py -3 mtk da seccfg unlock --preloader=preloader_pissarro.bin<\/code><\/pre>\n\n\n\nwhere preloader_pissarro.bin was the preloader I obtained from the factory firmware and copied into the MTK Client folder<\/p>\n\n\n\n
Now that bootloader was unlocked (at least I thought it was), I got it into fastboot by running the following commands (you first disconnect the phone then connect after running the command)<\/p>\n\n\n\n
py -3 mtk payload<\/code><\/pre>\n\n\n\nWhile phone was still connected to PC<\/p>\n\n\n\n
py -3 mtk plstage --preloader=preloader_pissarro.bin<\/code><\/pre>\n\n\n\nAfter the second command, I just kept holding the volume down button. This got the device into fastboot. Unfortunately, bootloader was still locked (so MTK Client hadn’t worked to unlock bootloader). I therefore couldn’t use Mi Flash tool.<\/p>\n\n\n\n
I exited fastboot and re-tried a full flash in MTK Client using<\/p>\n\n\n\n
py -3 mtk w vbmeta_a,vbmeta_system_a,vbmeta_vendor_a,vbmeta_b,vbmeta_system_b,vbmeta_vendor_b,md1img_a,spmfw_a,audio_dsp_a,pi_img_a,dpm_a,scp_a,sspm_a,mcupm_a,cam_vpu1_a,cam_vpu2_a,cam_vpu3_a,gz_a,lk_a,boot_a,vendor_boot_a,dtbo_a,tee_a,efuse,logo_a,logo_b,countrycode,md1img_b,spmfw_b,audio_dsp_b,pi_img_b,dpm_b,scp_b,sspm_b,mcupm_b,cam_vpu1_b,cam_vpu2_b,cam_vpu3_b,gz_b,lk_b,boot_b,vendor_boot_b,dtbo_b,tee_b,super,gsort,oem_misc1,cust,rescue,userdata vbmeta.img,vbmeta_system.img,vbmeta_vendor.img,vbmeta.img,vbmeta_system.img,vbmeta_vendor.img,md1img.img,spmfw.img,audio_dsp.img,pi_img.img,dpm.img,scp.img,sspm.img,mcupm.img,cam_vpu1.img,cam_vpu2.img,cam_vpu3.img,gz.img,lk.img,boot.img,vendor_boot.img,dtbo.img,tee.img,efuse.img,logo.bin,logo.bin,countrycode.img,md1img.img,spmfw.img,audio_dsp.img,pi_img.img,dpm.img,scp.img,sspm.img,mcupm.img,cam_vpu1.img,cam_vpu2.img,cam_vpu3.img,gz.img,lk.img,boot.img,vendor_boot.img,dtbo.img,tee.img,super.img,gsort.img,oem_misc1.img,cust.img,rescue.img,userdata.img --preloader=preloader_pissarro.bin<\/code><\/pre>\n\n\n\nSame still.<\/p>\n\n\n\n
What worked<\/h3>\n\n\n\n
Back to the drawing board. I had MTK Client and the China firmware so I opted for SP Flash tool. The first task was to bypass SLA, DAA or SBC in MTK Client using the command;<\/p>\n\n\n\n
py -3 mtk payload<\/code><\/pre>\n\n\n\nNext, I launched SP flash tool, loaded the scatter file, went to Options > Option > Connection, chose UART and selected the COM port which the phone was been detected on. I closed the option tab and proceeded to flash the full firmware using Download Only. <\/p>\n\n\n\n
After flashing was done, I held the power button to boot up the phone, gave it some minutes to go past the MIUI screen then it entered the Setup Wizard screen; successfully unbricked.<\/p>\n\n\n\n
Note<\/h3>\n\n\n\n
This approach should work on other (Xiaomi) Mediatek devices so far you can get the right firmware for your model.<\/p>\n","protected":false},"excerpt":{"rendered":"
The Xiaomi Redmi Note 11 Pro (China) is an Android 11 device powered by the MediaTek Dimensity 920 chipset. In this case, the device was bricked due to cross-flashing then accidentally relocking the bootloader in the process. It was stuck in BROM Mode (MTK USB Port). I also suspect that the Global firmware flashed was […]<\/p>\n","protected":false},"author":5,"featured_media":11500,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[918],"tags":[805,192,790,827,108,828,793],"class_list":["post-11475","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-pov","tag-brom","tag-mediatek","tag-mtk-client","tag-mtk-usb-port","tag-sp-flash-tool","tag-unbrick-xiaomi","tag-xiaomi"],"_links":{"self":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/posts\/11475","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/comments?post=11475"}],"version-history":[{"count":1,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/posts\/11475\/revisions"}],"predecessor-version":[{"id":13311,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/posts\/11475\/revisions\/13311"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/media\/11500"}],"wp:attachment":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/media?parent=11475"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/categories?post=11475"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/tags?post=11475"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}