yashsingh1/xdaforums huggingface dataset:
[Essential Phone Questions & Answers] Str0ntium:
I used the 8.1 July dump and it contained two copies of the boot.img.
[Essential Phone Questions & Answers] hellgod12:
thats is not aboot.img though. That is different. No where in the boot img can I find the fastboot/oem commands.

The Application Bootloader ABOOT.img boots the Android kernel/Recovery kernel.

The Primary Bootloader boot.img part is a computer program that loads the main operating system or runtime environment after completion of the self-tests.

The PBL acts as a communication engine to download the Secondary Boot Loader (SBL) into the internal RAM and then activates it.

The SBL adds functions for erase and programming of flash memory and EEPROM; it also handles the actual download of new or updated software. This allows a minimum ROM utilization by the PBL

From what I understand the only way to get aboot.img is from a working device. But I do not have one, so was hoping someone had it.
[Essential Phone Questions & Answers] Str0ntium:
Sorry thought that was a typo. You're looking for the recovery partition img I guess. Maybe someone else can help. I'm at work ?
[Essential Phone Questions & Answers] hellgod12:
Yes exactly, is it possible for you to dump it after work? I know it is asking a lot but would really help me in trying to get this phone working. There has to be a way and I refuse to give up.

Thanks
[Essential Phone Questions & Answers] Str0ntium:
I'm looking through and there is no "aboot" file. There are however abl_a and abl_b. Think abl stands for abootloader?
[Essential Phone Questions & Answers] hellgod12:
Hi are you rooted? I know it can only be accessed via root.
[Essential Phone Questions & Answers] Str0ntium:
Yeah using root explorer as well. Maybe it needs to be dumped from TWRP.
[Essential Phone Questions & Answers] hellgod12:
Hi, it should appear in a search as aboot. You don't see anything?
[Essential Phone Questions & Answers] hellgod12:
Maybe dump both abl_a and b and maybe it is in there.
[Essential Phone Questions & Answers] Str0ntium:
This is where it should be?

/dev/block/platform/soc/1da4000.ufshc/by-name

Anyway I searched all /dev subfolders and no aboot.
[Essential Phone Questions & Answers] hellgod12:
Sounds right, I am going into this blind since I have no working phone to see. But it should be right. Thanks
[Essential Phone Questions & Answers] hellgod12:
Hi, any luck getting the abl_a and abl_b dumps?

Thanks
[Essential Phone Questions & Answers] csrow:
Here is a copy of my abl images. I'm on 9 so I don't know if that will make any difference.

I pulled it from /dev/block/by-name/
[Essential Phone Questions & Answers] hellgod12:
Hey thanks for the files, they seem to be encrypted or something, I can't find any oem strings. I guess this is going to take some elbow grease
[Essential Phone Questions & Answers] Str0ntium:
Looks like csrow beat me to it. I got similar 1 MB files. While looking for the partition(s) to dump, I did not see a "recovery" partition listed.
[Essential Phone Questions & Answers] mouraj2:
Do not worry about the battery you can charge normally

I also use the idea of cable that shorts D + I'm in fastboot and then press reboot bootloader Turns off the phone and enters the EDL mode

---------- Post added at 06:54 PM ---------- Previous post was at 06:36 PM ----------

I think the only solution is to set up EDL but I can not find flash files for QPST
[Essential Phone Questions & Answers] hellgod12:
I can make the flash files for qfil if I can get it into edl. So when I go to fastboot and select restart bootloader. Mine never goes to edl, it just reboots back up like normal. Are you holding the short on D+ the whole time? Or releasing it after 8 seconds.
[Essential Phone Questions & Answers] mouraj2:
The compressor must remain in place until the phone turns off and does not work

You will find it entered into EDL mode
[Essential Phone Questions & Answers] mouraj2:
Can you tell me how can i get flash files for qfil?
[Essential Phone Questions & Answers] hellgod12:
Mine just reboots as normal even with D+ tied to ground the whole time. I never get it into edl. In terms of qfil files. There is a youtube video about converting an lg kz file to a qfil file. Basically you follow the same procedure but using the stock firmware. Like I said if I can get it to emergency mode I will gladly spend the time making the files. At this point nothing will make it enter edl.
[Essential Phone Questions & Answers] mouraj2:
I will send you a video of the way
[Essential Phone Questions & Answers] lemonz23:
I'm having the same problem with my phone, screen hangs on the "powered by Android" screen and I'm only able to get into the bootloader. Restarting the phone goes back to the permanent powered by Android screen.

Keep us posted if you were able to come up with a fix!!!
[Essential Phone Questions & Answers] hellgod12:
I finally got my phone into edl using a brand new cable, seems my old edl cable I made did not gnd out properly. Anyway, I have it now. The biggest issue I am seeing is the firehose programmer. We need one for 8998 chipset which is snapdragon 835. Firehose is a protocol loader that talks to the chipset, almost like a bootloader. This allows us to write the stock firmware back.

Does anyone know where we can get the firehose file from?
[Essential Phone Questions & Answers] mouraj2:
This is the problem I have searched a lot and I do not find the file
[Essential Phone Questions & Answers] hellgod12:
Its because its digitally signed and the ones that are out there are leaks. So we would need someone in essential to leak us the file.
[Essential Phone Questions & Answers] mouraj2:
I suspect that it can be checked out of the phone by a program or box infinity cm2 qlm
[Essential Phone Questions & Answers] hellgod12:
Are you able to search all mbn files?

I am looking for one with 8998 in it.

Thanks
[Essential Phone Questions & Answers] mouraj2:
I think that's pro emmc 8998 includes all these files
[Essential Phone Questions & Answers] hellgod12:
The files aren't the issue, the programmer is. Its is only available to engineers. Even though I am one, I do not work for essential so I can't get it.

What I am wondering is if a qcn backup can be restored without it.

Does anyone know?

If it can then using this command on a rooted phone : setprop sys.usb.config diag,serial_cdev,rmnet,adb

can get us a qcn file. Then we simply restore it I believe?

EDIT: After testing the edl mode, if in 9008, you can not use an qcn. So we are back to needing a digitally signed programmer file for the MSM8998 qualcomm snapdragon. Anyone???>

This is all new to me, so learning as I go, just need more people that have done this to chime in.
[Essential Phone Questions & Answers] winggndm1:
It's just not for the 835, it has to be the one signed by Essential for the PH-1. These programs are signed by the OEM on a phone basis.
[Essential Phone Questions & Answers] hellgod12:
Yes that is what I was saying in my earlier posts, that the phone needs a digitally signed firehose programmer. I have search the entire file system of a working essential and there is no programmer in it. Meaning the only way to get it is from a leak at essential. The question is how do we get our hands on it?
[Essential Phone Questions & Answers] hellgod12:
Do you know anyway to unlock the efs? Like in efs explorer some parts of nv ram is locked and I can not access it. Even with sending the SPC code 000000 which seems to be accepted. I even tried adding the open sesame door folder to root to see if it would unlock and it didn't. Any ideas?
[Essential Phone Questions & Answers] mouraj2:
I'm sorry my brother I also do not have any ideas I also signed in this problem and try to solve .. I have been given the phone to a friend of mine even withdraw tries with him because he has like him and will try to withdraw the file mbn and try with him and your every new and we will keep in touch ..
[Essential Phone Questions & Answers] katastyle971:
http://forum.gsmhosting.com/vbb/f296/snapdragon-835-msm8998-support-cm2qlm-2234616/
[Essential Phone Questions & Answers] hellgod12:
Hi everything I have read on the infinity box tells me that it does not support the essential ph-1. Those logs are all samsung, chinese or other types of phone which have known firehose leaks. I have yet to see proof that infinity-box would work. I even tried a crack version and it does not recognize it. Any more info?
[Essential Phone Questions & Answers] yellk20:
I can try to see if I can dump a recovery img if you need it
[Essential Phone Questions & Answers] hellgod12:
Hi, thanks for the offer, but I doubt the recovery image holds the firehose programmer. I wish there was an exploit in the fastboot I could use to reflash this pos.
[Essential Phone Questions & Answers] QTeknology:
you have a pm
[Essential Phone Questions & Answers] d3sm0nd:
Hey guys, did you find a solution? I have the same problem... can't get past powered by android, can't get into recovery/fasboot...
[Essential Phone Questions & Answers] ea2c:
Same here! Any solutions?
[Essential Phone Questions & Answers] btux81:
#Metoo. Essential claims they cannot help me and said to turn to XDA for the solution :rolleyes:
[Essential Phone Questions & Answers] wyrethewolf:
Ordered an EDL cable and a soft bricked PH1 from ebay for a few bucks (the seller states that an update caused the brick, IDK how accurate that is). Going to try to get a backup of my working PH1 via EDL, and see what I see from there. Should get the EDL cable and the PH-1 sometime this weekend... maybe earlier.
[Essential Phone Questions & Answers] btux81:
If it's stuck in EDL mode (QDLoader 9008 (COM3) in Device Manager), is the EDL cable still necessary? I can run emmcl.exe to communicate with the device: emmcdl.exe -p COM3 -info which displays this:

SerialNumber: 0x40ef99fa

MSM_HW_ID: 0x0005e0e1

OEM_PK_HASH: 0xde025086886aa0ca5fb043a3e74cd1d46819a1ba379d5e597d8bbf3331bed134

SBL SW Version: 0x00000000

Status: 0 The operation completed successfully.

Running this on my Windows 10 work PC: emmcdl.exe -P COM3 -gpt displays this:

Version 2.15

Finding all devices in emergency download mode...

Qualcomm HS-USB QDLoader 9008 (COM3)

Finding all disks on computer ...

0. \\.\PhysicalDrive0 Size: 244198MB, (500118192 sectors), size: 512 Mount:C:,

Name:[]

\\.\PhysicalDrive3

No valid GPT found

Status: 13 The data is invalid.

I followed this post: https://xdaforums.com/showthread.php?t=1818321 to extract my working PH-1's SDA/SDB/SDC/SDD/SDE/SDF/LOOP64 partitions to see if I could find anything useful. In partition SDE there was a text file that looks very similar to the image I attached. Unfortunately I was doing this on my home PC and I do not have access to it at the moment to get the exact info. Most likely it's useless information but I wasn't sure if it would help figuring out which MSM8998.elf file to use. Since I pulled the partitions from the working phone to my PC as raw files, I could open some of them with 7zip and the rest I could with ActiveUndelete. I'm fairly certain I've seen the word generic several times while looking for anything that contained 8998 (not sure if this means there's a generic MSM8998.elf floating around).

While searching for a solution to this problem (once again Essential was zero help), I stumbled across a firehose programmer for a Galaxy S8, as well as some others that use a SD835. These have rawpartition0/1/2/3.xml and patch0/1/2/3.xml. I was thinking I would attempt to edit the XML files with the correct partition information from one of my working phones.

I'm a complete noob when it comes to this but since this phone is only a month old, I refuse to accept it as a brick. I do have access to multiple working PH-1 phones, a Windows and Linux PC, and I'm willing to try to short a USB cable to put one of the working ones into EDL (as long as we can get it back in working order).
[Essential Phone Questions & Answers] rignfool:
[MENTION=5447216]aer0zer0[/MENTION]
[Essential Phone Questions & Answers] aer0zer0:
getting it outta EDL is the trick. Im not sure you can force reboot/battery pull method with this phone. our problem is we dont have a signed firehose. It fails sahara handshake using anything else. Some chinese dev "has/had/something" of a signed essential MSM, but none of use could get past sahara with it.

Good Luck (essential isnt fixing paperweights)
[Essential Phone Questions & Answers] wyrethewolf:
Getting the phone out of EDL mode once it is in EDL mode didnt seem to difficult, I just held down the power button until the unit rebooted.

I have tried every ELF file that I have trying to access the phone via EDL mode and kept running into the same wall that you are.

You were absolutely correct in Essential being zero help in gaining access to the phone. I am sure that there has to be someone inside of Essential that has access to the necessary files - I just wish that they would have a little pity on us, and help get those files released.

Working on the ReverseEngineering subreddit to see if I can get an ELF file that will work properly.

.
[Essential Phone Questions & Answers] lesterf:
Any updates?
[Essential Phone Questions & Answers] d3sm0nd:
Guys - the Essential phone company is closing, we have to contact them and push them to release the QFIL loader. Please open a ticket at essential.com and ask them to do it!
[Android Q&A, Help & Troubleshooting] TsiaoTai:
Hi, I have a serious problem with my moto G4 Play. I was on Android 7.1.1 but I prefer Android 6.0 so I tried to flash the stock ROM 6.0 of my device. It worked, but few minutes later my phone turned off.

Atm I only have access to fastboot mode but my Bootloader is locked, "USB debug" and "allow OEM unlock" are not activated.

I can do fastboot commands but I can't flash anything because Bootloader is locked, and if I try to use

fastboot oem unlock

, it says to allow OEM unlock in developer options first.

If I try to restart bootloader, restart recovery or factory reset it brings me back to fastboot mode with the following text :

Thanks
[Android Q&A, Help & Troubleshooting] TsiaoTai:
any idea ?

Thanks
[Android Q&A, Help & Troubleshooting] Teddy Lo:
As Fastboot log tell you to use Software Repair Assistant , so use the softwer in order to repair your device .

https://www.verizonwireless.com/support/knowledge-base-116950/

Good luck : )
[Android Q&A, Help & Troubleshooting] TsiaoTai:
It doesn't work :(

Because of the phone IMEI is : 0000000000000, the Software Repair Assistant stucks in "Processing of the device informations"
[Android Q&A, Help & Troubleshooting] ps0q:
Query: Stuck in fastboot mode

Hi there, on the top of your phone / tablet, hold down the power button for at least 30 seconds. Your tablet should force shutdown and restart out of fastboot mode into your android OS. Hope this helps.
[Android Q&A, Help & Troubleshooting] Teddy Lo:
Then try to flash latest stock firmware from fastboot ,

like for example

extract from stock firmware :

boot.img

recovery.img

fastboot.img

system.img

now for each one write

fastboot flash boot boot.img press enter

fastboot flash recovery recovery.img

fastboot flash system system.img

etc.

But find stock firmware for your device , don't use lower version because probably you will brick your device , try just with latest one.

Good luck : )
[Android Q&A, Help & Troubleshooting] TsiaoTai:
The problem is an icompatibility beetween bootloader and OS because they are not in the same version so I'm stuck in fastboot no matter what I do

Thanks but my bootloader is locked so I can't flash anything :(
[HTC Excalibur] anjmissy:
so when i try to open things on my phone it says low storage free up space but i just got it and also purchased a 2gb micro sd and i hav already read thru past threads and c ppl askn bout it but no1 helpn..
[HTC Excalibur] skisteven1:
If you learn how to spell and type in complete sentences, I'll consider reading what you have to say.
[HTC Excalibur] RussianSolja:
lol indeed try to make some sence next time lol.
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] solanki zeel:
I there any trick to enable camera 2 api without unlocking bootloader and root ??
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] Hosssain:
No,you have to unlock bootloader.
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] v0id_walker:
There is no way to do this without unlocking the bootloader first.

You do not need root(certainly not on LineageOS), it is enough to go to twrp > mount > check system, then advanced > terminal and

echo "persist.camera.HAL3.enabled=1" >> /system/build.prop

And that is that.

Also, I recommend you to backup "build.prop".

I am not responsible for anything you might destroy by this. Please do your research before copying any code.
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] solanki zeel:
Yes, you can record 4K UHD, from front camera in RN5 pro by using snap camera as well from the rear camera also.

The App which is SNAP CAMERA HDR
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] wjzhweo:
You can use OpenCamera (no root, no C2API required) to record 4K 30fps in both rear and back camera RMN5Pro !
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] MexiDroid:
We want 1080p 60fps back camera
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] maha sandhy:
Miui revolution is try
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] MexiDroid:
Is that a rom ?
[Xiaomi Redmi Note 5 Pro Themes, Apps, and Mods] kostas gp:
It think he ment revolution os. Yes it is a miui based custom rom.
[Android Q&A, Help & Troubleshooting] rottw3iler:
I had been flashing a rom onto my phone (RR 8.0) and customarily had taken a TWRP nandroid backup of the existing rom (RR 7.1.2). Then when I went to wipe data, cache, system, I had accidentally checked the internal storage too and wiped it as a result. At this point all I could do was flash the rom, then magisk root and busybox, then I cloned internal storage (which I identified using cat /proc/partitions to be block sda18) using ADB and Cygwin (with the netcat package) thus:

TERM-1
------
adb forward tcp:5555 tcp:5555
adb shell
su
/system/xbin/busybox nc -l -p 5555 -e /system/xbin/busybox dd if=/dev/block/sda18

TERM-2
------
adb forward tcp:5555 tcp:5555
nc 127.0.0.1 5555 | pv -i 0.5 > sda18.dd

Couple hours later I end up with ~23.5 GB of raw partition dump (all 24,649,728 blocks of sda18 copied, I checked). Now most file recovery software (Testdisk, PhotoRec, active@ products) I've tried seem to check for file signatures/extensions, naturally TWRP's backups aren't among them.

TL;DR:

All I need at this point is one file in particular: data.ext4.win?? – the backup of the data partition, hope I got that extension right – by a data recovery software that can hunt those very few backup files from a cloned internal storage image.

(No, partition recovery is no good.)

Clearly these files are still out there among the sectors because all that I'd done to internal storage was a format. Having come so far I find it hard to believe there isn't software that can find TWRP backup files due to its variable filetype extension. I would assume the file signature is that of TAR files, but I'm not sure.

Recovering these backups is important to me because trying to recover files from the data partition, for example, ends up returning nondescript, unlabeled data by the thousands, no way to know which file is which (looking at you, Photorec). Restoring a backup would return the data partition exactly the way it was before it was wiped out. The rest of what used to be the contents of my internal storage are not important to me. I have over 2,000 contacts that were not backed up to any online or offline service, which most definitely resides in that backup file. Please help me with some legitimate solution or suggestion rather than to say it won't be possible – no reason to believe so when I have the cloned image of the internal storage – at the very least a data recovery software that can help me get those deleted backups out ASAP (my business relies critically on those contacts and chat app histories). Time is of the essence here, I humbly request the community's help urgently.

PS I realize this question has more to do with forensic data recovery but I'll still give it a shot in here. Hope this post isn't too vague in stating what I want done. I'm sure this would massively help others in the future too, given how common such an occurrence is.
[Android Q&A, Help & Troubleshooting] zelendel:
The problem is not only did you format it but when the system was setting up it also altered it. So the data maybe gone and anything that could find it is beyond the skills found on this forum these days.
[Android Q&A, Help & Troubleshooting] rottw3iler:
I don't deny that. But assuming data written is sequential only 30-50 MB would've been written since. And the backups were taken when the internal storage already had around 8-9 GB of other data. Which I believe should mean that there's still a chance that the backup files weren't overwritten.

Although now that you mention it I'm beginning to have my doubts, considering wear leveling patterns for NAND flash memory...

PS Photorec identifies twrp backups as tar files with wrong extension but that doesn't seem to recover anything anyway. I guess you're right :'(
[MTCB Android Head Units Q&A] donofrionis:
Does anyone use the SiriusXM app on their head unit? The experience is awful, the images for the channels never show up and are over sized. I wish I was able to add shortcuts or a widget to direct tune to a channel, just click and it opens the app and plays that channel.
[MTCB Android Head Units Q&A] Scopesys:
100% Agree. I tried talking to one of their "Software Engineers" .. he was CLUELESS, so I gave up. NOT IMPRESSED with support .. Not that impressed with most of the Channels either.... same old- same old every day