[HELP] Alcatel Joy Tab 2 TWRP and Root????

[donthateme702]

You guys know that under developer options there is option to unlock bootloader. Does this make any difference
when trying to root?

 

[zhoushiyi213]

Hey good news - bkerler includes a new function in his awesome mtkclient tool: seccfg in stage2. According to the description this generates unlock seccfg.bin for the device. While there are still some bugs in the script combining the binary strings, it does generates similar format to the original, locked seccfg.bin I pulled from my 9032z, after fixing some of the bugs. I haven't got a chance to test yet since my tablet provides the internet for my home, just to post here to provide possible direction

By the way messing with memory write for RTC_PDN1_FAST_BOOT and RTC_WRTGR doesn't making anything different, assuming RTC_BASE is at 0x4000.

 

[zhoushiyi213]

Good news, it is root-able now!

Thanks to bkerler, mtkclient can successfully unlock and root this tablet. I followed the steps at his github repo and it worked without a problem! Cheers!

By the way I'm using the February ROM during the process.

The only glitch: "mtk reset" doesn't actually reboot the phone; long-press (~20 seconds) volume-up and power twice to reboot to recovery and you can reboot from there.

 

[MattchuBlean420]

Good news, it is root-able now!

Thanks to bkerler, mtkclient can successfully unlock and root this tablet. I followed the steps at his github repo and it worked without a problem! Cheers!

By the way I'm using the February ROM during the process.

The only glitch: "mtk reset" doesn't actually reboot the phone; long-press (~20 seconds) volume-up and power twice to reboot to recovery and you can reboot from there.

Can anyone verify this? Might try later

 

[Cruel5anity]

Can anyone verify this? Might try later

Good news, it is root-able now!

Thanks to bkerler, mtkclient can successfully unlock and root this tablet. I followed the steps at his github repo and it worked without a problem! Cheers!

By the way I'm using the February ROM during the process.

The only glitch: "mtk reset" doesn't actually reboot the phone; long-press (~20 seconds) volume-up and power twice to reboot to recovery and you can reboot from there.

How did you bypass secure boot?

 

[Cruel5anity]

Good news, it is root-able now!

Thanks to bkerler, mtkclient can successfully unlock and root this tablet. I followed the steps at his github repo and it worked without a problem! Cheers!

By the way I'm using the February ROM during the process.

The only glitch: "mtk reset" doesn't actually reboot the phone; long-press (~20 seconds) volume-up and power twice to reboot to recovery and you can reboot from there.

how did you disable verified boot?

 

[MattchuBlean420]

If you have Magisk installed and everything, I believe there is a way

 

[Alain+]

Has anyone tried to dump all partitions with the miracle box or with the NCK box? Sometimes when attempts with SPFT fail I have to use these alternatives, although there are so many other tools, these two are my favorites. Unfortunately I do not have this device, it belongs to a boy who needs it for his studies and also because of his visual difficulties, imagine any mistake would be fatal.

 

[graffix420]

Is there any way to recover this tablet? I took a backup before messing with it, but now it's not booting. I can see the device, but there are apparently no partitions on it, mtkclient can't see any. I had magisk installed, but modules had stopped working, so I was trying to reset/reinstall.

 

[akadriu]

This model the only way to work with would be to unlock the bootloader in brom mode. make a full system dump on said status and then maybe can use magisk to patch the boot.img.
i have a couple of these 9032z and 9032w (metro and t-mobile respectively) I have gone so far to unlock bootloader dump nvram data but there's no way to patch this device for me so far.

 

[Python618]

This model the only way to work with would be to unlock the bootloader in brom mode. make a full system dump on said status and then maybe can use magisk to patch the boot.img.
i have a couple of these 9032z and 9032w (metro and t-mobile respectively) I have gone so far to unlock bootloader dump nvram data but there's no way to patch this device for me so far.

I do believe there was an available emmc/partition dump and scatter file floating around if that helps.. Someone posted a guide on hovatek on the first page in this thread. Maybe you can use this img file to try a patch as well.

This model the only way to work with would be to unlock the bootloader in brom mode. make a full system dump on said status and then maybe can use magisk to patch the boot.img.
i have a couple of these 9032z and 9032w (metro and t-mobile respectively) I have gone so far to unlock bootloader dump nvram data but there's no way to patch this device for me so far.

 

[Cruel5anity]

Okay, I snooped a little bit, it's the kernel we need to make a twrp and apparently you can unpack the boot.img to get the kernel... I am confirming working root rn. I got smartpack off of f-droid... If we can use the kernel from boot.img to create an unofficial twrp can we flash it with smartpack?

 

[Python618]

Okay, I snooped a little bit, it's the kernel we need to make a twrp and apparently you can unpack the boot.img to get the kernel... I am confirming working root rn. I got smartpack off of f-droid... If we can use the kernel from boot.img to create an unofficial twrp can we flash it with smartpack?

If you are still trying to get a emmc/partition dump with scatter file I can help. You can run mtk-bypass at bootrom to disable security, then follow the guide here: forum.hovatek.com/thread-21970.html

Two things to keep in mind:
1. You need to specify a preloader file in sp flash tool for it to work. You can get it from its ota update, or use mine attached.
2. At boortom operations it's easy for the processor to freeze. Don't follow their drain battery method; our tablet can be force-reboot to recovery by holding power+volume up for >15 seconds or so.

 

[Cruel5anity]

Recovery is dev/block/mmcblk0p15
Gonna try to pull it the same way I pulled the boot img with mtk tools...

 

[Cruel5anity]

Recovery is dev/block/mmcblk0p15
Gonna try to pull it the same way I pulled the boot img with mtk tools...

Dumping partitions now

 

[Cruel5anity]

Trying to port twrp
Got to the step where I'm editing twrp.fstab with contents of recovery.fstab
Need advice...
TWRP.fstab is from a different device, and I don't know equivalents to some of the partitions....
Do I delete those and write in the partitions from recovery.fstab?

 

[Cruel5anity]

Took method 2 copy/pasted the partitions from recovery.fstab and formatted like the rest... Imma pray this works

 

[Cruel5anity]

Bootloop

 

[Cruel5anity]

Rescued with mtk client tools

Anybody with proper experience making twrp recoveries wanna take a crack? It dumped recovery.bin but the Android image kitchen unpacked it and it has most of the needed files...

 

[Cruel5anity]

Got i to boot with the custom recovery installed but it won't boot to the custom recovery... Just bootloop s...