Partitions

note

Most sections are only accessible via mtkclient

Non-empty partitions which may be of interest

Partition name	Read	Write
misc	✅	❌
para	✅	❌
md_udc	✅	❌
expdb	✅	❌
frp	✅	❌
hw	✅	❌
boot_para	✅	❌
vbmeta_a vbmeta_b	✅	✅
vbmeta_system_a vbmeta_system_b	✅	✅
vbmeta_vendor_a vbmeta_vendor_b	✅	✅
metadata	✅	❌
nvcfg	✅	✅
nvdata	✅	❌
persist	✅	✅
protect1	✅	✅
protect2	✅	✅
seccfg	✅	❌
md1img_a md1img_b	✅	❌
spmfw_a spmfw_b	✅	❌
scp_a scp_b	✅	❌
sspm_a sspm_b	✅	❌
gz_a gz_b	✅	❌
lk_a lk_b	✅	❌
boot_a boot_b	✅	✅
vendor_boot_a vendor_boot_b	✅	✅
dtbo_a dtbo_b	✅	❌
tee_a tee_b	✅	❌
proinfo	✅	✅
nvram	✅	✅
elable	✅	✅
kdebuginfo	✅	❌
logo	✅	❌
super	✅	✅
userdata	✅	❔
flashinfo	✅	❌

Empty partitions

Partition name	Read	Write
uTags	✅	❌
uTagsBackup	✅	❌
sec1	✅	❌
rfcal	✅	❌
cid	✅	❌
sp	✅	❌
prodper	✅	❌
kpan	✅	❌
logs	✅	❌
carrier	✅	❌
pad5 pad4 pad3 pad2 pad1 pad0	✅	❌
otp	✅	❌

Summarizing

This is a list of partitions that are of interest for this device:

• lk -- LittleKernel partition, cannot be written with mtkclient, but only with flash tool.

• vbmeta -- VBMeta partition, can be flashed via mtkclient, but gives a REDSTATE

• boot -- Boot partition, main interest for root access and can be written via mtkclient, but gives a REDSTATE

• nvram -- Contains the IMEI and other device specific information, make a backup

• elable -- Carrier Lock partition, can be flashed. Flash empty elable.img from firmware to remove carrier lock. Confirmed to be a typo of e-label.

• frp -- Factory Reset Protection partition. Also saves if OEM Unlocked is enabled in Developer settings. Can be reset with specific tools, and maybe mtkclient (not tested).

• seccfg -- Contains security configurations, such as SBC State (Secure boot), lock state (bootloader unlocked or not). Lock state is V4 for Moto g13/g23. Cannot be written by mtkclient from preloader.

• proinfo -- Contains serial number. Can be written by mtkclient.

Backup

To backup all the important partitions, use the Backup Critical Partition script from DiabloSat