I'm a nitwit and tried to install a rom with s-on. I now get stuck on the HTC loading/boot screen and never leave it. I can access the bootloader, fastboot, and recovery fine however. Is there a way for me to get either s-off or boot my phone again?
Thanks
This is assuming that you're S-on and running Windows.
You need to install adb. After it is installed, open the command prompt and navigate to where you installed adb.
Ex: d:\phones\rezound\bootloader\andriod\
Next, open up your ROM and extract the boot.img file to where you installed adb.
Then, boot your phone into the bootloader and connect your USB cable.
Once you have fastboot usb displayed on the phone, enter this command into the command prompt and hit enter: fastboot flash boot boot.img
At that point, reboot the phone (fastboot reboot).
Or just use adb/fastboot and boot into recovery, extract the recovery.img file from your recovery of choice (Amon Ra, TWRP, CWM) and place it in the adb directory, then type "fastboot boot recovery.img" and flash the ROM again... doing fastboot boot recovery.img is in some ways giving you temporary S-OFF and will allow the rom to flash with the boot image. Also remember that on first boot, many roms will appear to freeze for 2-3 minutes or even longer in the boot process, make sure to give the initial boot at least 10 minutes before concluding something failed.
I own Motorola One Action running Android 10 and bootloader unlocked and unrooted. I would like to root this phone so I tried to install TRWP. However, I found TRWP doesn't support Android 10. So I installed Magisk Manager and tried to install Magisk but got an error massage saying "- Unpacking boot image, Unsupported/Unknown image format Installation failed".
Would you please help me what to do?
Thank you very much.
[email protected] said:
I own Motorola One Action running Android 10 and bootloader unlocked and unrooted. I would like to root this phone so I tried to install TRWP. However, I found TRWP doesn't support Android 10. So I installed Magisk Manager and tried to install Magisk but got an error massage saying "- Unpacking boot image, Unsupported/Unknown image format Installation failed".
Would you please help me what to do?
Thank you very much.
Click to expand...
Click to collapse
Download your stock formate, extract the payload.bin with a payload bin extractor. Find the stock boot img. Copy to root of phone storage.
Open magisk manager select install on magisk. Pick patch image make sure the top 2 check boxes are checked on main screen before doing this. After magisk will say the patched image is in download folder on your phone. Copy the patched image to your PC. Open your command prompt in your fastboot tools folder put the patched image in it.
Reboot your phone to bootloader or fastboot mode. In your command prompt type fastboot flash boot (name of patched img).img
Reboot phone.
Before doing this make sure bootloader is unlocked and USB debugging is active
toolhas4degrees said:
Download your stock formate, extract the payload.bin with a payload bin extractor. Find the stock boot img. Copy to root of phone storage.
Open magisk manager select install on magisk. Pick patch image make sure the top 2 check boxes are checked on main screen before doing this. After magisk will say the patched image is in download folder on your phone. Copy the patched image to your PC. Open your command prompt in your fastboot tools folder put the patched image in it.
Reboot your phone to bootloader or fastboot mode. In your command prompt type fastboot flash boot (name of patched img).img
Reboot phone.
Before doing this make sure bootloader is unlocked and USB debugging is active
Click to expand...
Click to collapse
Thank you very much for your reply. However, I am still the beginner for Android and would like to have more explanation concerning the first sentence. I would like to know (1) how can I download my stock formate and where, (2) How can I extract the payload.bin. Thank you for your help.
[email protected] said:
Thank you very much for your reply. However, I am still the beginner for Android and would like to have more explanation concerning the first sentence. I would like to know (1) how can I download my stock formate and where, (2) How can I extract the payload.bin. Thank you for your help.
Click to expand...
Click to collapse
Sorry typo. Was supposed to be firmware. And on Android 10 inside the firmware zip. There is a payload.bin file. Search Google for a payload.bin dumper don't know what is you are on ex Linux mac or PC.
https://www.androidinfotech.com/motorola-one-action-android-10-stock/
Hello everyone, I have a problem, maybe someone will be able to assist me.
I have a phone Samsung Galaxy A20e (SM-A202F) with unlocked bootloader (Yes, in developer settings it says "Bootloader already unlocked" and the "OEM unlocking" option is grayed out).
I am trying to root the device and for that I have modified boot.img that I repacked with Magisk Manager, and an empty vbmeta.img that makes the device ignore verify. So far no guides I found worked. When i try to flash modified AP (with the modified boot.img inside) with Odin (including the rest of the files) it flashes successfully but I get "Error verifying vbmeta image" on the device screen and device is stuck on Download mode. If I re-flash unmodified AP with Odin, it works and device is like new.
All the small details aside, the problem is that I can't boot the device into fastboot mode. Whenever I do "adb reboot fastboot" it always boots into Download mode and fastboot commands don't work. Same goes with stock recovery, when I click "Reboot to bootloader", device boots into Download mode.
On the Magisk website I read something about "VaultKeeper" but I was sure i connected to Wi-Fi during setup and then enabled Developer mode. Link What I might be missing here?
tomasxp said:
Hello everyone, I have a problem, maybe someone will be able to assist me.
I have a phone Samsung Galaxy A20e (SM-A202F) with unlocked bootloader (Yes, in developer settings it says "Bootloader already unlocked" and the "OEM unlocking" option is grayed out).
I am trying to root the device and for that I have modified boot.img that I repacked with Magisk Manager, and an empty vbmeta.img that makes the device ignore verify. So far no guides I found worked. When i try to flash modified AP (with the modified boot.img inside) with Odin (including the rest of the files) it flashes successfully but I get "Error verifying vbmeta image" on the device screen and device is stuck on Download mode. If I re-flash unmodified AP with Odin, it works and device is like new.
All the small details aside, the problem is that I can't boot the device into fastboot mode. Whenever I do "adb reboot fastboot" it always boots into Download mode and fastboot commands don't work. Same goes with stock recovery, when I click "Reboot to bootloader", device boots into Download mode.
On the Magisk website I read something about "VaultKeeper" but I was sure i connected to Wi-Fi during setup and then enabled Developer mode. Link What I might be missing here?
Click to expand...
Click to collapse
Samsung don't support fastboot as Odin mode is what is used. You'll need to edit the fstab under /vender/etc.. and no you can't replace it with fastboot because you'll hard brick the device
Unfortunately I'm unsure if what's going on so you may not be able to root your device
TheExploitedOne said:
Samsung don't support fastboot as Odin mode is what is used. You'll need to edit the fstab under /vender/etc.. and no you can't replace it with fastboot because you'll hard brick the device
Unfortunately I'm unsure if what's going on so you may not be able to root your device
Click to expand...
Click to collapse
Thank you, I didn't know new Samsung devices don't support fastboot (or at least this one specifically).
On the other hand, when you said it, I tried other thing. I repacked AP image with Magisk modified boot.img and empty vbmeta.img I had from other tutorial and after flashing with Odin and factory resetting it stopped showing the boot error and booted the Android up. Long 1st boot tho, about 6 minutes. So far the device appears to work fine, will update if I manage to complete the root process.
EDIT1: The phone appears to be working with patched boot.img and vbmeta.img but Magisk can't detect that boot.img is pached. It only gives me the option to download zip (which I can't install because I don't have TWRP installed) and patch the boot.img again. Well atleast we are getting somewhere with this, I'll try to figure it out later.
EDIT2: I successfully rooted the phone. I had once again to extract the modified boot.img from the AP, modify it the second time with Magisk. Then I put it back into the AP file, deleting all other images, leaving only boot.img and META-DATA folder. Flashed it through Odin once again and this time Magisk waited 30s at launch and showed that everything is ok. Root checker is also showing that device is rooted as superuser asks for permissions.
tomasxp said:
Thank you, I didn't know new Samsung devices don't support fastboot (or at least this one specifically).
On the other hand, when you said it, I tried other thing. I repacked AP image with Magisk modified boot.img and empty vbmeta.img I had from other tutorial and after flashing with Odin and factory resetting it stopped showing the boot error and booted the Android up. Long 1st boot tho, about 6 minutes. So far the device appears to work fine, will update if I manage to complete the root process.
EDIT1: The phone appears to be working with patched boot.img and vbmeta.img but Magisk can't detect that boot.img is pached. It only gives me the option to download zip (which I can't install because I don't have TWRP installed) and patch the boot.img again. Well atleast we are getting somewhere with this, I'll try to figure it out later.
EDIT2: I successfully rooted the phone. I had once again to extract the modified boot.img from the AP, modify it the second time with Magisk. Then I put it back into the AP file, deleting all other images, leaving only boot.img and META-DATA folder. Flashed it through Odin once again and this time Magisk waited 30s at launch and showed that everything is ok. Root checker is also showing that device is rooted as superuser asks for permissions.
Click to expand...
Click to collapse
That's good to hear that root was successful!
I have bricked my X3 SZ and worked 1 week to get it unbricked (bricked after update of Android 11) myself, even the service centre not able to restore it and told me that may be Motherboard Problem. Finally by flashing Android 11 Stock images (created using OFP to CMD file converter), I restore the phone. I tried with unlocked Bootloader mode, don't know about locked bootloader state.
Simply download the stock images from the link and boot into bootloader mode, connect to PC, open Minimal ADB Fastboot and flash with fastboot commands. Required USB, Realme, Android Drivers to be installed in the PC. All your data will be lost and do it at your own risk.
Download all the images (userdata, recovery, boot, vbmeta & dtbo) and copy to the Minimal ADB Fastboot folder, run the CMD prompt and run the following commands:
fastboot devices (to check whether phone connected successfully or not)
fastboot erase userdata
fastboot flash boot boot.img
fastboot flash recovery recovery.img
fastboot flash vbmeta vbmeta.img
fastboot flash userdata userdata.img
fastboot flash dtbo dtbo.img
fastboot reboot
Done.. your X3 SZ must reboot and starts, if not you need to work around or contact SC.. Good Luck
Link Deleted
Thx
EDIT: Very informative and useful!
Cant get magisk_boot.img to work. Going to try orangefox recovery to install Magisk (root).
Tried numerous times to install it (here) took 3-4 hours to get Python to work in windows 7 (cus missing libraries, and newer version dont work). Its bricked the phone 3 times now.
I tried to install TWRP but failed, after I tried Orangefox, successfully installed but not able to boot, rebooting into recovery only, then I flashed only boot image using fastboot and able to boot but lost Custom Recovery. After all I stopped trying anything on X3 SZ
please provide new link
Rooting the POCO M4 Pro 4G (fleur) turned out to be quite straightforward. Note, I have a 2201117PG (EEA), you may have a different experience, it's not my fault if you brick your phone etc. Backup before you start as this will wipe your phone.
The process can be broken down into 4 steps:
Unlock Bootloader
Source boot.img
Patch boot.img (using Magisk)
Flash patched boot.img (using adb)
1. Unlock BootloaderNote: This step will wipe your phone.
This can be done using the official tool from MIUI, using MediatekBootloaderUnlock (Windows 10/11, which reportedly does not wipe your user data), or using mtkclient (Any OS but requires Python). I will explain the mtkclient option as I'm on Linux and don't trust MIUI with more personal data than I have to.
Step-by-step (adapted from this How to Guide):
Install mtkclient and its dependencies (easier if familiar with installing python packages etc., straightforward for me on Linux)
On your phone activate developer mode and turn on USB debugging and OEM unlocking
Turn off phone and disconnect from computer
In the directory where you installed mtkclient run:
python mtk e metadata,userdata,md_udc
This erases your data
At this point plug your phone in (still turned off)
python mtk da seccfg unlock
This unlocks the bootloader
python mtk reset
This reboots the phone
Disconnect USB cable and reboot phone
When it boots a message is displayed warning that dm-verity is corrupted. Click the power button to dismiss and continue booting.
2. Source boot.img
Find your MIUI version in Settings -> About phone -> MIUI Version and look for the version number (e.g. 13.0.6.0(RKEEUXM))
Visit the MIUI Updates Tracker and download the matching Stable Fastboot update (if you can't find it scroll down to Extracting boot.img from Payload)
Unzip the TGZ and the TAR that it contains then navigate to the images directory and find the boot.img file
3. Patch boot.imgWe need to patch the boot.img to give it root powers. We do this on the phone using Magisk.
Step-by-step (adapted from the Magisk installation instructions):
On your phone, download Magisk and install it
Connect your phone to your computer and put the boot.img you extracted on your phone somewhere
Open Magisk and in "Magisk" section tap "Install"
Choose the "Select and Patch a File" option and select your boot.img in the file browser and let Magisk patch it
Find the patched boot image in Downloads (called magisk_patched_*.img) and copy it to your computer in the same directory as the vbmeta.img we extracted earlier
4. Flash patched boot.imgFinally we need to replace the current boot.img on the phone with our patched one that has root powers. This is called flashing and is done using adb.
Step-by-step:
Install the Android SDK platform tools which contains adb and fastboot
Install a USB driver that supports fastboot mode (you cannot use fastbootd for this or you'll bootloop)
Ensure your phone is connected, USB debugging is enabled and working, and OEM Unlocking is enabled
In the directory you copied the magisk_patched_*.img to run:
adb reboot bootloader
This reboots your phone into fastboot mode. Wait until "FASTBOOT" is displayed on the screen
fastboot flash boot magisk_patched_*.img
This flashes the patched boot.img to give you root
fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img
This flashes the vbmeta.img, disabling the dm-verity corruption message at startup
Once it's done reboot your phone by pressing and holding the power button
That's all there is to it! This took me about an hour as I was working out all the steps as I've not rooted in a phone in nearly a decade - I reckon with a fast internet connection you could get it done in about 15 minutes.
Extract boot.img from PayloadIf you can't find a fastboot image (boot.img) for your version then you might be able to extract it from the full firmware package. This will require the use of a third party tool such as payload-dumper (python) or payload-dumper-go. Note that you may be better off just waiting for the fastboot image to be released to the public.
Tidying upYou can delete all the stuff you downloaded onto your computer and the boot.img and magisk_patched_*.img from your phone.
It's a good idea to disable automatic OTA updates (Settings -> Additional settings -> Developer options -> Automatic sytem updates) so that you can update through Magisk.
Some apps will be able to tell that you have rooted your phone, and may stop you from using them. You can check this by downloading YASNAC onto your phone and seeing if it passes. If not (which it won't) the most straightforward solution is to add the Universal SafetyNet Fix module to Magisk, then enable Zygisk in Magisk settings and restart your phone, which will be enough to pass SafetyNet Attestation. If they're clever and still detect the root then in Magisk toggle Enforce DenyList and add the problematic apps to the DenyList.
Updating Magisk
You cannot update Magisk via the Magisk app, as this device does not allow writing to the boot partition at runtime.
Instead, update the Magisk app, then use it to patch your stock boot.img and flash it manually using fastboot, as if you were installing it from scratch (as above). This will not wipe your user data, but be sure to backup first in case something goes wrong.
aricooperdavis said:
Rooting the POCO M4 Pro 4G (fleur) turned out to be quite straightforward. Note, I have a 2201117PG (EEA), you may have a different experience, it's not my fault if you brick your phone etc.
The process can be broken down into 4 steps:
Unlock Bootloader
Source boot.img (using payload_dumper)
Patch boot.img (using Magisk)
Flash patched boot.img (using adb)
1. Unlock BootloaderThis can be done using the official tool from MIUI or using mtkclient. I went for the mtkclient option as I don't want to send more of my personal data to MIUI than I have to.
Step-by-step (adapted from this How to Guide):
Install mtkclient and its dependencies (easier if familiar with installing python packages etc., straightforward for me on Linux)
On your phone activate developer mode and turn on USB debugging and OEM unlocking
Turn off phone and disconnect from computer
In the directory where you installed mtkclient run:
python mtk e metadata,userdata,md_udc
At this point plug your phone in (still turned off)
python mtk da seccfg unlock
python mtk reset
Disconnect USB cable and reboot phone
When it boots a message is displayed saying it is corrupted. Click the power button to dismiss and continue booting.
2. Source boot.imgThe boot.img needs to be extracted from the official MIUI firmware package using payload_dumper.
Step-by-step:
Download the firmware package for your device (you can check what version you need in Settings -> About phone -> MIUI version (For POCO)
Extract the .zip and find the payload.bin file
Download the payload dumper, extract the zip, and place the payload.bin file in the payload_dumper folder
In the payload_dumper directory run:
python payload_dumper.py payload.bin
This will extract lots of files from the firmware package. You only need to keep boot.img and vbmeta.img
3. Patch boot.imgWe need to patch the boot.img to give it root powers. We do this on the phone using Magisk.
Step-by-step (adapted from the Magisk installation instructions):
On your phone, download Magisk and install it
Connect your phone to your computer and put the boot.img you extracted on your phone somewhere
Open Magisk and in "Magisk" section tap "Install"
Choose the "Select and Patch a File" option and select your boot.img in the file browser and let Magisk patch it
Find the patched boot image in Downloads (called magisk_patched_*.img) and copy it to your computer in the same directory as the vbmeta.img we extracted earlier
4. Flash patched boot.imgFinally we need to replace the current boot.img on the phone with our patched one that has root powers. This is called flashing and is done using adb.
Step-by-step:
Install the Android SDK platform tools which contains adb and fastboot
Install a USB driver that supports fastboot mode
Ensure your phone is connected, USB debugging is enabled and working, and OEM Unlocking is enabled
In the directory you copied the magisk_patched_*.img to run:
adb reboot bootloader
This reboots your phone into fastboot mode. Wait until "FASTBOOT" is displayed on the screen
fastboot flash boot magisk_patched_*.img
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
Once it's done reboot your phone by pressing and holding the power button
That's all there is to it! This took me about an hour as I was working out all the steps as I've not rooted in a phone in nearly a decade - I reckon with a fast internet connection you could get it done in about 15 minutes.
Tidying upYou can delete all the stuff you downloaded onto your computer and the boot.img and magisk_patched_*.img from your phone.
It's a good idea to disable automatic OTA updates (Settings -> Additional settings -> Developer options -> Automatic sytem updates) so that you can update through Magisk.
Some apps will be able to tell that you have rooted your phone, and may stop you from using them. You can check this by downloading YASNAC onto your phone and seeing if it passes. If not (which it won't) the most straightforward solution is to add the Universal SafetyNet Fix module to Magisk, then enable Zygisk in Magisk settings and restart your phone, which will be enough to pass SafetyNet Attestation. If they're clever and still detect the root then in Magisk toggle Enforce DenyList and add the problematic apps to the DenyList.
Click to expand...
Click to collapse
Wow, Thank you very much!
Very details!
Will try it in my spare time.
MarkLev said:
Wow, Thank you very much!
Very details!
Will try it in my spare time.
Click to expand...
Click to collapse
Good luck, let us know how it goes and what you do with your root! So far I've installed AdAway and De-Bloater
aricooperdavis. hi!I buy phone Poco M4 Pro (4G) (fleur). Please help me get ROOT rights for this phone.
I do not have PYTHON, but I have mtkclient - the bootloader is unlocked, and there is an Android SDK for fastboot firmware.
Global 13.0.7.0 RKEMIXM now. You have 2 file 1.magisk_patched_*.img and 2. vbmeta.img for Global 13.0.7.0 ? Can I save them for download?
After unlocking the bootloader, using the mtkclient method, a new notification appeared
- dm-verity coruption
You device is corrupt/
It can't be trusted and may not work properly
Press power button to contime
Or, device will power off in 5 sec. Always need PRESS POWER for contime again How to fix it?
It sounds like you've done everything right so far.
Lark5 said:
Global 13.0.7.0 RKEMIXM now. You have 2 file 1.magisk_patched_*.img and 2. vbmeta.img for Global 13.0.7.0 ? Can I save them for download?
Click to expand...
Click to collapse
Sorry, I have the EEA firmware; RKEEUXM.
If you want to extract the boot.img and vbmeta.img from your firmware package you will have to install python. This is worth doing as installing updates in the future may require you to do this extraction process again.
Alternatively you may be able to use mtk to dump these images directly from the phone, but I don't have any experience with this. To perform updates this way you would have to completely unroot and relock the bootloader, update the firmware, then re-dump the new boot and vbmeta images and root again. I think just installing python is probably easier...
The error message you're seeing is dm-verity, and we disable this when flashing the vbmeta.img in step 4, which I've edited to clarify. You can see that we disable it in the final fastboot command:
aricooperdavis said:
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
This flashes the vbmeta.img, disabling the dm-verity corruption message at startup
Click to expand...
Click to collapse
Good luck with your rooting!
Unlock Bootloade and Root and RECOVERY for Poco M4 Pro (4G) with out Pyton (on Windows 10\11):
Unlock Bootloader:
1.Download the MediatekBootloaderUnlock archive. Unpack the archive ZIP.
2. Open the Driver folder and right-click the cdc-acm.inf file, select "Install"
3.Now go back to the main folder and install the USBDK (x64 for 64-bit OS, x86 for 32-bit OS) on your PC (also right click - install).
4. Reboot the PC.
5.Turn off the phone.
6.Run the UnlockBootloader.bat file to start the bootloader unlock process. We keep it on, it is in a state of response from the phone, if the firewood, the cable is connected, then everything is ok, I’ll tell you right away that it turned out 3 times.
7.Now connect the phone to the computer with a cable by holding down the volume up + down + power button. (If the volume up button doesn't work, try using volume up or volume up + volume down or all three hardware buttons) while the UnlockBootloader.bat file is open.
8.Once the phone is detected, some commands will be run in the UnlockBootloader.bat file. Let the commands finish and as soon as the window closes. Your bootloader will be unlocked.
BY THE WAY! - You can lock the bootloader again by following the same steps without clearing. Just use LockBootloader.bat with the same steps.
Root:
Downloading the official firmware for the phone, I took fleur_global_images_V13.0.7.0.RKEMIXM_20220419.0000.00_11.0_global (approximately 5.6GB in weight)
Unpacked it ZIP, pulled out 2 files from there fleur_global_images_V13.0.7.0.RKEMIXM_20220419.0000.00_11.0_global\images
boot.img and vbmeta.img
Downloaded Magisk STABLE Version: 24.3 - download on telephone, setup APP
Launch Magisk Manager. When a pop-up window appears asking you to install Magisk, select INSTALL and select install again.
Click on "Fix Boot Image File".
Connect your device to PC via USB cable. Make sure USB debugging is enabled.
Download ADB \ fastoot (I took tools_r29.0.6-windows)
Run CMD as Administrator
We write -
adb devices - the phone must be determined (QX ********* device - so all drivers are correct)
adb reboot bootloader - The phone reboots into fastboot mode - an inscription on the screen if dm-verity corruption messages appear - press POWER to continue
fastboot flash boot boot_PATCH.img (file name how to change)
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img - will remove the inscription dm-verity corruption
OrangeFox-R11 RECOVERY:
Downloads for : -Android- Generic Device/Other | AndroidFileHost.com | Download GApps, Roms, Kernels, Themes, Firmware and more. Free file hosting for all Android developers.
Download GApps, Roms, Kernels, Themes, Firmware, and more. Free file hosting for all Android developers.
androidfilehost.com
Download, and Run CMD as Administrator
We write -
fastboot flash boot XXXXNAMEXXXX.img
Flash !boot! not fastboot flash recovery XXXXNAMEXXXX.img
Well done, glad you've got it sorted!
To clarify, this essentially follows the same 4 steps outlined in my post but using different tools that don't require python:
Unlock Bootloader
- Used MediatekBootloaderUnlock rather than mtkclient
Source boot.img
- Managed to find the images online without having to extract them from a ROM. @Lark5, where?
Patch boot.img (using Magisk)
- Same
Flash patched boot.img (using adb)
- Same
I think there's also a custom recovery install too (OrangeFox [not yet officially supported]) at the end. I tend not to bother with custom recoveries as I stick with the stock MIUI ROM and a custom recovery would complicate applying OTA updates. However, if you wish to install a custom ROM (anything other than a stock MIUI signed boot.img) then a custom recovery would be necessary, and they can also facilitate taking device backups etc.
aricooperdavis said:
Well done, glad you've got it sorted!
To clarify, this essentially follows the same 4 steps outlined in my post but using different tools that don't require python:
Unlock Bootloader
- Used MediatekBootloaderUnlock rather than mtkclient
Source boot.img
- Managed to find the images online without having to extract them from a ROM. @Lark5, where?
Patch boot.img (using Magisk)
- Same
Flash patched boot.img (using adb)
- Same
I think there's also a custom recovery install too (OrangeFox). I tend not to bother, but it can be convenient.
Click to expand...
Click to collapse
2. Find ROM on this link: https://mirom.ezbox.idv.tw/en/phone/fleur/roms-global-stable/
Fastboot Download V13.0.7.0.RKEMIXM
Explanations:
For fastboot (~5.6Gb) - firmware version, just unzip the ZIP, inside there is boot.img and vbmeta
For recovery (-2.5Gb) needed to extract boot.img Through Pyton for example
thanks for the help aricooperdavis
Lark5 said:
Find ROM on this link: https://mirom.ezbox.idv.tw/en/phone/fleur/roms-global-stable/
Click to expand...
Click to collapse
That's a great resource - the files it links to seem to be hosted on MIUIs servers too, so they're verifiably official
The more general link for all regions (not just global) for this phone would be: https://mirom.ezbox.idv.tw/en/phone/fleur/
I've updated the instructions to reflect your experience, thanks @Lark5!
aricooperdavis said:
Rooting the POCO M4 Pro 4G (fleur) turned out to be quite straightforward. Note, I have a 2201117PG (EEA), you may have a different experience, it's not my fault if you brick your phone etc. Backup before you start as this will wipe your phone.
The process can be broken down into 4 steps:
Unlock Bootloader
Source boot.img
Patch boot.img (using Magisk)
Flash patched boot.img (using adb)
1. Unlock BootloaderNote: This step will wipe your phone.
This can be done using the official tool from MIUI, using MediatekBootloaderUnlock (Windows 10/11), or using mtkclient (Any OS but requires Python). I will explain the mtkclient option as I'm on Linux and don't trust MIUI with more personal data than I have to.
Step-by-step (adapted from this How to Guide):
Install mtkclient and its dependencies (easier if familiar with installing python packages etc., straightforward for me on Linux)
On your phone activate developer mode and turn on USB debugging and OEM unlocking
Turn off phone and disconnect from computer
In the directory where you installed mtkclient run:
python mtk e metadata,userdata,md_udc
This erases your data
At this point plug your phone in (still turned off)
python mtk da seccfg unlock
This unlocks the bootloader
python mtk reset
This reboots the phone
Disconnect USB cable and reboot phone
When it boots a message is displayed warning that dm-verity is corrupted. Click the power button to dismiss and continue booting.
2. Source boot.imgNote: if your MIUI version (Available at: Settings -> About phone -> MIUI version) has a "Fastboot" file listed here then you can download that file and unzip it to find the boot.img and vbmeta.img, then skip to step 3.
Otherwise you'll have to extract them from the official MIUI firmware package using payload_dumper as follows.
Step-by-step:
Download the firmware package for your device (you can check what version you need in Settings -> About phone -> MIUI version (For POCO))
Extract the .zip and find the payload.bin file
Download the payload dumper, extract the zip, and place the payload.bin file in the payload_dumper folder
In the payload_dumper directory run:
python payload_dumper.py payload.bin
This will extract lots of files from the firmware package. You only need to keep boot.img and vbmeta.img
3. Patch boot.imgWe need to patch the boot.img to give it root powers. We do this on the phone using Magisk.
Step-by-step (adapted from the Magisk installation instructions):
On your phone, download Magisk and install it
Connect your phone to your computer and put the boot.img you extracted on your phone somewhere
Open Magisk and in "Magisk" section tap "Install"
Choose the "Select and Patch a File" option and select your boot.img in the file browser and let Magisk patch it
Find the patched boot image in Downloads (called magisk_patched_*.img) and copy it to your computer in the same directory as the vbmeta.img we extracted earlier
4. Flash patched boot.imgFinally we need to replace the current boot.img on the phone with our patched one that has root powers. This is called flashing and is done using adb.
Step-by-step:
Install the Android SDK platform tools which contains adb and fastboot
Install a USB driver that supports fastboot mode
Ensure your phone is connected, USB debugging is enabled and working, and OEM Unlocking is enabled
In the directory you copied the magisk_patched_*.img to run:
adb reboot bootloader
This reboots your phone into fastboot mode. Wait until "FASTBOOT" is displayed on the screen
fastboot flash boot magisk_patched_*.img
This flashes the patched boot.img to give you root
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
This flashes the vbmeta.img, disabling the dm-verity corruption message at startup
Once it's done reboot your phone by pressing and holding the power button
That's all there is to it! This took me about an hour as I was working out all the steps as I've not rooted in a phone in nearly a decade - I reckon with a fast internet connection you could get it done in about 15 minutes.
Tidying upYou can delete all the stuff you downloaded onto your computer and the boot.img and magisk_patched_*.img from your phone.
It's a good idea to disable automatic OTA updates (Settings -> Additional settings -> Developer options -> Automatic sytem updates) so that you can update through Magisk.
Some apps will be able to tell that you have rooted your phone, and may stop you from using them. You can check this by downloading YASNAC onto your phone and seeing if it passes. If not (which it won't) the most straightforward solution is to add the Universal SafetyNet Fix module to Magisk, then enable Zygisk in Magisk settings and restart your phone, which will be enough to pass SafetyNet Attestation. If they're clever and still detect the root then in Magisk toggle Enforce DenyList and add the problematic apps to the DenyList.
Click to expand...
Click to collapse
When I gave this command fast boot flash dm verify it always unknown option in my cmd any solution ? can anybody help me??
Daafafagsgsgs said:
When I gave this command fast boot flash dm verify it always unknown option in my cmd any solution ? can anybody help me??
Click to expand...
Click to collapse
Make sure you're copying the command exactly - it's fastboot rather than fast boot and verity not verify. Did you install the Android SDK platform tools that contain fastboot? You may need to restart after this install to make the command available in your command prompt/shell.
aricooperdavis said:
Make sure you're copying the command exactly - it's fastboot rather than fast boot and verity not verify. Did you install the Android SDK platform tools that contain fastboot? You may need to restart after this install to make the command available in your command prompt/shell.
Click to expand...
Click to collapse
Yeah i copied the same command but how to install Android sdk tools can you suggest me a video?
Daafafagsgsgs said:
Yeah i copied the same command but how to install Android sdk tools can you suggest me a video?
Click to expand...
Click to collapse
Go to this link, scroll to the downloads section, and select the right download for your OS, then follow the instructions.
This video shows the process, but has very annoying music!
aricooperdavis said:
Make sure you're copying the command exactly - it's fastboot rather than fast boot and verity not verify. Did you install the Android SDK platform tools that contain fastboot? You may need to restart after this install to make the command available in your command prompt/shell.
Click to expand...
Click to collapse
I installed and tried everything this error comes
Interesting, that sounds like you've got an outdated version of fastbook. What does fastboot --version give you?
Can i flash it with my phone ??
Adb otg app??
I don't know, I can't help you with that.
aricooperdavis said:
Interesting, that sounds like you've got an outdated version of fastbook. What does fastboot --version give you?
Click to expand...
Click to collapse
Fastboot version
That's not an official version of fastboot, so it looks like it's missing the command you need. Download the proper Android SDK tools from Android (the same as the original link) and replace your "Minimal" version with it.
aricooperdavis said:
That's not an official version of fastboot, so it looks like it's missing the command you need. Download the proper Android SDK tools from Android (the same as the original link) and replace your "Minimal" version with it.
Click to expand...
Click to collapse
After many tries i found that the command given is wrong
fastboot flash vbmeta --disable-verity --dsable-verification vbmeta.img
This is given
It will be
fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img
I is Missing Now i have flashed vb meta and problem is solved with the fastboot version i have
By the way thanks