Attempting to root Le Pro 3 AI x651

Search This thread

fed44

Senior Member
Sep 22, 2010
53
19
So I have admittedly made the mistake of confusing the AI edition with the non AI edition, but nonetheless would like to continue on and make the most out of my device, so I'd like to start a thread where we can pool together and try to root the Le Pro 3 AI x651.

Quick note just to be explicit: This phone is very different to the LeEco Pro 3, and does not have a Qualcomm chipset and no source code at http://opensource.le.com/ and if its not too late you should not buy it.

ROM
The ROM for this device can be found under the name "FULL_X7_X7-CN-FN-KGXCNFN5902504131S-5.9.025S" (e.g. http://combinefile.com/home/browse/...25S_Firmware_Flash_File_Tested_By_Combinefile, if someone has suggestions for reuploading it let me know).

Similar Devices
When looking for help, the following are devices with similar chipsets that may yield resources, let me know if you know others. (Often phones just take a reference design for a lot of things):
  • Lenovo Note K8
  • LeEco x620

Unlocking
Most of the unlocking steps are similar to other phones
  1. Go to Settings -> About -> Hit Build 7 times
  2. Go to Settings -> Developer Options -> Enable OEM unlocking
  3. Run 'adb reboot bootloader'
  4. Use 'fastboot oem unlock'
  5. You can now double check if your device is unlocked using 'fastboot oem device-info' (if anyone knows any other commands let me know)

Rooting?
This is where I have been making some progress, but haven't quite gotten there yet. So I know the following:

  1. There is no TWRP for this device (yet)
  2. TWRP from other MTK6797 devices does not work
  3. You should be able to port TWRP if you get the recovery.img file, which is not included in the ROM
  4. You can dump the recovery.img file if you have root
  5. We can dump the boot.img, edit it, flash it to recovery and boot from it
  6. Just changing ro.adb.secure/ro.secure does not solve it (see below)
  7. 'su' is also missing from /system/bin, I will try to add one and see what that does

Editing and booting boot.img
  1. Download the ROM
  2. Unpack boot.img (seems to be fine using "Superr's kitchen" though I'm guessing most tools/kitchens for this will work")
  3. Edit e.g. default.prop
  4. Pack boot.img
  5. Run 'adb reboot bootloader'
  6. Make sure you are unlocked then run: 'fastboot flash recovery boot.img' (I think directly booting with 'fastboot boot boot.img' may also work)
  7. Run 'adb shell' and then perform 'cat /default.prop', you should see your changes
  8. Unfortunately the ROM seems to have a file called '/data/recovery_rootcheck' and sadly rooting does not work, so this is WIP and any feedback ideas would be great

Extracting System.new.dat
This file contains most of the ROM files and is nice to see what the device all does. We can use the tool 'sprs2ext.exe' (and again there are probably many others that do the job) to extract it to a 'system.img.ext4' file. This can the be viewed with any ext4 viewing program, e.g. ext2explore.

Getting the recovery.img
It would be nice if some people could refrain from overwriting their recovery.img, since we need to dump it somehow (unless someone has other ideas sources).
 
Last edited:

fed44

Senior Member
Sep 22, 2010
53
19
So using https://github.com/phhusson/super-bootimg I was able to perform a systemless root.

To do this:
  1. Download super-bootimg: `git clone https://github.com/phhusson/super-bootimg.git'
  2. In the super-bootimg create the directory output/lex651/ and place boot.img as orig-boot.img in it
  3. Build it using `chmod +x build.sh; ./build.sh myphone`
  4. Boot using `fastboot boot boot-output-lex651-su-eng-r203.img` (once in recovery etc), the image is located in myphone/lex651/

I'll try uploading the boot bin in a moment. Could someone please try dumping their recovery.img then we can see if we can get TWRP to work?

Edit: boot img https://1drv.ms/u/s!AlYiOwfjH3eSgRGVkkD9CgN7K36_
 
Last edited:
  • Like
Reactions: z7ykLon

z7ykLon

Member
Nov 29, 2017
9
2
Help.

I have install full x7(from bbs.leeco) with official recovery and then it show me "fail signature.

That's make me port TWRP to force flashing.
Every thing has done, But it can not into animation screen It just stuck in boot screen.

That's make me port TWRP to force flashing.
Every thing has done, But it can not into animation screen It just stuck in boot screen.

After that, I do the same thing like another devices when I use TWRP and they stuck, "I flash root method"

But with Le X651, The system show me "You don't use the original firmware, please contact bla bla bla"

Even I unpack boot.img/recovery.img(from TWRP backups) then remix something to fix, It always show me "You don't use the original firmware, please contact bla bla bla"

How can I do, please help.
https://forum.xda-developers.com/album.php?albumid=14605
 
Last edited:

fed44

Senior Member
Sep 22, 2010
53
19
I have install full x7(from bbs.leeco) with official recovery and then it show me "fail signature.

That's make me port TWRP to force flashing.
Every thing has done, But it can not into animation screen It just stuck in boot screen.

That's make me port TWRP to force flashing.
Every thing has done, But it can not into animation screen It just stuck in boot screen.

After that, I do the same thing like another devices when I use TWRP and they stuck, "I flash root method"

But with Le X651, The system show me "You don't use the original firmware, please contact bla bla bla"

Even I unpack boot.img/recovery.img(from TWRP backups) then remix something to fix, It always show me "You don't use the original firmware, please contact bla bla bla"

How can I do, please help.
https://forum.xda-developers.com/album.php?albumid=14605

Where did you get the full x7 with recovery from? Could you please post it?

Also you need to be way more specific about how you patched TWRP, where you see error messages etc.
 

z7ykLon

Member
Nov 29, 2017
9
2
Wonderful.

But now, Your boot.img make my x651 boot into system as well, I'll check root status. thank you so much.
 

luksson

Member
Nov 1, 2010
29
5
Halmstad
I have install full x7(from bbs.leeco) with official recovery and then it show me "fail signature.

That's make me port TWRP to force flashing.
Every thing has done, But it can not into animation screen It just stuck in boot screen.

That's make me port TWRP to force flashing.
Every thing has done, But it can not into animation screen It just stuck in boot screen.

After that, I do the same thing like another devices when I use TWRP and they stuck, "I flash root method"

But with Le X651, The system show me "You don't use the original firmware, please contact bla bla bla"

Even I unpack boot.img/recovery.img(from TWRP backups) then remix something to fix, It always show me "You don't use the original firmware, please contact bla bla bla"

How can I do, please help.
https://forum.xda-developers.com/album.php?albumid=14605
Have you tried to flash No verity I had to flash it on my x620 when it was stuck on boot?
https://mega.nz/#!7Bpl1SxS!f-H5502IwPq9IFLjm9zxKru8_ivVY8D6NgFneZXwe1g
 
  • Like
Reactions: z7ykLon

fed44

Senior Member
Sep 22, 2010
53
19


Thank you very much for posting this. I just tested it and it seems to start which is great. I'm a bit busy the next few days so won't be able to play around with it properly but once I do I'll update the front page etc. and maybe see if it is possible to cook up any nice ROMs...
 
  • Like
Reactions: z7ykLon

laikexpert

Senior Member
Feb 27, 2012
571
319
CyberSpace
Le Pro3 AI version X650 EUI5.9_25S streamlined ROOT V4

http://bbs.ydss.cn/thread-857858-1-1.html
Update log
Based on the official 25S unpack optimization, the ROM main streamlined, suitable for like the original friend
Maintain the official input method and store and the necessary procedures
Repair official yellow box problem (mandfx & winter)
Streamline redundant programs and residual files
Modify the kernel to add init.d support
Change kernel selinux status to permissive
Built-in viper sound
Update the busybox component
Add ROOT Privilege Pro, perfect ROOT
Other features of their own experience

TWRP (From this author)
letv-x650-7to-twrp3.1-recovery-new
19.4 MB
 
Last edited:

prateekkej

Senior Member
May 2, 2010
150
25
Faridabad
Hello Guys. .
Just got this post here.


I am also having a leX653 a.k.a Le pro 3 AI or Dual 3 .
Its a mediatek X23 4+64 gigs edition.

I have some strange issues with the phone and need your help to solve it.
I am able to unlock the bootloader but as soon as i restart it , it gets locked again. To keep it unlocked, i have to force shutdown the device after unlocking it.
Now,
I am able to Boot Twrp using the TWRP from lenovo K8 note and ramdisk from China Software Kernel.
I am also able to get root access using Magisk/SuperSu .
However , the problem i am facing is, the phone does not boot after , i tried my recovery to wipe the data partition. It looks like they are having some security flags to see if the phone has been formatted using some other recovery. Official Kernel was not booting at all .

TO CHECK , as soon as i was able to get in TWRP . I backed up my phone's kernel unpacked it, made ro.secure =0 and tried booting the phone from the modified kernel and VOILA!! it booted. but here is another twist.


Now if i keep my bootloader unlocked, my baseband does not gets detected and i cant use my phone to make calls. (Wifi and Bt works).

And if i lock my bootloader then it shows that my phone is not having official Kernel . Please visit nearest LeEco Center to get it checked. And then reboots. ?.

Need your help guys. . I am very close to get it all done.
 
  • Like
Reactions: elanimalito

Toni Moon

Senior Member
Aug 11, 2015
472
225
Flash with twrp this two files and problem fixed:
STOP_Orange+_state+S20.zip
no-verity-opt-encrypt.zip

Sorry im new, and i cant post links
 
  • Like
Reactions: elanimalito

3llawi

Senior Member
Dec 12, 2011
131
15
I want to buy this phone but i want to know is there a
video enhancement and smoothness?
It's better for watch movies it's turn the frame rate to 60fps
Another thing...is the phone has dual speakers?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    So I have admittedly made the mistake of confusing the AI edition with the non AI edition, but nonetheless would like to continue on and make the most out of my device, so I'd like to start a thread where we can pool together and try to root the Le Pro 3 AI x651.

    Quick note just to be explicit: This phone is very different to the LeEco Pro 3, and does not have a Qualcomm chipset and no source code at http://opensource.le.com/ and if its not too late you should not buy it.

    ROM
    The ROM for this device can be found under the name "FULL_X7_X7-CN-FN-KGXCNFN5902504131S-5.9.025S" (e.g. http://combinefile.com/home/browse/...25S_Firmware_Flash_File_Tested_By_Combinefile, if someone has suggestions for reuploading it let me know).

    Similar Devices
    When looking for help, the following are devices with similar chipsets that may yield resources, let me know if you know others. (Often phones just take a reference design for a lot of things):
    • Lenovo Note K8
    • LeEco x620

    Unlocking
    Most of the unlocking steps are similar to other phones
    1. Go to Settings -> About -> Hit Build 7 times
    2. Go to Settings -> Developer Options -> Enable OEM unlocking
    3. Run 'adb reboot bootloader'
    4. Use 'fastboot oem unlock'
    5. You can now double check if your device is unlocked using 'fastboot oem device-info' (if anyone knows any other commands let me know)

    Rooting?
    This is where I have been making some progress, but haven't quite gotten there yet. So I know the following:

    1. There is no TWRP for this device (yet)
    2. TWRP from other MTK6797 devices does not work
    3. You should be able to port TWRP if you get the recovery.img file, which is not included in the ROM
    4. You can dump the recovery.img file if you have root
    5. We can dump the boot.img, edit it, flash it to recovery and boot from it
    6. Just changing ro.adb.secure/ro.secure does not solve it (see below)
    7. 'su' is also missing from /system/bin, I will try to add one and see what that does

    Editing and booting boot.img
    1. Download the ROM
    2. Unpack boot.img (seems to be fine using "Superr's kitchen" though I'm guessing most tools/kitchens for this will work")
    3. Edit e.g. default.prop
    4. Pack boot.img
    5. Run 'adb reboot bootloader'
    6. Make sure you are unlocked then run: 'fastboot flash recovery boot.img' (I think directly booting with 'fastboot boot boot.img' may also work)
    7. Run 'adb shell' and then perform 'cat /default.prop', you should see your changes
    8. Unfortunately the ROM seems to have a file called '/data/recovery_rootcheck' and sadly rooting does not work, so this is WIP and any feedback ideas would be great

    Extracting System.new.dat
    This file contains most of the ROM files and is nice to see what the device all does. We can use the tool 'sprs2ext.exe' (and again there are probably many others that do the job) to extract it to a 'system.img.ext4' file. This can the be viewed with any ext4 viewing program, e.g. ext2explore.

    Getting the recovery.img
    It would be nice if some people could refrain from overwriting their recovery.img, since we need to dump it somehow (unless someone has other ideas sources).
    2
    X650

    thanks for sharing you're experience, I'm waiting for X650 too.
    Can you explain me what kind of mistakes\what step you did that bricked the phone?
    Did you manage to resurrect it?

    I tried to get rid of Orange State message which will come up after flash of TWRP.
    It will tell you, that your phone can not be trusted anymore, blablabla...

    Somewhere I have read about to flash "Stop-Orange something file" and this I did which was the big mistake.
    Afterwards it was completely bricked, even some interface was detected frequently for duration of seconds in PC, but no chance to use sp-flashtool at current state.

    So stay away of this. Please read "streamlined Root" thread from post #12 for details.

    Finally I tried to disconnect the battery or a while, but this also did not help. (Yes, I opened the phone ;) )
    2
    2
    Le Pro3 AI version X650 EUI5.9_25S streamlined ROOT V4

    http://bbs.ydss.cn/thread-857858-1-1.html
    Update log
    Based on the official 25S unpack optimization, the ROM main streamlined, suitable for like the original friend
    Maintain the official input method and store and the necessary procedures
    Repair official yellow box problem (mandfx & winter)
    Streamline redundant programs and residual files
    Modify the kernel to add init.d support
    Change kernel selinux status to permissive
    Built-in viper sound
    Update the busybox component
    Add ROOT Privilege Pro, perfect ROOT
    Other features of their own experience

    TWRP (From this author)
    letv-x650-7to-twrp3.1-recovery-new
    19.4 MB
    1
    So using https://github.com/phhusson/super-bootimg I was able to perform a systemless root.

    To do this:
    1. Download super-bootimg: `git clone https://github.com/phhusson/super-bootimg.git'
    2. In the super-bootimg create the directory output/lex651/ and place boot.img as orig-boot.img in it
    3. Build it using `chmod +x build.sh; ./build.sh myphone`
    4. Boot using `fastboot boot boot-output-lex651-su-eng-r203.img` (once in recovery etc), the image is located in myphone/lex651/

    I'll try uploading the boot bin in a moment. Could someone please try dumping their recovery.img then we can see if we can get TWRP to work?

    Edit: boot img https://1drv.ms/u/s!AlYiOwfjH3eSgRGVkkD9CgN7K36_