yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
Do you think revskills will help? I'm about to pm viper and link this thread.

p.s. do you think it's different for the sensation?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
Only thing I can say is it's worth a shot, haha.

And I don't think so. RevSkills is a pretty generic tool for extracting things. From their site: "It is a development and debugging tool for Qualcomm mobiles and HTC/Samsung mobiles in general." ;)
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
doesn't look good for either phones:

http://forum.revskills.de/viewtopic.php?f=10&t=920&p=4168&hilit=sensation#p4168
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
Hmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm... :/

Might actually need a JTAG after all.. :( eMMC is QUITE a bit different from NAND. If someone can confirm what each of these phones uses FOR SURE, that would be a huge help. Would hold off on trying to get RevSkills...

Really need someone a bit more experienced in this area. Might try and talk to AdamOutler a bit.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
let's see what we can do. i'm a newb that can use google lol hopefully viper gets back to me on this one as well.

p.s. we need to find out what exactly gets erased (and why the qhsusb gets displayed) to see what we need to be able to dump (lol)
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
Just sent Adam a PM so just waiting for that to see if he can help us out.

Hard part I really see about that is that that menu has popped up from users doing a few different things. xboarder was pushing libs, a few just restarting their phone after a flash, and what seems to be an obvious cause, pulling the battery thinking a flash is done/error-ed out.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] AdamOutler:
I was requested in this thread. I don't have anything to say except there is something called qpst tool which qualcomm uses to communicate with their processors. No one knows how to use it though, to my knowledge.

If you guys figure it out, and it can be run from the command line, or has source available, let me know and I will create a one-click tool to support unbricking from this mode.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] orlandoxpolice:
someone, somewhere, must know how to use the tool. i am sure someone at xda knows someone who works there...
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
So you don't think a jig would be required for this...?

What part of QPST?

Been using Software Download to get NV data, but can't seem to get anything else

Service Programming displays pretty much no info after reading from phone.

Memory Debug tells me my phone needs to be put into download mode rather than diagnostic, press okay to do it, phone does a normal reboot. (Maybe someone with a hard brick that's IN download mode could try to use the "Get Regions" function to see the result?)

EFS Explorer does exactly what it says, but what it finds isn't relevant to what we need. (Same things I found using DFS CDMA Tools)

EDIT:Woah... wait............ eMMC Download..? Actually displays QUITE a bit. Just got an updated version of QPST and this is new... I'm gonna toy with this for a bit. Scratch that... Nothin here. :/ Dangit, thought that was something useful... Though, the "Flash programmer file name" is EMMCBLD.hex and the "Boot image" is 7x30_msimage.mbn for this device. Not sure if that's default, or if it automatically read what files it's going to use to flash.

Managed to find a program in here that links to their employee login site for downloads and such since that specific one is "obsolete". Would be REALLY nice if we knew someone to get past this point for service manuals...
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] orlandoxpolice:
like i said, the xda community is gigantic, make a few posts around the different forums to see if anyone has ever worked with qualcomm and has experience with this tool. i have a feeling if we find the right person this will be solved.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
some threads that mentioned qpst and are not for cdma phones.

http://xdaforums.com/showthread.php?p=17254925#post17254925

http://xdaforums.com/showthread.php?p=10764298#post10764298

if you can put your galaxy into the download mode, that might help a lot. i'm sure there is a combination of keys to do that for sensation also.

check this also, as it does say full memory dump: http://xdaforums.com/showthread.php?t=1101166
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
Gonna try and do work on this again tonight. Does anyone happen to still have their Skyrocket that is IN qhsusb_dload mode in hand? Need to do see if a few things work with it...
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
my skyrocket got this last night. just got off the phone with att warranty ( had the phone for 5 weeks). A replacement skyrocket and a jig will be here Wednesday back to my n95-3 for 2 days.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
does that mean you still have the bricked one with you?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
yes for now. I NEED TO SEND IT BACK.

I have qpst installed but have not found a working driver for the device
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
try this: http://xdaforums.com/showpost.php?p=21911621&postcount=2
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
Got something now odin sees phone but wont download and screen is still black
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
how about qpst? is it seeing the phone? follow fortune's directions and see if you can access the "get regions" option.

check this thread also: http://xdaforums.com/showthread.php?t=1101166
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
Error nak response received unknown
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
quick googling brought this: http://en.wikipedia.org/wiki/Negative-acknowledge_character

what options are you able to access?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
nothing. looks like a dead emmc card

---------- Post added at 01:04 PM ---------- Previous post was at 12:23 PM ----------

Do we have any qpst restore images?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
First thing, look for QPST v2.7 build 366. Has seemed to have more support for my phone while I've been working with it. Also has eMMC Software Download. Not really useful for us now, because we don't have the files to flash, but I'm working on that.

Have you tried using QPST Memory Debug?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
Yes tried that version too. Nthing
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
quick update on the sensation. it was a little more tricky to find the diag mode, but here it is:

http://xdaforums.com/showpost.php?p=22762839&postcount=112

haven't messed with anything yet, but we're getting closer :)
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] eagercrow:
I found something that may interest you guys. The qpst manual:

http://sxg.spssoftware.cz/80-v1400-3_h_qpst_ug.pdf
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
thanks, man! i've been trying to google some how to's as well. i wish we had a manual for the newest version with the emmc stuff.

edit: the latest qpst build 366 has a built-in user guide from sept. 2010 :)
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
So is QPST just not able to recognize it at all...?

You wouldn't happen to have a jig would you?

EDIT: Nevermind, re-read posts. Currently waiting for one, lol. Curious as to how it might read with a jig instead. I don't have one, so I can't test on a working model either...
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
NO qpst sees it but its in qpst download mode. I think we coukd fix it if we had the qpst images
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
My replacement Skyrocket will be here today. YAY!!

I know that a jig will not reset flash counter (I dont care because my old skyrocket has a emmc card failure) But I have herd that the jig will not cause the flash counter to trigger is that true?

BTW found this

http://forum.ppcgeeks.com/windows-mobile-software/46873-updated-06-14-2011-qpst-qxdm.html
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] DoctorQMM:
a jig won't trip the custom binary counter... it's only another way to get into download mode. My understanding is the thing that will trip the counter is using Odin3 to flash a boot.img (kernel) or a tar that has a boot.img in it. I used ODIN to just flash CWM, then use CWM to flash any ROM/KERNEL zip packages... and my custom binary counter still shows "NO".
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
so if i need to odin back to stock if i use a jic the counter should stay at 0
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
I personally just made a nandroid backup immediately after I installed CWM, so I have a stock system/data/kerbel backup, just need to flash stock recovery to go completely stock. Flashing only the recovery partition doesn't trip the counter.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] blade_huntt:
Can you link me that file ..mine is totally bricked

Can you link me that file ..mine is totally bricked:(
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
Restoring this file won't restore your phone, sadly. :( If it did, I'm sure this page would get much more publicity, haha. We're working on it though. ;)

I'm trying to get an account validated through support.cdmatech.com, but their email validation service hasn't been working for days... Really need to find someone on the inside there. That's Qualcomm's support website, so that's where all the downloads are, and I'M HOPING where some stock SR boot images to flash in QPST will be.

EDIT: Made a minor discovery.. nothing at all substantial, but it eliminates the Any Cut step from getting the phone recognized with QPST with a working SR. Type *#7284# in the dialer and it'll take you to that menu. Just thought I'd share, because that personally was driving me crazy.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] skrambled:
A jig will keep your flash counter at zero for using Odin to go back to stock. However, flashing some custom kernels (such as DaG's cm7 kernel) or roms that include such kernels will trip the counter, even if done in cwm.

Flashing roms with stock or "stock-ish" kernels seems to keep the counter at zero.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
viperbjk from revskills has an account here on xda. found this evo thread where the guys put the phone into the dl mode: http://xdaforums.com/showthread.php?t=1188510

his post: http://xdaforums.com/showpost.php?p=16171089&postcount=292

and another one: http://xdaforums.com/showpost.php?p=17354853&postcount=357

cliffs: the op found a way to trigger the phone into the dl mode by using a serial to ttl board and 2 wires to hook up to 2 pins on the phone, but as far as unbricking they didn't go farther than that.

there was another member that did this to enter the dl mode (unverified, but pm'd him): http://xdaforums.com/showpost.php?p=16850335&postcount=353

also a very interesting thread about samsung captivate: http://xdaforums.com/showthread.php?p=16403783#post16403783
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Fortune090:
Oh wow. I had no idea the guys from RevSkills were already at work at getting these (msm8xxx devices) supported, haha. That's definitely awesome news!

And I'm also familiar with that Captivate thread. Previous phone was a Captivate and that topic was the reason I contacted AdamOutler a few days ago. ;)
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
i've pm'ed another active member of that thread, but he told me viper hasn't had any news yet :(
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
anything new, guys?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
a little update. we were able to force the phone into the dl mode by grounding one of the pins on the back of the phone:

http://xdaforums.com/showpost.php?p=23070603&postcount=87

i've also found a chinese forum where a member posted a guide on how to de-brick a phone (zte u960) from qhsusb_mode:

http://bbs.malshenzu.com/read-htm-tid-38591-page-1.html

http://bbs.malshenzu.com/read-htm-tid-41957-page-1.html ( Sales MultiDL tool guide)

they use an additional tool (Sales MultiDL) that backs up alot of .mbn and .img files that we don't have (yet), so i'm not sure if we can pull those files out of the phone manually, or what?

the files they used to flash:

anyone knows Chinese (google chrome translator is ok for basic understanding, but nothing more than that)? :)

i did pm the op of those threads to see what he thinks.

edit: we now have a dev section, please contribute: http://xdaforums.com/showthread.php?p=23078349
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] orlandoxpolice:
Any progress?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] aaronkuek:
help!!

Ya..i also waiting for it..anyone pls help..
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] nkamurlekar:
Guys, i bought USED phone with broken LCD and swapped it.... now if i connect the phone it is detected as - (qualcomm hs-usb qdloader 9008).... not sure why it is not detected as QPST...
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] nkamurlekar:
Looks like we have JTAG Brick Repair for Skyrocket... http://mobiletechvideos.mybigcommerce.com/samsung-galaxy-s-ii-skyrocket-brick-repair/
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] :
Jtag do not support i727 and t989 officially.

Thread about t989 support http://forum.gsmhosting.com/vbb/f63...comm-apq8060-beta-testing-1370391/index4.html

And good news - they made some progress with QUALCOMM CPU-s -MSM8260, MSM8660, APQ8060

http://forum.gsmhosting.com/vbb/f634/riff-jtag-wanted-check-inside-apq8060-jtag-support-1363243/
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] nkamurlekar:
not sure why you say there is no Jtag for I727 but i got email from mobiletech informing me of service availability for hard bricked phones.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] skrambled:
Ummmm...also the link you shared pretty clearly says Skyrocket...so yeah...

Anywho, I've never used a jtag service and hope I won't ever need one (could've used it a couple months ago though). Is this service from a trustworthy company/person? Don't know much about them...
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] connexion2005:
I offer repair for the i727. I am also the technician who worked with RIFF on this CPU and we have it working via JTAG.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] who_ohw:
This site has some very intersting stuff... http://www.anyclub.org

EMMC Factory image generation

QPST 2.7.366 is required for the operation.

Factory image generation:

emmcswdownload.exe -f factory.bin -x AMSS\products\7x30\core\storage\tools\jsdcc\partition_load_pt\partition.xml -s 4G -g 8M -p E:\build\emmc\;

Download factory image:

emmcswdownload.exe -i factory.bin -w G:\

factory image you can not use ext4 sparse image. and sparse image can only be download by fastboot. If you develop you own tools, you can support sparse image and don't need factory image for DataIO.

Connecting QPST over uart1dm in qualcomm android code

IN order to connect QPST over uart1dm please make the following changes

make the following changes.

1) in \build\cust\custsio.h

comment out

//#define RDM_USB_SER1_INIT_SRVC RDM_DIAG_SRVC

and add

#define RDM_UART1_INIT_SRVC RDM_DIAG_SRVC

2) in drivers\sio\rdevmap.c

add UART1DM_BM to diag compatible ports.

rdm_srv_dev_compat_tab[RDM_DIAG_SRVC] = (RDM_NULL_DEV_BM

#ifndef FEATURE_BT_SOC_UART_TL

| RDM_UART1_BM

How to generate the 8660_msimage.mbn

....

Almost got it to flash

---------- Post added 12th July 2012 at 12:23 AM ---------- Previous post was 11th July 2012 at 11:45 PM ----------

could someone please get me the partition info?

dd if=/dev/block/whatever of=/sdcard/stock.pit bs=4096
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] tjsooley:
http://xdaforums.com/showthread.php?t=1629508
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] lart2150:
I've pulled the partition info from my device http://lart2150.com/nightly/stock.pit
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] mikerowes69:
I had his same this.g happen. Your screwed. Gotta go to at&t for a new phone if you got the warranty or insurance.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] noiofnine:
I had the same issue after using Super_Wipe... now trying to find a solutions.

Seriously... wtf i have used super_wipe before with out any issues. but i downloaded a new one cause i deleted it from my SD_card due to CWM touch rendered my sd_card unreadable.

Anyhow... this new Super_wipe is what killed my phone.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] cdshepherd:
I'm not aware of a new super wipe for our phones. Can you link me to the zip you downloaded.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] xcrazydx:
Probably for a different device.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
Probably wiped internal sd card.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] cdshepherd:
That's exactly what I was thinking
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] noiofnine:
Damn it.. .yes. I was using my phone to download it and it was for a NexGen. WTF thats my issue.

But never the less I still cant get my pc to even load the driver correctly.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] xcrazydx:
If it says qhusb, it's done. Jtag it
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] cdshepherd:
She's toast buddy.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] noiofnine:
Well. that being the case then, I want this to be my "frankinstein" phone.

So What driver are you use on that is working?

I keep getting error code 10 from windows
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] cdshepherd:
What exactly are you talking about?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] noiofnine:
Ok I got the Error Code 10 worked out when trying to install the QHS_USB driver... was an outdated drive.

wow. 4.5 hours well spent.

Now that my laptop is able to detect the phone. Was wondering if you could post your backup file from what you mentioned.

I think if we "restore" using your back it may help the rest of us.

Please? Its asking for a QCN file?

Or if anyone knows in the Factory Image tab, you can choose a file. Looks like its defaulting to MBN...

Some files where included with QPST but not sure which one, if anyone would work.

Although they are not in *.mbn format, maybe one of the other file types?
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
Don't waste your time. This has been covered many times since. The above quote is of no use to you or anyone else with your problem.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] xcrazydx:
It's toast dude.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] darkspr1te:
Jam And Toast Sir?

I Have some Jam and butter for your toast, I have been researching and comming up with a possible debrick solution for this.

Maybe you can help me ?

According to anyclub.org all we have to do is get (for my model radio cpu ) 8660_msimage on to the phone's emmc and then the phone reboots into a mode where you can access the phones emmc as a flash drive at which point you might be able to flash back the main firmware.

Problem is there is a lot of conflicting information, for example when people state that the sdcard should be formatted the same as emmc for a phone to boot from sdcard they are talking about booting at the aboot.mbn or apps bootloader, your device and mine (SHV-E160) is not even getting past sbl1.mbn, or first stage loader (PBL is really first but that in ROM, it pulls sbl1.mbn from emmc and executes that, sb1.mbn then loads sbl2.mbn from emmc into ram(sbl1 has not setup the system ram and you have full access to device memory, prior to that you had a max of 200k for code), check its signature and executes that in RAM, then the other loaders are pulled in, tz.mbn, aboot,mbn etc

Now its my understanding from anyclub.org we only need sbl1.mbn, sbl2.mbn,sbl3.mbn,tz.mbn,rpm.mbn as a min on the emmc to boot into a recovery mode (of sorts, access to emmc as a sdcard)

So thats my goal, get to the emmc mode, problem is with my device i have no backups, it was bricked prior to me getting it, i further pushed it by shorting a resistor for the X0M boot control (google unbrickable mod ) whcih gave me the QDLoad mode, if i power cycled the device it would return to bicked mode, i then used MPRG8660.HEX file and QPST to write data to emmc, it's now staying in QDLoad mode all the time, which mean i was able to write Data to the PBL, execute it and then write further data to the emmc.

What i need now are dumps of working SHV-E160 model phones (and any samsung based MSM8660/MDM9600 devices) to come up with a possible debrick solution.

Regards

Darkspr1te
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
You can find zte firmware images (msm 8660) online that have more files than just that .hex. if you feel adventurous, you could try those via qpst.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] kr3w1337:
This has been extensively covered before. You're not going to get it, just go get a jtag service.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] mrmiddl:
I don't know why everyone is saying screw it just jtag it. He obviously wants to figure out how to do it without having to ship his phone off. plus some other information could be gained from his work. imagine if the devs who create the unlocks and root for phones, just say "ah screw it dude, just use the stock software".
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] darkspr1te:
Actually, I got it, I've debricked my SHV-E160L, go onto you tube, search darkspr1te, or check http://xdaforums.com/showthread.php?t=1914359&goto=newpost

---------- Post added at 07:57 PM ---------- Previous post was at 07:49 PM ----------

Actually I Did figure it out despite the use of the four letter word "JTAG"

The basics is,

Find the boot reverse resistor, short to ground and activate QDLoad mode,

Using QPST/emmcdownload you flash 8660_msimage.mbn to the phone, the phone re-enumirates as a sd-card,

next step no so easy with support from other helpfull users and backups

you write a master boot record and extended boot record, write your booloaders to the correct disk offset's

reboot phone

done,

this has been a 90% recovery so far, my last hurdles are

access modem flash,

fix meid/imei

but did recover 100% of data and i have a full flash backup to toy with and can reboot backto my backup (3 /12 hours to restore 16GB)

i can also reset most download (i know of) counters in that process.

some of the doors that could open up with this is unlocks, i have write access to emmc sans android/bootloader blocks

Still want me to JTAG it ? i do have one.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] xcrazydx:
Sounds promising, good job man
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] Ljdd:
Ive been reading the forum and seeing about un-hard-brickingwithout JTAG, if theres any update, can someone give me full instructions, I know I know I should read, but I just need instructions.

How I hard-bricked mines, I was flashed it back to stock for a fews. I wanted to go back to cm10 Liquid Rom, but I didnt have the recovery, so, I used ODIN and I didnt double check, when I clicked start, I noticed the repartition was already checked. I know that its not suppose to be checked, when I saw how that it couldnt come on, I knew I hard-bricked it. Right now, I have the battery out. I am willing to do it myself, I saw the conversation about using a program to get into download, I dont know, I kinda got dumbed by the conversation, but please help.

thank you
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] RussianBear:
refer to this thread: http://xdaforums.com/showthread.php?t=1914359&page=19
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] xcrazydx:
It's toast, nothing you can do but send it for jtag or warranty it.
[AT&T Samsung Galaxy S II Skyrocket SGH-I727] :
http://xdaforums.com/showthread.php?p=31606955