yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy Note I717] darkspr1te:
Hi Ya,

Ok let me explain in layman terms for other readers as to whats going on.

"Where we were":

Imagine your normal android bootup is a group of security guards on the way to a party you have a ticket for, each guard at a gate looks at your voucher entry pass all the way to your ginger bread party, each boot is normaly the same, you get to the end and have your gingerbread party(normal phone operation)

"Not bricks of candy, but clay"

Where we are with a brick, as before we have the guards, each guard talks to the next before he lets you in, in our case the guards number 2,3,4 are not answering the radio so guard one says, VIP only to get entry, sadly we dont have a vip pass.

"change the problem to equal solution"

So we cant get past guard one, so we replace the guards so guard #1 has some one to talk to(via baldy scripted indirect means of retired staff ), problem is, like any bad theist of Hollywood we chose the dumb-a$$ guys who don't know where to direct you (where we now are with a 8660_msimage.mbn flashed device)

"Dont scream and I give you ice cream"

Our dumb-a$$ guard is there for one reason, we only need them, to get inside, once inside, we replace them with new replacement original guards and our tickets will now work again and we get properly directed to our gingerbread party. Safe And Sound

So if my attempt at teaching and humour has not offended anyone, Onto the net step
[AT&T Samsung Galaxy Note I717] darkspr1te:
DD'ing your device

Ok, Now that you have flashed your bricked device with the default 8660_msimage.mbn device file mentioned before in this thread we now have a disk drive available.

Data recovery 101

Rule 1# Backup device , work on backup of backup first.

We are going to be breaking down the entire backup from your device, this is a needed step and each device has changes in the steps, so generic i will be but only to my understanding.

What we have done is written a new bootloader and partition table to the device (boot loader = intelligence of guard, partition table = gate )

But this new setup has over written our old setup which we now need to rebuild and then replace the aged data on that boot the device with new data,

From here on, please use a Linux platform, I've tried this in windows, and the data does not compare, dd via cygwin has a issue i cant resolve.

So boot to your linux based device supporting USB Host (yes bro, your NAS can do this :p )

And I now need to shift to my ubuntu laptop so i can copy and paste code and also upload files.

Brb,

darkspr1te

p.s if anyone feels i am talking 'dumb' about this, i am sorry, i am also trying to educate users who are also just curious.

p.p.s If samsung and other fruits would just allow us to backup this data the day when we turn on the phone, restore any time

(their a$$ is more important hence the "do you agree" buttons) <- Last rant
[AT&T Samsung Galaxy Note I717] darkspr1te:
Confusing

Lol, does any one else have this issue with their hobbies
[AT&T Samsung Galaxy Note I717] RussianBear:
lol all the time.

question (s): is the emmc mode (usb drive) stable for you? can you be in it for an extended period of time. that's one of the reasons we were not able to explore more of this mode (at least I wasn't), because the sensation was losing it after 8-10 seconds.

another, can you access the emmc mode via putting the phone in a regular download mode? i don't think we could with sensation, had to brick it first.

pardon my ignorance, just don't have time to read the whole thread yet.
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
thanks

Hello darkspr1te,

And once again thank you for your time, I know that you have a lot of work. So, I will be waiting your instructions and I won't rush because I want to achieve your success .

I think that your example is easy to follow and help me (and others) to understand the process.

In this moment, I have the device mounted in backtrack supporting usb host mode and I have the original and other backup to modify to avoid any problems.

I will be waiting for the next steps to continue with the process.
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
error /dev/bloc/mmcblk0

I run the python script with the correct files (patchxml, partitionbin) and it run the MBR function but when call the ebr function it could not recognized the /dev/block/mmcblk0

error: device not found

^CTraceback (most recent call last):

File "script.py", line 54, in <module>

ebr()

File "script.py", line 30, in ebr

os.popen("adb shell su -c 'dd if=/dev/block/mmcblk0 of=/cache/ebr bs=512 count=1 skip=" + str(offset+n) + "\'").close()

Also, I check the /dev/block and it show me the phone as 8:2 to 8:23

Could you help me?
[AT&T Samsung Galaxy Note I717] darkspr1te:
The python script from the chineese A820l site is only valid for a working device while you have access to adb mode. it is not valid for a bricked device as we dont have access to adb or shell yet.

I will upload the guide plus valid mbr/ebr copies tonight. I am just having a issue as it seems my partiton table (mbr) is not alinging right, i think this is related to the issue of no baseband, i mean i think it's my dumps of partition21and or partition14 are off sector and not alinging. i need to do new dumps and chekc them using a hex editor looking for the magic key start of partition marker.

regards

darkspr1te
[AT&T Samsung Galaxy Note I717] darkspr1te:
A video of where i made the modification to the galaxy note and a video of me activating QDload mode

Assembly

http://youtu.be/voldEx30vM0

QDLoad

http://youtu.be/BLDqtNaK7tY
[AT&T Samsung Galaxy Note I717] darkspr1te:
I would say over 3 hours to backup the 16GB emmc to my hard disk a good duration and had had no stability issues during the copy operation in both directions.

I have to brick it to access emmc mode or dd the backup i made of the emmc partition and first few megabytes of the emmc data when ive flashed it with 8660_msimage.mbn back to a working device, causing it to use my new bootloader
[AT&T Samsung Galaxy Note I717] E:V:A:
Is that Adam's "unbrickable mod" or something else?

Can you post a link to what you followed or explain what connections you made for the "wire"?
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
flash the device

Hi darkspr1te,

I'm looking your post and I don't know how to

"flash the device with our generic bootloader/parition table and the info changes , but we only over-wrote a small part of the start of the emmc, most of which is in the mbr (master boot record) and partition 1 ( /dev/block/mmcblk0p1) called SMD_HDR"

Because, I 'm reading other post

http://xdaforums.com/showthread.php?t=1884417&page=2

for this process but I not sure about it.

The videos that you post are really nice.
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
help

Hello darkspr1te,

I'm looking more information about the emmc partition info for gingerbread

http://processors.wiki.ti.com/index.php/Android_gingerbread_eMMC_booting

However ,after make the copy of the bin "dd if=/dev/sdb of=/mnt/2tbhdd/shv-e160l.bin bs=512" files.

:confused:I 'm not sure what to do because the script use adb for create part of the partition info. But, as you said before I can use adb because the phone is a brick. Could you give give the procedure, I have to do from this point?

thank you, I will be waiting for your help.
[AT&T Samsung Galaxy Note I717] darkspr1te:
I am not sure if it is adam's mod, as i cannot trace the resistor i am shorting to ground, i dont think it's reversing the boot order as adams mod does though, it's stopping any boot from emmc (but if i have a sd-card in with the 8660_msimage.mbn written to it the unit does not boot QDL at all)

I was looking for the X0M resistors to do the boot reverse , dont have a clear BGA diagram for the 8660 but from what ive seen the connections for the X0M are bottom right of the chip and the resistor i am shorting is top right, From what i am seeing behaviour wise with this mod is total access to the emmc is cut off for reset only (could be a clock signal or similar and without the clock it cant read.)

I will be honest in that i would not have started looking for it without reading adam's fine work, but i dont exactly know what i am shorting, the resistor is a 100k for reference.

I will take some macro shots of the board just as soon as i have the time to setup my camera equipment.
[AT&T Samsung Galaxy Note I717] darkspr1te:
Hi,

I will post this info tomorrow, the full partition tables plus all the files that ive used so far, i have family commitments tonight so am just doing some quick replies.

darkspr1te
[AT&T Samsung Galaxy Note I717] E:V:A:
Here's some more info-goodies for you Samsung owners...
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
waiting ...

I hope that darkspr1te, could give a hand soon.:silly:
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
its alive!! its alive!!

Hi darkspr1te,

I used your technique and my galaxy finally come back to odin mode. Thank you so much. I will begin to look for the proper firmware for my phone. As soon as I install a firmware, I will post any other things regarding the phone operation.

I will in touch, and thank you for your help.:good:
[AT&T Samsung Galaxy Note I717] darkspr1te:
Yes I am sorry about my layout, i struggle to put into a format what is going on in my head, :cyclops:

I understand smd_hdr.mbn is a header, but a header to what?

smd_hdr could be samsung mobile device header, but what data did it contain before i botched it.

Also why can i not find nv_data.bin on the samsung? i can find keystr though and bt.txt

i did find a post with the same question else where but no answers.

I was going to post the script as text but forgot, lol, thanks for pointing that out.

Also the script is there for anyone to alter and reuse just thank the groups who provided the input.
[AT&T Samsung Galaxy Note I717] darkspr1te:
@tyllerdurdent , i am glad i could help. please let us know if your imei is correct after this. do you get signal ?
[AT&T Samsung Galaxy Note I717] RussianBear:
I was able to change my sensation's imei via simple dd commands and hex editor. The imei was stored in several partitions. Do you guys have a partition layout that describes what goes on which partition?

Also, you can download and load back a qcn file with your nv items via qpst diag mode. Not sure off it's the same way for Samsungs as it is for HTC. Cdma phones use that as their backup, not sure if it would be beneficial for gsm phones.
[AT&T Samsung Galaxy Note I717] darkspr1te:
I am not sure the problem i actually have is the IMEI now, it seems i cannot talk to the modem side of the ms8660,

ive tried loading manually the /system/bin/ks file and it fails,

the imei is ment to be in mmcblk0p14(efs.img) bit in the mount command it says it's mmcblkp21 is mount to /efs and thats labeled DEVENC
[AT&T Samsung Galaxy Note I717] RussianBear:
Can you access recovery and flash the modem from there?
[AT&T Samsung Galaxy Note I717] darkspr1te:
I can flash different radios, i only have i717 radios on hand, depending on which one the system either goes very very slow or it reboots just before the U+ logo, right after the blue boot bar.

current build is KoXDA.Teamleader_V1

Kernal: 2.6.35.11_E160
[AT&T Samsung Galaxy Note I717] RussianBear:
Can you flash a complete ruu?(or whatever Samsung calls their firmwares)
[AT&T Samsung Galaxy Note I717] E:V:A:
Looks much better now!

SMD = Shared Memory Device

SMD is part of the internal "IPC"-like protocol used by all subsystems to communicate with each other on the board level. You can of course participate in this communication via various debug utilities, that are not available to us, so don't ask me. There is an extensive amount of code addressing all the various SMD functionality in the CodeAurora repository for the "msm" sources.

I don't know where or how you got that header file, but it probably refers to some binary header structure... I don't see why you would need that at all??

Sorry, I don't understand this sentence at all. You need to do some reading up on your USB / UART understanding...
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
Update

Hello darkspr1te,

My phone is working, however I have the same errors that you have the IMEI lost and the baseband UNKNOWN.

I will look more information about this issue and I will let you if I find anything useful.

:good:
[AT&T Samsung Galaxy Note I717] darkspr1te:
UART Via USB Pins

Hey All

So i tried the 150K resistor between ID and GND on the micro USB adapter,

Here is the output

Android Bootloader - UART_DM Initialized!!!
[VIBETONZ] ENABLE
[VIBETONZ] DISABLE
HW_REV = 9
mipi_init : status = 1
HW_REV = 9
start init_charger
smb328a_init_charger : is_reboot_mode = 0, vcell = 3707
check valid dcin (0x33) = 0x0
no dcin, skip init_charger
fuelguage : soc = 31%, vcell = 3707mV
fuelguage : rcomp(0xff1f) ==?? 0xff1f
2288 = ( 370700 - 360531 ) * 22509 / 100000
HW_REV = 9
reboot_mode = 0x6b4ace14
do key check
HW_REV = 9
enter normal booting mode
AST_POWERON
HW_REV = 9
HW_REV = 9

This is the only output so far, after the last HW_REV statement the is no further output.

I dont know what key check is yet, so far sending ASCII back does not stop the loader.

If i use 510K i get power on as well, 150K requires a power on but 510K does not.

darkspr1te

EDIT: key check is which recovery buttons held down, recovery mode gives all output until recovery menu using a rooted kernel.
[AT&T Samsung Galaxy Note I717] E:V:A:
I have to go right now, but will be back later.

Your smd_hdr.mbn is probably your modem file (~51 MB) + 1 MB (of "something"). I have no idea what this something is at the moment... Do some kind of binary comparison of this file with all other partitions, and perhaps... (BTW. Modem files are always copied around on various partitions...as I will explain later.)

Also, please edit and reformat ALL your previous posts, I keep on reading them over and over again, trying to follow what YOU did and got, versus what other people did, and it gives me a headache!

I'll get back to you...
[AT&T Samsung Galaxy Note I717] darkspr1te:
E120 files

http://www.sendspace.com/file/6hnvpz
[AT&T Samsung Galaxy Note I717] darkspr1te:
Will carry on with the smd_hdr dissection, i have posted the E120 files, not sure if the help anyone. for tonight, its rest night.

I have redone some posts, let me know if further edit's needed
[AT&T Samsung Galaxy Note I717] darkspr1te:
I am able to flash using a PDA.tar file ( complete rom with modem/application software but no bootloader )
[AT&T Samsung Galaxy Note I717] darkspr1te:
Serial & Uart

Hi All

For those of you that want to access the serial port and dont have the solder skills then go here

https://wiki.mozilla.org/DHylands_SGS2_SerialAdapter

full build/parts list on that site.

I can confirm 150K and 510K resistor provide the serial output.
[AT&T Samsung Galaxy Note I717] E:V:A:
For further details about Android partitions, I have just started the partition mega thread:

"[DEV][REF] El Grande Partition Table Reference"

Right now it only contain mostly info from Qualcomm devices, but hopefully there will

be more from other HW OEMs.

Enjoy!
[AT&T Samsung Galaxy Note I717] E:V:A:
Did you figure out what was that "smd_hdr.mbn"?

Here they say:

But I have no idea if its related...
[AT&T Samsung Galaxy Note I717] tyllerdurdent:
files required by darkspr1t3

Hi darkspr1te,

Please post the script for the partitions that you require and how I have to connect the phone to acquire them and I will post the resulting files. :good:
[AT&T Samsung Galaxy Note I717] darkspr1te:
So far my research has not returned anything of use, almost all google searches now come to this page (sigh) and my copy of the smd_hdr.mbn is tainted with data from 8660_msmimage.mbn so thats no help, past the 8660_msimage.mbn file is data but nothing in text of use.

So far no one has come forward with dump either of the files.

I have been following your thread on activating modem diagnostics , using the accepted rooted stock files i can activate the U+ LTE menu and i have the UART/USB options for PDA & MODEM but nothing connects, also I've noticed (not sure the reason) that when making changes via the IO menu my PID changes between 6860 and 685E, but no programs (CDMA workshop, Revskills, QPST,QXDM) will connect to any on the ports that show up, when UART is PDA & MODEM is usb i actually have two modems installed and two comports but alas no data flowing via those ports.

Interesting note, Before i could flash i717 bootloaders to the device and the odin counter would change, now it's not, i also have to swap between odin3_1-85 and odinV3 sometimes as each will say it's flashed then reboot but in fact nothing has changed.(maybe i should build update.zip's and let recovery mode flash it)

also some flashes will not even start untill i have MY pit file selected ( the one i recovered from the device) but if i select another pit file odin fails, I cannot seem to get hiemdal to function at all

I want to finish polishing up a script to copy tyllers sbl3 & rpm sections as i know mine are tainted, in fact...

I just have had a idea, on using only i717 bootloader files when i run my debrick on my device. (my current recovery involves using sbl3,rpm from another device, maybe thats causing tz issues and hence the modem is not running correctly or not fully booting, not sure, it's a theory )

Will let you know if it turns up anything usefull.

On a side note, if i could get some dumps of the smd_hdr i could figure it out i am sure, but no one has been willing to help out with dumps.

ps. i think i might be learning Korean through osmosis.:D
[AT&T Samsung Galaxy Note I717] darkspr1te:
Progress, The odin counter is working again, I used only i717 bootloader files, first boot ( i held vol down+home) and the odin counter was at stock rom, first boot into android got as far as lock screen but rebooted when i unlocked it.

It does not vibrate just before boot as it did before, i realize it's not exactly the same hardware, but it's proving/disproving theories.

I think that the bootloaders as a whole per device are matched packed and i cannot swap out the parts without breaking a chain of trust or hardware tie in ( hence vibe before boot no longer working)

I am currently running ABOOT_SGH-I717M_I717MUGLA2_user_CL875155_REV00 files as my boot loader.

I dont have a i717 full rom handy so i will put one on download and test with the 160 i have on hand.

I also now have to build update.zip files of my own so i can flash bootloaders in and out as odin does not let me, i can via root how ever

Additional info: I didnt post this right away, i went back and replaced each part of the i717 loader one by one to see it's effect, using all i171 boot files except aboot.mbn stops odin counter. I will retest this again to confirm.

darkspr1te
[AT&T Samsung Galaxy Note I717] E:V:A:
What do you mean with "tainted with data"? (How do you think that happened?) I'm thinking that perhaps it should be there, unless you wrote it there yourself by accident.

Those are Samsung serial drivers if I recall right. Also, you're doing so many things at once, I lost track of what exactly are you trying to do (above)... The MODEM=>USB will get you a direct connection to Modem part of you device. The thing is that for the MSM, the modem (CP) and application processor (AP) is a SoC, so it may be that you should just keep it in Modem=>UART and PDA=>USB. QPST should be able to see that. Also, did you install all the drivers? The Android driver package contains a huge list of drivers...) The second modem you see, is probably that on your PC and not on the phone... (Do check!)

Tell people where and how to find/extract that file, and perhaps someone will dump it to you.

That's right, and that's why you see a lot of people bricking their devices when messing with the Secure Boot 3 bootloader chain.

What was surprising, as I see it, was that you said (above) that you replaced only RPM and SBL3. How far did that get you? If it worked at all, that is cool, because then the two bootloaders in those devices are signed with the same cert (and you might be able to get away with that.)
[AT&T Samsung Galaxy Note I717] darkspr1te:
We have baseband,

I finaly got the baseband to be reported,

Currently E160L.FH02.1442 as seen on the attached screen shot.

I am now going to do further testing, to see if all is fixed but i though i would upload a progress report.

*#06# still does not give me a imei.
[AT&T Samsung Galaxy Note I717] darkspr1te:
Confirmed:

voice is now working, still no imei number but QPST RF NV editor now connects, I have been able to make a call. Will move onto data tests now, when i've finished testing the device as a working unit i will do further posts.

EDIT:-

3g working better than my iphone4 in current area, signal good and i can make and receive calls without issue.

repair also survived upgrades of PDA file but baseband remaind at E160L.FH02.1442.LT using to upgrade. We only have 4g in our area so i cant test any of the LTE side.

But for main purpose of this thread can now be marked solved.

Menu's not available before or menus that produced a blank screen now allow me to change functions,

example *#9090# now allows me to access service mode / diag config

i can select the following options now.

MDM USB/UART
MSM USB/UART
DBG MSG ON/OFF

GPS is not giving me a great deal of accuracy and the device seem to be using assisted GPS or wifi GPS.

Any one know of confirmed GPS dial codes for working on the GPS ?

There is still one icon i dont know the meaning of, refer to the baseband picture before, its the phone with a line through it and what looks like a panel behind the phone symbol.

I was thinking it's airplane mode but even though i now have full gsm/3g it's still there, possible it's to do with the LTE side, i dont know.

Regards

darkspr1te
[AT&T Samsung Galaxy Note I717] darkspr1te:
As you can all see, 3g and good signal.

Seems to have a lot of lag since the baseband woke up .

Before being able to send the picture the radio side crashed.

It returns within two minutes but the lag is very bad.
[AT&T Samsung Galaxy Note I717] E:V:A:
Poor GPS on Samsungs are almost always due to poor HW ground plane of GPS antenna connections and a crappy configured /etc/gps.conf file. (?) If your dialing codes doesn't work, you need to change your ServiceMode APK to the one that suits your model... (SM app is closely connected to ril and modem versions.)
[AT&T Samsung Galaxy Note I717] darkspr1te:
Hi all

on the dialing codes was just baseband fail, as soon as i figured out the baseband issue those menus started to function. Gps has improved a great deal since i did the gps dialer reset, i will include a verified list of dialer codes soon, i will look further into gps issues once ive completed testing of the debrick.

I am looking for any user who has bricked that wishes to test my solution.

Pm or post here. I fully intend to publish all findings.

This solution will work on all devices in qdload mode.

But my initial work will be this device.
[AT&T Samsung Galaxy Note I717] darkspr1te:
I will publish my initial data for the partition info as a alternative as its reconstructed data. My debrick script will offer the ability to backup so users can upload the original files to here/there should they wish. I don't code in windows so any dev wishing to port let me know. Its only adb commands nothing great.