[General Topics] Slim K:
​

Disclaimer​

​

​

Introduction​

​

After finding this amazing device (LKM-EMW) for a very cheap price (90 euros new), I made the fatal mistake of updating through OTA to the Latest Android 10 version 00f.

So where is the Problem?? The latest .DZ from the KDZ firmware wasn't extractable through any tool or script I could find anywhere online, Only the Android 9 ROM was working, but Downgrading through LGUP or LG Flash tool was very risky!!!! (

due to ARB protection

).

Since this phone's

Fastboot

mode was replaced with LG's own

DOWNLOAD

mode, using Fastboot commands to flash the Magisk's patched boot image was impossible. QFIL was also not a possibility, Considering it ships with a MTK chipset, and using SP flash tool will require This phone's particular Scatter file and a signed DA from LG to work, leaving me with no other choices for obtaining Root access.

That is, until I found the following tool: mtkclient by bkerler.

Prerequisites​

backup of your DATA. (during and after unlocking the Bootloader, your data partition must be wiped!!!!)​

Preferably a Windows PC (you will need LGUP in case something goes wrong anyways).​

MTK ALL-in-one 1.0.8 drivers and LG's drivers installed.​

mtkclient installed and running (don't ask me how-to, the Github page is pretty self explanatory).​

This Magisk Alpha Build patched for MTK downloaded for installation.

Since this device uses an A/B partitioning system, you need to know which slot is the active one. Using this App, under the System tab, you can find out which one is active. Mine was _b slot.​

and above all.... Patience.​

Unlocking the Bootloader​

(please note, using python [command] didn't work for me for some reason. However, using py [command] worked for me. Use what works!)​

Turn on OEM Unlocking and USB Debugging in Developers Options.

Turn off your phone and remove sim/sdcard.

launch cmd inside the mtkclient folder or cd into it.

backup your Preloader by using: py mtk dumppreloader --filename=preloader.bin.

connect your phone turned off while holding the Volume Down + the Assistant buttons to boot into BROM mode. The Preloader backup will run automatically.

After it's complete, disconnect your device's cable. You will need to do this after every step.

Run the command: py mtk e metadata,userdata and connect while holding the button combo. Wait for it to complete.

Disconnect again, then run: py mtk xflash seccfg unlock and reconnect.

If successful, your device's Bootloader is now unlocked!!!

Rooting​

Knowing which active slot you're booting into will change the next steps slightly. If it's _a, then all following commands will have an _a instead of _b .

Before rebooting after unlocking, use the command: py mtk r boot_b,vbmeta_b boot_b.bin,vbmeta_b.bin to backup your boot and vbmeta partitions respectively. (you will find them in the mtkclient folder afterwards!!)

reboot your phone. a warning screen will show up, don't panic!!!. It will ask you to Factory reset the phone upon successfully booting. Do it and reboot.

Setup your phone normally, then install the aforementioned Magisk APK.

Transfer the backed up boot.bin to your phone and patch it manually inside Magisk.

Transfer the Patched boot image back to your mtkclient folder and rename to i.e boot_magisk.bin.

Turn off your device and launch the command: py mtk w boot_b,vbmeta_b boot_magisk.bin,vbmeta.img.empty. Connect the phone.

when done, reboot your phone and launch Magisk. It will ask you to reinstall itself to complete the setup. Ignore the warning.

Go to Settings and switch to the Beta Update Channel, Reinstall Magisk 23.0 beta and Magisk manager again.

If successful, Your phone is now rooted.

​

Passing SafetynetAPI​

Turn on Magisk Hide and repack Magisk Manager from Settings.

Install latest Riru core from Manager.

Install this Universal Safetynet fix by kdrag0n.

reboot and enjoy!!

Credits for all of this goes to:

bkerler

for his awesome Tool, none of this is possible w/o it.

Topjohnwu for Magisk.

@kdrag0n for his Safetynet fix.