Universal ReadBack Extractor for mtk feature watchphones

Search This thread

Golem_

Senior Member
Oct 23, 2015
2,236
826
from what I can see on 4pda, the just use the classic 4 files...
since I made a full 4MB beackup before and after the erase and reflash, I can tell you there was "more stuff" on the ROM.. Including for example, paired devices and so on.
I just wish to know if there is a way to restore also that.. or I will have to write a program.. I just don't want to reinvent the wheel.
I've seen you found a way - great job!
 
Last edited:

sebohi

New member
Jan 16, 2021
2
0
v8 mtk6260ma smart watch i need Turkish rom please?
smart watch info :
Software version=MX6XM-V8-9307HSD-JJT-GL6113-HSJZ-V12.195-20191107
Hardware version=HONGYU60M_BT_11B_HW
 

amir _miraki

Member
Sep 6, 2021
13
0
I need some help with my dz09 Its version is MX6X-COB-DZ09-7789HSD-YDT6153-JZTX-V02.91-20190917 MRE VERSION 3100 when im trying to flash it i plug it into my pc and it says mass storage or COM port i pick COM port then its takes me to a error sayying Not allowed or conflict any ideas im on windows 10 and idk whats wrong with it im useing flashtool and its not working can someone help me please
 

amir _miraki

Member
Sep 6, 2021
13
0
Nevermind again :D
Found another way:
;)
I need some help with my dz09 Its version is MX6X-COB-DZ09-7789HSD-YDT6153-JZTX-V02.91-20190917 MRE VERSION 3100 when im trying to flash it i plug it into my pc and it says mass storage or COM port i pick COM port then its takes me to a error sayying Not allowed or conflict any ideas im on windows 10 and idk whats wrong with it im useing flashtool and its not working can someone help me please
 

amir _miraki

Member
Sep 6, 2021
13
0
v8 mtk6260ma smart watch i need Turkish rom please?
smart watch info :
Software version=MX6XM-V8-9307HSD-JJT-GL6113-HSJZ-V12.195-20191107
Hardware version=HONGYU60M_BT_11B_HW
I need some help with my dz09 Its version is MX6X-COB-DZ09-7789HSD-YDT6153-JZTX-V02.91-20190917 MRE VERSION 3100 when im trying to flash it i plug it into my pc and it says mass storage or COM port i pick COM port then its takes me to a error sayying Not allowed or conflict any ideas im on windows 10 and idk whats wrong with it im useing flashtool and its not working can someone help me please
 

Golem_

Senior Member
Oct 23, 2015
2,236
826
I need some help with my dz09 Its version is MX6X-COB-DZ09-7789HSD-YDT6153-JZTX-V02.91-20190917 MRE VERSION 3100 when im trying to flash it i plug it into my pc and it says mass storage or COM port i pick COM port then its takes me to a error sayying Not allowed or conflict any ideas im on windows 10 and idk whats wrong with it im useing flashtool and its not working can someone help me please
My humble opinion is to not try to replace your firmware - lately firmwares are not matching anymore so most probably you'll end up bricking your watch
 

amir _miraki

Member
Sep 6, 2021
13
0
My humble opinion is to not try to replace your firmware - lately firmwares are not matching anymore so most probably you'll end up bricking your watch
thanks for the advice i think its better off to get a qw09 i heard it comes with android and is 3g sim so i can use it like a android smartphone i might get one of those watches but thanks for the advice man i apercite it
 

puppywang

New member
Nov 24, 2005
2
0
Great job, I can even use this tool to extract some firmware for smart gps locators, but recently I failed to use it to extract some firmware from children smart watch equiped with MT6261M, which only have 3Mbyte flash, this tool said Binary data doesn't match mtk format --------------------------- make sure you have a valid data file! , here is the firmware link.


 

amir _miraki

Member
Sep 6, 2021
13
0
Update Mar-12/2016: as long as on the market appeared a long line of new types of mtk6260 mtk6261 mtk2502C mtk2502A (etc) watches equipped with strange new PCB or flash_ID parameters, the new release <Readback Extractor mtk 2.0> now has the capacity to identify, to read, check, rebuild firmware and collect and insert in the .cfg files the flash_ID's coded inside the ROM dump for almost all types of mtk watchphones or smartwatches based on RTOS Nucleus

NOTE: being tested already for mtk6260 mtk6261 mtk2502C and mtk2502A

In short - if you intend to install in your smartwatch new firmwares, mods etc, before to initiate any flashing with the Flash Tool app (pushing that goddamn < Download > button) think twice, 'bove all better DO a backup for the original firmware, why so? because it's containing all original drivers hence you'll be able to recover 100% your watch in case of bricking.

How to:
First you have need of a full dump of your ROM. Assuming that you already got a Flash Tool 5.15.16 and drivers, and you were at the point of flashing something (already chose the download agent and scatter file)

preparations:
a. Set options/backup and restore on no action
b. load the download agent (you find this file inside the flash tool folder)
c. load a scatter firmware - for initialization flash tool needs a scatter file (.cfg) - for dz09 you get this one - for any other than mtk6260A get here and get a firmware compatible with your PCB
d. in case you have W10 - go to the start menu and click on power and hold down the shift key while clicking on restart. A screen then comes up and you need to choose troubleshooting and then startup options. It will then reboot and give you a menu. press 7 which is ignore signed drivers and then when windows comes up, you will be able to install the drivers.

for instance let's say you have a DZ09 smartwatch:
1 - press < Readback > in upper menu and so < Add > in the middle menu
2 - click twice on the item appears in the main window, set name as ROM_DZ choose in browser the path and save
3 - set as Physical start address 0x00000000 and as Length 0x01000000 or 0x00800000 or 00400000 (try them in this order) then ok
4 - turn off the watch, press < Readback > in the middle menu wait 2 seconds and connect through USB your watch
5 - wait until the upload is complete (big green ring)

Now second stage:
1 - download the app I've built attached here (Readback Extractor mtk) and unzip it
2 - create a folder where you intend to keep in safe the original firmware and name it for instance DZ09-Orig
3 - do a copy of Readback Extractor mtk 2.0.exe and place it inside the DZ09-Orig folder then click twice on it
4 - press <Load Readback file> and browse after the ROM_DZ file created before with the Flash Tool then open
5 - Wait about a minute while the app will check bit by bit the integrity of your file
6 - If everything went ok and your file is healthy then app will show " health 100% " so you can proceed to the next step
7 - Press <Rebuild Firmware> and wait about one minute (it shows a progress counter)
8 - When appears the message " - ALL DONE!!!" close app and go back in the DZ09-Orig folder, now you'll find there a set of new files which are the original firmware kit ready to be flashed back in your phone anytime you want
9 - Enjoy flashing anything you like without any fear that something bad can happen

Some tricks for writing IMEI in your watch NVRAM:
you connect to usb your watch (turned on this time) and set the com port on the watch screen, go in device manager and check the port number your watch is connected, then you open Tera Term hyperterminal (google for this app), connect it as serial com on watch com port and then give the command:
AT + EGMR = 1, 7, " imei number "
if on screen appears OK then ready, you've changed your imei


AFTERWARDS READ ME story - Anywhere you search, there is no one to tell you explicitly how to extract from your mtk smartwatch the firmware kit
All says a halfmouth: Do a full < Readback > in Flash Tool, you'll do it being confident that from now on you say goodbye to any risk because you have A BACKUP hence you start flashing new firmwares. And the Big Brick is coming , you smile and get back to your < Readback > backup discovering that, sadly, you have a binary bulk at first sight good for nothing. It cannot be so useless, isn't it? after all it contains full dump of your ROM! I was in exactly the same situation, so 'cause I didn't find any answer I've started reverse engineering . . . and it worked, first I did it manually for guys being in the same situation, 've noticed that is a common issue so I had to choose how to help, simpler but dangerous (for you) way, to create a tutorial <how to> or the hard way (hard for me), to develop an app which will do all "cooking" automatically and I choose the second because in manually way there is a quite big "chance" to mess up with your primary bootloader which could get to a real tragedy - no modem - brickest brick you saw in your entire life


Readback extractor mtk 2.1 beta
Flash Tool and drivers
hey with a problem with my dz09 i plug it into my pc and the flashtool is open and it shows a menu saying mass storage and other option says COM port so i press COM port and it refuses to allow that feature to work and it wont work unless i choose COM port on the watch what im i suposed to do with this watch
 

madarahal

Member
Jan 31, 2014
8
0
hi oxatools and Golem_
I'm writing to inquiry about same problems with this post-78859934 (readback extractor doesn't accept firmwares smaller than 4MB
my smart watch DZ09 with chip mt6260ma
Would you help me to check it ?
here is my backup file: Google Drive
I would appreciate your help.
 
Last edited:

madarahal

Member
Jan 31, 2014
8
0
Hey Madarahal - checked your backup, it looks like most of it is corrupted, more precisely 60% of it is blank
thanks Golem_ i have found A rom for my DZ09 MT6260MA But i have a problem with inverted Colors for my DZ09 MT6260MA as attached photos i can not find any rom without any problems this rom have less problems i can accept it but i need to change stock watch faces but i can not Change GIF image with a resolution of 240x240 with MTK Resource not work with MT6260MA roms and i try use HEX editor and can not find hex 00 f0 00 0f (240x240 GIF) as this topic and this is my rom please help me this is watch faces i need to change the attached watch faces to any white color background to be inverted to black because The battery drains quickly
 

Attachments

  • 26967976.jpg
    26967976.jpg
    9.7 KB · Views: 7
  • 26967975.jpg
    26967975.jpg
    8.1 KB · Views: 7

Golem_

Senior Member
Oct 23, 2015
2,236
826
you cannot find a marker because the firmware is using archived pictures so that there is no chance to change sometihng. You can find a quite rich collection of firmwares on 4PDA forum - you have to find a rom that is matching your watch
 

57ar7up

New member
Jan 28, 2012
2
0
Russia, Kaluga
singularix.xyz
Sorry, but ReadBack Extractor 2.4 didn't do sh*t to me.
I dumped ROM from my Uwatch U8 clone (MT6260MA), U8_PCB01_gprs_MT6260_S00.U8_JL_MJW_9106TM_WEL_BT_YEL_1213 to flash with FlashTool 5.1420 Azeem.

fw_splitter did his job perfectly
ROM_0 attached
 

Attachments

  • EIDOLON60D_BT2_11B_HW__U8_JL_MJW_9106TM_WEL_BT_YEL_1213__ROM_0.zip
    2.7 MB · Views: 20

Top Liked Posts

  • There are no posts matching your filters.
  • 60
    Update Mar-12/2016: as long as on the market appeared a long line of new types of mtk6260 mtk6261 mtk2502C mtk2502A (etc) watches equipped with strange new PCB or flash_ID parameters, the new release <Readback Extractor mtk 2.0> now has the capacity to identify, to read, check, rebuild firmware and collect and insert in the .cfg files the flash_ID's coded inside the ROM dump for almost all types of mtk watchphones or smartwatches based on RTOS Nucleus

    NOTE: being tested already for mtk6260 mtk6261 mtk2502C and mtk2502A

    In short - if you intend to install in your smartwatch new firmwares, mods etc, before to initiate any flashing with the Flash Tool app (pushing that goddamn < Download > button) think twice, 'bove all better DO a backup for the original firmware, why so? because it's containing all original drivers hence you'll be able to recover 100% your watch in case of bricking.

    How to:
    First you have need of a full dump of your ROM. Assuming that you already got a Flash Tool 5.15.16 and drivers, and you were at the point of flashing something (already chose the download agent and scatter file)

    preparations:
    a. Set options/backup and restore on no action
    b. load the download agent (you find this file inside the flash tool folder)
    c. load a scatter firmware - for initialization flash tool needs a scatter file (.cfg) - for dz09 you get this one - for any other than mtk6260A get here and get a firmware compatible with your PCB
    d. in case you have W10 - go to the start menu and click on power and hold down the shift key while clicking on restart. A screen then comes up and you need to choose troubleshooting and then startup options. It will then reboot and give you a menu. press 7 which is ignore signed drivers and then when windows comes up, you will be able to install the drivers.

    for instance let's say you have a DZ09 smartwatch:
    1 - press < Readback > in upper menu and so < Add > in the middle menu
    2 - click twice on the item appears in the main window, set name as ROM_DZ choose in browser the path and save
    3 - set as Physical start address 0x00000000 and as Length 0x01000000 or 0x00800000 or 00400000 (try them in this order) then ok
    4 - turn off the watch, press < Readback > in the middle menu wait 2 seconds and connect through USB your watch
    5 - wait until the upload is complete (big green ring)

    Now second stage:
    1 - download the app I've built attached here (Readback Extractor mtk) and unzip it
    2 - create a folder where you intend to keep in safe the original firmware and name it for instance DZ09-Orig
    3 - do a copy of Readback Extractor mtk 2.0.exe and place it inside the DZ09-Orig folder then click twice on it
    4 - press <Load Readback file> and browse after the ROM_DZ file created before with the Flash Tool then open
    5 - Wait about a minute while the app will check bit by bit the integrity of your file
    6 - If everything went ok and your file is healthy then app will show " health 100% " so you can proceed to the next step
    7 - Press <Rebuild Firmware> and wait about one minute (it shows a progress counter)
    8 - When appears the message " - ALL DONE!!!" close app and go back in the DZ09-Orig folder, now you'll find there a set of new files which are the original firmware kit ready to be flashed back in your phone anytime you want
    9 - Enjoy flashing anything you like without any fear that something bad can happen

    Some tricks for writing IMEI in your watch NVRAM:
    you connect to usb your watch (turned on this time) and set the com port on the watch screen, go in device manager and check the port number your watch is connected, then you open Tera Term hyperterminal (google for this app), connect it as serial com on watch com port and then give the command:
    AT + EGMR = 1, 7, " imei number "
    if on screen appears OK then ready, you've changed your imei


    AFTERWARDS READ ME story - Anywhere you search, there is no one to tell you explicitly how to extract from your mtk smartwatch the firmware kit
    All says a halfmouth: Do a full < Readback > in Flash Tool, you'll do it being confident that from now on you say goodbye to any risk because you have A BACKUP hence you start flashing new firmwares. And the Big Brick is coming , you smile and get back to your < Readback > backup discovering that, sadly, you have a binary bulk at first sight good for nothing. It cannot be so useless, isn't it? after all it contains full dump of your ROM! I was in exactly the same situation, so 'cause I didn't find any answer I've started reverse engineering . . . and it worked, first I did it manually for guys being in the same situation, 've noticed that is a common issue so I had to choose how to help, simpler but dangerous (for you) way, to create a tutorial <how to> or the hard way (hard for me), to develop an app which will do all "cooking" automatically and I choose the second because in manually way there is a quite big "chance" to mess up with your primary bootloader which could get to a real tragedy - no modem - brickest brick you saw in your entire life


    Readback extractor mtk 2.1 beta
    Flash Tool and drivers
    3
    Hello, I followed the procedure but in my firmware I can not find the ROM file.
    While it is present in the firmware XDA DZ09 ...
    In the reading of the Watch did not appear the ROM file.
    As revenue?
    thank you.

    ---------- Post added at 10:41 AM ---------- Previous post was at 10:07 AM ----------



    For clarity, I redid Read Back and saved the ROM file in the folder of my original firmware.
    I open MTK Res 1.3, I open my ROM file and edit the faces, then save and overwrite the same file ROM.
    I open Flashtool, Scatter / config file, I select the file * .cfg of my original firmware folder (where the ROM file is present).
    Flash clock, okay.
    They turn on the clock, but come out the same faces (do not I see those I changed). :crying:
    Where am I wrong? :confused:

    So you are calling original firmware the firmware from where you get the scatter? No, that is just other firmware you're using in order to initialize the flash tool. As in description, you create a folder (empty one!!!) where you have to save the readback dump. then look UNDER description, there is attached an app, readback extractor, download the app and move it in the same folder with the readback dump, then follow the next steps - in this way will be generated A NEW FIRMWARE - if readback extractor doesn't show at the end of the process that "all done" then stop everything, is something wrong with your readback dump and you have to redo the readback with other parameters - we are calling it the original one because is extracted from your watch! this kit has its own cfg and a rom file (which can have different names - in our case FILE_01_mtk). Do a copy of this folder, go in mtk res choose the rom file (FILE_01_mtk) and modify watchfaces, then go in flash tool, choose the cfg file from the folder copy where you did modification, check in options/backup and restore - preserve backup data and backup-download/format-restore, then press download button (which is flashing) - connect your watch, wait till the flashing is ready
    3
    Are there apps in the works to change watch faces without flashing?

    Unfortunately, yet, there is no way to get in contact with the watch else than through proprietary mediatek drivers so that the only ways to communicate for now are Flash Tool app and bluetooth modem proprietary commands (the most important of them being secret as well)
    To do such a reverse engineering is way way way over my pay grade
    Still I'm working for an app which could replace any media in the watch (backgrounds, icons) but through flashing method of course
    3
    Yes , no problem.
    I took me also great time, i did it with google translate.
    But i will put in google drive.
    And i am also looking for MTK RESOURSE EDITOR.
    I find one but my virus scanner saying that there is a virus on it.
    Here is the rom gv08s full master
    https://drive.google.com/open?id=0B2z3YUYL-iowR3FXVmVPYm9YNWM

    Thanks for the link and here attached you have the MTK RESOURSE EDITOR, no virus version :)
    Unfortunately is pretty poor, It sees just official compressors (jpg, gif . . . this kind of things) but cannot see mtk compressors - I found that lately (few fellows around came with their firmwares) mediatek is trying to eliminate any common formats so I found inside these JUST mtk media format which right now I have it in process of reverse engineering
    3
    Many thanks @Golem_ :)

    I try with Zeblaze Crystal mtk2502A with length of 0x01000000 and it works.

    But when I use the readback extractor mtk 2.0 and load readback file, give me the follow message:

    error_1.jpg


    What am I doing wrong? :confused:

    Regards,
    Jorge

    Yea, lately I didn't do any updates for readback extractor - no worries about, just new different (newcomers) standards my app didn't know about - good you "woke me up" - too busy and forgot about the latest release I was working on, compiled it right now and "voila" - check on the first page the 2.4 release and let me know if it's working for you

    Use your money wisely, DO NOT WASTE IT buying from GEARBEST