I read the super block from the UFS memory chip on a Huawei P30
Code:
Welcome to Medusa Pro Software version 2.1.0.
Started.
Reader #0: Generic EMV Smartcard Reader 0
Loading firmware. Please wait... Done.
Selected UFS interface.
Selected PIN - CONNECTOR socket.
Please use USB3.0 for better speed.
Connected. Reading information.
Manufacturer name: SAMSUNG
Product name: KLUDG4U1EA-B0C1
Serial Number: 365c76002705
OEM ID: SAMSUNG_OEM_ID
Page size : 4096 B
Block size : 4096 B
Block count : 31246336
Size : 119.20 GB (122056.00 MB)
AttrRefClkFreeq = 0
MaxDataInSize = 32768
MaxDataOutSize = 32768
Connect successful.
---------------------------------------------------------------
Physical partition number: 0
Block count : 1024 (0x400)
Size : 4.00 MB
Physical partition number: 1
Block count : 1024 (0x400)
Size : 4.00 MB
Physical partition number: 2
Block count : 2048 (0x800)
Size : 8.00 MB
P00: GPT (00000000, 00000080) 512 KB
P01: frp (00000080, 00000080) 512 KB
P02: persist (00000100, 00000600) 6 MB
P03: reserved1 (00000700, 00000100) 1024 KB
Physical partition number: 3
Block count : 31234048 (0x1DC9800)
Size : 119.15 GB (122008.00 MB)
P00: GPT (00000000, 00000080) 512 KB
P01: vrl (00000080, 00000080) 512 KB
P02: vrl_backup (00000100, 00000080) 512 KB
P03: modem_secure (00000180, 00000880) 8.5 MB
P04: nvme (00000A00, 00000500) 5 MB
P05: certification (00000F00, 00000100) 1024 KB
P06: oeminfo (00001000, 00006000) 96 MB
P07: secure_storage (00007000, 00002000) 32 MB
P08: modemnvm_factory (00009000, 00001000) 16 MB
P09: modemnvm_backup (0000A000, 00001000) 16 MB
P10: modemnvm_img (0000B000, 00002200) 34 MB
P11: hisee_encos (0000D200, 00000400) 4 MB
P12: veritykey (0000D600, 00000100) 1024 KB
P13: ddr_para (0000D700, 00000100) 1024 KB
P14: lowpower_para (0000D800, 00000100) 1024 KB
P15: batt_tp_para (0000D900, 00000100) 1024 KB
P16: reserved2 (0000DA00, 00001900) 25 MB
P17: splash2 (0000F300, 00005000) 80 MB
P18: bootfail_info (00014300, 00000200) 2048 KB
P19: misc (00014500, 00000200) 2048 KB
P20: dfx (00014700, 00001000) 16 MB
P21: rrecord (00015700, 00001000) 16 MB
P22: cache (00016700, 00006800) 104 MB
P23: fw_lpm3 (0001CF00, 00000100) 1024 KB
P24: reserved3 (0001D000, 00000600) 6 MB
P25: ivp (0001D600, 00000300) 3072 KB
P26: hdcp (0001D900, 00000100) 1024 KB
P27: hisee_img (0001DA00, 00000400) 4 MB
P28: hhee (0001DE00, 00000400) 4 MB
P29: hisee_fs (0001E200, 00000800) 8 MB
P30: fastboot (0001EA00, 00000C00) 12 MB
P31: vector (0001F600, 00000400) 4 MB
P32: isp_boot (0001FA00, 00000200) 2048 KB
P33: isp_firmware (0001FC00, 00000E00) 14 MB
P34: fw_hifi (00020A00, 00000C00) 12 MB
P35: teeos (00021600, 00000800) 8 MB
P36: sensorhub (00021E00, 00001000) 16 MB
P37: erecovery_kernel (00022E00, 00001800) 24 MB
P38: erecovery_ramdisk (00024600, 00002000) 32 MB
P39: erecovery_vendor (00026600, 00001000) 16 MB
P40: kernel (00027600, 00001800) 24 MB
P41: eng_system (00028E00, 00000C00) 12 MB
P42: recovery_ramdisk (00029A00, 00002000) 32 MB
P43: recovery_vendor (0002BA00, 00001000) 16 MB
P44: dts (0002CA00, 00000100) 1024 KB
P45: dto (0002CB00, 00001400) 20 MB
P46: trustfirmware (0002DF00, 00000200) 2048 KB
P47: modem_fw (0002E100, 00003800) 56 MB
P48: eng_vendor (00031900, 00000C00) 12 MB
P49: modem_patch_nv (00032500, 00000400) 4 MB
P50: modem_driver (00032900, 00001400) 20 MB
P51: reserved4 (00033D00, 00000C00) 12 MB
P52: ramdisk (00034900, 00000200) 2048 KB
P53: vbmeta_system (00034B00, 00000100) 1024 KB
P54: vbmeta_vendor (00034C00, 00000100) 1024 KB
P55: vbmeta_odm (00034D00, 00000100) 1024 KB
P56: vbmeta_cust (00034E00, 00000100) 1024 KB
P57: vbmeta_hw_product (00034F00, 00000100) 1024 KB
P58: recovery_vbmeta (00035000, 00000200) 2048 KB
P59: erecovery_vbmeta (00035200, 00000200) 2048 KB
P60: vbmeta (00035400, 00000400) 4 MB
P61: modemnvm_update (00035800, 00001000) 16 MB
P62: modemnvm_cust (00036800, 00001000) 16 MB
P63: patch (00037800, 00002000) 32 MB
P64: preas (00039800, 00012800) 296 MB
P65: preavs (0004C000, 00002000) 32 MB
[B][COLOR="Red"]P66: super (0004E000, 00160000) 5.5 GB[/COLOR][/B]
P67: version (001AE000, 00024000) 576 MB
P68: preload (001D2000, 00047800) 1144 MB
P69: userdata (00219800, 01BB0000) 110.8 GB
Backuping nvme partition...
Opening C:/Program Files/Medusa Pro Software/Backups/SAMSUNG_KLUDG4U1EA-B0C1_nvme_0xa00_0x500_11_06_2020_17_48_51.bin file...
Reading. Please wait... Done.
Elapsed time 00:00:00
SW: 2.1.0; FW: 1.00.
Backuping oeminfo partition...
Opening C:/Program Files/Medusa Pro Software/Backups/SAMSUNG_KLUDG4U1EA-B0C1_oeminfo_0x1000_0x6000_11_06_2020_17_48_51.bin file...
Reading. Please wait... Done.
Elapsed time 00:00:05
SW: 2.1.0; FW: 1.00.
---------------------------------------------------------------Searching Android build info...
Not found
---------------------------------------------------------------RPMB: Counter of the successful data write requests = 196.
Partition table has been found on device.
RPMB: Counter of the successful data write requests = 196.
Save to E:/tmp file...
Reading partition super... Done.
Reading is finished.
SW: 2.1.0; FW: 1.00.
Then I used the tool "lpunpack" to unpack super. Img, and got this
Code:
cust.img
hw_product.img
odm.img
system.img
vendor.img
Oddly, though, none of these files are in ext4 or Android Sparse:
Code:
λ file *
cust.img: data
hw_product.img: data
odm.img: data
system.img: data
vendor.img: data
I tried using the command mount under ubuntu18, but unfortunately it failed
Code:
[email protected]:~/Desktop/tmp$ sudo mount -t erofs -o loop system.img /mnt
mount: /mnt: wrong fs type, bad option, bad superblock on /dev/loop9, missing codepage or helper program, or other error.
I've extracted using: imjtool.
http://newandroidbook.com/tools/imjtool.html
VD171 said:
I've extracted using: imjtool.
http://newandroidbook.com/tools/imjtool.html
Click to expand...
Click to collapse
I tried, and the result is the same
They are erofs partitions.
Related
I dont know about anyone else but the partition layout on the S3 LTE really bother's me it just wastes so much
has any work been done on seeing if resizing causes any problems
as im tempted to resize cache,system,hidden to pull back 1971mb of space wasted by samsung
then make a custom full odin package with the new partition sizes and flash
clearly i wouldnt be able to use standard samsung packages anymore and would have to make my own
which isnt a problem
All sizes are in true Megabyte/Gigabyte what is called Mib/Gib by people of late
to try and differentiate from the stupid ass rounding hd manufacturers started
TOMBSTONES = 256mb
CACHE = 1024mb
SYSTEM = 1536mb
HIDDEN = 560mb
Leaving 10.8GB for userdata
Im unsure what the tombstones dir is used for so i would be inclined to leave it
but cache can be dropped to 100mb if not using ota updates which i dont
system i could drop to 1024mb and be fine
i dont think hidden is used on the s3 lte
so i could pull back around 1971mb of wasted space
for userdatea with partitions like below
CACHE = 100mb
SYSTEM = 1024mb
HIDDEN = 1mb
Here's the current layout
Note it isnt even 16 fake GB
Model: MMC MAG4FB (sd/mmc)
Disk /dev/block/mmcblk0: 15.8GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Number Start End Size File system Name Flags
1 4194kB 8389kB 4194kB BOTA0
2 8389kB 12.6MB 4194kB BOTA1
3 12.6MB 33.6MB 21.0MB ext4 EFS
4 33.6MB 37.7MB 4194kB m9kefs1
5 37.7MB 41.9MB 4194kB m9kefs2
6 41.9MB 46.1MB 4194kB m9kefs3
7 46.1MB 54.5MB 8389kB PARAM
8 54.5MB 62.9MB 8389kB BOOT
9 62.9MB 71.3MB 8389kB RECOVERY
10 71.3MB 164MB 92.3MB fat16 RADIO
11 164MB 432MB 268MB ext4 TOMBSTONES
12 432MB 1506MB 1074MB ext4 CACHE
13 1506MB 3116MB 1611MB ext4 SYSTEM
14 3116MB 3704MB 587MB ext4 HIDDEN
15 3704MB 3712MB 8389kB OTA
16 3712MB 15.8GB 12.0GB ext4 USERDATA
ShonkUK said:
I dont know about anyone else but the partition layout on the S3 LTE really bother's me it just wastes so much
has any work been done on seeing if resizing causes any problems
as im tempted to resize cache,system,hidden to pull back 1971mb of space wasted by samsung
then make a custom full odin package with the new partition sizes and flash
clearly i wouldnt be able to use standard samsung packages anymore and would have to make my own
which isnt a problem
All sizes are in true Megabyte/Gigabyte what is called Mib/Gib by people of late
to try and differentiate from the stupid ass rounding hd manufacturers started
TOMBSTONES = 256mb
CACHE = 1024mb
SYSTEM = 1536mb
HIDDEN = 560mb
Leaving 10.8GB for userdata
Im unsure what the tombstones dir is used for so i would be inclined to leave it
but cache can be dropped to 100mb if not using ota updates which i dont
system i could drop to 1024mb and be fine
i dont think hidden is used on the s3 lte
so i could pull back around 1971mb of wasted space
for userdatea with partitions like below
CACHE = 100mb
SYSTEM = 1024mb
HIDDEN = 1mb
Click to expand...
Click to collapse
You can do it with PIT Magic i did this before for S2 I'd like to do the same thing with s3 but i don't have the PIT file for the international version (My Phone )
Hi to everyone.
I make some changes in vold partiitons encryption, but I can't test it on emulator with android 5 because it every time make images again after encryption:
emulator: WARNING: system partition size adjusted to match image file (550 MB > 200 MB)
emulator: WARNING: data partition size adjusted to match image file (550 MB > 200 MB)
Creating filesystem with parameters:
Size: 576716800
Block size: 4096
Blocks per group: 32768
Inodes per group: 7040
Inode size: 256
Journal blocks: 2200
Label:
Blocks: 140800
Block groups: 5
Reserved block group size: 39
Created filesystem with 11/35200 inodes and 4536/140800 blocks
With andtoid 4.4 I had no this issue. How can I disable this?
It happend because last android 5 latest kernel broke fs during encryption.
I download android 5 stable repo and it works
This is my partition table as generated by gdisk
Logical sector size: 512 bytes
Disk identifier (GUID): 98101B32-BBE2-4BF2-A06E-2BB33D000C20
Partition table holds up to 32 entries
First usable sector is 34, last usable sector is 15269854
Partitions will be aligned on 2-sector boundaries
Total free space is 313196 sectors (152.9 MiB)
Code:
# Name Start (sector) End (sector) Size Size (Sectors) Partition GUID Code
1 modem 131072 262143 64 MB 131072 EBD0A0A2-B9E5-4433-87C0-68B6B72699C7
2 sbl1 262144 263167 512KiB 1024 DEA0BA2C-CBDD-4805-B4F9-F428251C3E98
3 sbl1bak 263168 264191 512KiB 1024 DEA0BA2C-CBDD-4805-B4F9-F428251C3E98
4 aboot 264192 266239 1024KiB 2048 400FFDCD-22E0-47E7-9A23-F16ED9382388
5 abootbak 266240 268287 1024KiB 2048 400FFDCD-22E0-47E7-9A23-F16ED9382388
6 rpm 268288 269311 512KiB 1024 098DF793-D712-413D-9D4E-89D711772228
7 rpmbak 269312 270335 512KiB 1024 098DF793-D712-413D-9D4E-89D711772228
8 tz 270336 271871 768KiB 1536 A053AA7F-40B8-4B1C-BA08-2F68AC71A4F4
9 tzbak 271872 273407 768KiB 1536 A053AA7F-40B8-4B1C-BA08-2F68AC71A4F4
10 pad 273408 275455 1024KiB 2048 EBD0A0A2-B9E5-4433-87C0-68B6B72699C7
11 modemst1 275456 278527 1.5MiB 3072 EBBEADAF-22C9-E33B-8F5D-0E81686A68CB
12 modemst2 278528 281599 1.5MiB 3072 0A288B1F-22C9-E33B-8F5D-0E81686A68CB
13 misc 281600 283647 1024KiB 2048 82ACC91F-357C-4A68-9C8F-689E1B1A23A1
14 fsc 283648 283649 1024Bytes 2 57B90A16-22C9-E33B-8F5D-0E81686A68CB
15 ssd 283650 283665 8KiB 16 2C86E742-745E-4FDD-BFD8-B6A7AC638772
16 splash 283666 304145 10MiB 20480 20117F86-E985-4357-B9EE-374BC1D8487D
17 DDR 393216 393279 32KiB 64 20A0C19C-286A-42FA-9CE7-F64C3226A794
18 fsg 393280 396351 1.5MiB 3072 638FF8E2-22C9-E33B-8F5D-0E81686A68CB
19 sec 396352 396383 16KiB 32 303E6AC3-AF15-4C54-9E9B-D9A8FBECF401
20 boot 396384 461919 32MiB 65536 20117F86-E985-4357-B9EE-374BC1D8487D
21 system 461920 4557919 2GB 4096000 97D7B011-54DA-4835-B3C4-917AD6E73D74
22 persist 4557920 4623455 32MiB 65536 6C95E238-E343-4BA8-B489-8681ED22AD0B
23 apedata 4623456 4688991 32MiB 65536 6C95E238-E343-4BA8-B489-8681ED22AD0B
24 cache 4688992 5213279 256MiB 524288 5594C694-C871-4B5F-90B1-690A6F68E0F7
25 recovery 5213280 5278815 32MiB 65536 9D72D4E4-9958-42DA-AC26-BEA7A90B0434
26 devinfo 5278816 5280863 1024KiB 2048 1B81E7E6-F50D-419B-A739-2AEEF8DA3335
27 keystore 5373952 5374975 512KiB 1024 DE7D4029-0F5B-41C8-AE7E-F6C023A02B33
28 oem 5374976 5506047 64MiB 131072 7DB6AC55-ECB5-4E02-80DA-4D335B973332
29 config 5506048 5507071 512KiB 1024 91B72D4D-71E0-4CBF-9B8E-236381CFF17A
30 userdata 5507072 15269854 4.7GiB 9762783 1B81E7E6-F50D-419B-A739-2AEEF8DA3335
My version of the tool is this
Code:
!/usr/bin/python
#===========================================================================
# This script parses "partition.xml" and creates numerous output files
# specifically, partition.bin, rawprogram.xml
# REFERENCES
# $Header: //source/qcom/qct/core/pkg/bootloaders/rel/1.2/boot_images/core/storage/tools/jsdcc/partition_load_pt/PartitioningTool.py#2 $
# $DateTime: 2012/01/12 16:00:13 $
# $Author: coresvc $
# when who what, where, why
# -------- --- -------------------------------------------------------
# 2011-03-22 ah rawprogram for GPT for 'grow' partition, since mjsdload.cmm couldn't handle big number
# 2011-03-22 ah Corrected final disk size patch (off by 1 sector), corrected GPT labels (uni-code)
# 2011-03-18 ah Fixed default bug for DISK_SIGNATURE, align_wpb -> align
# 2011-03-16 ah New DISK_SIGNATURE tag added for MBR partitions, Split partition0.bin into
# MBR0.bin and EBR0.bin, Corrected bug in backup GPT DISK patching
# 2011-03-10 ah Removes loadpt.cmm, splits partition0.bin to MBR0.bin, EBR0.bin
# 2011-03-09 ah Much more error checking, cleaner, adds "align_wpb" tag
# 2011-02-14 ah Added patching of DISK for GPT
# 2011-02-02 ah Allow MBR Type to be specified as "4C" or "0x4C"
# 2011-25-01 ah Outputs "patch.xml" as well, allows more optimal partition alignment
# 2010-12-01 ah Matching QPST, all EXT partitions 64MB aligned (configurable actually)
# More error checking, Removed CHS option, GPT output is 2 files (primary and backup)
# 2010-10-26 ah better error checking, corrected typo on physical_partition for > 0
# 2010-10-25 ah adds GPT, CFILE output, various other features
# 2010-10-08 ah released to remove compile errors of missing PERL script modules
I am purposely trying to keep my fsc partition to 1kb. I can make the change in my xml file to 2kb and the tool will continue. If I leave it at 1kb it will error out. Anyone else have this issue?
Should have held off asking. Once I found a newer version of the tool that issue is solved. Case closed.
I'm trying to change to splash-screen / boot logo of my Sony Xperia Z4 tablet (SGP771)
I have already rooted my device.
With the help of the bootimg.exe tool I unpacked the boot.img - exchanged the logo.rle and repacked the boot.img.
My custom logo.rle I created with boot_screen_logo_creation_package.
However, when flashing the new-boot.img to my device (with fastboot flash boot new-boot.img) the logo is not changed. Still showing the Sony logo before the bootanimation appears.
My tablet runs the Marshmallow firmware and I'm using the corresponding AndroPlusKernel v31 (Z4T_SGP771_AndroPlusKernel_v31.zip).
I tried already different tools like bootimg_tools from this xda forum, or split_bootimg.pl from the android-wiki.
The one mentioned in my question I found in several forums (wordpress, miui, dark-cyanide-devs ...)
Most of the tools I tried already did not repack the image correctly (fastboot reported "remote: dtb not found")
The tool I used, mentioned in the question, seemed to work for correcly unpacking and repacking. But as I said - the logo does not change -.-
Any suggestions what I am doing wrong?
Doesn't the initial splash logo reside in the bootloader or in another part of the system? I'm pretty sure it isn't in boot.img, at least this was not the case with my HTC phones.
jelbo said:
Doesn't the initial splash logo reside in the bootloader or in another part of the system? I'm pretty sure it isn't in boot.img, at least this was not the case with my HTC phones.
Click to expand...
Click to collapse
Thank you for your reply. Do you have any idea where I could find it? I already searched through the filesystem with the adb shell:
Code:
>find . -name "*.rle"
and also *.png, *.bmp, *.jpg or also > find . -name "*logo*"
I did not open the pictures I found, but by their name I could not tell if there is the logo beyond (besides the logo.rle)
I attached the search result if it helps somehow?
MM365 said:
Thank you for your reply. Do you have any idea where I could find it? I already searched through the filesystem with the adb shell:
Code:
>find . -name "*.rle"
and also *.png, *.bmp, *.jpg or also > find . -name "*logo*"
I did not open the pictures I found, but by their name I could not tell if there is the logo beyond (besides the logo.rle)
I attached the search result if it helps somehow?
Click to expand...
Click to collapse
I'm pretty sure it's not a file on a filesystem and, if it is, it would be on a partition you can not just search on easily. I remember having to flash a boot splash image on my HTC One m7 using fastboot flash splash1 splash.img. splash1 is the dedicated partition for the splash image, on mmcblk0p13.
I don't know how it is on Xperia's, but I guess it's similar. It'd be nice to be able to change this though, I also dislike the bright white Sony splash screen.
Here's the partition info I pulled from Disk Info Pro:
Code:
--------------------------
Internal Storage (MMC)
--------------------------
* TA [mmcblk0p1] Not mounted
Total space: 2 MB
* LTALabel [mmcblk0p2] (/lta-label) [ext4]
Used: 5.7 MB, Free: 10.3 MB, Total space: 16 MB
* modem [mmcblk0p3] (/firmware) [vfat]
Used: 16.8 MB, Free: 63.2 MB, Total space: 80 MB
* pmic [mmcblk0p4] Not mounted
Total space: 128 KB
* alt_pmic [mmcblk0p5] Not mounted
Total space: 128 KB
* limits [mmcblk0p6] Not mounted
Total space: 1 KB
* DDR [mmcblk0p7] Not mounted
Total space: 1 MB
* apdp [mmcblk0p8] Not mounted
Total space: 256 KB
* msadp [mmcblk0p9] Not mounted
Total space: 256 KB
* dpo [mmcblk0p10] Not mounted
Total space: 1 KB
* hyp [mmcblk0p11] Not mounted
Total space: 512 KB
* alt_hyp [mmcblk0p12] Not mounted
Total space: 512 KB
* fsg [mmcblk0p13] Not mounted
Total space: 1.5 MB
* ssd [mmcblk0p14] Not mounted
Total space: 8 KB
* sbl1 [mmcblk0p15] Not mounted
Total space: 1 MB
* alt_sbl1 [mmcblk0p16] Not mounted
Total space: 1 MB
* modemst1 [mmcblk0p17] Not mounted
Total space: 1.5 MB
* modemst2 [mmcblk0p18] Not mounted
Total space: 1.5 MB
* s1sbl [mmcblk0p19] Not mounted
Total space: 256 KB
* alt_s1sbl [mmcblk0p20] Not mounted
Total space: 256 KB
* sdi [mmcblk0p21] Not mounted
Total space: 128 KB
* alt_sdi [mmcblk0p22] Not mounted
Total space: 128 KB
* tz [mmcblk0p23] Not mounted
Total space: 1 MB
* alt_tz [mmcblk0p24] Not mounted
Total space: 1 MB
* rpm [mmcblk0p25] Not mounted
Total space: 512 KB
* alt_rpm [mmcblk0p26] Not mounted
Total space: 512 KB
* aboot [mmcblk0p27] Not mounted
Total space: 1 MB
* alt_aboot [mmcblk0p28] Not mounted
Total space: 1 MB
* boot [mmcblk0p29] Not mounted
Total space: 64 MB
* rdimage [mmcblk0p30] Not mounted
Total space: 32 MB
* persist [mmcblk0p31] (/persist) [ext4]
Used: 5.3 MB, Free: 26.7 MB, Total space: 32 MB
* FOTAKernel [mmcblk0p32] Not mounted
Total space: 64 MB
* misc [mmcblk0p33] Not mounted
Total space: 1 MB
* keystore [mmcblk0p34] Not mounted
Total space: 512 KB
* devinfo [mmcblk0p35] Not mounted
Total space: 1 KB
* config [mmcblk0p36] Not mounted
Total space: 512 KB
* rddata [mmcblk0p37] Not mounted
Total space: 100 MB
* apps_log [mmcblk0p38] (/rca) [ext4]
Used: 5.2 MB, Free: 4.8 MB, Total space: 10 MB
* diag [mmcblk0p39] (/idd) [ext4]
Used: 2.5 MB, Free: 13.5 MB, Total space: 16 MB
* oem [mmcblk0p40] (/oem) [ext4]
Used: 79.2 MB, Free: 220 MB, Total space: 300 MB
* Cache [mmcblk0p41] (/cache) [ext4]
Used: 11.4 MB, Free: 188 MB, Total space: 200 MB
* B2B [mmcblk0p42] Not mounted
Total space: 384 MB
* Data (userdata) [mmcblk0p43] (/data) [ext4]
Used: 13.7 GB, Free: 9 GB, Total space: 22.7 GB
* System [mmcblk0p44] (/system) [ext4]
Used: 4.3 GB, Free: 820 MB, Total space: 5.1 GB
* mmcblk0rpmb [mmcblk0rpmb] Not mounted
Total space: 4 MB
--------------------------
tmpfs mount points
--------------------------
* /dev [tmpfs]
Used: 144 KB, Free: 1.4 GB, Total space: 1.4 GB
* /mnt [tmpfs]
Used: 0 B, Free: 1.4 GB, Total space: 1.4 GB
* /tmp [tmpfs]
Used: 0 B, Free: 1.4 GB, Total space: 1.4 GB
* /storage [tmpfs]
Used: 0 B, Free: 1.4 GB, Total space: 1.4 GB
* /storage/self [tmpfs]
Used: 0 B, Free: 1.4 GB, Total space: 1.4 GB
jelbo said:
I'm pretty sure it's not a file on a filesystem and, if it is, it would be on a partition you can not just search on easily. I remember having to flash a boot splash image on my HTC One m7 using fastboot flash splash1 splash.img. splash1 is the dedicated partition for the splash image, on mmcblk0p13.
I don't know how it is on Xperia's, but I guess it's similar. It'd be nice to be able to change this though, I also dislike the bright white Sony splash screen.
Click to expand...
Click to collapse
Thank you for your help - I really appreciate it !
I tried to >fastboot flash splash custom.img
and >fastboot flash splash1 custom.img
and fastboot reports "Command not allowed"
Code:
target reported max download size of 536870912 bytes
sending 'splash' <750 KB>...
OKAY [0.052s]
writing 'splash'...
FAILED <remote: Command not allowed>
finished. total time: 0x077s
UsbDebugging is enabled.
I used the tool from this xda forum to create the img from a 450x800 png file.
I did not use the tool to flash the img because the tools adb reported my device as "offline" (rebooting did not help)
- so I tried to flash it manually with fastboot...
Do you have any suggestions what went wrong?
MM365 said:
Thank you for your help - I really appreciate it !
I tried to >fastboot flash splash custom.img
and >fastboot flash splash1 custom.img
and fastboot reports "Command not allowed"
Code:
target reported max download size of 536870912 bytes
sending 'splash' <750 KB>...
OKAY [0.052s]
writing 'splash'...
FAILED <remote: Command not allowed>
finished. total time: 0x077s
UsbDebugging is enabled.
I used the tool from this xda forum to create the img from a 450x800 png file.
I did not use the tool to flash the img because the tools adb reported my device as "offline" (rebooting did not help)
- so I tried to flash it manually with fastboot...
Do you have any suggestions what went wrong?
Click to expand...
Click to collapse
First of all, you should not run commands like that if you don't know exactly what you are doing. I'm by no means an expert in this, but when you read my list of partitions you can see there's no partition named splash or splash1. You tried to flash a file into that partition. Also, the file should not be 450x800 but likely the native resolution, which is 2560x1440.
Let me try to ping @[NUT], I'm pretty sure he can tell us right away if it's possible or not. In the meantime, I'll do a little search again myself. So far I haven't found a lot. Looks like it is indeed an .rle file in the kernel.
jelbo said:
First of all, you should not run commands like that if you don't know exactly what you are doing. I'm by no means an expert in this, but when you read my list of partitions you can see there's no partition named splash or splash1. You tried to flash a file into that partition. Also, the file should not be 450x800 but likely the native resolution, which is 2560x1440.
Let me try to ping @[NUT], I'm pretty sure he can tell us right away if it's possible or not. In the meantime, I'll do a little search again myself. So far I haven't found a lot. Looks like it is indeed an .rle file in the kernel.
Click to expand...
Click to collapse
Ok. Thanks.
please let me know if you come to any conclusion.
Are there any tools / is it possible to download partitions (img files) from a Qualcomm device using emergency download mode? Simply boot_a / boot_b as I assume user will be encrypted.
I know there is QPST, but from hours of trying and what I have read, it seems to only support older MSM devices not newer Snapdragon? Am I wrong?
Well, if you have the firehose file for that particular soc and the rawprogram0.xml, you can. Usually the firehose file get leaked after the phone is released.
What model are you trying to work on?
HTC U19e
Snapdragon 710
outrage_uk said:
HTC U19e
Snapdragon 710
Click to expand...
Click to collapse
I found a link to a list of programmers. If you see your phone here, which I didn't (but try ctrl-f the processor, that should be in the filename, it's a good bet you'll be able to find it. As far as I know, my phone's MSM8998 does not have a leaked programmer. It's not as universally applicable as a lot of guides make it seem. If you do have the programmer and correct patches, they allow arbitrary read/write to a phone in edl mode. It's a major security backdoor, but very useful for users like us too. However, neither users like us, nor malicious agents are thought very highly of by American phone manufacturers.
Here's how to access partitions without rawprogram0.xml or patch0.xml
Hi,
If you have the correct prog_emmc_firehose_xxxx.mbn file for your QualComm SoC, you can extract the partition table and all partitions without having access to any rawprogram0.xml or patch0.xml.
The basics are in the excellent guide at https://forum.xda-developers.com/android/general/guide-how-to-dump-write-storage-t3949588
Summary:
- trigger EDL mode, which you have if your phone shows up as USB vendor 05c6, product 9008. Make sure you have "Qualcomm HS-USB QDLoader 9008" as the active driver, giving you a virtual COM port.
- use QFIL to load the prog_emmc_firehose_xxx.mbn file - chose Flat Build
- use QPST's fh_loader.exe to talk to the firehose to read or write the emmc at arbitrary sector offsets
With all that working, you can start by reading the GPT partition table, 34 sectors starting from sector 0:
"C:\Program Files (x86)\Qualcomm\QPST\bin\fh_loader.exe" --port=\\.\COM8 --search_path=C:\my\extract\path --convertprogram2read --sendimage=gpt.bin --start_sector=0 --lun=0 --num_sectors=34 --noprompt --showpercentagecomplete --zlpawarehost=1 --memoryname=emmc
Replace COM8 with whatever COM port that Qualcomm HS-USB driver providers according to Windows Device Manager, and ensure that whatever you choose as C:\my\extract\path exists.
When the tool is done, you'll have a C:\my\extract\path\gpt.bin that you can examine to get the sector offsets and counts for each of your partitions. I used Linux' gdisk for that:
$ gdisk -l gpt.bin
...
Number Start (sector) End (sector) Size Code Name
1 131072 294911 80.0 MiB 0700 modem
2 294912 296959 1024.0 KiB FFFF bluetooth
3 296960 297215 128.0 KiB A01E pmic
4 297216 297471 128.0 KiB A01E pmicbak
5 297472 297473 1024 bytes A040 limits
6 297474 299521 1024.0 KiB A01A DDR
7 299522 299777 128.0 KiB A01D sec
8 393216 393727 256.0 KiB A022 apdp
9 393728 394239 256.0 KiB A023 msadp
10 394240 394241 1024 bytes A024 dpo
11 524288 527359 1.5 MiB A02A fsg
12 655360 655361 1024 bytes A029 fsc
13 655362 655377 8.0 KiB A02C ssd
14 655378 658449 1.5 MiB A027 modemst1
15 658450 661521 1.5 MiB A028 modemst2
16 661522 663569 1024.0 KiB A012 sbl1
17 663570 665617 1024.0 KiB A012 sbl1bak
18 665618 665809 96.0 KiB A019 sdi
19 665810 667857 1024.0 KiB A016 tz
20 667858 669905 1024.0 KiB A016 tzbak
21 669906 670905 500.0 KiB A018 rpm
22 670906 671905 500.0 KiB A018 rpmbak
23 671906 672929 512.0 KiB A017 hyp
24 672930 673953 512.0 KiB A017 hypbak
25 673954 740801 32.6 MiB FFFF splash
26 786432 796671 5.0 MiB A015 aboot
27 796672 806911 5.0 MiB A015 abootbak
28 806912 937983 64.0 MiB A036 boot
29 937984 1069055 64.0 MiB A025 recovery
30 1069056 7360511 3.0 GiB A038 system
31 7471104 10616831 1.5 GiB A039 cache
32 10616832 10682367 32.0 MiB A026 persist
33 10682368 10684415 1024.0 KiB A01F misc
34 10684416 10685439 512.0 KiB A02D keystore
35 10747904 10747905 1024 bytes A021 devinfo
36 10878976 10879999 512.0 KiB FFFF config
37 10880000 61071326 23.9 GiB A03A userdata
From there, you have enough information to back up each of your partitions, write a custom recovery, etcetera.
In my case, a Gigaset ME, both the system and userdata partitions were normal, unencrypted ext4 partitions with ample opportunities for forensics and data recovery.
Needless to say, there was no need to unlock bootloaders, install custom recovery, root the phone, or whatever.