search

bkerler / edl

Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
GNU General Public License v3.0
1.67k stars 388 forks source link

Snapdragon W5+ platform EDL feedback #426

Open JackCui001 opened 1 year ago

JackCui001 commented 1 year ago

Capstone library is missing (optional). Keystone library is missing (optional). No module named 'Cryptodome' Qualcomm Sahara / Firehose Client V3.61 (c) B.Kerler 2018-2023. main - Trying with no loader given ... main - Waiting for the device ...... main - Hint: Press and hold vol up+dwn, connect usb. For some, only use vol up. main - Xiaomi: Press and hold vol dwn + pwr, in fastboot mode connect usb. Run "./fastpwn oem edl". main - Other: Run "adb reboot edl".

............main - Device detected :) sahara - Protocol version: 2, Version supported: 1 main - Mode detected: sahara sahara -

HWID: 0x001a50e100000000 (MSM_ID:0x001a50e1,OEM_ID:0x0000,MODEL_ID:0x0000) Unknown CPU, please send log as issue to https://github.com/bkerler/edl PK_HASH: 0xd40eee56f3194665574109a39267724ae7944134cd53cb767e293d3c40497955bc8a4519ff992b031fadc6355015ac87 Serial: 0xd29abaa6

sahara - Found possible loader: /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/model_generic/SDM855LA/000a50e100000000_d40eee56f3194665_fhprg.bin sahara - Found possible loader: /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sdm662/0014d0e100000000_d40eee56f3194665_FHPRG.bin sahara - Found possible loader: /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sc8180x/000b80e100000000_d40eee56f3194665_FHPRG.bin sahara - Protocol version: 2, Version supported: 1 sahara - Uploading loader /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sc8180x/000b80e100000000_d40eee56f3194665_FHPRG.bin ... sahara - 64-Bit mode detected. sahara - Firehose mode detected, uploading... sahara sahara - [LIB]: Error: Cannot receive specified number of program headers Connection detected, quiting.

The chip is installed on Ticwatch Pro 5. Codename: Monaco. Info attached above.

CE1CECL commented 1 year ago

Capstone library is missing (optional). Keystone library is missing (optional). No module named 'Cryptodome' Qualcomm Sahara / Firehose Client V3.61 (c) B.Kerler 2018-2023. main - Trying with no loader given ... main - Waiting for the device ...... main - Hint: Press and hold vol up+dwn, connect usb. For some, only use vol up. main - Xiaomi: Press and hold vol dwn + pwr, in fastboot mode connect usb. Run "./fastpwn oem edl". main - Other: Run "adb reboot edl".

............main - Device detected :)

sahara - Protocol version: 2, Version supported: 1 main - Mode detected: sahara sahara -

HWID: 0x001a50e100000000 (MSM_ID:0x001a50e1,OEM_ID:0x0000,MODEL_ID:0x0000) Unknown CPU, please send log as issue to https://github.com/bkerler/edl PK_HASH: 0xd40eee56f3194665574109a39267724ae7944134cd53cb767e293d3c40497955bc8a4519ff992b031fadc6355015ac87 Serial: 0xd29abaa6

sahara - Found possible loader: /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/model_generic/SDM855LA/000a50e100000000_d40eee56f3194665_fhprg.bin sahara - Found possible loader: /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sdm662/0014d0e100000000_d40eee56f3194665_FHPRG.bin sahara - Found possible loader: /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sc8180x/000b80e100000000_d40eee56f3194665_FHPRG.bin sahara - Protocol version: 2, Version supported: 1 sahara - Uploading loader /usr/local/lib/python3.10/dist-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sc8180x/000b80e100000000_d40eee56f3194665_FHPRG.bin ... sahara - 64-Bit mode detected. sahara - Firehose mode detected, uploading... sahara sahara - [LIB]: Error: Cannot receive specified number of program headers Connection detected, quiting.

The chip is installed on Ticwatch Pro 5. Codename: Monaco. Info attached above.

@JackCui001 As found over at https://github.com/bkerler/edl/issues/348 you need to do the following:

edl --loader="./Loaders/qualcomm/model_generic/SDM855LA/000a50e100000000_d40eee56f3194665_fhprg.bin"
echo Unplug and re-enter EDL
edl --loader="./Loaders/qualcomm/factory/sdm662/0014d0e100000000_d40eee56f3194665_FHPRG.bin"
# echo Unplug and re-enter EDL
# edl --loader="./Loaders/qualcomm/factory/sc8180x/000b80e100000000_d40eee56f3194665_FHPRG.bin"

Note the last one has the hashtag, because it was auto uploaded by the tool. This "script" is for your device, the error in the title means the loader wasn't accepted by the device (invalid loader or not for SoC?)

JackCui001 commented 1 year ago

@CE1CECL Definately tried all of them. None of them are working.

mhrlb commented 9 months ago

Is there a usable Firehose Programmer File for SW5100? I'm trying the backup and recovery of ticwatch pro 5 and xiaomi watch 2 pro. Thanks a lot!

CE1CECL commented 9 months ago

Is there a usable Firehose Programmer File for SW5100? I'm trying the backup and recovery of ticwatch pro 5 and xiaomi watch 2 pro. Thanks a lot!

Is there a generic firmware for either devices I can download to compare what loader works? Not sure about the Xiaomi having auth

CE1CECL commented 9 months ago

google.xbl.zip grep -Rai UNKNOWN | grep -ai SDM845 | grep -ai SDM830 | grep -ai SDC830 | grep -ai SDX24 | grep -ai SDX24M | grep -ai SDM670 | grep -ai SDA670 | grep -ai SDM450 | grep -ai SDM855 | grep -ai SDM1000 | grep -ai SDA845 | grep -ai QCS605 | grep -ai SM6150 | grep -ai SDA865 | grep -ai SDX55 | grep -ai QCA6390 | grep -ai SDA855 | grep -ai SDM855A | grep -ai SA8150 | grep -ai SM7150 | grep -ai SM7150P | grep -ai SDA855A | grep -ai SM6150P | grep -ai SM_NICOBAR | grep -ai SM_KAMORTA | grep -ai SMP_KAMORTA | grep -ai SM_AGATTI | grep -ai SM_KAMORTA_H | grep -ai SMP_KAMORTA_H | grep -ai SM_MANNAR | grep -ai SMP_AGATTI | grep -ai QCM_KAMORTA | grep -ai QCS_KAMORTA | grep -ai QCM_AGATTI | grep -ai QCS_AGATTI grep.txt Try one of these files as the pixel watches have these strings. There are currently no SDW5100 & SWP5100 Loaders at this time.

lenovo_motorola/0000000002e80000_abbcc86fe393b13d_fhprg.bin
lenovo_motorola/001360e102e80000_5adc6039dcb297d4_fhprg.bin
lenovo_motorola/001b80e102e80000_8b2d1c830d9d8576_fhprg_moto_g52.bin
oneplus/0000000000515192_37cf317812121fed_fhprg_opn100.bin
qualcomm/factory/sdm662/0014d0e100000000_d40eee56f3194665_FHPRG.bin
quectel/prog_firehose_life_ddr_patched.elf
xiaomi/001360e100720000_1bebe3863a6781db_fhprg_redmi9t.bin
xiaomi/0014d0e100000000_1bebe3863a6781db_fhprg.bin
xiaomi/0014d0e100720000_1bebe3863a6781db_fhprg.bin

Also can we have the output of the Xiaomi watch @mhrlb ?

mhrlb commented 9 months ago

google.xbl.zip grep -Rai UNKNOWN | grep -ai SDM845 | grep -ai SDM830 | grep -ai SDC830 | grep -ai SDX24 | grep -ai SDX24M | grep -ai SDM670 | grep -ai SDA670 | grep -ai SDM450 | grep -ai SDM855 | grep -ai SDM1000 | grep -ai SDA845 | grep -ai QCS605 | grep -ai SM6150 | grep -ai SDA865 | grep -ai SDX55 | grep -ai QCA6390 | grep -ai SDA855 | grep -ai SDM855A | grep -ai SA8150 | grep -ai SM7150 | grep -ai SM7150P | grep -ai SDA855A | grep -ai SM6150P | grep -ai SM_NICOBAR | grep -ai SM_KAMORTA | grep -ai SMP_KAMORTA | grep -ai SM_AGATTI | grep -ai SM_KAMORTA_H | grep -ai SMP_KAMORTA_H | grep -ai SM_MANNAR | grep -ai SMP_AGATTI | grep -ai QCM_KAMORTA | grep -ai QCS_KAMORTA | grep -ai QCM_AGATTI | grep -ai QCS_AGATTI grep.txt Try one of these files as the pixel watches have these strings. There are currently no SDW5100 & SWP5100 Loaders at this time.

lenovo_motorola/0000000002e80000_abbcc86fe393b13d_fhprg.bin
lenovo_motorola/001360e102e80000_5adc6039dcb297d4_fhprg.bin
lenovo_motorola/001b80e102e80000_8b2d1c830d9d8576_fhprg_moto_g52.bin
oneplus/0000000000515192_37cf317812121fed_fhprg_opn100.bin
qualcomm/factory/sdm662/0014d0e100000000_d40eee56f3194665_FHPRG.bin
quectel/prog_firehose_life_ddr_patched.elf
xiaomi/001360e100720000_1bebe3863a6781db_fhprg_redmi9t.bin
xiaomi/0014d0e100000000_1bebe3863a6781db_fhprg.bin
xiaomi/0014d0e100720000_1bebe3863a6781db_fhprg.bin

Also can we have the output of the Xiaomi watch @mhrlb ?

图片

The magnetic puck of xiaomi watch 2 pro has only 2 locating pins, the cable can't be used for communication.

mhrlb commented 9 months ago

Is there a usable Firehose Programmer File for SW5100? I'm trying the backup and recovery of ticwatch pro 5 and xiaomi watch 2 pro. Thanks a lot!

Is there a generic firmware for either devices I can download to compare what loader works? Not sure about the Xiaomi having auth

Sorry, I don't have any firmware.

JackCui001 commented 9 months ago

Is there a usable Firehose Programmer File for SW5100? I'm trying the backup and recovery of ticwatch pro 5 and xiaomi watch 2 pro. Thanks a lot!

Sadly, I have already sold my ticwatch pro 5. Before selling it, I hadn't found any usable firehose.