radio chip in AT2 - Motorola Atrix 2

radio chip in AT2 - Motorola Atrix 2

very interesting that our ATRIX 2 OMAP4430 has a stericsson THOR M5730 radio chip !
http://www.stericsson.com/products/m5730-thor.jsp
i saw DB5700 signatures in the radio images from MEARET/SEARET/AT&T/HKTWN FXZ'S

Related

[JTAG] T-Mobile G1 w/ EBI1 radio (Trip to Rogers rom 1.89.631.1 and back to CM)

NOTE: full jtag instructions to unbrick or root devices can be found on the cyanogen mod wiki:
http://wiki.cyanogenmod.com/index.php/JTAG_DREAM_AND_MAGIC
----
Any G1 user disappointing believing they are unable to use the latest buggy 1.5 cupcake android release from rogers.. look no further.
With a 2005 series SPL all you need to do to successfully use this spectacular firmware on your phone is:
1) extract the rom.nbh form the windows installer;
2) enter fastboot mode on your phone and run "fastboot flash nbh rom.nbh"
This flashes the Official Rogers firmware on your phone in all its glory; including:
1) bad battery life
2) internet that drops periodically even in strong signal.
3) old version of android (1.5)
4) no apps2sd
http://twitpic.com/19p2wm - Home Screen
http://twitpic.com/19p355 - Rogers boot logo
http://twitpic.com/19p397 - About Screen
http://twitpic.com/19p3bm - SPL (close)
http://twitpic.com/19p3gk - SPL (again)
-----
So now you are asking ... why did I do this.. mostly because (as the wires show) The phone is already jtaged And I intend to use it to show how to remove the firmware via jtag. (hopefully tomorrows posting)
However its interesting to note the T-Moblie G1 *CAN* run the EBI1 radio 3.22.26.17 with related EBI1 port and SPL. (I do recommend that if you care to test EBI1 ports on a G1 ... make it a rooted rom not the rogers one)
----
Edit: Brick->Alive .. Rogers->custom a A phone's journey is posted..
While many technical details are provided this is *not* intended as a solution for all. as it requires some skill and equipment to utilize jtag. openocd is used for its relative cheapness and open source nature. Other products will likely work just as well but may need some minor process changes.

How to remove the post 911 firmware via jtag right?
(ROM version 1.89.631.1 Rogers)
Newbies please do not threadcrap this asking for unbrick for your G1 yet. As of right now this method is still not just for everyone.
Original JTAG thread for more info: http://forum.xda-developers.com/showthread.php?t=591048

xaueious said:
(ROM version 1.89.631.1 Rogers)
Click to expand...
Click to collapse
That is what the phone says it is on the about screen (not surprised I did flash the full nbh)

I was asking because you didn't mention which one you were talking about. There was also that old pre 911 nbh, ROM version 1.85.631.5 for Rogers. This rom worked with flashrec (one-click root).
I still know very little about JTAG but I thought I might as well post some of the SPL/radio combinations here with some links.
A link to the old Rogers ROM is here for future reference for any Rogers Dream users to return to a rootable stock image for some reason: http://forum.xda-developers.com/showthread.php?t=625073
Contains stock pre-911 update Rogers ROM with
HBOOT Version 1.33.0009
Radio Version 3.22.20.17
* * * Reference Recommended SPL + Radio Combinations * * *
Anyhow if everything works... Useful links for SPL, radio and recovery flashing:
Rogers Dream Info for Reference, no Rogers Waiver Signed
Upgrade to 3.22.26.17 if you haven't signed the waiver or don't want to. This makes your phone incompatible to most ROMs in this thread until you flash a 'kernel port' update file.
Needs Amon_RA G1/Dream recovery version R
So target would be:
HBOOT VERSION: 1.33.2005
RADIO VERSION: 3.22.26.17
Rogers Dream Info for Reference, Rogers Waiver Signed OR T-Mobile G1
This radio makes the phone work with most G1 ROMs you can find on these forums.
Needs Amon_RA non-R G1/Dream recovery or Cyanogen's G1/Dream recovery
HBOOT VERSION: 1.33.2005
RADIO VERSION: 2.22.23.02
* * * Download Links for Relevant Files * * *
Amon_RA Recovery for G1/Dream
http://forum.xda-developers.com/showthread.php?t=566669
Radio 2.22.23.02
T-Mobile G1 radio. EBI0 kernel. Makes the G1/Dream compatible with most ROMs posted in this forum.
http://forum.xda-developers.com/showpost.php?p=5763943&postcount=1
Radio 3.22.26.17
T-Mobile G1 radio. EBI1 kernel (aka Magic 32A old radio kernel). Makes the G1/Dream incompatible with most ROMs posted in this forum until you flash an additional kernel (kernel port). Allows for flashing of Magic old radio ROMs if ROM is not too large for the G1/Dream's internal flash memory.
http://wiki.cyanogenmod.com/index.php/Upgrade_Rogers_Dream_Radio#Preparations
SPL/HBOOT 1.33.2005
Also Danger/Death SPL. Originally for Sapphire/Magic but has support for Dream to increase size of /system partition. Prerequisite for some ROMs.
http://sapphire-port-dream.googlecode.com/files/spl-signed.zip
Or here:
http://wiki.cyanogenmod.com/index.php/Upgrade_Rogers_Dream_Radio#Preparations

xaueious said:
I was asking because you didn't mentioned which one you were talking about. There's also that old pre 911 nbh aka ROM 1.85.631.5 Rogers.
Now this ROM might be good for your procedure for Rogers Dream users. It's here by the way in case you didn't have a link: http://forum.xda-developers.com/showthread.php?t=625073
Click to expand...
Click to collapse
Yes, that should be just as good (and you will have a way to root without jtag just in case ). I believe that it is the exact same SPL and slightly different radio (might matter for jtag though). The only reason we were able to root this rom was because of the kernel exploit.

A phones Journey
So a short recap for those not following along in the various threads.
The T-Mobile Phone in question
I've recently (off ebay) got a bricked HTC T-Mobile G1. (failed attempt to install the 2005 SPL.. (**sidenote)
Given it was a cheap phone it was a good candidate for jtag testing; after shorting something out on previous jtag work on my rogers dream. (the jtag port is the same on both phones.. and it did work on the dream for a bunch of tests before the incident)
Details of the de-brick are on this threadRogers Rom
Given the phone already has jtag attached (a little bit of a painful process) I decided to try unrooting a rogers rom on it before going to any other phone. So I took the nbh from the rogers installer (I still have the original 1.89.631.1 rom.nbh from when I created the hacked version which skipped the spl/splash1 portions of the flash.)
This flashed from the 2005 SPL without incident making the T-Mobile phone running a full rogers stack (splash image included) see op post for images of the phone/rom in this mode.Unroot (I know this is what you are here for)
(Note an updated version of this process now exists on a wiki: http://wiki.cyanogenmod.com/index.php/JTAG_DREAM_AND_MAGIC )
So now with a fully locked SPL in place and jtag already set up time to hack out of the rogers rom to an EBI1 port!!
Prerequisites:
A) phone running locked roger rom 1.89.631.1 (actually as listed it will work for any rom on radio 3.22.26.17 and with offsets in my de-brick post other radios.
B) Jtag adapter.. I'm using OLIMEX ARM-USB-OCD.. however others will work as well.. my steps assume the openocd program on your computer which supports many USB/ParPort adapters. (my current cfg hopefully will improve but works for this hack.. note its for version "Open On-Chip Debugger 0.4.0" not the old cvs/svn version that is on the CD with the hardware)
C) outfit phone with jtag adapter.. this i will leave to another topic.. see the Jtag thread for the test points.
D) A HTC Serial wire.. I recommend without the +5 power line since blue light mode is sometimes hard to enter while the device is charging.. (information on my wire with links to parts. If you wish you can also attatch a USB wire to the USB leads which allows you to see serial output while flashing.. but ensure you can have the USB unplugged while the oemspl serial is in use.
E) 2005 SPL *.img file extract it from the zip file: http://sapphire-port-dream.googlecode.com/files/spl-signed.zip
MD5 (hboot.img) = cdf75d34e24937da1a8a84bcd72496c3
F) Recovery *.img .. your favorite flavor of '-R' version from this thread: http://forum.xda-developers.com/showthread.php?t=566669
G) a sense of adventure
Procedure:
1) Ensure the jtag adapter is hooked up to the phone
2) power on phone into blue light mode
3) attach serial wire
4) connect to serial console (mtty in windows, "screen /dev/<serial device> 115200" in osx/linux)
5) start openocd or other jtag application (openocd -f dream.cfg)
6) start telnet to the ocd: "telnet localhost 4444"
7) run the following:
Code:
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Open On-Chip Debugger
> [color=blue]halt[/color]
target state: halted
target halted in ARM state due to debug-request, current mode: Supervisor
cpsr: 0x200000d3 pc: 0x0090861c
MMU: disabled, D-Cache: disabled, I-Cache: disabled
> [color=blue]mww 0x0090379C 0xea000013[/color]
> [color=blue]mww 0x9029d8 0x0[/color]
> [color=blue]load_image [b]<pathto>[/b]/hboot.img 0x0[/color]
No working memory available. Specify -work-area-phys to target.
no working area available, falling back to memory writes
524288 bytes written at address 0x00000000
downloaded 524288 bytes in 11.635834s (44.002 kb/s)
> [color=blue]mww 0x00000c0c 0x98000C4C[/color]
> [color=blue]mww 0x00000c08 0x98000C4C[/color]
> [color=blue]mww 0x00000c04 0x98000C4C[/color]
> [color=blue]mww 0x00000c00 0x98000C4C[/color]
> [color=blue]resume[/color]
The offsets are based off my de-brick post
* 0x0090379C is the CID bypass point for 3.22.26.17
* 0x009029d8 is 4 less than the previously defined breakpoint for 3.22.26.17 SPL modification (for other radios subtract 4 from my breakpoint location);
This is the location of a subroutine call to load the SPL.. since we are going to load it our self we want to nop the instruction.. no 0x0 is not the nop instruction.. but it will achieve the same results (and lack their of).
* load_image will load a file into the phones ram; point this at the hboot.img you downloaded as that is what we want to run
* 0x00000c00 to 0x00000c0c is the switch jump table in the 2005 hboot image once loaded for the boot mode.. we are forcing modes 0-3 to ruu/fastboot mode.
* then we can resume the CPU and optionally kill openocd.
8) into the serial termal run command "?" this ought to now output help on many commands (before it would only say invalid command)
9) run command "cego"
<phone will now boot into the ram image of 2005 SPL; display splash image (if screen is connected) and enter fastboot mode>
10) remove serial wire and attach USB wire.. or plug in usb part of USB/serial hybrid wire.
12) "fastboot flash hboot hboot.img"
13) "fastboot flash recovery recovery.img" (the ebi1 RA recovery)
14) "fastboot oem powerdown"
Now you can boot into recovery and flash your favorite EBI1 rom.. or if you don't like EBI1.. follow the EBI0 installation instructions
** sidenote: To packagers and those making processes.. Given all I have seen to date.. whenever possible flash radios and SPLs via fastboot not recovory zip files..
If you are stuck on a splash screen on boot.. both the SPL and radio are working.. they are just usually stuck in an invalid mode.. which is less likely to happen if flashed by fastboot.. this particularly applies where the 2005 SPL is involved.
Hacking can be fun.. but this hacking is not cheap
If interested donations are accepted

I wonder why no one's responding to this thread. This is great news!

I agree that this is good news. Just bought a slightly used Dream and it was. Just my luck that the previous owner ran the mandatory update shortly before selling it.
I am a little unsure about the process though. Does the jtag involve physically modifying the phone? If so, is there any chance that this method will lead to a non-jtag way of getting around the perfect SPL?

SilentTweak said:
I wonder why no one's responding to this thread.
Click to expand...
Click to collapse
Because most of newbies here doesn't have idea about what is talking ezterry with his method

I might be motivated to try this if I actually had a brick. If I buy a Dream I might look into this.
For now I am not motivated to get my own jtag working. ezterry and other fellow xdaers on the other thread seem to be trying to find a method that doesn't require soldering.

Dreaming
I would be willing to try this on the $100 Dream i picked up, but the only thing is spending another $50-$100 on JTAG and serial cable equipment. which i might F#@CK the phone LOL
PS is it possible to use a cheap parallel port jtag to do this?, i think diffrent software would be required for the process though....any suggestions?
Thanks
Raymar23

raymar23 said:
I would be willing to try this on the $100 Dream i picked up, but the only thing is spending another $50-$100 on JTAG and serial cable equipment. which i might F#@CK the phone LOL
PS is it possible to use a cheap parallel port jtag to do this?, i think diffrent software would be required for the process though....any suggestions?
Thanks
Raymar23
Click to expand...
Click to collapse
No reason a parport adapter won't work, and openocd supports many part port adapters.
Also if you are more comfortable with other arm compatable software it ought to be easy to port the steps.. its just ram writes.
I just don't own any computers I can plug in Part port devices anymore.
scholbert from the other jtag thread may be able to give more info.

http://www.diygadget.com/universal-jtag-adapter-for-routers-modem-fta-and-more.html
Could I use this JTAG adapter? Or is there another adapter on this site I can purchase to do this process? I'm thinking of buying a couple bricked phones and trying this out lol

SilentTweak said:
http://www.diygadget.com/universal-jtag-adapter-for-routers-modem-fta-and-more.html
Could I use this JTAG adapter? Or is there another adapter on this site I can purchase to do this process? I'm thinking of buying a couple bricked phones and trying this out lol
Click to expand...
Click to collapse
Looks like a 74HCT244....
I posted a link to a schematic for what is really the exact same thing -- should be in the other thread. It takes about 10 minutes to solder one of those up and you can make it for $2 in locally acquired parts.

Hey,
ezterry opened up another hacker thread...
Nice work mate
Anyway here's a schematic and some comments i once posted at the original JTAG on Dream thread.
http://forum.xda-developers.com/showpost.php?p=5110255&postcount=37
It's low cost LPT-adaptor and works very well with the MSM IO voltage of 2.6V.
Feel free to re-distribute
Maybe some soft tweaks are needed to integrate in openocd.
Once made a patch... but it's lost somewhere.
Cheers,
scholbert

Thanks
ezterry said:
No reason a parport adapter won't work, and openocd supports many part port adapters.
Also if you are more comfortable with other arm compatable software it ought to be easy to port the steps.. its just ram writes.
I just don't own any computers I can plug in Part port devices anymore.
scholbert from the other jtag thread may be able to give more info.
Click to expand...
Click to collapse
Thank you very much for the insights and also for all your work and knowledge that has been shared with the community.
BTW. Anyone know where to buy a parallel port JTAG in Canada (i hate customs) lol
Thanks again to everyone who posts in these forums

lbcoder said:
Looks like a 74HCT244....
I posted a link to a schematic for what is really the exact same thing -- should be in the other thread. It takes about 10 minutes to solder one of those up and you can make it for $2 in locally acquired parts.
Click to expand...
Click to collapse
I was searching that schematic without luck, can you please post the link here?
thanks!

kR105! said:
I was searching that schematic without luck, can you please post the link here?
Click to expand...
Click to collapse
Anyway here's a schematic and some comments i once posted at the original JTAG on Dream thread.
http://forum.xda-developers.com/show...5&postcount=37
Click to expand...
Click to collapse
If you want a true wiggler clone, this isn't...
I'll prepare another schematic...
Regards,
scholbert

ezterry said:
So a short recap for those not following along in the various threads.
The T-Mobile Phone in question
I've recently (off ebay) got a bricked HTC T-Mobile G1. (failed attempt to install the 2005 SPL.. (**sidenote)
Given it was a cheap phone it was a good candidate for jtag testing; after shorting something out on previous jtag work on my rogers dream. (the jtag port is the same on both phones.. and it did work on the dream for a bunch of tests before the incident)
Details of the de-brick are on this threadRogers Rom
Given the phone already has jtag attached (a little bit of a painful process) I decided to try unrooting a rogers rom on it before going to any other phone. So I took the nbh from the rogers installer (I still have the original 1.89.631.1 rom.nbh from when I created the hacked version which skipped the spl/splash1 portions of the flash.)
This flashed from the 2005 SPL without incident making the T-Mobile phone running a full rogers stack (splash image included) see op post for images of the phone/rom in this mode.Unroot (I know this is what you are here for)
So now with a fully locked SPL in place and jtag already set up time to hack out of the rogers rom to an EBI1 port!!
Prerequisites:
A) phone running locked roger rom 1.89.631.1 (actually as listed it will work for any rom on radio 3.22.26.17 and with offsets in my de-brick post other radios.
B) Jtag adapter.. I'm using OLIMEX ARM-USB-OCD.. however others will work as well.. my steps assume the openocd program on your computer which supports many USB/ParPort adapters. (my current cfg hopefully will improve but works for this hack.. note its for version "Open On-Chip Debugger 0.4.0" not the old cvs/svn version that is on the CD with the hardware)
C) outfit phone with jtag adapter.. this i will leave to another topic.. see the Jtag thread for the test points.
D) A HTC Serial wire.. I recommend without the +5 power line since blue light mode is sometimes hard to enter while the device is charging.. (information on my wire with links to parts. If you wish you can also attatch a USB wire to the USB leads which allows you to see serial output while flashing.. but ensure you can have the USB unplugged while the oemspl serial is in use.
E) 2005 SPL *.img file extract it from the zip file: http://sapphire-port-dream.googlecode.com/files/spl-signed.zip
MD5 (hboot.img) = cdf75d34e24937da1a8a84bcd72496c3
F) Recovery *.img .. your favorite flavor of '-R' version from this thread: http://forum.xda-developers.com/showthread.php?t=566669
G) a sense of adventure
Procedure:
1) Ensure the jtag adapter is hooked up to the phone
2) power on phone into blue light mode
3) attach serial wire
4) connect to serial console (mtty in windows, "screen /dev/<serial device> 115200" in osx/linux)
5) start openocd or other jtag application (openocd -f dream.cfg)
6) start telnet to the ocd: "telnet localhost 4444"
7) run the following:
Code:
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Open On-Chip Debugger
> [color=blue]halt[/color]
target state: halted
target halted in ARM state due to debug-request, current mode: Supervisor
cpsr: 0x200000d3 pc: 0x0090861c
MMU: disabled, D-Cache: disabled, I-Cache: disabled
> [color=blue]mww 0x0090379C 0xea000013[/color]
> [color=blue]mww 0x9029d8 0x0[/color]
> [color=blue]load_image [b]<pathto>[/b]/hboot.img 0x0[/color]
No working memory available. Specify -work-area-phys to target.
no working area available, falling back to memory writes
524288 bytes written at address 0x00000000
downloaded 524288 bytes in 11.635834s (44.002 kb/s)
> [color=blue]mww 0x00000c0c 0x98000C4C[/color]
> [color=blue]mww 0x00000c08 0x98000C4C[/color]
> [color=blue]mww 0x00000c04 0x98000C4C[/color]
> [color=blue]mww 0x00000c00 0x98000C4C[/color]
> [color=blue]resume[/color]
The offsets are based off my de-brick post
* 0x0090379C is the CID bypass point for 3.22.26.17
* 0x009029d8 is 4 less than the previously defined breakpoint for 3.22.26.17 SPL modification (for other radios subtract 4 from my breakpoint location);
This is the location of a subroutine call to load the SPL.. since we are going to load it our self we want to nop the instruction.. no 0x0 is not the nop instruction.. but it will achieve the same results (and lack their of).
* load_image will load a file into the phones ram; point this at the hboot.img you downloaded as that is what we want to run
* 0x00000c00 to 0x00000c0c is the switch jump table in the 2005 hboot image once loaded for the boot mode.. we are forcing modes 0-3 to ruu/fastboot mode.
* then we can resume the CPU and optionally kill openocd.
8) into the serial termal run command "?" this ought to now output help on many commands (before it would only say invalid command)
9) run command "cego"
<phone will now boot into the ram image of 2005 SPL; display splash image (if screen is connected) and enter fastboot mode>
10) remove serial wire and attach USB wire.. or plug in usb part of USB/serial hybrid wire.
12) "fastboot flash hboot hboot.img"
13) "fastboot flash recovery recovery.img" (the ebi1 RA recovery)
14) "fastboot oem powerdown"
Now you can boot into recovery and flash your favorite EBI1 rom.. or if you don't like EBI1.. follow the EBI0 installation instructions
** sidenote: To packagers and those making processes.. Given all I have seen to date.. whenever possible flash radios and SPLs via fastboot not recovory zip files..
If you are stuck on a splash screen on boot.. both the SPL and radio are working.. they are just usually stuck in an invalid mode.. which is less likely to happen if flashed by fastboot.. this particularly applies where the 2005 SPL is involved.
Hacking can be fun.. but this hacking is not cheap
If interested in giving a donation feel free to contact me
Click to expand...
Click to collapse
how build device to reflash dead G1 ? electro scheme?

some buy exterry the solderless jtag adapter
mentioned in the other post
or he will end up with a huge collection of phones
I'll even chip in
my dream is fine and rooted but my magic was shipped the rogers ways
so I am waiting with great hopes for the jtagless option
and more than willing to help where I can

RoadRision 2Din Android 8.0 Octa core Car DVD player

Hi everyone.
I bought this receiver last month and I have a problem with external modem – unit descriptions below:
Brand Name: ROADRISION
Display Size: 7"
TF/Micro SD Slot: 2
ROM: 32G
Model Name: RRA7844A
RAM: 4G
Operating System: Android 8.0
Screen: 1024*600 Capacitive touch screen
CPU: Coretex A53 Octa core px5
I can't connect any modem. I don't want use connection thru WI-FI from my phone - if radio have wi-fi cable to connect modem I want to use it.
Does anyone have this receiver and maybe knows how to connect modem?
Maybe someone can help me to root this radio or can tell me did I can downgrade to android 6.0.1 - but I can't find ROM for this model.
maybe anyone knows how to get into recovery mode?
I took some Pictures of radio and system info:
https : //pl. pinterest. com / bik0408 / roadrision /
For any feedback. THX

Teclast M30 Tablet General Thread

Post here about this new (aug 2019) tablet....
I was finally able to get android 10 PHH installed on this tablet (model M4P7)..version 221
had to go through alot of crap to get it done...but finally works (and works good...so far)
if anyone wants a guide let me know and I will post the instructions
You can get this tablet for 145$ on aliexpress for the 4gb ram and 128gb internal storage version
Teclast M30 Tablet Full Specification
Processor (Clock): 2x 2.6 GHz ARM Cortex-A72 4x 2.0 GHz ARM Cortex-A53 4x 1.6 GHz ARM Cortex-A53
Memory (RAM): 4GB LPDDR3, 800 MHz
Internal Storage: 128GB, eMMC
Screen (Size & Type): 10.1 Inches
Camera Overview: 5 Megapixels / 2 Megapixels
OS Version: Android 8.0 Oreo OS
Key Features
Brand – Teclast
Model – M30
Device Type – Android Tablet PC
CPU – Deca-Core 2x 2.6 GHz ARM Cortex-A72 4x 2.0 GHz ARM Cortex-A53 4x 1.6 GHz ARM Cortex-A53 CPU Clock
Chipset – MediaTek Helio X27 (MT6797X), 64-bit Processor
GPU – ARM Mali-T880 MP4, 4 Cores, 875 MHz
Camera – 5 Megapixel Rear Camera | 2 Megapixel Front camera
Memory – RAM- 4GB LPDDR3 | ROM- 128GB with TF card slot up to 128GB
Display – Screen size 10.1 inches IPS Screen (2560 x 1600), 10-Point Touch Screen
Battery – Non-Removable 7500mAh Lithium-Polymer with 100-240V 5V 2.5A AC Adapter
SIM Card – Dual Hybrid Nano SIM
Sensors – Light, Accelerometer, Fingerprint
Color – Silver
Operating System – Android 8.0 Oreo OS
Dimensions – 240 mm x 170 mm x 10 mm
Weight – Grams (With Battery)
Port – 1 x Type Cv2.0 USB Port, 3.5 mm headphone jack, SD (TF) card expansion, Power Off/On, Speaker
More Features – Plastic and Aluminium Alloy Body, Dual Speakers, Bluetooth, LTE Cat 6, HSPA+, EV-DO Rev.A, Dual GPS, Wi-Fi, Capacitive IPS Display, Dual Camera, TF Slot, Quick Charging, Sweet Sound Dual Bottom Speaker, MIC, Type-C USB, Earphone Jack, Eye Care Mode, Reading Mode.
heres the firmware for the teclast tablets
https://docs.google.com/spreadsheet...ciediKQ3-_NW6zAda9xTNdbyqE/edit#gid=794945847
heres the option for installing android 9 or 10 on the m30...however I'm told it ONLY works on the M4P7 model
https://github.com/phhusson/treble_experimentations/wiki/Teclast-M30
heres a post about MTK chipset devices and a program to read information from them
https://4pda.ru/forum/index.php?showtopic=813767&st=0#Spoil-60035994-23
heres a video on how to use it
https://www.youtube.com/watch?v=pj4iFakq33M
if anyone needs SP FLASH TOOLS
https://spflashtools.com/windows/sp-flash-tool-v5-2020

Well, glad to see that this brand isn't dead.

Would you please " EXTRACT THE FIRMWARE ON THE M30". Thanks

KimLe: could you link a howto that describes the firmware extraction process under Linux? Of course I googled for it but I can't find straightforward information on this.

Is there twrp for this device
([emoji3590]09-09-18[emoji3590])

PoochyX said:
Is there twrp for this device
([emoji3590]09-09-18[emoji3590])
Click to expand...
Click to collapse
Not yet.

XX7u said:
KimLe: could you link a howto that describes the firmware extraction process under Linux? Of course I googled for it but I can't find straightforward information on this.
Click to expand...
Click to collapse
You should ask TechGuru123.

https://pan.baidu.com/s/1UPd0JVu1HRKnvQccWpbREw
heres the current firmware
if you want to get firmwares in the future
go here
http://www.teclast.com/tools/pad/pad.php?t=p and enter M4P7 for the device ID
password for baidu as of the time of this post is "jotg"

This Baidu link is dead.
Who's got a working download link for this Teclast M30 stock firmware.
:good:

I managed to get the firmware/rar package from BAIDU if anyone wants it
https://gofile.io/?c=yZyPnD

anyone working on this?

I manage to root it by extract Boot.img , use MaGisk manager to create Magisk_patched.img and flash it with SP-Flash-tools.

m30
KimLe said:
I manage to root it by extract Boot.img , use MaGisk manager to create Magisk_patched.img and flash it with SP-Flash-tools.
Click to expand...
Click to collapse
post it up for people:highfive:

TechGuru123 said:
post it up for people:highfive:
Click to expand...
Click to collapse
I sold my tablet so I can't take any picture.
But you can follow the instructions here.
https://community.umidigi.com/forum.php?mod=viewthread&tid=17376

The firmware version from Baidu is 1.02, but the tablet has 1.03. Is it safe to flash Magisk_patched.img from 1.02 firmware to the 1.03 tablet?

gray1919 said:
The firmware version from Baidu is 1.02, but the tablet has 1.03. Is it safe to flash Magisk_patched.img from 1.02 firmware to the 1.03 tablet?
Click to expand...
Click to collapse
Yeah you should be alright.... I patched Kernals from one baseband to another baseband
([emoji3590]09-09-18[emoji3590])

zappa55 has made a rooted boot.img for anyone who wants it
https://gofile.io/?c=ggUvb1

TechGuru123 said:
zappa55 has made a rooted boot.img for anyone who wants it
https://gofile.io/?c=ggUvb1
Click to expand...
Click to collapse
So, I can flash this directly with SPFlash tool right or any other way? Have u tried?
But, how can I get a scatter file for SPFlash tool?

Reykawick said:
But, how can I get a scatter file for SPFlash tool?
Click to expand...
Click to collapse
Scatter file you can get in the firmware from the first page. But I'm not sure enough if it can be used in case the firmware versions are different.

gray1919 said:
Scatter file you can get in the firmware from the first page. But I'm not sure enough if it can be used in case the firmware versions are different.
Click to expand...
Click to collapse
It's OK to use the scatter file from firmware v1.02.
Works perfectly. After you have installed the new, patched boot.img - just restart the tablet and then install Magisk Manager apk.
Your device is now rooted

Download acer liquid z205p official firmware flash file

DOWNLOAD ACER LIQUID Z205P OFFICIAL FIRMWARE FLASH FILE
SPECIFICATION
NETWORK Technology
GSM / HSPA
LAUNCH
Announced February, 2015
Released March, 2015
BODY SIZE
Dimensions 126.5 x 65 x 10.3
Weight
130 g
SIM
Single SIM (Mini-SIM) or Dual SIM (Mini-SIM/Micro-SIM, dual stand-by)
DISPLAY Type
TFT capacitive touchscreen, Color Display
Size
4.0 inches, 45.5 cm2 (~55.6% screen-to-body ratio)
Resolution
480 x 800 pixels, 5:3 ratio (~233 ppi density)
Protection
Unspecified
PLATFORM OS
Android 4.4.2(KitKat)
Chipset
MediaTek MT6572M
CPU
Dual Core, 1.0GHz, ARM Cortex A7
GPU
ARM Mali-400 MP
MEMORY
Card slot microSD, up to 32GB (dedicated slot)
Internal 4GB 512MB RAM
MAIN CAMERA
Single 2 MP
Features
flash, panorama
Video
Yes
SELFIE CAMERA
No
Features
No
SOUND
Loudspeaker Yes
3.5mm jack Yes
DTS sound
Connectivity
WLAN Wi-Fi 802.11 b/g/n, hotspot
Bluetooth 4.0, A2DP
GPS Yes, with A-GPS
Radio FM radio
USB microUSB 2.0
GPS
Yes, with A-GPS, GLONASS, GALILEO, BDS
NFC
No
Radio
FM radio
USB
2.0, Type-Micro Usb
FEATURES
Accelerometer
BATTERY
Removable Li-Ion 1300 mAh battery
Charging
Fast battery charging
No
Colors
Titanium Black, Essential White, Fragrant Pink, Sky Blue, Sunshine Yellow
Other Models
Liquid Z6 Plus, Acer Liquid Z200, Acer Liquid Z6E, Acer Liquid Z6 Max, Acer Liquid Z2 Dual,
Acer Acer Liquid S1, Acer Liquid S100, Acer Liquid E1 Duo V360, Acer Liquid E Plus
MOD Edit - Removed
How To Flash Acer Liquid Z205 with SP Flash Tool
In this tutorial you will learn how to upgrade or downgrade or reinstall your Firmware on
Acer Liquid Z205 with SP Flash Tool software.
The first thing is that you must download the official firmware file and here you have the instruction
and of course you must download the SP Flash Tool software, MediaTek Driver and here is how to do it.
No1. download Acer Liquid Z205 official firmware, MediaTek Driver and SP Flash Tool,
No2. Extract Sp FlashTool and your acer liquid z205p firmware package to different folder.
No3. Go to SP FlashTool folder and Open SP Flashtool.exe as Administrator.
No4. Click on Scatter-loading, browse and go to the firmware folder,
Then select scatter file from the folder you extracted the downloaded firmware.
(e.g, MT6582_Android_scatter.txt)
No5. Hit download button
No6. Now you can connect your phone power off mode to your computer with a micro USB data cable and wait
No7. until the drivers are installed it now as you can see phone it’s connected
No8. Now The Flashing Process Will Start and and you should wait for a few (5 to 10) minuites.
No9. You See a progress bar will start loading and you should Wait until complete.
No10. A green circle with Ok will popup to indicate the flashing process completion.
No11. Now you can disconnect the device and perform a factory reset before you power on fully.
No.12 Setup your phone and enjoy. All Done

Thread Closed.
Kindly pm with a valid download link to reopen the thread.
Thanks
SacredDeviL666.

Database Info

welcome