Oppo Reno 3 (CPH2043) FRP Lock Remove with Hydra Tool
- keep press boot info
- Remove frp lock
- keep press boot info
Code:
-------------------------------------------------------
To Enable BROM Mode:
Method 1 - Bootkey (Vol + - Power) or any combination
Method 2 - Enable Preloader to brom(crashing Method)
Method 3 - Test Point Data0 + ground
To Enable Preloader Mode:
Method 1 - Just Insert cable
-------------------------------------------------------
Searching for MTK Device...Found
MTK Port Type : Flashmode BROM
FriendlyName : MediaTek USB Port_V1632 (COM38)
Device : /6&36559b33&0&3
SymbolicName : \\?\usb#vid_0e8d&pid_0003#6&36559b33&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Driver Release: 01/22/2015,3.0.1504.0
Service : wdm_usb
Openning Port [COM38] Ok
Handshaking...Ok
HwCode: 0725 {MT6779}
Hwver: 0000
Target config: E5
SBC : 01 (True)
SLA : 00 (False)
DAA : 04 (True)
SWJTAG : 04 (True)
EPP : 00 (False)
CERT : 00 (False)
MEMREAD : 20 (True)
MEMWRITE: 40 (True)
CMD_C8 : 80 (True)
Connection : BROM
HW Subcode: 8A00
HW Subcode: CA01
Give SW : 0000
ME_ID : 2A2E3853A31B55A18D455DC262A9E685
SOC_ID : 83CCB0047AAC3A98CCF0016D67A487A14AE64148A58601EC1B9F161FECB50C82
Exploiting Device...
Successfully Exploited..
Handshaking...Ok
Dumping Preloader from Bootrom..
Seeking preloader address..Found @ 0x00200BC4
Starting to dump...
Prel Size: 0x00054914
Successfully dump preloader.. [C:\Hydra Tool\Boot\PreloaderDump\preloader_k79v1_64.bin]
Target config: 00
SBC : 00 (False)
SLA : 00 (False)
DAA : 00 (False)
SWJTAG : 00 (False)
EPP : 00 (False)
CERT : 00 (False)
MEMREAD : 00 (False)
MEMWRITE : 00 (False)
CMD_C8 : 00 (False)
Connection : BROM
Preparing Download Agent..[MTK_AllInOne_DA_5.2152.bin]
Patching da2 ... Ok
Uploading Stage 1....
Successfully uploaded stage 1, jumping ..
Executing JUMP_DA Address @ 0x00200000
Jumping to 0x00200000 Arrow 0xC0
Successfully received DA sync
ONNECTION_AGENT : bromine
DRAM config needed for : 4B4D3856383030314A4D2D4238313300
Sending auto preloader from dump... [preloader_k79v1_64.bin]
Sending emi data.. [DRAM setup passed.]
Sending emi data succeeded.
Uploading stage 2...
Upload data was accepted. Jumping to stage 2...
Successfully uploaded stage 2
ERAM Size: 0x00000000000008000-512 KB
IRAM Size: 0x0000000200000000-8 GB
UFS MID: 0x4B
UFS FWVer: 0x1000
UFS Blocksize: 0x0000000000001000-4 KB
UFS LU0 Size: 0x0000000000400000-4 MB
UFS LU1 Size: 0x0000000000400000-4 MB
UFS LU2 Size: 0x0000001DCB000000-119.172 GB
UFS ID: 8
UFS CID: 4B4D3856383030314A4D2D423831330000000000
HW-CODE: 0x725
HWSUB-CODE: 0x8A00
HW-VERSION: 0xCA01
SW-VERSION: 0x0
CHIP-EVOLUTION: 0x0
DA-VERSION: 1.0
Speed: high-speed
Upload data was accepted. Jumping to stage 2...
DA Extensions successfully added
Reading Partition Table ..
Partition Count: 55
--------------- Reading build.prop content ---------------
Unable to read system info..
--------------- end of build.prop content ---------------
Reading IMEI........
-------------------------------
Bootloader Status...
Bootloader: Locked
-------------------------------
Backing-up Security..
- preloader(preloader.bin), 512 KB = Ok [preloader_k79v1_64.bin]
*Creating Scatter file... C:\Hydra Tool\Backup\MTKBKUP\0725_2A2E3853AACC##B55A18D455DC262A9E685\Auto\072023154815\6779_Android_scatter.txt
- pgpt(pgpt.bin), 32 KB = Ok
- nvram(nvram.bin), 64MB = Ok
- nvdata(nvdata.bin), 64MB = Ok
- frp(frp.bin), 1024 KB = Ok
- protect1(protect1.bin), 8,969 MB = Ok
- protect2(protect2.bin), 8 MB = Ok
- persist(persist.bin), 55.5 MB = Ok
- proinfo(proinfo.bin), 3 MB = Ok
- oppo_custom(oppo_custom.bin), 1024 KB = Ok
- opporeserve1(opporeserve1.bin), 8MB = Ok
- opporeserve2(opporeserve2.bin), 64MB = Ok
- nvcfg(nvcfg.bin), 32 MB = Ok
- sec1(sec1.bin), 2MB = Ok
- seccfg(seccfg.bin), 512 KB = Ok
- lk(lk.thousand), 5 MB = Ok
Backup Done!!!
Elapsed Time : 00:01:46

- Remove frp lock
Code:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Service Function
Factory Reset Protection[FRP]
auto
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Searching for MTK Device...Found
MTK Port Type : Flashmode BROM
FriendlyName : MediaTek USB Port_V1632 (COM38)
Device : /6&36559b33&0&3
SymbolicName : \\?\usb#vid_0e8d&pid_0003#6&36559b33&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Driver Release: 01/22/2015,3.0.1504.0
Service : wdm_usb
Openning Port [COM38] Ok
Reading Partition Table ..
ERAM Size: 0x00000000000008000-512 KB
IRAM Size: 0x0000000200000000-8 GB
UFS MID: 0x4B
UFS FWVer: 0x1000
UFS Blocksize: 0x0000000000001000-4 KB
UFS LU0 Size: 0x0000000000400000-4 MB
UFS LU1 Size: 0x0000000000400000-4 MB
UFS LU2 Size: 0x0000001DCB000000-119.172 GB
UFS ID: 8
UFS CID: 4B4D3856383030314A4D2D423831330000000000
HW-CODE: 0x725
HWSUB-CODE: 0x8A00
HW-VERSION: 0xCA01
SW-VERSION: 0x0
CHIP-EVOLUTION: 0x0
DA-VERSION: 1.0
Speed: high-speed
Partition Count: 55
--------------- Reading build.prop content ---------------
Unable to read system info..
--------------- end of build.prop content ---------------
Reading IMEI........
-------------------------------
Bootloader Status...
Bootloader: Locked
-------------------------------
Rebooting Device...
Reboot Option : RebootToNormal
Rebooting Operation Done!!!!
Action Result: Arrow
Elapsed Time : 00:00:23
