yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy Note I717] surfzoid:
I already contacted androxyde by pm here, the Last FT propose to use usb logger :)

This night i also find a guy Who did the same funy misstake, bin4ry gave an answer http://xdaforums.com/showthread.php?t=1589282
[AT&T Samsung Galaxy Note I717] nxb:
Is there a revskills anywhere for download still... the whole site has been gone forever, guy got bought out by the government. I've only found a demo from archive.org. He was supposed to release the standard or pro free but no clue if he ever did.
[AT&T Samsung Galaxy Note I717] surfzoid:
What's your phone ? I have doc of frames définition of qualcom protocole (eazy find with Google)
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

Well I can find plenty of docs too, that's not the issue.

The problem is understanding them.

I'm supposed to send a certain type of Hello packet, and then I can read or write the flash memory.

But no matter how I try to send the Hello packet, it always gives me a nak response.

I'm sure I'll figure it out eventually, the only question is when.

The phone I'm trying to revive is an HTC evo 4g CDMA.
[AT&T Samsung Galaxy Note I717] surfzoid:
[MENTION=4899263]tech128[/MENTION] if You want, pm me your émail and i Will send yu the doc i learn Quickly and the sample i wrote in c# with monodevelop

Is your phone MSM8255 ? Are yu using Windows or Linux ?
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

I just pm'ed you my email.

The chipset is msm8650.

I can use any OS. I have Linux machines, windows machines, and also mac OS X.
[AT&T Samsung Galaxy Note I717] surfzoid:
To resume, in qualcom mod i find two way, the Perl script, but for the Sony Xperia arc s i need to tweak the script and change the write memory adress, the script load two files and switch the phone in sdcard mod, the second is tools like omnius or 4se tool Who load first à file Who put the arc s in s1 loader flash, then in this other protocole, the tool load another file as s1 boot test or s1 flash.

The tream area need à signed file.
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

I tried to run the mono program you gave me but it appears to be getting stuck on the version check for some reason.

Here's the output:

user@internet ~/Sonux/Sonux $ mono Program.exe

Ask parameter

RECEIVED: 08 06 01 10 00 00 00 00 69 46 7E

Params: 06 01 01 00 90 00 00

Version = 0x06 (PBL DMSS protocol version)

Min.Version = 0x01 (minimum required version)

Packet size = 0x100 (256 bytes limit for single write command packet)

Model = 0x90 (MOB_MODEL -> phone hardware model number)

Flash size = 0x00 (no NOR flash, flash programming not directly supported*)

Flash type = 0x00 (only valid if NOR flash is used)

*our phones do not use NOR flash, for NAND programming we need flash loader binary)

Ask the version

y

^C

user@internet ~/Sonux/Sonux $ mono Program.exe

Ask parameter

Kinda weird though, I can still talk to it just fine with jpnevulator...

*Edit*

Ok I suspected it was something like that, the mono program wants exclusive access to ttyUSB0.

I had multiple threads reading and writing with jpnevulator in the background.

When I shut those off, it works fine.

And why would the trim area need a signed file?

The only 2 things I thought would potentially need a signed file are the flash programmer and/or the msimage.mbn file??
[AT&T Samsung Galaxy Note I717] surfzoid:
perhap's for security reason, since TA have IME and other security info.

in the doc, they spoke about code to be able to write, i beleve the "magic" number of the perl script :D

At this time i m trying to had CRC16 HDLC calculation, it is a bit hard, if someone have an C# class to do it corectly i would be happy :)

Also, if we start to develop, i think we should ask here ? : http://xdaforums.com/showthread.php?t=2086142
[AT&T Samsung Galaxy Note I717] vincenzo697:
Hi darkspr1te. I have an HTC One m7 hard bricked and I was wondering if you can help me fix my phone as your program is the only one that recognizes it. Sorry for writing here.
[AT&T Samsung Galaxy Note I717] surfzoid:
[MENTION=4899263]tech128[/MENTION]

very very interesting source code :

https://github.com/posixninja/DLOADTool

https://github.com/posixninja/DBLTool

Need now an good hacker to have it running on linux :d

Or perhap's, through your Mac os station you can compile it for linux ?
[AT&T Samsung Galaxy Note I717] surfzoid:
[MENTION=4899263]tech128[/MENTION]

I have worked to the write function and got now the good CRC16 , also i made reverse engineering of existing windows tools.

i got the following frame to switch the phone from QHUSB mod to S1 loader flash :

http://pastebin.com/WGuZacKU

as we can see, the tools use the 0x0f function, write an 32 bit value

Also, it start to write at 0x80010000 address and send 0x0400 (1024) byte

the qload.pl script use the 0x80013000 one :)

So i believe, each phone have specific start address to write the Hexa programmer, mine is an Arc S LT18

---------- Post added at 07:39 PM ---------- Previous post was at 07:36 PM ----------

More raw and complete version of the frames :

http://pastebin.com/rJM0Fraz
[AT&T Samsung Galaxy Note I717] tech128:
[MENTION=5181996]surfzoid[/MENTION]

Good job, more detail on the process is always a good thing.

Yes, every phone has an address that it expects the flash programmer to be written to, usually this address is embedded into the programmer file itself.

I still wish I could figure out the correct hello command without having to use some of these windows tools.

I'm kind of hesitant to use them because I don't want it to write something by mistake.
[AT&T Samsung Galaxy Note I717] nxb:
I thought that M7 with s-off would be immune from this and you can flash whatever radios/BL/etc you want. I was going to purchase it for this reason. If it has this security it is off my list.
[AT&T Samsung Galaxy Note I717] surfzoid:
I start to develop an revive tool, for Linux

https://sourceforge.net/projects/sonux/

Help is really welcome!

Doc too
[AT&T Samsung Galaxy Note I717] NostalgiaZ:
I stumbled upon a your v1 and I did the instructions. But when I go to my Ubuntu VM i just get this error.

benok@benok-VirtualBox:~$ cd Downloads

benok@benok-VirtualBox:~/Downloads$ cd Brixfix-2-1

benok@benok-VirtualBox:~/Downloads/Brixfix-2-1$ sudo ./brixfix.sh

[sudo] password for benok:

Brick Fix v2-0

______________

By Darkspr1te, See README for thanks & References

Checking For Qualcomm Device

No QDLOAD device found, checking for SD-CARD Mode

Device found !!!!

Mode is SD-CARD/msimage mode at device node /dev

With USB PID/VID ID of 05c6:9025

Detailed Output is Bus 001 Device 004: ID 05c6:9025 Qualcomm, Inc.

Do you wish to write parititon Warning Dangerous

y

Writing parititon to /dev

dd: opening `/dev': Is a directory

dd: opening `/dev': Is a directory

Do you wish to write bootloaders Warning Dangerous

y

Writing bootloaders sbl1,sbl2,sbl3,rpm,aboot to /dev

dd: opening `/dev': Is a directory

dd: opening `/dev': Is a directory

dd: opening `/dev': Is a directory

dd: opening `/dev': Is a directory

dd: opening `/dev': Is a directory

Do you wish to write TrustZone Warning Dangerous

y

Writing TrustZone to /dev/

dd: opening `/dev': Is a directory

If no errors occured then disconnect and remove/replace battery, if ANY error occured do not disconnect device, fix error and rerun or seek advice !!

benok@benok-VirtualBox:~/Downloads/Brixfix-2-1$
[AT&T Samsung Galaxy Note I717] NostalgiaZ:
Stuck on "Samsung Note" Loading screen

Hi darkspr1te,

I was able to revive my dead phone using your tool. Many thanks! But my problem is whenever I try to flash a ROM via Odin, it is successful but the phone gets stuck on the Samsung Note Loading screen. I also tried to flash your cherry rom and followed the instructions to get in to the recovery but whenever I press the volume button, it gets stuck to the "Samsung" screen. I currently dont know what to do. I tried sending my phone to sa local tech guy on our place and he said it only needs flashing. But its been 3 weeks and he said almost all of the ROMS that he found has failed. I would appreciate all the help I can get.
[AT&T Samsung Galaxy Note I717] argon12:
This looks really interesting, I've bricked my HTC One M9 good and proper. This looks like it might have some viability on fixing it though. Anybody know where I can get one of these fancy .hex files for a MSM8994? can I generate one from a RUU or something because I can't find one anywhere.
[AT&T Samsung Galaxy Note I717] darkspr1te:
As mentioned we dont have the required files for many devices, this device just happened to be able to use generic files, if your cpu is locked or requires signed hex then you will have to hunt them down.

darkspr1te
[AT&T Samsung Galaxy Note I717] argon12:
aha was guessing I'd need to. Cheers though.
[AT&T Samsung Galaxy Note I717] isanagy:
Please help me to unbreack Sony Xperia SP
[AT&T Samsung Galaxy Note I717] kazzaerexys:
I have a T-Mobile LG G4 (Model H811, firmware H81110n) that is completely bricked—no screen, no d/l mode, no nothing. I can get it in QDLoader 9008 mode, but it does not show as a drive under windows or as a block device under Linux.

I also have a beat up, but stock, H81110n phone that works fine. Is there any way you can give me some advice on how to extract the necessary unbricking info (I presume this is partition tables and possibly images, though the H81110n KDZ file is readily available as a standalone) from the good phone in order to unbrick the dead phone? I would be happy to provide the extracted files for the benefit of others if this works.

Thanks!
[AT&T Samsung Galaxy Note I717] manowar24:
I have got a problem with my LG G3 Cat.6 F460k, no download mode, no recovery, no power on, no fastboot , only qualcomm hs-usb qdloader 9008 in windows device manager, the g3 f460 uses the APQ8084 chipset for the 805 snapdragon processor, I need the files to use the QPTS, somebody can help me?
[AT&T Samsung Galaxy Note I717] asialove2013:
Try QFIL

Hi, Try QFIL and find out what files you need. I have a working G4, Not sure if i can help you!

I
[AT&T Samsung Galaxy Note I717] jephimax:
[MENTION=4864296]darkspr1te[/MENTION]

I've been stupid enough to flash a .pit file from an N7000 to a E160L. I've softbricked a lot of phones already, but this is the first time I encountered a hard brick so I was really dismayed by the fact that cannot be recovered. Still, I was hopeful it was still repairable since the PC still recognized qhsusb_dload. I'm not technically-savvy with programming and all, but when I found your post, hopes were high. Though I had frustrations using Linux (sorry, I use Windows a lot, newbie at Linux), I ran your program, and voila, my phone is working again! Thank God for you and your awesome work, I am truly grateful for your hard work.

And a good thing, I too have the E160L, so no more looking for files and stuff. I thank you again! *teary-eyed* :)
[AT&T Samsung Galaxy Note I717] abhijeets:
Yuphoria YU5010 Hard-Bricked Dead

Yuphoria YU5010 Hard-Bricked Dead

Hi,

I have hard bricked my new yuphoria yu5010 mobile phone while trying to install stock ROM of yuphoria yu5010A.

Now, my phone is dead, does not blink LED, no charging.

Only, Device Manager showing port ::: Qualcomm HS-USB QDLoader 9008

Tried to recover using help from website ::: http://www.droidsavvy.com/unbrick-qualcomm-mobiles/

But, failed, as QFIL unable to download necessary MBN files using SAHARA protocol.

So, please send me MPRG8939.mbn or MPRG8936.mbn or MPRG8916.mbn and all necessary files to recover my dead yuphoria yu5010.

Please reply urgently to my WhatsApp No. +91-9432540640.

Thanks.
[AT&T Samsung Galaxy Note I717] darkspr1te:
As stated on the main page, if the files are not already posted then we don't have them, sorry but you will have to hunt for them.

darkspr1te
[AT&T Samsung Galaxy Note I717] Buthers:
Hey guys ! please help-me!!! I have a lg l40 D175f and I have the kdz file,windows shows it as the Com port (DBLOADER 9008), I have board diag and qpst,however I dont have the xml files and the partition.txt for board diag, what i have to do? I ve already searched for those files and couldn't find em ,how can i create one ? or what i have to do? please people help me!
[AT&T Samsung Galaxy Note I717] yshalsager:
Hello

I have Nokia XL - MSM8625 based phone.

my device is bricked, after installing Qualcomm drivers Windows can detect it as "Qualcomm HS-USB Diagnostic 9008"

I googled a lot then i find a method from ANDROMAX U tells to use "8X25Q_msimage.mbn & MPRG8X25Q.hex" to be able to detect as "Qualcomm HS-USB Diagnostic 9006" then restore EMMC Backup.

of course i have full DDBackup, so can i use these file to get EMMC Storage Mode then restore Mobile ?

Another Guide uses "PATCH0.XML & RAWPROGRAM0.XML "

Where i can get these files specific to Nokia XL? or those are general files to unbrick?

PS I also have these files:

P12082503dpi600.pcx

P12082503dpi600_label_layout.xml

RM1030_059W173_1.2.3.21_023.dcp

RM1030_059W173_1.2.3.21_023.signature.bin

RM1030_059W173_1.2.3.21_023.vpl

RM1030_059W173_1.2.3.21_023.xml

RM1030_V2_1.2.3.21_emmc_appsboot.mbn

RM1030_V2_1.2.3.21_emmc_appsboothd.mbn

RM1030_V2_1.2.3.21_fat.bin

RM1030_V2_1.2.3.21_oemsbl.mbn

RM1030_V2_1.2.3.21_oemsblhd.mbn

RM1030_V2_1.2.3.21_qcsbl.mbn

RM1030_V2_1.2.3.21_qcsblhd_cfgdata.mbn

RM1030_V2_1.2.3.21_udisk.bin
[AT&T Samsung Galaxy Note I717] Fr0st_wolf:
YU Yuphoria 5010A Hard Bricked...

Hello there darkSpr1te

i know u may not be on idle hands right now but here's my request/problem.

I played with "eMMC appboot" file while flashing via fastboot.

Now my device is in 9008 old mode. Tried Qfil but it says "cannot connect to comport", tried in all ver. of windows.

No luck still.

I also followed http://xdaforums.com/showthread.php?t=2086142 thread.

Even "eMMC software download tool" cant flash my emmc as it was unable to put it in DL mode.

it also says parameter error with "Raw program" or "state/value".

It would be a great help if u can guide us thorough the procedure of flashing ".pbl" or "sbl1".

well its just i think that ive erased every byte from my emmc :p:p.
[AT&T Samsung Galaxy Note I717] Editor16:
How can I solve this problem?

Hello darkspr1te

I have bricked e160l. I follow your way to debicking. But I have a problem.

Please watch my problem

Brick Fix v2-0

Executing qdload

Requesting SoftwareVersion...

Invalid Response: 0e 49 6e 76 61 6c 69 64 20 43 6f 6d 6d 61 6e 64 0a

Failed to get software version

If HEX/MBN uploaded correctly, please allow for short delay and re-run brixfix to continue the debricking session, a screen showing device options may appear, close this new screen

-------------------------------------------------------------------------

My terminal said this error. what can I do?

*I can't speak English well. I'm sorry
[AT&T Samsung Galaxy Note I717] jinzaburo:
upload debrick.img shv e110s please
[AT&T Samsung Galaxy Note I717] tomgildas007:
hard brick shv-e160s

I made a stupid mistake. I installed cmw of the n7100 on my shv E160S 16G by mistake .. please, I am in distress. My phone does not turn on at all and does not signal the charge either. I learned that we can do it via linux. help me
[AT&T Samsung Galaxy Note I717] RussianBear:
Lg has lgnpst (qpst equivalent). See if it detects your phone. If so, you might be able to flash it via that tool.
[AT&T Samsung Galaxy Note I717] arie001:
SGH-I727 (msm8060 chipset) SII Skyrocket

I have tried running the v2 tool in SUSE 12.2 live and the script runs ok but when this is where it hits a brick wall. Have you come across this error before?

--feedback on linux compatibilities--

I get script errors when I try to run it in Ubuntu 12.10 or 12.04 live versions, the output is corrupted with % symbols and such as if it is using a different character set or something. It exits at the "Do you wish to Upload HEX & msimage.mbn now? Warning Dangerous" prompt.

--end feedback on linux compatibilities--

linux@linux:~/Brixfix-2-1> sudo sh brixfix.sh

Brick Fix v2-0
______________
By Darkspr1te, See README for thanks & References

Checking For Qualcomm Device
Device Found !!!
Error: device found in QDLOAD Mode, switching to QDLOAD
see qdload.pl By JC Sullins, xxxxxxxxxxxx

Expected VID/PID of 05c6:9025, Instead I get :-
Bus 002 Device 006: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)

Do you wish to Upload HEX & msimage.mbn now? Warning Dangerous
y
Executing qdload
Requesting SoftwareVersion...
Version: PBL_DloadVER1.0
Requesting Params...
Params: 06 01 01 00 90 00 00
Uploading file 'MPRG8660.bin' to QDLOAD...
Writing 1024 bytes to 0x2a000000; 164996 bytes left.
Writing 1024 bytes to 0x2a000400; 163972 bytes left.
Writing 1024 bytes to 0x2a000800; 162948 bytes left.
Writing 1024 bytes to 0x2a000c00; 161924 bytes left.
........
Writing 1024 bytes to 0x2a027c00; 2180 bytes left.
Writing 1024 bytes to 0x2a028000; 1156 bytes left.
Writing 1024 bytes to 0x2a028400; 132 bytes left.
Writing 132 bytes to 0x2a028800; 0 bytes left.
Executing file...
Sending MAGIC...
MSG: Qfprom Fuse List: Blowing FAILED
MSG: Failed Fuse addr:
MSG: 0x00000000
MSG: Error Status:
MSG: 0x00000000
Sending secureMode...
Sending openMulti ...
Uploading file '8660_msimage.mbn'...
Writing 1024 bytes to 0x00000000; 1620548 bytes left.
Invalid Response: 0e 57 72 69 74 65 20 75 6e 73 75 63 63 65 73 73 66 75 6c 0a

If HEX/MBN uploaded correctly, please allow for short delay and re-run brixfix to continue the debricking session, a screen showing device options may appear, close this new screen
linux@linux:~/Brixfix-2-1>

linux@linux:~/Brixfix-2-1> sudo sh brixfix.sh

Brick Fix v2-0
______________
By Darkspr1te, See README for thanks & References

Checking For Qualcomm Device
Device Found !!!
Error: device found in QDLOAD Mode, switching to QDLOAD
see qdload.pl By JC Sullins ,
Expected VID/PID of 05c6:9025, Instead I get :-
Bus 002 Device 007: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)

Do you wish to Upload HEX & msimage.mbn now? Warning Dangerous
y
Executing qdload
Requesting SoftwareVersion...
Invalid Response: 0e 49 6e 76 61 6c 69 64 20 43 6f 6d 6d 61 6e 64 0a
Failed to get software version

If HEX/MBN uploaded correctly, please allow for short delay and re-run brixfix to continue the debricking session, a screen showing device options may appear, close this new screen
linux@linux:~/Brixfix-2-1>

Is this error being caused by the emmc requiring a code? If so what would I ask in the SGH-I727 forum to get the file needed?
[AT&T Samsung Galaxy Note I717] darkspr1te:
I will decode the error later but I think it's because you have a different CPU.

My shv-e160l has a msm8660, so brick fix is built for that,

For i727 its been listed with msm8260 & apq8060, can you confirm which CPU you have.

As mentioned, brixfix was originally build for the shv, I need copies of the partition table /boot loaders to expand it's support.

I am currently away from my stash of code (I only took ROMs to rebuild this trip )

But will be back in from of my code by Monday next week, then I can lookup what the error could be, unless SLS decodes it first.

But at a guess on the error, wrong CPU for the hex file uploaded.

sent from the Darkspr1te's lair
[AT&T Samsung Galaxy Note I717] arie001:
I just read that the APQ8060 is only for devices that don't require cellular service but is otherwise the same as MSM8260. So mine must be the MSM8260. The MSM8660 offers more frequencies I believe and is said to be best suited to international phone use but is otherwise same as the MSM8260. Though I suppose at the low level they could all have subtle differences causing incompatibilities.

-EDIT-

Pulled the phone apart and it is APQ8060.
[AT&T Samsung Galaxy Note I717] cbwfnhxk:
Thank you!

Thank you!：好：：好：
[AT&T Samsung Galaxy Note I717] darkspr1te:
Che che, welcome

sent from the Darkspr1te's lair
[AT&T Samsung Galaxy Note I717] visa0kr:
Big thanks to our Hero *darkspr1te*

Thank u so much darkspr1te, ur hero ^^

Also read ur posts about debricking E160L, great job.

I tried running brickfix under ubuntu 12.2 live usb, there were some problems, it said cant open device, or there is no such directory while writing 8660_msimage.mbn and 8660_MPRG.hex

And the same problem while writing *.mbn files

Then i manual edited paths in brixfix.sh

(example : dd if=$MODEL'/home/ubuntu/Desktop/Brixfix-2-1/SHV-E160L-16GB/partition0.bin' of=/dev/sdb seek=0 count=1 bs=512 )

After writing all needed files to Sdb , remove/replace battery and Power up phone

I was so happy when seeing SAMSUNG logo xD

Thank u again ^^!)
[AT&T Samsung Galaxy Note I717] darkspr1te:
Which device did you unbrick ? Also the code shown above if from a very old version of the programs, the new one auto detect the drive it's connected too.

Has the device now fully booted ? Is everything running right?

sent from the Darkspr1te's lair
[AT&T Samsung Galaxy Note I717] RussianBear:
Dark, have you considered rolling this out to other msm8660 devices?
[AT&T Samsung Galaxy Note I717] darkspr1te:
Yes I have, I've been changing all the fixed var's inside the code to allow a minor or major amount of tampering with the setup.

Current task is improve the backup system to auto detect the information, currently it does my device perfect, even if I tamper with the locations of the boot loaders , it still follows them around, next step is add code to pull the header from the .mbn file and know 'exactly' which loader it is, from there create a auto table of filename/partition/real partition contents based on header/partition type size etc. That table, inclusive of a backup is enough to create auto debricks, that is we only need to see it once and its supported.

That once still requires a user to upload a file though, something users don't seem always willing to do.

sent from the Darkspr1te's lair
[AT&T Samsung Galaxy Note I717] RussianBear:
I've noticed that.... that's to be expected though. Major props for your work!
[AT&T Samsung Galaxy Note I717] SouL Shadow:
I'll take a look at it if I get some free time. I've been super busy lately and have barely touched my computer in a couple weeks now.

A quick glance suggests there's multiple small errors, but I would need to dig in to it further.

EDIT:

The command 0e is the Log command in streaming download.

The first log message says:

"Write unsuccessful"

The second log message says:

"Invalid command"

The first message could be due to using the wrong hex file for that chipset (?)

The second message is because the script tries to communicate with download mode, but the phone is still in streaming download.

The third error I see is the phone trying to blow a qfuse (at an invalid address). It's unclear from the output as to why that happened.

-SLS-
[AT&T Samsung Galaxy Note I717] visa0kr:
Mine is Galaxy Note E160L 16GB

It's working prolly now xD

I also fixed Menu and Back button not working by flashing E160L_Teamleader_v1.0 rom (GB rom)

Connect Internet via 3G/Wifi, Dial *#2663# then chose Touch key FW update.

Im gonna flash "Dakrpsr1te's Cherry Rom" later today

Great job sir. Thanks again ^^
[AT&T Samsung Galaxy Note I717] arie001:
SGH-I727 pit file

lart2150 kindly uploaded a pit file in this thread http://xdaforums.com/showthread.php?t=1485519&page=12 which should be from a SGH-I727 Skyrocket. Will this help?

The same thread also has a pointer to this one http://xdaforums.com/showthread.php?t=1629508 with a file named mmcblk0p11.bin also advertised as a pit file dump kindly uploaded by cshmitt.
[AT&T Samsung Galaxy Note I717] arie001:
Other considerations if having USB problems

Also avoid USB ports featuring power-share. My laptop has one of it's USB ports designated to charge devices even when the laptop is powered off, it has a small lightning bolt beside the USB logo. I've noticed this port causes problems with Windows device detection and flags it as an unknown device (even with the proper drivers loaded, other ports work fine).

Also for anyone not familiar with USB 3.0, the ports normally have a blue center to them.