search

bkerler / mtkclient

MTK reverse engineering and flash tool
GNU General Public License v3.0
2.71k stars 528 forks source link

Samsung Galaxy A22 5G SM-A226B flashing done but still dead.. #607

Closed Yatorime closed 3 months ago

Yatorime commented 1 year ago

I have Samsung Galaxy A22 5G SM-A226B with mt-6833 Story short. my friend formated emmc Start_addr: 0x1E000000 Format Length: 0x80000

and phone now is dead. My laptop recognize it but restarts to different mode usb com port and Mediatek Vcom modes. SP Flashtool can flash few things but i got error about verfied boot. So i tried mtk client and got this as outout.. tho phone is still dead even its flashed.. I wish i could revive the phone. Symptoms: no screen, no charge, no charging lights, no sound.

1. So mtk payload: Port - Device detected :) Preloader - CPU: MT6833(Dimensity 700 5G k6833) Preloader - HW version: 0x0 Preloader - WDT: 0x10007000 Preloader - Uart: 0x11002000 Preloader - Brom payload addr: 0x100a00 Preloader - DA payload addr: 0x201000 Preloader - CQ_DMA addr: 0x10212000 Preloader - Var1: 0x73 Preloader - Disabling Watchdog... Preloader - HW code: 0x989 Preloader - Target config: 0xe5 Preloader - SBC enabled: True Preloader - SLA enabled: False Preloader - DAA enabled: True Preloader - SWJTAG enabled: True Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False Preloader - Root cert required: False Preloader - Mem read auth: True Preloader - Mem write auth: True Preloader - Cmd 0xC8 blocked: True Preloader - Get Target info Preloader - BROM mode detected. Preloader - HW subcode: 0x8a00 Preloader - HW Ver: 0xca00 Preloader - SW Ver: 0x0 Preloader - ME_ID: 0DB1ED7376D7A835B7424885B41EE406 Preloader - SOC_ID: B61FD551B6995BA0CF52ECEE41233386001795EE50D43049DFBFCF9D3F48EB10 PLTools - Loading payload from mt6833_payload.bin, 0x264 bytes PLTools - Kamakiri / DA Run Kamakiri - Trying kamakiri2.. Kamakiri - Done sending payload... PLTools - Successfully sent payload: C:\mtkclient-main\mtkclient\payloads\mt6833_payload.bin PS C:\mtkclient-main>

  1. Flashing:

.....Port - Device detected :) Preloader - CPU: MT6833(Dimensity 700 5G k6833) Preloader - HW version: 0x0 Preloader - WDT: 0x10007000 Preloader - Uart: 0x11002000 Preloader - Brom payload addr: 0x100a00 Preloader - DA payload addr: 0x201000 Preloader - CQ_DMA addr: 0x10212000 Preloader - Var1: 0x73 Preloader - Disabling Watchdog... Preloader - HW code: 0x989 Preloader - Target config: 0x0 Preloader - SBC enabled: False Preloader - SLA enabled: False Preloader - DAA enabled: False Preloader - SWJTAG enabled: False Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False Preloader - Root cert required: False Preloader - Mem read auth: False Preloader - Mem write auth: False Preloader - Cmd 0xC8 blocked: False Preloader - Get Target info Preloader - BROM mode detected. Preloader - HW subcode: 0x8a00 Preloader - HW Ver: 0xca00 Preloader - SW Ver: 0x0 Preloader - ME_ID: 0DB1ED7376D7A835B7424885B41EE406 Preloader - SOC_ID: B61FD551B6995BA0CF52ECEE41233386001795EE50D43049DFBFCF9D3F48EB10 DA_handler - Device is unprotected. DA_handler - Device is in BROM-Mode. Bypassing security. PLTools - Loading payload from mt6833_payload.bin, 0x264 bytes PLTools - Kamakiri / DA Run Kamakiri - Trying kamakiri2.. Kamakiri - Done sending payload... PLTools - Successfully sent payload: C:\mtkclient-main\mtkclient\payloads\mt6833_payload.bin Port - Device detected :) DA_handler DA_handler - [LIB]: ←[33mDevice is in BROM mode. No preloader given, trying to dump preloader from ram.←[0m DAXFlash - Uploading xflash stage 1 from MTK_AllInOne_DA_5.2136.bin xflashext - Patching da1 ... Mtk - Patched "Patched loader msg" in preloader xflashext xflashext - [LIB]: ←[33mError on patching da1 version check...←[0m Mtk - Patched "Patched loader msg" in preloader Mtk - Patched "get_vfy_policy" in preloader xflashext - Patching da2 ... DAXFlash - Successfully uploaded stage 1, jumping .. Preloader - Jumping to 0x200000 Preloader - Jumping to 0x200000: ok. DAXFlash - Successfully received DA sync DAXFlash - DRAM config needed for : 1501004450364441 DAXFlash - Sending emi data ... DAXFlash - DRAM setup passed. DAXFlash - Sending emi data succeeded. DAXFlash - Uploading stage 2... DAXFlash - Upload data was accepted. Jumping to stage 2... DAXFlash - Successfully uploaded stage 2 DAXFlash - EMMC FWVer: 0x0 DAXFlash - EMMC ID: DP6DAB DAXFlash - EMMC CID: 150100445036444142006e2f6ad5c88d DAXFlash - EMMC Boot1 Size: 0x400000 DAXFlash - EMMC Boot2 Size: 0x400000 DAXFlash - EMMC GP1 Size: 0x0 DAXFlash - EMMC GP2 Size: 0x0 DAXFlash - EMMC GP3 Size: 0x0 DAXFlash - EMMC GP4 Size: 0x0 DAXFlash - EMMC RPMB Size: 0x1000000 DAXFlash - EMMC USER Size: 0xe8f800000 DAXFlash - HW-CODE : 0x989 DAXFlash - HWSUB-CODE : 0x8A00 DAXFlash - HW-VERSION : 0xCA00 DAXFlash - SW-VERSION : 0x0 DAXFlash - CHIP-EVOLUTION : 0x1 DAXFlash - DA-VERSION : 1.0 DAXFlash - Upload data was accepted. Jumping to stage 2... DAXFlash - DA Extensions successfully added Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x10000 of 0x10000, ) 3.91 MB/s3 MB/s Wrote out1\boot.img to sector 1434624 with sector count 65536. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x81 of 0x81, ) 1.81 MB/s Wrote out1\cache.img to sector 8847360 with sector count 409600. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0xD9 of 0xD9, ) 1.80 MB/s Wrote out1\dtbo.img to sector 423936 with sector count 16384. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x2 of 0x2, ) 0.07 MB/s Wrote out1\efuse.img to sector 1582336 with sector count 1024. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x1F7CF of 0x1F7CF, ) 3.69 MB/s13 MB/s Wrote out1\md1img.img to sector 990208 with sector count 409600. DA_handler DA_handler - [LIB]: ←[31mError: Couldn't detect partition: MT6833_EMMC_Android_scatter , skipping←[0m DA_handler DA_handler - [LIB]: ←[31mError: Couldn't detect partition: MT6833_EMMC_PITMAP , skipping←[0m Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x69 of 0x69, ) 1.54 MB/s Wrote out1\omr.img to sector 9256960 with sector count 102400. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0xB31 of 0xB31, ) 3.59 MB/s Wrote out1\optics.img to sector 8798208 with sector count 49152. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0xF1 of 0xF1, ) 2.50 MB/s Wrote out1\param.img to sector 1418240 with sector count 8192. DA_handler DA_handler - [LIB]: ←[31mError: Couldn't detect partition: preloader , skipping←[0m DA_handler DA_handler - [LIB]: ←[31mError: Couldn't detect partition: preloader_s96801aa2 , skipping←[0m Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0xE6999 of 0xE6999, ) 3.92 MB/s66 MB/sMB/s Wrote out1\prism.img to sector 7356416 with sector count 1441792. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x14000 of 0x14000, ) 4.06 MB/s38 MB/s Wrote out1\recovery.img to sector 1500160 with sector count 81920. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x57C000 of 0x57C000, ) 3.50 MB/s71 MB/sMB/s Wrote out1\super.img to sector 1605632 with sector count 5750784. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x12D5 of 0x12D5, ) 3.14 MB/s Wrote out1\tzar.img to sector 374784 with sector count 8192. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x1681 of 0x1681, ) 3.75 MB/s Wrote out1\up_param.img to sector 1426432 with sector count 8192. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x32E55A of 0x32E55A, ) 3.21 MB/s42 MB/sMB/s Wrote out1\userdata.img to sector 9461760 with sector count 112680960. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x10 of 0x10, ) 0.40 MB/s Wrote out1\vbmeta.img to sector 440320 with sector count 128. Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x7 of 0x7, ) 0.22 MB/s Wrote out1\vbmeta_system.img to sector 1582080 with sector count 128. PS C:\mtkclient-main>

And phone is still dead..

github-actions[bot] commented 3 months ago

Stale issue message