Database Develop

[HOW TO] Rooting the LT25i without unlocking the bootloader (4.0.4)

Rooting the Xperia V: How-To.
(XDA member datagubben requested that I post this here, as per http://forum.xda-developers.com/showpost.php?p=36753824&postcount=19)
Mirrors for the files provided are welcome.
This root method is courtesy of Xperia-Freaks.org, originally developed for the Xperia AX, translated and adapted by me for the LT25i.
Supported firmware: 9.0.1.D.0.10, probably also 9.0.D.0.484.
Reportedly does not work with 9.1.A.0.489.
You will need: TRIMMED-LT25i-SOL21_9.0.F.0.195.ftf (direct link: TRIMMED-LT25i-SOL21_9.0.F.0.195.ftf) or the original LT25i-SOL21_9.0.F.0.195.ftf (this FTF has its loader.sin replaced with LT25i's loader.sin; the trimmed version lacks unneeded files like baseband etc. and as such removes unneeded wipe/exclude options, leaving only the three files we actually need) and an LT25i FTF of your choice; the rootkit (this one is "translated" and edited for convenience; do NOT use regular GX/SX rootkits blindly as they require modification).
Make a backup using the stock Backup and Restore app in case something goes wrong so you can perform a factory reset.
Once rooted, you can safely restore from that backup.
1. Power the phone up in Flashmode (hold Volume down; connect USB). Using Flashtool, flash TRIMMED-LT25i-SOL21_9.0.F.0.195.ftf (or the untrimmed version if you like fiddling with excess checkboxes) using:
kernel.sin
loader.sin
system.sin
(Remember to uncheck the wipe options!)
2. Unplug USB. Turn the phone on. Enable USB debugging if it wasn't enabled previously. Connect the phone via USB again.
3. Unpack the Rootkit and start it (run install.bat). Confirm restore of the backup as requested, and press any key in the cmd window. Press any key again; the device will reboot (twice).
4. Run adb shell. To do it, you can open the rootkit folder in Windows Explorer, and shift-Right Click the "files" folder inside it. Choose "Open command window here". Type "adb shell" in that window.
If you're presented with a prompt that ends with "$", type "su".
The prompt should end with "#" now.
Type "echo ro.kernel.qemu=1 > /data/local.prop" and check if the file was created successfully by typing "ls -l /data/local.prop": below you will find an example of what the output looks like.
Code:
C:\Software\Rootkit\files\> adb shell
[email protected]:/ $ su
su
[email protected]:/ # echo ro.kernel.qemu=1 > /data/local.prop
echo ro.kernel.qemu=1 > /data/local.prop
[email protected]:/ # ls -l /data/local.prop
ls -l /data/local.prop
-rw-r--r-- system system 17 2013-01-15 17:29 local.prop
[email protected]:/ #
5. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
loader.sin
system.sin
(Remember to uncheck the wipe options!)
6. Turn the phone on. Open a command prompt into the files subfolder of the rootkit folder, like in step 4, or return to that window if you haven't closed it.
Type "adb shell". If you get a $ prompt, try "su" to get to "#". Once in adb, type "/data/local/tmp/step2.sh", then "reboot". The phone will reboot.
When it boots back, run adb shell again, and type "/data/local/tmp/step3.sh". You'll witness another reboot or maybe two. You should be rooted now.
Code:
C:\Software\Rootkit\files\> adb shell
[email protected]:/ # /data/local/tmp/step2.sh
/data/local/tmp/step2.sh
0+1 records in
0+1 records out
57 bytes transferred in 0.001 secs (57000 bytes/sec)
[email protected]:/ # reboot
C:\Software\Rootkit\files\> adb shell
[email protected]:/ # data/local/tmp/step3.sh
data/local/tmp/step3.sh
43+1 records in
43+1 records out
22364 bytes transferred in 0.002 secs (11182000 bytes/sec)
1647+1 records in
1647+1 records out
843503 bytes transferred in 0.123 secs (6857747 bytes/sec)
2119+1 records in
2119+1 records out
1085140 bytes transferred in 0.089 secs (12192584 bytes/sec)
7. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
kernel.sin
loader.sin
(Remember to uncheck the wipe options!)
Do NOT skip this step: you need the LT25i kernel on your LT25i system!
8. Let's finish.
We will need adb shell once again. This time, you will need to type a few lines as follows:
Obtain root:
su
Remount /system:
mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
Remove /data/local.prop since it's a security hole; this is important and is normally done by the rootkit's step 3, but we needed to save the file to get to keep root access on our LT25i firmware:
rm /data/local.prop
And finally reboot:
reboot
Code:
G:\Android\LT25i\rootkitGXSX_v3\files>adb shell
[email protected]:/ $ su
su
[email protected]:/ # mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
[email protected]:/ # rm /data/local.prop
rm /data/local.prop
[email protected]:/ # reboot
reboot
Done. You now have busybox, Superuser and su on your stock LT25i firmware.
Remember to clean up those pesky au apps.

Will link to the all in one. Many thanks

Good job translating!
Sent from your backyard...
Slender watches what you do...

I did some n00b experiments:
First I flash kernel.sin-, system.sin and loader.sin from above VL-firmware(Japan), then Bin4ary for root (OK) and back to V-kernel with system.sin again, but I lost root ofcourse :crying:
anyway, the first post is working but I get reboots when deleting something from system/apps/. Any fix?

datagubben said:
First I flash kernel.sin-, system.sin and loader.sin from above VL-firmware(Japan), then Bin4ary for root (OK) and back to V-kernel with system.sin again, but I lost root ofcourse
anyway, the first post is working but I get reboots when deleting something from system/apps/. Any fix?
Click to expand...
Click to collapse
Using the Bin4ry approach should be possible since as far as I know it's the exact same backup/restore timing exploit, you probably need to recreate /data/local.prop though before flashing the V's system.sin. Or do you mean reducing the number of flashing operations to 2? That won't work, we need to regain root on V's system to get it to enable adb root shell with the V's kernel.
If you delete something from /system/app and the phone starts rebooting, it means you just deleted a part of the Timescape framework, I'd presume?

This method will clean up my installed app?

Dude i'm step 6 but I keep getting this prompt.
C:\Users\user\Documents\Development\Xperia\Xperia V\rootkit-sony\files>adb shell
[email protected]:/ $ su
su
/system/bin/sh: su: not found
127|[email protected]:/ $
edit: now do i panic?

Aaron_035, this means you did not obtain root during previous steps.
Did you verify that /data/local.prop was successfully created during step 4?

Gasai Yuno said:
Aaron_035, this means you did not obtain root during previous steps.
Did you verify that /data/local.prop was successfully created during step 4?
Click to expand...
Click to collapse
Found my mistake, I'm going to try again Fifth time!
Edit: Done! Love you dude.

All I want is just to root the phone. Why is this flash some japanese firmware to my phone!
Yes I am a n00b.

sunny7day said:
All I want is just to root the phone. Why is this flash some japanese firmware to my phone!
Yes I am a n00b.
Click to expand...
Click to collapse
Because "some japanese" firmware is with exploit before it was fixed by Sony

where can I download official hong kong firmware? I am stuck on step 5.

sunny7day said:
where can I download official hong kong firmware? I am stuck on step 5.
Click to expand...
Click to collapse
I haven't seen HK firmware beeing uploaded here on XDA yet, but you can make yourself with PPC + flashtool (its not difficult, look in the forum how to do).

I just got the hk firmware and finished all the steps in the first post, now i am rooted.
Yes it is rooted but it left alot of unwanted au japanese sofware in my phone.
It should be noted in the first line in the first post of this thread.
But thank you anyways.
So, I have to wipe and re-flash my stock HK firmware.
Are there any other way to root my Xperia V without flashing other firmware?

If you did everything according to the howto I posted, you would be running your stock HK firmware, rooted.
All those au apps left after flashing back the stock LT25i firmware can be easily uninstalled. They're in /data/app, not in /system/app.
And, quoting the last line from the howto I posted,
Remember to clean up those pesky au apps.
Click to expand...
Click to collapse
sunny7day said:
Are there any other way to root my Xperia V without flashing other firmware?
Click to expand...
Click to collapse
You're welcome to find one and share it with us. Believe me, I'd rather do something simple than bother with all this reflashing and app removal.
Also, if you really want it simple, unlock your bootloader already.

Gasai Yuno said:
If you did everything according to the howto I posted, you would be running your stock HK firmware, rooted.
All those au apps left after flashing back the stock LT25i firmware can be easily uninstalled. They're in /data/app, not in /system/app.
And, quoting the last line from the howto I posted,
You're welcome to find one and share it with us. Believe me, I'd rather do something simple than bother with all this reflashing and app removal.
Also, if you really want it simple, unlock your bootloader already.
Click to expand...
Click to collapse
First of all, thanks for doing the tutorial for us with locked bootloader. :good: :highfive:
a) But you need a ftf-file in order to flash back the original kernel and HK is not available as a download here on XDA yet (If you don't do it yourself).
b) Not everybody has a Ph.d in translation and "pesky" is rarely used by less educated, at least in my case.
c) I have an app_log.sin that bothers me, when trying to flash back the LT25i kernel and system, does it matter?
d) Will this work when we get Jelly Bean?
Ps. Watashi wa Tokyo no Yukigaya-Otsuka de sunde ima****a. Boku no okusan wa nihonjin de****a. Demo owari desu :crying:
Ps. ps. The language filter on XDA removed S and H and I and T. WTF!

datagubben said:
First of all, thanks for doing the tutorial for us with locked bootloader. :good: :highfive:
a) But you need a ftf-file in order to flash back the original kernel and HK is not available as a download here on XDA yet (If you don't do it yourself).
Click to expand...
Click to collapse
And if you do please PLEASE share it as we could do with it here
b) Not everybody has a Ph.d in translation and "pesky" is rarely used by less educated, at least in my case.
Click to expand...
Click to collapse
not a scooby doo fan then?
c) I have an app_log.sin that bothers me, when trying to flash back the LT25i kernel and system, does it matter?
d) Will this work when we get Jelly Bean?
Click to expand...
Click to collapse
There is no way to know untill it lands on our devices, Sony can(and do) monitor what we do on this forum and, allthough they are quite dev friendly, do find way to fix the loopholes we exploit to get root access. They want us only to get that via an official unlocking from their site. You cant blame them for that, they are a big company and have lots of ways of losing contracts if they cant secure their system.
But you can be your bottom dollar tha if they close that exploit, we will find another way
[/quote]
Ps. Watashi wa Tokyo no Yukigaya-Otsuka de sunde ima****a. Boku no okusan wa nihonjin de****a. Demo owari desu :crying:
Click to expand...
Click to collapse
I know this is a personal message but the rules state this is an english speaking forum. You can post in other languages but an english translation is always required. (I know you dont need this next bit but..) Please use google translate if you have trouble with getting an english translation
Ps. ps. The language filter on XDA removed S and H and I and T. WTF!
Click to expand...
Click to collapse
lol!

I can only post the ftf.firmware from operators in Nordic/Sweden:
http://www.swedroid.se/forum/showthread.php?t=86895
What about "app_log.sin", does it matter? Cause it is flashed together with the Kernel.sin and system.sin
I don't watch Scooby Doo.
I speak japanese and I said "I lived in Tokyo but not now".
S,h,i,t

datagubben said:
I can only post the ftf.firmware from operators in Nordic/Sweden:
http://www.swedroid.se/forum/showthread.php?t=86895
Click to expand...
Click to collapse
I meant the other guy, in response to your post about making his own ftf, if he does, he should post it and share
What about "app_log.sin", does it matter? Cause it is flashed together with the Kernel.sin and system.sin
Click to expand...
Click to collapse
not sure
I don't watch Scooby Doo.
Click to expand...
Click to collapse
google it and watch, a clasic kids cartoon with a classic catchphrase of "I would have got clean away with it, if it wasnt for you PESKY kids!
I speak japanese and I said "I lived in Tokyo but not now".
Click to expand...
Click to collapse
thanks
S,h,i,t
Click to expand...
Click to collapse
I gathered that

datagubben said:
c) I have an app_log.sin that bothers me, when trying to flash back the LT25i kernel and system, does it matter?
d) Will this work when we get Jelly Bean?
Click to expand...
Click to collapse
c) Make a copy of your stock FTF file. Open the copy in Total Commander or 7-Zip. Delete everything except the manifest, loader.sin, kernel.sin and system.sin. No more app_log.sin appearing in Flashtool, yay!
d) Depends on two factors.
First, if the 4.1 update will replace the keys used to sign .sin files, removing compatibility with older firmware, this approach will be unavailable. This is what Motorola did with the DROID 2/X/2 GLOBAL.
Second, provided they don't replace the bootloader, and we can still flash back to 4.0: whether we will be able to retain root during firmware update (via OTA RootKeeper or whatever else exists).
As for the language filter, use Kunrei romaji (you know, the system where you use “si” instead of “shi” for し and “ti” instead of “chi” for ち) to work around it.

XT1092 radio

Hi Guys, I flashed a wrong radio by accident, could someone be so nice to extract his radio from a XT1092 and send it to me? Theres a beer in it for you

if you can tell me how to extract i will do it for you.
and, if you can help me, i need the system image of the build kxe21.187-42. should be yours as well.
i made another mistake with the messaging app, and now i have to reset all my moto x XT1092 (european)

Andariel636 said:
if you can tell me how to extract i will do it for you.
and, if you can help me, i need the system image of the build kxe21.187-42. should be yours as well.
i made another mistake with the messaging app, and now i have to reset all my moto x XT1092 (european)
Click to expand...
Click to collapse
You have to have USB Debugging enabled, then check adb for your device, type the following:
1. adb shell
2. su
2.1 Grant su permission on your phone
3. dd if=/dev/block/mmcblk0p7 of=/sdcard/modem.bin bs=4096
4. Choose a file explorer you like and grab the modem from the sd card. its probably in /sdcard. +
If you could do that, i would be SOOOOOOOOOOOOO thankful. I dont have the System Image, i could give you a nandroid backup though

Tomorrow i try this. Is possible to do this only with titanium backup?
Otherwise i have to find a windows pc, i have only a macbook.

Radixtrator said:
Hi Guys, I flashed a wrong radio by accident, could someone be so nice to extract his radio from a XT1092 and send it to me? Theres a beer in it for you
Click to expand...
Click to collapse
Hi my friend!
Don't know if this help, but try to extract from the sbf image or reinstall the entire rom again.
Try this link:
http://sbf.droid-developers.org/phone.php?device=37
Sent from my XT1097 using XDA Premium HD app

Radixtrator said:
Hi Guys, I flashed a wrong radio by accident, could someone be so nice to extract his radio from a XT1092 and send it to me? Theres a beer in it for you
Click to expand...
Click to collapse
Here you go, had to put it in a folder (but extract, it's not flashable), hope it helps.

Andariel636 said:
Tomorrow i try this. Is possible to do this only with titanium backup?
Otherwise i have to find a windows pc, i have only a macbook.
Click to expand...
Click to collapse
If you have adb installed on your macbook, you can do this from the terminal
fnut6969 said:
Here you go, had to put it in a folder (but extract, it's not flashable), hope it helps.
Click to expand...
Click to collapse
Sadly it didnt.. Your phone was an US phone correct? It stil shows no Sim no reception.. IMEI is gone too from the info screen
Could you try doing this for me ?
su (press Return)
dd if=/dev/block/mmcblk0p10 of=/sdcard/modemst1.bin bs=512 (press Return)
dd if=/dev/block/mmcblk0p11 of=/sdcard/modemst2.bin bs=512 (press Return)
I remember my script deleted thos, and maybe that will do the trick

Radixtrator,
What exactly you flashed as wrong radio: NON-HLOS.bin ? fsg.mbn? Both ? Please explain in more details.
And how you flashed modem file, provided by fnut6969?

Radixtrator said:
You have to have USB Debugging enabled, then check adb for your device, type the following:
1. adb shell
2. su
2.1 Grant su permission on your phone
3. dd if=/dev/block/mmcblk0p7 of=/sdcard/modem.bin bs=4096
4. Choose a file explorer you like and grab the modem from the sd card. its probably in /sdcard. +
If you could do that, i would be SOOOOOOOOOOOOO thankful. I dont have the System Image, i could give you a nandroid backup though
Click to expand...
Click to collapse
Here it is!
a nandroid backup shuld be usefull? or i can use it to extract only the messaging app?

Radixtrator said:
If you have adb installed on your macbook, you can do this from the terminal
Sadly it didnt.. Your phone was an US phone correct? It stil shows no Sim no reception.. IMEI is gone too from the info screen
Could you try doing this for me ?
su (press Return)
dd if=/dev/block/mmcblk0p10 of=/sdcard/modemst1.bin bs=512 (press Return)
dd if=/dev/block/mmcblk0p11 of=/sdcard/modemst2.bin bs=512 (press Return)
I remember my script deleted thos, and maybe that will do the trick
Click to expand...
Click to collapse
My apologies, I now notice you were looking for the XT1092 modem, I guess that shows how important it is to actually read posts thoroughly.

fnut6969 said:
My apologies, I now notice you were looking for the XT1092 modem, I guess that shows how important it is to actually read posts thoroughly.
Click to expand...
Click to collapse
No problem

Radixtrator said:
Hi Guys, I flashed a wrong radio by accident, could someone be so nice to extract his radio from a XT1092 and send it to me? Theres a beer in it for you
Click to expand...
Click to collapse
I thought the factory images where available on the motorola site but I see now that they aren't. Maybe you can tell me how to create a system dump to return to stock (I have an xt1092)

godutch said:
I thought the factory images where available on the motorola site but I see now that they aren't. Maybe you can tell me how to create a system dump to return to stock (I have an xt1092)
Click to expand...
Click to collapse
The absolutely most awesome thing you could do is give me a Full Nandroid Backup ( without data) especially including the EFS Partition, because i believe thats whats wrong with my phone... That would be incredibly awesome

I don't want to unluck just yet. I didn't even know btw moto has an efs partition too, I can't see it

godutch said:
I don't want to unluck just yet. I didn't even know btw moto has an efs partition too, I can't see it
Click to expand...
Click to collapse
In twrp you can definitely select EFS as a backup able partition

Radixtrator said:
In twrp you can definitely select EFS as a backup able partition
Click to expand...
Click to collapse
I can't boot twrp witp a locked bootloader and I am sorry but I don't want to publish my efs, my imei might get blocked but I can try to make a system dump

i did find this thread http://forum.xda-developers.com/showthread.php?t=1960918
or this one:
http://forum.xda-developers.com/showpost.php?p=45881991&postcount=86

godutch said:
i did find this thread http://forum.xda-developers.com/showthread.php?t=1960918
or this one:
http://forum.xda-developers.com/showpost.php?p=45881991&postcount=86
Click to expand...
Click to collapse
Well the fella in the first link seemed to have fixed it by flashing the Original Firmware...
The Problem is, there is no german firmware ANYwhere on the Internet.

Radixtrator said:
Well the fella in the first link seemed to have fixed it by flashing the Original Firmware...
The Problem is, there is no german firmware ANYwhere on the Internet.
Click to expand...
Click to collapse
Well one suggestion is to factory reset without the sim and set up the phone with no sim. It won't hurt to try

can anyone help me root my coolpad defiant?

Hello guys im new to these forums an did not know where to post at, i got a coolpad defiant (Not the best phone) an i wanted to root it and was seeing if anyone here maybe able to help me out?? ive tried to use kingRoot but not luck on using that method if anyone got any suggestions id really like that, thanks again!

rebz408 said:
Hello guys im new to these forums an did not know where to post at, i got a coolpad defiant (Not the best phone) an i wanted to root it and was seeing if anyone here maybe able to help me out?? ive tried to use kingRoot but not luck on using that method if anyone got any suggestions id really like that, thanks again!
Click to expand...
Click to collapse
Any luck?

Thank you very much

Jayfreshh said:
Any luck?
Click to expand...
Click to collapse
Did you ever find anything for this device?

remarkablecow913 said:
Did you ever find anything for this device?
Click to expand...
Click to collapse
Nothing as yet still searching, need to do some work on the phone but nothing to start with ?

Jayfreshh said:
Nothing as yet still searching, need to do some work on the phone but nothing to start with ?
Click to expand...
Click to collapse
I know. I can't find Any resources for this phone. I might get brave And see if I can find twrp for same chipset and try.
---------- Post added at 04:24 AM ---------- Previous post was at 04:23 AM ----------
remarkablecow913 said:
I know. I can't find Any resources for this phone. I might get brave And see if I can find twrp for same chipset and try.
Click to expand...
Click to collapse
Have you tried unlocking bootloader? That's probly most important. If it's locked there is no point tying

remarkablecow913 said:
I know. I can't find Any resources for this phone. I might get brave And see if I can find twrp for same chipset and try.
---------- Post added at 04:24 AM ---------- Previous post was at 04:23 AM ----------
Have you tried unlocking bootloader? That's probly most important. If it's locked there is no point tying
Click to expand...
Click to collapse
Okay if anything works out when you try let me know
The bootloader can be opened in developer mode for this devise if I'm correct

You can unlock bootloader in developer options but from there. I'm stuck and really want to get root and see what "deleted" files I can recover from a factory reset. Anybody ever try twrp for same chipset like someone was talking about doing?

rebz408 said:
Hello guys im new to these forums an did not know where to post at, i got a coolpad defiant (Not the best phone) an i wanted to root it and was seeing if anyone here maybe able to help me out?? ive tried to use kingRoot but not luck on using that method if anyone got any suggestions id really like that, thanks again!
Click to expand...
Click to collapse
[Update Anyone?]
I picked up a Coolpad 3632a yesterday and I've been trying to ROOT it for quite a while nowl; trying Kingroot v5.3.7 without PC, and KingRoot 3.5 on PC both failed to ROOT. I've been out of the loop for quite a while regarding Android devices and OS - the last Android Phone i owned was the LG G3 if i remember correctly. According to the available info I've found searching for Rooting Options for the coolpad 3632a it all seemed almost %100 easily rootable with or without PC mainly using Kingroot.
If anyone was successful in rooting this device (Coolpad 3632a / Android 7.1.1) - please let me know, my main goal is to find a good custom ROM and load it replacing the Bloat/Malware filled phone!
Thanks again to anyone who has taken the time to read and respond with any news (good or bad) on getting this device successfully rooted.
-=Mac3lite=-

Bootloader Unlock = Not happening on this device. At least yet.
Development = Absolutely none. Means no TWRP/ROMS etc.
Root = Nothing as of 10/10/2018.

phonecapone said:
Bootloader Unlock = Not happening on this device. At least yet.
Development = Absolutely none. Means no TWRP/ROMS etc.
Root = Nothing as of 10/10/2018.
Click to expand...
Click to collapse
EDIT: I just obtained temporary root.. seeing if it sticks.

Root for Coolpad Devices
NOTE: I have not tried this on your device but I have tried it on my Coolpad Mega 2.5 D , Coolpad Mega 3 and Coolpad Note 5 lite. You might try to see if this works on your Coolpad Device.
Requirements :
A working ADB setup
Procedureownload the Given Zip File and Extract Them in a folder.
CONNECT YOUR DEVICE TO PC
ALLOW USB DEBUGGING IN DEVELOPER SETTINGS:
OPEN THE FOLDER WHERE YOU EXTRACTED THE FILES AND RUN CMD.BAT
COPY AND PASTE THESE CODES ONE BY ONE IN ADB ....
Or RUN THE SCRIPT IN THE GIVEN FILE
Quote:
adb wait-for-device
Quote:
adb install magisksu.apk
Quote:
adb install rootcheck.apk
Quote:
adb install root.apk
Quote:
adb shell monkey -p com.yulong.openrp -v 500
Quote:
adb reboot
WAIT TILL THE DEVICE BOOTS
OPEN MAGISK APP & COPY AND PASTE THIS CODE :
Quote:
adb shell mount -o remount,rw /system
NOW :
Quote:
adb push magisk /system/bin
IF SUCCESSFUL, TYPE:
Quote:
adb shell magisk su
RUN THIS COMMAND AFTER EVERY REBOOT TO AGAIN GET ROOT ;
Quote:
adb shell magisk su
OR
Update magisk for permanent root.
Download::::::::
https://drive.google.com/file/d/1e1atRg7PQ2JyI8W88g1E9L9NihdGEjqO/view?usp=drivesdk

Yeah that's already what I tried previous to your post. Had zero luck. =/ Also after that point forward for some reason when i try to fastboot i cannot issue any commands and it displays "Secure Phone" at the bottom left of the screen. Whether or not it was due to this I do not know for certain.

phonecapone said:
Yeah that's already what I tried previous to your post. Had zero luck. =/ Also after that point forward for some reason when i try to fastboot i cannot issue any commands and it displays "Secure Phone" at the bottom left of the screen. Whether or not it was due to this I do not know for certain.
Click to expand...
Click to collapse
Does fastboot detect your device ? Or just the commands fail even after detection ?
Also , when your phone boots , does MTKlogger automatically start ?

dwaipayan774 said:
Does fastboot detect your device ? Or just the commands fail even after detection ?
Also , when your phone boots , does MTKlogger automatically start ?
Click to expand...
Click to collapse
It gets detected just the commands fail. There is a white "Secure Phone" line of text across the bottom left. Im going to try loading an sdcard to see if it will auto update anything.
I can't even use Flash Programmer in QFIL or many other apps in QDLOADER 9008 mode. I know the firehose is the correct one yet it never wants to boot. I don't know why.
MTKLogger might have before unless i'm thinking of a different handset here. But as of the moment it doesn't.

No luck with the sdcard. I think it's about time to factory reset this device and put it up for sale. I'll post the firmware here shortly.

Here is the firmware - https://forum.xda-developers.com/android/general/rom-coolpad-defiant-3632a-stock-t3855692

Temporary Root
phonecapone said:
Bootloader Unlock = Not happening on this device. At least yet.
Development = Absolutely none. Means no TWRP/ROMS etc.
Root = Nothing as of 10/10/2018.
Click to expand...
Click to collapse
What did you do? I've been trying for months now.

dwaipayan774 said:
NOTE: I have not tried this on your device but I have tried it on my Coolpad Mega 2.5 D , Coolpad Mega 3 and Coolpad Note 5 lite. You might try to see if this works on your Coolpad Device.
Requirements :
A working ADB setup
Procedureownload the Given Zip File and Extract Them in a folder.
CONNECT YOUR DEVICE TO PC
ALLOW USB DEBUGGING IN DEVELOPER SETTINGS:
OPEN THE FOLDER WHERE YOU EXTRACTED THE FILES AND RUN CMD.BAT
COPY AND PASTE THESE CODES ONE BY ONE IN ADB ....
Or RUN THE SCRIPT IN THE GIVEN FILE
Quote:
adb wait-for-device
Quote:
adb install magisksu.apk
Quote:
adb install rootcheck.apk
Quote:
adb install root.apk
Quote:
adb shell monkey -p com.yulong.openrp -v 500
Quote:
adb reboot
WAIT TILL THE DEVICE BOOTS
OPEN MAGISK APP & COPY AND PASTE THIS CODE :
Quote:
adb shell mount -o remount,rw /system
NOW :
Quote:
adb push magisk /system/bin
IF SUCCESSFUL, TYPE:
Quote:
adb shell magisk su
RUN THIS COMMAND AFTER EVERY REBOOT TO AGAIN GET ROOT ;
Quote:
adb shell magisk su
OR
Update magisk for permanent root.
Download::::::::
https://drive.google.com/file/d/1e1atRg7PQ2JyI8W88g1E9L9NihdGEjqO/view?usp=drivesdk
Click to expand...
Click to collapse
Any chance on a repost of the file?

dwaipayan774 said:
Root for Coolpad Devices
NOTE: I have not tried this on your device but I have tried it on my Coolpad Mega 2.5 D , Coolpad Mega 3 and Coolpad Note 5 lite. You might try to see if this works on your Coolpad Device.
Requirements :
A working ADB setup
Procedureownload the Given Zip File and Extract Them in a folder.
CONNECT YOUR DEVICE TO PC
ALLOW USB DEBUGGING IN DEVELOPER SETTINGS:
OPEN THE FOLDER WHERE YOU EXTRACTED THE FILES AND RUN CMD.BAT
COPY AND PASTE THESE CODES ONE BY ONE IN ADB ....
Or RUN THE SCRIPT IN THE GIVEN FILE
Quote:
adb wait-for-device
Quote:
adb install magisksu.apk
Quote:
adb install rootcheck.apk
Quote:
adb install root.apk
Quote:
adb shell monkey -p com.yulong.openrp -v 500
Quote:
adb reboot
WAIT TILL THE DEVICE BOOTS
OPEN MAGISK APP & COPY AND PASTE THIS CODE :
Quote:
adb shell mount -o remount,rw /system
NOW :
Quote:
adb push magisk /system/bin
IF SUCCESSFUL, TYPE:
Quote:
adb shell magisk su
RUN THIS COMMAND AFTER EVERY REBOOT TO AGAIN GET ROOT ;
Quote:
adb shell magisk su
OR
Update magisk for permanent root.
Download::::::::
https://drive.google.com/file/d/1e1atRg7PQ2JyI8W88g1E9L9NihdGEjqO/view?usp=drivesdk
Click to expand...
Click to collapse
hey the link is dead. could you make a new link?

Portin MIUI TO MIA1 -Need Help

Guys i have plans to port MIUI TO MI A1 but i need help from users from 5X can someone find and send me partition layout for MI 5X so if i get that i can easy make script that can make backup of yours partitions so we can flash at our MI A1 then we can boot MIUI to MI A1

How can I get partition layout? And afaik, the bootloader is different too...

shreyas_kulkarni said:
How can I get partition layout? And afaik, the bootloader is different too...
Click to expand...
Click to collapse
Boot to recovery, connect to computer and type:
Code:
1. adb shell
2. cat /proc/mtd
or. 3. cat /proc/partitions
Update if it works or not.

cat /proc/partitions Worked...
I've attached the appended output of cat... I can help you if you need anything more.
udaan said:
Boot to recovery, connect to computer and type:
Code:
1. adb shell
2. cat /proc/mtd
or. 3. cat /proc/partitions
Update if it works or not.
Click to expand...
Click to collapse

shreyas_kulkarni said:
cat /proc/partitions Worked...
I've attached the appended output of cat... I can help you if you need anything more.
Click to expand...
Click to collapse
Cool! Can you type :
Code:
parted /dev/block/mmcblk0 print
and share results?

No parted applet
udaan said:
Cool! Can you type :
Code:
parted /dev/block/mmcblk0 print
and share results?
Click to expand...
Click to collapse

shreyas_kulkarni said:
No parted applet
Click to expand...
Click to collapse
did you do adb shell?
may be try
adb shell
df
Or try : cat /proc/emmc
^^'

Try this
Code:
adb shell
ls -al /dev/block/platform/soc/7824900.sdhci/by-name

Alek Dev said:
Try this
Code:
adb shell
ls -al /dev/block/platform/soc/7824900.sdhci/by-name
Click to expand...
Click to collapse
Hi, will you please make a script from his output to format my phone's memory? My 5x came with a1 ported rom and when I flashed the updated version it got bricked. I can flash original 5x ROM using EDL and I tried all tutorials on the Internet but the roms are not booting. Also the bootloader is locked, and there is no way I can unlock it. So I think your project will help me.
Thank you for reading.

Here you go...
Alek Dev said:
Try this
Code:
adb shell
ls -al /dev/block/platform/soc/7824900.sdhci/by-name
Click to expand...
Click to collapse

shreyas_kulkarni said:
Here you go...
Click to expand...
Click to collapse
Thanks You have Root right? if you have later when i go home i will do script to backup your partitions and please upload it[emoji41]
Sent from my Mi A1 using Tapatalk

HI MI 5X users i just made the Backup script just download and run the Backup.bat script connect the device allow usb debugging you need root also and just wait the program will backup the partitions that i need and script will make a folder mybackup in your internal storage after finish reboot the phone and connect to pc copy the folder and create zip and upload it thanks

Guys we need help from MI 5X user who use MIUI can someone make data backup after you pass Verify your device and don't activate find device so we can restore it and we will pass it ty

Alternative method of unlocking the bootloader - without code from HUAWEI

Unlocking the bootloader and rooting will expose you to a loss of warranty.
You do everything at your own risk.​
The method is to pull the unlock code from the phone. For this we will need root. You can only root for a blocked bootloader on Android 5.0. So:
1. If you do not have Android 5.0, do a downgrade.
How to go on Android 5.0 (downgrade):
1. Download Rollback and B170,
2. Unpack the rollback and upload update.app to the dload folder on your phone,
3. Turn off the phone, then hold vol +, vol- and power. The phone will install a rollback
4. Unpack B170 and put in the dload folder on your phone,
5. Turn off the phone, then hold vol +, vol- and power. The phone will install B170.
2. Root your phone with KingRoot,
3. Download Minimal ADB and fastboot, connect the phone in USB Debugging mode and start the ADB,
4. Enter the command:
Code:
adb shell
And then:
Code:
su -c "grep -m1 -aoE 'WVLOCK.{14}[0-9]{16}' /dev/block/mmcblk0p7 |grep -aoE '[0-9]{16}'"
You will receive the unlock code. Copy it.
5. Press ctrl + d and Enter:
Code:
adb reboot bootloader
6. Enter:
Code:
fastboot oem unlock ****************
(paste your code in place of the stars)
And that's it. You have the bootloader unlocked
Originally posted by Baron Rafau in forum.android. pl site​

Hi, i cannot get root on Lollipop, can you help me? I used last kingroot

hey man could u be more specific did u root ur mob using the app or pc version

I used Kingroot to Root my phone on EMUI 3.1, but I found that I can't flash anything in the "UNLOCKED" bootloader.
So I guess, we need to re-unlock it after getting Root by using Kingroot. Maybe we can use this way to get unlock code on a Rooted device:
Open terminal and type "su"
and type the following command one by one:
Code:
cd /storage/emulated/0
mkdir -p PartitionBackup
cd PartitionBackup
dd of=/storage/emulated/0/PartitionBackup/nvme if=/dev/block/platform/hi_mci.0/by-name/nvme
dd of=oeminfo if=/dev/block/platform/hi_mci.0/by-name/oeminfo
strings nvme | grep WVDEVID -B 1
The method comes from: https://blog.csdn.net/autohacker/article/details/50715639
Maybe you can try it.
Sent from my HUAWEI CHM-TL00H using XDA Labs

zhaozihanzzh said:
I used Kingroot to Root my phone on EMUI 3.1, but I found that I can't flash anything in the "UNLOCKED" bootloader.
So I guess, we need to re-unlock it after getting Root by using Kingroot. Maybe we can use this way to get unlock code on a Rooted device:
Open terminal and type "su"
and type the following command one by one:
Code:
cd /storage/emulated/0
mkdir -p PartitionBackup
cd PartitionBackup
dd of=/storage/emulated/0/PartitionBackup/nvme if=/dev/block/platform/hi_mci.0/by-name/nvme
dd of=oeminfo if=/dev/block/platform/hi_mci.0/by-name/oeminfo
strings nvme | grep WVDEVID -B 1
The method comes from: https://blog.csdn.net/autohacker/article/details/50715639
Maybe you can try it.
Sent from my HUAWEI CHM-TL00H using XDA Labs
Click to expand...
Click to collapse
How did you get those crtl, alt, etc.. stuff on terminal?

keikari said:
I used Kingroot to Root my phone on EMUI 3.1, but I found that I can't flash anything in the "UNLOCKED" bootloader.
So I guess, we need to re-unlock it after getting Root by using Kingroot. Maybe we can use this way to get unlock code on a Rooted device:
Open terminal and type "su"
and type the following command one by one:
How did you get those crtl, alt, etc.. stuff on terminal?
Click to expand...
Click to collapse
I use Termux. Open Termux and swipe from left to open the panel, then longpress the button "KEYBOARD".
Sent from my HUAWEI CHM-TL00H using XDA Labs

How to use that

did this method works?

Good post!, especially for those who didn't get their code in time. Goddamn it Huawei

JpegXguy said:
Good post!, especially for those who didn't get their code in time. Goddamn it Huawei
Click to expand...
Click to collapse
Then, does it works for you?

luxor100 said:
Then, does it works for you?
Click to expand...
Click to collapse
It should work...

Has anybody tried this on a P20/P20 Pro?

darkfligher said:
Has anybody tried this on a P20/P20 Pro?
Click to expand...
Click to collapse
The rom is for p8lite only

It works! Tried this method on P8 lite (ALE-L21). Thanks.

I confirm too this method to get my bootloader unlock code.
But i had "Software update error" when trying to boot and update with theses files, so i had to use update files from huaweifirmware and update from SD card and via *#*#2846579#*#*
Thanks
F*** Huawei , they replied my mail but refused to send me code ...

Can you please share links for the rollback and B170 firmware?I found the links i downgraded successfully but the su starting command is not responding any ideas?

@Nickkal
I've used links from this guide: https://mrniftaliyev.wordpress.com/...owngrade-to-android-5-0-from-marshmallow-6-0/
It's for dual SIM european version only.

falze said:
@Nickkal
I've used links from this guide: https://mrniftaliyev.wordpress.com/...owngrade-to-android-5-0-from-marshmallow-6-0/
It's for dual SIM european version only.
Click to expand...
Click to collapse
Dear falze thank you very much i found the correct files, but the su command isn't accepted at the cmd to fully unlock the bootloader

Get_bootloader_code.bat
Hi!
I read the post and is great.
To help i try to do a bat file to get it easy but i can´t try it... i brick phone screen last night :'( , and was already unlocked.
Can same one try it and tell if works? I have some doubts on adb line...
Thanks!
Unzip it and execute Get_bootloader_code.bat
.

Another way to get code!?
Hi!
I don´t know if will work but there it goes!
Still need to downgrade to Android 5!
Need rollback rom and B170 Full rom, you can get it from the links bellow:
Rollback rom:
https://mega.nz/#!fX4VVSBY!ITukaa58zBXATeABcyZR-5OFteomiy1MVZxz3NkXy-4
B170 Android 5:
https://mega.nz/#!7P5B3C5D!8nuH1XcDyPuhIqyRd0FsjDsqLigdrP1lrnGSXr6tJ3c
Need ROOT and ADB.
Create a folder in c:\ with name NVME
Enable debug mode
Use ADB and type adb shell
su
dd if=/dev/block/mmcblk0p7 of=/sdcard/NVME.img bs=4096
exit
adb pull /sdcard/NVME.img C:\NVME
you will get NVME.img on C:\NVME in PC
With a hexeditor open the image and check for WVLOCK , it will have a big number next, i think is bootloader unlock code.
My phone have screen broked but i boot on bootloader and try the code and it says:
FAILED ( remote: already fastboot unlocked )
So i think is the code!
What you say!?
.