MT2v203 O_o - Page 4 - GSM-Forum

nessyb · 01-01-2019, 11:26

Bos SMADL MatriX secured firmware read

Operation : Read Firmware [ v2.03 ]

1. Make sure device is powered off. Power off, if need. Wait 20 seconds after
2. Insert USB cable in phone
Waiting for device connection ...

PTFN : MediaTek PreLoader USB VCOM (Android) (COM3)
MODE : PRELOADER PORT
PORT : 3
Waiting BOOT ack ...
PRELOADER : ACK confirmed!
BROM : Init BROM
BROM init passed!
CHIP : MT6735 , SBID : 0x8A00 , HWVR : 0xCB00 , SWVR : 0x0000
TYPE : LEGACY MTK
BROM : SecLevel : 0x00000000
BROM : SecMode : PLAIN [+PRL]
BROM : PRELOADER PORT
MODE : 0_base : BASE_v1712 | Manual : Disabled
AGENT : Look for suitable BootChain in DA ...
AGENT : MTK_AllInOne_DA.bin
AGENT : Found MT6735
AGENT : MTK_DOWNLOAD_AGENT
BROM : Sending 1st DA ...
BROM : DA sent
BROM :Transfer control to DA ...
DA : AGENT started!
NAND : DEVICE NOT FOUND
eMMC : OK
eMMC : 15010051345A334D4202E9A7C852147F
DAInf: 4 : 2 : 155
DA : DRAM ready!
DA : BOOT to 2nd DA ...
DA : Receiving HW info

EMMC: 15010051345A334D4202E9A7C852637F
EMMC: VEN : SAMSUNG | OEM : 01 | DEV : Q4Z3MB
EMMC:
BOOT1 : 0x00400000 [ 4.00 MB ]
BOOT2 : 0x00400000 [ 4.00 MB ]
RPMB : 0x00400000 [ 4.00 MB ]
USER : 0x747C00000 [ 29.12 GB ]

SRAM: 0x00020000 [ 128.00 KB ]
DRAM: 0x80000000 [ 2.00 GB ]

CHIP : MT6735 , SBID : 0x8A00 , HWVR : 0xCB00 , SWVR : 0x0000 , EVOL : 0x0000

RNID : A0325694B208435BA4D3CCB776F755F

STATUS : BLANK FLASH
BSTYLE : EMMC FLASH BOOT

DA : USB : HIGH-SPEED

Boot done!

Patch Level : MRA58K
Display ID : FQ722WF1.ALF.SMADL.M0.H.HB.SW.0907.V3.04-View_55DX
Ver. CodeName : REL
Ver. Release : 6.0
Sec. Patch : 2016-09-05
Build Time : 1504768005
Product Model : SMADL MatriX
Product Brand : SMADL
Product Name : SMADL MatriX
Product Device : SMADL
Product Manfct : SMADL
Board Platform : mt6735
Product Info : fq722w_alf_f1_sm

MT6735__SMADL__SMADL_MatriX__6.0__FQ722WF1.ALF.SMA DL.M0.H.HB.SW.0907.V3.04-View_55DX__MRA58K__fq722w_alf_f1_sm

SecureDevice : Plain

Read : preloader.bin
Read : nvram.bin
Read : lk.bin
Read : boot.img
Read : recovery.img
Read : logo.bin
Read : secro.img
Read : tz.img
Read : system.img
ExtSparse : Compression ratio : 20%
Read : cache.img
Read : userdata.img

FW Size : 2.73 GB
Android Info saved : _Android_info.txt
Scatter : MT6735_Android_scatter.txt
Saved to : MT6735__SMADL__SMADL_MatriX__6.0__FQ722WF1.ALF.SMA DL.M0.H.HB.SW.0907.V3.04-View_55DX__MRA58K__fq722w_alf_f1_sm\

Done!
Elapsed: 00:05:24

JayDi · 01-01-2019, 19:01

Quote:

Originally Posted by SeharH

So why you are connecting the device in brom mode?
1 thing more about 6570 nand device>Till yet readed firmwares are not help to revive the phone so make sure about you have original factory file...My words are finished here as what i figure out i share

BR.
SeharH

CM2 able to work with OWN and Factory firmwares.
Device can be FULLY erased and repaired with any firmware, need just select correct mode ( FACTORY or INFINITY )

JayDi · 01-01-2019, 19:04

Quote:

Originally Posted by nessyb

read firmware failed on v2.03 but done on 1.58

Code:

Operation : Read Firmware [ v2.03 ]

1. Make sure device is powered off. Power off, if need. Wait 20 seconds after
2. Insert USB cable in phone
Waiting for device connection ...

PTFN : MediaTek PreLoader USB VCOM (Android) (COM3)
MODE : PRELOADER PORT
PORT : 3
Waiting BOOT ack ...
PRELOADER : ACK confirmed!
BROM : Init BROM
BROM init passed!
     CHIP : MT6580 , SBID : 0x8A00 , HWVR : 0xCA00 , SWVR : 0x0000
     TYPE : LEGACY MTK
BROM : SecLevel : 0x00000000
BROM : SecMode  : PLAIN [+PRL]
BROM : PRELOADER PORT
MODE : 0_base : BASE_v1844 | Manual : Disabled
AGENT : Look for suitable BootChain in DA ... 
AGENT : MTK_AllInOne_DA.bin
AGENT : Found MT6580
AGENT : MTK_DOWNLOAD_AGENT
     BROM : Sending 1st DA ...
BROM : DA sent
BROM :Transfer control to DA ... 
     DA : AGENT started!
NAND : DEVICE NOT FOUND
eMMC : OK
eMMC : 4D0001703430434D2B1E5847B7B2FD09
DAInf: 4 : 2 : 156
     DA : DRAM ready!
DA : BOOT to 2nd DA ...
DA : Receiving HW info

        EMMC: 7001004D4D43303447581E2B9FDB2B7
        EMMC: VEN : KINGSTON | OEM : 01 | DEV : MMC04G
        EMMC: 
              BOOT1  : 0x00020000 [ 128.00 KB ]
              BOOT2  : 0x00020000 [ 128.00 KB ]
              RPMB   : 0x00020000 [ 128.00 KB ]
              USER   : 0xE6800000 [ 3.60 GB ]

        SRAM: 0x00020000 [ 128.00 KB ]
        DRAM: 0x20000000 [ 512.00 MB ]

        CHIP : MT6580 , SBID : 0x8A00 , HWVR : 0xCA00 , SWVR : 0x0000 , EVOL : 0x0000

        RNID : 589044B1CEABD22A68F198937E622E4B

 STATUS : BLANK FLASH
 BSTYLE : EMMC FLASH BOOT

DA : USB : HIGH-SPEED

Boot done!

Patch Level    : LMY47I
Display ID     : C5P_80L_WEG_3GW_B15_EMMC_DDR2_32_4_QHD_DCHS_361_A2_S9_Plus_LDH_20180522-190639
Ver. CodeName  : REL
Ver. Release   : 6.1
Build Time     : 1526987199
Product Model  : S9 Plus
Product Brand  : S9 Plus
Product Name   : S9 Plus
Product Device : S9 Plus
Product Board  : S9 Plus
Product Manfct : S9 Plus
Board Platform : mt6580
Product Info   : yuanda6580_weg_l

MT6580__S9_Plus__S9_Plus__6.1__C5P_80L_WEG_3GW_B15_EMMC_DDR2_32_4_QHD_DCHS_361_A2_S9_Plus_LDH_20180522-190639__LMY47I__yuanda6580_weg_l


SecureDevice : Plain


Error : Failed to read data! Connection or power problem!
Check cable, battery, connection and drivers!

Reconnect Power/Cable!

from 1.58

Code:

Operation : Read Flash [ v1.58 ]

1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 3 ]
Sync...
Inital Boot Ok!
BB_CPU_PID : 6580
BB_CPU_NME : [MediaTek] MT6580_S00
BB_CPU_EXT : 0xCA00 , 0x8A00 , 0x0000
Processing BROM stage
Settings for BROM configured!
SecCfgVal : 0x00000000
BromVer   : 0x00FF
BLVersion : 0x0001
PreLoader : Active [ Boot with PL ]
BootLdrSS : NORMAL with PRELOADER
Processing DA stage
DA Select done, will use MTK_AllInOne_DA_v5.1624.16.07
Sending and initialize DA ...
Running DA ver.4.2 on BBID : 0x94
NAND Flash : NOT INSTALLED
eMMC Flash : 7001004D4D43303447581E2B09FDB2B7
Initialize Memory ... 
DRAM already initialized by Preloader
DAgent sent , init HW now
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0x70 , OEM : 0100
[eMMC] : FLASH_INF : [KINGSTON] , G40CM
[eMMC] : FLASH_CID : 7001004D4D43303447581E2B09FDB2B7
[eMMC] : FLASH_BRT : 0x00020000 , 0x00020000 , 0x00020000
[eMMC] : FLASH_LEN : 0x00000000E6800000
[eMMC] : FLASH_UCP : 3688 MiB [eMMC 4 GiB]
DEV RID    : 0xFC4BFBD4CD4AA5BD3905A29EFC09B7F6
INT RAM    : 0x00020000
EXT RAM    : 0x20000000 [512 MiB]
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!

Reading Flash Content now ... 

xGPT : Normalize settings Ok!

Brand     : S9 Plus
ProdName  : S9 Plus
ProdModel : S9 Plus
Device    : S9 Plus
AndroidVer: 6.1
MTKxCPU   : MT6580
MTKxPRJ   : ALPS.L1.MP6.V2_YUANDA6580.WEG.L_P2

[Read Ok] : preloader_yuanda6580_weg_l.bin
[Read Ok] : lk.bin
[Read Ok] : boot.img
[Read Ok] : recovery.img
[Read Ok] : logo.bin
[Read Ok] : secro.img
[Read Ok] : system.img
[Read Ok] : cache.img
[Read Ok] : userdata.img

[ScatCFG] : MT6580 / V1.1.2 / yuanda6580_weg_l / EMMC
Android Info saved
MAUI Meta DB saved
HWConfig Info saved
FW Size : 1330 MiB
Scatter saved to : 

All done!

Done!
Elapsed: 00:07:13
Reconnect Power/Cable!

That may happen due :
1. Power or cable problem
or
2. Loader version latest one, 1844. In case of old revision of CPU it may work not as SW expect.
In that case next time try select 1812 or 1835 and try again.
Will be great if you can test next time few times with different loaders. That help us determine issues more faster.

dany_boy · 01-02-2019, 06:48

need some explanation about this line you talk about Efuse protected devices or something else?

FWReader - Activated reading for LEGACY secured phones ( for fused devices )

Kirumira · 01-02-2019, 08:53

Quote:

Originally Posted by dany_boy

need some explanation about this line you talk about Efuse protected devices or something else?

FWReader - Activated reading for LEGACY secured phones ( for fused devices )

Are you talking about such devices Mr Jaydi ? Here http://forum.gsmhosting.com/vbb/13466288-post1.html

Yusuf Lawal · 01-02-2019, 09:09

Quote:

Originally Posted by Kirumira

Are you talking about such devices Mr Jaydi ? Here http://forum.gsmhosting.com/vbb/13466288-post1.html

Have you try with latest version 2.03?

LoveLess · 11-27-2019, 15:02

Quote:

Originally Posted by JayDi

Try with 1.58 , power management on 2.x line not finished yet for mt8127, sample on way to hands for fix.

hey..

is this cpu supported..?

CHIP : MT8127 , SBID : 0x8A00 , HWVR : 0xCA03 , SWVR : 0x0000

1.58 didnt boot the device..

YellowBoss · 11-27-2019, 15:06

Quote:

Originally Posted by LoveLess

hey..

is this cpu supported..?

CHIP : MT8127 , SBID : 0x8A00 , HWVR : 0xCA03 , SWVR : 0x0000

1.58 didnt boot the device..

Hi,

You can try with CM2MT2 v2.06
What is the result ?

01-01-2019, 11:26	#46 (permalink)
nessyb No Life Poster Join Date: Jan 2013 Location: zimbabwe south africa Posts: 1,441 Member: 1866877 Status: Offline Sonork: 100.1681933 Thanks Meter: 707	Bos SMADL MatriX secured firmware read Operation : Read Firmware [ v2.03 ] 1. Make sure device is powered off. Power off, if need. Wait 20 seconds after 2. Insert USB cable in phone Waiting for device connection ... PTFN : MediaTek PreLoader USB VCOM (Android) (COM3) MODE : PRELOADER PORT PORT : 3 Waiting BOOT ack ... PRELOADER : ACK confirmed! BROM : Init BROM BROM init passed! CHIP : MT6735 , SBID : 0x8A00 , HWVR : 0xCB00 , SWVR : 0x0000 TYPE : LEGACY MTK BROM : SecLevel : 0x00000000 BROM : SecMode : PLAIN [+PRL] BROM : PRELOADER PORT MODE : 0_base : BASE_v1712 \| Manual : Disabled AGENT : Look for suitable BootChain in DA ... AGENT : MTK_AllInOne_DA.bin AGENT : Found MT6735 AGENT : MTK_DOWNLOAD_AGENT BROM : Sending 1st DA ... BROM : DA sent BROM :Transfer control to DA ... DA : AGENT started! NAND : DEVICE NOT FOUND eMMC : OK eMMC : 15010051345A334D4202E9A7C852147F DAInf: 4 : 2 : 155 DA : DRAM ready! DA : BOOT to 2nd DA ... DA : Receiving HW info EMMC: 15010051345A334D4202E9A7C852637F EMMC: VEN : SAMSUNG \| OEM : 01 \| DEV : Q4Z3MB EMMC: BOOT1 : 0x00400000 [ 4.00 MB ] BOOT2 : 0x00400000 [ 4.00 MB ] RPMB : 0x00400000 [ 4.00 MB ] USER : 0x747C00000 [ 29.12 GB ] SRAM: 0x00020000 [ 128.00 KB ] DRAM: 0x80000000 [ 2.00 GB ] CHIP : MT6735 , SBID : 0x8A00 , HWVR : 0xCB00 , SWVR : 0x0000 , EVOL : 0x0000 RNID : A0325694B208435BA4D3CCB776F755F STATUS : BLANK FLASH BSTYLE : EMMC FLASH BOOT DA : USB : HIGH-SPEED Boot done! Patch Level : MRA58K Display ID : FQ722WF1.ALF.SMADL.M0.H.HB.SW.0907.V3.04-View_55DX Ver. CodeName : REL Ver. Release : 6.0 Sec. Patch : 2016-09-05 Build Time : 1504768005 Product Model : SMADL MatriX Product Brand : SMADL Product Name : SMADL MatriX Product Device : SMADL Product Manfct : SMADL Board Platform : mt6735 Product Info : fq722w_alf_f1_sm MT6735__SMADL__SMADL_MatriX__6.0__FQ722WF1.ALF.SMA DL.M0.H.HB.SW.0907.V3.04-View_55DX__MRA58K__fq722w_alf_f1_sm SecureDevice : Plain Read : preloader.bin Read : nvram.bin Read : lk.bin Read : boot.img Read : recovery.img Read : logo.bin Read : secro.img Read : tz.img Read : system.img ExtSparse : Compression ratio : 20% Read : cache.img Read : userdata.img FW Size : 2.73 GB Android Info saved : _Android_info.txt Scatter : MT6735_Android_scatter.txt Saved to : MT6735__SMADL__SMADL_MatriX__6.0__FQ722WF1.ALF.SMA DL.M0.H.HB.SW.0907.V3.04-View_55DX__MRA58K__fq722w_alf_f1_sm\ Done! Elapsed: 00:05:24

01-02-2019, 06:48	#49 (permalink)
dany_boy No Life Poster Join Date: Jul 2013 Location: Pakistan. Rahim Yar Khan Posts: 1,661 Member: 1977629 Status: Offline Thanks Meter: 429	need some explanation about this line you talk about Efuse protected devices or something else? FWReader - Activated reading for LEGACY secured phones ( for fused devices )