AlienWolfX / UZ801-USB_MODEM

A repository of information about the 4G LTE USB stick with board version FY_UZ801_3.2.
MIT License
16 stars 4 forks source link

EDL Loader ? #8

Open alexandrglm opened 3 days ago

alexandrglm commented 3 days ago

Hi. First of all, I appreciate your contribution. It's really IMPRESSIVE ! I would like to ask you about EDL. What loader are you using? Is it able to read main memory?

Here is a log of the problems I'm having:

`PS C:\swap\UZ801\git\edl-master> python3 edl printgpt Qualcomm Sahara / Firehose Client V3.62 (c) B.Kerler 2018-2024. main - Trying with no loader given ... main - Waiting for the device main - Device detected :) sahara - Protocol version: 2, Version supported: 1 main - Mode detected: sahara sahara - Version 0x2

HWID: 0x007050e100000000 (MSM_ID:0x007050e1,OEM_ID:0x0000,MODEL_ID:0x0000) CPU detected: "MSM8916" PK_HASH: 0xcc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380f Serial: 0x00415511

sahara - Possibly unfused device detected, so any loader should be fine... sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\cyanogen\007050e100000000_4614048173062ae4_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\cyanogen\007050e100000000_4e3eefa63a67eb7a_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\cyanogen\007050e100000000_d36c6073c9c2cb1c_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\lenovo_motorola\007050e100000000_99c8c13e374c34d8_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\longcheer\007050e100000000_3022817d373fd7f9_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\lyf\007050e100000000_394a2e47cf830150_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\qualcomm\factory\msm8916\007050e100000000_8ecf3eaa03f772e2_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\xiaomi\007050e100000000_278448179ac756a1_fhprg_peek.bin sahara - Possible loader available: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\xiaomi\007050e100000000_50838757eab7c632_fhprg_peek_wt88047.bin sahara - Trying loader: C:\swap\UZ801\git\edl-master\edlclient..\Loaders\cyanogen\007050e100000000_4614048173062ae4_fhprg_peek.bin sahara - Protocol version: 2, Version supported: 1 sahara - Uploading loader C:\swap\UZ801\git\edl-master\edlclient..\Loaders\cyanogen\007050e100000000_4614048173062ae4_fhprg_peek.bin ... sahara - 32-Bit mode detected. sahara - Firehose mode detected, uploading... sahara - Loader successfully uploaded. main - Trying to connect to firehose loader ... firehose_client firehose_client - [LIB]: No --memory option set, we assume "eMMC" as default ..., if it fails, try using "--memory" with "UFS","NAND" or "spinor" instead ! firehose firehose - [LIB]: !DEBUG! rsp.data: 'bytearray(b'<?xml version="1.0" encoding="UTF-8" ?><?xml version="1.0" encoding="UTF-8" ?><?xml version="1.0" encoding="UTF-8" ?><?xml version="1.0" encoding="UTF-8" ?>')' firehose firehose - [LIB]: !DEBUG! rsp.data: 'bytearray(b'<?xml version="1.0" encoding="UTF-8" ?><?xml version="1.0" encoding="UTF-8" ?><?xml version="1.0" encoding="UTF-8" ?><response value="NA')' firehose - TargetName= firehose - MemoryName=eMMC firehose - Version= firehose - Trying to read first storage sector... Traceback (most recent call last): File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 888, in configure if "MemoryName" in rsp.data: ^^^^^^^^^^^^^^^^^^^^^^^^ TypeError: a bytes-like object is required, not 'str'

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 888, in configure if "MemoryName" in rsp.data: ^^^^^^^^^^^^^^^^^^^^^^^^ TypeError: a bytes-like object is required, not 'str'

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 888, in configure if "MemoryName" in rsp.data: ^^^^^^^^^^^^^^^^^^^^^^^^ TypeError: a bytes-like object is required, not 'str'

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "C:\swap\UZ801\git\edl-master\edl", line 393, in base.run() File "C:\swap\UZ801\git\edl-master\edl", line 384, in run if fh.connect(sahara): ^^^^^^^^^^^^^^^^^^ File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose_client.py", line 114, in connect if self.firehose.configure(0): ^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 892, in configure return self.configure(lvl + 1) ^^^^^^^^^^^^^^^^^^^^^^^ File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 892, in configure return self.configure(lvl + 1) ^^^^^^^^^^^^^^^^^^^^^^^ File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 892, in configure return self.configure(lvl + 1) ^^^^^^^^^^^^^^^^^^^^^^^ File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 1013, in configure rsp = self.cmd_read_buffer(0, 1, 1, False) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\swap\UZ801\git\edl-master\edlclient\Library\firehose.py", line 743, in cmd_read_buffer return response(resp=False, data=resData, error=rsp[2])


KeyError: 2`

Thanks.
AlienWolfX commented 3 days ago

Hello, are you using EDL under Windows? If so, I recommend using Linux (if you have one available) as EDL under Windows tends to produce errors with this device. Here's a full log of mine while running the command woking loader is 007050e100000000_8ecf3eaa03f772e2_fhprg_peek.bin:

super@yskaela:~/edl$ python3 edl printgpt
Qualcomm Sahara / Firehose Client V3.62 (c) B.Kerler 2018-2024.
main - Trying with no loader given ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2, Version supported: 1
main - Mode detected: sahara
sahara - 
Version 0x2

HWID:              0x007050e100000000 (MSM_ID:0x007050e1,OEM_ID:0x0000,MODEL_ID:0x0000)
CPU detected:      "MSM8916"
PK_HASH:           0xcc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380f
Serial:            0x0575346f

sahara - Possibly unfused device detected, so any loader should be fine...
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/qualcomm/factory/msm8916/007050e100000000_8ecf3eaa03f772e2_fhprg_peek.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/qualcomm/factory/msm8916/007050e100000000_394a2e47cf830150_fhprg_peek.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/cyanogen/007050e100000000_d36c6073c9c2cb1c_fhprg_peek.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/cyanogen/007050e100000000_4614048173062ae4_fhprg_peek.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/cyanogen/007050e100000000_4e3eefa63a67eb7a_fhprg_peek.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/xiaomi/007050e100000000_278448179ac756a1_fhprg_peek.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/xiaomi/007050e100000000_50838757eab7c632_fhprg_peek_wt88047.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/longcheer/007050e100000000_3022817d373fd7f9_fhprg_peek.bin
sahara - Possible loader available: /home/super/edl/edlclient/../Loaders/lenovo_motorola/007050e100000000_99c8c13e374c34d8_fhprg_peek.bin
sahara - Trying loader: /home/super/edl/edlclient/../Loaders/qualcomm/factory/msm8916/007050e100000000_8ecf3eaa03f772e2_fhprg_peek.bin
sahara - Protocol version: 2, Version supported: 1
sahara - Uploading loader /home/super/edl/edlclient/../Loaders/qualcomm/factory/msm8916/007050e100000000_8ecf3eaa03f772e2_fhprg_peek.bin ...
sahara - 32-Bit mode detected.
sahara - Firehose mode detected, uploading...
sahara - Loader successfully uploaded.
main - Trying to connect to firehose loader ...
firehose_client
firehose_client - [LIB]: No --memory option set, we assume "eMMC" as default ..., if it fails, try using "--memory" with "UFS","NAND" or "spinor" instead !
firehose - TargetName=
firehose - MemoryName=eMMC
firehose - Version=
firehose - Trying to read first storage sector...
firehose - Running configure...
firehose
firehose - [LIB]: GetStorageInfo command isn't supported.
firehose_client - Supported functions:

Parsing Lun 0:

GPT Table:

modem:               Offset 0x0000000004000000, Length 0x0000000004000000, Flags 0x1000000000000000, UUID c656e4f7-ed17-6e01-239c-9dd35cebae17, Type EFI_BASIC_DATA, Active False
sbl1:                Offset 0x0000000008000000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID e920226e-6d6e-3c93-9a43-ba3e676767ad, Type 0xdea0ba2c, Active False
sbl1bak:             Offset 0x0000000008080000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID f1b071eb-9086-0b2b-a209-473697ac5590, Type EFI_BASIC_DATA, Active False
aboot:               Offset 0x0000000008100000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID a00e22fe-c273-7d77-9931-42bb796d5d42, Type 0x400ffdcd, Active False
abootbak:            Offset 0x0000000008200000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID 73842151-9df2-0d3d-5992-16d080582cd1, Type EFI_BASIC_DATA, Active False
rpm:                 Offset 0x0000000008300000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 7bc3e465-deb1-8599-f8ce-7e70a18dccf5, Type 0x98df793, Active False
rpmbak:              Offset 0x0000000008380000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 57ac3008-849e-d0f7-d4f0-783463e31264, Type EFI_BASIC_DATA, Active False
tz:                  Offset 0x0000000008400000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID d71d3e0e-1c17-66c1-9cc2-a890b22f06aa, Type 0xa053aa7f, Active False
tzbak:               Offset 0x0000000008480000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID e2373854-b760-003b-7d8b-4d1632c7c243, Type EFI_BASIC_DATA, Active False
hyp:                 Offset 0x0000000008500000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 73ea9814-57dd-54f9-508a-734c7740ef7a, Type 0xe1a6a689, Active False
hypbak:              Offset 0x0000000008580000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 7e78292e-0ff7-1d67-38ea-a98c243a08bd, Type EFI_BASIC_DATA, Active False
pad:                 Offset 0x0000000008600000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID 9810f95f-290d-471f-4863-efe52f28ec2e, Type EFI_BASIC_DATA, Active False
modemst1:            Offset 0x0000000008700000, Length 0x0000000000180000, Flags 0x0000000000000000, UUID 6ed17df0-74d8-e99d-0764-ff5a3f3dbd11, Type 0xebbeadaf, Active False
modemst2:            Offset 0x0000000008880000, Length 0x0000000000180000, Flags 0x0000000000000000, UUID 1af02ad8-556f-9107-6371-bc2e171334a5, Type 0xa288b1f, Active False
misc:                Offset 0x0000000008a00000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID cfe4e180-871e-408e-5f44-f8b9139e494c, Type 0x20117f86, Active False
fsc:                 Offset 0x0000000008b00000, Length 0x0000000000000400, Flags 0x0000000000000000, UUID f8aa4864-2e76-0eef-7579-baa3a63ced1a, Type 0x57b90a16, Active False
ssd:                 Offset 0x0000000008b00400, Length 0x0000000000002000, Flags 0x0000000000000000, UUID 552925d3-0938-e122-c7e4-d3e05d9bd6df, Type 0x2c86e742, Active False
splash:              Offset 0x0000000008b02400, Length 0x0000000000a00000, Flags 0x0000000000000000, UUID d39bb59c-ad6c-f7c6-4cb8-0b7006e0c5f7, Type 0x20117f86, Active False
DDR:                 Offset 0x000000000c000000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID f29a297a-03e8-0b44-e1ce-917f86e5d8ee, Type 0x20a0c19c, Active False
fsg:                 Offset 0x000000000c008000, Length 0x0000000000180000, Flags 0x1000000000000000, UUID 74173b66-7b00-2782-7af3-3e2c7190885f, Type 0x638ff8e2, Active False
sec:                 Offset 0x000000000c188000, Length 0x0000000000004000, Flags 0x1000000000000000, UUID 3910f3b2-84ff-d8eb-235e-33f2776c1acb, Type 0x303e6ac3, Active False
boot:                Offset 0x000000000c18c000, Length 0x0000000001000000, Flags 0x1000000000000000, UUID 27417ca9-9277-6b3f-44a3-21ced47653aa, Type 0x20117f86, Active False
system:              Offset 0x000000000d18c000, Length 0x0000000032000000, Flags 0x1000000000000000, UUID 3a2293d5-82fa-0d92-9414-150da7616811, Type EFI_BASIC_DATA, Active False
persist:             Offset 0x000000003f18c000, Length 0x0000000002000000, Flags 0x1000000000000000, UUID bd25cfe1-3280-0d2e-dd2a-5f1ff76529d7, Type EFI_BASIC_DATA, Active False
cache:               Offset 0x000000004118c000, Length 0x0000000008000000, Flags 0x1000000000000000, UUID d271393d-d43c-0e34-3c04-65f3b960e910, Type EFI_BASIC_DATA, Active False
recovery:            Offset 0x000000004918c000, Length 0x0000000001000000, Flags 0x1000000000000000, UUID da35c838-dde0-e1ad-04d2-f9fb0c87a021, Type 0x20117f86, Active False
userdata:            Offset 0x000000004a18c000, Length 0x000000009ce6fe00, Flags 0x1000000000000000, UUID 1052770c-9294-6c13-1703-8359023c077e, Type EFI_BASIC_DATA, Active False

Total disk size:0x00000000e7000000, sectors:0x0000000000738000
alexandrglm commented 1 day ago

Hello,

I've attached a Windows log after several attempts to get EDL working on Debian. Unfortunately, I haven't had any success. I've tried using a bootable USB with Debian 22.04 and EDL, but it doesn't work. I also tried compiling the source code, but I encountered dependency issues with pylzma, which seems to have changed its routines and code. I might have to modify some of Bkerler's scripts (it's odd that they haven't been updated in two years), as I'm unable to proceed otherwise.

Thank you for sharing the loader and the log file.

If you're interested in testing on my board, I can provide details about the chipset, board, firmware, and test scripts, as there are variations between different manufacturers and models.

Since I haven't been able to start developing for this board due to the issues mentioned, I've started working on a brute-force search script (in Python) to find matching folders/files at 192.168.100.1.

Thank you for your support.

Alexandr

AlienWolfX commented 1 day ago

Hello, I'm interested in the variant you have. Could you please provide details about your chipset, board, firmware, and any test scripts? Also, have you already tried using Miko Service Tools?

Best regards,

Allen