yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy Note I717] twiningstea:
Hello Folks!

Can one provide me with working link for recent Qcomm documentation leaks.

I am especilay interested in everithing related MSM 8x25.

I have MSM 8625 based mobile and want to understand partition structure and boot process.

Kind thanks!
[AT&T Samsung Galaxy Note I717] twiningstea:
Hello

I have MSM8625 based phone.

I have following files from QPST ROM file set:

- 8X25_msimage.mbn

- MPRG8X25.hex (and formatted to bin analog)

- partition.bin / partition.mbn / partition0.patch.bin

Basicaly i need to port this brixfix tool to be able to recover phone from brick.

I have following trouble and wounder if one can help.

Script qdload.pl expects to see created TTY for USB conected phone

I put phone in Qcomm download mode by Reset+VolumeDown (or Power On + VolumeDown) but this TTY is not created

meanwhile lsusb shows 05c6:9006 Qualcomm device

Not 05c6:9008 but 05c6:9006 device.

05c6:9006 is definitely Qcomm download mode device cause i am able to write to it by QPST from Windows succesfuly.

Any idea how to get TTy created?

And it is strange that 05c6:9006 created instead 05c6:9008.

Do i need any special software or driver installed?

Should i install ADB and other Android tools from Google?

Kind thanks!

p.s.

loaded usb/serial module still no TTY got created :(

Qcomm devoce is presented in /sys/bus/usb/devices/ file structure but there is not TTY there that qdload.pl looking for by glob "/sys/bus/usb/devices/$device/$driver/tty*";

p.s.

Ok it seams that qcserial loadable module should create this TTY. will try this evening to insmod it .......

These TTYs are always rhe mess for me :)

[ 1511.796072] usb 1-4: new high-speed USB device number 2 using ehci_hcd

[ 1512.008462] usbcore: registered new interface driver usbserial

[ 1512.008492] USB Serial support registered for generic

[ 1512.010621] usbcore: registered new interface driver usbserial_generic

[ 1512.010626] usbserial: USB Serial Driver core

[ 1512.022493] USB Serial support registered for Qualcomm USB modem

[ 1512.022531] qcserial 1-4:1.0: Qualcomm USB modem converter detected

[ 1512.022827] usb 1-4: Qualcomm USB modem converter now attached to ttyUSB0

[ 1512.023180] usbcore: registered new interface driver qcserial
[AT&T Samsung Galaxy Note I717] twiningstea:
Since i am still unable to find "MSM8x25 boot architecture PDF" can one coment mentioned in QPST rawprogram0.xml and patch0.xml file partitions/files:

MBR0.bin

qcsblhd_cfgdata.mbn

qcsbl.mbn

fat.bin

EBR0.bin

oemsblhd.mbn

oemsbl.mbn

emmc_appsboothd.mbn - application cpu boot files

emmc_appsboot.mbn - application cpu boot files

recovery.img - recovery image

persist_1.unsparse - persist_3.unsparse

boot.img - kernel/initrd ramdrive

system_1.unsparse - system_7.unsparse - operation system applications

cache_1.unsparse - cache_12.unsparse

splash.logo

udisk.bin

There is only 8960_Boot_Architecture.pdf avalable in Internet but described 8960 boot process not quite coresponds to MSM8625 partitions that i have on my phone.

P.S.

Found [ MSM8225 AND MSM8625 SIMPLE INTRODUCE (paswd www.51mobile-tech.com ).pdf ]

document at http://www.51mobile-tech.com/thread-9700-1-1.html

but it has only 26 pages instead of 130 mentioned in Table of Contents.

Does one have this doc in full version?
[AT&T Samsung Galaxy Note I717] kamrul045:
Wrong QCN restore phone stuck on in boot animation

Today I restored a wrong QCN file to my E160.

Now it is stuck in boot animation.

I can go to download mode.

I flashed the device several times but nothing solved the issue.

can I restore my original QCN file?:crying:
[AT&T Samsung Galaxy Note I717] nhatnn:
Can any one show me how to enter download mode again or qdloadmode

Cause After i flash full E160k firmware to my i717m then a can't enter download mode again

My phone screen now is blank

bust device till turn on and my pc recognize that 1 mtp samsung device and 1 samsung usb modem device
[AT&T Samsung Galaxy Note I717] darkspr1te:
What does it show up as under Linux ?

Sent from my SHV-E160L using Xparent ICS Tapatalk 2
[AT&T Samsung Galaxy Note I717] Ral126:
Hi) I`ve got nice brick called - Motorola Razr M Xt 907.

It is in QD Loader, and the chipset is MSM8960. I have read the hole branch, but can`t find the answer. Do you have any ideas about unbricking it?

PS. Sorry for my English. I`m from Ukraine)
[AT&T Samsung Galaxy Note I717] chikorita:
Hi,

I had the same problem with my xt907. I have a non-bricked one now... [MENTION=4864296]darkspr1te[/MENTION], can I just run that python script to dump the required stuff?
[AT&T Samsung Galaxy Note I717] Ral126:
Did you make or found backup of working bootloader?
[MENTION=4864296]darkspr1te[/MENTION] after reading your first post i have understand that i have to make few step`s:

1. find someone with working XT907 and make backup with the help of yours utility (backup.bat)

2. after getting huge number of files make an archive XT907_backup.zip - and send it to you

or

2. using utility bin2hex - make hex file for uploading it through a QPST software downloader

am i right? or something wrong?
[AT&T Samsung Galaxy Note I717] chikorita:
Hi,

As I understand it, someone with a working xt907 runs the script, which dumps a section of internal storage containing the required file. This is then sent to darkspr1te for analysis/trimming. Or maybe the script can figure it out, I don't remember. Anyway you then get two files, one of which you need to run through hex2bin. Once that's done, you can upload them with qdloader and hopefully have a working phone. I'll check out the backup script and report back soon. As far as my old one is concerned, I wasn't able to find a working image for it. I should be able to get the required stuff off this one though.

Never lose hope :)

Edit: Just tried running the backup script. Got this python error:

Traceback (most recent call last):

File "..\getpartbin.py", line 53, in <module>

mbr()

File "..\getpartbin.py", line 16, in mbr

partition = dict(zip(('boot', 'id', 'start', 'size'), unpack('4I', buf)))

struct.error: unpack requires a string argument of length 16

What'd I break?

edit2: Here's what backup.bat gave me. Although getpartbin.py didn't work, maybe something can be figured out with this?
[AT&T Samsung Galaxy Note I717] darkspr1te:
I need to clarify some things here for users wanting to unbrick.

Each device ( msm8960/msm8256/8660) has its own sd-card boot loaders (xxxx_msimage.mbn/xxxx.hex) , to get the device into sd-card mode where the brick fix actually restores info requires these files, sadly if it's not posted i cant help there.

Without this first step functioning we can no way restore the partition table and boot loaders.

my backup script is very limited, i had planned on expanding it but work has kept me away from that.

bootloaders and associated files can be extracted manually using dd, the trick is to work out what each partition is and does,

we know some msm devices will not accept a unsigned hex file let alone the partition file (mbn)

getparition.py is not my work, i am sadly not a python guru (yet, i guess) there are other programs ive been working on, i was ment to hand them over to another dev, sadly work.... yip in the way again.

My suggestion is such, first see if the device will load and execute the .hex file, without this we will never have access to the device(this can be seen when the device changes its usb ID) if it just reboots or hangs then chances are its signed code required (qfuse blown) .

also try via the qualcomm windows tools, our qdloader is far from complete.

further info is covered under qualcomm bootloaders & hacking by E:VA, he after all has been they key in helping me understand my research,
[AT&T Samsung Galaxy Note I717] AgtPower:
Hello,

I'm here with a SHV-E160L, which has worked on stock rooted ICS for a few weeks, then randomly crashed during it's use and since then stuck in a boot loop. I tried flashing various ROMs, all without success. ODIN always 'fails' at NAND write start.

I think it's either a very bad kind of brick, or there's something wrong with the flash memory (and I hope it's not broken). I have a 32GB model and it seems to be impossible to find a .PIT file for this phone :(

Since I cannot flash anything on the phone, most recovery methods have failed.

I tried running the Unbrick Script, but it adb says device not found. What am I doing wrong? I'm running windows 7 x64. I'm not an expert on this, but I can try and follow instructions....
[AT&T Samsung Galaxy Note I717] starteam:
Hi! my phone is LG Optimus G Pro and korean F240L;it is bricked ,when connected PC,apear "QHSUSB_Dload",after installed its driver,become “QualcommHS-USB QDLoader 9008 (COMx)”

I want use QPST emmcswdownload fix it,but how can I get the HEX file of APQ8064T(SnapDragon 600), MPRG8064?.hex .

Who can Tell me ?
[AT&T Samsung Galaxy Note I717] rroy915:
Bricked Galaxy R (SHV-E170L) (MSM8960)

I recently bricked my Korean Galaxy R (SHV-E170L) trying to flash a stock rom before attempting to flash CWM. I did this via Odin according to the thread at this link:

http://xdaforums.com/showthread.php?t=1864282

When the device is in download mode it shows up as msm8960 in windows device manager. So I'm wondering if I can use the brickfix tool to debrick my phone.

The device boots into download mode immediately after turned on and is unable to boot into recovery mode. However, the mode it boots into is not the usual download mode with the green android robot. The emergency firmware recovery image is displayed instead. It's the one with the icon of the phone

It looks something like this except that the language is in Korean.

The text on the top left of the screen reads:

ODIN MODE

PRODUCT NAME: SHV-E170S

CUSTOM BINARY DOWNLOAD: Yes (13 counts)

CURRENT BINARY: Custom

SYSTEM SETTINGS: Official

QUALCOMM SECUREBOOT: ENABLE

I'd like to know if the phone can be recovered. I'd like to not damage it beyond repair if possible, assuming it's not already unrepairable.

EDIT:

I ended up flashing a ROM from http://www.sammobile.com/firmwares/

My phone was at Jelly Bean 4.1.2 before it soft bricked so I used Odin with default settings to flash the Korean firmware of 4.1.2 (March 2013 - E170SKSJMC1, E170SSKTJMC1) from the website.

After booting into recovery (Hold Vol Up + Home + Power Button as soon as I felt vibration upon starting phone) I selected the option wipe data / factory reset.

It took a little while to start up for the first time after this but eventually it did boot up again into setup.

I was only able to flash the Korean Jelly Bean ROM. The other ROMs were incompatible and would give me unsupported device or a sb2l error even though they were for the same device.
[AT&T Samsung Galaxy Note I717] kshitijgandhi:
Pantech Burst Bricked - Need Help

I have 2 Pantech Burst phones with me

Both belong to my friend

1 of the phones is bricked - my friend bricked while flashing

The phone does not start at all

when connected to computer it says QHSUSB_dload device

it is also MSM8660 processor

on searching about this I have reached this thread

as far as I know, the partitions of internal storage are misplaced/deleted

so is it possible to copy them from the working phone to the bricked one???

I can upload stuff (necessary files/backups) from the working phone if you need

Your work seems to be a bit technical

but I will do whatever is necessary - i am ready to read a lot of stuff

http://xdaforums.com/wiki/Pantech_Burst

this link also shows the partition list - if it is needed.

I also read a lot of talk related to JTAG?

also if i dont find any solution, then the phone is useless, because there is no Pantech service centre in my country

all help is appreciated

Thank you
[AT&T Samsung Galaxy Note I717] YoungJediCote:
G'day,

I have a bricked T989, has anyone had any success using this tool to unbrick that model?

I only have 1 unfortunately and no backups.

Any information would be greatly appreciated.

Thanks!
[AT&T Samsung Galaxy Note I717] SouL Shadow:
If it's an msm8660 device then you should have no problem recovering it!

But first you will need to gather the firmware images from the working phone you have using one of the included tools. I've been away for a couple months and am not 100% sure exactly what program you'll need to run. Best to wait for Darkspr1te to reply.

In the meantime, I can tell you the general steps that you'll need to take.

1) gather emmc/nand partition info from working phone. The exact data will need to be pulled from the working phone by one of darkspr1te's programs. (We need the exact sizes and physical locations to later write to)

2) gather a copy of the custom Qualcomm bootloaders from the working device OR from an OEM firmware package. These files might include sbl, sbl1, sbl2, sbl3, tz, rpm, amss, aboot, hboot. They might ship with filename extensions such as .mbn .img .nb0. Same things, different names (at least, as far as we are concerned).

3) once the above are completed, the other program in this bundle can be used to connect to the bricked phone and write the bootloaders to the exact partition addresses.

4) once step 3 is complete, then the OEM's bootloader can be used to reflash the rest of the device.
[AT&T Samsung Galaxy Note I717] SouL Shadow:
getpartition.py

Hey Darkspr1te,

I've been learning python and trying to fix getpartition.py. I rewrote about 25% of it and it seems to be 100% working for me...

except now i'm running in to a problem getting dd to access the last EBR on the EMMC.

the address (as confirmed by fdisk/sfdisk/etc...) in question is 8323071 (dd bs=512 count=1 skip=8323071).

/system/bin/dd reports a seek error, /system/xbin/dd just runs for ever, and any address above 4194303 has the same result.

This region starts in partition 37 (of 38) on my HTC Evo 4g LTE (jewel), it's an ext4 partition containing /system and partition 38 is a fat32 partition (internal sd card)

The script itself works fine, so I'm gonna throw in some error handling for this edge case and i'll post it here shortly. :good:
[AT&T Samsung Galaxy Note I717] SouL Shadow:
getpartition.py version 0.2.0

Version 0.2.0 of the rewritten getpartition.py is attached to this post. Just remove the ".txt" from the end.

THIS IS NOT A STABLE RELEASE. THIS IS A DEVELOPMENT VERSION. DO NO DEPEND ON THIS FOR ACCURATE RESULTS. yet...

This script is NOT fool proof. It assumes that you have a working adb and a connected android phone. However, it won't hurt anything either.

You have been informed and warned. Enjoy!
[AT&T Samsung Galaxy Note I717] darkspr1te:
Hi,

sorry all but I've Been snowed under with work and personal life, I hope to start getting back into phone work next week, am due time off as I've worked most weekends for past 6 months. I've also traveled a lot so not been in front of my dev box.

Anyway fingers crossed I can get back into things next week. Unless another sever is ready for comission .

Sent from my SHV-E160L using Xparent ICS Tapatalk 2
[AT&T Samsung Galaxy Note I717] trinhtunglc:
Hi,

I have my Samsung galaxy S2 LTE SHV-E110S (Korean version) bricked.

Please guide me which files I need and how to Debrick my phone.

My phone uses MSM8260 CPU.

Thanks
[AT&T Samsung Galaxy Note I717] Naineesh:
plz give me your files regarding MSM8625,...

i have bricked my karbonn A21 which has MSM8625,..and i need those files u have plz,.. :cool: :highfive:
[AT&T Samsung Galaxy Note I717] sinner99:
SGH-I717M Bell

Not sure if this has been discovered or tested, as I havent read through these posts, however due to a incorrect recovery image push (dd if=/sdcard/recovery.img of=/dev/block/mmcblk0p2 <-- should have been 22 - dam wireless keyboard and fast fingers!! and that bricked it..giving me the qualcomm device manager entry this thread and brixfix is related to)..plugged unit into my linux box...lsusb gave me the qualcomm device...running brixfix did give me a screen again, only for the svh-e160l...as you can imagine this was a problem. :( flashing via odin i717m firmware only got me as far as stock recovery, no full boot(well it was full booting, without a display past the boot splash)

I decided to regenerate the problem in the same fashion incorrectly pushing cwm to the incorrect partiton2 and doing the brixfix over with replaced i717m files from GB(only firmware i could find with mbn files at all) I decided to check the jb and ics firmwares for like files as are in the brixfix svh-e160l folder (.mbns and what not) and there were none, just the img.ext4's etc. i check the gb firmware...extracted all these files(aboot system, csc and phone) and there i got the files i wanted,all in the aboot file. Copying them to the svh-e160l folder within brixfix (after much thought i decided to just leave the smd_hdr.bin and partition0.bin files alone as i couldn't find any from the i717m firmwares to replace them with, and went ahead and ran ./brixfix.sh as root.

Download mode now displays the correct device in english, and i once again have a fully functional phone! I thought this may be useful if anyone else with an I717 or i717M has the same issue down the road. darkspr1te thank you very much for all your research and development of this very handy tool! I thought id have to send it to texas from canada again for another jtag(did the same thing in december, except it was mmcblk0p4 i sent the recovery too...if you do any checking i believe partition 4 is the extended partition that contains all the rest of the system...somewhat of a brick at that point, no power no nothing in linux..super hard brick, but jtag repairable as long as the jtag guy doesnt arc out on the usb flex connector while doing so. <--cost me 3 months more downtime till he admitted he may have erred. but in the end he did and sent me the needed replacement part so all is well). Thanks once again darkspr1te!

terrific tool and functional fully for the SGH-i717M qualcomm hs-usb qdloader 9008 driver with no boot or screen...a linux box is necessary.

I sincerely hope this helps someone....as this thread and the older one has very much
[AT&T Samsung Galaxy Note I717] darkspr1te:
I am glad it worked for you. The i717 does have a different partition table, I should have the pit and boot loaders somewhere I will upload them for others.

Darkspr1te
[AT&T Samsung Galaxy Note I717] ZzzzzxXxzzzzZ:
Will this work on HTC EVO 3D GSM S-off ??
[AT&T Samsung Galaxy Note I717] JamieD81:
i got this to work with my i717m earlier but i used att aboot instead of bell so im guessing thats why i couldnt boot past animation on stock or any of my roms,

i tried odin to stock jb bell and bootlooped and kept twrp2, so i tried going back to gb stock so i could use kies to update so flashed the reset counter zip ended up back at Bus 001 Device 044: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)

so came back to linux pc and ran brixfix.sh pressed "y" it loads all the files like before then hits *made sure to get proper bell files this time*

Writing 132 bytes to 0x2a028800; 0 bytes left.

Executing file...

Failed to get response.

execute failed

last time first time shot me to sd-card mode, now cant get past this.
[AT&T Samsung Galaxy Note I717] a6336121:
thanks you.
[AT&T Samsung Galaxy Note I717] Lex-:
Qualcomm Tool for MSM7x27 ?

Hello, I have a samsung phone (M820 Prevail,, MSM7x27 I think) bricked after NV item modification with QXDM, I think that stl5 partition need to be fixed...

Please let me know if the utilities posted can help me or if exist a way to run a bootloader like arm11boot (if exist one fixed to work as intended with fastboot and not samsung modified arm11boot to work with ODIN) to gain acces to the NAND memory to read (dump) it then flash it back after hexedit it (or at least access to stl5 partition to read and write it)...

I have the bricked phone and a working one, then I can extract files, boot loaders etc, just guide me on what to do please !

Thank you.
[AT&T Samsung Galaxy Note I717] darkspr1te:
Brixfix 2-2

Hi All,

As i promised, the last and final brixfix package. It all open source for you to learn/use as you wish so long as you dont charge for it.

brixfix-v2-2.zip

Qpst 2-7-44.zip

Revskills editor

File List for files included in brixfix

If anyone wishes to coninute this effort please let me know.

darkspr1te
[AT&T Samsung Galaxy Note I717] ZzzzzxXxzzzzZ:
Congratulation

Trying to educate myself past couple an hour by backpedaling from the old threat than here and surprise!!!!a new update!..imagine the optimism.

Then you said it will be the last and final update. Does that mean you giving up on us?? i mean "us" as "other device":p

Is it because not enough contribution even willingness from others to upload their backup partition from different device? like someone else here said "well, the only reason people on this thread cuz they already bricked". In my case (a HTC EVO 3D GSM) i cannot find same other user in my house,neighbor or my school. And I'm sure trying to convince them to let you extract the needed files is a whole nother story (yes, we know its harmless but try to convince them that).

But i guess you have other reason. Great Work.

and Now ...as a selfish noob as i am can you lead me how to get MPRG8260.hex and 8260_ms image.mbn. I got a full dump of the device from some jtag forum and its a 2Gig bin file, can i extract them from that?
[AT&T Samsung Galaxy Note I717] darkspr1te:
I Am not giving up, I just sold my device and i am looking for a new challenge.

The support has been great actually, i receive a lot more post's on the success via PM , and I am proud to have been part of this community and will continue to do so.

As yet we have not found the 8260 hex files but I still have tentacles out there looking, I am currently working on a S3 MEI repair and a N7000 debrick solution so I am not idle hands for now :)

The JTAG dump wont contain the hex/mbn as thats never found on a retail phone, the hex is memory only and the .mbn image is a sd-card emulation boot system,

I must admit , I do prefer the way qualcomm do the boot system over a exynos cpu, the qualcomm have a complete boot partition for normal & for recovery where the n7000 has one , so no redundancy.

The more i see the exynos the more i wish i had kept my 160L :(

Anyways,

darkspr1te
[AT&T Samsung Galaxy Note I717] JamieD81:
I have a full brick n7000 that a JTAG didn't even fix so if you need someone to test without care of damage shoot me a pm
[AT&T Samsung Galaxy Note I717] ZzzzzxXxzzzzZ:
Htc evo 3d gsm

Glad to hear that ..hope for us, extra bucks for you:D

So i should've practice my google-fu around Qualcomm instead HTC then.Right.Check

For working phone absolutely, but for bricked phone isn't more convenient to just have one part to restore?

Good luck with your new challenge, looking forward your future post.
[AT&T Samsung Galaxy Note I717] yous87uu2:
help!

I have SHV-E120S, It's bricked!

i want debrick, but it's solution is E160L Only!

my device list - bricked SHV-E120S-n/aGB, Not bricked SHV-E120K-16GB

CPU is Qualcomm Snapdragon APQ8060

i think SHV-E120K and SHV-E120S is SAME DEVICE, BUT NOT SAME FIRMWARE!

and, i'm Korean, my e-mail is yous87uu2@naver.com

please e-mail to me :laugh:

--add

hmm.. i think can using this project...

codeaurora - Snapdragon Developer Platforms (DragonBoard8060) (sorry i can't add link)

can not?

--add 2

sendspace . com / file / bu2tiy

SHV-E120K-16GB's backup File.
[AT&T Samsung Galaxy Note I717] ninjah:
Pm me if you want my help about bricked phone, and you need linux
[AT&T Samsung Galaxy Note I717] aslamdoctor:
Any Chance to fix HTC One S ?

I have HTC One S - T Mobile US Version. It has same QDLOAD mode issue. How can I fix this using your tool ?
[AT&T Samsung Galaxy Note I717] berukburuk:
I have a K-Touch Lotus II (CPU Quad-core 1.2GHz MSM8225Q).

When I want upgrade I got mistake. Now phone phone is dead but still can detect on pc.

I tried reflash using Qualcomm's (TOOLS UPGRADE LOTUS II QPST_72-V1400-135_2.7.386) then got an error "failed open the partition file".

What should I do with my phone now. Im so hopeless :(

Somebody please help me cause no one can help me with this issue.

#sorrymybadenglish