Make : Xiaomi
Model : Poco M4 Pro / Note 11S
Model Code
: 2201117PG
Model Codename : Fleur
Purchased : 2022-12-27, takealot R4499
Storage : 128GB
RAM : 6GB
Factory Firmware Version
: MUIU 13.0.7(RKEMIXM)
Firmware Version : ``
XDA Devs : https://forum.xda-developers.com/f/redmi-note-11s-4g-poco-m4-pro-4g-fleur.12591
Firmware
Rooting
https://forum.xda-developers.com/t/root-poco-m4-pro-4g-fleur-using-magisk.4449193/
Adapted from https://forum.xda-developers.com/t/unlock-bootloader-redmi-note-11s.4431675/
1. Root
- Install mtkclient
- Activate developer mode (About phone → All specs → MIUI version)
- Turn on USB debugging and OEM unlocking
- Turn off phone and disconnect
- Run:
-
mtk e metadata,userdata,md_udc
- plug phone in (still turned off)
- phone detected: erases data
-
mtk da seccfg unlock
- unlocks bootloader
-
mtk reset
- reboots
-
- Disconnect USB cable and reboot phone
- When it boots a message is displayed warning that dm-verity is corrupted. Click the power button to dismiss and continue booting.
2. Extract boot.img
From fastboot package:
- MIUI version in Settings -> About phone -> MIUI Version (e.g. 13.0.6.0(RKEMIXM))
- MIUI Updates Tracker get matching Stable Fastboot update
- Extract
vbmeta.img
andboot.img
or from Recovery v13.0.10.0 archive:
payload_dumper --partitions vbmeta,boot payload.bin
3. Patch boot.img
Patch boot.img for root using Magisk.
- Install Magisk
- Copy
boot.img
to SD card - Magisk → install → patch a file (for each boot.img)
- Copy patched boot image from Downloads (called
magisk_patched_*.img
) to SD Card
4. Flash patched boot.img
adb reboot bootloader
fastboot flash boot magisk_patched_*.img
fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img
5. Patch inactive slot
- boot rooted phone
- Magisk Install to Inactive slot
- reboots to inactive
- if there's nothing in that slot (fastboot) switch back
fastboot --set-active=other reboot
- if there's nothing in that slot (fastboot) switch back