Figo Ultra M50G Smartphone

2018, Nov 24    

Figo Ultra M50G

Speakout Wireless is offering a price reduction on this cheap smartphone at the present time. I’ve never heard of Figo as a brand before but due to the price I decided to give it a whirl.

The Figo website doesn’t even list this phone on their site, their help centre hasn’t had a post in well over a year now and since emailing their support over 2 weeks ago they haven’t even bothered to respond. I was expecting this type of behaviour due to the low price but this must be stated upfront; don’t expect any support from this company.

The specifications from the Speakout site states the following:

  • Android 6.0 Marshmallow
  • 5.0” IPS Display FWVGA, 854x480
  • 5 MP rear camera / 2 MP selfie camera
  • 1.2GHz Quad Core Processor
  • Dual micro SIM card slots
  • Weight 102g
  • 1GB RAM / 8GB ROM
  • Dimensions 142.5x71.1x9.2mm
  • 3G: 850/1900/2100 MHz

Speakout provides a manual.

The specifications on the actual box states the following:

  • 5.0” Capacitive Touch Screen
  • 2.5D Glass
  • 1.2GHz Quad Core Processor
  • Dual SIM
  • 8GB Internal Memory
  • MicroSD Card Support
  • 5MP rear camaera
  • Android 6.0 Marshmellow

The peelable sticker that is stuck to the screen states the following:

  • 5.0” FWVGA Display
  • 4G HSPA+ 21MBps
  • 5MP + 2MP SELFIE
  • 2.5D Glass
  • 8GB Internal Memory
  • Quad Core MT6580 Processor
  • 2200mAh Battery
  • Android 6.0 Marshmellow
  • Buy with confidence, 1 year warranty and free technical support (yeah right)

You also receive a black plastic phone protector, screen protector, headphones, usb charger, usb a to micro cable and Android manuals.

Let’s get some system info from the device itself.

Access the developer options by navigating to:

Settings -> About Phone -> Build number (keep tapping until it states You are now a developer!)

Enable the following:

OEM unlocking ENABLE

USB debugging ENABLE

Security -> Unknown sources ENABLE

They don’t run their own OTA (Over the Air) update servers. They seem to be run by OTA Update Center. Pretty sketchy in my opinion. Of course, there are no OTA updates for this device. What you have is what you’re stuck with.

The company has also signed the Android OS with test-keys. Sigh.

A fresh install produces the following stats under Settings -> Storage and USB on the device:

  • 4.37GB used of total 8.00GB
  • 3.63GB available
  • 4.37GB system memory
  • 85.61MB apps
  • 24.00KB images
  • 8.00KB videos
  • 40.00KB audio
  • 32.00KB other
  • 2.01MB cached data

The bulk of the apps are of course out of date and once you update those you’ll have even less storage. I’ve installed a couple basic applications I use and I’ll be lucky to have 1GB free. This device sorely needs a minimum of 16GB of storage for a bit of headroom. Using this strictly as a phone and you should be fine.

Rooting

Unlock the bootloader.

adb reboot bootloader
fastboot oem unlock

Dump the boot.img

dump boot.img using smart phone flash tool
install appropriate drivers 
click on readback tab click add button .. double click new entry .. leave ROM_0 as filename
type HEX region EMMC_USER start address 0x1D20000 length 0x1000000
turn off phone completely
click read back button
connect phone via usb to pc
you should get a readback ok 
rename ROM_0 to boot.img

Patch the boot.img for systemless root

download magisk manager
copy boot.img to your android device
run magisk
install -> install -> patch boot image file
you will now have a file in [Internal Storage]/Download/patched_boot.img
test it out first
adb reboot bootloader
fastboot boot patched_boot.img
adb shell
su
if your prompt is # you are rooted
flash working patched_boot.img to device
adb reboot bootloader
fastboot flash boot boot.img

Notes

magisk manager downloads a zip so if you decide to reinstall os you
need to either do the previous steps or install the actual magisk zip via a
custom recovery

note if you're installing from custom recovery
     download magisk zip file
     reboot to recovery and flash flashable zip
     reboot and check if magisk manager is installed and versions match

Dump recovery

you can dump the recovery.img using smart phone flash tool
type HEX region EMMC_USER start address 0x2D20000 length 0x1000000
you can port twrp to this device using this file
fastboot flash recovery recovery.img

You can also dump using Miracle Box v2.58.

Miracle Box provides the very useful partition info for creating a scatter file for flashing purposes.

The raw output is as follows:

Miracle Box v2.58 ReadInfo

CPU: MT6580 SW:0000 Ver: CA00
  Downloading Boot8 ...
  EMMC Size: 0x01D2000000
  Flash Type: EMMC
  INT/EXT RAM  Size: 0x20000/0x40000000
  Reading infr(EMMC)...
  BT_ADDR:XXXXXXXXXXXX
  WIFI MAC:XXXXXXXXXXXX
  IMEI1:XXXXXXXXXXXXXXX
  IMEI2:XXXXXXXXXXXXXXX
  id:FIGO_ULTRA_M50G_V001_20171026
  version:6.0
  model:ULTRA M50G
  brand:ULTRA M50G
  manufacturer:ULTRA
  PROINFO  BaseAddr:0x80000  Size:0x300000
  NVRAM  BaseAddr:0x380000  Size:0x500000
  PROTECT1  BaseAddr:0x880000  Size:0xA00000
  PROTECT2  BaseAddr:0x1280000  Size:0xA00000
  SECCFG  BaseAddr:0x1C80000  Size:0x40000
  LK  BaseAddr:0x1CC0000  Size:0x60000
  BOOT  BaseAddr:0x1D20000  Size:0x1000000
  RECOVERY  BaseAddr:0x2D20000  Size:0x1000000
  PARA  BaseAddr:0x3D20000  Size:0x80000
  LOGO  BaseAddr:0x3DA0000  Size:0x800000
  EXPDB  BaseAddr:0x45A0000  Size:0xA00000
  FRP  BaseAddr:0x4FA0000  Size:0x100000
  NVDATA  BaseAddr:0x50A0000  Size:0x2000000
  METADATA  BaseAddr:0x70A0000  Size:0x2760000
  OEMKEYSTORE  BaseAddr:0x9800000  Size:0x200000
  SECRO  BaseAddr:0x9A00000  Size:0x600000
  KEYSTORE  BaseAddr:0xA000000  Size:0x800000
  SYSTEM  BaseAddr:0xA800000  Size:0xC0000000
  CACHE  BaseAddr:0xCA800000  Size:0x10000000
  USERDATA  BaseAddr:0xDA800000  Size:0xF6780000
  FLASHINFO  BaseAddr:0x1D0F80000  Size:0x1000000
>>Done.

A good starting point for a scatter file for SP Flash Tool can be found here. You’ll need to modify for filenames etc.

Issues

I’ve noticed that there is some problem with timezones. By default, the system is set to a default timezone of Australia/Perth for some reason. Once booted, the device allows you to change the timezone but upon reboot it will ALWAYS revert to Australia/Perth.

Without root you can install the ClockSync app and force it to your specified timezone. This will switch it to the correct timezone upon a reboot after around 1 minute of uptime.

/system/build.prop has the following entry

persist.sys.timezone=Australia/Perth

Magisk has a nice module called MagiskHide Props Config

Install this and use it in a terminal.

adb shell
props -nc
4 - Add/edit custom props
n - New custom prop
persist.sys.timezone
America/New_York
3 (late_start service)
y
y

You can check status of timezone in a shell by issuing the following

getprop persist.sys.timezone

The following sets the value within the shell but doesn’t retain after reboot, this is why the previous module is useful.

setprop persist.sys.timezone "America/New_York"

System information after rooting this machine:

root@ULTRA:/ # cat /proc/cpuinfo
Processor       : ARMv7 Processor rev 3 (v7l)
processor       : 0
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 26.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
vfpd32 lpae evtstrm
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xc07
CPU revision    : 3

processor       : 1
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 26.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
vfpd32 lpae evtstrm
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xc07
CPU revision    : 3

processor       : 2
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 26.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
vfpd32 lpae evtstrm
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xc07
CPU revision    : 3

processor       : 3
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 26.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
vfpd32 lpae evtstrm
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xc07
CPU revision    : 3

Hardware        : MT6580
Revision        : 0000
Serial          : 0000000000000000

root@ULTRA:/ # getprop
[af.music.outputid]: [3]
[bgw.current3gband]: [0]
[camera.disable_zsl_mode]: [1]
[curlockscreen]: [0]
[dalvik.vm.debug]: [0x600]
[dalvik.vm.dex2oat-Xms]: [64m]
[dalvik.vm.dex2oat-Xmx]: [512m]
[dalvik.vm.heapgrowthlimit]: [128m]
[dalvik.vm.heapsize]: [256m]
[dalvik.vm.image-dex2oat-Xms]: [64m]
[dalvik.vm.image-dex2oat-Xmx]: [64m]
[dalvik.vm.isa.arm.features]: [default]
[dalvik.vm.isa.arm.variant]: [cortex-a7]
[dalvik.vm.mtk-stack-trace-file]: [/data/anr/mtk_traces.txt]
[dalvik.vm.stack-trace-file]: [/data/anr/traces.txt]
[debug.MB.running]: [0]
[debug.atrace.tags.enableflags]: [0]
[debug.force_rtl]: [0]
[debug.hwc.bq_count]: [3]
[debug.hwc.compose_level]: [0]
[debug.hwui.render_dirty_regions]: [false]
[debug.mdlogger.Running]: [0]
[debug.mtklog.netlog.Running]: [0]
[debug.program_binary.enable]: [1]
[dev.bootcomplete]: [1]
[dhcp.ipv6.wlan0.dns1]: []
[dhcp.ipv6.wlan0.dns2]: []
[dhcp.ipv6.wlan0.ipaddress]: []
[dhcp.ipv6.wlan0.leasetime]: []
[dhcp.ipv6.wlan0.result]: []
[dhcp.wlan0.result]: [failed]
[drm.service.enabled]: [true]
[fmradio.driver.enable]: [1]
[gsm.baseband.capability]: [55]
[gsm.current.phone-type]: [1,1]
[gsm.gcf.testmode]: [0]
[gsm.network.type]: [Unknown,Unknown]
[gsm.operator.alpha]: []
[gsm.operator.alpha.2]: []
[gsm.operator.iso-country]: []
[gsm.operator.isroaming]: [false,false]
[gsm.operator.numeric]: []
[gsm.project.baseband]: [DROI6580_WE_M_HSPA_HW(DEFAULT)]
[gsm.project.baseband.2]: [DROI6580_WE_M_HSPA_HW(DEFAULT)]
[gsm.ril.eboot]: [-1]
[gsm.ril.init]: [1]
[gsm.ril.uicctype]: []
[gsm.ril.uicctype.2]: []
[gsm.serial]: [XXXXXXXXXXXXXXXXXX]
[gsm.sim.operator.alpha]: [,]
[gsm.sim.operator.iso-country]: [,]
[gsm.sim.operator.numeric]: [,]
[gsm.sim.retry.pin1]: []
[gsm.sim.retry.pin1.2]: []
[gsm.sim.retry.pin2]: []
[gsm.sim.retry.pin2.2]: []
[gsm.sim.retry.puk1]: []
[gsm.sim.retry.puk1.2]: []
[gsm.sim.retry.puk2]: []
[gsm.sim.retry.puk2.2]: []
[gsm.sim.ril.mcc.mnc]: []
[gsm.sim.ril.mcc.mnc.2]: []
[gsm.sim.ril.phbready]: []
[gsm.sim.ril.phbready.2]: []
[gsm.sim.state]: [ABSENT,ABSENT]
[gsm.version.baseband]: [MOLY.WR8.W1449.MD.WG.MP.V57.P18, 2017/04/07 11:17]
[gsm.version.baseband1]: [MOLY.WR8.W1449.MD.WG.MP.V57.P18, 2017/04/07 11:17]
[gsm.version.ril-impl]: [mtk gemini ril 1.0]
[init.svc.DMAgent]: [running]
[init.svc.MtkCodecService]: [running]
[init.svc.NativeMisc]: [running]
[init.svc.NvRAMAgent]: [running]
[init.svc.PPLAgent]: [running]
[init.svc.adbd]: [running]
[init.svc.agpsd]: [running]
[init.svc.batterywarning]: [running]
[init.svc.bootanim]: [stopped]
[init.svc.bootlogoupdater]: [stopped]
[init.svc.ccci2_fsd]: [stopped]
[init.svc.ccci2_mdinit]: [stopped]
[init.svc.ccci_fsd]: [running]
[init.svc.ccci_mdinit]: [running]
[init.svc.conn_launcher]: [running]
[init.svc.console]: [running]
[init.svc.debuggerd]: [running]
[init.svc.dhcpcd_wlan0]: [stopped]
[init.svc.drm]: [running]
[init.svc.emsvr_user]: [running]
[init.svc.enableswap]: [stopped]
[init.svc.fingerprintd]: [running]
[init.svc.flash_recovery]: [stopped]
[init.svc.fuelgauged]: [running]
[init.svc.gas_srv]: [running]
[init.svc.gatekeeperd]: [running]
[init.svc.gsm0710muxd]: [running]
[init.svc.guiext-server]: [running]
[init.svc.healthd]: [running]
[init.svc.installd]: [running]
[init.svc.keystore]: [running]
[init.svc.lmkd]: [running]
[init.svc.logd]: [running]
[init.svc.logd-reinit]: [stopped]
[init.svc.mdlogger]: [running]
[init.svc.media]: [running]
[init.svc.memsicp]: [running]
[init.svc.mnld]: [running]
[init.svc.mobile_log_d]: [running]
[init.svc.msensord]: [stopped]
[init.svc.netd]: [running]
[init.svc.netdiag]: [running]
[init.svc.nvram_daemon]: [stopped]
[init.svc.p2p_supplicant]: [running]
[init.svc.pq]: [running]
[init.svc.program_binary]: [running]
[init.svc.ril-daemon]: [stopped]
[init.svc.ril-daemon-mtk]: [running]
[init.svc.servicemanager]: [running]
[init.svc.slpd]: [running]
[init.svc.sn]: [running]
[init.svc.spm_script]: [stopped]
[init.svc.surfaceflinger]: [running]
[init.svc.terservice]: [stopped]
[init.svc.thermal]: [running]
[init.svc.thermal_manager]: [stopped]
[init.svc.thermald]: [running]
[init.svc.ueventd]: [running]
[init.svc.vold]: [running]
[init.svc.vtservice]: [running]
[init.svc.wifi2agps]: [running]
[init.svc.wmtLoader]: [stopped]
[init.svc.xlogboot]: [stopped]
[init.svc.xlogdebugchanged]: [stopped]
[init.svc.zygote]: [running]
[mediatek.wlan.chip]: [CONSYS_MT6735]
[mediatek.wlan.ctia]: [0]
[mediatek.wlan.module.postfix]: [_consys_mt6735]
[mtk.md1.starttime]: [0s Mon Nov 19 13:13:53 2018]
[mtk.md1.status]: [ready]
[mtk.md2.status]: [init_done]
[mtk.vdec.waitkeyframeforplay]: [1]
[mtk_wifi.fwpath]: [STA]
[net.bt.name]: [Android]
[net.change]: [net.dns1]
[net.dns1]: [192.168.1.1]
[net.hostname]: [android-bc36a2f48333836]
[net.nsiot_pending]: [false]
[net.qtaguid_enabled]: [1]
[net.tcp.default_init_rwnd]: [60]
[persist.af.hac_on]: [0]
[persist.dm.lock]: [false]
[persist.gemini.sim_num]: [2]
[persist.log.tag]: [V]
[persist.logd.size]: []
[persist.meta.dumpdata]: [0]
[persist.mtk.wcn.combo.chipid]: [0x6580]
[persist.radio.data.iccid]: []
[persist.radio.default.sim]: [0]
[persist.radio.fd.counter]: [15]
[persist.radio.fd.off.counter]: [5]
[persist.radio.fd.off.r8.counter]: [5]
[persist.radio.fd.r8.counter]: [15]
[persist.radio.gemini_support]: [1]
[persist.radio.mobile.data]: [0,0]
[persist.radio.multisim.config]: [dsds]
[persist.radio.simswitch]: [1]
[persist.service.acm.enable]: [0]
[persist.service.adb.enable]: [1]
[persist.service.bdroid.bdaddr]: [XX:XX:XX:XX:XX:XX]
[persist.service.debuggable]: [1]
[persist.service.stk.shutdown]: [0]
[persist.sys.dalvik.vm.lib.2]: [libart.so]
[persist.sys.default.launcher]: []
[persist.sys.first_time_boot]: [false]
[persist.sys.locale]: [en-US]
[persist.sys.mute.state]: [1]
[persist.sys.pq.adl.idx]: [0]
[persist.sys.pq.shp.idx]: [2]
[persist.sys.profiler_ms]: [0]
[persist.sys.safemode]: []
[persist.sys.sd.defaultpath]: [/storage/emulated/0]
[persist.sys.timezone]: [America/New_York]
[persist.sys.usb.config]: [mtp,adb]
[persist.sys.webview.vmsize]: [104857600]
[qemu.hw.mainkeys]: [0]
[ril.active.md]: [3]
[ril.cdma.switching]: [0]
[ril.current.share_modem]: [2]
[ril.data.allow]: [0]
[ril.ecc.service.category.list]: []
[ril.ecclist]: []
[ril.ecclist1]: []
[ril.external.md]: [0]
[ril.fd.mode]: [1]
[ril.first.md]: [1]
[ril.flightmode.poweroffMD]: [1]
[ril.iccid.sim1]: [N/A]
[ril.iccid.sim2]: [N/A]
[ril.imsi.status.sim1]: [0]
[ril.imsi.status.sim2]: [0]
[ril.ipo.radiooff]: [0]
[ril.ipo.radiooff.2]: [0]
[ril.mux.ee.md1]: [0]
[ril.mux.report.case]: [0]
[ril.pid.1]: [562]
[ril.radiooff.poweroffMD]: [0]
[ril.read.imsi]: [1]
[ril.ready.sim]: [false]
[ril.specific.sm_cause]: [0]
[ril.telephony.mode]: [0]
[rild.libargs]: [-d /dev/ttyC0]
[rild.libpath]: [/system/lib/mtk-ril.so]
[ro.adb.secure]: [0]
[ro.allow.mock.location]: [0]
[ro.audio.silent]: [0]
[ro.baseband]: [unknown]
[ro.board.platform]: [mt6580]
[ro.boot.bootreason]: [wdt_by_pass_pwk]
[ro.boot.hardware]: [mt6580]
[ro.boot.mode]: [normal]
[ro.boot.name]: [android]
[ro.boot.selinux]: [permissive]
[ro.boot.serialno]: [XXXXXXXXXXXXXXXX]
[ro.bootimage.build.date]: [Thu Oct 26 20:54:28 CST 2017]
[ro.bootimage.build.date.utc]: [1509022468]
[ro.bootimage.build.fingerprint]: [wt/full_wf581mb_wt_ultra/wf581mb_wt_ultra:6.0/MRA58K/1509021994:user/test-keys]
[ro.bootloader]: [unknown]
[ro.bootmode]: [normal]
[ro.build.characteristics]: [default]
[ro.build.date]: [Thu Oct 26 20:51:23 CST 2017]
[ro.build.date.utc]: [1509022283]
[ro.build.description]: [full_wf581mb_wt_ultra-user 6.0 MRA58K 1509021994 test-keys]
[ro.build.display.id]: [FIGO_ULTRA_M50G_V001_20171026]
[ro.build.fingerprint]: [wt/full_wf581mb_wt_ultra/wf581mb_wt_ultra:6.0/MRA58K/1509021994:user/test-keys]
[ro.build.flavor]: [full_wf581mb_wt_ultra-user]
[ro.build.freemeos_channel_no]: [droi01]
[ro.build.freemeos_customer_br]: [1]
[ro.build.freemeos_customer_no]: [ULTRA]
[ro.build.freemeos_label]: []
[ro.build.host]: [droi]
[ro.build.id]: [MRA58K]
[ro.build.ota.product]: [ULTRA_ULTRA_zh_null]
[ro.build.product]: [wf581mb_wt_ultra]
[ro.build.show.display]: []
[ro.build.svn.revision]: [13715]
[ro.build.tags]: [test-keys]
[ro.build.tyd.custom.hw_version]: [WF581MB]
[ro.build.tyd.production]: [1]
[ro.build.type]: [user]
[ro.build.user]: [server]
[ro.build.version.all_codenames]: [REL]
[ro.build.version.base_os]: []
[ro.build.version.codename]: [REL]
[ro.build.version.freemeos]: []
[ro.build.version.incremental]: [1509021994]
[ro.build.version.preview_sdk]: [0]
[ro.build.version.release]: [6.0]
[ro.build.version.sdk]: [23]
[ro.build.version.security_patch]: [2017-04-05]
[ro.camera.sound.forced]: [0]
[ro.carrier]: [unknown]
[ro.com.android.mobiledata]: [false]
[ro.com.google.clientidbase]: [alps-full_wf581mb_wt_ultra-{country}]
[ro.com.google.clientidbase.am]: [alps-full_wf581mb_wt_ultra-{country}]
[ro.com.google.clientidbase.gmm]: [alps-full_wf581mb_wt_ultra-{country}]
[ro.com.google.clientidbase.ms]: [alps-full_wf581mb_wt_ultra-{country}]
[ro.com.google.clientidbase.yt]: [alps-full_wf581mb_wt_ultra-{country}]
[ro.com.google.gmsversion]: [6.0_r9]
[ro.config.alarm_alert]: [Alarm_Classic.ogg]
[ro.config.notification_sound]: [F1_New_MMS.ogg]
[ro.config.ringtone]: [NOBUX_TECHNO1.mp3]
[ro.crypto.state]: [unencrypted]
[ro.custom.build.version]: [1509021994]
[ro.dalvik.vm.native.bridge]: [0]
[ro.debuggable]: [1]
[ro.droi_auto_mac_support]: [1]
[ro.droi_auto_wake_lock_support]: [1]
[ro.expect.recovery_id]: [0x5c03bb42c33a220496deea9e6a32fe7e9e8e916d000000000000000000000000]
[ro.fo.product.model]: [wf581mb_wt_ultra]
[ro.fo_fmode_bcamera]: [1]
[ro.fo_fmode_dsensor]: [1]
[ro.fo_fmode_fcamera]: [1]
[ro.fo_fmode_gps]: [1]
[ro.fo_fmode_gsensor]: [1]
[ro.fo_fmode_lsensor]: [1]
[ro.fo_fmode_strobe_back]: [1]
[ro.fo_fmode_wifi]: [1]
[ro.fo_imei_write_support]: [1]
[ro.freeme.fake_ram_default]: [2]
[ro.freeme.fake_rom_default]: [32]
[ro.freeme.fake_rom_ram]: [1]
[ro.frp.pst]: [/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/frp]
[ro.gemini.smart_sim_switch]: [false]
[ro.hardware]: [mt6580]
[ro.have_aacencode_feature]: [1]
[ro.have_aee_feature]: [1]
[ro.kernel.zio]: [38,108,105,16]
[ro.mediatek.chip_ver]: [S01]
[ro.mediatek.gemini_support]: [true]
[ro.mediatek.platform]: [MT6580]
[ro.mediatek.project.path]: [device/droi/wf581mb_wt_ultra]
[ro.mediatek.version.branch]: [alps-mp-m0.mp1]
[ro.mediatek.version.release]: [alps-mp-m0.mp1-V2.34_droi6580.we.m_P50]
[ro.mediatek.version.sdk]: [4]
[ro.mediatek.wlan.p2p]: [1]
[ro.mediatek.wlan.wsc]: [1]
[ro.mount.fs]: [EXT4]
[ro.mtk_agps_app]: [1]
[ro.mtk_antibricking_level]: [2]
[ro.mtk_audenh_support]: [1]
[ro.mtk_audio_ape_support]: [1]
[ro.mtk_audio_profiles]: [1]
[ro.mtk_audio_tuning_tool_ver]: [V1]
[ro.mtk_besloudness_support]: [1]
[ro.mtk_bessurround_support]: [1]
[ro.mtk_bg_power_saving_support]: [1]
[ro.mtk_bg_power_saving_ui]: [1]
[ro.mtk_bip_scws]: [1]
[ro.mtk_bt_support]: [1]
[ro.mtk_cam_mfb_support]: [0]
[ro.mtk_cta_drm_support]: [1]
[ro.mtk_cta_set]: [1]
[ro.mtk_dhcpv6c_wifi]: [1]
[ro.mtk_dialer_search_support]: [1]
[ro.mtk_dual_mic_support]: [0]
[ro.mtk_eap_sim_aka]: [1]
[ro.mtk_emmc_support]: [1]
[ro.mtk_enable_md1]: [1]
[ro.mtk_fd_support]: [1]
[ro.mtk_flight_mode_power_off_md]: [1]
[ro.mtk_flv_playback_support]: [1]
[ro.mtk_fm_recording_support]: [1]
[ro.mtk_gemini_support]: [1]
[ro.mtk_gps_support]: [1]
[ro.mtk_is_tablet]: [0]
[ro.mtk_miravision_image_dc]: [1]
[ro.mtk_miravision_support]: [1]
[ro.mtk_mobile_management]: [1]
[ro.mtk_multi_storage_support]: [1]
[ro.mtk_multisim_ringtone]: [1]
[ro.mtk_oma_drm_support]: [1]
[ro.mtk_omacp_support]: [1]
[ro.mtk_perfservice_support]: [1]
[ro.mtk_pq_support]: [2]
[ro.mtk_privacy_protection_lock]: [1]
[ro.mtk_rat_wcdma_preferred]: [1]
[ro.mtk_rild_read_imsi]: [1]
[ro.mtk_safemedia_support]: [1]
[ro.mtk_search_db_support]: [1]
[ro.mtk_send_rr_support]: [1]
[ro.mtk_shared_sdcard]: [1]
[ro.mtk_sim_hot_swap]: [1]
[ro.mtk_tetheringipv6_support]: [1]
[ro.mtk_thumbnail_play_support]: [1]
[ro.mtk_voice_contact_support]: [1]
[ro.mtk_voice_extension_support]: [1]
[ro.mtk_voice_unlock_support]: [1]
[ro.mtk_wapi_support]: [1]
[ro.mtk_wappush_support]: [1]
[ro.mtk_widevine_drm_l3_support]: [1]
[ro.mtk_wifi_mcc_support]: [1]
[ro.mtk_wlan_support]: [1]
[ro.mtk_wmv_playback_support]: [1]
[ro.mtk_world_phone_policy]: [0]
[ro.opengles.version]: [131072]
[ro.product.board]: [full_wf581mb_wt_ultra]
[ro.product.brand]: [ULTRA M50G]
[ro.product.cpu.abi]: [armeabi-v7a]
[ro.product.cpu.abi2]: [armeabi]
[ro.product.cpu.abilist]: [armeabi-v7a,armeabi]
[ro.product.cpu.abilist32]: [armeabi-v7a,armeabi]
[ro.product.cpu.abilist64]: []
[ro.product.device]: [ULTRA]
[ro.product.locale]: [en-US]
[ro.product.manufacturer]: [ULTRA]
[ro.product.model]: [ULTRA M50G]
[ro.product.name]: [ULTRA M50G]
[ro.recovery_id]: [0x5c03bb42c33a220496deea9e6a32fe7e9e8e916d000000000000000000000000]
[ro.revision]: [0]
[ro.runtime.firstboot]: [1542651285238]
[ro.secure]: [0]
[ro.serialno]: [XXXXXXXXXXXXXXXX]
[ro.setupwizard.mode]: [OPTIONAL]
[ro.sf.hwrotation]: [0]
[ro.sf.lcd_density]: [213]
[ro.sf.lcd_height]: [854]
[ro.sf.lcd_width]: [480]
[ro.sim_me_lock_mode]: [0]
[ro.sim_refresh_reset_by_modem]: [1]
[ro.sys.flash_type]: [null]
[ro.sys.license]: [XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX]
[ro.sys.number.markers]: []
[ro.sys.usb.bicr]: [yes]
[ro.sys.usb.charging.only]: [yes]
[ro.sys.usb.mtp.whql.enable]: [0]
[ro.sys.usb.storage.type]: [mtp,mass_storage]
[ro.telephony.sim.count]: [2]
[ro.tyd.ota.flash]: [null]
[ro.tyd.ota.language]: [zh]
[ro.tyd_custom_baseband_vesion]: []
[ro.tyd_custom_bt_name]: [ULTRA M50G]
[ro.tyd_custom_bulid_version]: [FIGO_ULTRA_M50G_V001_20171026]
[ro.tyd_custom_hw_verno]: [WF581MB]
[ro.tyd_custom_kernel_version]: []
[ro.tyd_custom_mtp_ptp_name]: [ULTRA M50G]
[ro.tyd_custom_private_version]: [WF581MB.WT.ULTRA.M0.F.GAL1SAG1N1GFG9LA.B125.1026.V3.05]
[ro.tyd_custom_usbstorage_name]: [ULTRA M50G]
[ro.tyd_custom_wlan_ssid]: [ULTRA M50G]
[ro.tyd_mmi_auto_imei_support]: [1]
[ro.tyd_poweroff_ani_support]: [1]
[ro.tyd_security_float]: [1]
[ro.tyd_security_getapplist]: [1]
[ro.tyd_security_mreceiver]: [1]
[ro.tyd_smart_wake_support]: [1]
[ro.tyd_svn_revision]: [13715]
[ro.wifi.channels]: []
[ro.wlan.mtk.wifi.5g]: [0]
[ro.zygote]: [zygote32]
[ro.zygote.preload.enable]: [0]
[security.perf_harden]: [1]
[selinux.reload_policy]: [1]
[service.bootanim.exit]: [1]
[service.cat.install.on]: [0]
[service.cat.install.on.2]: [0]
[service.cat.install.on.3]: [0]
[service.cat.install.on.4]: [0]
[service.nvram_init]: [Ready]
[service.wcn.coredump.mode]: [0]
[service.wcn.driver.ready]: [yes]
[sys.boot.reason]: [0]
[sys.boot_completed]: [1]
[sys.ipo.pwrdncap]: [2]
[sys.ipowin.done]: [1]
[sys.oem_unlock_allowed]: [0]
[sys.sysctl.extra_free_kbytes]: [4803]
[sys.sysctl.tcp_def_init_rwnd]: [60]
[sys.usb.config]: [mtp,adb]
[sys.usb.state]: [mtp,adb]
[sys.usb.vid]: [0E8D]
[vold.has_adoptable]: [1]
[vold.path.internal_storage]: [/storage/emulated/0]
[vold.post_fs_data_done]: [1]
[vold.support_external_sd]: [1]
[wfd.dummy.enable]: [1]
[wifi.direct.interface]: [p2p0]
[wifi.interface]: [wlan0]
[wifi.tethering.interface]: [ap0]
[wlan.driver.status]: [ok]

root@ULTRA:/ # df
Filesystem               Size     Used     Free   Blksize
/dev                   483.4M    88.0K   483.3M   4096
/sys/fs/cgroup         483.4M    12.0K   483.4M   4096
/mnt                   483.4M     0.0K   483.4M   4096
/system                  2.9G     2.2G   720.4M   4096
/data                    3.7G     2.8G   922.9M   4096
/cache                 248.0M   872.0K   247.1M   4096
/protect_f               5.8M    56.0K     5.8M   4096
/protect_s               5.8M    52.0K     5.8M   4096
/nvdata                 27.5M   940.0K    26.6M   4096
/dev/usb-ffs/adb: Permission denied
/storage               483.4M     0.0K   483.4M   4096
/mnt/runtime/default/emulated     3.7G     2.8G   922.9M   4096
/storage/emulated        3.7G     2.8G   922.9M   4096
/mnt/runtime/read/emulated     3.7G     2.8G   922.9M   4096
/mnt/runtime/write/emulated     3.7G     2.8G   922.9M   4096

root@ULTRA:/ # cat /proc/partitions
major minor  #blocks  name

   7        0       1254 loop0
 254        0     495032 zram0
 179        0    7634944 mmcblk0
 179        1       3072 mmcblk0p1
 179        2       5120 mmcblk0p2
 179        3      10240 mmcblk0p3
 179        4      10240 mmcblk0p4
 179        5        256 mmcblk0p5
 179        6        384 mmcblk0p6
 179        7      16384 mmcblk0p7
 179        8      16384 mmcblk0p8
 179        9        512 mmcblk0p9
 179       10       8192 mmcblk0p10
 179       11      10240 mmcblk0p11
 179       12       1024 mmcblk0p12
 179       13      32768 mmcblk0p13
 179       14      40320 mmcblk0p14
 179       15       2048 mmcblk0p15
 179       16       6144 mmcblk0p16
 179       17       8192 mmcblk0p17
 179       18    3145728 mmcblk0p18
 179       19     262144 mmcblk0p19
 179       20    4038144 mmcblk0p20
 179       21      16384 mmcblk0p21
 179       96        512 mmcblk0rpmb
 179       64       4096 mmcblk0boot1
 179       32       4096 mmcblk0boot0 

  fastboot getvar all
 (bootloader)    max-download-size: 0x8000000
 (bootloader)    partition-size:userdata: 32000000
 (bootloader)    partition-type:userdata: ext4
 (bootloader)    partition-size:cache: 10000000
 (bootloader)    partition-type:cache: ext4
 (bootloader)    partition-size:system: c0000000
 (bootloader)    partition-type:system: ext4
 (bootloader)    partition-size:metadata: 2760000
 (bootloader)    partition-type:metadata: raw data
 (bootloader)    partition-size:nvdata: 2000000
 (bootloader)    partition-type:nvdata: ext4
 (bootloader)    partition-size:frp: 100000
 (bootloader)    partition-type:frp: raw data
 (bootloader)    partition-size:expdb: a00000
 (bootloader)    partition-type:expdb: raw data
 (bootloader)    partition-size:logo: 800000
 (bootloader)    partition-type:logo: raw data
 (bootloader)    partition-size:para: 80000
 (bootloader)    partition-type:para: raw data
 (bootloader)    partition-size:keystore: 800000
 (bootloader)    partition-type:keystore: raw data
 (bootloader)    partition-size:secro: 600000
 (bootloader)    partition-type:secro: raw data
 (bootloader)    partition-size:oemkeystore: 200000
 (bootloader)    partition-type:oemkeystore: raw data
 (bootloader)    partition-size:recovery: 1000000
 (bootloader)    partition-type:recovery: raw data
 (bootloader)    partition-size:boot: 1000000
 (bootloader)    partition-type:boot: raw data
 (bootloader)    partition-size:lk: 60000
 (bootloader)    partition-type:lk: raw data
 (bootloader)    partition-size:seccfg: 40000
 (bootloader)    partition-type:seccfg: raw data
 (bootloader)    partition-size:protect2: a00000
 (bootloader)    partition-type:protect2: ext4
 (bootloader)    partition-size:protect1: a00000
 (bootloader)    partition-type:protect1: ext4
 (bootloader)    partition-size:nvram: 500000
 (bootloader)    partition-type:nvram: raw data
 (bootloader)    partition-size:proinfo: 300000
 (bootloader)    partition-type:proinfo: raw data
 (bootloader)    partition-size:preloader: 40000
 (bootloader)    partition-type:preloader: raw data
 (bootloader)    off-mode-charge: 1
 (bootloader)    warranty: yes
 (bootloader)    unlocked: no
 (bootloader)    secure: yes
 (bootloader)    kernel: lk
 (bootloader)    product: WF581MB_WT_ULTRA
 (bootloader)    version-preloader: 0.1.00
 (bootloader)    version: 0.5
 all: Done!!
finished. total time: 0.221s

shell@ULTRA:/system $ cat ota.prop
{
        "model": "ultra",
    "otaid": "ultra_generic",
    "otaver": "1.0.0",
        "recovery_type": "3e",
    "otatime": "20170710-1200"
}shell@ULTRA:/system $

root@ULTRA:/ # mount
rootfs / rootfs ro,seclabel 0 0
tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,seclabel,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,seclabel,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
none /sys/fs/cgroup tmpfs rw,seclabel,relatime,mode=750,gid=1000 0 0
tmpfs /mnt tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
pstore /sys/fs/pstore pstore rw,seclabel,relatime 0 0
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/system /system ext4 ro,seclabel,relatime,data=ordered 0 0
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/userdata /data ext4 rw,seclabel,nosuid,nodev,noatime,discard,noauto_da_alloc,resuid=10010,data=ordered 0 0
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/cache /cache ext4 rw,seclabel,nosuid,nodev,noatime,discard,noauto_da_alloc,data=ordered 0 0
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/protect1 /protect_f ext4 rw,seclabel,nosuid,nodev,noatime,nodelalloc,noauto_da_alloc,commit=1,data=ordered 0 0
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/protect2 /protect_s ext4 rw,seclabel,nosuid,nodev,noatime,nodelalloc,noauto_da_alloc,commit=1,data=ordered 0 0
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/nvdata /nvdata ext4 rw,seclabel,nosuid,nodev,noatime,discard,noauto_da_alloc,data=ordered 0 0adb /dev/usb-ffs/adb functionfs rw,relatime 0 0
tmpfs /storage tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
/dev/fuse /mnt/runtime/default/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /storage/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /mnt/runtime/read/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /mnt/runtime/write/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0

root@ULTRA:/ # cat /proc/cmdline
console=tty0 console=ttyMT0,921600n1 root=/dev/ram vmalloc=496M androidboot.hardware=mt6580 bootopt=64S3,32S1,32S1 lcm=1-ST7701_DSI_6735_FWVGA fps=5837 vram=6291456 androidboot.selinux=permissive printk.disable_uart=1 bootprof.pl_t=4042 bootprof.lk_t=3918 boot_reason=4 androidboot.serialno=XXXXXXXXXXXXXXXX androidboot.bootreason=wdt_by_pass_pwk gpt=1

root@ULTRA:/ # cat fstab.mt6580
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/system /system ext4 ro wait
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/userdata /data ext4 noatime,nosuid,nodev,noauto_da_alloc,discard wait,check,resize,encryptable=/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/metadata,
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/cache /cache ext4 noatime,nosuid,nodev,noauto_da_alloc,discard wait,check
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/protect1 /protect_f ext4 noatime,nosuid,nodev,noauto_da_alloc,commit=1,nodelalloc wait,check,formattable
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/protect2 /protect_s ext4 noatime,nosuid,nodev,noauto_da_alloc,commit=1,nodelalloc wait,check,formattable
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/nvdata /nvdata ext4 noatime,nosuid,nodev,noauto_da_alloc,discard wait,check,formattable

/devices/mtk-msdc.0/11120000.msdc0* auto vfat defaults voldmanaged=sdcard0:auto
/devices/mtk-msdc.0/11130000.msdc1* auto auto defaults voldmanaged=sdcard1:auto,encryptable=userdata

/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/frp /persistent emmc defaults defaults

/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/nvram /nvram emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/proinfo /proinfo emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/lk /bootloader emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/para /misc emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/boot /boot emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/recovery /recovery emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/logo /logo emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/expdb /expdb emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/secro /secro emmc defaults defaults
/dev/block/platform/mtk-msdc.0/11120000.msdc0/by-name/seccfg /seccfg emmc defaults defaults
/devices/platform/mt_usb* auto vfat defaults voldmanaged=usbotg:auto