SM-A225F - Root/CustomOS (Bootloader/RPMB Lock?)

[zeugensativas]

**Hello Viperbjk and hello Community!

First of all, thank you Viper for the masterpiece of software for both Mtkclient and the Mobile Relevator!**

In the past I rooted a lot of cell phones and maxed them out as much as possible, but now I'm standing in front of this HardRock and can't get through it and finally get my peace.

A few weeks ago my sister bought me the Samsung A22 through an auction house in Poland, when it arrived and I put my SIM card (e-plus) in, I was initially happy that there was no SIM lock.

The next step was rooting and deploy a customrom, which already failed in the Download mode (Odin accepted only Official ROM)
"custom binary blocked due to remaining installment balance" shows up on every try.. TWRP was from the Thread on xda.
its the first Time i facing something like that and i allready find out whats about the message on the DL screen.
( That Phone comes from a T-Mobile shop with a Contract? Not Paid yet?)

I tried everything I could and ended up uninstalling everything I don't need manually via ADB until I uninstalled the DevicesServices app and the message appeared on the display (The Phone is Locked because of Uninstalling DevicesServices App please contact T-Mobile Polska SA etc .. A factory reset managed that.

A few days ago I landed on your Github site and, with the help of Mtkclient, took a look at the cell phone..
Know i know what
-- Brom
-- Preloader
-- eMMc RPMB Lock?
-- TestPoint short circuit is.

apart from that, MR & MTKc opened up completely new opportunities for me! Thank you again for that!
and Viper, on my way i found some Paid, Scam? and many Full of Rats progs like Marvel-Tool_V3.0 that using your Code? its must be yours because i and friends of mine couldnt find similar software or code that does that what MTKc does!

The Backup of Brom, Preloader and the (RPMB Block 16mb?) give me files like
-- brom_MT6768_707.bin
-- preloader_k69v1_64_titan_buffalo.bin
some Keys MTKc Generated (5 in total)
-- Whole eMMC Dump 51 Partitions at total (The Pit file shows 54)
Bootloader is Unlocked with the seccfg command <3
Im working on Ubuntu 20.4 (5.10) & Win8.1

My question is do i have any chance to Root that Phone before i take hands on Jtaging the emmc? Last time i did a jtag was on my beautifull Xbox360..
The fact that the parts on the board are really small reluctantly but I'll try it to jtag the A22

And if there isn't any chance of get it rooted do YOU need something i coud upload for future work? Preloader, Brom, DUMP?

Sorry for the mess on text English is still under constuction

Thanks and have a great Days guys!

Port - Device detected :)
Preloader - CPU: MT6768(Helio P65/G85 k68v1)
Preloader - HW version: 0x0
Preloader - WDT: 0x10007000
Preloader - Uart: 0x11002000
Preloader - Brom payload addr: 0x100a00
Preloader - DA payload addr: 0x201000
Preloader - CQ_DMA addr: 0x10212000
Preloader - Var1: 0x25
Preloader - Disabling Watchdog...
Preloader - HW code: 0x707
Preloader - Target config: 0xe5
Preloader - SBC enabled: True
Preloader - SLA enabled: False
Preloader - DAA enabled: True
Preloader - SWJTAG enabled: True
Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False
Preloader - Root cert required: False
Preloader - Mem read auth: True
Preloader - Mem write auth: True
Preloader - Cmd 0xC8 blocked: True
Preloader - Get Target info
Preloader - BROM mode detected.
Preloader - HW subcode: 0x8a00
Preloader - HW Ver: 0xca00
Preloader - SW Ver: 0x0
Preloader - ME_ID: (Something its not for everyone?)
Preloader - SOC_ID: (Something its not for everyone?)
Main - Getting target info...
Preloader - Target config: 0xe5
Preloader - SBC enabled: True
Preloader - SLA enabled: False
Preloader - DAA enabled: True
Preloader - SWJTAG enabled: True
Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False
Preloader - Root cert required: False
Preloader - Mem read auth: True
Preloader - Mem write auth: True
Preloader - Cmd 0xC8 blocked: True

[zeugensativas]

And hej! I found on Samsu Site a A225F Opensource Kernel file, could it help me?

[bkerler]

I will get a samsung for doing tests.... not sure we can achieve a lot, but worth the try.

[Warlockguitarman]

I'm working on the A125U and if I could flash the LK.img from the N model I think the bootloader will unlock unless a patch could be made

[Warlockguitarman]

I think if the correct hash was found this would work but so far I've not had a successful boot after flashing anything from another device

[zeugensativas]

Hope we can.. Sounds promissing anyway. Thanks :)

[zeugensativas]

@bkerler Hej Björn, did you found something about the Samsung devices? Rpmb rewriting?

[zeugensativas]

It would be so nice to get root not only to save some battery power.. it would be great to disable some services like i did in the past