CM2MTK v1.25 - Forensic Time! MT62xx/MT65xx/MT67xx/MT83xx/MT87xx PhoneBook and MORE! - GSM-Forum

JayDi · 08-04-2015, 22:09

Hi all.
Can test now.
Let's call it all "WorldFirst"

Main changes :

Quote:

FP Platform :
MT625A,MT6260, MT6261 : Direct PhoneBook Read : Hang/Dead/SemiDead/Broken phones supported. Until phone can boot and not erased.

SP Platform :
MT6571,MT6572,MT6575,MT6577, MT6582,MT6589,MT6592,
MT6732,MT6752,MT6795,MT81xx,MT83xx,MT87xx : Direct PhoneBook Read : Hang/Dead/SemiDead/Broken phones supported. Until phone can boot and not erased.

There is not need :

Internet connection and e.t.c. - all data is private and safe.
USB Debug/Root and e.t.c. - forget about root and rest stuff.
Alive/working phone/Meta mode/e.t.c. - Phone can be completely dead and not power on. Until it can Boot and not erase - data will be recovered.
Read tons dumps and waste 20-30-40-50-100-200 minutes of own time to read dump, then extract something from it, then ... then .. then ... Just ONE CLICK , 10-40 seconds and you got a result!

OutPut formats (for now) : CSV (Google Format) , TXT ( for printing )

It support Chinese brands and Original phones as well : Alcatel , ZTE , HTC , Meizu , Xiamoi and e.t.c.

It is initial version, and not all types can be supported ( mostly it about MTK Feature Phones )

Link : CM2MTKv125 - Download - 4shared

JayDi · 08-04-2015, 22:11

MT6260 , PhoneBook Reading :

Code:

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey ( '*' )

Wait for phone...
Phone found! [ 11 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0000
BB_CPU_SN : ACEDD9A6226C6647FA60E21DB2996828
BROM Protocol Version : 05
Setting...
Setting done , result code 0x000E
BROM stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
InitRes : 00000000
DEV[0] : EF00 4000 1600 0000
DEV[1] : 0000 0000 0000 0000
DA_INFO   : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT  : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00E2 , [WINBOND] W25Q32BV
[0] : FLASH_DIE : 00EF 0040 0016 0000 
[0] : FLASH_LEN : 0x00300000
SDS : 0x002FE000 , 0x00002000

Step #1
Step #2

Read Ok, PhoneBook records extracted : 7
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6260_PhoneBook.txt
Write : 7
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6260_PhoneBook.csv
Write : 7

Done!
Elapsed: 00:00:12
Reconnect Power/Cable!

JayDi · 08-04-2015, 22:13

MT6572, Alcatel 6012 , Read PhoneBook :

Code:

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 4 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6572
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0000
BB_CPU_NM : [MediaTek] MT6572_S00
Processing BROM stage
BLVersion : 0x01
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 1501004E35575A4D42013482CC50B0B1
DA Stat : v4.2 on BBID : 0x88
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0015 , OEM : 0100
[eMMC] : FLASH_INF : BMZW5
[eMMC] : FLASH_CID : 1501004E35575A4D42013482CC50B0B1
[eMMC] : FLASH_LEN : 0x00000000E9000000
INT RAM    : 0x00020000
EXT RAM    : 0x20000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


Step #1
Step #2


Read Ok, PhoneBook records extracted : 1
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_alc_PhoneBook.txt
Write : 1
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_alc_PhoneBook.csv
Write : 1

Done!
Elapsed: 00:00:19
Reconnect Power/Cable!

JayDi · 08-04-2015, 22:14

MT6575 , Read PhoneBook :

Code:

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 4 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6575
BB_CPU_HW : CB00
BB_CPU_SW : 8A00
BB_CPU_SB : E201
BB_CPU_NM : [MediaTek] MT6575|MT6577_S00
Processing BROM stage
i2c Init : 00000000
SpeedSet : 0000
VChrgSet : 0x28 , BatStat : 0x02
WD Disable stat : 0x0000
BLVersion : 0x01
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
DA Stat : v3.2 on BBID : 0x84
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0015 , OEM : 0100
[eMMC] : FLASH_INF : M00SJ
[eMMC] : FLASH_CID : 1501004E4A5330304D006C6975F89F33
[eMMC] : FLASH_LEN : 0x00000000E9000000
INT RAM    : 0x00020000
EXT RAM    : 0x20000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


Step #1
Step #2


Read Ok, PhoneBook records extracted : 22
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6575_PhoneBook.txt
Write : 22
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6575_PhoneBook.csv
Write : 22

Done!
Elapsed: 00:00:18
Reconnect Power/Cable!

JayDi · 08-04-2015, 22:16

MT6582 , Read PhoneBook :

Code:

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 4 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6582
BB_CPU_HW : CB00
BB_CPU_SW : 8A00
BB_CPU_SB : 0001
BB_CPU_NM : [MediaTek] MT6582_S00
Processing BROM stage
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 90014A4834473164040503A2D3BB91E3
DA Stat : v4.2 on BBID : 0x87
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0090 , OEM : 014A
[eMMC] : FLASH_INF : d1G4
[eMMC] : FLASH_CID : 90014A4834473164040503A2D3BB91E3
[eMMC] : FLASH_LEN : 0x00000000E9000000
INT RAM    : 0x00020000
EXT RAM    : 0x40000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


Step #1
Step #2


Read Ok, PhoneBook records extracted : 2082
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6582_PhoneBook.txt
Write : 2082
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6582_PhoneBook.csv
Write : 2082

Done!
Elapsed: 00:00:20
Reconnect Power/Cable!

JayDi · 08-04-2015, 22:16

MT6592 , Read PhoneBook :

Code:

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 4 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6592
BB_CPU_HW : CA00
BB_CPU_SW : 8A00
BB_CPU_SB : 0000
BB_CPU_NM : [MediaTek] MT6592_S00
Processing BROM stage
BLVersion : 0x01
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 90014A4838473264040506A11EA48107
DA Stat : v4.2 on BBID : 0x8A
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0090 , OEM : 014A
[eMMC] : FLASH_INF : d2G8
[eMMC] : FLASH_CID : 90014A4838473264040506A11EA48107
[eMMC] : FLASH_LEN : 0x00000001D2000000
INT RAM    : 0x00020000
EXT RAM    : 0x40000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


Step #1
Step #2


Read Ok, PhoneBook records extracted : 1
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6592_PhoneBook.txt
Write : 1
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6592_PhoneBook.csv
Write : 1

Done!
Elapsed: 00:00:14
Reconnect Power/Cable!

JayDi · 08-04-2015, 22:17

MT6572 , Original HTC 210 , Read PhoneBook :

Code:

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 4 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6572
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0000
BB_CPU_NM : [MediaTek] MT6572_S00
Processing BROM stage
BLVersion : 0x01
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 11010030303447393010CA918FD331B7
DA Stat : v4.2 on BBID : 0x88
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0011 , OEM : 0100
[eMMC] : FLASH_INF : 09G40
[eMMC] : FLASH_CID : 11010030303447393010CA918FD331B7
[eMMC] : FLASH_LEN : 0x00000000EC000000
INT RAM    : 0x00020000
EXT RAM    : 0x20000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


Step #1
Step #2


Read Ok, PhoneBook records extracted : 19
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_PhoneBook.txt
Write : 19
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_PhoneBook.csv
Write : 19

Done!
Elapsed: 00:00:15
Reconnect Power/Cable!

JayDi · 08-04-2015, 22:18

MT6589 , Read PhoneBook :

Code:

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 4 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6583
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0001
BB_CPU_NM : [MediaTek] MT6583|6589_S00
Processing BROM stage
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 4B0001154D565735C6B5014245B001CC
DA Stat : v3.2 on BBID : 0x86
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0015 , OEM : 0100
[eMMC] : FLASH_INF : BMVW5
[eMMC] : FLASH_CID : 1501004B3557564D4201B5C6CC01B045
[eMMC] : FLASH_LEN : 0x00000000E9000000
INT RAM    : 0x00020000
EXT RAM    : 0x40000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


Step #1
Step #2


Read Ok, PhoneBook records extracted : 157
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6583_PhoneBook.txt
Write : 157
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6583_PhoneBook.csv
Write : 157

Done!
Elapsed: 00:00:14
Reconnect Power/Cable!

JayDi · 08-04-2015, 22:18

MT6752 , Read PhoneBook :

Code:

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 4 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6752
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0001
BB_CPU_NM : [MediaTek] MT6732|MT6752_S00
Processing BROM stage
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 150100523832314D42004CD7D00B222B
DA Stat : v4.2 on BBID : 0x8F
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0015 , OEM : 0100
[eMMC] : FLASH_INF : BM128
[eMMC] : FLASH_CID : 150100523832314D42004CD7D00B222B
[eMMC] : FLASH_LEN : 0x00000003A3E00000
INT RAM    : 0x00020000
EXT RAM    : 0x80000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


Step #1
Step #2


Read Ok, PhoneBook records extracted : 6
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6752_PhoneBook.txt
Write : 6
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6752_PhoneBook.csv
Write : 6

Done!
Elapsed: 00:00:15
Reconnect Power/Cable!

JayDi · 08-04-2015, 23:58

Link updated : CM2MTKv125 - Download - 4shared

gorgans · 08-05-2015, 02:37

thanks for update when will we get mtk nand read and write.

Fathom · 08-05-2015, 02:50

Nice very usefull for investagation porpose

akhil_bbsr · 08-05-2015, 06:11

Card found: S/N 8F78:0128
Chinese Miracle II [MTK module] v 1.25

Operation : Read UserData [ v1.25 ]

PhoneBook : Enabled
1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 66 ]
Sync...
Inital regs read done
Boot Info :
BB_CPU_ID : 6572
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0000
BB_CPU_NM : [MediaTek] MT6572_S00
Processing BROM stage
BLVersion : 0x01
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 1501004E35585A4D42011DD1CA694145
DA Stat : v4.2 on BBID : 0x88
DA Sent. Configure setting now ...
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0015 , OEM : 0100
[eMMC] : FLASH_INF : BMZX5
[eMMC] : FLASH_CID : 1501004E35585A4D42011DD1CA694145
[eMMC] : FLASH_LEN : 0x00000000E9000000
INT RAM : 0x00020000
EXT RAM : 0x20000000
BOOT TYPE : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!

Step #1
Step #2

Read Ok, PhoneBook records extracted : 464
TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_PhoneBook.txt
Write : 464
CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_PhoneBook.csv
Write : 464

Done!
Elapsed: 00:00:20
Reconnect Power/Cable!

thnx genious its great and appricate ur hard work @jayDi

Deepesh Sharma · 08-05-2015, 06:22

wow really great work from team

its warm update

other box will be

INTEX AQUA Y2 STUCK ON LOGO READ PHONE BOOK SUCESSFULLY

HERE CONTACT DISPLY ON TEXT

Code:

10rath                ; 942-423-*****
10rath                ; 096-175-*****
2700                  ; 080-858-*****
AJAY SIR              ; 099 81 9*****
ASHISH PTH.           ; 07049*****
Aashish Jija          ; 750-987-*****
Ainath sahu N.P.      ; 090-098-****
Ajay Mandal           ; 916-587-*****
Ajay Mandal           ; 36735*******
Ajay Yadav            ; 096-304-*****
Ajay yadav            ; 969-147-*****
Ajju                  ; 084-353-******
Ajju                  ; +9184353******
Ajju cement           ; +91769*****
Aman                  ; 088-715-****
Aman                  ; +91 96 91*****
Amrit tirkey          ; 095-755-*****
Anad Bhai             ; +919926*****
Anil Sharma           ; 898-266*****
Annu                  ; 072-054-*****
Annu                  ; 081-037-******
Annu Bhabhi           ; 088 71*****

JayDi · 08-05-2015, 12:03

Got enough test reports and suggestions in private as well , so, the results satisfy me fully.

More stuff will follow.

08-04-2015, 23:58	#10 (permalink)
JayDi No Life Poster Join Date: Mar 2007 Location: Where you live Posts: 18,542 Member: 462970 Status: Offline Thanks Meter: 20,352	Link updated : CM2MTKv125 - Download - 4shared

08-05-2015, 02:37	#11 (permalink)
gorgans No Life Poster Join Date: May 2003 Location: Jamaica Posts: 1,967 Member: 28559 Status: Offline Thanks Meter: 85	thanks for update when will we get mtk nand read and write.

08-05-2015, 02:50	#12 (permalink)
Fathom Junior Member Join Date: Oct 2006 Location: philippines Posts: 1 Member: 372926 Status: Offline Thanks Meter: 0	Nice very usefull for investagation porpose

08-05-2015, 06:11	#13 (permalink)
akhil_bbsr No Life Poster Join Date: May 2006 Location: MOBILE SOFTZONE BHUBANESWAR IN Posts: 3,509 Member: 271478 Status: Offline Sonork: 1590868 Thanks Meter: 1,070	Card found: S/N 8F78:0128 Chinese Miracle II [MTK module] v 1.25 Operation : Read UserData [ v1.25 ] PhoneBook : Enabled 1. Power Off Phone , Remove battery , Insert back 2. Insert USB cable. In some cases require hold BootKey Wait for phone... Phone found! [ 66 ] Sync... Inital regs read done Boot Info : BB_CPU_ID : 6572 BB_CPU_HW : CA01 BB_CPU_SW : 8A00 BB_CPU_SB : 0000 BB_CPU_NM : [MediaTek] MT6572_S00 Processing BROM stage BLVersion : 0x01 SecCfgVal : 0x00000000 BromVersion : 0xFF BLVersion : 0x01 Preloader Status : Alive Processing DA stage DA Select done , sending NAND_ID : 00000000000000000000000000000000 eMMC_ID : 1501004E35585A4D42011DD1CA694145 DA Stat : v4.2 on BBID : 0x88 DA Sent. Configure setting now ... DA started successuflly eMMC FlashIC initialized [eMMC] : FLASH_VEN : 0015 , OEM : 0100 [eMMC] : FLASH_INF : BMZX5 [eMMC] : FLASH_CID : 1501004E35585A4D42011DD1CA694145 [eMMC] : FLASH_LEN : 0x00000000E9000000 INT RAM : 0x00020000 EXT RAM : 0x20000000 BOOT TYPE : EMMC_FLASH_BOOT SOC VERIFY : C1 Boot Ok! Step #1 Step #2 Read Ok, PhoneBook records extracted : 464 TXT Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_PhoneBook.txt Write : 464 CSV Saved to : C:\InfinityBox\CM2MTK\PhData\MT6572_PhoneBook.csv Write : 464 Done! Elapsed: 00:00:20 Reconnect Power/Cable! thnx genious its great and appricate ur hard work @jayDi

08-05-2015, 12:03	#15 (permalink)
JayDi No Life Poster Join Date: Mar 2007 Location: Where you live Posts: 18,542 Member: 462970 Status: Offline Thanks Meter: 20,352	Got enough test reports and suggestions in private as well , so, the results satisfy me fully. More stuff will follow.