyone using this zip. It seems to be a keylogger. In the zip under firmware, you can see all keypresses along with window it was pressed in, in a file called keylog.txt.
maxzeroedge said:
Just a quick question, did you uninstall/delete the file later? And heads up for anyone using this zip. It seems to be a keylogger. In the zip under firmware, you can see all keypresses along with window it was pressed in, in a file called keylog.txt.
Click to expand...
Click to collapse
Oh, Thankfully I didn’t need it later as I learnt my lesson and never locked bootloader. If I want to reupload zip, How can I remove it?

Question How do I flash stock ROM with locked bootloader?

Hi guys,
so after I got my xiaomi with a global ROM and wanted to update and that is when I accidentally relocked the bootloader. The version of ROM was invalid apparently and wouldn't let me boot and now I'm stuck in fastboot mode.
My problem is as follows:
-can't enter recovery, stuck at fastboot no matter how many times I try and reboot
-adb not working since I didn't enable it
-bootloader locked (miflash says so and it can't unlock it since I didn't check 'oem unlock enable' and I cannot boot ROM so I can't enable it)
-fastboot flashing says 'not allowed in lock state'
-edl mode not available
I've seen tutorials where people opened their phones to force the phone into edl mode via the testing points but is that the only way`?
Any suggestions on how I could unbrick it?
Much appreciated
yes, it is the only way.
koniv90 said:
Hi guys,
Any suggestions on how I could unbrick it?
Much appreciated
Click to expand...
Click to collapse
you can use this tool to flash the phone on fastboot mode
Xiaomi King Tool - Home.
xiaomikingtool.com
its cost you only 5 credit
Can you flash files by fastboot? if so, flash the global rom images one by one, then reboot

			
				
I know this is a late reply, but I was in a similar situation with my phone and here is how I dealt with it: You need to access EDL mode, it doesn't require disassembling the device like the other user here suggested. Here is a thread you can find several variations of fixes here: https://forum.xda-developers.com/t/xiaomi-12-pro-completely-bricked-dead.4422997/
If anyone needs help with a locked bootloader bootlooped phone and doesn't know what to do I can help for a fee.
eclipsek20 said:
I know this is a late reply, but I was in a similar situation with my phone and here is how I dealt with it: You need to access EDL mode, it doesn't require disassembling the device like the other user here suggested. Here is a thread you can find several variations of fixes here: https://forum.xda-developers.com/t/xiaomi-12-pro-completely-bricked-dead.4422997/
If anyone needs help with a locked bootloader bootlooped phone and doesn't know what to do I can help for a fee.
Click to expand...
Click to collapse
I need help please my phone redmi k50 gaming is no recovery and . bootloader is locked
eclipsek20 said:
I know this is a late reply, but I was in a similar situation with my phone and here is how I dealt with it: You need to access EDL mode, it doesn't require disassembling the device like the other user here suggested. Here is a thread you can find several variations of fixes here: https://forum.xda-developers.com/t/xiaomi-12-pro-completely-bricked-dead.4422997/
If anyone needs help with a locked bootloader bootlooped phone and doesn't know what to do I can help for a fee.
Click to expand...
Click to collapse
Please I have pocophone f1 which says system has been destroyed I have downloaded the firmware xiaomi_poco_f1_V12.0.2.0.QEJRUXM_20200907.0000.00_Gobal_10_XFT (by xiaomistockrom.com) and Qualcom Driver V1.0 and MiFlash tool 20210226 and ADB drive R13 and MiFlash unlock tool en-3.5.1128.45 and platform tool r33.0.3-windows after installing all this drives the phone doesn't want to flash when I use MIFLASH TOOL to flash it say ERROR FLASH IS NOT ALLOWED IN LOCK STATE MODE. when I use windows powershell it says the same thing it looks like the bootloader is lock and I don't know the xiaomi e-mail, number and password on the phone pls help me
This what I'm facing
Dims_Camper said:
yes, it is the only way.
Click to expand...
Click to collapse
So even with a locked bootloader and disabled developer options, I can still flash stock rom in edl mode, regardless?
kskksks said:
So even with a locked bootloader and disabled developer options, I can still flash stock rom in edl mode, regardless?
Click to expand...
Click to collapse
Nope, only very old devices.
NOSS8 said:
Nope, only very old devices.
Click to expand...
Click to collapse
So that's why I get the error "operation not allowed for write" in QFIL... What do i do then? Is there a way to unlock bootloader in edl mode? I can't access recovery mode because of the bootloop... Only EDL mode
kskksks said:
So that's why I get the error "operation not allowed for write" in QFIL... What do i do then? Is there a way to unlock bootloader in edl mode? I can't access recovery mode because of the bootloop... Only EDL mode
Click to expand...
Click to collapse
Have you tried to flash stock rom?
I mean, if you have Chinese rom before, just flash with latest Chinese rom.
Ghanaba said:
Please I have pocophone f1 which says system has been destroyed I have downloaded the firmware xiaomi_poco_f1_V12.0.2.0.QEJRUXM_20200907.0000.00_Gobal_10_XFT (by xiaomistockrom.com) and Qualcom Driver V1.0 and MiFlash tool 20210226 and ADB drive R13 and MiFlash unlock tool en-3.5.1128.45 and platform tool r33.0.3-windows after installing all this drives the phone doesn't want to flash when I use MIFLASH TOOL to flash it say ERROR FLASH IS NOT ALLOWED IN LOCK STATE MODE. when I use windows powershell it says the same thing it looks like the bootloader is lock and I don't know the xiaomi e-mail, number and password on the phone pls help me
Click to expand...
Click to collapse
Try to flash the .img files of the fastboot rom, unzip the rom and find all the .img files and flash them with CMD from fastboot, one by one
jholfran3 said:
Try to flash the .img files of the fastboot rom, unzip the rom and find all the .img files and flash them with CMD from fastboot, one by one
Click to expand...
Click to collapse
Hello, My Poco X3 System destroyed itself while I was using it, it showed a glitch screen and turned off. Now I went to flash my mobile through Miflash but it showed the bootloader is locked and now I can't unlock it as the system itself is destroyed and can't do anything. So i wanted to know if i can flash my mobile with cmd as you said above flashing img files one by one or let me know if there is any method to flash my mobile or unlock the bootloader? Please me help bro
flashing is possible with modified firehose programmer (no auth factory loader) or with authorized xiaomi account. both solutions are paid service and cannot advertised here.
please -as always- read the thread you posted in. I can see useful information shared already. wait for other replies.
letsgofly said:
Hello, My Poco X3 System destroyed itself while I was using it, it showed a glitch screen and turned off. Now I went to flash my mobile through Miflash but it showed the bootloader is locked and now I can't unlock it as the system itself is destroyed and can't do anything. So i wanted to know if i can flash my mobile with cmd as you said above flashing img files one by one or let me know if there is any method to flash my mobile or unlock the bootloader? Please me help bro
Click to expand...
Click to collapse
Hi, try to flash the .img files from the fastboot stock rom whit cdm in fastboot, one by one, some files will give error but skip that, then reboot the phone as normal, it should work.
example:
fastboot flash boot boot.img
fastboot flash cust cust.img
etc.
jholfran3 said:
Hi, try to flash the .img files from the fastboot stock rom, one by one, some files will give error but skip that, then reboot the phone as normal, it should work.
Click to expand...
Click to collapse
If it were that simple, it would have been known for a long time.
You have already posted about this (post#14).
NOSS8 said:
If it were that simple, it would have been known for a long time.
You have already posted about this (post#14).
Click to expand...
Click to collapse
I had a Mi 9T and by mistake I installed a recovery that didn't correspond to it, the phone got bricked, and the only way to save it was like this, I searched and read everywhere but I couldn't find a solution, flashing the .img files was my idea, I didn't know if it would work but it did.
:V
jholfran3 said:
I had a Mi 9T and by mistake I installed a recovery that didn't correspond to it, the phone got bricked, and the only way to save it was like this, I searched and read everywhere but I couldn't find a solution, flashing the .img files was my idea, I didn't know if it would work but it did.
:V
Click to expand...
Click to collapse
To install a recovery, the bootloader must be unlocked.

Rooting Tecno LC8. or tecno power pro 2.

I recently got my hands on Tecno LC8 and am amazed by how good it is. Sadly its a bit hard to root BUT I have done necessary work for all of you.
### Instructions
1. Update to LC8-H6215ABCD-Q-GL-220402V350
2. connect to a laptop/pc with adb tools installed.
3. type in terminal adb reboot fastboot
4. When phone start in fastboot mode (It comes with a animation of usb cable with bluish glow)
5. Type in terminal
fastboot flash vbmeta_vendor vbmeta.img
fastboot flash vbmeta_system vbmeta.img
fastboot flash vbmeta vbmeta.img
fastboot flash boot boot.img
fastboot reboot
6. Install Magisk.apk from their release page https://github.com/topjohnwu/Magisk/releases/
7. Enjoy
Now time for cons
- This your whole system may or maynot be formatted. I invite for anyone to confirm it.
- SafetyNet works?????? Idk and can neither confirm it. again I invite for anyone to confirm it. This device is for very specific purpose
- TWRP? I can make it yes. But please just no I am providing with recovery image. If you wanna have a go at it go for it. It will be highly appreciated.
- You wanna go full AOSP on this device??
I already tried it. GSI project treble is comaptible with device "x64 ab partition img" But dual sim support is wonky. Flashlight won't work readily My advice is to extract the mediatek sim processor and replace it with GSI google sim processor and whole mediatek tree.
BUT if you have only one sim card go wild you can install GSI on nearly mediatek device with project treble support.
If you wanna install custom rom without TWRP.
Do this
[WARNING ROOT NEEDED]
fastboot delete-logical-partition product
fastboot flash system [your custom rom file location]
fastboot -w
fastboot reboot
Tecno LC8 support "x64ab partition" images.
Thanks YOU , About to follow your steps , I was direct here from https://www.hovatek.com/forum/thread-42975-post-232022.html#pid232022
Harfho said:
Thanks YOU , About to follow your steps , I was direct here from https://www.hovatek.com/forum/thread-42975-post-232022.html#pid232022
Click to expand...
Click to collapse
so the commad that works for me was
fastboot flash boot boot.img
fastboot flash boot.img does not work ,
error getting was
unknown partition 'boot.img'
fastboot: error: cannot determine image filename for 'boot.img'
Harfho said:
so the commad that works for me was
fastboot flash boot boot.img
fastboot flash boot.img does not work ,
error getting was
unknown partition 'boot.img'
fastboot: error: cannot determine image filename for 'boot.img'
Click to expand...
Click to collapse
Thanks for bringing it to my attention. command should be
fastboot flash boot boot.img
I will correct it asap
Carnalthot said:
Thanks for bringing it to my attention. command should be
fastboot flash boot boot.img
I will correct it asap
Click to expand...
Click to collapse
is there any way I can contact you I have more phone I needed to root, I just want you to explain HOWTO and what NOTO do
I have infinix S5Lite
infinix Hot 9
That I want to root also
Harfho said:
is there any way I can contact you I have more phone I needed to root, I just want you to explain HOWTO and what NOTO do
I have infinix S5Lite
infinix Hot 9
That I want to root also
Click to expand...
Click to collapse
I have no problem teaching you.
I do things thrifty. I preferrably use linux to root basically. BUT windows is also pretty good to root android you need platform tools and adb.
the sure fire way to root chinese phones is
1. Unlock bootloader
2. Open flashing privileges (FRP unlock, unlocking phones etc different company calls it differently)
3. Have an understanding of boot verifiers (vbmeta stands for verify boot metadata ) Nowadays phone verifies boot image by vbmeta_product vbmeta_vendor and vbmeta itself
You have to make all of them blank so nothing verifies your boot image on start up
I suggest downloading a firmware of your phone model to understand the partitions system of your phone model
4. Extract your boot image and vbmeta with mtkclient
5. Now patch your boot image. You can do it by hand or by magisk.
6. Flash every vbmeta with blank-vbmeta and boot with patched_boot
7. TWRP is optional DON'T do it if you have only one phone. Always have backup if you want to touch recovery partition
WHAT TO LOOK OUT FOR
1. update versions. Chinese Kernel update are very sensitive to version numbers. Don't flash v290 boot.img on v350 boot.img. It will brick instantanously.
2. Always learn how to flash your phone model. It saves a lot of headache.
3. Don't be afraid to ask for help.
4. Don't be afraid to throw your phone in anger. No no Seriously. To root a phone is to insist on ownership and if phone denies that it is totally reasonable to obliterate the said phone. I actually mean the last advice.
So can i use the
Carnalthot said:
I have no problem teaching you.
I do things thrifty. I preferrably use linux to root basically. BUT windows is also pretty good to root android you need platform tools and adb.
the sure fire way to root chinese phones is
1. Unlock bootloader
2. Open flashing privileges (FRP unlock, unlocking phones etc different company calls it differently)
3. Have an understanding of boot verifiers (vbmeta stands for verify boot metadata ) Nowadays phone verifies boot image by vbmeta_product vbmeta_vendor and vbmeta itself
You have to make all of them blank so nothing verifies your boot image on start up
I suggest downloading a firmware of your phone model to understand the partitions system of your phone model
4. Extract your boot image and vbmeta with mtkclient
5. Now patch your boot image. You can do it by hand or by magisk.
6. Flash every vbmeta with blank-vbmeta and boot with patched_boot
7. TWRP is optional DON'T do it if you have only one phone. Always have backup if you want to touch recovery partition
WHAT TO LOOK OUT FOR
1. update versions. Chinese Kernel update are very sensitive to version numbers. Don't flash v290 boot.img on v350 boot.img. It will brick instantanously.
2. Always learn how to flash your phone model. It saves a lot of headache.
3. Don't be afraid to ask for help.
4. Don't be afraid to throw your phone in anger. No no Seriously. To root a phone is to insist on ownership and if phone denies that it is totally reasonable to obliterate the said phone. I actually mean the last advice.
Click to expand...
Click to collapse
So i can use this vbmeta for other china phones ,
The hard things is getting boot.img
I’m on limited plan , to download heavy files just to get boot.img out of it is a concern for me.
Harfho said:
So can i use the
So i can use this vbmeta for other china phones ,
The hard things is getting boot.img
I’m on limited plan , to download heavy files just to get boot.img out of it is a concern for me.
Click to expand...
Click to collapse
Hmm you need to get boot.img from your own phone by using mtkclient application. Downloading firmware is to understand about the partition system of your phone. ALWAYS use your own phone boot.img
Carnalthot said:
Hmm you need to get boot.img from your own phone by using mtkclient application. Downloading firmware is to understand about the partition system of your phone. ALWAYS use your own phone boot.img
Click to expand...
Click to collapse
So i can use this vbmeta for other china phones?
and am stock on this on mtkclient
Power off the phone before connecting.
For brom mode, press and hold vol up, vol dwn, or all hw buttons and connect usb.
For preloader mode, don't press any hw button and connect usb.
If it is already connected and on, hold power for 10 seconds to reset.
Harfho said:
So i can use this vbmeta for other china phones?
and am stock on this on mtkclient
Power off the phone before connecting.
For brom mode, press and hold vol up, vol dwn, or all hw buttons and connect usb.
For preloader mode, don't press any hw button and connect usb.
If it is already connected and on, hold power for 10 seconds to reset.
Click to expand...
Click to collapse
Yes you can use vbmeta for other china phone it's blank vbmeta.
And you are right on money for Brom mode. Preloader mode is hit and trial method for Chinese phones
Carnalthot said:
Yes you can use vbmeta for other china phone it's blank vbmeta.
And you are right on money for Brom mode. Preloader mode is hit and trial method for Chinese phones
Click to expand...
Click to collapse
Sorry I don’t get this
“And you are right on money for Brom Mode.”
Harfho said:
Sorry I don’t get this
“And you are right on money for Brom Mode.”
Click to expand...
Click to collapse
To access Brom mode you need to either remove battery/power off phone then while holding volume up/down button connect the usb cable with pc. PC should be listening for any Brom connections when you connect the phone.
Carnalthot said:
To access Brom mode you need to either remove battery/power off phone then while holding volume up/down button connect the usb cable with pc. PC should be listening for any Brom connections when you connect the phone.
Click to expand...
Click to collapse
I Did that to no avail
Harfho said:
I Did that to no avail
Click to expand...
Click to collapse
Did you do frp unlock?
No, i have not
Do a frp unlock without it you cannot flash.
Actually to root your phone you don't need Brom mode
Carnalthot said:
Do a frp unlock without it you cannot flash.
Actually to root your phone you don't need Brom mode
Click to expand...
Click to collapse
Yes, wanted to get the boot.img of the phone first and patched it , so i can run all the commands at once.
oR without unlock bootloader I can’t get the boot.img with mtkclient?
Harfho said:
Yes, wanted to get the boot.img of the phone first and patched it , so i can run all the commands at once.
oR without unlock bootloader I can’t get the boot.img with mtkclient?
Click to expand...
Click to collapse
To get boot.img you need frp unlock.
Carnalthot said:
To get boot.img you need frp unlock.
Click to expand...
Click to collapse
Ok thanks, I will do that.
frp unlock also mean bootloader unlock?
Harfho said:
Ok thanks, I will do that.
frp unlock also mean bootloader unlock?
Click to expand...
Click to collapse
Nope

Categories

Resources