3

I have a "MiracleBox" software for GSM repairing and and old cell phone (Wiko Lubi 4) with a RD8851CL chip inside.

With this MiracleBox running on Windows I can make a dump of this chip without disassembling the phone, or rewrite the phone password and a lot of more cool things...

I had the idea to do it manually...

I just had to connect the phone to my computer with USB and to put the phone in "Download Mode" (Pressing key 0 for few secs) and then I pressed "Read" in the software. It's really easy to get a bin file with the entire firmware inside.

I decided to open this firmware with a hexadecimal editor then I found the phone's password and I changed it and finally I rewrote the firmware to the phone with MiracleBox software.

Now I'm looking for some help because I want to dump the chip without any MiracleBox and I want to do this with Linux...

I plugged the phone (download mode) to my laptop running debian, then I did "dmesg" command in terminal. This is the output of the command.

[110290.523173] usb 3-2: new full-speed USB device number 9 using ohci-pci
[110290.720228] usb 3-2: New USB device found, idVendor=1e04, idProduct=0904, bcdDevice=34.10
[110290.720239] usb 3-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[110290.720244] usb 3-2: Product: WIKO
[110290.720250] usb 3-2: Manufacturer: Removable disk
[110290.720255] usb 3-2: SerialNumber: USB Controller 1.0

Can somebody give me some explanations in way to dump the chip with linux command lines? It's the first time that I try to reverse a firmware etc and I'm not a professional.... I just want to learn and progress. If it's necessary, I have the full datasheet of RDA8851CL chip (It's too hard to understand for me to be honest)

Thank you so much.

1
  • Thank you very much for these precious answers, I really apreciated them. This Wiko is not Android based phone (I would have preferred because I know what we can do with ADB) - so it's not so easy to communicate between computer and this phone... I'll try to sniff USB communication and discover, I never did that before so It's a new adventure for me! Благодарю вас again (; Commented Sep 2, 2018 at 16:13

2 Answers 2

0

MiracleBox is likely using some phone specific protocol to read and write flash. Such protocols are rarely documented so probably the only way to figure it out would be to sniff the communication between it and the phone and try to duplicate it in your own program.

3

Looks like Wiko use Android as OS [based on http://www.wikogeek.com/], so Android tricks should work here as well.

If you need access to SoC on RDA8851CL in more "user-friendly" way, try to connect to it with adb:

For Windows: http://kernel.wikomobile.com/WIKO_Android_USB_Driver.zip

For Linux: Follow the following manual from XDA: https://forum.xda-developers.com/android/software/guide-installing-adb-fastboot-linux-adb-t3478678

Note: Wiko generally work with MTK drivers, in case links i gave here are not work.

After you install the software and drivers successfully, connect adb like this:

adb shell

This should open you the command line to your mobile device internal SoC

Command you are looking for to dump the content is:

mkdir dump/
cd dump/
adb pull /path/

When done, content of folder on your device will be dumped to new dump/ folder.

Note: refrain to perform "adb pull /" - since in Linux "everything is a file", you will end up with multiple errors trying to pull /dev and /proc

Good luck,

D.L.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.