luxferre/mtreader
Archived
1
0
Fork 0
Code Actions Activity

Updated the default DA parameters and name

Browse Source
This commit is contained in:
Luxferre
2020-07-28 21:45:01 +03:00
parent 118782748d
commit 77feb3ef55
3 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2 -1
View File
@@ -18,11 +18,12 @@ Example - backup all 4MB of flash memory (positions 0 to 4194304 on the device f
### Advanced usage ### Advanced usage
In case your phone requires a different DA (Download Agent) binary, you can also specify its parameters: In case your phone requires a different DA (Download Agent) binary than the provided one (`default-da.bin`), you can also specify its parameters:
- `-a` - path to DA file - `-a` - path to DA file
- `-s1` - DA stage 1 loading parameters in the `offset:size:addr` format with each value in hex (defaults to `0:0x718:0x70007000`) - `-s1` - DA stage 1 loading parameters in the `offset:size:addr` format with each value in hex (defaults to `0:0x718:0x70007000`)
- `-s2` - DA stage 2 loading parameters in the `offset:size:addr` format with each value in hex (defaults to `0x718:0x1e5c8:0x10020000`) - `-s2` - DA stage 2 loading parameters in the `offset:size:addr` format with each value in hex (defaults to `0x718:0x1e5c8:0x10020000`)
- `-fio` - offset to the flash information block within the DA file in hex (defaults to `0x1ece0`)
You can also adjust the readback block size as well with the `-bs` parameter. Changing it is not recommended if the default of 1024 bytes works for you. You can also adjust the readback block size as well with the `-bs` parameter. Changing it is not recommended if the default of 1024 bytes works for you.
MT6261.bin → default-da.bin
View File
mtreader.py
+6 -4
View File
@@ -11,10 +11,11 @@ NACK = b'\xA5'
class MTreader: class MTreader:
def __init__(self, devfile, da_path, stage_1, stage_2): def __init__(self, devfile, da_path, stage_1, stage_2, fio):
self.da_path = da_path self.da_path = da_path
self.st1_offset, self.st1_size, self.st1_addr = [int(x, 16) for x in stage_1.split(":")] self.st1_offset, self.st1_size, self.st1_addr = [int(x, 16) for x in stage_1.split(":")]
self.st2_offset, self.st2_size, self.st2_addr = [int(x, 16) for x in stage_2.split(":")] self.st2_offset, self.st2_size, self.st2_addr = [int(x, 16) for x in stage_2.split(":")]
self.fio = int(fio, 16)
while True: while True:
try: try:
self.s = Serial(devfile, 115200) self.s = Serial(devfile, 115200)
@@ -124,13 +125,13 @@ class MTreader:
size = self.st2_size size = self.st2_size
data = self.get_da(offset, size) data = self.get_da(offset, size)
self.da_send_da(self.st2_addr, size, data, 0x800) self.da_send_da(self.st2_addr, size, data, 0x800)
offset += size
# Pass execution to DA # Pass execution to DA
r = self.cmd(b'\xD5' + struct.pack(">I", self.st1_addr), 2) r = self.cmd(b'\xD5' + struct.pack(">I", self.st1_addr), 2)
assert r == b"\0\0" assert r == b"\0\0"
r = self.cmd(NONE, 4) r = self.cmd(NONE, 4)
self.send(b"\xa5\x05\xfe\x00\x08\x00\x70\x07\xff\xff\x02\x00\x00\x01\x08", 1) # something undocumented self.send(b"\xa5\x05\xfe\x00\x08\x00\x70\x07\xff\xff\x02\x00\x00\x01\x08", 1) # something undocumented
#Set flash ID info and other stuff #Set flash ID info and other stuff
offset = self.fio
for i in range(512): for i in range(512):
data = self.get_da(offset, 36) data = self.get_da(offset, 36)
assert(data[:4] != b'\xFF\xFF\0\0') assert(data[:4] != b'\xFF\xFF\0\0')
@@ -180,16 +181,17 @@ if __name__ == "__main__": # main app start
parser.add_argument('file', help='File to write the dump into') parser.add_argument('file', help='File to write the dump into')
parser.add_argument('start', type=int, help='start position (in the phone flash memory)') parser.add_argument('start', type=int, help='start position (in the phone flash memory)')
parser.add_argument('length', type=int, help='data length') parser.add_argument('length', type=int, help='data length')
parser.add_argument('-da','--agent', default=os.path.dirname(os.path.realpath(__file__))+'/MT6261.bin', help='Path to download agent (DA) binary') parser.add_argument('-da','--agent', default=os.path.dirname(os.path.realpath(__file__))+'/default-da.bin', help='Path to download agent (DA) binary')
parser.add_argument('-s1','--stage-1', default='0:0x718:0x70007000', help='Data for first stage DA loading (offset:size:addr format)') parser.add_argument('-s1','--stage-1', default='0:0x718:0x70007000', help='Data for first stage DA loading (offset:size:addr format)')
parser.add_argument('-s2','--stage-2', default='0x718:0x1e5c8:0x10020000', help='Data for second stage DA loading (offset:size:addr format)') parser.add_argument('-s2','--stage-2', default='0x718:0x1e5c8:0x10020000', help='Data for second stage DA loading (offset:size:addr format)')
parser.add_argument('-fio','--flash-info-offset', default='0x1ece0', help='Flash info offset in the DA file (hex)')
parser.add_argument('-bs','--block-size', type=int, default=1024, help='Readback block size (in bytes), defaults to 1024') parser.add_argument('-bs','--block-size', type=int, default=1024, help='Readback block size (in bytes), defaults to 1024')
args = parser.parse_args() args = parser.parse_args()
if(args.length < 1): if(args.length < 1):
print('Zero length of data, exiting') print('Zero length of data, exiting')
exit(1) exit(1)
print("Turn the phone off, hold the boot key and connect the cable") print("Turn the phone off, hold the boot key and connect the cable")
m = MTreader(args.port, args.agent, args.stage_1, args.stage_2) m = MTreader(args.port, args.agent, args.stage_1, args.stage_2, args.flash_info_offset)
m.connect() m.connect()
if m.chip != 0x6261: if m.chip != 0x6261:
print("Warning: chip ID is detected as %04x instead of 6261, readback process might fail!" % m.chip) print("Warning: chip ID is detected as %04x instead of 6261, readback process might fail!" % m.chip)