yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Sadly, unless you enabled OEM Unlocking in the android developer options, you'll have no way to unlock the BL. Have you tried flashing any partitions from fastboot? My bootloader was unlocked prior to bricking, so if we can figure out where it stores the info regarding the state of the bootloader....
[Android Q&A, Help & Troubleshooting] JEbreni:
Well I am trying with some new tools and new QFIL Loaders extracted from original stock firmware for nokia 7 , moto x4 , sony XA2 and xa2ultra , Nokia 6 2018 , HTC U11 Life , Asus Zenfone 4

all of them have the same processer Hoping that I could get the emmc firehose file
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Have fun with that. It has to be digitally signed by either Longcheer or a debug qualcomm signature to work. None of the asus loaders work, none of the sony ones will work (tried them all..). Hell even the cat s61 loader wont work. And it really has nothing to do with the "tools". It comes down to having the right signing. The closest I personally have come to getting around this was decompiling the loader elf with IDA, then byte patching out some stuff. I came close, but no cigar.
[Android Q&A, Help & Troubleshooting] JEbreni:
I have something on my mind it might be funny thu , what if I tried to do this How to use Android Emulator to test custom ROMs | XDA Developers Forums (xda-developers.com)

with the backup files that I created Do u think we could get android 9 OTA by that .

another solution I am looking to get another broken device by ebay to backup the whole partitions we might be able to flash by fastboot and unbrick
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
You are correct, that is a very funny thought :-] As far as the ebay idea goes - that could work. I could make a SD card work if I had a complete backup. Heck if I could juust get my hands on the verizon variant gpt I'd be done with this.
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Heres a thought. If you can still get into one of those s48cs via TWRP, you could use the console to dd the gpt from the phone. I'm not the dd guru, but you would do something like: dd if=/dev/block/mmcblk0 of=/sdcard/gpt.bin count=1536

the count part I'm not certain about. I know its the first 17kb of the disk...
[Android Q&A, Help & Troubleshooting] mofaker33:
Here is the first device used adb shell with the exact code you posted
[Android Q&A, Help & Troubleshooting] JEbreni:
Sprint device

I took this file with other command via adb and TWRP just pull /dev/block/mmcblk0 you could take alook on it here
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Awesome sauce on the first file. Its way bigger than needed, however the key here is whole GPT is there intact. Mucho grande appreciated! I'm going to pick up a faster 64GB sdcard tomorrow, then get to work on building a image that these will boot from. I'll keep you posted
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
If you are even vaguely curious as to why I needed that GPT so badly.. Extract the attached zip and have a look at the XML files. The rawprogram0.xml and patch0.xml are needed for flashing with QFil. I haven't added the filenames yet to the rawprogram file, but that will only take a few minutes. And no, my goal isn't QFil flashing... There exists a python script named msp.py that allows you to either make a sinlgeimage file for flashing the base bootloader stuffs so as to be able to get the phone into the right download mode - so you can write the backup partition images directly to the phone. OR, you can write the entire system to a SD card, and hopefully boot the phone with it.
[Android Q&A, Help & Troubleshooting] mofaker33:
This will be great , I tried everything possible but nothing works I am waiting to get a good offer with ebay to find a broken phone and backup the whole files with keeping the system as readonly or we figure something out , you did a really hard job with IDA , I tried to patch boot_a file manually it took me hours with no hope , hopefully your knowledge and experience with unbrick that stupid support devices .
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
So close, yet so far. I think I might have to modify the boot images or something. With my newly created SD card from the GPT you provided, the phone does about 50 blinks of the red light next to led flash on front, then stops, screen lights up, then dims a little, and sits there. If I reset it via volume down+power, red light blinks once, then screen does its thing but no love.
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Hey I just noticed something while browsing through the rawprogram0.xml file created from your GPT.

label="userdata" num_partition_sectors="0" physical_partition_number="0" size_in_KB="0" sparse="false" start_byte_hex="0x34b2ff400L" start_sector="27629562"/>

It looks like your userdata partition isn't gone, its just 0kb. What you could do is try running gdisk from within TWRP and maybe delete\recreate the userdata partition... Or maybe parted not sure which you would need. Being I can't even get mine into fastboot you'll kinda be flying blind. To use either of these attached files,. you'll have to unzip obviously, then copy to sdcard. Next, for temporary duty, copy the files to /data/local/tmp

cp /sdcard/parted /data/local/tmp

chmod +x /data/local/tmp/parted

cp /sdcard/gdisk /data/local/tmp

chmod +x /data/local/tmp/gdisk

./data/local/tmp/gdisk mmcblk0 <- cant remember if you do this in gdisk or parted

chmod +x /data/local/tmp/parted
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Weirdo stuff. Ive determined that the blinking pertains to how many partitions are on the sd card. I kinda of doubt it would be a coincidence that it just happens to blink exactly the same number of times as there are partitions (71 times..). So I guess the next question would be is this some kind of benchmark of the sd card determining if it can run the system from it? I read about this somewhere during my first deep dive into this stuff. Could a brave soul possibly take a image I could make of this sd and flash it to a 128gb card and see if they could boot from it? Just a thought...
[Android Q&A, Help & Troubleshooting] mofaker33:
I already ordered another one by eBay when it arrives I will try to take a full backup for the partitions whole keeping the system as read only hopefully it will work with other devices
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
what you do, if you have enough storage space to do so, is just dd mmcblk0. This is where a OTG adapter and a external hdd comes in handy. Anyhow, you could do:

dd if=/dev/block/mmcblk0 of=/sdcard/emmc.img

and it would image the entire drive. Or if you like the abuse and dont mind typing, you could do it one partition at a time.

dd if=/dev/block/mmcblk0p1 of=/sdcard/partition1.img

dd if=/dev/block/mmcblk0p2 of=/sdcard/partition2.img

..and so on and so forth. I did the first method, then used winhex to extract the individual partitions.
[Android Q&A, Help & Troubleshooting] mofaker33:
C:\Program Files (x86)\Minimal ADB and Fastboot>adb shell dd if=/dev/block/mmcblk0 of=/sdcard/emmc.img

dd: writing '/sdcard/emmc.img': No space left on device

92500657+0 records in

92500656+0 records out

47360335872 bytes (44.1GB) copied, 737.792265 seconds, 61.2MB/s

C:\Program Files (x86)\Minimal ADB and Fastboot>adb pull /sdcard/emmc.img d:/1

/sdcard/emmc.img: 1 file pulled. 23.7 MB/s (47360335872 bytes in 1906.966s)

uploading after compressed to 10GB
[Android Q&A, Help & Troubleshooting] mofaker33:
reserved
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Good job. You can write that file back with dd just in reverse of pulling it.

IE: dd if=/sdcard/emmc.bin of=/dev/block/mmcblk0

I'll try her out tomorrow. Had a 10hr work day today im tore
[Android Q&A, Help & Troubleshooting] mofaker33:
I hope you get the fastboot menu , I am gonna do a full dump when I receive the ebay ordered device
[Android Q&A, Help & Troubleshooting] mofaker33:
Got a working device in hand , what should I do to dump the rom of it .
[Android Q&A, Help & Troubleshooting] mofaker33:
Got the other device working , sharing the details when I uploaded all files
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Good job! Apparently without making changes to the boot images, I wont be able to go the SD route. And it appears the system and userdata partitions may be encrypted in that dump. All I see when I view the images in Winhex is the TWRP dir, and the backup emmc.img. Shrug I'm just about over this phone heh. It was free to begin with, so not a lot of love lost there. Anyhow, once again good work!
[Android Q&A, Help & Troubleshooting] mofaker33:
I could make u a full dump I have 2 different phones with working patched QNC , I made a backup for \dev\block\by-name and flashed every partition with dump name like

Fastboot flash bluetooth_b FILENAME

the userdata file was encrypted I weren't able to flash it so after I finished flashing all the dumped files I booted to recovery and wiped everything and got it working and rooted after a long time waiting
[Android Q&A, Help & Troubleshooting] mofaker33:
Just tell me how to start and I would backup anything you ask for and I will make a full guide with the dumped files I will change some information such as the dev and SN to zero or international number to make every body use it later with no problems .

You could say I have the original untouched dump , the working patched dump , the partitions dump you provided , although I cannot get the payload file downloaded , If i could put my hand on one mbn file you will reach the bootloader Easley .
[Android Q&A, Help & Troubleshooting] the.real.p3y0t3:
Ive pretty much grown to accept that without write access to the emmc, I'm not going to be able to unbrick; theres no jtag pins\pads on the board as far as I can see, so thats not an option. Without a signed firehose, this phone is a doorstop. Anyhow, good work on your recoveries mofaker33!
[Android Q&A, Help & Troubleshooting] yodeling_cowboy:
I have been following this thread for about a month, I have a s48c for Verizon that I was attempting to flash AOSP on, unfortunately I got a little cocky about flashing and didn't backupo_O. Anyhow I scrapped the idea because it seems that the way the company that made the phone did the partitions made it to where it will not take a alternate img.

Also, I don't know if I'm the only one that remembers this, but CAT committed themselves to updating these to android 9 upon release (the reason I was comfortable buying one a year ago) then they actually took it down from their website the last 4 months. Thus why, in my anger I said I would do it myself, I even contacted the team who supports these phones to call then cheaters for reneging (in a nice way) in which they denied the commitment.

Anyhow, I now have a unlocked s48c with no OS and a newfound ever growing knowledge about rooting these, I have been able to install TWRP via the recovery partition via booting straight to TWRP, uploading twrp to the memory and installing TWRP in TWRP. But I still can't find out how to get a img to flash and load other then TWRP.

mofaker33, would you mind redumping those files, the link you posted doesn't work anymore.
[Android Q&A, Help & Troubleshooting] mofaker33:
I will try to post it when I have a time and a good internet speed 👌
[Android Q&A, Help & Troubleshooting] NekoOtoko:
Hi folks! This thread is so XDA :D Just people tinkering and trying to figure stuff out.

Anyhow, to the point - can anyone please provide a clear firmware file for the Verizon version?

Preferably both fastboot flashable and twrp backup. Many thanks in advance!

I have bootloader unlocked, untouched Sprint version and wanted to see if I can swap the soft on them.
[Android Q&A, Help & Troubleshooting] letruong127646:
can you share me solution
[Android Q&A, Help & Troubleshooting] zouyu:
Can you share the backup image again?
[Android Q&A, Help & Troubleshooting] sztoserr:
Helo you have backup image?

I try install AOSP Android 10 on my s48c and i brick my phone :D

I have enable bootloader and fastboot

i have TWRP and i instal them AOSP Android 10 but after instalation i see only logo cat and phone go rebooting :(
[Android Q&A, Help & Troubleshooting] mrbeanchina85:
điều này quá đơn giản, tôi có bản sao lưu đầy đủ từ twrp của cat s48c sprint. Chỉ cần khôi phục và bạn đã hoàn tất
[Android Q&A, Help & Troubleshooting] zouyu:
Imei lost can help extract QCN file?
[Android Q&A, Help & Troubleshooting] zouyu:
I need the QCN file backed up by QPST now, please help me
[Android Q&A, Help & Troubleshooting] zouyu:
Do you have the QCN file for this phone?
[Android Q&A, Help & Troubleshooting] mofaker33:
https://xdaforums.com/t/cat-s48c.4396089/
[Android Q&A, Help & Troubleshooting] Offscru84:
Here's something that I hope will be of any help to someone fresh as of today 2/11/22
[Android Q&A, Help & Troubleshooting] Offscru84:
sorry it didnt upload

6
[Android Q&A, Help & Troubleshooting] NaraxFPS:
If this works I will kiss you
[Android Q&A, Help & Troubleshooting] NaraxFPS:
where am i supposed to input this file into?
[Android Q&A, Help & Troubleshooting] NaraxFPS:
I Have found the solution completely to fixing bricked s48c phones reply to this comment and I will upload how to do it.
[Android Q&A, Help & Troubleshooting] yodeling_cowboy:
What solution did you find. I also had the same question that you did on the 10th. I could not figure out where to put the files that our friends on this thread have retrieved for us.
[Android Q&A, Help & Troubleshooting] NaraxFPS:
I managed to get another CAT s48c for cheap, and pulled all 3 images, the boot image, the system image, and the vendor image and then flashed them into the bricked phone and just like that I revived it, I was super ****in excited, if anyone needs the images quote me though they are very heavy and my internet is trash so I don't feel like uploading them without any demand for them.
[Android Q&A, Help & Troubleshooting] NaraxFPS:
It is 6GB but as I have said before my internet is extremely slow.
[Android Q&A, Help & Troubleshooting] NaraxFPS:
These images are also already rooted, so if you were trying to root the phone but bricked it, u basically just saved yourself so much work.
[Android Q&A, Help & Troubleshooting] yodeling_cowboy:
Thats sick! When might you have a chance to upload these images?
[Android Q&A, Help & Troubleshooting] NoPagaZ:
where is vendor.img?
[Android Q&A, Help & Troubleshooting] NoPagaZ:
friend were is the vendor image?
[Android Q&A, Help & Troubleshooting] chozycorleon:
when i boot to twrp i cat back up cuz storage shows 0mb what a my supposed to change?
[Android Q&A, Help & Troubleshooting] chorniu1994:
what to do with the menu there is no fastboot

only qfil how to flash

help me please )))

can you send me these files please ))????
[Android Q&A, Help & Troubleshooting] chozycorleon:
whats wrng with your device?
[Android Q&A, Help & Troubleshooting] chorniu1994:
I stitched the fastboot section via adb (((so now the device sees only as Qualcomm 9008

so i'm looking for firmware files for qfil

Help me please 😭😭😭
[Android Q&A, Help & Troubleshooting] chozycorleon:
so when i boot to the twrp recovery you provided.. now of the storage mounts i can back up or flash anything. what should i do?

UPDATE. just do as below if you face that error.

> You can choose to Factory reset, Format data or Advanced wipe > tick /data. Either way, it's going to wipe EVERYTHING in the internal storage (that's the purpose of device encryption, to prevent unauthorized access to the storage). However, I recommend you choose "FORMAT DATA"
[Android Q&A, Help & Troubleshooting] chozycorleon:
whats the solution?
[Android Q&A, Help & Troubleshooting] Offscru84:
Pls fill me in on solution
[Android Q&A, Help & Troubleshooting] chozycorleon:
what do you want to do with your device and whats the state of your device?
[Android Q&A, Help & Troubleshooting] NaraxFPS:
Sorry for the wait, I was phoneless for a while so I did not get notifications of this thread, but here it is finally, I no longer have the same phone but these images I used back when I had that phone, at the moment I am using a CAT S62, anyways here are the images for the S48C. (you can flash them with fastboot) [If you could leave a good reaction on my profile I would really appreciate it since this account is new]
[Android Q&A, Help & Troubleshooting] NoPagaZ:
Thank's , my s48c was dead but now after flash the 3 files it is alive AGAIN
[Android Q&A, Help & Troubleshooting] NoPagaZ:
I have a query for you, NaraxFPS my phone before bricking it was network free, now after flashing these images it is still network free

If it had been blocked, would you release it with these images or not? or one of the other partitions on my phone stores the unlock, or the IMEI.

Thanks in advance.
[Android Q&A, Help & Troubleshooting] NaraxFPS:
Good afternoon, these images come from an unlocked phone.
[Android Q&A, Help & Troubleshooting] NoPagaZ:
Ok i will test it with a locked phone the sunday. Thank you very much.
[Android Q&A, Help & Troubleshooting] zanzibar255:
not

not working with locked devices( i have tested with sprint locked device).......i have managed to flash but the network lock is still there
[Android Q&A, Help & Troubleshooting] NaraxFPS:
That's obvious that the lock would still be there since these partitions are only for the phone to unbrick. Or root.
[Android Q&A, Help & Troubleshooting] zanzibar255:
Oh yeah, okay.....do you know any way to unlock the device from sprint network?
[Android Q&A, Help & Troubleshooting] chozycorleon:
on some device i would just copy the NV from an unlocked device to a locked on and that kinda did the magic. but with this one its not working...
[Android Q&A, Help & Troubleshooting] chozycorleon:
do you have an unlocked one?
[Android Q&A, Help & Troubleshooting] NoPagaZ:
yes, i have one unlocked and one locked to spr..
[Android Q&A, Help & Troubleshooting] chozycorleon:
can you copy the full NV on the unlocked one and send me a copy we see if that can unlock the unlocked ones. thats what i do on sprint locked Kyocera's and they get unlocked...
[Android Q&A, Help & Troubleshooting] NoPagaZ:
With great pleasure, I just need you to send me the instructions to do it because I have never done it.
[Android Q&A, Help & Troubleshooting] zanzibar255:
You have to root your phone and thn we will guide u to copy the needed files.
[Android Q&A, Help & Troubleshooting] NoPagaZ:
my unlocked phone is rooted, using this same thread
[Android Q&A, Help & Troubleshooting] Xombiex:
how do you backup? i always do format and next backup , mtp not detected and no otg, when reboot phone encrypted and delete backup and its the same loop
[Android Q&A, Help & Troubleshooting] chozycorleon:
I use Total command to browse the phone storage on PC.. and get the twrp back to a location on pc from phone..
[Android Q&A, Help & Troubleshooting] chozycorleon:
This QCN is it from an unlocked S48c?
[Android Q&A, Help & Troubleshooting] Xombiex:
yes but the phone will not unlock with that, i already have solution for unlock, the only problem is, we need firmware for another company not sprint, sprint firmware has a bug after unlock process and no get signal only say on uicc option the phone is unlocked
[Android Q&A, Help & Troubleshooting] zanzibar255:
Please check the imei after flashing the QCN file
[Android Q&A, Help & Troubleshooting] Xombiex:
but wich process do you do? i mount twrp, format data to get storage, do a backup, restart and phone start encripted and backup gone
[Android Q&A, Help & Troubleshooting] Xombiex:
imei is not the problem, can change using umt the problem is the signal after unlock process
[Android Q&A, Help & Troubleshooting] Xombiex:
to unlock the phone first need backup qcn

--next on fastboot you can run this command

fastboot erase modemst1

fastboot erase modemst2

---turn on the phone and imei gone

---restore qcn (if use umt qcom edition can change imei)

---check uicc and it will say phone unlocked

---problem no signal

---posible solution (tested on sonim) need other firmware or backup
[Android Q&A, Help & Troubleshooting] Xombiex:
similar process on twrp run this

"adb shell" .

dd if=/dev/zero of=/dev/block/bootdevice/by-name/modemst1

dd if=/dev/zero of=/dev/block/bootdevice/by-name/modemst2
[Android Q&A, Help & Troubleshooting] chozycorleon:
While in Twrp after you make the backup don't restart the phone open totalcmm on your pc and click on adb in tccm then browse through to the location of your backup and save it to the location of your choice on pc via drag and drop. Google Drive Link to totalcommand
[Android Q&A, Help & Troubleshooting] Xombiex:
do you have a backup from verizon device for example? i already read backup from unlocked device and write to locked with microsd but phone stuck on logo even if reset, so i reinstall boot,vendor and system with fastboot but again no signal
[Android Q&A, Help & Troubleshooting] chozycorleon:
there is an NV from the unlocked one. would this fix the network issue after you write it to the device?

also is there a way we can extract the two modems you advised to clear earlier in fastboot.. cuz i think if we can get those from the unlocked one and flash them on a locked one we can see some changes?
[Android Q&A, Help & Troubleshooting] Xombiex:
if write modems from unlocked phone and write to locked only will lost imei and baseband, wich tool use to read NV? cdma workshop or dfs?
[Android Q&A, Help & Troubleshooting] chozycorleon:
nop only have a all lot of sprint ones all locked.

NV-items_reader_writer.rar
[Android Q&A, Help & Troubleshooting] Xombiex:
already write NV but same result , no signal
[Android Q&A, Help & Troubleshooting] Xombiex:
how do you read this partitions

?
[Android Q&A, Help & Troubleshooting] Xombiex:
anyone has a partition boot.img, vendor.img, system.img? not from a sprint device i have unlock solution but after the process need other rom not sprint, sprint has a bug after unlock and no get signal. i have phones for try
[Android Q&A, Help & Troubleshooting] zanzibar255:
How do you backup and restore qcn file using QFIL tool? How to enable DIAG Port?
[Android Q&A, Help & Troubleshooting] Xombiex:
##3424# 000000 enable díag, next i use umt dongle
[Android Q&A, Help & Troubleshooting] Mr.PvT:
Can you update another download link, this link is broken, can't download successfully
[Android Q&A, Help & Troubleshooting] Mr.PvT:
send link bro
[Android Q&A, Help & Troubleshooting] Xombiex:
what you need bro?
[Android Q&A, Help & Troubleshooting] Mr.PvT:
I updated the file: Cat S48c full unlocked rooted, or need boot root
[Android Q&A, Help & Troubleshooting] Xombiex:
Can You share link bro
[Android Q&A, Help & Troubleshooting] Mr.PvT:
i don't have it, i need it
[Android Q&A, Help & Troubleshooting] Mr.PvT:
#73 I have the link, but I can't download it successfully, if you download it successfully, can you reupload me the google drive link
[Android Q&A, Help & Troubleshooting] Xombiex:
I have one backup read by twrp but doesnt work after restore phone go to fastboot if You want try there is https://mega.nz/file/tIYA1a7Y#HnOdZp63tzsUBKBpqQTdI_GF0uQPkz3DzflLdqRTi1s
[Android Q&A, Help & Troubleshooting] zanzibar255:
So no one has found a right way to unlock the device?
[Android Q&A, Help & Troubleshooting] Xombiex:
Solution it's done , problem it's after unlock need full flash (not backup) to fix signal but there isnt loader and firmware
[Android Q&A, Help & Troubleshooting] adonai999:
How do you add the filenames? I'm have a Cat s48c that has no firmware installed and the OEM is locked.

Help please. Thanks in advance