yashsingh1/xdaforums huggingface dataset:
[General Topics] Renate:
Maybe you already have a loader for Qualcomm "Emergency DownLoad" (EDL) mode.

Maybe you're looking for one.

You know what? A single loader is for more than one device. But it gets hairy with signing and manufacturers and stuff.

So, I've got a beta release utility here. It can (in most cases) identify which model Qualcomm processors a "Firehose" loader is designed for.

First, it's currently a Windows release.

Second, it doesn't work with the older .mbn style loader (since they don't include that information).

So, just go to My EDL page and go to the bottom and download qcomview.exe

C:\>qcomview.exe /m poke3.bin
APQ8096
APQ8098
MDM9250
MDM9255
MDM9350
MDM9650
MDM9655
MSM8996
MSM8997
MSM8998
QDF2432
SDA630
SDA636
SDA658
SDA660
SDM636
SDM658
SDM660

You can see the SDM 636 (which is the actual processor on a Poke3.

Obviously, you have to select your own loader.

I've scanned through 200 loaders and I recognize all the processors.

If you see a "???" please quote it.

Edit: Maybe you're saying, "That ain't nothing but a "string" script!" Eh, mostly, but it is more clever and it sorts things.

Edit: The current version uses /m to list models. See the web page for further usage.
[General Topics] HemanthJabalpuri:
Thanks for the tool. I have a small feature request, since xbl and elf firehorse programmer use similar structure(I guess), it would be useful if you add a way to check if xbl and programmer are compatible(by comparing cert hashes?).
[General Topics] Renate:
It would be.

On your device you already have a ton of ELF images that have compatible signing.

The problem is, the certs are not identical since the lowest level (farthest away from the root authority) has things like dates and annotations and the bit fields are not the same.

I've not yet figured out how to generate from an ELF file the 256 bit "Hash" that EDL gets out of the device.

To those who don't know yet, I've added more things to this utility. It can check the regular hashes in the ELF files. If your device is not SecureBoot this can be handy if you want to patch. The hashes on the program segments in an ELF file are always checked, the signing is only checked if SecureBoot is on. So, if your SecureBoot is off, you can patch a file, run qcomview /h whatever.elf. As of now it won't can correct wrong hashes but you can simply hexedit in the bigendian values and then double-check with the same command.

C:\>qcomview /h xbl
64 bit ELF, SHA384
0 00000000 000003f8 8a46a864b9bec352 69b1dadfcac64bfa a388f7bea37d855e 50f55170277c043c 87c862e23709fd96 34bb545ac49a3d64 OK
1 00001000 00001cd8
2 0005cd10 00002ab0 3d2e7c505458e1e7 9070b1957a8f2520 3bbcf288674548f1 7db146a86b314499 5890e1432dbac635 2bad53bfd2960908 OK
3 0005f7c0 00000d64 ac556708059a1315 41e774e34310b89f 3c3f13183b43fda9 9e3a34bd0899da4b bb43c1080a43925f fd8d6a2ecd864e29 OK
4 00076d70 00000000
5 0005cd10 00000000
6 00003000 0004cd04 a81ab8ec59e2dfb1 f2f98e3ac0a9a396 1cd9f0dfb5a5daa5 2cda2f52d4df97c8 bc398b24528fd10f cd47ced08596f61c OK
7 0004fd10 00000000
8 0004fd10 0000d000 e7d03abb34361774 e030039e096b3e25 64519024c5c15666 efecbd8006deaaae b87884e2bdab52cb e06a4a7a4873e1c5 OK
9 0005cd10 00000000
10 00060530 00016838 2ca0423b6e745b5f c69544b947556ff1 9d04792c579d2f53 d480d2fa738cac82 1674ddaab8078071 648cc10f384ec25a OK
11 00376d70 00022000 18bdbbdeac3e92c0 6f3e5f06f5aa91ae d0daa757a375bab6 5e90d4e2a52d8e95 2255d80c76637316 b24736223e0a0bd2 OK
12 0005cd10 00000000
13 00398d70 00048ded 794528234b46757a 3017481198fa8fd6 c9578e6565ec301a f0ab28fbe105c460 c7cc855f93576767 29302c26357a00bb OK
14 003e8490 00000000
15 003e1b60 0000692d 1354b9b55447ffb8 54ea17d1d9f1ea88 c84bd1045a6bd106 3b38df93fa049fa9 c1b245dc6106098a 0450a75bf7e5ce3f OK
16 00076d70 00300000 7341f2cde09d6a5f 53bcb90714f779a5 53c3ffeeff1824e5 437464f4bfcc545f 6719370d5d6c656d df96e81382315405 OK

For you Motorola users running into "range restricted" you can dump the ranges by:

C:\>qcomview /r motog.bin
Addr LUN Start Count
------ --- -------- --------
008220 0 0 32
008238 0 -5 5
008250 1 0 32
008268 1 -5 5
008280 2 0 32
008298 2 -5 5
0082b0 3 0 32
0082c8 3 -5 5
0082e0 4 0 32
0082f8 4 -5 5
008310 5 0 32
008328 5 -5 5
008340 1 0 2048
008358 2 0 2048
008370 3 0 2356
008388 5 0 2356
0083a0 0 2080 512

0083b8 0 0 256
0083d0 0 -33 33
0083e8 0 131072 284992
008400 0 416064 2048
008418 1 1 1

The UFS table is on top, followed my the eMMC table.
[General Topics] Renate:
I've just added SHA256 fingerprint of the root CA to qcomview.

C:\>qcomview /p loader.bin
5adc6039 dcb297d4 0c55df73 1580248d a9e18b31 ccc43b45 36795313 f82fd430

If SecureBoot is enabled xbl/abl/Firehose must all have the same fingerprint.

(This also goes for the other two dozen ELF files in flash.)

For most devices this SHA256 will be the same that your EDL client prints out as "Hash".

There appears to sometimes be (on newer devices?) a discrepancy between root CA fingerprint and EDL "Hash".

Possibly the EDL "Hash" is the encrypted version?

In any case, all the fingerprints should agree.

Edit: Some newer devices use SHA384. qcomview myloader.bin /p will print out both SHA256 and SHA384.
[General Topics] noob9t2:
Hello , Renate

I am using you edl.exe programme. it work fine but i would like to know that the tool has any features to flash using xml file or not ? and it is support ufs provisioning or not ? Please confirm
[General Topics] Renate:
Yes, it does UFS (with the /u flag).

No, it doesn't do these XML files. I find the whole idea a bit overblown.

If you're in the habit of overwriting every partition on your device often, simply:

Take the XML file and delete all the redundant stuff besides 1) partition name, 2) image filename.

Add in edl /w /p on each line.

Execute it as a batch file.
[General Topics] noob9t2:
Thank You Renate for reply. we flash ufs chip using qfil after flashing on qfil, we need to flash patch file and check ufs provisioning to boot the device properly. On your tool, anything need to do after writing a partition. if i write a single partition, phone will boot normally ?
[General Topics] Renate:
Sure, if you didn't break anything.

The reboot command is edl /z

Ha! You motivated me to track down why some devices need you to do that command twice.

I just fixed it.

Download the special Valentine's Day release of edl.exe (from the usual place).
[General Topics] Renate:
So, if you're using QFIL there's a loader somewhere that you're using. Find it.
[General Topics] roulo:
Please can you explain how the patch for the loader works
[General Topics] Renate:
Loaders are made by phone manufacturers from standard editions of xbl (the secondary loader) released by Qualcomm.

Sometimes they put in restrictions (like Lenovo/Motorola), sometimes they put in authorization (like OnePlus).

Sometimes there are two different versions, one with full capabilities, one without.

The word "patched" gets used often for the full capabilities loader.

Patching a loader yourself is not that difficult, the problem is that loaders must be signed and you can't do that.

Many components on Qualcomm SoC phones are signed.

This ensures a "chain of trust".

The only way that you can patch something is if your device does not have SecureBoot enabled.

If you know of a phone without SecureBoot, tell me and I'll buy a case of them.
[General Topics] alecxs:
I never had time but here is a starting point.

https://xdaforums.com/t/k40-bricked.4538285/post-87978383
[General Topics] Renate:
What I could read of that was talking about analyzing Firehose loaders for vulnerabilities, which you can.

I've largely disassembled a "restricted" Motorola Firehose loader and could patch it easily.

Still, unless some Motorola employee goes rogue I don't see how I could sign it.
[General Topics] Renate:
I finally figured out something that was bugging me.

We all know that Qualcomm processors have in fused memory the hash of the root certificate.

The root certificate is the top level certificate for signing the next certificate which signs the next certificate which signs the hashes of the program segments in a file.

All this stuff is in every Secure Boot protected file, like Firehose loaders, xbl, abl, cmnlib, modem...

It turns out that Qualcomm processors may have up to three separate "pkhashes", although they are quite often all the same.

Some modern Qualcomm processors have switched from using SHA2-256 to SHA2-384, that is, from 32 bytes to 48 bytes.

If someone hands you a Firehose loader you can find the certificate chain, find the last (root) certificate and just do a normal SHA2-256 or SHA2-384.

One of these hashes will match the hash that your device spits out when you run an EDL client.

Note: Some older EDL clients will only spit out the first 32 bytes of the hash when the hash is actually SHA2-384 and 48 bytes.

Some Firehose loaders encode the first 8 bytes of the hash in the filename, e.g. "006b50e100310000_cc3153a80293939b_fhprg.bin".

In most cases this should match one of the hashes you did on the Firehose loader.

In some cases, it doesn't. Why?

For some devices Secure Boot is not enabled.

This is unlikely to be a phone, more likely a hot spot or cellular modem.

If I have a device and it spits out:

HWID: 066600e100000000
Hash: 0123456789abcdef-0123456789abcdef-0123456789abcdef-0123456789abcdef

And I find a Firehose loader that works with this then I might presume that that loader should be named "066600e100000000_0123456789abcdef_fhprg.bin".

Since this device does not have Secure Boot enabled it doesn't care about the signing, but it still has the root certificate hash.

In any case, things get messy quickly with duplicate files.

A single Firehose loader may work for multiple models, but if Secure Boot is enabled it will only work with one hash.

Oh yeah. Both edl.exe and qcomview.exe support both hash sizes now. Download the new stuff in the sig.
[General Topics] Thevinch:
hi i need the Firehorse programmer for samsung a52s (SM-A528s)

you habe this file please

thanks in advance
[General Topics] Renate:
No, I certainly don't have any loaders.

The two main collections of loaders are:

bkerler

hoplik

But you should first use your EDL client to get your HWID and PK hash so that you know what you're looking for.
[General Topics] Thevinch:
hi this is my information in edl

QC Block ID: 9DD20399

QC HW ID: 001920E100200000

QC CPU: Snapdragon 778G 5G SM7325

QC HASH: 82545FAB99C994311047637C7CFBFCAC038E8AC3F97B249B2CA24E4AE4BA76FB

thanks in advance
[General Topics] Renate:
Sorry, I don't see that hash anywhere.

Qualcomm goes crazy with SDM series, model name, code name.

I think that this is an SM_KODIAK.
[General Topics] Thevinch:
ok and i need to unlock my frp lock and i need the loader or other solution please

you have solution is sm-a528b U5
[General Topics] Renate:
The extent of my knowledge concerning Samsung is that model "SM-blahblah" is probably Samsung.
[XPERIA X1 General] bbhermann:
had no messenger on my t-mobile x1.

installed this cab:

http://xdaforums.com/showthread.php?t=334621

and got the panel working following this thread:

http://xdaforums.com/showthread.php?t=444543

however

1. i can't start the messenger (programs)

2. can't use the "profile" and "options" at the windows live panel.

[edit]

found this release:

http://xdaforums.com/showthread.php?t=398373&page=2

now i'm able to start the messenger (juhu); however i can't add an account ...

do i have a chance to get the windows live messenger running on this t-mobile x1?
[XPERIA X1 General] shapee:
i got this problems too, looks like it is caused by the 3G connection with t-mobile.

The live messenger is working with wi-fi connected. but not with the t-mobile internet.
[XPERIA X1 General] zoelucker:
Are yours branded on t-mobile or is the handset sim-free being used with a t-mobile sim card?
[XPERIA X1 General] bbhermann:
for me it doesn't work with wifi.

phone: branded.
[XPERIA X1 General] ds07:
t-mobile branded here.

it has always worked with wifi and 3g. since yesterday it doens;t work on 3g.

is this t-mobiles fault? anyone else with the same problem?
[XPERIA X1 General] tolkien34:
hi, i downloaded windows live 10.6.0034.0800 (fixed) and windows live 10.6.39.133 by lazapasi installed them both and it works fine....on wifi and on gprs.

U install them both, somehow they overwrite eachother but it works :D:D

got a branded tmobile nl
[XPERIA X1 General] tufi:
@tolkien34

does it also work with wi-fi? without GPRS?
[XPERIA X1 General] tolkien34:
hi, yes it works fine with wlan. tried it with live panel and spb panel works fine with wlan.:D (wifi)
[XPERIA X1 General] mlinz:
Hes from Netherlands or UK or something. Tmobile does brand it there, not in the USA though.
[XPERIA X1 General] gsc666:
Hi,

Did what tolkien34 said on my X1 (TMO_NL), got far further then with any other version combinations before, but still having problems signing in.

This is what I did:

Install 10.6.0034.0800 (fixed) - reboot by installer

10.6.39.133 by lazapasi - reboot by installer

soft reset

Either

There was a problem signing in. May be service or place with bad reception.

or

The other side has closed the connection

When I sign in through browser through mid.live.com everything works with no fuzz.

What do I do wrong?
[XPERIA X1 General] Jonny555:
Hi there,

Tried Tolkien34's trick as well, and indeed got further; i got to enter my adress and password.. after clicking next, the first try it took a long time before a message showed that there was bad reception or no service (Something like that).

The second, third (and so on) time I just was sent back to the startscreen of windows live, the searchbar and the text " sign in to windows live ". The program did make a connection with GPRS, but nothing really happened. Same goes for having wifi turned on..

I installed 10.6.0034.0800

and 10.6.39.1300 by lazapasi.

I made a total of 3 soft resets.

I have a dutch t-mobile branded X1.

Whats the next step ?

Edit:

In the topiclink underneath I found that more peope are having problems with coming trough the setup- proces.. That makes me wonder if it's a X1 issue or a program-issue..

http://xdaforums.com/showthread.php?t=398373&page=2
[XPERIA X1 General] ds07:
you have to do this:

Install 10.6.0034.0800 (fixed) - reboot by installer

10.6.39.133 by lazapasi - reboot by installer

Install 10.6.0034.0800 (fixed) again! then softreset and it works.
[XPERIA X1 General] Jonny555:
That worked fine! thnx a lot!
[XPERIA X1 General] oTToToTenTanz:
I was so close to become desperated...Thanks so much guys! That was a big ACT^^
[XPERIA X1 General] emc3e:
sorry what do you guys mean with soft reset?
[Introductions] idkaname2:
Hello everyone my name is idkaname and i'm from Belgium. I study system and network engineering and i really love to tinker with android devices. I even did my higschool paper about getting privacy back to a smartphone and it was great! I'd love to learn from you all and if i can help someone else out i'm happy too.
[Android Q&A, Help & Troubleshooting] CosmoGalaxyQueen:
I plan to use this phone as a gaming phone only for simpler easy to plan games. No shooting games or war games nothing to high tech. Just some simple games and a few apps. I was using it for playing music from a MicroCD car for a short while and it didn't work the way I wanted it to. So now I have just run a factory reset.

Now here is the issue I am having.

I opened the phone and I see Finish setting up your Galaxy A02s, Setup Complete, Setup Complete installed 5 out of 5 applications, Free up space we found 2 apps you haven't used in awhile.

Well first of all its a factory reset so it should not have any apps at all but nope. There a a few already installed even at the factory reset.

Here are the apps I have:

Android Auto, Calendar,Call Guardian, Camera, Candy Crush Saga, Cash App, Chrome, Clock, ConfigAPK, Contacts, Crossword Jam, Data Restore Tool, Device Care, Drive, Files, Finder, Galaxy Store, Galaxy Themes, Gallery, Gmail, Google, Google Play Services, Google Play Store, Google TV, Junes Journey, Maps, Meet, Messages, Mobile Services Manager, My Files, Netflix, Network Unlock, One UI Home, OneDrive, Pandora, Phone, Photos, Royal Match, Samsung Cloud, Samsung Internet, Settings, SIM Toolkit, SmartNews, (2) Solitaire Games, Weather, Wireless Emergency Alerts, Word Trip, Wordscapes, YouTube, YouTube Music.

I plan to only use this phone to play games.

I plan to delete all the games that came on this phone after the factory reset. I also plan to only use the "Google" stuff for the downloading of the game apps and for the "Google Gaming Profile" for play games that require a google game account.

Is there anything anyone else can suggest for me to do that can speed up my phone without rooting the phone. thank you in advance.
[Android Q&A, Help & Troubleshooting] Clark Joseph Kent:
Note: Questions go in Q&A Forum

If you are posting a Question Thread post it in the Q&A forum. Technical discussion of Android development and hacking. No noobs, please. Device-specific releases should go under the appropriate device forum...

xdaforums.com

Thread has been moved, see link attached here.
[Google Pixel 6 Pro] kevinireland11:
I new it was to good to be true, the reason my phone keeps saying cannot use voice or connot use sim 1, is due to someone selling me a phone that was previously on a contract! And of course there is no trace of this guy, I contacted Google, they need proof of perchase! Yeah that's not going to be simple to get, it's there any way of unlocking this device? I haven't tried any other sim, apparently it's a Three network phone but iv been using my EE sim this hole time for a long time to, can I root to fix this or?

I do not want to lose this phone because of some scammer
[Google Pixel 6 Pro] blackhawk:
Contact the carrier and negotiate a pay off price to unlock it... if it isn't stolen.
[Google Pixel 6 Pro] kevinireland11:
My network is EE and they wore able to un blacklist my IMEI three network for free, pritty handy
[Google Pixel 6 Pro] blackhawk:
You got lucky this time. Don't ever put yourself in that position again.
[Google Pixel 6 Pro] kevinireland11:
Definitely not! I honestly think the adviser that done it was an understanding guy, because if that was anyone else I don't think they would have done that for me, but yes, if y'all are buying phones look up the IMEI this will tell you everything you need to no about the phone
[Google Pixel 6 Pro] kevinireland11:
You can actually pay 7.99 to unblacklist or 13.99 for a new IMEI apparently
[Google Pixel 6 Pro] blackhawk:
That's illegal in the US especially to change the imei.
[Google Pixel 6 Pro] Strephon Alkhalikoi:
Actually illegal in most of the world, not simply the US.
[Google Pixel 6 Pro] MidnightDevil:
How does that pay work? I though the reason to blacklist IMEI's was because they were reported stolen. Not much point if you can just pay a small ammount to own a stolen phone?
[Google Pixel 6 Pro] 96carboard:
Unjustifiably.
[Google Pixel 6 Pro] blackhawk:
Explain?

IMEI is there to protect the legitimate owner of the device.
[Google Pixel 6 Pro] Deleted member 11818907:
IMEI changing is illegal.
[Google Pixel 6 Pro] kevinireland11:
Sorry I forgot there are allot of IMEI police on here
[Google Pixel 6 Pro] kevinireland11:
Oh there's a parot in the room lol, did you also not see those other comments that everyone else saw or?
[Google Pixel 6 Pro] Morgrain:
How much did you pay for this device?
[Google Pixel 6 Pro] t-ryder:
I'd rather call the grammar police reading your stuff.
[Google Pixel 6 Pro] Badger50:
Thread closed since the OP's question has been answered and XDA Rule #9 violations for changing IMEI's.

-Regards: Badger50
[OnePlus 9 Pro] r3bourne:
Hello I recently updated to oos13 and it looks like the audio switch which allowed us to change the output got nixed. Anyone have an alternative or am I missing something.

I just want to be able to keep all my Bluetooth devices connected but switch to output audio from my phone.

I miss being able to click the volume then select output when I needed to change it.
[OnePlus 9 Pro] nadirshakhshir:
Hey, it is still available from the little square of the music playing in the notifications dropdown, you can change it from there. I discovered this by chance!
[OnePlus 9 Pro] r3bourne:
Wow you're a savior here. I've spent hours looking for this as a setting but that tile just blends together I didn't even think to push it. Even the OnePlus community forums said it was gone. Still would be better back in the volume UI but I can settle for this.
[OnePlus 9 Pro] r3bourne:
So it turns out this is only an option for media that pops into the tiles. Ie can't switch audio if I'm playing a game. So although a partial success it's not the same feature they took away
[Moto G Stylus 5G] abense:
Moto G Stylus 5G (2021) has Qualcomm Snapdragon 480 5G chipset. Here are the hardware specifications on the Qualcomm website, where it clearly says that 2x2 MIMO is supported.

I have not been able see more than 433 Mbit/s when I connect to any 802.11ac routers on 5GHz, regardless of what I try. My old Moto Z2 Force connects at 866 Mbit/s (866 = 2x433), and when I use my Lenovo T420 with Broadcom BCM4362 Wi-Fi (3x3), I'm able to connect at 1300Mbit/s.

There's no neighboring WAPs with signal interference, and even if I turn all my other Wi-Fi devices off, reboot my router. The most I can see if 433Mbit/s.

There's a Magisk module that supposedly fixes this. I also tried that to no avail.

Anyone else having better luck?
[Moto G Stylus 5G] MoPhoMike:
Both the '21 and '22 models of the G Stylus 5G only support 1x1 WiFi.. Depressing, I know, but it just doesn't have the second antennae to support 866 Mbps.
[Moto G Stylus 5G] maddog3030:
Try this modual if your rooted

Magisk WiFi Bonding​
[Moto G Stylus 5G] abense:
Already did. It didn't change anything. :'(
[XPERIA X1 General] hagalah:
I have tried several ways to make this software work. The original post didn't state clearly the procedure and I saw many having some pointer problems. Here is the working procedure:

Installation:

Unzip the WVGA2 into your phone's SD card

Install WVGAFIX2_sdkCerts

Install WVGAFIX2

This will general a program named VModeSwitch in your program list

How to run the program:

1. Put your WVGA2 fix program "VModeSwitch" in the menu list (settings --> menus)

2. Slide open your X1 and make the phone in landscape mode

3. Click start and click VModeSwitch

4. Click 480x640 then click "set"

5. The screen will shrink to 480x640 landscape mode but in opposite direct

6. Now, close your X1, then the VGA will switch to Portrait mode.

Now you can use the phone and everything works with no pointer problem.

Have Fun! Below is the game list that works in my phone

Work in WVGA mode:

1. Arvale II: Ocean

2. Astraware Sudoku

3. Bejeweled 2

4. Bubble Breaker

5. Final Battle

6. Maumau

7. Solitaire

8. Spore

9. Tower Mogul

10. Tradewinds 2

11. Warring Nations

Only Works in WVGA2 Fix mode:

1. Aces Texas Hold'em No Limit

2. Stolen In 60 Seconds

3. Westward
[XPERIA X1 General] leopaalfast:
wvga2 fix

I have also installed the wvga2 fix (from 'cuttila' or some name like that), first the certfile. Tomtom6 is now in portraitmode working, but.... any other application (phone, agenda, etc.) is sticking on the screen, I cannot close it, it wont get 'away' until I open another application, which will stick again, I have as well done callibration again but solves nothing. Alltogether I càn use all the apllications bùt on a anoying way. Finally to get rid of it I have to switch off the whole phone. Xperia X1.

Why does Sony Ericsson not come with a nice solution, that would solve a lot of problems, if they make a product with higher resolution they should know a lot of applications just won't work on it. So whats easilier than deliver as well the solution for it.

Waiting for better times.....
[XPERIA X1 General] Mopral:
Did you try WVGAFix3?

Try it several times and works great for me on my X1