Searching for QX1000 Firehose

[dattel 0]

Hello guys,

I have a bricked QX1000 (Pro1) which I'm trying to reflash but I can't find any files regarding the flashing with QFIL. Would be a shame if it can't be done.

QFIL and Windows is not a must. Every method or opportunity would be helpful. The biggets problem seems to be to get the required files.

There is also this "Factory Restore Tool" which someone reuploaded last year but the image is missing. Therefore I'm not able to get further...

 

Thanks in advance,

Dattel

[EskeRahn 5,598]

Have you tried following the guide linked by my initial post pinned in here? 

[dattel 0]

12 hours ago, EskeRahn said:

Have you tried following the guide linked by my initial post pinned in here? 

Yes, I already tried them but most of them are for flashing with fastboot and that's no oppurtunity for this device.

The required files (firehose_progammer.edl) are missing. Maybe I could use a Firehose file from a different device which uses the same CPU (SD835)?

Edited 23 hours ago by dattel

[EskeRahn 5,598]

I use fastboot for flashing pro1/QX1000 just fine. Why does it not work for yours?

I have no idea on the edl file. Will check if I got one downloaded somewhere, but i doubt it. 

[dattel 0]

6 hours ago, EskeRahn said:

I use fastboot for flashing pro1/QX1000 just fine. Why does it not work for yours?

I have no idea on the edl file. Will check if I got one downloaded somewhere, but i doubt it. 

Well, the problem is, that the bootloader is locked. Therefore the files sent to the device can't be written.

e.g.

QX1000_user_20200825231445_dd49dd0dd1>fastboot flash mdtpsecapp_a mdtpsecapp.mbn
Warning: skip copying mdtpsecapp_a image avb footer (mdtpsecapp_a partition size: 0, mdtpsecapp_a image size: 1078864).
Sending 'mdtpsecapp_a' (1053 KB)                   OKAY [  0.030s]
Writing 'mdtpsecapp_a'                             FAILED (remote: 'Flashing is not allowed in Lock State')
fastboot: error: Command failed

Manually unlocking it, isn't also allowed:

QX1000_user_20200825231445_dd49dd0dd1>fastboot flashing unlock
FAILED (remote: 'Flashing Unlock is not allowed
')
fastboot: error: Command failed

 

The device got flashed with a wrong image file. Now it's required to dive a little bit deeper into it.

 

There was this thread by the user "tdm":
http://community.fxtec.com/topic/2559-factory-restore-tool/

 

Seems to be exactly what I'm searching for but nearly everything in this thread and his linked website are down.

 

Possibly this edl tool could work, too:
https://github.com/bkerler/edl

Mentioned here in the PosrmarketOS wiki it should have the firehose binary for the device but I can't find a specific one in the repo:

https://wiki.postmarketos.org/wiki/F(x)tec_Pro1X_(fxtec-qx1050)/Hacking

Only the generic qualcomm/factory/sdm835...

 

I can get the device into 0x900E but not 0x9008. Therefore it should be semi-bricked and must be opened by me...

Edited 30 minutes ago by dattel