Custom ROM Flashing for EVO3D on Windows
------
Install:
HTC Sync (HTC Site)
Android SDK
Java Runtime Environment (JRE)
Java JDK (optional, I think)
---------
Download:
TWRP modified by Brandas (Original post here, thanks Brandas!)
ROM of your choice (list)
-----------
Navigate to:
"c:\program files (x86)\Android\android-sdk\tools"
*Omit the "
*For 32 bit systems omit the (x86)
*Shortcut: (Start | Run) or (WindowsKey + R)
Copy TWRP (twrp-1.0.3-modified.img) into this directory
Copy AdbWinApi.dll into this directory (located in the "platform-tools" directory)
---------
Boot into recovery from fastboot:
(Shift click on c:\program files (x86)\Android\android-sdk\tools)
Select "open command window here"
Type:
Code:
fastboot boot twrp-1.0.3-modified.img
(If you have not done so, turn on usb storage and place your ROM in the root of your SD)
---------
While in recovery:
Wipe phone
"Install zip.." (your chosen ROM)
Worked for me and others... hope it helps
Another good thread:
http://forum.xda-developers.com/showthread.php?t=1239821
Could you include directions on how to flash the kernel via fastboot as well? Most ROMs will need that to be fully functional.
NegatedVoid said:
Could you include directions on how to flash the kernel via fastboot as well? Most ROMs will need that to be fully functional.
Click to expand...
Click to collapse
The two source threads in my original post have that information I believe...
Most ROM's I've seen come with everything you need though..
I think the more popular ones use AOSP kernels and are included in the ROM..
Please correct me if I am wrong though..
there have been directions here for quite some time
-->
http://infectedrom.com/showthread.php/552-How-to-install-a-kernel-AND-rom-on-S-ON-hboot-1.50-phones.
hitchhikers guide to hboot 1.50 and S-ON
so, you unlocked using HTC's unlocker located at HTCDEV.com
some background on this unlock method:
-when you unlock using HTC's unlock method, the boot partition is still read only, and you cant flash to it. (kernels and ramdisks go here - so no 2.3.3 rom will boot, and most 2.3.4 roms will not work correctly)
when you unlocked your bootloader using HTC's method, you should have downloaded a file that contained some program files, mainly fastboot.exe and adb.exe, as well as the device drivers you would have to install to unlock
- you will need these
to get around this problem HTC has created, we will be using the fastboot.exe program to force the ramdisk/kernel onto the phone. anytime you use fastboot to flash a partition, you risk bricking your phone, so please do this at your own risk.
I have walked several people thru this, and no one had any problems, but if something dont go right, or the connection between the pc and the phone gets interrupted, your phone may become bricked.
I am going to assume you know the basics of flashing a rom, and that you have either teamwin or clockwork's recover tool installed on your phone (and you know how to use them). if not please see series #3 below.
SERIES 1 - INSTALL A ROM AND RAMDISK/KERNEL
Step 1 - backup everything on your phone, nandroid backup
step 2 - if you want to flash the ext4 optimizer for /data, read the info and directions here -> http://forum.xda-developers.com/show...postcount=6329
------>everything should be backed up now
Step 3 - flash Virus's superwipe tool.
Step 4 - flash the /data optimizer tool - the download can be found in the post linked in step 2
Step 5 - open the rom you downloaded using winrar, or 7zip, and copy the boot.img file somewhere (the same folder that contains the tools you used to unlock your phone would be a perfect place)
Step 6 - open a command prompt (or terminal window), and goto the window that contains the tools you used to unlock your boot loader
Step 7 - reboot your phone into fastboot (adb reboot bootloader)
Step 8 - from the command prompt enter the following command:
fastboot flash boot boot.img
then press [enter]
Step 9 - once complete, exit fastboot, and boot back into recovery
Step 10 - flash the rom's zip file using recovery
Step 11 - enjoy
SERIES 2 - INSTALL A RAMDISK/KERNEL (ROM ALREADY FLASHED)
*signs of a failed ramdisk flash include broken wifi, 4g, poor performance and just weirdness in general. the updater scripts used to install a rom will not flash ramdisk with S-ON.
Step 1 - open the rom you downloaded using winrar, or 7zip, and copy the boot.img file somewhere (the same folder that contains the tools you used to unlock your phone would be a perfect place)
Step 2 - open a command prompt (or terminal window), and goto the window that contains the tools you used to unlock your boot loader
Step 3 - reboot your phone into fastboot (abd reboot bootloader)
Step 4 - from the command prompt enter the following command:
fastboot flash boot boot.img
then press [enter]
Step 5 - reboot your phone and enjoy (fastboot reboot)
SERIES 3 - INSTALL A RECOVERY TOOL
*you may need to do this before each flash, some phones somehow break recovery after a rom is flashed, and recovery will not launch until re-flashed for some reason (Kathy.. )
Step 1 - download TeamWin's recovery here (IMG format) -> http://dl.dropbox.com/u/24995663/recovery.img
Step 2 - copy this file to the same directory as your fastboot and adb files HTC had you download to unlock your phone.
Step 3 - goto your dos prompt (or terminal if on linux)
Step 4 - change directories to the folder your files are in (recovery.img and fastboot)
Step 5 - flash your recovery using the following command
fastboot flash recovery recovery.img
Step 6 - reboot your phone (fastboot reboot)
*disclaimer - you do this at your own risk. as of yet, the processes listed above work 100% and not 1 failure has been reported. make sure your usb cable is good, and your pc has good power during any fastboot process. most of this comes from a chat i had in the synergy public/general chat room 2 hours prior to it being posted on XDA by others claiming credit. kangers goto hell.
How to flash custom rom
Thanks dude!
I'm using Lava X81 and i want to root my phone but can't roor with kingroot or many others also no recovery available for my device please help me:crying:
I am also using Lava x81 facing same problem
[ROOTED] Lava X81 using Magisk Manager by patching stock boot image (No TWRP)
Who said this method to us ?
aIecxs, XDA Senior Member from Germany
https://forum.xda-developers.com/member.php?u=7285913
Thread Link :
https://forum.xda-developers.com/android/help/helproot-lava-x81-t3620166
Thanks alecks!!!!
------------------------------------------------------------
Youtube Video Assistance:
Video Name: How to root Android using Magisk Manager & stock boot.img
Channel : Hovatek
------------------------------------------------------------
REQUIREMENTS :
(0) Unlocked Bootloader
To unlock bootloader in Lava X81 by Fastboot mode use the command
fastboot oem unlock #unlock bootloader via fastboot mode
{{{{{ NOTE: Unlocking bootloader in Lava X81 will erase all the user data. So please take a backup before unlocking bootloader. }}}}}
(1) Stock boot.img for your phone model (its best its for your Build Number / Variant ) . You can extract from the stock rom / firmware of your device (you may check our collection at https://forum.hovatek.com/forum-89.html ) OR backup from your device using a hardware box e.g Miracle Box, CM2, Nck Box Pro etc
(2) Download Latest Magisk Manager {Currently 7.3.0 (220)}
(3) Active internet connection on your Android device
(4) A windows 10 Laptop
---------------------------------------------------------
INSTRUCTIONS :
Step 1: Patching the stock boot.img
1. Install Magisk Manager 7.3.0 (220) APK on your android device.
2. Copy the stock boot.img of Lava X81 to your phone's internal storage or SD card whereever you want (Internal Storege\Dowloads is the better option)
3. Launch Magisk Manager app and check for latest updates. After the updates you will see that Magisk Manager is up to date.
4. Then, Select (Magisk is not installed. Latest 19.3 (19300)) Install > (Install Magisk) Install > Select and Patch a File >
5. Navigate to the location of the stock boot.img you copied earlier on (select Dowloads option or in my case, I used ES File Explorer File Manager), then Select it
6. Magisk Manager should begin downloading the magisk zip file for our arm64-v8a Device platform.
7. Once download is complete, MagiskManager will automatically patch the boot file and store it under
/storage/emulated/0/Download/magisk_patched.img
(Then I renamed it as "patched_boot.img" for our convenience)
Step 2: Flashing the patched boot.img
Among a variety of options to flash, I preferred Fastboot method
(0) Connect your Lava X81 one or two times to the PC (for preinstalling drivers)
(1) Boot your Lava X81 into fastboot mode.
(2) Open platform-tools_r28.0.1-windows.zip file
(3) Simultaneously press Keyboard's Shift key and Right click on the mouse, to open PowerShell window
(4) On the PowerShell use the following codes to flash:
Starting from phone's normal usb debugging mode,
adb devices #Ensures your phone connectivity in ADB (Android Debug Interface) mode via USB Debugging
adb reboot-bootloader #Reboot your phone to Fastboot Mode from ADB
fastboot devices #Ensures your phone connectivity in Fastboot mode
fastboot getvar unlocked #To check whether the bootloader is unlocked or not. It should be unlocked to proceed further
fastboot flash boot patched_boot.img #Flash the Magisk Patched Boot image file in Fastboot Mode
fastboot reboot #Reboot to the system from exiting Fastboot Mode
(5) Congrats and check with a Root checker app for root status. While checking for root status itself pop out for root permission.
--------------------------------------------------------
Proofs and All the necessary files as a zip file - MediaFire Link
Root Lava X81 using Magisk Manager by patching stock boot image (No TWRP)
http://www.mediafire.com/file/zjb78878i52865c/Root_Lava_X81_using_Magisk_Manager_by_patching_stock_boot_image_%2528No_TWRP%2529.zip/file
Any body can help me how to repack update.app (stock rom) into flashable Zip
My phone have unlocked bootloader and have twrp.
Impossible to flash stockroom with update.app file via twrp.
I`ve tired using custom rom so many bug.
I want rolling back into stockrom with keep twrp n unlocked bootloader.
I've lost my backup
Sorry bad English
Device SCL-L21
1. extract boot.img and system.img for update.app using huawei update extractor
2. copy them into fastboot folder on your computer
3. go into fastboot mode and type this on you computer:
fastboot flash boot boot.img
&
fastboot flash system system.img
3. when completed just type "fastboot reboot"
4. wipe data and cache in recovery to start your phone like new
that`s what i do when i flash stock rom
TheWarrior12345 said:
1. extract boot.img and system.img for update.app using huawei update extractor
2. copy them into fastboot folder on your computer
3. go into fastboot mode and type this on you computer:
fastboot flash boot boot.img
&
fastboot flash system system.img
3. when completed just type "fastboot reboot"
4. wipe data and cache in recovery to start your phone like new
that`s what i do when i flash stock rom
Click to expand...
Click to collapse
Hi man, itś so many years dead discussion, but now i need upgrade my Honor 5C. I don´t know if i´ve make something bad, but if i try flash system from stock rom (NEM-L21C432B364), my phone is dead. Only recovery and fastboot mode is working. I´ve try upgrade from version B132. Can you help me please? Now I am not sure, if upgrade version B132 directly to B364 is OK....
Rooting the POCO M4 Pro 4G (fleur) turned out to be quite straightforward. Note, I have a 2201117PG (EEA), you may have a different experience, it's not my fault if you brick your phone etc. Backup before you start as this will wipe your phone.
The process can be broken down into 4 steps:
Unlock Bootloader
Source boot.img
Patch boot.img (using Magisk)
Flash patched boot.img (using adb)
1. Unlock BootloaderNote: This step will wipe your phone.
This can be done using the official tool from MIUI, using MediatekBootloaderUnlock (Windows 10/11, which reportedly does not wipe your user data), or using mtkclient (Any OS but requires Python). I will explain the mtkclient option as I'm on Linux and don't trust MIUI with more personal data than I have to.
Step-by-step (adapted from this How to Guide):
Install mtkclient and its dependencies (easier if familiar with installing python packages etc., straightforward for me on Linux)
On your phone activate developer mode and turn on USB debugging and OEM unlocking
Turn off phone and disconnect from computer
In the directory where you installed mtkclient run:
python mtk e metadata,userdata,md_udc
This erases your data
At this point plug your phone in (still turned off)
python mtk da seccfg unlock
This unlocks the bootloader
python mtk reset
This reboots the phone
Disconnect USB cable and reboot phone
When it boots a message is displayed warning that dm-verity is corrupted. Click the power button to dismiss and continue booting.
2. Source boot.img
Find your MIUI version in Settings -> About phone -> MIUI Version and look for the version number (e.g. 13.0.6.0(RKEEUXM))
Visit the MIUI Updates Tracker and download the matching Stable Fastboot update (if you can't find it scroll down to Extracting boot.img from Payload)
Unzip the TGZ and the TAR that it contains then navigate to the images directory and find the boot.img file
3. Patch boot.imgWe need to patch the boot.img to give it root powers. We do this on the phone using Magisk.
Step-by-step (adapted from the Magisk installation instructions):
On your phone, download Magisk and install it
Connect your phone to your computer and put the boot.img you extracted on your phone somewhere
Open Magisk and in "Magisk" section tap "Install"
Choose the "Select and Patch a File" option and select your boot.img in the file browser and let Magisk patch it
Find the patched boot image in Downloads (called magisk_patched_*.img) and copy it to your computer in the same directory as the vbmeta.img we extracted earlier
4. Flash patched boot.imgFinally we need to replace the current boot.img on the phone with our patched one that has root powers. This is called flashing and is done using adb.
Step-by-step:
Install the Android SDK platform tools which contains adb and fastboot
Install a USB driver that supports fastboot mode (you cannot use fastbootd for this or you'll bootloop)
Ensure your phone is connected, USB debugging is enabled and working, and OEM Unlocking is enabled
In the directory you copied the magisk_patched_*.img to run:
adb reboot bootloader
This reboots your phone into fastboot mode. Wait until "FASTBOOT" is displayed on the screen
fastboot flash boot magisk_patched_*.img
This flashes the patched boot.img to give you root
fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img
This flashes the vbmeta.img, disabling the dm-verity corruption message at startup
Once it's done reboot your phone by pressing and holding the power button
That's all there is to it! This took me about an hour as I was working out all the steps as I've not rooted in a phone in nearly a decade - I reckon with a fast internet connection you could get it done in about 15 minutes.
Extract boot.img from PayloadIf you can't find a fastboot image (boot.img) for your version then you might be able to extract it from the full firmware package. This will require the use of a third party tool such as payload-dumper (python) or payload-dumper-go. Note that you may be better off just waiting for the fastboot image to be released to the public.
Tidying upYou can delete all the stuff you downloaded onto your computer and the boot.img and magisk_patched_*.img from your phone.
It's a good idea to disable automatic OTA updates (Settings -> Additional settings -> Developer options -> Automatic sytem updates) so that you can update through Magisk.
Some apps will be able to tell that you have rooted your phone, and may stop you from using them. You can check this by downloading YASNAC onto your phone and seeing if it passes. If not (which it won't) the most straightforward solution is to add the Universal SafetyNet Fix module to Magisk, then enable Zygisk in Magisk settings and restart your phone, which will be enough to pass SafetyNet Attestation. If they're clever and still detect the root then in Magisk toggle Enforce DenyList and add the problematic apps to the DenyList.
Updating Magisk
You cannot update Magisk via the Magisk app, as this device does not allow writing to the boot partition at runtime.
Instead, update the Magisk app, then use it to patch your stock boot.img and flash it manually using fastboot, as if you were installing it from scratch (as above). This will not wipe your user data, but be sure to backup first in case something goes wrong.
aricooperdavis said:
Rooting the POCO M4 Pro 4G (fleur) turned out to be quite straightforward. Note, I have a 2201117PG (EEA), you may have a different experience, it's not my fault if you brick your phone etc.
The process can be broken down into 4 steps:
Unlock Bootloader
Source boot.img (using payload_dumper)
Patch boot.img (using Magisk)
Flash patched boot.img (using adb)
1. Unlock BootloaderThis can be done using the official tool from MIUI or using mtkclient. I went for the mtkclient option as I don't want to send more of my personal data to MIUI than I have to.
Step-by-step (adapted from this How to Guide):
Install mtkclient and its dependencies (easier if familiar with installing python packages etc., straightforward for me on Linux)
On your phone activate developer mode and turn on USB debugging and OEM unlocking
Turn off phone and disconnect from computer
In the directory where you installed mtkclient run:
python mtk e metadata,userdata,md_udc
At this point plug your phone in (still turned off)
python mtk da seccfg unlock
python mtk reset
Disconnect USB cable and reboot phone
When it boots a message is displayed saying it is corrupted. Click the power button to dismiss and continue booting.
2. Source boot.imgThe boot.img needs to be extracted from the official MIUI firmware package using payload_dumper.
Step-by-step:
Download the firmware package for your device (you can check what version you need in Settings -> About phone -> MIUI version (For POCO)
Extract the .zip and find the payload.bin file
Download the payload dumper, extract the zip, and place the payload.bin file in the payload_dumper folder
In the payload_dumper directory run:
python payload_dumper.py payload.bin
This will extract lots of files from the firmware package. You only need to keep boot.img and vbmeta.img
3. Patch boot.imgWe need to patch the boot.img to give it root powers. We do this on the phone using Magisk.
Step-by-step (adapted from the Magisk installation instructions):
On your phone, download Magisk and install it
Connect your phone to your computer and put the boot.img you extracted on your phone somewhere
Open Magisk and in "Magisk" section tap "Install"
Choose the "Select and Patch a File" option and select your boot.img in the file browser and let Magisk patch it
Find the patched boot image in Downloads (called magisk_patched_*.img) and copy it to your computer in the same directory as the vbmeta.img we extracted earlier
4. Flash patched boot.imgFinally we need to replace the current boot.img on the phone with our patched one that has root powers. This is called flashing and is done using adb.
Step-by-step:
Install the Android SDK platform tools which contains adb and fastboot
Install a USB driver that supports fastboot mode
Ensure your phone is connected, USB debugging is enabled and working, and OEM Unlocking is enabled
In the directory you copied the magisk_patched_*.img to run:
adb reboot bootloader
This reboots your phone into fastboot mode. Wait until "FASTBOOT" is displayed on the screen
fastboot flash boot magisk_patched_*.img
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
Once it's done reboot your phone by pressing and holding the power button
That's all there is to it! This took me about an hour as I was working out all the steps as I've not rooted in a phone in nearly a decade - I reckon with a fast internet connection you could get it done in about 15 minutes.
Tidying upYou can delete all the stuff you downloaded onto your computer and the boot.img and magisk_patched_*.img from your phone.
It's a good idea to disable automatic OTA updates (Settings -> Additional settings -> Developer options -> Automatic sytem updates) so that you can update through Magisk.
Some apps will be able to tell that you have rooted your phone, and may stop you from using them. You can check this by downloading YASNAC onto your phone and seeing if it passes. If not (which it won't) the most straightforward solution is to add the Universal SafetyNet Fix module to Magisk, then enable Zygisk in Magisk settings and restart your phone, which will be enough to pass SafetyNet Attestation. If they're clever and still detect the root then in Magisk toggle Enforce DenyList and add the problematic apps to the DenyList.
Click to expand...
Click to collapse
Wow, Thank you very much!
Very details!
Will try it in my spare time.
MarkLev said:
Wow, Thank you very much!
Very details!
Will try it in my spare time.
Click to expand...
Click to collapse
Good luck, let us know how it goes and what you do with your root! So far I've installed AdAway and De-Bloater
aricooperdavis. hi!I buy phone Poco M4 Pro (4G) (fleur). Please help me get ROOT rights for this phone.
I do not have PYTHON, but I have mtkclient - the bootloader is unlocked, and there is an Android SDK for fastboot firmware.
Global 13.0.7.0 RKEMIXM now. You have 2 file 1.magisk_patched_*.img and 2. vbmeta.img for Global 13.0.7.0 ? Can I save them for download?
After unlocking the bootloader, using the mtkclient method, a new notification appeared
- dm-verity coruption
You device is corrupt/
It can't be trusted and may not work properly
Press power button to contime
Or, device will power off in 5 sec. Always need PRESS POWER for contime again How to fix it?
It sounds like you've done everything right so far.
Lark5 said:
Global 13.0.7.0 RKEMIXM now. You have 2 file 1.magisk_patched_*.img and 2. vbmeta.img for Global 13.0.7.0 ? Can I save them for download?
Click to expand...
Click to collapse
Sorry, I have the EEA firmware; RKEEUXM.
If you want to extract the boot.img and vbmeta.img from your firmware package you will have to install python. This is worth doing as installing updates in the future may require you to do this extraction process again.
Alternatively you may be able to use mtk to dump these images directly from the phone, but I don't have any experience with this. To perform updates this way you would have to completely unroot and relock the bootloader, update the firmware, then re-dump the new boot and vbmeta images and root again. I think just installing python is probably easier...
The error message you're seeing is dm-verity, and we disable this when flashing the vbmeta.img in step 4, which I've edited to clarify. You can see that we disable it in the final fastboot command:
aricooperdavis said:
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
This flashes the vbmeta.img, disabling the dm-verity corruption message at startup
Click to expand...
Click to collapse
Good luck with your rooting!
Unlock Bootloade and Root and RECOVERY for Poco M4 Pro (4G) with out Pyton (on Windows 10\11):
Unlock Bootloader:
1.Download the MediatekBootloaderUnlock archive. Unpack the archive ZIP.
2. Open the Driver folder and right-click the cdc-acm.inf file, select "Install"
3.Now go back to the main folder and install the USBDK (x64 for 64-bit OS, x86 for 32-bit OS) on your PC (also right click - install).
4. Reboot the PC.
5.Turn off the phone.
6.Run the UnlockBootloader.bat file to start the bootloader unlock process. We keep it on, it is in a state of response from the phone, if the firewood, the cable is connected, then everything is ok, I’ll tell you right away that it turned out 3 times.
7.Now connect the phone to the computer with a cable by holding down the volume up + down + power button. (If the volume up button doesn't work, try using volume up or volume up + volume down or all three hardware buttons) while the UnlockBootloader.bat file is open.
8.Once the phone is detected, some commands will be run in the UnlockBootloader.bat file. Let the commands finish and as soon as the window closes. Your bootloader will be unlocked.
BY THE WAY! - You can lock the bootloader again by following the same steps without clearing. Just use LockBootloader.bat with the same steps.
Root:
Downloading the official firmware for the phone, I took fleur_global_images_V13.0.7.0.RKEMIXM_20220419.0000.00_11.0_global (approximately 5.6GB in weight)
Unpacked it ZIP, pulled out 2 files from there fleur_global_images_V13.0.7.0.RKEMIXM_20220419.0000.00_11.0_global\images
boot.img and vbmeta.img
Downloaded Magisk STABLE Version: 24.3 - download on telephone, setup APP
Launch Magisk Manager. When a pop-up window appears asking you to install Magisk, select INSTALL and select install again.
Click on "Fix Boot Image File".
Connect your device to PC via USB cable. Make sure USB debugging is enabled.
Download ADB \ fastoot (I took tools_r29.0.6-windows)
Run CMD as Administrator
We write -
adb devices - the phone must be determined (QX ********* device - so all drivers are correct)
adb reboot bootloader - The phone reboots into fastboot mode - an inscription on the screen if dm-verity corruption messages appear - press POWER to continue
fastboot flash boot boot_PATCH.img (file name how to change)
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img - will remove the inscription dm-verity corruption
OrangeFox-R11 RECOVERY:
Downloads for : -Android- Generic Device/Other | AndroidFileHost.com | Download GApps, Roms, Kernels, Themes, Firmware and more. Free file hosting for all Android developers.
Download GApps, Roms, Kernels, Themes, Firmware, and more. Free file hosting for all Android developers.
androidfilehost.com
Download, and Run CMD as Administrator
We write -
fastboot flash boot XXXXNAMEXXXX.img
Flash !boot! not fastboot flash recovery XXXXNAMEXXXX.img
Well done, glad you've got it sorted!
To clarify, this essentially follows the same 4 steps outlined in my post but using different tools that don't require python:
Unlock Bootloader
- Used MediatekBootloaderUnlock rather than mtkclient
Source boot.img
- Managed to find the images online without having to extract them from a ROM. @Lark5, where?
Patch boot.img (using Magisk)
- Same
Flash patched boot.img (using adb)
- Same
I think there's also a custom recovery install too (OrangeFox [not yet officially supported]) at the end. I tend not to bother with custom recoveries as I stick with the stock MIUI ROM and a custom recovery would complicate applying OTA updates. However, if you wish to install a custom ROM (anything other than a stock MIUI signed boot.img) then a custom recovery would be necessary, and they can also facilitate taking device backups etc.
aricooperdavis said:
Well done, glad you've got it sorted!
To clarify, this essentially follows the same 4 steps outlined in my post but using different tools that don't require python:
Unlock Bootloader
- Used MediatekBootloaderUnlock rather than mtkclient
Source boot.img
- Managed to find the images online without having to extract them from a ROM. @Lark5, where?
Patch boot.img (using Magisk)
- Same
Flash patched boot.img (using adb)
- Same
I think there's also a custom recovery install too (OrangeFox). I tend not to bother, but it can be convenient.
Click to expand...
Click to collapse
2. Find ROM on this link: https://mirom.ezbox.idv.tw/en/phone/fleur/roms-global-stable/
Fastboot Download V13.0.7.0.RKEMIXM
Explanations:
For fastboot (~5.6Gb) - firmware version, just unzip the ZIP, inside there is boot.img and vbmeta
For recovery (-2.5Gb) needed to extract boot.img Through Pyton for example
thanks for the help aricooperdavis
Lark5 said:
Find ROM on this link: https://mirom.ezbox.idv.tw/en/phone/fleur/roms-global-stable/
Click to expand...
Click to collapse
That's a great resource - the files it links to seem to be hosted on MIUIs servers too, so they're verifiably official
The more general link for all regions (not just global) for this phone would be: https://mirom.ezbox.idv.tw/en/phone/fleur/
I've updated the instructions to reflect your experience, thanks @Lark5!
aricooperdavis said:
Rooting the POCO M4 Pro 4G (fleur) turned out to be quite straightforward. Note, I have a 2201117PG (EEA), you may have a different experience, it's not my fault if you brick your phone etc. Backup before you start as this will wipe your phone.
The process can be broken down into 4 steps:
Unlock Bootloader
Source boot.img
Patch boot.img (using Magisk)
Flash patched boot.img (using adb)
1. Unlock BootloaderNote: This step will wipe your phone.
This can be done using the official tool from MIUI, using MediatekBootloaderUnlock (Windows 10/11), or using mtkclient (Any OS but requires Python). I will explain the mtkclient option as I'm on Linux and don't trust MIUI with more personal data than I have to.
Step-by-step (adapted from this How to Guide):
Install mtkclient and its dependencies (easier if familiar with installing python packages etc., straightforward for me on Linux)
On your phone activate developer mode and turn on USB debugging and OEM unlocking
Turn off phone and disconnect from computer
In the directory where you installed mtkclient run:
python mtk e metadata,userdata,md_udc
This erases your data
At this point plug your phone in (still turned off)
python mtk da seccfg unlock
This unlocks the bootloader
python mtk reset
This reboots the phone
Disconnect USB cable and reboot phone
When it boots a message is displayed warning that dm-verity is corrupted. Click the power button to dismiss and continue booting.
2. Source boot.imgNote: if your MIUI version (Available at: Settings -> About phone -> MIUI version) has a "Fastboot" file listed here then you can download that file and unzip it to find the boot.img and vbmeta.img, then skip to step 3.
Otherwise you'll have to extract them from the official MIUI firmware package using payload_dumper as follows.
Step-by-step:
Download the firmware package for your device (you can check what version you need in Settings -> About phone -> MIUI version (For POCO))
Extract the .zip and find the payload.bin file
Download the payload dumper, extract the zip, and place the payload.bin file in the payload_dumper folder
In the payload_dumper directory run:
python payload_dumper.py payload.bin
This will extract lots of files from the firmware package. You only need to keep boot.img and vbmeta.img
3. Patch boot.imgWe need to patch the boot.img to give it root powers. We do this on the phone using Magisk.
Step-by-step (adapted from the Magisk installation instructions):
On your phone, download Magisk and install it
Connect your phone to your computer and put the boot.img you extracted on your phone somewhere
Open Magisk and in "Magisk" section tap "Install"
Choose the "Select and Patch a File" option and select your boot.img in the file browser and let Magisk patch it
Find the patched boot image in Downloads (called magisk_patched_*.img) and copy it to your computer in the same directory as the vbmeta.img we extracted earlier
4. Flash patched boot.imgFinally we need to replace the current boot.img on the phone with our patched one that has root powers. This is called flashing and is done using adb.
Step-by-step:
Install the Android SDK platform tools which contains adb and fastboot
Install a USB driver that supports fastboot mode
Ensure your phone is connected, USB debugging is enabled and working, and OEM Unlocking is enabled
In the directory you copied the magisk_patched_*.img to run:
adb reboot bootloader
This reboots your phone into fastboot mode. Wait until "FASTBOOT" is displayed on the screen
fastboot flash boot magisk_patched_*.img
This flashes the patched boot.img to give you root
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
This flashes the vbmeta.img, disabling the dm-verity corruption message at startup
Once it's done reboot your phone by pressing and holding the power button
That's all there is to it! This took me about an hour as I was working out all the steps as I've not rooted in a phone in nearly a decade - I reckon with a fast internet connection you could get it done in about 15 minutes.
Tidying upYou can delete all the stuff you downloaded onto your computer and the boot.img and magisk_patched_*.img from your phone.
It's a good idea to disable automatic OTA updates (Settings -> Additional settings -> Developer options -> Automatic sytem updates) so that you can update through Magisk.
Some apps will be able to tell that you have rooted your phone, and may stop you from using them. You can check this by downloading YASNAC onto your phone and seeing if it passes. If not (which it won't) the most straightforward solution is to add the Universal SafetyNet Fix module to Magisk, then enable Zygisk in Magisk settings and restart your phone, which will be enough to pass SafetyNet Attestation. If they're clever and still detect the root then in Magisk toggle Enforce DenyList and add the problematic apps to the DenyList.
Click to expand...
Click to collapse
When I gave this command fast boot flash dm verify it always unknown option in my cmd any solution ? can anybody help me??
Daafafagsgsgs said:
When I gave this command fast boot flash dm verify it always unknown option in my cmd any solution ? can anybody help me??
Click to expand...
Click to collapse
Make sure you're copying the command exactly - it's fastboot rather than fast boot and verity not verify. Did you install the Android SDK platform tools that contain fastboot? You may need to restart after this install to make the command available in your command prompt/shell.
aricooperdavis said:
Make sure you're copying the command exactly - it's fastboot rather than fast boot and verity not verify. Did you install the Android SDK platform tools that contain fastboot? You may need to restart after this install to make the command available in your command prompt/shell.
Click to expand...
Click to collapse
Yeah i copied the same command but how to install Android sdk tools can you suggest me a video?
Daafafagsgsgs said:
Yeah i copied the same command but how to install Android sdk tools can you suggest me a video?
Click to expand...
Click to collapse
Go to this link, scroll to the downloads section, and select the right download for your OS, then follow the instructions.
This video shows the process, but has very annoying music!
aricooperdavis said:
Make sure you're copying the command exactly - it's fastboot rather than fast boot and verity not verify. Did you install the Android SDK platform tools that contain fastboot? You may need to restart after this install to make the command available in your command prompt/shell.
Click to expand...
Click to collapse
I installed and tried everything this error comes
Interesting, that sounds like you've got an outdated version of fastbook. What does fastboot --version give you?
Can i flash it with my phone ??
Adb otg app??
I don't know, I can't help you with that.
aricooperdavis said:
Interesting, that sounds like you've got an outdated version of fastbook. What does fastboot --version give you?
Click to expand...
Click to collapse
Fastboot version
That's not an official version of fastboot, so it looks like it's missing the command you need. Download the proper Android SDK tools from Android (the same as the original link) and replace your "Minimal" version with it.
aricooperdavis said:
That's not an official version of fastboot, so it looks like it's missing the command you need. Download the proper Android SDK tools from Android (the same as the original link) and replace your "Minimal" version with it.
Click to expand...
Click to collapse
After many tries i found that the command given is wrong
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
This is given
It will be
fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img
I is Missing Now i have flashed vb meta and problem is solved with the fastboot version i have
By the way thanks