bkerler / mtkclient

MTK reverse engineering and flash tool
GNU General Public License v3.0
2.56k stars 510 forks source link

vivo Y22 Failed to unlock BL #328

Closed xxroot closed 3 months ago

xxroot commented 2 years ago

`MTK Flash/Exploit Client V1.55 (c) B.Kerler 2018-2022

Preloader - Status: Waiting for PreLoader VCOM, please connect mobile

Port - Hint:

Power off the phone before connecting. For brom mode, press and hold vol up, vol dwn, or all hw buttons and connect usb. For preloader mode, don't press any hw button and connect usb.

......Port - Device detected :) Preloader - CPU: MT6582/MT6574() Preloader - HW version: 0x0 Preloader - WDT: 0x10007000 Preloader - Uart: 0x11002000 Preloader - Brom payload addr: 0x100a00 Preloader - DA payload addr: 0x201000 Preloader - Var1: 0xa Preloader - Disabling Watchdog... Preloader - HW code: 0x6582 Preloader - Target config: 0x0 Preloader - SBC enabled: False Preloader - SLA enabled: False Preloader - DAA enabled: False Preloader - SWJTAG enabled: False Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False Preloader - Root cert required: False Preloader - Mem read auth: False Preloader - Mem write auth: False Preloader - Cmd 0xC8 blocked: False Preloader - Get Target info Preloader - BROM mode detected. Preloader - HW subcode: 0x8a00 Preloader - HW Ver: 0xca01 Preloader - SW Ver: 0x1 Preloader - ME_ID: 6396F9BD10EA007A9F12067528A53B23 DA_handler - Device is unprotected. DA_handler - Device is in BROM-Mode. Bypassing security. PLTools - Loading payload from mt6582_payload.bin, 0x258 bytes PLTools - Kamakiri / DA Run Kamakiri - Trying kamakiri2.. Kamakiri - Done sending payload... PLTools - Successfully sent payload: D:\mtkclient-main\mtkclient\payloads\mt6582_payload.bin Port - Device detected :) DA_handler DA_handler - [LIB]: Device is in BROM mode. No preloader given, trying to dump preloader from ram. Successfully extracted preloader for this device to: preloader_bbk82_lwt_cb_kk.bin DALegacy - Uploading legacy da... DALegacy - Uploading legacy stage 1 from MTK_AllInOne_DA_5.1824.bin legacyext legacyext - [LIB]: Legacy address check not patched. Preloader - Jumping to 0x200000 Preloader - Jumping to 0x200000: ok. DALegacy - Got loader sync ! DALegacy - Reading nand info DALegacy - Reading emmc info DALegacy - Setting stage 2 config ... Traceback (most recent call last): File "D:\mtkclient-main\mtk.py", line 698, in mtk = Main(args).run() File "D:\mtkclient-main\mtkclient\Library\mtk_main.py", line 518, in run mtk = da_handler.configure_da(mtk, preloader) File "D:\mtkclient-main\mtkclient\Library\mtk_da_cmd.py", line 112, in configure_da if not mtk.daloader.upload_da(preloader=preloader): File "D:\mtkclient-main\mtkclient\Library\mtk_daloader.py", line 202, in upload_da return self.da.upload_da() File "D:\mtkclient-main\mtkclient\Library\mtk_dalegacy.py", line 1067, in upload_da if self.upload(): File "D:\mtkclient-main\mtkclient\Library\mtk_dalegacy.py", line 1039, in upload self.set_stage2_config(self.config.hwcode) File "D:\mtkclient-main\mtkclient\Library\mtk_dalegacy.py", line 831, in set_stage2_config self.config.bmtsettings(self.config.hwcode) File "D:\mtkclient-main\mtkclient\config\mtk_config.py", line 192, in bmtsettings if self.da.daconfig.flashtype == "emmc": AttributeError: 'NoneType' object has no attribute 'daconfig'` I have a lot of old MTK machines here and I will tell you about the ununlocked models

VIVO Y13 X3t Y22 Y22il These models all have the same mistake

bkerler commented 2 years ago

Please upload the preloader. It could be that the watchdog settings are wrong.