yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy Note I717] darkspr1te:
The link for Captiva mod this is the first article i read, note it's about the samsung cpu but the viewmem principles can be transferred.

then E:V:A's thread on MSM devices will fill in the rest.

When i talk about the BOOT_CFG gpio/option i am talking about this

There is a windows program that can write TOT files directly , mentioned here

as for the device type changing etc thats all in ABOOT partition, i was able to swap out my aboot with the i717 and shv-e120 aboot's and it started up just like those devices would, it even accepted the unmodded firmware via download mode. yes you will see other models mentioned in the other files but that only because some parts are very generic , in my device i was using sbl1,2,3 from i717 and aboot from shv-e160l , it was not untill just before i sold the device that i swapped to real shv-e160l loaders which someone sent me.

Your first major step forward will be executing the hex to allow the device to talk the right protocol for writing to emmc. how ever, it's entirley possible that a entire copy of the system written to a 16gb sdcard may allow you to boot the device just enough , just be careful with you dd-commands on the working device, many have double bricked there.

as a example of this , in my shv-e160l i could have sbl1/2/3 and aboot on sdcard but the moment it started aboot it read the real emmc , the only way to stop that was shorting DAT 0 going to the emmc via a resistor to ground, i could load a recovery but never get into the real os.

this was using a 16gb sdcard with same partition layout as the original emmc device.

darkspr1te
[AT&T Samsung Galaxy Note I717] yakovpol:
In fact, it shoud extract TOT file first (writing down all 32GB of data). But though having an option for G Pro (APQ8064) it fails with

======== AP CHECK START

Failed during loading flash programmer

TEST aborted!!

Elapsed Time : 0 hours 0 minutes 0 seconds
[AT&T Samsung Galaxy Note I717] darkspr1te:
When the system boots normally it will start with the PBL (primary bootloader) and then move on through each of the other loaders, if one fails it my be switching to another loader using a different protocol, I suspected they did this which is why my short resistor trick allowed me to always force the CPU's PBL and not any pbl stored on flash.

This is how ever only a theory.
[AT&T Samsung Galaxy Note I717] yakovpol:
Thank you for the links! I read more and started a new thread. I would be very thankful for any your comment.
[AT&T Samsung Galaxy Note I717] quanqw:
Can you help me to modify script for my sph l520. It's same with shv but it is msm8930 chip. I have sbl2, sbl3, tz, aboot, rpm and pit file.
[AT&T Samsung Galaxy Note I717] absorbers:
Hi, all!

LG G2 D802 stuck in Qualcomm HS-USB QDLoader 9008 mode.

In QPST it shows licke q/qcp-xxx(download)

Please help me, what can be done in this mode to unbrick LG G2 D802?
[AT&T Samsung Galaxy Note I717] darkspr1te:
You still need the partition file, it's a copy of the various file locations, without that you cannot proceed, does the device have gpt or msdos based partition ?

Have you been able to get the device to accept the correct hex loader and then the correct msimage or sdcard file ?

it's possible to create a partition bin file from the pit but only if you know if the partition table is gpt or msdos

Post any research and files and we can start looking at it
[AT&T Samsung Galaxy Note I717] darkspr1te:
You need to do research on your device to find out what boot files it uses, then get copies of such files, see first page for details on what you need to do.
[AT&T Samsung Galaxy Note I717] Yogesh1969:
Files from other device of same model type.(A87)

I have gone through the threads. Though I still will go more deeper. I was thinking if I get the same model, how do I extract these files from it. I feel it will ease my problem a lot. Please guide me.
[AT&T Samsung Galaxy Note I717] bender_007:
You need the boardiag 3.99c tool. Look up g2 threads. Or you need to get out from 9008 and force it to 9006 mode. Then you can dd the partitions.
[AT&T Samsung Galaxy Note I717] filmost:
Hi darkspr1te, can you elaborate on the process of converting the pit file to a bin file? Thanks!
[AT&T Samsung Galaxy Note I717] absorbers:
Thanks. Its main problem - no working files foe LG G2 ((

---------- Post added at 14:42 ---------- Previous post was at 14:41 ----------

Thanks. But i got BoardDiag app and it didn't help me.

EMMC test fault. I think its just lost partitions table.
[AT&T Samsung Galaxy Note I717] darkspr1te:
the pit once loaded into pit magic will display the partition size's from sector 0, using fdisk(parted/gparted if using gpt partition) you write the exact same sizes to a dummy disk/img or real disk, then you backup those partition locations in the same way you would if your phone was still working (meaning look at the backup script and repeat those commands ) , tada you have the same data as what the phone would have.

As I said, it's not easy but i did fully document it in my shv-e160l debrick thread, the original thread i did while i was still learning about these devices. see my signature
[AT&T Samsung Galaxy Note I717] darkspr1te:
Sorry cant help you with files for the phone, you have to talk nice to another owner and see if they will let you backup the files from their phone. it's possible that files for a similar device will work, a example is the shv-e120l is same bootloaders as shv-e160l apart from 1 file, ABOOT is different.

if the phone actually boots into sdcard mode then you may be able to backup the files from the device and using a old dd command trick write them to a new file, but as your device is bricked you must understand that one or more of your files is damaged.

as for the emmc fail, a lot of users have reported that but no further research into it has been done, we dont know yet if that emmc test is true and valid , the author may though

darkspr1te

EDIT: also look at firmware updates, some have the loaders in the tar/zip or what ever the update comes as.
[AT&T Samsung Galaxy Note I717] quanqw:
My device is boot rom. Partition 0 is modem partition. How can i have hex loader, msimage, sdcard file.

I downgrade my bootloader from 4.4 to 4.2. I flash aboot.mbn, rpm.mbn, tz.mbn, sbl2.mbn, sbl3.mbn via adb terminal. Now it can only boot to QDloader. It can not fix via sdcard mode. I thinks partition 0 (modem) can not detect sbl2, sbl3. This is my pit file.

http://www.mediafire.com/download/nlrgs1ulypav8l8/SPH-L520.pit

---------- Post added at 03:16 PM ---------- Previous post was at 03:07 PM ----------

Now i want to write bootloader (sbl2, sbl3, aboot, rpm, tz) via QDmode. Another partition is normal. Thanks for helps.
[AT&T Samsung Galaxy Note I717] darkspr1te:
My brain actually hurts trying to read this. Please look at the first page for posting info & rules
[AT&T Samsung Galaxy Note I717] quanqw:
You can read my pit file and help me. I flash snl2,sbl3, tz, aboot (4.2 firmware) via adb and now it can not boot.
[AT&T Samsung Galaxy Note I717] quanqw:
This is my pit file,can you make for me a partition0.bin. Thanks.
[AT&T Samsung Galaxy Note I717] darkspr1te:
Sadly Not right now, I have too many other projects ongoing.

darkspr1te
[AT&T Samsung Galaxy Note I717] quanqw:
My phone don't except hex file. It respond magic failed.
[AT&T Samsung Galaxy Note I717] quanqw:
No box support my phone. Now i don't know how to repair it.
[AT&T Samsung Galaxy Note I717] johntheredimid:
I make a request to all of here

Please. Someone explain to me that it serves the .hex file?

Thank you so much
[AT&T Samsung Galaxy Note I717] darkspr1te:
The hex file is a small arm program designed to give access to the devices emmc chip or internal sdcard. The msimage file is another arm program that boots the device to act as a sdcard.

Darkspr1te
[AT&T Samsung Galaxy Note I717] quakze:
[MENTION=4864296]darkspr1te[/MENTION] Please help us in debricking Yureka, as we trying from long time with no success.

Here is the thread [PROJECT] Reviving Hard Bricked YU (QLoader 9008 Mode), Please look into the matter and we all will appreciate your support very very much.

Looking forward for your kindly reply.
[AT&T Samsung Galaxy Note I717] hugoprh:
Gone is my Yu Yureka =(

So this was I have done to create and to try and solve this issue.

I was running stock CM12 and wanted to flash a different ROMs, so I tried to unlock the bootloader and using "fastboot -i 0x1ebf oem unlock" and without restarting the phone, tried to flash 64bit TWRP recovery, after this the phone no longer booted, but TWRP was booting, with a lot of errors of not being able to mount "/data" and other partitions. So I downloaded the CM12 offical ZIP file to try and do a factory reset, flashed using "fastboot" with the file "flash-all.bat" and here is where the problem started, this process failed, I think because there is a "flash-radio.sh" file where the "fastboot" lines do no have the "-i 0x1ebf" and because of this (I assume it's this lol), this process failed and the phone no longer starts, nothing works, tried in windows, ubuntu and a MAC at work, nothing is able to see the phone any more, the only sign of life I get, is when I remove the battery and connect the usb cable, the red LED from the phone turns on, but the PC still does not detect the phone, followed a recommendation I found, to remove the battery, pressing and holding the volume UP button + connecting the USB cable + connecting the battery, all this whilst the volume UP button is still being pressed and also did not work, no signs at all of life =(

Tried "[PROJECT] Reviving Hard Bricked YU (QLoader 9008 Mode) by tirta.agung", but nothing, not even with Windows in TEST MODE, no sign of life whatsoever =(

Also tried to do what tirta.agung said on post 244 (http://xdaforums.com/showpost.php?p=60442467&postcount=244), but just got sparks flying from both points and now, I do get the red LED on, even with the battery connected, tried with BrixFix2.1 on my Ubuntu machine, but it's still no able to detect the phone =(

Not sure what to do more, any idea guys?

Thanks in advance for all your support.
[AT&T Samsung Galaxy Note I717] sheikhrr:
@darkspr1te Please Do Help Us, we are Very Big Community with Yu YUREKA, (& of Bricked Yureka also :p ) in Trouble. i/tirta.agung/quakze can provide every files related to YUREKA.

Looking forward for your kindly reply.
[AT&T Samsung Galaxy Note I717] darkspr1te:
Am already looking into it. Please don't spam this thread.
[AT&T Samsung Galaxy Note I717] sheikhrr:
Sir,

Hope You're fine.

i am trying to resurrect Micromax A87 from QDLOAD 9008 mode, i have it's official firmware which contains-:

android-info.txt amss.mbn amsshd.mbn appsboot.mbn appsboothd.mbn nv.cfg oemsbl.mbn oemsblhd.mbn qcdlckie.mbn qcsbl.mbn splash.img boot.img recovery.img system.img userdata.img

but i do not have necessary file like MPRG7227A.hex and 7227a_msimage.mbn,

in android-info.txt has a only single line:-

board=msm7627a

and i have downloaded MPRG7627a.hex from somewhere.

i am confused between 7627a and 7227a because in device cpu's roof top their is msm7227a writen/printed !

is msm7227a/7627a s1 family bootable via sdcard ?

Things i have and can use--

UFS BOX (All samsung devices can be repair including msm7227a based devices but not Mmx A87)

UBUNTU os 14.0.10 LTS 64 bit

windows 8

Any help would Be Appreciated
[AT&T Samsung Galaxy Note I717] Yogesh1969:
Assuming it to be gpt, how to get pit file and then the partition bin ?
[AT&T Samsung Galaxy Note I717] Yogesh1969:
Hoping for a solution soon.
[AT&T Samsung Galaxy Note I717] darkspr1te:
I cannot provide these file for you, you will have to find them via google or create them yourself. i cannot provide that info , it has to some degree been documented in various pages, you will have to research it.

darkspr1te
[AT&T Samsung Galaxy Note I717] sheikhrr:
Hello sir Darkspr1te,

I found 7627A.hex & 7627A_msimage.mbn from another forum intended for lenovo A2105.

Qpst emmc software download tool is giving error:

image download failed Cookie(if present) not received.

Is something could be done using any tool including brixfix ?
[AT&T Samsung Galaxy Note I717] kennolan:
shv e120L fix by BRIXFIX TOOL

thanks to this tool. i unbrick my s2 hd lte shv e120L..BRIXFIX TOOL + TAILS instead of UBUNTU..after tails loaded go to su terminal window then run the brixfix.sh.:good:..

use with caution depending on what model..
[AT&T Samsung Galaxy Note I717] x1123:
Can you write down here the whole process, file you grabbed for unbricking your device. It will be valuable for further users. I have zte z5s mini (QDL Mode Only), blackberry z10 (dead), HTC Evo 4G (85% dead), HTC Hero and many more in hand. I have various box (volcano, gpg jtag, super GPG, riff box and many of jig. Im interesting on tools like brixfix and happy to know the tools work.
[AT&T Samsung Galaxy Note I717] kennolan:
it really works what is important is the partition file and boot file of the unit..i used TAILS instead of UBUNTU,I had a hard time using the su terminal.

STEPS:

1. Download the BRIXFIX TOOL + TAILS

2. Find and download the desired files for your unit (pit files,boot files)

3. Write TAILS image to usb using ultraiso.

4. Copy BRIXFIX TOOL to usb after writing the TAILS image.

5. Connect your phone to usb.

6. Restart your computer,boot to usb (TAILS LIVE USB)

7. Once tails is loaded go to disk utility and find if your device is connected

8. Go to su terminal browse to BRIXFIX TOOL,drag and drop the bixfix.sh file and hit enter

9. Follow the su terminal prompt

10. Turn on your device into download mode and flash your ROM.

GOODLUCK!!!
[AT&T Samsung Galaxy Note I717] x1123:
we are on the same boat .... I have been checking and checking to find correct files. .... :D
[AT&T Samsung Galaxy Note I717] pencilholic:
Question regarding how to build a msimage for E160S.

Hello, Darkspr1te!

I think that I had red this thread with its all relies.

However, I really don't understand how can I build msimage for E160S.

Qustions are like below.

1. Is it necessary to build a msimage for E160S later than using the file within you provided?

2. If it is necessary, do I have to have normally functioning E160S, or can I build msimage from bricked one?

Thank you in advance. :fingers-crossed:
[AT&T Samsung Galaxy Note I717] x1123:
1. I believed If your phone is identical, sure you can use file provided by this OP.

2.We can NOT get any info from "bricked" one, so the answer is NO.

the OP probably busy .... You can download the brixfix, see all file carefully, read all text on the scripts. I believed you will understand how to alter or using provided file.
[AT&T Samsung Galaxy Note I717] amir2418:
darkspr1te 1st of all thank you for your tool which making ours devices back to lives i have a question can i use SHV-E160S-32GB files on SHV-E160K-32GB as both devices has same hardware right so i thought that's should works ? if its doesn't going to work then or you link them here ?
[AT&T Samsung Galaxy Note I717] surfzoid:
Hi

ARC S LT18i MSM8255 12W10 boot locked allowed root = 0, i damaged the trim area throught TA editor of FlashTool :P

After read all the thread i conclude, to have dbload.pl working, i need to correct the write address( it is ok), now to find the mbn file (QPST extraction) and hex file converted in .bin (how to backup it somewhere).

Is there any luke for somebody with an ARC S and nice mind want to provide those files ?

Thanks you to take time to read me and hope read you back :)
[AT&T Samsung Galaxy Note I717] surfzoid:
Hi

I found a wonderful tool who give us the magic solution, omnius : http://www.omnius-server.com/download

I used the free version (without register), in an Virtualbox windoze machine under my linux box.

Start the soft, in vbox go to peripheral, usb and connect the qualcom, in omnius, select your phone model and click "identify", onmius put the phone in adb s1bot_flash emcc mode (see dmesg in an linux console) :D

From now, what i need to backup or flash ?

---------- Post added at 08:13 PM ---------- Previous post was at 08:13 PM ----------

[21546.944162] usb 7-5: new full-speed USB device number 9 using ohci-pci

[21547.097379] usb 7-5: New USB device found, idVendor=05c6, idProduct=9008

[21547.097392] usb 7-5: New USB device strings: Mfr=1, Product=2, SerialNumber=0

[21547.097399] usb 7-5: Product: QHSUSB_DLOAD

[21547.097405] usb 7-5: Manufacturer: Qualcomm CDMA Technologies MSM

[21547.099492] qcserial 7-5:1.0: Qualcomm USB modem converter detected

[21547.099647] usb 7-5: Qualcomm USB modem converter now attached to ttyUSB0

[21561.146925] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0

[21561.146943] qcserial 7-5:1.0: device disconnected

[21580.263336] usb 7-5: USB disconnect, device number 9

[21580.695247] usb 7-5: new full-speed USB device number 10 using ohci-pci

[21580.849055] usb 7-5: New USB device found, idVendor=0fce, idProduct=adde

[21580.849069] usb 7-5: New USB device strings: Mfr=1, Product=2, SerialNumber=0

[21580.849075] usb 7-5: Product: S1Loader Flash

[21580.849080] usb 7-5: Manufacturer: Sony Ericsson Mobile Communications AB
[AT&T Samsung Galaxy Note I717] Spiewich:
i hve the same device, but the problem is that, i flashed a .pit file via odin, and the device does not boot anymore neither does it respond to the power botton.

please help me, how do i fix this
[AT&T Samsung Galaxy Note I717] nxb:
Hi, I have SCH-R530x (d2xar/d2lte/etc) in Qdload from dumb flash (sbl2,sbl3, modem).

I've read a ton and re-created signed bootloader files from images. I can flash the first hex, either hex.bin or MPRG8960.hex but the second bin causes an error and it won't execute. In the original qdload kit it said to make a new msimage.mbn but I am missing the partition xml file (link in other threads is dead). If I do figure this part out what are my chances of the second file allowing hex execution?

Also, is modem signature check enforced too? Like only flashing NON-HLOS.bin.

I have found this guide: https://translate.google.com/transl...A%B0%80%EC%9D%B4%EB%93%9C-ver2-1/&prev=search

I'm waiting on a good phone to try it, going off of the partition table for similar phone crashes emmcdownload parsing partition xml file.

Full bootloader/pit and files for SCH-R530X (4.3)

http://www.mediafire.com/download/h3po2mmav3y3ucd/SCH-R530X.zip

Made this xml, I'm not sure its right. I went off the pitt file

ran those scripts on another phone GSII, compared to pitt file the TXTs and came up with this scheme modem as example.

still get cookie failed... I think the hex file isn't executing :(
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

Well it might be a magic solution for Sony Ericsson and some certain Samsung phones (not really any Samsung phone most will probably care about), but it seems for most others it does nothing.

I tried it with my semi-bricked HTC Evo 4G, and it doesn't even see it apparently.

Since you did get it to s1loader status, you should be able to use Flashtool and rewrite your phone's partitions. That should fix it (hopefully).

[MENTION=2861739]nxb[/MENTION]

You apparently are about as far as I am.

I can load the hex programmer, but I can't generate a msimage.mbn file.

Don't even have the files for it. Don't think anyone does afaik.

Basically what the msimage.mbn file allows you to do is put the phone into sdcard mode so you can easily re-write the phone's partitions.

But if for some reason you can't get that file, remember, you're still in qdloader mode.

Supposedly you can execute qdloader commands and be able to read/write the flash memory.

That's going to be my approach.

The problem is, I don't know any of those commands currently :x

darkspr1te said something about his previous threads containing qdloader commands, but I went back and there is no mention of them.

So I'll keep reading and hope I can find them somewhere...
[AT&T Samsung Galaxy Note I717] nxb:
there were some nice qualcomm docs... unfortunately they were removed. I did make the msimage, just the programmer hex isn't signed and I had already tripped knox... although security is enabled even if stuff isn't tripped per download mode. I gave up and bought another motherboard.... which may not be an option on really expensive phones.
[AT&T Samsung Galaxy Note I717] tech128:
The Qualcomm docs are not a big deal, if your Google-fu is strong you can find them pretty easy :)

I've managed to be able to talk to the device, you need to use jpnevulator to do it.

In one terminal I ran the command:

./jpnevulator --tty /dev/ttyUSB0 --read

and in the other:

./jpnevulator --tty /dev/ttyUSB0 --write

The one with the write command you can enter hex digits like so: 7e 06 4e 95 7e

And it should respond in the other terminal with: 7E 02 6A D3 7E

That means you sent a No-op command and the phone is returning an ack response.

Now that I've got the basics down, I need to figure out this streaming download stuff, and believe me, it is very complicated.

Well I was just checking on revskills, and it does appear to have a whole bootloader + flasher section that I didn't see in an older version I had before.

So that would be worth a shot.

I remember I had issues trying to get the qhusb_dload driver to play nice with it though.

But it obviously works in linux so there's got to be a way for windows to do the same..
[AT&T Samsung Galaxy Note I717] tech128:
Well I've gotten it to work in revskills, the hardest part was finding a good qhsusb driver.

I've tried to read the nand many times and many ways already, but it always errors out.

It says error on reading.

I'm not quite sure how to proceed from here.
[AT&T Samsung Galaxy Note I717] surfzoid:
[MENTION=4899263]tech128[/MENTION] i have native qusb driver under my MAGEIA linux box, and good one in windoze, from omnius, setool or 4se tool, all this tool can be an very good help, also i wrote a little peace of C# to try to read/write in QUSB DL mode, but stop that since onius put the fone freely in an corect first step, just need to put an S1boot test and flash nand, but how :D
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

Well once you get it into S1 mode, open flashtool and flash the file LT18i_4.1.B.0.587.ftf

It might re-write the nand and make it boot again (maybe)
[AT&T Samsung Galaxy Note I717] surfzoid:
Sadly no, you do misstake between S1Loader Flash and s1 flash mod, in this sate Flash tool connect but not be able to flash, also i tried with omnius whos alow custome FW, ftf, fileset (setool format), in QHUSB mod , flash was ok, but TA already "damaged", i didn't see my IMEI, and don't know how to restore my TA backup i did with FT
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

Are you able to use omnius to read/write the flash?

Have you tested making small changes to the ta area and see if it writes them?
[AT&T Samsung Galaxy Note I717] surfzoid:
yes i'm able to write an sin or ftf file, if i made an backup of TA and revert change he find an incorect size, i have the original TA with good IMEI and so on, but from FT who don't work in QHUSB mod

---------- Post added at 01:50 AM ---------- Previous post was at 01:31 AM ----------

most of tool make 3 file/section of TA : ta securite, ta and ta misc, Flashtool make this in one file only, so, i think, i need to know the memory area/adress flashtool took for read and find a way to write my backup at the original place
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

Yeah, that's exactly what I was thinking.

Not an easy job, but it's definitely do-able.

I would try to contact Androxyde on twitter and ask him how flashtool stores the ta backup in 1 file.

If that doesn't help, then I would try to find someone else with a flashtool-compatible phone and run a usb sniffer to see where it is reading the addresses on the phone.

On mine, I've gotten a teeny bit further, but I still can't read or write the flash.

I know all the addresses for the flash memory now.

Revskills is not doing much good here.

Going to have to read some more docs on streaming protocol..