LG G7 One Bootloader Unlock [How-to] - LG G7 One Guides, News, & Discussion

Disclaimer: Do this at your own risk, blah blah blah. Brick your phone its on you..
Just a quick tutorial on bootloader unlocking the G7 One. Lots of the info in here can be found in other areas of XDA.
*****Read full post before starting*******
1. Boot up your G7 One and turn on OEM unlocking. Settings -> About phone -> Tap on build number 7 times.
Now back to main settings menu, System -> Developer options -> turn on OEM unlock.
2. Download and install QPST which also has QFIL. QFIL will be used to back up all phone partitions, and flash bootloader.
https://www.mediafire.com/file/220h5xaxi1gd55m/QPST_2.7.496.zip/file
3. Download in install minimal adb 1.43 from here: unless you already have adb installed.
https://androidmtk.com/download-minimal-adb-and-fastboot-tool
4. Download and install Sonim XP8 drivers. (I dont know why they work, but they do. i dont think there are any available 9008 drivers for the G7 One from LG) You MIGHT also need qualcomm drivers but i dont remember for sure. If so do a google search for them.
https://androidfilehost.com/?fid=4349826312261641909 Thanks to smokey710
5. Download LG V30 firehose and keep for later.
https://androidfilehost.com/?fid=4349826312261705868
6. Once QPST is installed and sonim drivers are installed, you need to do a full backup of your phone.
to do this you need to put your phone into EDL (emergency download mode) aka Qualcomm HS-USB QDLoader 9008 mode.
to get into 9008 mode, start QFIL plug your powered on phone into your pc, and go to this post to get into 9008 mode:
https://forum.xda-developers.com/t/this-is-how-to-enter-edl-mode.4048295/
7. Backing up phone: 1. Start QFIL. In QFIL click on "select port" and choose "Qualcomm HS-USB QDLoader 9008 (COM XX)"
**XX being whatever com port your phone is on.
2. Under "Select Build Type" tick flat build box.
3. Under "Select Programmer" click "Browse.." and select the V30 fire hose downloaded in step 5 above.
4. Bottom right corner set the storage type to UFS.
5. Now at the top, click on "Tools", in the drop down box click on "Partition Manager", then click ok to confirm in the pop up box.
6. If everything is done right you'll get a partition manager box pop up with a list of all your phones partitions.
7. To back up a partition, highlight it then right click -> manage partition data -> read data.
8. Do this for all partitions to have a full backup of your phone. You can skip userdata if you want as its HUGE.
9. MOST IMPORTANT partitions are modemst1&2 and FSG. These contain IMEI etc. as long as you have these 3
partitions save you can always use someone else's partitions along with those 3 to restore your phone. Keep them safe!
8. Bootloader unlocking: 1. Similar to backing up the partitions, now go to your abl_a and abl_b partitions, and instead of doing a read, select
"Load Image..." and load this engineering bootloader:
https://www.mediafire.com/file/k69bh96q0qndk16/abl_a_eng_g7one.bin/file
2. Once that is done, hold power & volume down to reboot phone. Close out QFIL and reboot your phone to fastboot by shutting your phone down, then holding volume down while plugging in usb cable.
3. Open your ADB folder, press shift, right click and open cmd (or powershell) window here.
At command prompt type: "fastboot devices" without quotes. Make sure your phone shows up.
4. Now "fastboot oem unlock" follow directions on phone to unlock bootloader.
5. Done!!! Now you can use magisk on your phone to root boot_a/b images and use either qfil
or fastboot to flash them back.
Apologies if this isnt the best tutorial, its not something i do. If you have problems with any step here do a google search, all this stuff can be found in tutorials in XDA or elsewhere. Really the only thing i provided here is the bootloader file for unlocking.
All credits go to authors of other tutorials and links in this tutorial.
Good luck!!

Looks like slowly every recent LG phone will be able to be unlocked by these tricky methods. Except G6 i believe for G6 wont be any solution because i have G6 and i dont have such fortune

Any roms yet?

@GMSS75 Would you have the instructions under Step 7 available for Linux platforms?
All I have to work with here is QDL.

acerspyro said:
@GMSS75 Would you have the instructions under Step 7 available for Linux platforms?
All I have to work with here is QDL.
Click to expand...
Click to collapse
As far as I know qfil is windows only

GMSS75 said:
As far as I know qfil is windows only
Click to expand...
Click to collapse
I think QFIL is just a front-end to QDL, could be wrong though

acerspyro said:
I think QFIL is just a front-end to QDL, could be wrong though
Click to expand...
Click to collapse
It could be, I've never used it so I can't help with it, sorry.

After finished this step "Now "fastboot oem unlock" follow directions on phone to unlock bootloader." my phone stuck at fastboot mode, althought t choose restart or powerdown, my phone alway reboot into fastboot mode.

dkmhariwon said:
After finished this step "Now "fastboot oem unlock" follow directions on phone to unlock bootloader." my phone stuck at fastboot mode, althought t choose restart or powerdown, my phone alway reboot into fastboot mode.
Click to expand...
Click to collapse
Flash your original abl files

stock framework-res.apk file needed!!
Hi, I would like to have a copy of the stock framework-res.apk file in order to create a good overlay for GSI treble rom. https://forum.xda-developers.com/t/guide-how-to-make-gsis-overlay-file-for-your-phone.3878974/

Related

Bricked my LG k10 430DSY

Hello
My LG k10 430dsy is stuck on a bootloop and I cant boot into recovery and fatboot and download mode, I just get the message "Your device is corrupt. It cant be trusted and may not work proper"
no download mode no recovery and no fastboot mode
how can I fix this? I could use some help please, even if it means reformatting the phone any way possible, thanks.
LG phones are much nonsense
please do not buy LG phones if you are user advanced
All ways are bricked or locked
When you removed battery and loaded it again, did you try holding volume up and connecting using USB cable to PC?
As wizzardsk sais you have to try connect it holding volume up + lg bridge update error recovery.
Or what about hard reset ( http://www.hardreset.info/devices/lg/lg-k10/ )?
Anyways if your phone connects and stays connected for more a second or two you might have a chance just PM me...
What coused the situation if i may ask?
I want to root lg k10 430dsy ando this commands
1. Enable developer options on the lg K10
2. Enable OEM unlocking and USB debugging
3. Copy twrp.img to disk C: /
3. Go to C: / and open command window. Enter: adb reboot bootloader (phone will start in fastboot mode)
4. Once in the fastboot mode enter the command: fastboot boot twrp.img
5. Once inside TWRP press cancel and then slide to allow modifications.
6. Mount System, data and sdcard.
7. Make BOOT-only backup (uncheck all other partitions)
8. Mount MTP
9. Copy BOOT backup from TWRP folder in our SD card (Boot.emmc.win) and rename bootlz4.img
10. Copy to Boot-resources of CARLIV IMAGE KITCHEN
11. Decompress with Carliv
12. Open bootlz4 folder and find the file "boot.img-ramdisk-compress".
13. Edit "boot.img-ramdisk-compress" with notepad ++ and change "lz4" to "gz"
14. Save
15. Recompress bootlz4.img
16. Go to output folder and look for bootlz4xxxxx.img and rename it as bootgz.img
17. Go to TWRP and restart in bootloader mode
18. Write in command window: fastboot flash boot bootgz.img
19. Then write in command window: fastboot boot twrp.img to return to TWRP
I must flash bootgz_0.img in TWRP
by cpatrick3000 method is false
Plese use method gottlasz for root
i can't aging boot twrp because error "larg size" and remove batterry and my device is bricked
I do hard reset not work
flash lg and lg up not work for 430dsy ony work lg Bridge i use lg bridge for flashing firmware but can't because trying to enter download mode and nothing happens, just text "download boot" download mode is bricked too
My LG k10 430dsy is stuck on a bootloop.show logo lg then show message "Your device is corrupt. It cant be trusted and may not work proper"
holding volume up and connecting using USB cable to PC only connecting two seconds then disconnect
and trying to enter download mode and nothing happens, just text "download boot: after five seconds show message :your device is ........." then turn off bootloop
still not found any way to go to fastboot
Device is corrupted
123xdagsm said:
Hello
My LG k10 430dsy is stuck on a bootloop and I cant boot into recovery and fatboot and download mode, I just get the message "Your device is corrupt. It cant be trusted and may not work proper"
no download mode no recovery and no fastboot mode
how can I fix this? I could use some help please, even if it means reformatting the phone any way possible, thanks.
Click to expand...
Click to collapse
We have a same problem bruh I tried to boot on twrp.img after that my k10 shutsdown and when its reboot a notice say (your device is corrupted it cant be trusted and may not work properly) I try to recover but nothing happens its like bootlooping and no fastboot no download boot no recovery WTF. many tutorial on youtube and says boot to qualcom mode but I cannot locate the killer switch inside the k10 main board.
@123xdagsm OP did you actually tried the download mode? i have the same problem at the exactly same phone, the solution for me afaik is rolling back the software, then go for root..
bricked LG K430dsY
bricked my LG K10 trying to root it (430dsY), the only thing I can do is connect the USB and hold it in "firmware update" mode, ... my command prompt with adb and fastboot is non-responsive... loaded TWRP through fastboot and ran rce.img,- twice, following instructions from a youtube.be link (cMipOfeW6B0)
after second flash of rce.img, it busted. yeah, I feel really stupid. I never got to super-user, any help?
I do have a backup image file made with TWRP on phone, (backup.ab) 437MB, anyway to flash the device from command prompt, get device to respond to command prompt?
"...Anyways if your phone connects and stays connected for more a second or two you might have a chance just PM me...
What caused the situation if i may ask?[/QUOTE]
---------- Post added at 06:49 PM ---------- Previous post was at 06:43 PM ----------
bricked my LG K10 trying to root it (430dsY), the only thing I can do is connect the USB and hold it in "firmware update" mode, ... my command prompt with adb and fastboot is non-responsive... loaded TWRP through fastboot and ran rce.img,- twice, following instructions from a youtube.be link (cMipOfeW6B0)
after second flash of rce.img, it busted. yeah, I feel really stupid. I never got to super-user, any help?
I do have a backup image file made with TWRP on phone, (backup.ab) 437MB, anyway to flash the device from command prompt, get device to respond to command prompt?
just trying to get some help...
"...Anyways if your phone connects and stays connected for more a second or two you might have a chance just PM me...
What caused the situation if i may ask?[/QUOTE]
gottlasz said:
As wizzardsk sais you have to try connect it holding volume up + lg bridge update error recovery.
Or what about hard reset ( hardreset.info/devices/lg/lg-k10/)?
Anyways if your phone connects and stays connected for more a second or two you might have a chance just PM me...
What coused the situation if i may ask?
Click to expand...
Click to collapse
---------- Post added at 07:38 PM ---------- Previous post was at 06:49 PM ----------
didn't know about LG Bridge,- yes, downloaded, installed and used the error recovery option while phone was in "update firmware" mode connected to usb... whew. hehe... may try rooting again... or not
curtgriff said:
bricked my LG K10 trying to root it (430dsY), the only thing I can do is connect the USB and hold it in "firmware update" mode, ... my command prompt with adb and fastboot is non-responsive... loaded TWRP through fastboot and ran rce.img,- twice, following instructions from a youtube.be link (cMipOfeW6B0)
after second flash of rce.img, it busted. yeah, I feel really stupid. I never got to super-user, any help?
I do have a backup image file made with TWRP on phone, (backup.ab) 437MB, anyway to flash the device from command prompt, get device to respond to command prompt?
"...Anyways if your phone connects and stays connected for more a second or two you might have a chance just PM me...
What caused the situation if i may ask?
Click to expand...
Click to collapse
rebamontan22 said:
We have a same problem bruh I tried to boot on twrp.img after that my k10 shutsdown and when its reboot a notice say (your device is corrupted it cant be trusted and may not work properly) I try to recover but nothing happens its like bootlooping and no fastboot no download boot no recovery WTF. many tutorial on youtube and says boot to qualcom mode but I cannot locate the killer switch inside the k10 main board.
Click to expand...
Click to collapse
I could not find any way to solve the problem
I sold the phone to the same state, and bought a new phone
Perhaps there is a way!
I have the same problem with my K3. I know this is an old thread, but is there any solution at all?
123xdagsm said:
Hello
My LG k10 430dsy is stuck on a bootloop and I cant boot into recovery and fatboot and download mode, I just get the message "Your device is corrupt. It cant be trusted and may not work proper"
no download mode no recovery and no fastboot mode
how can I fix this? I could use some help please, even if it means reformatting the phone any way possible, thanks.
Click to expand...
Click to collapse
I want to take of heads off for these who makes LG Nokia Samsung phones. I waste lots off money for phone and after 2 month it breaks. Its product what you can not sell afterwards. Somebody needs to die.
lg k430ds your device is corrupt and cannot go to download mode
I have the same problem :crying: with my k430dsy ( k10 )
no download mode like this video www youtube com /watch?v=s_bx9sr6lL8"
pleas if you found the solution send it to me on my gmail
"[email protected]
Hi, I had LG K430DSY and rooted it, with TWRP and Xposed.
The device is corrupted appears when you unlock the bootloader and allow TWRP to modify system.
It must be there if you want root.
I followed this procedure https://forum.xda-developers.com/lg-k10/how-to/friendly-root-method-lg-k8-k10-t3531223
You cant install TWRP permanently so you will need to port your TWRP.
https://forum.xda-developers.com/lg-k10/development/mtk-portable-twrp-porter-t3536123
STEP 1 - Get your phone's KDZ firmware
1. method:
- reboot your phone into download mode (http://www.hardreset.info/devices/lg...download-mode/)
- start LG Bridge, go to software update and chose update error recovery (right bottom corner).
- from here follow kappu's guide to get your .kdz file: https://forum.xda-developers.com/lg-...ridge-t3504497
- you can let lg bridge finish the flashing process, no data will be lost.
2. method:
- download firmware for your device:
k10: https://forum.xda-developers.com/lg-...g-k10-t3457319
k8: https://forum.xda-developers.com/lg-...mware-t3456467
- now you have your kdz however you better do the next step if you are not sure thats the exact firmware your device has
- use lg up (https://forum.xda-developers.com/lg-...ng-lg-t3517839) to flash that firmware on your device (just to make sure you are really using that particular firmware)
- all data will be lost
Now you have your kdz, lets extract the recovery image:
- download lg firmware extractor: https://forum.xda-developers.com/sho....php?t=2600575
- upack it somewhere and put the kdz file into that folder
- run "WindowsLGFirmwareExtract.exe"
- open your kdz file (first open button from above)
- tick the first entry under file name (the .dz file) and click on "Extract KDZ"
- you will get that .dz file extracted in your LGFirmwareExtract folder
- close LG Firmware extractor and open it again
- now open .dz file (second open button from above)
- find your stock recovery image under file name (usually it's "recovery_190464.bin"), tick that entry and click on "Extract DZ"
- your stock recovery image will be extracted in the LGFirmwareExtract folder.
Now you just copy this "recovery_190464.bin" (or whatever it's name is - just make sure it's a .bin file) into the "twrp_port" folder and run "twrp_port.bat"
YOU WILL NOW HAVE YOUR PORTED TWRP RECOVERY as yourTWRP.img
STEP 2 - UNLOCK YOUR BOOTLOADER
- in settings/about phone/software info tap on build number about 7 times unlock developer options
- in settings/developer options tick on "oem unlock" and "usb debugging" and untick "verify apps over usb"
- in settings/security tick on "unknown sources" and untick "verify apps"
- make sure you installed all the drivers for your mobile from lg's site
- set up adb/fasboot https://forum.xda-developers.com/sho....php?t=2588979
- go to the folder it's installed (in my case it's C:/adb - adb.exe and fastboot.exe supposed to be there) hold shift and right click "open cmd here"
- in the command window type "adb devices"
it will start adb services and will print a line like "...lgk350... or ...lgk420... lgk430, etc"
if you can't find your device there check device manager or google how to work things out
normally in device manager, you should find "LGE Mobile USB Serial Port" under Ports
- now reboot to fastboot mode typing the command: "adb reboot bootloader"
your phone should go blank and only print fastboot mode on the bottom of the screen
- check your fastboot connection:
type: "fastboot devices"
- In case you have a working adb and fastboot connection type
"fastboot oem unlock" - the phone will ask you if you really mean it, using the volume and the on/off buttons (twice) you can accept
you will lose all your data!!! and most likely lose warranty as well!!!
however your phone shell restart just fine (you have to manually restart it by taking out the battery or boot into twrp and reboot from there.
There should be some message during boot up that your system is vulnerable from now on.
- after reboot you may want to check if your bootloader is really unlocked:
get back to fastboot and type "fastboot getvar all"
and find the line which says if your bootloader is unlocked (if it's not you may repeat the process)
set up developer settings again:
- in settings/about phone/software info tap on build number about 10 times so you unlcok developer options
- in settings/developer options tick on "oem unlock" and "usb debugging" and untick "verify apps over usb"
- in settings/security tick on "unknown sources" and untick "verify apps"
STEP 3 - ROOTING
- put the recovery image that we ported earlier (e.g "yourTWRP.img") into your ADB folder (like c:\adb - where you opened command prompt earlier)
- Get back to fastboot again and boot to TWRP - type in cmd: "fastboot boot yourTWRP.img" (or whatever your TWRP image's filename is)
- on the first screen of the TWRP it's asking for password to decrypt data - just hit cancel
in case you have no device corrupt message during every boot up follow the next steps
- on the keep system read only? screen of the TWRP let it allow modifications (swipe!)
- reboot to System
you must see the device corrupt message during boot up -> you are ready to go for a root
the rooting part
- download the ramdisk compression exchanger: https://forum.xda-developers.com/app...anger-t3533327 (we need this because SuperSU can only work with gzip compressed ramdisks while we have lz4 compressed ones)
- download latest SuperSU TWRP flashable version: https://forum.xda-developers.com/app...lease-t3452703
- put this (rce_univ.zip) and latest SuperSU (i used v2.79) on your sd card (you need external sd because the internal sd is encrypted in TWRP)
- reboot your device into TWRP (through adb and fastboot as before)
- cancel decrypt data
- don't swipe on system modifying screen just click on "keep read only"
- go to backup, backup your boot image (tick only boot partition /untick the rest/ and select storage as micro sd card) in case anything goes wrong during the rest of the process you can always restore it
- go to install
- select storage and chose micro sd card
- install rce_univ.zip (it will recompress your ramdisk to gzip - so SuperSU can tweak it)
- when it's finished don't wipe or don't reboot! Go back (hit back button button) and install SuperSUxxx.zip
- go back again (without restart or wipe) and install rce.zip again (this will recompress your ramdisk to lz4)
- now you can reboot to system (without any wipe) - it will bootloop a few times, be patient!
If you have any problem with installing rce_univ.zip please post comments to it's thread:
https://forum.xda-developers.com/app...anger-t3533327
Please follow those instructions if you want to Root.
---------- Post added at 09:19 AM ---------- Previous post was at 09:16 AM ----------
123xdagsm said:
Hello
My LG k10 430dsy is stuck on a bootloop and I cant boot into recovery and fatboot and download mode, I just get the message "Your device is corrupt. It cant be trusted and may not work proper"
no download mode no recovery and no fastboot mode
how can I fix this? I could use some help please, even if it means reformatting the phone any way possible, thanks.
Click to expand...
Click to collapse
Use LG Up to unbrick your device.
That's what i used then i had LG K430DSY
Install LG UP, then download the firmware and flash it with LG UP.
Alternatively,
Install LG Bridge, then make sure your device is switched off,
Hold the volume up key then plug in the usb cable to the phone
It will enter download mode.
USB Bridge option to fix recovery error, It will flash new KDZ firmware and your device will be unbricked.
I solved this problem, if you can inter download mode, you can do so.
1. download your model kdz file.
2. download lgup 1.14 and install it
3. download uppercut from this link (then your phone model will be detected by lgup1.14)
https://forum.xda-developers.com/lg-g5/development/uppercut-lgup-loader-g5-variants-t3511295
4. inter download mode (volume up+ connect with usb cable)
5. open lgup 1.14, thick upgrade in process, select your kdz file in file path and start.
Well, now I have the same problem. No way to get into download mode. Lg sucks...
We need to access to emmc and rewrite stock binaries. But there isn't any way to do it at home. We need something like this:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
And connect it to board like this:
Then we can write stock boot/system/recovery etc..
Note: This scheme is for MTK chipsets.
123xdagsm said:
Hello
My LG k10 430dsy is stuck on a bootloop and I cant boot into recovery and fatboot and download mode, I just get the message "Your device is corrupt. It cant be trusted and may not work proper"
no download mode no recovery and no fastboot mode
how can I fix this? I could use some help please, even if it means reformatting the phone any way possible, thanks.
Click to expand...
Click to collapse
take a look on that method https://forum.xda-developers.com/lg-k10/how-to/guide-to-flash-official-firmware-lg-k-t3761728
Let me dig up this old thread real quick
I have same problem, Model LG K10 K430dsE
Phone has bootloop, says it's corrupted and not trusted etc
When i enter download mode it stays for 10s then bootloops again,
PC does not recognize the device but it did before, tried uninstalling/reinstalling LGUP/BRIDGE/USB DRIVERS etc
This happened after i tried to flash twrp.img
If anyone has any suggestion, answer below or reply here
Thread: https://forum.xda-developers.com/t/lg-k10-cannot-launch-twrp-or-download-mode-bootloop.4258773/
fml4days said:
Let me dig up this old thread real quick
I have same problem, Model LG K10 K430dsE
Phone has bootloop, says it's corrupted and not trusted etc
When i enter download mode it stays for 10s then bootloops again,
PC does not recognize the device but it did before, tried uninstalling/reinstalling LGUP/BRIDGE/USB DRIVERS etc
This happened after i tried to flash twrp.img
If anyone has any suggestion, answer below or reply here
Thread: https://forum.xda-developers.com/t/lg-k10-cannot-launch-twrp-or-download-mode-bootloop.4258773/
Click to expand...
Click to collapse
There is no way to fix this. I've had the same and even though I tried to access to emmc directly, I was not unable to solve it. I had sent it to LG for repair and my device was repaired (motherboard changed).
berkantkz said:
There is no way to fix this. I've had the same and even though I tried to access to emmc directly, I was not unable to solve it. I had sent it to LG for repair and my device was repaired (motherboard changed).
Click to expand...
Click to collapse
Thank you for the response bro, i have read many of your posts and im pretty sure this is 100% accurate
fml4days said:
Thank you for the response bro, i have read many of your posts and im pretty sure this is 100% accurate
Click to expand...
Click to collapse
There might be a way for those who has advanced tools to modify/access the stuff on motherboard but since I don't have them, that's the only accurate thing I could say.
Thanks for trusting in me and you're welcome.

Total Nub's guide to rooting Qmobile Q Infinity & Micromax Canvas Inifinity

After failing some 1-click rooting methods, for the first time I tried to do it the hard way.
That turned out to be a pretty easy way thanks to some handy links to drivers and other files I found.
Infinity thanks to the thread I found platform-tools from and the website called "getdroidtips" for the Custom TWRP for the HS2.
NOTE: THIS GUIDE WILL WIPE YOUR DEVICE SO BE PREPARED
Standard warning: FOLLOW THIS GUIDE AT YOUR OWN RISK. REMEMBER, AS PER MY NAME I AM A TOTAL NUB. I DO NOT TAKE RESPONSIBILITY FOR YOUR PHONE MALFUNCTIONING, BRICKING, BLOWING UP OR DROWNING IN COOKING OIL (rip my Elephone S7)
Pastebin code for missing links: F2RGqM1A
1) Preparation
Download the latest Flashable.Zip from [ ]
Place SuperSu.zip in your sd card or internal storage
Enable Developer Options by going to Settings -> "About Phone" -> Click "Software Version" 7-8 times
Go to developer Options in Settings
Enable OEM Unlocking
Enable USB Debugging
Shutdown your phone by holding the power button
Boot into fastboot by holding the Volume Up key + Power Button
Press Volume Down key to get into fastboot
2) On your Windows PC:
Download the file from [ ] and extract the platform-tools folder (I extract to "D:\Downloads" in this example)
Download the Custom TWRP from [ ] and place it inside the platform-tools folder
Connect your device to your computer
press Win+R, type cmd and press enter
2.1) (not always needed)
If your device won't connect or the steps below don't work, try updating drivers:
Connect your phone while it's in fastboot
open start menu, search and open Device Manager
check inside Portable Devices or Android Devices for your phone's name
or look for Android Bootloader Interface
if it's not there, it might be named something else, with an icon that has a yellow triangle inside it.
Right click it, Update Driver
> Browse my computer for driver software
> Let me pick from a list of available drivers on my computer
> select Android Bootloader Interface
to check if you are connected, type "fastboot devices" in cmd and you'll see a device code
3) Unlocking Bootloader
In cmd, enter the following commands:
Code:
D:
cd D:\Downloads\platform-tools
fastboot oem unlock-go
THIS STEP WILL WIPE YOUR DEVICE DATA
wait for restart
4) Booting into TWRP
Go to device Settings again and ensure OEM Unlocking and USB Debugging are still Enabled. Reboot into fastboot.
In cmd:
Code:
fastboot boot twrp-3.1.1-0-20171128-UNOFFICIAL-HS2.img
(In case above cmd line doesn't work, type "fastboot boot twrp" and press Tab)
5) Backing up your rom and data (Optional but recommended)
Inside TWRP, Click Backup, tick everything, select desired directory and swipe to backup.
Reboot and follow step 5 again if needed
6) Installing SuperSU with root privileges
Inside TWRP, Click Install and select SuperSU.zip
Swipe to install and reboot
Enjoy
Please port miui 9 or lineage os 15 for micromax canvas infinity hs2
NubbyMcNubNub said:
After failing some 1-click rooting methods, for the first time I tried to do it the hard way.
That turned out to be a pretty easy way thanks to some handy links to drivers and other files I found.
Infinity thanks to the thread I found platform-tools from and the website called "getdroidtips" for the Custom TWRP for the HS2.
NOTE: THIS GUIDE WILL WIPE YOUR DEVICE SO BE PREPARED
Standard warning: FOLLOW THIS GUIDE AT YOUR OWN RISK. REMEMBER, AS PER MY NAME I AM A TOTAL NUB. I DO NOT TAKE RESPONSIBILITY FOR YOUR PHONE MALFUNCTIONING, BRICKING, BLOWING UP OR DROWNING IN COOKING OIL (rip my Elephone S7)
Pastebin code for missing links: F2RGqM1A
1) Preparation
Download the latest Flashable.Zip from [ ]
Place SuperSu.zip in your sd card or internal storage
Enable Developer Options by going to Settings -> "About Phone" -> Click "Software Version" 7-8 times
Go to developer Options in Settings
Enable OEM Unlocking
Enable USB Debugging
Shutdown your phone by holding the power button
Boot into fastboot by holding the Volume Up key + Power Button
Press Volume Down key to get into fastboot
2) On your Windows PC:
Download the file from [ ] and extract the platform-tools folder (I extract to "D:\Downloads" in this example)
Download the Custom TWRP from [ ] and place it inside the platform-tools folder
Connect your device to your computer
press Win+R, type cmd and press enter
2.1) (not always needed)
If your device won't connect or the steps below don't work, try updating drivers:
Connect your phone while it's in fastboot
open start menu, search and open Device Manager
check inside Portable Devices or Android Devices for your phone's name
or look for Android Bootloader Interface
if it's not there, it might be named something else, with an icon that has a yellow triangle inside it.
Right click it, Update Driver
> Browse my computer for driver software
> Let me pick from a list of available drivers on my computer
> select Android Bootloader Interface
to check if you are connected, type "fastboot devices" in cmd and you'll see a device code
3) Unlocking Bootloader
In cmd, enter the following commands:
THIS STEP WILL WIPE YOUR DEVICE DATA
wait for restart
4) Booting into TWRP
Go to device Settings again and ensure OEM Unlocking and USB Debugging are still Enabled. Reboot into fastboot.
In cmd:
(In case above cmd line doesn't work, type "fastboot boot twrp" and press Tab)
5) Backing up your rom and data (Optional but recommended)
Inside TWRP, Click Backup, tick everything, select desired directory and swipe to backup.
Reboot and follow step 5 again if needed
6) Installing SuperSU with root privileges
Inside TWRP, Click Install and select SuperSU.zip
Swipe to install and reboot
Enjoy
Click to expand...
Click to collapse
Hi please help me, after flashing recovery my phone is on bootloop now, what do i do
Hem97 said:
Please port miui 9 or lineage os 15 for micromax canvas infinity hs2
Click to expand...
Click to collapse
I wish I could.
Sudhangshu said:
Hi please help me, after flashing recovery my phone is on bootloop now, what do i do
Click to expand...
Click to collapse
Did you try "flashboot boot twrp..." like in my guide or "flashboot flash twrp..."?
And which twrp image did you use?
In any case, if you can still get to the fastboot screen, try booting with the twrp image in Step 4 above (download links in the pastebin link)
NubbyMcNubNub said:
I wish I could.
Did you try "flashboot boot twrp..." like in my guide or "flashboot flash twrp..."?
And which twrp image did you use?
In any case, if you can still get to the fastboot screen, try booting with the twrp image in Step 4 above (download links in the pastebin link)
Click to expand...
Click to collapse
Hi, "flashboot boot twrp" wasnt working at all, so i tried "flashboot flash twrp" and all i have is a bootloop. So after flashing recoveru i booted my phone to fastboot and run the command, " flashboot boot recovery recovery.img" where recovery is the custom recovery image and it booted into recovery. Then there is one more step to do that allowed me to finally boot into my os. Its working fine and i still have twrp installed on my phone
---------- Post added at 06:53 PM ---------- Previous post was at 06:49 PM ----------
NubbyMcNubNub said:
I wish I could.
Did you try "flashboot boot twrp..." like in my guide or "flashboot flash twrp..."?
And which twrp image did you use?
In any case, if you can still get to the fastboot screen, try booting with the twrp image in Step 4 above (download links in the pastebin link)
Click to expand...
Click to collapse
Btw i dont find any pastebin links, im sorry im just a noob too..... Lol
Want custom rom for Qmobile Qinfinity
I want a custom rom for Qmobile Qinfinity.
Because its own rom lags and does not have full features. Please give the rom like lineage os,RR,Or Stock
Please Help?:good:
hi bro,recently i just buy a new phone which is micromax canvas infinity.i have rooted my phone successfully,but there are no custom roms available for this phone.can you develop any custom rom for this phone?that will be very helpful...

Repair your ROG2 phone with EDL mode,Official firmware!

Success is disgusted by some people, and will not share any files for free in the future.
Success!!!
This is awesome! Thanks much. I don't understand what you mean by "Factory setting must be restored after booting" though. Do you mean you need to go into Recovery mode and wipe the data?
Here's some instructions I put together that would have helped save me a lot of time. Please correct anything I missed:
After you have downloaded the zip file, here are the step-by-step instructions:
1. Extract the zipped folder wherever you want on your PC.
2. Open a CMD window.
3. cd /d <whatever path it is to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder> e.g., "cd /d D:\RogPhoneII\ASUS_ROG2_ZS660KL_QPST_Firmware\images"
4. Make sure your PC is connected to the side port of your phone and the phone is in fastboot mode (Volume UP button + Power button).
5. Check and make sure your PC is connected properly by entering "fastboot devices" in the command window. You should see the ID of your device.
6. Then enter "fastboot oem enter-dload" in the command window. This will put the phone in emergency download mode (EDL). My phone went all black.
7. Open "\ASUS_ROG2_ZS660KL_QPST_Firmware\MiFlash2018-5-28-0" folder. Launch "XiaoMiFlash.exe".
8. Click "refresh". You should see a device in the list.
9. Click "select" and navigate to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder.
10. Click "flash". Wait until it says "success".
11. After it's done, you'll hold down the UP button, Down button, and Power button on the phone at the same time until it shuts down.
12. Hold Up button and Power button at same to boot into fastboot mode again. Select Recovery mode by using the Up/Down buttons on the phone. Press the Power button to select.
13. Select "wipe data" from the drop down list. Go down the list of "no" until you get to the "yes" and press the Power button.
14. Select "reboot now".
15. Done.
greywookiee said:
This is awesome! Thanks much. I don't understand what you mean by "Factory setting must be restored after booting" though. Do you mean you need to go into Recovery mode and wipe the data?
Here's some instructions I put together that would have helped save me a lot of time. Please correct anything I missed:
After you have downloaded the zip file, here are the step-by-step instructions:
1. Extract the zipped folder wherever you want on your PC.
2. Open a CMD window.
3. cd /d <whatever path it is to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder> e.g., "cd /d D:\RogPhoneII\ASUS_ROG2_ZS660KL_QPST_Firmware\images"
4. Make sure your PC is connected to the side port of your phone and the phone is in fastboot mode (Volume UP button + Power button).
5. Check and make sure your PC is connected properly by entering "fastboot devices" in the command window. You should see the ID of your device.
6. Then enter "fastboot oem enter-dload" in the command window. This will put the phone in emergency download mode (EDL). My phone went all black.
7. Open "\ASUS_ROG2_ZS660KL_QPST_Firmware\MiFlash2018-5-28-0" folder. Launch "XiaoMiFlash.exe".
8. Click "refresh". You should see a device in the list.
9. Click "select" and navigate to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder.
10. Click "flash". Wait until it says "success".
11. After it's done, you'll hold down the UP button, Down button, and Power button on the phone at the same time until it shuts down.
12. Hold Up button and Power button at same to boot into fastboot mode again. Select Recovery mode by using the Up/Down buttons on the phone. Press the Power button to select.
13. Select "wipe data" from the drop down list. Go down the list of "no" until you get to the "yes" and press the Power button.
14. Select "reboot now".
15. Done.
Click to expand...
Click to collapse
Hi is the ASUS_ROG2_ZS660KL_QPST_Firmware\images
Folder in the zip you posted? Where do I find it?
PJay83 said:
Hi is the ASUS_ROG2_ZS660KL_QPST_Firmware\images
Folder in the zip you posted? Where do I find it?
Click to expand...
Click to collapse
The first entry of this thread.
Is the official firmware WW or CN?
I'm just thinking this is probably an easier way for CN guys to get WW if the QPST fw is WW
cheetah2k said:
Is the official firmware WW or CN?
I'm just thinking this is probably an easier way for CN guys to get WW if the QPST fw is WW
Click to expand...
Click to collapse
ww
greywookiee said:
This is awesome! Thanks much. I don't understand what you mean by "Factory setting must be restored after booting" though. Do you mean you need to go into Recovery mode and wipe the data?
Here's some instructions I put together that would have helped save me a lot of time. Please correct anything I missed:
After you have downloaded the zip file, here are the step-by-step instructions:
1. Extract the zipped folder wherever you want on your PC.
2. Open a CMD window.
3. cd /d <whatever path it is to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder> e.g., "cd /d D:\RogPhoneII\ASUS_ROG2_ZS660KL_QPST_Firmware\images"
4. Make sure your PC is connected to the side port of your phone and the phone is in fastboot mode (Volume UP button + Power button).
5. Check and make sure your PC is connected properly by entering "fastboot devices" in the command window. You should see the ID of your device.
6. Then enter "fastboot oem enter-dload" in the command window. This will put the phone in emergency download mode (EDL). My phone went all black.
7. Open "\ASUS_ROG2_ZS660KL_QPST_Firmware\MiFlash2018-5-28-0" folder. Launch "XiaoMiFlash.exe".
8. Click "refresh". You should see a device in the list.
9. Click "select" and navigate to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder.
10. Click "flash". Wait until it says "success".
11. After it's done, you'll hold down the UP button, Down button, and Power button on the phone at the same time until it shuts down.
12. Hold Up button and Power button at same to boot into fastboot mode again. Select Recovery mode by using the Up/Down buttons on the phone. Press the Power button to select.
13. Select "wipe data" from the drop down list. Go down the list of "no" until you get to the "yes" and press the Power button.
14. Select "reboot now".
15. Done.
Click to expand...
Click to collapse
Yes
cheetah2k said:
Is the official firmware WW or CN?
I'm just thinking this is probably an easier way for CN guys to get WW if the QPST fw is WW
Click to expand...
Click to collapse
I think you're right.
---------- Post added at 07:56 AM ---------- Previous post was at 07:53 AM ----------
greywookiee said:
I think you're right.
Click to expand...
Click to collapse
Though, you still want to be able to do updates and stuff without needing someone to break all the files out into separate images. This was a huge life saver thanks to John.
Please help me. I have widevine security L3 instead of L1 (also at relock bootloader). Here is what happen to me:
1. Unlock the bootloader and get persist.img, but wrong size of package then i have lost the serial number (C4ATAS000000). The size of persist file is 16mb instead of 32mb by default.
2. Try to get another persist.img from another device, then use Ultra editor to find and change back to my real Serial Number. And it worked.
3. Figure out widevine security is always stay at L3, whenever bootloader is re-locked. Also Asus unlock bootloader apk from asus homepage is not working, it said "error network".
4. Do flash raw from all version, also factory reset...etc but no luck.
.............................................
Do you know what is really happened when we flash wrong persist.img and flash another persist (which is already change Serial number back to real one)?
Mistake
If your phone can only enter EDL mode (9008 mode)
this firmware is glad to help you. It can be flashed in through
the QPST tool, or it can be flashed in through the Xiaomi miflash tool.
To use the QPST tool, you must change the EMMC to UFS. No matter which tool you use,
you must restore the factory settings after the phone is turned on, otherwise the storage
of the phone will recognize the error! !! !!
Factory settings must be restored after booting! !! !!
The firmware is made through the official package UL-ASUS_I001_1-ASUS-16.0631.1910.35-1.1.207-user.zip
without any modification, Suitable for repairing phones that can only enter edl mode(9008 mode).
File Downlaod link:https://drive.google.com/open?id=1Pk...Sf6cDq7SuJiBBu
Click to expand...
Click to collapse
godmode post! thank you sir! Fixed my bricked rog 2
johnny886 said:
If your phone can only enter EDL mode (9008 mode)
this firmware is glad to help you. It can be flashed in through
the QPST tool, or it can be flashed in through the Xiaomi miflash tool.
To use the QPST tool, you must change the EMMC to UFS. No matter which tool you use,
you must restore the factory settings after the phone is turned on, otherwise the storage
of the phone will recognize the error! !! !!
Factory settings must be restored after booting! !! !!
The firmware is made through the official package UL-ASUS_I001_1-ASUS-16.0631.1910.35-1.1.207-user.zip
without any modification, Suitable for repairing phones that can only enter edl mode(9008 mode).
File Downlaod link:https://drive.google.com/open?id=1Pkt2k82JtK66DzJn3tSf6cDq7SuJiBBu
Click to expand...
Click to collapse
How do I change To use the QPST tool, you must change the EMMC to UFS. No matter which tool you use.
ltth said:
How do I change To use the QPST tool, you must change the EMMC to UFS. No matter which tool you use.
Click to expand...
Click to collapse
Thanks!
ltth said:
Thanks!
Click to expand...
Click to collapse
Hi, I've managed to unbrick my ROG Phone II Tencent Edition 8/128 with a locked bootloader having "slot _a" error. Provided that you can do fastboot.
My equipment for flashing, for sure you already have ADB installed in your computer, my computer is an x64 Intel Windows 10 laptop, I used USB 2.0 not USB 3.0
Credit to @johnny886 for the sharing the tool,
"If your phone can only enter EDL mode (9008 mode)
this firmware is glad to help you. It can be flashed in through
the QPST tool, or it can be flashed in through the Xiaomi miflash tool.
To use the QPST tool, you must change the EMMC to UFS. No matter which tool you use, -(I personally :did" not change anything, I just downloaded the file and followed grewookie's instruction below )
you must restore the factory settings after the phone is turned on, otherwise the storage
of the phone will recognize the error! !! !!
Factory settings must be restored after booting! !! !!
The firmware is made through the official package UL-ASUS_I001_1-ASUS-16.0631.1910.35-1.1.207-user.zip
without any modification, Suitable for repairing phones that can only enter edl mode(9008 mode).
File Downlaod link: https://drive.google.com/open?id=1Pk...Sf6cDq7SuJiBBu"
Credits to @greywookiee for the super clear instruction:
"Here's some instructions I put together that would have helped save me a lot of time. Please correct anything I missed:
After you have downloaded the zip file, here are the step-by-step instructions:
1. Extract the zipped folder wherever you want on your PC.
2. Open a CMD window.
3. cd /d <whatever path it is to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder> e.g., "cd /d D:\RogPhoneII\ASUS_ROG2_ZS660KL_QPST_Firmware\imag es"
4. Make sure your PC is connected to the side port of your phone and the phone is in fastboot mode (Volume UP button + Power button).
5. Check and make sure your PC is connected properly by entering "fastboot devices" in the command window. You should see the ID of your device.
6. Then enter "fastboot oem enter-dload" in the command window. This will put the phone in emergency download mode (EDL). My phone went all black.
7. Open "\ASUS_ROG2_ZS660KL_QPST_Firmware\MiFlash2018-5-28-0" folder. Launch "XiaoMiFlash.exe".
8. Click "refresh". You should see a device in the list.
9. Click "select" and navigate to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder.
10. Click "flash". Wait until it says "success".
11. After it's done, you'll hold down the UP button, Down button, and Power button on the phone at the same time until it shuts down.
12. Hold Up button and Power button at same to boot into fastboot mode again. Select Recovery mode by using the Up/Down buttons on the phone. Press the Power button to select.
13. Select "wipe data" from the drop down list. Go down the list of "no" until you get to the "yes" and press the Power button.
14. Select "reboot now".
15. Done."
followed the steps until number 8 after i clicked refresh the MI app stopped responding (not responding).. dont know what im doing wrong..
tuannghia1985 said:
Please help me. I have widevine security L3 instead of L1 (also at relock bootloader). Here is what happen to me:
1. Unlock the bootloader and get persist.img, but wrong size of package then i have lost the serial number (C4ATAS000000). The size of persist file is 16mb instead of 32mb by default.
2. Try to get another persist.img from another device, then use Ultra editor to find and change back to my real Serial Number. And it worked.
3. Figure out widevine security is always stay at L3, whenever bootloader is re-locked. Also Asus unlock bootloader apk from asus homepage is not working, it said "error network".
4. Do flash raw from all version, also factory reset...etc but no luck.
.............................................
Do you know what is really happened when we flash wrong persist.img and flash another persist (which is already change Serial number back to real one)?
Click to expand...
Click to collapse
请问要怎么得到另一个设备的persist.img,然后怎么编辑sn,最后要怎么写入手机?有具体的步骤 吗
Mod Traduction :
May I ask how to get the persist.img of another device, then how to edit the sn, and finally how to write it to the phone? Are there specific steps?
Click to expand...
Click to collapse
葫芦娃搞奥特曼 said:
请问要怎么得到另一个设备的persist.img,然后怎么编辑sn,最后要怎么写入手机?有具体的步骤 吗
Click to expand...
Click to collapse
Get another user persist.img (with correct 32.768 kb)
Using HEX editor or Ultra Edit to find SSN, ISN and IMEI in persist.img
Return to fastboot - then 9008 mode, use bat to write back to your phone and you will have back Asus unlock bootloader apk (working), have Serial number back.
For question: "How could i find real SSN, ISN and real IMEI?"
Please use command "fastboot oem device-info" in fastboot mode, it will show your real information.
Br,
greywookiee said:
This is awesome! Thanks much. I don't understand what you mean by "Factory setting must be restored after booting" though. Do you mean you need to go into Recovery mode and wipe the data?
Here's some instructions I put together that would have helped save me a lot of time. Please correct anything I missed:
After you have downloaded the zip file, here are the step-by-step instructions:
1. Extract the zipped folder wherever you want on your PC.
2. Open a CMD window.
3. cd /d <whatever path it is to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder> e.g., "cd /d D:\RogPhoneII\ASUS_ROG2_ZS660KL_QPST_Firmware\images"
4. Make sure your PC is connected to the side port of your phone and the phone is in fastboot mode (Volume UP button + Power button).
5. Check and make sure your PC is connected properly by entering "fastboot devices" in the command window. You should see the ID of your device.
6. Then enter "fastboot oem enter-dload" in the command window. This will put the phone in emergency download mode (EDL). My phone went all black.
7. Open "\ASUS_ROG2_ZS660KL_QPST_Firmware\MiFlash2018-5-28-0" folder. Launch "XiaoMiFlash.exe".
8. Click "refresh". You should see a device in the list.
9. Click "select" and navigate to the "\ASUS_ROG2_ZS660KL_QPST_Firmware\images" folder.
10. Click "flash". Wait until it says "success".
11. After it's done, you'll hold down the UP button, Down button, and Power button on the phone at the same time until it shuts down.
12. Hold Up button and Power button at same to boot into fastboot mode again. Select Recovery mode by using the Up/Down buttons on the phone. Press the Power button to select.
13. Select "wipe data" from the drop down list. Go down the list of "no" until you get to the "yes" and press the Power button.
14. Select "reboot now".
15. Done.
Click to expand...
Click to collapse
johnny886 said:
If your phone can only enter EDL mode (9008 mode)
this firmware is glad to help you. It can be flashed in through
the QPST tool, or it can be flashed in through the Xiaomi miflash tool.
To use the QPST tool, you must change the EMMC to UFS. No matter which tool you use,
you must restore the factory settings after the phone is turned on, otherwise the storage
of the phone will recognize the error! !! !!
Factory settings must be restored after booting! !! !!
The firmware is made through the official package UL-ASUS_I001_1-ASUS-16.0631.1910.35-1.1.207-user.zip
without any modification, Suitable for repairing phones that can only enter edl mode(9008 mode).
File Downlaod link:https://drive.google.com/open?id=1Pkt2k82JtK66DzJn3tSf6cDq7SuJiBBu
Click to expand...
Click to collapse
Just 2 doubts:
1. Will I get OTA update after doing this?
2. I am on A10 Beta 6. will It be successful to roll back to this firmware?
Hi in Mi Flash when i refresh and select flash it gives me an error object reference not set to an instance of an object please help me
Help
Gives me Sarahah error on QPST and also gives a flash error on MI flash

Bootloader Unlock and Root Instruction - No Octoplus Box Required

Do you want to bootloader and unlock and root your V35? Do you want to do this yourself? Are you feeling the need for some adventure? If you answered yes to these questions, then you are at the right place. The goal with these instructions is to make the process as smooth and pain-free as possible. These instructions are based upon what I know works through firsthand experience and what I have gathered reading. My experience is with an AT&T branded V350AWM. Others also report success. That said, there can still be problems leading to bricked phone so don’t continue if you are not comfortable with the risk. An unavoidable side-effect of bootloader unlocking is that all data on your phone will be erased. Make a back up if you don’t want to lose it permanently.
This is what you will be doing in a nutshell.
Setting the phone into a baseline Oreo conditions
Extraction of abl, laf, and boot partititions
Installation of the engineering abl and erasing the laf's using QFIL
Unlocking the phone
Flashing to Pie and maybe Q in the future if you want to update from Oreo
Generation and installation of a magisk-patched boot image for root
Upon successful completion, you will have a fresh, bootloader unlocked and rooted phone that is otherwise stock.
Preparation and requirements:
On the hardware side, you will need a PC with MS Windows installed either directly or as a virtual machine and a high quality USB cable designed for data transfer. Older USB 2.0 hardware is preferred when working with LG phones. There is a long list of software to install.
Minimal adb and fastboot
Instructions: https://forum.xda-developers.com/showthread.php?t=2317790
Download: https://www.androidfilehost.com/?fid=746010030569952951
The LG mobile drivers, http://tool.lime.gdms.lge.com/dn/downloader.dev?fileKey=UW00120120425
Dev-Patched LGUP
Instructions and warnings in post #6 with thanks to @ChazzMatt: https://forum.xda-developers.com/lg-v35/help/att-v35-unlocked-wont-verizon-t3958765
Download with thanks to @tecknight for the software: https://androidfilehost.com/?fid=11410963190603845019
9008 Port Driver:
https://raw.githubusercontent.com/g...alcomm_QDLoader_HS-USB_Driver_64bit_Setup.zip
QPST with QFIIL
Some basic instructions: https://androidmtk.com/use-qpst-flash-tool
Download: https://qpsttool.com/qpst-tool-v2-7-480
Download and install each of these programs on your PC in the listed order.
You are also going to need some super important supporting files that make all of this magic possible.
The V35 engineering abl that will give you fastboot with thanks to @vlad48 for making it available: https://www.androidfilehost.com/?fid=1395089523397895796. Yes,it says V20, ignore it, it is fine. Extract abl_a and abl_b, and append a “.img” extension to each. Note the locations on your PC for future use.
The recently available emergency download (EDL) firehose that makes direct partition flashing possible released by Biao on Telegram. It is available here:
https://androidfilehost.com/?fid=4349826312261705871
or as an attachment in @Xsavi’s similar and earlier instructions for the V40: https://forum.xda-developers.com/lg-v40/development/unlock-lg-v40-via-9008-root-t-mobile-t4042207
Note its location for later use.
Troubleshooting:
These instructions assume that your phone boots normally. Even with that there can still be issues due to software drivers and pc-hardware. They can be broadly summarized as a difficulty getting the computer to recognize and communicate with the phone and vice-versa. They arise frequently. If you encounter difficulties, review these troubleshooting tips compiled and written by @ChazzMatt and taken from his V30 WTF instructions.
Look in your ADB folder on your PC and confirm all known Windows file extensions enabled, https://goo.gl/YxLRG5.
Confirm all Windows hidden files and folders are visible, https://goo.gl/1jBKne.
Confirm USB debugging is on in Developer Options, and your PC has authorization for your phone, https://goo.gl/DgojL9.
Install another version of ADB. Install as close to the root of your hard drive as possible. X:\ADB where X is your hard drive.
Re-install LG mobile drivers, https://is.gd/Jbrvx1.
Try another USB cable.
Installing this Windows driver found attached to this post, (Thanks @gazzacbr and @FZZF) https://goo.gl/CqqNZT.
Install Google USB driver, (Thanks @s0lidsneak) https://goo.gl/z2Tahw.
Try another USB port on your computer or try cheap USB 2.0 hub, https://is.gd/gM1mM0.
Reboot the computer.
Try another computer. (THIS usually solves the problem, https://goo.gl/x637H1. Kudos if you find an an old Win7 PC, https://goo.gl/EaGMhs.)
Master Reset (full reset of phone using hardware buttons), https://goo.gl/N4LcLD. Phone will be reset anyway after bootloader unlock. Doing it prior may fix something preventing the command from working.
Step 1: Setting an Oreo baseline:
The engineering files for bootloader unlock of the V35 phone are designed to work with Oreo. If you are an Pie or Q, it is highly recommended that you flash back to Oreo. For those of you with the common AT&T V350AWM model that is not on Oreo, there are a couple of points to consider
AT&T does not release flashable roms. If you are on AT&T Pie or eventually Q, there is no going back unless of course you take the time to make a backup of the rom itself. That is not covered in this guide nor am I aware of a guide on how to do this.
AT&T sim-locks its branded V35’s and the menu to unlock is specific to the AT&T rom. You should strongly consider purchasing of a sim-unlock code and applying it before flashing another rom!
To set the baseline:
If you are already on Oreo perform a master reset. To do this, start by turning the phone off. Then press and hold the power and volume - buttons at the same time until you see the LG logo appear. When the LG log appears, release the power button and then press and hold it again while continuing to press the volume – button. Follow the menus to perform the reset.
If you are on Pie or Q, you are going to flash or cross-flash back to Oreo. The kdz's are available for downloaded from https://lg-firmwares.com/lg-lmv350ulm-firmwares/#tab=firmwares. Reports are that roms can be cross-flashed across V35 models with the exception of the Korean V350N. If you are not familiar with the roms, the favored ones are the Google Fi / North American versions for the V350ULM. Down load the latest Oreo version
https://lg-firmwares.com/downloads-file/18971/V350ULM10i_00_NAO_US_OP_0221, md5sum: 64554877b692601d5906d2bdc9691712​To flash the rom, turn the phone off, press and hold the volume – button while connecting it to the computer’s USB. The phone screen should show “Download Mode”. Start-up LGUP on your PC, select the rom kdz, and flash it using “Refurbish”. Do not use any other modes or you will have serious trouble!
Step 2: Partition Extraction, Modification and Bootloader Unlock
Enable “OEM Unlock”: Turn on the phone and go through a minimal set-up process. Next go to Settings→ System→ About Phone→ Software info. Repeatedly tap on “Build Number” until you receive a message that you are now a “Developer”. Next go to Next go to Settings→ System→Developer options. Look for “OEM unlock” and flip the switch to on. Exit the “Settings” menus.
Boot the phone in EDL 9008 mode: The “button dance” to put the phone into EDL mode requires quick hands. To increase the likelihood of success, take the phone out of any case to expose the volume buttons. With the phone fully booted and turned on, connect it to your computer by USB. Press and hold the power and volume – keys at the same time. The phone will likely take a screenshoot, keep holding the buttons, afterwards it will bring up a reboot countdown message. With one second left, start pressing the volume + button while still keeping the power and volume – buttons pressed. The phone will show a black screen and windows with make its connection sound if you succeeded in reaching ECL mode. Release the button immediately. Look at your computer, you should also see an entry in the Windows Device Manager under “Ports” that reads:
“Qualcomm HS-USB QDLoader 9008 (COMXX)”
where XX is the port. The phone will just reboot if you didn’t click the volume + button sufficiently fast. Keep trying, you will eventually succeed. If the screen on the phone does go black and you don't see the phone listed in the Windows Device Manager, then you should check installation of 9008 port driver.
Start and configure QFIL: Go to the Start Menu or whatever passes for it on your Windows computer and fire up QFIL. Survey the screen:
You should see “Qualcomm HS-USB QDLoader 9008 XX” next to “Select Port…”.
There should be small text in the lower right corner that reads “Storage Type:”; Select “ufs”.
There is a subheading near the upper left that reads “Select Build Type”. Tick “Flat Build”.
Now using the “Browse…” button under the “Select Programmer", navigate to the folder that contains the firehose file, “prog_ufs_firehose_Sdm845_lgev40.elf” and select it.
Extract partitions: Click on “Tools” in the menu bar of QFIL. Select “Partition Manager”. You will be asked if you selected the correct firehose. If you did then click OK. A screen will now appear that lists partitions on your phone. Scroll down the list and look for “abl_a”, “laf_a”, “abl_b”, and “laf_b”.
Right click on “abl_a”
Select “Manage Partition Data”
Select “Read Data…”
Open a folder and navigate to location where the extracted file is located. The QFIL “Status” output shows the location and filename. On my PC, it reads:
“C:\Users\whoiam\AppData\Roaming\Qualcomm\QFIIL\COMPORT_XX\ReadData_ufs_xxxxx.bin” where XX is the port number and the “xxxxx” are details about the partition name. Copy the file to a dedicated folder and rename it “abl_a.img”.
Repeat the this process for “laf_a”, “boot_a”, “abl_b”, “laf_b”, and “boot_b” partitions. Note the locations of these files as back-ups and also for the following section on rooting.
Use QFIL to get fastboot:
Write the engineering abl’s: In QFIL, do the following:
Right click on abl_a.
Select “Manage Partition Data”
Select “Load Image”
In the dialog, Navigate to the location of the engineering abl_a.img file you downloaded in the preparation section, select it, and click “Open”.
Repeat this same procedure for abl_b.
Erase laf’s: In QFIL, do the following:
Right click on “laf_a”
Select “Manage Partition Data”
Select “Erase”
Confirm that you want to erase
Repeat for laf_b.
Unplug the phone from USB
Press and hold the power and volume - buttons until the LG V35 boot logo appears. Allow the phone to reboot.
Turn the phone off.
Unlock the bootloader:
Enter fastboot mode: Hold the volume + button and plug in the USB cable. The phone will boot to a series of menus that include “Start” and “Power off”.
Run a command prompt as Administrator. If necessary navigate to the directory where you installed adb.exe and fastboot.exe.
Check that the phone communicates with fastboot: Type “fastboot devices” and press enter. It should return details about your device. It reads “LMV350AWMxxxxxxx fastboot” with my phone.
Bootloader unlock: Type “fastboot oem unlock”. Congratulations if it reports OK, your phone is now unlocked. If it reports failed then try another USB port on your PC, a better/different cable, and potentially even another PC.
Reboot the phone
Step 3: Restore download mode and flash to desired rom:
If the current version of Oreo is where you want to be then skip to Step 4.
If you want to upgrade to Pie or eventually Q, then you need to restore the laf_a, laf_b, abl_a, and abl_b partitions to recover download mode. It should be clear from what you have done above with QFIL how to do this.
Download the kdz of your desired rom. The Google/NAO version of Pie is recommended and available at this link, https://lg-firmwares.com/downloads-file/22230/V350ULM20f_00_NAO_US_OP_0218.
To flash the rom, turn the phone off, press and hold the volume – button while connecting it to the computer’s USB. The phone screen should show “Download Mode”. Start-up LGUP on your PC, select the rom kdz, and flash it using “Refurbish”. Do not use any other modes or you will have serious trouble!
Step 4: Install Magisk for Root:
Re-enter EDL mode with the above button dance procedure
Extract boot_a and boot_b partitions: Click on “Tools” in the menu bar of QFIL. Select “Partition Manager”. You will be asked if you selected the correct firehose. If you did then click OK. A screen will now appear that lists partitions on your phone. Scroll down the list and look "boot_a” and “boot_b”.
Generate a Magisk-patched booted image working directly with the phone:
Download a stable version of Magisk Manager from the official website: https://forum.xda-developers.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445. It should be saved in the “Download” folder.
In Settings, navigate to Apps & Notifications→ Special access → Install unknown apps. Click on File Manager and set it to allowed.
Open the “File Manager” app and navigate to the Download folder.
Select and install the “MagiskManager-v7.5.1.apk” file keeping in mind that the version numbers may be different.
Connect the phone to USB and place it in file transfer mode.
Copy boot_a.img and boot_b.img to the phone Download folder
Start “MagiskManager” and select “Install”. When presented with the option, tap “Select and Patch a File”.
Navigate to the “Downloads” folder where and select boot_a.img.
There will now be a file named “magisk_patched.img” in the “Downloads” folder. Change its name to magisk_patched_a.img.
Repeat this process with boot_b.img.
Install the Magisk-patched boot images using the PC:
Copy the magisk_patched_a.img and magisk_patched_b to the windows computer.
Put the phone into 9008 EDL mode with the button dance described above.
Start QFIL, configure it as described above, and then click on “Tools” in the menu bar of QFIL and Select “Partition Manager”.
Scroll through the list of partitions and locate boot_a. Right click on it and select “Load Image”. Point it to the magisk_patched_a.img file.
Repeat the previous step for boot_b and load the magisk_patched_b.img file
Reboot your rooted phone.
Step 5: Remove Root Checker: (Added 20200409)
I say with sarcasm that another way that LG has made our lives better was to implement a root-check and monitoring system. Many here are familiar with the root check daemon from the V30. There is a root-check disable twrp package to fix this problem. Installation and use of TWRP for the V35 is tricky. Don't worry, there is another way.
Put the phone in USB debug mode
Connect to your computer
With adb from a command prompt on the computer do the following
adb devices <-- If your devices is properly connect and recognized, adb will respond
List of devices attached
LMV350XXXXXXXXX device
adb shell <-- If you have a shell into the phone you will now see
judyp:/ $
pm uninstall -k --user 0 com.lge.srtc <-- This command removes the root checker, if it succeeds you will get the response:
Success
pm uninstall -k --user 0 com.lge.mlt <-- This command removes the LG monitor, if it succeeds you will get the response:
Success
Happy Rooting!
Wow,
Thanks for the great guide, can't wait to try this.
One question, though, regarding your cross flashing warning. Where did you get the information that Korean V35 can not cross flash? I own a Korean model and it's kinda annoying to constantly be in roaming mode, I was hoping that ULM will change that. So basically, the best I can do is root, not other rom is okay for LM-V350N?
THANK YOU for this. Seriously. Really well done. I can't wait to try it if I ever get my phone back into shape where I CAN try it. ?
There are several posts by owners of AT&T branded V35's who cross-flashed to the Korean V350N Pie rom successfully. They were in a rush for Pie and it was released for Korean models first. Still, I have in my notes not to do the reverse, but I can't find the link. Hypothetically, one can recover from about anything using 9008 mode and QFIL provided you have back ups of the partition images of your phone.
fpozar said:
Wow,
Thanks for the great guide, can't wait to try this.
One question, though, regarding your cross flashing warning. Where did you get the information that Korean V35 can not cross flash? I own a Korean model and it's kinda annoying to constantly be in roaming mode, I was hoping that ULM will change that. So basically, the best I can do is root, not other rom is okay for LM-V350N?
Click to expand...
Click to collapse
cmrntnnr said:
There are several posts by owners of AT&T branded V35's who cross-flashed to the Korean V350N Pie rom successfully. They were in a rush for Pie and it was released for Korean models first. Still, I have in my notes not to do the reverse, but I can't find the link. Hypothetically, one can recover from about anything using 9008 mode and QFIL provided you have back ups of the partition images of your phone.
Click to expand...
Click to collapse
I was one of those who leaped to the Korean KDZ. Now I am running NAO firmware. Guide looks well written. I might wind up taking the leap. Good job bro!
Thanks, I follow your steps very carfully, and now I have a rooted v35.
Nicely done. Thank yoh for sharing the result.
fpozar said:
Wow,
Thanks for the great guide, can't wait to try this.
One question, though, regarding your cross flashing warning. Where did you get the information that Korean V35 can not cross flash? I own a Korean model and it's kinda annoying to constantly be in roaming mode, I was hoping that ULM will change that. So basically, the best I can do is root, not other rom is okay for LM-V350N?
Click to expand...
Click to collapse
vavoo said:
Thanks, I follow your steps very carfully, and now I have a rooted v35.
Click to expand...
Click to collapse
So due to prior.... mishaps, my phone will not boot ("all slots are unbootable!"), and fastboot produces "Flashing Unlock is not allowed" every time the OEM unlock is attempted. What should I do?
I am stuck at Fastboot Mode. It says the "Device state - Unlocked", but when if I choose Start or Power off/on my phone it just goes back into fastboot everytime.
1. I installed and flashed the Pie rom you linked in step 1
2. I turned "Oem unlock" to On.
3. placed the phone in 9008 mode, backed up abl_a, laf_a, boot_a, abl_b, laf_b, and boot_b.
Loaded the img to abl_a and abl_b.
Finally, Erased laf_a and laf_b
4. within fastboot, unlocked bootloader
Any ideas ?
If the phone unlocked, go back into 9008 EDL mode and restore the laf and abl images using your backups. That should get you booting.
dave1567 said:
Any ideas ?
Click to expand...
Click to collapse
1. Download the attached EDL.zip
2. Extract it to a local folder on your PC
3. While your V35 is in fastboot mode plug it to your PC via USB (USB2 port preferred)
4. Double click on RebootEDL.bat
5. Phone will enter 9008 (EDL) mode screen will be black.
6.Using QFIL flash back your PIE abl_a and abl_b
7. Using QFIL flash attached FTM partition from FTMV35PIE.zip.
8. Hold Vol-and power to reboot.
vlad48 said:
1. Download the attached EDL.zip
2. Extract it to a local folder on your PC
3. While your V35 is in fastboot mode plug it to your PC via USB (USB2 port preferred)
4. Double click on RebootEDL.bat
5. Phone will enter 9008 (EDL) mode screen will be black.
6.Using QFIL flash back your PIE abl_a and abl_b
7. Using QFIL flash attached FTM partition from FTMV35PIE.zip.
8. Hold Vol-and power to reboot.
Click to expand...
Click to collapse
I didn't use your bat since it looks like I can still boot into 9008 mode with the button dance method.
Unfortunately, still nothing!
I flashed my abl_a.img and abl_b.img backups I made to the abl_a/b partitions and flashed your FTM_BL.img to my FTM partition, but it didn't seem to do anything except cause some graphical glitches within fastboot menu (everything still functioned though)
Just in case, I re-locked my phone (fastboot oem lock) and started the QFIL process over (flashing with engineered abl_a and abl_b imgs)
Then within fastboot mode, I ran "fastboot oem unlock" a few times because it fails, but finally it went through
Now the phone is unlocked again, but still just always just boots into fastboot mode!
Of course it will boot only to fastboot as you are using engineering abl from Oreo - please understand there is a signature check match which fails and you will not be able to continue booting.
So, in brief, you need to have all partitions on respective bootable slot form either Oreo or Pie kdz version. So you need to be sure that you flashed your PIE abl wither via QFIL or via LGUP.
vlad48 said:
Of course it will boot only to fastboot as you are using engineering abl from Oreo - please understand there is a signature check match which fails and you will not be able to continue booting.
So, in brief, you need to have all partitions on respective bootable slot form either Oreo or Pie kdz version. So you need to be sure that you flashed your PIE abl wither via QFIL or via LGUP.
Click to expand...
Click to collapse
Unfortunately, I don't understand. Thanks for trying to help though.
Anyways, I managed to fix the problem and I'm all set.
- Restored my laf_a and laf_b partitions
- Booted into download mode and re-installed the pie image with LG Up.
- Was now able to boot normally
- Followed the instructions in the guide to get magisk installed and now I'm all set!
Thanks all and hope this helps someone
I scouted my way through these very same steps a couple weeks ago. Soft bricked my device a couple times ? but eventually got her there. Glad too see a dedicated guide is out now. Only problem I've run into is the ctsprofile:fail problem. Been able to fix with spoof pixel fingerprints but it's not ideal. Still looking for solutions if anyone knows anything.
Iantuition said:
So due to prior.... mishaps, my phone will not boot ("all slots are unbootable!"), and fastboot produces "Flashing Unlock is not allowed" every time the OEM unlock is attempted. What should I do?
Click to expand...
Click to collapse
What is the minimum needed for you to enter download mode? I have backups of most partitions i will be happy to share and you can use Qfil to flash those to get to download mode then use LGUP to flash a normal kdz? If so, let me know.
so somehow between qfil and getting fastboot i've got myself in trouble. i dont understand what i did wrong but i got stuck in a fastboot loop and tried following some of the fixes mentioned previously in this thread. when i get back to qfil and try to go to partition manager it wont let me see any of the partitions and shows various sahara errors and fails in the log box. can someone please help idk what to do
Sorry to hear that. The first time I tried to use QFIL I got a Sahara error and could not see partitions. It was resolved by reinstalling the 9008 port driver and then QPST in that order. It happened again later when windows tries to be helpful by automatically reinstalling drivers when the phone is plugged in but with a mode change.
Flowtron3000 said:
so somehow between qfil and getting fastboot i've got myself in trouble. i dont understand what i did wrong but i got stuck in a fastboot loop and tried following some of the fixes mentioned previously in this thread. when i get back to qfil and try to go to partition manager it wont let me see any of the partitions and shows various sahara errors and fails in the log box. can someone please help idk what to do
Click to expand...
Click to collapse
Will this help me sim/carrier unlock my v35awm?
Can you lock the bootloader after this is done and keep root? Need it for banking apps.

Question How to unlock Revvl 6 Pro 5g?

I need help unlocking bootloader on my new Revvl 6 Pro 5g, this is my first mtk device, and I'm a Windows guy and I'm lost on the whole mtk client tool and python.
Any and all help would be a phenomenal help!
I think this phone would have a lot more potential with a gsi running on it!
The T-Mobile Revvl 6 pro 5g is made by Wingtech, code name: Augusta and model # is TMAF035G. I dunno if that's of any help but after all my research that's all I know that's 100% fact!
Help your fellow human geek out to enjoy this phones potential!
sent you pm
_hollywood_ said:
sent you pm
Click to expand...
Click to collapse
Id also like that PM
KenzieAon said:
Id also like that PM
Click to expand...
Click to collapse
sent...
_hollywood_ said:
sent you pm
Click to expand...
Click to collapse
Can you also send to me? I'm trying to root my Revvl 6 with Mtkclient on mac. I have the GUI showing but can't get it to detect my phone
androidn00b11 said:
Can you also send to me? I'm trying to root my Revvl 6 with Mtkclient on mac. I have the GUI showing but can't get it to detect my phone
Click to expand...
Click to collapse
It's starting to look like I need to put together a guide...
I don't know how to do this on a mac. And I didn't like using the GUI on mtkclient, it would recognize the device but sometimes wouldn't connect.
I suggest you download the liveDVD from the mtkclient readme (https://github.com/bkerler/mtkclient), put it on a bootable usb stick and run it from there. This is the setup that worked best for me, better than on windows anyway.
Also, read this (https://github.com/bkerler/mtkclient/issues/79). The REVVL 6 Pro 5G has an A/B setup, and unlocking it is not really explained in the current readme. Basically, you need to find out what slot you are booting from (boot_a or boot_b) and flash accordingly. Don't flash both slots, if something goes wrong you might want a slot to fall back to.
From adb do:
adb reboot fastboot
wait for your phone to boot into fastboot mode, and then:
fastboot getvar current-slot
That should tell you what your current slot is.
In order to get mtkclient to connect I booted into the liveDVD opened up the terminal and entered
python mtk r boot boot.img
It will keep looping, looking for your device and give you time to get your REVVL 6 Pro connected with the right button combo (start with power off, then volume down & plug in usb). When it connects a bunch of information will scroll down the screen. It will look for a "boot" partition but won't find one and will show an error, this is ok though. It's connected and you can begin flashing to your hearts content.
IMPORTANT!
Before you go any further make a backup with:
python mtk rl out
This will dump all partitions to a folder "out" on the computer. Save this somewhere, it is your backup.
You may not want to back up the entire userdata partition (it's huge and may take 4 hours to copy, thanks to @threeeye see post 14 below) so when it gets to that you can hit control+c to stop and then backup any remaining partitions manually with this format:
If you don't want to backup userdata folder then try this:
python mtk rl out --skip userdata
Back up individual partitions with this:
python mtk r partitionToBackup partitionName.bin
example: python mtk r vbmeta_a vbmeta_a.bin
The information for unlocking and rooting is in the links above.
Make a backup BEFORE you unlock and root!
Thanks _hollywood_. I got the slot (b), but am not able to get mtk to find the device, it continues to loop. Any tips of figuring out the "right button combo"?
androidn00b11 said:
Thanks _hollywood_. I got the slot (b), but am not able to get mtk to find the device, it continues to loop. Any tips of figuring out the "right button combo"?
Click to expand...
Click to collapse
Start with the device off and unplugged from the computer, then hold the volume down button while you plug in the usb. I'm not 100% sure now if that's the correct combo, it's been a while since I did it. If that doesn't work maybe try holding the vol up and plugging in the usb?... but I think that takes you into recovery.
I've been trying different GSIs and found CRdroid runs best, with fewest errors, but I'm not able to make calls, and only sometimes send / recieve mms. Maybe I got something wrong with the phh treble settings? I'm having those issues regardless what GSI I flash.
Phones vary GSI friendly, booted and ran every GSI I flashed!
Does anyone have a backup of the boot_a.img? Long story short i've bricked my phone and i dont have a backup anymore
Really a whole stock rom would be best if you can, thanks in advance
_hollywood_ said:
sent you pm
Click to expand...
Click to collapse
_hollywood_ said:
sent you pm
Click to expand...
Click to collapse
May I also get that pm as well plz?
Rickybud99 said:
May I also get that pm as well plz?
Click to expand...
Click to collapse
Everything you need is in post #7 above
_hollywood_ said:
Before you go any further make a backup with
Click to expand...
Click to collapse
Fist, thank you for publishing this guide!
I bricked my Xperia 1 III today, and I rushed to T-Mobile to get a cheap replacement phone and I got this phone (but I still need root to function),
2nd, you failed to mention that backing up the phone with:
Code:
python mtk rl out
(yes, I wanted to backup the userdata as well) would take more than 4 hours... LOL
threeeye said:
...you failed to mention that backing up the phone would take more than 4 hours... LOL
Click to expand...
Click to collapse
Lol, sorry about that!
edited post #7
FOR THOSE IN NEED OF GUIDANCE HERE IS A GUIDE:
*TMOBILE REVVL 6 PRO 5G(TMAF035G) NORTH AMERICAN(NA)*
Step 1(DRIVERS & STOCK FIRMWARE):
Python
BE SURE TO TICK THE BOX THAT SAYS ADD PYTHON TO PATH and install.
Download and install mediatek drivers from here:
Mediatek USB drivers
Download and install UsbDk from here:
UsbDk
Download MTK client from here:
MTK client
and extract to the desktop. Open the folder and move everything to
C:>Users>[username]>AppData>Local>Programs>Python>Python310
In the 310 directory press Alt + D to highlight your directory path and type CMD and hit enter. This opens a command prompt in the Python310 directory.
In cmd type this command without "":
"python setup.py install"
Go make a sandwich. Preferably turkey with mustard.
When you finish your sandwich, come back and type this command without "":
"python -m pip install -r requirements.txt"
Do not exit the command window.
Step 2(REBOOT INTO EDL MODE TO BACKUP):
Make sure the Phone is OFF and Disconnected
On PC paste the following command to the command window:
"python mtk rl backup --skip userdata"
hold Volume + and Volume - buttons together while connecting usb cable to Phone
Let go of buttons after the backup process begins
Wait for Process to Complete
This processes will take about 30 mins to finish backing up the phone
*****If any error stop the process (Handshake Error, LIB Error,Usb Error,Enumeration Error etc)UNINSTALL AND REINSTALLUSBDk***
Step 3(EXTRACT BOOT.IMG):
Unplug the Phone
Make sure the Phone is OFF
paste the following command to the command window to extract boot image :
"python mtk r boot boot.img"
Hold Volume + and Volume - buttons again to Enter EDL Mode while connecting USB
Let go of buttons and Wait for Proces to Complete
The boot.img will be located in the mtkclient-main folder
Step 4(*MANDATORY*WIPE DATA FROM PHONE):
**This will Erase All userdata and wipe the phone clean***
Unplug the Phone
Make sure the Phone is OFF
Enter the following command into the command window:
"python mtk e metadata,userdata"
Hold Volume + and Volume - buttons again to Enter EDL Mode while connecting USB
Let go of buttons and Wait for Process to Complete
This command will result in a clean wipe of the phone
reboot to android os to make sure phone is still functional
Step 5(UNLOCK BOOTLOADER FOR TMOBILE REVVL 6 PRO 5G):
BOOT into android
Go to Settings then About Phone then Tap Build Number 5 times until Phone say "you are now a developer"
Go to Settings again then System
Go to Developer Options
Select OEM UNLOCKING
Now Make sure Phone is OFF
Enter the following command into the command window on PC:
"python mtk python mtk da seccfg unlock"
Hold Volume + and Volume - buttons again to Enter EDL Mode while connecting USB
This will unlock the bootloader
Let go of buttonsand Wait for process to complete
Reboot phone and the phone should state the following:
On the splash screen you will see system type:
"Orange State
Your device is corrupted. Device has been unlocked and cannot be trusted. Press Power key to boot.
Will Reboot in 5 seconds"
****DO NOT SKIP OTHERWISE YOU WILL BRICK THE PHONE****
Make sure to Power OFF the phone, Unplug from PC and Wipe it again with the following command from earlier pasted into the command window:
"python mtk e metadata,userdata"
Reboot the phone
Press power button once while TMOBILE LOGO on the screen to boot up to android
Step 6(ENABLE ADB DEBUGGING):
Go to Settings again then System
Go to Developer Options
Enable USB Debugging
Connect Phone to PC
Step 7(INSTALL MAGISK AND PATCH BOOT.IMG TO PHONE)
Download Magisk from here:
Magisk
Move it to your phone and install. You'll need to allow the installation from unknown sources.
Got to mtkclient-main folder to locate boot.img that you extracted from the phone earlier
Transfer boot.img to your phone's storage
Open Magisk and Tap Install then Tap Select and Patch a File
select the boot.img
The tap let's begin
Check the Downloads folder in your Phone
Then transfer patched image file to your pc
it should be named "magisk_patched-[######]_#####.img"
Step 9(SETUP ADB ON PC THEN REBOOT TO FASTBOOT):
Download sdk platform tools here:
sdk platform tools
Extract.
***ADD THE PATCHED FILE FROM EARLIER INTO THE EXTRACTED FOLDER***
Navigate to the platform tools folder and type Alt+D to highlight directory and type CMD to open a cmd window in platform tools.
Connect device to pc and choose file transfer.
Enter the following command without ":
"adb devices"
A prompt will appear on your phone, click allow.
Enter the following command (again) without ":
"adb devices"
Enter the following command to reboot into Fastbootd:
"adb reboot fastboot"
Keep the Phone connected to PC
Phone will reboot to Fastbootd
Step 9(FLASH THE PATCHED BOOT IMG):
While Phone is Still Connected
Enter the following commands to command window from previous step:
fastboot flash boot magisk_patched-[######]_#####.img
Step 10(REBOOT THE DEVICE):
Unplug and the device and select reboot system now in fastboot
YOU ARE NOW ROOTED AND BACKED UP
ADDITIONAL STEPS BELOW ON HOW TO RETURN TO STOCK:
Step 1(OPEN THE BACKUP FOLDER OR DOWNLOAD STOCK FIRMWARE):
Download and Extract The Stock Firmware below
Here is the Stock Firmware of the TMOBILE REVVL 6 PRO 5G:
Tmobile Revvl 6 Pro 5G stock firmware:
MT6833_TMOBILE_REVVL_6_PRO_5G_STOCK_FIRMWARE.zip
Shared with Dropbox
www.dropbox.com
Place the Extracted folder into the mtkclient-main folder
Type CMD into the navigation bar in File Explorer
Paste the following command into the command window:
python mtk wl "Paste the directory of the extracted folder"
This process will take up to 30 mins so wait awhile for it to finish
If you made a backup from earlier do the following:
Type CMD into the navigation bar in File Explorer for the mtkclient-main folder
Paste the following command into the command window:
"python mtk wl "Paste the directory of the backup folder"
UNPLUG phone then turn it on should be back to stock
Does anyone have the boot.img? No such image on my computer and yes, I waited almost an hour for this file to be created and got confirmation and its nowhere to be found.
@unsmashed91 run this command from mtkclient-main folder "python mtk r boot boot.img" then hold down vol + & vol - then plug in the phone and let go of the buttons once the command initiates the process. The boot.img file will be in the C:\Desktop\mtkclient-main folder after the command is completed.
or you could download the stock firmware I uploaded and extract my boot.img
_hollywood_ said:
It's starting to look like I need to put together a guide...
I don't know how to do this on a mac. And I didn't like using the GUI on mtkclient, it would recognize the device but sometimes wouldn't connect.
I suggest you download the liveDVD from the mtkclient readme (https://github.com/bkerler/mtkclient), put it on a bootable usb stick and run it from there. This is the setup that worked best for me, better than on windows anyway.
Also, read this (https://github.com/bkerler/mtkclient/issues/79). The REVVL 6 Pro 5G has an A/B setup, and unlocking it is not really explained in the current readme. Basically, you need to find out what slot you are booting from (boot_a or boot_b) and flash accordingly. Don't flash both slots, if something goes wrong you might want a slot to fall back to.
From adb do:
adb reboot fastboot
wait for your phone to boot into fastboot mode, and then:
fastboot getvar current-slot
That should tell you what your current slot is.
In order to get mtkclient to connect I booted into the liveDVD opened up the terminal and entered
python mtk r boot boot.img
It will keep looping, looking for your device and give you time to get your REVVL 6 Pro connected with the right button combo (start with power off, then volume down & plug in usb). When it connects a bunch of information will scroll down the screen. It will look for a "boot" partition but won't find one and will show an error, this is ok though. It's connected and you can begin flashing to your hearts content.
IMPORTANT!
Before you go any further make a backup with:
python mtk rl out
This will dump all partitions to a folder "out" on the computer. Save this somewhere, it is your backup.
You may not want to back up the entire userdata partition (it's huge and may take 4 hours to copy, thanks to @threeeye see post 14 below) so when it gets to that you can hit control+c to stop and then backup any remaining partitions manually with this format:
If you don't want to backup userdata folder then try this:
python mtk rl out --skip userdata
Back up individual partitions with this:
python mtk r partitionToBackup partitionName.bin
example: python mtk r vbmeta_a vbmeta_a.bin
The information for unlocking and rooting is in the links above.
Make a backup BEFORE you unlock and root!
Click to expand...
Click to collapse
How do I perform a Network Unlock on My Revvl 6 Pro 5G
KutiFela said:
@unsmashed91 run this command from mtkclient-main folder "python mtk r boot boot.img" then hold down vol + & vol - then plug in the phone and let go of the buttons once the command initiates the process. The boot.img file will be in the C:\Desktop\mtkclient-main folder after the command is completed.
or you could download the stock firmware I uploaded and extract my boot.img
Click to expand...
Click to collapse
Thanks, I actually got it later that day probably using what you mentioned in a different tutorial. The device is now rooted. Anyone know of any possible opensource ROM of any kind that would work on this phone? Or TWRP? Other than that Root seems to be pretty useless on this thing. I can debloat Google via ADB, but thats about it, no R/W access since its stock with Root.

Categories

Resources