To person who can understad the magic: looking for bootrom images for MTK CPU

[YellowBoss]

Dear Frinds,

To person who can understad the magic:
We are looking for bootrom images for latest MTK CPU
If you have it or if you have a way to get it - we are ready to discuss it.
Please contact to rd [at] infinity-box.com

Thanks !

[Akhtar Ali Jatt]

Mail Sent waiting for update ...........

[hitech care]

Can U Post Little More Details About Bootrom Image..?
I Have Good Collection Of Files Including (DA , Preloader ,Boot.img , Auth Files) Or Need PID & VID ?

As I Know U Need Bootloader From Firmware Right?

[gracy_elec]

Mail Sent please cheak...

thanks
good luck

[28179]

It would not be better to have a little update during this time.Short steps and Short steps but always.now team can do it.Offer a little update for mtk.if is possible We recommend.

[InfinitySupport]

Originally Posted by Akhtar Ali Jatt

Mail Sent waiting for update ...........

it was no e-mails with bootrom files.
DA files are not the same as bootrom files !

[InfinitySupport]

Originally Posted by hitech care

Can U Post Little More Details About Bootrom Image..?
I Have Good Collection Of Files Including (DA , Preloader ,Boot.img , Auth Files) Or Need PID & VID ?

As I Know U Need Bootloader From Firmware Right?

here is very specific thread.
DA files are not the same as bootrom files.

[InfinitySupport]

Originally Posted by gracy_elec

Mail Sent please cheak...

thanks
good luck

it was no e-mails with bootrom files.
DA files are not the same as bootrom files.

[InfinitySupport]

Originally Posted by 28179

It would not be better to have a little update during this time.Short steps and Short steps but always.now team can do it.Offer a little update for mtk.if is possible We recommend.

please read thread name once again.
Do you have any information regarding bootrom files ?
If you have no information about thread name - please make your post in other thread.

[rebainoor]

Originally Posted by YellowBoss

Dear Frinds,

To person who can understad the magic:
We are looking for bootrom images for latest MTK CPU
If you have it or if you have a way to get it - we are ready to discuss it.
Please contact to rd [at] infinity-box.com

Thanks !

You talk about exxxx to store device specific information and RF calibration data

[rebainoor]

This format is used in brom and preloader(has to be verified). All fields are in little endian.

=== File info image format ===
{| class="wikitable"
! Size
! Content
! Extra notes
|-
| 4
| <code>4d 4d 4d 01</code>
|-
| 4
| Length of complete header (including this size field and the magic field above)
|-
| 12
| <code>"FILE_INFO\0\0\0"</code>
| Pay attention to padding bytes
|-
| 4
| <code>01 00 00 00</code>
|-
| 2
| Image type
| 0: NONE 1: ARM-Bootloader 2: ARM-External-Bootloader 10: Root-Certificate 256: Primary-MAUI 264: VIVA 769: SECURE_RO_ME
|-
| 1
| Storage type
| 0: NONE 1: NOR Flash 2: NAND Sequential Flash 3: NAND_TTBL 4: NAND_FDM50 5: EMMC-Boot-Region 6: EMMC-Data-Region 7: Serial Flash 255: Device-End
|-
| 1
| Signature type
| 0: No Signature 1: PHASH 2: SINGLE 3: SINGLE and PHASH 4: MULTI 5: TYPE_NUM 255: TYPE_END
|-
| 4
| Load address
|-
| 4
| Total file size
|-
| 4
| <code>00 00 04 00</code>
| Maximum file size
|-
| 4
| Content offset in file
| You can have multiple headers before actual content (preloader assembly image)
|-
| 4
| Signature length
| If no signature was set, size is 0
|-
| 4
| Jump offset
| Seems to be the same as content offset, maybe because preloader needs to execute
|-
| 4
| Ending
| 1: POST_BUILD_DONE 2: XIP (Execute In Place) use bitwise OR to combine multiple flags
|}

=== Example data from MT6735P chipset ===

ROM:00031128 magicValue DCD 0x14D4D4D
ROM:0003112C HeaderSize DCD 0x38 ; completeHeaderSize
ROM:00031130 aFile_info DCB "FILE_INFO",0,0,0
ROM:0003113C alwaysOne DCD 1
ROM:00031140 FileType DCW 1 ; ARM-Bootloader
ROM:00031142 FlashType DCB 5 ; EMMC-Boot-Region
ROM:00031143 SignatureType DCB 3 ; Single and PHASH
ROM:00031144 LoadAddress DCD 0x200D00 ; SRAM address
ROM:00031148 FileLength DCD 0x1CE4C
ROM:0003114C MaximumSize DCD 0x40000
ROM:00031150 ContentOffset DCD 0x300
ROM:00031154 SigLen DCD 0x124
ROM:00031158 JumpOffset DCD 0x300
ROM:0003115C Ending DCD 1

[rebainoor]

UART1 gets initialized to some predetermined baudrate. Baud usually depends in chip input clock source. Observation has been made that UART1 is disabled on many phones, but can be enabled if proper firmware is used and eFuses are not ****n.

[rebainoor]

No chance to read bootrom image because to do that you need a direct Access to soc and you need key to decrypt

[YellowBoss]

Originally Posted by rebainoor

You talk about exxxx to store device specific information and RF calibration data

no.
thread says "bootrom".
It's a question to people who are involved in deep mtk research

[YellowBoss]

Originally Posted by rebainoor

No chance to read bootrom image because to do that you need a direct Access to soc and you need key to decrypt

there is a chance to get bootrom images, but it's not so easy.
bootrom stored not in flash memory. it's ROM