***Mtk Based China Phones briefing***

[GSM-POWE®]

Boxes

Flashing boxes are capable of opening the Security Zone before a full flash. No, let me rephrase that: The software that comes with flashing boxes is capable of opening the Security Zone before a full flash, allowing the full flashing of phones; this is actually one of the many
things that warrant their existence. Boxes are essentially hardware keys that protect the software that was coded for them, combined with USB Serial adapters. Some also include dynamic pin configuration and automatic pinout finding circuitry. They can cost several hundred USD, but come with support, cables for most MTK phones and flashing software. Some also provide firmware editing software, either in the basic package or as an addon for a fee. Qualities of these vary from box to box.



Flashing in practice, using MTK flashtool



MTK FlashTool is the “official” tool used to flash MTK phones. It’s used by the factories and developers. It is also where the DA originates from.
The features of MTK FlashTool include
· Reading(Read-back) and Writing(Download) the flash
· Formatting the File systems


Probaly guides and videos already posted in forum but ı want to inform everybody by pictures.


Reading a full backup with MTK FlashTool





This is MTK FlashTool. You can set your Serial Port settings in the Options menu. If you’re using the Direct COM interface, select COM1/2 and 115200 bps from the Baudrate submenu. Otherwise select the virtual com port number of your USB serial cable, and 460800. Also set Options->Operation Method->NOR (this book only talks about NOR flash)


Click over to the Read Back tab, remove everything you may find in the list, then click Add.
This is what you should see:




Now double click on ROM_0, and Select where you wish to save your image.
Then you will be greeted with the dialog below





It’s fairly obvious what we need to do here. For a full backup we will start at address 0x0000000, this means the very beginning of the flash chip. The length has to be equal the size of our flash chip. Don’t know this? Try reading a small chunk first, and I’ll show you how to find it.


Click Ok, and Click Read back. At this point you should have your phone physically connected to the PC, with it being switched off. Push the power button. Your phone should start booting the DA, nothing will appear on most models while doing this. Some will turn on the back light, some will produce a hissing sound through their speaker. These are all normal.


If the phone turns on and starts the firmware, then your interface, settings are wrong/faulty If you’ve used the Multimeter method now would be the time to try the next possible combination. If it just doesn’t seem to work in any combination, you should loopback test
your interface cable. Or it’s also possible that your phone doesn’t have UART on it’s data cable connector, only on test points, at this time I’m not going to write about finding the right test points on such phones.


Try and try again, until it works. If you’ve read your first backup, Congrats!


Ok, now if you didn’t know your flash chip size the bottom right corner is where you should look, after your initial smaller readback.





You’re interested in NOR: (256Mb+64Mb)
What this means is that this phone has NOR Flash, 256 MegaBITs of it, and 64 MegaBITs of RAM.
Now you can use Google.
Use the following search without the quotes, and substitute the number you got:
“256 *131072 in hex” The result in this case:
256 * 131 072 = 0x2000000
0x2000000 is what you would need to enter in the length field to get a full backup of this chip.


As a quick reference:
128 MB = 0x1000000 (usual file system start: 0xE00000, length:0x200000)
256 MB = 0x2000000 (usual file system start: 0x1C00000, length: 0x400000)
512 MB = 0x4000000

[GSM-POWE®]

Full Flashing with MTK FlashTool

Full flashing, with no regard for the Security Zone, as discussed above, this will create bricked phone unless you continue with the the fullflash guide, have an image with an open Security Zone, or one with Security Zone protection disabled.
First open notepad (that’s right notepad) Insert the following line:
ROM 0x0
And save it as reflash.txt
Now in FlashTool click the Download Tab.
Click the Scatter-loading button, and locate your reflash.txt
This is what you should see:





Double click ROM, and select the image you wish to flash to your phone.Hit Download, and press the power button on the phone. Sit back and enjoy.

[GSM-POWE®]

Firmware Editors

Now that you’ve gotten a pretty good idea about how to interface with your MTK phone, and the caveats of flashing we come to the subject of firmware editors.Firmware editors allow you to change internal resources of MTK firmwares, like language packs, graphics, internal ringtones, and fonts.

Notice: there is no free solution to edit firmwares at the moment only paid solutions.(Infinity box---z3x team products----spiderman box----cpf products---Mc tool ---etc.)

For now ı finish my thread but who know in future will continue this thread with new cpu type.

B.R

Unknown®

[metro2mobile]

very good info.....................sir

thanks