[How to Guide] Vortex HD65 Ultra - MT6739 - Unlock Bootloader, Backup Firmware, Root, Fix Brick/Bootloop, GSI Install, etc.. (2024)

1. Unlock Developer Mode by opening Settings. Navigate to About Phone, and tap on Build Number seven times.

2. Then go back to Settings, and navigate to System. Open Developer Options, and toggle OEM Unlock and Debug Mode.

3. Download and unzip Platform-Tools to C:/ on the PC. Open the Platform-Tools folder and type "cmd" in the search bar to open the command shell.

4. Plug the device into the PC via the data transfer cable, and type the following commands into the shell individually:

adb devices

And

adb reboot bootloader

5. Once the device is booted into bootloader mode, determine which slot is currently active on the device for reference.

fastboot getvar all

- Type the following command to unlock the bootloader:

fastboot flashing unlock

(The device should factory reset)

6. Download the firmware/backup file from MEGA . Transfer the boot_a.img to the Platform-Tools folder.

7. Download Magisk 27.0+ and install the .apk on the device.

8. Transfer the boot_a.img or boot_b.img from the PC to the device using the shell so that the file doesn't become corrupted. Use the following command:

adb push C:/platform-tools/boot_a.img /storage/emulated/0/Download

Or

adb push C:/platform-tools/boot_b.img /storage/emulated/0/Download

9. Open Magisk 27.0+, update the app to most current, and then patch the boot_a.img or boot_b.img using the Magisk 27.0+ app.

10. Open a file manager on the device, and navigate to the Download folder. Rename the Magisk patched boot.img to boot_a.img or boot_b.img to simplify the transfer and flashing process.

11. Transfer the Magisk patched boot.img from the device to the Platform-Tools folder on the PC using the shell so that the file doesn't become corrupted. Use the following command:

adb pull /storage/emulated/0/Download/boot_a.img

Or

adb pull /storage/emulated/0/Download/boot_b.img

(It should pull the Magisk patched boot_a.img directly to the Platform-Tools folder)

12. Reboot the device to fastboot mode by using the following command:

adb reboot fastboot

13. Flash the Magisk patched boot.img onto the device by using the following command:

fastboot flash boot_a C:/platform-tools/boot_a.img

Or

fastboot flash boot_b C:/platform-tools/boot_b.img

14. Reboot the device to system using the following command:

fastboot reboot

15. Open the Magisk app and follow the instructions.

Done!

MTKClient Windows Installation
(Install to C:/platform-tools)

Install python + git​

• Install python >= 3.9 and git
• If you install python from microsoft store, "python setup.py install" will fail, but that step isn't required.
• WIN+R cmd

Grab files and install​

git clone https://github.com/bkerler/mtkclientcd mtkclientpip3 install -r requirements.txt

Get latest UsbDk 64-Bit​

• Install normal MTK Serial Port driver (or use default Windows COM Port one, make sure no exclamation is seen)
• Get usbdk installer (.msi) from here and install it
• Test on device connect using "UsbDkController -n" if you see a device with 0x0E8D 0x0003
• Works fine under Windows 10 and 11

Other MTKClient Installation Options

Time to Root​

1. Unlock Developer Mode by opening Settings. Navigate to About Phone, and tap on Build Number seven times.

2. Then go back to Settings, and navigate to System. Open Developer Options, and toggle OEM Unlock and Debug Mode.

- Reboot to fastboot to determine which slot is currently active on the device for reference.

fastboot getvar all

To enter BRom mode, completely power off the device. Enter the MTKClient command into the shell, and MTKClient will hang idle while searching for the device. Press and hold both volume keys and the power key. While all the phone keys are pressed and held, plug the device into the computer via the data transfer cable. The MTKClient command that's hanging idle should catch and the command will activate.

(NOTE: Sometimes the first try doesn't catch and the command hanging idle in MTKClient will freeze. If this happens, while still pressing and holding all the phone keys down, unplug the device and immediately plug the device back in. The command should now catch and take off.)

3. Use the following command in BRom mode with MTKClient to wipe user data:

python mtk e metadata,userdata

4. Use the following command in BRom mode with MTKClient to unlock the bootloader:

python mtk da seccfg unlock

5. Reboot to Recovery, FDR (factory data reset), Reboot to System, Go through a Simplified setup, Repeat steps 1 and 2, and then completely power off the device again.

6. You can skip the process of making a backup dump file if you'd like, and can download the one I made from MEGA !

7. Download Magisk 27.0+ and install the .apk on the device.

8. Transfer the boot_a.img or boot_b.img from the PC to the device using the shell so that the file doesn't become corrupted. Use the following command:

adb push C:/platform-tools/boot_a.img /storage/emulated/0/Download

Or

adb push C:/platform-tools/boot_b.img /storage/emulated/0/Download

9. Open Magisk 27.0+, update the app to most current, and then patch the boot_a.img or boot_b.img using the Magisk 27.0+ app.

10. Open a file manager on the device, and navigate to the Download folder. Rename the Magisk patched boot.img to boot_a.img or boot_b.img to simplify the transfer and flashing process.

11. Transfer the Magisk patched boot.img from the device to the Platform-Tools folder on the PC using the shell so that the file doesn't become corrupted. Use the following command:

adb pull /storage/emulated/0/Download/boot_a.img

Or

adb pull /storage/emulated/0/Download/boot_b.img

(It should pull the Magisk patched boot_a.img directly to the Platform-Tools folder)

12. Here you can choose to finish with:

adb reboot fastboot

fastboot flash boot_a C:/platform-tools/boot_a.img

fastboot flash boot_b C:/platform-tools/boot_b.img

fastboot reboot

Or

python mtkclient w boot C:/platform-tools/boot_a.img

python mtkclient w boot C:/platform-tools/boot_b.img

python mtk reset

Use the following command in BRom mode with MTKClient to create a backup dump file (backup of the stock firmware):

python mtk rl --skip userdata <full path to the Back-Up Folder on PC>

Use the following command in BRom mode with MTKClient to flash an entire backup dump file/backup stock firmware folder:

python mtk wl <full path to Firmware Folder>

I have tried every which way I can to fix DM-Verity Corruption and nothing has worked. Each attempt has only lead to Bootloop or brick.

The methods I have tried are as follows;

First, I tried the following command sequence:

adb reboot bootloaderfastboot devicesfastboot oem cmds

Failed!

So I tried the next step in flashing the vbmeta.img partition file with both the pulled copy from the dump file as well as a blank version following the commands:

adb reboot bootloaderfastboot devicesfastboot flash vbmeta --disable-verity --disable-verification vbmeta.imgfastboot --disable-verity --disable-verification flash vbmeta vbmeta.imgfastboot flash vbmeta vbmeta.img --disable-verity --disable-verification

Failed!

Next I tried to use the adb shell command through the computer by following the command:

adb reboot dm-verity enforcing

Failed!

I tried to use the same command through a Rooted Termux terminal:

sureboot dm-verity enforcing

Failed!

So next, I tried to use these fastboot commands:

fastboot devicesfastboot oem disable_dm_verityfastboot oem enable_dm_verity

Failed!

- Attached is an empty.vbmeta.img for flashing to remove DM-Verity Corruption.

A. Try to flash the empty.vbmeta.img via the following commands to remove DM-Verity Corruption:

adb devicesadb reboot bootloaderfastboot flash vbmeta C:/platform-tools/empty.vbmeta.img

B. If they don't work, try to flash the empty.vbmeta.img via the following commands to remove DM-Verity Corruption.

adb devicesadb reboot bootloaderfastboot flash vbmeta --disable-verity --disable-verification C:/platform-tools/empty.vbmeta.img

You may just have to hit the power button upon initial boot.

If anyone figures out how to fix DM-Verity Corruption please send me a DM. Thanks in advance..

Download GSI Here!

1. Perform a factory reset on your device. You have two options here:
   • Open the settings app on your phone and look for the factory reset option. It's usually under settings related to backup.
     

     

   • Reboot to your device's stock recovery using either a button combination when booting or issuing the following ADB command when booted in Android: adb reboot recovery. Once here, use the volume keys to navigate and the power button to select the factory reset option.
2. Once your device has been factory reset, reboot to your device's bootloader using either a button combination when booting or issuing the following ADB command when booted in Android: adb reboot bootloader
3. With your device connected to your PC, open up a command prompt or terminal window in the same directory where you downloaded your GSI of choice.
4. Enter the following command: fastboot erase system
5. Enter a command in the following format: fastboot -u flash system name_of_gsi.img
6. Allow the image to flash, it could take a few minutes. Once it has completed, reboot your device either manually via power key or by entering fastboot reboot.

*If needed, perform a factory data reset via the command fastboot -w or by rebooting to recovery mode and manually performing a factory data reset.*

Done!