Develop Bugs

[SGY] Openline & reNetLock [Revised] Updated [Tested] + ScreenShots

DONT COPY PASTE TO OTHER FORUM WITHOUT ASKING THE AUTHOR
I HATE NOOB LEECHERS
GIVE PROPER CREDITS TO THE DEV and OP
OPENLINE YOUR SGY
Thanks to sir DOKY73 for this adb shell script..
BY sir DOKY73
I explicitly warn again everyone,
If you do not really understand what you do inside the shell, then wait for some!
YOU CAN POTENTIALLY HARM YOUR DEVICE!
If you doing something wrong with bml15, you might cause unrecoverable issues
Click to expand...
Click to collapse
Click to expand...
Click to collapse
Code:
Requirements:
1: [URL="http://www.samsung.com/us/support/downloads"]SAMSUNG DRIVER[/URL] or [URL="http://www.samsung.com/us/kies/"]SAMSUNG KIES[/URL]
2: [URL="http://www.oracle.com/technetwork/java/javase/downloads/jdk-7u3-download-1501626.html"]JAVA DEV KIT[/URL]
3: [URL="http://developer.android.com/sdk/index.html"]ANDROID SDK[/URL]
4: Root Your SGY [URL="visit me"]visit me[/URL] or [URL="http://forum.xda-developers.com/showthread.php?t=1534510"]visit me too[/URL]
Click to expand...
Click to collapse
STEPS:
1.>Connect your SGY to the PC, using the USB cable.
2.>Access the command prompt in your Windows computer. In order to do that, click on Start button, and in the search field, type ‘cmd.exe’. Once found, open it. In this window you need to head to the folder where Android SDK has been installed.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
3.>enter this codes on cmd
[note: when typing commands,,please wait for the # to show in the cmd before typing another command]
[note: start and ADB shell session into your phone by 'ADB shell' in Windows, './adb shell' in linux then copy line by line the following. If you got error, then stop, and report the issue!]
Code:
ADB shell
su #<- Check phone screen to grant root access, and wait for # prompt in shell
mkdir /sdcard/SGYunlock #<-check if the folder has been created, and no error
stop #<-the phone will freeze, It's OK!
dd if=/dev/bml15 of=/sdcard/SGYunlock/bml15.img.SAVE #<- Do it ONLY ONCE!!!!
dd if=/dev/zero bs=1 count=16 of=/dev/bml15 seek=524360
dd if=/dev/zero bs=1 count=1 of=/dev/bml15 seek=525392
start #<-the phone will restart
exit #<- exit from root shell
exit #<- exit from shell
Click to expand...
Click to collapse
4.>restart your SGY if it did not restart automatically
TO reNetLock TO DEFAULT NETWORK PROVIDER
Code:
Requirements:
1: [URL="http://www.samsung.com/us/support/downloads"]SAMSUNG DRIVER[/URL] or [URL="http://www.samsung.com/us/kies/"]SAMSUNG KIES[/URL]
2: [URL="http://www.oracle.com/technetwork/java/javase/downloads/jdk-7u3-download-1501626.html"]JAVA DEV KIT[/URL]
3: [URL="http://developer.android.com/sdk/index.html"]ANDROID SDK[/URL]
4: Root Your SGY [URL="visit me"]visit me[/URL] or [URL="http://forum.xda-developers.com/showthread.php?t=1534510"]visit me too[/URL]
5:
Click to expand...
Click to collapse
STEPS:
1.>Connect your SGY to the PC, using the USB cable.
2.>Access the command prompt in your Windows computer. In order to do that, click on Start button, and in the search field, type ‘cmd.exe’. Once found, open it. In this window you need to head to the folder where Android SDK has been installed.
3.>enter this codes on cmd
Code:
ADB shell
su #<- Check phone screen to grant root access, and wait for # prompt in shell
stop #<-the phone will freeze, It's OK!
dd if=/sdcard/SGYunlock/bml15.img.SAVE of=/dev/bml15
start #<-the phone will restart, put default SIM and use!
exit #<- exit from root shell
exit #<- exit from shell
Click to expand...
Click to collapse
4.>restart your SGY if it did not restart automatically
Credits to:
Doky713
Codeshark
Izghitu
ALbavizion
Mikstev
ORIGINAL DEV
OPENLINE SOURCE THREAD
DOWNOAD OLD THREAD HERE
To remove Network Subnet Lock by Mikstev
note: do this after openlining your SGY
back up the original bml15.img.SAVE or rename SGYunlock folder to SGYunlock1 before proceeding
Code:
cmd.exe
ADB shell
su #<- Check phone screen to grant root access, and wait for # prompt in shell
mkdir /mnt/sdcard/SGYunlock
cd /mnt/sdcard/SGYunlock
stop #<-the phone will freeze, It's OK!
dd if=/dev/bml15 of=bml15.img.SAVE #<- Do it ONLY ONCE!!!!
start #<-the phone will restart, put any SIM and use!
edit bml15.img.SAVE:
(0×80049 and 0×80450) change 01 to 00
save as bml15_unlocked.img.SAVE.
ADB shell
su
cd /mnt/sdcard/SGYunlock
stop #<-the phone will freeze, It's OK!
dd if=bml15_unlocked.img.SAVE of=/dev/bml15 copy back file
start #<-the phone will restart, put any SIM and use!
Click to expand...
Click to collapse
Click to expand...
Click to collapse
DONT COPY PASTE TO OTHER FORUM WITHOUT ASKING THE AUTHOR
I HATE NOOB LEECHERS
GIVE PROPER CREDITS TO THE DEV and OP

Things (files) you will be needing to open line:
(1)Go to the link and choose your OS version (windows,mac or linux)
--->Android SDK
(2)If you don't have java installed
--> Java SDK
(3)Use (drivers) if pc doesn't recognize the device
--->Samsung drivers
(4)Rooted phone (for SU permissions)
---> Root
(5)Usb cable
(6)Guts!!
New update:
Guys!!! try mr. Doky73's ---> network unlock app
if you liked it, consider donating
or
Press their thanks button!!
Credits to:
devion14
Doky73
contributors:
izghitu
codeshark

dont wanna try cause there is a possibility that my CP will brick

eReNz said:
dont wanna try cause there is a possibility that my CP will brick
Click to expand...
Click to collapse
that is why it is not for noob andd fainthearted...youll brick it?then restore it..so simple...

will delete soon....seems like its not important

devion14 said:
will delete soon....seems like its not important
Click to expand...
Click to collapse
please do understand that not all people here are adept when it comes to "techy stuff" and not all are willing to take risks so don't feel sad if your thread seems to be underrated.

Facebook Page

just getting board......have you done this?
can you give me screen shots on pc?

OP thanks for the info, i was able to change my provider to another one.
did anybody found a code which accepts all the different sims?
its tedious to edit bml15 every time i want to swap a sim.

maybe we could ask openline phones to upload their bbml15.bin so i can compare the strings on the addresses...they would be on same address

leodasal2 said:
please do understand that not all people here are adept when it comes to "techy stuff" and not all are willing to take risks so don't feel sad if your thread seems to be underrated.
Click to expand...
Click to collapse
techie stuff

s5360user said:
OP thanks for the info, i was able to change my provider to another one.
did anybody found a code which accepts all the different sims?
its tedious to edit bml15 every time i want to swap a sim.
Click to expand...
Click to collapse
Create a script to automate the process (theory).

maybe you could make one?? but the important thing is the mcc mnc of an openlined bml15.bin

devion14 said:
maybe we could ask openline phones to upload their bbml15.bin so i can compare the strings on the addresses...they would be on same address
Click to expand...
Click to collapse
and you must post this thread on Android Development to gather some users bbml15.bin

already done that...maybe forum mods might want to move it there

An appeal to upload your "openline/unlocked" bml15.bin
guys, if anyone of you have an unlocked/openline phone, please upload your bml15.bin.. Seriously, this thread booms with potential. You can at last forget about going to a service center just to get your unit openlined.
@devion14
i'll be making a flashable zip if there is an openline bml15.bin uploaded. and i expect you will be the first daredevil to try and attest the validity of this thread
PS. I wonder if bmlunlock will work with this bml15.bin.

HCFroyd247 said:
guys, if anyone of you have an unlocked/openline phone, please upload your bml15.bin.. Seriously, this thread booms with potential. You can at last forget about going to a service center just to get your unit openlined.
@devion14
i'll be making a flashable zip if there is an openline bml15.bin uploaded. and i expect you will be the first daredevil to try and attest the validity of this thread
PS. I wonder if bmlunlock will work with this bml15.bin.
Click to expand...
Click to collapse
Agree. Perhaps in millions of SGYs shipped there is at least 1 who is factory unlocked?

HCFroyd247 said:
guys, if anyone of you have an unlocked/openline phone, please upload your bml15.bin.. Seriously, this thread booms with potential. You can at last forget about going to a service center just to get your unit openlined.
@devion14
i'll be making a flashable zip if there is an openline bml15.bin uploaded. and i expect you will be the first daredevil to try and attest the validity of this thread
PS. I wonder if bmlunlock will work with this bml15.bin.
Click to expand...
Click to collapse
i bet it wont work cause imei conflict..
CarlDeanCatabay said:
Agree. Perhaps in millions of SGYs shipped there is at least 1 who is factory unlocked?
Click to expand...
Click to collapse
i bet not one but depends on the order

CarlDeanCatabay said:
techie stuff
Click to expand...
Click to collapse
wow, i was clearly bothered by the exaggerated response (huge fonts) you had on my post. I'm glad you pointed that out (sarcastic).

WORKING!!

[Guide] Remove roaming clock on latest update

1. Download hxxps://play.google.com/store/apps/details?id=by4a.setedit22&hl=en (Sorry i cant post link, change hxxp to http)
2. Enable developer mode, grant write secure permission for the app:
Code:
adb shell pm grant by4a.setedit22 android.permission.WRITE_SECURE_SETTINGS
3. Open the app, change table to "Secure table", find "roaming_dualclock" setting and change the value to "1".

vanhoavn said:
1. Download hxxps://play.google.com/store/apps/details?id=by4a.setedit22&hl=en (Sorry i cant post link, change hxxp to http)
2. Enable developer mode, grant write secure permission for the app:
Code:
adb shell pm grant by4a.setedit22 android.permission.WRITE_SECURE_SETTINGS
3. Open the app, change table to "Secure table", find "roaming_dualclock" setting and change the value to "1".
Click to expand...
Click to collapse
Finally, I can remove the dual clock on Android 10. Thanks so much for the solution.

Could this method not be used to reactivate FASTBOOT on v450pm ?? remove the locksim ?? activate the dual sim ???

spa1978 said:
Could this method not be used to reactivate FASTBOOT on v450pm ?? remove the locksim ?? activate the dual sim ???
Click to expand...
Click to collapse
No...

Yeah its working on android 10, thanks mate!

Wait what? I'm confused, so I downloaded the app and granted all the permissions and developer mode was already enabled. I executed the code over there to system table inside the app but it doesn't seem to be working when I tried to change the value of roaming_dualclock. Any solutions?

Jimook99 said:
Wait what? I'm confused, so I downloaded the app and granted all the permissions and developer mode was already enabled. I executed the code over there to system table inside the app but it doesn't seem to be working when I tried to change the value of roaming_dualclock. Any solutions?
Click to expand...
Click to collapse
You should do the permission with adb command on pc not on your device

vanhoavn said:
1. Download hxxps://play.google.com/store/apps/details?id=by4a.setedit22&hl=en (Sorry i cant post link, change hxxp to http)
2. Enable developer mode, grant write secure permission for the app:
Code:
adb shell pm grant by4a.setedit22 android.permission.WRITE_SECURE_SETTINGS
3. Open the app, change table to "Secure table", find "roaming_dualclock" setting and change the value to "1".
Click to expand...
Click to collapse
Exactly what is the usefulness of this procedure???

spa1978 said:
Exactly what is the usefulness of this procedure???
Click to expand...
Click to collapse
Just to remove the annoying second clock in lock screen.

vanhoavn said:
Just to remove the annoying second clock in lock screen.
Click to expand...
Click to collapse
Ahhhhh it works .... on v50 sprint android 10 !!!!!!
very well
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

martin_yo said:
You should do the permission with adb command on pc not on your device
Click to expand...
Click to collapse
haha thx i didn't know
But omfg it worked anyways!!! I spent more than a year to solve this problem lol
Also how do I move the clock to the center lol why is it at the left side (It's available in Android 9 but not in Android 10)

Jimook99 said:
haha thx i didn't know
But omfg it worked anyways!!! I spent more than a year to solve this problem lol
Click to expand...
Click to collapse
Wait... WHAT?
" I spent more than a year to solve this problem "
REALLY?
BTW, How to enable split-screen multitasking in Android 10 on LG V50 (Korean)?

beboylqt said:
Wait... WHAT?
" I spent more than a year to solve this problem "
REALLY?
BTW, How to enable split-screen multitasking in Android 10 on LG V50 (Korean)?
Click to expand...
Click to collapse
Recent button > Tap and hold icon of the app you want to view in Multi window mode > Select Multi window > Select the 2nd app

beboylqt said:
Wait... WHAT?
" I spent more than a year to solve this problem "
REALLY?
BTW, How to enable split-screen multitasking in Android 10 on LG V50 (Korean)?
Click to expand...
Click to collapse
Haha technically yeah, my first attempt was done from about a year ago and was keep trying with different methods. For your question, the person above has answered it so you may check that.

quantan said:
1. Download hxxps://play.google.com/store/apps/details?id=by4a.setedit22&hl=en (Sorry i cant post link, change hxxp to http)
2. Enable developer mode, grant write secure permission for the app:
Finally, I can remove the dual clock on Android 10. Thanks so much for the solution.
Click to expand...
Click to collapse
You dont need any app for removing it
You can use adb
shell settings put secure roaming_dualclock 1
You can also check it here:
https://forum.xda-developers.com/android/help/lg-korean-variant-t3970883

jTunes said:
You dont need any app for removing it
You can use adb
shell settings put secure roaming_dualclock 1
You can also check it here:
https://forum.xda-developers.com/android/help/lg-korean-variant-t3970883
Click to expand...
Click to collapse
Thanks for this, it also works on my V30 Pie LG U+

Spent ages trying to get this and every other method to work, turns out on SKT you have to change "skt_roaming_dualclock" to 1 rather than "roaming_dualclock"

Metalligator said:
Spent ages trying to get this and every other method to work, turns out on SKT you have to change "skt_roaming_dualclock" to 1 rather than "roaming_dualclock"
Click to expand...
Click to collapse
Thats for SKT
roaming_dualclock is for LG-U+ and KT

Thanks! Working on my LG G7 running android 10.

vanhoavn said:
1. Download hxxps://play.google.com/store/apps/details?id=by4a.setedit22&hl=en (Sorry i cant post link, change hxxp to http)
2. Enable developer mode, grant write secure permission for the app:
Code:
adb shell pm grant by4a.setedit22 android.permission.WRITE_SECURE_SETTINGS
3. Open the app, change table to "Secure table", find "roaming_dualclock" setting and change the value to "1".
Click to expand...
Click to collapse
Finally manage to remove the second clock on my V50 on Android 10. Thanks for this guide.

Repair DEAD(HARD BRICKED) Realme 3 | 3i Tutorial

In this tutorial we are going to Repair Realme 3 (RMX1821) MT6771 Chipset.
from being hard bricked (no charge, no recovery, no fastboot) using SP Flashtool.
with the help of Bypass Utility "MTK-bypass" to disable bootrom protection(sla and daa).
MTK-bypass credits to @k4y0z
, @chaosmaster and @xyzz on github.
REQUIREMENTS:
• Python
Download Python
The official home of the Python Programming Language
www.python.org
• libusb-win32
https://sourceforge.net/projects/libusb-win32/files/libusb-win32-releases/1.2.6.0/libusb-win32-devel-filter-1.2.6.0.exe/download
• Sp Flashtool
SP Flash Tool Download All versions for MediaTek Devices
SP Flash tool download is the best application to flash Stock firmware, Custom recovery and fix some extreme issues on MediaTek Android smartphones. Download SP Flash tool all versions from our official download page.
spflashtool.com
• Bypass Utility Compiled
18.9 KB file on MEGA
mega.nz
---------------------------------------------------------------
• Bypass Utility Latest Releases
Release 1.4.1 · MTK-bypass/bypass_utility
Improve handshake reliability
github.com
• Exploits Latest Releases
Release 1.5 · MTK-bypass/exploits_collection
mt6261 mt6572 mt6580 mt6582 mt6735 mt6737 mt6739 mt6755 mt6757 mt6761 mt6763 mt6765 mt6768 mt6771 mt6785 mt6799 mt6873 mt8127 mt8163 mt8173 mt8695
github.com
• Realme 3 (rmx1821) Flashtool Firmware link soon
> I will upload the realme 3 firmware with Scatter File and Auth File for Third Party Flashtool like SP Flashtool soon, but if you have an official firmware of realme 3 with Scatter and Auth File you can use it no matter what version it is.
> If you know how to extract an OFP file, you can download this realme 3|3i firmware and extract the OFP file.
https://fileload.coloros.com/30842RMX1821EX_11_C.17_201117_cb5665f2.zip
> Video Tutorial on how to Extract OPPO | REALME firmware (OFP file)
VIDEO TUTORIAL
TEXT TUTORIAL
INSTALLATION:
• Install Python (tick checkbox "Add Python X.X to PATH") and proceed.
( if you are using windows 10, Download and Install Python 3.9 through Microsoft Store )
• Install lib-usb_win32
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Click Next>Next> until you see the next image
Click Finish and Launch Lunch Filter Wizard
Choose the "Install a device filter" and click next
You will see this device selection.
Now you will need to connect you phone with power off to computer.
> Hold all the buttons and connect to the computer (wait until you see Mediatek USB Port in libusb Device selection and Install)
(note: you have to select and install it very quick, because the phone disconnect in just a few seconds)
> Wait until it shows this (Click OK and close libusb and Disconnect your phone)
INITIALIZATION:
• Extract Bypass Utility, and go to extracted folder
> type "cmd" in the address bar and hit enter
> in cmd console install (Install pyusb, pyserial, json5)
by typing: pip install pyusb pyserial json5
> after that bypass mtk
by typing: python main.py
> when you see "Waiting for bootrom" , you need to connect your phone again (Holding all button and plug it into your computer and wait until it recognized.)
you should have this following output. do not close this window and remember the Found port of you phone
as you can see my port is = COM7
DO NOT DISCONNECT YOUR PHONE FROM COMPUTER THIS TIME
FLASHING FIRMWARE:
• Extract SP Flashtool and Realme 3 Firmware
• Open flashtool.exe and click Options>Connection
and tick AURT instead of USB.
Select the COM port of the phone which is COM7 in my case
then close Option Window
• Now In Flashtool choose Scatter-File from the Extracted Firmware of Realme 3
(wait until it finished the Processing)
• After that choose Authentication File
• After loading Scatter and Auth File Click Download
It should start downloading the firmware to you phone now without any error.
(wait until it finished the download.)
When finished downloading you get a check windows indicating that the flash was successful!
Thats it Congratulations! You may now disconnect your phone from your computer and POWER ON.
your DEAD [HardBricked] Realme 3 is now Alive!
(Note: This method is applicable to any MTK devices with SoC mt6735, mt6750, mt6765, mt6771, mt6785, mt8127, mt8163, mt8173, mt8695)
For more updates about MTK-Bypass visit the official github page @
MTK-bypass
MTK-bypass has 8 repositories available. Follow their code on GitHub.
github.com
all the tools and utility is not mine. credits to the developer.
Original Bypass Tool xdaThread
[MOD][DEV] MediaTek / MTK - Auth Bypass (SLA/DAA) - Utility
As some of you have already noticed, a couple of weeks ago @Dinolek and I published a utility, that allows bypassing authentication on MTK devices. The tool is based on an exploit dubbed kamakiri, which was originally found by @xyz` and released...
forum.xda-developers.com
special thanks to @popoff-r for mentioning about a thread of repairing MTK devices.

Thanks

fawazahmed0 said:
Thanks
Click to expand...
Click to collapse
so its you , i thought the two in the credits in your github bypass_utility is one who develop it. im sorry sir. im not really familliar where to see the owner of the work it github. im really sorry for not mentioning your name in this. gotta edit now. You are Great sir!

ATDteam said:
so its you , i thought the two in the credits in your github bypass_utility is one who develop it. im sorry sir. im not really familliar where to see the owner of the work it github. im really sorry for not mentioning your name in this. gotta edit now. You are Great sir!
Click to expand...
Click to collapse
Thank you for putting this altogether, this should speed up the development work for this phone(kernel etc), as people don't have to go to service center for hard brick.
Also I want to tell you, I shouldn't get the credits for bypass_utility, the two people you mentioned should be getting the credits, I just forked(copy/cloned) the repository.
I assume you are new to github, anyone can fork(copy/clone) a repository by clicking on fork button
You can differentiate whether a repository is forked(copied) or original by seeing on the top left side.
Thanks

fawazahmed0 said:
Thank you for putting this altogether, this should speed up the development work for this phone(kernel etc), as people don't have to go to service center for hard brick.
Also I want to tell you, I shouldn't get the credits for bypass_utility, the two people you mentioned should be getting the credits, I just forked(copy/cloned) the repository.
I assume you are new to github, anyone can fork(copy/clone) a repository by clicking on fork button
View attachment 5205247
You can differentiate whether a repository is forked(copied) or original by seeing on the top left side.
View attachment 5205251
Thanks
Click to expand...
Click to collapse
Thank you so much that was a very helpful information.

How to fix this error sir..

What Error?, please provide screenshot of the error, if you can't explain it.

ATDteam said:
What Error?, please provide screenshot of the error, if you can't explain it.
Click to expand...
Click to collapse
Tihis sir

What Error?, please provide screenshot of the error, if you can't explain it.
Al Djufri said:
Tihis sir
View attachment 5207505
Click to expand...
Click to collapse
try to uninstall python and reinstall again, also download the bypass_utility, the one that i attached in this thread.
and try again. make sure your usb cable is working properly, it seems that your device does not read properly by the utility. change your cable if posible. Download python 3.9, if still doest work. try using windows 10 OS.
18.9 KB file on MEGA
mega.nz

ATDteam said:
What Error?, please provide screenshot of the error, if you can't explain it.
try to uninstall python and reinstall again, also download the bypass_utility, the one that i attached in this thread.
and try again. make sure your usb cable is working properly, it seems that your device does not read properly by the utility. change your cable if posible. Download python 3.9, if still doest work. try using windows 10 OS.
18.9 KB file on MEGA
mega.nz
Click to expand...
Click to collapse
Reinstalling python
Reinstalling lib libusb
Changing usb cable
Changing port usb
Change pc, i mean borrow a pc from my friend
Changing spflashtool, same problem sir?
Do you have telegram account

thanks it works thanks for saving my phone

Its not the same in your first screenshot you reach "Disabling protection" but in the 2nd one only the utility found your phone..., did you release all the buttons emmidiately after your computer detects your phone phone? It is important that you release emmidiately. Did you try to use windows 10.? Sorry I dont have telegram.
Al Djufri said:
Reinstalling python
Reinstalling lib libusb
Changing usb cable
Changing port usb
Change pc, i mean borrow a pc from my friend
Changing spflashtool, same problem sir?
Do you have telegram accountView attachment 5208303
Click to expand...
Click to collapse

XxRRSxX said:
thanks it works thanks for saving my phone
Click to expand...
Click to collapse
Thanks for using this thread as your guide, but credits is to the developers of the Utility.

ATDteam said:
Its not the same in your first screenshot you reach "Disabling protection" but in the 2nd one only the utility found your phone..., did you release all the buttons emmidiately after your computer detects your phone phone? It is important that you release emmidiately. Did you try to use windows 10.? Sorry I dont have telegram.
Click to expand...
Click to collapse
I'm trying to with my friend pc(windows 10) using latest python and same error sir..
Always Immediately release my button when pc detection my device.. but same error

( SOLVED )
you must be use windows 10
Use latest python version
Use latest SpFlash tool version
And don't forget to chek libusb instalation
Check via cmd "pip install libusb" and "pip install libusb1"
And try to use command "python main.py"
Sorry for my English..
Thanks sir..

Al Djufri said:
( SOLVED )
you must be use windows 10
Use latest python version
Use latest SpFlash tool version
And don't forget to chek libusb instalation
Check via cmd "pip install libusb" and "pip install libusb1"
And try to use command "python main.py"
Sorry for my English..
Thanks sir..
View attachment 5208681
Click to expand...
Click to collapse
Nice thats great! sometimes you really need to be on Trial and Error before you achieve what you want. happy for you. Thank you for using my thread as guide, Credits to the developers of the utility. and you have a good english. mine is bad. :-D

Anyone who facing problem when bootrom check, you have to flash first time or it will show error. Otherwise you have to uninstall and reinstall libusb.exe and others.

Ok, thanks to ATDTEAM, very much, I bricked by patching boot image with magisk and flashing it, successfully flashed stock rom .ofp with SP Flash tool, not only this , I itentionally flashed another version , and it worked to, thnx to the bypass utility, it generates questions, the realme provides ozip files, so where are .ofp files coming from, or where we can get it, and... Fawazahmed0 , I am unable to flash twrp, I tried everything I could, I am on updated Android 10 c.19 now, so I can't flash custom recovery or root it... I can't even rollback bcoz I unable to find the older version ofp files, the ozip files just don't install, so please help for rooting Android 10, You have solved a major hurdle by introducing the method of bypass sp tool flashing but, the next step of flashing custom recovery and then rooting awaits... Pls help/ guide, Thnx...

Thanks brother, I've recently unbricked my device

Question how to unlock the bootloader ?

how to unlock the bootloader, I read about some program "indeepth test", but did not find it on this phone

You need to wait till realme/Oppo releases the app specific to this phone. If you google the app, you will find plenty of sites say that the app for realme 3 or X will work but just a waste of time. Has to be for this phone
Though I am looking into a possible way to root device without unlocking bootloader.

Sorry for the stupid question, but I'm not even able to enter fastboot mode: pressing Volume Up + Power buttons simply reboots the system and sending "adb reboot bootloader" gives me a terminal message ending with "the serial is not match, fastboot_unlock_verify fail"...
What's wrong?

As per my my previous comment. Realme releases an apk file that then allows you to unlock the bootloader
While the bootloader is locked on any android devices, you will not be able to boot to fastboot.
I have managed to flash a magisk patched boot.img file by other means but wasn't successful, ass need to patch Vbmeta and can't do that without fastboot or two(or equivalent).
The apk they release is called deep testing. If you go on realme forums they are generally pretty open and quick to release. The app Is pretty much the equivalent of applying to Sony on the xperia's the app does the unlocking et
If I can find a way to get pasted the red state boot screen iI will defiantly post the instructions and all files etc

@smiley.raver
Hello, I bought this device and have been using it for exactly 1 week,
I searched the internet and found this article, but I'm not sure if the article is Trustworthy, can you check it?

MrMiyamo said:
@smiley.raver
Hello, I bought this device and have been using it for exactly 1 week,
I searched the internet and found this article, but I'm not sure if the article is Trustworthy, can you check it?
Click to expand...
Click to collapse
Ok i found this one too, and it is looks more trustworthy .
Well, i believe to you, so i will wait your response.

MrMiyamo said:
Ok i found this one too, and it is looks more trustworthy .
Well, i believe to you, so i will wait your response.
Click to expand...
Click to collapse
That will be the method, though realme still have not released the unlock tool for this device.
If you check the realme community forums, and see h bootloader unlock for this device on a periodical basis realme will eventually release it, just not sure on their time frames. This is only my second realme device of which the first one I once the c3 had already been out for a while and unlock tool was already released.
Once it has been. I will create. Thread with the process and attach the files here in xda

@smiley.raver
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Should we wait realme or look at this?
GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool
MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.
github.com

MrMiyamo said:
@smiley.raver
View attachment 5426883
Should we wait realme or look at this?
GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool
MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.
github.com
Click to expand...
Click to collapse
I am checked the tool and i have couldn't done anythink so far.

Sorry have been flat out at home doing renovations
I will have a look at it sometime over the next couple of days.

smiley.raver said:
Sorry have been flat out at home doing renovations
I will have a look at it sometime over the next couple of days.
Click to expand...
Click to collapse
Yes, i am also will look at it in a few days,
I will install a linux distro on my laptop and try again,
BTW we should look at this video for referance;

MrMiyamo said:
@smiley.raver
View attachment 5426883
Should we wait realme or look at this?
GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool
MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.
github.com
Click to expand...
Click to collapse
I have had a read through. Getting to brom bootloader and bypassing da was the way I was attempting it I am curious as to what is different between his magisk all and the app release he does.
I haven't had a look at the other one yet. WL do that tomorrow

smiley.raver said:
I have had a read through. Getting to brom bootloader and bypassing da was the way I was attempting it I am curious as to what is different between his magisk all and the app release he does.
I haven't had a look at the other one yet. WL do that tomorrow
Click to expand...
Click to collapse
I installed a linux distro today and tried again, i get same result as on windows.
If you get the same result, we'll assume it's caused by the device.
In this case, there is nothing left except creating a new issue on the github repo.

@
MrMiyamo are you successfully booting into the brom bootloader? as the instructions on github are only saying to power + vol up or down - when it is power + vol up + vol down and then plug in usb. I have just had to reinstall windows so i will give this a go as just installed python.​
give me a few hours to play around and see what i can do - i maybe able to do it the way i was doing it with the magisk app released on github page

@MrMiyamo while phone is turned on - push an hold power + vol + + vol - and continue to hold while it reboots, continue holding while you see at bottom of the screen rebooting to recovery - continue holding the keys down and plug usb in with other end connected to the computer
mind you im getting stuck at the da sync - try doing same process on linux - as i havent installed it yet and awaiting for it to download
C:\mtkclient>python mtk rl out
Capstone library is missing (optional).
Keystone library is missing (optional).
MTK Flash/Exploit Client V1.42 (c) B.Kerler 2020-2021
Preloader - Status: Waiting for PreLoader VCOM, please connect mobile
Port - Device detected
Preloader - CPU: MT6765(Helio P35/G35)
Preloader - HW version: 0x0
Preloader - WDT: 0x10007000
Preloader - Uart: 0x11002000
Preloader - Brom payload addr: 0x100a00
Preloader - DA payload addr: 0x201000
Preloader - CQ_DMA addr: 0x10212000
Preloader - Var1: 0x25
Preloader - HW subcode: 0x8a00
Preloader - HW Ver: 0xca00
Preloader - SW Ver: 0x0
Preloader - Disabling Watchdog...
Preloader - HW code: 0x766
Preloader - Target config: 0x0
Preloader - SBC enabled: False
Preloader - SLA enabled: False
Preloader - DAA enabled: False
Preloader - SWJTAG enabled: False
Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False
Preloader - Root cert required: False
Preloader - Mem read auth: False
Preloader - Mem write auth: False
Preloader - Cmd 0xC8 blocked: False
Preloader - BROM mode detected.
Preloader - ME_ID: BA8A36E4EDC2EC489BA44EEA0F809354
Preloader - SOC_ID: 5A9501C1148E3B36CD3B173E1EBE166257EBA2069333EFF7A1CE20EAD189884F
Main - Device is unprotected.
Main - Device is in BROM mode. Trying to dump preloader.
PLTools - Loading payload from C:\mtkclient\mtkclient\config\..\payloads\mt6765_payload.bin, 0x264 bytes
PLTools - Kamakiri / DA Run
Kamakiri - Trying kamakiri2..
Kamakiri - Done sending payload...
PLTools - Successfully sent payload: C:\mtkclient\mtkclient\config\..\payloads\mt6765_payload.bin
Port - Device detected
DAXFlash - Uploading stage 1...
DAXFlash - Successfully uploaded stage 1, jumping ..
Preloader - Jumping to 0x200000
DAXFlash - Successfully received DA sync

@smiley.raver
I am run "sudo mtk rl out" and it looks like does the job, it currently dumping all partitions.
Edit:
Ok, i did something stupidly and installed linux system on 24 GB partition
so I had to stop the process before it complete,
It's probably fine as long as we don't want a backup, but I'll install the system on a 64gb partition and look again later.

MrMiyamo said:
@smiley.raver
I am run "sudo mtk rl out" and it looks like does the job, it currently dumping all partitions.
Click to expand...
Click to collapse
thats awesome - so it appears to be a windows issue - i will create the issue on github soon - we have progress
also i found out that it only needs to be phone switched off and vol + & vol - held while plugging in usb
with that working -then the rest of the instrcutinos should work - so give it a try - i just finished downlaoding linux- so i will be a little while off trying it
i think i know what the windows issue is - its not picking up vcom drivers in the transition from bootloader to vcom - so therefor it stalls -

I am edited my message, can you check it?

@smiley.raver
BTW my phone has a pending OTA update, i keep to not update since i worry about that method will not work.
Can i apply OTA update without worry?
Else how can i remove pending update files?

smiley.raver said:
thats awesome - so it appears to be a windows issue - i will create the issue on github soon - we have progress
also i found out that it only needs to be phone switched off and vol + & vol - held while plugging in usb
Click to expand...
Click to collapse
MrMiyamo said:
@smiley.raver
BTW my phone has a pending OTA update, i keep to not update since i worry about that method will not work.
Can i apply OTA update without worry?
Else how can i remove pending update files?
Click to expand...
Click to collapse
while your phone is not updated - lets leave it like that - as mine is latest firmware - hence we maybe getting to different issues.,
this way we can attack 2 different firmware versions. yep saw your editted mesage - i had to install another hdd to install just for the moment ...
but at least the mtk rl command worked and got further then I did on windows - im about halfway through linux install (just have to remember how to use the bloody thing now haha)

How to unlock bootloader of vivo MTK devices?

Unlocking bootloader on vivo MTK devices
This thread is intended for vivo MTK devices only. However you might have seen some of the threads for unlocking vivo bootloader but it might not work for you. So let's begin our tutorial
!! WARNING !!
THIS STEP WILL ERASE YOUR USERDATA, SO MAKE SURE YOU HAVE BACKED UP ALL YOUR DATA BEFORE EXECUTING THIS​Requirements:
This is needed to make it work!
1. MTK Driver
2. Python (latest)
3. UsbDK
4. MTKClient
5. Zip extractor like 7zip
Set up all the requirements:
1. Install Python
1.1. Open Python that you have download​1.2. Tick a box called "add to PATH"​1.3. Install​2. Install UsbDK
2.1. Make sure you have downloaded UsbDk according to your architecture​2.2. Double click the installation file and install​3. Install MediaTek Drivers
3.1. Download zip that I attach on this thread​3.2. Use your zip extractor app and extract the zip​3.3. After extract, you will see 3 files inside, choose "cdc-acm.inf" and right click​3.4. Select "Install drivers" and follow all instructions​4. Setup MTKClient
4.1. They're many version releases on the github, download the source code zip from the latest version​4.2. Use your extractor app and extract it into a folder​4.3. Go into that folder and open command prompt from there​4.4. Simply type "pip3 install -r requirements.txt" on the cmd and enter. Wait for it to finish​4.5. Close the cmd​
Steps to unlock:
1. Go to mtkclient folder and open cmd from the folder
2. Type "python3 mtk da seccfg unlock"
3. Prepare your phone, make sure it's turn off
4. Connect your phone to PC with volume combination, hold both volume button and connect
5. Hold it until you heard usb connection sound and release it
6. Wait until it succeed
7. If successful, disconnect your device and turn it on
8. You will see a message saying "Orange state bla bla", ignore it
9. If it keeps rebooting, just wait for it to enter recovery and it will ask you to factory reset your device
10. Factory reset it and you're done!
You've finally unlocked your vivo bootloader
Tested devices:
1. vivo Y20 2021/Y12s (PD2036F)
2. vivo Y17/Y15/Y12 (PD1901)
3. vivo Y1s (PD2014F)
4. vivo Y91C (MTK)(PD1818HF)

However vivo have patched the BROM mode(something like download mode on mtk) on the latest update. But I have solution for that issue!

NeonzGamingYT said:
However vivo have patched the BROM mode(something like download mode on mtk) on the latest update. But I have solution for that issue!
Click to expand...
Click to collapse
way

NeonzGamingYT said:
However vivo have patched the BROM mode(something like download mode on mtk) on the latest update. But I have solution for that issue!
Click to expand...
Click to collapse
Seems like you don't?

so i was trying to use mtk client with your command. i'm not sure why my windows don't recognize python3 as installed and redirected me to microsoft store, so i used just python command which should ran python 3.11.2 on my pc. But when i did that it didn't really let me do that saying that "da" flag not found
Code:
mtk client\mtkclient-1.52>python mtk da seccfg unlock
usage: mtk [-h]
{printgpt,gpt,r,rl,rf,rs,ro,w,wf,wl,wo,e,es,footer,reset,dumpbrom,dumppreloader,payload,crash,brute,gettargetconfig,peek,stage,plstage,xflash}
...
mtk: error: argument cmd: invalid choice: 'da' (choose from 'printgpt', 'gpt', 'r', 'rl', 'rf', 'rs', 'ro', 'w', 'wf', 'wl', 'wo', 'e', 'es', 'footer', 'reset', 'dumpbrom', 'dumppreloader', 'payload', 'crash', 'brute', 'gettargetconfig', 'peek', 'stage', 'plstage', 'xflash')
MTK Flash/Exploit Client V1.52 (c) B.Kerler 2018-2021
Also i'm trying to make it work with vivo v25e which uses Mediatek MT8781 Helio G99 (6nm) (if you can believe description)
if i run adb toolkit it shows me this info for my phone
Code:
Device: V2201
Model: V2201
Brand: vivo
Android: 13
Firmware: TP1A.220624.014
Security Patch: 2023-02-01
also this is behaviour for my phone on the 4ths step
4. Connect your phone to PC with volume combination, hold both volume button and connect
Click to expand...
Click to collapse
at first it shows first line in device manager then second and then disappears at all, is this normal behaviour?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Is there any chances for me to unlock bootloader or i should just give up for now? Also i'm very sorry if i miss something obvious.

twq_bought_a_shit_phone said:
so i was trying to use mtk client with your command. i'm not sure why my windows don't recognize python3 as installed and redirected me to microsoft store, so i used just python command which should ran python 3.11.2 on my pc. But when i did that it didn't really let me do that saying that "da" flag not found
Code:
mtk client\mtkclient-1.52>python mtk da seccfg unlock
usage: mtk [-h]
{printgpt,gpt,r,rl,rf,rs,ro,w,wf,wl,wo,e,es,footer,reset,dumpbrom,dumppreloader,payload,crash,brute,gettargetconfig,peek,stage,plstage,xflash}
...
mtk: error: argument cmd: invalid choice: 'da' (choose from 'printgpt', 'gpt', 'r', 'rl', 'rf', 'rs', 'ro', 'w', 'wf', 'wl', 'wo', 'e', 'es', 'footer', 'reset', 'dumpbrom', 'dumppreloader', 'payload', 'crash', 'brute', 'gettargetconfig', 'peek', 'stage', 'plstage', 'xflash')
MTK Flash/Exploit Client V1.52 (c) B.Kerler 2018-2021
Click to expand...
Click to collapse
i got the same error

First i think if you got vivo device is most likely patched. If not what version of mtk exploit is it using
I see you're using security patch dated 2023-02-01 which most likely won't work

ko_hi said:
First i think if you got vivo device is most likely patched. If not what version of mtk exploit is it using
I see you're using security patch dated 2023-02-01 which most likely won't work
Click to expand...
Click to collapse
honestly i was trying to lock the bootloader just so i won't touch these stuff and my phone is not even vivo it's oppo a5s