[GUIDE][MTK] How to bypass detection for UNLOCKED BOOTLOADER ? - Redmi Note 9 Guides, News, & Discussion

WARNINGS:
First of all you should BACKUP IMEI.
Remember to NEVER touch the NVRAM.
People who does NOT backup imei or touches the NVRAM, are susceptible to the loss of IMEI.
If you try to share NVDATA between different devices, it may cause bootloop due verification of IMEI (slot1).
If you already lost IMEI, you probably may need to write IMEI again.
Works with:
Xiaomi Redmi Note 9 and ALL other MediaTek devices which uses SECCFG for unlocking/locking bootloader.
How does it work ?
After you turn on the device, the booting procedures checks if the device is unlocked and if there is any modified partition.
If your device is locked and any partition is modified, the device will not boot.
If your device is unlocked, the device will boot perfectly.
On booting, the device verifies if the device is unlocked or not, inside the partition: SECCFG.
After booting procedures, the partition SECCFG can NOT be read.
Due this, some variable settings are written to the partition NVDATA, because the system can read the partition NVDATA.
These variable settings contain details about locked/unlocked bootlader as many other details about the developer settings and some sensitive data like IMEI, Wifi MAC and Bluetooth MAC.
So, we just need to mix an unlocked SECCFG together a locked NVDATA.
How to do ? (Without formatting data)
1. Be sure to have UNLOCKED BOOTLOADER.
2. Backup the partition: SECCFG.
3. Format the partition: SECCFG. (Begin Address: 0x17800000 Format Length: 0x800000)
4. Format the partition NVDATA. (Begin Address: 0xc4a2000 Format Length: : 0x4000000)
5. Boot the device. It will write a new NVDATA.
6. Turn off the device.
7. Flash the partition SECCFG (with UNLOCKED BOOTLOADER).
Done !
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
How to do ? (Formatting data)
1. Be sure to have UNLOCKED BOOTLOADER.
2. Backup the partition: SECCFG.
3. Backup your files and data, if you want.
4. Now, RE-LOCK BOOTLOADER. Or just erase the partition: SECCFG.
5. Format user data. It will erase NVDATA too.
6. Boot the device once, you don't need to accept terms or enter in system. It will write a new NVDATA.
7. Turn off the device.
8. Flash the partition SECCFG (with UNLOCKED BOOTLOADER).
Done !
Useful links:
VD Infos: Capture device infos and details with an ULTRA root/magisk/riru/xposed DETECTOR
https://forum.xda-developers.com/t/app-v1-10-vd-infos-package-com-vitaodoidao-vdinfos.4097379/
Scatter file for flashing using flash tool to MERLIN
https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4223097/
What should I backup before trying to customize my MERLIN device
https://forum.xda-developers.com/t/...lin-device-redmi-note-9-redmi-10x-4g.4229629/
How to restore the state of UNLOCKED BOOTLOADER in MERLIN
https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4220013/
How to properly solve the errors of the SP FLASH TOOL for MERLIN
https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4238161/
Read Back file for backuping using flash tool from MERLIN
https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4223109/
DA files for flashing to MERLIN using FLASH TOOL
https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4209765/
How to properly use the SP FLASH TOOL for MERLIN
https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4229937/
Credits:​VD171​

Thank you for your contribution, I am a newbie in the subject of smartphones but I would like to know if with these modifications of your tutorial the momo application still detects the bootloader unlocked?
momo-v4.0.1.apk
drive.google.com

enzokart19 said:
Thank you for your contribution, I am a newbie in the subject of smartphones but I would like to know if with these modifications of your tutorial the momo application still detects the bootloader unlocked?
momo-v4.0.1.apk
drive.google.com
Click to expand...
Click to collapse
Since momo is closed source, you should not care for its results.
Momo uses many and many detections by native methods and they are hidden to anyone.
So, no one banking app can use momo detections.
But, the answer is: NO, momo can NOT detect unlocked bootloader using my method. And no other app or any other method can detect unlocked bootloader using my method.
Enjoy
Ps: Momo is already on version 4.3.1:
Magisk alpha
如果 「代码注入」 仍有假阳性情况,请入群反馈,感谢。
t.me

VD171 said:
Since momo is closed source, you should not care for its results.
Momo uses many and many detections by native methods and they are hidden to anyone.
So, no one banking app can use momo detections.
But, the answer is: NO, momo can NOT detect unlocked bootloader using my method. And no other app or any other method can detect unlocked bootloader using my method.
Enjoy
Ps: Momo is already on version 4.3.1:
Magisk alpha
如果 「代码注入」 仍有假阳性情况,请入群反馈,感谢。
t.me
Click to expand...
Click to collapse
Excellent thank you very much. Do you know if there is any way to do the same on snapdragon devices?

enzokart19 said:
Excellent thank you very much. Do you know if there is any way to do the same on snapdragon devices?
Click to expand...
Click to collapse
I have no ideia, I'm sorry.

All ok

Does safetynet hardware attestation work with this method??

0xf331dead said:
Does safetynet hardware attestation work with this method??
Click to expand...
Click to collapse
No

Flashing Magisk, enabling Zygisk and installing Universal SafetyNet Fix also hides unlocked bootloader.

hi i apolodize. is there a way to unlock the bootloader without using a mi account ?
because i use only my redmi with wifi and dont have a sim card to do it (and dont want to leave my infos on a chineese site)
ty

alcadon said:
hi i apolodize. is there a way to unlock the bootloader without using a mi account ?
because i use only my redmi with wifi and dont have a sim card to do it (and dont want to leave my infos on a chineese site)
ty
Click to expand...
Click to collapse
Try mtkclient:
GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool
MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.
github.com

ty btw i forget to precise im under w7 64...

Windows 7 does not support python 3.9, but I think that 3.8 will also work. If not, you can use ReLiveDVD v4.

Deleted

hi do u think mediatek bootloader unlock works with python 3.8 ?
i put the 2 dll it asked but got an 0xc000007b error....

will try re live dvd ty

btw do u know what is this menu in chineese access by usb and vol+ ?

alcadon said:
hi do u think mediatek bootloader unlock works with python 3.8 ?
i put the 2 dll it asked but got an 0xc000007b error....
Click to expand...
Click to collapse
I do not know what did you mean. I only think that it should work, but not tested. It may work or not.
alcadon said:
will try re live dvd ty
Click to expand...
Click to collapse
It's the best solution.
alcadon said:
btw do u know what is this menu in chineese access by usb and vol+ ?
Click to expand...
Click to collapse
I don't know which menu you are describing, but on some Xiaomi devices there is a menu that allows you to reboot to bootloader, recovery, fastbootd etc and do some tests. I think it is part of MIUI Recovery. On some phones it is in Chinese by default (mostly those bought in China, but also some bought outside China), but you can change the language to English by pressing the 中文 button.

well i get my wife sim card so i did the normal way... must wait 168 hours... willNEVER buy one of thopse ****S again

Related

BlackView BV9600 Pro + LineageOS?

Hi! Could you please explain if this ROM will be compatible with my smartphone? I'm not sure, I don't found it on the list on LineageOS website.
Well, someone need to compile it for our bv9600 - i also would appreciate it, but i don't have thoose skills...
Also, lenovo vibe c2
i am not even not able to root my device (blackview bv9600 pro) i don't think that you will be able to have any lineage rom also...
have anyone success to root this device?
giannhs_n said:
i am not even not able to root my device (blackview bv9600 pro) i don't think that you will be able to have any lineage rom also...
have anyone success to root this device?
Click to expand...
Click to collapse
jup, runs root - magisk
AMDFenics said:
jup, runs root - magisk
Click to expand...
Click to collapse
can you explain how did you get root? or give me a guide, all the internet guides i tried failed!
thanks
giannhs_n said:
can you explain how did you get root? or give me a guide, all the internet guides i tried failed!
thanks
Click to expand...
Click to collapse
simply follow this guide -> LINK
- allow OEM unlock in the dev-settings (hit 5 times build number to see)
- allow usb debugging
- reboot to fastboot
- send "fastboot devices" command
- send "fastboot oem unlock" -> acknowledge
- send "fastboot flashing unlock" -> acknowledge
- flash the twrp image "fastboot flash recovery name_of_the_image.img"
- reboot into twrp by power of the device
- after that press vol+ up and power button (if i remember correct.. ) to get into twrp
- now u need a sd-card (micro) put no verity opt encrypt on it and magisk
- Backup all partitions u find.
- format data partition to get the size
- install magisk
- install no verity opt...
reboot
BV9600 should be rooted. Took me serveral times to get it working, because u need directly after "Flashing unlock command" to get the twrp stuff done.
Credits
The TWRP.img comes from www.unofficialtwrp.com
The encryption disabler comes from @Zackptg5 all credits to him. THANKS -> his site LINK
Enjoy
AMDFenics said:
simply follow this guide -> LINK
- allow OEM unlock in the dev-settings (hit 5 times build number to see)
- allow usb debugging
- reboot to fastboot
- send "fastboot devices" command
- send "fastboot oem unlock" -> acknowledge
- send "fastboot flashing unlock" -> acknowledge
- flash the twrp image "fastboot flash recovery name_of_the_image.img"
- reboot into twrp by power of the device
- after that press vol+ up and power button (if i remember correct.. ) to get into twrp
- now u need a sd-card (micro) put no verity opt encrypt on it and magisk
- Backup all partitions u find.
- format data partition to get the size
- install magisk
- install no verity opt...
reboot
BV9600 should be rooted. Took me serveral times to get it working, because u need directly after "Flashing unlock command" to get the twrp stuff done.
Credits
The TWRP.img comes from www.unofficialtwrp.com
The encryption disabler comes from @Zackptg5 all credits to him. THANKS -> his site LINK
Enjoy
Click to expand...
Click to collapse
thanks for the detailed information,
can you also tell me your frimewire version also because i am not available to boot on recovery!
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
giannhs_n said:
thanks for the detailed information,
can you also tell me your frimewire version also because i am not available to boot on recovery!
View attachment 4705498
Click to expand...
Click to collapse
exact same version.
---------- Post added at 10:29 PM ---------- Previous post was at 10:27 PM ----------
First u need to go to fastboot mode, to unlock "OEM UNLOCK"
This is easy via adb
-> reboot fastboot
Did u install the correct driver? (ADB driver) is ur device listed?
i tried repacking it myself but with no luck so far, also tried various treble GSI, all booting on my BV9600Pro and basically working but mobile data and phone are broken so that's not an option for now
I don’t understand why unblock the bootloader at all if everything is installed on the MTK platform using the SP Flash Tool !?
Why these dances with adb and fastboot? if a everything is done much easier ...
You do not install the factory software using adb ? not ?? so why can't TWRP be installed and installed using the SP Flash Tool!? Why complicate things?
Root with sp Flash tool
Hi please Anyone could explain this procedure with Sp Flash Tool and post it?
serg2327 said:
I don’t understand why unblock the bootloader at all if everything is installed on the MTK platform using the SP Flash Tool !?
Why these dances with adb and fastboot? if a everything is done much easier ...
You do not install the factory software using adb ? not ?? so why can't TWRP be installed and installed using the SP Flash Tool!? Why complicate things?
Click to expand...
Click to collapse
Because the vendor (Blackview) locks the bootloader (like any other brand does) and does not allow installing any other recovery without it.!?
AMDFenics said:
Because the vendor (Blackview) locks the bootloader (like any other brand does) and does not allow installing any other recovery without it.!?
Click to expand...
Click to collapse
Is this a statement or a question? Sorry, I do not know English and I use a translator ..
II repeat once again, in order to install TWRP you do not need to unlock the bootloader!
it installs without problems using the SP Flash Tool
and this is not an assumption but a statement!
My first copy of the smartphone received TWRP. It was on my copy that all the first tests of TWRP and ROOT were conducted.
serg2327 said:
Is this a statement or a question? Sorry, I do not know English and I use a translator ..
II repeat once again, in order to install TWRP you do not need to unlock the bootloader!
it installs without problems using the SP Flash Tool
and this is not an assumption but a statement!
My first copy of the smartphone received TWRP. It was on my copy that all the first tests of TWRP and ROOT were conducted.
Click to expand...
Click to collapse
I'm glad to hear that it works that way to you. But that doesn't worked for me. So i wrote the way i took, to root. Let the others choose, wich way works for them. :fingers-crossed::good:
I am using another MTK device and SP FlashTool is great it lets you recover from any software brick. So I will advice people to use this method.
I am planning on buying bv9600 pro and having twrp ported and root is a good start to custom roms.
The touch driver issue on twrp should be easily solved with the good kernel module for the twrp. And official twrp support would be nice.
Subscribed to the thread will see where it goes.
hi guys, can you share a clean system twrp backup of bv9600? because my USB is damaged and i can not use sp flash tool to clean restore. thanks!
Hi, i try to root my bv9600 pro, but all i end up is on reboot the system restores to factory no TWRP or anything on it. I connected it to MTKdroidtools and it complains about a file /system/recovery-from-boot.p which restores recovery and obviously after it the system too.
Thanks for any help
edit: LOL nevermind, working fine now, don't know what was going wrong, in a last try just downloaded the latest stable magisk again. Thanks AMDFenics for the howto
Just one thing, can i get rid of this 5 sec. warning that the mobile is unlocked?
dark-wulf said:
Hi, i try to root my bv9600 pro, but all i end up is on reboot the system restores to factory no TWRP or anything on it. I connected it to MTKdroidtools and it complains about a file /system/recovery-from-boot.p which restores recovery and obviously after it the system too.
Thanks for any help
edit: LOL nevermind, working fine now, don't know what was going wrong, in a last try just downloaded the latest stable magisk again. Thanks AMDFenics for the howto
Just one thing, can i get rid of this 5 sec. warning that the mobile is unlocked?
Click to expand...
Click to collapse
Maybe there is a way, but i don't know him. It is a common way for many manufacturer, to say, "here u did something you are not supposed too"
https://www.mediafire.com/file/0j0bx6cb0cb58f5/BV9600Pro_30042019_full.zip/file
Latest Firmware (04.2019) Clean SP Flash tool Backup

[GUIDE][UNLOCK] How to restore the state of UNLOCKED BOOTLOADER in MERLIN (Xiaomi Redmi Note 9 / Xiaomi Redmi 10X 4G)

It works with:
- Xiaomi Redmi Note 9
- Xiaomi Redmi 10X 4G
- Probably some others Xiaomi devices
How to backup:
Step 1:
Unlock your bootloader.
Step 2:
Backup partition: seccfg
You can backup it using the SP FLASH TOOL, TWRP or copy it with DD, you can do what you prefer.
Keep it in your files for later use.
How to restore:
To restore your UNLOCKED BOOTLOADER, you need to restore seccfg partition of the backup in step 2.
You can flash it using the SP FLASH TOOL: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4229937/
SECCFG:
Code:
linear_start_addr: 0x17800000
partition_size: 0x800000
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
(If you try to restore your seccfg partition between different devices, it will not work.)
Good luck.
Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/
Hi i backed up the seccfg while my bl unlocked but i can't flash it can you help me ? my bl is locked right now
Sirpak said:
Hi i backed up the seccfg while my bl unlocked but i can't flash it can you help me ? my bl is locked right now
Click to expand...
Click to collapse
You can flash it easily using spflashtool or twrp.
Can you tell me how to do it it is .bin file and i don't know how to flash with sp flash tool and i don't have twrp too
Can you do a tutorial ?
Sirpak said:
Can you tell me how to do it it is .bin file and i don't know how to flash with sp flash tool and i don't have twrp too
Click to expand...
Click to collapse
[GUIDE] How to properly use the SP FLASH TOOL for MERLIN ? (Redmi Note 9 / Redmi 10X 4G)
Warnings: - If you try to flash in "firmware upgrade" mode, bootloader will be LOCKED again ! - NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI and MAC. - Keep your...
forum.xda-developers.com
[GUIDE] How To bypass authentication and flash in EDL with NO auth for FREE
Thanks to: chaosmaster / k4y0z: GitHub / XDA xyzz / xyz`: GitHub / XDA Dinolek: GitHub / XDA How to install: 1. Download the attached file: VD171_MTK-bypass.zip. 2. Extract the file and open the folder. 3. Run and install python...
forum.xda-developers.com
Sirpak said:
Can you do a tutorial ?
Click to expand...
Click to collapse
I suggest you to watch some videos, the flashing using spflashtool is same to any device.
Still i can't do it i watched a few videos but videos not fixed my problem my bl is locked is it a problem for this operation
Sirpak said:
Still i can't do it i watched i few videos but videos not fixed my problem my bl is locked is it a problem for this operation
Click to expand...
Click to collapse
Locked bootloader is not a problem for flashing using spflashtool.
You can write some partitions even with locked bootloader, like preloader and seccfg.
Try to attach your screenshots, please.
İ'm trying to use download tab for flash seccfg while i just use seccfg it says please select at least one rom before execution. when i try with boot.img it says error status preloader invalid
Sirpak said:
İ'm trying to use download tab for flash seccfg while i just use seccfg it says please select at least one rom before execution. when i try with boot.img it says error status preloader invalid
Click to expand...
Click to collapse
Please, attach the screenshot.
this is with boot
Something is wrong right ? or anything i did is wrong
Sirpak said:
this is with boot
Click to expand...
Click to collapse
Try this:
#1. Dowload and extract the preloader-V12.0.4.0 -> https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4218929/
#2. Enter in fastboot.
#3. Flash the preloader-V12.0.4.0:
Code:
fastboot flash preloader preloader-V12.0.4.0.bin
#4. Turn off the device.
#5. Go to SPFLASHTOOL and Flash what you want to flash. Remeber to plug the usb cable only and DON'T press any key. If you keep keys untouched the preloader-V12.0.4.0 will flash in download mode, so you don't need to bypass the edl mode.
Done.
I'm in 12.0.3 india rom isn't this going to be a problem ?
Sirpak said:
I'm in 12.0.3 india rom isn't this going to be a problem ?
Click to expand...
Click to collapse
So, you don't need to flash the preloader.
Did you flash the unlocked seccfg?
Did you try using the stock scatter file?
I tried to flash seccfg via fastboot but got an error.
I didn't tried the stock scatter file
I tried to flash seccfg via sp flash tool and got an error too i don't know what to do
I can't see the seccfg in the sp flash tool is this right ?
Sirpak said:
I can't see the seccfg in the sp flash tool is this right ?
Click to expand...
Click to collapse
Edit the stock scatter file.
Search for "preloader_merlin.bin" section and change from "is_download: false" to "is_download: true".

[GUIDE] How to properly use the SP FLASH TOOL for MERLIN ? (Redmi Note 9 / Redmi 10X 4G)

Warnings:
- If you try to flash in "firmware upgrade" mode, bootloader will be LOCKED again !
- NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI and MAC.
- Keep your backup files safe and secure ! If you can, encrypt them.
- Never try to share your backups or your security and privacy will be compromised.
- USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.
Downloads:
- SP Flash Tool (Windows): https://spflashtools.com/category/windows
- SP Flash Tool (Linux): https://spflashtools.com/category/linux
- Download-Agent (DA) file: https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4209765/
- Scatter file: https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4223097/
- (Optional) ReadBack file: https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4223109/
Alternative Downloads:
If you are having problems for flashing on Windows with sp flash tool, give a try on these versions:
- SP Flash Tool v5.2020 https://spflashtools.com/windows/sp-flash-tool-v5-2020
- SP Flash Tool v5.1920 https://spflashtools.com/windows/sp-flash-tool-v5-1920
- SP Flash Tool v5.1916 https://spflashtools.com/windows/sp-flash-tool-v5-1916
1. Extract (or install) SP Flash Tool.
2. Extract Download-Agent (DA) file to the SP Flash Tool home folder.
3. Copy the Scatter file to the SP Flash Tool home folder.
4. If you've downloaded the ReadBack file and want to make backup of your device, copy the ReadBack file to the SP Flash Tool home folder. If not, skip this.
5. Run SP Flash Tool.
6. Select Download tab.
7. Click Choose button for finding the Download-Agent and select the Download-Agent (DA) file.
8. Click Choose button for finding the Scatter-loading and select the Scatter file.
9. Click Options in the menu bar. And then select Option.
10. In General tab, UNCHECK "LIB DA match" and UNCHECK "Storage Lite Cycle".
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Done !
Now you are ready for to flash, to format or to readback whatever you want.
How to properly solve the errors of the SP FLASH TOOL ?
If you are facing any error or any problem using the SPFlashTool, try this guide: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4238161/
Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/
whats the difference between sp flash tool and xiaomi flash tool?
dokja28 said:
whats the difference between sp flash tool and xiaomi flash tool?
Click to expand...
Click to collapse
MiFlash uses fastboot writing.
SP Flash Tool uses eMMC writing.
Oh so if i want to flash older miui version for example I'm on global 12.0.6 and i want to flash 12.0.3 global what would i use so that my bootloader cant be lock
dokja28 said:
Oh so if i want to flash older miui version for example I'm on global 12.0.6 and i want to flash 12.0.3 global what would i use so that my bootloader cant be lock
Click to expand...
Click to collapse
Try using sp flash tool.
But if you are on V12.0.5.0 or higher, you need to bypass authorization and flash in EDL mode: https://forum.xda-developers.com/t/...d-flash-in-edl-with-no-auth-for-free.4229683/
dokja28 said:
whats the difference between sp flash tool and xiaomi flash tool?
Click to expand...
Click to collapse
Xiaomi flash tool is an official tool specifically only for Xiaomi devices, it can flash in fastboot mode and download mode both.
Sp flash is an unofficial tool which works for almost every device with Mediatek chipset, and it can flash only in download mode.
help this is what happening after i inserted the device
definitelynotgeddd said:
help this is what happening after i inserted the device
Click to expand...
Click to collapse
You are using wrong DA file.
See "Download-Agent (DA) file" in "Downloads".
@VD171
Probably an unusual question:
I hate android 10/11, they simply abuse of "security" bs and prevents us of doing what we want with our phones.
Is it possible to get rid of dynamic partitions and install some android 9 (Pie) from old days of freedom?
Jazzda said:
@VD171
Probably an unusual question:
I hate android 10/11, they simply abuse of "security" bs and prevents us of doing what we want with our phones.
Is it possible to get rid of dynamic partitions and install some android 9 (Pie) from old days of freedom?
Click to expand...
Click to collapse
Do you mean some rom like GSI ?
I have no ideia, my friend.
But, android 9, 10, 11 and 12 are totally compatible.
So, I think yes, you can.
VD171 said:
Do you mean some rom like GSI ?
I have no ideia, my friend.
But, android 9, 10, 11 and 12 are totally compatible.
So, I think yes, you can.
Click to expand...
Click to collapse
Yes, I mean GSI, but without the super partition, where every partition goes to root (boot, system, vendor, userdata, etc)
Jazzda said:
Yes, I mean GSI, but without the super partition, where every partition goes to root (boot, system, vendor, userdata, etc)
Click to expand...
Click to collapse
Just try and then tell us the result.
help me redmi note 9 hard brick 3 months. can't access fastboot, help me redmi note 9 hard brick 3 months. can't access fastboot, not edl, and can't enter recovery, my redmi note 9 restarted 2x. the last solution was to use sp flash and as a result there was a notification like ininot edl, and couldn't enter recovery, I restarted my redmi note 9 twice. the last solution is to use sp flash and as a result there is a notification like this
Ray Gaming said:
help me redmi note 9 hard brick 3 months. can't access fastboot, help me redmi note 9 hard brick 3 months. can't access fastboot, not edl, and can't enter recovery, my redmi note 9 restarted 2x. the last solution was to use sp flash and as a result there was a notification like ininot edl, and couldn't enter recovery, I restarted my redmi note 9 twice. the last solution is to use sp flash and as a result there is a notification like this
Click to expand...
Click to collapse
Try to flash other MIUI versions in firmware upgrade mode.
Good luck
VD171 said:
thank you for helping me, and my device has come back to life. so long. and I downloaded a lot of firmware and I'm using this firmware QJOMIXM_20200512.0000.00_10.0_global_53a4483cec.tgz. and the bootloader status becomes locked again. I didn't back it up. I'm looking for UBL instances let me know friends
Click to expand...
Click to collapse
Ray Gaming said:
thank you for helping me, and my device has come back to life. so long. and I downloaded a lot of firmware and I'm using this firmware QJOMIXM_20200512.0000.00_10.0_global_53a4483cec.tgz. and the bootloader status becomes locked again. I didn't back it up. I'm looking for UBL instances let me know friends
Click to expand...
Click to collapse
Good work, my friend.
I suggest you to unlock bootloader once you can and then, backup it following my guide:
[GUIDE][UNLOCK] How to restore the state of UNLOCKED BOOTLOADER in MERLIN (Xiaomi Redmi Note 9 / Xiaomi Redmi 10X 4G)
It works with: - Xiaomi Redmi Note 9 - Xiaomi Redmi 10X 4G - Probably some others Xiaomi devices How to backup: Step 1: Unlock your bootloader. Step 2: Backup partition: seccfg You can backup it using the SP FLASH TOOL, TWRP or copy it with...
forum.xda-developers.com
How can restore unlock boot status after backup seccfg?
MA7MOD_GSM said:
How can restore unlock boot status after backup seccfg?
Click to expand...
Click to collapse
Just follow the guide and select the seccfg partition to download only.
VD171 said:
Just follow the guide and select the seccfg partition to download only.
Click to expand...
Click to collapse
so I'm flashing the romglobal v11.0.9 then I flashed the md1img from rom_eng but waht I do is replace the one on the global rom nd the flash it because if I load the entire rom_eng it says that I have to flash erase all but I can't still use maui meta
So can i
VD171 said:
MiFlash uses fastboot writing.
SP Flash Tool uses eMMC writing.
Click to expand...
Click to collapse
So can I use miflash to flash my Merlin and will i need to pass any authorisationnif i want to downgrade from 12.5.5 to 11.0.2?

[GUIDE] How to remove and clear GOOGLE ACC and Mi ACC / MiCloud for MERLIN (Redmi Note 9 / Redmi 10X 4G)

WARNINGS:​
NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.​
Works with:
- Xiaomi Redmi Note 9
- Xiaomi Redmi 10X 4G
Downloads:
SP Flash Tool (Windows): https://spflashtools.com/category/windows
SP Flash Tool (Linux): https://spflashtools.com/category/linux
Scatter file: https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4223097/
Download-Agent (DA) file: https://forum.xda-developers.com/t/...omi-redmi-note-9-xiaomi-redmi-10x-4g.4209765/
Method #1:
This method requires the download of the original stock rom firmware.
This method will ERASE userdata.
This method will LOCK bootloader again.
1. Download and extract the ORIGINAL STOCK ROM FIRMWARE.
2. Download and install SP Flash Tool.
3. Run SP Flash Tool and configure it properly, following this guide: https://forum.xda-developers.com/t/...for-merlin-redmi-10x-4g-redmi-note-9.4229939/
4. Select "Download" tab.
5. Click "Choose" button for finding the Scatter-loading. Go to the folder images, inside the extracted rom and select the file: MT6768_Android_Scatter.txt.
6. Open the download mode selection list and change from "Download Only" to "Firmware upgrade".
7. Press "Start".
8. Plug powered off phone to usb.
9. Wait until it finish.
Done.
Method #2:
1. Download and install SP Flash Tool.
2. Run SP Flash Tool and configure it properly, following this guide: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4229937/
3. Select "Format" tab.
4. Select "Manual Format Flash".
5. Type the ADDRESS of the partition to "Begin Address".
5. Type the LENGTH of the partition to "Format Length".
6. Press "Start".
7. Plug powered off phone to usb.
8. Wait until it finish.
Done.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Partitions you need to format:
Partition: persist​Size: 49.152 KiB (48 MiB)​Block: /dev/block/mmcblk0p13​Start address: 0x104a2000​Length: 0x3000000​
Partition: frp​Size: 1.024 KiB (1 MiB)​Block: /dev/block/mmcblk0p5​Start address: 0x5508000​Length: 0x100000​
Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/
Hello. I understand but I am noob and want to make sure I dont commit mistakes. I will use method 2. have miui 12.0.6, global phone Redmi Note 9 -Checked-. I downloaded scatter file "MERLIN--MT6768_Android_scatter--full--VD171.txt", download agent "DA_VD171--3.3001.2020-07-02020-07-14.bin", and put them on sp flash tool. did UNCHECK "LIB DA match" and UNCHECK "Storage Lite Cycle". Can I proceed to format persist and frp partitions following your steps or I need to flash something before? Am I missing something? It seems easy and a very unknown method. If I do it all carefully, are they serious risks of bricking phone? is it prudent to backup using readback first? Why do most "technicians" use server methods to unlock xiaomi account? Really thanks, I was looking for a solution months ago. My device is not blocked but I lost my sim -not at my name- and didnt have a email associated so this seems to be my unique option. Thanks, thanks, thanks!!
l0ggerbrk said:
Hello. I understand but I am noob and want to make sure I dont commit mistakes. I will use method 2. have miui 12.0.6, global phone Redmi Note 9 -Checked-. I downloaded scatter file "MERLIN--MT6768_Android_scatter--full--VD171.txt", download agent "DA_VD171--3.3001.2020-07-02020-07-14.bin", and put them on sp flash tool. did UNCHECK "LIB DA match" and UNCHECK "Storage Lite Cycle". Can I proceed to format persist and frp partitions following your steps or I need to flash something before? Am I missing something? It seems easy and a very unknown method. If I do it all carefully, are they serious risks of bricking phone? is it prudent to backup using readback first? Why do most "technicians" use server methods to unlock xiaomi account? Really thanks, I was looking for a solution months ago. My device is not blocked but I lost my sim -not at my name- and didnt have a email associated so this seems to be my unique option. Thanks, thanks, thanks!!
Click to expand...
Click to collapse
If you are unsure, just backup them using the readback first.
But, you do NOT need to flash anything before of the format.
Do I need to unlock bootloader in order to unlock mi account using method 2?
VD171 said:
If you are unsure, just backup them using the readback first.
But, you do NOT need to flash anything before of the format.
Click to expand...
Click to collapse
l0ggerbrk said:
Do I need to unlock bootloader in order to unlock mi account using method 2?
Click to expand...
Click to collapse
No
l0ggerbrk said:
Do I need to unlock bootloader in order to unlock mi account using method 2?
Click to expand...
Click to collapse
No, you do not need unlocked bootloader for that
VD171 said:
No, you do not need unlocked bootloader for that
Click to expand...
Click to collapse
hi
well sounds dumb..but my device is locked and you wrote device has to be shut off..but i cant shut it it off..if i hold power..it just restarts..if i hold power and vol down it also just turns off for a second starts again....any solution?
dante2903 said:
hi
well sounds dumb..but my device is locked and you wrote device has to be shut off..but i cant shut it it off..if i hold power..it just restarts..if i hold power and vol down it also just turns off for a second starts again....any solution?
Click to expand...
Click to collapse
Your device will be detected between one reboot and the next reboot, even if the device got in bootloop.
does this work on other xiaomi phones ?
newrandomaccountbruh said:
does this work on other xiaomi phones ?
Click to expand...
Click to collapse
Probably, yes.
VD171 said:
Probably, yes.
Click to expand...
Click to collapse
i need to unlock my device redmi note 10 pro max as i lost my sim card and get mutiple time rejected when trying to reset it via mi cloud support page. it tells to retry from internet and device u use often
do i need special scatter ?
thanks
muxans said:
i need to unlock my device redmi note 10 pro max as i lost my sim card and get mutiple time rejected when trying to reset it via mi cloud support page. it tells to retry from internet and device u use often
do i need special scatter ?
thanks
Click to expand...
Click to collapse
I have no ideia about how to do that, my friend.
This thread is specific for redmi note 9 (MERLIN).
@VD171
Hey man, sorry for bothering you, can I use method 1 for xiaomi mi 8 / mi 8 pro with snapdragon cpu ?
I have a problem with locked Mi account, don't have a sim card associated with the account, and my bootloader is unfortunately locked ..
Please, can you help me ? I'm desperate.
KTBFFH1905 said:
@VD171
Hey man, sorry for bothering you, can I use method 1 for xiaomi mi 8 / mi 8 pro with snapdragon cpu ?
I have a problem with locked Mi account, don't have a sim card associated with the account, and my bootloader is unfortunately locked ..
Please, can you help me ? I'm desperate.
Click to expand...
Click to collapse
I have no ideia about how to do that on snapdragon.
will it work on redmi 9 M2004J19AG mediatek MT6769T MIUI Global 12.0.1 ? I cant find Scatter file for MT6769T
darko12 said:
will it work on redmi 9 M2004J19AG mediatek MT6769T MIUI Global 12.0.1 ? I cant find Scatter file for MT6769T
Click to expand...
Click to collapse
I'm not sure.
Can i use Scatter file for MT67698 or is there other method to remove mi account, I bought used phone with logged mi account , phone isnt blocked but I cant format
darko12 said:
Can i use Scatter file for MT67698 or is there other method to remove mi account, I bought used phone with logged mi account , phone isnt blocked but I cant format
Click to expand...
Click to collapse
I'm not sure.
The frp is gone but the mi account when I am connected to the network is locking again....
sakis0547 said:
The frp is gone but the mi account when I am connected to the network is locking again....
Click to expand...
Click to collapse
Frp only is not enough.
You may try removing micloud totally.

How To Guide Nokia G20 boot.img flashing!

Please be aware that this could damage your phone & I'm not responsible for this. So only do this if you really feel comfortable with it & you know about the risks!
This file is only for Nokia G20 TA-1365 and should not be used for any other device.
Download this file to manually Flash partition or partitions using fastboot Command.
For more detailed tutotial on how to flash this file you can read this tutorial here by senior member fipsib at XDA!
Let's say you want to flash boot.img partition so in CMD you will enter.
"fastboot flash boot boot.img" without quotes.
I have extracted OTA stock rom for my Nokia G20 and have all the files in the screenshot below. If you want all the files shown in the screenshot below I have uploaded them to Google Drive for faster and safer downloads rather than using any other file sharing service.
I have compressed all the files in a zip format and here is the Google Drive link for all the files shown below. Please request the access to the file so that I can grant access to you. I have done this to prevent Google setting an limit to download and avoid any unnecessary downloads.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Do you have to unlock bootloader to flash boot.img if you have to can you tell how????
Don't know said:
Do you have to unlock bootloader to flash boot.img if you have to can you tell how????
Click to expand...
Click to collapse
Thankyou buddy but actually this post is a guide.
mvikrant97 said:
Please be aware that this could damage your phone & I'm not responsible for this. So only do this if you really feel comfortable with it & you know about the risks!
This file is only for Nokia G20 TA-1365 and should not be used for any other device.
Download this file to manually Flash partition or partitions using fastboot Command.
For more detailed tutotial on how to flash this file you can read this tutorial here by senior member fipsib at XDA!
Let's say you want to flash boot.img partition so in CMD you will enter.
"fastboot flash boot boot.img" without quotes.
I have extracted OTA stock rom for my Nokia G20 and have all the files in the screenshot below. If you want all the files shown in the screenshot below I have uploaded them to Google Drive for faster and safer downloads rather than using any other file sharing service.
I have compressed all the files in a zip format and here is the Google Drive link for all the files shown below. Please request the access to the file so that I can grant access to you. I have done this to prevent Google setting an limit to download and avoid any unnecessary downloads.
View attachment 5450449
Click to expand...
Click to collapse
Please share download link.I need to unbrick my Nokia G20 that was bricked.I have no firmware
Download this OTA ROM and flash using Apply update from SD CARD in recovery menu.
Use external SD card.
I don't know whether this will work.
ROM link
Don't know said:
Do you have to unlock bootloader to flash boot.img if you have to can you tell how????
Click to expand...
Click to collapse
Yes need to unlock bootloader.
mvikrant97 said:
Download this OTA ROM and flash using Apply update from SD CARD in recovery menu.
Use external SD card.
I don't know whether this will work.
ROM link
Click to expand...
Click to collapse
Hi thanks for the link. But my phone is bricked, can't enter recovery or fastboot mode. So the only solution here is a read firmware or scatter file.
mvikrant97 said:
Please be aware that this could damage your phone & I'm not responsible for this. So only do this if you really feel comfortable with it & you know about the risks!
This file is only for Nokia G20 TA-1365 and should not be used for any other device.
Download this file to manually Flash partition or partitions using fastboot Command.
For more detailed tutotial on how to flash this file you can read this tutorial here by senior member fipsib at XDA!
Let's say you want to flash boot.img partition so in CMD you will enter.
"fastboot flash boot boot.img" without quotes.
I have extracted OTA stock rom for my Nokia G20 and have all the files in the screenshot below. If you want all the files shown in the screenshot below I have uploaded them to Google Drive for faster and safer downloads rather than using any other file sharing service.
I have compressed all the files in a zip format and here is the Google Drive link for all the files shown below. Please request the access to the file so that I can grant access to you. I have done this to prevent Google setting an limit to download and avoid any unnecessary downloads.
View attachment 5450449
Click to expand...
Click to collapse
Kindly grant access to [email protected] need to unbrick my device
I would like to ask how do I extract the boot.img file from the phone? I can access the internals through the adb shell. I would love to learn the strategies used to extract the firmware from android devices that do not make them available. Thanks!!
karangejo said:
I would like to ask how do I extract the boot.img file from the phone? I can access the internals through the adb shell. I would love to learn the strategies used to extract the firmware from android devices that do not make them available. Thanks!!
Click to expand...
Click to collapse
Simply... You can't without root.
To get root (permanent root) you must unlock your bootloader........
Please, read this post to understand what i'm talking about https://forum.xda-developers.com/t/nokia-g21-development.4424031/
I think that today there's no way to unlock G10/G20/G21 bootloader. Then, no root or custom recovery can be build.
Maybe, @mvikrant97 can share with us some info (PM).
I unlocked my g20 TA-1343 by taking a hundred tiny screws out , shorting the test point, and using MTK Client 1.6
hyperlink of the link i pastedhttps://github.com/bkerler/mtkclient
I only took it apart because the other option was send it back to HMD
But I don't know how to flash the bin files with magisk or whatever as they're not valid images. but the thing is basically root if i felt like learning.
jdberkzk said:
I unlocked my g20 TA-1343 by taking a hundred tiny screws out , shorting the test point, and using MTK Client 1.6
hyperlink of the link i pastedhttps://github.com/bkerler/mtkclient
I only took it apart because the other option was send it back to HMD
But I don't know how to flash the bin files with magisk or whatever as they're not valid images. but the thing is basically root if i felt like learning.
Click to expand...
Click to collapse
Do you mean the bootloader unlock?
mvikrant97 said:
Do you mean the bootloader unlock?
Click to expand...
Click to collapse
Yes I unlocked the bootloader with mtk client but i have the G20 ta-1343 and. I didn't have a stom rom for it.. and I bricked it trying to root it and corrupt the gpt it looks like, now I cant get it to load in mtk client anymore. I haven't errased the rest of the phone but it is in a/b format so i dont know if i should flash it? I was stuck in boot loop
jdberkzk said:
Yes I unlocked the bootloader with mtk client but i have the G20 ta-1343 and. I didn't have a stom rom for it.. and I bricked it trying to root it and corrupt the gpt it looks like, now I cant get it to load in mtk client anymore. I haven't errased the rest of the phone but it is in a/b format so i dont know if i should flash it? I was stuck in boot loop
Click to expand...
Click to collapse
mvikrant97 said:
Do you mean the bootloader unlock?
Click to expand...
Click to collapse
I got bootloader unlocked but when i flashed magisk i got stuck on the android one screen and then now it's back to the no OS boot loop and
Error on reading data: MMC error (0xc0040030)
in mtkclient. i cant get to fastboot anymore.
I du
mvikrant97 said:
Do you mean the bootloader unlock
Click to expand...
Click to collapse
I dumped everything from my phone to my computer except userdata super otp and flashinfo i think.
the bins would flash the same as images except I can't get them to flash. should I try another firmware or?

Categories

Resources