• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[SOLVED]Missing Preloader on MTK6762, recognized as "MT6227 Phone"

Search This thread

Qwerty_in_me

Member
Feb 3, 2021
34
6
A long time ago I hard bricked my daily dialer and in a fit of desperation I formated the preloader (silly me, should've looked for a boot-lock bypass instead!) and so, I can't flash anything on my phone anymore as it throws a STATUS_BROM_CMD_FAIL error (using the all in one DA or the one provided by Hovatek yields identical results)

The Vol +/- buttons don't let me flash, removing the battery doesn't help, tespins neither and 'lsusb -v' only recognizes my phone as an MT6227 Phone with a V/PID of 0e8d:003.

here's the output of 'lsusb -v'
Code:
Bus 001 Device 079: ID 0e8d:0003 MediaTek Inc. MT6227 phone
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               1.10
  bDeviceClass            2 Communications
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x0e8d MediaTek Inc.
  idProduct          0x0003 MT6227 phone
  bcdDevice            1.00
  iManufacturer           0
  iProduct                0
  iSerial                 0
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x0043
    bNumInterfaces          2
    bConfigurationValue     1
    iConfiguration          0
    bmAttributes         0x80
      (Bus Powered)
    MaxPower                0mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           1
      bInterfaceClass         2 Communications
      bInterfaceSubClass      2 Abstract (modem)
      bInterfaceProtocol      1 AT-commands (v.25ter)
      iInterface              1 comm_if̦data_if̄Љ召
      CDC Header:
        bcdCDC               1.10
      CDC ACM:
        bmCapabilities       0x0f
          connection notifications
          sends break
          line coding and serial state
          get/set/clear comm features
      CDC Union:
        bMasterInterface        0
        bSlaveInterface         1
      CDC Call Management:
        bmCapabilities       0x03
          call management
          use DataInterface
        bDataInterface          1
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x84  EP 4 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass        10 CDC Data
      bInterfaceSubClass      0
      bInterfaceProtocol      0
      iInterface              2 data_if̄Љ召呪풅ཊꤛ漢䕄礤
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
can't get debug descriptor: Resource temporarily unavailable
Device Status:     0x0000
  (Bus Powered)

I've searched far and wide for documentation on flashing both an MTK6762/5 chip and an MT6227 chip (best I found was a technicall brief).
I tried to get my hands on the DA for the MT6227 but I only ever found ones for a MT626X.

I've tried searching for general flashing tools, found like two and neither work with cdc connections or something.

so my request would be; does anyone of you know of any flash chip documentation repos or guides on low level flashing over a serial usb connection?

I am desperate.
 

Qwerty_in_me

Member
Feb 3, 2021
34
6
I'm not sure what your exact issue is but there was some recent work bypassing SLA/DAA to be able to flash using SP Flash, maybe give this a try

[MOD][DEV] MediaTek / MTK - Auth Bypass (SLA/DAA) - Utility
Been there, done that.
you want to know the funny part? the exploits don't work on mine!
Even though it appears to be a 6765 it's actually a 6762 so it's not really supported.
I can dump the rom just fine, but I can't flash anything.

anyway, thanks for replying!
 

Qwerty_in_me

Member
Feb 3, 2021
34
6
Answering my own thread again.
using MTK Client python script found on github I was able to flash all partitions without fail and only booting as per usual, the script automatically crashes the preloader (if available) to BROM and writes the memory

if there isn't a preloader, it just writes the image.

MTK Client is a God-sent for me and an objective replacement for SP Flash Tool, I can not recomend it enough!
 
  • Like
Reactions: StonedEngineer97

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Answering my own thread again.
    using MTK Client python script found on github I was able to flash all partitions without fail and only booting as per usual, the script automatically crashes the preloader (if available) to BROM and writes the memory

    if there isn't a preloader, it just writes the image.

    MTK Client is a God-sent for me and an objective replacement for SP Flash Tool, I can not recomend it enough!