Here is a tutorial on how to root. This is 100% from memory, so it may not all be correct, but it will mostly be right:
1. Burn the ISO provided by OP to a USB stick.
2. Boot to the USB.
3. Now the key thing to know is, after each command you type, you'll put your phone in brom mode.
A. Pull up Terminal and navigate to folder:
. All commands will be ran from this folder.
B. With phone unplugged from USB, type command
C. It will keep running a loop in terminal until you plug your phone in and put it in brom mode. So you can take your time.
C. Power off phone with USB unplugged.
D. Hold both volume buttons, and plug in USB
E. Brom mode takes like.. literally 1 to 2 seconds to actually get into it. The phone screen will be black
F. You will see the text change in terminal it will say 'Device Detected', then you can let go of the volume buttons.
G. Now that you have figured out how to get into brom mode with the terminal, the command:
is now trash. you will never use it again.
H. When you type any valid command, once the command is finished, brom mode will be jacked up and you have to reset it. There are two ways to do so. 1. CTRL+C/D/X in current terminal to cancel current command. Type
which will restore brom mode. 2. Close terminal, power on and back off phone, repeat steps above to enter brom mode with command.
I. To summarize: open terminal, run command, plug in phone, watch it connect and run command.
4. Now actual rooting.
A. Backup partitions we are going to be messing with just incase something goes wrong.
Code:
python mtk r boot,lk,vbmeta boot.img,lk.img,vbmeta.img
B. This will create boot.img, lk.img, and vbmeta.img in /opt/mtkclient directory. You'll need to copy those somewhere else, as anything in the /opt/mtkclient directory will not be saved on reboot.
C. Boot into android, adb push your saved boot.img onto the phone somewhere. install magisk apk
E. Open magisk, click 'install', when you click 'next' it will ask you for a file, which you will give it the boot.img that we created in step B. (I'm pretty sure you repeat this step, except pick lk.img)
F. When magisk finishes, it will output a file, which we are going to write back to the phone. Rename it to boot.patched. (repeat step for lk.img. So lk.patched)
C. Now we are going to use the two .patched files that were given to us by magisk. The correct vbmeta.img.empty is already located in the /opt/mtkclient folder by default, so you have everything you need at this point.
D. Boot back into ISO and write the boot.patched and lk.patched
Code:
python mtk w boot,lk,vbmeta boot.patched,lk.patched,vbmeta.img.empty
5. Unlock bootloader.
A. Erase all user data:
Code:
python mtk e metadata,userdata,md_udc
B. Unlock bootloader with this command
Code:
python mtk da seccfg unlock
C. Boot into android and you should see the 'Orange state' text, which means your bootloader is unlocked.
D. Now you have a iconless magisk that can somehow survive the command from 5.A. If you open the magisk icon, it will tell you to turn on the iternet. So do that, and it will install some stuff and reboot.
E. Congrats! Your stuff is now rooted Enjoy!
6. You can flash over the recovery partition with the
TWRP.img file.
A.
Code:
python mtk w recovery TWRP.img
B. So TWRP currently can't do any backups because it can't decrypt certain partitions. Don't do any wipes/factory reset with this TWRP, they will brick your phone.
Please see attached recovery.img that mateo121212 asked for.
P.S. Can someone please take a completely stock phone, and backup all the .bin files and upload it, so if someone borks their system completely, they could flash the factory .bin files in hopes of restoring their phone.